OESA-2024-1954 firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes:Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security...

SUSE CVE-2024-42253

In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953xirqbussyncunlock race Ensure that i2clock' is held when setting interrupt latch and mask in pca953xirqbussyncunlock in order to avoid races. The other non-probe call site pca953xgpiosetmultiple ensures t...

AMD CPUs -- Guest Memory Vulnerabilities

AMD reports: Researchers from IOActive have reported that it may be possible for an attacker with ring 0 access to modify the configuration of System Management Mode SMM even when SMM Lock is enabled. Improper validation in a model specific register MSR could allow a malicious program with ring0...

CVE-2024-42250

A flaw was found in the cachefiles module in the Linux kernel. An improper locking protection in the cachefilesdaemonpoll function in the fs/cachefiles/daemon.c file can result in a race condition...

CVE-2024-42245

In the Linux kernel, the following vulnerability has been resolved: Revert "sched/fair: Make sure to try to detach at least one movable task" This reverts commit b0defa7ae03ecf91b8bfd10ede430cff12fcbd06. b0defa7ae03ec changed the load balancing logic to ignore env.maxloop if all tasks examined to...

CVE-2024-42038

Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability...

CVE-2024-42038

Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability...

CVE-2024-42038

Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability...

CVE-2024-42038

CVE-2024-42038 is described across multiple sources as a vulnerability in Huawei’s screen lock PIN enhancement feature. The core issue is a PIN enhancement failure in the screen lock module, with explicit impact on confidentiality, integrity, and availability, and a local attack vector with low c...

CVE-2024-42038

Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability...

UBUNTU-CVE-2024-42253

In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953xirqbussyncunlock race Ensure that i2clock' is held when setting interrupt latch and mask in pca953xirqbussyncunlock in order to avoid races. The other non-probe call site pca953xgpiosetmultiple ensures t...

CVE-2023-7265

Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2023-7265

Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2023-7265

Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2023-7265

Technical details for CVE-2023-7265 are not publicly disclosed in the provided connected documents. No concrete affected products, root cause, or remediation are stated here. Monitor for updates from vendor advisories and security bulletins.

CVE-2023-7265

Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availability...

bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()

...

kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()

No description is available for this CVE...

kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge

CVE-2024-36000 addresses a synchronization issue in the Linux kernel's management of huge pages. The problem arises when multiple threads modify the reservation map concurrently without proper locking, leading to potential inconsistencies and system instability...

kernel: isdn: mISDN: Fix sleeping function called from invalid context

In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: Fix sleeping function called from invalid context The driver can call card-isac.release function from an atomic context. Fix this by calling this function after releasing the lock. The following log reveals it:...