CVE-2024-12910

CVE-2024-12910 affects the run-llama/llama_index project, specifically the KnowledgeBaseWebReader class. The vulnerability leverages a manipulated URL variable containing the root URL to trigger infinite recursive calls to get_article_urls, causing uncontrolled resource consumption and potential ...

LlamaIndex 安全漏洞

LlamaIndex is a data framework for LLM applications open-sourced by LlamaIndex. A security vulnerability exists in LlamaIndex that originates from an unauthenticated URL and could lead to infinite recursive calls and denial of service attacks...

Malicious code in connector-bsb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron eed0770278358269212ff3971e9c4ee9d5410676ea27a4feb6ae52fa8cb5484b This package seems to be part of a larger malicious toolkit designed for unauthorized access to systems, data theft, and potentially acting as a...

vfio/platform: check the bounds of read/write syscalls

...

GHSA-GFH6-3PQW-X2J4 SmallRye Fault Tolerance out-of-memory (OOM) issue

A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory OOM issue. This vulnerability is externally triggered when calling the metrics URI. Every call creates a new object within meterMap and may lead to a denial of service DoS issue...

kernel: leds: trigger: Unregister sysfs attributes before calling deactivate()

leds in linux kernel permits calling sysfs attributes show/store functions after deactivate has been called...

CVE-2024-12837

Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory...

CVE-2024-12576

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output...

CVE-2024-12837

Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory...

CVE-2024-12576

This CVE affects Imagination Technologies’ PowerVR-GPU driver. A non-privileged user could perform improper GPU system calls, causing the GPU firmware (FW) to crash and the graphics output to freeze. Publicly stated details indicate vulnerable component is the Imagination GPU Driver (PowerVR-GPU)...

CVE-2024-12576 GPU DDK - Untrusted app can crash firmware by forcing MCU access to non-aligned address

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output...

DEBIAN-CVE-2024-58053

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix handling of received connection abort Fix the handling of a connection abort that we've received. Though the abort is at the connection level, it needs propagating to the calls on that connection. Whilst the propagatio...

UBUNTU-CVE-2024-58053

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix handling of received connection abort Fix the handling of a connection abort that we've received. Though the abort is at the connection level, it needs propagating to the calls on that connection. Whilst the propagatio...

Linux Distros Unpatched Vulnerability : CVE-2024-53112

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: uncache inode which has failed entering the group Syzbot has reported the following BUG: kernel BUG at fs/ocfs2/uptodate.c:509! ... Call Trace: ?...

CVE-2024-43059

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node...

CVE-2024-45580

Memory corruption while handling multuple IOCTL calls from userspace for remote invocation...

Linux Distros Unpatched Vulnerability : CVE-2024-36915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: llcp: fix nfcllcpsetsockopt unsafe copies syzbot reported unsafe calls to copyfromsockptr 1 Use copysafefromsockptr instead. 1 BUG: KASAN: slab-out-of-boun...

Linux Distros Unpatched Vulnerability : CVE-2022-0485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the copying tool nbdcopy of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the...

Linux Distros Unpatched Vulnerability : CVE-2022-49316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4: Don't hold the layoutget locks across multiple RPC calls When doing layoutget as part of the open compound, we have to be careful to release the layout...

Linux Distros Unpatched Vulnerability : CVE-2024-46715

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - driver: iio: add missing checks on iioinfo's callback access Some callbacks from iioinfo structure are accessed without any check, so if a driver doesn't...