605 matches found
Oracle Linux 8 : virt:kvm_utils1 (ELSA-2024-12435)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12435 advisory. - Document CVEs as fixed Karl Heubaum CVE-2023-2700 - Fix off-by-one error in udevListInterfacesByStatus Martin Kletzander Orabug: 36364474...
CVE-2021-47499
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove When ACPI type is ACPISMO8500, the data-dreadytrig will not be set, the memory allocated by iiotriggeredbuffersetup will not be freed, and cause memory leak as...
CVE-2021-47499
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove When ACPI type is ACPISMO8500, the data-dreadytrig will not be set, the memory allocated by iiotriggeredbuffersetup will not be freed, and cause memory leak as...
CVE-2021-47499
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove When ACPI type is ACPISMO8500, the data-dreadytrig will not be set, the memory allocated by iiotriggeredbuffersetup will not be freed, and cause memory leak as...
CVE-2021-47499
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove When ACPI type is ACPISMO8500, the data-dreadytrig will not be set, the memory allocated by iiotriggeredbuffersetup will not be freed, and cause memory leak as...
CVE-2021-47499 iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove When ACPI type is ACPISMO8500, the data-dreadytrig will not be set, the memory allocated by iiotriggeredbuffersetup will not be freed, and cause memory leak as...
CVE-2021-47499
CVE-2021-47499 – Linux kernel, iio: accel: kxcjk-1013 : The issue was a memory leak in the probe path for iio_triggered_buffer_setup, caused when ACPI type is ACPI_SMO8500 and data->dready_trig was not set, preventing freeing of allocated memory. The root cause is the probe-path logic leaving ...
UBUNTU-CVE-2024-35953
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in contextxa ivpudevice-contextxa is locked both in kernel thread and IRQ context. It requires XAFLAGSLOCKIRQ flag to be passed during initialization otherwise the lock could be acquired from a thread and...
CVE-2024-35953 accel/ivpu: Fix deadlock in context_xa
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in contextxa ivpudevice-contextxa is locked both in kernel thread and IRQ context. It requires XAFLAGSLOCKIRQ flag to be passed during initialization otherwise the lock could be acquired from a thread and...
CVE-2024-35953 accel/ivpu: Fix deadlock in context_xa
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in contextxa ivpudevice-contextxa is locked both in kernel thread and IRQ context. It requires XAFLAGSLOCKIRQ flag to be passed during initialization otherwise the lock could be acquired from a thread and...
CVE-2024-35953
The CVE-2024-35953 issue affects the Linux kernel’s accel/ivpu code: ivpu_device->context_xa could deadlock because the XA lock could be held in a thread and interrupted by IRQs that also lock it. The fix is to pass XA_FLAGS_LOCK_IRQ during initialization to prevent the second lock in IRQ cont...
CVE-2024-35953 accel/ivpu: Fix deadlock in context_xa
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in contextxa ivpudevice-contextxa is locked both in kernel thread and IRQ context. It requires XAFLAGSLOCKIRQ flag to be passed during initialization otherwise the lock could be acquired from a thread and...
CVE-2024-35953: Improper Locking
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in contextxa ivpudevice-contextxa is locked both in kernel thread and IRQ context. It requires XAFLAGSLOCKIRQ flag to be passed during initialization otherwise the lock could be acquired from a thread and...
airflow-run (0.4.9), ais-dom (>=0.117.0b0, <=2021.2.4) +49 more potentially affected by CVE-2024-0727 via cryptography (3.2.0)
cryptography PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - airflow-run 0.4.9 - ais-dom =0.117.0b0, =2.0.1.dev14, =2.0.2 - azureml-accel-models 1.23.0 - azureml-cli-common 1.23.0 -...
PT-2023-36750
Уязвимость функции qaic attach slice bo ioctl модуля drivers/accel/qaic/qaic data.c ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2023-36810
Уязвимость функции find and map user pages модуля drivers/accel/qaic/qaic control.c ядра операционной системы Linux связана с распределением ресурсов без ограничений и регулирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
accel-config bug fix and enhancement update
An update is available for accel-config. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...
accel-config bug fix and enhancement update
An update is available for accel-config. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...
new packages: accel-config
An update is available for accel-config. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...
