UBUNTU-CVE-2026-41409

The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a static initializer in a class to be read might already have been executed. Affected versions are Apache MINA 2.0.0 =...

Linux Distros Unpatched Vulnerability : CVE-2024-46694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state-fb-obj0...

kernel: drm/amdgpu: avoid using null object of framebuffer

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. The driver directly accesses display framebuffer objects without verifying whether the object exists. A local user could exploit this vulnerability to trigger a null pointer dereference, leading to a kernel crash and a Denial of Servic...

CVE-2024-39687

Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards. At present, when Fedify needs to retrieve an object or activity from a remote activitypub server, it makes a HTTP request to the @id or other resources present within the activity it has...