CVE-2022-48955

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: fix memory leak in tbnetopen When tbringallocrx failed in tbnetopen, ida that allocated in tbxdomainallocouthopid is not released. Add tbxdomainreleaseouthopid to the error path to release ida...

UBUNTU-CVE-2022-48955

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: fix memory leak in tbnetopen When tbringallocrx failed in tbnetopen, ida that allocated in tbxdomainallocouthopid is not released. Add tbxdomainreleaseouthopid to the error path to release ida...

CVE-2022-48955

CVE-2022-48955 affects the Linux kernel Thunderbolt net path. The issue is a memory leak in tbnet_open() where tb_ring_alloc_rx() failure could leave the ida allocated in tb_xdomain_alloc_out_hopid() unreleased. The documented fix adds tb_xdomain_release_out_hopid() to the error path to release t...

CVE-2022-48955 net: thunderbolt: fix memory leak in tbnet_open()

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: fix memory leak in tbnetopen When tbringallocrx failed in tbnetopen, ida that allocated in tbxdomainallocouthopid is not released. Add tbxdomainreleaseouthopid to the error path to release ida...

CVE-2022-48955 net: thunderbolt: fix memory leak in tbnet_open()

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: fix memory leak in tbnetopen When tbringallocrx failed in tbnetopen, ida that allocated in tbxdomainallocouthopid is not released. Add tbxdomainreleaseouthopid to the error path to release ida...

CVE-2022-48955 net: thunderbolt: fix memory leak in tbnet_open()

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: fix memory leak in tbnetopen When tbringallocrx failed in tbnetopen, ida that allocated in tbxdomainallocouthopid is not released. Add tbxdomainreleaseouthopid to the error path to release ida...

AZL-52114 CVE-2024-50003 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix system hang while resume with TBT monitor Why Connected with a Thunderbolt monitor and do the suspend and the system may hang while resume. The TBT monitor HPD will be triggered during the resume procedure an...

DEBIAN-CVE-2024-50003

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix system hang while resume with TBT monitor Why Connected with a Thunderbolt monitor and do the suspend and the system may hang while resume. The TBT monitor HPD will be triggered during the resume procedure an...

UBUNTU-CVE-2024-50003

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix system hang while resume with TBT monitor Why Connected with a Thunderbolt monitor and do the suspend and the system may hang while resume. The TBT monitor HPD will be triggered during the resume procedure an...

CVE-2024-50003 drm/amd/display: Fix system hang while resume with TBT monitor

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix system hang while resume with TBT monitor Why Connected with a Thunderbolt monitor and do the suspend and the system may hang while resume. The TBT monitor HPD will be triggered during the resume procedure an...

CVE-2024-50003 drm/amd/display: Fix system hang while resume with TBT monitor

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix system hang while resume with TBT monitor Why Connected with a Thunderbolt monitor and do the suspend and the system may hang while resume. The TBT monitor HPD will be triggered during the resume procedure an...

CVE-2024-50003: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix system hang while resume with TBT monitor Why Connected with a Thunderbolt monitor and do the suspend and the system may hang while resume. The TBT monitor HPD will be triggered during the resume procedure an...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a Thunderbolt monitor being connected during recovery, which could cause the system to hang during recovery...

CVE-2022-48955: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: fix memory leak in tbnetopen When tbringallocrx failed in tbnetopen, ida that allocated in tbxdomainallocouthopid is not released. Add tbxdomainreleaseouthopid to the error path to release ida...

PT-2024-33842

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A flaw in the Linux kernel has been identified, causing the system to hang when resuming with a Thunderbolt TBT monitor. This issue occurs because the TBT monitor HPD is triggered during the...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-46702)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46702 advisory. - In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Mark XDomain as unplugged...

thunderbolt: Mark XDomain as unplugged when router is removed

...

SUSE SLES12: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2024:3566-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3566-1 advisory. The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

Security Bulletin: Vulnerability in linux affects IBM Integrated Analytics System [CVE-2024-27060]

Summary Redhat provided linux is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2024-27060 Vulnerability Details CVEID:CVE-2024-27060 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a null pointer dereference...

Direct Memory Access (DMA) attacks. Risks, techniques, and mitigations in hardware hacking

TL;DR Direct Memory Access DMA attacks are a powerful class of attack that give read and write access to the memory of a target system, bypassing the main CPU to gain kernel privileges. We became interested in DMA attacks for expanding the toolkit for rooting embedded devices. A lot of embedded...