SUSE CVE-2022-49348

In the Linux kernel, the following vulnerability has been resolved: ext4: filter out EXT4FCREPLAY from on-disk superblock field sstate The EXT4FCREPLAY bit in sbi-smountstate is used to indicate that we are in the middle of replay the fast commit journal. This was actually a mistake, since the...

SUSE CVE-2022-49730

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

DEBIAN-CVE-2022-49062

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix KASAN slab-out-of-bounds in cachefilessetvolumexattr Use the actual length of volume coherency data when setting the xattr to avoid the following KASAN report. BUG: KASAN: slab-out-of-bounds in...

UBUNTU-CVE-2022-49147

In the Linux kernel, the following vulnerability has been resolved: block: Fix the maximum minor value is blkallocextminor idaallocrange..., min, max, ... returns values from min to max, inclusive. So, NREXTDEVT is a valid idx returned by blkallocextminor. This is an issue because in deviceadddis...

CVE-2022-49131 ath11k: fix kernel panic during unload/load ath11k modules

In the Linux kernel, the following vulnerability has been resolved: ath11k: fix kernel panic during unload/load ath11k modules Call netifnapidel from ath11kahbfreeextirq to fix the following kernel panic when unload/load ath11k modules for few iterations. 971.201365 Unable to handle kernel paging...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from ext4 in parseapplysbmountoptions that could lead to a memory leak...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the EXT4FCREPLAY bit being incorrectly used in the sstate, which could lead to memory corruption...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the sfc driver failing to reinitialize the xdp queue after changing the size of the rx/tx ring buffer, causi...

GHSA-QXF6-G9X3-8W74 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-HH4J-JWJV-8726 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-JV24-5J5X-M8W6 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-2FG8-6GGF-J2JG vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-4JV6-884H-V282 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-7GGP-CP85-R5CG vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-GMGG-93H8-CP32 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-8XFX-RJ4P-23JM vulnerabilities

Vulnerabilities for packages: whereabouts-fips, haproxy-ingress, mc, crossplane-provider-family-aws, dex-fips, eck-operator-fips, kargo, crossplane-provider-aws-ec2, cloudflared, grafana-alloy-fips, kaf, secrets-store-csi-driver-provider-azure, local-static-provisioner, certificate-transparency,...

GHSA-J7VJ-RW65-4V26 vulnerabilities

Vulnerabilities for packages: whereabouts-fips, haproxy-ingress, mc, crossplane-provider-family-aws, dex-fips, eck-operator-fips, kargo, crossplane-provider-aws-ec2, cloudflared, grafana-alloy-fips, kaf, secrets-store-csi-driver-provider-azure, local-static-provisioner, certificate-transparency,...

GHSA-HW49-2P59-3MHJ vulnerabilities

Vulnerabilities for packages: whereabouts-fips, haproxy-ingress, mc, dex-fips, kargo, cloudflared, kaf, secrets-store-csi-driver-provider-azure, local-static-provisioner, certificate-transparency, newrelic-nri-kube-events, aws-flb-kinesis, dockerize, falcosidekick-fips, kubernetes-event-exporter,...

Palo Alto Networks Cortex XDR 代码问题漏洞

Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from Palo Alto Networks, USA. A code issue vulnerability exists in Palo Alto Networks Cortex XDR, which stems from a faulty detection mechanism that...

CVE-2024-13554

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reorderroute function in all versions up to, and including, 3.0.13. This makes it possible for unauthenticated attackers to reorder pos...