CVE-2024-23372: Integer Overflow or Wraparound

Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size...

clk: zynq: Prevent null pointer dereference caused by kmalloc failure

...

Updated libopenmpt packages fix security vulnerabilities

Possible out-of-bounds read or write when reading malformed MED files. r19389. Null-pointer write 32bit platforms or excessive memory allocation 64bit platforms when reading close to 4GiB of data from unseekable files r20336, r20338. Write buffer overflow when reading unseekable files close to 4G...

MGASA-2024-0242 Updated libopenmpt packages fix security vulnerabilities

Possible out-of-bounds read or write when reading malformed MED files. r19389. Null-pointer write 32bit platforms or excessive memory allocation 64bit platforms when reading close to 4GiB of data from unseekable files r20336, r20338. Write buffer overflow when reading unseekable files close to 4G...

PT-2024-41054

Name of the Vulnerable Software and Affected Versions No specific software name or versions are mentioned in the provided descriptions. Description The issue involves several potential problems when reading malformed files, including out-of-bounds reads or writes, null-pointer writes, excessive...

CVE-2024-35116: Memory Allocation with Excessive Size Value

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, and 9.3 CD is vulnerable to a denial of service attack caused by an error applying configuration changes. IBM X-Force ID: 290335...

PT-2024-33814

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the drm/amd/display component. The issue occurs when the DC state creates a DML memory allocation that fails,...

PT-2024-7621

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.30-02659-gc18865c4dfbd Description The vulnerability is related to the wifi component of the Linux kernel, specifically the rtw89 module. It is caused by a mistake in the allocation of memory for the skb sock...

SUSE CVE-2024-39276

In the Linux kernel, the following vulnerability has been resolved: ext4: fix mbcacheentry's erefcnt leak in ext4xattrblockcachefind Syzbot reports a warning as follows: ============================================ WARNING: CPU: 0 PID: 5075 at fs/mbcache.c:419 mbcachedestroy+0x224/0x290 Modules...

DEBIAN-CVE-2024-39276

In the Linux kernel, the following vulnerability has been resolved: ext4: fix mbcacheentry's erefcnt leak in ext4xattrblockcachefind Syzbot reports a warning as follows: ============================================ WARNING: CPU: 0 PID: 5075 at fs/mbcache.c:419 mbcachedestroy+0x224/0x290 Modules...

UBUNTU-CVE-2024-39276

In the Linux kernel, the following vulnerability has been resolved: ext4: fix mbcacheentry's erefcnt leak in ext4xattrblockcachefind Syzbot reports a warning as follows: ============================================ WARNING: CPU: 0 PID: 5075 at fs/mbcache.c:419 mbcachedestroy+0x224/0x290 Modules...

CVE-2024-39301 net/9p: fix uninit-value in p9_client_rpc()

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix uninit-value in p9clientrpc Syzbot with the help of KMSAN reported the following error: BUG: KMSAN: uninit-value in trace9pclientres include/trace/events/9p.h:146 inline BUG: KMSAN: uninit-value in...

VMware vCenter Server Appliance License Server Uncontrolled Memory Allocation Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of VMware vCenter Server Appliance. Authentication is not required to exploit this vulnerability. The specific flaw exists within the License Server. The issue results from the lack of...

DEBIAN-CVE-2024-34030

In the Linux kernel, the following vulnerability has been resolved: PCI: ofproperty: Return error for intmap allocation failure Return -ENOMEM from ofpcipropintrmap if kcalloc fails to prevent a NULL pointer dereference in this case. bhelgaas: commit log...

PT-2024-29737

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.8.0-syzkaller-05271-gf99c5f563c17 Description The vulnerability is related to the xdp component of the Linux kernel. It is caused by incorrect error handling in the xdp reg mem model function. The warning occurs only if...

SUSE SLES15 / openSUSE 15 Security Update : podofo (SUSE-SU-2024:2137-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2137-1 advisory. - CVE-2019-9199: Fixed a NULL pointer dereference in podofoimpose bsc1127855 - CVE-2018-20797: Fixed an excessive memory allocati...

SUSE-SU-2024:2137-1 Security update for podofo

This update for podofo fixes the following issues: - CVE-2019-9199: Fixed a NULL pointer dereference in podofoimpose bsc1127855 - CVE-2018-20797: Fixed an excessive memory allocation in PoDoFo:podofocalloc bsc1127514 - CVE-2019-10723: Fixed a memory leak in PdfPagesTreeCache bsc1131544...

Improper Input Validation

github.com/lightningnetwork/lnd is vulnerable to Improper Input Validation. The vulnerability is due to excessive memory allocation during the parsing process, which creates a Denial-Of-Service DoS vector...

SUSE CVE-2022-48714

In the Linux kernel, the following vulnerability has been resolved: bpf: Use VMMAP instead of VMALLOC for ringbuf After commit 2fd3fb0be1d1 "kasan, vmalloc: unpoison VMALLOC pages after mapping", non-VMALLOC mappings will be marked as accessible in getvmareanode when KASAN is enabled. But now the...

SUSE CVE-2024-38575

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: pcie: handle randbuf allocation failure The kzalloc in brcmfpciedownloadfwnvram will return null if the physical memory has run out. As a result, if we use getrandombytes to generate random bytes in the randbuf, t...