CVE-2024-38401

CVE-2024-38401 describes a memory corruption issue due to a use-after-free in the Qualcomm IPC component when processing concurrent IOCTL calls on Qualcomm chipsets. Affected software: Qualcomm IPC on Qualcomm chipsets (per CVE listing). Root cause: improper handling of concurrent IOCTL processin...

PT-2024-27982 · Qualcomm · Snapdragon +41

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Memory corruption can occur when processing multiple IOCTL calls concurrently. This issue is related to the processing of concurrent IOCTL calls, which...

CVE-2024-38401: Use After Free

Memory corruption while processing concurrent IOCTL calls...

PT-2024-25100 · Qualcomm · Qualcomm Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption that occurs when two threads attempt to map and unmap a single node at the same time. This can lead to unpredictable behavior and...

CVE-2024-44946

CVE-2024-44946 (Linux kernel, KCM) has a confirmed UAF/double-free risk in kcm_release arising when one thread frees an skb still in the KCM write queue due to concurrent kcm_sendmsg() operations. The issue occurs when a thread building a MSG_MORE skb holds kcm->seq_skb while another thread co...

PT-2024-33715

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A dentry leak may occur in the Linux kernel when a lookup cookie and a cull are concurrent. This happens because the reference count obtained by lookup one positive unlocked in cachefiles loo...

Denial Of Service (DOS)

github.com/mattermost/mattermost-plugin-channel-export is vulnerable to Denial Of Service DOS. The vulnerability is caused due to a failure to restrict concurrent runs of the /export command. The can allow an attacker to consume excessive resource by running the /export command multiple times at...

DEBIAN-CVE-2024-44935

In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseportaddsock. syzbot reported a null-ptr-deref while accessing sk2-skreuseportcb in reuseportaddsock. 0 The repro first creates a listener with SOREUSEPORT. Then, it creates another listener on the...

AZL-48662 CVE-2024-43892 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: memcg: protect concurrent access to memcgroupidr Commit 73f576c04b94 "mm: memcontrol: fix cgroup creation failure after many small jobs" decoupled the memcg IDs from the CSS ID space to fix the cgroup creation failures. It...

UBUNTU-CVE-2024-43892

In the Linux kernel, the following vulnerability has been resolved: memcg: protect concurrent access to memcgroupidr Commit 73f576c04b94 "mm: memcontrol: fix cgroup creation failure after many small jobs" decoupled the memcg IDs from the CSS ID space to fix the cgroup creation failures. It...

UBUNTU-CVE-2024-44935

In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseportaddsock. syzbot reported a null-ptr-deref while accessing sk2-skreuseportcb in reuseportaddsock. 0 The repro first creates a listener with SOREUSEPORT. Then, it creates another listener on the...

CVE-2024-43892

In the Linux kernel, the following vulnerability has been resolved: memcg: protect concurrent access to memcgroupidr Commit 73f576c04b94 "mm: memcontrol: fix cgroup creation failure after many small jobs" decoupled the memcg IDs from the CSS ID space to fix the cgroup creation failures. It...

CVE-2024-44935

In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseportaddsock. syzbot reported a null-ptr-deref while accessing sk2-skreuseportcb in reuseportaddsock. 0 The repro first creates a listener with SOREUSEPORT. Then, it creates another listener on the...

CVE-2024-43892

The CVE-2024-43892 issue lies in the Linux kernel memcg path: idr_alloc()/idr_replace() are protected by cgroup_mutex, but idr_remove() for mem_cgroup_idr was not, allowing races when memcg references drop to zero. This can cause multiple memcgs to share or lose IDs, corrupting mem_cgroup_idr and...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from unprotected concurrent access when accessing memcgroupidr, leading to a potentially competitive condition...

The vulnerability of the Garbage Collector component of the Mozilla Firefox browser, which allows a hacker to execute arbitrary code.

The vulnerability of the Garbage Collector component in the Mozilla Firefox browser is related to the use of memory after it is freed, as a result of the simultaneous loading of the browser’s own global execution environment and the “garbage collection” process. Exploiting this vulnerability can...

CVE-2024-43105

Mattermost Plugin Channel Export versions =1.0.0 fail to restrict concurrent runs of the /export command which allows a user to consume excessive resource by running the /export command multiple times at once...

CVE-2024-43105

Mattermost Plugin Channel Export (github.com/mattermost/mattermost-plugin-channel-export) is affected: versions ≤ 1.0.0 do not correctly restrict concurrent /export executions, enabling a user to initiate multiple simultaneous runs and cause resource exhaustion. Root cause: lack of concurrency co...

CVE-2024-43105 Excessive Resource Consumption via `/export`

Mattermost Plugin Channel Export versions =1.0.0 fail to restrict concurrent runs of the /export command which allows a user to consume excessive resource by running the /export command multiple times at once...

PT-2024-30297 · Mattermost · Mattermost Plugin Channel Export

Name of the Vulnerable Software and Affected Versions: Mattermost Plugin Channel Export versions = 1.0.0 Description: The issue allows a user to consume excessive resources by running the /export command multiple times at once, due to the failure to restrict concurrent runs of the command. This c...