CVE-2024-49973

CVE-2024-49973 affects the Linux kernel in the r8169/RTL8125 hardware path. RTL8125 tally counter was extended with new fields; if the host memory allocation isn’t large enough to hold all tally counter values, the device could DMA into unallocated memory. The fix is to allocate a memory area lar...

SUSE CVE-2024-47714

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: use hweight16 to get correct tx antenna The chainmask is u16 so using hweight8 cannot get correct txant. Without this patch, the txant of band 2 would be -1 and lead to the following issue: BUG: KASAN:...

UBUNTU-CVE-2024-47714

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: use hweight16 to get correct tx antenna The chainmask is u16 so using hweight8 cannot get correct txant. Without this patch, the txant of band 2 would be -1 and lead to the following issue: BUG: KASAN:...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an array out-of-bounds access in SoC statistics...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the mt7996 chip of the wifi driver mt76 using the wrong method for obtaining the correct tx antenna...

PT-2024-33815

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the r8169 driver and the RTL8125 chip. The chip added fields to the tally counter, which may result in the chip dma'in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper bounds checking of the ASoC component in the sx control...

ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object

...

CVE-2024-48772

An issue in C-CHIP com.cchip.cchipamaota v.1.2.8 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48772

The smart home product solution C-CHIP (com.cchip.cchipamaota) version v.1.2.8 is vulnerable to an incorrect authorization issue. This flaw allows a remote attacker to obtain sensitive information through the device's firmware update process. While the severity is rated as CRITICAL (CVSS 9.1) wit...

CVE-2024-48772

An issue in C-CHIP com.cchip.cchipamaota v.1.2.8 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48772

An issue in C-CHIP com.cchip.cchipamaota v.1.2.8 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48772: Incorrect Authorization

An issue in C-CHIP com.cchip.cchipamaota v.1.2.8 allows a remote attacker to obtain sensitive information via the firmware update process...

PT-2024-33208

Name of the Vulnerable Software and Affected Versions C-CHIP version 1.2.8 Description The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations For version 1.2.8, at the moment, there is no information about a newer version that contains ...

C-CHIP 安全漏洞

C-CHIP is a smart home product solution from China Cixin Micro C-CHIP. A security vulnerability exists in C-CHIP version v.1.2.8, which stems from an issue that allows remote attackers to obtain sensitive information through the firmware update process...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the vdec module, which may allow out-of-bounds writes...

SUSE CVE-2024-46811

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index may exceed array range within fpuupdatebwboundingbox Why Coverity reports OVERRUN warning. soc.numstates could be 40. But array range of bwparams-clktable.entries is 8. How Assert if soc.numstates great...

CVE-2024-46853

In the Linux kernel, the following vulnerability has been resolved: spi: nxp-fspi: fix the KASAN report out-of-bounds bug Change the memcpy length to fix the out-of-bounds issue when writing the data that is not 4 byte aligned to TX FIFO. To reproduce the issue, write 3 bytes data to NOR chip. dd...

CVE-2024-46853

In the Linux kernel, the following vulnerability has been resolved: spi: nxp-fspi: fix the KASAN report out-of-bounds bug Change the memcpy length to fix the out-of-bounds issue when writing the data that is not 4 byte aligned to TX FIFO. To reproduce the issue, write 3 bytes data to NOR chip. dd...

UBUNTU-CVE-2024-46811

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index may exceed array range within fpuupdatebwboundingbox Why Coverity reports OVERRUN warning. soc.numstates could be 40. But array range of bwparams-clktable.entries is 8. How Assert if soc.numstates great...