CVE-2024-44980

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix opregion leak Being part o the display, ideally the setup and cleanup would be done by display itself. However this is a bigger refactor that needs to be done on both i915 and xe. For now, just fix the leak:...

UBUNTU-CVE-2024-44982

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: cleanup FB if dpuformatpopulatelayout fails If the dpuformatpopulatelayout fails, then FB is prepared, but not cleaned up. This ends up leaking the pincount on the GEM object and causes a splat during DRM file closur...

CVE-2024-44982 drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: cleanup FB if dpuformatpopulatelayout fails If the dpuformatpopulatelayout fails, then FB is prepared, but not cleaned up. This ends up leaking the pincount on the GEM object and causes a splat during DRM file closur...

CVE-2024-44982 drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: cleanup FB if dpuformatpopulatelayout fails If the dpuformatpopulatelayout fails, then FB is prepared, but not cleaned up. This ends up leaking the pincount on the GEM object and causes a splat during DRM file closur...

DEBIAN-CVE-2024-44967

In the Linux kernel, the following vulnerability has been resolved: drm/mgag200: Bind I2C lifetime to DRM device Managed cleanup with devmaddactionorreset will release the I2C adapter when the underlying Linux device goes away. But the connector still refers to it, so this cleanup leaves behind a...

UBUNTU-CVE-2024-44967

In the Linux kernel, the following vulnerability has been resolved: drm/mgag200: Bind I2C lifetime to DRM device Managed cleanup with devmaddactionorreset will release the I2C adapter when the underlying Linux device goes away. But the connector still refers to it, so this cleanup leaves behind a...

CVE-2024-44967

In the Linux kernel, the following vulnerability has been resolved: drm/mgag200: Bind I2C lifetime to DRM device Managed cleanup with devmaddactionorreset will release the I2C adapter when the underlying Linux device goes away. But the connector still refers to it, so this cleanup leaves behind a...

CVE-2024-44967

CVE-2024-44967 affects the Linux kernel in the DRM mgag200 path. The issue arises from binding the lifetime of the I2C adapter to the DRM device: cleanup via devm_add_action_or_reset() releases the I2C adapter when the Linux device goes away, but the connector retains a stale pointer in struct dr...

CVE-2024-44967 drm/mgag200: Bind I2C lifetime to DRM device

In the Linux kernel, the following vulnerability has been resolved: drm/mgag200: Bind I2C lifetime to DRM device Managed cleanup with devmaddactionorreset will release the I2C adapter when the underlying Linux device goes away. But the connector still refers to it, so this cleanup leaves behind a...

CVE-2024-44967 drm/mgag200: Bind I2C lifetime to DRM device

In the Linux kernel, the following vulnerability has been resolved: drm/mgag200: Bind I2C lifetime to DRM device Managed cleanup with devmaddactionorreset will release the I2C adapter when the underlying Linux device goes away. But the connector still refers to it, so this cleanup leaves behind a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure of the dpuformatpopulatelayout function when the Frame Buffer FB is not properly cleaned up,...

Malicious code in @diotoborg/odit-nostrum-consequuntur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b79af22057a217f7d07d6a60acfedb940eb264d800aa6c7c1b12c135bf2e8f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/sed-veniam-cupiditate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0992b564e9d09119b178076424268607670c4b67fdef442cc4f6184f74bc8fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/magni-velit-iure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27884c9c5dcaad4e5a5520bf8bf4c4945bb02cb33f2932853a63c4e91cc854f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/aspernatur-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2db9352ce5aeccd44ca3b1ffcae6aca686f8859bb9797ca54c770a8fa6700815 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/doloribus-sapiente-voluptatum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a658dcbe3ce6846f4c71b1d459554d2ee4a1ccc9326a6d30d7fcdf47c4b293a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/perspiciatis-placeat-cum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7967dbee37733770b8962b513c15565f6027ddaaedf6dc0a6911ef5399f0a069 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/minus-culpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2780a783b10221c66f3fa570288200f7c0dd476fec9b6cd6e2f3bfc6ca8d47d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/consectetur-tempora-quia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 180cf6d8335ce1b75ff22a7a34f28811069c531e93cb5e6078a94473b436919f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/autem-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a38989ab7d07951967751e28a3e62ccff33b9e9ffdc52c0a186ba863f557349f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...