Summary
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen oder einen nicht spezifizierten Angriff durchzuführen.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 94
-
Critical 9.8
igc: avoid returning frame twice in XDP_REDIRECT
In the Linux kernel, the following vulnerability has been resolved: igc: avoid returning frame twice in XDP_REDIRECT When a frame can not be transmitted in XDP_REDIRECT (e.g. due to a full queue), it is necessary to free it by calling xdp_return_frame_rx_napi…
-
Critical 9.8
crypto: xilinx - call finalize with bh disabled
In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx - call finalize with bh disabled When calling crypto_finalize_request, BH should be disabled to avoid triggering the following calltrace: ------------[ cut here ]------------ W…
-
High 8.8
net: sparx5: Fix use after free inside sparx5_del_mact_entry
In the Linux kernel, the following vulnerability has been resolved: net: sparx5: Fix use after free inside sparx5_del_mact_entry Based on the static analyzis of the code it looks like when an entry from the MAC table was removed, the entry was still used afte…
-
High 7.8
RDMA/irdma: Fix KASAN issue with tasklet
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix KASAN issue with tasklet KASAN testing revealed the following issue assocated with freeing an IRQ. [50006.466686] Call Trace: [50006.466691] <IRQ> [50006.489538] dump_stack+0x…
-
High 7.8
net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
In the Linux kernel, the following vulnerability has been resolved: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() syzbot found another use-after-free in ip6_route_mpath_notify() [1] Commit f7225172f25a ("net/ipv6: prevent use after free in ip6_rout…
-
High 7.8
tcp: Fix refcnt handling in __inet_hash_connect().
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix refcnt handling in __inet_hash_connect(). syzbot reported a warning in sk_nulls_del_node_init_rcu(). The commit 66b60b0c8c4a ("dccp/tcp: Unhash sk from ehash for tb2 alloc failure af…
-
High 7.8
rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsk_timer_handler(). syzkaller reported a warning of netns tracker [0] followed by KASAN splat [1] and another ref tracker warning [1]. syzkaller coul…
-
High 7.8
f2fs: fix to truncate meta inode pages forcely
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption: Thread A GC thread - gc_data_segment - ra_data_block - locked meta_inode page - f2fs_inplace_write_da…
-
High 7.8
NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 A call to listxattr() with a buffer size = 0 returns the actual size of the buffer needed for a subsequent call. When size > 0, nfs…
-
High 7.8
RDMA/srpt: Do not register event handler until srpt device is fully setup
In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Do not register event handler until srpt device is fully setup Upon rare occasions, KASAN reports a use-after-free Write in srpt_refresh_port(). This seems to be because an event h…
-
High 7.8
dm: call the resume method on internal suspend
In the Linux kernel, the following vulnerability has been resolved: dm: call the resume method on internal suspend There is this reported crash when experimenting with the lvm2 testsuite. The list corruption is caused by the fact that the postsuspend and resu…
-
High 7.8
bpf: Fix stackmap overflow check on 32-bit arches
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stackmap overflow check on 32-bit arches The stackmap code relies on roundup_pow_of_two() to compute the number of hash buckets, and contains an overflow check by checking if the res…
-
High 7.8
bpf: Fix hashtab overflow check on 32-bit arches
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix hashtab overflow check on 32-bit arches The hashtab code relies on roundup_pow_of_two() to compute the number of hash buckets, and contains an overflow check by checking if the resul…
-
High 7.8
bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix DEVMAP_HASH overflow check on 32-bit arches The devmap code allocates a number hash buckets equal to the next power of two of the max_entries value provided when creating the map. Wh…
-
High 7.8
Bluetooth: btrtl: fix out of bounds memory access
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: fix out of bounds memory access The problem is detected by KASAN. btrtl driver uses private hci data to store 'struct btrealtek_data'. If btrtl driver is used with btusb, th…
-
High 7.8
wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces wilc_netdev_cleanup currently triggers a KASAN warning, which can be observed on interface registration error pat…
-
High 7.8
aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts This patch is against CVE-2023-6270. The description of cve is: A flaw was found in the ATA over Ethernet (AoE) driver in the …
-
High 7.8
RDMA/mlx5: Fix fortify source warning while accessing Eth segment
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix fortify source warning while accessing Eth segment ------------[ cut here ]------------ memcpy: detected field-spanning write (size 56) of single field "eseg->inline_hdr.start"…
-
High 7.8
drm/buddy: Fix alloc_range() error handling code
In the Linux kernel, the following vulnerability has been resolved: drm/buddy: Fix alloc_range() error handling code Few users have observed display corruption when they boot the machine to KDE Plasma or playing games. We have root caused the problem that whe…
-
High 7.8
drm/amd/display: fix incorrect mpc_combine array size
