The vulnerability of the optee_register_device() function in the Trusted Execution Environment (TEE) driver of the Linux operating system allows a malicious actor to gain access to protected information or cause a service failure.

The vulnerability of the opteeregisterdevice function in the drivers/tee/optee/device.c file of the Trusted Execution Environment TEE driver for the Linux operating system is related to incorrect handling of the return code. Exploiting this vulnerability could allow an attacker to access protecte...

DEBIAN-CVE-2024-36015

In the Linux kernel, the following vulnerability has been resolved: ppdev: Add an error check in registerdevice In registerdevice, the return value of idasimpleget is unchecked, in witch idasimpleget will use an invalid index value. To address this issue, index should be checked after idasimplege...

UBUNTU-CVE-2024-36015

In the Linux kernel, the following vulnerability has been resolved: ppdev: Add an error check in registerdevice In registerdevice, the return value of idasimpleget is unchecked, in witch idasimpleget will use an invalid index value. To address this issue, index should be checked after idasimplege...

CVE-2024-36015

In the Linux kernel, the following vulnerability has been resolved: ppdev: Add an error check in registerdevice In registerdevice, the return value of idasimpleget is unchecked, in witch idasimpleget will use an invalid index value. To address this issue, index should be checked after idasimplege...

SUSE CVE-2023-52740

In the Linux kernel, the following vulnerability has been resolved: powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch The RFI and STF security mitigation options can flip the interruptexitnotreentrant static branch condition concurrently with the interrupt exit code...

SUSE CVE-2021-47416

In the Linux kernel, the following vulnerability has been resolved: phy: mdio: fix memory leak Syzbot reported memory leak in MDIO bus interface, the problem was in wrong state logic. MDIOBUSALLOCATED indicates 2 states: 1. Bus is only allocated 2. Bus allocated and mdiobusregister fails, but...

SUSE CVE-2021-47507

In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix nsfd startup race again Commit bd5ae9288d64 "nfsd: register pernet ops last, unregister first" has re-opened rpcpipefsevent race against nfsdnetid registration registerpernetsubsys which has been fixed by commit...

PT-2024-32721

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A security issue in the Linux kernel's AMD display module has been resolved. The problem involved reading from certain registers in the DCN35 DMCUB diagnostic collection, which should no...

CVE-2021-47472

REJECTED CVE A memory leak bug was identified in the Linux kernel's net: mdiobus module. When deviceregister fails during mdiobusregister, the reference count is not decremented via putdevice, resulting in unreferenced memory allocations and subsequent leaks...

CVE-2021-47440

In the Linux kernel, the following vulnerability has been resolved: net: encx24j600: check error in devmregmapinitencx24j600 devmregmapinit may return error which caused by like out of memory, this will results in null pointer dereference later when reading or writing register: general protection...

SUSE CVE-2021-47434

In the Linux kernel, the following vulnerability has been resolved: xhci: Fix command ring pointer corruption while aborting a command The command ring pointer is located at 6:63 bits of the command ring control register CRCR. All the control bits like command stop, abort are located at 0:3 bits...

SUSE CVE-2021-47437

In the Linux kernel, the following vulnerability has been resolved: iio: adis16475: fix deadlock on frequency set With commit 39c024b51b560 "iio: adis16475: improve sync scale mode handling", two deadlocks were introduced: 1 The call to 'adiswritereg16' was not changed to it's unlocked version. 2...

DEBIAN-CVE-2021-47555

In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix underflow for the realdev refcnt Inject error before devholdrealdev in registervlandev, and execute the following testcase: ip link add dev dummy1 type dummy ip link add name dummy1.100 link dummy1 type vlan id 100...

WordPress Pie Register - Social Sites Login (Add on) plugin <= 1.7.7 - Authentication Bypass vulnerability

WordPress Pie Register - Social Sites Login Add on plugin = 1.7.7 - Authentication Bypass vulnerability discovered by István Márton in WordPress Plugin Pie Register Add on - Social Sites Login versions = 1.7.7...

CVE-2024-4544 Pie Register - Social Sites Login (Add on) <= 1.7.7 - Authentication Bypass

The Pie Register - Social Sites Login Add on plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.7. This is due to insufficient verification on the user being supplied during a social login through the plugin. This makes it possible for unauthenticate...

CVE-2024-4544 Pie Register - Social Sites Login (Add on) <= 1.7.7 - Authentication Bypass

The Pie Register - Social Sites Login Add on plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.7. This is due to insufficient verification on the user being supplied during a social login through the plugin. This makes it possible for unauthenticate...

CVE-2024-4544

CVE-2024-4544 affects Pie Register - Social Sites Login (Add on) for WordPress. Versions up to 1.7.7 are vulnerable to authentication bypass due to insufficient verification during social login, enabling unauthenticated users to log in as an existing user (e.g., admin) if they have the user’s ema...

WordPress plugin Pie Register 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Pie Register (Add on) - Social Sites Login Plugin <= 1.7.7 is vulnerable to Broken Authentication

Software Pie Register Add on - Social Sites Login Type Plugin Vulnerable versions = 1.7.7 Fixed in 1.7.8 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-4544 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID...

CVE-2024-4544: Authentication Bypass Using an Alternate Path or Channel

The Pie Register - Social Sites Login Add on plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.7. This is due to insufficient verification on the user being supplied during a social login through the plugin. This makes it possible for unauthenticate...