kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension

A flaw was found in the Linux kernel's drm/amdkfd component. This vulnerability arises from a race condition where the Micro Engine Scheduler MES fails to perform a necessary Translation Lookaside Buffer TLB invalidation after unmapping queues. This oversight allows in-flight Direct Memory Access...

CLEANSTART-2024-UQ38456 Using the Location API in a loop could have caused severe application hangs and crashes

CVE-2021-43545 affects multiple packages. Using the Location API in a loop could have caused severe application hangs and crashes. See references for individual vulnerability details...

CLEANSTART-2024-JI29031 Using the Location API in a loop could have caused severe application hangs and crashes

CVE-2021-43545 affects multiple packages. Using the Location API in a loop could have caused severe application hangs and crashes. See references for individual vulnerability details...

Infinite loop

Overview seroval is a Stringify JS values Affected versions of this package are vulnerable to Infinite loop via deserializeSequence in deserializer.ts when processing a sequence node whose done or throw index is non-numeric or out of range. An attacker can supply a malformed serialized payload wi...

kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension

A flaw was found in the Linux kernel's drm/amdkfd component. This vulnerability arises from a race condition where the Micro Engine Scheduler MES fails to perform a necessary Translation Lookaside Buffer TLB invalidation after unmapping queues. This oversight allows in-flight Direct Memory Access...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.12. It arises because schedext fails to requeue tasks on the queue when the CPU goes offline; as a result, these tasks remain counted and cannot be awakened by hotplug threads, leading to CPU hotplug hangs or offline stalls...

Oracle JD Edwards EnterpriseOne General Ledger security vulnerabilities

Oracle JD Edwards EnterpriseOne General Ledger version 9.2 contains a security vulnerability stemming from an issue in the E1 Foundation component. This vulnerability may allow attackers with limited privileges to gain network access via JDENET, potentially causing service hangs or frequent...

Oracle MySQL Server security vulnerabilities

Security vulnerabilities exist in Oracle MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as in Oracle MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1. These vulnerabilities stem from issues with the Server: DDL...

Oracle MySQL Server security vulnerabilities

Security vulnerabilities exist in Oracle MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as in Oracle MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1. These vulnerabilities stem from issues with the Server: XML...

Oracle Solaris security vulnerabilities

A security vulnerability exists in Oracle Solaris 11.4; it stems from a problem in the Kernel component and may allow unauthenticated attackers to gain HTTP access, potentially causing service hangs or frequent crashes...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Core component, which may allow unauthenticated attackers to access through the HTTP network. This could lead to service hangs or frequent crashes when user interactio...

Oracle MySQL Router security vulnerability

A security vulnerability exists in Oracle MySQL Router version 26.7.0. This vulnerability stems from issues within the Router: General component and may allow unauthenticated attackers to gain network access via various protocols, potentially leading to service hangs or frequent crashes...

Oracle Java SE security vulnerabilities

Oracle Java SE 26.0.2 has security vulnerabilities. These vulnerabilities stem from issues with the Compiler component. Unauthorized attackers may gain network access through various protocols, leading to service hangs or frequent crashes complete denial of service...

Oracle MySQL Cluster security vulnerabilities

Oracle MySQL Cluster versions 8.0.0 through 8.0.37 have security vulnerabilities. These vulnerabilities stem from issues with the InnoDB component, which may allow attackers with physical access to cause service hangs or frequent crashes...

Oracle Assets security vulnerability

A security vulnerability exists in Oracle Assets versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain HTTP access. It can result in service hangs or frequent crashes, as well as unauthorized...

Oracle Helidon security vulnerabilities

Security vulnerabilities exist in Oracle Helidon versions 4.0.0 through 4.5.5 and 27.0.0. These stem from issues in the helidon-webclient-http2 component and may allow unauthenticated attackers to access the service via HTTP/2 networks, potentially leading to service hangs or frequent crashes...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow low-privilege attackers to access the JDENET network, resulting in service hangs or...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 version contains security vulnerabilities. These vulnerabilities stem from issues with the Libraries component. The vulnerabilities are difficult to exploit; attackers need to log in locally and rely on user interaction to exploit them. This can lead to service hangs or freque...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow low-privilege attackers to access the JDENET network, resulting in service hangs or...

kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension

A flaw was found in the Linux kernel's drm/amdkfd component. This vulnerability arises from a race condition where the Micro Engine Scheduler MES fails to perform a necessary Translation Lookaside Buffer TLB invalidation after unmapping queues. This oversight allows in-flight Direct Memory Access...