CVE-2024-23373

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released...

CVE-2024-23373 Use After Free in Graphics

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released...

CVE-2024-23373 Use After Free in Graphics

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released...

CVE-2024-23373

CVE-2024-23373 is a memory corruption/Use-After-Free issue in Qualcomm graphics stack related to IOMMU unmap handling, where a failed unmap can cause DMA/anonymous buffers to be released. Public sources assign a HIGH impact with local attack requirements (no user interaction). The CVE is document...

PT-2024-19849 · Qualcomm · 205 Mobile Platform Firmware +200

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when an IOMMU unmap operation fails, resulting in the release of DMA and anon buffers. Recommendations:...

CVE-2022-1941

...

[SECURITY] Fedora 39 Update: kitty-0.31.0-3.fc39

Offloads rendering to the GPU for lower system load and buttery smooth scrolling. Uses threaded rendering to minimize input latency. - Supports all modern terminal features: graphics images, unicode, true-col or, OpenType ligatures, mouse protocol, focus tracking, bracketed paste and several new...

The vulnerability of the virtio-net server interface of QEMU allows a attacker to trigger a information leak.

The vulnerability of the virtio-net server QEMU interface is related to the TX cleanup function in the virtionetFlushTx function. This vulnerability occurs when the guest functions VIRTIONETFHASHREPORT, VIRTIOFVERSION1, and VIRTIONETFMRGRXBUF are enabled. Exploiting this vulnerability can allow a...

Astra Linux – Vulnerability in OpenSSL

Issue summary: Calling the OpenSSL API function SSLfreebuffers may cause memory to be accessed that was previously freed in some situations. Impact summary: Using memory that has already been freed can lead to various potential consequences, such as corruption of valid data, crashes, or execution...

DEBIAN-CVE-2024-38306

In the Linux kernel, the following vulnerability has been resolved: btrfs: protect folio::private when attaching extent buffer folios BUG Since v6.8 there are rare kernel crashes reported by various people, the common factor is bad page status error messages like this: BUG: Bad page state in...

Malicious code in NSеrvісeBus.ProtoBսf (NuGet)

--- -= Per source details. Do not edit below this line.=-...

DEBIAN-CVE-2022-48730

In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fix potential spectre v1 gadget It appears like nr could be a Spectre v1 gadget as it's supplied by a user and used as an array index. Prevent the contents of kernel memory from being leaked to userspace via...

CVE-2022-48711 tipc: improve size validations for received domain records

In the Linux kernel, the following vulnerability has been resolved: tipc: improve size validations for received domain records The function tipcmonrcv allows a node to receive and process domainrecord structs from peer nodes to track their views of the network topology. This patch verifies that t...

[SECURITY] Fedora 40 Update: kitty-0.35.1-4.fc40

Offloads rendering to the GPU for lower system load and buttery smooth scrolling. Uses threaded rendering to minimize input latency. - Supports all modern terminal features: graphics images, unicode, true-col or, OpenType ligatures, mouse protocol, focus tracking, bracketed paste and several new...

PT-2024-9285 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel's virtio component, where the driver incorrectly assumes that the notify callback is only received when the device is done with all the queued...

Fedora: Security Advisory (FEDORA-2024-15039ba9f9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the libarchive library, related to reading beyond the buffer boundaries of memory, allows a hacker to cause a service failure.

The vulnerability of the libarchive library is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions through a specially created archive...

OESA-2024-1720 openssl security update

The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength general purpose cryptography library. The project i...

Important: kernel

Issue Overview: A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVMEIOCTLRESET and the NVMEIOCTLSUBSYSRESET through the device file of the driver, resulting in a PCIe link disconnect. CVE-2022-3169 A vulnerability classified as...

OESA-2024-1693 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure tx skbs always have the MPTCP ext Due to signed/unsigned comparison, the expression: info-sizegoal - skb-len 0 evaluates to true when the size goal...