SUSE CVE-2024-40998

In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimitstate-lock access in ext4fillsuper In the following concurrency we will access the uninitialized rs-lock: ext4fillsuper ext4registersysfs // sysfs registered msgratelimitintervalms // Other...

AZL-67767 CVE-2024-40998 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimitstate-lock access in ext4fillsuper In the following concurrency we will access the uninitialized rs-lock: ext4fillsuper ext4registersysfs // sysfs registered msgratelimitintervalms // Other...

DEBIAN-CVE-2024-40998

In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimitstate-lock access in ext4fillsuper In the following concurrency we will access the uninitialized rs-lock: ext4fillsuper ext4registersysfs // sysfs registered msgratelimitintervalms // Other...

UBUNTU-CVE-2024-40998

In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimitstate-lock access in ext4fillsuper In the following concurrency we will access the uninitialized rs-lock: ext4fillsuper ext4registersysfs // sysfs registered msgratelimitintervalms // Other...

CVE-2024-40998 ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()

In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimitstate-lock access in ext4fillsuper In the following concurrency we will access the uninitialized rs-lock: ext4fillsuper ext4registersysfs // sysfs registered msgratelimitintervalms // Other...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly initialize the lock on the ratelimitstate during initialization of the ext4 filesystem...

AZL-42201 CVE-2024-27013 affecting package kernel for versions less than 5.15.158.1-1

In the Linux kernel, the following vulnerability has been resolved: tun: limit printing rate when illegal packet received by tun dev vhostworker will call tun call backs to receive packets. If too many illegal packets arrives, tundoread will keep dumping packet contents. When console is enabled, ...

DEBIAN-CVE-2024-27013

In the Linux kernel, the following vulnerability has been resolved: tun: limit printing rate when illegal packet received by tun dev vhostworker will call tun call backs to receive packets. If too many illegal packets arrives, tundoread will keep dumping packet contents. When console is enabled, ...

CVE-2024-26668

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlimit: reject configurations that cause integer overflow Reject bogus configs where internal token counter wraps around. This only occurs with very very large requests, such as 17gbyte/s. Its better to reject this...

CVE-2024-26668 netfilter: nft_limit: reject configurations that cause integer overflow

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlimit: reject configurations that cause integer overflow Reject bogus configs where internal token counter wraps around. This only occurs with very very large requests, such as 17gbyte/s. Its better to reject this...

CVE-2024-26668

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlimit: reject configurations that cause integer overflow Reject bogus configs where internal token counter wraps around. This only occurs with very very large requests, such as 17gbyte/s. Its better to reject this...

BIT-ENVOY-2023-27488 Envoy gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received.

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, escalation of privileges is possible when failuremodeallow: true is configured for extauthz filter. For affected components that are used for loggin...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: spire-server-fips, temporal-fips, hubble-ui, pulumi-language-dotnet, vexctl, kubernetes-dashboard-fips, amass, ip-masq-agent, up, eksctl, kubeflow-pipelines, rclone, fulcio, crossplane-provider-aws-kinesis, terraform-docs, terraform-provider-azurerm, kiam,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: sonobuoy, spire-server, osv-scanner, newrelic-nri-kube-events, step-ca, crossplane-provider-aws-ec2, temporal, cluster-proportional-autoscaler, crossplane-provider-aws-sqs, litefs, kubernetes-csi-livenessprobe, secrets-store-csi-driver-provider-gcp, kustomize,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: sonobuoy, bom, aws-flb-cloudwatch, nri-nginx, nri-couchbase, temporal, cluster-proportional-autoscaler, newrelic-prometheus-configurator, nri-kafka, litefs, kubernetes-csi-livenessprobe, secrets-store-csi-driver-provider-gcp, controller-gen, kustomize,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: k3s, docker-compose, kubernetes-csi-external-resizer, kine, kubevela, envoy-ratelimit, buildkitd, volume-modifier-for-k8s, temporal, metrics-server, kubescape, temporal-server, kubernetes, cri-tools...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubeflow-fips, plutono-fips, kiam, slsa-verifier, spark-operator, terraform-provider-sendgrid, vault-csi-provider, kubernetes-csi-livenessprobe-fips, scorecard, metrics-server-fips, smarter-device-manager-fips, prometheus-adapter-fips, dgraph, aactl, kube-oidc-proxy,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: cortex, src, kubevela, dgraph, buildkitd, k3d, kubeflow, slsa-verifier, terraform-provider-sendgrid, spark-operator, up, kubescape, aactl, scorecard...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: ko, bom, kubernetes-csi-livenessprobe, secrets-store-csi-driver-provider-gcp, flux-source-controller, pulumi-language-java, frp, dgraph, pulumi-language-yaml, slsa-verifier, secrets-store-csi-driver, spark-operator, grpcurl, nri-prometheus, hey,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: ko, bom, kubernetes-csi-livenessprobe, secrets-store-csi-driver-provider-gcp, flux-source-controller, pulumi-language-java, frp, dgraph, pulumi-language-yaml, slsa-verifier, secrets-store-csi-driver, spark-operator, grpcurl, nri-prometheus, hey,...