Skip to content
OpenAdvisories
Medium WID-SEC-2024-0654 22 CVEs

Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe

Published Mar 17, 2024 · Updated Feb 16, 2026 · Revision 98 · de-DE

Vendor: Broadcom Vendor: Debian Vendor: Dell Vendor: IBM Vendor: NETAPP Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: ActiveIQ Unified Manager Product: AFF Product: Brocade SANnav Product: Business Automation Workflow Product: Enterprise Linux Product: FAS Product: InfoSphere Guardium Product: Linux Product: Linux Product: Linux Product: Linux Product: NetWorker Product: QRadar SIEM Product: Rocky Linux Product: Spectrum Protect Plus Product: Storage Scale Product: Storage Scale System Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen oder einen nicht spezifizierten Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 22

  • High 8.6
    CVE-2024-26641

    ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()

    In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() syzbot found __ip6_tnl_rcv() could access unitiliazed data [1]. Call pskb_inet_may_pull() to fix this, and initialize ipv6h varia…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-52612

    crypto: scomp - fix req->dst buffer overflow

    In the Linux kernel, the following vulnerability has been resolved: crypto: scomp - fix req->dst buffer overflow The req->dst buffer size should be checked before copying from the scomp_scratch->dst to avoid req->dst buffer overflow problem.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-52614

    PM / devfreq: Fix buffer overflow in trans_stat_show

    In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix buffer overflow in trans_stat_show Fix buffer overflow in trans_stat_show(). Convert simple snprintf to the more secure scnprintf with size of PAGE_SIZE. Add condition check…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-52616

    crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init

    In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init When the mpi_ec_ctx structure is initialized, some fields are not cleared, causing a crash when referencing the field when the s…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26631

    ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work

    In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work idev->mc_ifc_count can be written over without proper locking. Originally found by syzbot [1], fix this issue by encapsulating calls …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26632

    block: Fix iterating over an empty bio with bio_for_each_folio_all

    In the Linux kernel, the following vulnerability has been resolved: block: Fix iterating over an empty bio with bio_for_each_folio_all If the bio contains no data, bio_first_folio() calls page_folio() on a NULL pointer and oopses. Move the test that we've rea…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26637

    wifi: ath11k: rely on mac80211 debugfs handling for vif

    In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: rely on mac80211 debugfs handling for vif mac80211 started to delete debugfs entries in certain cases, causing a ath11k to crash when it tried to delete the entries later. Fix t…

    Linux Linux linux-raspi2 linux-hwe Linux Ubuntu
  • High 7.8
    CVE-2024-26640

    tcp: add sanity checks to rx zerocopy

    In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity checks to rx zerocopy TCP rx zerocopy intent is to map pages initially allocated from NIC drivers, not pages owned by a fs. This patch adds to can_map_frag() these additional …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2023-52610

    net/sched: act_ct: fix skb leak and crash on ooo frags

    In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix skb leak and crash on ooo frags act_ct adds skb->users before defragmentation. If frags arrive in order, the last frag's reference is reset in: inet_frag_reasm_prepare …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2023-52613

    drivers/thermal/loongson2_thermal: Fix incorrect PTR_ERR() judgment

    In the Linux kernel, the following vulnerability has been resolved: drivers/thermal/loongson2_thermal: Fix incorrect PTR_ERR() judgment PTR_ERR() returns -ENODEV when thermal-zones are undefined, and we need -ENODEV as the right value for comparison. Otherwis…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-26633

    ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()

    In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() syzbot pointed out [1] that NEXTHDR_FRAGMENT handling is broken. Reading frag_off can only be done if we pulled enough…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.3
    CVE-2023-52618

    block/rnbd-srv: Check for unlikely string overflow

    In the Linux kernel, the following vulnerability has been resolved: block/rnbd-srv: Check for unlikely string overflow Since "dev_search_path" can technically be as large as PATH_MAX, there was a risk of truncation when copying it and a second string into "fu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.4
    CVE-2023-52617

