CVE-2024-53116 drm/panthor: Fix handling of partial GPU mapping of BOs

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix handling of partial GPU mapping of BOs This commit fixes the bug in the handling of partial mapping of the buffer objects to the GPU, which caused kernel warnings. Panthor didn't correctly handle the case where t...

CVE-2024-53116 drm/panthor: Fix handling of partial GPU mapping of BOs

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix handling of partial GPU mapping of BOs This commit fixes the bug in the handling of partial mapping of the buffer objects to the GPU, which caused kernel warnings. Panthor didn't correctly handle the case where t...

CVE-2024-53116

CVE-2024-53116 concerns the Linux kernel panic/warning scenario in the Panthor DRM/GPU VM path. The description documents a bug in partial GPU mapping of buffer objects (BOs) where Panthor failed to correctly handle mappings that span multiple scatterlists and where the mapping offset did not sta...

CVE-2024-53116: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix handling of partial GPU mapping of BOs This commit fixes the bug in the handling of partial mapping of the buffer objects to the GPU, which caused kernel warnings. Panthor didn't correctly handle the case where t...

OESA-2024-2493 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net: missing check virtio Two missing check in virtionethdrtoskb allowed syzbot to crash kernels again 1. After the skbsegment function the buffer may become...

Mozilla Firefox security vulnerabilities

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A...

PT-2025-3332

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel has been resolved, specifically related to the MIPS Loongson64 architecture. The issue involved fixing PCIe port nodes for ls7a and resolving dtc warnings. A...

CVE-2024-53065

In the Linux kernel, the following vulnerability has been resolved: mm/slab: fix warning caused by duplicate kmemcache creation in kmembucketscreate Commit b035f5a6d852 "mm: slab: reduce the kmalloc minimum alignment if DMA bouncing possible" reduced ARCHKMALLOCMINALIGN to 8 on arm64. However, wi...

DEBIAN-CVE-2024-53065

In the Linux kernel, the following vulnerability has been resolved: mm/slab: fix warning caused by duplicate kmemcache creation in kmembucketscreate Commit b035f5a6d852 "mm: slab: reduce the kmalloc minimum alignment if DMA bouncing possible" reduced ARCHKMALLOCMINALIGN to 8 on arm64. However, wi...

UBUNTU-CVE-2024-53065

In the Linux kernel, the following vulnerability has been resolved: mm/slab: fix warning caused by duplicate kmemcache creation in kmembucketscreate Commit b035f5a6d852 "mm: slab: reduce the kmalloc minimum alignment if DMA bouncing possible" reduced ARCHKMALLOCMINALIGN to 8 on arm64. However, wi...

CVE-2024-53063

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out of memory access The dvbdev contains a static variable used to store dvb minors. The behavior of it depends if CONFIGDVBDYNAMICMINORS is set or not. When not set, dvbregisterdevice won't che...

CVE-2024-50275 arm64/sve: Discard stale CPU state when handling SVE traps

In the Linux kernel, the following vulnerability has been resolved: arm64/sve: Discard stale CPU state when handling SVE traps The logic for handling SVE traps manipulates saved FPSIMD/SVE state incorrectly, and a race with preemption can result in a task having TIFSVE set and TIFFOREIGNFPSTATE...

CVE-2024-50275 arm64/sve: Discard stale CPU state when handling SVE traps

In the Linux kernel, the following vulnerability has been resolved: arm64/sve: Discard stale CPU state when handling SVE traps The logic for handling SVE traps manipulates saved FPSIMD/SVE state incorrectly, and a race with preemption can result in a task having TIFSVE set and TIFFOREIGNFPSTATE...

io.jenkins.plugins:cdevents (>=1-37.v6412b_91c3799, <=1-40.vb_3d2c94f2379), io.jenkins.plugins:pipeline-agent-build-history (>=20.v2cb_6cc0a_7d81, <=34.v570d1a_452f30) +4 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1273.v66c1964f0dfd)

org.jenkins-ci.plugins:script-security MAVEN version 1273.v66c1964f0dfd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:cdevents =1-37.v6412b91c3799, =20.v2cb6cc0a7d81,...

com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.40.0, <=2.54.0), io.jenkins.plugins:autograding (4.2.0) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3806.va_3a_6988277b_2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3806.va3a6988277b2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.amadeus.jenkins.plugins:workflow-cps-global-lib-http...

io.jenkins.plugins:forensics-api (2.4.0), io.jenkins.plugins:warnings-ng (11.0.0) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3853.vb_a_490d892963)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3853.vba490d892963 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:forensics-api 2.4.0 -...

io.jenkins.plugins:pipeline-agent-build-history (>=20.v2cb_6cc0a_7d81, <=22.v0372f41a_2ea_9), io.jenkins.plugins:warnings-ng (>=11.1.0, <=11.2.0) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3867.v535458ce43fd)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3867.v535458ce43fd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:pipeline-agent-build-history...

io.jenkins.plugins:warnings-ng (>=11.2.1, <=11.3.0), org.jenkins-ci.plugins:absint-astree (>=103.v0b_1421a_30c11, <=115.v23dc31226ea_8) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3880.vb_ef4b_5cfd270)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3880.vbef4b5cfd270 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:warnings-ng =11.2.1, =103.v0b1421a30c11...

io.jenkins.plugins:forensics-api (>=2.5.0, <=2.7.0), io.jenkins.plugins:warnings-ng (>=11.4.0, <=11.7.0) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3903.v48a_8836749e9)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3903.v48a8836749e9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:forensics-api =2.5.0, =11.4.0, =11.7.0...

kernel: powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT

A debug warning issue was found in PowerPC pseries code. When DEBUGPREEMPT is enabled, accessing lppacasharedproc triggers spurious preemption warnings because it uses smpprocessorid in preemptible context...