Linux Distros Unpatched Vulnerability : CVE-2024-40908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Set run context for rawtp testrun callback syzbot reported crash when rawtp program...

Linux Distros Unpatched Vulnerability : CVE-2022-49433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/hfi1: Prevent use of lock before it is initialized If there is a failure during probe of hfi1 before the sdmamaplock is initialized, the call to...

Linux Distros Unpatched Vulnerability : CVE-2024-27397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: use timestamp to check for set element timeout Add a timestamp field at...

Linux Distros Unpatched Vulnerability : CVE-2023-34457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to version 1.3.0, a malicious web server can re...

Linux Distros Unpatched Vulnerability : CVE-2021-47659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/plane: Move range check for formatcount earlier While the check for formatcount 64 in drmuniversalplaneinit shouldn't be hit it's a WARNON, in its current...

Linux Distros Unpatched Vulnerability : CVE-2022-48859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: marvell: prestera: Add missing ofnodeput in presteraswitchsetbasemacaddr This node pointer is returned by offindcompatiblenode with refcount incremented...

Linux Distros Unpatched Vulnerability : CVE-2024-42160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: check validation of fault attrs in f2fsbuildfaultattr - It missed to check validation of fault attrs in parseoptions, let's fix to add check condition in...

Linux Distros Unpatched Vulnerability : CVE-2024-46767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: phy: Fix missing ofnodeput for leds The call of ofgetchildbyname will cause refcount...

Linux Distros Unpatched Vulnerability : CVE-2024-38531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change...

Linux Distros Unpatched Vulnerability : CVE-2024-46844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - um: line: always fill errorout in setuponeline The pointer isn't initialized by callers, but I have encountered cases where it's still printed; initialize it in...

Linux Distros Unpatched Vulnerability : CVE-2024-27410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: nl80211: reject iftype change with mesh ID change It's currently possible to change the mesh ID when the interface isn't yet in mesh mode, at the same tim...

Linux Distros Unpatched Vulnerability : CVE-2020-25656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could u...

Linux Distros Unpatched Vulnerability : CVE-2024-39476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid5: fix deadlock that raid5d wait for itself to clear MDSBCHANGEPENDING Xiao reported that lvm2 test lvconvert-raid-takeover.sh can hang with small...

Linux Distros Unpatched Vulnerability : CVE-2021-47070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Fix another memory leak in error handling paths Memory allocated by...

Linux Distros Unpatched Vulnerability : CVE-2022-37866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When Apache Ivy downloads artifacts from a repository it stores them in the local file system based on a user-supplied pattern that may include placeholders for...

Linux Distros Unpatched Vulnerability : CVE-2022-34169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java cla...

Linux Distros Unpatched Vulnerability : CVE-2024-47663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: iio: frequency: ad9834: Validate frequency parameter value In ad9834writefrequency clkgetrate can return 0. In such case ad9834calcfreqreg call will le...

Linux Distros Unpatched Vulnerability : CVE-2024-36464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. Th...

Linux Distros Unpatched Vulnerability : CVE-2022-49635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/selftests: fix subtraction overflow bug On some machines holeend can be small enough to cause subtraction overflow. On the other side addr + 2...

Linux Distros Unpatched Vulnerability : CVE-2022-42856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS...