PT-2025-8356

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak issue has been identified in the Linux kernel, specifically in the dmaengine: idxd component. The error handling path in the idxd cdev register function was incomplete,...

Apache Geode OQL bind parameter vulnerability

When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries containing a region name as a bind parameter that allow read access to objects within unauthorized regions...

QEMU Resource Management Error Vulnerability (CNVD-2022-84160)

QEMU Quick Emulator is a set of emulation processor software by Fabrice Bellard, a French personal developer. A denial of service vulnerability exists in versions prior to QEMU 7.0.0, which stems from EHCI's failure to verify that the buffer pointer overlaps with its MMIO region when transferring...

CVE-2021-26332

Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability...

CVE-2021-3750

A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets. Crafted content may be written to the controller's registers and trigger undesirable actions such as reset whi...

CVE-2021-3750

A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets. Crafted content may be written to the controller's registers and trigger undesirable actions such as reset whi...

curl 资源管理错误漏洞

curl is a tool used to transfer data from or to a server. A resource management error vulnerability exists in curl that stems from a logical error in the configuration matching feature that does not take into account IPv6 address region ids. This issue could cause curl to reuse the wrong connecti...

GSD-2022-1002217 powerpc/kasan: Fix early region not updated correctly

powerpc/kasan: Fix early region not updated correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1001779 powerpc/kasan: Fix early region not updated correctly

powerpc/kasan: Fix early region not updated correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001459 powerpc/kasan: Fix early region not updated correctly

powerpc/kasan: Fix early region not updated correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001137 powerpc/kasan: Fix early region not updated correctly

powerpc/kasan: Fix early region not updated correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-30315

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to the powerpc/kasan component, where an early region is not updated correctly. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29732

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to the powerpc/kasan in the Linux Kernel, where an early region is not updated correctly. The actual impact and attack plausibility have not yet been proven...

PT-2022-29772

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to memory leaks in the q6v5 alloc memory region function of the remoteproc: qcom q6v5 mss module. The actual impact and attack plausibility have not yet been proven...

PT-2022-30490

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to the powerpc/kasan in the Linux Kernel, where an early region is not updated correctly. The actual impact and attack plausibility have not yet been proven...

PT-2022-30052

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to the powerpc/kasan component, where an early region is not updated correctly. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29410

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to the powerpc/kasan component, where an early region is not updated correctly. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

Cross-Regional Disaster Recovery with Elasticsearch

Unsurprisingly, here at Rewind, we've got a lot of data to protect over 2 petabytes worth. One of the databases we use is called Elasticsearch ES or Opensearch, as it is currently known in AWS. To put it simply, ES is a document database that facilitates lightning-fast search results. Speed is...

Hackers Exploiting Spring4Shell Vulnerability to Deploy Mirai Botnet Malware

The recently disclosed critical Spring4Shell vulnerability is being actively exploited by threat actors to execute the Mirai botnet malware, particularly in the Singapore region since the start of April 2022. "The exploitation allows threat actors to download the Mirai sample to the '/tmp' folder...

kernel: invalid read location in vgacon_invert_region function in drivers/video/console/vgacon.c

A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console. An out-of-bounds read can occur, leaking information to the console...