Azure Linux 3.0 Security Update: kernel (CVE-2024-56779)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56779 advisory. - In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4openowner leak when...

The vulnerability of the kernel component of the Linux operating system, which allows a hacker to increase their privileges within the system

The vulnerability of the kernel component of the Linux operating system is related to the operation of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain higher privileges within the system...

The vulnerability of the kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the kernel component of the Linux operating system is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the kxcjk-1013 component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the kxcjk-1013 component in the Linux operating system is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2021-47566 proc/vmcore: fix clearing user buffer by properly using clear_user()

In the Linux kernel, the following vulnerability has been resolved: proc/vmcore: fix clearing user buffer by properly using clearuser To clear a user buffer we cannot simply use memset, we have to use clearuser. With a virtio-mem device that registers a vmcorecb and has some logically unplugged...

The vulnerability of the GTP_dellink() function in the implementation of the GPRS tunneling protocol for Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gtpdellink function in the drivers/net/gtp.c module of the Linux operating system’s GPRS tunneling protocol implementation is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2024-23354 Use After Free in Graphics Linux

Memory corruption when the IOCTL call is interrupted by a signal...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs in Linux when the IOMMU fails to unmap a GPU buffer...

The vulnerability of the sii902x_init function in Linux operating systems allows a hacker to disclose sensitive information or cause system failures.

The vulnerability of the sii902xinit function in Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause system failures...

The vulnerability of the masprev slot() function in the Memory Management subsystem of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the masprev slot function in the Memory Management subsystem of Linux kernels relates to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hugetlbfs_fill_super function in the Linux operating system’s memory management subsystem allows a attacker to cause a service failure or enhance their privileges.

The vulnerability of the hugetlbfsfillsuper function in the Linux operating system’s memory management subsystem is related to the assignment of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...

The vulnerability of the Linux operating system’s ION memory distribution subsystem allows attackers to enhance their privileges and affect the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system’s memory distribution subsystem, ION, is related to the use of previously freed memory due to insufficient synchronization. Exploiting this vulnerability can allow attackers to enhance their privileges and affect the confidentiality, integrity, and...

The vulnerability of the Btrfs file system in Linux kernels allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Btrfs file system in Linux operating systems is related to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

SUSE CVE-2004-0077

The domremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the domunmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different...

SUSE CVE-2005-0176

The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released...

SUSE CVE-2009-4112

Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux - Get Memory Usage" setting to contain arbitrary commands...

Metasploit Weekly Wrap-Up

Have you built out that awesome media room? If your guilty pleasures include using a mobile device to make your home entertainment system WOW your guests, you might be using Unified Remote. I hope you are extra cautious about what devices you let on that WiFi network. A prolific community member...

The vulnerability of the Btrfs implementation in the Linux operating system is related to the allocation of unlimited memory, which allows a hacker to cause a service failure.

The vulnerability of the Btrfs implementation in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mmap() function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the mmap function in Linux operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

libhevc:hevc_dec_fuzzer: Use-of-uninitialized-value in ihevcd_fmt_conv_420sp_to_rgb565

Detailed Report: https://oss-fuzz.com/testcase?key=5728697516032000 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzermsanlibhevc Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ihevcdfmtconv420sptorgb565 ihevcdfmtconv...