12021 matches found
CVE-2024-53095
In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free of network namespace. Recently, we got a customer report that CIFS triggers oops while reconnecting to a server. 0 The workload runs on Kubernetes, and some pods mount CIFS servers in non-root...
PT-2024-36856
Content removed...
CVE-2024-53058
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data In case the non-paged data of a SKB carries protocol header and protocol payload to be transmitted on a certain platform that the DMA AXI address width is...
CVE-2024-53090 afs: Fix lock recursion
In the Linux kernel, the following vulnerability has been resolved: afs: Fix lock recursion afswakeupasynccall can incur lock recursion. The problem is that it is called from AFRXRPC whilst holding the -notifylock, but it tries to take a ref on the afscall struct in order to pass it to a work que...
CVE-2024-52439
creationtimestamp| type| source ---|---|--- 2024-11-20 11:35:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113515070825253153 2024-11-20 13:44:35+00:00| seen| https://t.me/cvedetector/11598...
CVE-2024-51846
creationtimestamp| type| source ---|---|--- 2024-11-19 23:22:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113512190485101966...
CVE-2024-53079 mm/thp: fix deferred split unqueue naming and locking
In the Linux kernel, the following vulnerability has been resolved: mm/thp: fix deferred split unqueue naming and locking Recent changes are putting more pressure on THP deferred split queues: under load revealing long-standing races, causing listdel corruptions, "Bad page state"s and worse I kee...
GHSA-JW4X-V69F-HH5W
creationtimestamp| type| source ---|---|--- 2024-11-18 17:08:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113505054477519291...
GHSA-VMHX-HWPH-Q6MC
creationtimestamp| type| source ---|---|--- 2024-11-15 17:38:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113488187902526394 2024-11-15 17:42:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113488202426408153...
GHSA-XH4G-C9P6-5JXG
creationtimestamp| type| source ---|---|--- 2024-11-15 16:23:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113487892490978139...
CVE-2024-48900 Moodle: idor when accessing list of badge recipients
A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to...
Warning: Online shopping threats to avoid this Black Friday and Cyber Monday
.kb-row-layout-wrap.wp-block-kadence-rowlayout.kb-row-layout-id1206714424da-98margin-top:0px;margin-bottom:var--global-kb-spacing-xl, 4rem;.kb-row-layout-id1206714424da-98 .kt-row-column-wrapalign-content:center;:where.kb-row-layout-id1206714424da-98 .kt-row-column-wrap...
CVE-2024-50151 smb: client: fix OOBs when building SMB2_IOCTL request
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOBs when building SMB2IOCTL request When using encryption, either enforced by the server or when using 'seal' mount option, the client will squash all compound request buffers down for encryption into a single i...
CVE-2024-50091
In the Linux kernel, the following vulnerability has been resolved: dm vdo: don't refer to dedupecontext after releasing it Clear the dedupecontext pointer in a datavio whenever ownership of the context is lost, so that vdo can't examine it accidentally...
CVE-2024-50136
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Unregister notifier on eswitch init failure It otherwise remains registered and a subsequent attempt at eswitch enabling might trigger warnings of the sort: 682.589148 ------------ cut here ------------ 682.590204...
GHSA-29WX-VH33-7X7R vulnerabilities
Vulnerabilities for packages: atlantis-fips, argo-events-fips, ko, azure-aad-pod-identity-mic, loki-fips, mc-fips, doppler-kubernetes-operator, opentelemetry-collector-contrib-fips, buildkitd-fips, chainctl, promxy-fips, opentelemetry-collector-contrib, skaffold, promxy, argo-rollouts, atlantis,...
TeamTNT Exploits 16 Million IPs in Malware Attack on Docker Clusters
This article details a new campaign by TeamTNT, a notorious hacking group, leveraging exposed Docker daemons to deploy…...
[SECURITY] Fedora 40 Update: podman-tui-1.2.3-1.fc40
podman-tui is a terminal user interface for Podman v4 and v5. podman-tui is using podman.socket service to communicate with podman environm ent and SSH to connect to remote podman machines...