com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.1.1), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.5.0) +2 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (>=11.0.0-m1, <=11.0.0-m26)

org.apache.tomcat:tomcat-catalina MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =11.0.0-m1, =11.0.0-m1, =11.0.0-m26 Source cves: CVE-2024-52316 Source advisory: GHSA-XCPR-7MR4-H4XQ...

com.github.psi-probe:psi-probe-tomcat85 (3.5.9), org.apache.tomcat:tomcat-catalina-ha (8.5.79) +2 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.79)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.79 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.9 - org.apache.tomcat:tomcat-catalina-ha 8.5.79 ...

com.github.psi-probe:psi-probe-tomcat85 (4.1.0), org.apache.tomcat:tomcat-catalina-ha (8.5.96) +3 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.96)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.96 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 4.1.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.96 ...

com.github.psi-probe:psi-probe-tomcat85 (3.6.0), com.github.waffle:waffle-tomcat85 (3.2.0) +3 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.81)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.81 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.6.0 - com.github.waffle:waffle-tomcat85 3.2.0 -...

PT-2024-35646

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the ASoC: imx-audmix component, where the devm kasprintf function can return a NULL pointer on failure, but...

tpd12s015 Linux DoS

The vulnerability of the tpd12s015 component in the Linux operating system is related to resource management errors in the tpd12s015probe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2024-35640

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory corruption bug has been resolved in the Linux kernel, specifically in the struct loongson2 clk provider within the clk-loongson2 module. The issue arises from the allocation of...

PT-2024-36942

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel has been resolved. The issue is related to the gpio: grgpio component, where the function grgpio probe does not check for a NULL pointer returned by devm...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rm3100commonprobe function in the drivers/iio/magnetometer/rm3100-core.c file of the Linux kernel is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel: PCI/ASPM: Fix deadlock when enabling ASPM

A flaw was found in the Linux kernel, where a deadlock scenario was triggered when enabling Active State Power Management ASPM during the probe of Qualcomm PCIe controllers. This deadlock was identified by lockdep and stemmed from a recursive locking scenario. This issue occurred when a task...

kernel: ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: amd: Fix memory leak in amdsofacpprobe The Linux kernel CVE team has assigned CVE-2023-52663 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051740-CVE-2023-52663-1045@gregkh/T...

kernel: soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe

The TI AM33xx power management driver in the Linux kernel fails to release reference counts acquired via wkupm3ipcget when errors occur during probe. Since the corresponding wkupm3ipcput call is missing from error paths, repeated probe failures gradually exhaust kernel resources...

kernel: serial: sprd: Fix DMA buffer leak issue

A flaw was found in the serial: sprd driver in the Linux kernel where a DMA buffer allocated during driver probe was not released when probe returned failure. This results in a memory leak that, under repeated probe failure conditions, could cause elevated kernel memory usage and potential resour...

kernel: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER

A deadlock flaw was found in the Linux kernel’s pinctrl subsystem. This flaw allows a local user to crash the system...

kernel: net: stmmac: fix possible memory leak in stmmac_dvr_probe()

A memory leak vulnerability was found in the stmmac network driver in the Linux kernel. When createsinglethreadworkqueue fails during probe, the previously allocated bitmap priv-afxdpzcqps is not freed. This can lead to memory resource exhaustion if the error condition is repeatedly triggered...

kernel: drivers: serial: jsm: fix some leaks in probe

In the Linux kernel, the following vulnerability has been resolved: drivers: serial: jsm: fix some leaks in probe This error path needs to unwind instead of just returning directly...

kernel: serial: sc16is7xx: setup GPIO controller later in probe

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: setup GPIO controller later in probe The GPIO controller component of the sc16is7xx driver is setup too early, which can result in a race condition where another device tries to utilise the GPIO lines before th...

No title provided

No description is available for this CVE...

kernel: drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe()

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: rgb: Fix missing clkput in the error handling paths of tegradcrgbprobe The Linux kernel CVE team has assigned CVE-2023-52661 to this issue. Upstream advisory:...

kernel: iommu/vt-d: Fix WARN_ON in iommu probe path

CVE-2024-35957 is a vulnerability in the Linux kernel's Intel Virtualization Technology for Directed I/O VT-d subsystem. The issue stems from an incorrect assumption that each device has a unique source ID, leading to potential conflicts and system warnings during the IOMMU probe process. This fl...