kernel: serial: sprd: Fix DMA buffer leak issue

A flaw was found in the serial: sprd driver in the Linux kernel where a DMA buffer allocated during driver probe was not released when probe returned failure. This results in a memory leak that, under repeated probe failure conditions, could cause elevated kernel memory usage and potential resour...

kernel: drivers: serial: jsm: fix some leaks in probe

In the Linux kernel, the following vulnerability has been resolved: drivers: serial: jsm: fix some leaks in probe This error path needs to unwind instead of just returning directly...

kernel: USB: core: Fix deadlock in usb_deauthorize_interface()

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usbdeauthorizeinterface The Linux kernel CVE team has assigned CVE-2024-26934 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050123-CVE-2024-26934-e2fc@gregkh/T...

kernel: serial: amba-pl011: avoid SBSA UART accessing DMACR register

A flaw was found in the Linux kernel’s AMBA-PL011 serial driver used on ARM Server Base System Architecture platforms. The existing stoprx operation shared between generic SBSA UARTs and AMBA-PL011 UARTs invoked pl011dmarxstop, which attempts to access the DMA Control Register DMACR. SBSA generic...

Microsoft Windows USB Video Class driver 缓冲区错误漏洞

Microsoft Windows USB Video Class driver is a driver for webcams or digital camcorders from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows USB Video Class driver. An attacker could exploit the vulnerability to elevate privileges. The following products and...

Microsoft Windows USB Video Class driver 缓冲区错误漏洞

Microsoft Windows USB Video Class driver is a driver for webcams or digital camcorders from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows USB Video Class driver. An attacker could exploit the vulnerability to elevate privileges. The following products and...

PT-2024-25420

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description An exploit is possible where an actor with physical access can manipulate SPI flash without being detected. There is no information provided about the...

Privileged escalation via crafted use of portcfg command

A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a privileged escalation via crafted use of the portcfg command. This specific exploitation is only possible on IP Extensio...

Microsoft Windows USB Video Class driver 缓冲区错误漏洞

Microsoft Windows USB Video Class driver is a driver for webcams or digital camcorders from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows USB Video Class driver. An attacker could exploit the vulnerability to elevate privileges. The following products and edition...

PT-2024-10205

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an off-by-one error in the connector status of the glink component in the Linux kernel's USB-C connector status. The UCSI connector's indices start from 1 up to 3...

UBUNTU-CVE-2024-50238

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data from the qcom-qmp-usb driver, but mistakenly also...

CVE-2024-50224 spi: spi-fsl-dspi: Fix crash when not using GPIO chip select

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix crash when not using GPIO chip select Add check for the return value of spigetcsgpiod to avoid passing a NULL pointer to gpioddirectionoutput, preventing a crash when GPIO chip select is not used. Fix below...

serial: protect uart_port_dtr_rts() in uart_shutdown() too

...

Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change

...

spi: nxp-fspi: fix the KASAN report out-of-bounds bug

...

USB: usbtmc: prevent kernel-usb-infoleak

...

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0357-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0357-1 advisory. Chromium 130.0.6723.116 boo1232843 - CVE-2024-10826: Use after free in Family Experiences - CVE-2024-10827: Use after free in Serial Tenable has...

kernel-rt security update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2019-20462

An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device comes with a serial interface at the board level. By attaching to this serial interface and rebooting the device, a large amount of information is disclosed. This includes the view password and the password of the Wi-Fi acce...