Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security...

CVE-2025-21187: Improper Control of Generation of Code

Microsoft Power Automate Remote Code Execution Vulnerability...

PT-2025-1218 · Microsoft · Power Automate

Name of the Vulnerable Software and Affected Versions: Microsoft Power Automate affected versions not specified Description: The issue is related to incorrect code generation management in the Power Automate platform. Exploitation of this issue may allow an attacker to execute arbitrary code...

ALSA-2025:0308 Important: fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: fence-agents: Jinja has a sandbox breakout through indirect reference t...

Microsoft Power Automate 代码注入漏洞

Microsoft Power Automate is a low-code automation platform from Microsoft USA that allows users to create automated workflows that connect and integrate various applications and services. A code injection vulnerability exists in Microsoft Power Automate. An attacker exploiting this vulnerability...

Siemens SIPROTEC 5 Products

SUMMARY Affected SIPROTEC 5 devices do not properly limit the access of the web server to the filesystem. This could allow an authenticated remote attacker to read arbitrary files or the entire filesystem of the device. Siemens has released new versions for several affected products and...

RHEL 9 : fence-agents (RHSA-2025:0308)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:0308 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or...

Microsoft Power Automate For Desktop Remote Code Execution (CVE-2024-43479)

The version of Microsoft Power Automate for desktop installed on the remote Windows host is If your current version is 2.46.x 2.46.184.25013, 2.47.x 2.47.126.25010, 2.48.x 2.48.164.25010, 2.49.x 2.49.182.25010, 2.50.x 2.50.139.25010, 2.51.x 2.51.349.24355, or 2.52.x 2.52.62.25009. It is, therefor...

Important: fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: fence-agents: Jinja has a sandbox breakout through indirect reference t...

SUSE CVE-2024-57799

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM In some cases, rkhdptxphyruntimeresume may be invoked before platformsetdrvdata is executed in -probe, leading to a NULL pointer dereference when using the retu...

CVE-2024-57799

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM In some cases, rkhdptxphyruntimeresume may be invoked before platformsetdrvdata is executed in -probe, leading to a NULL pointer dereference when using the retu...

DEBIAN-CVE-2024-57799

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM In some cases, rkhdptxphyruntimeresume may be invoked before platformsetdrvdata is executed in -probe, leading to a NULL pointer dereference when using the retu...

UBUNTU-CVE-2024-57799

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM In some cases, rkhdptxphyruntimeresume may be invoked before platformsetdrvdata is executed in -probe, leading to a NULL pointer dereference when using the retu...

CVE-2024-57799 phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM In some cases, rkhdptxphyruntimeresume may be invoked before platformsetdrvdata is executed in -probe, leading to a NULL pointer dereference when using the retu...

CVE-2024-57799 phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM In some cases, rkhdptxphyruntimeresume may be invoked before platformsetdrvdata is executed in -probe, leading to a NULL pointer dereference when using the retu...

CVE-2024-57799 phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM In some cases, rkhdptxphyruntimeresume may be invoked before platformsetdrvdata is executed in -probe, leading to a NULL pointer dereference when using the retu...

CVE-2024-57799

CVE-2024-57799 — Linux kernel rockchip PHY (samsung-hdptx): The NULL pointer dereference can occur if rk_hdptx_phy_runtime_resume() runs before platform_set_drvdata() in probe. Fix: call platform_set_drvdata() before devm_pm_runtime_enable(). See kernel commits: https://git.kernel.org/stable/c/70...

CVE-2024-57799

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM In some cases, rkhdptxphyruntimeresume may be invoked before platformsetdrvdata is executed in -probe, leading to a NULL pointer dereference when using the retu...

CVE-2024-57792 power: supply: gpio-charger: Fix set charge current limits

In the Linux kernel, the following vulnerability has been resolved: power: supply: gpio-charger: Fix set charge current limits Fix set charge current limits for devices which allow to set the lowest charge current limit to be greater zero. If requested charge current limit is below lowest limit,...

CVE-2024-57792

In the Linux kernel, the following vulnerability has been resolved: power: supply: gpio-charger: Fix set charge current limits Fix set charge current limits for devices which allow to set the lowest charge current limit to be greater zero. If requested charge current limit is below lowest limit,...