CVE-2024-35975

CVE-2024-35975 concerns the Linux kernel, specifically the octeontx2-pf Netdev driver, where a bug in the Round Robin scheduling patch caused transmit schedulers to not be freed after a class deletion. The vulnerability is described as a transmit scheduler resource leak that arises during shaping...

CVE-2024-35975

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix transmit scheduler resource leak Inorder to support shaping and scheduling, Upon class creation Netdev driver allocates trasmit schedulers. The previous patch which added support for Round robin scheduling has a...

CVE-2024-35975 octeontx2-pf: Fix transmit scheduler resource leak

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix transmit scheduler resource leak Inorder to support shaping and scheduling, Upon class creation Netdev driver allocates trasmit schedulers. The previous patch which added support for Round robin scheduling has a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a resource leak in the transport scheduler...

The vulnerability of the drm_sched_entity_init() function in the Linux kernel’s drivers/gpu/drm/scheduler/sched_entity.c file allows a hacker to cause a service failure.

The vulnerability of the drmschedentityinit function in the drivers/gpu/drm/scheduler/schedentity.c file of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `taprio_parse_tc_entry()` function in the `net/sched/sch_taprio.c` module, part of the network scheduling subsystem of the Linux operating system, allows a attacker to trigger a service failure.

The vulnerability of the taprioparsetcentry function in the net/sched/schtaprio.c module, part of the network scheduling subsystem in the Linux operating system’s kernel, is related to incorrect comparisons. Exploiting this vulnerability could allow an attacker to cause service failures...

Cybozu Garoon Information Disclosure Vulnerability (CNVD-2024-29669)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An information disclosure vulnerability exists in Cybozu Garoon. The vulnerability is caused due to a browsing...

CVE-2024-34816

Cross-Site Request Forgery CSRF vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler.This issue affects WPCal.Io – Easy Meeting Scheduler: from n/a through 0.9.5.8...

Microsoft Windows Task Scheduler 后置链接漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Task Scheduler. The following products and versions are affected:Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 fo...

Multiple vulnerabilities in Cybozu Garoon

Overview Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-3167 Improper handling of data in Mail CWE-231 - CVE-2024-31397 CyVDB-3221 Improper restriction on the output of some API CWE-201 - CVE-2024-31398 CyVDB-3238 Excessive resource consumption in Mai...

Cybozu Garoon 安全漏洞

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An information disclosure vulnerability exists in Cybozu Garoon. The vulnerability is caused due to a browsing...

CVE-2024-34816

CVE-2024-34816 is a CSRF vulnerability in the Revmakx WPCal.Io – Easy Meeting Scheduler WordPress plugin (WPCal.io) versions

PT-2024-26212 · Unknown · Revmakx Wpcal.Io – Easy Meeting Scheduler

Name of the Vulnerable Software and Affected Versions: Revmakx WPCal.Io – Easy Meeting Scheduler versions 0.9.5.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software. This type of issue allows an attacker to trick a user into performing unintended actions on a we...

WordPress WPCal.io – Easy Meeting Scheduler Plugin <= 0.9.5.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software WPCal.io – Easy Meeting Scheduler Type Plugin Vulnerable versions = 0.9.5.8 Fixed in 0.9.5.9 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-34816 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 362a10aa888b Credits Maj...

UBUNTU-CVE-2024-27010

In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix mirred deadlock on device recursion When the mirred action is used on a classful egress qdisc and a packet is mirrored or redirected to self we hit a qdisc lock deadlock. See trace below. ..... other info removed f...

kernel: block, bfq: Fix division by zero error on zero wsum

A division by zero error was found in the BFQ I/O scheduler. When the weighted sum of I/O priorities becomes zero, the limit calculation divides by zero, causing a kernel crash...

kernel: Linux kernel: Denial of Service in DRM scheduler due to improper work queue handling

A flaw was found in the Linux kernel's Direct Rendering Manager DRM scheduler. A local attacker with low privileges could exploit this vulnerability by triggering a GPU reset test. This improper handling of the scheduler work queue can lead to a kernel panic, which is a system crash, resulting in...

kernel: drm/amdgpu: drop redundant sched job cleanup when cs is aborted

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: drop redundant sched job cleanup when cs is aborted Once command submission failed due to userptr invalidation in amdgpucssubmit, legacy code will perform cleanup of scheduler job. However, it's not needed at all, as...

CVE-2022-48639

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix possible refcount leak in tcnewtfilter tfilterput need to be called to put the refount got by tp-ops-get to avoid possible refcount leak when chain-tmpltops != NULL and chain-tmpltops != tp-ops...

RHEL 7 : openstack-nova (RHSA-2018:0241)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0241 advisory. OpenStack Compute nova launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform. Compute...