8126 matches found
GNU GRUB security vulnerability
GNU GRUB is a Linux system boot program from the GNU community. A security vulnerability exists in GNU GRUB that stems from grubcryptomemcmp not using a constant time algorithm, no details of the vulnerability are provided at this time...
SUSE CVE-2024-53202
In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix possible resource leak in fwlogfirmwareinfo The alg instance should be released under the exception path, otherwise there may be resource leak here. To mitigate this, free the alg instance with cryptofreeshash...
vulkan-loader:settings_fuzzer: Segv on unknown address in loader_delete_layer_list_and_properties
Project: https://github.com/khronosgroup/Vulkan-Loader.git Detailed Report: https://oss-fuzz.com/testcase?key=4809992808497152 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: settingsfuzzer Job Type: libfuzzerasanvulkan-loader Platform Id: linux Crash Type: Segv on unknown address...
DEBIAN-CVE-2024-53202
In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix possible resource leak in fwlogfirmwareinfo The alg instance should be released under the exception path, otherwise there may be resource leak here. To mitigate this, free the alg instance with cryptofreeshash...
AZL-55506 CVE-2024-53202 affecting package kernel for versions less than 6.6.64.2-1
In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix possible resource leak in fwlogfirmwareinfo The alg instance should be released under the exception path, otherwise there may be resource leak here. To mitigate this, free the alg instance with cryptofreeshash...
UBUNTU-CVE-2024-53202
In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix possible resource leak in fwlogfirmwareinfo The alg instance should be released under the exception path, otherwise there may be resource leak here. To mitigate this, free the alg instance with cryptofreeshash...
CVE-2024-53202 firmware_loader: Fix possible resource leak in fw_log_firmware_info()
In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix possible resource leak in fwlogfirmwareinfo The alg instance should be released under the exception path, otherwise there may be resource leak here. To mitigate this, free the alg instance with cryptofreeshash...
CVE-2024-53202
CVE-2024-53202 : In the Linux kernel, a resource leak can occur in the firmware loader path (fw_log_firmware_info) if an alg instance is not released on the exception path. The fix ensures the alg instance is freed with crypto_free_shash when kmalloc fails. Affected area: firmware_loader/kernel, ...
CVE-2024-53202 firmware_loader: Fix possible resource leak in fw_log_firmware_info()
In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix possible resource leak in fwlogfirmwareinfo The alg instance should be released under the exception path, otherwise there may be resource leak here. To mitigate this, free the alg instance with cryptofreeshash...
CVE-2024-53202
In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix possible resource leak in fwlogfirmwareinfo The alg instance should be released under the exception path, otherwise there may be resource leak here. To mitigate this, free the alg instance with cryptofreeshash...
CVE-2024-53202 firmware_loader: Fix possible resource leak in fw_log_firmware_info()
In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix possible resource leak in fwlogfirmwareinfo The alg instance should be released under the exception path, otherwise there may be resource leak here. To mitigate this, free the alg instance with cryptofreeshash...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a resource leak in the firmwareloader module...
vulkan-loader:settings_fuzzer: Crash in loader_delete_layer_list_and_properties
Project: https://github.com/khronosgroup/Vulkan-Loader.git Detailed Report: https://oss-fuzz.com/testcase?key=4732216520802304 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: settingsfuzzer Job Type: libfuzzerubsanvulkan-loader Platform Id: linux Crash Type: UNKNOWN READ Crash...
wamr:wasm_mutator_fuzz_loader: Heap-buffer-overflow in aot_instantiate
Project: https://github.com/bytecodealliance/wasm-micro-runtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5300312985894912 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wasmmutatorfuzzloader Job Type: libfuzzerasanwamr Platform Id: linux Crash Type: Heap-buffer-overflow READ 8...
vulkan-loader:instance_create_fuzzer: Segv on unknown address in loader_free_layer_properties
Detailed Report: https://oss-fuzz.com/testcase?key=5817896795701248 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: instancecreatefuzzer Job Type: libfuzzerasanvulkan-loader Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: loaderfreelayerproperties...
@volpe/astro-utils (>=0.0.1, <=0.0.20), astro-npm-loader (>=0.0.1, <=0.1.2) potentially affected by CVE-2024-56159 via astro (5.0.0-beta.5)
astro NPM version 5.0.0-beta.5 is affected by a known vulnerability. The following packages have a transitive dependency on astro and may be impacted: - @volpe/astro-utils =0.0.1, =0.0.1, =0.1.2 Source cves: CVE-2024-56159 Source advisory: MEND:CVE-2024-56159...
@volpe/astro-utils (>=0.0.1, <=0.0.20), astro-npm-loader (>=0.0.1, <=0.1.2) potentially affected by CVE-2024-56159 via astro (5.0.0-beta.5)
astro NPM version 5.0.0-beta.5 is affected by a known vulnerability. The following packages have a transitive dependency on astro and may be impacted: - @volpe/astro-utils =0.0.1, =0.0.1, =0.1.2 Source cves: CVE-2024-56159 Source advisory: GHSA-49W6-73CW-CHJR...
WordPress WP Nice Loader plugin <= 0.1.0.4 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin WP Nice Loader versions = 0.1.0.4...
Important: edk2
Issue Overview: A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. CVE-2021-28211 BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. CVE-2021-28216 A BIOS bug in firmware for a particular PC model...
AMD Platform Security Processor Loader Code Execution
The vulnerability of the loader for AMD Platform Security Processor processors involves incorrect checking of the range in the object header. Exploiting this vulnerability could allow an attacker to execute arbitrary code...