CVE-2024-35936 btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()

In the Linux kernel, the following vulnerability has been resolved: btrfs: handle chunk tree lookup error in btrfsrelocatesyschunks The unhandled case in btrfsrelocatesyschunks loop is a corruption, as it could be caused only by two impossible conditions: - at first the search key is set up to lo...

CVE-2024-35936

CVE-2024-35936. In the Linux kernel, the btrfs relocation code (btrfs_relocate_sys_chunks) contains an unhandled corruption case in its chunk-tree lookup loop. The issue arises from two theoretically impossible conditions: (1) an inexact search yields a key with offset -1 for a chunk-tree item, a...

DEBIAN-CVE-2024-35892

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix lockdep splat in qdisctreereducebacklog qdisctreereducebacklog is called with the qdisc lock held, not RTNL. We must use qdisclookuprcu instead of qdisclookup syzbot reported: WARNING: suspicious RCU usage...

UBUNTU-CVE-2024-35872

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix GUP-fast succeeding on secretmem folios folioissecretmem currently relies on secretmem folios being LRU folios, to save some cycles. However, folios might reside in a folio batch without the LRU flag set, or...

UBUNTU-CVE-2024-35913

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pick the version of SESSIONPROTECTIONNOTIF When we want to know whether we should look for the macid or the linkid in struct iwlmvmsessionprotnotif, we should look at the version of SESSIONPROTECTIONNOTIF. Thi...

DEBIAN-CVE-2023-52693

In the Linux kernel, the following vulnerability has been resolved: ACPI: video: check for error while searching for backlight device parent If acpigetparent called in acpivideodevregisterbacklight fails, for example, because acpiutacquiremutex fails inside acpigetparent, this can lead to incorre...

UBUNTU-CVE-2024-35843

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Use device rbtree in iopf reporting path The existing I/O page fault handler currently locates the PCI device by calling pcigetdomainbusandslot. This function searches the list of all PCI devices until the desired...

CVE-2024-35843

The CVE concerns the Linux kernel IOMMU VT-d path for I/O page fault reporting. The fix replaces pci_get_domain_bus_and_slot() with device_rbtree_find() to locate the target PCI device within the probed device rbtree, reducing search overhead. The I/O page fault is initiated by the device and cur...

BIT-GOLANG-2024-24788 Malformed DNS message can cause infinite loop in net

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

SUSE SLES12 Security Update : go1.22 (SUSE-SU-2024:1573-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1573-1 advisory. Update to go1.22.3: - CVE-2024-24787: cmd/go: arbitrary code execution during build on darwin bsc1224017 - CVE-2024-24788: net: hig...

CVE-2024-24788

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

AZL-40517 CVE-2024-24788 affecting package golang for versions less than 1.22.3

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

AZL-40471 CVE-2024-24788 affecting package golang for versions less than 1.22.3

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

AZL-40375 CVE-2024-24788 affecting package golang for versions less than 1.22.3-1

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

AZL-40480 CVE-2024-24788 affecting package golang for versions less than 1.22.3-1

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

UBUNTU-CVE-2024-24788

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

CVE-2024-24788

CVE-2024-24788: A malformed DNS message in response to a query can cause the Lookup functions to loop infinitely. Connected docs explicitly reference this issue under Go/Golang components (e.g., container-tools and related advisories) as causing an infinite loop in DNS handling. The initial descr...

CVE-2024-24788

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

CVE-2024-24788 Malformed DNS message can cause infinite loop in net

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...

CVE-2024-24788

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...