waitress: Waitress has a denial of service leading to high CPU usage/resource exhaustion

A flaw was found in the Waitress WSGI server for Python. When a remote client closes the connection before waitress has had the opportunity to call getpeername, waitress will incorrectly clean up the connection, leading to the main thread attempting to write to a socket that no longer exists, and...

kernel: wireguard: netlink: check for dangling peer via is_dead instead of empty list

In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: check for dangling peer via isdead instead of empty list If all peers are removed via wgpeerremoveall, rather than setting peerlist to empty, the peer is added to a temporary list with a head on the stack of...

wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead

...

GHSA-3F84-RPWH-47G6 Waitress vulnerable to DoS leading to high CPU usage/resource exhaustion

Impact When a remote client closes the connection before waitress has had the opportunity to call getpeername waitress won't correctly clean up the connection leading to the main thread attempting to write to a socket that no longer exists, but not removing it from the list of sockets to attempt ...

SUSE CVE-2022-48950

In the Linux kernel, the following vulnerability has been resolved: perf: Fix perfpendingtask UaF Per syzbot it is possible for perfpendingtask to run after the event is free'd. There are two related but distinct cases: - the taskwork was already queued before destroying the event; - destroying t...

UBUNTU-CVE-2022-48950

In the Linux kernel, the following vulnerability has been resolved: perf: Fix perfpendingtask UaF Per syzbot it is possible for perfpendingtask to run after the event is free'd. There are two related but distinct cases: - the taskwork was already queued before destroying the event; - destroying t...

CVE-2024-49868 btrfs: fix a NULL pointer dereference when failed to start a new trasacntion

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion BUG Syzbot reported a NULL pointer dereference with the following crash: FAULTINJECTION: forcing a failure. starttransaction+0x830/0x1670...

DEBIAN-CVE-2024-47732

In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix potential use after free bug The freedevicecompressionmodeiaadevice, devicemode function frees "devicemode" but it iss passed to iaacompressionmodesi-free a few lines later resulting in a use after free. The goo...

SUSE CVE-2024-47672

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

DEBIAN-CVE-2024-47672

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead There is a WARNING in iwltranswaittxqueuesempty that was recently converted from just a message, that can be hit if we wait for TX queues to become empty after...

UBUNTU-CVE-2024-47673

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pause TCM when the firmware is stopped Not doing so will make us send a host command to the transport while the firmware is not alive, which will trigger a WARNING. bad state = 0 WARNING: CPU: 2 PID: 17434 at...

CVE-2024-47672 wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead There is a WARNING in iwltranswaittxqueuesempty that was recently converted from just a message, that can be hit if we wait for TX queues to become empty after...

The vulnerabilities of the functions btrfs_maybe_wake_unfinished Drop() and btrfs_add_dead_root() of the Linux kernel’s Btrfs component allow a malicious actor to trigger a service failure due to improper locking mechanisms.

The vulnerabilities of the functions btrfsmaybewakeunfinished Drop and btrfsadddeadroot in the Linux kernel’s Btrfs component are related to improper locking mechanisms. Exploiting these vulnerabilities could allow an attacker to trigger a service failure...

CVE-2022-48901 btrfs: do not start relocation until in progress drops are done

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not start relocation until in progress drops are done We hit a bug with a recovering relocation on mount for one of our file systems in production. I reproduced this locally by injecting errors into snapshot delete with...

Obfuscation: There Are Two Sides To Everything

How to detect and prevent attackers from using these various techniques Obfuscation is an important technique for protecting software that also carries risks, especially when used by malware authors. In this article, we examine obfuscation, its effects, and responses to it. What Is Obfuscation?...

SUSE CVE-2022-48784

In the Linux kernel, the following vulnerability has been resolved: cfg80211: fix race in netlink owner interface destruction My previous fix here to fix the deadlock left a race where the exact same deadlock see the original commit referenced below can still happen if cfg80211destroyifaces alrea...

CVE-2022-48842 ice: Fix race condition during interface enslave

In the Linux kernel, the following vulnerability has been resolved: ice: Fix race condition during interface enslave Commit 5dbbbd01cbba83 "ice: Avoid RTNL lock when re-creating auxiliary device" changes a process of re-creation of aux device so iceplugauxdev is called from iceservicetask context...

CVE-2022-48842 ice: Fix race condition during interface enslave

In the Linux kernel, the following vulnerability has been resolved: ice: Fix race condition during interface enslave Commit 5dbbbd01cbba83 "ice: Avoid RTNL lock when re-creating auxiliary device" changes a process of re-creation of aux device so iceplugauxdev is called from iceservicetask context...

CVE-2022-48842

In the Linux kernel, the following vulnerability has been resolved: ice: Fix race condition during interface enslave Commit 5dbbbd01cbba83 "ice: Avoid RTNL lock when re-creating auxiliary device" changes a process of re-creation of aux device so iceplugauxdev is called from iceservicetask context...

CVE-2022-48842 ice: Fix race condition during interface enslave

In the Linux kernel, the following vulnerability has been resolved: ice: Fix race condition during interface enslave Commit 5dbbbd01cbba83 "ice: Avoid RTNL lock when re-creating auxiliary device" changes a process of re-creation of aux device so iceplugauxdev is called from iceservicetask context...