MAL-2024-11203 Malicious code in finn-pulse-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8556cda5df574e7c339a9e910f83692fefe384dd8c3c1107fafd270c8057a170 The OpenSSF Package Analysis project identified 'finn-pulse-init' @ 1.0.7 npm as malicious. It is considered malicious because: - The package...

kernel: drm/amdgpu: change vm->task_info handling

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm-taskinfo handling This patch changes the handling and lifecycle of vm-taskinfo object. The major changes are: - vm-taskinfo is a dynamically allocated ptr now, and its uasge is reference counted. - introduci...

SUSE CVE-2024-53106

In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in imaeventdigestinitcommon Function imaeventdigestinit calls imaeventdigestinitcommon with HASHALGOLAST which is then used to access the array hashdigestsize leading to buffer overrun. Have a conditional...

The vulnerability of the seg6_init() function in the implementation of the IPv6 protocol in Linux’s operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the seg6init function in the net/ipv6/seg6.c module of the Linux operating system’s IPv6 kernel implementation is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

UBUNTU-CVE-2024-53106

In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in imaeventdigestinitcommon Function imaeventdigestinit calls imaeventdigestinitcommon with HASHALGOLAST which is then used to access the array hashdigestsize leading to buffer overrun. Have a conditional...

The vulnerability of the ice component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ice component in the Linux operating system’s kernel is related to resource management errors in the icemoduleinit module. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2024-40550 · Mozilla · Seamonkey

Name of the Vulnerable Software and Affected Versions: SeaMonkey versions prior to 2.53.19 Description: The issue is related to a security vulnerability in SeaMonkey. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents where thi...

PT-2025-3328

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a vulnerability in the powerpc/prom init component related to missing size-cells properties in escc nodes on some PowerMac systems. This issue is a warning duri...

Astra Linux – Vulnerability in cloud-init

Sensitive data may be exposed in logs of cloud-init before version 23.1.2. Attackers could use this information to obtain hashed passwords and potentially escalate their privileges...

PT-2024-36938

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to the ocfs2 file system in the Linux kernel, where the ocfs2 get init inode function fails to free an inode, leading to busy inodes after unmount. This occurs when new ino...

The vulnerability of the btrfs component in the Linux operating system’s kernel allows a hacker to gain access to confidential information.

The vulnerability of the btrfs component in the Linux operating system’s kernel is related to the disclosure of information within the initdatacontainer function. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

The vulnerability of the Linux operating system’s kernel component “init”, which allows a hacker to cause a service failure

The vulnerability of the init kernel component in the Linux operating system is related to a memory corruption in the setupcommandline function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the powerpc/powernv components in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the powerpc/powernv components in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the opaleventinit function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of components related to DRM, AMD, and PM in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of components related to DRM/AMD/PM in the Linux operating system is associated with errors in the double-release function of sidpminit. Exploiting this vulnerability can allow a perpetrator to trigger a service failure...

Arbitrary command execution through gitRepo volume

A security vulnerability was discovered in Kubernetes that could allow a user with the ability to create a pod and associate a gitRepo volume to execute arbitrary commands beyond the container boundary. This vulnerability leverages the hooks folder in the target repository to run arbitrary comman...

SUSE CVE-2024-53066

In the Linux kernel, the following vulnerability has been resolved: nfs: Fix KMSAN warning in decodegetfattrattrs Fix the following KMSAN warning: CPU: 1 UID: 0 PID: 7651 Comm: cp Tainted: G B Tainted: B=BADPAGE Hardware name: QEMU Standard PC Q35 + ICH9, 2009...

AZL-53909 CVE-2024-53066 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: nfs: Fix KMSAN warning in decodegetfattrattrs Fix the following KMSAN warning: CPU: 1 UID: 0 PID: 7651 Comm: cp Tainted: G B Tainted: B=BADPAGE Hardware name: QEMU Standard PC Q35 + ICH9, 2009...

AZL-53915 CVE-2024-53066 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: nfs: Fix KMSAN warning in decodegetfattrattrs Fix the following KMSAN warning: CPU: 1 UID: 0 PID: 7651 Comm: cp Tainted: G B Tainted: B=BADPAGE Hardware name: QEMU Standard PC Q35 + ICH9, 2009...

DEBIAN-CVE-2024-53066

In the Linux kernel, the following vulnerability has been resolved: nfs: Fix KMSAN warning in decodegetfattrattrs Fix the following KMSAN warning: CPU: 1 UID: 0 PID: 7651 Comm: cp Tainted: G B Tainted: B=BADPAGE Hardware name: QEMU Standard PC Q35 + ICH9, 2009...

DEBIAN-CVE-2024-53042

In the Linux kernel, the following vulnerability has been resolved: ipv4: iptunnel: Fix suspicious RCU usage warning in iptunnelinitflow There are code paths from which the function is called without holding the RCU read lock, resulting in a suspicious RCU usage warning 1. Fix by using...