CVE-2022-49753

CVE-2022-49753: In the Linux kernel, dmaengine_dma_chan_get() had a double increment of channel client_count for public channels, causing resources to be freed late or not at all. The issue manifested as a refcount underflow/use-after-free in kernel logs and was observed during repeated module lo...

Dell PowerEdge FX2 and Dell PowerEdge VRTX Buffer Overflow Vulnerability

The Dell PowerEdge FX2 and Dell PowerEdge VRTX are both products of Dell, Inc.The Dell PowerEdge FX2 is a 2U hybrid rackmount computing platform.The Dell PowerEdge VRTX is a mini server with a built-in storage system.... The Dell PowerEdge FX2 and Dell PowerEdge VRTX have a buffer overflow...

The vulnerability of monitoring and management tools for Dell Chassis Management Controllers (CMC) for Dell PowerEdge FX2 and Dell Chassis Management Controllers (CMC) for PowerEdge VRTX lies in the fact that operations are executed outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of monitoring and management tools for Dell Chassis Management Controllers CMC for Dell PowerEdge FX2 and Dell Chassis Management Controllers CMC for PowerEdge VRTX lies in the fact that operations are executed outside the buffer in memory. Exploiting this vulnerability allows a...

CVE-2025-26336

Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, versions prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware for Dell PowerEdge VRTX versions prior to 3.41.200.202209300499, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated...

CVE-2025-26336

Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, versions prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware for Dell PowerEdge VRTX versions prior to 3.41.200.202209300499, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated...

CVE-2025-26336

Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, versions prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware for Dell PowerEdge VRTX versions prior to 3.41.200.202209300499, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated...

Dell PowerEdge FX2和Dell PowerEdge VRTX 安全漏洞

The Dell PowerEdge FX2 and Dell PowerEdge VRTX are both products of Dell, Inc.The Dell PowerEdge FX2 is a 2U hybrid rackmount computing platform.The Dell PowerEdge VRTX is a mini server with a built-in storage system.... The Dell PowerEdge FX2 and Dell PowerEdge VRTX have a buffer overflow...

Linux Distros Unpatched Vulnerability : CVE-2024-56656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix aggregation ID mask to prevent oops on 5760X chips The 5760X P7 chip's HW GRO/LR...

Linux Distros Unpatched Vulnerability : CVE-2024-36919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: bnx2fc: Remove spinlockbh while releasing resources after upload The session resources are used by FW and driver when session is offloaded, once session i...

CVE-2022-49584

In the Linux kernel, the following vulnerability has been resolved: ixgbe: Add locking to prevent panic when setting sriovnumvfs to zero It is possible to disable VFs while the PF driver is processing requests from the VF driver. This can result in a panic. BUG: unable to handle kernel paging...

CVE-2022-49584 ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero

In the Linux kernel, the following vulnerability has been resolved: ixgbe: Add locking to prevent panic when setting sriovnumvfs to zero It is possible to disable VFs while the PF driver is processing requests from the VF driver. This can result in a panic. BUG: unable to handle kernel paging...

CVE-2022-49155 scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Suppress a kernel complaint in qlacreateqpair 12.323788 BUG: using smpprocessorid in preemptible 00000000 code: systemd-udevd/1020 12.332297 caller is qla2xxxcreateqpair+0x32a/0x5d0 qla2xxx 12.338417 CPU: 7 PID: 10...

The vulnerability of the BIOS microprogramming software of Dell PowerEdge servers allows a hacker to gain unauthorized access to protected information.

The vulnerability of Dell PowerEdge server BIOS microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

CVE-2024-50072 x86/bugs: Use code segment selector for VERW operand

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Use code segment selector for VERW operand Robert Gill reported below GP in 32-bit mode when dosemu software was executing vm86 system call: general protection fault: 0000 1 PREEMPT SMP CPU: 4 PID: 4610 Comm: dosemu.bin...

CVE-2024-50072

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Use code segment selector for VERW operand Robert Gill reported below GP in 32-bit mode when dosemu software was executing vm86 system call: general protection fault: 0000 1 PREEMPT SMP CPU: 4 PID: 4610 Comm: dosemu.bin...

CVE-2022-49003

A vulnerability was found in the Linux kernel's NVMe driver, involving a race condition in multipath configurations with RDMA connections. The nvmenshead list that tracks NVMe namespaces is not properly synchronized with the SRCU lock in the nvmempathrevalidatepaths function. This can cause a...

CVE-2022-49003 nvme: fix SRCU protection of nvme_ns_head list

In the Linux kernel, the following vulnerability has been resolved: nvme: fix SRCU protection of nvmenshead list Walking the nvmenshead siblings list is protected by the head's srcu in nvmensheadsubmitbio but not nvmempathrevalidatepaths. Removing namespaces from the list also fails to synchroniz...

CVE-2022-49003 nvme: fix SRCU protection of nvme_ns_head list

In the Linux kernel, the following vulnerability has been resolved: nvme: fix SRCU protection of nvmenshead list Walking the nvmenshead siblings list is protected by the head's srcu in nvmensheadsubmitbio but not nvmempathrevalidatepaths. Removing namespaces from the list also fails to synchroniz...

CVE-2024-45017 net/mlx5: Fix IPsec RoCE MPV trace call

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec RoCE MPV trace call Prevent the call trace below from happening, by not allowing IPsec creation over a slave, if master device doesn't support IPsec. WARNING: CPU: 44 PID: 16136 at kernel/locking/rwsem.c:240...

The vulnerability of the BIOS microprogramming software in Dell PowerEdge servers allows a hacker to disclose protected information.

The vulnerability of Dell PowerEdge server BIOS microprogramming software relates to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...