23813 matches found
What’s New for Developers: October 2024
In addition to several articles that help you keep your applications and websites safe, we’re sharing news on the latest Akamai PowerShell release, instructions for building a NAT Gateway in a VPC, new docs for migrating to Linode Object Storage, and more...
kernel: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs are actually masked, i.e. if the vCPU is already handling an NMI. KVM's ABI fo...
kernel: kvm: Avoid potential UAF in LPI translation cache
A flaw was found in the Linux kernel pertaining to a potential use-after-free UAF scenario in a system involving Logical Partitioning Interrupts LPI translation cache operations. Specifically, the issue arises when a cache hit occurs concurrently with an operation that invalidates the cache, such...
kernel: i40e: Do not allow untrusted VF to remove administratively set MAC
A flaw was found in Intel network adapters in the Linux kernel, where untrusted virtualized network interfaces can remove MAC addresses set by the system. This flaw allows an attacker with sufficient privileges to cause a denial of service...
Apache CloudStack 输入验证错误漏洞
Apache CloudStack is a suite of Infrastructure as a Service IaaS cloud computing platforms from the Apache Foundation in the United States. The platform is primarily used to deploy and manage large networks of virtual machines. Apache CloudStack has a security vulnerability that can be exploited ...
VisionOS Virtual Keyboard Privilege Escalation
The vulnerability of the virtual keyboard in the VisionOS operating system is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary commands remotely...
UBUNTU-CVE-2024-9594
A security issue was discovered in the Kubernetes Image Builder versions = v0.1.37 where default credentials are enabled during the image build process when using the Nutanix, OVA, QEMU or raw providers. The credentials can be used to gain root access. The credentials are disabled at the conclusi...
UBUNTU-CVE-2024-9486
A security issue was discovered in the Kubernetes Image Builder versions = v0.1.37 where default credentials are enabled during the image build process. Virtual machine images built using the Proxmox provider do not disable these default credentials, and nodes using the resulting images may be...
Consensus Attack
github.com/ethereum/go-ethereum is vulnerable to a Consensus Attack. The vulnerability is due to Geth's pre-compiled dataCopy contract performing a shallow copy on invocation, which allows an attacker to manipulate Ethereum Virtual Machine EVM memory and cause a consensus mismatch between nodes...
mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
...
SUSE CVE-2024-6519
A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape...
Oracle Database Server 安全漏洞
Oracle Database Server is a relational database management system from Oracle Corporation USA. This database management system provides data management, distributed processing, and other functions. A security vulnerability exists in the Java VM of Oracle Database Server. An attacker exploiting th...
Image Builder 安全漏洞
Image Builder is an open source tool from the Kubernetes SIGs for building Kubernetes VM images across multiple infrastructure providers. A security vulnerability exists in Image Builder version v0.1.37 and earlier, which stems from default credentials being enabled during the image building...
vfs: Don't evict inode under the inode lru traversing context
...
drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
...
vhost/vsock: always initialize seqpacket_allow
...
scsi: qla2xxx: During vport delete send async logout explicitly
...
VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
...