SUSE CVE-2024-26847

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: use correct function name for resetting TCE tables The PAPR spec spells the function name as "ibm,reset-pe-dma-windows" but in practice firmware uses the singular form: "ibm,reset-pe-dma-window" in the device tree...

PT-2022-28913

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.6 Description The issue is related to the net/mlx5 driver in the Linux Kernel. It involves the use of del timer sync in the firmware reset flow of halting poll. The actual impact and attack plausibility hav...

GSD-2022-1000208 net/mlx5: Use del_timer_sync in fw reset flow of halting poll

net/mlx5: Use deltimersync in fw reset flow of halting poll This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.97 by commit...

PT-2022-28550

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.20 Description The issue is related to the net/mlx5 driver in the Linux Kernel. It involves the use of del timer sync in the firmware reset flow of halting poll. The actual impact and attack plausibility ha...

PT-2022-28486

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.97 Description A potential security issue exists in the net/mlx5 module of the Linux Kernel. The issue is related to the use of del timer sync in the firmware reset flow of halting poll. The actual impact a...

PT-2024-11347 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.4 Description: A deadlock vulnerability has been resolved in the Linux kernel. The issue occurs when the cfg80211 unregister wdev function is called while the link is still up, causing a deadlock due to the...

PT-2019-8039

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Mobile versions SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835 Description The issue occurs when the HOST sends a Special command ID packet, triggering a RAM Dump and...

Authentication flaw

The web service on Epson WorkForce WF-2861 10.48 LQ22I3Recovery-mode, WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote attackers to upload a firmware file and reset the printer without authentication by making a request to the /DOWN/FIRMWAREUPDATE/ROM1 URI and a POST request t...

CVE-2018-19248

The CVE affects Epson WorkForce WF-2861 devices (versions 10.48 LQ22I3 Recovery-mode, 10.51.LQ20I6, 10.52.LQ17IA) where a missing-authentication flaw in the web service allows remote attackers to upload a firmware file and reset the printer. Attack requires requests to /DOWN/FIRMWAREUPDATE/ROM1 a...

Bad Code Library Triggers Devil's Ivy Vulnerability in Millions of IoT Devices

Tens of millions of products ranging from airport surveillance cameras, sensors, networking equipment and IoT devices are vulnerable to a flaw that allows attackers to remotely gain control over devices or crash them. The vulnerability, dubbed Devil’s Ivy, was identified by ​researchers at Senrio...