kernel: x86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups

In the Linux kernel, the following vulnerability has been resolved: x86/lib: Revert to ASMEXTABLEUA for get,putuser fixups During memory error injection test on kernels = v6.4, the kernel panics like below. However, this issue couldn't be reproduced on kernels getusernocheck4+0x6/0x20 mce: Hardwa...

glib2: Signal subscription vulnerabilities

A flaw was found in GNOME GLib. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the...

Toward greater transparency: Publishing machine-readable CSAF files

Welcome to the third installment in our series on transparency at the Microsoft Security Response Center MSRC. In this ongoing discussion, we talk about our commitment to providing comprehensive vulnerability information to our customers. At MSRC, our mission is to protect our customers,...

November 12, 2024—KB5046612 (OS Build 14393.7515)

November 12, 2024—KB5046612 OS Build 14393.7515 Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions Note 11/19/20 For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an...

PT-2024-34708 · Unknown +1 · Hda Audio Driver +1

Name of the Vulnerable Software and Affected Versions: hda audio driver affected versions not specified Description: A guest can trigger an infinite loop in the hda audio driver. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...

RHEL 9 : libvirt (RHSA-2024:9128)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9128 advisory. Kernel-based Virtual Machine KVM offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains...

Moderate: qemu-kvm security update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: QEMU: SR-IOV: improper validation of NumVFs leads to buffer overflow...

Security Flaws in Popular ML Toolkits Enable Server Hijacks, Privilege Escalation

Cybersecurity researchers have uncovered nearly two dozen security flaws spanning 15 different machine learning ML related open-source projects. These comprise vulnerabilities discovered both on the server- and client-side, software supply chain security firm JFrog said in an analysis published...

Malicious code in @sportdigi/scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f680e619f440b13e9d346c4482d63b5917ea63581ff977594d0b7244b6a61307 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mind the Gap: How Surface Command Tackles Asset Visibility in Attack Surface Management

“Only 17% of organizations can clearly identify and inventory a majority 95% or more of their assets.” - Gartner Imagine the scenario: your organization has been exposed to a new zero-day vulnerability. You are responsible for Threat & Vulnerability Management TVM, you have asked your IT departme...

OESA-2024-2367 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer check for kzalloc Why & How Check return pointer of kzalloc before using it.CVE-2024-42122 In the Linux kernel, the following...

SUSE CVE-2024-50139

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix shift-out-of-bounds bug Fix a shift-out-of-bounds bug reported by UBSAN when running VM with MTE enabled host kernel. UBSAN: shift-out-of-bounds in arch/arm64/kvm/sysregs.c:1988:14 shift exponent 33 is too large f...

Oracle Database Server Java VM DoS

The vulnerability of the Java VM component of the Oracle Database Server management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures using the Oracle Net protocol...

Malicious code in puppeterfirefox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02d8862ce6e00754c11e1aed862512e4c262443896518351c4e86f5773be1199 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webb3-bzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8aaeecf6e2f692d69483d7fe98783533279175704f115f53cbf1bfa223a08a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MCS Machines on Microsoft Azure show as 'Creating' on the Azure Portal

When using Microsoft Azure and Citrix Machine Creation Services MCS, the Virtual Machine Object shows as 'Creating' instead of 'Running,' but otherwise registers and can be connected to until it forcibly shuts down...

RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2024:6964)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6964 advisory. Kernel-based Virtual Machine KVM offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contain...

Malicious code in comcast.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fccf411e32cd994c0aa599e884e20fe6989974c532b7d7c1bc2d8f9c81b40adb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-gas-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecd743511e25a28d813fdd6d85c3fcb14c688389759c53016792d6c536b99a06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2024-50114

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Unregister redistributor for failed vCPU creation Alex reports that syzkaller has managed to trigger a use-after-free when tearing down a VM: BUG: KASAN: slab-use-after-free in kvmputkvm+0x300/0xe68...