AZL-42136 CVE-2024-35912 affecting package hyperv-daemons for versions less than 5.15.158.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: rfi: fix potential response leaks If the rx payload length check fails, or if kmemdup fails, we still need to free the command response. Fix that...

CVE-2024-35927: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm: Check output polling initialized before disabling In drmkmshelperpolldisable check if output polling support is initialized before disabling polling. If not flag this as a warning. Additionally in drmmodeconfighelpersuspend...

CVE-2024-27045 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2024-27045 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-27078 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2024-27078 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-27038 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2024-27038 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-27061 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2024-27061 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-27037 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2024-27037 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-51779 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2023-51779 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-27051 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2024-27051 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-27058 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2024-27058 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-46813 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2023-46813 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-27391 affecting package hyperv-daemons for versions less than 6.6.29.1-1

CVE-2024-27391 affecting package hyperv-daemons for versions less than 6.6.29.1-1. An upgraded version of the package is available that resolves this issue...

AZL-42117 CVE-2024-35857 affecting package hyperv-daemons for versions less than 6.6.35.1-1

In the Linux kernel, the following vulnerability has been resolved: icmp: prevent possible NULL dereferences from icmpbuildprobe First problem is a double call to indevgetrcu, because the second one could return NULL. if indevgetrcudev && indevgetrcudev-ifalist Second problem is a read from...

AZL-42139 CVE-2024-35852 affecting package hyperv-daemons for versions less than 6.6.35.1-1

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak when canceling rehash work The rehash delayed work is rescheduled with a delay if the number of credits at end of the work is not negative as supposedly it means that the migration ended...

AZL-42100 CVE-2024-35854 affecting package hyperv-daemons for versions less than 6.6.35.1-1

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during rehash The rehash delayed work migrates filters from one region to another according to the number of available credits. The migrated from region is destroyed at the end ...

AZL-42118 CVE-2024-35849 affecting package hyperv-daemons for versions less than 6.6.35.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix information leak in btrfsioctllogicaltoino Syzbot reported the following information leak for in btrfsioctllogicaltoino: BUG: KMSAN: kernel-infoleak in instrumentcopytouser include/linux/instrumented.h:114 inline BUG:...

AZL-42156 CVE-2024-27418 affecting package hyperv-daemons for versions less than 5.15.158.2-1

In the Linux kernel, the following vulnerability has been resolved: net: mctp: take ownership of skb in mctplocaloutput Currently, mctplocaloutput only takes ownership of skb on success, and we may leak an skb if mctplocaloutput fails in specific states; the skb ownership isn't transferred until...

AZL-40679 CVE-2024-27397 affecting package hyperv-daemons for versions less than 5.15.158.2-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: use timestamp to check for set element timeout Add a timestamp field at the beginning of the transaction, store it in the nftables per-netns area. Update set backend .insert, .deactivate and sync gc path to u...

AZL-40565 CVE-2024-27396 affecting package hyperv-daemons for versions less than 6.6.35.1-1

In the Linux kernel, the following vulnerability has been resolved: net: gtp: Fix Use-After-Free in gtpdellink Since callrcu, which is called in the hlistforeachentryrcu traversal of gtpdellink, is not part of the RCU read critical section, it is possible that the RCU grace period will pass durin...

PT-2024-3599 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory, which can be exploited by a remote attacker to execute arbitrary code. This can potentially affect the system...