CVE-2021-47576 scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()

In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity check the block descriptor len to avoid UAF. BUG: KASAN: use-after-free in respmodeselect+0xa4c/0xb40 drivers/scsi/scsidebug.c:2509...

CVE-2024-38578

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: Fix buffer size for tag 66 packet The 'TAG 66 Packet Format' description is missing the cipher code and checksum fields that are packed into the message packet. As a result, the buffer allocated for the packet is 3 byte...

CVE-2024-38540

CVE-2024-38540 concerns the Linux kernel bnxt_re driver. The vulnerability is due to undefined behavior triggered when bnxt_qplib_alloc_init_hwq is called with hwq_attr->aux_depth != 0 and hwq_attr->aux_stride == 0, which causes roundup_pow_of_two(hwq_attr->aux_stride) to run with a 0 va...

CVE-2024-36979 net: bridge: mst: fix vlan use-after-free

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix vlan use-after-free syzbot reported a suspicious rcu usage1 in bridge's mst code. While fixing it I noticed that nothing prevents a vlan to be freed while walking the list from the same path br forward delay...

Dell BIOS Buffer Overflow Vulnerability (CNVD-2024-29342)

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. Dell BIOS suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. A local, authenticated attacker with administrator...

Dell BIOS Input Validation Error Vulnerability (CNVD-2024-29341)

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. The Dell BIOS suffers from an input validation error vulnerability that stems from improper input validation in an externally-developed component, which could be exploited by an attacker to cause...

Dell Client Platform Authorization Issues Vulnerability

Dell Client platforms are a client platform from Dell USA. The Dell Client Platform suffers from an authorization issue vulnerability that stems from the presence of incorrect authorization, which can be exploited by an attacker to bypass BIOS authorization and modify settings in the BIOS...

Dell BIOS Input Validation Error Vulnerability (CNVD-2024-29340)

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. The Dell BIOS has an input validation error vulnerability that stems from an improper input validation vulnerability in an externally developed component, which could be exploited by an attacker ...

Insyde BIOS June 2024 EDK II Reference Vulnerabilities

Potential EDK II reference code vulnerabilities have been identified in certain HP PC products using Insyde BIOS Insyde H20 UEFI Firmware, which might allow arbitrary code execution. Inysde has released updates to mitigate the potential vulnerabilities. Insyde has released updates to mitigate the...

The vulnerability of the BIOS microprogramming software in Dell PowerEdge servers allows a hacker to enhance their privileges or cause service failures.

The vulnerability of the BIOS microprogramming software in Dell PowerEdge servers is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges or cause service failures...

CVE-2024-32859

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2024-32860

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2024-32860

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2024-32858

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2024-32858

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2024-32860

CVE-2024-32860 affects Dell Client Platform BIOS. Description confirms an Improper Input Validation vulnerability in an externally developed component that could allow a highly-privileged local attacker to achieve code execution. Reported impact and conditions are consistent across sources (Dell ...

CVE-2024-32860

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2024-32860

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2024-32858

CVE-2024-32858 : Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A local, high-privilege attacker could potentially exploit this to achieve code execution. The affected product is Dell Client Platform BIOS; the underlying issue i...

CVE-2024-32858

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...