414 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from memory leaks and invalid accesses that could lead to memory corruption...
CVE-2025-21823 batman-adv: Drop unmanaged ELP metric worker
In the Linux kernel, the following vulnerability has been resolved: batman-adv: Drop unmanaged ELP metric worker The ELP worker needs to calculate new metric values for all neighbors "reachable" over an interface. Some of the used metric sources require locks which might need to sleep. This sleep...
CVE-2022-49051 net: usb: aqc111: Fix out-of-bounds accesses in RX fixup
In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: Fix out-of-bounds accesses in RX fixup aqc111rxfixup contains several out-of-bounds accesses that can be triggered by a malicious or defective USB device, in particular: - The metadata array...
Azure Linux 3.0 Security Update: kernel (CVE-2024-42247)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42247 advisory. - In the Linux kernel, the following vulnerability has been resolved: wireguard: allowedips: avoid unaligned...
FreeBSD : libcaca -- Multiple vulnerabilities (c10b639c-e51c-11ef-9e76-4ccc6adda413)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c10b639c-e51c-11ef-9e76-4ccc6adda413 advisory. Sam Hocevar reports: Multiple memory leaks and invalid memory accesses: Tenable has extracted...
CVE-2024-56775
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount Why The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the refcount of the plane changes in between backup and restore operations,...
CVE-2024-56775
CVE-2024-56775 concerns the Linux kernel DRM/AMD display stack. The issue is in the plane state backup/restore flow where the plane refcount is not preserved, risking memory leaks if the refcount should decrease or double frees/invalid memory accesses if it should increase during state transition...
CVE-2024-56775 drm/amd/display: Fix handling of plane refcount
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount Why The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the refcount of the plane changes in between backup and restore operations,...
UBUNTU-CVE-2024-45818
The hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the virtual VGA is in "standard" mode. Locking involved there has an unusual discipline, leaving a lock acquired past the return from the function that acquired it. This behavior results in a problem when emulatin...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from the frame size not being properly programmed into the decoder hardware, which could result in invalid memory accesses by the decoder...
Updated openssl packages fix security vulnerability
Low-level invalid GF2^m parameters lead to OOB memory accesses. CVE-2024-9143...
kernel: ACPI: CPPC: Use access_width over bit_width for system memory accesses
A vulnerability was found in the ACPI subsystem's CPPC driver in the Linux kernel. This issue occurs due to the mishandling of memory access bit width during performance capability calculations, which can lead to misaligned memory accesses and cause kernel panics on affected platforms...
DEBIAN-CVE-2024-50102
In the Linux kernel, the following vulnerability has been resolved: x86: fix user address masking non-canonical speculation issue It turns out that AMD has a "Meltdown Litetm" issue with non-canonical accesses in kernel space. And so using just the high bit to decide whether an access is in user...
CVE-2024-50105
CVE-2024-50105 relates to the Linux kernel ASoC Qualcomm Soundwire path. The SC7280 Soundwire runtime stream allocation was not updated when allocation was moved to per-machine soundcard drivers, risking NULL pointer dereference or uninitialized memory during playback. The fix (commit 15c7fab0e04...
Updated buildah, podman, skopeo packages fix security vulnerabilities
A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation ...
fs/netfs/fscache_cookie: add missing "n_accesses" check
...
In-memory Data Management Caching Tools: A Guide to the Best Options
In-memory data management caching tools store frequently accessed data in memory, which significantly improves performance by reducing how often the database needs to be accessed...
CVE-2024-46870 drm/amd/display: Disable DMCUB timeout for DCN35
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable DMCUB timeout for DCN35 Why DMCUB can intermittently take longer than expected to process commands. Old ASIC policy was to continue while logging a diagnostic error - which works fine for ASIC without IPS...
CVE-2024-46870 drm/amd/display: Disable DMCUB timeout for DCN35
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable DMCUB timeout for DCN35 Why DMCUB can intermittently take longer than expected to process commands. Old ASIC policy was to continue while logging a diagnostic error - which works fine for ASIC without IPS...