CVE-2024-38603

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Actually use devmaddactionorreset pciallocirqvectors allocates an irq vector. When devmaddaction fails, the irq vector is not freed, which leads to a memory leak. Replace the devmaddaction with...

CVE-2024-38618

CVE-2024-38618 affects the Linux kernel: ALSA timer start tick time had no lower bound, enabling very small values (e.g., 1 tick at 1ns) that could trigger an unexpected RCU stall by repeatedly queuing expire updates. The connected docs describe the fix as a patch adding a sanity check for the ti...

CVE-2024-38617 kunit/fortify: Fix mismatched kvalloc()/vfree() usage

In the Linux kernel, the following vulnerability has been resolved: kunit/fortify: Fix mismatched kvalloc/vfree usage The kv family of tests were accidentally freeing with vfree instead of kvfree. Use kvfree instead...

CVE-2024-38601 ring-buffer: Fix a race between readers and resize checks

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix a race between readers and resize checks The reader code in rbgetreaderpage swaps a new reader page into the ring buffer by doing cmpxchg on old-list.prev-next to point it to the new page. Following that, if the...

CVE-2024-38584 net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe()

In the Linux kernel, the following vulnerability has been resolved: net: ti: icssgprueth: Fix NULL pointer dereference in pruethprobe In the pruethprobe function, if one of the calls to emacphyconnect fails due to ofphyconnect returning NULL, then the subsequent call to phyattachedinfo will...

CVE-2024-38560 scsi: bfa: Ensure the copied buf is NUL terminated

In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is...

CVE-2024-38557 net/mlx5: Reload only IB representors upon lag disable/enable

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Reload only IB representors upon lag disable/enable On lag disable, the bond IB device along with all of its representors are destroyed, and then the slaves' representors get reloaded. In case the slave IB representor...

CVE-2024-38541 of: module: add buffer overflow check in of_modalias()

In the Linux kernel, the following vulnerability has been resolved: of: module: add buffer overflow check in ofmodalias In ofmodalias, if the buffer happens to be too small even for the 1st snprintf call, the len parameter will become negative and str parameter if not NULL initially will point...

OPENSUSE-SU-2024:12902-1 librdkafka-devel-2.1.0-1.1 on GA media

These are all security issues fixed in the librdkafka-devel-2.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11787-1 libsphinxclient-0_0_1-2.2.11-6.1 on GA media

These are all security issues fixed in the libsphinxclient-001-2.2.11-6.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-30104: Improper Link Resolution Before File Access

Microsoft Office Remote Code Execution Vulnerability...

CVE-2024-30076: Improper Link Resolution Before File Access

Windows Container Manager Service Elevation of Privilege Vulnerability...

CVE-2024-35253: Improper Link Resolution Before File Access

Microsoft Azure File Sync Elevation of Privilege Vulnerability...

CVE-2024-35254: Improper Link Resolution Before File Access

Azure Monitor Agent Elevation of Privilege Vulnerability...

CWA - Multimonitor -Session resolution on external displays is not in sync

Issue seen with multiple external monitors via docking stations. When session is spanned across all the screens, the resolutions on either side are not in sync and there is a disjointed black section in the middle. Also, the mouse control seems slightly off. As a workaround use the desktop is...

CVE-2024-30093: Improper Link Resolution Before File Access

Windows Storage Elevation of Privilege Vulnerability...

CVE-2024-35235: Improper Link Resolution Before File Access

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the...

CVE-2024-30065: Improper Link Resolution Before File Access

Windows Themes Denial of Service Vulnerability...

CVE-2024-36305: Improper Link Resolution Before File Access

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2024-36969 drm/amd/display: Fix division by zero in setup_dsc_config

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix division by zero in setupdscconfig When sliceheight is 0, the division by sliceheight in the calculation of the number of slices will cause a division by zero driver crash. This leaves the kernel in a state...