CVE-2024-26910

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix performance regression in swap operation The patch "netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test", commit 28628fa9 fixes a race condition. But the synchronizercu add...

CVE-2024-26910 netfilter: ipset: fix performance regression in swap operation

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix performance regression in swap operation The patch "netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test", commit 28628fa9 fixes a race condition. But the synchronizercu add...

DEBIAN-CVE-2024-26832

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix missing folio cleanup in writeback race path In zswapwritebackentry, after we get a folio from readswapcacheasync, we grab the tree lock again to check that the swap entry was not invalidated and recycled. If it wa...

UBUNTU-CVE-2024-26832

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix missing folio cleanup in writeback race path In zswapwritebackentry, after we get a folio from readswapcacheasync, we grab the tree lock again to check that the swap entry was not invalidated and recycled. If it wa...

AZL-58780 CVE-2024-26759 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix race when skipping swapcache When skipping swapcache for SWPSYNCHRONOUSIO, if two or more threads swapin the same entry at the same time, they get different pages A, B. Before one thread T0 finishes the swapin and...

PT-2024-21502

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8 Description A race condition in the Linux kernel's swap cache can cause data corruption when two or more threads swap in the same entry at the same time. This can lead to a stalled page being installed into t...

CVE-2024-26759: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix race when skipping swapcache When skipping swapcache for SWPSYNCHRONOUSIO, if two or more threads swapin the same entry at the same time, they get different pages A, B. Before one thread T0 finishes the swapin and...

util-linux Unauthorized Access Swap Space

The vulnerability of the util-linux package on Linux operating systems is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to passwords or modify the user’s swap file by using the wall command with...

SUSE CVE-2023-45913

Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId. This vulnerability is triggered when the X11 server sends an DRI2BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is ...

DEBIAN-CVE-2023-45913

Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId. This vulnerability is triggered when the X11 server sends an DRI2BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is ...

PT-2024-5778

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a performance regression in the swap operation of the netfilter ipset component in the Linux kernel. A race condition between swap/destroy and kernel side...

CVE-2024-2352

A vulnerability, which was classified as critical, has been found in 1Panel up to 1.10.1-lts. Affected by this issue is the function baseApi.UpdateDeviceSwap of the file /api/v1/toolbox/device/update/swap. The manipulation of the argument Path with the input 123123123\nopen -a Calculator leads to...

1Panel Command Injection Vulnerability

1Panel is an open source Linux server O&M panel for the Chinese 1panel community. A command injection vulnerability exists in 1Panel 1.10.1-lts and earlier versions, which stems from a security issue in the function baseApi.UpdateDeviceSwap in /api/v1/toolbox/device/update/swap, where the use of...

PT-2024-19921

Name of the Vulnerable Software and Affected Versions 1Panel versions up to 1.10.1-lts Description A critical issue has been found in the function baseApi.UpdateDeviceSwap of the file /api/v1/toolbox/device/update/swap. The manipulation of the argument Path with a specific input leads to command...

CVE-2024-26624

CVE-2024-26624 is rejected by its CNA and does not represent an active vulnerability.

CVE-2024-26624

Removed by vendor...

PT-2024-3365

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition between the free swap and cache function and the swapoff function in the Linux kernel's memory management subsystem. This could potentially all...

GoldPickaxe Trojan steals your face!

Well, the GoldPickaxe Trojan does not literally steal your face, but it does steal an image of your face in order to be able to identify as you. Researchers have found a family of Trojans, attributed to a financially motivated Chinese group, which come in versions for iOS and Android...

Squid Proxy Heap Use-After-Free DoS

The vulnerability of the Squid proxy server is related to the assignment of a pointer to a deactivated resource. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

kernel: Race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode BUG in include/linux/swapops.h

A flaw was found in pfnswapentrytopage in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmdt x...