SUSE CVE-2024-53137

In the Linux kernel, the following vulnerability has been resolved: ARM: fix cacheflush with PAN It seems that the cacheflush syscall got broken when PAN for LPAE was implemented. User access was not enabled around the cache maintenance instructions, causing them to fault...

The vulnerability of the rxrpc component in the Linux operating system’s kernel allows a hacker to gain access to confidential information.

The vulnerability of the rxrpc component in the Linux operating system’s kernel is related to the exposure of sensitive information. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

PT-2025-3603 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel's ptrace system call, specifically the arm64 architecture. The problem arises from the fpmr set function not initializing the temporary fpmr...

DEBIAN-CVE-2024-53140

In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data. It provides the families the following ops: - start - optional kicks off the dumping process - dump - actual dump helper, keeps getti...

CVE-2024-53128

The CVE-2024-53128 issue is in the Linux kernel’s sched/task_stack path: when CONFIG_KASAN_SW_TAGS and CONFIG_KASAN_STACK are enabled, object_is_on_stack() may yield incorrect results because tagged pointers in the object could differ from the untagged stack pointer. The result can trigger warnin...

kernel: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

A vulnerability was found in the Linux kernel's amdgpu driver in the amdgpuvceringparsecs function where the size variable is initialized with a pointer that may not be properly set before use. This issue could lead to unpredictable behavior in the system...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an issue with the cacheflush system call after the PAN implementation in the ARM architecture, which results...

GriceMobile com.grice.call 安全漏洞

GriceMobile com.grice.call is an application from GriceMobile, Inc. A security vulnerability exists in GriceMobile com.grice.call version 4.5.2, which originates from allowing any installed application to send a crafted intent to make a phone call without user interaction via...

PT-2024-27669 · Unknown · Com.Grice.Call

Name of the Vulnerable Software and Affected Versions: com.grice.call application version 4.5.2 Description: The issue allows any installed application, even those without permissions, to place phone calls without user interaction by sending a crafted intent via the...

PT-2024-16660 · WordPress · Authors List

Name of the Vulnerable Software and Affected Versions: The Authors List plugin for WordPress versions up to, and including, 2.0.4 Description: The issue allows unauthenticated attackers to execute arbitrary shortcodes due to the software permitting users to execute an action that does not properl...

Mister org.mistergroup.shouldianswer 安全漏洞

Mister org.mistergroup.shouldianswer is an application from Mister, Inc. A security vulnerability exists in Mister org.mistergroup.shouldianswer version 1.4.264, which originates from allowing any installed application to be used via the org.mistergroup.shouldianswer.ui.defaultdialer...

gRPC: Reachable Assertion

A flaw was found in the gRPC library. Affected versions of this package are vulnerable to a reachable assertion, causing the abort function to be called and resulting in a denial of service...

gRPC: hpack table accounting errors can lead to denial of service

A flaw was found in the gRPC lib. This vulnerability allows hpack table accounting errors that could lead to unwanted disconnects between clients and servers in exceptional cases. This issue leads to Unbounded memory buffering in the HPACK parser and Unbounded CPU consumption in the HPACK parser...

CVE-2024-49417

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2024-49417

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2024-49417

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2024-49417

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2024-49417

CVE-2024-49417 affects Samsung Smart Touch Call prior to 1.0.0.8. The issue is caused by the use of an implicit intent for sensitive communications, which can allow a local attacker to launch privileged activities. User interaction is required to trigger the vulnerability. Documents consistently ...

SUSE CVE-2024-53122

In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcprcvspaceadjust Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow list before starting the 3whs. A racing recvmsg spooling data...

PT-2024-33527

Name of the Vulnerable Software and Affected Versions Smart Touch Call versions prior to 1.0.0.8 Description The use of implicit intent for sensitive communication in Smart Touch Call allows local attackers to launch privileged activities. User interaction is required to trigger this issue...