CVE-2023-35722

NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists withi...

SUSE CVE-2024-26964

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Add error handling in xhcimapurbfordma Currently xhcimapurbfordma creates a temporary buffer and copies the SG list to the new linear buffer. But if the kzallocnode fails, then the following sgpcopytobuffer can lead to...

CVE-2023-35722

CVE-2023-35722 affects NETGEAR RAX30 routers. The flaw is in UPnP port-mapping request handling where unvalidated user input is used to execute a system call, enabling remote code execution with root privileges. Exploitation is possible without authentication and occurs from a network-adjacent po...

NETGEAR RAX30 安全漏洞

The NETGEAR RAX30 is a wireless router from NETGEAR. The NETGEAR RAX30 suffers from a command injection vulnerability that stems from a command injection vulnerability when processing UPnP port mapping requests, which can be exploited by an attacker to execute arbitrary commands...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a DMA mapping leak...

The vulnerability of the formSetPortMapping() function (/goform/SetPortMapping) in the Tenda W15E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetPortMapping function /goform/SetPortMapping of the Tenda W15E router software is related to the issue of the operation going beyond the buffer in memory when processing parameters such as portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal,...

CVE-2024-26977

A vulnerability was found in the pciiounmap function in the Linux Kernel, where a lack of proper checks can result in memory leakage. This occurs due to the ifdef ARCHHASGENERICIOPORTMAP macro which also guards the iounmap function, causing MMIO mappings to leak. This issue can lead to resource...

CVE-2024-26947

A flaw was found in the Linux kernel’s ARM memory management functionality, where certain memory layouts cause a kernel panic. This flaw allows an attacker who can specify or alter memory layouts to cause a denial of service...

AZL-40416 CVE-2024-26977 affecting package hyperv-daemons for versions less than 5.15.158.1-1

In the Linux kernel, the following vulnerability has been resolved: pciiounmap: Fix MMIO mapping leak The ifdef ARCHHASGENERICIOPORTMAP accidentally also guards iounmap, which means MMIO mappings are leaked. Move the guard so we call iounmap for MMIO mappings...

CVE-2024-26977

In the Linux kernel, the following vulnerability has been resolved: pciiounmap: Fix MMIO mapping leak The ifdef ARCHHASGENERICIOPORTMAP accidentally also guards iounmap, which means MMIO mappings are leaked. Move the guard so we call iounmap for MMIO mappings...

DEBIAN-CVE-2024-26956

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix failure to detect DAT corruption in btree and direct mappings Patch series "nilfs2: fix kernel bug at submitbhwbc". This resolves a kernel BUG reported by syzbot. Since there are two flaws involved, I've made each one...

DEBIAN-CVE-2024-26947

In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses Since commit a4d5613c4dc6 "arm: extend pfnvalid to take into account freed memory map alignment" changes the semantics of pfnvalid to check presence of t...

AZL-67481 CVE-2024-26947 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses Since commit a4d5613c4dc6 "arm: extend pfnvalid to take into account freed memory map alignment" changes the semantics of pfnvalid to check presence of t...

CVE-2023-52648

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Unmap the surface before resetting it on a plane state Switch to a new plane state requires unreferencing of all held surfaces. In the work required for mob cursors the mapped surfaces started being cached but the...

UBUNTU-CVE-2024-26977

In the Linux kernel, the following vulnerability has been resolved: pciiounmap: Fix MMIO mapping leak The ifdef ARCHHASGENERICIOPORTMAP accidentally also guards iounmap, which means MMIO mappings are leaked. Move the guard so we call iounmap for MMIO mappings...

UBUNTU-CVE-2023-52648

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Unmap the surface before resetting it on a plane state Switch to a new plane state requires unreferencing of all held surfaces. In the work required for mob cursors the mapped surfaces started being cached but the...

CVE-2024-26977

In the Linux kernel, the following vulnerability has been resolved: pciiounmap: Fix MMIO mapping leak The ifdef ARCHHASGENERICIOPORTMAP accidentally also guards iounmap, which means MMIO mappings are leaked. Move the guard so we call iounmap for MMIO mappings...

CVE-2024-27007

The CVE-2024-27007 issue affects the Linux kernel’s userfaultfd handling, specifically the UFFDIO_MOVE path. The root cause described across connected docs is a change to the src_folio (mapping/index) after clearing the page tables and ensuring it is not pinned, introduced by a commit intended to...

CVE-2024-26977 pci_iounmap(): Fix MMIO mapping leak

In the Linux kernel, the following vulnerability has been resolved: pciiounmap: Fix MMIO mapping leak The ifdef ARCHHASGENERICIOPORTMAP accidentally also guards iounmap, which means MMIO mappings are leaked. Move the guard so we call iounmap for MMIO mappings...

CVE-2024-26977 pci_iounmap(): Fix MMIO mapping leak

In the Linux kernel, the following vulnerability has been resolved: pciiounmap: Fix MMIO mapping leak The ifdef ARCHHASGENERICIOPORTMAP accidentally also guards iounmap, which means MMIO mappings are leaked. Move the guard so we call iounmap for MMIO mappings...