CVE-2024-45492

An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for mgroupSize on 32-bit platforms where UINTMAX equals SIZEMAX...

libexpat 输入验证错误漏洞

libexpat is a streaming XML parser written in C by the libexpat team. An input validation error vulnerability exists in libexpat versions prior to 2.6.3, which stems from dtdCopy in xmlparse.c on 32-bit platforms that can lead to an nDefaultAtts integer overflow...

libexpat 输入验证错误漏洞

libexpat is a streaming XML parser written in C by the libexpat team. An input validation error vulnerability exists in libexpat versions prior to 2.6.3, which stems from nextScaffoldPart in xmlparse.c on 32-bit platforms and may result in an mgroupSize integer overflow...

PT-2024-6339

Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.6.3 Description An issue was discovered in libexpat, where the nextScaffoldPart function in xmlparse.c can have an integer overflow for m groupSize on 32-bit platforms. This can allow a remote attacker to cause a...

Linux kernel resource misallocation vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a resource misallocation vulnerability that stems from an issue with forced large page alignment on 32-bit systems.Due to the constrained virtual...

SUSE CVE-2024-42258

In the Linux kernel, the following vulnerability has been resolved: mm: hugememory: use !CONFIG64BIT to relax huge page alignment on 32 bit machines Yves-Alexis Perez reported commit 4ef9ad19e176 "mm: hugememory: don't force huge page alignment on 32 bit" didn't work for x8632 1. It is because...

Microsoft Windows Multiple Vulnerabilities (KB5041578)

This host is missing an important security update according to Microsoft KB5041578 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite of Microsoft Corporation USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to remotely execute code. The following products and versions are affected:Microsoft 365 Apps for...

CVE-2024-42258

In the Linux kernel, the following vulnerability has been resolved: mm: hugememory: use !CONFIG64BIT to relax huge page alignment on 32 bit machines Yves-Alexis Perez reported commit 4ef9ad19e176 "mm: hugememory: don't force huge page alignment on 32 bit" didn't work for x8632 1. It is because...

CVE-2024-42258

In the Linux kernel, the following vulnerability has been resolved: mm: hugememory: use !CONFIG64BIT to relax huge page alignment on 32 bit machines Yves-Alexis Perez reported commit 4ef9ad19e176 "mm: hugememory: don't force huge page alignment on 32 bit" didn't work for x8632 1. It is because...

DEBIAN-CVE-2024-42258

In the Linux kernel, the following vulnerability has been resolved: mm: hugememory: use !CONFIG64BIT to relax huge page alignment on 32 bit machines Yves-Alexis Perez reported commit 4ef9ad19e176 "mm: hugememory: don't force huge page alignment on 32 bit" didn't work for x8632 1. It is because...

CVE-2024-42258

In the Linux kernel, the following vulnerability has been resolved: mm: hugememory: use !CONFIG64BIT to relax huge page alignment on 32 bit machines Yves-Alexis Perez reported commit 4ef9ad19e176 "mm: hugememory: don't force huge page alignment on 32 bit" didn't work for x8632 1. It is because...

UBUNTU-CVE-2024-42258

In the Linux kernel, the following vulnerability has been resolved: mm: hugememory: use !CONFIG64BIT to relax huge page alignment on 32 bit machines Yves-Alexis Perez reported commit 4ef9ad19e176 "mm: hugememory: don't force huge page alignment on 32 bit" didn't work for x8632 1. It is because...

CVE-2024-42258 mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines

In the Linux kernel, the following vulnerability has been resolved: mm: hugememory: use !CONFIG64BIT to relax huge page alignment on 32 bit machines Yves-Alexis Perez reported commit 4ef9ad19e176 "mm: hugememory: don't force huge page alignment on 32 bit" didn't work for x8632 1. It is because...

CVE-2024-42258 mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines

In the Linux kernel, the following vulnerability has been resolved: mm: hugememory: use !CONFIG64BIT to relax huge page alignment on 32 bit machines Yves-Alexis Perez reported commit 4ef9ad19e176 "mm: hugememory: don't force huge page alignment on 32 bit" didn't work for x8632 1. It is because...

CVE-2024-42258

The CVE-2024-42258 entry relates to a Linux kernel issue where 32-bit x86 builds using the CONFIG_X86_32 path mishandled huge page alignment. The fix was to stop forcing a specific alignment on 32-bit systems by relying on !CONFIG_64BIT, which should cover all 32-bit machines. The connected docum...

CVE-2024-42258

In the Linux kernel, the following vulnerability has been resolved: mm: hugememory: use !CONFIG64BIT to relax huge page alignment on 32 bit machines Yves-Alexis Perez reported commit 4ef9ad19e176 "mm: hugememory: don't force huge page alignment on 32 bit" didn't work for x8632 1. It is because...

CVE-2024-42258 mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines

In the Linux kernel, the following vulnerability has been resolved: mm: hugememory: use !CONFIG64BIT to relax huge page alignment on 32 bit machines Yves-Alexis Perez reported commit 4ef9ad19e176 "mm: hugememory: don't force huge page alignment on 32 bit" didn't work for x8632 1. It is because...

[SECURITY] Fedora 40 Update: mingw-qt6-qtbase-6.7.2-3.fc40

This package contains the Qt software toolkit for developing cross-platform applications. This is the 32-bit Windows version of Qt, for use in conjunction with the Fedora Windows cross-compiler...

SUSE CVE-2024-41020

In the Linux kernel, the following vulnerability has been resolved: filelock: Fix fcntl/close race recovery compat path When I wrote commit 3cad1bc01041 "filelock: Remove locks reliably when fcntl/close race is detected", I missed that there are two copies of the code I was patching: The normal...