12094 matches found
CVE-2024-26796
A flaw was found in the Linux kernel in the ctrgetwidth function within the perf subsystem for legacy systems. The issue occurs due to the function not being properly defined, which can lead to potential security risks. Mitigation Mitigation for this issue is either not available or the currently...
CVE-2024-26796
In the Linux kernel, the following vulnerability has been resolved: drivers: perf: ctrgetwidth function for legacy is not defined With parameters CONFIGRISCVPMULEGACY=y and CONFIGRISCVPMUSBI=n linux kernel crashes when you try perf record: $ perf record ls 46.749286 Unable to handle kernel NULL...
CVE-2024-26796
The CVE-2024-26796 vulnerability affects the Linux kernel perf subsystem on RISCV with the PMU legacy path. The root cause is that the ctr_get_width function was not defined for the legacy configuration (CONFIG_RISCV_PMU_LEGACY=y, CONFIG_RISCV_PMU_SBI=n), causing a NULL pointer dereference in per...
CVE-2024-26796 drivers: perf: ctr_get_width function for legacy is not defined
In the Linux kernel, the following vulnerability has been resolved: drivers: perf: ctrgetwidth function for legacy is not defined With parameters CONFIGRISCVPMULEGACY=y and CONFIGRISCVPMUSBI=n linux kernel crashes when you try perf record: $ perf record ls 46.749286 Unable to handle kernel NULL...
CVE-2024-26796 drivers: perf: ctr_get_width function for legacy is not defined
In the Linux kernel, the following vulnerability has been resolved: drivers: perf: ctrgetwidth function for legacy is not defined With parameters CONFIGRISCVPMULEGACY=y and CONFIGRISCVPMUSBI=n linux kernel crashes when you try perf record: $ perf record ls 46.749286 Unable to handle kernel NULL...
CVE-2024-26763
In the Linux kernel, the following vulnerability has been resolved: dm-crypt: don't modify the data when using authenticated encryption It was said that authenticated encryption could produce invalid tag when the data that is being encrypted is modified 1. So, fix this problem by copying the data...
CVE-2024-26759
In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix race when skipping swapcache When skipping swapcache for SWPSYNCHRONOUSIO, if two or more threads swapin the same entry at the same time, they get different pages A, B. Before one thread T0 finishes the swapin and...
CVE-2024-26763
In the Linux kernel, the following vulnerability has been resolved: dm-crypt: don't modify the data when using authenticated encryption It was said that authenticated encryption could produce invalid tag when the data that is being encrypted is modified 1. So, fix this problem by copying the data...
CVE-2024-26759
In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix race when skipping swapcache When skipping swapcache for SWPSYNCHRONOUSIO, if two or more threads swapin the same entry at the same time, they get different pages A, B. Before one thread T0 finishes the swapin and...
CVE-2024-26759
In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix race when skipping swapcache When skipping swapcache for SWPSYNCHRONOUSIO, if two or more threads swapin the same entry at the same time, they get different pages A, B. Before one thread T0 finishes the swapin and...
CVE-2024-26759
The CVE-2024-26759 entry concerns a race in the Linux kernel mm/swap path when skipping the swapcache for SWP_SYNCHRONOUS_IO. If multiple threads swap in the same entry concurrently, they may end up installing different pages (A, B) and trigger an ABA-like scenario where the PTE appears unchanged...
CVE-2024-26759 mm/swap: fix race when skipping swapcache
In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix race when skipping swapcache When skipping swapcache for SWPSYNCHRONOUSIO, if two or more threads swapin the same entry at the same time, they get different pages A, B. Before one thread T0 finishes the swapin and...
CVE-2024-26759 mm/swap: fix race when skipping swapcache
In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix race when skipping swapcache When skipping swapcache for SWPSYNCHRONOUSIO, if two or more threads swapin the same entry at the same time, they get different pages A, B. Before one thread T0 finishes the swapin and...
CVE-2024-26686 fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
In the Linux kernel, the following vulnerability has been resolved: fs/proc: dotaskstat: use sig-statslock to gather the threads/children stats locktasksighand can trigger a hard lockup. If NRCPUS threads call dotaskstat at the same time and the process has NRTHREADS, it will spin with irqs...
SUSE-SU-2024:1106-1 Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2024-28085: Properly neutralize escape sequences in wall. bsc1221831 - Prevent error message if /var/lib/libuuid/clock.txt does not exist bsc1194642 - Fixed performance degradation bsc1207987...
Important: Red Hat Security Advisory: grafana-pcp security and bug fix update
An update for grafana-pcp is now available for Red Hat Enterprise Linux 8. 'Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size
A flaw was found in the Linux kernel's Performance Events system component. A condition can be triggered that allows data to be written past the end or before the beginning of the intended memory buffer. This may lead to a system crash, code execution, or local privilege escalation...
Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management Core Framework.
Summary Multiple vulnerabilities were addressed in IBM Application Performance Management 8.1.4.0 Core Framework IF26 patch. Vulnerability Details CVEID:CVE-2023-21930 DESCRIPTION: An unspecified vulnerability in Oracle Java SE, Oracle GraalVM Enterprise Edition related to the JSSE component coul...
