Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Sourabh Jain

Researcher fromIBM
#20849of 53,633
12.1Total CVSS
Vulnerabilities · 2
Medium
1
High
1
PT-2024-29732
7.5
2024-06-25
Linux · Linux Kernel · CVE-2024-42078
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the nfsd info.mutex, which can be dereferenced by svc pool stats start() immediately after a new netns is created, potentially triggering an oops. The resolution involves initialising nfsd info.mutex earlier to prevent this issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.
PT-2024-29799
4.6
2024-06-25
Linux · Linux Kernel · CVE-2024-42230
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the powerpc/pseries architecture in the Linux kernel. Specifically, kexec on pseries disables AIL (reloc on exc), which is required for scv instruction support, before other CPUs have been shut down. This causes an interrupt at an unexpected entry location, leading to a kernel crash. The real-mode scv interrupt vector is 0x17000, and the fixed-location head code does not support this interrupt due to high address implementation issues. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.