The vulnerability of the generic_ip_connect() function in the fs/smb/client/connect.c module of the SMB client kernel in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the genericipconnect function in the fs/smb/client/connect.c module of the SMB client kernel in Linux operating systems is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

kernel: gro: fix ownership transfer

A flaw was found in the Linux kernel's Generic Receive Offload GRO feature, where packets processed with a fragment list are not properly orphaned due to incorrect handling of socket references. This vulnerability can cause system instability or kernel bugs. The issue has been fixed by making sur...

PT-2025-9981

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.142-1-generic Linux kernel versions prior to 5.10.142-1-hardened Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the iommu/vt-d component. Specifically, the...

PT-2025-1035 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a logic error in the code of gatt sr.cc, specifically in the gatts process read by type req function, which could lead to an out-of-bounds write. This might result i...

SUSE CVE-2024-56743

In the Linux kernel, the following vulnerability has been resolved: nfscommon: must not hold RCU while calling nfsdfileputlocal Move holding the RCU from nfstonfsdfileputlocal to nfstonfsdnetput. It is the call to nfsto-nfsdservput that requires the RCU anyway the puts for nfsdfile and netns were...

UBUNTU-CVE-2024-56743

In the Linux kernel, the following vulnerability has been resolved: nfscommon: must not hold RCU while calling nfsdfileputlocal Move holding the RCU from nfstonfsdfileputlocal to nfstonfsdnetput. It is the call to nfsto-nfsdservput that requires the RCU anyway the puts for nfsdfile and netns were...

CVE-2024-56743 nfs_common: must not hold RCU while calling nfsd_file_put_local

In the Linux kernel, the following vulnerability has been resolved: nfscommon: must not hold RCU while calling nfsdfileputlocal Move holding the RCU from nfstonfsdfileputlocal to nfstonfsdnetput. It is the call to nfsto-nfsdservput that requires the RCU anyway the puts for nfsdfile and netns were...

CVE-2024-56743 nfs_common: must not hold RCU while calling nfsd_file_put_local

In the Linux kernel, the following vulnerability has been resolved: nfscommon: must not hold RCU while calling nfsdfileputlocal Move holding the RCU from nfstonfsdfileputlocal to nfstonfsdnetput. It is the call to nfsto-nfsdservput that requires the RCU anyway the puts for nfsdfile and netns were...

[SECURITY] Fedora 40 Update: mingw-orc-0.4.40-1.fc40

Orc is a library and set of tools for compiling and executing very simple programs that operate on arrays of data. The "language" is a generic assembly language that represents many of the features available in SIMD architectures, including saturated addition and subtraction, and many arithmetic...

kernel: gro: fix ownership transfer

A flaw was found in the Linux kernel's Generic Receive Offload GRO feature, where packets processed with a fragment list are not properly orphaned due to incorrect handling of socket references. This vulnerability can cause system instability or kernel bugs. The issue has been fixed by making sur...

CVE-2024-55876

CVE-2024-55876 affects XWiki Platform. Versions 1.2-milestone-2 through 16.3.0 are vulnerable: any account on the master wiki could execute scheduling operations on subwikis by interacting with Scheduler.WebHome and triggering a job, indicating an insufficient authorization boundary between main ...

CVE-2024-53709

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nasir Uddin Generic Elements generic-elements-for-elementor allows DOM-Based XSS.This issue affects Generic Elements: from n/a through = 1.2.5...

CVE-2024-53709

CVE-2024-53709 affects WordPress plugin Generic Elements (

CVE-2024-53709 WordPress Generic Elements plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bdevs Generic Elements allows DOM-Based XSS.This issue affects Generic Elements: from n/a through 1.2.3...

CVE-2024-53709 WordPress Generic Elements plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nasir Uddin Generic Elements generic-elements-for-elementor allows DOM-Based XSS.This issue affects Generic Elements: from n/a through = 1.2.5...

CVE-2024-43049

CVE-2024-43049 describes memory corruption when user-space IOCTLs attempt to set a generic private command in a WLAN driver. The issue is reported across multiple feeds (NVD/Red Hat/CIRCL) and centers on the IOCTL path in the WLAN driver, with a high impact in CVSS terms (Local access, Low comple...

CVE-2024-43049 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver...

WordPress plugin Generic Elements 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

MAL-2024-12330 Malicious code in pycryptographylibv3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 961e4f12709e7f7b2cceaca041246d901647f258e22b2930e53a181dbe0c52ef Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2023-12-bananasqua...

MAL-2024-12324 Malicious code in pipcolorpkgv2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a95f9f4af9619a03c6116af22cc53f289c869d09569629216fd32ea12a5a63cc Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2023-12-bananasqua...