10070 matches found
kernel: x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type
A vulnerability in the Linux kernel affected the x86/mm code, specifically in the pfntokaddr macro. The issue arises when the macro does not correctly handle input as a 64-bit type, causing crashes on 64-bit platforms, especially for SEV-SNP guests, when processing addresses above the 1TB range...
kernel: drm: Don't unref the same fb many times by mistake due to deadlock handling
A flaw was found in the Linux kernel. A frame buffer can be freed while still in use in a specific situation in drivers/gpu/drm/drmplane.c. This issue may compromise the availability...
PT-2025-18832
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the packet length retrieved from a descriptor may be larger than the actual socket buffer length, leading to a leak of kernel memory...
Mageia: Security Advisory (MGASA-2024-0350)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
mm: avoid leaving partial pfn mappings around in error case
...
MGASA-2024-0349 Updated nspr, nss, firefox & rust packages fix security vulnerabilities
Permission leak via embed or object elements. CVE-2024-10458 Use-after-free in layout with accessibility. CVE-2024-10459 Confusing display of origin for external protocol handler prompt. CVE-2024-10460 XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response...
Updated nspr, nss, firefox & rust packages fix security vulnerabilities
Permission leak via embed or object elements. CVE-2024-10458 Use-after-free in layout with accessibility. CVE-2024-10459 Confusing display of origin for external protocol handler prompt. CVE-2024-10460 XSS due to Content-Disposition being ignored in multipart/x-mixed-replace response...
OESA-2024-2342 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: A permission leak could have occurred from a trusted site to an untrusted site via embed or object elements. This vulnerability affects Firefox 132, Firefox ESR 128.4,...
CVE-2024-50206 net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: fix memory corruption during fq dma init The loop responsible for allocating up to MTKFQDMALENGTH buffers must only touch as many descriptors, otherwise it ends up corrupting unrelated memory. Fix the lo...
firefox: thunderbird: Cross origin video frame leak
A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: Video frames could have been leaked between origins in some situations...
CVE-2024-10668 Auth Bypass in Quickshare
There exists an auth bypass in Google Quickshare where an attacker can upload an unknown file type to a victim. The root cause of the vulnerability lies in the fact that when a Payload Transfer frame of type FILE is sent to Quick Share, the file that is contained in this frame is written to disk ...
CVE-2024-10668: Unrestricted Upload of File with Dangerous Type
There exists an auth bypass in Google Quickshare where an attacker can upload an unknown file type to a victim. The root cause of the vulnerability lies in the fact that when a Payload Transfer frame of type FILE is sent to Quick Share, the file that is contained in this frame is written to disk ...
Frame Iterator Component Firefox Loop Unreachable Exit Condition
The vulnerability of the Frame Iterator component in the Firefox web browser is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to compromise data integrity...
FFmpeg filter_frame Heap Overflow DoS
The vulnerability of the filterframe function in the vftile.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
FFmpeg Heap Buffer Overflow DoS
The vulnerability of the apedecodeframe function in the libavcodec/apedec.c file of the FFmpeg multimedia library relates to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity,...
SUSE CVE-2023-52920
In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction jump history to record instructions that performed register spill/fill to/from stack, regardless if this was done through read-only r10...
PT-2024-10002
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.23 Description The issue is related to a double free vulnerability in the mse102x tx frame spi function within the Linux kernel. This vulnerability can lead to crashes and potentially allow an attacker to...
AZL-52308 CVE-2023-52920 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction jump history to record instructions that performed register spill/fill to/from stack, regardless if this was done through read-only r10...
AlmaLinux 9 : thunderbird (ALSA-2024:8793)
The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2024:8793 advisory. firefox: thunderbird: History interface could have been used to cause a Denial of Service condition in the browser CVE-2024-10464 firefox: thunderbird: XS...
