Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
Saved searches 0
Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.
Threads
Related changes across sources- Windows USM Communication Manager Elevation of Privilege Vulnerability Published vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
- Microsoft Windows VMSwitch Elevation of Privilege Vulnerability Published vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
- Windows DNS Information Disclosure Vulnerability Published vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
- Windows BitLocker Security Feature Bypass Vulnerability Published vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
- drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- drm/amdkfd: Avoid integer underflow in EOP ring size calculation. Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- smb/server: cancel async requests when closing connection Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- smb: client: delete compound mids on send failure before unlock Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- smb: client: drain and invalidate before server-side copy/clone Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- smb: client: discard post-EOF pagecache when extending a file via clone range Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- drm/amd/display: guard dc_sink dereferences in MST mode validation Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- net: gso: limit recursive IP-in-IP segmentation Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- ipv6: udp: Create exceptions before socket matching Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- drm/i915/dmc: Add sanity check for DMC load address Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- ALSA: line6: Clear prev_fbuf on capture buffer release Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- ksmbd: reserve space for the UTF-16 terminator in stream info Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- smb: client: fix fiemap wild read on empty truncated response Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- net/sched: sch_teql: fix use-after-free on lower qdisc drop Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- net: skbuff: propagate shared-frag marker in skb_zerocopy() Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Buildah: buildah allows arbitrary directory mount Advisory content revised: A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the ho…7 linked entries across history · in Security Follow evidence and connection reasons
- Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net Advisory content revised: When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short t…6 linked entries across history · in Security Follow evidence and connection reasons
- Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net Advisory content revised: In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented …6 linked entries across history · in Security Follow evidence and connection reasons
- Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library Advisory content revised: A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic lin…5 linked entries across history · in Security Follow evidence and connection reasons
- lxd allows Cross-guest volume hijack via DevLXD device patch Advisory content revised: Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's custom storage volume via a crafted device PATCH request over /dev/lxd when security.…5 linked entries across history · in Security Follow evidence and connection reasons
- Microsoft 365 URL and IP requirements Guidance changed4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
- Apache Airflow: Connections API: apprise connection "config" extra returned in cleartext Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons