DEBIAN-CVE-2024-56651

In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110canist: fix potential use-after-free The commit a22bd630cfff "can: hi311x: do not report txerr and rxerr during bus-off" removed the reporting of rxerr and txerr even in case of correct operation i. e. not...

CVE-2024-56651 can: hi311x: hi3110_can_ist(): fix potential use-after-free

In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110canist: fix potential use-after-free The commit a22bd630cfff "can: hi311x: do not report txerr and rxerr during bus-off" removed the reporting of rxerr and txerr even in case of correct operation i. e. not...

CVE-2024-56651 can: hi311x: hi3110_can_ist(): fix potential use-after-free

In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110canist: fix potential use-after-free The commit a22bd630cfff "can: hi311x: do not report txerr and rxerr during bus-off" removed the reporting of rxerr and txerr even in case of correct operation i. e. not...

CVE-2024-56651 can: hi311x: hi3110_can_ist(): fix potential use-after-free

In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110canist: fix potential use-after-free The commit a22bd630cfff "can: hi311x: do not report txerr and rxerr during bus-off" removed the reporting of rxerr and txerr even in case of correct operation i. e. not...

CVE-2024-56651

CVE-2024-56651 affects the Linux kernel hi311x CAN driver (hi3110_can_ist). The issue is a potential use-after-free: error count data added to the CAN frame after netif_rx() could reference a skb that is freed or reused. Root cause: reporting of rxerr/txerr persisted during non-bus-off operation,...

CVE-2024-56610 kcsan: Turn report_filterlist_lock into a raw_spinlock

In the Linux kernel, the following vulnerability has been resolved: kcsan: Turn reportfilterlistlock into a rawspinlock Ran Xiaokai reports that with a KCSAN-enabled PREEMPTRT kernel, we can see splats like: | BUG: sleeping function called from invalid context at kernel/locking/spinlockrt.c:48 |...

CVE-2024-53190

creationtimestamp| type| source ---|---|--- 2024-12-27 14:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lec6ifo7us2i 2024-12-27 15:22:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113725467720036099 2025-12-03 14:14:49+00:00| seen|...

CVE-2024-53212

In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended extack reporting to dumps. It works under normal conditions, because extack errors are usually reported during -start or the first -dump, it's...

CVE-2024-53212 netlink: fix false positive warning in extack during dumps

In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended extack reporting to dumps. It works under normal conditions, because extack errors are usually reported during -start or the first -dump, it's...

CVE-2024-53212 netlink: fix false positive warning in extack during dumps

In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended extack reporting to dumps. It works under normal conditions, because extack errors are usually reported during -start or the first -dump, it's...

The vulnerability of the scsidebug component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the scsidebug component in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the functions respverify and respreportzones. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2024-53149

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connectorstatus UCSI connector's indices start from 1 up to 3, PMICGLINKMAXPORTS. Correct the condition in the pmicglinkucsiconnectorstatus callback, fixing Type-C orientation reporting...

UBUNTU-CVE-2024-53149

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connectorstatus UCSI connector's indices start from 1 up to 3, PMICGLINKMAXPORTS. Correct the condition in the pmicglinkucsiconnectorstatus callback, fixing Type-C orientation reporting...

CVE-2024-35219

creationtimestamp| type| source ---|---|--- 2024-12-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-24 2025-01-02 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-02 2025-01-13 00:00:00+00:00| seen| The Shadowserver...

Malicious code in ui-forms-embed-components-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2cc02fa4d714e4e0de4210d4132cb0c07b319906e7f88f1f659e43e9ba8b9bb7 The OpenSSF Package Analysis project identified 'ui-forms-embed-components-reporting' @ 1.21.0 npm as malicious. It is considered malicious...

MAL-2024-12094 Malicious code in ui-forms-embed-components-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2cc02fa4d714e4e0de4210d4132cb0c07b319906e7f88f1f659e43e9ba8b9bb7 The OpenSSF Package Analysis project identified 'ui-forms-embed-components-reporting' @ 1.21.0 npm as malicious. It is considered malicious...

CVE-2024-37758

creationtimestamp| type| source ---|---|--- 2024-12-20 19:01:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113686693262617989 2024-12-20 19:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldr3wooi472x 2024-12-20 20:55:57+00:00| seen|...

CVE-2024-56331

creationtimestamp| type| source ---|---|--- 2024-12-20 14:23:08+00:00| published-proof-of-concept| https://github.com/louislam/uptime-kuma/security/advisories/GHSA-2qgm-m29m-cj2h 2024-12-20 19:55:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113686907294716814 2024-12-20...

CVE-2024-56350

creationtimestamp| type| source ---|---|--- 2024-12-20 14:17:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113685576592470411 2024-12-20 15:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqoj5gvjm2m 2024-12-20 16:44:59+00:00| seen|...

CVE-2024-11812

creationtimestamp| type| source ---|---|--- 2024-12-20 07:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptp7kv4e2s 2024-12-20 07:35:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113683998106038612 2024-12-20 09:13:16+00:00| seen|...