16365 matches found
DEBIAN-CVE-2024-42311
In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...
DEBIAN-CVE-2024-42298
In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fslqmcaudio: Check devmkasprintf returned value devmkasprintf can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value...
UBUNTU-CVE-2024-42310
In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in cdvintellvdsgetmodes In cdvintellvdsgetmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a NULL pointer dereference on failure of drmmodeduplicate. Add...
UBUNTU-CVE-2024-42298
In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fslqmcaudio: Check devmkasprintf returned value devmkasprintf can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value...
CVE-2024-42311
In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...
UBUNTU-CVE-2024-42296
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fsconvertinlineinode If device is readonly, make f2fsconvertinlineinode return EROFS instead of zero, otherwise it may trigger panic during writeback of inline inode's dirty page as below:...
CVE-2024-42272
In the Linux kernel, the following vulnerability has been resolved: sched: actct: take care of padding in struct zoneshtkey Blamed commit increased lookup key size from 2 bytes to 16 bytes, because zoneshtkey got a struct net pointer. Make sure rhashtablelookup is not using the padding bytes whic...
CVE-2024-42311 hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...
CVE-2024-42311 hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...
CVE-2024-42311
In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...
CVE-2024-42296 f2fs: fix return value of f2fs_convert_inline_inode()
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fsconvertinlineinode If device is readonly, make f2fsconvertinlineinode return EROFS instead of zero, otherwise it may trigger panic during writeback of inline inode's dirty page as below:...
CVE-2024-42296 f2fs: fix return value of f2fs_convert_inline_inode()
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fsconvertinlineinode If device is readonly, make f2fsconvertinlineinode return EROFS instead of zero, otherwise it may trigger panic during writeback of inline inode's dirty page as below:...
CVE-2024-42296
In CVE-2024-42296, the Linux kernel f2fs subsystem fixes a return value bug in f2fs_convert_inline_inode(). When the device is read-only, the function now returns EROFS instead of zero, preventing a potential panic during writeback of inline inodes. The issue could otherwise trigger a panic in th...
CVE-2024-42272 sched: act_ct: take care of padding in struct zones_ht_key
In the Linux kernel, the following vulnerability has been resolved: sched: actct: take care of padding in struct zoneshtkey Blamed commit increased lookup key size from 2 bytes to 16 bytes, because zoneshtkey got a struct net pointer. Make sure rhashtablelookup is not using the padding bytes whic...
CVE-2024-42272 sched: act_ct: take care of padding in struct zones_ht_key
In the Linux kernel, the following vulnerability has been resolved: sched: actct: take care of padding in struct zoneshtkey Blamed commit increased lookup key size from 2 bytes to 16 bytes, because zoneshtkey got a struct net pointer. Make sure rhashtablelookup is not using the padding bytes whic...
CVE-2024-42272
In the Linux kernel, the following vulnerability has been resolved: sched: actct: take care of padding in struct zoneshtkey Blamed commit increased lookup key size from 2 bytes to 16 bytes, because zoneshtkey got a struct net pointer. Make sure rhashtablelookup is not using the padding bytes whic...
ffmpeg:ffmpeg_SWR_fuzzer: Use-of-uninitialized-value in swri_rematrix
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4905557943713792 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegSWRfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a problem in the handling of memory regions by the imxrproc component, which fails to skip when a node value is...
PVS - CVAD Setup Wizard - Unable to create Azure targets devices, BDM upload fails
From the Citrix Provisioning Console, using Citrix Virtual desktop wizard from the , target device creation progresses until the stage "Uploading BDM VHD file to azure" , where it fails. PVS Error Failed to Upload BDM Disk to Azure. Error:System.AggregateException: One or more errors occurred. --...
libjpeg-turbo:compress_fuzzer: Use-of-uninitialized-value in encode_mcu_huff
Detailed Report: https://oss-fuzz.com/testcase?key=4654214175850496 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: compressfuzzer Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: encodemcuhuff compressdata...