1598 matches found
CVE-2024-46706 tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
In the Linux kernel, the following vulnerability has been resolved: tty: serial: fsllpuart: mark last busy before uartaddoneport With "earlycon initcalldebug=1 loglevel=8" in bootargs, kernel sometimes boot hang. It is because normal console still is not ready, but runtime suspend is called, so...
Security Advisory Ivanti Workspace Control (IWC)
Summary Ivanti has released a version of a new product architecture for Ivanti Workspace Control IWC which addresses high and critical vulnerabilities. Successful exploitation could lead to an escalation of privileges and lateral movement. IWC is intended to be a non-internet facing product, and...
Semtek Sempos SQL注入漏洞
Semtek Sempos is an application from Semtek, Inc. A SQL injection vulnerability exists in Semtek Sempos 31072024 and earlier versions, which stems from an unsatisfactory neutralization of a special element that results in SQL injection...
PT-2024-31323
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue occurs when a monitor connected after an MST hub is unplugged, resulting in a null pointer dereference. This happens because dc sink is released immediately in early unregister...
CVE-2023-52887
In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error handling for tightly received RTS messages in xtprxrtssessionnew This patch enhances error handling in scenarios with RTS Request to Send messages arriving closely. It replaces the less informative...
kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port()
In the Linux kernel, the following vulnerability has been resolved: udp: Set SOCKRCUFREE earlier in udplibgetport. syzkaller triggered the warning 0 in udpv4earlydemux. In udpv46earlydemux and sklookup, we do not touch the refcount of the looked-up sk and use sockpfree as skb-destructor, so we...
EMI 安全漏洞
EMI is a powerful and accessible item and recipe viewer for Minecraft by Emily Rose Ploszaj Individual Developer. A security vulnerability exists in EMI v.1.1.10 and earlier versions that stems from the inability to validate slot indexing and reduce stack counts in the EMI mod for Minecraft...
GO-2022-0381 Import of incorrectly embargoed keys could cause early publication in github.com/google/exposure-notifications-server
Import of incorrectly embargoed keys could cause early publication in github.com/google/exposure-notifications-server...
DEBIAN-CVE-2022-48888
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix memory leak in msmmdssparsedatabusiccpath oficcget alloc resources for path1, we should release it when not need anymore. Early return when ISERRORNULLpath0 may leak path1. Defer getting path1 to fix this...
DEBIAN-CVE-2024-43877
In the Linux kernel, the following vulnerability has been resolved: media: pci: ivtv: Add check for DMA map result In case DMA fails, 'dma-SGlength' is 0. This value is later used to access 'dma-SGarraydma-SGlength - 1', which will cause out of bounds access. Add check to return early on invalid...
UBUNTU-CVE-2024-43877
In the Linux kernel, the following vulnerability has been resolved: media: pci: ivtv: Add check for DMA map result In case DMA fails, 'dma-SGlength' is 0. This value is later used to access 'dma-SGarraydma-SGlength - 1', which will cause out of bounds access. Add check to return early on invalid...
CVE-2024-42287
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Complete command early within lock A crash was observed while performing NPIV and FW reset, BUG: kernel NULL pointer dereference, address: 000000000000001c PF: supervisor read access in kernel mode PF:...
CVE-2024-42287 scsi: qla2xxx: Complete command early within lock
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Complete command early within lock A crash was observed while performing NPIV and FW reset, BUG: kernel NULL pointer dereference, address: 000000000000001c PF: supervisor read access in kernel mode PF:...
nfsd: initialise nfsd_info.mutex early.
...
CVE-2024-42126 powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
In the Linux kernel, the following vulnerability has been resolved: powerpc: Avoid nmienter/nmiexit in real mode interrupt. nmienter/nmiexit touches per cpu variables which can lead to kernel crash when invoked during real mode interrupt handling e.g. early HMI/MCE interrupt handler if percpu...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an interrupt handler in the drm/lima module that must be ready to be called during driver removal. Since...
DEBIAN-CVE-2023-52887
In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error handling for tightly received RTS messages in xtprxrtssessionnew This patch enhances error handling in scenarios with RTS Request to Send messages arriving closely. It replaces the less informative...
UBUNTU-CVE-2024-41041
In the Linux kernel, the following vulnerability has been resolved: udp: Set SOCKRCUFREE earlier in udplibgetport. syzkaller triggered the warning 0 in udpv4earlydemux. In udpv46earlydemux and sklookup, we do not touch the refcount of the looked-up sk and use sockpfree as skb-destructor, so we...
SDoP 安全漏洞
SDoP is a simple DocBook processor by Philip Hazel Personal Developer. A security vulnerability exists in SDoP versions prior to 1.11 that stems from an inability to properly handle certain parameters in input data. An attacker exploiting this vulnerability could execute arbitrary code...
