9647 matches found
CVE-2024-47734 bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
In the Linux kernel, the following vulnerability has been resolved: bonding: Fix unnecessary warnings and logs from bondxdpgetxmitslave syzbot reported a WARNING in bondxdpgetxmitslave. To reproduce this1, one bond device bond1 has xdpdrv, which increases bpfmasterredirectenabledkey. Another bond...
CVE-2024-47733 netfs: Delete subtree of 'fs/netfs' when netfs module exits
In the Linux kernel, the following vulnerability has been resolved: netfs: Delete subtree of 'fs/netfs' when netfs module exits In netfsinit or fscacheprocinit, we create dentry under 'fs/netfs', but in netfsexit, we only delete the proc entry of 'fs/netfs' without deleting its subtree. This...
CVE-2024-47724
Technical details for CVE-2024-47724 (affected component, root cause, impact, remediation) are not provided in the supplied documents. Monitor for updates from official kernel advisories and vendor advisories.
CVE-2024-47724 wifi: ath11k: use work queue to process beacon tx event
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: use work queue to process beacon tx event Commit 3a415daa3e8b "wifi: ath11k: add P2P IE in beacon template" from Feb 28, 2024 linux-next, leads to the following Smatch static checker warning:...
CVE-2024-47724 wifi: ath11k: use work queue to process beacon tx event
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: use work queue to process beacon tx event Commit 3a415daa3e8b "wifi: ath11k: add P2P IE in beacon template" from Feb 28, 2024 linux-next, leads to the following Smatch static checker warning:...
CVE-2024-47713 wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use two-phase skb reclamation in ieee80211dostop Since 'devqueuexmit' should be called with interrupts enabled, the following backtrace: ieee80211dostop ... spinlockirqsave&local-queuestopreasonlock, flags...
CVE-2024-47696
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:atkernel/workqueue.c:checkflushdependency In the commit aee2424246f9 "RDMA/iwcm: Fix a use-after-free related to destroying CM IDs", the function flushworkqueue is invoked to flush the work queue iwcmwq. Bu...
CVE-2024-47687
The CVE-2024-47687 issue affects the Linux kernel mlx5/vdpa path. It fixes an invalid MR resource destroy where error paths could release uninitialized MR resources. The patch adds a missing check in mlx5_vdpa_destroy_mr_resources() to block destroying non-initialized MR resources, addressing a N...
WordPress Risk Warning Bar plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Risk Warning Bar versions = 1.0...
MAL-2024-9444 Malicious code in google-drive-integration (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b852e689dbc27ffdc82219196cc1caf6535bfe509fb8fdf6fab98a642c019c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a warning issue with the race pathnoexec check during exec...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a smatch warning for the H264 stateless decoder in the media:mediatek:vcodec subsystem...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a smatch warning in the H264 multi-state stateless decoder by the mediatek vcodec driver...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unwanted warning in the staticcallmodulenotify function in the staticcall subsystem, which could lead to ...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a smatch warning in the VP8 stateless decoder by the mediatek vcodec driver...
PT-2024-33847
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A vulnerability in the Linux kernel has been fixed, involving the mwifiex WiFi driver. The issue was a memcpy field-spanning write warning in the mwifiex cmd 802 11 scan ext function. This...
WordPress Risk Warning Bar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software Risk Warning Bar Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49638 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 36cfba44579b Credits Mika Required privilege...
PT-2024-34113
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A spectre-related vulnerability has been identified in the Linux kernel, specifically in the media: av7110 component. The issue was detected by smatch, a static analysis tool, which...
