kernel: ipv6: prevent possible NULL dereference in rt6_probe()

A vulnerability was found in the Linux kernel's IPv6 routing component, where a NULL dereference occurs in the rt6probe function. This issue happens when the function attempts to access a resource without confirming its availability, leading to potential crashes...

kernel: udp: do not accept non-tunnel GSO skbs landing in a tunnel

CVE-2024-35884 highlights a flaw in the Linux kernel's handling of UDP packets when Generic Receive Offload GRO forwarding is enabled. The issue occurs because non-tunnel UDP packets are sometimes mistakenly processed as if they belong to a tunnel. This can lead to data corruption or kernel...

kernel: PCI/PM: Drain runtime-idle callbacks before driver removal

A vulnerability was found in the PCI subsystem in the Linux kernel, where runtime-idle callbacks are not always drained before a PCI driver is removed. If these callbacks are still active when the driver is removed, it could result in system instability or crashes...

kernel: fbmem: Do not delete the mode that is still in use

A vulnerability was found in the Linux kernel's fbmem subsystem. This issue arises when the system attempts to delete a video mode that is still in use, leading to potential use-after-free errors. This improper handling can result in system crashes or undefined behavior when accessing freed memor...

Zyxel VMG8825-T50K 缓冲区错误漏洞

The Zyxel VMG8825-T50K is an Internet access device from China Hopkins Zyxel. A buffer error vulnerability exists in Zyxel VMG8825-T50K version 5.50ABOM.8C0 and prior versions, which arises from the parameter type parser improperly restricting operations within the range of a memory buffer...

SUSE SLES15 Security Update : kubernetes1.23 (SUSE-SU-2024:3341-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3341-1 advisory. - CVE-2021-25743: escape, meta and control sequences in raw data output to terminal not neutralized. bsc1194400 - CVE-2023-2727:...

CVE-2024-45807 oghttp2 crash on OnBeginHeadersForStream in envoy

Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's 1.31 is using oghttp as the default HTTP/2 codec, and there are potential bugs around stream management in the codec. To resolve this Envoy will switch off the oghttp2 by default. The impact of this issue is that envoy wi...

SUSE-SU-2024:3323-1 Security update for wireshark

This update for wireshark fixes the following issues: - CVE-2024-8250: Fixed NTLMSSP dissector crash bsc1229907. - CVE-2020-26421: Fixed USB HID dissector crash bsc1179933...

Envoy 安全漏洞

Envoy is an Enphase open source gateway program for connecting smart home devices. A security vulnerability exists in Envoy version 1.31, which stems from a flaw in the HTTP/2 codec around stream management that can cause Envoy to crash...

CVE-2024-46746

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: free driverdata after destroying hid device HID driver callbacks aren't called anymore once hiddestroydevice has been called. Hence, hid driverdata should be freed only after the hiddestroydevice function returned as...

CVE-2024-46793 ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder Since commit 13f58267cda3 "ASoC: soc.h: don't create dummy Component via COMPDUMMY" dummy codecs declared like this: SNDSOCDAILINKDEFdummy,...

CVE-2024-46793 ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder Since commit 13f58267cda3 "ASoC: soc.h: don't create dummy Component via COMPDUMMY" dummy codecs declared like this: SNDSOCDAILINKDEFdummy,...

kernel: mm/filemap: skip to create PMD-sized page cache if needed

A vulnerability was found in the Linux kernel related to how large page caching is handled, particularly for AMD64 architectures. The issue stems from the xarray data structure's inability to support PMD-sized page caches when the base page size is larger than MAXPAGECACHEORDER. The particular...

Heap-based Buffer Overflow

libzephyr.so is vulnerable to Heap-based Buffer Overflow. The vulnerability is caused due to missing checks for the remaining size of a buffer in the bthcileadvextreport function in bluetooth/host/scan.c before passing it on to the cont routine. This may lead to unexpected behavior or system...

SUSE CVE-2024-46709

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix prime with external buffers Make sure that for external buffers mapping goes through the dmabuf interface instead of trying to access pages directly. External buffers might not provide direct access to...

CVE-2024-46709

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix prime with external buffers Make sure that for external buffers mapping goes through the dmabuf interface instead of trying to access pages directly. External buffers might not provide direct access to...

DEBIAN-CVE-2024-46708

In the Linux kernel, the following vulnerability has been resolved: pinctrl: qcom: x1e80100: Fix special pin offsets Remove the erroneus 0x100000 offset to prevent the boards from crashing on pin state setting, as well as for the intended state changes to take effect...

CVE-2024-46709

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix prime with external buffers Make sure that for external buffers mapping goes through the dmabuf interface instead of trying to access pages directly. External buffers might not provide direct access to...

CVE-2024-46709 drm/vmwgfx: Fix prime with external buffers

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix prime with external buffers Make sure that for external buffers mapping goes through the dmabuf interface instead of trying to access pages directly. External buffers might not provide direct access to...

CVE-2024-46709 drm/vmwgfx: Fix prime with external buffers

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix prime with external buffers Make sure that for external buffers mapping goes through the dmabuf interface instead of trying to access pages directly. External buffers might not provide direct access to...