The vulnerability of the mm/secretmem components in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the mm/secretmem components in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the lib/Kconfig.debug components of the Linux operating system’s kernel allows attackers to gain elevated privileges within the system.

The vulnerability of the lib/Kconfig.debug components in the Linux operating system kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

The vulnerability of the enetc component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the enetc component in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the lis3lv02d_i2c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the lis3lv02di2c component in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mm/slab_common component in the Linux operating system allows a hacker to gain elevated privileges within the system.

The vulnerability of the mm/slabcommon component in the Linux kernel is related to memory management errors after deallocation. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

DRUPAL-CORE-2024-006

Drupal core contains a potential PHP Object Injection vulnerability that if combined with another exploit could lead to Artbitrary File Deletion. It is not directly exploitable. This issue is mitigated by the fact that in order to be exploitable, a separate vulnerability must be present that allo...

Fedora 40 : llvm-test-suite (2024-300397332b)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-300397332b advisory. Remove ClamAV subdirectory because of viruses in input files: These were the findings: MultiSource/Applications/ClamAV/inputs/rtf-test/rtf1.rtf:...

The vulnerability of Palo Alto Networks’ operating system PAN-OS, related to pointer arithmetic errors, allows a hacker to trigger a service failure.

The vulnerability of Palo Alto Networks’ operating system PAN-OS relates to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20241120-01

Vulnerability of drm/amd/display components of Linux kernel is related to dereferencing of the NULL pointer in the amdgpudminit function in drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in th...

ROS-20241120-02

A vulnerability in the locking/wwmutex/test components of the Linux operating system kernel is related to improper locking in the functions listforeachentrysafe, stressonework, and stress in the kernel/locking/test/test-wwmutex.c. Exploitation of the vulnerability could allow an attacker to cause...

CVE-2024-53082

In the Linux kernel, the following vulnerability has been resolved: virtionet: Add hashkeylength check Add hashkeylength check in virtnetprobe to avoid possible out of bound errors when setting/reading the hash key...

UBUNTU-CVE-2024-53087

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix possible exec queue leak in exec IOCTL In a couple of places after an exec queue is looked up the exec IOCTL returns on input errors without dropping the exec queue ref. Fix this ensuring the exec queue ref is dropped...

CVE-2024-53088 i40e: fix race condition by adding filter's intermediate sync state

In the Linux kernel, the following vulnerability has been resolved: i40e: fix race condition by adding filter's intermediate sync state Fix a race condition in the i40e driver that leads to MAC/VLAN filters becoming corrupted and leaking. Address the issue that occurs under heavy load when multip...

CVE-2024-53082

CVE-2024-53082: Linux kernel virtio_net vulnerability resolved by adding a hash_key_length check in virtnet_probe() to prevent possible out-of-bounds errors when setting/reading the hash key. This root cause and fix are echoed in connected documents (Astra Linux bulletin and IBM/Red Hat–style pag...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from flushing uninitialized delayedwork on cachectr errors...

The vulnerability of the nilfs2 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the nilfs2 component in the Linux operating system’s kernel is related to readout errors beyond the boundary in the nilfstypebymode function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the usb-storage component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the usb-storage component in Linux operating systems is related to zero-division errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the nf_tables component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the nftables component in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20241119-02

Vulnerability of cxl/region components of Linux kernel is related to the use of uninitialized resource in the cxlregionattach function in drivers/cxl/core/region.c. Exploitation of the the vulnerability could allow an attacker to cause a denial of service A vulnerability in the tls component of t...

The vulnerability of the nf_tables component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the nftables component in the Linux operating system’s kernel is related to resource management errors in the nftablesupdtable function. Exploiting this vulnerability can allow an attacker to cause a service failure...