CVE-2024-32666: NULL Pointer Dereference

NULL pointer dereference in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-33848: Uncaught Exception

Uncaught exception in IntelR RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-34153: Uncontrolled Search Path Element

Uncontrolled search path element in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-34545: Improper Input Validation

Improper input validation in some IntelR RAID Web Console software all versions may allow an authenticated user to potentially enable information disclosure via adjacent access...

PT-2024-7672 · Intel · Intel Raid Web Console

Name of the Vulnerable Software and Affected Versions: IntelR RAID Web Console all versions Description: The issue is related to improper access control in the IntelR RAID Web Console, which may allow an authenticated user to potentially enable denial of service via adjacent access. This can be...

CVE-2024-36261: Improper Access Control

Improper access control in IntelR RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2024-28170: Improper Access Control

Improper access control in IntelR RAID Web Console all versions may allow an authenticated user to potentially enable information disclosure via local access...

PT-2024-7678 · Intel · Intel Raid Web Console

Name of the Vulnerable Software and Affected Versions: IntelR RAID Web Console software all versions Description: The issue is related to an uncaught exception in the IntelR RAID Web Console software, which may allow an authenticated user to potentially enable denial of service via local access...

PT-2024-7676 · Intel · Intel Raid Web Console

Name of the Vulnerable Software and Affected Versions: IntelR RAID Web Console affected versions not specified Description: The issue is related to a NULL pointer dereference in the IntelR RAID Web Console software. This flaw may allow an authenticated user to potentially enable denial of service...

Intel RAID Web Console 访问控制错误漏洞

Intel Raid Web Console is a web-based, Intel Corporation USA application that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. The Intel RAID Web Console is vulnerable to an access control error vulnerability that stems from the inclusion ...

CVE-2024-36247: Improper Access Control

Improper access control in IntelR RAID Web Console all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2024-2369)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : kernel:ACPI: CPPC: Use accesswidth over bitwidth for system memory accessesCVE-2024-35995 kernel: block: fix overflow in...

UBUNTU-CVE-2024-45023

In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix data corruption for degraded array with slow disk readbalance will avoid reading from slow disks as much as possible, however, if valid data only lands in slow disks, and a new normal disk is still in recovery,...

md/dm-raid: don't call md_reap_sync_thread() directly

...

dm-raid: really frozen sync_thread during suspend

...

 Intel® RAID Web Console Software Advisory

Summary: Potential security vulnerabilities in Intel® RAID Web Console software may allow escalation of privilege, denial of service, information disclosure. Intel is not releasing updates to mitigate this potential vulnerability and has issued a product discontinuation notice for Intel® RAID Web...

kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING

A vulnerability was found in the Linux kernel's md/raid5 implementation within the raid5d function. This flaw can cause a deadlock when handling I/O operations due to a conflict between the reconfigmutex and the MDSBCHANGEPENDING flag, leading to excessive CPU usage and denial of service...

SUSE CVE-2024-43914

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUGON while continue reshape after reassembling Currently, mdadm support --revert-reshape to abort the reshape while reassembling, as the test 07revert-grow. However, following BUGON can be triggerred by the test:...

SUSE-SU-2024:3048-1 Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059158 fixes several issues. The following security issues were fixed: - CVE-2021-47402: Fixed use-after-free in flwalk bsc1225301 - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroying qp bsc1225202. - CVE-2024-27398: Fixed...

AZL-48617 CVE-2024-43914 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUGON while continue reshape after reassembling Currently, mdadm support --revert-reshape to abort the reshape while reassembling, as the test 07revert-grow. However, following BUGON can be triggerred by the test:...