UBUNTU-CVE-2024-42234

In the Linux kernel, the following vulnerability has been resolved: mm: fix crashes from deferred split racing folio migration Even on 6.10-rc6, I've been seeing elusive "Bad page state"s often on flags when freeing, yet the flags shown are not bad: PGlocked had been set and cleared??, and...

CVE-2024-42234

In the Linux kernel, the following vulnerability has been resolved: mm: fix crashes from deferred split racing folio migration Even on 6.10-rc6, I've been seeing elusive "Bad page state"s often on flags when freeing, yet the flags shown are not bad: PGlocked had been set and cleared??, and...

CVE-2024-42234 mm: fix crashes from deferred split racing folio migration

In the Linux kernel, the following vulnerability has been resolved: mm: fix crashes from deferred split racing folio migration Even on 6.10-rc6, I've been seeing elusive "Bad page state"s often on flags when freeing, yet the flags shown are not bad: PGlocked had been set and cleared??, and...

CVE-2024-42234 mm: fix crashes from deferred split racing folio migration

In the Linux kernel, the following vulnerability has been resolved: mm: fix crashes from deferred split racing folio migration Even on 6.10-rc6, I've been seeing elusive "Bad page state"s often on flags when freeing, yet the flags shown are not bad: PGlocked had been set and cleared??, and...

CVE-2024-42234 mm: fix crashes from deferred split racing folio migration

In the Linux kernel, the following vulnerability has been resolved: mm: fix crashes from deferred split racing folio migration Even on 6.10-rc6, I've been seeing elusive "Bad page state"s often on flags when freeing, yet the flags shown are not bad: PGlocked had been set and cleared??, and...

CVE-2024-42234

CVE-2024-42234 refers to a Linux kernel vulnerability resolved by a fix for crashes during deferred split folio migration. The root cause involves deferred_split_scan() moving folios to a local list without proper protection, with folio->_deferred_list not being secured, potentially leading to...

qemu-kvm security update

7.2.0-13.el9 - vfio/migration: Enhance VFIO migration state tracing Avihai Horon - vfio/migration: Don't emit STOPCOPY VFIO migration QAPI event twice Avihai Horon - vfio/migration: Emit VFIO migration QAPI event Avihai Horon - qapi/vfio: Add VFIO migration QAPI event Avihai Horon -...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a race condition between a delayed split and a large folio migration in the mm module, which could lead to a...

CVE-2024-42234: Double Free

In the Linux kernel, the following vulnerability has been resolved: mm: fix crashes from deferred split racing folio migration Even on 6.10-rc6, I've been seeing elusive "Bad page state"s often on flags when freeing, yet the flags shown are not bad: PGlocked had been set and cleared??, and...

Virtuozzo Hybrid Infrastructure 6.0 Update 1 Hotfix 10 (6.0.1-105)

This update provides stability fixes. Vulnerability id: VSTOR-76914 A stability and performance improvement for the core storage. Vulnerability id: VSTOR-81226 Improved the size calculation of erasure coding files. Vulnerability id: VSTOR-86571 VM live migration failed due to a missing snapshot...

Virtuozzo Hybrid Infrastructure 6.2 Hotfix 3 (6.2.0-146)

This update provides stability fixes. Vulnerability id: VSTOR-86571 VM live migration failed due to a missing snapshot traceback. Vulnerability id: VSTOR-87531, VSTOR-89251 Stability fixes for the hypervisor. Vulnerability id: VSTOR-88449 An error is triggered after disabling account replication...

WordPress Tutor LMS – Migration Tool plugin <= 2.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Francesco Carlucci in WordPress Plugin Tutor LMS – Migration Tool versions = 2.2.0...

WordPress Tutor LMS – Migration Tool Plugin <= 2.2.2 is vulnerable to Broken Access Control

Software Tutor LMS – Migration Tool Type Plugin Vulnerable versions = 2.2.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1798 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 75e96e3a3dee Credits Francesco Carlucci...

CVE-2024-1798

The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the tutorlpexportxml function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to export courses, including privat...

CVE-2024-1798 Tutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_lp_export_xml

The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the tutorlpexportxml function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to export courses, including privat...

CVE-2024-1804 Tutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_import_from_xml

The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tutorimportfromxml function in all versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with subscriber-level access...

PT-2024-18316 · WordPress · The Tutor Lms – Migration Tool

Name of the Vulnerable Software and Affected Versions: The Tutor LMS – Migration Tool plugin for WordPress versions up to, and including, 2.2.0 Description: The issue allows unauthorized access to data due to a missing capability check on the tutor lp export xml function. This makes it possible f...

PT-2024-18320 · WordPress · The Tutor Lms – Migration Tool

Name of the Vulnerable Software and Affected Versions: The Tutor LMS – Migration Tool plugin for WordPress versions up to, and including, 2.2.0 Description: The issue allows authenticated attackers with subscriber-level access and above to import courses due to a missing capability check on the...

CVE-2024-1804: Missing Authorization

The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tutorimportfromxml function in all versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with subscriber-level access...

CVE-2024-1798: Missing Authorization

The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the tutorlpexportxml function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to export courses, including privat...