Important: kernel-livepatch-5.10.224-212.876

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure CVE-2024-46673 Affected Packages: kernel-livepatch-5.10.224-212.876 Issue Correction: Please ensure you have live patching enabled. Run yum update...

Important: kernel-livepatch-5.10.223-211.872

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure CVE-2024-46673 Affected Packages: kernel-livepatch-5.10.223-211.872 Issue Correction: Please ensure you have live patching enabled. Run yum update...

SUSE-SU-2024:3806-1 Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024119 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size bsc1226327. - CVE-2021-47598: schcake: do not call cakedestroy from cakeinit bsc1227471. - CVE-2024-35863: Fixed potentia...

CVE-2024-3935

In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the...

DEBIAN-CVE-2024-3935

In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the...

UBUNTU-CVE-2024-3935

In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the...

CVE-2024-3935

CVE-2024-3935 affects Eclipse Mosquitto: 2.0.0–2.0.18 expose a double-free crash when a broker with an outgoing bridge uses topic remapping and receives a crafted PUBLISH from a remote connection. Connected advisories confirm the issue across multiple distributions and show remediation through up...

CVE-2024-3935 Eclipse Mosquito: Double free vulnerability

In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the...

CVE-2024-3935 Eclipse Mosquito: Double free vulnerability

In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the...

CVE-2024-3935 Eclipse Mosquito: Double free vulnerability

In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the...

CVE-2024-3935

In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the...

PT-2024-8324

Name of the Vulnerable Software and Affected Versions: Eclipse Mosquitto versions 2.0.0 through 2.0.18 Description: The issue is related to a double free error in Eclipse Mosquitto. When a Mosquitto broker is configured to create an outgoing bridge connection with an incoming topic that uses topi...

CVE-2024-50071

In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: fix a double free in ma35pinctrldtnodetomapfunc 'newmap' is allocated using devm which takes care of freeing the allocated data on device removal, call to .dtfreemap = pinconfgenericdtfreemap double frees the ma...

SUSE CVE-2024-49989

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix double free issue during amdgpu module unload Flexible endpoints use DIGs from available inflexible endpoints, so only the encoders of inflexible links need to be freed. Otherwise, a double free issue may occ...

SUSE CVE-2024-50071

In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: fix a double free in ma35pinctrldtnodetomapfunc 'newmap' is allocated using devm which takes care of freeing the allocated data on device removal, call to .dtfreemap = pinconfgenericdtfreemap double frees the ma...

CVE-2024-50071

In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: fix a double free in ma35pinctrldtnodetomapfunc 'newmap' is allocated using devm which takes care of freeing the allocated data on device removal, call to .dtfreemap = pinconfgenericdtfreemap double frees the ma...

DEBIAN-CVE-2024-50071

In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: fix a double free in ma35pinctrldtnodetomapfunc 'newmap' is allocated using devm which takes care of freeing the allocated data on device removal, call to .dtfreemap = pinconfgenericdtfreemap double frees the ma...

UBUNTU-CVE-2024-50071

In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: fix a double free in ma35pinctrldtnodetomapfunc 'newmap' is allocated using devm which takes care of freeing the allocated data on device removal, call to .dtfreemap = pinconfgenericdtfreemap double frees the ma...

CVE-2024-50071

In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: fix a double free in ma35pinctrldtnodetomapfunc 'newmap' is allocated using devm which takes care of freeing the allocated data on device removal, call to .dtfreemap = pinconfgenericdtfreemap double frees the ma...

CVE-2024-50071 pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func()

In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: fix a double free in ma35pinctrldtnodetomapfunc 'newmap' is allocated using devm which takes care of freeing the allocated data on device removal, call to .dtfreemap = pinconfgenericdtfreemap double frees the ma...