SUSE CVE-2024-35939

In the Linux kernel, the following vulnerability has been resolved: dma-direct: Leak pages on dmasetdecrypted failure On TDX it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail such that an error is returned and the resulting memory is shared. Callers...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of a null pointer dereference in the netsched module fifosetlimit...

PT-2024-9778

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL pointer dereference in the Linux kernel's cfg80211 component. This occurs when the sta set sinfo function is called before the ath10k sta state function...

CVE-2024-35571

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv...

CVE-2024-35578

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv...

CVE-2024-35949 btrfs: make sure that WRITTEN is set on all metadata blocks

In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure that WRITTEN is set on all metadata blocks We previously would call btrfscheckleaf if we had the check integrity code enabled, which meant that we could only run the extended leaf checks if we had WRITTEN set on...

Blackprint security vulnerabilities

Blackprint is a visual programming interface from Blackprint Open Source. A security vulnerability exists in blackprint version v.0.9.0, which originated from a vulnerability that allows attackers to execute arbitrary code via the utils.setDeepProperty function of engine.min.js...

Tenda AX12 Wi-Fi Router Code Execution

The vulnerability of the /goform/setMacFilterCfg component in the Tenda AX12 Wi-Fi router software relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using the deviceList parameter...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: disallow timeout for anonymous sets CVE-2023-52620 createemptylvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missi...

PT-2024-20341 · Unknown · @Blackprint/Engine

Name of the Vulnerable Software and Affected Versions: @blackprint/engine versions 0.8.12 through 0.9.1 Description: A Prototype Pollution issue allows an attacker to execute arbitrary code via the utils.setDeepProperty function of engine.min.js. This issue enables the execution of arbitrary code...

AZL-67752 CVE-2024-35939 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: dma-direct: Leak pages on dmasetdecrypted failure On TDX it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail such that an error is returned and the resulting memory is shared. Callers...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a page leak when the dmasetdecrypted function fails...

PT-2024-27078 · WordPress · Build App Online

Name of the Vulnerable Software and Affected Versions: Build App Online plugin for WordPress versions up to, and including, 1.0.21 Description: The issue is due to missing authentication checking in the set user cart function with the user id header value, allowing unauthenticated attackers to lo...

CVE-2023-52692

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add missing error check to scarlett2usbsetconfig scarlett2usbsetconfig calls scarlett2usbget but was not checking the result. Return the error if it fails rather than continuing with an invalid value...

CVE-2024-35821

In the Linux kernel, the following vulnerability has been resolved: ubifs: Set page uptodate in the correct place Page cache reads are lockless, so setting the freshly allocated page uptodate before we've overwritten it with the data it's supposed to have in it will allow a simultaneous reader to...

UBUNTU-CVE-2024-35821

In the Linux kernel, the following vulnerability has been resolved: ubifs: Set page uptodate in the correct place Page cache reads are lockless, so setting the freshly allocated page uptodate before we've overwritten it with the data it's supposed to have in it will allow a simultaneous reader to...

PT-2024-14686

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential circular locking issue was identified in the smb2 set ea function. This issue arises because smb2 set ea can be called within the parent inode lock range. To address this, th...

CVE-2024-34957

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/sysImagesdeal.php?mudi=infoSet...

IDCCMS security vulnerabilities

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idcCMS v1.35, which was discovered via the component admin/sysImagesdeal.php?mudi=infoS...

Linux USB gadget NCM Function Compromise

The vulnerabilities of the functions ncmsetalt and ncmdisable in the drivers/usb/gadget/function/fncm.c file of the USB gadget driver module of the Linux operating system are related to the repeated use of previously freed memory. Exploiting these vulnerabilities could allow an attacker to...