SUSE CVE-2024-58237

In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidate packet pointers Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence, conservatively assume that each tail call invalidates packet pointers. Making...

Configure Audit Rules for File Deletion

Generally, it is highly risky to delete files in the OS. Misoperations by administrators or attacks may cause severe system faults. You are advised to audit and monitor system calls, such as rename, unlink, unlinkat, and renameat, and record deletion operation logs. Deleting system or service fil...

Configure Audit Rules for File Access Failures

System calls, such as open, truncate, ftruncate, create and openat, are audited and monitored. If the -EACCES or -EPERM error is returned, you lack the permission to access the files. In this case, audit logs need to be recorded. File access failures due to a lack of proper permissions are common...

jinja2: Jinja has a sandbox breakout through indirect reference to format method

A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to...

CVE-2024-45583

Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations...

CVE-2024-45583

Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations...

CVE-2024-45579

Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check...

CVE-2024-45577

Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information...

CVE-2024-45579

Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check...

CVE-2024-49830

CVE-2024-49830 describes memory corruption that occurs when processing an IOCTL call to set mixer controls on Qualcomm chipsets. The vulnerability affects the mixer-control handling path (IOCTL processing) and is supported by multiple feeds (NVD/RH/CVE list) with CVSSv3.1 base scores indicating h...

CVE-2024-45583

The CVE-2024-45583 issue is described as memory corruption when handling multiple IOCTL calls from user space to operate DMA operations on Qualcomm chipsets. The vulnerability centers on IOCTL processing that enables DMA-related operations and is tied to memory corruption as the primary impact. M...

CVE-2024-45583 Use After Free in Secure Processor

Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations...

CVE-2024-45579 Improper Input Validation in Camera Driver

Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check...

CVE-2024-45579 Improper Input Validation in Camera Driver

Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check...

CVE-2024-45579

CVE-2024-45579 concerns memory corruption that may occur when invoking IOCTL calls from userspace to the camera kernel driver due to a missing memory requirement check. The issue is described across multiple sources as an input validation/memory handling flaw in Qualcomm camera-related kernel cod...

CVE-2024-45577 Improper Input Validation in Camera Driver

Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information...

CVE-2024-45577

The CVE-2024-45577 entry concerns memory corruption in Qualcomm camera kernel driver triggered by user-space IOCTL calls to dump request information. Affected component: camera kernel driver in Qualcomm chipsets (unspecified models in the documents). Root cause: improper handling of IOCTL request...

PT-2025-19854 · Qualcomm · Snapdragon +10

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs when invoking IOCTL calls from userspace to the camera kernel driver in order to dump request information. This is caused by an error in the...

PT-2025-19858 · Qualcomm · Snapdragon +6

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs when handling multiple IOCTL calls from userspace to operate DMA operations. This can lead to unstable system behavior. No information is...

PT-2025-19856 · Qualcomm · Snapdragon +10

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption may occur due to a missing memory requirement check when invoking IOCTL calls from userspace to the camera kernel driver to dump request information. Recommendations: At th...