OPENSUSE-SU-2024:13053-1 cloud-init-23.1-2.1 on GA media

These are all security issues fixed in the cloud-init-23.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12738-1 cloud-init-23.1-1.1 on GA media

These are all security issues fixed in the cloud-init-23.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10688-1 cloud-init-21.2-1.2 on GA media

These are all security issues fixed in the cloud-init-21.2-1.2 package on the GA media of openSUSE Tumbleweed...

PT-2024-29243

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43 Description The vulnerability is related to the sclp init function in the Linux kernel, which fails to properly clean up when it encounters an error. This can lead to the sclp state change event being adde...

PT-2024-29176

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10.0-rc2-syzkaller-00249-gbe27b8965297 Description A vulnerability in the Linux kernel has been resolved, which prevents a possible NULL pointer dereference in the fib6 nh init function. The issue occurs becaus...

PT-2024-24945

Name of the Vulnerable Software and Affected Versions Goodix affected versions not specified Description The issue is related to a possible memory corruption due to type confusion in the handle init function of goodix/main/main.c. This could lead to local escalation of privilege with no additiona...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from an uninitialized data in the fvpfreqhistograminit module of fvp.c, which could lead to information disclosure...

Important: kernel

Issue Overview: An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x8664 lacks consistency checks for CR0 and CR4. CVE-2023-30456 In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix invalid address access in lookuprec when...

PT-2024-40794

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the involvement of mz zip mem read func, mz zip reader...

kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function

A flaw was found in the Netfilter subsystem in the Linux kernel. This issue occurs in the nftverdictinit function, allowing positive values as a drop error within the hook verdict, therefore, the nfhookslow function can cause a double-free vulnerability when NFDROP is issued with a drop error tha...

PT-2024-30718

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The issue is related to the remoteproc: imx rproc component in the Linux kernel. In the imx rproc addr init function, nph = of count phandle with args counts the number of phandles, but these...

kernel: pid: take a reference when initializing `cad_pid`

In the Linux kernel, the following vulnerability has been resolved: pid: take a reference when initializing cadpid During boot, kernelinitfreeable initializes cadpid to the init task's struct pid. Later on, we may change cadpid via a sysctl, and when this happens procdocadpid will increment the...

kernel: pid: take a reference when initializing `cad_pid`

In the Linux kernel, the following vulnerability has been resolved: pid: take a reference when initializing cadpid During boot, kernelinitfreeable initializes cadpid to the init task's struct pid. Later on, we may change cadpid via a sysctl, and when this happens procdocadpid will increment the...

PT-2024-4396

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the alauda init media function in the Linux kernel, which can cause divide errors in alauda read data and alauda write lba if it fails. This is due to the uzonesi...

RHEL 6 : cloud-init (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - cloud-init: default configuration disabled deletion of SSH host keys CVE-2018-10896 Note that Nessus has not tested...

[SECURITY] Fedora 39 Update: rust-sinit-0.1.2-6.fc39

Simple init system for use in containers...

SUSE CVE-2024-36892

In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid zeroing outside-object freepointer for single free Commit 284f17ac13fe "mm/slub: handle bulk and single object freeing separately" splits single and bulk object freeing in two functions slabfree and slabfreebulk...

kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function

A flaw was found in the Netfilter subsystem in the Linux kernel. This issue occurs in the nftverdictinit function, allowing positive values as a drop error within the hook verdict, therefore, the nfhookslow function can cause a double-free vulnerability when NFDROP is issued with a drop error tha...

kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function

A flaw was found in the Netfilter subsystem in the Linux kernel. This issue occurs in the nftverdictinit function, allowing positive values as a drop error within the hook verdict, therefore, the nfhookslow function can cause a double-free vulnerability when NFDROP is issued with a drop error tha...

kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function

A flaw was found in the Netfilter subsystem in the Linux kernel. This issue occurs in the nftverdictinit function, allowing positive values as a drop error within the hook verdict, therefore, the nfhookslow function can cause a double-free vulnerability when NFDROP is issued with a drop error tha...