NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Microsoft Mariner
view advisory published 2024-08-13
Microsoft heeft kwetsbaarheden verholpen in Mariner (Azure Linux).
01
describes (86)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-42237US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
firmware: cs_dsp: Validate payload length before processing block
Move the payload length check in cs_dsp_load… | ||||
| CVE-2024-42083US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ionic: fix kernel panic due to multi-buffer handling
Currently, the ionic_run_xdp() doesn't handle multi-buffe… | ||||
| CVE-2024-42082US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
xdp: Remove WARN() from __xdp_reg_mem_model()
syzkaller reports a warning in __xdp_reg_mem_model().
The warni… | ||||
| CVE-2024-42080US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
RDMA/restrack: Fix potential invalid address access
struct rdma_restrack_entry's kern_name was set to KBUILD_M… | ||||
| CVE-2024-42078US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
nfsd: initialise nfsd_info.mutex early.
nfsd_info.mutex can be dereferenced by svc_pool_stats_start()
immediat… | ||||
| CVE-2024-42077US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix DIO failure due to insufficient transaction credits
The code in ocfs2_dio_end_io_write() estimates… | ||||
| CVE-2024-42076US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: can: j1939: Initialize unused data in j1939_send_one()
syzbot reported kernel-infoleak in raw_recvmsg() [… | ||||
| CVE-2024-42075US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix remap of arena.
The bpf arena logic didn't account for mremap operation. Add a refcnt for
multiple mm… | ||||
| CVE-2024-42074US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ASoC: amd: acp: add a null check for chip_pdev structure
When acp platform device creation is skipped, chip->c… | ||||
| CVE-2024-42073US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems
The following two shared buffer operatio… | ||||
| CVE-2024-42072US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix may_goto with negative offset.
Zac's syzbot crafted a bpf prog that exposed two bugs in may_goto.
The… | ||||
| CVE-2024-42071US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ionic: use dev_consume_skb_any outside of napi
If we're not in a NAPI softirq context, we need to be careful
a… | ||||
| CVE-2024-42070US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
register store validation for N… | ||||
| CVE-2024-42068US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
set_memory_ro() can fail, leaving m… | ||||
| CVE-2024-41110US | —OT elevated | Exploit | ||
Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow a… | ||||
| CVE-2024-40898US | high7.5 | Exploit | ||
SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests.
Users… | ||||
| CVE-2024-6655US | — | — | ||
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory. | ||||
| CVE-2022-48841US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats()
It is possible to do NULL pointer derefere… | ||||
| CVE-2022-48788US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
nvme-rdma: fix possible use-after-free in transport error_recovery work
While nvme_rdma_submit_async_event_wor… | ||||
| CVE-2024-40902US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
jfs: xattr: fix buffer overflow for invalid xattr
When an xattr size is not what is expected, it is printed ou… | ||||
showing 20 of 86
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan