MAL-2024-8979 Malicious code in atomic-swap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac066b0cc0733df2bbd435f00ca5fc33d38e5fe92d46e9a41e1067c8764a27df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: isdn: mISDN: Fix sleeping function called from invalid context

In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: Fix sleeping function called from invalid context The driver can call card-isac.release function from an atomic context. Fix this by calling this function after releasing the lock. The following log reveals it:...

PT-2024-33969

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises from the function bpf ringbuf reserve being invoked from a tracepoint, which disables preemption. Using spinlock t in this context can lead to a "sleep in atomic"...

RHSA-2020:2479 Red Hat Security Advisory: OpenShift Container Platform 3.11 atomic-openshift security update

Bulletin has no description...

RHSA-2019:1852 Red Hat Security Advisory: OpenShift Container Platform 3.9 atomic-openshift security update

Bulletin has no description...

RHSA-2019:1632 Red Hat Security Advisory: Red Hat OpenShift Container Platform 3.10 atomic-openshift security update

Bulletin has no description...

RHSA-2019:4052 Red Hat Security Advisory: OpenShift Container Platform 3.11 atomic-openshift security update

Bulletin has no description...

RHSA-2020:0020 Red Hat Security Advisory: OpenShift Container Platform 3.11 atomic-openshift security update

Bulletin has no description...

RHSA-2019:3811 Red Hat Security Advisory: OpenShift Container Platform 3.9 atomic-openshift security update

Bulletin has no description...

RHSA-2019:2989 Red Hat Security Advisory: OpenShift Container Platform 3.10 atomic-openshift kube-apiserver security update

Bulletin has no description...

RHSA-2019:2552 Red Hat Security Advisory: OpenShift Container Platform 3.10 atomic-openshift-web-console security update

Bulletin has no description...

RHSA-2016:2915 Red Hat Security Advisory: atomic-openshift security and bug fix update

Bulletin has no description...

RHSA-2016:2696 Red Hat Security Advisory: atomic-openshift security and bug fix update

Bulletin has no description...

RHSA-2016:2778 Red Hat Security Advisory: atomic-openshift-utils security and bug fix update

Bulletin has no description...

RHSA-2016:2064 Red Hat Security Advisory: atomic-openshift security update

Bulletin has no description...

RHSA-2016:1427 Red Hat Security Advisory: atomic-openshift security and bug fix update

Bulletin has no description...

SUSE CVE-2024-46692

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Mark getwqctx as atomic call Currently getwqctx is wrongly configured as a standard call. When two SMC calls are in sleep and one SMC wakes up, it calls getwqctx to resume the corresponding sleeping thread. B...

CVE-2024-46692

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Mark getwqctx as atomic call Currently getwqctx is wrongly configured as a standard call. When two SMC calls are in sleep and one SMC wakes up, it calls getwqctx to resume the corresponding sleeping thread. B...

CVE-2024-46691

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Move unregister out of atomic section Commit '9329933699b3 "soc: qcom: pmicglink: Make client-lock non-sleeping"' moved the pmicglink client list under a spinlock, as it is accessed by the rpmsg/glink callback,...

CVE-2024-46678

In the Linux kernel, the following vulnerability has been resolved: bonding: change ipseclock from spin lock to mutex In the cited commit, bond-ipseclock is added to protect ipseclist, hence xdodevstateadd and xdodevstatedelete are called inside this lock. As ipseclock is a spin lock and such...