UBUNTU-CVE-2024-46711

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix ID 0 endp usage after multiple re-creations 'localaddrused' and 'addaddraccepted' are decremented for addresses not related to the initial subflow ID0, because the source and destination addresses of the initial...

AZL-49182 CVE-2024-45010 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only mark 'subflow' endp as available Adding the following warning ... WARNONONCEmsk-pm.localaddrused == 0 ... before decrementing the localaddrused counter helped to find a bug when running the "remove single address"...

UBUNTU-CVE-2024-45010

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only mark 'subflow' endp as available Adding the following warning ... WARNONONCEmsk-pm.localaddrused == 0 ... before decrementing the localaddrused counter helped to find a bug when running the "remove single address"...

CVE-2024-45743

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45742

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45729

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45728

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45727

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45726

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45725

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45724

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45157

CVE-2024-45157 affects Mbed TLS releases prior to 2.28.9 and 3.x prior to 3.6.1, where the user-selected algorithm is not honored. Specifically, enabling MBEDTLS_PSA_HMAC_DRBG_MD_TYPE does not switch PSA to HMAC_DRBG; HMAC_DRBG is used only when MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG and MBEDTLS_CTR_DRB...

PT-2024-29987

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2024.4.4 authentik versions 2024.6.0-rc1 through 2024.6.3 authentik versions prior to 2024.8.0 Description The issue concerns an open-source Identity Provider where several API endpoints can be accessed by users...

CVE-2024-40794

This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Private Browsing tabs may be accessed without authentication...

PT-2024-29166 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises when replacing an old shmem folio with a new one, causing mem cgroup migrate to clear the old folio's memcg data. As a result, the old folio cannot obtain the correct...

UBUNTU-CVE-2024-39473

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension If a process module does not have base config extension then the same format applies to all of it's inputs and the process-baseconfigext i...

UBUNTU-CVE-2022-48722

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: ca8210: Stop leaking skb's Upon error the ieee802154xmitcomplete helper is not called. Only ieee802154wakequeue is called manually. We then leak the skb structure. Free the skb structure upon error before returni...

CVE-2020-35154

Rejected reason: CVE ID was once reserved, but never used...

CVE-2020-27354

Rejected reason: CVE ID was once reserved, but never used...

CVE-2024-36998

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...