5674 matches found
CVE-2024-35989 dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms During the removal of the idxd driver, registered offline callback is invoked as part of the clean up process. However, on systems with only one CPU online, no valid...
CVE-2024-35973 geneve: fix header validation in geneve[6]_xmit_skb
In the Linux kernel, the following vulnerability has been resolved: geneve: fix header validation in geneve6xmitskb syzbot is able to trigger an uninit-value in genevexmit 1 Problem : While most ip tunnel helpers like iptunnelgetdsfield uses skbprotocolskb, true, pskbinetmaypull is only using...
CVE-2024-35892
In the Linux kernel, the following vulnerability has been resolved: net/sched: fix lockdep splat in qdisctreereducebacklog qdisctreereducebacklog is called with the qdisc lock held, not RTNL. We must use qdisclookuprcu instead of qdisclookup syzbot reported: WARNING: suspicious RCU usage...
CVE-2024-35892
CVE-2024-35892 stems from a Linux kernel net/sched issue where qdisc_tree_reduce_backlog() was called with the qdisc lock held while RTNL was not held, triggering a lockdep splat due to unsafe RCU usage. The fix switches from qdisc_lookup() to qdisc_lookup_rcu() to safely dereference qdisc data u...
CVE-2024-22429
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution...
CVE-2024-22429
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution...
CVE-2024-22429
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution...
CVE-2024-22429
CVE-2024-22429 affects Dell BIOS with an Improper Input Validation vulnerability. A locally authenticated user with admin privileges could exploit the flaw to achieve arbitrary code execution on the host, per the provided descriptions. The root cause is described as input validation errors within...
CVE-2024-22429
Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution...
CVE-2024-35853
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak during rehash The rehash delayed work migrates filters from one region to another. This is done by iterating over all chunks all the filters with the same priority in the region and in each...
Dell BIOS 输入验证错误漏洞
Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. The Dell BIOS has an input validation error vulnerability that originates from the inclusion of incorrect input validation, which can be exploited by a locally authenticated attacker to cause...
The vulnerability of UEFI (BIOS) microprogramming software in Huawei personal computers allows a hacker to execute arbitrary code.
The vulnerability of UEFI BIOS in Huawei personal computers is related to the execution of operations outside the buffer in SMRAM. Exploiting this vulnerability allows an attacker to execute arbitrary code in System Management Mode SMM...
CVE-2023-28383
Improper conditions check in some IntelR BIOS PPAM firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-27504
Improper conditions check in some IntelR BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-27504
Improper conditions check in some IntelR BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-27504
The CVE-2023-27504 issue concerns Intel BIOS Guard firmware with an improper conditions check that could let a privileged local user escalate privileges. Across connected sources, the vulnerability is tied to Intel BIOS Guard and PPAM firmware, with a CVSS v3.1 base score of 7.2 (High) and local ...
CVE-2023-28383
CVE-2023-28383 is described in Intel advisory INTEL-SA-00814 as an improper conditions check in Intel BIOS PPAM firmware that may allow a privileged user to escalate privileges via local access (local attack, high complexity). The CVSS 3.1 base shows AV:L, AC:H, PR:H, UI:N, with impact partially ...
CVE-2023-28383
Improper conditions check in some IntelR BIOS PPAM firmware may allow a privileged user to potentially enable escalation of privilege via local access...