SUSE CVE-2024-47688

In the Linux kernel, the following vulnerability has been resolved: driver core: Fix a potential null-ptr-deref in moduleadddriver Inject fault while probing of-fpga-region, if kasprintf fails in moduleadddriver, the second sysfsremovelink in exit path will cause null-ptr-deref as below because...

DEBIAN-CVE-2024-47688

In the Linux kernel, the following vulnerability has been resolved: driver core: Fix a potential null-ptr-deref in moduleadddriver Inject fault while probing of-fpga-region, if kasprintf fails in moduleadddriver, the second sysfsremovelink in exit path will cause null-ptr-deref as below because...

CVE-2024-47688 driver core: Fix a potential null-ptr-deref in module_add_driver()

In the Linux kernel, the following vulnerability has been resolved: driver core: Fix a potential null-ptr-deref in moduleadddriver Inject fault while probing of-fpga-region, if kasprintf fails in moduleadddriver, the second sysfsremovelink in exit path will cause null-ptr-deref as below because...

Mozilla Firefox Resource Closing or Releasing Improperly Vulnerability

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. Mozilla Firefox suffers from a resource shutdown or release improper...

Advisory ROSA-SA-2024-2481

Software: java-11-openjdk 11.0.23.0.9 OS: rosa-server79 packageevrstring: java-11-openjdk-11.0.23.0.9-2.res7 CVE-ID: CVE-2024-20918 BDU-ID: 2024-00485 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Hotspot component of Oracle GraalVM Enterprise Edition virtual machines, Oracle GraalVM for JDK,...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to resource release errors, allows attackers to compromise data integrity.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to errors during resource release. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability of the lib/xarray.c library in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the lib/xarray.c library in the Linux operating system’s kernel is related to a memory leak caused by the incorrect use of a function for releasing resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the HDF5 library, related to improper disabling or releasing resources, allows a perpetrator to cause a service failure.

The vulnerability of the HDF5 library is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2024-46698

In the Linux kernel, the following vulnerability has been resolved: video/aperture: optionally match the device in sysfbdisable In apertureremoveconflictingpcidevices, we currently only call sysfbdisable on vga class devices. This leads to the following problem when the pimary device is not VGA...

The vulnerability of the Tianocore edk2 library, related to errors in resource release, allows a hacker to cause a service failure.

The vulnerability of the Tianocore edk2 library is related to errors during resource release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the get_edge() function in the ospf_te.c file of the OSPF Daemon component of the FRRouting software for Unix-like systems allows a attacker to cause a service failure.

The vulnerability of the getedge function in the ospfte.c file of the OSPF Daemon component, a networking routing implementation software for Unix-like systems, is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

crypto: hisilicon/sec - Fix memory leak for sec resource release

...

PT-2024-7324 · Intel · Intel Uefi Firmware

Name of the Vulnerable Software and Affected Versions: Intel UEFI Firmware affected versions not specified Description: The issue is related to improper input validation in UEFI firmware for some Intel processors, which may allow a privileged user to enable information disclosure or denial of...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to trigger a service failure.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20240829-01

A vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to resource release errors. resource release errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in the Core component of the Oracle V...

PT-2024-7294 · Fireboltt · Fire-Boltt Artillery Smart Watch

Name of the Vulnerable Software and Affected Versions: Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 Description: The issue is related to insecure permissions in the Bluetooth Low Energy BLE component, which can be exploited to cause a Denial of Service DoS. This may allow an attacker to disconnec...

UBUNTU-CVE-2022-48888

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix memory leak in msmmdssparsedatabusiccpath oficcget alloc resources for path1, we should release it when not need anymore. Early return when ISERRORNULLpath0 may leak path1. Defer getting path1 to fix this...

GO-2023-1590 GoPistolet vulnerable to Improper Resource Shutdown or Release in github.com/gopistolet/gopistolet

GoPistolet vulnerable to Improper Resource Shutdown or Release in github.com/gopistolet/gopistolet...

ROS-20240816-06

The vulnerability in OpenVPN software is related to the lack of resource release after the resource expires. the resource's expiration date. Exploitation of the vulnerability could allow an attacker to "save a session" even if the the server has been ordered to disconnect that client...

Premature Release of Resource During Expected Lifetime

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Premature Release of Resource During Expected Lifetime via the authorization process. A low-privileged attacker can bypass security restrictions and modify limited...