11 matches found
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-007004)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007004 advisory. In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory corruption race condition If the eeprom is not accessible, an nvmem devi...
EUVD-2023-59761
Malicious code in bioql PyPI...
CVE-2023-52929
In the Linux kernel, the following vulnerability has been resolved: nvmem: core: fix cleanup after devsetname If devsetname fails, we leak nvmem-wpgpio as the cleanup does not put this. While a minimal fix for this would be to add the gpiodput call, we can do better if we split deviceregister, an...
Linux Distros Unpatched Vulnerability : CVE-2024-35848
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory corruption race condition If the eeprom is not accessible, an nvmem...
Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35848)
The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35848 advisory. - In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory...
CVE-2024-35848
CVE-2024-35848 is a vulnerability in the Linux kernel's EEPROM driver at24 that can lead to memory corruption. The issue arises when an EEPROM device is inaccessible: the system registers an nvmem device, the read operation fails, and the device is subsequently torn down. If another driver attemp...
AZL-42153 CVE-2024-35848 affecting package hyperv-daemons for versions less than 5.15.160.1-1
In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory corruption race condition If the eeprom is not accessible, an nvmem device will be registered, the read will fail, and the device will be torn down. If another driver accesses the nvmem device after the...
CVE-2024-35848
In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory corruption race condition If the eeprom is not accessible, an nvmem device will be registered, the read will fail, and the device will be torn down. If another driver accesses the nvmem device after the...
AZL-42109 CVE-2024-35848 affecting package hyperv-daemons for versions less than 6.6.35.1-1
In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory corruption race condition If the eeprom is not accessible, an nvmem device will be registered, the read will fail, and the device will be torn down. If another driver accesses the nvmem device after the...
CVE-2024-35848 eeprom: at24: fix memory corruption race condition
In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory corruption race condition If the eeprom is not accessible, an nvmem device will be registered, the read will fail, and the device will be torn down. If another driver accesses the nvmem device after the...
CVE-2024-35848
The CVE-2024-35848 issue affects the Linux kernel’s eeprom: at24 path. The root cause is a race in memory handling where, if the eeprom is not accessible, an nvmem device is registered, reads fail, and the device can be torn down; a later access by another driver may reference invalid memory. The...