CVE-2024-26862 packet: annotate data-races around ignore_outgoing

In the Linux kernel, the following vulnerability has been resolved: packet: annotate data-races around ignoreoutgoing ignoreoutgoing is read locklessly from devqueuexmitnit and packetgetsockopt Add appropriate READONCE/WRITEONCE annotations. syzbot reported: BUG: KCSAN: data-race in devqueuexmitn...

CVE-2024-26862 packet: annotate data-races around ignore_outgoing

In the Linux kernel, the following vulnerability has been resolved: packet: annotate data-races around ignoreoutgoing ignoreoutgoing is read locklessly from devqueuexmitnit and packetgetsockopt Add appropriate READONCE/WRITEONCE annotations. syzbot reported: BUG: KCSAN: data-race in devqueuexmitn...

PT-2024-3508 · Huawei · Huawei Matebook D16

Name of the Vulnerable Software and Affected Versions: Huawei Matebook D16 version CREM-WXX9, BIOS v2.26 Description: The issue is related to a memory corruption in the SMI Handler of the HddPassword SMM Module in the UEFI BIOS firmware. This can be exploited by a malicious OS attacker to corrupt...

The vulnerability of the HP TamperLock function in microprogramming software for UEFI-based desktop computers and personal computers manufactured by Hewlett-Packard Development Company L.P. allows a intruder to circumvent security restrictions.

The vulnerability of the HP TamperLock function in microprogramming-based EFI BIOS for desktop computers and personal computers manufactured by Hewlett-Packard Development Company L.P. is related to insufficient validation of input data. Exploiting this vulnerability can allow a hacker to...

The vulnerability of the BIOS software on Dell PowerEdge servers and Dell Precision Rack workstations relates to improper management of privileges, allowing an attacker to elevate their own privileges.

The vulnerability of the BIOS software on Dell PowerEdge servers and Dell Precision Rack workstations is related to incorrect privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...

Dell BIOS Buffer Overflow Vulnerability (CNVD-2024-20277)

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. Dell BIOS suffers from a buffer overflow vulnerability that stems from the inclusion of an out-of-bounds write vulnerability that can be exploited by a local attacker with administrator privilege...

CVE-2021-47196

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Set send and receive CQ before forwarding to the driver Preset both receive and send CQ pointers prior to call to the drivers and overwrite it later again till the mlx4 is going to be changed do not overwrite ibqp...

CVE-2021-47217

In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Fix NULL deref in sethvtscchangecb if Hyper-V setup fails Check for a valid hvvpindex array prior to derefencing hvvpindex when setting Hyper-V's TSC change callback. If Hyper-V setup failed in hypervinit, the kernel...

CVE-2021-47219

CVE-2021-47219 involves the Linux kernel SCSI subsystem, specifically the scsi_debug path, where an out-of-bounds read occurs in resp_report_tgtpgs() due to an incorrect handling of lengths. The issue can manifest as a negative alen when userspace supplies a large length, enabling a slab/read bou...

CVE-2024-26815 net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: proper TCATAPRIOTCENTRYINDEX check taprioparsetcentry is not correctly checking TCATAPRIOTCENTRYINDEX attribute: int tc; // Signed value tc = nlagetu32tbTCATAPRIOTCENTRYINDEX; if tc = TCQOPTMAXQUEUE...

CVE-2024-22448

Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-22448

Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-22448

CVE-2024-22448 concerns Dell BIOS: an Out-of-Bounds Write vulnerability in Dell BIOS, exploitable by a local, authenticated attacker with admin privileges, causing denial of service. Affected software/tooling is the Dell BIOS on Dell systems; the root cause is an out-of-bounds write in the BIOS c...

CVE-2024-22448

Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-22448

Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

PT-2024-19430 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this, leading to denial of service...

PT-2024-4163 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to improper input validation in the Dell BIOS, which can be exploited by a local authenticated malicious user with admin privileges. This exploitation can lead to the...

The vulnerability of the microprogramming-based BIOS software on Server Board S1200RP, S1400FP, S1400SP, S1600JP, S2400BB, S2400EP, S2400SC, S2600CO, S2600CP, S2600GL, S2600GZ, S2600IP, W2600CR, S2600JF, S2600WP, S4600LH, S4600LT, S2600CW, S2600KP, S2600TP, and S2600WT boards is related to access control deficiencies, which allow attackers to increase their privileges.

The vulnerability of the microprogramming-based BIOS software on Server Board S1200RP, S1400FP, S1400SP, S1600JP, S2400BB, S2400EP, S2400SC, S2600CO, S2600CP, S2600GL, S2600GZ, S2600IP, W2600CR, S2600JF, S2600WP, S4600LH, S4600LT, S2600CW, S2600KP, S2600TP, and S1200BT is related to access contro...

CVE-2023-25494

A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could allow a local attacker with elevated privileges to write to NVRAM variables...

CVE-2023-25493

A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and ThinkStation products that could allow a local user with elevated privileges to execute arbitrary code...