CVE-2024-57930 tracing: Have process_string() also allow arrays

In the Linux kernel, the following vulnerability has been resolved: tracing: Have processstring also allow arrays In order to catch a common bug where a TRACEEVENT TPfastassign assigns an address of an allocated string to the ring buffer and then references it in TPprintk, which can be executed...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the processstring function in the tracing module not properly handling array references. This could lead to fals...

UBUNTU-CVE-2025-21632

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure shadow stack is active before "getting" registers The x86 shadow stack support has its own set of registers. Those registers are XSAVE-managed, but they are "supervisor state components" which means that userspace...

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.4 release

A new version of Red Hat OpenShift distributed tracing platform Tempo has been released Red Hat OpenShift distributed tracing platform based on Tempo. Tempo is an open-source, easy-to-use, and highly scalable distributed tracing backend. It provides observability for microservices architectures b...

SUSE CVE-2025-0438

Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. Chromium security severity: High...

The vulnerability of the Windows Event Tracing service in Microsoft Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of Windows Event Tracing in Microsoft Windows systems is related to incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2025-0438

Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-21274

Windows Event Tracing Denial of Service Vulnerability...

CVE-2025-21274

Windows Event Tracing Denial of Service Vulnerability...

CVE-2025-21274 Windows Event Tracing Denial of Service Vulnerability

...

Windows Event Tracing Denial of Service Vulnerability

...

CLSA-2025-1736778632 kernel: Fix of 17 CVEs

tracing: Free buffers when a used dynamic event is removed CVE-2022-49006 - ASoC: ops: Check bounds for second channel in sndsocputvolswsx CVE-2022-48951 - ext4: fix slab-use-after-free in ext4splitextentat CVE-2024-49884 - ext4: fix bug on in ext4escacheextent as ext4splitextentat failed...

Microsoft Windows Event Tracing 后置链接漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A backlink vulnerability exists in Microsoft Windows Event Tracing. An attacker could exploit this...

PT-2025-1096 · Microsoft · Windows Event Tracing +1

Name of the Vulnerable Software and Affected Versions: Windows Event Tracing affected versions not specified Description: The issue is related to a denial of service vulnerability in Windows Event Tracing. It is caused by incorrect handling of symbolic links before accessing a file. Exploitation ...

CLSA-2025-1736778412 kernel: Fix of 17 CVEs

tracing: Free buffers when a used dynamic event is removed CVE-2022-49006 - ASoC: ops: Check bounds for second channel in sndsocputvolswsx CVE-2022-48951 - ext4: fix slab-use-after-free in ext4splitextentat CVE-2024-49884 - ext4: fix bug on in ext4escacheextent as ext4splitextentat failed...

Unbreakable Enterprise kernel security update

5.4.17-2136.339.5 - tracing/kprobes: Skip symbol counting logic for module symbols in createlocaltracekprobe Nikolay Kuratov - vhostscsi: log write descriptors Dongli Zhang Orabug: 37393533 - vhost-scsi: protect vq-logbase with vq-mutex Dongli Zhang Orabug: 37393533 5.4.17-2136.339.4 - RDMA/bnxtr...

qt6-webengine -- Multiple vulnerabilities

Qt qtwebengine-chromium repo reports: Backports for 9 security bugs in Chromium: CVE-2024-12693: Out of bounds memory access in V8 CVE-2024-12694: Use after free in Compositing CVE-2025-0436: Integer overflow in Skia CVE-2025-0437: Out of bounds read in Metrics CVE-2025-0438: Stack buffer overflo...

SUSE CVE-2024-56763

In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracingcpumaskwrite If a large count is provided, it will trigger a warning in bitmapparseuser. Also check zero for it...

AZL-55026 CVE-2024-56763 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracingcpumaskwrite If a large count is provided, it will trigger a warning in bitmapparseuser. Also check zero for it...

AZL-55097 CVE-2024-56763 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracingcpumaskwrite If a large count is provided, it will trigger a warning in bitmapparseuser. Also check zero for it...