    PCI: switchtec: Fix stdev_release() crash after surprise hot remove

    In the Linux kernel, the following vulnerability has been resolved: PCI: switchtec: Fix stdev_release() crash after surprise hot remove A PCI device hot removal may occur while stdev->cdev is held open. The call to stdev_release() then happens during close or…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.4
    CVE-2024-26638

    nbd: always initialize struct msghdr completely

    In the Linux kernel, the following vulnerability has been resolved: nbd: always initialize struct msghdr completely syzbot complains that msg->msg_get_inq value can be uninitialized [1] struct msghdr got many new fields recently, we should always make sure th…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52609

    binder: fix race between mmput() and do_exit()

    In the Linux kernel, the following vulnerability has been resolved: binder: fix race between mmput() and do_exit() Task A calls binder_update_page_range() to allocate and insert pages on a remote address space from Task B. For this, Task A pins the remote mm …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52611

    wifi: rtw88: sdio: Honor the host max_req_size in the RX path

    In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: sdio: Honor the host max_req_size in the RX path Lukas reports skb_over_panic errors on his Banana Pi BPI-CM4 which comes with an Amlogic A311D (G12B) SoC and a RTL8822CS SDIO wi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52615

    hwrng: core - Fix page fault dead lock on mmap-ed hwrng

    In the Linux kernel, the following vulnerability has been resolved: hwrng: core - Fix page fault dead lock on mmap-ed hwrng There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng into memory also mmap-ed from /de…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52619

    pstore/ram: Fix crash when setting number of cpus to an odd number

    In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26634

    net: fix removing a namespace with conflicting altnames

    In the Linux kernel, the following vulnerability has been resolved: net: fix removing a namespace with conflicting altnames Mark reports a BUG() when a net namespace is removed. kernel BUG at net/core/dev.c:11520! Physical interfaces moved outside of init_net…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26635

    llc: Drop support for ETH_P_TR_802_2.

    In the Linux kernel, the following vulnerability has been resolved: llc: Drop support for ETH_P_TR_802_2. syzbot reported an uninit-value bug below. [0] llc supports ETH_P_802_2 (0x0004) and used to support ETH_P_TR_802_2 (0x0011), and syzbot abused the latte…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26636

    llc: make llc_ui_sendmsg() more robust against bonding changes

    In the Linux kernel, the following vulnerability has been resolved: llc: make llc_ui_sendmsg() more robust against bonding changes syzbot was able to trick llc_ui_sendmsg(), allocating an skb with no headroom, but subsequently trying to push 14 bytes of Ether…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26639 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

Revision history

  1. #98

    Neue Updates von SUSE aufgenommen

  2. #97

    Neue Updates von SUSE aufgenommen

  3. #96

    Neue Updates von Red Hat aufgenommen

  4. #95

    Neue Updates von Red Hat aufgenommen

  5. #94

    Neue Updates von IBM aufgenommen

  6. #93

    Neue Updates von SUSE aufgenommen

  7. #92

    Neue Updates von SUSE aufgenommen

  8. #91

    Neue Updates von SUSE aufgenommen

  9. #90

    Neue Updates von IBM aufgenommen

  10. #89

    Neue Updates von SUSE aufgenommen

  11. #88

    Neue Updates von SUSE aufgenommen

  12. #87

    Neue Updates von Red Hat aufgenommen

  13. #86

    Neue Updates von Red Hat aufgenommen

  14. #85

    Neue Updates von Red Hat aufgenommen

  15. #84

    Neue Updates von BROCADE aufgenommen

  16. #83

    Neue Updates von IBM aufgenommen

  17. #82

    Neue Updates von Oracle Linux aufgenommen

  18. #81

    Neue Updates von IBM aufgenommen

  19. #80

    Neue Updates von NetApp aufgenommen

  20. #79

    Neue Updates von IBM aufgenommen

  21. #78

    Neue Updates von Ubuntu aufgenommen

  22. #77

    Neue Updates von Red Hat aufgenommen

  23. #76

    Neue Updates von Ubuntu aufgenommen

  24. #75

    Neue Updates von Ubuntu aufgenommen

  25. #74

    Neue Updates von Ubuntu aufgenommen

References