kernel: drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)

In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Fix BUGON on mmapPROTWRITE, MAPPRIVATE Lack of check for copy-on-write COW mapping in drmgemshmemmmap allows users to call mmap with PROTWRITE and MAPPRIVATE flag causing a kernel panic due to BUGON in...

kernel: net/smc: avoid data corruption caused by decline

In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid data corruption caused by decline We found a data corruption issue during testing of SMC-R on Redis applications. The benchmark has a low probability of reporting a strange error as shown below. "Error: Protocol...

glib2: Signal subscription vulnerabilities

A flaw was found in GNOME GLib. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the...

PT-2024-16654 · Rockwell Automation · Rockwell Automation

Name of the Vulnerable Software and Affected Versions: Rockwell Automation products affected versions not specified Description: An authentication bypass issue exists due to shared secrets across accounts, potentially allowing a threat actor to impersonate a user if additional required informatio...

PT-2024-8326 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows Win32 Kernel Subsystem. This can allow an attacker to elevate their privileges. The estimated numb...

Microsoft Hyper-V security vulnerabilities

Microsoft Windows Hyper-V is a virtualization technology developed by Microsoft for creating and managing virtual machines on the Windows operating system, of which the Shared Virtual Disk is one. An elevation of privilege vulnerability exists in Microsoft Windows Hyper-V Shared Virtual Disk, whi...

PT-2024-8086

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V Shared Virtual Disk affected versions not specified Description: The issue is related to the Windows Hyper-V Shared Virtual Disk and involves the dereferencing of an untrusted pointer. This can allow an attacker to elevate the...

CVE-2024-43624: Untrusted Pointer Dereference

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability...

CVE-2024-10943: Insecure Storage of Sensitive Information

An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could allow a threat actor to impersonate a user if the threat actor is able to enumerate additional information required during authentication...

PT-2024-8082 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a Windows Registry Elevation of Privilege vulnerability, which is caused by errors in synchronization when using a shared resource. This vulnerability can be exploit...

MAL-2024-10547 Malicious code in @vkplay/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8fae653de9f00dc321cbd5b08a89f89b71c2dd6fc14dc214b2eaeb5cbf298c35 The OpenSSF Package Analysis project identified '@vkplay/shared' @ 10.10.15 npm as malicious. It is considered malicious because: - The package...

FreeBSD : x11vnc -- access to shared memory segments (305ceb2c-9df8-11ef-a660-d85ed309193e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 305ceb2c-9df8-11ef-a660-d85ed309193e advisory. [email protected] reports: scan.c in x11vnc 0.9.16 uses IPCCREAT|0777 in shmget calls, which allows access ...

vfio DoS

The vulnerability of the vfio component in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

rtas Component DoS

The vulnerability of the rtas component in the Linux operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-20484 Cisco Enterprise Chat and Email Denial of Service Vulnerability

A vulnerability in the External Agent Assignment Service EAAS feature of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of Media Routing...

mod_jk: information Disclosure / DoS

An Incorrect Default Permissions vulnerability was found in Apache Tomcat Connectors that allows local users to view and modify shared memory containing modjk configuration, which may lead to information disclosure and denial of service...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which originates in the LoongArch architecture, where a task may call the stacktop function without a vDSO mapping, which...

K000148382: Apache Tomcat Connectors vulnerability CVE-2024-46544

Security Advisory Description Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing modjk configuration which may lead to information disclosure and/or denial of service. This issue affects Apache Tomcat Connectors:...

CVE-2024-33032

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it...

CVE-2024-33032

CVE-2024-33032 references a memory corruption issue in the Camera_Linux stack (listed as an improper validation of array index). The CVE describes memory corruption when a user-space process and the kernel concurrently access the same shared memory. Based on the CVE List entry, this is tied to Ca...