kernel: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'

A NULL pointer dereference flaw was found in the Linux kernel in dcn21setpipe. This issue may lead to a crash...

kernel: pwm: Fix double shift bug

REJECTED CVE A double shift vulnerability was identified in the Linux kernel's pwm subsystem. The issue involves passing a shifted value instead of a bit number to set/testbit functions, resulting in a double shift e.g., BITBIT1. While this doesn't cause problems for values 0 or 1, values of 5 or...

kernel: igb: Fix string truncation warnings in igb_set_fw_version

In the Linux kernel, the following vulnerability has been resolved: igb: Fix string truncation warnings in igbsetfwversion Commit 1978d3ead82c "intel: fix string truncation warnings" fixes '-Wformat-truncation=' warnings in igbmain.c by using kasprintf...

kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()

A flaw was found in the Linux kernel's x86 Machine Check Exception MCE subsystem. A local user with administrative privileges could trigger a race condition by concurrently modifying Machine Check Architecture MCA bank configuration attributes through the sysfs interface. This issue occurs becaus...

media: i2c: ar0521: Use cansleep version of gpiod_set_value()

...

PT-2025-18577

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been resolved in the Linux kernel. The problem occurs when the device register function fails, and it does not properly release the reference by calling put devic...

CVE-2024-11056

A vulnerability, which was classified as critical, was found in Tenda AC10 16.03.10.13. Affected is the function FUN0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

SUSE CVE-2024-50232

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7124: fix division by zero in ad7124setchannelodr In the ad7124writeraw function, parameter val can potentially be zero. This may lead to a division by zero when DIVROUNDCLOSEST is called within ad7124setchannelodr. T...

Tenda AC10 security vulnerabilities

The Tenda AC10 is an 11ac dual band router designed for homes with 200 megabit and above fiber. A stack buffer overflow vulnerability exists in the Tenda AC10. The vulnerability stems from a stack-based buffer overflow caused by the parameter timeZone in the FUN0044db3c function of the...

CVE-2024-50232 iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7124: fix division by zero in ad7124setchannelodr In the ad7124writeraw function, parameter val can potentially be zero. This may lead to a division by zero when DIVROUNDCLOSEST is called within ad7124setchannelodr. T...

netfilter: nft_set_pipapo: walk over current view on netlink dump

...

netfilter: nf_tables: restore set elements when delete set fails

...

device-dax: correct pgoff align in dax_set_mapping()

...

SUSE CVE-2024-50188

In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabling fiber When configuring the fiber port, the DP83869 PHY driver incorrectly calls linkmodesetbit with a bit mask 1 10 rather than a bit number 10. This corrupts some other memo...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the presence of a dhkey that is not set to null when released...

OESA-2024-2348 hadoop-3.1 security update

Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models. It is designed to scale up from single servers to thousands of machines, each offering local computation and storage. Security Fixes: Apache...

UBUNTU-CVE-2024-50188

In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabling fiber When configuring the fiber port, the DP83869 PHY driver incorrectly calls linkmodesetbit with a bit mask 1 10 rather than a bit number 10. This corrupts some other memo...

PT-2024-8230 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 16.03.10.13 Description: A critical vulnerability was found in the function FUN 0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk crypto leads to a stack-based buffer overflow. It is possibl...

Linux kernel USB Audio DoS

The vulnerability in the usb-audio component of the Linux kernel is related to dereferencing a NULL pointer in the sndusbsetsampleratev2v3 function. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

fbcon Kernel DoS

The vulnerability of the fbcon component in the Linux operating system’s kernel is related to errors in resource management within the fbcondosetfont function. Exploiting this vulnerability can allow an attacker to cause a service failure...