Skip to content
OpenAdvisories
Medium WID-SEC-2024-0482 14 CVEs

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Feb 26, 2024 · Updated Sep 5, 2024 · Revision 17 · de-DE

Vendor: Dell Vendor: EMC Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Product: Avamar Product: Business Automation Workflow Product: Enterprise Linux Product: Linux Product: Linux Product: NetWorker Product: Rocky Linux Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 14

  • Critical 9.8
    CVE-2021-46911

    ch_ktls: Fix kernel panic

    In the Linux kernel, the following vulnerability has been resolved: ch_ktls: Fix kernel panic Taking page refcount is not ideal and causes kernel panic sometimes. It's better to take tx_ctx lock for the complete skb transmit, to avoid page cleanup if ACK rece…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2021-46913

    netfilter: nftables: clone set element expression template

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: clone set element expression template memcpy() breaks when using connlimit in set elements. Use nft_expr_clone() to initialize the connlimit expression list, otherwise co…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.3
    CVE-2021-46912

    net: Make tcp_allowed_congestion_control readonly in non-init netns

    In the Linux kernel, the following vulnerability has been resolved: net: Make tcp_allowed_congestion_control readonly in non-init netns Currently, tcp_allowed_congestion_control is global and writable; writing to it in any net namespace will leak into all oth…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2021-46908

    bpf: Use correct permission flag for mixed signed bounds arithmetic

    In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unknown scalars with mixed signed bounds due to the spectre v1 masking mitigation. Hence this also needs b…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.0
    CVE-2021-46910

    ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUG_KMAP_LOCAL is enabled

    In the Linux kernel, the following vulnerability has been resolved: ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUG_KMAP_LOCAL is enabled The debugging code for kmap_local() doubles the number of per-CPU fixmap slots allocated for kmap_local(), in ord…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2021-46920

    dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback

    In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix clobbering of SWERR overflow bit on writeback Current code blindly writes over the SWERR and the OVERFLOW bits. Write back the bits actually read instead so the driver av…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46907 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  • Unscored —
    CVE-2021-46909

    ARM: footbridge: fix PCI interrupt mapping

    In the Linux kernel, the following vulnerability has been resolved: ARM: footbridge: fix PCI interrupt mapping Since commit 30fdfb929e82 ("PCI: Add a call to pci_assign_irq() in pci_device_probe()"), the PCI code will call the IRQ mapping function whenever a …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46914

    ixgbe: fix unbalanced device enable/disable in suspend/resume

    In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix unbalanced device enable/disable in suspend/resume pci_disable_device() called in __ixgbe_shutdown() decreases dev->enable_cnt by 1. pci_enable_device_mem() which increases dev->en…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46915

    netfilter: nft_limit: avoid possible divide error in nft_limit_init

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: avoid possible divide error in nft_limit_init div_u64() divides u64 by u32. nft_limit_init() wants to divide u64 by u64, use the appropriate math function (div64_u64) di…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46916

    ixgbe: Fix NULL pointer dereference in ethtool loopback test

    In the Linux kernel, the following vulnerability has been resolved: ixgbe: Fix NULL pointer dereference in ethtool loopback test The ixgbe driver currently generates a NULL pointer dereference when performing the ethtool loopback test. This is due to the fact…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46917

    dmaengine: idxd: fix wq cleanup of WQCFG registers

    In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq cleanup of WQCFG registers A pre-release silicon erratum workaround where wq reset does not clear WQCFG registers was leaked into upstream code. Use wq reset command i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46918

    dmaengine: idxd: clear MSIX permission entry on shutdown

    In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: clear MSIX permission entry on shutdown Add disabling/clearing of MSIX permission entries on device shutdown to mirror the enabling of the MSIX entries on probe. Current code…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46919

    dmaengine: idxd: fix wq size store permission state

    In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq size store permission state WQ size can only be changed when the device is disabled. Current code allows change when device is enabled but wq is disabled. Change the c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Revision history

  1. #17

    Neue Updates von IBM aufgenommen

  2. #16

    Neue Updates von SUSE aufgenommen

  3. #15

    Neue Updates von Dell aufgenommen

  4. #14

    Neue Updates von Red Hat aufgenommen

  5. #13

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  6. #12

    Neue Updates von Red Hat aufgenommen

  7. #11

    Neue Updates von Dell und Oracle Linux aufgenommen

  8. #10

    Neue Updates von SUSE aufgenommen

  9. #9

    Neue Updates von SUSE aufgenommen

  10. #8

    Neue Updates von SUSE aufgenommen

  11. #7

    Neue Updates von Dell aufgenommen

  12. #6

    Neue Updates von Red Hat aufgenommen

  13. #5

    Neue Updates von SUSE aufgenommen

  14. #4

    Neue Updates von Red Hat aufgenommen

  15. #3

    Neue Updates von SUSE aufgenommen

  16. #2

    Neue Updates von SUSE aufgenommen

  17. #1

    Initiale Fassung

References