CVE-2023-52581

MEDIUM Year: 2023
CVSS v3 Score
6.3
Medium
Weakness Type
CWE-401
View all →

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memleak when more than 255 elements expired When more than 255 elements expired we're supposed to switch to a new gc container structure. This never happens: u8 type will wrap before reaching the boundary and nft_trans_gc_space() always returns true. This means we recycle the initial gc container structure and lose track of the elements that came before. While at it, don't deref 'gc' after we've passed it to call_rcu.

Related Vulnerabilities

CVE-2021-30002

MEDIUM
CVSS:6.2(Medium)

An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. video_usercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, aka CID-fb18802a338...

CWE-4012021

CVE-2024-3860

MEDIUM
CVSS:6.2(Medium)

An out-of-memory condition during object initialization could result in an empty shape list. If the JIT subsequently traced the object it would crash. This vulnerability affects Firefox < 125.

CWE-4012024

CVE-2024-39490

MEDIUM
CVSS:6.2(Medium)

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix missing sk_buff release in seg6_input_core The seg6_input() function is responsible for adding the SRH into a packet, ...

CWE-4012024

CVE-2024-35853

MEDIUM
CVSS:6.4(Medium)

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash The rehash delayed work migrates filters from one region to another. This is...

CWE-4012024

CVE-2010-2249

MEDIUM
CVSS:6.5(Medium)

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing ma...

CWE-4012010

CVE-2016-9913

MEDIUM
CVSS:6.5(Medium)

Memory leak in the v9fs_device_unrealize_common function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and p...

CWE-4012016