The vulnerability of the nvme_rdma_free_queue() function in the Linux operating system’s NVMe driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nvmerdmafreequeue function in the drivers/nvme/host/rdma.c file of the Linux NVMe kernel driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the aac_init_adapter() function in Adaptec AAC RAID Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the aacinitadapter function in the drivers/scsi/aacraid/comminit.c file of the Adaptec AACRAID driver for Linux operating systems is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the dcn302_fpu_update_bw_bounding_box() function in the amdgpu kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dcn302fpuupdatebwboundingbox function in the drivers/gpu/drm/amd/display/dc/dml/dcn302/dcn302fpu.c file of the amdgpu kernel in the Linux operating system is related to incorrect calculation of the index. Exploiting this vulnerability may allow an attacker to compromise t...

CVE-2024-21806

Improper conditions check in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-21807

Improper initialization in the Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-20217 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel mode driver for IntelR Ethernet Network Controllers and Adapters versions prior to 28.3 Description: A wrap-around error in the Linux kernel mode driver may allow an authenticated user to potentially enable escalation of privileg...

Moderate: Red Hat Security Advisory: python-idna security update

An update for python-idna is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Moderate: python-idna security update

The hsakmt packages include a thunk library for AMD's Heterogeneous System Architecture HSA Linux kernel driver amdkfd. Security Fixes: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651 For more details about the security issues, includi...

The vulnerability of the scp_ipi_init() function in the kernel subsystem driver of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the scpipiinit function in the drivers/remoteproc/mtkscp.c file of the Linux kernel’s processor driver relates to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to cause a system failure...

RLSA-2024:3846 Moderate: python-idna security update

The hsakmt packages include a thunk library for AMD's Heterogeneous System Architecture HSA Linux kernel driver amdkfd. Security Fixes: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651...

ALSA-2024:3846 Moderate: python-idna security update

The hsakmt packages include a thunk library for AMD's Heterogeneous System Architecture HSA Linux kernel driver amdkfd. Security Fixes: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651...

The vulnerability of the qla2x00_els_dcmd_sp_free() function in the drivers/scsi/qla2xxx/qla_iocb.c module of the QLogic QLA2XXX Linux operating system kernel allows a attacker to cause a service failure or exert other effects.

The vulnerability of the qla2x00elsdcmdspfree function in the drivers/scsi/qla2xxx/qlaiocb.c module of the QLogic QLA2XXX Linux kernel driver is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure or have other...

The vulnerability of the qla2x00_mem_alloc() function in the drivers/scsi/qla2xxx/qla_os.c module of the QLogic QLA2XXX kernel driver for the Linux operating system allows a hacker to cause service failure or exert other adverse effects.

The vulnerability of the qla2x00memalloc function in the drivers/scsi/qla2xxx/qlaos.c file of the QLogic QLA2XXX kernel in the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure or...

The vulnerability of the dm_sw_fini() function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c file of the amdgpu kernel driver for the Linux operating system, which allows a hacker to disclose protected information.

The vulnerability of the dmswfini function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c file of the amdgpu kernel in the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by...

CVE-2024-23851

copyparams in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INTMAX bytes, and crash, because of a missing paramkernel-datasize check. This is related to ctlioctl...

SUSE SLES12 Security Update : containerd, docker, runc (SUSE-SU-2023:4625-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4625-1 advisory. containerd: -Update to containerd v1.7.8. Upstream release notes: https://github.com/containerd/containerd/releases/tag/v1.7.8...

The vulnerability of the saa7134_finidev() function in the drivers/media/pci/saa7134/saa7134-core.c file of the Philips SAA7134 driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the saa7134finidev function in the driver drivers/media/pci/saa7134/saa7134-core.c file of the Philips SAA7134 kernel for the Linux operating system is related to the reutilization of a resource that was previously freed due to competitive access to the resource i.e., in a...

SUSE CVE-2023-1855

A use-after-free flaw was found in xgenehwmonremove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver xgene-hwmon. This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem...

CVE-2023-1855

CVE-2023-1855 describes a use-after-free in xgene_hwmon_remove (drivers/hwmon/xgene-hwmon.c) of the Linux kernel hardware monitoring driver. The Astra Linux security bulletin mirrors this flaw and notes it could allow a local attacker to crash the system or leak kernel memory due to a race condit...

kernel: memory corruption in AX88179_178A based USB ethernet device.

A flaw was found in the Linux kernel’s driver for the ASIX AX88179178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes...