UBUNTU-CVE-2022-48674

In the Linux kernel, the following vulnerability has been resolved: erofs: fix pcluster use-after-free on UP platforms During stress testing with CONFIGSMP disabled, KASAN reports as below: ================================================================== BUG: KASAN: use-after-free in...

CVE-2024-1067

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. On Armv8.0 cores, there are certain combinations of the...

GHSA-CHFM-68VV-PVW5 XMLUnit for Java has Insecure Defaults when Processing XSLT Stylesheets

Impact When performing XSLT transformations XMLUnit for Java did not disable XSLT extension functions by default. Depending on the XSLT processor being used this could allow arbitrary code to be executed when XMLUnit is used to transform data with a stylesheet who's source can not be trusted. If...

DEBIAN-CVE-2024-26986

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix memory leak in createprocess failure Fix memory leak due to a leaked mmget reference on an error handling code path that is triggered when attempting to create KFD processes while a GPU reset is in progress...

kernel: scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id()

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use rawsmpprocessorid instead of smpprocessorid The following call trace was observed: localhost kernel: nvme nvme0: NVME-FC0: controller connect complete localhost kernel: BUG: using smpprocessorid in preemptible...

kernel: virtio_vdpa: build affinity masks conditionally

A flaw was found in the Linux kernel's virtio vDPA driver. When the number of device queues exceeds the number of CPUs, the createaffinitymasks function triggers a kernel warning in groupcpusevenly. This occurs because the affinity logic assumes CPUs are not fewer than queue groups, which doesn't...

CVE-2023-50434

emdnsresolveraw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns server. The impact could vary depending on the system...

CVE-2023-50434

emdnsresolveraw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns server. The impact could vary depending on the system...

CVE-2023-50434

The emdns DNS software, developed by Michael Santos, contains a stack-based buffer over-read vulnerability in versions through fbd1eef . The issue is located in the emdns_resolve_raw function within emdns.c, where the software calls strlen with an input that may lack a null terminator. A remote a...

io.quarkus.resteasy.reactive:resteasy-reactive-processor (1.11.7.final), io.quarkus.resteasy.reactive:resteasy-reactive-vertx (1.11.7.final) +10 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (1.11.7.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 1.11.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-processor...

io.quarkus.resteasy.reactive:resteasy-reactive-processor (1.13.4.final), io.quarkus.resteasy.reactive:resteasy-reactive-vertx (1.13.4.final) +10 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (1.13.4.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 1.13.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-processor...

io.quarkus.resteasy.reactive:resteasy-reactive-processor (1.13.0.cr1), io.quarkus.resteasy.reactive:resteasy-reactive-vertx (1.13.0.cr1) +10 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (1.13.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 1.13.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-processor...

io.quarkus.resteasy.reactive:resteasy-reactive-processor (1.13.0.final), io.quarkus.resteasy.reactive:resteasy-reactive-vertx (1.13.0.final) +10 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (1.13.0.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 1.13.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-processor...

io.quarkus.resteasy.reactive:resteasy-reactive-processor (1.13.1.final), io.quarkus.resteasy.reactive:resteasy-reactive-vertx (1.13.1.final) +10 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (1.13.1.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 1.13.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-processor...

io.quarkus.resteasy.reactive:resteasy-reactive-jackson (3.8.0.cr1), io.quarkus.resteasy.reactive:resteasy-reactive-jsonb (3.8.0.cr1) +58 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (3.8.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 3.8.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-jackson 3.8.0.cr...

io.quarkus.resteasy.reactive:resteasy-reactive-processor (2.0.3.final), io.quarkus.resteasy.reactive:resteasy-reactive-vertx (2.0.3.final) +13 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.0.3.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-processor...

com.ibm.research.kar:kar-runtime-quarkus (>=1.1.0, <=1.2.1), io.quarkus.resteasy.reactive:resteasy-reactive-processor (2.2.3.final) +17 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.2.3.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.2.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - com.ibm.research.kar:kar-runtime-quarkus =1.1.0, =1.2.1 -...

io.quarkus.resteasy.reactive:resteasy-reactive-jackson (2.6.1.final), io.quarkus.resteasy.reactive:resteasy-reactive-jsonb (2.6.1.final) +38 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.6.1.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.6.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-jackson...

io.quarkus.resteasy.reactive:resteasy-reactive-jackson (2.7.0.cr1), io.quarkus.resteasy.reactive:resteasy-reactive-jsonb (2.7.0.cr1) +42 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.7.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.7.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-jackson 2.7.0.cr...

io.quarkus.resteasy.reactive:resteasy-reactive-jackson (2.7.3.final), io.quarkus.resteasy.reactive:resteasy-reactive-jsonb (2.7.3.final) +51 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.7.3.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.7.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-jackson...