CVE-2024-47717 RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data With the latest Linux-6.11-rc3, the below NULL pointer crash is observed when SBI PMU snapshot is enabled for the guest and the guest is forcefully powered-off...

CVE-2024-47717 RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data With the latest Linux-6.11-rc3, the below NULL pointer crash is observed when SBI PMU snapshot is enabled for the guest and the guest is forcefully powered-off...

CVE-2024-47717 RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data With the latest Linux-6.11-rc3, the below NULL pointer crash is observed when SBI PMU snapshot is enabled for the guest and the guest is forcefully powered-off...

CVE-2024-47717

Technical details for CVE-2024-47717 are not publicly provided in the supplied documents; monitor for updates.

CVE-2024-47717: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data With the latest Linux-6.11-rc3, the below NULL pointer crash is observed when SBI PMU snapshot is enabled for the guest and the guest is forcefully powered-off...

CVE-2024-33453

The esp-idf development framework version 5.1 by Espressif Systems is vulnerable to a buffer overflow in the externalId component. This flaw arises from inadequate object-level access control , allowing an authenticated remote attacker to manipulate the id parameter in a URL to access and potenti...

CVE-2024-33453

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component...

Hyper-V Hardware Virtualization DoS

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to improper checking of the return value of a function. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

kernel: net: openvswitch: fix overwriting ct original tuple for ICMPv6

A flaw was found in the Linux kernel's Open vSwitch OVS component. When processing Internet Control Message Protocol for IPv6 ICMPv6 packets during datapath execution commands, the kernel inadvertently overwrites connection tracking metadata shared in memory. A local user can exploit this...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-44966)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44966 advisory. - In the Linux kernel, the following vulnerability has been resolved: binfmtflat: Fix corruption when not...

Hyper-V Hardware Virtualization DoS

The vulnerability of the Hyper-V hardware virtualization technology in Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2024-40542)

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. A denial of service vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by attackers to cause a denial of service...

Fedora 39 : chromium (2024-5ee2c7c696)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5ee2c7c696 advisory. Update to 129.0.6668.100 CVE-2024-9602: Type Confusion in V8 CVE-2024-9603: Type Confusion in V Tenable has extracted the preceding description bloc...

Microsoft Windows Hyper-V Security Feature Bypass Vulnerability (CNVD-2024-40541)

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. A security feature bypass vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to bypass certain features...

Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2024-40540)

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. A remote code execution vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to perform remote execution...

Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2024-40539)

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. A denial of service vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by attackers to cause a denial of service...

Fedora 40 : chromium (2024-4ab266b9ca)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4ab266b9ca advisory. Update to 129.0.6668.100 CVE-2024-9602: Type Confusion in V8 CVE-2024-9603: Type Confusion in V Tenable has extracted the preceding description bloc...

CVE-2024-48773

An issue in WoFit v.7.2.3 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48827

An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function...

Windows Hyper-V Code Execution

The vulnerability of the Windows Hyper-V hardware virtualization system is related to the activation of functions from an unverified and uncontrolled area. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...