8290 matches found
CVE-2024-53153
In the Linux kernel, the following vulnerability has been resolved: PCI: qcom-ep: Move controller cleanups to qcompcieperstdeassert Currently, the endpoint cleanup function dwpcieepcleanup and EPF deinit notify function pciepcdeinitnotify are called during the execution of qcompcieperstassert i.e...
CVE-2024-53159
In the Linux kernel, the following vulnerability has been resolved: hwmon: nct6775-core Fix overflows seen when writing limit attributes DIVROUNDCLOSEST after kstrtoul results in an overflow if a large number such as 18446744073709551615 is provided by the user. Fix it by reordering clampval and...
CVE-2024-53153
In the Linux kernel, the following vulnerability has been resolved: PCI: qcom-ep: Move controller cleanups to qcompcieperstdeassert Currently, the endpoint cleanup function dwpcieepcleanup and EPF deinit notify function pciepcdeinitnotify are called during the execution of qcompcieperstassert i.e...
CVE-2024-53152
In the Linux kernel, the following vulnerability has been resolved: PCI: tegra194: Move controller cleanups to pexepeventpexrstdeassert Currently, the endpoint cleanup function dwpcieepcleanup and EPF deinit notify function pciepcdeinitnotify are called during the execution of...
CVE-2024-53153 PCI: qcom-ep: Move controller cleanups to qcom_pcie_perst_deassert()
In the Linux kernel, the following vulnerability has been resolved: PCI: qcom-ep: Move controller cleanups to qcompcieperstdeassert Currently, the endpoint cleanup function dwpcieepcleanup and EPF deinit notify function pciepcdeinitnotify are called during the execution of qcompcieperstassert i.e...
CVE-2024-53153 PCI: qcom-ep: Move controller cleanups to qcom_pcie_perst_deassert()
In the Linux kernel, the following vulnerability has been resolved: PCI: qcom-ep: Move controller cleanups to qcompcieperstdeassert Currently, the endpoint cleanup function dwpcieepcleanup and EPF deinit notify function pciepcdeinitnotify are called during the execution of qcompcieperstassert i.e...
CVE-2024-53153
CVE-2024-53153 in the Linux kernel describes a crash condition for Qualcomm PCIe endpoints when PERST# is asserted and the host disables refclk. The issue arises because endpoint cleanup functions (e.g., dw_pcie_ep_cleanup() and pci_epc_deinit_notify()) previously ran during PERST# assert, while ...
CVE-2024-53152 PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert()
In the Linux kernel, the following vulnerability has been resolved: PCI: tegra194: Move controller cleanups to pexepeventpexrstdeassert Currently, the endpoint cleanup function dwpcieepcleanup and EPF deinit notify function pciepcdeinitnotify are called during the execution of...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from accesses to hardware registers that could lead to endpoint crashes...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from accesses to hardware registers that could lead to endpoint crashes...
CVE-2024-7726 Arbitrary Code execution via exposed JTAG port in Kioxia CM6, PM6, PM7
There exists an unauthenticated accessible JTAG port on the Kioxia PM6, PM7 and CM6 devices - On the Kioxia CM6, PM6 and PM7 disk drives it was discovered that the 2 main CPU cores of the SoC can be accessed via an open JTAG debug port that is exposed on the drive’s circuit board. Due to the wide...
PT-2024-23746
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper Finite State Machines FSMs in the hardware logic of some IntelR Processors. This may allow a privileged user to potentially enable denial of service...
Welcome to the party, pal!
Welcome to the final Threat Source newsletter of 2024. Watching "Die Hard" during the Christmas season has become a widely recognized tradition for many, despite ongoing debates about its classification as a Christmas movie. I know it isn't everyone's cup of tea. Whether you like the movie or not...
CVE-2024-47040 Use After Free in the android.hardware.radio.sap.ISap/slot2 service
There is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-47039 OOB Read in the android.hardware.boot.IBootControl/default service
In isSlotMarkedSuccessful of BootControl.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
The vulnerability of Intel NUC Software Studio Service’s software for the Windows operating system, related to improper resource initialization, allows attackers to disclose sensitive information.
The vulnerability of Intel NUC Software Studio Service’s software for the Windows operating system is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to disclose protected information...
Fedora 41 : bpftool / kernel / kernel-headers (2024-9fb3492511)
The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-9fb3492511 advisory. The 6.12.4 stable kernel rebase contains new features, additional hardware support and a number of important fixes across the tree. Tenable has extracted the...
Fedora 40 : bpftool / kernel / kernel-headers (2024-811cffc4ef)
The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-811cffc4ef advisory. The 6.12.4 stable kernel rebase contains new features, additional hardware support and a number of important fixes across the tree. Tenable has extracted the...
Security Bulletin: Vulnerability in linux-firmware (CVE-2023-31346) affects Power HMC.
Summary The linux-firmware library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-31346 DESCRIPTION: AMD SEV-SNP Firmware could allow a local authenticated attacker to obtain sensitive information, caused by the failure...