CVE-2024-42240 x86/bhi: Avoid warning in #DB handler due to BHI mitigation

In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF flag set then entrySYSENTERcompat uses CLEARBRANCHHISTORY and calls the clearbhbloop before the TF flag...

libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service

A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service...

kernel: nouveau: lock the client object tree.

A flaw was found in the nouveau module in the Linux kernel. A missing resource lock can cause a race condition and trigger a general protection fault, resulting in a denial of service...

SUSE CVE-2024-7006

A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...

kernel: nouveau: lock the client object tree.

A flaw was found in the nouveau module in the Linux kernel. A missing resource lock can cause a race condition and trigger a general protection fault, resulting in a denial of service...

ALSA-2024:5079 Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tifdirread.c CVE-2018-15209 libtiff: Buffer Overflow via /libtiff/tools/tiffcrop.c CVE-2023-25433...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from the filemap module's use of pteoffsetmap in filemapfaultrecheckptenone could lead to the use of a PTL pointer...

SUSE CVE-2024-41021

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix VMFAULTHWPOISON handling in doexception There is no support for HWPOISON, MEMORYFAILURE, or ARCHHASCOPYMC on s390. Therefore we do not expect to see VMFAULTHWPOISON in doexception. However, since commit af19487f00f3...

SUSE CVE-2024-41057

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefileswithdrawcookie We got the following issue in our fault injection stress test: ================================================================== BUG: KASAN: slab-use-after-free in...

SUSE CVE-2024-42160

In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fsbuildfaultattr - It missed to check validation of fault attrs in parseoptions, let's fix to add check condition in f2fsbuildfaultattr. - Use f2fsbuildfaultattr in sbistore to clean up...

PT-2024-29810

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the calculation of Virtual Memory mapping boundaries in the Linux kernel's drm/i915/gem component. The calculation does not consider the partial mapping offset,...

CVE-2024-41200

A segmentation fault in KMPlayer v4.2.2.65 allows attackers to cause a Denial of Service DoS via a crafted AVI file...

CVE-2024-41200

A segmentation fault in KMPlayer v4.2.2.65 allows attackers to cause a Denial of Service DoS via a crafted AVI file...

CVE-2024-41200: Undefined Security Weakness

A segmentation fault in KMPlayer v4.2.2.65 allows attackers to cause a Denial of Service DoS via a crafted AVI file...

PT-2024-29307 · Pandoratv · Mplayer

Name of the Vulnerable Software and Affected Versions: KMPlayer version 4.2.2.65 Description: A segmentation fault in KMPlayer allows attackers to cause a Denial of Service DoS via a crafted AVI file. This issue may lead to system compromise. Recommendations: Update KMPlayer to the latest version...

CVE-2024-41200

A segmentation fault in KMPlayer v4.2.2.65 allows an attacker to trigger a Denial of Service (DoS) by providing a crafted AVI file . While the vulnerability may lead to system compromise, the primary impact is the disruption of service. Remediation involves updating KMPlayer to the latest version...

PT-2024-40831 · Git +1 · Lwan

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a segmentation fault on an unknown address. The crash occurs in the lwan request get cookie function, which is...

PT-2024-29819

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Linux kernel versions prior to 6.6.50 Description The issue is related to the riscv/mm component of the Linux kernel and involves incorrect handling of input, which can lead to a denial of service...

PT-2024-31351

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when iommu report device fault is called with a partial fault. It is supposed to collect the fault into the group and then return. However, due to a typo, the return was...

Segmentation Fault

tensorflow is vulnerable to Segmentation Fault. The vulnerability is caused due to a defect in a function arrayops.upperbound when not given a rank 2 tensor. It leads to Denial Of Service DOS...