drm/amdgpu: fix the waring dereferencing hive

...

drm/amd/pm: fix the Out-of-bounds read warning

...

drm/amdgpu: Fix out-of-bounds write warning

...

drm/amdgpu: fix mc_data out-of-bounds read warning

...

CVE-2024-43829

...

CVE-2024-43894

...

CVE-2024-43905

...

CVE-2024-42259

...

CVE-2024-43863

...

CVE-2024-43909

...

CVE-2024-43907

...

USN-7020-4 linux-aws-6.8, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - SCSI drivers; - F2FS file system; - BPF subsystem; - IPv4 networking;...

Vulnerability of the i915_vma_revoke_fence() function (driver/gpu/drm/i915/gt/intel_ggtt_fencing.c) in Intel 8xx/9xx/G3x/G4x/HD graphics cards’ Linux kernel drivers, allowing a hacker to increase their privileges

The vulnerability of the i915vmarevokefence function driver/gpu/drm/i915/gt/intelggttfencing.c in Intel 8xx/9xx/G3x/G4x/HD video card drivers for the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their...

CVE-2024-9074

The Advanced Blocks Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...

SUSE CVE-2024-28168

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue...

CVE-2024-9072

The GDPR-Extensions-com – Consent Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-9066

The Marketing and SEO Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.9.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level acces...

AZL-50736 CVE-2024-47662 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection Why These registers should not be read from driver and triggering the security violation when DMCUB work times out and diagnostics are collected blocks Z8...

CVE-2024-28168

A flaw was found in Apache XML Graphics FOP. This vulnerability allows remote attackers to cause issues via improper handling of XML External Entity XXE references. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

Apache XML Graphics FOP XML External Entity Reference ('XXE') vulnerability

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue...