DEBIAN-CVE-2021-47257

In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: fix null deref in parse dev addr Fix a logic error that could result in a null deref if the user sets the mode incorrectly for the given addr type...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null deref that could result if the user sets the wrong mode for a given address type...

PT-2024-11316 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the powerpc/bpf component of the Linux kernel, where a check added to the powerpc64 JIT did not look at the correct BPF instruction. This resulted in programs...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the presence of a wrong path...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the presence of a wrong path...

AZL-67737 CVE-2024-35839 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: replace physindev with physinif in nfbridgeinfo An skb can be added to a neigh-arpqueue while waiting for an arp reply. Where original skb's skb-dev can be different to neigh's neigh-dev. For instance in case o...

CVE-2024-21813

Exposure of resource to wrong sphere in some IntelR DTT software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21813

Exposure of resource to wrong sphere in some IntelR DTT software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21813

Exposure of resource to wrong sphere in some IntelR DTT software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Dynamic Tuning Technology 安全漏洞

Intel Dynamic Tuning Technology is a technology from Intel Corporation that enables smarter and more efficient performance management by dynamically tuning processor and system performance parameters. A security vulnerability exists in Intel Dynamic Tuning Technology, which arises from an issue...

amphp/artax Cookie leakage to wrong origins and non-restricted cookie acceptance

In artax version before 1.0.6 and 2 before 2.0.6, cookies of foo.bar.example.com were leaked to foo.bar. Additionally, any site could set cookies for any other site. Artax fixed this issue by following newer browser implementations now. Cookies can only be set on domains higher or equal to the...

asymmetricrypt/asymmetricrypt Padding Oracle Vulnerability in RSA Encryption

The encryption and decryption process were vulnerable against the Bleichenbacher's attack, which is a padding oracle vulnerability disclosed in the 98'. The issue was about the wrong padding utilized, which allowed to retrieve the encrypted content. The OPENSSLPKCS1PADDING version, aka PKCS v1.5...

PT-2024-10053 · Intel · Intel Dtt

Name of the Vulnerable Software and Affected Versions: Intel DTT software affected versions not specified Description: The issue is related to the exposure of resources to the wrong sphere in some Intel DTT software installers, potentially allowing an authenticated user to enable escalation of...

The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.

The vulnerability of Xenstore information storage in Xen hypervisors is related to the exploitation of a wrong pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the microprogrammed software of the MELSEC iQ-R Series Safety CPU and Series SIL2 Process CPU modules lies in the overly restrictive mechanism for blocking user accounts. This allows a malicious person to lock out the user account.

The vulnerability of the microprogrammed software of MELSEC iQ-R Series Safety CPUs and Series SIL2 Process CPUs is related to an overly restrictive mechanism for blocking user accounts. Exploiting this vulnerability could allow a malicious actor to lock out a user’s account by entering a known...

PT-2024-25818 · Unknown · Spacemesh Api +1

Name of the Vulnerable Software and Affected Versions: go-spacemesh versions prior to 1.5.2-hotfix1 Spacemesh API versions prior to 1.37.1 Description: The issue allows nodes to publish activations transactions ATXs that reference an incorrect previous ATX of the Smesher that created the ATX. Thi...

UBUNTU-CVE-2022-48694

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix drain SQ hang with no completion SW generated completions for outstanding WRs posted on SQ after QP is in error target the wrong CQ. This causes the ibdrainsq to hang with no completion. Fix this to generate...

CVE-2022-48694 RDMA/irdma: Fix drain SQ hang with no completion

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix drain SQ hang with no completion SW generated completions for outstanding WRs posted on SQ after QP is in error target the wrong CQ. This causes the ibdrainsq to hang with no completion. Fix this to generate...

PT-2024-7187

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the function dcn302 fpu update bw bounding box in the drm/amd/display module, where an incorrect index calculation can occur. This may allow an attacker to impact...

kernel: ext4: set goal start correctly in ext4_mb_normalize_request

A flaw was found in the Linux kernel's ext4 filesystem block allocator. In ext4mbnormalizerequest, the goal start was being set incorrectly acfex instead of acgex, and boundary validation was missing. Without proper range checking, an underflow in ar-pright - size could pass an invalid value to...