CVE-2024-26877 crypto: xilinx - call finalize with bh disabled

In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx - call finalize with bh disabled When calling cryptofinalizerequest, BH should be disabled to avoid triggering the following calltrace: ------------ cut here ------------ WARNING: CPU: 2 PID: 74 at...

PT-2025-40178

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the amdgpu driver related to the handling of graphics processing interrupts. Specifically, the cp ecc error irq interrupt is incorrectly disable...

CVE-2022-29540

CVE-2022-29540 refers to a cross-site scripting vulnerability in RESI Gemini-Net 4.2 (resi-calltrace). The issue involves multiple XSS flaws where unauthenticated remote attackers can inject arbitrary script/HTML into reflected HTTP GET parameters without sanitization, affecting numerous endpoint...

Command injection

resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Command Injection. It does not properly check the parameters sent as input before they are processed on the server. Due to the lack of validation of user input, an unauthenticated attacker can bypass the syntax intended by the software e.g.,...

CVE-2022-29539: Improper Neutralization of Special Elements used in an OS Command

resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Command Injection. It does not properly check the parameters sent as input before they are processed on the server. Due to the lack of validation of user input, an unauthenticated attacker can bypass the syntax intended by the software e.g.,...