kernel: mm/shmem: disable PMD-sized page cache if needed

A denial of service vulnerability was found in the Linux Kernel. In architectures such as ARM64 where the base page size is 64KB, a 512MB page cache could lead to a software crash...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a deadlock issue in the mm/shmem module due to the undoing of a previous data contention fix...

ocfs2 Privilege Escalation

The vulnerability of the ocfs2 component in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

@acronis-platform/ui-component-library (1.33.0), @intlify/core (>=10.0.0, <=10.0.4) +32 more potentially affected by CVE-2024-52810 via @intlify/shared (>=10.0.0, <=10.0.4)

@intlify/shared NPM version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves: CVE-2024-52810 Source advisory: GHSA-HJWQ-MJWJ-4X6C...

GHSA-HJWQ-MJWJ-4X6C @intlify/shared Prototype Pollution vulnerability

Vulnerability type: Prototype Pollution Affected Package: Product: @intlify/shared Version: 10.0.4 Vulnerability Locations: nodemodules/@intlify/shared/dist/shared.cjs:232:26 Description: The latest version of @intlify/shared 10.0.4 is vulnerable to Prototype Pollution through the entry functions...

@actindo/core-ui (>=0.0.17, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +146 more potentially affected by CVE-2024-52810 via @intlify/shared (>=9.7.0, <=9.14.1)

@intlify/shared NPM version =9.7.0, =0.0.17, =0.0.1, =0.0.1, =0.0.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =0.17.0, =0.17.0, =0.17.0, =0.18.1 and more Source cves: CVE-2024-52810 Source advisory: OSV:GHSA-HJWQ-MJWJ-4X6C...

@actindo/core-ui (>=0.0.17, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +146 more potentially affected by CVE-2024-52810 via @intlify/shared (>=9.7.0, <=9.14.1)

@intlify/shared NPM version =9.7.0, =0.0.17, =0.0.1, =0.0.1, =0.0.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =0.17.0, =0.17.0, =0.17.0, =0.18.1 and more Source cves: CVE-2024-52810 Source advisory: GHSA-HJWQ-MJWJ-4X6C...

@acronis-platform/ui-component-library (1.33.0), @intlify/core (>=10.0.0, <=10.0.4) +32 more potentially affected by CVE-2024-52810 via @intlify/shared (>=10.0.0, <=10.0.4)

@intlify/shared NPM version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves: CVE-2024-52810 Source advisory: OSV:GHSA-HJWQ-MJWJ-4X6C...

libreswan: Missing PreSharedKey for connection can cause crash

A flaw was found in Libreswan. This issue causes Libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret, and the connection cannot find a matching configured secret. When automatically added on startup using the auto= keyword,...

Model Manager Component Code Execution

The vulnerability of the Model Manager component in the integrated development environment designed for the design, modeling, and development of complex engineering systems, IBM Engineering Systems Design Rhapsody, is related to synchronization errors when using a shared resource “Race Situation”...

Victure RX1800 WiFi 6 security vulnerability

The Victure RX1800 WiFi 6 is a wireless router from Victure. A security vulnerability exists in the Victure RX1800 WiFi 6 that originates from an attacker being able to obtain the default Wi-Fi PSK value via the last 4 octets of the BSSID...

Qualcomm Chipsets security vulnerabilities

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from sequential allocation and access of entries in the SMEM partition, which may result in memory corruption if not managed properly...

Race Condition

Overview minio is a MinIO Python SDK for Amazon S3 Compatible Cloud Storage Affected versions of this package are vulnerable to Race Condition due to improper handling of shared resources in worker threads via the helpers.py function. An attacker can exploit this by initiating multiple asynchrono...

CVE-2024-52810

@intlify/shared is a shared library for the intlify project. The latest version of @intlify/shared 10.0.4 is vulnerable to Prototype Pollution through the entry functions lib.deepCopy. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the globa...

CVE-2024-52810 Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4

@intlify/shared is a shared library for the intlify project. The latest version of @intlify/shared 10.0.4 is vulnerable to Prototype Pollution through the entry functions lib.deepCopy. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the globa...

CVE-2024-52810

@intlify/shared is a shared library for the intlify project. The latest version of @intlify/shared 10.0.4 is vulnerable to Prototype Pollution through the entry functions lib.deepCopy. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the globa...

@actindo/core-ui (>=0.0.17, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +146 more potentially affected by CVE-2024-52810 via @intlify/shared (>=9.7.0, <=9.14.1)

@intlify/shared NPM version =9.7.0, =0.0.17, =0.0.1, =0.0.1, =0.0.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =0.17.0, =0.17.0, =0.17.0, =0.18.1 and more Source cves: CVE-2024-52810 Source advisory: MEND:CVE-2024-52810...

@acronis-platform/ui-component-library (1.33.0), @intlify/core (>=10.0.0, <=10.0.4) +32 more potentially affected by CVE-2024-52810 via @intlify/shared (>=10.0.0, <=10.0.4)

@intlify/shared NPM version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves: CVE-2024-52810 Source advisory: MEND:CVE-2024-52810...

CVE-2024-52810 Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4

@intlify/shared is a shared library for the intlify project. The latest version of @intlify/shared 10.0.4 is vulnerable to Prototype Pollution through the entry functions lib.deepCopy. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the globa...

Shared security vulnerabilities

Shared is a library by Kevin Jones, a personal developer. Shared has a security vulnerability that stems from the entry function lib.deepCopy being vulnerable to prototype contamination...