PT-2025-2459

Name of the Vulnerable Software and Affected Versions: Rara Theme Education Zone versions 1.3.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the...

WordPress plugin Education Zone 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an issue in the nfscommon subsystem that incorrectly holds an RCU in the RCU read-side critical zone...

tzdata bug fix and enhancement update

An update is available for tzdata. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tzdata packages contain data files with rules for various time zones. Bug...

SUSE CVE-2024-53113

In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer dereference in allocpagesbulknoprof We triggered a NULL pointer dereference for ac.preferredzoneref-zone in allocpagesbulknoprof when the task is migrated between cpusets. When cpuset is enabled, in...

AZL-54188 CVE-2024-53113 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer dereference in allocpagesbulknoprof We triggered a NULL pointer dereference for ac.preferredzoneref-zone in allocpagesbulknoprof when the task is migrated between cpusets. When cpuset is enabled, in...

UBUNTU-CVE-2024-53113

In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer dereference in allocpagesbulknoprof We triggered a NULL pointer dereference for ac.preferredzoneref-zone in allocpagesbulknoprof when the task is migrated between cpusets. When cpuset is enabled, in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the mlx5tcctentryaddrule function in the net/mlx5e component, where the zonerule-attr is used...

Exploit for Cross-site Scripting in Sensaphone Web600_Firmware

SENSAPHONE VULNERABILITY DISCLOSURE Summary In mid-Sep...

OESA-2024-2446 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after-free in dozonefinish Shinichiro reported the following use-after-free triggered by the device replace operation in fstests btrfs/070...

The vulnerability of the zoned kernel component in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the zoned kernel component in the Linux operating system is related to improper locking of resources in the btrfszoneactivate function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the edna Chat Center’s customer request processing system, related to improper access control, allows a violator to gain unauthorized access to protected information.

The vulnerability of the edna Chat Center’s customer request processing system is related to improper access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a request with a client identifier from ...

The vulnerability of the pstore/zone components in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the pstore/zone components in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the pszkmsgread function. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20241114-01

Vulnerability of net/rds components of Linux operating system kernel is related to dereferencing of NULL pointer in the rdsrdmamap function in net/rds/rdma.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the nftables component of the...

kernel: NULL pointer dereference in zone registration error path

is a security vulnerability in the Linux kernel, specifically within the thermal management subsystem. This vulnerability is a NULL pointer dereference that occurs in the thermalzonedeviceregisterwithtrips function during the thermal zone registration error path. This issue can cause crashes and...

kernel: thermal/debugfs: Free all thermal zone debug memory on zone removal

In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Free all thermal zone debug memory on zone removal Because thermaldebugtzremove does not free all memory allocated for thermal zone diagnostics, some of that memory becomes unreachable after freeing the thermal...

kernel: drm/amdgpu: Init zone device and drm client after mode-1 reset on reload

No description is available for this CVE...

kernel: mm/page_table_check: fix crash on ZONE_DEVICE

A vulnerability was found in the Linux kernel's mm/pagetablecheck component, specifically related to ZONEDEVICE pages. When page-table-check is enabled, attempting to map DAX memory can lead to a kernel crash due to invalid checks on these pages, which do not allocate pageext...

kernel: thermal/debugfs: Fix two locking issues with thermal zone debug

In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Fix two locking issues with thermal zone debug With the current thermal zone locking arrangement in the debugfs code, user space can open the "mitigations" file for a thermal zone before the zone's debugfs pointe...

PT-2025-3600

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a vulnerability in the Linux kernel where a disk revalidation changing the conventional zones bitmap of a disk could cause invalid memory references when using the dis...