CVE-2024-27421

The Linux kernel netrom module contains a race condition when reading the sysctl_netrom_routing_control resource, caused by a missing lock. This can affect system stability and may lead to a denial of service. No patch/version details are provided in the connected documents. Exploitation status a...

CVE-2024-27421

Removed by vendor...

CVE-2024-27420

CVE-2024-27420 entry is rejected/withdrawn by its CVE Numbering Authority and not active.

CVE-2024-27420

Removed by vendor...

CVE-2024-27404

CVE-2024-27404 (Linux kernel) : A data race on remote_id in mptcp was fixed. The issue was resolved by adding appropriate ONCE annotations to the remote_id path to prevent races. Patches were applied in stable Linux kernels (see linked git.kernel.org patches). The CVSS v3.1 vector indicates a Loc...

CVE-2024-27404 mptcp: fix data races on remote_id

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data races on remoteid Similar to the previous patch, address the data race on remoteid, adding the suitable ONCE annotations...

CVE-2024-27404 mptcp: fix data races on remote_id

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data races on remoteid Similar to the previous patch, address the data race on remoteid, adding the suitable ONCE annotations...

CVE-2024-27404

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data races on remoteid Similar to the previous patch, address the data race on remoteid, adding the suitable ONCE annotations...

PT-2024-21887 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue has been identified around sysctl netrom transport requested window size in the netrom component. Recommendations: At the moment, there is no information about a newe...

PT-2024-21884 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue has been identified around sysctl netrom link fails count in the netrom component. Recommendations: At the moment, there is no information about a newer version that...

PT-2024-21893 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue has been identified in the Linux kernel, specifically around the sysctl netrom obsolescence count initialiser in the netrom component. Recommendations: At the moment,...

PT-2024-21885 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue has been identified around sysctl netrom routing control in the netrom component of the Linux kernel. Recommendations: At the moment, there is no information about a...

PT-2024-21891 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue has been identified around sysctl netrom transport timeout in the netrom component of the Linux kernel. Recommendations: At the moment, there is no information about ...

PT-2024-21889 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue has been identified around sysctl netrom transport acknowledge delay in the netrom component. Recommendations: At the moment, there is no information about a newer...

PT-2024-21888 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue has been identified around sysctl netrom transport busy delay in the netrom component. This issue affects the Linux kernel. Recommendations: At the moment, there is n...

RHEL 7 : golang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - golang: arbitrary command execution via VCS path CVE-2018-7187 - golang: Command-line arguments may...

SUSE CVE-2022-48689

In the Linux kernel, the following vulnerability has been resolved: tcp: TX zerocopy should not sense pfmemalloc status We got a recent syzbot report 1 showing a possible misuse of pfmemalloc page status in TCP zerocopy paths. Indeed, for pages coming from user space or other layers, using...

SUSE CVE-2024-27019

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix potential data-race in nftobjtypeget nftunregisterobj can concurrent with nftobjtypeget, and there is not any protection when iterate over nftablesobjects list in nftobjtypeget. Therefore, there is...

SUSE CVE-2024-27020

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix potential data-race in nftexprtypeget nftunregisterexpr can concurrent with nftexprtypeget, and there is not any protection when iterate over nftablesexpressions list in nftexprtypeget. Therefore, there i...

CVE-2022-48689

In the Linux kernel, the following vulnerability has been resolved: tcp: TX zerocopy should not sense pfmemalloc status We got a recent syzbot report 1 showing a possible misuse of pfmemalloc page status in TCP zerocopy paths. Indeed, for pages coming from user space or other layers, using...