Skip to content
OpenAdvisories
Medium WID-SEC-2024-0488 17 CVEs

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Feb 26, 2024 · Updated Oct 1, 2025 · Revision 32 · de-DE

Vendor: amazon Vendor: Dell Vendor: EMC Vendor: KYOCERA Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: NetWorker Product: PowerProtect Data Domain Product: Printer Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 17

  • High 7.8
    CVE-2021-46921

    locking/qrwlock: Fix ordering in queued_write_lock_slowpath()

    In the Linux kernel, the following vulnerability has been resolved: locking/qrwlock: Fix ordering in queued_write_lock_slowpath() While this code is executed with the wait_lock held, a reader can acquire the lock without holding wait_lock. The writer side loo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2021-46922

    KEYS: trusted: Fix TPM reservation for seal/unseal

    In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix TPM reservation for seal/unseal The original patch 8c657a0590de ("KEYS: trusted: Reserve TPM for seal and unseal operations") was correct on the mailing list: https://lore.…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2021-46925

    net/smc: fix kernel panic caused by race of smc_sock

    In the Linux kernel, the following vulnerability has been resolved: net/smc: fix kernel panic caused by race of smc_sock A crash occurs when smc_cdc_tx_handler() tries to access smc_sock but smc_release() has already freed it. [ 4570.695099] BUG: unable to ha…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2021-46929

    sctp: use call_rcu to free endpoint

    In the Linux kernel, the following vulnerability has been resolved: sctp: use call_rcu to free endpoint This patch is to delay the endpoint free by calling call_rcu() to fix another use-after-free issue in sctp_sock_dump(): BUG: KASAN: use-after-free in __loc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2021-46933

    usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.

    In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. ffs_data_clear is indirectly called from both ffs_fs_kill_sb and ffs_ep0_release, so it ends up being called twice when userland closes…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2021-46936

    net: fix use-after-free in tw_timer_handler

    In the Linux kernel, the following vulnerability has been resolved: net: fix use-after-free in tw_timer_handler A real world panic issue was found as follow in Linux 5.4. BUG: unable to handle page fault for address: ffffde49a863de28 PGD 7e6fe62067 P4D 7e6fe6…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46923

    fs/mount_setattr: always cleanup mount_kattr

    In the Linux kernel, the following vulnerability has been resolved: fs/mount_setattr: always cleanup mount_kattr Make sure that finish_mount_kattr() is called after mount_kattr was succesfully built in both the success and failure case to prevent leaking any …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46924

    NFC: st21nfca: Fix memory leak in device probe and remove

    In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy->pending_skb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory lea…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46926

    ALSA: hda: intel-sdw-acpi: harden detection of controller

    In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: harden detection of controller The existing code currently sets a pointer to an ACPI handle before checking that it's actually a SoundWire controller. This can lead…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46927

    nitro_enclaves: Use get_user_pages_unlocked() call to handle mmap assert

    In the Linux kernel, the following vulnerability has been resolved: nitro_enclaves: Use get_user_pages_unlocked() call to handle mmap assert After commit 5b78ed24e8ec ("mm/pagemap: add mmap_assert_locked() annotations to find_vma*()"), the call to get_user_pa…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46928

    parisc: Clear stale IIR value on instruction access rights trap

    In the Linux kernel, the following vulnerability has been resolved: parisc: Clear stale IIR value on instruction access rights trap When a trap 7 (Instruction access rights) occurs, this means the CPU couldn't execute an instruction due to missing execute per…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46930

    usb: mtu3: fix list_head check warning

    In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: fix list_head check warning This is caused by uninitialization of list_head. BUG: KASAN: use-after-free in __list_del_entry_valid+0x34/0xe4 Call trace: dump_backtrace+0x0/0x298 sho…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46931

    net/mlx5e: Wrap the tx reporter dump callback to extract the sq

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Wrap the tx reporter dump callback to extract the sq Function mlx5e_tx_reporter_dump_sq() casts its void * argument to struct mlx5e_txqsq *, but in TX-timeout-recovery flow the arg…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46932

    Input: appletouch - initialize work before device registration

    In the Linux kernel, the following vulnerability has been resolved: Input: appletouch - initialize work before device registration Syzbot has reported warning in __flush_work(). This warning is caused by work->func == NULL, which means missing work initializa…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46934

    i2c: validate user data in compat ioctl

    In the Linux kernel, the following vulnerability has been resolved: i2c: validate user data in compat ioctl Wrong user data may cause warning in i2c_transfer(), ex: zero msgs. Userspace should not be able to trigger warnings, so this patch adds validation che…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46935

    binder: fix async_free_space accounting for empty parcels

    In the Linux kernel, the following vulnerability has been resolved: binder: fix async_free_space accounting for empty parcels In 4.13, commit 74310e06be4d ("android: binder: Move buffer out of area shared with user space") fixed a kernel structure visibility …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2021-46937

    mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()'

    In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()' DAMON debugfs interface increases the reference counts of 'struct pid's for targets from the 'target_ids' file write callb…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Revision history

  1. #32

    Neue Updates von Dell aufgenommen

  2. #31

    Referenz(en) aufgenommen:

  3. #30

    Neue Updates aufgenommen

  4. #29

    Neue Updates von SUSE aufgenommen

  5. #28

    Neue Updates von SUSE aufgenommen

  6. #27

    Neue Updates von Ubuntu aufgenommen

  7. #26

    Neue Updates von Ubuntu aufgenommen

  8. #25

    Neue Updates von Ubuntu aufgenommen

  9. #24

    Neue Updates von Ubuntu aufgenommen

  10. #23

    Neue Updates von Ubuntu aufgenommen

  11. #22

    Neue Updates von SUSE aufgenommen

  12. #21

    Neue Updates von Dell aufgenommen

  13. #20

    Neue Updates von IBM und Ubuntu aufgenommen

  14. #19

    Neue Updates von Amazon aufgenommen

  15. #18

    Neue Updates von SUSE aufgenommen

  16. #17

    Neue Updates von SUSE aufgenommen

  17. #16

    Neue Updates von SUSE aufgenommen

  18. #15

    Neue Updates von Oracle Linux aufgenommen

  19. #14

    Neue Updates von Red Hat aufgenommen

  20. #13

    Neue Updates von Dell aufgenommen

  21. #12

    Neue Updates von SUSE aufgenommen

  22. #11

    Neue Updates von SUSE aufgenommen

  23. #10

    Neue Updates von SUSE aufgenommen

  24. #9

    Neue Updates von SUSE aufgenommen

  25. #8

    Neue Updates von Ubuntu aufgenommen

References