CVE-2024-50193

In the Linux kernel, the following vulnerability has been resolved: x86/entry32: Clear CPU buffers after register restore in NMI return CPU buffers are currently cleared after call to excnmi, but before register state is restored. This may be okay for MDS mitigation but not for RDFS. Because RDFS...

AZL-53555 CVE-2024-50193 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: x86/entry32: Clear CPU buffers after register restore in NMI return CPU buffers are currently cleared after call to excnmi, but before register state is restored. This may be okay for MDS mitigation but not for RDFS. Because RDFS...

DEBIAN-CVE-2024-50193

In the Linux kernel, the following vulnerability has been resolved: x86/entry32: Clear CPU buffers after register restore in NMI return CPU buffers are currently cleared after call to excnmi, but before register state is restored. This may be okay for MDS mitigation but not for RDFS. Because RDFS...

DEBIAN-CVE-2024-50175

In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: Remove usecount guard in stopstreaming The usecount check was introduced so that multiple concurrent Raw Data Interfaces RDIs could be driven by different virtual channels VCs on the CSIPHY input driving the...

UBUNTU-CVE-2024-50193

In the Linux kernel, the following vulnerability has been resolved: x86/entry32: Clear CPU buffers after register restore in NMI return CPU buffers are currently cleared after call to excnmi, but before register state is restored. This may be okay for MDS mitigation but not for RDFS. Because RDFS...

UBUNTU-CVE-2024-50175

In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: Remove usecount guard in stopstreaming The usecount check was introduced so that multiple concurrent Raw Data Interfaces RDIs could be driven by different virtual channels VCs on the CSIPHY input driving the...

CVE-2024-50193 x86/entry_32: Clear CPU buffers after register restore in NMI return

In the Linux kernel, the following vulnerability has been resolved: x86/entry32: Clear CPU buffers after register restore in NMI return CPU buffers are currently cleared after call to excnmi, but before register state is restored. This may be okay for MDS mitigation but not for RDFS. Because RDFS...

CVE-2024-50193

In the Linux kernel, the following vulnerability has been resolved: x86/entry32: Clear CPU buffers after register restore in NMI return CPU buffers are currently cleared after call to excnmi, but before register state is restored. This may be okay for MDS mitigation but not for RDFS. Because RDFS...

CVE-2024-50193 x86/entry_32: Clear CPU buffers after register restore in NMI return

In the Linux kernel, the following vulnerability has been resolved: x86/entry32: Clear CPU buffers after register restore in NMI return CPU buffers are currently cleared after call to excnmi, but before register state is restored. This may be okay for MDS mitigation but not for RDFS. Because RDFS...

CVE-2024-50193

CVE-2024-50193 affects the Linux kernel on x86. The vulnerability is in x86/entry_32 where CPU buffers were cleared after exc_nmi but before restoring registers. The fix moves CLEAR_CPU_BUFFERS to after RESTORE_ALL_NMI, addressing RDFS mitigation requirements. Public metrics show CVSS v3.1 base s...

CVE-2024-50193 x86/entry_32: Clear CPU buffers after register restore in NMI return

In the Linux kernel, the following vulnerability has been resolved: x86/entry32: Clear CPU buffers after register restore in NMI return CPU buffers are currently cleared after call to excnmi, but before register state is restored. This may be okay for MDS mitigation but not for RDFS. Because RDFS...

CVE-2024-50175

CVE-2024-50175 is a Linux kernel CAMSS issue where an incorrect use_count guard in stop_streaming for multiple VCs on the same RDI can cause stop_streaming to leave buffers in an active state and fail to re-start (noted as -EBUSY). The vulnerability was resolved by removing the use_count check, w...

DEBIAN-CVE-2024-50145

In the Linux kernel, the following vulnerability has been resolved: octeonep: Add SKB allocation failures handling in octepoqprocessrx buildskb returns NULL in case of a memory allocation failure so handle it inside octepoqprocessrx to avoid NULL pointer dereference. octepoqprocessrx is called...

CVE-2024-50145 octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()

In the Linux kernel, the following vulnerability has been resolved: octeonep: Add SKB allocation failures handling in octepoqprocessrx buildskb returns NULL in case of a memory allocation failure so handle it inside octepoqprocessrx to avoid NULL pointer dereference. octepoqprocessrx is called...

CVE-2024-33033

CVE-2024-33033 is a memory corruption issue arising during IOCTL processing to unmap buffers in Qualcomm chipsets. Affected component is not explicitly named beyond “unmap the buffers” in IOCTL paths; the entry indicates local attack vector with low complexity and requires low privileges, with no...

CVE-2024-33033 Use After Free in ComputerVision

Memory corruption while processing IOCTL calls to unmap the buffers...

golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

CVE-2024-50072 x86/bugs: Use code segment selector for VERW operand

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Use code segment selector for VERW operand Robert Gill reported below GP in 32-bit mode when dosemu software was executing vm86 system call: general protection fault: 0000 1 PREEMPT SMP CPU: 4 PID: 4610 Comm: dosemu.bin...

The vulnerabilities of microprogrammed software in Wi-Fi transceivers, Wi-Fi amplifiers, Fiber ONTs, DSL/Ethernet CPE routers allow attackers to cause service interruptions.

The vulnerability of microprogrammed software in Wi-Fi transceivers, Wi-Fi amplifiers, Fiber ONTs, and DSL/Ethernet CPE routers lies in the fact that the operation data is exposed beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerabilities of microprogrammed software in Wi-Fi transceivers, Wi-Fi amplifiers, Fiber ONTs, DSL/Ethernet CPE routers allow attackers to cause service interruptions.

The vulnerability of microprogrammed software in Wi-Fi transceivers, Wi-Fi amplifiers, Fiber ONTs, and DSL/Ethernet CPE routers lies in the fact that the operation data is exposed beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...