UBUNTU-CVE-2024-38586

In the Linux kernel, the following vulnerability has been resolved: r8169: Fix possible ring buffer corruption on fragmented Tx packets. An issue was found on the RTL8125b when transmitting small fragmented packets, whereby invalid entries were inserted into the transmit ring buffer, subsequently...

CVE-2024-38554

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issue of netdevice There is a reference count leak issue of the object "netdevice" in ax25devdevicedown. When the ax25 device is shutting down, the ax25devdevicedown drops the reference count of...

CVE-2024-38602 ax25: Fix reference count leak issues of ax25_dev

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issues of ax25dev The ax25addrax25dev and ax25devdevicedown exist a reference count leak issue of the object "ax25dev". Memory leak issue in ax25addrax25dev: The reference count of the object...

CVE-2024-38602

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issues of ax25dev The ax25addrax25dev and ax25devdevicedown exist a reference count leak issue of the object "ax25dev". Memory leak issue in ax25addrax25dev: The reference count of the object...

CVE-2024-38554 ax25: Fix reference count leak issue of net_device

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issue of netdevice There is a reference count leak issue of the object "netdevice" in ax25devdevicedown. When the ax25 device is shutting down, the ax25devdevicedown drops the reference count of...

CVE-2024-38554 ax25: Fix reference count leak issue of net_device

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issue of netdevice There is a reference count leak issue of the object "netdevice" in ax25devdevicedown. When the ax25 device is shutting down, the ax25devdevicedown drops the reference count of...

CVE-2024-38554

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issue of netdevice There is a reference count leak issue of the object "netdevice" in ax25devdevicedown. When the ax25 device is shutting down, the ax25devdevicedown drops the reference count of...

CVE-2024-38554

CVE-2024-38554 describes a Linux kernel AX25 driver issue where a reference-count leak in the net_device object can occur in ax25_dev_device_down when shutting down the device. The leak happens because the reference count may be dropped one or zero times depending on control flow, leading to memo...

CVE-2024-38554 ax25: Fix reference count leak issue of net_device

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issue of netdevice There is a reference count leak issue of the object "netdevice" in ax25devdevicedown. When the ax25 device is shutting down, the ax25devdevicedown drops the reference count of...

CVE-2024-38602: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issues of ax25dev The ax25addrax25dev and ax25devdevicedown exist a reference count leak issue of the object "ax25dev". Memory leak issue in ax25addrax25dev: The reference count of the object...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an ax25dev reference count leak...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a reference count leak in netdevice...

PT-2024-32169

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a problem in the Linux kernel where a BUG ON condition is triggered when a 0 reference count is encountered at btrfs lookup extent info. Instead of causing a BUG ON, t...

UBUNTU-CVE-2024-37890

ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in [email protected] e55e510 and backported to [email protected] 22c2876, [email protected] eeb76d3, and [email protected]...

GHSA-3H5V-Q93C-6H6Q ws affected by a DoS when handling a request with many HTTP headers

Impact A request with a number of headers exceeding the server.maxHeadersCount threshold could be used to crash a ws server. Proof of concept js const http = require'http'; const WebSocket = require'ws'; const wss = new WebSocket.Server port: 0 , function const chars =...

kernel: kvm: Avoid potential UAF in LPI translation cache

A flaw was found in the Linux kernel pertaining to a potential use-after-free UAF scenario in a system involving Logical Partitioning Interrupts LPI translation cache operations. Specifically, the issue arises when a cache hit occurs concurrently with an operation that invalidates the cache, such...

PT-2024-29196

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the of k3 udma glue parse chn by id helper function in the Linux kernel, which erroneously invokes of node put on the udmax np device-node without having...

PT-2024-4125

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description The issue is related to an incorrect reference count before accessing a file, which can be exploited to elevate privileges. Recommendations At the moment, there is no information...

PT-2024-26977

Name of the Vulnerable Software and Affected Versions SuiteCRM versions prior to 7.14.4 SuiteCRM versions prior to 8.6.1 Description The issue is related to poor input validation, allowing for SQL Injection in the EmailUIAjax messages count controller. This affects SuiteCRM, an open-source Custom...

CVE-2024-36410: Improper Neutralization of Special Elements used in an SQL Command

SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in EmailUIAjax messages count controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue...