SUSE CVE-2024-49984

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Prevent out of bounds access in performance query extensions Check that the number of perfmons userspace is passing in the copy and reset extensions is not greater than the internal kernel storage where the ids will be...

Allowing execution user provided regexp, lead to Redos

Description librechat have a functionality of uploading chatgpt chat log. when processing the log, following code is executed: const pattern = new RegExp \u3010$citation.metadata.extra.citedmessageidx\u2020.+?\u3011, 'g', ; const replacement = $citation.metadata.title; messageText =...

Fedora: Security Advisory (FEDORA-2024-8b08786765)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the hns3_pmu_validate_event_group() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function hns3pmuvalidateeventgroup in the drivers/perf/hisilicon/hns3pmu.c file of the Linux operating system’s kernel is related to memory writing beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Virtuozzo Hybrid Infrastructure 6.2 Update 1 Hotfix 2 (6.2.1-66)

This update provides stability fixes. Vulnerability id: VSTOR-93320 Cannot update a cluster due to little free space on the boot partition. Vulnerability id: VSTOR-93349 During a cluster update, VM live migration may fail with the libvirt error. Vulnerability id: VSTOR-93365 Fixed detaching CD-RO...

SUSE: Security Advisory (SUSE-SU-2024:3747-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-45526

An issue was discovered in OPC Foundation OPCFoundation/UA-.NETStandard through 1.5.374.78. A remote attacker can send requests with invalid credentials and cause the server performance to degrade gradually...

CVE-2024-50031

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop the active perfmon before being destroyed When running kmscube with one or more performance monitors enabled via GALLIUMHUD, the following kernel panic can occur: 55.008324 Unable to handle kernel paging request at...

CVE-2024-45526

An issue was discovered in OPC Foundation OPCFoundation/UA-.NETStandard through 1.5.374.78. A remote attacker can send requests with invalid credentials and cause the server performance to degrade gradually...

This Week in Spring - October 22nd, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring. I write this to you in an Uber speeding down the autobahn near Frankfurt, Germany. What a time to be alive! At the rate this driver's going, I won't have much time to write this before we've arrived, so let's dive right into...

CVE-2024-45526

The CVE affects OPC Foundation OPCFoundation/UA-.NETStandard up to version 1.5.374.78. A remote attacker can send requests with invalid credentials, causing gradual server performance degradation due to improper request handling. A fix is available: upgrade OPCFoundation.NetStandard.Opc.Ua.Core (...

CVE-2024-45526

An issue was discovered in OPC Foundation OPCFoundation/UA-.NETStandard through 1.5.374.78. A remote attacker can send requests with invalid credentials and cause the server performance to degrade gradually...

OPCFoundation UA-.NETStandard 安全漏洞

OPCFoundation UA-.NETStandard is a library of the OPCFoundation Foundation. A security vulnerability exists in OPCFoundation UA-.NETStandard version 1.5.374.78 and earlier, which originates from a remote attacker who can send requests with invalid credentials, gradually leading to a degradation o...

CVE-2024-49984

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Prevent out of bounds access in performance query extensions Check that the number of perfmons userspace is passing in the copy and reset extensions is not greater than the internal kernel storage where the ids will be...

AZL-51551 CVE-2024-50031 affecting package kernel for versions less than 6.6.57.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop the active perfmon before being destroyed When running kmscube with one or more performance monitors enabled via GALLIUMHUD, the following kernel panic can occur: 55.008324 Unable to handle kernel paging request at...

CVE-2024-50031

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop the active perfmon before being destroyed When running kmscube with one or more performance monitors enabled via GALLIUMHUD, the following kernel panic can occur: 55.008324 Unable to handle kernel paging request at...

CVE-2024-50031 drm/v3d: Stop the active perfmon before being destroyed

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop the active perfmon before being destroyed When running kmscube with one or more performance monitors enabled via GALLIUMHUD, the following kernel panic can occur: 55.008324 Unable to handle kernel paging request at...

CVE-2024-50031 drm/v3d: Stop the active perfmon before being destroyed

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop the active perfmon before being destroyed When running kmscube with one or more performance monitors enabled via GALLIUMHUD, the following kernel panic can occur: 55.008324 Unable to handle kernel paging request at...

CVE-2024-50031 drm/v3d: Stop the active perfmon before being destroyed

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop the active perfmon before being destroyed When running kmscube with one or more performance monitors enabled via GALLIUMHUD, the following kernel panic can occur: 55.008324 Unable to handle kernel paging request at...

CVE-2024-50031

CVE-2024-50031 affects the Linux kernel DRM/V3D perfmon handling. When kmscube runs with GALLIUM_HUD and perfmon monitors are destroyed, v3d->active_perfmon may be left as a stale pointer, causing a kernel panic on subsequent runs as the driver attempts to stop a non-existent perfmon. The prov...