CVE-2024-50212

The CVE-2024-50212 vulnerability in the Linux kernel concerns the lib/alloc_tag_module_unload path, where nf_nat module unload may trigger a warning because kfree_rcu operations are still pending when unload checks run. The issue arises from nf_nat’s module exit calling kfree_rcu on addresses tha...

netfilter: nft_socket: fix sk refcount leaks

...

Updated thunderbird packages fix security vulnerabilities

Permission leak via embed or object elements. CVE-2024-10458 Use-after-free in layout with accessibility. CVE-2024-10459 Confusing display of origin for external protocol handler prompt. CVE-2024-10460 XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response...

PYSEC-2024-305

wasm3 139076a contains memory leaks in Readutf8...

CVE-2024-27529

wasm3 139076a contains memory leaks in Readutf8...

CVE-2024-27529

wasm3 139076a contains memory leaks in Readutf8...

PYSEC-2024-305

wasm3 139076a contains memory leaks in Readutf8...

RLSA-2024:8729 Moderate: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser CVE-2024-10464 firefox: thunderbird: XSS due to...

OESA-2024-2342 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: A permission leak could have occurred from a trusted site to an untrusted site via embed or object elements. This vulnerability affects Firefox 132, Firefox ESR 128.4,...

SUSE CVE-2024-50166

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix refcount handling of fman-related devices In macprobe there are multiple calls to offinddevicebynode, fmanbind and fmanportbind which takes references to ofdev-dev. Not all references taken by these calls are releas...

CVE-2024-27529

wasm3 139076a contains memory leaks in Readutf8...

PT-2024-21935 · Wasm3 · Wasm3

Name of the Vulnerable Software and Affected Versions: wasm3 version 139076a Description: The issue concerns memory leaks in the Read utf8 function. This function is part of the wasm3 software, specifically at commit 139076a. No information is provided about the estimated number of potentially...

RockyLinux 8 : thunderbird (RLSA-2024:8790)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:8790 advisory. firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser CVE-2024-10464 firefox: thunderbird: X...

CVE-2024-50166

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix refcount handling of fman-related devices In macprobe there are multiple calls to offinddevicebynode, fmanbind and fmanportbind which takes references to ofdev-dev. Not all references taken by these calls are releas...

DEBIAN-CVE-2024-50166

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix refcount handling of fman-related devices In macprobe there are multiple calls to offinddevicebynode, fmanbind and fmanportbind which takes references to ofdev-dev. Not all references taken by these calls are releas...

CVE-2024-50166 fsl/fman: Fix refcount handling of fman-related devices

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix refcount handling of fman-related devices In macprobe there are multiple calls to offinddevicebynode, fmanbind and fmanportbind which takes references to ofdev-dev. Not all references taken by these calls are releas...

CVE-2024-50166

CVE-2024-50166 affects the Linux kernel. The issue is a refcount handling bug in fman-related devices (fsl/fman) where multiple references taken in mac_probe() by of_find_device_by_node(), fman_bind(), and fman_port_bind() were not fully released on error paths or removal, causing reference leaks...

CVE-2024-50166 fsl/fman: Fix refcount handling of fman-related devices

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix refcount handling of fman-related devices In macprobe there are multiple calls to offinddevicebynode, fmanbind and fmanportbind which takes references to ofdev-dev. Not all references taken by these calls are releas...

kernel: net/mlx5e: Fix netif state handling

A vulnerability was found in the Linux kernel within the net/mlx5e component, where improper handling of network interface states could lead to a NULL pointer dereference or resource leaks if network registration fails during initialization. This condition could cause system instability, as...

kernel: net/mlx5e: Fix netif state handling

A vulnerability was found in the Linux kernel within the net/mlx5e component, where improper handling of network interface states could lead to a NULL pointer dereference or resource leaks if network registration fails during initialization. This condition could cause system instability, as...