4842 matches found
kernel: Fix of 4 CVEs
media: pvrusb2: fix array-index-out-of-bounds in pvr2i2ccoreinit CVE-2022-49478 - x86/kvm: Disable kvmclock on all CPUs on shutdown CVE-2021-47110 - cifs: fix potential double free during failed mount CVE-2022-49541 - drm/amd/pm: fix double free in siparsepowertable CVE-2022-49530...
Astra Linux – Vulnerability in libpod
A flaw was discovered in Podman. In a Containerfile or Podman, data written during the podman build using RUN --mount=type=bind is not discarded. This issue can cause files created within the container to appear in the temporary build context directory on the host, making the created files...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: A fix was made to several race conditions related to the handling of MNTTREEBENEATH using domovemount. Normally, dolockmountpath, locks the mountpoint pointed to by path. At the time when unlockmount is called, that location is...
kernel: cifs: Fix integer overflow while processing acdirmax mount option
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acdirmax mount option User-provided mount parameter acdirmax of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies...
kernel: cifs: Fix integer overflow while processing closetimeo mount option
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount parameter closetimeo of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffi...
TencentOS Server 3: container-tools:rhel8 (TSSA-2024:0228)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0228 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
PT-2025-31376
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The do change type function previously allowed operations on unmounted or improperly owned mounts. This issue has been resolved by ensuring that propagation settings can only be modified...
CVE-2024-40114
A Cross Site Scripting XSS vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipulate the language cookie to inject malicious JavaScript code...
CVE-2024-40113
Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials...
kernel: cifs: Fix integer overflow while processing acregmax mount option
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acregmax mount option User-provided mount parameter acregmax of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies...
Sitecom WLX-2006 Wall Mount Range Extender N300 安全漏洞
The Sitecom WLX-2006 Wall Mount Range Extender N300 is a wall mount range extender from Sitecom. A security vulnerability exists in the Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and earlier versions that stems from the use of default credentials...
CVE-2024-40113: Use of Default Credentials
Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials...
CVE-2024-40112: Improper Control of Filename for Include/Require Statement in PHP Program
A Local File Inclusion LFI vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attacker to manipulate the "language" cookie to include arbitrary files from the server. This vulnerability can be exploited to disclose sensitive information...
Sitecom WLX-2006 Wall Mount Range Extender N300 安全漏洞
The Sitecom WLX-2006 Wall Mount Range Extender N300 is a wall mount range extender from Sitecom. A security vulnerability exists in the Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and earlier versions, which stems from a mishandling of a language cookie that could result in local file...
CVE-2024-40114: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting XSS vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipulate the language cookie to inject malicious JavaScript code...
OESA-2025-1569 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: gfs2: Check sbbsizeshift after reading superblock Fuzzers like to scribble over sbbsizeshift but in reality it's very unlikely that this field would be corrupted...
ALSA-2025:8142 Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cifs: Fix integer overflow while processing acregmax mount option CVE-2025-21964 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cifs: Fix integer overflow while processing acregmax mount option CVE-2025-21964 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...
CVE-2024-29967
In Brocade SANnav before Brocade SANnav v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount points, allowing reading and writing access to sensitive files. The vulnerability could allow a sudo privileged user on the host OS to read and write access to...