CVE-2024-22440 HPE Compute Scale-up Server 3200 Server, Disclosure of Sensitive Information

A potential security vulnerability has been identified in HPE Compute Scale-up Server 3200 server. This vulnerability could cause disclosure of sensitive information in log files...

Hewlett Packard Enterprise Compute Scale-up Server 安全漏洞

Hewlett Packard Enterprise Compute Scale-up Server is a series of compute scale-up servers from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise Compute Scale-up Server 3200 that originates from the disclosure of sensitive information in log files...

PT-2024-19426 · Hewlett Packard · Hpe Compute Scale-Up Server 3200

Name of the Vulnerable Software and Affected Versions: HPE Compute Scale-up Server 3200 versions prior to 1.10.342 Description: A potential security issue has been identified that could cause the disclosure of sensitive information in log files. Recommendations: For HPE Compute Scale-up Server 32...

HPESBHF04632 rev.3 - HPE Compute Scale-up Server 3200, Superdome Flex and Superdome Flex 280 servers, Local Buffer Overflow

Potential Security Impact: Local: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to v1.20.128 HPE Superdome Flex 280 Server - Prior to v1.80.20 HPE Superdome Flex Server - Prior to v3.100.26 CVSS Scores: | CVE | CVSS Vector...

HPESBHF04633 rev.1 - HPE Superdome Flex, Superdome Flex 280 and Compute Scale-up Server 3200 Servers, Privilege Elevation and Arbitrary Code Execution

Potential Security Impact: Local: Execution of Arbitrary Code With Privilege Elevation, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to v1.20.128 HPE Superdome Flex 280 Server - Prior to v1.70.14 HPE Superdome Flex Server...

CVE-2024-26815 net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: proper TCATAPRIOTCENTRYINDEX check taprioparsetcentry is not correctly checking TCATAPRIOTCENTRYINDEX attribute: int tc; // Signed value tc = nlagetu32tbTCATAPRIOTCENTRYINDEX; if tc = TCQOPTMAXQUEUE...

CVE-2024-26815

CVE-2024-26815 affects the Linux kernel (net/sched taprio). The vulnerability arises from taprio_parse_tc_entry() not validating the TCA_TAPRIO_TC_ENTRY_INDEX attribute, allowing negative values to slip through and trigger a UBSAN shift-out-of-bounds in net/sched/sch_taprio.c:1722. The issue is f...

Vulnerabilities fixed in Microsoft Azure products

Microsoft has fixed vulnerabilities in Azure and various applications within Azure. A malicious party could exploit them to carry out attacks that can result in the following categories of damage: Denial-of-Service DoS. Remote code execution User rights Access to sensitive data Access to system...

CVE-2024-21424

Azure Compute Gallery Elevation of Privilege Vulnerability...

CVE-2024-21424 Azure Compute Gallery Elevation of Privilege Vulnerability

...

CVE-2024-21424 Azure Compute Gallery Elevation of Privilege Vulnerability

...

CVE-2024-21424

Azure Compute Gallery Elevation of Privilege Vulnerability (CVE-2024-21424) affects Microsoft Azure Compute Gallery. The CVSSv3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N with a base score of 6.5 (Medium). The issue enables privilege escalation via a component/feature within the Azu...

Microsoft Azure Compute Gallery 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. A security vulnerability exists in Microsoft Azure Compute Gallery. An attacker can elevate privileges by exploiting the vulnerability...

PT-2024-2890 · Microsoft · Azure Compute Gallery

Name of the Vulnerable Software and Affected Versions: Azure Compute Gallery affected versions not specified Description: The issue is related to inadequate access control in the Azure Compute Gallery, which is a tool for creating and managing virtual machine VM and container images. This can be...

CVE-2024-26792 btrfs: fix double free of anonymous device after snapshot creation failure

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of anonymous device after snapshot creation failure When creating a snapshot we may do a double free of an anonymous device in case there's an error committing the transaction. The second free may result in...

CVE-2024-26780 af_unix: Fix task hung while purging oob_skb in GC.

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix task hung while purging oobskb in GC. syzbot reported a task hung; at the same time, GC was looping infinitely in listforeachentrysafe for OOB skb. 0 syzbot demonstrated that the listforeachentrysafe was not actually...

CVE-2024-26780

CVE-2024-26780 | Linux kernel (af_unix) — The vulnerability centers on a task hang during purging oob_skb in GC. The root cause is that list_for_each_entry_safe() is not actually safe when a single skb has references from multiple sockets; freeing such an skb can unlink current and next sockets i...

CVE-2024-26750 af_unix: Drop oob_skb ref before purging queue in GC.

In the Linux kernel, the following vulnerability has been resolved: afunix: Drop oobskb ref before purging queue in GC. syzbot reported another task hung in unixgc. 0 The current while loop assumes that all of the left candidates have oobskb and calling kfreeskboobskb releases the remaining...

DEBIAN-CVE-2024-26762

In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Skip to handle RAS errors if CXL.mem device is detached The PCI AER model is an awkward fit for CXL error handling. While the expectation is that a PCI device can escalate to link reset to recover from an AER event, the...

UBUNTU-CVE-2024-26762

In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Skip to handle RAS errors if CXL.mem device is detached The PCI AER model is an awkward fit for CXL error handling. While the expectation is that a PCI device can escalate to link reset to recover from an AER event, the...