CVE-2024-44972 btrfs: do not clear page dirty inside extent_write_locked_range()

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not clear page dirty inside extentwritelockedrange BUG For subpage + zoned case, the following workload can lead to rsv data leak at unmount time: mkfs.btrfs -f -s 4k $dev mount $dev $mnt fsstress -w -n 8 -d $mnt -s...

Security Researcher Sued for Disproving Government Statements

This story seems straightforward. A city is the victim of a ransomware attack. They repeatedly lie to the media about the severity of the breach. A security researcher repeatedly proves their statements to be lies. The city gets mad and sues the researcher. Lets hope the judge throws the case out...

MAL-2024-8786 Malicious code in msldowr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1deb49453f6e6cb108bcccf73c381e5b3769656cbed465b1353f2759312937ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8766 Malicious code in glintier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7a1e1bc5124b35c9fb5c808db8e7af93ea9f0b4cff50eaa391c9e74e2b0c4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-44943

A flaw was found in the Linux kernel. This issue involved improperly using the trygrabfolio function in the memory management subsystem and led to failures and kernel warnings during memory pinning in the Contiguous Memory Allocator CMA area, especially when starting SEV virtual machines...

MAL-2024-8179 Malicious code in @diotoborg/consectetur-modi-reprehenderit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1907468f6304624269b2f29ee47460db951abb848af9ab72ed7f3230ee2bf3a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8667 Malicious code in @diotoborg/ullam-neque-voluptates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206aa477c95775264ca34e824a6b56da2f94b6e1592b395003f7ca3f1bbb3361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8482 Malicious code in @diotoborg/nulla-tempora-voluptate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12a89165556d0e2ce5d858384b89b4f5ce8a35714f4b28625840b398592f1b3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OESA-2024-2078 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: btrfs: get rid of warning on transaction commit when using flushoncommit When using the flushoncommit mount option, during almost every transaction commit we...

OESA-2024-2077 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: btrfs: get rid of warning on transaction commit when using flushoncommit When using the flushoncommit mount option, during almost every transaction commit we...

MAL-2024-8097 Malicious code in sniper302 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c92e1b7302589a9ab1ceccf03585aef2cb2ffbe787c6993a9209972945c0caf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45302 CRLF Injection in RestSharp's `RestRequest.AddHeader` method

RestSharp is a Simple REST and HTTP API Client for .NET. The second argument to RestRequest.AddHeader the header value is vulnerable to CRLF injection. The same applies to RestRequest.AddOrUpdateHeader and RestClient.AddDefaultHeader. The way HTTP headers are added to a request is via the...

MAL-2024-8078 Malicious code in milo_next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ee245362f63331f1b4e4a74fe399d53c9d225ee7971ccfa881f720f8397fe4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-44943

In the Linux kernel, the following vulnerability has been resolved: mm: gup: stop abusing trygrabfolio A kernel warning was reported when pinning folio in CMA memory when launching SEV virtual machine. The splat looks like: 464.325306 WARNING: CPU: 13 PID: 6734 at mm/gup.c:1313...

CVE-2024-44943

CVE-2024-44943 relates to the Linux kernel mm/gup code where pinning folio in CMA memory during SEV VM startup could trigger a warning due to misusing try_grab_folio in both fast and slow paths. The issue stems from the longterm pinning check causing fallback paths to also fail, producing a kerne...

CVE-2024-44943 mm: gup: stop abusing try_grab_folio

In the Linux kernel, the following vulnerability has been resolved: mm: gup: stop abusing trygrabfolio A kernel warning was reported when pinning folio in CMA memory when launching SEV virtual machine. The splat looks like: 464.325306 WARNING: CPU: 13 PID: 6734 at mm/gup.c:1313...

CVE-2024-44943 mm: gup: stop abusing try_grab_folio

In the Linux kernel, the following vulnerability has been resolved: mm: gup: stop abusing trygrabfolio A kernel warning was reported when pinning folio in CMA memory when launching SEV virtual machine. The splat looks like: 464.325306 WARNING: CPU: 13 PID: 6734 at mm/gup.c:1313...

CVE-2024-44943 mm: gup: stop abusing try_grab_folio

In the Linux kernel, the following vulnerability has been resolved: mm: gup: stop abusing trygrabfolio A kernel warning was reported when pinning folio in CMA memory when launching SEV virtual machine. The splat looks like: 464.325306 WARNING: CPU: 13 PID: 6734 at mm/gup.c:1313...

SMS scammers use toll fees as a lure

In April 2024, the FBI warned about a new type of smishing scam. Smishing is the term we use for phishing attacks sent via text message. This particular smishing scam tries to trick users into clicking a link by telling them they owe a “small amount” in toll fees. The scammers send a text claimin...

CVE-2024-44940

In the Linux kernel, the following vulnerability has been resolved: fou: remove warn in guegroreceive on unsupported protocol Drop the WARNONONCE inn guegroreceive if the encapsulated type is not known or does not have a GRO handler. Such a packet is easily constructed. Syzbot generates them and...