Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of the SRCPORT field in the ocelotifhsetbasic function in the net:mscc module, which could...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of the SRCPORT field in the ocelotifhsetbasic function in the net:mscc module, which could...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of the SRCPORT field in the ocelotifhsetbasic function in the net:mscc module, which could...

The vulnerability of the systemport component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the systemport component in the Linux operating system’s kernel is related to incorrect blocking in the functions tdmaportwritedescaddr and bcmsysportopen. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of RDMA/cma components of Linux operating system cores, allowing a hacker to trigger a service failure

The vulnerability of RDMA/cma components in Linux operating systems is related to memory leaks in the cmavalidateport function. Exploiting this vulnerability can allow an attacker to cause a service failure...

UBUNTU-CVE-2024-53149

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connectorstatus UCSI connector's indices start from 1 up to 3, PMICGLINKMAXPORTS. Correct the condition in the pmicglinkucsiconnectorstatus callback, fixing Type-C orientation reporting...

PT-2025-3576

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc3-syzkaller-00399-g9197b73fd7bb Description A slab-use-after-free issue has been identified in the Linux kernel, specifically in the RDMA/rxe component. This problem occurs when the event ib cache event...

CVE-2024-7726

There exists an unauthenticated accessible JTAG port on the Kioxia PM6, PM7 and CM6 devices - On the Kioxia CM6, PM6 and PM7 disk drives it was discovered that the 2 main CPU cores of the SoC can be accessed via an open JTAG debug port that is exposed on the drive’s circuit board. Due to the wide...

CVE-2024-7726

There exists an unauthenticated accessible JTAG port on the Kioxia PM6, PM7 and CM6 devices - On the Kioxia CM6, PM6 and PM7 disk drives it was discovered that the 2 main CPU cores of the SoC can be accessed via an open JTAG debug port that is exposed on the drive’s circuit board. Due to the wide...

CVE-2024-7726 Arbitrary Code execution via exposed JTAG port in Kioxia CM6, PM6, PM7

There exists an unauthenticated accessible JTAG port on the Kioxia PM6, PM7 and CM6 devices - On the Kioxia CM6, PM6 and PM7 disk drives it was discovered that the 2 main CPU cores of the SoC can be accessed via an open JTAG debug port that is exposed on the drive’s circuit board. Due to the wide...

CVE-2024-7726

The CVE-2024-7726 entry describes an unauthenticated, externally accessible JTAG port on Kioxia CM6, PM6 and PM7 SSDs. The JTAG port is exposed on the drive’s circuit board, allowing a physically proximate attacker to access the two main CPU cores’ firmware/memory, execute arbitrary code, alter f...

CVE-2024-7726 Arbitrary Code execution via exposed JTAG port in Kioxia CM6, PM6, PM7

There exists an unauthenticated accessible JTAG port on the Kioxia PM6, PM7 and CM6 devices - On the Kioxia CM6, PM6 and PM7 disk drives it was discovered that the 2 main CPU cores of the SoC can be accessed via an open JTAG debug port that is exposed on the drive’s circuit board. Due to the wide...

The vulnerability of the Router Port Forward component of the operating system used to manage Synology Router Manager allows attackers to perform cross-site scripting attacks.

The vulnerability of the Router Port Forward component of the Synology Router Manager operating system relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

PT-2024-38535 · Kioxia · Kioxia Pm6 +2

Name of the Vulnerable Software and Affected Versions: Kioxia PM6, PM7, and CM6 devices affected versions not specified Description: The issue concerns an unauthenticated accessible JTAG port on the Kioxia PM6, PM7, and CM6 devices. This port is exposed on the drive's circuit board and can be...

CVE-2021-32589

A Use After Free CWE-416 vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12 and below and FortiAnalyzer version 7.0.0, version 6.4.5 an...

PT-2025-3597

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the RDMA/siw component in the Linux kernel. It was resolved by removing the direct link to net device and instead relying on the management of net device by associated...

Medium: avahi

Issue Overview: avahi: Avahi Wide-Area DNS Uses Constant Source Port CVE-2024-52615 avahi: Avahi Wide-Area DNS Predictable Transaction IDs CVE-2024-52616 Affected Packages: avahi Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference...

The vulnerability of the formSetPortMapping function in the Tenda G3 wireless access point’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetPortMapping function in the Tenda G3 wireless access point’s microprogramming software lies in the fact that the operation exceeds the buffer boundaries in memory when processing parameters such as pPortMapIndex, pLanIP, pProtocl, and pWanid. Exploiting this...

Topaz Signature Pad as COM Port Device Disappears after Logoff

Topaz Signature will disappear after users log off on a kiosk workstation. The environment contained: Citrix Virtual Apps and Desktops version 2203 CUx Desktop of Server VDA, any supported OS Citrix Workspace App 2402 CUx Windows 10/Windows 11...

PT-2025-8761

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Linux kernel's UDP socket handling. When a UDP socket changes its local address while receiving datagrams, there is a period during which a lookup operatio...