Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6918-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6918-1 advisory. It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6917-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6917-1 advisory. Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointe...

CVE-2023-3978 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-3978 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45142 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-45142 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45288 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-45288 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-39325 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-39325 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

kernel: net: ena: Fix incorrect descriptor free behavior

This is a vulnerability in the Linux kernel's Elastic Network Adapter ENA driver, which manages network interfaces on certain platforms. The driver utilizes two types of transmit TX queues: one for packets from the network stack and another for packets directed by XDP eXpress Data Path operations...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6893-3)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6893-3 advisory. It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6898-3)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6898-3 advisory. Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointe...

The vulnerability of the wireless adapter for Xbox Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the wireless adapter in Xbox Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious link or malicious file...

SUSE CVE-2022-48840

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix hang during reboot/shutdown Recent commit 974578017fc1 "iavf: Add waiting so the port is initialized in remove" adds a wait-loop at the beginning of iavfremove to ensure that port initialization is finished prior...

Rockwell Automation 5015-AENFTXT Input Validation Error Vulnerability

Rockwell Automation 5015-AENFTXT is technical data from a Rockwell Automation FLEXHA 5000 I/O system specification. The Rockwell Automation 5015-AENFTXT has an input validation error vulnerability that can be exploited by an attacker to cause an unrecoverable failure of an auxiliary adapter...

SUSE CVE-2024-40999

In the Linux kernel, the following vulnerability has been resolved: net: ena: Add validation for completion descriptors consistency Validate that first flag is set only for the first descriptor in multi-buffer packets. In case of an invalid descriptor, a reset will occur. A new reset reason for R...

CVE-2024-6089

An input validation vulnerability exists in the Rockwell Automation 5015 - AENFTXT when a manipulated PTP packet is sent, causing the secondary adapter to result in a major nonrecoverable fault. If exploited, a power cycle is required to recover the product...

DEBIAN-CVE-2022-48840

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix hang during reboot/shutdown Recent commit 974578017fc1 "iavf: Add waiting so the port is initialized in remove" adds a wait-loop at the beginning of iavfremove to ensure that port initialization is finished prior...

Rockwell Automation 5015 - AENFTXT 安全漏洞

Rockwell Automation 5015-AENFTXT is technical data from a Rockwell Automation FLEXHA 5000 I/O system specification. The Rockwell Automation 5015-AENFTXT has an input validation error vulnerability that can be exploited by an attacker to cause an unrecoverable failure of an auxiliary adapter...

USN-6898-1: Linux kernel vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. CVE-2022-38096 Gui-Dong Han discovered that the...

The vulnerability of the wireless adapter for Xbox Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the wireless adapter in Xbox Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6898-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6898-1 advisory. Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointe...