scsi: core: Fix unremoved procfs host directory regression

...

cgroup/cpuset: Prevent UAF in proc_cpuset_show()

...

PT-2024-32756

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A vulnerability in the Linux kernel has been resolved. The issue is related to the can: bcm module, where the bo-bcm proc read is not cleared after remove proc entry. This can trigger unnecessa...

a11ywatch_cli (>=0.0.5, <=0.6.51), a4 (>=0.0.2, <=0.0.4) +7324 more potentially affected by unknown CVE via proc-macro-error (>=0.2.6, <=1.0.4)

proc-macro-error CARGO version =0.2.6, =0.0.5, =0.0.2, =0.3.0, =0.1.0, =1.0.0, =0.1.0, =0.6.0-beta.1, =0.6.0-beta.1, =0.6.0-beta.1, =0.4.0, =0.6.0 - ac-library-rs-expander 0.1.0 - acall-cli 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0370...

proc-macro-error is unmaintained

proc-macro-error's maintainer seems to be unreachable, with no commits for 2 years, no releases pushed for 4 years, and no activity on the GitLab repo or response to email. proc-macro-error also depends on syn 1.x, which may be bringing duplicate dependencies into dependant build trees. Possible...

PT-2024-40920 · Syn +1 · Syn +1

Name of the Vulnerable Software and Affected Versions: proc-macro-error affected versions not specified Description: The maintainer of proc-macro-error appears to be unreachable, with no commits for 2 years, no releases for 4 years, and no activity on the GitLab repository or response to emails...

PT-2024-32779

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.11.0-rc3 Description A vulnerability in the Linux kernel has been identified where the netfs module fails to properly delete its subtree when it exits, leading to a warning about removing a non-empty directory...

OESA-2024-2042 xorg-x11-server-xwayland security update

Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...

OESA-2024-2041 xorg-x11-server-xwayland security update

Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...

GO-2023-1683 AppArmor bypass with symlinked /proc in github.com/opencontainers/runc

AppArmor bypass with symlinked /proc in github.com/opencontainers/runc...

Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap

...

SUSE CVE-2024-42312

In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize iuid/igid Always initialize iuid/igid inside the sysfs core so setownership can safely skip setting them. Commit 5ec27ec735ba "fs/proc/procsysctl.c: fix the default values of iuid/igid on /proc/sys...

AZL-48060 CVE-2024-43853 affecting package kernel for versions less than 6.6.47.1-1

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proccpusetshow An UAF can happen when /proc/cpuset is read as reported in 1. This can be reproduced by the following methods: 1.add an mdelay1000 before acquiring the cgrouplock In the cgrouppathns...

DEBIAN-CVE-2024-43853

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proccpusetshow An UAF can happen when /proc/cpuset is read as reported in 1. This can be reproduced by the following methods: 1.add an mdelay1000 before acquiring the cgrouplock In the cgrouppathns...

AZL-47974 CVE-2024-43860 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxrproc: Skip over memory region when node value is NULL In imxrprocaddrinit "nph = ofcountphandlewithargs" just counts number of phandles. But phandles may be empty. So ofparsephandle in the parsing loop 0 a nph may...

AZL-47947 CVE-2024-43853 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proccpusetshow An UAF can happen when /proc/cpuset is read as reported in 1. This can be reproduced by the following methods: 1.add an mdelay1000 before acquiring the cgrouplock In the cgrouppathns...

UBUNTU-CVE-2024-43853

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proccpusetshow An UAF can happen when /proc/cpuset is read as reported in 1. This can be reproduced by the following methods: 1.add an mdelay1000 before acquiring the cgrouplock In the cgrouppathns...

UBUNTU-CVE-2024-42312

In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize iuid/igid Always initialize iuid/igid inside the sysfs core so setownership can safely skip setting them. Commit 5ec27ec735ba "fs/proc/procsysctl.c: fix the default values of iuid/igid on /proc/sys...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a possible post-release reuse of the cgroup/cpuset module when reading /proc/cpuset, and requires the use of...

OESA-2024-1994 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: USB: core: Make doproccontrol and doprocbulk killable The USBDEVFSCONTROL and USBDEVFSBULK ioctls invoke usbstartwaiturb, which contains an uninterruptible wait...