SUSE CVE-2024-57933

In the Linux kernel, the following vulnerability has been resolved: gve: guard XSK operations on the existence of queues This patch predicates the enabling and disabling of XSK pools on the existence of queues. As it stands, if the interface is down, disabling or enabling XSK pools would result i...

SUSE CVE-2024-57940

In the Linux kernel, the following vulnerability has been resolved: exfat: fix the infinite loop in exfatreaddir If the file system is corrupted so that a cluster is linked to itself in the cluster chain, and there is an unused directory entry in the cluster, 'dentry' will not be incremented,...

kernel: i40e: fix race condition by adding filter's intermediate sync state

A flaw was found in the Linux kernel's i40e network driver. A local user can exploit this race condition to cause a Denial of Service DoS through memory corruption. The issue occurs when multiple concurrent operations modify Media Access Control MAC and Virtual Local Area Network VLAN filters und...

CVE-2024-57932

A flaw was found in the Google Virtual Ethernet gve module in the Linux kernel. The eXpress Data Path XDP xmit Network Device Operation NDO callback does not properly check for an empty XDP queue, causing a divide-by-zero error or a NULL pointer dereference, resulting in a denial of service...

AZL-56137 CVE-2024-57933 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: gve: guard XSK operations on the existence of queues This patch predicates the enabling and disabling of XSK pools on the existence of queues. As it stands, if the interface is down, disabling or enabling XSK pools would result i...

DEBIAN-CVE-2024-57933

In the Linux kernel, the following vulnerability has been resolved: gve: guard XSK operations on the existence of queues This patch predicates the enabling and disabling of XSK pools on the existence of queues. As it stands, if the interface is down, disabling or enabling XSK pools would result i...

UBUNTU-CVE-2024-57933

In the Linux kernel, the following vulnerability has been resolved: gve: guard XSK operations on the existence of queues This patch predicates the enabling and disabling of XSK pools on the existence of queues. As it stands, if the interface is down, disabling or enabling XSK pools would result i...

CVE-2024-57932 gve: guard XDP xmit NDO on existence of xdp queues

In the Linux kernel, the following vulnerability has been resolved: gve: guard XDP xmit NDO on existence of xdp queues In GVE, dedicated XDP queues only exist when an XDP program is installed and the interface is up. As such, the NDO XDP XMIT callback should return early if either of these...

CVE-2024-57932 gve: guard XDP xmit NDO on existence of xdp queues

In the Linux kernel, the following vulnerability has been resolved: gve: guard XDP xmit NDO on existence of xdp queues In GVE, dedicated XDP queues only exist when an XDP program is installed and the interface is up. As such, the NDO XDP XMIT callback should return early if either of these...

CVE-2024-57932

CVE-2024-57932 is resolved in the Linux kernel. It concerns the GVE/XDP path: dedicated XDP queues exist only when an XDP program is loaded and the interface is up. The NDO XDP XMIT callback must return early if no XDP program is loaded or if the interface is down. Otherwise, priv->num_xdp_que...

[SECURITY] Fedora 41 Update: rsync-3.4.1-1.fc41

Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...

CVE-2025-21651: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: net: hns3: don't auto enable misc vector Currently, there is a time window between misc irq enabled and service task inited. If an interrupte is reported at this time, it will cause warning like below: 16.324639 Call trace:...

RLSA-2025:0325 Important: rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...

rsync security update

An update is available for rsync. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsync utility enables the users to copy and synchronize files locally or...

rsyncd Unauthorized Access

The vulnerability of the rsyncd utility for transferring and synchronizing Rsync files involves the generation of invalid tokens and checksums during the copying process. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2025-23455

Cross-Site Request Forgery CSRF vulnerability in Master Software Solutions WP VTiger Synchronization msstiger allows Stored XSS.This issue affects WP VTiger Synchronization: from n/a through = 1.1.1...

CVE-2025-23455

CVE-2025-23455 is a CSRF-induced vulnerability that allows Stored XSS in the WordPress plugin WP VTiger Synchronization . The issue affects plugin versions “from n/a through 1.1.1.” The connected Red Hat and ENISA entries repeat the same description, confirming the CSRF-enabled Stored XSS conditi...

CVE-2025-23455 WordPress WP VTiger Synchronization plugin <= 1.1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Master Software Solutions WP VTiger Synchronization msstiger allows Stored XSS.This issue affects WP VTiger Synchronization: from n/a through = 1.1.1...

WordPress WP VTiger Synchronization plugin <= 1.1.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin WP VTiger Synchronization versions = 1.1.1...

[SECURITY] Fedora 40 Update: rsync-3.4.0-1.fc40

Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...