CVE-2024-53049

In the Linux kernel, the following vulnerability has been resolved: slub/kunit: fix a WARNING due to unwrapped kmalloccachenoprof 'modprobe slubkunit' will have a warning as shown below. The root cause is that kmalloccachenoprof was directly used, which resulted in no alloctag being allocated. Th...

CVE-2024-53049 slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof

In the Linux kernel, the following vulnerability has been resolved: slub/kunit: fix a WARNING due to unwrapped kmalloccachenoprof 'modprobe slubkunit' will have a warning as shown below. The root cause is that kmalloccachenoprof was directly used, which resulted in no alloctag being allocated. Th...

Malicious code in seller-rn-mng-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92086f415cec1b766cd8be30c674b6841262d14cae307bfc7060691b93c93078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in litecor-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8de5087944e5861aed99f90c521ee559657882af3f3048fa1bae6415906160b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10680 Malicious code in litecor-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8de5087944e5861aed99f90c521ee559657882af3f3048fa1bae6415906160b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Boa (>=0.13.0 <=0.13.1), arci-urdf-viz (>=0.0.7 <=0.1.0) +88 more potentially affected by unknown CVE via fast-float (=0.2.0)

fast-float CARGO version =0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fast-float and may be impacted: - Boa =0.13.0, =0.0.7, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.19.0, =0.3.0, =0.4.1, =0.6.2, =0.3.2, =0.4.1, =0.3.2, =0.20.2 and more Source cves...

Malicious code in @david-lab/evm-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da15cab58cbaaf01db60d8e67007017a770017bc33db5b17508dcd03db50b1a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10604 Malicious code in @david-lab/evm-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da15cab58cbaaf01db60d8e67007017a770017bc33db5b17508dcd03db50b1a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2024-50205

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check before the division. The...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2024-50205

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check before the division. The...

AZL-53025 CVE-2024-50205 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check before the division. The...

AZL-53106 CVE-2024-50205 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check before the division. The...

CVE-2024-50205

CVE-2024-50205 affects the Linux kernel ALSA: firewire-lib component, where apply_constraint_to_size() could encounter a division by zero due to a zero-initialized step variable. The issue arises if the loop does not modify step, causing division to operate on zero in snd_interval_test() data der...

CVE-2024-50205 ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check before the division. The...

CVE-2024-50205 ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check before the division. The...

CVE-2024-50205

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check before the division. The...

ALSA-2024:8856 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net/bluetooth: race condition in conninfomin,maxageset CVE-2024-24857 kernel: dmaengine: fix NULL pointer in channel unregistration function CVE-2023-52492 kernel: netfilter:...

Malicious code in orb-sync-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 66fd78c3bd4a6a0c78fd807883122d9472771728d739f90d169cd1ba62760f3c The OpenSSF Package Analysis project identified 'orb-sync-lib' @ 100.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10268 Malicious code in orb-sync-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 66fd78c3bd4a6a0c78fd807883122d9472771728d739f90d169cd1ba62760f3c The OpenSSF Package Analysis project identified 'orb-sync-lib' @ 100.0.0 npm as malicious. It is considered malicious because: - The package...