Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-48879: efi: fix NULL-deref in init error path bsc1229556. CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1231893. CVE-2022-48957: dpaa2-switc...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7089-4)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7089-4 advisory. Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local...

PT-2024-24373 · Intel · Intel Arc Pro Graphics

Name of the Vulnerable Software and Affected Versions: IntelR ArcTM Pro Graphics for Windows versions prior to 31.0.101.5319 Description: The issue is related to improper access control in some IntelR ArcTM Pro Graphics for Windows drivers. This may allow an authenticated user to potentially enab...

Intel Graphics Drivers security vulnerabilities

Intel Graphics Drivers is an integrated graphics driver from Intel Corporation USA. A security vulnerability exists in Intel Graphics Drivers that originates from an untrusted pointer dereference. An attacker can exploit the vulnerability to elevate privileges...

Intel DSA security vulnerabilities

Intel DSA is a driver update tool from Intel Intel. It can detect user drivers, update the installed drivers to the latest version, support intel series of graphics cards, audio, network cards and chipset drivers, a must for i-card users. A security vulnerability exists in versions prior to Intel...

Intel DSA Access Control Vulnerability

Intel DSA is a driver update tool from Intel Intel. It can detect user drivers, update the installed drivers to the latest version, support intel series of graphics cards, audio, network cards and chipset drivers, i-card users must have. An Access Control Error vulnerability exists in Intel DSA...

CVE-2024-34023: Untrusted Pointer Dereference

Untrusted pointer dereference in some IntelR Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-38665: Out-of-bounds Write

Out-of-bounds write in some IntelR Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Graphics Drivers Code-related Vulnerabilities

Intel Graphics Drivers is an integrated graphics driver from Intel Corporation USA. A code issue vulnerability exists in Intel Graphics Drivers version 15.40 and 15.45, which stems from an uncontrolled search path. An attacker can exploit the vulnerability to elevate privileges...

Intel Graphics Drivers Buffer Error Vulnerability

Intel Graphics Drivers is an integrated graphics driver from Intel Corporation USA. Intel Graphics Drivers suffers from a buffer error vulnerability that originates from a memory out-of-bounds write. An attacker can exploit the vulnerability to elevate privileges...

PT-2024-41620

Уязвимость функции xe oa release модуля drivers/gpu/drm/xe/xe oa.c - драйвера поддержки инфраструктуры прямого рендеринга DRI ядра операционной системы Linux связана с неправильным контролем идентификаторов ресурсов «внедрение ресурсов». Эксплуатация уязвимости может позволить нарушителю вызвать...

PT-2024-41621

Уязвимость функции vmw framebuffer surface create handle модуля drivers/gpu/drm/vmwgfx/vmwgfx kms.c - драйвера поддержки инфраструктуры прямого рендеринга DRI ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

PT-2024-28109 · Intel · Intel Graphics Drivers

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Drivers affected versions not specified Description: The issue is related to an out-of-bounds write in some IntelR Graphics Drivers, which may allow an authenticated user to potentially enable escalation of privilege via local...

Intel Graphics Drivers security vulnerabilities

Intel Graphics Drivers is an integrated graphics driver from Intel Corporation USA. A security vulnerability exists in Intel Graphics Drivers, which stems from improper buffer limiting. An attacker can exploit the vulnerability to elevate privileges...

CVE-2024-34170: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in some IntelR Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access...

PT-2024-25650 · Intel · Intel Graphics Drivers

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Drivers affected versions not specified Description: The issue is related to an untrusted pointer dereference in some IntelR Graphics Drivers, which may allow an authenticated user to potentially enable escalation of privilege...

PT-2024-25727

Name of the Vulnerable Software and Affected Versions IntelR Graphics Drivers affected versions not specified Description The issue is related to improper buffer restrictions in IntelR Graphics Drivers, which may allow an authenticated user to potentially enable denial of service via local access...

USN-7100-2: Linux kernel vulnerabilities

Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a deni...

kernel: vfio/pci: Disable auto-enable of exclusive INTx IRQ

An incorrect handling flaw was found in the Linux kernel framework for secure userspace device drivers functionality that may interrupt some of the devices. This issue could allow a local user to crash the system...

kernel: HID: i2c-hid-of: fix NULL-deref on failed power up

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementation was split in an ACPI and OF part, but the new OF driver never initialises the client pointer which is dereferenced on power-up failures...