kernel: smb: client: fix potential OOBs in smb2_parse_contexts()

A flaw was found in the smb client in the Linux kernel. A potential out-of-bounds error was seen in the smb2parsecontexts function. Validate offsets and lengths before dereferencing create contexts in smb2parsecontexts...

ROS-20240423-02

Vulnerability of gnew0 function of Libvirt virtualization management library is related to incorrect checking of negative array length before memory allocation. checking for negative array length before allocating memory. Exploitation of the vulnerability could allow an attacker to cause a denial...

The vulnerability of the Envoy proxy server, related to pointer dereferencing errors, allows a hacker to cause a service failure.

The vulnerability of the Envoy proxy server is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2024-24862

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

ROS-20240409-16

MariaDB spiderdbmbase::printwarnings function vulnerability is related to pointer dereferencing errors. pointer dereferencing errors. Exploitation of the vulnerability allows a remote intruder to cause a denial of service. service...

ROS-20240409-06

A vulnerability in SaltStack Salt's configuration management and remote operations execution system is related to receiving multiple bad packets to the server equal to the number of worker threads, Salt will stop responding back requests before restarting. Exploitation of the vulnerability could...

DEBIAN-CVE-2024-26672

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix variable 'mcafuncs' dereferenced before NULL check in 'amdgpumcasmugetmcaentry' Fixes the below: drivers/gpu/drm/amd/amdgpu/amdgpumca.c:377 amdgpumcasmugetmcaentry warn: variable dereferenced before check 'mcafunc...

ROS-20240401-01

Vulnerability of idedmacb function of QEMU hardware emulator is related to synchronization errors when processing the DRQSTAT parameter. Exploitation of the vulnerability could allow an attacker to gain access to read, modify, or delete data or cause a denial of service Vulnerability in the...

ROS-20240401-05

A vulnerability in the NVIDIA Tegra XUSB Pad driver of the Linux kernel is related to pointer dereferencing errors. in pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of denial of service...

ROS-20240329-02

A vulnerability in the Squid proxy server is related to the dereferencing of an expired pointer. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20240329-09

A vulnerability in the Privates Handler component of the X Window System X.Org Server implementation is related to an operation exceeding the buffer boundaries. operation beyond the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...

CVE-2024-26648

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix variable deferencing before NULL check in edpsetupreplay In edpsetupreplay, 'struct dc dc' & 'struct dmubreplay replay' was dereferenced before the pointer 'link' & 'replay' NULL check. Fixes the below:...

CVE-2024-26648

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix variable deferencing before NULL check in edpsetupreplay In edpsetupreplay, 'struct dc dc' & 'struct dmubreplay replay' was dereferenced before the pointer 'link' & 'replay' NULL check. Fixes the below:...

CVE-2024-26648

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix variable deferencing before NULL check in edpsetupreplay In edpsetupreplay, 'struct dc dc' & 'struct dmubreplay replay' was dereferenced before the pointer 'link' & 'replay' NULL check. Fixes the below:...

UBUNTU-CVE-2024-26648

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix variable deferencing before NULL check in edpsetupreplay In edpsetupreplay, 'struct dc dc' & 'struct dmubreplay replay' was dereferenced before the pointer 'link' & 'replay' NULL check. Fixes the below:...

CVE-2024-26648 drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay()

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix variable deferencing before NULL check in edpsetupreplay In edpsetupreplay, 'struct dc dc' & 'struct dmubreplay replay' was dereferenced before the pointer 'link' & 'replay' NULL check. Fixes the below:...

CVE-2024-26648

CVE-2024-26648 affects the Linux kernel’s drm/amd/display path (AMDGPU) where in edp_setup_replay() a dereference of “struct dc *dc” and “struct dmub_replay *replay” occurred before validating NULL pointers for “link” and the replay, leading to a potential crash. The fix updates the AMD display c...

CVE-2024-26648 drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay()

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix variable deferencing before NULL check in edpsetupreplay In edpsetupreplay, 'struct dc dc' & 'struct dmubreplay replay' was dereferenced before the pointer 'link' & 'replay' NULL check. Fixes the below:...

CVE-2023-6597

An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged...

The vulnerability of the Microsoft .NET software platform, related to pointer swapping errors, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft .NET software platform is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...