CVE-2024-41031 mm/filemap: skip to create PMD-sized page cache if needed

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: skip to create PMD-sized page cache if needed On ARM64, HPAGEPMDORDER is 13 when the base page size is 64KB. The PMD-sized page cache can't be supported by xarray as the following error messages indicate. ------------...

CVE-2024-41027 Fix userfaultfd_api to return EINVAL as expected

In the Linux kernel, the following vulnerability has been resolved: Fix userfaultfdapi to return EINVAL as expected Currently if we request a feature that is not set in the Kernel config we fail silently and return all the available features. However, the man page indicates we should return an...

Stop X’s Grok AI From Training on Your Tweets

Plus: More Pegasus spyware controversy, a major BIOS controversy, and more of the week’s top security news...

Dell Edge Gateway Buffer Overflow Vulnerability

Dell Edge Gateway is a series of intelligent gateway devices from Dell, Inc. It is designed to aggregate, protect, analyze and relay data from a variety of sensors and devices at the edge of the network. A buffer overflow vulnerability exists in Dell Edge Gateway BIOS versions 3200 and 5200, whic...

The vulnerability of the DXE microprogramming software driver in Dell Edge Gateway BIOS allows a hacker to execute arbitrary code and gain elevated privileges.

The vulnerability of the DXE microprogramming software driver in Dell Edge Gateway BIOS relates to incorrect initialization of resources. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain elevated privileges...

The vulnerability of the SMM control mode of Dell Edge Gateway BIOS microprogramming software allows a hacker to execute arbitrary code and gain increased privileges.

The vulnerability of the SMM mode of the BIOS software for Dell Edge Gateways is related to incorrect initialization of resources. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

CVE-2023-32471

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability to read contents of stack memory and use this information for further exploits...

CVE-2023-32466

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privile...

CVE-2023-32466

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privile...

CVE-2023-32471

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability to read contents of stack memory and use this information for further exploits...

CVE-2023-32471

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds read vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability to read contents of stack memory and use this information for further exploits...

CVE-2023-32471

Dell Edge Gateway BIOS versions 3200 and 5200 contain an out-of-bounds read vulnerability in the BIOS DXE driver. A local authenticated attacker with high privileges can read stack memory, enabling potential further exploits. Remediation per PT-2024-5327: update to a BIOS version that fixes the o...

CVE-2023-32466

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privile...

CVE-2023-32466

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privile...

CVE-2023-32466

Dell Edge Gateway BIOS (3200 and 5200) contains an out-of-bounds write vulnerability that requires a locally authenticated, high-privilege user to trigger. The issue can lead to exposure of UEFI code and may allow arbitrary code execution or privilege escalation, as described across multiple sour...

Dell Edge Gateway 缓冲区错误漏洞

Dell Edge Gateway is a series of intelligent gateway devices from Dell, Inc. It is designed to aggregate, protect, analyze and relay data from a variety of sensors and devices at the edge of the network. A buffer overflow vulnerability exists in Dell Edge Gateway BIOS versions 3200 and 5200, whic...

Dell Edge Gateway 缓冲区错误漏洞

Dell Edge Gateway is a series of intelligent gateway devices from Dell, Inc. Designed to aggregate, protect, analyze, and relay data from various sensors and devices at the edge of the network. A buffer error vulnerability exists in the Dell Edge Gateway BIOS versions 3200 and 5200, which stems...

Dell Edge Gateway Buffer Overflow Vulnerability (CNVD-2024-37423)

Dell Edge Gateway is a series of intelligent gateway devices from Dell, Inc. It is designed to aggregate, protect, analyze and relay data from a variety of sensors and devices at the edge of the network. A buffer overflow vulnerability exists in Dell Edge Gateway BIOS versions 3200, 5200. The...

CVE-2022-48802 fs/proc: task_mmu.c: don't read mapcount for migration entry

In the Linux kernel, the following vulnerability has been resolved: fs/proc: taskmmu.c: don't read mapcount for migration entry The syzbot reported the below BUG: kernel BUG at include/linux/page-flags.h:785! invalid opcode: 0000 1 PREEMPT SMP KASAN CPU: 1 PID: 4392 Comm: syz-executor560 Not...

CVE-2022-48781 crypto: af_alg - get rid of alg_memory_allocated

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - get rid of algmemoryallocated algmemoryallocated does not seem to be really used. algproto does have a .memoryallocated field, but no corresponding .sysctlmem. This means skhasaccount returns true, but all...