PT-2024-12280 · Amd +8 · Sev Firmware +8

Name of the Vulnerable Software and Affected Versions: SEV firmware affected versions not specified Description: The issue is related to incomplete system memory cleanup in SEV firmware, which could allow a privileged attacker to corrupt guest private memory. This potentially results in a loss of...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleting chars in the buffer CVE-2022-48627 In the Linux kernel, the following vulnerability has been resolved: loop: Check for overflow while configuring loop CVE-2022-49993 In the...

Server MySQL Privilege Escalation

The vulnerability of the MySQL Server component relates to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

WordPress plugin Element Pack Elementor Addons has security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

Mitel’s various products have security vulnerabilities

Mitel 6800 Series and others are a series of phones from Mitel Canada. A security vulnerability exists in various Mitel products that stems from insufficient parameter cleanup during the SIP Phones startup process, which allows an authenticated attacker with administrative privileges to conduct a...

WordPress theme MDx has a security vulnerability

WordPress is a blogging platform from the WordPress Foundation developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress theme is a theme for WordPress. A security vulnerability exists in WordPress theme MDx version 2.0.3 and earlier versions,...

WordPress plugin Opal Membership has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

FreeBSD security vulnerabilities

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD that stems from the fact that when mounting a remote filesystem using NFS, the kernel does not clean up the remotely supplied filename, which can lead to proxy problems...

PT-2024-31379

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when xhci mem init fails and calls xhci mem cleanup to handle the damage. If the failure occurs before xhci-interrupters is allocated but after xhci-max interrupters has...

CVE-2024-0108

NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges...

kernel: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries RPC client pipefs dentries cleanup is in separated rpcremovepipedir workqueue,which takes care about pipefs superblock locking. In some special scenarios, when kernel...

kernel: netfilter: conntrack: serialize hash resizes and cleanups

A vulnerability was found in the Linux kernel’s netfilter and conntrack module, occurring during the resizing and cleanup of hash tables used for connection tracking. The kernel's nfctiteratecleanup function fails to efficiently handle simultaneous hash resizes and cleanups, leading to prolonged...

kernel: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered...

kernel: netfilter: conntrack: serialize hash resizes and cleanups

A vulnerability was found in the Linux kernel’s netfilter and conntrack module, occurring during the resizing and cleanup of hash tables used for connection tracking. The kernel's nfctiteratecleanup function fails to efficiently handle simultaneous hash resizes and cleanups, leading to prolonged...

kernel: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries RPC client pipefs dentries cleanup is in separated rpcremovepipedir workqueue,which takes care about pipefs superblock locking. In some special scenarios, when kernel...

WordPress plugin FooBox security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

NVIDIA Jetson security vulnerabilities

NVIDIA Jetson is an embedded system development module from NVIDIA. A security vulnerability exists in NVIDIA Jetson that stems from an incorrectly handled path in the GPU MMU mapping code that fails to clean up failed mapping attempts, resulting in denial of service, code execution, and elevatio...

Malicious code in @awesome-astra/integrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90df5c315cd0f716f906b96b9472e378345b1862657df527b2b3c152ca1d3005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin that accepts Stripe payments has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...