Skip to content
OpenAdvisories
Medium WID-SEC-2024-0722 14 CVEs

Linux Kernel: Mehrere Schwachstellen

Published Mar 26, 2024 · Updated Feb 15, 2026 · Revision 71 · de-DE

Vendor: amazon Vendor: Broadcom Vendor: Debian Vendor: Dell Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: Brocade SANnav Product: Business Automation Workflow Product: Enterprise Linux Product: InfoSphere Guardium Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: NetWorker Product: PowerProtect Data Domain Product: QRadar SIEM Product: Rocky Linux Product: Security Guardium Product: Spectrum Protect Plus Product: Storage Scale System Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um Dateien zu manipulieren, unbekannte Effekte zu verursachen oder einen Denial-of-Service-Zustand auszulösen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 14

  • High 7.8
    CVE-2023-52623

    SUNRPC: Fix a suspicious RCU usage warning

    In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a suspicious RCU usage warning I received the following warning while running cthon against an ontap server running pNFS: [ 57.202521] ============================= [ 57.202522] W…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26646

    thermal: intel: hfi: Add syscore callbacks for system-wide PM

    In the Linux kernel, the following vulnerability has been resolved: thermal: intel: hfi: Add syscore callbacks for system-wide PM The kernel allocates a memory buffer and provides its location to the hardware, which uses it to update the HFI table. This alloc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2023-52627

    iio: adc: ad7091r: Allow users to configure device events

    In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7091r: Allow users to configure device events AD7091R-5 devices are supported by the ad7091r-5 driver together with the ad7091r-base driver. Those drivers declared iio events for …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-26648

    drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay()

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay() In edp_setup_replay(), 'struct dc *dc' & 'struct dmub_replay *replay' was dereferenced before the pointer 'li…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52621

    bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers

    In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers These three bpf_map_{lookup,update,delete}_elem() helpers are also available for sleepable bpf program, so add the corresp…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-52622

    ext4: avoid online resizing failures due to oversized flex bg

    In the Linux kernel, the following vulnerability has been resolved: ext4: avoid online resizing failures due to oversized flex bg When we online resize an ext4 filesystem with a oversized flexbg_size, mkfs.ext4 -F -G 67108864 $dev -b 4096 100M mount $dev $dir…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52624

    drm/amd/display: Wake DMCUB before executing GPINT commands

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wake DMCUB before executing GPINT commands [Why] DMCUB can be in idle when we attempt to interface with the HW through the GPINT mailbox resulting in a system hang. [How] Add…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-52625

    drm/amd/display: Refactor DMCUB enter/exit idle interface

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Refactor DMCUB enter/exit idle interface [Why] We can hang in place trying to send commands when the DMCUB isn't powered on. [How] We need to exit out of the idle state prior…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52626

    net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context Indirection (*) is of lower precedence than postfix increment (++). Logic in napi_poll context would cause an ou…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26644

    btrfs: don't abort filesystem when attempting to snapshot deleted subvolume

    In the Linux kernel, the following vulnerability has been resolved: btrfs: don't abort filesystem when attempting to snapshot deleted subvolume If the source file descriptor to the snapshot ioctl refers to a deleted subvolume, we get the following abort: BTRF…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26645

    tracing: Ensure visibility when inserting an element into tracing_map

    In the Linux kernel, the following vulnerability has been resolved: tracing: Ensure visibility when inserting an element into tracing_map Running the following two commands in parallel on a multi-processor AArch64 machine can sporadically produce an unexpecte…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-26647

    drm/amd/display: Fix late derefrence 'dsc' check in 'link_set_dsc_pps_packet()'

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix late derefrence 'dsc' check in 'link_set_dsc_pps_packet()' In link_set_dsc_pps_packet(), 'struct display_stream_compressor *dsc' was dereferenced in a DC_LOGGER_INIT(dsc-…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-26649

    drm/amdgpu: Fix the null pointer when load rlc firmware

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the null pointer when load rlc firmware If the RLC firmware is invalid because of wrong header size, the pointer to the rlc firmware is released in function amdgpu_ucode_reque…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26650 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

Revision history

  1. #71

    Neue Updates von SUSE aufgenommen

  2. #70

    Neue Updates von Oracle Linux aufgenommen

  3. #69

    Neue Updates von Oracle Linux aufgenommen

  4. #68

    Neue Updates von IBM aufgenommen

  5. #67

    Neue Updates von Dell aufgenommen

  6. #66

    Neue Updates von Amazon aufgenommen

  7. #65

    Neue Updates von Amazon aufgenommen

  8. #64

    Neue Updates von Oracle Linux aufgenommen

  9. #63

    Neue Updates von Red Hat aufgenommen

  10. #62

    Neue Updates von Red Hat aufgenommen

  11. #61

    Neue Updates von Amazon aufgenommen

  12. #60

    Neue Updates von SUSE aufgenommen

  13. #59

    Neue Updates von Amazon aufgenommen

  14. #58

    Neue Updates von Red Hat aufgenommen

  15. #57

    Neue Updates von Debian aufgenommen

  16. #56

    Neue Updates von IBM aufgenommen

  17. #55

    Neue Updates von SUSE aufgenommen

  18. #54

    Neue Updates von BROCADE aufgenommen

  19. #53

    Neue Updates von IBM aufgenommen

  20. #52

    Neue Updates von Oracle Linux aufgenommen

  21. #51

    Neue Updates von Ubuntu aufgenommen

  22. #50

    Neue Updates von Ubuntu aufgenommen

  23. #49

    Neue Updates von Ubuntu aufgenommen

  24. #48

    Neue Updates von Ubuntu aufgenommen

  25. #47

    Neue Updates von IBM aufgenommen

References