CVE-2024-35809

In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the .runtimeidle callback and the .remove callback in the rtsxpcr PCI driver leads to a kernel crash due to an unhandled page fault 1. The proble...

CVE-2024-35809

The CVE-2024-35809 entry describes a race in the Linux kernel's PCI runtime power management path: the .runtime_idle() callback in rtsx_pcr PCI driver can still be running when pm_runtime_get_sync() returns, leading to a race with the post-sync code and a potential kernel crash due to an unhandle...

CVE-2024-35809 PCI/PM: Drain runtime-idle callbacks before driver removal

In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the .runtimeidle callback and the .remove callback in the rtsxpcr PCI driver leads to a kernel crash due to an unhandled page fault 1. The proble...

EulerOS Virtualization 3.0.6.6 : kernel (EulerOS-SA-2024-1672)

"According to the versions of the kernel package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vulnerability Summary for CVE-2023-39197CVE-2023-39197 A race condition was found in the QXL driver in the Linux kernel. The...

EulerOS Virtualization 3.0.6.6 : libtiff (EulerOS-SA-2024-1655)

According to the versions of the libtiff packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There exists one heap buffer overflow in TIFFmemcpy in tifunix.c in libtiff 4.0.10, which allows an attacker to cause a...

SUSE CVE-2024-28285

A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of Cryptopp Crypto++ 8.9, allows an attacker to co-reside in the same system with a victim process to disclose information and escalate privileges...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2024-1655)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the iwl_dealloc_ucode() function in the driver code `drivers/net/wireless/intel/iwlwifi/iwl-drv.c` of the iwlwifi kernel in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the iwldeallocucode function in the drivers/net/wireless/intel/iwlwifi/iwl-drv.c file of the iwlwifi driver for the Linux operating system is related to the reclamation of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

EulerOS Virtualization 2.11.1 : ncurses (EulerOS-SA-2024-1611)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Note that...

The vulnerability of the f2fs_filemap_fault() function in the fs/f2fs/file.c file of the f2fs file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the f2fsfilemapfault function in the fs/f2fs/file.c file of the f2fs file system in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...

EulerOS Virtualization 2.11.0 : ncurses (EulerOS-SA-2024-1630)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Note that...

Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2024-1611)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2024-1630)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2024-32614

HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...

AZL-40706 CVE-2024-32614 affecting package hdf5 for versions less than 1.14.4-1

HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...

DEBIAN-CVE-2024-32607

HDF5 Library through 1.14.3 has a SEGV in H5Aclose in H5Aint.c, resulting in the corruption of the instruction pointer...

AZL-40562 CVE-2024-32610 affecting package hdf5 for versions less than 1.14.4.3-1

HDF5 Library through 1.14.3 has a SEGV in H5Tclosereal in H5T.c, resulting in a corrupted instruction pointer...

UBUNTU-CVE-2024-32607

HDF5 Library through 1.14.3 has a SEGV in H5Aclose in H5Aint.c, resulting in the corruption of the instruction pointer...

UBUNTU-CVE-2024-32614

HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...

CVE-2024-31443

Cacti provides an operational monitoring and fault management framework. Prior to 1.2.27, some of the data stored in formsave function in dataqueries.php is not thoroughly checked and is used to concatenate the HTML statement in growrightpanetree function from lib/html.php , finally resulting in...