Categoria: CVE

CVE-2024-53087 | Linux Kernel up to 6.11.7 xe Privilege Escalation (2f92b77a8ce0/af797b831d89)

A vulnerability has been found in Linux Kernel up to 6.11.7 and classified as problematic. This vulnerability affects unknown code of the component xe. The manipulation leads to Privilege Escalation. This vulnerability was named CVE-2024-53087. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-53085 | Linux Kernel up to 6.11.7 tpm_pm_suspend random values (bc203fe416ab/9265fed6db60)

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.11.7. This affects the function tpm_pm_suspend. The manipulation leads to insufficiently random values. This vulnerability is uniquely identified as CVE-2024-53085. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-53065 | Linux Kernel up to 6.11.7 slab kmalloc state issue (1b47f9febf48/9c9201afebea)

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.11.7. Affected by this issue is the function kmalloc of the component slab. The manipulation leads to state issue. This vulnerability is handled as CVE-2024-53065. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-53057 | Linux Kernel up to 6.11.6 qdisc_tree_reduce_backlog iteration

A vulnerability classified as critical was found in Linux Kernel up to 6.11.6. Affected by this vulnerability is the function qdisc_tree_reduce_backlog. The manipulation leads to excessive iteration. This vulnerability is known as CVE-2024-53057. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-53086 | Linux Kernel up to 6.11.7 drm xe_sync_in_fence_get Privilege Escalation (96397b1e25dd/64a2b6ed4bfd)

A vulnerability classified as problematic has been found in Linux Kernel up to 6.11.7. Affected is the function xe_sync_in_fence_get of the component drm. The manipulation leads to Privilege Escalation. This vulnerability is traded as CVE-2024-53086. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-53088 | Linux Kernel up to 5.15.171/6.1.116/6.6.60/6.11.7 i40e_add_filter race condition

A vulnerability was found in Linux Kernel up to 5.15.171/6.1.116/6.6.60/6.11.7. It has been rated as problematic. This issue affects the function i40e_add_filter. The manipulation leads to race condition. The identification of this vulnerability is CVE-2024-53088. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-53054 | Linux Kernel up to 6.1.115/6.6.59/6.11.6 cgroup hung_task deadlock

A vulnerability was found in Linux Kernel up to 6.1.115/6.6.59/6.11.6. It has been declared as problematic. This vulnerability affects the function hung_task of the component cgroup. The manipulation leads to deadlock. This vulnerability was named CVE-2024-53054. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-53083 | Linux Kernel up to 6.6.60/6.11.7 qcom-pmic hdr_len/txbuf_len uninitialized pointer (35925e2b7b40/74d8cee747b3/029778a4fd2c)

A vulnerability was found in Linux Kernel up to 6.6.60/6.11.7. It has been classified as problematic. This affects an unknown part of the component qcom-pmic. The manipulation of the argument hdr_len/txbuf_len leads to uninitialized pointer. This vulnerability is uniquely identified as CVE-2024-53083. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2017-13315 | Google Android 6/6.0.1/7/8/8.1 DcParamObject.java writeToParcel/createFromParcel permission

A vulnerability was found in Google Android 6/6.0.1/7/8/8.1 and classified as critical. Affected by this issue is the function writeToParcel/createFromParcel of the file DcParamObject.java. The manipulation leads to permission issues. This vulnerability is handled as CVE-2017-13315. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to apply a patch to fix this...

Per saperne di più

CVE-2024-48992 | needrestart up to 3.7 Environment Variable RUBYLIB Local Privilege Escalation

A vulnerability has been found in needrestart up to 3.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Environment Variable Handler. The manipulation of the argument RUBYLIB leads to Local Privilege Escalation. This vulnerability is known as CVE-2024-48992. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-51844 | Kiran Patil Location Click Map Plugin up to 1.0 on WordPress cross site scripting

A vulnerability has been found in Kiran Patil Location Click Map Plugin up to 1.0 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-51844. The attack can be launched remotely. There is no exploit...

Per saperne di più
Caricamento