python: Unbounded memory buffering in SelectorSocketTransport.writelines()

A flaw was found in Python. In certain configurations, the asyncio.SelectorSocketTransport.writelines method fails to signal the protocol to clear the write buffer when it approaches capacity. Because of this, protocols would not periodically drain the write buffer, potentially leading to a denia...

smb: client: fix OOBs when building SMB2_IOCTL request

...

Image Access Scan2Net 安全漏洞

Image Access Scan2Net is a scanning software from Image Access Germany. A security vulnerability exists in Image Access Scan2Net versions 7.40 and earlier, 7.42 and earlier, and 7.42B and earlier, which originates from an authenticated attacker who can perform SQL injection by accessing the...

kernel: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race

In the Linux kernel, the following vulnerability has been resolved: blk-rq-qos: fix crash on rqqoswait vs. rqqoswakefunction race We're seeing crashes from rqqoswakefunction that look like this: BUG: unable to handle page fault for address: ffffafe180a40084 PF: supervisor write access in kernel...

GO-2024-3315 CVE-2024-46455 in github.com/Unstructured-IO/unstructured

CVE-2024-46455 in github.com/Unstructured-IO/unstructured...

PT-2025-3634

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns an information leak in the triggered buffer of the Linux kernel's iio light bh1745 component. The local struct 'scan' is used to send data to user space from a trigger...

Malicious code in openpass-sample-sites-piano-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49f0304f3f60bf5d349bb9e70fe90a204d906a2213b87d66e41afe3b0c1ddc8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11214 Malicious code in openpass-sample-sites-piano-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49f0304f3f60bf5d349bb9e70fe90a204d906a2213b87d66e41afe3b0c1ddc8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

I-O Data Device UD-LT1和UD-LT1/EX 安全漏洞

I-O Data Device UD-LT1 and I-O Data Device UD-LT1/EX are both products of I-O Data Device Japan.I-O Data Device UD-LT1 is a hybrid LTE router.I-O Data Device UD-LT1/EX is a hybrid LTE router , which is the successor to the IO DATA UD-LT1 router. A security vulnerability exists in I-O DATA DEVICE...

I-O Data Device UD-LT1和I-O Data Device UD-LT1/EX 安全漏洞

I-O Data Device UD-LT1 and I-O Data Device UD-LT1/EX are both products of I-O Data Device Japan.I-O Data Device UD-LT1 is a hybrid LTE router.I-O Data Device UD-LT1/EX is a hybrid The I-O Data Device UD-LT1/EX is a hybrid LTE router that is the successor to the IO DATA UD-LT1 router. A security...

PT-2025-3582

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the scsi: mpi3mr driver. The driver exposes a sysfs interface to enable or disable PHYs in a controller/expander setup...

UBUNTU-CVE-2024-53112

In the Linux kernel, the following vulnerability has been resolved: ocfs2: uncache inode which has failed entering the group Syzbot has reported the following BUG: kernel BUG at fs/ocfs2/uptodate.c:509! ... Call Trace: ? diebody+0x5f/0xb0 ? die+0x9e/0xc0 ? dotrap+0x15a/0x3a0 ?...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an inode in the ocfs2 component not being removed from the cache when joining a group fails, resulting in a...

PT-2024-35611

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6 Description A use-after-free vulnerability has been identified in the Linux kernel, specifically in the block, bfq module. The issue arises when the bfq limit depth function dereferences bfqq from bic without...

PT-2024-36891

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel has been resolved, related to the io uring/tctx component. The issue arises when the xa store function fails to allocate memory, causing the -head to be...

kernel: blk-mq: fix IO hang from sbitmap wakeup race

A possible IO hang from sbitmap wakeup race was found in the Linux kernel. This may lead to compromised Availability...

RHEL 8 : kernel (RHSA-2024:10262)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10262 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: improper input validation may...

Keycloak proxy header handling Denial-of-Service (DoS) vulnerability

Keycloak versions 26 and earlier are vulnerable to a denial-of-service DoS attack through improper handling of proxy headers. When Keycloak is configured to accept incoming proxy headers, it may accept non-IP values, such as obfuscated identifiers, without proper validation. This can lead to cost...

CVE-2024-9666: Inconsistent Interpretation of HTTP Requests

A vulnerability was found in the Keycloak Server. The Keycloak Server is vulnerable to a denial of service DoS attack due to improper handling of proxy headers. When Keycloak is configured to accept incoming proxy headers, it may accept non-IP values, such as obfuscated identifiers, without prope...

CVE-2024-53071

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Be stricter about IO mapping flags The current panthordevicemmapio implementation has two issues: 1. For mapping DRMPANTHORUSERFLUSHIDMMIOOFFSET, panthordevicemmapio bails if VMWRITE is set, but does not clear...