Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Free CQ toggle page after firmware teardown
Free the toggle page only after firmware teardown completes so that
an NQ interrupt arriving during bnxt_qplib_destroy_cq() won't write
the toggle value to an…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Free SRQ toggle page after firmware teardown
Free the toggle page only after firmware teardown completes so that
an NQ interrupt arriving during bnxt_qplib_destroy_srq() won't write
the toggle values to an…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix race in unix socket mediation when peer_path is used
The holding a reference to the peer_sk is not enough to ensure access
to the peer sk path. Accessing the path outside of the state lock
allows for a race with…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
bpf: Guard conntrack opts error writes
The conntrack lookup and allocation kfuncs take an opts pointer
together with an opts__sz argument. The verifier checks only the memory
range described by opts__sz, but the wrappers…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Validate irqchip index in irqfd routing
Sashiko reported that the irqchip index is not validated for LoongArch.
Add validation and reject out-of-range irqchip indexes to avoid indexing
past the routing table's…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task.
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
vduse: hold vduse_lock across IDR lookup in open path
vduse_dev_open() looks up struct vduse_dev through the IDR and then
acquires dev->lock only after vduse_lock has been dropped.
This leaves a window where a concurrent…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()
In vfio_ap_mdev_set_kvm(), kvm->arch.crypto.pqap_hook is set to
&matrix_mdev->pqap_hook before the update locks are acquired and the
mdev list is…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Free CQ toggle page after firmware teardown
Free the toggle page only after firmware teardown completes so that
an NQ interrupt arriving during bnxt_qplib_destroy_cq() won't write
the toggle value to an…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Free SRQ toggle page after firmware teardown
Free the toggle page only after firmware teardown completes so that
an NQ interrupt arriving during bnxt_qplib_destroy_srq() won't write
the toggle values to an…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix race in unix socket mediation when peer_path is used
The holding a reference to the peer_sk is not enough to ensure access
to the peer sk path. Accessing the path outside of the state lock
allows for a race with…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
bpf: Guard conntrack opts error writes
The conntrack lookup and allocation kfuncs take an opts pointer
together with an opts__sz argument. The verifier checks only the memory
range described by opts__sz, but the wrappers…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Validate irqchip index in irqfd routing
Sashiko reported that the irqchip index is not validated for LoongArch.
Add validation and reject out-of-range irqchip indexes to avoid indexing
past the routing table's…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
vduse: hold vduse_lock across IDR lookup in open path
vduse_dev_open() looks up struct vduse_dev through the IDR and then
acquires dev->lock only after vduse_lock has been dropped.
This leaves a window where a concurrent…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()
In vfio_ap_mdev_set_kvm(), kvm->arch.crypto.pqap_hook is set to
&matrix_mdev->pqap_hook before the update locks are acquired and the
mdev list is…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki