PT-2021-24922

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.191 Description: The issue allows only the init netns to set the default TCP congestion algorithm to a restricted algorithm. The actual impact and attack plausibility have not yet been proven...

PT-2021-24696

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. This is an automated ID intended to aid in the discovery of potential security...

PT-2021-24932

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.191 Description: The issue is related to the crypto: qat module in the Linux Kernel, where ADF STATUS PF RUNNING should be set after adf dev init. The actual impact and attack plausibility have not yet bee...

PT-2021-28926

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.191 Description The issue is related to the crypto: qat module in the Linux Kernel, where ADF STATUS PF RUNNING should be set after adf dev init. The actual impact and attack plausibility have not yet been...

PT-2021-28806

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-24763

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to the crypto: qat module in the Linux Kernel, where ADF STATUS PF RUNNING should be set after adf dev init. The actual impact and attack plausibility have not yet been...

PT-2021-28882

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.119 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-24812

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2021-28916

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.191 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted algorithm. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2021-28690

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. This is an automated ID intended to aid in the discovery of potential security...

PT-2021-24888

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.119 Description: The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2024-11152 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the nvme-loop component. The issue occurs when creating a loop controller in the nvme loop create ctrl...

cloud-init bug fix and enhancement update

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Bug Fixes and Enhancements: AliyunRHEL8.4cloud-init cloud-init service failed to...

cloud-init bug fix and enhancement update

An update is available for cloud-init. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cloud-init packages provide a set of init scripts for cloud instances...

kernel: NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs in drivers/media/usb/gspca/ov519.c

A flaw was found in the way the ov519 driver in the Linux kernel handled certain types of USB descriptors. This flaw allows an attacker with the ability to induce the error conditions to crash the system...

PT-2024-11333 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to two use-after-free bugs in the ibmasm init one function. In this function, ibmasm init remote input dev is called, which allocates mouse dev and keybd dev using...

PT-2024-11199 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential memory leak in the fec enet init function has been resolved. If the memory allocated for cbd base fails, it should free the memory allocated for the queues to prevent a...

CVE-2020-23369

In YzmCMS 5.6, XSS was discovered in member/membercontent/init.html via the SRC attribute of an IFRAME element because of using UEditor 1.4.3.3...

Yzmcms 跨站脚本漏洞

Yzmcms is an open source CMS Content Management System. A cross-site scripting vulnerability exists in YzmCMS version 5.6. The vulnerability stems from the program using UEditor 1.4.3.3, so the vulnerability can be exploited through the SRC attribute of the IFRAME element in...

CVE-2021-31417

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...