CVE-2024-47665 i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup

In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Error out instead on BUGON in IBI DMA setup Definitely condition dmagetcachealignment defined value 256 during driver initialization is not reason to BUGON. Turn that to graceful error out with -EINVAL...

CVE-2024-47665

CVE-2024-47665 concerns the Linux kernel’s i3c: mipi-i3c-hci driver. The bug manifested during IBI DMA setup when the code checked if dma_get_cache_alignment * defined value > 256, and incorrectly BUG_ON()'ed during driver initialization. The vulnerability could cause a local fault due to a fa...

CVE-2024-47665 i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup

In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Error out instead on BUGON in IBI DMA setup Definitely condition dmagetcachealignment defined value 256 during driver initialization is not reason to BUGON. Turn that to graceful error out with -EINVAL...

CVE-2024-47665

In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Error out instead on BUGON in IBI DMA setup Definitely condition dmagetcachealignment defined value 256 during driver initialization is not reason to BUGON. Turn that to graceful error out with -EINVAL...

CVE-2024-38179

Azure Stack Hyperconverged Infrastructure HCI Elevation of Privilege Vulnerability...

CVE-2024-38179 Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability

...

October 8, 2024-KB5044087 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Azure Stack HCI, version 22H2

None None...

KB5044281: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (October 2024)

The remote Windows host is missing security update 5044281. It is, therefore, affected by multiple vulnerabilities - libcurl's ASN1 parser has this utf8asn1str function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortunately, when doing so it also...

CVE-2024-6259

BT: HCI: advextreport Improper discarding in advextreport...

CVE-2024-6259 BT: HCI: adv_ext_report Improper discarding in adv_ext_report

BT: HCI: advextreport Improper discarding in advextreport...

CVE-2024-6259 BT: HCI: adv_ext_report Improper discarding in adv_ext_report

BT: HCI: advextreport Improper discarding in advextreport...

CVE-2024-6259

CVE-2024-6259 concerns Zephyr RTOS Bluetooth HCI: the heap overflow stems from an improper discard in bt_hci_le_adv_ext_report (adv_ext_report) in /subsys/bluetooth/host/scan.c. Technical details across sources describe a missing size/check in the adv_ext_report path, enabling a heap-based overfl...

2024-09 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5042880)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...

KB5042881: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2024)

The remote Windows host is missing security update 5042881 or hotpatch update 5042880. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Desktop Licensing Service Spoofing Vulnerability CVE-2024-43455 - Windows...

The vulnerability of the hci_qca component in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the hciqca component in the Linux operating system’s kernel is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2024-33052

Memory corruption when user provides data for FM HCI command control operations...

CVE-2024-33052 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Memory corruption when user provides data for FM HCI command control operations...

CVE-2024-33052 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Memory corruption when user provides data for FM HCI command control operations...

CVE-2024-33052

CVE-2024-33052 describes a memory corruption in the FM Host/HCI control path when data is provided for FM HCI commands. The vulnerability is tied to Qualcomm chipsets and is classified as local with low privileges and no user interaction, and the impact is rated high (confidentiality, integrity, ...

PT-2024-25095 · Qualcomm · 205 Mobile Firmware +228

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption when a user provides data for FM HCI command control operations. This can potentially lead to security risks. The...