The vulnerability of the NMAP import service used in the HCL BigFix Enterprise Suite Asset Discovery tool allows a hacker to increase their privileges.

The vulnerability of the NMAP import service used in the HCL BigFix Enterprise Suite Asset Discovery tool is due to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to increase their privileges remotely...

kernel: dm: call the resume method on internal suspend

A flaw was found in the Linux kernel’s device-mapper dm component. The issue arises during internal suspend operations where the resume method is not correctly called. This issue leads to problems such as list corruption, specifically observed when running the lvm2 test suite. The problem occurs...

kernel: md: fix resync softlockup when bitmap size is less than array size

In the Linux kernel, the following vulnerability has been resolved: md: fix resync softlockup when bitmap size is less than array size Is is reported that for dm-raid10, lvextend + lvchange --syncaction will trigger following softlockup: kernel:watchdog: BUG: soft lockup - CPU3 stuck for 26s!...

kernel: dm: call the resume method on internal suspend

A flaw was found in the Linux kernel’s device-mapper dm component. The issue arises during internal suspend operations where the resume method is not correctly called. This issue leads to problems such as list corruption, specifically observed when running the lvm2 test suite. The problem occurs...

RHSA-2022:8453 Red Hat Security Advisory: device-mapper-multipath security update

Bulletin has no description...

RHSA-2022:7928 Red Hat Security Advisory: device-mapper-multipath security update

Bulletin has no description...

RHSA-2022:7191 Red Hat Security Advisory: device-mapper-multipath security update

Bulletin has no description...

RHSA-2022:7186 Red Hat Security Advisory: device-mapper-multipath security update

Bulletin has no description...

RHSA-2022:7188 Red Hat Security Advisory: device-mapper-multipath security update

Bulletin has no description...

RHSA-2022:7185 Red Hat Security Advisory: device-mapper-multipath security update

Bulletin has no description...

RHSA-2022:7187 Red Hat Security Advisory: device-mapper-multipath security update

Bulletin has no description...

RHSA-2022:7192 Red Hat Security Advisory: device-mapper-multipath security update

Bulletin has no description...

RHSA-2024:1110 Red Hat Security Advisory: device-mapper-multipath security update

Bulletin has no description...

RHSA-2023:2948 Red Hat Security Advisory: device-mapper-multipath security and bug fix update

Bulletin has no description...

RHSA-2023:2459 Red Hat Security Advisory: device-mapper-multipath security and bug fix update

Bulletin has no description...

RHSA-2009:0411 Red Hat Security Advisory: device-mapper-multipath security update

Bulletin has no description...

CVE-2024-46693

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmicglink: Fix race during initialization As pointed out by Stephen Boyd it is possible that during initialization of the pmicglink child drivers, the protection-domain notifiers fires, and the associated work is...

md/dm-raid: don't call md_reap_sync_thread() directly

...

CVE-2024-8568

A vulnerability, which was classified as critical, was found in Mini-Tmall up to 20240901. Affected is the function rewardMapper.select of the file tmall/admin/order/1/1. The manipulation of the argument orderBy leads to sql injection. It is possible to launch the attack remotely. The exploit has...

Tmall_demo SQL注入漏洞

Tmalldemo is a Spring Boot-based mini Tmall by the Xianqi Mall projectteam team. A SQL injection vulnerability exists in Tmalldemo 20240901 and earlier versions, which stems from the improper handling of the orderBy parameter in the orderMapper.select function in the tmall/admin/order/1/1 file...