CVE-2024-26909

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmicglinkaltmode: fix drm bridge use-after-free A recent DRM series purporting to simplify support for "transparent bridges" and handling of probe deferrals ironically exposed a use-after-free issue on pmicglinkaltmode...

CVE-2024-26909

CVE-2024-26909 affects the Linux kernel’s soc/qcom/pmic_glink_altmode code and its DRM bridge handling. The issue is a use-after-free that can occur during probe deferral when the dp-hpd bridge is registered before all resources are acquired, creating a race where a previously registered bridge p...

CVE-2024-26909 soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmicglinkaltmode: fix drm bridge use-after-free A recent DRM series purporting to simplify support for "transparent bridges" and handling of probe deferrals ironically exposed a use-after-free issue on pmicglinkaltmode...

CVE-2024-26833

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix memory leak in dmswfini After destroying dmubsrv, the memory associated with it is not freed, causing a memory leak: unreferenced object 0xffff896302b45800 size 1024: comm "udev-worker", pid 222, jiffies...

UBUNTU-CVE-2024-26833

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix memory leak in dmswfini After destroying dmubsrv, the memory associated with it is not freed, causing a memory leak: unreferenced object 0xffff896302b45800 size 1024: comm "udev-worker", pid 222, jiffies...

CVE-2024-26833

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix memory leak in dmswfini After destroying dmubsrv, the memory associated with it is not freed, causing a memory leak: unreferenced object 0xffff896302b45800 size 1024: comm "udev-worker", pid 222, jiffies...

CVE-2024-26833 drm/amd/display: Fix memory leak in dm_sw_fini()

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix memory leak in dmswfini After destroying dmubsrv, the memory associated with it is not freed, causing a memory leak: unreferenced object 0xffff896302b45800 size 1024: comm "udev-worker", pid 222, jiffies...

CVE-2024-26833

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix memory leak in dmswfini After destroying dmubsrv, the memory associated with it is not freed, causing a memory leak: unreferenced object 0xffff896302b45800 size 1024: comm "udev-worker", pid 222, jiffies...

SUSE CVE-2024-26700

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix MST Null Ptr for RV The change try to fix below error specific to RV platform: BUG: kernel NULL pointer dereference, address: 0000000000000008 PGD 0 P4D 0 Oops: 0000 1 PREEMPT SMP NOPTI CPU: 4 PID: 917 Comm:...

PT-2024-21576

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the drm/buddy component of the Linux kernel, specifically with the alloc range function. This function was returning SUCCESS in certain corner cases when it...

Missing character encoding in progress display allows for spoofing of scp client output (CVE-2019-6109)

An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server or Man-in-The-Middle attacker can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This...

PT-2024-32154

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when the timing generator count equals 0, causing the tg inst index to be negative. This has been fixed to prevent two OVERRUN issues reported by Coverity. The fix ensur...

CVE-2023-47626

CVE-2023-47626 affects iTop (an IT service management platform). The vulnerability is an XSS risk that occurs when displaying/editing a user’s personal tokens; the root cause is improper handling of token-related input in the UI, enabling script execution. A fix is available in iTop v3.1.1 (and l...

PortSwigger Web Security: Incorrect logic when buy one more license which may lead to extend the expire date of existing license

Vulnerability description not provided...

CVE-2024-29022

CVE-2024-29022 affects Xibo CMS. The issue arises from improper sanitisation of certain request headers stored in session and display tables, enabling a stored XSS that can exfiltrate session IDs and User Agents and potentially hijack active sessions. A malicious script can also be injected into ...

CVE-2024-29022 Session Hijacking via XSS attack in header and session grid in Xibo CMS

Xibo is an Open Source Digital Signage platform with a web content management system and Windows display player software. In affected versions some request headers are not correctly sanitised when stored in the session and display tables. These headers can be used to inject a malicious script int...

CVE-2024-29022 Session Hijacking via XSS attack in header and session grid in Xibo CMS

Xibo is an Open Source Digital Signage platform with a web content management system and Windows display player software. In affected versions some request headers are not correctly sanitised when stored in the session and display tables. These headers can be used to inject a malicious script int...

CVE-2024-29023

CVE-2024-29023 affects Xibo CMS: session tokens are exposed in the session-search API response, enabling potential session hijacking when users have access to the sessions page. Affected software is Xibo: upgrades are recommended to close the issue. Remediation per sources: Upgrade to Xibo 3.3.10...

OESA-2024-1432 golang security update

The Go Programming Language. Security Fixes: The ParseAddressList function incorrectly handles comments text within parentheses within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different...

SUSE CVE-2024-26699

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix array-index-out-of-bounds in dcn35clkmgr Why There is a potential memory access violation while iterating through array of dcn35 clks. How Limit iteration per array size...