PT-2024-9285 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel's virtio component, where the driver incorrectly assumes that the notify callback is only received when the device is done with all the queued...

USN-6818-4: Linux kernel (HWE) vulnerabilities

Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service system crash. CVE-2023-6356, CVE-2023-6535, CVE-2023-6536 It was...

DEBIAN-CVE-2024-36973

In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: fix double free in the error handling of gpauxbusprobe When auxiliarydeviceadd returns error and then calls auxiliarydeviceuninit, callback function gpauxiliarydevicerelease calls idafree and...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to a denial of service due to IBM Java SDK (CVE-2024-38264)

Summary IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to a denial of service due to IBM Java SDK, Java Technology Edition. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-38264 DESCRIPTION: The IBM SDK, Jav...

The vulnerability of the interface_authorized_store() function in the Linux kernel USB driver allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the interfaceauthorizedstore function in the drivers/usb/core/sysfs.c file of the Linux USB driver kernel is related to an infinite wait loop for resources. Exploiting this vulnerability could allow a attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the disable_{show,store}() functions in the Linux kernel USB driver allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the disableshow,store functions in the drivers/usb/core/port.c file of the Linux kernel’s USB driver is related to an infinite waiting loop for resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

PT-2024-27978 · Gnome +2 · Gnome Settings Daemon +2

Name of the Vulnerable Software and Affected Versions: GNOME Settings Daemon versions through 46.0 Description: Mismatches in interpreting USB authorization policy between GNOME Settings Daemon and the Linux kernel's underlying device matching logic allow a physically proximate attacker to access...

The vulnerability of the KNX Bus-System component of the microprogramming software for ABB Display 55, Display 63, Display 70, RoomTouch 4, BCU KNX devices allows a hacker to gain control over these devices by accessing the KNX bus.

The vulnerability of the KNX Bus-System microprogramming software components of ABB Display 55, Display 63, Display 70, RoomTouch 4, and BCU KNX lies in the lack of protection for operational data. Exploiting this vulnerability could allow an attacker to gain control over devices by accessing the...

Ubuntu 22.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-6818-3)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6818-3 advisory. Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference...

The vulnerability of the QEMU hardware emulation software, related to the cycle with an unreachable exit condition, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulator is related to an infinite loop error in the emulation of the USB xHCI controller during the calculation of the TRB ring length. Exploiting this vulnerability can allow a hacker to cause a system failure...

USN-6819-3: Linux kernel (OEM) vulnerabilities

Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service system crash. CVE-2023-6356, CVE-2023-6535, CVE-2023-6536 Chenyuan...

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6819-3)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6819-3 advisory. Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference...

USN-6828-1: Linux kernel (Intel IoTG) vulnerabilities

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service system crash. CVE-2023-47233 It was...

Ubuntu 23.10 : Linux kernel (ARM laptop) vulnerabilities (USN-6818-2)

The remote Ubuntu 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6818-2 advisory. Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference...

The vulnerability of the qemu-kvm hardware emulation package from QEMU allows a attacker to trigger a service failure.

The vulnerability of the qemu-kvm hardware emulation package from QEMU is related to the lack of checks to ensure that the buffer pointer does not overlap with the MMIO region during USB packet transmission. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the KNX Bus-System microprogramming software components in devices such as ABB Display 55, Display 63, Display 70, RoomTouch 4, BCU KNX allows attackers to exploit these vulnerabilities to gain enhanced privileges.

The vulnerability of the KNX Bus-System microprogramming software components in devices such as ABB Display 55, Display 63, Display 70, RoomTouch 4, and BCU KNX is related to the bypassing of authentication procedures. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2024-4009

Replay Attack in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to capture/replay KNX telegram to local KNX Bus-System...

CVE-2024-4009

Replay Attack in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to capture/replay KNX telegram to local KNX Bus-System...

CVE-2024-4008

FDSK Leak in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to take control via access to local KNX Bus-System...

CVE-2024-4009

This CVE (CVE-2024-4009) affects ABB KNX hardware and related components: ABB, Busch-Jaeger, FTS Display (v1.00), and BCU (v1.3.0.33). The vulnerability allows an attacker with Local access to capture and replay KNX telegrams on the local KNX Bus-System. Documented impact includes high confidenti...