Skip to content
OpenAdvisories
Medium WID-SEC-2024-0511 10 CVEs

Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe

Published Feb 28, 2024 · Updated Feb 15, 2026 · Revision 47 · de-DE

Vendor: Debian Vendor: Dell Vendor: EMC Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: Enterprise Linux Product: InfoSphere Guardium Product: Linux Product: Linux Product: Linux Product: Linux Product: NetWorker Product: Rocky Linux Product: Spectrum Protect Plus Product: Storage Scale Product: Storage Scale System Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen oder einen nicht spezifizierten Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 10

  • Critical 9.8
    CVE-2023-52480

    ksmbd: fix race condition between session lookup and expire

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_sess…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2023-52478

    HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect

    In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect hidpp_connect_event() has *four* time-of-check vs time-of-use (TOCTOU) races when it races with itself. hidpp_connect_event() …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2023-52479

    ksmbd: fix uaf in smb20_oplock_break_ack

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix uaf in smb20_oplock_break_ack drop reference after use opinfo.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-52483

    mctp: perform route lookups under a RCU read-side lock

    In the Linux kernel, the following vulnerability has been resolved: mctp: perform route lookups under a RCU read-side lock Our current route lookups (mctp_route_lookup and mctp_route_lookup_null) traverse the net's route list without the RCU read lock held. T…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.7
    CVE-2023-52481

    arm64: errata: Add Cortex-A520 speculative unprivileged load workaround

    In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Add Cortex-A520 speculative unprivileged load workaround Implement the workaround for ARM Cortex-A520 erratum 2966298. On an affected Cortex-A520 core, a speculatively executed…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-52475

    Input: powermate - fix use-after-free in powermate_config_complete

    In the Linux kernel, the following vulnerability has been resolved: Input: powermate - fix use-after-free in powermate_config_complete syzbot has found a use-after-free bug [1] in the powermate driver. This happens when the device is disconnected, which leads…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52476

    perf/x86/lbr: Filter vsyscall addresses

    In the Linux kernel, the following vulnerability has been resolved: perf/x86/lbr: Filter vsyscall addresses We found that a panic can occur when a vsyscall is made while LBR sampling is active. If the vsyscall is interrupted (NMI) for perf sampling, this call…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52477

    usb: hub: Guard against accesses to uninitialized BOS descriptors

    In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev->bos without checking if it was…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52482

    x86/srso: Add SRSO mitigation for Hygon processors

    In the Linux kernel, the following vulnerability has been resolved: x86/srso: Add SRSO mitigation for Hygon processors Add mitigation for the speculative return stack overflow vulnerability which exists on Hygon processors too.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52484

    iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range

    In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range When running an SVA case, the following soft lockup is triggered: ------------------------------------------------…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Revision history

  1. #47

    Neue Updates von SUSE aufgenommen

  2. #46

    Neue Updates von Ubuntu aufgenommen

  3. #45

    Neue Updates von IBM aufgenommen

  4. #44

    Neue Updates von Ubuntu aufgenommen

  5. #43

    Neue Updates von Ubuntu aufgenommen

  6. #42

    Neue Updates von Ubuntu aufgenommen

  7. #41

    Neue Updates von Ubuntu aufgenommen

  8. #40

    Neue Updates von Red Hat aufgenommen

  9. #39

    Neue Updates von SUSE aufgenommen

  10. #38

    Neue Updates von IBM aufgenommen

  11. #37

    Neue Updates von IBM aufgenommen

  12. #36

    Neue Updates von IBM aufgenommen

  13. #35

    Neue Updates von IBM aufgenommen

  14. #34

    Neue Updates von IBM aufgenommen

  15. #33

    Neue Updates von Red Hat aufgenommen

  16. #32

    Neue Updates von Red Hat aufgenommen

  17. #31

    Neue Updates von Dell aufgenommen

  18. #30

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  19. #29

    Neue Updates von Oracle Linux aufgenommen

  20. #28

    Neue Updates von Red Hat aufgenommen

  21. #27

    Neue Updates von ORACLE aufgenommen

  22. #26

    Neue Updates von Oracle Linux aufgenommen

  23. #25

    Neue Updates von SUSE aufgenommen

  24. #24

    Neue Updates von Dell aufgenommen

  25. #23

    Neue Updates von IBM aufgenommen

References