SUSE CVE-2024-53053

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix another deadlock during RTC update If ufshcdrtcwork calls ufshcdrpmputsync and the pm's usagecount is 0, we will enter the runtime suspend callback. However, the runtime suspend callback will wait to flush...

SUSE CVE-2024-53067

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Start the RTC update work later The RTC update work involves runtime resuming the UFS controller. Hence, only start the RTC update work after runtime power management in the UFS driver has been fully initialized...

SUSE CVE-2024-53070

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: fix fault at system suspend if device was already runtime suspended If the device was already runtime suspended then during system suspend we cannot access the device registers else it will crash. Also we cannot access...

Local File Inclusion (LFI)

symfony/runtime is vulnerable to Local File Inclusion LFI. The vulnerability is due to improper handling of the argv values in non-SAPI PHP runtimes, where the registerargvargc directive is set to on, allowing attackers to craft query strings that modify the environment or debug settings used by...

DEBIAN-CVE-2024-53070

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: fix fault at system suspend if device was already runtime suspended If the device was already runtime suspended then during system suspend we cannot access the device registers else it will crash. Also we cannot access...

DEBIAN-CVE-2024-53067

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Start the RTC update work later The RTC update work involves runtime resuming the UFS controller. Hence, only start the RTC update work after runtime power management in the UFS driver has been fully initialized...

UBUNTU-CVE-2024-53070

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: fix fault at system suspend if device was already runtime suspended If the device was already runtime suspended then during system suspend we cannot access the device registers else it will crash. Also we cannot access...

UBUNTU-CVE-2024-53067

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Start the RTC update work later The RTC update work involves runtime resuming the UFS controller. Hence, only start the RTC update work after runtime power management in the UFS driver has been fully initialized...

UBUNTU-CVE-2024-53053

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix another deadlock during RTC update If ufshcdrtcwork calls ufshcdrpmputsync and the pm's usagecount is 0, we will enter the runtime suspend callback. However, the runtime suspend callback will wait to flush...

CVE-2024-53070

CVE-2024-53070 affects the Linux kernel USB subsystem (dwc3). The issue occurs when a device is already runtime suspended and the system suspends, leading to a crash if device registers are accessed. The fix reorders suspend sequence by moving the dwc3_enable_susphy() call to the top of the suspe...

CVE-2024-53070 usb: dwc3: fix fault at system suspend if device was already runtime suspended

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: fix fault at system suspend if device was already runtime suspended If the device was already runtime suspended then during system suspend we cannot access the device registers else it will crash. Also we cannot access...

CVE-2024-53067

The CVE-2024-53067 entry relates to the Linux kernel SCSI/UFS subsystem. A fix prevents RTC update work from starting before runtime PM in the UFS driver is fully initialized, addressing a crash (Oops) observed in the ufshcd_rtc_work path. The core issue is a race/ordering problem that could trig...

CVE-2024-53067 scsi: ufs: core: Start the RTC update work later

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Start the RTC update work later The RTC update work involves runtime resuming the UFS controller. Hence, only start the RTC update work after runtime power management in the UFS driver has been fully initialized...

CVE-2024-53067 scsi: ufs: core: Start the RTC update work later

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Start the RTC update work later The RTC update work involves runtime resuming the UFS controller. Hence, only start the RTC update work after runtime power management in the UFS driver has been fully initialized...

CVE-2024-53053 scsi: ufs: core: Fix another deadlock during RTC update

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix another deadlock during RTC update If ufshcdrtcwork calls ufshcdrpmputsync and the pm's usagecount is 0, we will enter the runtime suspend callback. However, the runtime suspend callback will wait to flush...

.NET 9.0 bug fix and enhancement update

An update is available for dotnet9.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a fast, lightweight and modular platform for creating cross platfor...

.NET 6.0 bug fix and enhancement update

An update is available for dotnet6.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

Malicious code in mona-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis deb04a09ed185756e155e8000e2ba858d8995b9ced7536cd15b25012b100d046 The OpenSSF Package Analysis project identified 'mona-runtime' @ 99.11.18 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10841 Malicious code in mona-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis deb04a09ed185756e155e8000e2ba858d8995b9ced7536cd15b25012b100d046 The OpenSSF Package Analysis project identified 'mona-runtime' @ 99.11.18 npm as malicious. It is considered malicious because: - The package...

SUSE CVE-2024-50266

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: videocc-sm8350: use HWCTRLTRIGGER for vcodec GDSCs A recent change in the venus driver results in a stuck clock on the Lenovo ThinkPad X13s, for example, when streaming video in firefox: videoccmvs0clk status stuck at...