CVE-2024-53177 smb: prevent use-after-free due to open_cached_dir error paths

In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to opencacheddir error paths If opencacheddir encounters an error parsing the lease from the server, the error handling may race with receiving a lease break, resulting in opencacheddir freeing the...

CVE-2024-53177 smb: prevent use-after-free due to open_cached_dir error paths

In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to opencacheddir error paths If opencacheddir encounters an error parsing the lease from the server, the error handling may race with receiving a lease break, resulting in opencacheddir freeing the...

CVE-2024-53165 sh: intc: Fix use-after-free bug in register_intc_controller()

In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in registerintccontroller In the error handling for this function, d is freed without ever removing it from intclist which would lead to a use after free. To fix this, let's only add it to the lis...

CVE-2024-53165

CVE-2024-53165 affects the Linux kernel and describes a use-after-free in the error handling path of sh: intc: register_intc_controller(). In the flawed path, the variable d is freed in the error handling without being removed from intc_list, which can lead to a use-after-free. The fix implemente...

CVE-2024-53165 sh: intc: Fix use-after-free bug in register_intc_controller()

In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in registerintccontroller In the error handling for this function, d is freed without ever removing it from intclist which would lead to a use after free. To fix this, let's only add it to the lis...

DEBIAN-CVE-2024-56527

An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message...

CVE-2024-56527

An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message...

CVE-2024-56527

An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message...

CVE-2024-56527

CVE-2024-56527 affects the TCPDF PHP class. The issue is in the Error() function, which lacks an htmlspecialchars escape for the error message. This is a code-level input handling flaw in TCPDF prior to 6.8.0. Connected advisories from Debian (DLA-4199/DSA-5933) show multiple TCPDF CVEs, includin...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a hanging sk pointer problem left after error handling in the Bluetooth L2CAP protocol...

The vulnerability of the Linux operating system’s kernel component allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel’s openrisc component is related to improper error handling in the unhandledexception function. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the mm/huge_memory component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mm/hugememory component in the Linux operating system’s kernel is related to improper error handling in the functions cs35l56hdaunbind, cs35l56hdacommonprobe, and cs35l56hdaremove. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-53148

In the Linux kernel, the following vulnerability has been resolved: comedi: Flush partial mappings in error case If some remappfnrange calls succeeded before one failed, we still have buffer pages mapped into the userspace page tables when we drop the buffer reference with comedibufmapputbm. The...

CVE-2024-53157 firmware: arm_scpi: Check the DVFS OPP count returned by the firmware

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Check the DVFS OPP count returned by the firmware Fix a kernel crash with the below call trace when the SCPI firmware returns OPP count of zero. dvfsinfo.oppcount may be zero on some platforms during the reboot...

CVE-2024-53148

CVE-2024-53148 affects the Linux kernel (comedi subsystem). The issue: if remap_pfn_range() calls partially succeed before a failure, some buffer pages remain mapped in userspace page tables after dropping the buffer reference, and cleanup occurs too late in the mmap error path. The root cause is...

Database Credentials Exposure

thorsten/phpmyfaq is vulnerable to Database Credentials Exposure. The vulnerability is due to improper error handling, which allows an attacker to obtain the database server's credentials when the connection to the database fails...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47674)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47674 advisory. - In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49927)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49927 advisory. - In the Linux kernel, the following vulnerability has been resolved: x86/ioapic: Handle allocation failures...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47705)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47705 advisory. - In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer...

CVE-2024-47599

A flaw was found in the GStreamer library. Insufficient error handling in the JPEG decoder can lead to NULL-pointer dereferences and cause crashes for certain input files, making it possible for a malicious actor to trigger a crash of the application...