7 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993234)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993234 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the static array...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50007)
ALSA: asihpi: potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVE...
CLSA-2024-1731348593 kernel: Fix of 18 CVEs
mm: call the securitymmapfile LSM hook in remapfilepages CVE-2024-47745 - slip: make slhcremember more robust against malicious packets CVE-2024-50033 - drm/amdkfd: amdkfdfreegttmem clear the correct pointer CVE-2024-49991 - firmwareloader: Block path traversal CVE-2024-47742 - ext4: avoid OOB...
SUSE CVE-2024-50007
In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. We shouldn't trust it blindly. This patch adds a sanity che...
AZL-52138 CVE-2024-50007 affecting package kernel for versions less than 5.15.173.1-1
In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. We shouldn't trust it blindly. This patch adds a sanity che...
UBUNTU-CVE-2024-50007
In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. We shouldn't trust it blindly. This patch adds a sanity che...
CVE-2024-50007
CVE-2024-50007 affects the Linux kernel ALSA asihpi/ASIHPI driver. The issue is an out-of-bounds access in a static array populated from firmware data; the index depends on firmware and was not validated. The patch adds a sanity check to ensure the index fits in the array size, preventing potenti...