Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a contention condition error that occurs if the doorbell register is toggled before a full write to the chai...

UBUNTU-CVE-2023-46842

Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers used to pass 32-bit-mode hypercall arguments to values outside of the range 32-bit code would be able to set them to. When processing of hypercalls takes a...

CVE-2024-4974

A vulnerability, which was classified as problematic, was found in code-projects Simple Chat System 1.0. Affected is an unknown function of the file /register.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has be...

PT-2024-33660 · Unknown · Code-Projects Simple Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Chat System version 1.0 Description: A problematic issue was found in the code-projects Simple Chat System, affecting an unknown function of the file /register.php. The manipulation of the name argument leads to cross-sit...

PT-2024-33659 · Unknown · Code-Projects Simple Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Chat System version 1.0 Description: A critical vulnerability was found in the code-projects Simple Chat System. This issue affects the file /register.php and is related to SQL injection. The manipulation of the name,...

The vulnerability of the amdgpu_hmm_register() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c driver for the amdgpu core of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the amdgpuhmmregister function in the drivers/gpu/drm/amd/amdgpu/amdgpuhmm.c file of the amdgpu kernel in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dvb_register_device() function in the drivers/media/dvb-core/dvbdev.c file of the Linux operating system’s DVB driver module allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dvbregisterdevice function in the drivers/media/dvb-core/dvbdev.c file of the Linux operating system’s DVB driver framework is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

SHQ Response Platform and Risk Centre to Enable Management and Analysts Alike

In the last decade, there has been a growing disconnect between front-line analysts and senior management in IT and Cybersecurity. Well-documented challenges facing modern analysts revolve around a high volume of alerts, false positives, poor visibility of technical environments, and analysts...

hw: amd: Instruction raise #VC exception at exit

A vulnerability was found in AMD SEV-SNP, where a malicious hypervisor can potentially break confidentiality and integrity of SEV-SNP on Linux guests by injecting interrupts. An attacker can inject interrupt 0x80, which is used by Linux for legacy 32-bit system calls, and arbitrarily change the...

hw: amd: Instruction raise #VC exception at exit

A vulnerability was found in AMD SEV-SNP, where a malicious hypervisor can potentially break confidentiality and integrity of SEV-SNP on Linux guests by injecting interrupts. An attacker can inject interrupt 0x80, which is used by Linux for legacy 32-bit system calls, and arbitrarily change the...

SUSE CVE-2022-48696

In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the maxrawread and maxrawwrite limits in regmapspi struct do not take into account the additional size of the transmitted register address and padding. This may...

pywasm3 contains a global buffer overflow which leads to segmentation fault

wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "PreserveRegisterIfOccupied" in wasm3/source/m3compile.c...

CVE-2023-43525

CVE-2023-43525 describes a memory corruption vulnerability in Qualcomm audio components related to copying sound model data from user space to a kernel buffer during sound model registration. The issue affects Qualcomm audio-related components listed in the Android Pixel bulletin (CVE-2023-43525 ...

wasm3 安全漏洞

wasm3 is the fastest WebAssembly interpreter, as well as the most versatile runtime. A security vulnerability exists in version v0.5.0 of wasm3, which originates from a segmentation error via the function PreserveRegisterIfOccupied in wasm3/source/m3compile.c. The vulnerability is caused by the...

PT-2024-25771 · Wasm3 · Wasm3

Name of the Vulnerable Software and Affected Versions: wasm3 version 0.5.0 Description: A global buffer overflow was discovered in wasm3, leading to a segmentation fault. This issue is related to the function PreserveRegisterIfOccupied in wasm3/source/m3 compile.c. Recommendations: For wasm3...

PT-2024-12272

Name of the Vulnerable Software and Affected Versions AMD EPYC Processors affected versions not specified AMD Ryzen Processors affected versions not specified AMD Threadripper Processors affected versions not specified Description The issue is related to improper validation in a model specific...

CVE-2023-43525: Buffer Copy without Checking Size of Input

Memory corruption while copying the sound model data from user to kernel buffer during sound model register...

SUSE CVE-2024-27063

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: netdev: Fix kernel panic on interface rename trig notify Commit d5e01266e7f5 "leds: trigger: netdev: add additional specific link speed mode" in the various changes, reworked the way to set the LINKUP mode in commi...

PT-2024-5416

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a double free in the stm register device function, which can be triggered by the put device&stm-dev call. This call frees the stm variable, and the subsequent...

CVE-2022-48696

In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the maxrawread and maxrawwrite limits in regmapspi struct do not take into account the additional size of the transmitted register address and padding. This may...