PT-2024-21487

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a deadlock between the fctx lock and the irq lock in the Linux kernel, specifically in the nouveau component. This deadlock is resolved by offloading the processi...

PT-2024-3472 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a flaw in the unix state double lock function within the net/unix/af unix.c module of the Linux kernel, affecting the AF UNIX socket implementation. This flaw i...

kernel: writeback: avoid use-after-free after removing device

In the Linux kernel, the following vulnerability has been resolved: writeback: avoid use-after-free after removing device When a disk is removed, bdiunregister gets called to stop further writeback and wait for associated delayed work to complete. However, wbinodewritebackend may schedule bandwid...

PT-2024-21468

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a circular locking dependency in the KVM Kernel-based Virtual Machine component of the Linux kernel, specifically on arm64 architectures. The problem arises becau...

Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos

...

PT-2024-21510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential deadlock at set capacity in the Linux kernel. This occurs due to an interrupt unsafe locking scenario where aoeblk gdalloc holds &d-lock and attempts ...

PT-2024-21464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the do task stat function, which can trigger a hard lockup if NR CPUS threads call it at the same time and...

January 23, 2024—KB5034203 (OS Build 19045.3996) Preview

None None...

Malicious code in discord.js-lock-selfbot-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b6ced52518f96ad1ced4f124d86601328e2898f7c62f1f619f33a4f0f202a7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-117 Malicious code in discord.js-lock-selfbot-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b6ced52518f96ad1ced4f124d86601328e2898f7c62f1f619f33a4f0f202a7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-3790 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition in the Linux kernel's mmu notification mechanism. This mechanism is used to invalidate memory ranges, and depending on the number of iterations...

CVE-2023-50124

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner...

CVE-2023-50129

Missing encryption in the NFC tags of the Flient Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original tags, which results in an attacker gaining access to the perimeter...

CVE-2023-50124

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner...

CVE-2023-50124

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner...

PT-2024-8423 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.7.2 Description: The vulnerability is related to incorrect lock ordering in the btrfs zone activate function, which can lead to a deadlock. This issue was detected by the btrfs CI when running generic/129,...

Flient Smart Door Lock Security Vulnerability

Flient Smart Door Lock is a smart door lock from Flient. Flient Smart Door Lock has a security vulnerability that stems from the use of default credentials...

CVE-2023-50129

The CVE-2023-50129 issue affects the Flient Smart Door Lock v1.0 where NFC tags lack encryption, enabling an attacker in close proximity to clone a tag and gain perimeter access. CVSS v3.1 vectors indicate Adjacent attack vector, Low attack complexity, No privileges required, with Confidentiality...

CVE-2023-50124

CVE-2023-50124 affects Flient Smart Door Lock v1.0. The vulnerability arises from default credentials present on a debug interface, combined with certain design choices, enabling an attacker to unlock the device by replacing the fingerprint stored on the scanner. The issue is described consistent...

CVE-2023-50129

Missing encryption in the NFC tags of the Flient Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original tags, which results in an attacker gaining access to the perimeter...