CVE-2024-50126

In the Linux kernel, the following vulnerability has been resolved: net: sched: use RCU read-side critical section in tapriodump Fix possible use-after-free in 'tapriodump' by adding RCU read-side critical section there. Never seen on x86 but found on a KASAN-enabled arm64 system when investigati...

CVE-2024-50107

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmc: Fix pmccoreiounmap to call iounmap for valid addresses Commit 50c6dbdfd16e "x86/ioremap: Improve iounmap address range checks" introduces a WARN when adrress ranges of iounmap are invalid. On Thinkpad P1 G...

AZL-52569 CVE-2024-50101 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix incorrect pciforeachdmaalias for non-PCI devices Previously, the domaincontextclear function incorrectly called pciforeachdmaalias to set up context entries for non-PCI devices. This could lead to kernel hangs or...

CVE-2024-50132 tracing/probes: Fix MAX_TRACE_ARGS limit handling

In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Fix MAXTRACEARGS limit handling When creating a traceprobe we would set nrargs prior to truncating the arguments to MAXTRACEARGS. However, we would only initialize arguments up to the limit. This caused invalid...

CVE-2024-50116 nilfs2: fix kernel bug due to missing clearing of buffer delay flag

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing of buffer delay flag Syzbot reported that after nilfs2 reads a corrupted file system image and degrades to read-only, the BUGON check for the buffer delay flag in submitbhwbc may fai...

CVE-2024-50107 platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid addresses

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmc: Fix pmccoreiounmap to call iounmap for valid addresses Commit 50c6dbdfd16e "x86/ioremap: Improve iounmap address range checks" introduces a WARN when adrress ranges of iounmap are invalid. On Thinkpad P1 G...

CVE-2024-50096

CVE-2024-50096 affects the Linux kernel’s nouveau/dmem migrate_to_ram path. A copy error can cause nouveau_dmem_copy_one to report success even when the firmware/ hardware copy fails, leading migrate_to_ram to return a dirty HIGH_USER page to the user. The fix allocates a zero page so that, in er...

CVE-2024-50090

CVE-2024-50090 is tied to the Linux kernel DRM XE driver. The Connected document describes a bug in __xe_bb_create_job() where a buffer copy operation lacks input data validation, enabling a vulnerability that could trigger a service failure. The Initial description also notes a separate issue in...

kernel: netfilter: flowtable: initialise extack before use

A flaw was found in the Linux kernel's netfilter flowtable feature. A local attacker could exploit a missing initialization of the extack structure, leading to a denial of service. This vulnerability could allow an attacker with local access to crash the system...

Oracle Linux 8 : grafana-pcp (ELSA-2024-8847)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-8847 advisory. 5.1.1-9 - Resolves RHEL-61780: CVE-2024-9355 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Debian dla-3946 : context - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-3946 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3946-1 [email protected] https://www.debian.org/lts/security/...

SUSE SLES15 Security Update : kernel (Live Patch 4 for SLE 15 SP6) (SUSE-SU-2024:3885-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:3885-1 advisory. This update for the Linux Kernel 6.4.0-1506002322 fixes one issue. The following security issue was fixed: - CVE-2023-52752: smb: client: fix...

RHEL 7 : openstack-nova (RHSA-2018:2332)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2332 advisory. OpenStack Compute nova launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform. Compute...

CVE-2024-51500

Meshtastic firmware is a device firmware for the Meshtastic project. The Meshtastic firmware does not check for packets claiming to be from the special broadcast address 0xFFFFFFFF which could result in unexpected behavior and potential for DDoS attacks on the network. A malicious actor could cra...

Updated buildah, podman, skopeo packages fix security vulnerabilities

A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation ...

CVE-2024-51483 changedetection.io Path Traversal vulnerability

changedetection.io is free, open source web page change detection software. Prior to version 0.47.5, when a WebDriver is used to fetch files, source:file:///etc/passwd can be used to retrieve local system files, where the more traditional file:///etc/passwd gets blocked. Version 0.47.5 fixes the...

Fedora 40 : xorg-x11-server-Xwayland (2024-275a45a146)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-275a45a146 advisory. xwayland 24.1.4 - CVE fix for CVE-2024-9632 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

PT-2024-40554 · Git +1 · File

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash state includes functions such as load 1, apprentice...

python310-waitress-3.0.1-1.1 on GA media (moderate)

python310-waitress-3.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14445-1 Rating: moderate Cross-References: CVE-2024-49769 CVSS scores: CVE-2024-49769 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-49769 SUSE : 8.7...

Fedora: Security Advisory (FEDORA-2024-275a45a146)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...