3304 matches found
CVE-2024-49973 r8169: add tally counter fields added with RTL8125
In the Linux kernel, the following vulnerability has been resolved: r8169: add tally counter fields added with RTL8125 RTL8125 added fields to the tally counter, what may result in the chip dma'ing these new fields to unallocated memory. Therefore make sure that the allocated memory area is big...
CVE-2024-49885
CVE-2024-49885: Linux kernel mm/slub kmalloc redzone issue resolved. Root cause: orig_size handling treated wasted space as redzone and, with init_on_free=1, clears full object->size including metadata, causing check_object() to misclassify the object as redzone. Fix: clear the used area using...
AZL-51189 CVE-2024-47709 affecting package kernel for versions less than 6.6.56.1-5
In the Linux kernel, the following vulnerability has been resolved: can: bcm: Clear bo-bcmprocread after removeprocentry. syzbot reported a warning in bcmrelease. 0 The blamed change fixed another warning that is triggered when connect is issued again for a socket whose connected device has been...
UBUNTU-CVE-2024-47676
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway Syzbot reports a UAF in hugetlbfault. This happens because vmfanonprepare could drop the per-VMA lock and allow the current VMA to be freed before hugetlbvmaunlockread is...
CVE-2024-47717 RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data With the latest Linux-6.11-rc3, the below NULL pointer crash is observed when SBI PMU snapshot is enabled for the guest and the guest is forcefully powered-off...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a processor's presumed entry into a reserved area due to the incorrect use of GB pages when creating identit...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of the skb in the can327 subsystem of the can protocol during netdev shutdown, resulting i...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of an overflow in the iommufd subsystem for the ALIGN function during iova allocation, whi...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak in the pci driver for the can subsystem mcan...
Security update for OpenIPMI
This update for OpenIPMI fixes the following issues: CVE-2024-42934: Fixed missing check on the authorization type on incoming LAN messages in IPMI simulator bsc1229910 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
netfilter: flowtable: validate vlan header
...
The vulnerability of the Windows Hyper-V hardware virtualization system allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows Hyper-V hardware virtualization system is related to the activation of functions from an unverified and uncontrolled area. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2024-6755 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to the Windows Hyper-V hardware virtualization system and is connected to the inclusion of features from an untrusted controlled area. This can allow a remote...
Malicious code in kupo-capacitor-statusbar-safe-area (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4a521062da847cc39c10b9c614e06ebe609aa0aa6285be6e55fb1a5e2bf84ee7 The OpenSSF Package Analysis project identified 'kupo-capacitor-statusbar-safe-area' @ 9.0.0 npm as malicious. It is considered malicious becaus...
MAL-2024-9074 Malicious code in kupo-capacitor-statusbar-safe-area (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4a521062da847cc39c10b9c614e06ebe609aa0aa6285be6e55fb1a5e2bf84ee7 The OpenSSF Package Analysis project identified 'kupo-capacitor-statusbar-safe-area' @ 9.0.0 npm as malicious. It is considered malicious becaus...
CVE-2024-20432
A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, low-privileged, remote attacker to perform a command injection attack against an affected device. This vulnerability is due to improper user authorization and insufficient...
CVE-2024-20455
A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense UTD component of Cisco IOS XE Software in controller mode could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists...
Multiple NTT EAST Home GateWay/Hikari Denwa routers fail to restrict access permissions
Overview Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION fail to restrict access permissions CWE-451. Keishi Awata of logicalmixed reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...
PT-2024-38315 · WordPress · The Premium Packages – Sell Digital Products Securely
Name of the Vulnerable Software and Affected Versions: The Premium Packages – Sell Digital Products Securely plugin for WordPress versions up to, and including, 5.9.1 Description: The issue is related to Cross-Site Request Forgery due to missing nonce validation on the addRefund and wpdmpp async...