kernel: NFSD: fix use-after-free on source server when doing inter-server copy

In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on source server when doing inter-server copy Use-after-free occurred when the laundromat tried to free expired cpntfstate entry on the s2scpstateids list after inter-server copy completed. The sccplist...

kernel: netfilter: nf_tables: netlink notifier might race to release objects

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: netlink notifier might race to release objects commit release path is invoked via callrcu and it runs lockless to release the objects after rcu grace period. The netlink notifier handler might win race to...

kernel: HID: mcp2221: prevent a buffer overflow in mcp_smbus_write()

A buffer overflow vulnerability has been found in the linux kernel, such that when calling mcpsmbuswrite, a buffer of a smaller size is called when performing memcpy, resulting in damage to confidentiality, integrity, and availability of the system...

kernel: mm/gup: fix FOLL_FORCE COW security issue and remove FOLL_COW

In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix FOLLFORCE COW security issue and remove FOLLCOW Ever since the Dirty COW CVE-2016-5195 security issue happened, we know that FOLLFORCE can be possibly dangerous, especially if there are races that can be exploited by...

PT-2023-9348

Name of the Vulnerable Software and Affected Versions yasm version 1.3.0 Description The issue is related to a memory leak in the yasm intnum copy function of the YASM assembler. This memory leak occurs due to the lack of memory release after its effective term of service. Exploitation of this...

Yasm security vulnerability

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm v1.3.0, which stems from a post-release reuse issue in the function yasmintnumcopy in /nasm/nasm-pp.c. The vulnerability is caused by the use of the function yasmintnumcopy...

CVE-2021-26354: Buffer Copy without Checking Size of Input

Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a loss of integrity...

PT-2025-40769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel has a flaw related to the handling of nfsd file reference counts within the Network File System NFS copy codepath. Specifically, there is a potential for reference count...

WordPress Plugin Web Stories security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2023-27955: Buffer Copy without Checking Size of Input

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, macOS Big Sur 11.7.5. An app may be able to read arbitrary files...

CVE-2023-27935: Buffer Copy without Checking Size of Input

The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected app termination or arbitrary code execution...

USN-6057-1 linux-intel-iotg vulnerabilities

It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-1281 It was discovered that the OverlayFS...

Illumina Universal Copy Service Disclosure Privilege Escalation

The vulnerability of microprogrammed medical devices with the Illumina Universal Copy Service is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to disclose protected information, upload and execute code with elevated privileges...

Illumina Universal Copy Service Network Interception Remote Command

The vulnerability of microprogrammed medical devices with the Illumina Universal Copy Service is related to their reliance on open IP addresses. Exploiting this vulnerability allows a malicious actor to remotely intercept network traffic and also to send arbitrary commands remotely...

PT-2023-1001 · Arm · Arm Nn Android-Nn-Driver

Name of the Vulnerable Software and Affected Versions: Arm NN Android-NN-Driver versions prior to 23.02 Description: A possible out-of-bounds read and write was discovered due to an improper length check of shared memory. This issue could lead to local escalation of privilege with no additional...

CISA Warns of Critical Flaws in Illumina's DNA Sequencing Instruments

The U.S. Cybersecurity and Infrastructure Security Agency CISA has released an Industrial Control Systems ICS medical advisory warning of a critical flaw impacting Illumina medical devices. The issues impact the Universal Copy Service UCS software in the Illumina MiSeqDx, NextSeq 550Dx, iScan, iS...

CVE-2023-1968

Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications...

CVE-2023-1966

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or...

CVE-2023-1966

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or...

CVE-2023-1968

Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications...