Publishing an App Layering image to PVS with Offload Compositing may fail

When publishing an App Layering image to PVS using Offload Composting, it may fail...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: fou: Fix null-ptr-deref in GRO. CVE-2024-46763 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2...

kernel: net/sched: flower: Fix chain template offload

In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: Fix chain template offload The Linux kernel CVE team has assigned CVE-2024-26669 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040237-CVE-2024-26669-ca3c@gregkh/T...

kernel: nouveau: offload fence uevents work to workqueue

In the Linux kernel, the following vulnerability has been resolved: nouveau: offload fence uevents work to workqueue This should break the deadlock between the fctx lock and the irq lock. This offloads the processing off the work from the irq into a workqueue...

kernel: net: veth: clear GRO when clearing XDP even when down

In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when down The Linux kernel CVE team has assigned CVE-2024-26803 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040404-CVE-2024-26803-9985@gregkh/T...

kernel: wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband

A vulnerability was found in the Linux kernel's rtw89 driver function rtw89scanget6gdisabledchan caused by its handling of 6 GHz band channels during scans. A lack of proper sband checks can lead to a situation where the sband is not available due to device limitations/restrictions set by the BIO...

gso: fix udp gso fraglist segmentation after pull from frag_list

...

SUSE CVE-2024-50261

In the Linux kernel, the following vulnerability has been resolved: macsec: Fix use-after-free while sending the offloading packet KASAN reports the following UAF. The metadatadst, which is used to store the SCI value for macsec offload, is already freed by metadatadstfree in macsecfreenetdev,...

DEBIAN-CVE-2024-50261

In the Linux kernel, the following vulnerability has been resolved: macsec: Fix use-after-free while sending the offloading packet KASAN reports the following UAF. The metadatadst, which is used to store the SCI value for macsec offload, is already freed by metadatadstfree in macsecfreenetdev,...

UBUNTU-CVE-2024-50261

In the Linux kernel, the following vulnerability has been resolved: macsec: Fix use-after-free while sending the offloading packet KASAN reports the following UAF. The metadatadst, which is used to store the SCI value for macsec offload, is already freed by metadatadstfree in macsecfreenetdev,...

CVE-2024-10589

The Leopard - WordPress Offload Media plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the importsettings function in all versions up to, and including, 3.1.1. This makes it possible for authenticate...

CVE-2024-10589 Leopard <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

The Leopard - WordPress Offload Media plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the importsettings function in all versions up to, and including, 3.1.1. This makes it possible for authenticate...

PT-2024-16387 · WordPress · Leopard - Wordpress Offload Media

Name of the Vulnerable Software and Affected Versions: Leopard - WordPress Offload Media plugin versions up to, and including, 3.1.1 Description: The issue allows unauthorized modification of data, leading to privilege escalation due to a missing capability check on the import settings function...

CVE-2024-10589: Missing Authorization

The Leopard - WordPress Offload Media plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the importsettings function in all versions up to, and including, 3.1.1. This makes it possible for authenticate...

The vulnerability of the nft_flow_offload component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the nftflowoffload component in the Linux operating system’s kernel is related to a memory leak in the flowoffloadfillroute function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dmub_callback and dmub_thread_offload functions in Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dmubcallback and dmubthreadoffload functions defined in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.h header of the Linux kernel’s CPU is related to insufficient memory allocation, which leads to memory reading beyond the allocated buffer. Exploiting this...

kernel: bonding: fix null pointer deref in bond_ipsec_offload_ok

A flaw was found in the Linux kernel's bonding module. A local attacker could exploit a null pointer dereference in the bondipsecoffloadok function. This occurs because the system does not verify the presence of an active slave before attempting to dereference a pointer, which can lead to a syste...

kernel: netfilter: flowtable: initialise extack before use

A flaw was found in the Linux kernel's netfilter flowtable feature. A local attacker could exploit a missing initialization of the extack structure, leading to a denial of service. This vulnerability could allow an attacker with local access to crash the system...

kernel: gso: do not skip outer ip header in case of ipip and net_failover

In the Linux kernel, the following vulnerability has been resolved: gso: do not skip outer ip header in case of ipip and netfailover We encounter a tcp drop issue in our cloud environment. Packet GROed in host forwards to a VM virtionet nic with netfailover enabled. VM acts as a IPVS LB with ipip...

kernel: netfilter: flowtable: initialise extack before use

A flaw was found in the Linux kernel's netfilter flowtable feature. A local attacker could exploit a missing initialization of the extack structure, leading to a denial of service. This vulnerability could allow an attacker with local access to crash the system...