kernel: mmc: alcor: fix return value check of mmc_add_host()

A flaw was found in the Linux kernel's Alcor Micro MMC card reader driver. When mmcaddhost fails, its return value is not checked, causing memory allocated by mmcallochost to leak. Additionally, the remove path may attempt to delete a device that was never added, leading to a kernel crash...

kernel: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers

A flaw was found in the Netfilter nftables subsystem of the Linux kernel. A local user can exploit this vulnerability due to improper validation when storing values into data registers, allowing internal chain object pointers to be exposed. This issue results in information disclosure, which can...

kernel: ipv4: Fix uninit-value access in __ip_make_skb()

A flaw was found in the Linux kernel's IPv4 networking subsystem. A local user can cause a Denial of Service DoS by exploiting a race condition when altering socket options while network packets are being constructed. This issue leads to an uninitialized memory read that can crash the system...

kernel: block: refine the EOF check in blkdev_iomap_begin

In the Linux kernel, the following vulnerability has been resolved: block: refine the EOF check in blkdeviomapbegin blkdeviomapbegin rounds down the offset to the logical block size before stashing it in iomap-offset and checking that it still is inside the inode size. Check the isize check to th...

kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in smsc75xxreadreg The Linux kernel CVE team has assigned CVE-2023-52528 to this issue. Upstream advisory:...

kernel: Kernel: Denial of Service in mmc: moxart due to improper return value check

A flaw was found in the Linux kernel component mmc: moxart. A local attacker with low privileges could exploit this vulnerability by triggering an improper return value check in the mmcaddhost function. This oversight can lead to a memory leak, which may ultimately cause a kernel crash, resulting...

kernel: mmc: atmel-mci: fix return value check of mmc_add_host()

In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmcallochost is leaked. 2. In the remove path, mmcremovehos...

kernel: pstore/platform: Add check for kstrdup

In the Linux kernel, the following vulnerability has been resolved: pstore/platform: Add check for kstrdup Add check for the return value of kstrdup and return the error if it fails in order to avoid NULL pointer dereference...

kernel: bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS

A vulnerability was found in the Linux kernel related to the improper handling of power-of-two values for CONFIGNRCPUS. The bitsper function incorrectly rounds up to the next power of two when given a power of two, causing crashes on certain systems...

kernel: mmc: omap_hsmmc: fix return value check of mmc_add_host()

A flaw was found in the OMAP HSMMC driver in the Linux kernel. The driver does not check the return value of mmcaddhost, which can lead to a memory leak from mmcallochost and a null pointer dereference crash in mmcremovehost when attempting to remove a device that was never successfully added...

tpm2-tools: arbitrary quote data may go undetected by tpm2_checkquote

A flaw was found in the tpm2-tools package. This issue occurs due to a missing check whether the magic number in attest is equal to TPM2GENERATEDVALUE, which can allow an attacker to generate arbitrary quote data that may not be detected by tpm2checkquote...

jfs: Fix uninit-value access of new_ea in ea_buffer

...

media: i2c: ar0521: Use cansleep version of gpiod_set_value()

...

PT-2024-34709 · Unknown +1 · Hda Driver +1

Name of the Vulnerable Software and Affected Versions: hda driver affected versions not specified Description: The issue concerns a buffer over-read in the hda driver, which is triggered by a guest-controlled value. This allows for potential exploitation. No information is provided about the...

CVE-2024-51565: Out-of-bounds Read

The hda driver is vulnerable to a buffer over-read from a guest-controlled value...

Siemens’ various products have path traversal vulnerabilities

SCALANCE M-800, MUM-800 and S615 and RUGGEDCOM RM1224 are industrial routers. A path traversal vulnerability exists in multiple Siemens products, which can be exploited by an attacker to append arbitrary values, resulting in a compromise of system integrity...

CVE-2024-10917

In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters...

CVE-2024-10917

In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters...

CVE-2024-10917 Eclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength

In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters...

The ROI of Security Investments: How Cybersecurity Leaders Prove It

Cyber threats are intensifying, and cybersecurity has become critical to business operations. As security budgets grow, CEOs and boardrooms are demanding concrete evidence that cybersecurity initiatives deliver value beyond regulation compliance. Just like you wouldn't buy a car without knowing i...