9280 matches found
CVE-2024-26596 net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix netdevpriv dereference before check on non-DSA netdevice events After the blamed commit, we started doing this dereference for every NETDEVCHANGEUPPER and NETDEVPRECHANGEUPPER event in the system. static inline stru...
CVE-2024-26596 net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix netdevpriv dereference before check on non-DSA netdevice events After the blamed commit, we started doing this dereference for every NETDEVCHANGEUPPER and NETDEVPRECHANGEUPPER event in the system. static inline stru...
CVE-2024-26596
The CVE-2024-26596 entry concerns the Linux kernel net: dsa subsystem. The issue arises when handling NETDEV_CHANGEUPPER and NETDEV_PRECHANGEUPPER events: code dereferences netdev_priv(dev) unconditionally, but not all net_devices have a priv of type struct dsa_user_priv. This can read memory bey...
CVE-2024-26596
In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix netdevpriv dereference before check on non-DSA netdevice events After the blamed commit, we started doing this dereference for every NETDEVCHANGEUPPER and NETDEVPRECHANGEUPPER event in the system. static inline stru...
Debian: Security Advisory (DSA-5628-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5627-1] firefox-esr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5627-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 21, 2024 https://www.debian.org/security/faq -...
Debian dsa-5627 : firefox-esr - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5627 advisory. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5627...
Debian: Security Advisory (DSA-5623-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-5624-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-5622-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-39425
Improper access control in some IntelR DSA software before version 23.4.33 may allow an authenticated user to potentially enable escalation of privilege via local access...
Improper access control
Improper access control in some IntelR DSA software before version 23.4.33 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-35062
Improper access control in some IntelR DSA software before version 23.4.33 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-35062
Improper access control in some IntelR DSA software before version 23.4.33 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-25073
Improper access control in some IntelR DSA software before version 23.4.33 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2023-25073
Improper access control in some IntelR DSA software before version 23.4.33 may allow an authenticated user to potentially enable denial of service via local access...
Improper access control
Improper access control in some IntelR DSA software before version 23.4.33 may allow a privileged user to potentially enable escalation of privilege via local access...
Improper access control
Improper access control in some IntelR DSA software before version 23.4.33 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2023-25073
Improper access control in some IntelR DSA software before version 23.4.33 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2023-25073
CVE-2023-25073 concerns IntelĀ® DSA software prior to version 23.4.33. The issue is described as improper access control that may allow an authenticated user to potentially enable a denial of service via local access. Affected product: IntelĀ® Driver & Support Assistant (DSA) software before 23.4.3...