Skip to content
OpenAdvisories
Medium WID-SEC-2024-0913 15 CVEs

Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service

Published Apr 16, 2024 · Updated Mar 31, 2026 · Revision 96 · de-DE

Vendor: amazon Vendor: Debian Vendor: Dell Vendor: EMC Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: Avamar Product: Business Automation Workflow Product: Enterprise Linux Product: InfoSphere Guardium Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: NetWorker Product: QRadar SIEM Product: Rocky Linux Product: Secure Connect Gateway Product: Security Guardium Product: Spectrum Protect Plus Product: Storage Scale Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder weitere, unbekannte Auswirkungen zu verursachen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 15

  • Critical 9.4
    CVE-2024-26828

    cifs: fix underflow in parse_server_interfaces()

    In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.7
    CVE-2024-26822

    smb: client: set correct id, uid and cruid for multiuser automounts

    In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, uid and cruid for multiuser automounts When uid, gid and cruid are not specified, we need to dynamically set them into the filesystem context used for automountin…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.4
    CVE-2024-26830

    i40e: Do not allow untrusted VF to remove administratively set MAC

    In the Linux kernel, the following vulnerability has been resolved: i40e: Do not allow untrusted VF to remove administratively set MAC Currently when PF administratively sets VF's MAC address and the VF is put down (VF tries to delete all MACs) then the MAC i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-26823

    irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems

    In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems While refactoring the way the ITSs are probed, the handling of quirks applicable to ACPI-based platforms was lost. As a result…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26824

    crypto: algif_hash - Remove bogus SGL free on zero-length error path

    In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - Remove bogus SGL free on zero-length error path When a zero-length message is hashed by algif_hash, and an error is triggered, it tries to free an SG list that was never …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2024-26826

    mptcp: fix data re-injection from stale subflow

    In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data re-injection from stale subflow When the MPTCP PM detects that a subflow is stale, all the packet scheduler must re-inject all the mptcp-level unacked data. To avoid acquiring…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52642

    media: rc: bpf attach/detach requires write permission

    In the Linux kernel, the following vulnerability has been resolved: media: rc: bpf attach/detach requires write permission Note that bpf attach/detach also requires CAP_NET_ADMIN.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2023-52643

    iio: core: fix memleak in iio_device_register_sysfs

    In the Linux kernel, the following vulnerability has been resolved: iio: core: fix memleak in iio_device_register_sysfs When iio_device_register_sysfs_group() fails, we should free iio_dev_opaque->chan_attr_group.attrs to prevent potential memleak.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26818

    tools/rtla: Fix clang warning about mount_point var size

    In the Linux kernel, the following vulnerability has been resolved: tools/rtla: Fix clang warning about mount_point var size clang is reporting this warning: $ make HOSTCC=clang CC=clang LLVM_IAS=1 [...] clang -O -g -DVERSION=\"6.8.0-rc3\" -flto=auto -fexcept…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26819 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  • Unscored —
    CVE-2024-26820

    hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed

    In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed If hv_netvsc driver is unloaded and reloaded, the NET_DEVICE_REGISTER handler cannot perform VF register successfully as t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26821 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  • Unscored —
    CVE-2024-26825

    nfc: nci: free rx_data_reassembly skb on NCI device cleanup

    In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free rx_data_reassembly skb on NCI device cleanup rx_data_reassembly skb is stored during NCI data exchange for processing fragmented packets. It is dropped only when the last fragm…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-26827 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  • Unscored —
    CVE-2024-26831

    net/handshake: Fix handshake_req_destroy_test1

    In the Linux kernel, the following vulnerability has been resolved: net/handshake: Fix handshake_req_destroy_test1 Recently, handshake_req_destroy_test1 started failing: Expected handshake_req_destroy_test == req, but handshake_req_destroy_test == 00000000000…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Revision history

  1. #96

    Neue Updates von Oracle Linux aufgenommen

  2. #95

    Neue Updates von Debian aufgenommen

  3. #94

    Neue Updates von Debian aufgenommen

  4. #93

    Neue Updates von SUSE aufgenommen

  5. #92

    Neue Updates von Dell aufgenommen

  6. #91

    Neue Updates von Dell aufgenommen

  7. #90

    Neue Updates von SUSE aufgenommen

  8. #89

    Neue Updates von SUSE aufgenommen

  9. #88

    Neue Updates von SUSE aufgenommen

  10. #87

    Neue Updates von SUSE aufgenommen

  11. #86

    Neue Updates von SUSE aufgenommen

  12. #85

    Neue Updates von SUSE aufgenommen

  13. #84

    Neue Updates von SUSE aufgenommen

  14. #83

    Neue Updates von SUSE aufgenommen

  15. #82

    Neue Updates von IBM aufgenommen

  16. #81

    Neue Updates von IBM aufgenommen

  17. #80

    Neue Updates von SUSE und Ubuntu aufgenommen

  18. #79

    Neue Updates von SUSE aufgenommen

  19. #78

    Neue Updates von SUSE aufgenommen

  20. #77

    Neue Updates von SUSE aufgenommen

  21. #76

    Neue Updates von SUSE aufgenommen

  22. #75

    Neue Updates von SUSE aufgenommen

  23. #74

    Neue Updates von Oracle Linux und SUSE aufgenommen

  24. #73

    Neue Updates von Ubuntu aufgenommen

  25. #72

    Neue Updates von Red Hat und Ubuntu aufgenommen

References