CVE-2024-50140 sched/core: Disable page allocation in task_tick_mm_cid()

In the Linux kernel, the following vulnerability has been resolved: sched/core: Disable page allocation in tasktickmmcid With KASAN and PREEMPTRT enabled, calling taskworkadd in tasktickmmcid may cause the following splat. 63.696416 BUG: sleeping function called from invalid context at...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly handling condresched in the nsimdevtrapreportwork function...

Leveraging Wazuh for Zero Trust security

Zero Trust security changes how organizations handle security by doing away with implicit trust while continuously analyzing and validating access requests. Contrary to perimeter-based security, users within an environment are not automatically trusted upon gaining access. Zero Trust security...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which originates in the nfsd module, where the synchronization mode is not used when canceling nfsdshrinkerwork, which could le...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure of the RDMA/mad module to properly handle lock contention when handling timeout work requests, whi...

SUSE CVE-2024-50079

In the Linux kernel, the following vulnerability has been resolved: iouring/sqpoll: ensure task state is TASKRUNNING when running taskwork When the sqpoll is exiting and cancels pending work items, it may need to run taskwork. If this happens from within iouringcancelgeneric, then it may be under...

UBUNTU-CVE-2024-50079

In the Linux kernel, the following vulnerability has been resolved: iouring/sqpoll: ensure task state is TASKRUNNING when running taskwork When the sqpoll is exiting and cancels pending work items, it may need to run taskwork. If this happens from within iouringcancelgeneric, then it may be under...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not ensuring that the task status is TASKRUNNING when running taskwork, which could result in a warning to t...

SUSE CVE-2024-49924

In the Linux kernel, the following vulnerability has been resolved: fbdev: pxafb: Fix possible use after free in pxafbtask In the pxafbprobe function, it calls the pxafbinitfbinfo function, after which &fbi-task is associated with pxafbtask. Moreover, within this pxafbinitfbinfo function, the...

SUSE CVE-2024-49874

In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Fix use after free vulnerability in svci3cmaster Driver Due to Race Condition In the svci3cmasterprobe function, &master-hjwork is bound with svci3cmasterhjwork, &master-ibiwork is bound with svci3cmasteribiwork...

SUSE CVE-2024-49953

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash caused by calling xfrmstatedelete twice The km.state is not checked in driver's delayed work. When xfrmstatecheckexpire is called, the state can be reset to XFRMSTATEEXPIRED, even if it is XFRMSTATEDEAD...

SUSE CVE-2024-49966

In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqisyncwork before freeing oinfo ocfs2globalreadinfo will initialize and schedule dqisyncwork at the end, if error occurs after successfully reading global quota, it will trigger the following warning with...

SUSE CVE-2024-49981

In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free bug in venusremove due to race condition in venusprobe, core-work is bound with venussyserrorhandler, which is used to handle error. The code use core-syserrdone to make sync work. The core-work i...

CVE-2024-49657

Missing Authorization vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 3D Work In Progress: from n/a through = 1.0.3...

CVE-2024-49652

CVE-2024-49652 concerns the WordPress plugin ReneeCussack 3D Work In Progress (versions n/a through 1.0.3). The vulnerability is an Unrestricted Upload of File with Dangerous Type, enabling an attacker to upload a web shell to the web server. According to Patchstack, this is a high-severity issue...

CVE-2024-49652 WordPress 3D Work In Progress plugin <= 1.0.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Upload a Web Shell to a Web Server.This issue affects 3D Work In Progress: from n/a through = 1.0.3...

CVE-2024-49657 WordPress 3D Work In Progress plugin <= 1.0.3 - Arbitrary File Deletion vulnerability

Missing Authorization vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 3D Work In Progress: from n/a through = 1.0.3...

CVE-2024-49657

CVE-2024-49657 : WordPress plugin “3D Work In Progress” (RenéeCussack)

The vulnerability of the irq_process_work_list() function in the Linux kernel’s DMA driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the irqprocessworklist function in the drivers/dma/idxd/irq.c file of the Linux DMA driver core is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the Messages component of the Oracle Work in Process software solution for manufacturing processes allows a malicious individual to gain unauthorized access to read, modify, or delete data. This vulnerability exists in the Oracle E-Business Suite software.

The vulnerability of the Messages component in the Oracle Work in Process software for managing manufacturing processes is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to read,...