CVE-2024-50001 net/mlx5: Fix error path in multi-packet WQE transmit

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erroneous unmap in case no DMA mapping was established The multi-packet WQE transmit code attempts to obtain a DMA mapping for the skb. This could fail, e.g. under...

CVE-2024-50001 net/mlx5: Fix error path in multi-packet WQE transmit

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erroneous unmap in case no DMA mapping was established The multi-packet WQE transmit code attempts to obtain a DMA mapping for the skb. This could fail, e.g. under...

CVE-2024-50001

The CVE 2024-50001 entry affects the Linux kernel, specifically the net/mlx5 multi-packet WQE transmit path. The code that obtains a DMA mapping for the skb may fail under memory pressure; in the error path it erroneously unmaps one entry from the sq’s FIFO list of active mappings. Since the mapp...

CVE-2024-49875 nfsd: map the EBADMSG to nfserr_io to avoid warning

In the Linux kernel, the following vulnerability has been resolved: nfsd: map the EBADMSG to nfserrio to avoid warning Ext4 will throw -EBADMSG through ext4readdir when a checksum error occurs, resulting in the following WARNING. Fix it by mapping EBADMSG to nfserrio. nfsdbufferedreaddir iterated...

CVE-2024-49875

CVE-2024-49875 affects the Linux kernel. Affected component: nfsd path within the kernel’s VFS stack handling EBADMSG from ext4 readdir leading to a warning and non-standard errno. The fixed behavior maps EBADMSG to nfserr_io to avoid the warning, alleviating the -EBADMSG warning/ERR_PTR(-EFSBADC...

SUSE CVE-2024-47737

In the Linux kernel, the following vulnerability has been resolved: nfsd: call cacheput if xdrreservespace returns NULL If not enough buffer space available, but idmaplookup has triggered lookupfn which calls cacheget and returns successfully. Then we missed to call cacheput here which pairs with...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an issue where the nfsd subsystem does not map EBADMSG error codes to nfserrio resulting in warnings...

PT-2024-33776

Name of the Vulnerable Software and Affected Versions: Linux kernel version 6.10.0-rc2-lizhijian+ Description: A crash occurs during hot-remove of a memory device when a user is accessing the hugetlb, due to dump mapping accessing an invalid dentry.d name.name. The issue arises because dump mappi...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from incorrect handling in the e100xmitprepare function, which could cause a skb to be incorrectly released on a...

Adobe Digital Editions < 4.5.5 Multiple Vulnerabilities (APSB17-20)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-20 advisory. - Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The...

CVE-2024-47674 mm: avoid leaving partial pfn mappings around in error case

In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal memory mappings, there is no lifetime information associated with the mapping - it is just a raw...

A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.

...

CVE-2024-45022

...

CLSA-2024-1728936982 kernel: Fix of 86 CVEs

drm/amd/pm: Fix negative array index read CVE-2024-46821 - drm/amd/display: Check gpioid before used as array index CVE-2024-46818 - drm/amd/display: Check linkindex before accessing dc-links CVE-2024-46813 - drm/amd/display: Fix index may exceed array range within fpuupdatebwboundingbox...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2024-12782)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12782 advisory. - VMCI: Fix use-after-free when removing resource in vmciresourceremove David Fernandez Gonzalez Orabug: 37037205 CVE-2024-46738 - exec: Fix ToCTo...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-42259)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42259 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix Virtual Memory mapping...

CVE-2024-42259

...

SUSE SLES12: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2024:3586-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3586-1 advisory. Security fixes: - CVE-2024-31145: Fixed error handling in x86 IOMMU identity mapping XSA-460 bsc1228574 - CVE-2024-31146: Fixed PCI...

Security update for xen

This update for xen fixes the following issues: Security fixes: CVE-2024-31145: Fixed error handling in x86 IOMMU identity mapping XSA-460 bsc1228574 CVE-2024-31146: Fixed PCI device pass-through with shared resources XSA-461 bsc1228575 CVE-2024-45817: Fixed Deadlock in vlapicerror XSA-462...

SUSE-SU-2024:3586-1 Security update for xen

This update for xen fixes the following issues: Security fixes: - CVE-2024-31145: Fixed error handling in x86 IOMMU identity mapping XSA-460 bsc1228574 - CVE-2024-31146: Fixed PCI device pass-through with shared resources XSA-461 bsc1228575 - CVE-2024-45817: Fixed Deadlock in vlapicerror XSA-462...