10962 matches found
kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
in linux kernel, shift undefined behavior occurs in bnxtqpliballocinithwq with hwqattr-auxdepth of nonzero and hwqattr-auxstride of zero...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure of the nvme-pci module to properly handle queue state when resetting and disabling NVMe devices,...
PT-2025-3593
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to an overflow inside virtnet rq alloc in the virtio-net component. This occurs when a frag just got a page and the sysctl net.core.high order alloc disable value is 1,...
PT-2024-35614
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel crash can occur while shutting down a fabric controller due to a race condition between the fabric controller admin queue destroy code path and the hw/hctx queue dispatcher call...
PT-2024-35550
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to a possible exec queue leak in the exec IOCTL. The issue occurs when the exec IOCTL returns on input errors without...
PT-2024-34122
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition occurs when enqueueing packets in the dynamic queue limits dql after the DMA engine starts, potentially causing a kernel crash. This issue is triggered when running an...
kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment
A vulnerability was found in the Linux kernel's nvme driver. A lack of proper checks can lead to a race condition during the destruction of a queue pair when a controller is being established. This issue can lead to system instability or crashes...
kernel: blk-mq: fix IO hang from sbitmap wakeup race
A possible IO hang from sbitmap wakeup race was found in the Linux kernel. This may lead to compromised Availability...
kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment
A vulnerability was found in the Linux kernel's nvme driver. A lack of proper checks can lead to a race condition during the destruction of a queue pair when a controller is being established. This issue can lead to system instability or crashes...
OpenSSL Elliptic Curve Code Execution
The vulnerabilities of the functions ECGROUPnewcurveGF2m, ECGROUPnewfromparams, and BNGF2m in the Elliptic Curve API of the OpenSSL cryptographic library are exploited due to a buffer overflow in the queue. Exploiting these vulnerabilities could allow a remote attacker to execute arbitrary code...
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to OpenSSL and libexpat
Summary OpenSSL and Libexpat used by IBM MQ Operator and Queue Manager container images are vulnerable to denial of service due to improper memory allocation, and providing weaker than expected security which might allow an attacker to execute arbitrary code on the system. This bulletin identifie...
CVE-2024-50081
In the Linux kernel, the following vulnerability has been resolved: blk-mq: setup queue -tagset before initializing hctx Commit 7b815817aa58 "blk-mq: add helper for checking if one CPU is mapped to specified hctx" needs to check queue mapping via tag set in hctx's cpuhp handler. However, q-tagset...
SUSE CVE-2024-50079
In the Linux kernel, the following vulnerability has been resolved: iouring/sqpoll: ensure task state is TASKRUNNING when running taskwork When the sqpoll is exiting and cancels pending work items, it may need to run taskwork. If this happens from within iouringcancelgeneric, then it may be under...
SUSE CVE-2024-50081
In the Linux kernel, the following vulnerability has been resolved: blk-mq: setup queue -tagset before initializing hctx Commit 7b815817aa58 "blk-mq: add helper for checking if one CPU is mapped to specified hctx" needs to check queue mapping via tag set in hctx's cpuhp handler. However, q-tagset...
SUSE CVE-2024-50082
In the Linux kernel, the following vulnerability has been resolved: blk-rq-qos: fix crash on rqqoswait vs. rqqoswakefunction race We're seeing crashes from rqqoswakefunction that look like this: BUG: unable to handle page fault for address: ffffafe180a40084 PF: supervisor write access in kernel...
UBUNTU-CVE-2024-50081
In the Linux kernel, the following vulnerability has been resolved: blk-mq: setup queue -tagset before initializing hctx Commit 7b815817aa58 "blk-mq: add helper for checking if one CPU is mapped to specified hctx" needs to check queue mapping via tag set in hctx's cpuhp handler. However, q-tagset...
CVE-2024-50081
CVE-2024-50081 is confirmed in connected advisory: the Linux kernel vulnerability in blk-mq was due to race where q->tag_set may not be initialized when the cpuhp handler runs, triggering an oops. The MiracleLinux AXSA advisory (kernel 5.14.0-570.12.1.el9_6) explicitly lists CVE-2024-50081 and...
CVE-2024-50081
In the Linux kernel, the following vulnerability has been resolved: blk-mq: setup queue -tagset before initializing hctx Commit 7b815817aa58 "blk-mq: add helper for checking if one CPU is mapped to specified hctx" needs to check queue mapping via tag set in hctx's cpuhp handler. However, q-tagset...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly setting the tagset of queue before initializing hctx, resulting in kernel oops...
MAL-2024-10248 Malicious code in meso-event-queue (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d79c3ff4f9e728af1f55032123d3c43887f3d0e183e4944c0d9a489c6259759 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...