CVE-2024-49885

CVE-2024-49885: Linux kernel mm/slub kmalloc redzone issue resolved. Root cause: orig_size handling treated wasted space as redzone and, with init_on_free=1, clears full object->size including metadata, causing check_object() to misclassify the object as redzone. Fix: clear the used area using...

AZL-50727 CVE-2024-47695 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Reset cid to connum - 1 to stay in bounds In the function initconns, after the createcon and createcm for loop if something fails. In the cleanup for loop after the destroy tag, we access out of bound memory becaus...

AZL-50990 CVE-2024-47695 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Reset cid to connum - 1 to stay in bounds In the function initconns, after the createcon and createcm for loop if something fails. In the cleanup for loop after the destroy tag, we access out of bound memory becaus...

CVE-2024-47694 IB/mlx5: Fix UMR pd cleanup on error flow of driver init

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix UMR pd cleanup on error flow of driver init The cited commit moves the pd allocation from function mlx5rumrresourcecleanup to a new function mlx5rumrcleanup. So the fix in commit 1 is broken. In error flow, will hit...

CVE-2024-47694

CVE-2024-47694 affects the Linux kernel’s InfiniBand/RDMA stack, specifically mlx5-based drivers. The root cause is a broken UMR cleanup flow during driver init: the cited patch moved pd allocation to a new mlx5r_umr_cleanup() function, which could dereference a NULL pd in error paths, causing a ...

CVE-2024-47694

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix UMR pd cleanup on error flow of driver init The cited commit moves the pd allocation from function mlx5rumrresourcecleanup to a new function mlx5rumrcleanup. So the fix in commit 1 is broken. In error flow, will hit...

CVE-2024-47694 IB/mlx5: Fix UMR pd cleanup on error flow of driver init

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix UMR pd cleanup on error flow of driver init The cited commit moves the pd allocation from function mlx5rumrresourcecleanup to a new function mlx5rumrcleanup. So the fix in commit 1 is broken. In error flow, will hit...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a resource leak caused by improper handling of reference counts in icedpllinitrclkpins...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a missing INITLISTHEAD initialization in the ieee802154ifadd function in the mac802154 subsystem...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible skb leak in the grethinitrings function of the ethernet driver aeroflex...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a potential underflow in the qdiscpktleninit function in the net component when handling UFOs...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from insufficient checking of the reasonableness of more of the qdiscpktleninit function in the net component...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer check not being performed on clkmgr and clkmgr-funcs in the dcn401inithw function, which coul...

PT-2024-33726

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.11.0-rc3-next-20240814-00004-g61844c55c3f4 Description: A vulnerability in the Linux kernel has been resolved, related to the mm and slub modules. The issue arises when the init on free option is enabled,...

PT-2024-10851 · WordPress · Woocommerce Smart Coupons

Name of the Vulnerable Software and Affected Versions: WooCommerce Smart Coupons plugin for WordPress versions up to, and including, 4.6.0 Description: The issue is related to authorization bypass due to a missing capability check on the woocommerce coupon admin init function. This allows...

The vulnerability of the amdgpu_ring_init() function in the amdgpu driver of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amdgpuringinit function in the drivers/gpu/drm/amd/amdgpu/amdgpuring.c file of the amdgpu kernel in the Linux operating system is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the...

kernel: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()

A vulnerability was found in the Linux kernel's ext4 filesystem within the ext4fillsuper function, where uninitialized access to ratelimitstate-lock can occur, where the sysfs interface is registered before properly initializing rs-lock, potentially allowing other processes to modify rs-interval ...

PT-2024-36908

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel has been resolved, where the inet6 create function did not properly clear a dangling sk pointer. The sock init data function attaches the allocated sk pointe...

PT-2025-9963

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to an error check in the npcm video ece init function. Specifically, when the function of find device by node...

PT-2024-36909

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel has been resolved, where the inet create function could leave a dangling sk pointer. The sock init data function attaches the allocated sk object to the...