drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe()

...

pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER

...

ipv6: prevent possible NULL dereference in rt6_probe()

...

clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()

...

Pavel Durov Criticizes Outdated Laws After Arrest Over Telegram Criminal Activity

Telegram CEO Pavel Durov has broken his silence nearly two weeks after his arrest in France, stating the charges are misguided. "If a country is unhappy with an internet service, the established practice is to start a legal action against the service itself," Durov said in a 600-word statement on...

PT-2024-32251 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference issue has been resolved in the Linux kernel, specifically in the net: phy: dp83822 module, which affects DP83825 devices. The probe function is only used for...

SUSE CVE-2024-44980

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix opregion leak Being part o the display, ideally the setup and cleanup would be done by display itself. However this is a bigger refactor that needs to be done on both i915 and xe. For now, just fix the leak:...

kernel: iommu: Fix potential use-after-free during probe

A vulnerability was found in the Linux kernel's IOMMU driver, where the deviommufree function can lead to a use-after-free error. This occurs when a device probe fails while simultaneously accessing dev-iommu-fwspec in the ofiommuconfigure path. As a result, this vulnerability can potentially cau...

The vulnerability of the `pci_get_domain_bus_and_slot` function in the Linux operating system allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the pcigetdomainbusandslot function in the Linux operating system’s kernel is related to a pointer overflow in amdpmcprobe. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the Linux operating system’s Ethernet kernel component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s Ethernet kernel component is related to error handling in xemacliteofprobe. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-33050

Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper...

CVE-2024-33050 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper...

CVE-2024-33048 Buffer Over-read in WLAN Host

Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame...

CVE-2024-33048 Buffer Over-read in WLAN Host

Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame...

CVE-2024-33048

Technical details about CVE-2024-33048 are not provided in the supplied documents. The records only reiterate a transient DOS during TID-to-link mapping parsing. Monitor for updates from Qualcomm/Red Hat/Android advisories.

PT-2024-25093 · Unknown · Qualcomm Technologies

Name of the Vulnerable Software and Affected Versions: Qualcomm Technologies, Inc. products affected versions not specified Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing MBSSID during the generation of a new Information Element IE in beacon or...

Chargen Probe Utility

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Chargen Probe Utility', 'Description' = %q Chargen is a debugging and measurement tool and a character generator service. A character generator...

MiniUPnPd 1.4 Denial of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MiniUPnPd 1.4 Denial of Service DoS Exploit', 'Description' = %q This module allows remote attackers to cause a denial of service DoS in MiniUPnP...

CVE-2024-7744 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Progress WS_FTP Server

In WSFTP Server versions before 8.8.8 2022.0.8, an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the Web Transfer Module allows File Discovery, Probe System Files, User-Controlled Filename, Path Traversal. An authenticated file download flaw has...

PT-2024-34011

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the use of smp processor id in preemptible code, which can lead to errors when the driver is enabled. The problem arises from the loongson3 cpufreq probe function...