Patch Issued for Critical VMware vCenter Flaw Allowing Remote Code Execution

Broadcom on Tuesday released updates to address a critical security flaw impacting VMware vCenter Server that could pave the way for remote code execution. The vulnerability, tracked as CVE-2024-38812 CVSS score: 9.8, has been described as a heap-overflow vulnerability in the DCE/RPC protocol. "A...

SUSE CVE-2024-46672

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion wpasupplicant 2.11 sends since 1efdba5fdc2c "Handle PMKSA flush in the driver for SAE/OWE offload cases" SSID based PMKSA del commands. brcmfmac is not prepared and tries...

AZL-49257 CVE-2024-46672 affecting package kernel for versions less than 6.6.51.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion wpasupplicant 2.11 sends since 1efdba5fdc2c "Handle PMKSA flush in the driver for SAE/OWE offload cases" SSID based PMKSA del commands. brcmfmac is not prepared and tries...

ROS-20240909-03

Vulnerability of the opteeregisterdevice function in the drivers/tee/optee/device.c module of the Trusted Execution Environment TEE module of the Linux kernel is related to incorrect processing of the return code. return code. Exploitation of the vulnerability could allow an attacker to cause a...

SUSE CVE-2024-44933

In the Linux kernel, the following vulnerability has been resolved: bnxten : Fix memory out-of-bounds in bnxtfillhwrsstbl A recent commit has modified the code in bnxtreserverings to set the default RSS indirection table to default only when the number of RX rings is changing. While this works fo...

ROS-20240823-01

Vulnerability of amdgpurasgetcontext function in drm/amdgpu component of Linux operating system kernel is related to null pointer dereferencing on drmcvtmode failure. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability of brcmfnotifyescancomplete...

kernel: bnxt: prevent skb UAF after handing over to PTP worker

A possible use-after-free after handing over to PTP worker was found in the Linux kernel. This may lead to a crash...

kernel: wifi: brcmfmac: pcie: handle randbuf allocation failure

in linux kernel wifi, the kzalloc in brcmfpciedownloadfwnvram will return null if the physical memory has run out. Thereafter if getrandombytes is used, a null pointer dereference is triggered, causing allocation failure...

kernel: wifi: brcmfmac: pcie: handle randbuf allocation failure

in linux kernel wifi, the kzalloc in brcmfpciedownloadfwnvram will return null if the physical memory has run out. Thereafter if getrandombytes is used, a null pointer dereference is triggered, causing allocation failure...

kernel: bnxt: prevent skb UAF after handing over to PTP worker

A possible use-after-free after handing over to PTP worker was found in the Linux kernel. This may lead to a crash...

CVE-2024-42148

In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a system with 32 physical cpu cores or more, or when the user defines a number of Ethernet queues greater than or equal to FPSBMAXE1x...

CVE-2024-42148 bnx2x: Fix multiple UBSAN array-index-out-of-bounds

In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a system with 32 physical cpu cores or more, or when the user defines a number of Ethernet queues greater than or equal to FPSBMAXE1x...

CVE-2024-42148 bnx2x: Fix multiple UBSAN array-index-out-of-bounds

In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a system with 32 physical cpu cores or more, or when the user defines a number of Ethernet queues greater than or equal to FPSBMAXE1x...

VMware ESXi CVE-2024-37085 Targeted in Ransomware Campaigns

On Monday, July 29, Microsoft published an extensive threat intelligence blog on observed exploitation of CVE-2024-37085, an Active Directory integration authentication bypass vulnerability affecting Broadcom VMware ESXi hypervisors. The vulnerability, according to Redmond, was identified in...

VMware ESXi CVE-2024-37085 Targeted in Ransomware Campaigns

On Monday, July 29, Microsoft published an extensive threat intelligence blog on observed exploitation of CVE-2024-37085, an Active Directory integration authentication bypass vulnerability affecting Broadcom VMware ESXi hypervisors. The vulnerability, according to Redmond, was identified in...

CVE-2024-42148: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a system with 32 physical cpu cores or more, or when the user defines a number of Ethernet queues greater than or equal to FPSBMAXE1x...

A Bootiful Podcast: Cloud Legend Mark Fynes

Hi, Spring fans! In this installment I talk to Mark Fynes. Mark’s a field principal with Tanzu at Broadcom, building platforms with our Pivotal/VMWare/Broadcom customers for the past 10 years. Passionate technologist, working closely with developers, architects, IT-operations, security architectu...

Vulnerability fixed in Broadcom Symantec Privileged Access Management

Broadcom has fixed vulnerabilities in Broadcom Symantec Privileged Access Management. A malicious person could exploit the vulnerabilities to execute arbitrary code on the system or manipulate the operation of the system. The vulnerabilities with characteristics CVE-2024-36455, CVE-2024-36456 and...

Broadcom Symantec Privileged Access Management Cross-Site Scripting Vulnerability

Broadcom Symantec Privileged Access Management Broadcom Symantec PAM is a security software from Broadcom, Inc. It helps prevent security breaches by protecting sensitive administrative credentials, controlling privileged user access, proactively enforcing security policies, and monitoring and...

Broadcom Symantec Privileged Access Management Command Execution Vulnerability

Broadcom Symantec Privileged Access Management Broadcom Symantec PAM is a security software from Broadcom, Inc. It helps prevent security breaches by protecting sensitive administrative credentials, controlling privileged user access, proactively enforcing security policies, and monitoring and...