AZL-54200 CVE-2024-53135 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Bury Intel PT virtualization guest/host mode behind CONFIGBROKEN Hide KVM's ptmode module param behind CONFIGBROKEN, i.e. disable support for virtualizing Intel PT via guest/host mode unless BROKEN=y. There are myriad...

UBUNTU-CVE-2024-53135

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Bury Intel PT virtualization guest/host mode behind CONFIGBROKEN Hide KVM's ptmode module param behind CONFIGBROKEN, i.e. disable support for virtualizing Intel PT via guest/host mode unless BROKEN=y. There are myriad...

CVE-2024-53135

CVE-2024-53135 affects the Linux kernel’s KVM/VMX functionality. The issuebury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN disables pt_mode unless BROKEN=y and exposes numerous bugs that can affect both guest stability and host health. Reported problems include: guest fatalitie...

CVE-2024-53135 KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Bury Intel PT virtualization guest/host mode behind CONFIGBROKEN Hide KVM's ptmode module param behind CONFIGBROKEN, i.e. disable support for virtualizing Intel PT via guest/host mode unless BROKEN=y. There are myriad...

CVE-2024-53135 KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Bury Intel PT virtualization guest/host mode behind CONFIGBROKEN Hide KVM's ptmode module param behind CONFIGBROKEN, i.e. disable support for virtualizing Intel PT via guest/host mode unless BROKEN=y. There are myriad...

CVE-2024-53135: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Bury Intel PT virtualization guest/host mode behind CONFIGBROKEN Hide KVM's ptmode module param behind CONFIGBROKEN, i.e. disable support for virtualizing Intel PT via guest/host mode unless BROKEN=y. There are myriad...

PT-2024-10590 · Unknown · Libmpeg2Dec

Name of the Vulnerable Software and Affected Versions: libmpeg2dec affected versions not specified Description: The issue is related to a possible out-of-bounds OOB read in the impeg2d bit stream flush function of libmpeg2dec due to a missing bounds check. This could lead to a remote Denial of...

PT-2024-8792 · Vmware · Vmware Aria Operations

Name of the Vulnerable Software and Affected Versions: VMware Aria Operations affected versions not specified Description: The issue is related to a stored cross-site scripting vulnerability in VMware Aria Operations. This vulnerability can be exploited by a malicious actor with editing access to...

PT-2024-36856

Content removed...

PT-2024-13082

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description A CVE alert was withdrawn, and an official rejection notification was issued. The CVE ID was either rejected or withdrawn by its CVE Numbering Authority. Recommendations At the...

DEBIAN-CVE-2024-50173

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tickctxcleanup The group variable can't be used to retrieve ptdev in our second loop, because it points to the previously iterated listhead, not a valid group. Get the ptdev...

PT-2024-35600

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.65 Description The issue concerns the KVM implementation in the Linux kernel, specifically with Intel PT virtualization in guest/host mode. There are multiple bugs in the implementation, some of which can be...

PT-2024-41877

Modify the spec file not to skip the %check section during the build...

PT-2024-33832

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an integer overflow in BLKSECDISCARD, which can cause a near infinite loop inside blkdev issue secure erase. This occurs when a specific ioctl call is made with...

Malicious code in pt-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce4c091ee99f34bd672788b16dab6db4b2d09b61bf4a01116168d840902586c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in pt-validate

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-9245 Malicious code in pt-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce4c091ee99f34bd672788b16dab6db4b2d09b61bf4a01116168d840902586c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-6844 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This could allow an attacker to affect the system. Recommendations: At the moment, there i...

PT-2024-6728 · Microsoft · Office Visio

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: The issue is related to a lack of warning about dangerous actions in the Microsoft Office Visio graphic editor, which is part of Microsoft Office and Microsoft 365 Apps for...

PT-2024-30891 · Nicejob · Nicejob

Name of the Vulnerable Software and Affected Versions: NiceJob versions prior to 3.6.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS on web pages created by NiceJob...