3673 matches found
CVE-2024-56533
In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: Use sndcardfreewhenclosed at disconnection The USB disconnect callback is supposed to be short and not too-long waiting. OTOH, the current code uses sndcardfree at disconnection, but this waits for the close of all...
CVE-2024-56533
The CVE-2024-56533 vulnerability affects the Linux kernel’s ALSA usx2y driver. It stems from using snd_card_free() during USB disconnection, which waits for all open fds to close and can delay release, potentially blocking USB IOCTLs and causing a soft lockup. The advisory notes replacing snd_car...
CVE-2024-56532 ALSA: us122l: Use snd_card_free_when_closed() at disconnection
In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Use sndcardfreewhenclosed at disconnection The USB disconnect callback is supposed to be short and not too-long waiting. OTOH, the current code uses sndcardfree at disconnection, but this waits for the close of all...
CVE-2024-56532 ALSA: us122l: Use snd_card_free_when_closed() at disconnection
In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Use sndcardfreewhenclosed at disconnection The USB disconnect callback is supposed to be short and not too-long waiting. OTOH, the current code uses sndcardfree at disconnection, but this waits for the close of all...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the unused sndcardfreewhenclosed on USB disconnect in the ALSA:caiaq module, which could result in a soft lo...
PT-2024-36863 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.10.0-rc5 Description: A soft lockup issue has been identified in the Linux kernel when compiling kernel source with an up-and-running KASAN-enabled kernel on a 256-core machine. The issue occurs due to excessi...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the improper use of sndcardfree in the USB disconnect callback in the ALSA:us122l module, which could result...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a soft lockout under fib6selectpath in the ipv6 module...
CVE-2024-12677
Delta Electronics DTM Soft deserializes objects, which could allow an attacker to execute arbitrary code...
CVE-2024-12677
CVE-2024-12677 concerns Delta Electronics DTM Soft, where deserialization of objects could lead to arbitrary code execution. Multiple sources confirm the vulnerability affects DTM Soft and describe the impact as remote code execution risk, with CVSS metrics indicating HIGH severity (RADIUS: LOCAL...
CVE-2024-12677 Delta Electronics DTM Soft Deserialization of Untrusted Data
Delta Electronics DTM Soft deserializes objects, which could allow an attacker to execute arbitrary code...
CVE-2024-12677 Delta Electronics DTM Soft Deserialization of Untrusted Data
Delta Electronics DTM Soft deserializes objects, which could allow an attacker to execute arbitrary code...
PT-2024-17711 · Delta Electronics · Dtm Soft
Name of the Vulnerable Software and Affected Versions: Delta Electronics DTM Soft affected versions not specified Description: The issue allows an attacker to execute arbitrary code due to the deserialization of objects. This could potentially lead to remote code execution. The estimated number o...
CVE-2023-32585
Missing Authorization vulnerability in Total-Soft Portfolio Gallery – Responsive Image Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Portfolio Gallery – Responsive Image Gallery: from n/a through 1.4.6...
CVE-2023-25988
Missing Authorization vulnerability in Video Gallery by Total-Soft Video Gallery – YouTube Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Video Gallery – YouTube Gallery: from n/a through 1.7.6...
CVE-2023-32585 WordPress Portfolio Gallery – Responsive Image Gallery plugin <= 1.4.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in totalsoft Portfolio Gallery gallery-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Portfolio Gallery: from n/a through = 1.4.6...
CVE-2023-32585
CVE-2023-32585 relates to the WordPress plugin Portfolio Gallery – Responsive Image Gallery . The vulnerability is a Broken Access Control issue due to an missing authorization check that allowed unauthenticated users to exploit. Affected versions are v1.4.6 and earlier ; the issue is fixed in v1...
CVE-2023-25988 WordPress Video Gallery – YouTube Gallery plugin <= 1.7.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Video Gallery by Total-Soft Video Gallery – YouTube Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Video Gallery – YouTube Gallery: from n/a through 1.7.6...
CVE-2023-25988 WordPress Video Gallery – YouTube Gallery plugin <= 1.7.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in totalsoft Video Gallery – YouTube Gallery gallery-videos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Video Gallery – YouTube Gallery: from n/a through = 1.7.6...