OESA-2024-1393 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: Fix memory leak in dvbmediadevicefree dvbmediadevicefree is leaking memory. Free dvbdev-adapter-conn before setting it to NULL, as documented in...

Can ships be hacked?

Photo: David Adams, MV Dali and the Francis Scott Key Bridge collapse - 240326-A-SE916-6662, A layer has been added showing a character and a speech bubble, CC0 1.0 TL;DR Ships can be hacked Was the MV Dali hacked? Practically impossible Polarised views from uninformed commentators do not help...

CVE-2024-30613

The CVE-2024-30613 relates to Tenda AC15 v15.03.05.18, where a stack overflow vulnerability exists in the time parameter used by the setSmartPowerManagement function. Affected device: Tenda AC15 router. Root cause: improper validation/handling of the time input in setSmartPowerManagement leads to...

SUSE CVE-2023-52498

In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Fix possible deadlocks in core system-wide PM code It is reported that in low-memory situations the system-wide resume core code deadlocks, because asyncscheduledev executes its argument function synchronously if it...

PT-2024-21610

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a mutual dependency between mt8183-mfgcfg and genpd during the probing stage, leading to a deadlock. The deadlock occurs in the call stack involving genpd lock an...

CVE-2024-22006

OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device...

CVE-2024-22006

OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device...

CVE-2024-22006

OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device...

CVE-2024-22006

OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device...

DEBIAN-CVE-2023-52498

In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Fix possible deadlocks in core system-wide PM code It is reported that in low-memory situations the system-wide resume core code deadlocks, because asyncscheduledev executes its argument function synchronously if it...

UBUNTU-CVE-2023-52498

In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Fix possible deadlocks in core system-wide PM code It is reported that in low-memory situations the system-wide resume core code deadlocks, because asyncscheduledev executes its argument function synchronously if it...

PT-2024-19148 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue concerns an out-of-bounds OOB read in a plugin, which can lead to memory disclosure within the power management subsystem of a device. Recommendations: At the moment, there is...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a deadlock problem in the core system-wide PM code...

Moderate: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

SUSE CVE-2023-52477

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

CVE-2023-52498 PM: sleep: Fix possible deadlocks in core system-wide PM code

In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Fix possible deadlocks in core system-wide PM code It is reported that in low-memory situations the system-wide resume core code deadlocks, because asyncscheduledev executes its argument function synchronously if it...

UBUNTU-CVE-2023-52485

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wake DMCUB before sending a command Why We can hang in place trying to send commands when the DMCUB isn't powered on. How For functions that execute within a DC context or DC lock we can wrap the direct calls to...

DEBIAN-CVE-2023-52477

In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...

SUSE CVE-2020-36779

In the Linux kernel, the following vulnerability has been resolved: i2c: stm32f7: fix reference leak when pmruntimegetsync fails The PM reference count is not expected to be incremented on return in these stm32f7i2cxx serious functions. However, pmruntimegetsync will increment the PM reference...

SUSE CVE-2020-36781

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix reference leak when pmruntimegetsync fails In i2cimxxfer and i2cimxremove, the pm reference count is not expected to be incremented on return. However, pmruntimegetsync will increment pm reference count even failed...