SUSE CVE-2024-40924

In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Make DPT object unshrinkable In some scenarios, the DPT object gets shrunk but the actual framebuffer did not and thus its still there on the DPT's vm-boundlist. Then it tries to rewrite the PTEs via a stale CPU...

PT-2024-37714 · WordPress · Schedulepress

Name of the Vulnerable Software and Affected Versions: SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher plugin for WordPress versions up to, and including, 5.1.3 Description: The issue is due to the plugin utilizing th...

PT-2024-37726 · WordPress · Glossary Plugin

Name of the Vulnerable Software and Affected Versions: Glossary plugin for WordPress versions up to, and including, 2.2.26 Description: The issue is due to the plugin utilizing wpdesk and not preventing direct access to the test files, along with display errors being enabled. This allows...

gnome-shell-extensions bug fix update

An update is available for gnome-shell-extensions. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNOME Shell extensions allow for modifying the default GNOME...

PT-2024-33733

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the drm/amd/display component, where the stream status is used without being checked for null first. The...

HP Display Control Software – Escalation of Privilege

Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application Enabling Software Driver which might allow escalation of privilege. HP is releasing software updates to mitigate these potential vulnerabilities. Update to HP Application Enabling...

Recovering Virtual Machines from Failed Pool Member

In the event of a XenServer host power failure, any Virtual Machines VMs running on that host might not be displayed in XenCenter. This is the expected behavior without High Availability HA enabled. The following is a XenCenter screen shot of the pool prior to the failure of the host named...

StoreFront Displays Incorrect Username

When there are multiple users with the same log on name in different domains, StoreFront displays incorrect name. For example, if the domain names are domain1\jdoe and domain2\jdoe for John Doe in domain 1 and Jane Doe in domain 2, StoreFront displays the incorrect display name when the user from...

SUSE-SU-2024:2463-1 Security update for squashfs

This update for squashfs fixes the following issues: - CVE-2015-4645,CVE-2015-4646: Multiple buffer overflows fixed in squashfs-tools bsc935380 - CVE-2021-40153: Fixed an issue where an attacker might have been able to write a file outside of destination bsc1189936 - CVE-2021-41072: Fixed an issu...

DEBIAN-CVE-2024-40932

In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .getmodes The duplicated EDID is never freed. Fix it...

DEBIAN-CVE-2024-40916

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found When reading EDID fails and driver reports no modes available, the DRM core adds an artificial 1024x786 mode to the connector. Unfortunately some variant...

UBUNTU-CVE-2024-40932

In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .getmodes The duplicated EDID is never freed. Fix it...

UBUNTU-CVE-2024-40916

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found When reading EDID fails and driver reports no modes available, the DRM core adds an artificial 1024x786 mode to the connector. Unfortunately some variant...

CVE-2024-40926 drm/nouveau: don't attempt to schedule hpd_work on headless cards

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpdwork on headless cards If the card doesn't have display hardware, hpdwork and hpdlock are left uninitialized which causes BUG when attempting to schedule hpdwork on runtime PM resume. Fix...

CVE-2024-40926 drm/nouveau: don't attempt to schedule hpd_work on headless cards

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpdwork on headless cards If the card doesn't have display hardware, hpdwork and hpdlock are left uninitialized which causes BUG when attempting to schedule hpdwork on runtime PM resume. Fix...

CVE-2024-40926 drm/nouveau: don't attempt to schedule hpd_work on headless cards

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpdwork on headless cards If the card doesn't have display hardware, hpdwork and hpdlock are left uninitialized which causes BUG when attempting to schedule hpdwork on runtime PM resume. Fix...

CVE-2024-40926

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpdwork on headless cards If the card doesn't have display hardware, hpdwork and hpdlock are left uninitialized which causes BUG when attempting to schedule hpdwork on runtime PM resume. Fix...

drm/amd/display: Fix dcn35 8k30 Underflow/Corruption Issue

...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference in the drm/mst component in drmdpaddpayloadpart2...

The vulnerability of the NVIDIA GPU Display Driver software driver allows a hacker to trigger a service failure.

The vulnerability of the NVIDIA GPU Display Driver software driver is related to incorrect handling of exceptional states. Exploiting this vulnerability allows an attacker to cause a service failure...