EUVD-2024-37310

Malicious code in bioql PyPI...

CVE-2024-38409

CVE-2024-38409 is described across multiple sources as a memory corruption vulnerability involving station LL statistic handling. The primary CVE record lists a CVSS v3.1 base score of 7.8 (LOCAL attack vector, LOW privilege, NO user interaction; high impact on confidentiality, integrity, availab...

CVE-2024-38409 Buffer Copy Without Checking Size of Input in WLAN Windows Host

Memory corruption while station LL statistic handling...

CVE-2024-27400 drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: once more fix the call oder in amdgputtmmove v2 This reverts drm/amdgpu: fix ftrace event amdgpubomove always move on same heap. The basic problem here is that after the move the old location is simply not available a...

CVE-2024-27400

CVE-2024-27400 affects the Linux kernel: drm/amdgpu, specifically amdgpu_ttm_move(). The issue is with move/ notification ordering—notifications must be sent before the actual move so DMA-buf and VM move notifications have the correct order; after a move, the old location becomes unavailable. The...