DEBIAN-CVE-2024-50127

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix use-after-free in tapriochange In 'tapriochange', 'admin' pointer may become dangling due to sched switch / removal caused by 'advancesched', and critical section protected by 'q-currententrylock' is too small to...

DEBIAN-CVE-2024-50096

In the Linux kernel, the following vulnerability has been resolved: nouveau/dmem: Fix vulnerability in migratetoram upon copy error The nouveaudmemcopyone function ensures that the copy push command is sent to the device firmware but does not track whether it was executed successfully. In the cas...

AZL-52564 CVE-2024-50096 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: nouveau/dmem: Fix vulnerability in migratetoram upon copy error The nouveaudmemcopyone function ensures that the copy push command is sent to the device firmware but does not track whether it was executed successfully. In the cas...

UBUNTU-CVE-2024-50096

In the Linux kernel, the following vulnerability has been resolved: nouveau/dmem: Fix vulnerability in migratetoram upon copy error The nouveaudmemcopyone function ensures that the copy push command is sent to the device firmware but does not track whether it was executed successfully. In the cas...

CVE-2024-50096 nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error

In the Linux kernel, the following vulnerability has been resolved: nouveau/dmem: Fix vulnerability in migratetoram upon copy error The nouveaudmemcopyone function ensures that the copy push command is sent to the device firmware but does not track whether it was executed successfully. In the cas...

kernel: cifs: fix oops during encryption

An out-of-bounds memory access vulnerability exists in the linux kernel, such that A stack-allocated buffer backed by vmalloc was passed into crypto code scatterwalkmapandcopy → memcpy where a cross-page write occurred. This ended up hitting a read-only mapping, causing a page-level fault and...

CVE-2024-50131: Buffer Copy without Checking Size of Input

In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character when validating the event length strlen returns a string length excluding the null byte. If the string length equals to the maximum buffer length, the buffer will have no space for the NULL...

Hewlett Packard Enterprise ArubaOS security vulnerabilities

Hewlett Packard Enterprise ArubaOS HPE ArubaOS is a networked wireless operating system from Hewlett Packard Enterprise. A security vulnerability exists in Hewlett Packard Enterprise ArubaOS, which stems from an authenticated path traversal vulnerability that could allow an attacker to remotely...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which originates in the nouveau/dmem module, Copy Error on Migration to RAM, which does not track whether the device firmwa...

CVE-2024-38423 Buffer Copy Without Checking Size of Input in Graphics Linux

Memory corruption while processing GPU page table switch...

CVE-2024-38423 Buffer Copy Without Checking Size of Input in Graphics Linux

Memory corruption while processing GPU page table switch...

CVE-2024-38409 Buffer Copy Without Checking Size of Input in WLAN Windows Host

Memory corruption while station LL statistic handling...

CVE-2024-38409 Buffer Copy Without Checking Size of Input in WLAN Windows Host

Memory corruption while station LL statistic handling...

CVE-2024-33030 Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size...

CVE-2024-33030 Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size...

CVE-2024-38409: Buffer Copy without Checking Size of Input

Memory corruption while station LL statistic handling...

CVE-2024-33030: Buffer Copy without Checking Size of Input

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size...

November 21, 2024—KB5046714 (OS Build 19045.5198) Preview

November 21, 2024—KB5046714 OS Build 19045.5198 Preview Applies To Windows 10, version 22H2, all editions Note 11/12/24 IMPORTANT Because of minimal operations during the Western holidays and the upcoming new year, there won’t be a non-security preview release for the month of December 2024. Ther...

WS-2022-0274

In iana-time-zone v0.1.43 and before v0.1.45, a use-after-free bug in the MacOS / iOS implementation was introduced. The copied system time zone was released before its name was copied. If the system time zone was changed between the call of CFRelease and str::toowned, random memory would be copi...

WS-2022-0282

n iana-time-zone v0.1.43 a use-after-free bug in the MacOS / iOS implementation was introduced. The copied system time zone was released before its name was copied. If the system time zone was changed between the call of CFRelease and str::toowned, random memory would be copied...