UBUNTU-CVE-2022-48939

In the Linux kernel, the following vulnerability has been resolved: bpf: Add schedule points in batch ops syzbot reported various soft lockups caused by bpf batch operations. INFO: task kworker/1:1:27 blocked for more than 140 seconds. INFO: task hung in rcubarrier Nothing prevents batch ops to...

CVE-2022-48939 bpf: Add schedule points in batch ops

In the Linux kernel, the following vulnerability has been resolved: bpf: Add schedule points in batch ops syzbot reported various soft lockups caused by bpf batch operations. INFO: task kworker/1:1:27 blocked for more than 140 seconds. INFO: task hung in rcubarrier Nothing prevents batch ops to...

CVE-2022-48939 bpf: Add schedule points in batch ops

In the Linux kernel, the following vulnerability has been resolved: bpf: Add schedule points in batch ops syzbot reported various soft lockups caused by bpf batch operations. INFO: task kworker/1:1:27 blocked for more than 140 seconds. INFO: task hung in rcubarrier Nothing prevents batch ops to...

CVE-2022-48939

In the Linux kernel, the following vulnerability has been resolved: bpf: Add schedule points in batch ops syzbot reported various soft lockups caused by bpf batch operations. INFO: task kworker/1:1:27 blocked for more than 140 seconds. INFO: task hung in rcubarrier Nothing prevents batch ops to...

CVE-2022-48939 bpf: Add schedule points in batch ops

In the Linux kernel, the following vulnerability has been resolved: bpf: Add schedule points in batch ops syzbot reported various soft lockups caused by bpf batch operations. INFO: task kworker/1:1:27 blocked for more than 140 seconds. INFO: task hung in rcubarrier Nothing prevents batch ops to...

CVE-2022-48939

CVE-2022-48939 refers to a Linux kernel issue where the BPF subsystem’s batch operations could cause soft lockups due to missing schedule points. The fix adds scheduling points in batch paths to prevent long hangs (e.g., kworker/1:1:27 blocked and hung RCUs). The root cause is that batch processi...

CVE-2024-43826

In the Linux kernel, the following vulnerability has been resolved: nfs: pass explicit offset/count to trace events nfsfoliolength is unsafe to use without having the folio locked and a check for a NULL -fmapping that protects against truncations and can lead to kernel crashes. E.g. when running...

SUSE CVE-2024-43850

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmonremove The following warning is seen during bwmonremove due to refcount imbalance, fix this by releasing the OPPs after use. Logs: WARNING: at drivers/opp/core.c:1640...

DEBIAN-CVE-2024-43850

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmonremove The following warning is seen during bwmonremove due to refcount imbalance, fix this by releasing the OPPs after use. Logs: WARNING: at drivers/opp/core.c:1640...

DEBIAN-CVE-2024-43826

In the Linux kernel, the following vulnerability has been resolved: nfs: pass explicit offset/count to trace events nfsfoliolength is unsafe to use without having the folio locked and a check for a NULL -fmapping that protects against truncations and can lead to kernel crashes. E.g. when running...

AZL-62541 CVE-2024-43826 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: nfs: pass explicit offset/count to trace events nfsfoliolength is unsafe to use without having the folio locked and a check for a NULL -fmapping that protects against truncations and can lead to kernel crashes. E.g. when running...

CVE-2024-21550

SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, acting as a central server for management of registered charge points. Attackers can inject arbitrary HTML and Javascript code via WebSockets leading to persistent Cross-Site...

CVE-2024-21550

The CVE-2024-21550 entry concerns SteVe, an open platform implementing OCPP for EV charging points. Affected component: SteVe management interface accessed over WebSockets. Root cause: attackers can inject arbitrary HTML/JavaScript via WebSockets, resulting in persistent Cross‑Site Scripting. Imp...

PT-2024-26042 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.21.62 Description: The issue is related to an out-of-bounds read in applying connection points, which could allow local attackers to potentially read memory. Recommendations: For versions prior to 4.4.21.62...

Aruba Networks Access Points 安全漏洞

Aruba Networks Access Points is a wireless network from Aruba Networks, Inc. It provides Internet access. A security vulnerability exists in Aruba Networks Access Points. An attacker could exploit the vulnerability to cause a denial of service on the system...

Aruba Networks Access Points 安全漏洞

Aruba Networks Access Points is a wireless network from Aruba Networks, Inc. It provides Internet access. A security vulnerability exists in Aruba Networks Access Points. An attacker could exploit the vulnerability to cause a denial of service on the system...

Aruba Networks Access Points 安全漏洞

Aruba Networks Access Points is a wireless network from Aruba Networks, Inc. It provides Internet access. A security vulnerability exists in Aruba Networks Access Points. An attacker could exploit the vulnerability to cause a denial of service on the system...

Aruba Networks Access Points 安全漏洞

Aruba Networks Access Points is a wireless network from Aruba Networks, Inc. It provides Internet access. A security vulnerability exists in Aruba Networks Access Points. An attacker could exploit the vulnerability to cause a denial of service on the system...

Aruba Networks Access Points 安全漏洞

Aruba Networks Access Points is a wireless network from Aruba Networks, Inc. It provides Internet access. A security vulnerability exists in Aruba Networks Access Points. An attacker who exploited the vulnerability could cause the system to be compromised by executing arbitrary commands...

Aruba Networks Access Points 安全漏洞

Aruba Networks Access Points is a wireless network from Aruba Networks, Inc. It provides Internet access. A security vulnerability exists in Aruba Networks Access Points. An attacker who exploited the vulnerability could cause the system to be compromised by executing arbitrary commands...