266 matches found
PT-2026-26044
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the ntfs3 file system that can result in a Denial-of-Service DoS condition. A specially crafted NTFS image can trigger an infinite loop when processing an ATTR LIST...
PT-2024-33700 · Qualcomm · Snapdragon
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs while processing multiple IOCTL calls from HLOS to DSP. There is also a logic bug in the FASTRPC ATTR KEEP MAP logic, which allows for the...
kernel security update
5.14.0-503.15.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
DEBIAN-CVE-2024-53101
In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in fromkuid and fromkgid ocfs2setattr uses attr-iamode, attr-iauid and attr-iagid in a trace point even though ATTRMODE, ATTRUID and ATTRGID aren't set. Initialize all fields of newattrs to avoid...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: f2fs: checked the validation of faultattrs in f2fsbuildfaultattr. It failed to check the validation of faultattrs in parseoptions; we will fix this by adding a check condition in f2fsbuildfaultattr. Also, use f2fsbuildfaultatt...
PT-2024-10699 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an incorrect bounds check in the sdpu extract attr seq function of sdp utils.cc, which could lead to a possible out of bounds...
kernel: powerpc/pseries: Fix potential memleak in papr_get_attr()
A flaw was found in the Linux kernel. A potential memleak in paprgetattr may lead to compromised availability...
AZL-53028 CVE-2024-50248 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: ntfs3: Add bounds checking to mienumattr Added bounds checking to make sure that every attr don't stray beyond valid memory region...
CVE-2024-50246
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add rough attr allocsize check...
CVE-2024-50246
CVE-2024-50246 is a Linux kernel vulnerability affecting the ntfs3 file-system code path. The issue stems from a missing or insufficient check related to the alloc_size for rough attribute handling in fs/ntfs3, which could allow a local attacker to exploit the flaw. The CVE is described with a CV...
kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
A vulnerability was found in the icebridgesetlink function in the Linux kernel. A missing check to verify whether the nlmsgfindattr function returns NULL or not could lead to a NULL pointer dereference, system instability, or crashes...
SUSE CVE-2024-43864
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix CT entry update leaks of modify header context The cited commit allocates a new modify header to replace the old one when updating CT entry. But if failed to allocate a new one, eg. exceed the max number firmware c...
CVE-2024-34727
In sdpucompareuuidwithattr of sdputils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
A vulnerability was found in the icebridgesetlink function in the Linux kernel. A missing check to verify whether the nlmsgfindattr function returns NULL or not could lead to a NULL pointer dereference, system instability, or crashes...
DEBIAN-CVE-2024-41018
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add a check for attrnames and oatbl Added out-of-bound checking for ane ATTRNAMEENTRY...
UBUNTU-CVE-2024-41018
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add a check for attrnames and oatbl Added out-of-bound checking for ane ATTRNAMEENTRY...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a lack of out-of-bounds checking when handling ATTRNAMEENTRY...
Malicious code in sap-attr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a59ce389b5949cf7bf1c25f52760579b8f39915fefd0b646fab91cdf176d0ef2 The OpenSSF Package Analysis project identified 'sap-attr' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7692 Malicious code in sap-attr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a59ce389b5949cf7bf1c25f52760579b8f39915fefd0b646fab91cdf176d0ef2 The OpenSSF Package Analysis project identified 'sap-attr' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...