Malicious code in Zendesk.Drivers (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4710 Malicious code in Zendesk.Drivers (NuGet)

--- -= Per source details. Do not edit below this line.=-...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2024-1837)

"According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In the Linux kernel, the following vulnerability has been resolved: IB/ipoib: Fix mcast list locking Releasing the priv-lock while iterating the...

The vulnerability of the UnserializePropertySet() function in the Kernel-mode operating system drivers of Windows, which allows a hacker to exploit their privileges.

The vulnerability of the UnserializePropertySet function in the Kernel-mode operating system drivers of Windows is related to the assignment of an untrusted pointer. Exploiting this vulnerability could allow an attacker to gain increased privileges...

CVE-2024-38571

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tsens: Fix null pointer dereference computeinterceptslope is called from calibrate8960 in tsens-8960.c as computeinterceptslopepriv, p1, NULL, ONEPTCALIB which lead to null pointer dereference if DEBUG or...

CVE-2024-38568

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group The perf tool allows users to create event groups through following cmd 1, but the driver does not check whether the array index is out of bounds when writi...

CVE-2024-38603

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Actually use devmaddactionorreset pciallocirqvectors allocates an irq vector. When devmaddaction fails, the irq vector is not freed, which leads to a memory leak. Replace the devmaddaction with...

CVE-2022-48735

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix UAF of leds class devs at unbinding The LED class devices that are created by HD-audio codec drivers are registered via devmledclassdevregister and associated with the HD-audio codec device. Unfortunately, it turne...

CVE-2021-47576

In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Sanity check block descriptor length in respmodeselect In respmodeselect sanity check the block descriptor len to avoid UAF. BUG: KASAN: use-after-free in respmodeselect+0xa4c/0xb40 drivers/scsi/scsidebug.c:2509...

CVE-2024-38603

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Actually use devmaddactionorreset pciallocirqvectors allocates an irq vector. When devmaddaction fails, the irq vector is not freed, which leads to a memory leak. Replace the devmaddaction with...

CVE-2024-38569

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisipcie: Fix out-of-bound access when valid event group The perf tool allows users to create event groups through following cmd 1, but the driver does not check whether the array index is out of bounds when writing...

CVE-2024-38568

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group The perf tool allows users to create event groups through following cmd 1, but the driver does not check whether the array index is out of bounds when writi...

CVE-2024-38551

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Assign dummy when codec not specified for a DAI link MediaTek sound card drivers are checking whether a DAI link is present and used on a board to assign the correct parameters and this is done by checking the cod...

CVE-2024-38605

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix NULL module pointer assignment at card init The commit 81033c6b584b "ALSA: core: Warn on empty module" introduced a WARNON for a NULL module pointer passed at sndcard object creation, and it also wraps the code...

CVE-2024-38610 drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()

In the Linux kernel, the following vulnerability has been resolved: drivers/virt/acrn: fix PFNMAP PTE checks in acrnvmrammap Patch series "mm: followpte improvements and acrn followpte fixes". Patch 1 fixes a bunch of issues I spotted in the acrn driver. It compiles, that's all I know. I'll...

CVE-2024-38610

In the Linux kernel, the following vulnerability has been resolved: drivers/virt/acrn: fix PFNMAP PTE checks in acrnvmrammap Patch series "mm: followpte improvements and acrn followpte fixes". Patch 1 fixes a bunch of issues I spotted in the acrn driver. It compiles, that's all I know. I'll...

CVE-2024-38605 ALSA: core: Fix NULL module pointer assignment at card init

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix NULL module pointer assignment at card init The commit 81033c6b584b "ALSA: core: Warn on empty module" introduced a WARNON for a NULL module pointer passed at sndcard object creation, and it also wraps the code...

CVE-2024-38603

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Actually use devmaddactionorreset pciallocirqvectors allocates an irq vector. When devmaddaction fails, the irq vector is not freed, which leads to a memory leak. Replace the devmaddaction with...

CVE-2024-38603 drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Actually use devmaddactionorreset pciallocirqvectors allocates an irq vector. When devmaddaction fails, the irq vector is not freed, which leads to a memory leak. Replace the devmaddaction with...

CVE-2024-38603 drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Actually use devmaddactionorreset pciallocirqvectors allocates an irq vector. When devmaddaction fails, the irq vector is not freed, which leads to a memory leak. Replace the devmaddaction with...