19 matches found
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fixed the type of the second parameter in the odneditdpmtable callback. With Clang’s kernel control flow integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013635)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013635 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix type of second parameter in odneditdpmtable callback With clang's kernel control...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011170)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011170 advisory. In the Linux kernel, the following vulnerability has been resolved: amdgpu/pm: prevent array underflow in vega20odneditdpmtable In the PPODEDITVDDCCURVE case the...
CVE-2022-50844
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix type of second parameter in odneditdpmtable callback With clang's kernel control flow integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer prototype to make sur...
CVE-2022-50844 drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix type of second parameter in odneditdpmtable callback With clang's kernel control flow integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer prototype to make sur...
CVE-2022-50844
CVE-2022-50844 relates to a Linux kernel AMDGPU issue where the second parameter type in odn_edit_dpm_table() callback was incompatible, triggering kCFI-related run-time errors. The fix updates the prototype to use enum PP_OD_DPM_TABLE_COMMAND to align with related functions, removing the mismatc...
CVE-2022-50844 drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix type of second parameter in odneditdpmtable callback With clang's kernel control flow integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer prototype to make sur...
PT-2025-53962
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel related to an incorrect function pointer type in the odn edit dpm table callback within the drm/amdgpu subsystem. Specifically, the second parameter...
CVE-2022-50781 amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()
In the Linux kernel, the following vulnerability has been resolved: amdgpu/pm: prevent array underflow in vega20odneditdpmtable In the PPODEDITVDDCCURVE case the "inputindex" variable is capped at 2 but not checked for negative values so it results in an out of bounds read. This value comes from...
CVE-2022-50781
CVE-2022-50781 (Linux kernel, amdgpu driver) : The issue occurs in amdgpu/pm within the Vega 20 DPM table handling (PP_OD_EDIT_VDDC_CURVE). The root cause is that input_index is capped at 2 but not checked for negative values, leading to an out-of-bounds read when the value is supplied by user sp...
CVE-2022-50781 amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()
In the Linux kernel, the following vulnerability has been resolved: amdgpu/pm: prevent array underflow in vega20odneditdpmtable In the PPODEDITVDDCCURVE case the "inputindex" variable is capped at 2 but not checked for negative values so it results in an out of bounds read. This value comes from...
CVE-2025-42947
SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on...
CVE-2025-42947 Code Injection vulnerability in SAP FICA ODN framework
SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on...
CVE-2025-42947 Code Injection vulnerability in SAP FICA ODN framework
SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on...
PT-2025-30518 · Sap · Sap Fica Odn Framework
Name of the Vulnerable Software and Affected Versions: SAP FICA ODN framework affected versions not specified Description: The SAP FICA ODN framework allows a user with elevated privileges to inject values into a local variable, which the application can then execute. This could allow an attacker...
Malicious code in odn-static-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a49d8b382070675781a5628be927a75dfaa48ed927b0dbb4d39f49cde36bbc6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8461 Malicious code in odn-static-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a49d8b382070675781a5628be927a75dfaa48ed927b0dbb4d39f49cde36bbc6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in odn-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36c0e7d9d23077174a4c2bfe351b3c11372091cf9edc98a3f11f3ccf7922a12a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5025 Malicious code in odn-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36c0e7d9d23077174a4c2bfe351b3c11372091cf9edc98a3f11f3ccf7922a12a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...