The vulnerability of the HP TamperLock function in microprogramming software for UEFI-based desktop computers and personal computers manufactured by Hewlett-Packard Development Company L.P. allows a intruder to circumvent security restrictions.

The vulnerability of the HP TamperLock function in microprogramming-based EFI BIOS for desktop computers and personal computers manufactured by Hewlett-Packard Development Company L.P. is related to insufficient validation of input data. Exploiting this vulnerability can allow a hacker to...

SUSE CVE-2024-26772

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocating blocks from corrupted group in ext4mbfindbygoal Places the logic for checking if the group's block bitmap is corrupt under the protection of the group lock to avoid allocating blocks from the group with a...

SUSE CVE-2024-26775

In the Linux kernel, the following vulnerability has been resolved: aoe: avoid potential deadlock at setcapacity Move setcapacity outside of the section procected by &d-lock. To avoid possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- 1 lock&bdev-bdsizelock; localirqdisable; 2...

Huawei HarmonyOS and EMUI Security Bypass Vulnerability (CNVD-2024-31527)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security bypass vulnerability exists in the Huawei...

SUSE CVE-2024-26722

In the Linux kernel, the following vulnerability has been resolved: ASoC: rt5645: Fix deadlock in rt5645jackdetectwork There is a path in rt5645jackdetectwork, where rt5645-jdmutex is left locked forever. That may lead to deadlock when rt5645jackdetectwork is called for the second time. Found by...

SUSE CVE-2024-26737

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix racing between bpftimercancelandfree and bpftimercancel The following race is possible between bpftimercancelandfree and bpftimercancel. It will lead a UAF on the timer-timer. bpftimercancel; spinlock; t = timer-time;...

SUSE CVE-2024-26740

In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: use the backlog for mirred ingress The test Davide added in commit ca22da2fbd69 "actmirred: use the backlog for nested calls to mirred ingress" hangs our testing VMs every 10 or so runs, with the familiar...

Huawei HarmonyOS and EMUI Lock Screen Module Permission Checking Class Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A privilege checking type vulnerability exists in the...

PT-2024-8509

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-rc3 net next 841a9b5 Description The vulnerability is related to the net/mlx5e component of the Linux kernel. When mlx5e priv init fails, the cleanup flow calls mlx5e selq cleanup, which in turn calls mlx5e...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse vulnerability in the addlock mutex...

SUSE CVE-2024-26686

In the Linux kernel, the following vulnerability has been resolved: fs/proc: dotaskstat: use sig-statslock to gather the threads/children stats locktasksighand can trigger a hard lockup. If NRCPUS threads call dotaskstat at the same time and the process has NRTHREADS, it will spin with irqs...

SUSE CVE-2024-26691

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix circular locking dependency The rule inside kvm enforces that the vcpu-mutex is taken inside kvm-lock. The rule is violated by the pkvmcreatehypvm which acquires the kvm-lock while already holding the vcpu-mutex...

CVE-2023-52717

Permission verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52717

Permission verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52717

Permission verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52717

Permission verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52717

Huawei HarmonyOS and EMUI contain a lock screen module privilege checking vulnerability (CVE-2023-52717). Connected sources describe a privilege checking type flaw in the lock screen component that can impact usability. The exact affected versions, root cause details, exploitation status, and fix...

PT-2024-14708 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A permission verification vulnerability exists in the lock screen module. Successful exploitation of this issue will affect availability. Recommendations: At the moment, there is no...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security bypass vulnerability exists in the Huawei...

UBUNTU-CVE-2024-26810

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask operations through config space changes to DisINTx may race INTx configuration changes via ioctl. Create wrappers that add locking for paths outside of the core interrupt code. In...