Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure of the drm/exynos:hdmi component to provide a safe mode when reading the EDID fails...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak in the drm/exynos/vidi component in the .getmodes function because the copied EDID is never...

PT-2024-32737

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to a NULL pointer dereference in the Linux kernel, specifically in the drm/amd/display component. This occurs when there is an attempt to recompute DSC parameters without a...

WordPress Magical Posts Display plugin <= 1.2.38 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Magical Posts Display versions = 1.2.38...

USN-6886-1 golang-1.21, golang-1.22 vulnerabilities

It was discovered that the Go net/http module did not properly handle the requests when request's headers exceed MaxHeaderBytes. An attacker could possibly use this issue to cause a panic resulting into a denial of service. This issue only affected Go 1.21 in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS...

SUSE CVE-2024-26767

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fixed integer types and null check locations why: issues fixed: - comparison with wider integer type in loop condition which can cause infinite loops - pointer dereference before null check...

PT-2024-41391 · Suse +7 · Kernel-Azure +12

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name bsc1227716. - CVE-2024-42096: x86: stop playing stack games in profile pc bsc1228633. -...

Security Bulletin: NVIDIA GPU Display Driver - July 2024

NVIDIA has released a software security update for NVIDIA GPU Display Driver to address the issues that are disclosed in this bulletin. To protect your system, download and install this software update through the NVIDIA Driver Downloads page or, for the vGPU software and Cloud Gaming updates,...

The vulnerability of Firefox browser for iOS, related to information representation errors in the user interface, allows a hacker to perform a spoofing attack.

The vulnerability of Firefox browser for iOS is related to information representation errors in the user interface. Exploiting this vulnerability allows an attacker to perform a spoofing attack by replacing the URL address in the location string cp...

NVIDIA GPU Display Driver June 2024 Security Update

NVIDIA has informed HP of potential security vulnerabilities identified in the NVIDIA® GPU Display Driver for Windows, which might allow code execution, denial of service, escalation of privilege, information disclosure, and data tampering. NVIDIA has released software updates to mitigate these...

drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'

...

The vulnerability of the NVIDIA GPU Display Driver software driver allows a hacker to execute arbitrary code, increase their privileges, or disclose sensitive information.

The vulnerability of the NVIDIA GPU Display Driver software driver is related to access control errors. Exploiting this vulnerability allows an attacker to execute arbitrary code, enhance their privileges, or disclose sensitive information...

golang: net/mail: comments in display names are incorrectly handled

A flaw was found in Go's net/mail standard library package. The ParseAddressList function incorrectly handles comments text within parentheses within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions made by programs using...

PT-2024-32752

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A vulnerability in the Linux kernel has been resolved, specifically in the drm/amd/display component. The issue arises from the functions dp enable link phy and dp disable link phy potentially...

Cross-site Scripting (XSS)

TYPO3 is vulnerable to Cross-site Scripting XSS. The vulnerability is due to failing to properly encode user input in the login status display in the website frontend, requiring a valid user account either backend or frontend to exploit...

PT-2024-30757

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-41-generic 4122.04.2-Ubuntu Description The issue is related to a null pointer dereference in the dcn20 resource.c file of the Linux kernel's drm/amd/display module. This vulnerability can cause a hang when...

SUSE CVE-2024-38664

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpdpsub: Always register bridge We must always register the DRM bridge, since zynqmpdphpdworkfunc calls drmbridgehpdnotify, which in turn expects hpdmutex to be initialized. We do this before zynqmpdpsubdrminit since tha...

PT-2024-33763

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.11.2 Description: A null pointer dereference issue has been identified in the Linux kernel, specifically in the drm/amd/display component. The issue arises when pointers, such as dc-clk mgr, are not properly...

PYSEC-2024-54

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Zip files uploaded to the server endpoint of CodeChecker store are not properly sanitized. An attacker, using a path traversal attack, can load and display files on the machine o...

AZL-42895 CVE-2024-38664 affecting package kernel for versions less than 6.6.35.1-4

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpdpsub: Always register bridge We must always register the DRM bridge, since zynqmpdphpdworkfunc calls drmbridgehpdnotify, which in turn expects hpdmutex to be initialized. We do this before zynqmpdpsubdrminit since tha...