CVE-2024-56622 scsi: ufs: core: sysfs: Prevent div by zero

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: sysfs: Prevent div by zero Prevent a division by 0 when monitoring is not enabled...

DEBIAN-CVE-2024-53220

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to account dirty data in getsecsrequired It will trigger system panic w/ testcase in 1: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2752! RIP: 0010:newcurseg+0xc81/0x2110 Call Trace:...

DEBIAN-CVE-2024-53218

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix race in concurrent f2fsstopgcthread In my test case, concurrent calls to f2fs shutdown report the following stack trace: Oops: general protection fault, probably for non-canonical address 0xc6cfff63bb5513fc: 0000 1...

UBUNTU-CVE-2024-53218

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix race in concurrent f2fsstopgcthread In my test case, concurrent calls to f2fs shutdown report the following stack trace: Oops: general protection fault, probably for non-canonical address 0xc6cfff63bb5513fc: 0000 1...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a contention condition issue when concurrently stopping garbage collection in the f2fs file system...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a null pointer dereference in the f2fssubmitpagebio function in the f2fs module, which causes the kerne...

The vulnerability of the jffs2 component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the jffs2 component in the Linux operating system’s kernel is related to errors in reading beyond the boundary in the dojffs2setxattr function. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-8820

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential use-after-free UAF access issue has been identified in the Linux kernel, specifically in the scsi: ufs: bsg component. The issue arises from not setting bsg queue to NULL aft...

CVE-2024-56012

Cross-Site Request Forgery CSRF vulnerability in lizeipe Flash News / Post Responsive flashnews-fading-effect-pearlbells allows Privilege Escalation.This issue affects Flash News / Post Responsive: from n/a through = 4.1...

CVE-2024-56012 WordPress Flash News / Post (Responsive) plugin <= 4.1 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in lizeipe Flash News / Post Responsive flashnews-fading-effect-pearlbells allows Privilege Escalation.This issue affects Flash News / Post Responsive: from n/a through = 4.1...

CVE-2024-56012 WordPress Flash News / Post (Responsive) plugin <= 4.1 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in lizeipe Flash News / Post Responsive flashnews-fading-effect-pearlbells allows Privilege Escalation.This issue affects Flash News / Post Responsive: from n/a through = 4.1...

CVE-2024-56012

CVE-2024-56012: CSRF to Privilege Escalation in WordPress plugins Flash News / Post (Responsive) and Post Title (TypeWriter); affected versions up to 4.1. No public exploit details in the connected documents. Patch status not provided here; Wordfence notes patch status as Unpatched and monitoring...

PT-2024-36666 · Pearlbells · Pearlbells Flash News / Post +1

Name of the Vulnerable Software and Affected Versions: Pearlbells Flash News / Post Responsive versions n/a through 4.1 Pearlbells Post Title TypeWriter versions n/a through 4.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Privilege Escalation...

WordPress plugin Flash News / Post (Responsive) 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

WordPress Flash News / Post (Responsive) plugin <= 4.1 - CSRF to Privilege Escalation vulnerability

CSRF to Privilege Escalation vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Flash News / Post Responsive versions = 4.1...

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to damage to the f2fsinitpagearraycache function. Exploiting this vulnerability can allow an attacker to access confidential information...

A vulnerability in the f2fs kernel component of the Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability in the f2fs kernel of the Linux operating system is related to improper input validation in the f2fsPutSuper function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ufshcd_mcq_abort() function in the ufs component of Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the ufshcdmcqabort function in the ufs component of Linux operating systems is related to a pointer dereferencing error due to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2024-53067

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Start the RTC update work later The RTC update work involves runtime resuming the UFS controller. Hence, only start the RTC update work after runtime power management in the UFS driver has been fully initialized...

UBUNTU-CVE-2024-53046

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: imx8ulp: correct the flexspi compatible string The flexspi on imx8ulp only has 16 LUTs, and imx8mm flexspi has 32 LUTs, so correct the compatible string here, otherwise will meet below error: 1.119072 ------------ cut...