CVE-2022-49366 ksmbd: fix reference count leak in smb_check_perm_dacl()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smbcheckpermdacl The issue happens in a specific path in smbcheckpermdacl. When "id" and "uid" have the same value, the function simply jumps out of the loop without decrementing the reference...

SUSE CVE-2023-4785

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Jav...

glibc security update

An update is available for glibc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librarie...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: posix-timers: Ensure that the limit on the timer ID search loop is valid. The posixtimeradd function attempts to allocate a posix timer ID by starting from the cached ID stored after the last successful allocation. This is done b...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: posix-clock: The missing timespec64 check in pcclocksettime has been fixed. As Andrew pointed out, it makes sense that the PTP core checks the tvsec and tvnsec fields of the timespec64 structure before calling ptp-info-settime64...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: filelock: The lock is removed reliably when a race condition involving fcntl/close is detected. When a race condition occurs between fcntlsetlk and close, the created lock is removed using dolockfilewait. However, LSMs may all...

BIT-PYTHON-MIN-2023-6507 Groups not dropped before running subprocess when using empty 'extra_groups' parameter

An issue was found in CPython 3.12.0 subprocess module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the extragroups= parameter with an empty list as a value ie extragroups= the logic regressed to not call setgroups0, NULL before...

PT-2025-5657 · Git +1 · Libavif

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 8 crash has been reported, with the crash state indicating an issue related to interceptor pthread create. No information is...

The vulnerability of the _execve50c() function in the POSIX.1-2008 standard library for the Perl language in version 2008 allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the execve50c function in the POSIX.1-2008 standard library for the Perl language in POSIX.2008 is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50195)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50195 advisory. - In the Linux kernel, the following vulnerability has been resolved: posix-clock: Fix missing timespec64 chec...

posix-clock: Fix missing timespec64 check in pc_clock_settime()

...

kernel: filelock: fix potential use-after-free in posix_lock_inode

A use-after-free vulnerability was found in the Linux kernel in traceposixlockinode. This issue occurred when the request pointer was changed to point to a lock entry added to the inode's list. Before the tracepoint could fire, another task raced in and freed the lock...

CVE-2024-55564

The POSIX::2008 package before 0.24 for Perl has a potential execve50c env buffer overflow...

DEBIAN-CVE-2024-55564

The POSIX::2008 package before 0.24 for Perl has a potential execve50c env buffer overflow...

MetaCPAN POSIX::2008 安全漏洞

MetaCPAN POSIX::2008 is a standard operating system interface and environment from the MetaCPAN Foundation. A security vulnerability exists in MetaCPAN POSIX::2008 versions prior to 0.24 that stems from a buffer overflow in the execve50c environment...

CVE-2024-55564

The POSIX::2008 package before 0.24 for Perl has a potential execve50c env buffer overflow...

CVE-2024-55564

The POSIX::2008 package before 0.24 for Perl has a potential execve50c env buffer overflow...

CVE-2024-55564

The POSIX::2008 package before 0.24 for Perl has a potential execve50c env buffer overflow...

CVE-2024-55564

CVE-2024-55564 affects the POSIX::2008 Perl package prior to 0.24, with a potential _execve50c environment buffer overflow. Connected sources corroborate the root cause (buffer overflow in _execve50c) and public CVSS data indicates a critical impact (C/H/I/A = high). The evidence comes from multi...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: filelock: A potential “use-after-free” issue was fixed in posixlockinode. Light Hsieh reported a KASAN UAF warning in traceposixlockinode. The request pointer was previously changed to point to a lock entry that was added to t...