Lucene search
+L

4327 matches found

OSV
OSV
added 2024/07/12 12:32 p.m.19 views

CVE-2024-40979 wifi: ath12k: fix kernel crash during resume

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix kernel crash during resume Currently during resume, QMI target memory is not properly handled, resulting in kernel crash in case DMA remap is not supported: BUG: Bad page state in process kworker/u16:54 pfn:36e8...

5.5CVSS5.8AI score0.00255EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/07/12 12:32 p.m.28 views

CVE-2024-40970 Avoid hw_desc array overrun in dw-axi-dmac

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

0.00289EPSS
SaveExploits0References5
OSV
OSV
added 2024/07/12 12:32 p.m.17 views

CVE-2024-40970 Avoid hw_desc array overrun in dw-axi-dmac

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

5.5CVSS6.1AI score0.00289EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2024/07/12 12:32 p.m.27 views

CVE-2024-40970 Avoid hw_desc array overrun in dw-axi-dmac

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

6.7AI score0.00289EPSS
SaveExploits0References5
CVE
CVE
added 2024/07/12 12:32 p.m.112 views

CVE-2024-40970

The CVE-2024-40970 entry concerns a Linux kernel vulnerability in the dw-axi-dmac component that can cause a kernel panic due to an overrun of the hw_desc array when a descriptor chain expands (example: nr_buffers=3 with 3 segments per descriptor, totaling 9). The proposed fix, as described in mu...

5.5CVSS7.1AI score0.00289EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2024/07/12 12:32 p.m.42 views

CVE-2024-40970

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

5.5CVSS5.7AI score0.00289EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/07/12 12:25 p.m.42 views

CVE-2024-40923 vmxnet3: disable rx data ring on dma allocation failure

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: disable rx data ring on dma allocation failure When vmxnet3rqcreate fails to allocate memory for rq-dataring.base, the subsequent call to vmxnet3rqdestroyallrxdataring does not reset rq-dataring.descsize for the data rin...

0.00288EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/07/12 12:25 p.m.34 views

CVE-2024-40923 vmxnet3: disable rx data ring on dma allocation failure

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: disable rx data ring on dma allocation failure When vmxnet3rqcreate fails to allocate memory for rq-dataring.base, the subsequent call to vmxnet3rqdestroyallrxdataring does not reset rq-dataring.descsize for the data rin...

6.7AI score0.00288EPSS
SaveExploits0References3
Ubuntu
Ubuntu
added 2024/07/12 10:2 a.m.68 views

USN-6895-1: Linux kernel vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the HugeTLB file syst...

7.8CVSS7.4AI score0.00756EPSS
SaveExploits1
CNNVD
CNNVD
added 2024/07/12 12:0 a.m.5 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the mips:bmips:BCM6358 component that could cause the kernel to crash when calling archsyncdmaforcpuall...

5.5CVSS8.2AI score0.00289EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/07/12 12:0 a.m.6 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible post-release reuse of the dmaengine:idxd component in irqprocessworklist...

7.8CVSS6.4AI score0.00268EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2024/07/11 12:0 a.m.53 views

Ubuntu 20.04 LTS : Linux kernel (IBM) vulnerabilities (USN-6892-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6892-1 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...

9.1CVSS7.5AI score0.01635EPSS
SaveExploits0References154
Ubuntu
Ubuntu
added 2024/07/10 9:6 p.m.76 views

USN-6892-1: Linux kernel (IBM) vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...

9.1CVSS7.4AI score0.01635EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2024/07/04 1:32 a.m.161 views

USN-6871-1: Linux kernel (HWE) vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...

9.1CVSS7.4AI score0.01635EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2024/07/04 12:0 a.m.31 views

Ubuntu: Security Advisory (USN-6867-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.01287EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/07/04 12:0 a.m.37 views

Ubuntu 20.04 LTS : Linux kernel (HWE) vulnerabilities (USN-6871-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6871-1 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...

9.1CVSS7.5AI score0.01635EPSS
SaveExploits0References154
Tenable Nessus
Tenable Nessus
added 2024/07/04 12:0 a.m.40 views

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-6867-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6867-1 advisory. It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker...

7.8CVSS6.9AI score0.01287EPSS
SaveExploits0References41
The Hacker News
The Hacker News
added 2024/07/02 5:10 a.m.44 views

Meta's 'Pay or Consent' Approach Faces E.U. Competition Rules Scrutiny

Meta's decision to offer an ad-free subscription in the European Union E.U. has faced a new setback after regulators accused the social media behemoth of breaching the bloc's competition rules by forcing users to choose between seeing ads or paying to avoid them. The European Commission said the...

7AI score
SaveExploits0
NVD
NVD
added 2024/07/01 3:15 p.m.36 views

CVE-2024-23373

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released...

8.4CVSS0.0015EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/01 2:17 p.m.23 views

CVE-2024-23373 Use After Free in Graphics

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released...

8.4CVSS7.2AI score0.0015EPSS
SaveExploits0References1
Rows per page
Query Builder