CVE-2024-50039

CVE-2024-50039 (Linux kernel) : The vulnerability resides in the net/sched subsystem where TCA_STAB is accepted only for the root qdisc. The bug arises because most qdiscs track backlog assuming invariance of qdisc_pkt_len(skb) between enqueue() and dequeue(), but a syzbot-triggered combination o...

CVE-2024-49939 wifi: rtw89: avoid to add interface to list twice when SER

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid to add interface to list twice when SER If SER L2 occurs during the WoWLAN resume flow, the add interface flow is triggered by ieee80211reconfig. However, due to rtw89wowresume return failure, it will cause the...

CVE-2024-49934 fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name

In the Linux kernel, the following vulnerability has been resolved: fs/inode: Prevent dumpmapping accessing invalid dentry.dname.name It's observed that a crash occurs during hot-remove a memory device, in which user is accessing the hugetlb. See calltrace as following: ------------ cut here...

CVE-2024-49866 tracing/timerlat: Fix a race during cpuhp processing

In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Fix a race during cpuhp processing There is another found exception that the "timerlat/1" thread was scheduled on CPU0, and lead to timer corruption finally: ODEBUG: init active active state 0 object:...

MAL-2024-10223 Malicious code in zen-ruby-linter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-10169 Malicious code in test-package-sample (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-10150 Malicious code in raimbowxyz (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-10132 Malicious code in python-consul2-hh (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-10041 Malicious code in marshall (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9964 Malicious code in cryptoaitools (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9946 Malicious code in atomicdecoderss (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9928 Malicious code in zwirir (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9927 Malicious code in zonal-indigo-tahr (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9924 Malicious code in zierber (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9922 Malicious code in yammering-red-constrictor (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9913 Malicious code in wbtvd-screeners-web (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9891 Malicious code in uncertain-orange-snake (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9872 Malicious code in super-aqua-canidae (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9866 Malicious code in ssc-oauth2 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9861 Malicious code in spectrum-css-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd11f8bce16c648d0357bfe32e3f5597413551bc0eb8884eee63ac92eaa9569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...