11995 matches found
CVE-2024-49946
In the Linux kernel, the following vulnerability has been resolved: ppp: do not assume bh is held in pppchannelbridgeinput Networking receive path is usually handled from BH handler. However, some protocols need to acquire the socket lock, and packets might be stored in the socket backlog is the...
CVE-2024-50039
CVE-2024-50039 (Linux kernel) : The vulnerability resides in the net/sched subsystem where TCA_STAB is accepted only for the root qdisc. The bug arises because most qdiscs track backlog assuming invariance of qdisc_pkt_len(skb) between enqueue() and dequeue(), but a syzbot-triggered combination o...
CVE-2024-49939 wifi: rtw89: avoid to add interface to list twice when SER
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid to add interface to list twice when SER If SER L2 occurs during the WoWLAN resume flow, the add interface flow is triggered by ieee80211reconfig. However, due to rtw89wowresume return failure, it will cause the...
CVE-2024-49934 fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
In the Linux kernel, the following vulnerability has been resolved: fs/inode: Prevent dumpmapping accessing invalid dentry.dname.name It's observed that a crash occurs during hot-remove a memory device, in which user is accessing the hugetlb. See calltrace as following: ------------ cut here...
CVE-2024-49866 tracing/timerlat: Fix a race during cpuhp processing
In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Fix a race during cpuhp processing There is another found exception that the "timerlat/1" thread was scheduled on CPU0, and lead to timer corruption finally: ODEBUG: init active active state 0 object:...
MAL-2024-10223 Malicious code in zen-ruby-linter (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10169 Malicious code in test-package-sample (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10150 Malicious code in raimbowxyz (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10132 Malicious code in python-consul2-hh (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10041 Malicious code in marshall (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9964 Malicious code in cryptoaitools (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9946 Malicious code in atomicdecoderss (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9928 Malicious code in zwirir (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9927 Malicious code in zonal-indigo-tahr (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9924 Malicious code in zierber (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9922 Malicious code in yammering-red-constrictor (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9913 Malicious code in wbtvd-screeners-web (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9891 Malicious code in uncertain-orange-snake (npm)
--- -= Per source details. Do not edit below this line.=-...