Multiple Binary Vulnerabilities in GBase 8c at Tianjin Nanda General Data Technology Co.

GBase 8c is a multimodal and polymorphic distributed database built on openGauss 3.0. Multiple binary vulnerabilities exist in GBase 8c at Tianjin Nanda General Data Technology Co. that can be exploited by attackers to cause a denial of service...

SUSE-SU-2024:3348-1 Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005559 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prpcreatetaggedframe bsc1225099. - CVE-2022-48662: Fixed a general protection fault GPF in i915perfopenioctl bsc1223521. - CVE-2022-48662...

CVE-2024-46788

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Use a cpumask to know what threads are kthreads The startkthread and stopthread code was not always called with the interfacelock held. This means that the kthread variable could be unexpectedly changed causing t...

DEBIAN-CVE-2024-46788

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Use a cpumask to know what threads are kthreads The startkthread and stopthread code was not always called with the interfacelock held. This means that the kthread variable could be unexpectedly changed causing t...

CVE-2024-46788 tracing/osnoise: Use a cpumask to know what threads are kthreads

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Use a cpumask to know what threads are kthreads The startkthread and stopthread code was not always called with the interfacelock held. This means that the kthread variable could be unexpectedly changed causing t...

CVE-2024-46788 tracing/osnoise: Use a cpumask to know what threads are kthreads

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Use a cpumask to know what threads are kthreads The startkthread and stopthread code was not always called with the interfacelock held. This means that the kthread variable could be unexpectedly changed causing t...

CVE-2024-46788

The CVE-2024-46788 entry concerns a Linux kernel issue in tracing/osnoise: start_kthread() and stop_thread() were not always called with interface_lock held, enabling kthread_stop() to be invoked on a kernel thread (kthread) that should not be stopped, which could trigger OOPS conditions such as ...

CVE-2024-46788: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Use a cpumask to know what threads are kthreads The startkthread and stopthread code was not always called with the interfacelock held. This means that the kthread variable could be unexpectedly changed causing t...

RHSA-2017:1558 Red Hat Security Advisory: Red Hat Satellite 5.8.0 General Availability

Bulletin has no description...

RHSA-2015:0033 Red Hat Security Advisory: Red Hat Satellite 5.7.0 General Availability

Bulletin has no description...

PT-2024-32755

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A vulnerability in the Linux kernel has been resolved, which involved a possible NULL dereference in the rt6 uncached list flush dev function. This issue occurred due to a missing check for...

PT-2024-6945

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.52 Description The vulnerability is related to the tracing/osnoise component in the Linux kernel. It occurs when the start kthread and stop thread code is not always called with the interface lock held,...

General Electric D20ME TFTP Server Buffer Overflow / Denial of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework The General Electric D20 and possibly other devices have numerous buffer overruns in their TFTP servers and probably other servers. There are many buffer overruns like i...

General Electric D20 Password Recovery

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This module grabs the device configuration from a GE D20M RTU and parses the usernames and passwords from it. class MetasploitModule 'General Electric D20 Password...

PT-2024-34075

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: A general protection fault in the run is mapped full function has been fixed. The issue was related to the deletion of a non-resident attribute in ntfs create inode. Recommendations: For...

CVE-2024-44935

In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseportaddsock. syzbot reported a null-ptr-deref while accessing sk2-skreuseportcb in reuseportaddsock. 0 The repro first creates a listener with SOREUSEPORT. Then, it creates another listener on the...

CVE-2024-44935

In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseportaddsock. syzbot reported a null-ptr-deref while accessing sk2-skreuseportcb in reuseportaddsock. 0 The repro first creates a listener with SOREUSEPORT. Then, it creates another listener on the...

US Federal Court Rules Against Geofence Warrants

This is a big deal. A US Appeals Court ruled that geofence warrants--these are general warrants demanding information about all people within a geographical boundary--are unconstitutional. The decision seems obvious to me, but you cant take anything for granted...

A week in security (August 19 – August 25)

Last week on Malwarebytes Labs: Millennials’ sense of privacy uniquely tested in romantic relationships Hacked GPS tracker reveals location data of customers "We will hold them accountable": General Motors sued for selling customer driving data to third parties Why you need to know about ransomwa...

CVE-2024-44939: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: jfs: fix null ptr deref in dtInsertEntry syzbot reported general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 1 PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range...