SUSE CVE-2022-48912

In the Linux kernel, the following vulnerability has been resolved: netfilter: fix use-after-free in nfregisternethook We must not dereference @newhooks after nfhookmutex has been released, because other threads might have freed our allocated hooks already. BUG: KASAN: use-after-free in...

CVE-2022-48917

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Shift tested values in sndsocputvolsw by +min While the $val/$val2 values passed in from userspace are always = 0 integers, the limits of the control can be signed integers and the $min can be non-zero and less than...

CVE-2022-48939

In the Linux kernel, the following vulnerability has been resolved: bpf: Add schedule points in batch ops syzbot reported various soft lockups caused by bpf batch operations. INFO: task kworker/1:1:27 blocked for more than 140 seconds. INFO: task hung in rcubarrier Nothing prevents batch ops to...

CVE-2022-48939 bpf: Add schedule points in batch ops

In the Linux kernel, the following vulnerability has been resolved: bpf: Add schedule points in batch ops syzbot reported various soft lockups caused by bpf batch operations. INFO: task kworker/1:1:27 blocked for more than 140 seconds. INFO: task hung in rcubarrier Nothing prevents batch ops to...

CVE-2022-48917

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2022-48917

Removed by vendor...

CVE-2024-43863 drm/vmwgfx: Fix a deadlock in dma buf fence polling

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix a deadlock in dma buf fence polling Introduce a version of the fence ops that on release doesn't remove the fence from the pending list, and thus doesn't require a lock to fix poll-fence wait-fence unref deadlocks...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the bpf module in the test case dummystops/dummyinitretvalue, where the first argument of the test1...

CVE-2024-42086 iio: chemical: bme680: Fix overflows in compensate() functions

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: bme680: Fix overflows in compensate functions There are cases in the compensate functions of the driver that there could be overflows of variables due to bit shifting ops. These implications were initially discusse...

serialized-data-interface (=0.5.0) potentially affected by CVE-2024-41129 via ops (=2.0.0)

ops PYPI version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ops and may be impacted: - serialized-data-interface =0.5.0 Source cves: CVE-2024-41129 Source advisory: OSV:GHSA-HCMV-JMQH-FJGM...

CVE-2024-41129 The ops library leaks secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command

The ops library is a Python framework for developing and testing Kubernetes and machine charms. The issue here is that ops passes the secret content as one of the args via CLI. This issue may affect any of the charms that are using: Juju =3.0, Juju secrets and not correctly capturing and processi...

CVE-2024-40928 net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix the error condition in ethtoolgetphystatsethtool Clang static checker scan-build warning: net/ethtool/ioctl.c:line 2233, column 2 Called function pointer is null null dereference. Return '-EOPNOTSUPP' when...

CVE-2024-40922 io_uring/rsrc: don't lock while !TASK_RUNNING

In the Linux kernel, the following vulnerability has been resolved: iouring/rsrc: don't lock while !TASKRUNNING There is a report of iorsrcrefquiesce locking a mutex while not TASKRUNNING, which is due to forgetting restoring the state back after ioruntaskworksig and attempts to break out of the...

Malicious code in crypto-ops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1553fb7d7d1ca058c26337308435b8b0bd7cab9f04546e8c72e9799ebd4dda5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7736 Malicious code in crypto-ops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1553fb7d7d1ca058c26337308435b8b0bd7cab9f04546e8c72e9799ebd4dda5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-2819

Incorrect Default Permissions, Improper Preservation of Permissions vulnerability in Hitachi Ops Center Common Services allows File Manipulation.This issue affects Hitachi Ops Center Common Services: before 11.0.2-00...

CVE-2024-2819

Incorrect Default Permissions, Improper Preservation of Permissions vulnerability in Hitachi Ops Center Common Services allows File Manipulation.This issue affects Hitachi Ops Center Common Services: before 11.0.2-00...

CVE-2024-2819 File Permission Vulnerability in Hitachi Ops Center Common Services

Incorrect Default Permissions, Improper Preservation of Permissions vulnerability in Hitachi Ops Center Common Services allows File Manipulation.This issue affects Hitachi Ops Center Common Services: before 11.0.2-00...

CVE-2024-2819

CVE-2024-2819 concerns Hitachi Ops Center Common Services. The vulnerability is described as Incorrect Default Permissions and Improper Preservation of Permissions, enabling File Manipulation in versions prior to 11.0.2-00. Connected sources corroborate affected software as Hitachi Ops Center Com...

CVE-2024-2819 File Permission Vulnerability in Hitachi Ops Center Common Services

Incorrect Default Permissions, Improper Preservation of Permissions vulnerability in Hitachi Ops Center Common Services allows File Manipulation.This issue affects Hitachi Ops Center Common Services: before 11.0.2-00...