13927 matches found
SUSE CVE-2021-47327
In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Fix armsmmudevice refcount leak when armsmmurpmget fails armsmmurpmget invokes pmruntimegetsync, which increases the refcount of the "smmu" even though the return value is less than 0. The reference counting issue...
PT-2024-27019
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a null pointer dereference in the Linux kernel when configuring 'power' and 'submit queues' concurrently, which can trigger a kernel panic. This occurs because de...
fence-agents security and bug fix update
4.2.1-129 - bundled urllib3: fix CVE-2023-45803 Resolves: RHEL-18132 - bundled pycryptodome: fix CVE-2023-52323 Resolves: RHEL-20915 - bundled jinja2: fix CVE-2024-22195 Resolves: RHEL-22174 4.2.1-127 - fencescsi: fix registration handling if ISID conflicts Resolves: RHEL-5397 - fencezvmip:...
CVE-2024-33226
An issue in the component Access64.sys of Wistron Corporation TBT Force Power Control v1.0.0.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...
CVE-2024-33226
The Wistron Corporation TBT Force Power Control (version v1.0.0.0 ) is affected by a privilege escalation vulnerability in the Access64.sys component. An attacker can execute arbitrary code by sending crafted IOCTL requests . To mitigate this risk, it is recommended to restrict access to the Acce...
CVE-2021-47362
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Update intermediate power state for SI Update the current state as boot state during dpm initialization. During the subsequent initialization, setpowerstate gets called to transition to the final power state...
kernel: Linux kernel: Denial of Service via null pointer dereference in ACPI
A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI component. This vulnerability occurs when a memory allocation function fails, leading to a null pointer dereference. A local attacker with low privileges could exploit this to cause the system to crash, resulti...
kernel: Linux kernel: Information disclosure and denial of service via use-after-free in ACPI subsystem
A flaw was found in the Linux kernel. This use-after-free vulnerability exists within the Advanced Configuration and Power Interface ACPI subsystem. A local attacker with low privileges could exploit this flaw, leading to memory corruption. This could result in information disclosure or a denial ...
IBM i security vulnerabilities
IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i versions 7.2 through 7.5, which stems from a vulnerability that could allow a local user to gain elevated privileges as a resul...
Wistron Corporation TBT Force Power Control security vulnerability
Wistron Corporation TBT Force Power Control is a power management solution from Wistron Corporation China. A security vulnerability exists in Wistron Corporation TBT Force Power Control version v1.0.0.0, which originates from a security flaw in the component Access64.sys. The vulnerability can be...
Huawei HarmonyOS and EMUI account module power-up vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. Huawei HarmonyOS and the EMUI account module are...
ALSA-2024:2968 Moderate: fence-agents security and bug fix update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: urllib3: Request body not stripped after redirect from 303 status chang...
CVE-2024-33226: Improper Privilege Management
An issue in the component Access64.sys of Wistron Corporation TBT Force Power Control v1.0.0.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...
Moderate: fence-agents security and bug fix update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: urllib3: Request body not stripped after redirect from 303 status chang...
DEBIAN-CVE-2023-52832
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211gettxpower We can get a UBSAN warning if ieee80211gettxpower returns the INTMIN value mac80211 internally uses for "unset power level". UBSAN: signed-integer-overflow in...
CVE-2023-52832
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211gettxpower We can get a UBSAN warning if ieee80211gettxpower returns the INTMIN value mac80211 internally uses for "unset power level". UBSAN: signed-integer-overflow in...
UBUNTU-CVE-2023-52832
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211gettxpower We can get a UBSAN warning if ieee80211gettxpower returns the INTMIN value mac80211 internally uses for "unset power level". UBSAN: signed-integer-overflow in...
CVE-2023-52832
The Linux kernel contains a vulnerability in the mac80211 wifi component where the function ieee80211_get_tx_power() could return an INT_MIN value representing an unset power level . This behavior triggers a signed-integer-overflow UBSAN warning during multiplication in net/wireless/nl80211.c. To...
CVE-2023-52832
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211gettxpower We can get a UBSAN warning if ieee80211gettxpower returns the INTMIN value mac80211 internally uses for "unset power level". UBSAN: signed-integer-overflow in...
DEBIAN-CVE-2021-47362
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Update intermediate power state for SI Update the current state as boot state during dpm initialization. During the subsequent initialization, setpowerstate gets called to transition to the final power state...