Stack Overflow

github.com/cosmos/cosmos-sdk, cosmossdk.io/x/tx is vulnerable to Stack overflow. The vulnerability is due to improper handling of transaction decoding in Cosmos SDK, allows for excessive resource consumption or stack overflow when processing transactions, potentially leading to system instability...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the fact that in the btrfs file system, the relocateonefolio function unlocks the folio after calling...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system developed by Google Inc. in the United States. Google Android suffers from a security vulnerability that originates from a heap buffer overflow in the constructtransactionfromcmd function of the lwisioctl.c file, which may have...

PT-2025-2985 · Google · Android

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to a possible out of bounds write in the prepare response locked function of lwis transaction.c due to improper input validation. This could lead to local escalation o...

PT-2026-5994

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the btrfs subsystem related to transaction handling. Specifically, the wait current trans function does not properly consider transaction types when...

PT-2025-37481

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s btrfs subsystem within the btrfs copy root function. Specifically, if an unexpected extent buffer generation is encountered during cloning, the...

Cosmos: Replacing ICA active channel during the upgrade and a bit more

The active channel on the ICA controller was set during the channel acknowledgement, which was a check-then-act operation that was not atomic. The active channel on the ICA host was set during the channel open confirmation, but the check for the channel existence was not atomic. This allowed an...

CVE-2024-56674

In the Linux kernel, the following vulnerability has been resolved: virtionet: correct netdevtxresetqueue invocation point When virtnetclose is followed by virtnetopen, some TX completions can possibly remain unconsumed, until they are finally processed during the first NAPI poll after the...

CVE-2024-56655

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not defer rule destruction via callrcu nftableschaindestroy can sleep, it can't be used from callrcu callbacks. Moreover, nftablesrulerelease is only safe for error unwinding, while transaction mutex is he...

AZL-55300 CVE-2024-56655 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not defer rule destruction via callrcu nftableschaindestroy can sleep, it can't be used from callrcu callbacks. Moreover, nftablesrulerelease is only safe for error unwinding, while transaction mutex is he...

DEBIAN-CVE-2024-56655

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not defer rule destruction via callrcu nftableschaindestroy can sleep, it can't be used from callrcu callbacks. Moreover, nftablesrulerelease is only safe for error unwinding, while transaction mutex is he...

UBUNTU-CVE-2024-56655

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not defer rule destruction via callrcu nftableschaindestroy can sleep, it can't be used from callrcu callbacks. Moreover, nftablesrulerelease is only safe for error unwinding, while transaction mutex is he...

CVE-2024-56655

CVE-2024-56655 affects the Linux kernel nf_tables path under netfilter. The root cause is deferred destruction of rules via call_rcu, where nf_tables_chain_destroy can sleep and the to-be-destroyed rule could be exposed to datapath/dumps without a required synchronize_rcu() in between. nf_table_r...

CVE-2024-56655 netfilter: nf_tables: do not defer rule destruction via call_rcu

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not defer rule destruction via callrcu nftableschaindestroy can sleep, it can't be used from callrcu callbacks. Moreover, nftablesrulerelease is only safe for error unwinding, while transaction mutex is he...

Malicious code in rsk-transaction-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 234b44f7ae414139d5e5ffe0eebfede48849e6b8336ac262286d71491f03d092 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12109 Malicious code in rsk-transaction-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 234b44f7ae414139d5e5ffe0eebfede48849e6b8336ac262286d71491f03d092 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bridge-transaction-parser-hop400 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c4d626a3e8ed70bfec2b959fdb25cd9fb0ce41efa9e9be1d82a5ce85531ec40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-3584

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.8 Description The issue is related to a transaction atomicity bug when enabling simple quotas in the Linux kernel. Specifically, when enabling quotas, the BTRFS QGROUP STATUS FLAG SIMPLE MODE flag is set, bu...

SUSE SLED15: avahi / avahi-autoipd / avahi-compat-howl-devel / etc (SUSE-SU-2024:4386-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4386-1 advisory. - CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs bsc1233420 Other fixes: - no long...

Security update for avahi

This update for avahi fixes the following issues: CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs bsc1233420 Other fixes: - no longer supply bogus services to callbacks bsc1226586. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods...