SUSE CVE-2024-36472

In GNOME Shell through 45.7, a portal helper can be launched automatically without user confirmation based on network responses provided by an adversary e.g., an adversary who controls the local Wi-Fi network, and subsequently loads untrusted JavaScript code, which may lead to resource consumptio...

SUSE CVE-2021-47494

In the Linux kernel, the following vulnerability has been resolved: cfg80211: fix management registrations locking The management registrations locking was broken, the list was locked for each wdev, but cfg80211mgmtregistrationsupdate iterated it without holding all the correct spinlocks, causing...

Important: Red Hat Security Advisory: linux-firmware security update

An update for linux-firmware is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi

An improper access control flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow a privileged user to enable escalation of privilege via local access...

hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi

Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to enable escalation of privilege via local access...

hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi

Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to enable escalation of privilege via local access...

TP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks

A maximum-severity security flaw has been disclosed in the TP-Link Archer C5400X gaming router that could lead to remote code execution on susceptible devices by sending specially crafted requests. The vulnerability, tracked as CVE-2024-5035, carries a CVSS score of 10.0. It impacts all versions ...

SUSE CVE-2021-47415

In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mvm: Fix possible NULL dereference In iwlmvmremovetimeevent check that 'tedata-vif' is NULL before dereferencing it...

Tenda AX1806 adv.iptv.stballvlans parameter handling stack overflow vulnerability

The Tenda AX1806 is a home wireless router device. The Tenda AX1806 suffers from a stack overflow vulnerability that originates from adv.iptv.stballvlans in the function formSetIptv, which can be exploited by an attacker to execute arbitrary code...

D-Link DI-7003G security vulnerability

The D-Link DI-7003G is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DI-7003G that originates from a vulnerability that allows an attacker to hijack a TCP session, potentially resulting in a denial of service attack...

CVE-2021-47436

In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path Commit 7c75bde329d7 "usb: musb: musbdsps: requestirq after initializing musb" has inverted the calls to dspssetupoptionalvbusirq and dspscreatemusbpdev without updating correctly the erro...

IEEE 802.11 Service Data Protection

The vulnerability of the IEEE 802.11 Wi-Fi standard lies in the insufficient protection of service data during the processing of SSID identifiers. Exploiting this vulnerability allows a malicious actor to intercept traffic by replacing the access points...

Security Advisory 0097

Security Advisory 0097 PDF Date: May 24, 2024 Revision | Date | Changes ---|---|--- 1.0 | May 24, 2024 | Initial release The CVE-ID tracking this issue: CVE-2023-52424 CVSSv3.1 Base Score: Not indicated by NVD as of 5/23/2024 Description Arista Networks is providing this security update in respon...

CVE-2024-5295

CVE-2024-5295 affects the D-Link G416 wireless router. The flaw is a command injection in the HTTP service on TCP port 80, caused by improper validation of a user-supplied string before it is used to execute a system call. This allows network-adjacent attackers to execute arbitrary code with root...

SUSE CVE-2023-52829

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound write in ath12kwmiexthalregcaps regcap.phyid is extracted from WMI event and could be an unexpected value in case some errors happen. As a result out-of-bound write may occur to...

hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi

Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to enable escalation of privilege via local access...

CVE-2021-47436

In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path Commit 7c75bde329d7 "usb: musb: musbdsps: requestirq after initializing musb" has inverted the calls to dspssetupoptionalvbusirq and dspscreatemusbpdev without updating correctly the erro...

CVE-2021-47436

In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path Commit 7c75bde329d7 "usb: musb: musbdsps: requestirq after initializing musb" has inverted the calls to dspssetupoptionalvbusirq and dspscreatemusbpdev without updating correctly the erro...

CVE-2021-47436

CVE-2021-47436 – Linux kernel USB Musb DSPS probe error path fix . The connected Astra/Unity advisories confirm a root cause in the Musb DSPS driver where dsps_setup_optional_vbus_irq() and dsps_create_musb_pdev() were inverted in the error path, leaving a platform device registered but not unreg...

CVE-2021-47436 usb: musb: dsps: Fix the probe error path

In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path Commit 7c75bde329d7 "usb: musb: musbdsps: requestirq after initializing musb" has inverted the calls to dspssetupoptionalvbusirq and dspscreatemusbpdev without updating correctly the erro...