kernel: ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()

A vulnerability was found in the Linux kernel's ipmetricsconvert function, where improper handling of user input can potentially leak kernel memory via side channels. This issue is caused by the use of @type, a user-controlled input, which is an array within this function. If a CPU speculatively...

kernel: RDMA/core: Fix ib block iterator counter overflow

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix ib block iterator counter overflow When registering a new DMA MR after selecting the best aligned page size for it, we iterate over the given sglist to split each entry to smaller, aligned to the selected page size...

kernel: RDMA/rxe: Fix error unwind in rxe_create_qp()

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix error unwind in rxecreateqp In the function rxecreateqp, rxeqpfrominit is called to initialize qp, internally things like the spin locks are not setup until rxeqpinitreq. If an error occures before this point then t...

kernel: x86/mm: Randomize per-cpu entry area

A possible unauthorized memory access flaw was found in the Linux kernel cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. This issue could allow a local user to gain access to some important data with expected locatio...

kernel: NULL pointer dereference due to missing kalloc() return value check in shtp_cl_get_dma_send_buf()

A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub ISH driver. This issue could allow a local user to crash the system...

kernel: Linux kernel: Memory leak in RDMA/irdma subsystem leads to Denial of Service

A flaw was found in the Linux kernel's RDMA/irdma subsystem. When the irdma module is unloaded, certain memory objects PBLEs are not properly released, leading to a memory leak. A local attacker could repeatedly trigger this condition, causing system memory to be exhausted and resulting in a Deni...

NULL Pointer Dereference

libjasper.so is vulnerable to NULL Pointer Dereference. The vulnerability is due to jp2decode function in jp2dec.c as there is no validation for the index obtained through the chantocmptlut array before it is used to access and set component types. An attacker can exploit this via specially craft...

CVE-2023-24852

Memory Corruption in Core due to secure memory access by user while loading modem image...

Memory corruption

Memory Corruption in Core due to secure memory access by user while loading modem image...

CVE-2023-24852

CVE-2023-24852 describes memory corruption in the Core component when a user performs secure memory access during modem image loading. The vulnerability is local and impacts confidentiality, integrity, and availability (per CVSS metrics with LOCAL access, LOW attack complexity, NONE user interact...

PT-2023-28542 · Arm · Arm 5Th Gen Gpu Architecture Kernel Driver +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory. Recommendations: At the moment, there is no information about...

Rocky Linux 8 : php:7.4 (RLSA-2021:4213)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4213 advisory. - In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, pharparsezipfile could...

Fedora 39 : firecracker / virtiofsd (2023-8e6ae98f81)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-8e6ae98f81 advisory. Rebuild dependent packages for vm-memory v0.12.2 to address CVE-2023-41051 / RUSTSEC-2023-0056. - https://vulners.com/cve/CVE-2023-41051 -...

Fedora 39 : chromium (2023-d79ff22c5b)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d79ff22c5b advisory. update to 116.0.5845.179. Fixes following security issues: CVE-2023-4427 CVE-2023-4428 CVE-2023-4429 CVE-2023-4430 CVE-2023-4431 CVE-2023-4572...

Rocky Linux 9 : xorg-x11-server (RLSA-2022:8221)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:8221 advisory. - A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the...

Rocky Linux 8 : php:7.4 (RLSA-2022:1935)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1935 advisory. - In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process...

Fedora 39 : glibc (2023-63e5a77522)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-63e5a77522 advisory. Security fix for CVE-2023-4911, CVE-2023-4806, and CVE-2023-4527. CVE-2023-4911: If a tunable of the form NAME=NAME=VAL is passed in the environment...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a user performing a secure memory access while loading a modem image that results in core memory corruption...

PT-2023-26670

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description A local non-privileged user can perform improper GPU memory processing operations. If these operations are carefully prepared, they could potentially be used to gain access to already fre...

CVE-2023-3889: Improper Restriction of Operations within the Bounds of a Memory Buffer

A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory...