Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly handle a callback when receiving it, which could cause the RX process to halt...

kernel: cpufreq: exit() callback is optional

In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit callback is optional The exit callback is optional and shouldn't be called without checking a valid pointer first. Also, we must clear freqtable pointer even if the exit callback isn't present...

kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages

A vulnerability was found in the Linux kernel's CDC WDM driver, where excessive logging in the interrupt-URB completion callback could lead to CPU lockups, which occurs when the driver rapidly resubmits interrupt URBs after receiving a -EPROTO status, causing a backlog of error messages that...

kernel: cpufreq: exit() callback is optional

In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit callback is optional The exit callback is optional and shouldn't be called without checking a valid pointer first. Also, we must clear freqtable pointer even if the exit callback isn't present...

EulerOS 2.0 SP8 : curl (EulerOS-SA-2024-2460)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowe...

The vulnerability of the amazon.aws.ec2_instance configuration management module in Ansible, related to parameter processing errors, allows an attacker to access sensitive data.

The vulnerability of the amazon.aws.ec2instance configuration management module in Ansible is related to an error in parameter processing involving the towercallback. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

AZL-49563 CVE-2024-46770 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: ice: Add netifdeviceattach/detach into PF reset flow Ethtool callbacks can be executed while reset is in progress and try to access deleted resources, e.g. getting coalesce settings can result in a NULL pointer dereference seen...

AZL-49398 CVE-2024-46739 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Fix kernel NULL pointer dereference in hvuiorescind For primary VM Bus channels, primarychannel pointer is always NULL. This pointer is valid only for the secondary channels. Also, rescind callback is meant for...

UBUNTU-CVE-2024-46739

In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Fix kernel NULL pointer dereference in hvuiorescind For primary VM Bus channels, primarychannel pointer is always NULL. This pointer is valid only for the secondary channels. Also, rescind callback is meant for...

CVE-2024-46715

In the Linux kernel, the following vulnerability has been resolved: driver: iio: add missing checks on iioinfo's callback access Some callbacks from iioinfo structure are accessed without any check, so if a driver doesn't implement them trying to access the corresponding sysfs entries produce a...

UBUNTU-CVE-2024-46715

In the Linux kernel, the following vulnerability has been resolved: driver: iio: add missing checks on iioinfo's callback access Some callbacks from iioinfo structure are accessed without any check, so if a driver doesn't implement them trying to access the corresponding sysfs entries produce a...

CVE-2024-46739 uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind

In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Fix kernel NULL pointer dereference in hvuiorescind For primary VM Bus channels, primarychannel pointer is always NULL. This pointer is valid only for the secondary channels. Also, rescind callback is meant for...

CVE-2024-46715

In the Linux kernel, the following vulnerability has been resolved: driver: iio: add missing checks on iioinfo's callback access Some callbacks from iioinfo structure are accessed without any check, so if a driver doesn't implement them trying to access the corresponding sysfs entries produce a...

kernel: cpufreq: exit() callback is optional

In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit callback is optional The exit callback is optional and shouldn't be called without checking a valid pointer first. Also, we must clear freqtable pointer even if the exit callback isn't present...

kernel: cpufreq: exit() callback is optional

In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit callback is optional The exit callback is optional and shouldn't be called without checking a valid pointer first. Also, we must clear freqtable pointer even if the exit callback isn't present...

CVE-2024-46691 usb: typec: ucsi: Move unregister out of atomic section

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Move unregister out of atomic section Commit '9329933699b3 "soc: qcom: pmicglink: Make client-lock non-sleeping"' moved the pmicglink client list under a spinlock, as it is accessed by the rpmsg/glink callback,...

PT-2024-40570 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to a crash caused by a bad-cast in the Assimp library. Specifically, it involves a bad-cast to Assimp::LogStream from an invalid vptr, occurring in the...

WordPress plugin Revision Manager TMC 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

SUSE CVE-2024-44954

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Fix racy access to midibuf There can be concurrent accesses to line6 midibuf from both the URB completion callback and the rawmidi API access. This could be a cause of KMSAN warning triggered by syzkaller below so pu...

CVE-2024-44956 drm/xe/preempt_fence: enlarge the fence critical section

In the Linux kernel, the following vulnerability has been resolved: drm/xe/preemptfence: enlarge the fence critical section It is really easy to introduce subtle deadlocks in preemptfenceworkfunc since we operate on single global ordered-wq for signalling our preempt fences behind the scenes, so...