Security Warnings — Week: 2024-W46

netdevsim: use cond_resched() in nsim_dev_trap_report_work()

2024-11-12 CVE-2024-50155

highMicrosoft MSRC 2024-W46

netfilter: bpf: must hold reference on net namespace

2024-11-12 CVE-2024-50130

highMicrosoft MSRC 2024-W46

netfilter: Fix use-after-free in get_info()

2024-11-12 CVE-2024-50257

highMicrosoft MSRC 2024-W46

netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()

2024-11-12 CVE-2024-50256

mediumMicrosoft MSRC 2024-W46

netfilter: nft_payload: sanitize offset and length before calling skb_checksum()

2024-11-12 CVE-2024-50251

mediumMicrosoft MSRC 2024-W46

nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net

2024-11-12 CVE-2024-50121

highMicrosoft MSRC 2024-W46

nilfs2: fix kernel bug due to missing clearing of checked flag

2024-11-12 CVE-2024-50230

highMicrosoft MSRC 2024-W46

nilfs2: fix potential deadlock with newly created symlinks

2024-11-12 CVE-2024-50229

mediumMicrosoft MSRC 2024-W46

nilfs2: propagate directory read errors from nilfs_find_entry()

2024-11-12 CVE-2024-50202

mediumMicrosoft MSRC 2024-W46

nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error

2024-11-12 CVE-2024-50096

mediumMicrosoft MSRC 2024-W46

NTLM Hash Disclosure Spoofing Vulnerability

2024-11-12 CVE-2024-43451

mediumMicrosoft MSRC 2024-W46

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on

2024-11-12 CVE-2024-0134

mediumMicrosoft MSRC 2024-W46

nvme-multipath: defer partition scanning

2024-11-12 CVE-2024-53093

mediumMicrosoft MSRC 2024-W46

nvmet-auth: assign dh_key to NULL after kfree_sensitive

2024-11-12 CVE-2024-50215

highMicrosoft MSRC 2024-W46

octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()

2024-11-12 CVE-2024-50145

mediumMicrosoft MSRC 2024-W46

OOB access in ldap_escape

2024-11-12 CVE-2024-8932

criticalMicrosoft MSRC 2024-W46

Pam: improper hostname interpretation in pam_access leads to access control bypass

2024-11-12 CVE-2024-10963

highMicrosoft MSRC 2024-W46

Partner.Microsoft.Com Elevation of Privilege Vulnerability

2024-11-12 CVE-2024-49035

highMicrosoft MSRC 2024-W46

phy: qcom: qmp-usb: fix NULL-deref on runtime suspend

2024-11-12 CVE-2024-50240

mediumMicrosoft MSRC 2024-W46

pinctrl: ocelot: fix system hang on level based interrupts

2024-11-12 CVE-2024-50196

mediumMicrosoft MSRC 2024-W46

platform/x86/amd/pmc: Detect when STB is not available

2024-11-12 CVE-2024-53072

mediumMicrosoft MSRC 2024-W46

PostgreSQL libpq retains an error message from man-in-the-middle

2024-11-12 CVE-2024-10977

lowMicrosoft MSRC 2024-W46

PostgreSQL PL/Perl environment variable changes execute arbitrary code

2024-11-12 CVE-2024-10979

highMicrosoft MSRC 2024-W46

PostgreSQL row security below e.g. subqueries disregards user ID changes

2024-11-12 CVE-2024-10976

mediumMicrosoft MSRC 2024-W46

PostgreSQL SET ROLE SET SESSION AUTHORIZATION reset to wrong user ID

2024-11-12 CVE-2024-10978

mediumMicrosoft MSRC 2024-W46

Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()

2024-11-12 CVE-2024-7730

highMicrosoft MSRC 2024-W46

Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()

2024-11-12 CVE-2024-3447

mediumMicrosoft MSRC 2024-W46

Qualys discovered that if unsanitized input was used with the library Modules: ScanDeps

2024-11-12 CVE-2024-10224

mediumMicrosoft MSRC 2024-W46

RDMA/bnxt_re: Add a check for memory allocation

2024-11-12 CVE-2024-50209

highMicrosoft MSRC 2024-W46

RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop

2024-11-12 CVE-2024-50157

mediumMicrosoft MSRC 2024-W46

RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages

2024-11-12 CVE-2024-50208

mediumMicrosoft MSRC 2024-W46

RDMA/bnxt_re: Fix a possible memory leak

2024-11-12 CVE-2024-50172

mediumMicrosoft MSRC 2024-W46

RDMA/bnxt_re: Fix out of bound check

2024-11-12 CVE-2024-50158

highMicrosoft MSRC 2024-W46

RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES

2024-11-12 CVE-2024-53094

mediumMicrosoft MSRC 2024-W46

Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli

2024-11-12 CVE-2024-53858

mediumMicrosoft MSRC 2024-W46

sched/core: Disable page allocation in task_tick_mm_cid()

2024-11-12 CVE-2024-50140

mediumMicrosoft MSRC 2024-W46

scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance

2024-11-12 CVE-2024-50183

mediumMicrosoft MSRC 2024-W46

sctp: properly validate chunk size in sctp_sf_ootb()

2024-11-12 CVE-2024-50299

mediumMicrosoft MSRC 2024-W46

security/keys: fix slab-out-of-bounds in key_task_permission

2024-11-12 CVE-2024-50301

highMicrosoft MSRC 2024-W46

signal: restore the override_rlimit logic

2024-11-12 CVE-2024-50271

mediumMicrosoft MSRC 2024-W46

Single byte overread with convert.quoted-printable-decode filter

2024-11-12 CVE-2024-11233

highMicrosoft MSRC 2024-W46

smb: client: fix OOBs when building SMB2_IOCTL request

2024-11-12 CVE-2024-50151

highMicrosoft MSRC 2024-W46

smb: client: Handle kstrdup failures for passwords

2024-11-12 CVE-2024-50120

mediumMicrosoft MSRC 2024-W46

spi: spi-fsl-dspi: Fix crash when not using GPIO chip select

2024-11-12 CVE-2024-50224

mediumMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-38255

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-43459

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-43462

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-48993

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-48994

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-48995

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-48996

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-48997

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-48998

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-48999

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49000

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49001

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49002

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49003

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49004

highMicrosoft MSRC 2024-W46

SQL Server Native Client Remote Code Execution Vulnerability

2024-11-12 CVE-2024-49005

highMicrosoft MSRC 2024-W46