CVE-2024-45020 bpf: Fix a kernel verifier crash in stacksafe()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe Daniel Hodges reported a kernel verifier crash when playing with sched-ext. Further investigation shows that the crash is due to invalid memory access in stacksafe. More specifically,...

CVE-2024-45020

Concrete details found: CVE-2024-45020 affects the Linux kernel BPF verifier, specifically a crash in stacksafe() caused by out-of-bounds memory access when iterating old->allocated_stack. The fix adds a check i >= cur->allocated_stack to fail stacksafe() when the condition would access ...

CVE-2024-45020 bpf: Fix a kernel verifier crash in stacksafe()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe Daniel Hodges reported a kernel verifier crash when playing with sched-ext. Further investigation shows that the crash is due to invalid memory access in stacksafe. More specifically,...

drm/fbdev-dma: Only set smem_start is enable per module option

...

CVE-2024-43856

...

CVE-2024-42285

...

CVE-2024-8654

MongoDB Server may access non-initialized region of memory leading to unexpected behaviour when zero arguments are called in internal aggregation stage. This issue affected MongoDB Server v6.0 version 6.0.3...

CVE-2024-8654 MongoDB Server may access non-initialized region of memory leading to unexpected behaviour

MongoDB Server may access non-initialized region of memory leading to unexpected behaviour when zero arguments are called in internal aggregation stage. This issue affected MongoDB Server v6.0 version 6.0.3...

CVE-2024-8654 MongoDB Server may access non-initialized region of memory leading to unexpected behaviour

MongoDB Server may access non-initialized region of memory leading to unexpected behaviour when zero arguments are called in internal aggregation stage. This issue affected MongoDB Server v6.0 version 6.0.3...

CVE-2024-8654

CVE-2024-8654 affects MongoDB Server (v6.0.3) and is caused by accessing a non-initialized region of memory when zero arguments are passed in an internal aggregation stage, leading to unexpected behavior. The vulnerability impact is described with high severity in NVD metrics (CVSS v3.1: CRITICAL...

PT-2024-39153

Name of the Vulnerable Software and Affected Versions: MongoDB Server version 6.0.3 Description: The issue is related to MongoDB Server accessing a non-initialized region of memory, leading to unexpected behavior when zero arguments are called in an internal aggregation stage. Recommendations: Fo...

NewStart CGSL MAIN 6.02 : sip Vulnerability (NS-SA-2024-0063)

The remote NewStart CGSL host, running version MAIN 6.02, has sip packages installed that are affected by a vulnerability: - A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelperp.h in Qt/Qtbase. While rendering and...

PT-2024-29940 · Dell · Dell Precision Rack

Name of the Vulnerable Software and Affected Versions: Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2 Description: The issue is related to an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this...

Fedora: Security Advisory (FEDORA-2024-39b249a59c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:3112-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Vulnerability in Eclipse Openj9 affects watsonx.data

Summary Eclipse Openj9 could allow a remote attacker to bypass security restrictions, where memory could be accessed or modified. This exploit can affect watsonx.data. Vulnerability Details CVEID:CVE-2022-3676 DESCRIPTION: Eclipse Openj9 could allow a remote attacker to bypass security...

ROS-20240905-04

Vulnerability of the dosetvfinfo function in the net/core/rtnetlink.c module of the TCP/IP protocol stack implementation of the Linux kernel of Linux operating system is related to reading memory outside the allocated buffer. Exploitation exploitation of the vulnerability may allow an intruder to...

PT-2024-29425 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to kernel drivers peeking into memory, referred to as PhysMeme. There is no detailed information about the issue, its impact, or th...

DEBIAN-CVE-2024-44976

In the Linux kernel, the following vulnerability has been resolved: ata: patamacio: Fix DMA table overflow Kolbjørn and Jonáš reported that their 32-bit PowerMacs were crashing in pata-macio since commit 09fe2bfa6b83 "ata: patamacio: Fix maxsegmentsize with PAGESIZE == 64K". For example: kernel B...

DEBIAN-CVE-2024-44984

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix double DMA unmapping for XDPREDIRECT Remove the dmaunmappageattrs call in the driver's XDPREDIRECT code path. This should have been removed when we let the page pool handle the DMA mapping. This bug causes the warning...