CVE-2024-44984

A flaw was found in the bnxten module in the Linux kernel. A double DMA unmapping can trigger a kernel warning and cause a denial of service. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprisin...

CVE-2024-44954

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Fix racy access to midibuf There can be concurrent accesses to line6 midibuf from both the URB completion callback and the rawmidi API access. This could be a cause of KMSAN warning triggered by syzkaller below so pu...

CVE-2024-44993

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix out-of-bounds read in v3dcsdjobrun When enabling UBSAN on Raspberry Pi 5, we get the following warning: 387.894977 UBSAN: array-index-out-of-bounds in drivers/gpu/drm/v3d/v3dsched.c:320:3 387.903868 index 7 is out of...

DEBIAN-CVE-2024-44984

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix double DMA unmapping for XDPREDIRECT Remove the dmaunmappageattrs call in the driver's XDPREDIRECT code path. This should have been removed when we let the page pool handle the DMA mapping. This bug causes the warning...

CVE-2024-44984

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix double DMA unmapping for XDPREDIRECT Remove the dmaunmappageattrs call in the driver's XDPREDIRECT code path. This should have been removed when we let the page pool handle the DMA mapping. This bug causes the warning...

CVE-2024-44993 drm/v3d: Fix out-of-bounds read in `v3d_csd_job_run()`

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix out-of-bounds read in v3dcsdjobrun When enabling UBSAN on Raspberry Pi 5, we get the following warning: 387.894977 UBSAN: array-index-out-of-bounds in drivers/gpu/drm/v3d/v3dsched.c:320:3 387.903868 index 7 is out of...

CVE-2024-44992

The CVE-2024-44992 issue affects the Linux kernel SMB/CIFS client code, specifically a possible NULL dereference in cifs_free_subrequest() when handling rdata->server. The root cause is code that could dereference rdata->server->ops->add_credits() if rdata->credits.value != 0 and r...

CVE-2024-44984 bnxt_en: Fix double DMA unmapping for XDP_REDIRECT

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix double DMA unmapping for XDPREDIRECT Remove the dmaunmappageattrs call in the driver's XDPREDIRECT code path. This should have been removed when we let the page pool handle the DMA mapping. This bug causes the warning...

CVE-2024-44984 bnxt_en: Fix double DMA unmapping for XDP_REDIRECT

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix double DMA unmapping for XDPREDIRECT Remove the dmaunmappageattrs call in the driver's XDPREDIRECT code path. This should have been removed when we let the page pool handle the DMA mapping. This bug causes the warning...

CVE-2024-44984

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix double DMA unmapping for XDPREDIRECT Remove the dmaunmappageattrs call in the driver's XDPREDIRECT code path. This should have been removed when we let the page pool handle the DMA mapping. This bug causes the warning...

CVE-2024-44972

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-44972 btrfs: do not clear page dirty inside extent_write_locked_range()

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not clear page dirty inside extentwritelockedrange BUG For subpage + zoned case, the following workload can lead to rsv data leak at unmount time: mkfs.btrfs -f -s 4k $dev mount $dev $mnt fsstress -w -n 8 -d $mnt -s...

Security Researcher Sued for Disproving Government Statements

This story seems straightforward. A city is the victim of a ransomware attack. They repeatedly lie to the media about the severity of the breach. A security researcher repeatedly proves their statements to be lies. The city gets mad and sues the researcher. Lets hope the judge throws the case out...

MAL-2024-8786 Malicious code in msldowr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1deb49453f6e6cb108bcccf73c381e5b3769656cbed465b1353f2759312937ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8766 Malicious code in glintier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7a1e1bc5124b35c9fb5c808db8e7af93ea9f0b4cff50eaa391c9e74e2b0c4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-44943

A flaw was found in the Linux kernel. This issue involved improperly using the trygrabfolio function in the memory management subsystem and led to failures and kernel warnings during memory pinning in the Contiguous Memory Allocator CMA area, especially when starting SEV virtual machines...

MAL-2024-8179 Malicious code in @diotoborg/consectetur-modi-reprehenderit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1907468f6304624269b2f29ee47460db951abb848af9ab72ed7f3230ee2bf3a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8667 Malicious code in @diotoborg/ullam-neque-voluptates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206aa477c95775264ca34e824a6b56da2f94b6e1592b395003f7ca3f1bbb3361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8482 Malicious code in @diotoborg/nulla-tempora-voluptate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12a89165556d0e2ce5d858384b89b4f5ce8a35714f4b28625840b398592f1b3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OESA-2024-2078 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: btrfs: get rid of warning on transaction commit when using flushoncommit When using the flushoncommit mount option, during almost every transaction commit we...