PT-2024-29178

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been discovered in the Linux kernel where some devices have a CBR address set to 0, causing a kernel panic when arch sync dma for cpu all is called. This issue occurs...

kernel: powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe()

A flaw was found in the Linux kernel in archpreparekprobe: where certain error conditions are not properly validated before dereferencing a pointer. Under specific circumstances, this can result in a NULL pointer dereference in kernel space. If triggered, the kernel may generate an oops or panic,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the kvmarchvcpuioctl vcpuload leak...

SUSE CVE-2024-26946

In the Linux kernel, the following vulnerability has been resolved: kprobes/x86: Use copyfromkernelnofault to read from unsafe address Read from an unsafe address with copyfromkernelnofault in archadjustkprobeaddr because this function is used before checking the address is in text or not...

SUSE CVE-2024-26884

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix hashtab overflow check on 32-bit arches The hashtab code relies on rounduppowoftwo to compute the number of hash buckets, and contains an overflow check by checking if the resulting value is 0. However, on 32-bit arches,...

Microsoft SQL (MSSQL) Server Detection (Windows SMB Login)

SMB login-based detection of Microsoft SQL MSSQL Server for Windows. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc...

CVE-2024-26847

A flaw was found in the Linux Kernel. Wrong spelling in the RTAS function table can cause reverse lookups yo fail and warn 'unexpected failed lookup for token' due to function names being used for resetting TCE tables. Linux kernel errors are possible when lockdep is enabled or the RTAS tracepoin...

AZL-40091 CVE-2024-26885 affecting package kernel for versions less than 6.6.29.1-3

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix DEVMAPHASH overflow check on 32-bit arches The devmap code allocates a number hash buckets equal to the next power of two of the maxentries value provided when creating the map. When rounding up to the next power of two,...

CVE-2024-26847 powerpc/rtas: use correct function name for resetting TCE tables

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: use correct function name for resetting TCE tables The PAPR spec spells the function name as "ibm,reset-pe-dma-windows" but in practice firmware uses the singular form: "ibm,reset-pe-dma-window" in the device tree...

SUSE-SU-2024:1158-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: - rebui...

PT-2024-40985 · Kubevirt · Kubevirt

Name of the Vulnerable Software and Affected Versions: kubevirt and related containers affected versions not specified Description: The issue is related to a rebuild against current security updates. Additionally, there are mentions of installing qemu-hw-usb-host to enable USB passthrough, groupi...

PT-2024-41781

Уязвимость функции restore v state модуля arch/riscv/kernel/signal.c подсистемы управления модулями платформы с архитектурой RISC-V ядра операционной системы Linux связана с ошибками управления состоянием. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Backdoored XZ Utils (CVE-2024-3094)

On Friday, March 29, after investigating anomalous behavior in his Debian sid environment, developer Andres Freund contacted an open-source security mailing list to share that he had discovered an upstream backdoor in widely used command line tool XZ Utils liblzma. The backdoor, added by an...

Exploit for Embedded Malicious Code in Tukaani Xz

Vulnerability Overview XZ is a data compression format that e...

XZ Utils SSHd Backdoor

On March 29th, 2024, security researcher Andres Freund discovered a backdoor in XZ Utils versions 5.6.0 and 5.6.1. Under certain conditions, this backdoor may allow remote access to the targeted system. This disclosure was posted to the Openwall mailing list. The security researcher mentions that...

PT-2024-7867

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the kprobes/x86 component of the Linux kernel, where the function arch adjust kprobe addr uses copy from kernel nofault to read from an unsafe address before...

SUSE CVE-2021-47134

In the Linux kernel, the following vulnerability has been resolved: efi/fdt: fix panic when no valid fdt found setuparch would invoke efiinit-efigetfdtparams. If no valid fdt found then initialbootparams will be null. So we should stop further fdt processing here. I encountered this issue on risc...

The vulnerability of the vgic_its_check_cache() function in the arch/arm64/kvm/vgic/vgic-its.c module of the Kernel-based Virtual Machine (KVM) virtualization subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vgicitscheckcache function in the arch/arm64/kvm/vgic/vgic-its.c module of the Kernel-based Virtual Machine KVM virtualization subsystem of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker ...

Ubuntu 22.04 LTS / 23.10 : Linux kernel vulnerabilities (USN-6680-2)

The remote Ubuntu 22.04 LTS / 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6680-2 advisory. discovered that the NFC Controller Interface NCI implementation in the Linux kernel did not properly handle certain memory allocation failure...

PT-2024-41778

Уязвимость функции sync icache dcache модуля arch/arm/mm/flush.c поддержки платформы ARM ядра операционной системы Linux связана с изменением поведения в новой версии или ином окружении. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...