SUSE CVE-2024-27400

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: once more fix the call oder in amdgputtmmove v2 This reverts drm/amdgpu: fix ftrace event amdgpubomove always move on same heap. The basic problem here is that after the move the old location is simply not available a...

CVE-2024-27400 drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: once more fix the call oder in amdgputtmmove v2 This reverts drm/amdgpu: fix ftrace event amdgpubomove always move on same heap. The basic problem here is that after the move the old location is simply not available a...

CVE-2024-27400: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: once more fix the call oder in amdgputtmmove v2 This reverts drm/amdgpu: fix ftrace event amdgpubomove always move on same heap. The basic problem here is that after the move the old location is simply not available a...

CVE-2022-48669

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix potential memleak in paprgetattr buf is allocated in paprgetattr, and krealloc of buf could fail. We need to free the original buf in the case of failure...

PT-2024-4101

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 6.8.2 Description The vulnerability is related to a Use-After-Free UAF bug in the tipc buf append function in the Linux kernel's Transparent Inter-Process Communication TIPC module. This bug can be exploited to...

The vulnerability of the buf_contents_changed() function in the Vim text editor allows a hacker to trigger a service failure.

The vulnerability of the bufcontentschanged function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Malicious code in build-buf-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a304d66d7773527e0729b9cd85dabce6d67e562734ee2297be4fac9ffd6be8b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8552 Malicious code in build-buf-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a304d66d7773527e0729b9cd85dabce6d67e562734ee2297be4fac9ffd6be8b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Unbreakable Enterprise kernel security update

4.14.35-2047.530.5.1 - Revert 'rtnetlink: Reject negative ifindexes in RTMNEWLINK' Saeed Mirzamohammadi Orabug: 35896831 4.14.35-2047.530.5 - netfilter: ipset: add the missing IPSETHASHWITHNET0 macro for ipsethashnetportnet.c Kyle Zeng Orabug: 35824288 CVE-2023-42753 - netfilter: xtu32: validate...

PYSEC-2023-150

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux Kernel suffers from a memory misreference vulnerability that originates from a confusion in the instruction responsible for freeing memory in the vmxnet3rqallocrxbuf,...

CLSA-2023-1686651204 kernel: Fix of 25 CVEs

cgroup: Use open-time cgroup namespace for process migration perm checks CVE-2021-4197 - cgroup: Use open-time credentials for process migraton perm checks CVE-2021-4197 - vt: drop old FONT ioctls CVE-2021-33656 - fbmem: Check virtual screen sizes in fbsetvar CVE-2021-33655 - fbcon: Prevent that...

kernel: dma-buf/dma-resv: check if the new fence is really later

In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-resv: check if the new fence is really later Previously when we added a fence to a dmaresv object we always assumed the the newer than all the existing fences. With Jason's work to add an UAPI to explicit export/impor...

The vulnerability of the udmabuf_vm_fault() function in the drivers/dma-buf/udmabuf.c module of Linux kernel allows a attacker to escalate their privileges and execute arbitrary code.

The vulnerability of the udmabufvmfault function in the drivers/dma-buf/udmabuf.c module of Linux operating systems is related to unvalidated array indexing due to incorrect data validation. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

PT-2025-40226

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's v4l2-mem2mem subsystem related to insufficient locking protection of the num rdy parameter. This can lead to data races when accessing this parameter...

PT-2023-2687

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system, specifically in how a user restores an XFS image after failure with a dirty log journal. This issue...

GSD-2023-1002401 s390/decompressor: specify __decompress() buf len to avoid overflow

s390/decompressor: specify decompress buf len to avoid overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.232 by commit...

SUSE CVE-2019-6458

An issue was discovered in GNU Recutils 1.8. There is a memory leak in recbufnew in rec-buf.c when called from recparserset in rec-parser.c in librec.a...

PT-2023-36088

Name of the Vulnerable Software and Affected Versions buf redux affected versions not specified Description The buf redux crate has not had a release in over three years, and its maintainers are unreachable, which may lead to unresolved security issues. The repository is now archived, and there i...

PT-2022-6713

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub ISH driver, which could allow a local user to crash the system. The issue is related to errors in pointer...