CVE-2018-5852 Buffer Over-read in IPA

An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4nat'...

kernel: drm/radeon: fix UBSAN warning in kv_dpm.c

A vulnerability was found in the Linux kernel's DRM/Radeon driver, specifically in the sumovidmappingentry within the kvdpm.c file. Insufficient bounds checking can lead to memory corruption...

kernel: x86/mm: Randomize per-cpu entry area

A possible unauthorized memory access flaw was found in the Linux kernel cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. This issue could allow a local user to gain access to some important data with expected locatio...

pam security update

1.3.1-36.0.1 - pamlimits: fix use after free in pamsmopensession Orabug: 36272695 1.3.1-36 - pamaccess: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66242 1.3.1-35 - pamunix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves:...

CVE-2024-10606

creationtimestamp| type| source ---|---|--- 2024-11-23 04:37:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113530416344121690 2025-02-14 10:03:10+00:00| seen| Telegram/jqZMUQ9Xfri0aBVZRkEsySPOPTtuc0bT4ARWTDsQ2E4vecx...

CVE-2024-9542

creationtimestamp| type| source ---|---|--- 2024-11-21 11:12:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113520643189759031...

CVE-2024-51799

creationtimestamp| type| source ---|---|--- 2024-11-19 20:52:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113511599966199216...

DEBIAN-CVE-2024-53043

In the Linux kernel, the following vulnerability has been resolved: mctp i2c: handle NULL header address daddr can be NULL if there is no neighbour table entry present, in that case the tx packet should be dropped. saddr will usually be set by MCTP core, but check for NULL in case a packet is...

UBUNTU-CVE-2024-53043

In the Linux kernel, the following vulnerability has been resolved: mctp i2c: handle NULL header address daddr can be NULL if there is no neighbour table entry present, in that case the tx packet should be dropped. saddr will usually be set by MCTP core, but check for NULL in case a packet is...

CVE-2024-53043 mctp i2c: handle NULL header address

In the Linux kernel, the following vulnerability has been resolved: mctp i2c: handle NULL header address daddr can be NULL if there is no neighbour table entry present, in that case the tx packet should be dropped. saddr will usually be set by MCTP core, but check for NULL in case a packet is...

SUSE CVE-2024-50265

In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove entry once instead of null-ptr-dereference in ocfs2xaremove Syzkaller is able to provoke null-ptr-dereference in ocfs2xaremove: 57.319872 a.out,1161,7:ocfs2xaremove:2028 ERROR: status = -12 57.320420...

DEBIAN-CVE-2024-50265

In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove entry once instead of null-ptr-dereference in ocfs2xaremove Syzkaller is able to provoke null-ptr-dereference in ocfs2xaremove: 57.319872 a.out,1161,7:ocfs2xaremove:2028 ERROR: status = -12 57.320420...

GHSA-27MF-GHQM-J3J8 aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method

Summary A memory leak can occur when a request produces a MatchInfoError. This was caused by adding an entry to a cache on each request, due to the building of each MatchInfoError producing a unique cache entry. Impact If the user is making use of any middlewares with aiohttp.web then it is...

CVE-2024-11312

creationtimestamp| type| source ---|---|--- 2024-11-18 06:43:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113502598540431462 2024-11-18 09:01:18+00:00| seen| https://t.me/cvedetector/11296 2026-06-21 15:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mosnklfrvz24...

CVE-2021-3988

creationtimestamp| type| source ---|---|--- 2024-11-15 11:09:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113486656781563435 2024-11-15 13:15:50+00:00| seen| https://t.me/cvedetector/11071...

The vulnerability of the “set Diagnostics_Entry” function in D-Link DSL-3782 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the “set DiagnosticsEntry” function in D-Link DSL-3782 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Incorrect Rekor Entry Selection

github.com/sigstore/gitsign is vulnerable to Incorrect Rekor entry selection. The vulnerability is due to gitsign not correctly handling situations where multiple Rekor entries are returned during online verification, leading it to potentially select the wrong one. It allows an attacker to...

CVE-2019-9017

creationtimestamp| type| source ---|---|--- 2024-11-14 06:07:17+00:00| seen| MISP/9f6edbc5-7cdd-45c0-8df2-08df6c0b6970...

CVE-2024-8180

creationtimestamp| type| source ---|---|--- 2024-11-13 14:08:31+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113476036942359070 2024-11-14 11:10:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113480997654084186 2024-11-14 13:18:35+00:00| seen|...

kernel: filelock: fix potential use-after-free in posix_lock_inode

A use-after-free vulnerability was found in the Linux kernel in traceposixlockinode. This issue occurred when the request pointer was changed to point to a lock entry added to the inode's list. Before the tracepoint could fire, another task raced in and freed the lock...