Privilege escalation

Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability...

CVE-2023-52362

Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability...

CVE-2023-52362

Technical details about CVE-2023-52362 are not publicly provided in the supplied documents. Monitor for updates from vendors (Huawei/Red Hat/CNVD) for affected products, versions, root cause specifics, and patches.

CVE-2023-52362

Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability...

Huawei EMUI 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A privilege management vulnerability exists in the...

CVE-2022-48219

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...

GHSA-W6X2-JG8H-P6MP Path Traversal in TYPO3 File Abstraction Layer Storages

Problem Configurable storages using the local driver of the File Abstraction Layer FAL could be configured to access directories outside of the root directory of the corresponding project. The system setting in BE/lockRootPath was not evaluated by the file abstraction layer component. An...

The vulnerability of the shim_lock component in the Grub2 operating system allows a hacker to break the trust chain of secure loading.

The vulnerability of the shimlock component in the Grub2 operating system is related to the loading of non-atomic files into the secure boot mechanism that supports shim. Exploiting this vulnerability can allow an attacker to break the trust chain of the secure boot mechanism...

If only you had to worry about malware, with Jason Haddix: Lock and Code S05E04

Today on the Lock and Code podcast… If your IT and security teams think malware is bad, wait until they learn about everything else. In 2024, the modern cyberattack is a segmented, prolonged, and professional effort, in which specialists create strictly financial alliances to plant malware on...

PT-2024-26738

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock vulnerability has been resolved in the Linux kernel, specifically in the btrfs file system. The issue occurs when the fiemap and extent locking mechanisms interact, potentiall...

CVE-2024-1312 Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu

A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same time with a fail in the masprevslot function. This issue could allow a local user to crash the system...

PT-2024-21467 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the protection of updates of 64-bit statistics counters in the Linux kernel. A comment in explains that the write side of struct u64 stats sync must ensure mutu...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices, which stems from a security issue in Samsung Gallery that could allow a physical attacker to...

PT-2024-21487

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a deadlock between the fctx lock and the irq lock in the Linux kernel, specifically in the nouveau component. This deadlock is resolved by offloading the processi...

PT-2024-3472 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a flaw in the unix state double lock function within the net/unix/af unix.c module of the Linux kernel, affecting the AF UNIX socket implementation. This flaw i...

kernel: writeback: avoid use-after-free after removing device

In the Linux kernel, the following vulnerability has been resolved: writeback: avoid use-after-free after removing device When a disk is removed, bdiunregister gets called to stop further writeback and wait for associated delayed work to complete. However, wbinodewritebackend may schedule bandwid...

PT-2024-21468

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a circular locking dependency in the KVM Kernel-based Virtual Machine component of the Linux kernel, specifically on arm64 architectures. The problem arises becau...

Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos

...

PT-2024-21510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential deadlock at set capacity in the Linux kernel. This occurs due to an interrupt unsafe locking scenario where aoeblk gdalloc holds &d-lock and attempts ...

PT-2024-21464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the do task stat function, which can trigger a hard lockup if NR CPUS threads call it at the same time and...