PT-2024-35570

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.65 Description The issue is related to a buffer overrun in the ima eventdigest init common function. The ima eventdigest init function calls ima eventdigest init common with HASH ALGO LAST, which is then used...

SUSE CVE-2024-41025

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix memory leak in audio daemon attach operation Audio PD daemon send the name as part of the init IOCTL call. This name needs to be copied to kernel for which memory is allocated. This memory is never freed which...

SUSE CVE-2024-41068

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix sclpinit cleanup on failure If sclpinit fails it only partially cleans up: if there are multiple failing calls to sclpinit sclpstatechangeevent will be added several times to sclpreglist, which results in the...

SUSE CVE-2024-42106

In the Linux kernel, the following vulnerability has been resolved: inetdiag: Initialize pad field in struct inetdiagreqv2 KMSAN reported uninit-value access in rawlookup 1. Diag for raw sockets uses the pad field in struct inetdiagreqv2 for the underlying protocol. This field corresponds to the...

SUSE CVE-2024-42147

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/debugfs - Fix debugfs uninit process issue During the zip probe process, the debugfs failure does not stop the probe. When debugfs initialization fails, jumping to the error branch will also release regs, in...

PT-2024-41603

Уязвимость функции ident pud init модуля arch/x86/mm/ident map.c поддержки платформы x86 ядра операционной системы Linux связана с недостаточным сравнением. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2024-32164

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when the uinput interface is exercised with a large number of slots, causing memory allocation failure in the input mt init slots function. Although the allocation failu...

CVE-2024-41255

filestash v0.4 is configured to skip TLS certificate verification when using the FTPS protocol, possibly allowing attackers to execute a man-in-the-middle attack via the Init function of index.go...

PT-2024-29822

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The vulnerability is related to a null pointer dereference in the iptable nat table init function. This issue can be triggered when iptables-restore is called at boot time, causing a kernel NUL...

PT-2024-29333

Name of the Vulnerable Software and Affected Versions filestash version 0.4 Description The issue is related to filestash being configured to skip TLS certificate verification when using the FTPS protocol. This could potentially allow attackers to execute a man-in-the-middle attack via the Init...

CVE-2024-41255

The file manager filestash v0.4 (specifically the github.com/mickael-kerjean/filestash repository) is vulnerable to Improper Certificate Validation . The software is configured to skip TLS certificate verification when using the FTPS protocol because the InsecureSkipVerify flag is set to true. Th...

CVE-2024-41255

filestash v0.4 is configured to skip TLS certificate verification when using the FTPS protocol, possibly allowing attackers to execute a man-in-the-middle attack via the Init function of index.go...

PT-2024-29821

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The issue is related to a potential null pointer dereference in the ip6table nat table init function. This function accesses net-gen-ptrip6table nat net ops.id, but it is exposed to user space...

CVE-2024-41255

filestash v0.4 is configured to skip TLS certificate verification when using the FTPS protocol, possibly allowing attackers to execute a man-in-the-middle attack via the Init function of index.go...

CVE-2024-41255: Insecure Default Variable Initialization

filestash v0.4 is configured to skip TLS certificate verification when using the FTPS protocol, possibly allowing attackers to execute a man-in-the-middle attack via the Init function of index.go...

CVE-2024-41255

filestash v0.4 is configured to skip TLS certificate verification when using the FTPS protocol, possibly allowing attackers to execute a man-in-the-middle attack via the Init function of index.go...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the bpf module in the test case dummystops/dummyinitretvalue, where the first argument of the test1...

AZL-47112 CVE-2024-42065 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add a NULL check in xettmstolenmgrinit Add an explicit check to ensure that the mgr is not NULL...

AZL-47235 CVE-2024-42065 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add a NULL check in xettmstolenmgrinit Add an explicit check to ensure that the mgr is not NULL...

AZL-47555 CVE-2024-41096 affecting package kernel for versions less than 6.6.43.1-7

In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Fix UAF in msicapabilityinit KFENCE reports the following UAF: BUG: KFENCE: use-after-free read in pcienablemsirange+0x2c0/0x488 Use-after-free read at 0x0000000024629571 in kfence-12: pcienablemsirange+0x2c0/0x488...