UBUNTU-CVE-2024-47749

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookupatid The lookupatid function can return NULL if the ATID is invalid or does not exist in the identifier table, which could lead to dereferencing a null pointer without a check in the...

AZL-50949 CVE-2024-47696 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:atkernel/workqueue.c:checkflushdependency In the commit aee2424246f9 "RDMA/iwcm: Fix a use-after-free related to destroying CM IDs", the function flushworkqueue is invoked to flush the work queue iwcmwq. Bu...

DEBIAN-CVE-2024-47695

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Reset cid to connum - 1 to stay in bounds In the function initconns, after the createcon and createcm for loop if something fails. In the cleanup for loop after the destroy tag, we access out of bound memory becaus...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference issue in the lookupatid function in the RDMA/cxgb4 subsystem...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a dependency checking issue in the RDMA/iwcm component during a flushworkqueue call...

PT-2024-7215

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 129.0.6668.100 Microsoft Edge versions affected versions not specified Description The issue is related to a type confusion error in the V8 JavaScript engine, which can be exploited by a remote attacker using a...

The vulnerability of the RDMA/siw component of the Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the RDMA/siw component of the Linux operating system is related to the assignment of NULL pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the RDMA/hns component of the Linux operating system allows for a malfunction to occur, leading to service failure.

The vulnerability of the RDMA/hns component of the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

Google Chrome Security Bypass Vulnerability (CNVD-2024-39738)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in versions of Google Chrome prior to 129.0.6668.70, which can be exploited by remote attackers to perform memory access via specially crafted Hypertext Markup Language pages...

SUSE CVE-2024-9123

Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. An integer overflow vulnerability exists in Google Chrome versions prior to 129.0.6668.70, which can be exploited by remote attackers to perform out-of-bounds memory writes via specially crafted HTML pages...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to corrupt dynamic memory.

Vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers. Exploiting this vulnerability can allow a remote attacker to corrupt dynamic memory through a specially crafted HTML page...

AZL-49288 CVE-2024-46686 affecting package kernel for versions less than 6.6.51.1-1

In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid dereferencing rdata=NULL in smb2newreadreq This happens when called from SMB2read while using rdma and reaching the rdmareadwritethreshold...

RDMA/iwcm: Fix a use-after-free related to destroying CM IDs

...

The vulnerability of the RDMA/cma component of the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the RDMA/cma component of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

kernel: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the rxecompqueuepkt function of the rxe component. A race condition can occur where a socket buffer skb is prematurely freed while still being referenced, leading to a segmentation fault. This...

SUSE CVE-2024-43872

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix soft lockup under heavy CEQE load CEQEs are handled in interrupt handler currently. This may cause the CPU core staying in interrupt context too long and lead to soft lockup under heavy load. Handle CEQEs in BH...

DEBIAN-CVE-2022-48925

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.srcaddr outside state checks If the state is not idle then resolvepreparesrc should immediately fail and no change to global state should happen. However, it unconditionally overwrites the srcad...

The vulnerability of the phy->pending_skb() function in the st21nfca component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the phy-pendingskb function in the st21nfca component of the Linux operating system’s kernel is related to a memory leak that occurs during device checking and remote memory allocation via the phy-pendingskb function. Exploiting this vulnerability can allow an attacker to cau...

SUSE CVE-2024-42285

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iwconnreqhandler associates a new struct rdmaidprivate connid with an existing struct iwcmid cmid as follows: connid-cmid.iw = cmid; cmid-context = connid; cmid-cmhandl...