CVE-2024-53150

The CVE-2024-53150 issue affects the Linux kernel USB-audio (ALSA: usb-audio). The root cause is that the driver does not validate the bLength field of descriptors while traversing clock-related descriptors, allowing a bogus shorter descriptor to cause out-of-bounds reads. The public patch adds s...

CVE-2024-53150 ALSA: usb-audio: Fix out of bounds reads when finding clock sources

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn't check bLength of each descriptor at traversing for clock descriptors. That is, when a device provides a bogus descripto...

CVE-2024-53150

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn’t check bLength of each descriptor at traversing for clock descriptors. That is, when a device provides a bogus descripto...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a logic error in the geniseclktblget function in the soc: qcom: geni-se module's checking of frequencies i...

USN-7166-3 linux-hwe-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - ACPI...

USN-7166-2 linux-aws, linux-aws-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - ACPI...

USN-7166-1 linux, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - ACPI...

CVE-2021-26281

Some parameters of the alarm clock module are improperly stored, leaking some sensitive information...

CVE-2021-26281 Information disclosure vulnerability in Alarm clock module

Some parameters of the alarm clock module are improperly stored, leaking some sensitive information...

CVE-2021-26281

The CVE-2021-26281 entry relates to the vivo Alarm clock module, where some parameters are improperly stored, leaking sensitive information. The available documents identify the affected component as the alarm clock module and describe the root cause as improper storage of certain parameters, res...

CVE-2021-26281 Information disclosure vulnerability in Alarm clock module

Some parameters of the alarm clock module are improperly stored, leaking some sensitive information...

vivo Alarm clock 安全漏洞

vivo Alarm clock is a cell phone alarm clock module from the Chinese company Vivo. A security vulnerability exists in vivo Alarm clock, which originates from improper storage of some parameters of the alarm clock module, leaking some sensitive information...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50181)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50181 advisory. - In the Linux kernel, the following vulnerability has been resolved: clk: imx: Remove CLKSETPARENTGATE for DR...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50195)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50195 advisory. - In the Linux kernel, the following vulnerability has been resolved: posix-clock: Fix missing timespec64 chec...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49985)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49985 advisory. - In the Linux kernel, the following vulnerability has been resolved: i2c: stm32f7: Do not prepare/unprepare...

clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D

...

posix-clock: Fix missing timespec64 check in pc_clock_settime()

...

CVE-2024-12286

MOBATIME Network Master Clock - DTS 4801 allows attackers to use SSH to gain initial access using default credentials...

CVE-2024-12286 MOBATIME Network Master Clock has a use of default credentials vulnerability

MOBATIME Network Master Clock - DTS 4801 allows attackers to use SSH to gain initial access using default credentials...

CVE-2024-12286

CVE-2024-12286 affects the MOBATIME Network Master Clock – DTS 4801. The issue is use of default SSH credentials that allow attackers to gain initial access over the network. Exploitation could enable full OS control with high impact on confidentiality, integrity, and availability (per ICS/CTI as...