CVE-2024-27411 drm/nouveau: keep DMA buffers required for suspend/resume

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: keep DMA buffers required for suspend/resume Nouveau deallocates a few buffers post GPU init which are required for GPU suspend/resume to function correctly. This is likely not as big an issue on systems where the...

CVE-2024-27411

CVE-2024-27411 affects the Linux kernel Nouveau driver (drm/nouveau nvkm). The vulnerability stems from deallocating a pair of DMA buffers that are required for suspend/resume post GPU init, which can trigger a system-wide rendering freeze on multi-GPU systems. A patch fixes the regression by mov...

CVE-2024-27411 drm/nouveau: keep DMA buffers required for suspend/resume

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: keep DMA buffers required for suspend/resume Nouveau deallocates a few buffers post GPU init which are required for GPU suspend/resume to function correctly. This is likely not as big an issue on systems where the...

CVE-2024-27411

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: keep DMA buffers required for suspend/resume Nouveau deallocates a few buffers post GPU init which are required for GPU suspend/resume to function correctly. This is likely not as big an issue on systems where the...

sleuthkit:sleuthkit_mmls_gpt_fuzzer: Index-out-of-bounds in tsk_img_read

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5175868480618496 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitmmlsgptfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: Index-out-of-bounds Crash...

doctrine/orm Regression in Query Parenthesis can have Security Implications

An issue identified in doctrine/orm project related to statement in Where-Clause were not wrapped in brackets due to improper hadandling of case insensitive check...

trafficserver:fuzz_http3frame: Use-of-uninitialized-value in QUICVariableInt::size

Project: https://github.com/apache/trafficserver.git Detailed Report: https://oss-fuzz.com/testcase?key=6159793621368832 Project: trafficserver Fuzzing Engine: libFuzzer Fuzz Target: fuzzhttp3frame Job Type: libfuzzermsantrafficserver Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

ffmpeg:ffmpeg_AV_CODEC_ID_CFHD_fuzzer: Heap-buffer-overflow in vert_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5990952685600768 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDCFHDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

RHEL 7 : runc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - runc: Execution of malicious containers allows for container escape and access to host filesystem...

Ubuntu: Security Advisory (USN-6770-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6770-1 fossil regression

USN-6729-1 fixed vulnerabilities in Apache HTTP Server. The update lead to the discovery of a regression in Fossil with regards to the handling of POST requests that do not have a Content-Length field set. This update fixes the problem. We apologize for the inconvenience...

USN-6770-1: Fossil regression

USN-6729-1 fixed vulnerabilities in Apache HTTP Server. The update lead to the discovery of a regression in Fossil with regards to the handling of POST requests that do not have a Content-Length field set. This update fixes the problem. We apologize for the inconvenience...

[SECURITY] [DSA 5682-2] glib2.0 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-5682-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 09, 2024 https://www.debian.org/security/faq -...

PT-2024-41018 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Fossil affected versions not specified Apache HTTP Server affected versions not specified Description: The issue concerns a regression in Fossil related to the handling of POST requests without a Content-Length field set. This problem was...

poppler:qt_pdf_fuzzer: Use-of-uninitialized-value in opj_j2k_decode_tiles

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=6277932099108864 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

xs:xst: Crash in fxRunID

Detailed Report: https://oss-fuzz.com/testcase?key=4699516451225600 Project: xs Fuzzing Engine: libFuzzer Fuzz Target: xst Job Type: libfuzzerasanxs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x79f000000000 Crash State: fxRunID fxRunScript fuzzoss Sanitizer: address ASAN Recommend...

SUSE: Security Advisory (SUSE-SU-2024:1261-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

jackson-dataformat-xml:XmlDeserializerFuzzer: Security exception in java.base/java.util.Objects.hashCode

Project: https://github.com/FasterXML/jackson-dataformat-xml.git Detailed Report: https://oss-fuzz.com/testcase?key=5476683267244032 Project: jackson-dataformat-xml Fuzzing Engine: libFuzzer Fuzz Target: XmlDeserializerFuzzer Job Type: libfuzzerasanjackson-dataformat-xml Platform Id: linux Crash...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::SomeIpSdEntry::SomeIpSdEntry

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5990278830817280 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

wabt:read_binary_interp_fuzzer: Use-of-uninitialized-value in wabt::TypeChecker::GetRethrowLabel

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5102590818844672 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: readbinaryinterpfuzzer Job Type: libfuzzermsanwabt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...