Aggregator

Critical Salesforce Data Protec

A vulnerability classified as problematic was found in Linux Kernel up to 6.6.43/6.10.2. Affected by this vulnerability is an unknown functionality of the component Fragmented Packet Handler. The manipulation leads to allocation of resources. This vulnerability is known as CVE-2024-43881. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.10.7. This issue affects some unknown processing of the component x1e80100. The manipulation leads to state issue. The identification of this vulnerability is CVE-2024-46708. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.46/6.10.5. This affects the function sanity_check_extent_cache. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2024-44941. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.10.2 on ARM64. It has been rated as critical. This issue affects the function getpagesize in the library lib/xarray.c of the component huge_memory. The manipulation leads to resource consumption. The identification of this vulnerability is CVE-2024-42317. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Linux Kernel up to 6.1.102/6.6.43/6.10.2. This vulnerability affects the function acpi_get_first_physical_node. The manipulation leads to improper update of reference count. This vulnerability was named CVE-2024-43818. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.6.50/6.10.9. Affected is the function new_vmap_block. The manipulation leads to improper validation of array index. This vulnerability is traded as CVE-2024-46847. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.6.50/6.10.9 and classified as critical. This vulnerability affects the function start_kthread of the component osnoise. The manipulation leads to null pointer dereference. This vulnerability was named CVE-2024-46788. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.10.7 and classified as critical. Affected by this issue is some unknown functionality of the component DRM. The manipulation leads to use after free. This vulnerability is handled as CVE-2024-46683. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.6.45/6.10.4. Affected by this vulnerability is the function extent_write_locked_range of the component btrfs. The manipulation leads to buffer overflow. This vulnerability is known as CVE-2024-44972. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.1.102/6.6.43/6.10.2 and classified as critical. Affected by this vulnerability is the function v4l2_async_create_ancillary_links of the component async. The manipulation leads to null pointer dereference. This vulnerability is known as CVE-2024-43833. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.102/6.6.43/6.10.2 and classified as problematic. This issue affects the function rcar_pcie_wakeup. The manipulation leads to state issue. The identification of this vulnerability is CVE-2024-43876. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.10.4. This issue affects the function event_release. The manipulation leads to use after free. The identification of this vulnerability is CVE-2024-43891. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.10.6 and classified as critical. Affected by this issue is the function partcmd_update. The manipulation leads to denial of service. This vulnerability is handled as CVE-2024-44975. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.6.47/6.10.6. This affects an unknown part of the component nouveau. The manipulation leads to allocation of resources. This vulnerability is uniquely identified as CVE-2024-45012. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.6.50/6.10.9 and classified as critical. Affected by this vulnerability is the function ice_xdp. The manipulation leads to null pointer dereference. This vulnerability is known as CVE-2024-46765. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

Fourteen North Korean nationals have been indicted for their role in a long-running scam where they

Iranian threat actors are utilizing a new malware named IOCONTROL to compromise Internet of

Author:(1) David Staines.Table of LinksAbstract1 Introduction2 Mathematical Arguments3 Outli