CVE-2024-40793

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. An app may be able to access user-sensitive data...

DEBIAN-CVE-2024-41042

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: prefer nftchainvalidate nftchainvalidate already performs loop detection because a cycle will result in a call stack overflow ctx-level = NFTJUMPSTACKSIZE. It also follows maps via -validate callback in...

MAL-2024-7846 Malicious code in dagster-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54576094f59a2d3e54d3be79e476c3b5cc7903ff5c0d5248784ab89ffa4e1dc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2022-48850

In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or system shutdown, a panic can be triggered while accessing the sysfs path because the device is already removed. 755.549084 mlx5core...

CVE-2022-48850

In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or system shutdown, a panic can be triggered while accessing the sysfs path because the device is already removed. 755.549084 mlx5core...

CVE-2022-48850

CVE-2022-48850 concerns the Linux kernel vulnerability in net-sysfs, where speed_show could panic when a netdevice is in the process of being shut down or already removed. The root cause described is a missing check for the netdevice’s presence, which could lead to a NULL pointer dereference in d...

CVE-2022-48850 net-sysfs: add check for netdevice being present to speed_show

In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or system shutdown, a panic can be triggered while accessing the sysfs path because the device is already removed. 755.549084 mlx5core...

SUSE CVE-2024-40952

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in ocfs2journaldirty bdev-bdsuper has been removed and commit 8887b94d9322 change the usage from bdev-bdsuper to bassocmap-host-isb. This introduces the following NULL pointer dereference in...

MAL-2024-7751 Malicious code in img-aws-s3-object-multipart-copy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64fdc2d1b94cc9bdb2bee2f06bd13d0be50208d8185a82a733718d2edcdcee70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2024-40941

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't read past the mfuart notifcation In case the firmware sends a notification that claims it has more data than it has, we will read past that was allocated for the notification. Remove the print of the...

CVE-2024-39498

In the Linux kernel, the following vulnerability has been resolved: drm/mst: Fix NULL pointer dereference at drmdpaddpayloadpart2 Why Commit: - commit 5aa1dfcdf0a4 "drm/mst: Refactor the flow for payload allocation/removement" accidently overwrite the commit - commit 54d217406afe "drm: use mgr-de...

CVE-2024-39509 HID: core: remove unnecessary WARN_ON() in implement()

In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARNON in implement Syzkaller hit a warning 1 in a call to implement when trying to write a value into a field of smaller size in an output report. Since implement already has a warn message printed...

MAL-2024-7715 Malicious code in komcay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad3ad3da1b41f64619c16ccbdcd725acffd6c557ba6029fe77287ddec8b6c886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7717 Malicious code in stylecshert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd9222f2e9e0e525a219159b5ce16c4ff17fe52d2b7e31e284a8114c681e24a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7712 Malicious code in kimakz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ca91a55f9ab5cf29a121c246b279342ce7156bb4ecd899f7d5e98f63161560c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7698 Malicious code in awokkdyaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b178774b0d18effcdaeaf3bedede81b5924827286ee63edc7d0c2bbb264557c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7452 Malicious code in jquerrty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbbb6561cfda33bd1bed8ca0fd91d40083a960ef29b5ec11aa587565ea3cbff9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7466 Malicious code in rgmedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be2aa20db2fb1090ab658d5da5b3494fc5f19c64a8552187d9c21a214179915f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7471 Malicious code in stylesfoxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44fcbd703b193a7709b5a1f3865b979ed9f727900f5d3068e0ed65cedf5b385e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7304 Malicious code in @zitterorg/numquam-aliquam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 806c81b326bd0ca1362259f495457807c5be7570acefcdfc7bdbfcc6d2b9ab9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...