Lucene search
+L

4585 matches found

CVE
CVE
•added 2024/10/21 12:18 p.m.•199 views

CVE-2024-49856

CVE-2024-49856 — Linux kernel, x86 SGX: deadlock in SGX NUMA node search. When the current node lacks an EPC section and other EPCs are exhausted, the loop searching for a remote EPC page can deadlock, causing a soft lockup. The root cause is that nid_of_current is not set in sgx_numa_mask, so ni...

5.5CVSS6.2AI score0.00207EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2024/10/21 12:18 p.m.•30 views

CVE-2024-49856 x86/sgx: Fix deadlock in SGX NUMA node search

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Fix deadlock in SGX NUMA node search When the current node doesn't have an EPC section configured by firmware and all other EPC sections are used up, CPU can get stuck inside the while loop that looks for an available EP...

0.00207EPSS
SaveExploits0References6
osv-azl
osv-azl
•added 2024/10/21 12:15 p.m.•22 views

AZL-51114 CVE-2024-47710 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: sockmap: Add a condresched in sockhashfree Several syzbot soft lockup reports all have in common sockhashfree If a map with a large number of buckets is destroyed, we need to yield the cpu when needed...

5.5CVSS6.7AI score0.00231EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/21 12:15 p.m.•19 views

CVE-2024-47710

In the Linux kernel, the following vulnerability has been resolved: sockmap: Add a condresched in sockhashfree Several syzbot soft lockup reports all have in common sockhashfree If a map with a large number of buckets is destroyed, we need to yield the cpu when needed...

5.5CVSS0.00231EPSS
SaveExploits0References12
osv-azl
osv-azl
•added 2024/10/21 12:15 p.m.•23 views

AZL-51213 CVE-2024-47710 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: sockmap: Add a condresched in sockhashfree Several syzbot soft lockup reports all have in common sockhashfree If a map with a large number of buckets is destroyed, we need to yield the cpu when needed...

5.5CVSS6.7AI score0.00231EPSS
SaveExploits0References1
osv-ubuntu
osv-ubuntu
•added 2024/10/21 12:15 p.m.•12 views

UBUNTU-CVE-2024-47710

In the Linux kernel, the following vulnerability has been resolved: sockmap: Add a condresched in sockhashfree Several syzbot soft lockup reports all have in common sockhashfree If a map with a large number of buckets is destroyed, we need to yield the cpu when needed...

5.5CVSS6.2AI score0.00231EPSS
SaveExploits0References43
CVE
CVE
•added 2024/10/21 11:53 a.m.•218 views

CVE-2024-47710

CVE-2024-47710 : Linux kernel vulnerability where destroying a sock_map with many buckets could trigger soft lockups. The fix adds a cond_resched() in sock_hash_free() to yield the CPU when needed, addressing repeated syzbot soft lockup reports. Affected component: sock_map/sock_hash_free in Linu...

5.5CVSS5.2AI score0.00231EPSS
SaveExploits0References12Affected Software1
Cvelist
Cvelist
•added 2024/10/21 11:53 a.m.•29 views

CVE-2024-47710 sock_map: Add a cond_resched() in sock_hash_free()

In the Linux kernel, the following vulnerability has been resolved: sockmap: Add a condresched in sockhashfree Several syzbot soft lockup reports all have in common sockhashfree If a map with a large number of buckets is destroyed, we need to yield the cpu when needed...

0.00231EPSS
SaveExploits0References8
osv-cve
osv-cve
•added 2024/10/21 11:53 a.m.•20 views

CVE-2024-47710 sock_map: Add a cond_resched() in sock_hash_free()

In the Linux kernel, the following vulnerability has been resolved: sockmap: Add a condresched in sockhashfree Several syzbot soft lockup reports all have in common sockhashfree If a map with a large number of buckets is destroyed, we need to yield the cpu when needed...

6.3AI score
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/21 12:00 a.m.•2 views

CVE-2024-47710: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sockmap: Add a condresched in sockhashfree Several syzbot soft lockup reports all have in common sockhashfree If a map with a large number of buckets is destroyed, we need to yield the cpu when needed...

5.5CVSS5.9AI score0.00231EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/21 12:00 a.m.•6 views

CVE-2024-49856: Loop with Unreachable Exit Condition

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Fix deadlock in SGX NUMA node search When the current node doesn't have an EPC section configured by firmware and all other EPC sections are used up, CPU can get stuck inside the while loop that looks for an available EP...

5.5CVSS5.9AI score0.00207EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/21 12:00 a.m.•9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the sockmap module not properly handling soft locks in the sockhashfree function...

5.5CVSS6.7AI score0.00231EPSS
SaveExploits0References9
Zero Day Initiative
Zero Day Initiative
•added 2024/10/17 12:00 a.m.•16 views

Schneider Electric Zelio Soft 2 ZM2 File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric Zelio Soft 2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS6.8AI score0.00209EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/10/16 11:59 p.m.•4 views

Malware in down-lo-ad-now-zip-mp3-149132-the-soft-cavalry-vhx8d-iuyuef

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/10/15 8:15 a.m.•16 views

CVE-2024-9981

The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to upload a malicious PHP file first and then exploit this vulnerability to include the file, resulting in arbitrary code execution on the server...

8.8CVSS6.3AI score0.00786EPSS
SaveExploits0References2
ICS
ICS
•added 2024/10/10 6:00 a.m.•48 views

Schneider Electric Zelio Soft 2

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Schneider Electric Equipment : Zelio Soft 2 Vulnerabilities : Use After Free, Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

7.8CVSS7.7AI score0.00209EPSS
SaveExploits0References10
osv-debian
osv-debian
•added 2024/10/09 2:15 p.m.•8 views

DEBIAN-CVE-2024-47660

In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENTWATCHED flags lazily In some setups directories can have many usually negative dentries. Hence fsnotifyupdatechilddentryflags function can take a significant amount of time. Since the bulk of this function...

4.7CVSS5.8AI score0.0016EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/10/09 7:04 a.m.•3 views

Malware in working-today--soft-aim-fortnite-down-lo-ad-pc-esp-aimbot-undetected-2023-41etdn

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/10/09 12:00 a.m.•10 views

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. A security vulnerability exists in the Linux kernel. An attacker exploits the vulnerability to cause a soft lockup...

4.7CVSS6.3AI score0.0016EPSS
SaveExploits0References10
NVD
NVD
•added 2024/10/08 10:15 a.m.•38 views

CVE-2024-8518

CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft 2 application when a specially crafted project file is loaded by an application user...

3.3CVSS0.00159EPSS
SaveExploits0References1
Rows per page
Query Builder