Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the scheduler's schedsetaffinity function that may result in a warning when a task affinity competes with a...

PT-2026-2882

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to affinity reprogramming on ASP chips. This issue affects systems utilizing an older variant of the GSP chip, specifically the ASP chip, found i...

PT-2026-2878

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's block layer related to request queue freezing within sysfs store callbacks. Freezing the request queue during these callbacks can lead to a deadlock...

kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE

A flaw was found in the Linux kernel. A race condition exists in the irqchip/gic-v4 component, where a local user can force a change of affinity for a Virtual Processing Element VPE after it has been unmapped. This occurs because the corresponding doorbell interrupt remains visible, creating a...

kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE

A flaw was found in the Linux kernel. A race condition exists in the irqchip/gic-v4 component, where a local user can force a change of affinity for a Virtual Processing Element VPE after it has been unmapped. This occurs because the corresponding doorbell interrupt remains visible, creating a...

kernel: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

CVE-2024-50192

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE Kunkun Jiang reported that there is a small window of opportunity for userspace to force a change of affinity for a VPE while the VPE has already been unmapped, but the...

kernel: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

kernel: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

kernel: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

kernel: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

CVE-2024-50192

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE Kunkun Jiang reported that there is a small window of opportunity for userspace to force a change of affinity for a VPE while the VPE has already been unmapped, but the...

DEBIAN-CVE-2024-50192

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE Kunkun Jiang reported that there is a small window of opportunity for userspace to force a change of affinity for a VPE while the VPE has already been unmapped, but the...

CVE-2024-50192

CVE-2024-50192: Linux kernel irqchip/gic-v4 vulnerability fixed by adding a vmapp_count check to prevent a VMOVP on a dying VPE. A small window could allow userspace to force a VPE affinity change while unmapped but the doorbell interrupt remains visible in /proc/irq/. The fix unifies vmapp_count...

PT-2024-34026

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition in the Linux kernel's irqchip/gic-v4 component allows userspace to force a change of affinity for a VPE while it has already been unmapped, but the corresponding...

Malicious code in service-affinity-scheduling (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 68be996c62ae54a32b5613110a7d66dcd40d443ca8fc6e8e869731be7ff40833 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10838 Malicious code in service-affinity-scheduling (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 68be996c62ae54a32b5613110a7d66dcd40d443ca8fc6e8e869731be7ff40833 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Fur Affinity Website Hacked in DNS Hijacking Attack

Fur Affinitys domain and Twitter were compromised in a major DNS hijacking on August 20, 2024. Hackers redirected…...

SUSE CVE-2022-48892

In the Linux kernel, the following vulnerability has been resolved: sched/core: Fix use-after-free bug in dupusercpusptr Since commit 07ec77a1d4e8 "sched: Allow task CPU affinity to be restricted on asymmetric systems", the setting and clearing of usercpusptr are done under pilock for arm64...

DEBIAN-CVE-2022-48892

In the Linux kernel, the following vulnerability has been resolved: sched/core: Fix use-after-free bug in dupusercpusptr Since commit 07ec77a1d4e8 "sched: Allow task CPU affinity to be restricted on asymmetric systems", the setting and clearing of usercpusptr are done under pilock for arm64...