CVE-2024-45008

In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting too large allocation at inputmtinitslots, for numslots is supplied from userspace using ioctlUIDEVCREATE. Since nobody knows possible max slots, this patch chose 1024...

DEBIAN-CVE-2024-44976

In the Linux kernel, the following vulnerability has been resolved: ata: patamacio: Fix DMA table overflow Kolbjørn and Jonáš reported that their 32-bit PowerMacs were crashing in pata-macio since commit 09fe2bfa6b83 "ata: patamacio: Fix maxsegmentsize with PAGESIZE == 64K". For example: kernel B...

CVE-2024-45008 Input: MT - limit max slots

In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting too large allocation at inputmtinitslots, for numslots is supplied from userspace using ioctlUIDEVCREATE. Since nobody knows possible max slots, this patch chose 1024...

GHSA-G76F-GJFX-4RPR Vertx gRPC server does not limit the maximum message size

In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload Maven GAV: io.vertx:vertx-grpc-server and io.vertx:vertx-grpc-client. This is fixed in the 4.5.10 version. Note this does not affect the Vert.x gRPC server based grpc-java and Netty...

CLSA-2024-1725443754 bind: Fix of CVE-2024-1737

CVE-2024-1737: add environment variable DNSRDATASETMAXRECORDS, DNSRBTDBMAXRTYPES to override hardcoded limits DDNSRDATASETMAXRECORDS and DDNSRBTDBMAXRTYPES - Fix man8 pages for dnssec utils...

DEBIAN-CVE-2024-43890

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix overflow in getfreeelt "tracingmap-nextelt" in getfreeelt is at risk of overflowing. Once it overflows, new elements can still be inserted into the tracingmap even though the maximum number of elements maxelts has be...

AZL-48620 CVE-2024-43890 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix overflow in getfreeelt "tracingmap-nextelt" in getfreeelt is at risk of overflowing. Once it overflows, new elements can still be inserted into the tracingmap even though the maximum number of elements maxelts has be...

GO-2022-1089 OctoRPKI crashes when max iterations is reached in github.com/cloudflare/cfrpki

OctoRPKI crashes when max iterations is reached in github.com/cloudflare/cfrpki...

GO-2022-0306 Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy...

The vulnerability of the dm_table_create() function in the drivers/md/dm-table.c kernel module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dmtablecreate function in the drivers/md/dm-table.c file of the Linux kernel relates to an attempt to allocate more than INTMAX bytes and cause a crash due to the lack of checking for struct dmioctl.targetcount. Exploiting this vulnerability could allow an attacker to...

PT-2024-31383

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the igb driver in the Linux kernel, which does not handle large MAX SKB FRAGS values properly. Setting MAX SKB FRAG to 45 causes payload corruption on TX. The roo...

PT-2024-31342 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the ata: pata macio component. The issue was caused by a commit that increased max segment size to 64KB, which le...

AZL-62726 CVE-2024-42317 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: avoid PMD-size page cache if needed xarray can't support arbitrary page cache size. the largest and supported page cache size is defined as MAXPAGECACHEORDER by commit 099d90642a71 "mm/filemap: make MAXPAGECACHEORD...

mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

...

CVE-2024-24580

Improper conditions check in some IntelR Data Center GPU Max Series 1100 and 1550 products may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-24580

Improper conditions check in some IntelR Data Center GPU Max Series 1100 and 1550 products may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-24580: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper conditions check in some IntelR Data Center GPU Max Series 1100 and 1550 products may allow a privileged user to potentially enable denial of service via local access...

OESA-2024-1962 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix deadlock during failing recovery Commit 0b9902c1fcc5 "s390/qeth: fix deadlock during recovery" removed taking disciplinemutex inside qethdoreset,...

undertow: LearningPushHandler can lead to remote memory DoS attacks

A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the...

undertow: LearningPushHandler can lead to remote memory DoS attacks

A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the...