UVI-2021-1000032 ixgbe: fix unbalanced device enable/disable in suspend/resume

ixgbe: fix unbalanced device enable/disable in suspend/resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.32 by commit...

GSD-2021-1000032 ixgbe: fix unbalanced device enable/disable in suspend/resume

ixgbe: fix unbalanced device enable/disable in suspend/resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.32 by commit...

PT-2021-24507

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.32 Description: The issue concerns an unbalanced device enable/disable in suspend/resume, which may potentially lead to security vulnerabilities. However, the actual impact and attack plausibility have not...

PT-2021-28501

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.32 Description The issue concerns an unbalanced device enable/disable in suspend/resume, which may have potential security implications. However, the actual impact and attack plausibility have not yet been...

PT-2021-24489

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.11.16 Description: The issue is related to an unbalanced device enable/disable in suspend/resume, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet...

PT-2021-28483

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.11.16 Description: The issue is related to an unbalanced device enable/disable in suspend/resume. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2021-28250

Name of the Vulnerable Software and Affected Versions: PHP versions affected versions not specified Description: The issue is related to a stack-use-after-return crash. Technical details include the crash type being a stack-use-after-return READ 4, and the crash state involves functions such as...

php:php-fuzz-execute: Stack-use-after-return in zend_fiber_suspend_context

Detailed Report: https://oss-fuzz.com/testcase?key=5262556366241792 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address: 0xf6a27890 Crash State: zendfibersuspendcontext...

PT-2024-11099 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null dereference error occurs in the Linux kernel when resuming after suspend, even when the interface was not previously enabled. This is caused by the driver queuing work via...

PT-2024-11060 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the tracing feature. The issue occurred when a fix to the ring buffer recursion detection caused a hung machine during...

PT-2024-11121 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel, specifically with the mt76: mt7921 module, where a possible invalid register access can occur. This happens when the interrupt is not properly...

PT-2021-8024 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an unbalanced device enable/disable in suspend/resume, caused by the removal of pci enable device mem from ixgbe resume in commit 6f82b2558735. This removal led...

CVE-2020-11246

A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2020-11246

CVE-2020-11246 describes a double-free condition that can occur when a Snapdragon device enters suspend mode during secure playback across Snapdragon Auto, Compute, Connectivity, and various Snapdragon product lines (Mobile, IoT variants). The root cause is a double-free in the secure playback pa...

CVE-2020-11246: Double Free

A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

PT-2021-9258

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description A double free condition can occur when the device moves to suspend mode during secure playback in various Snapdragon products, including Snapdragon Auto, Snapdragon Compute,...

libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent

A flaw was found in the way the libvirtd daemon issued the 'suspend' command to a QEMU guest-agent running inside a guest, where it holds a monitor job while issuing the 'suspend' command to a guest-agent. A malicious guest-agent may use this flaw to block the libvirt daemon indefinitely, resulti...

libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent

A flaw was found in the way the libvirtd daemon issued the 'suspend' command to a QEMU guest-agent running inside a guest, where it holds a monitor job while issuing the 'suspend' command to a guest-agent. A malicious guest-agent may use this flaw to block the libvirt daemon indefinitely, resulti...

Updated libvirt packages fix security vulnerability

Updated libvirt packages fix security vulnerability: A flaw was found in the way the libvirtd daemon issued the 'suspend' command to a QEMU guest-agent running inside a guest, where it holds a monitor job while issuing the 'suspend' command to a guest-agent. A malicious guest-agent may use this...

RHEL 8 : kernel (RHSA-2020:2102)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2102 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Kernel: NetLabel: null pointer...