SUSE: Security Advisory (SUSE-SU-2024:3977-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-25271

Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central versions prior to 8.0.7007 Description The issue is related to an insecure deserialization operation in Trend Micro Apex Central, which could lead to a pre-authentication remote code execution on affected installations...

The vulnerability of components related to DRM, AMD, and display kernels in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of components such as DRM, AMD, and display kernels in the Linux operating system is related to the assignment of the NULL pointer in the edpsetreplayallowactive function. Exploiting this vulnerability can allow a hacker to trigger a service failure...

5 AI Security Takeaways featuring Forrester

Highlights from the recent discussion between Trend Micro’s David Roth, CRO Enterprise America, and guest speaker Jeff Pollard, VP, Principal Analyst, Forrester about AI hype versus reality and how to secure AI in the workplace...

CVE-2024-21958

Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

kernel: ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: amd: Fix memory leak in amdsofacpprobe The Linux kernel CVE team has assigned CVE-2023-52663 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051740-CVE-2023-52663-1045@gregkh/T...

kernel: mmc: alcor: fix return value check of mmc_add_host()

A flaw was found in the Linux kernel's Alcor Micro MMC card reader driver. When mmcaddhost fails, its return value is not checked, causing memory allocated by mmcallochost to leak. Additionally, the remove path may attempt to delete a device that was never added, leading to a kernel crash...

drm/amd/pm: ensure the fw_info is not null before using it

...

AMD Management Plugin 安全漏洞

AMD Management Plugin is a plugin for IT administrators using Microsoft System Center Configuration Manager SCCM from UltraMicroelectronics AMD. A security vulnerability exists in AMD Management Plugin that stems from incorrect default permissions. An attacker could exploit the vulnerability to...

AMD NPU driver 输入验证错误漏洞

AMD NPU driver is a driver for an NPU module from UltraMicroelectronics AMD. A security vulnerability exists in AMD NPU driver that stems from incorrect user input validation. An attacker exploiting the vulnerability could supply an unexpectedly sized buffer, which could cause a system crash...

AMD NPU driver 输入验证错误漏洞

AMD NPU driver is a driver for an NPU module from UltraMicroelectronics AMD. A security vulnerability exists in AMD NPU driver that stems from incorrect input validation. An attacker exploiting the vulnerability could provide specially crafted pointers that could lead to arbitrary code execution...

AMD NPU driver 输入验证错误漏洞

AMD NPU driver is a driver for an NPU module from UltraMicroelectronics AMD. A security vulnerability exists in AMD NPU driver that stems from incorrect input validation. An attacker exploiting the vulnerability could provide specially crafted pointers that could lead to arbitrary code execution...

Trend Micro and Japanese Partners Reveal Hidden Connections Among SEO Malware Operations

Trend Micro researchers, in collaboration with Japanese authorities, analyzed links between SEO malware families used in SEO poisoning attacks that lead users to fake shopping sites...

drm/amd/display: Check stream before comparing them

...

AZL-52586 CVE-2024-27532 affecting package fluent-bit for versions less than 3.1.9-2

wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR 06df58f is vulnerable to NULL Pointer Dereference in function blocktypegetresulttypes...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference through the blocktypegetresulttypes function. Remediation Upgrade wasm-micro-runtime to version 2.2.0 or higher. References - GitHub Commit - GitHub Gist - GitHub Issue Credit: Ziyi Guo...

Improper Privilege Management

Overview Affected versions of this package are vulnerable to Improper Privilege Management via the checkwasabicompatibility function. Remediation There is no fixed version for wasm-micro-runtime. References - GitHub Commit - GitHub Gist - GitHub Issue - GitHub PR Credit: Ziyi Guo...

CVE-2024-25431

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to escalate privileges via a crafted file to the checkwasabicompatibility function...

CVE-2024-25431

CVE-2024-25431 affects the WebAssembly Micro Runtime (WAMR) from Bytecode Alliance. Pre- v.b3f728c builds are vulnerable to privilege escalation via a crafted file that targets the check_was_abi_compatibility function. The issue is mitigated by the fix introduced in commit 06df58f. Multiple conne...

WebAssembly Micro Runtime 安全漏洞

WebAssembly Micro Runtime WAMR is a lightweight, standalone WebAssembly runtime open-sourced by the Bytecode Alliance. With a small footprint, high performance, and highly configurable features for applications ranging from embedded, IoT, and edge to Trusted Execution Environments TEEs, smart...