Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fixed a possible nullptrderef issue in cpufreqcpugetraw. cpufreqcpugetraw may return NULL if the CPU is not included in policy-cpus cpu mask, which could lead to a null pointer dereference...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-26965)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26965 advisory. - In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-msm8974: fix...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: objtool, spi: amd: Fix out-of-bounds stack access in amdsetspifreq If speedhz AMDSPIMINHZ, amdsetspifreq iterates over the entire amdspifreq array without breaking out early, causing 'i' to go beyond the array bounds. Fix that by...

CVE-2024-33042

Memory corruption when Alternative Frequency offset value is set to 255...

cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()

...

cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()

...

The vulnerability of the cppc_cpufreq_cpu_init component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cppccpufreqcpuinit component in the Linux operating system is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: nullblk: fix null-ptr-dereference while configuring 'power' and 'submitqueues' CVE-2024-36478 In the Linux kernel, the following vulnerability has been resolved: iouring: fix possible deadlock in...

UBUNTU-CVE-2024-53682

In the Linux kernel, the following vulnerability has been resolved: regulator: axp20x: AXP717: set rampdelay AXP717 datasheet says that regulator ramp delay is 15.625 us/step, which is 10mV in our case. Add a AXPDESCRANGESDELAY macro and update AXPDESCRANGES macro to expand to AXPDESCRANGESDELAY...

The vulnerability of the scpi_dvfs_get_info() function in the System Control and Power Interface (SCPI) Message Protocol Driver (drivers/firmware/arm_scpi.c) in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the scpidvfsgetinfo function in the System Control and Power Interface SCPI Message Protocol Driver drivers/firmware/armscpi.c in Linux kernel systems is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Improper Control of Interaction Frequency

Overview goalgorilla/opensocial is a distribution for building social communities and intranets. Affected versions of this package are vulnerable to Improper Control of Interaction Frequency due to incorrect validation of flood control limits on the password reset form. Remediation Upgrade...

CVE-2024-13274

Improper Control of Interaction Frequency vulnerability in Drupal Open Social allows Functionality Misuse.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5...

CVE-2024-13274 Open Social - Moderately critical - Denial of Service - SA-CONTRIB-2024-038

Improper Control of Interaction Frequency vulnerability in Drupal Open Social allows Functionality Misuse.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Open Social versions 12.3.8 prior to 12.4.0 through 12.4.5, which stems from improper control of interaction frequency...

PT-2025-30754

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's DRM/MSM/GPU subsystem that can lead to a crash when throttling the GPU immediately during boot. This occurs when the GPU is already hot during boot an...

DEBIAN-CVE-2024-53230

In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix possible null-ptr-deref for cppcgetcpucost cpufreqcpugetraw may return NULL if the cpu is not in policy-cpus cpu mask and it will cause null pointer dereference, so check NULL for cppcgetcpucost...

DEBIAN-CVE-2024-53231

In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix possible null-ptr-deref for cpufreqcpugetraw cpufreqcpugetraw may return NULL if the cpu is not in policy-cpus cpu mask and it will cause null pointer dereference...

UBUNTU-CVE-2024-53230

In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix possible null-ptr-deref for cppcgetcpucost cpufreqcpugetraw may return NULL if the cpu is not in policy-cpus cpu mask and it will cause null pointer dereference, so check NULL for cppcgetcpucost...

CVE-2024-53230 cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()

In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix possible null-ptr-deref for cppcgetcpucost cpufreqcpugetraw may return NULL if the cpu is not in policy-cpus cpu mask and it will cause null pointer dereference, so check NULL for cppcgetcpucost...

CVE-2024-53231 cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()

In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix possible null-ptr-deref for cpufreqcpugetraw cpufreqcpugetraw may return NULL if the cpu is not in policy-cpus cpu mask and it will cause null pointer dereference...