CVE-2024-46694 drm/amd/display: avoid using null object of framebuffer

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state-fb-obj0 directly, get object from framebuffer by calling drmgemfbgetobj and return error code when object is null to avoid using null object of...

CVE-2024-46694

CVE-2024-46694 affects the Linux kernel DRM/AMD display path. Root cause: code path dereferenced framebuffer object state->fb->obj[0] without proper null checks. Fix: replace with proper retrieval of the framebuffer object via drm_gem_fb_get_obj() and return an error if the object is NULL (...

CVE-2024-46694

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state-fb-obj0 directly, get object from framebuffer by calling drmgemfbgetobj and return error code when object is null to avoid using null object of...

CVE-2024-46694: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state-fb-obj0 directly, get object from framebuffer by calling drmgemfbgetobj and return error code when object is null to avoid using null object of...

CVE-2024-46698: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: video/aperture: optionally match the device in sysfbdisable In apertureremoveconflictingpcidevices, we currently only call sysfbdisable on vga class devices. This leads to the following problem when the pimary device is not VGA...

Linux DRM/AMD/display Code Execution

The vulnerability of the DRM/AMD/display components in the Linux operating system is related to the issue of the index “i” exceeding the boundaries of the function transferfuncPOINTS. Exploiting this vulnerability could allow a hacker to execute arbitrary code. source-iocs-preserved...

DEBIAN-CVE-2024-45015

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: move dpuencoder's connector assignment to atomicenable For cases where the crtc's connectorschanged was set without enable/active getting toggled , there is an atomicenable call followed by an atomicdisable but witho...

drm/tegra: dsi: Add missing check for of_find_device_by_node

...

drm/amd/display: Fix division by zero in setup_dsc_config

...

[SECURITY] Fedora 40 Update: wireshark-4.2.7-1.fc40

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12610)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12610 advisory. - MIPS: Octeon: Add PCIe link status check Dave Kleikamp Orabug: 36947196 CVE-2024-40968 - drm/amdgpu: Fix signedness bug in sdmav40processtrapirq...

PT-2024-32249

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition vulnerability has been resolved in the Linux kernel's DRM/AMD display module. The issue occurs between the dcn10 set drr and dc state destruct functions. When dc state...

PT-2024-32248

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition has been identified between dcn35 set drr and dc state destruct in the Linux kernel's AMD display module. The issue arises when dc state destruct nulls the resource...

SAP NetWeaver Application Server security vulnerabilities

SAP NetWeaver Application Server is an application server from SAP, Germany. A security vulnerability exists in SAP NetWeaver Application Server that originates from a program that allows a user with elevated privileges to execute a program that displays data over the network...

CVE-2024-6792

The WP ULike WordPress plugin before 4.7.2.1 does not properly sanitize user display names when rendering on a public page...

CVE-2024-6792

The WP ULike WordPress plugin before 4.7.2.1 does not properly sanitize user display names when rendering on a public page...

CVE-2024-6792

The WP ULike WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 4.7.2.1 . The root cause is the failure to properly sanitize user display names when they are rendered on public pages. An attacker with Subscriber privileges can exploit this to execute maliciou...

CVE-2024-6792: Improper Neutralization of Input During Web Page Generation

The WP ULike WordPress plugin before 4.7.2.1 does not properly sanitize user display names when rendering on a public page...

NVIDIA GPU Display Driver July 2024 Security Update

NVIDIA has informed HP of a potential security vulnerability identified in the NVIDIA® GPU Display Driver for Windows, which might allow code execution, denial of service, escalation of privilege, information disclosure, and data tampering. NVIDIA has released updates to mitigate the vulnerabilit...

WordPress plugin WP ULike has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...