Lucene search
+L

2685 matches found

OSV
OSV
added 2024/10/21 1:15 p.m.21 views

AZL-50833 CVE-2024-49860 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

7.1CVSS6.8AI score0.00254EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/21 1:15 p.m.13 views

AZL-51017 CVE-2024-49860 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

7.1CVSS6.8AI score0.00254EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/21 1:15 p.m.6 views

DEBIAN-CVE-2024-49860

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

7.1CVSS6.3AI score0.00254EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/21 1:15 p.m.19 views

AZL-50773 CVE-2024-49858 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption The TPM event log table is a Linux specific construct, where the data produced by the GetEventLog boot service is cached in memory, and passed on to the OS...

5.5CVSS6.7AI score0.00214EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/21 1:15 p.m.20 views

AZL-50957 CVE-2024-49858 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption The TPM event log table is a Linux specific construct, where the data produced by the GetEventLog boot service is cached in memory, and passed on to the OS...

5.5CVSS6.7AI score0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/21 12:27 p.m.19 views

CVE-2024-49860 ACPI: sysfs: validate return type of _STR method

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

0.00254EPSS
SaveExploits0References9
OSV
OSV
added 2024/10/21 12:27 p.m.17 views

CVE-2024-49860 ACPI: sysfs: validate return type of _STR method

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

7.1CVSS6.5AI score0.00254EPSS
SaveExploits0References14
Vulnrichment
Vulnrichment
added 2024/10/21 12:27 p.m.14 views

CVE-2024-49860 ACPI: sysfs: validate return type of _STR method

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

7.2AI score0.00254EPSS
SaveExploits0References9
CVE
CVE
added 2024/10/21 12:27 p.m.197 views

CVE-2024-49860

CVE-2024-49860 relates to the Linux kernel ACPI subsystem, specifically the sysfs path and the _STR method. The vulnerability arises when the _STR method returns a value that is not a buffer object; only buffers are valid, and returning other data types can cause description_show() to access inva...

7.1CVSS8AI score0.00254EPSS
SaveExploits0References11Affected Software1
Debian CVE
Debian CVE
added 2024/10/21 12:27 p.m.16 views

CVE-2024-49860

In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of STR. If something else is returned descriptionshow will access invalid memory...

7.1CVSS6.3AI score0.00254EPSS
SaveExploits0
CVE
CVE
added 2024/10/21 12:27 p.m.154 views

CVE-2024-49858

CVE-2024-49858: Linux kernel TPM event log handling (efistub/tpm) used EFI_LOADER_DATA, leaving the region unreserved in the EFI 64-bit memory map (via E820) and passed to the kernel via kexec, risking memory corruption. The fix substitutes EFI_ACPI_RECLAIM_MEMORY, which EFI/ACPI treats as reserv...

5.5CVSS7.1AI score0.00214EPSS
SaveExploits0References9Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/21 12:27 p.m.12 views

CVE-2024-49858 efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption

In the Linux kernel, the following vulnerability has been resolved: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption The TPM event log table is a Linux specific construct, where the data produced by the GetEventLog boot service is cached in memory, and passed on to the OS...

7.3AI score0.00214EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2024/10/21 12:27 p.m.25 views

CVE-2024-49858 efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption

In the Linux kernel, the following vulnerability has been resolved: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption The TPM event log table is a Linux specific construct, where the data produced by the GetEventLog boot service is cached in memory, and passed on to the OS...

0.00214EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2024/10/21 12:27 p.m.11 views

CVE-2024-49858

In the Linux kernel, the following vulnerability has been resolved: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption The TPM event log table is a Linux specific construct, where the data produced by the GetEventLog boot service is cached in memory, and passed on to the OS...

5.5CVSS5.8AI score0.00214EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/10/21 12:0 a.m.5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible crash of the ACPI battery module when the battery hook is logged off...

5.5CVSS6.5AI score0.00339EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2024/10/21 12:0 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper checking of the return value of the ACPIALLOCATEZEROED function in the ACPICA component...

5.5CVSS6.7AI score0.0025EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/10/21 12:0 a.m.4 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a crash that could be triggered by ACPI's PAD driver in the exitroundrobin function...

5.5CVSS6.7AI score0.00248EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/10/21 12:0 a.m.27 views

PT-2024-11877 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an unbalanced node reference count in the Linux kernel's net component, specifically in the mdiobus subsystem. This can lead to a memory leak. The problem occur...

9.1CVSS6.5AI score0.03849EPSS
SaveExploits9References1667
Oracle linux
Oracle linux
added 2024/10/20 12:0 a.m.335 views

Unbreakable Enterprise kernel security update

5.15.0-301.163.5.2 - mm: avoid leaving partial pfn mappings around in error case Linus Torvalds Orabug: 37174198 CVE-2024-47674 - Revert 'Documentation/admin-guide/acpi: Move information out of shell script comments' Dave Kleikamp Orabug: 37144820 - Revert 'irqchip/gic-v3: Move partitioncreatedes...

7.8CVSS7.9AI score0.00259EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2024/10/15 7:0 a.m.8 views

i2c: tegra: Do not mark ACPI devices as irq safe

...

5.5CVSS6.7AI score0.00173EPSS
SaveExploits0
Rows per page
Query Builder