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix incorrect mpc_combine array size [why] MAX_SURFACES is per stream, while MAX_PLANES is per asic. The mpc_combine is an array that records all the planes per asic. Therefo…
-
High 7.8
usb: ulpi: Fix debugfs directory leak
In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: Fix debugfs directory leak The ULPI per-device debugfs root is named after the ulpi device's parent, but ulpi_unregister_interface tries to remove a debugfs directory named after t…
-
High 7.8
inet: inet_defrag: prevent sk release while still in use
In the Linux kernel, the following vulnerability has been resolved: inet: inet_defrag: prevent sk release while still in use ip_local_out() and other functions can pass skb->sk as function argument. If the skb is a fragment and reassembly happens before such …
-
High 7.5
netfilter: nft_flow_offload: release dst in case direct xmit path is used
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: release dst in case direct xmit path is used Direct xmit does not use it since it calls dev_queue_xmit() to send packets, hence it calls dst_release(). kmemleak r…
-
High 7.5
scsi: target: core: Add TMF to tmr_list handling
In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Add TMF to tmr_list handling An abort that is responded to by iSCSI itself is added to tmr_list but does not go to target core. A LUN_RESET that goes through tmr_list take…
-
High 7.5
netfilter: nf_conntrack_h323: Add protection for bmp length out of range
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: Add protection for bmp length out of range UBSAN load reports an exception of BRK#5515 SHIFT_ISSUE:Bitwise shifts that are out of bounds for their data type. vml…
-
High 7.5
ice: fix uninitialized dplls mutex usage
In the Linux kernel, the following vulnerability has been resolved: ice: fix uninitialized dplls mutex usage The pf->dplls.lock mutex is initialized too late, after its first use. Move it to the top of ice_dpll_init. Note that the "err_exit" error path destro…
-
High 7.5
nfs: fix panic when nfs4_ff_layout_prepare_ds() fails
In the Linux kernel, the following vulnerability has been resolved: nfs: fix panic when nfs4_ff_layout_prepare_ds() fails We've been seeing the following panic in production BUG: kernel NULL pointer dereference, address: 0000000000000065 PGD 2f485f067 P4D 2f4…
-
High 7.5
net: hns3: fix kernel crash when 1588 is received on HIP08 devices
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when 1588 is received on HIP08 devices The HIP08 devices does not register the ptp devices, so the hdev->ptp is NULL, but the hardware can receive 1588 messages, a…
-
High 7.3
geneve: make sure to pull inner header in geneve_rx()
In the Linux kernel, the following vulnerability has been resolved: geneve: make sure to pull inner header in geneve_rx() syzbot triggered a bug in geneve_rx() [1] Issue is similar to the one I fixed in commit 8d975c15c0cd ("ip6_tunnel: make sure to pull inne…
-
High 7.3
net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() Apply the same fix than ones found in : 8d975c15c0cd ("ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()") 1ca1ba…
-
High 7.0
Kernel: aoe: improper reference count leads to use-after-free vulnerability
A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct net_device`, and a use-after-free can be triggered by racing between the free on the struct and the access thro…
-
High 7.0
soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free A recent DRM series purporting to simplify support for "transparent bridges" and handling of probe deferrals ironically exposed a …
-
Medium 6.5
Bluetooth: af_bluetooth: Fix deadlock
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: af_bluetooth: Fix deadlock Attemting to do sock_lock on .recvmsg may cause a deadlock as shown bellow, so instead of using sock_sock this uses sk_receive_queue.lock on bt_sock_ioct…
-
Medium 6.4
media: pvrusb2: fix uaf in pvr2_context_set_notify
In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix uaf in pvr2_context_set_notify [Syzbot reported] BUG: KASAN: slab-use-after-free in pvr2_context_set_notify+0x2c4/0x310 drivers/media/usb/pvrusb2/pvrusb2-context.c:35 Read…
-
Medium 6.2
PCI: Fix active state requirement in PME polling
In the Linux kernel, the following vulnerability has been resolved: PCI: Fix active state requirement in PME polling The commit noted in fixes added a bogus requirement that runtime PM managed devices need to be in the RPM_ACTIVE state for PME polling. In fac…
-
Medium 6.0
efi: runtime: Fix potential overflow of soft-reserved region size
In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size md_size will have been narrowed if we have >= 4GB worth of pages in a soft-reserved region.
-
Medium 6.0
ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
In the Linux kernel, the following vulnerability has been resolved: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() After unregistering the CPU idle device, the memory associated with it is not freed, leading to a memory leak: unreference…
-
Medium 5.5
Bluetooth: hci_core: Fix possible buffer overflow
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size name[8] field so in the event that hdev->name is bigger than that strcpy would attempt to write past its…
-
Medium 5.5
Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security During our fuzz testing of the connection and disconnection process at the RFCOMM layer, we discovered this bug. By comparing th…
-
Medium 5.5
drm/amdgpu: Reset IH OVERFLOW_CLEAR bit
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reset IH OVERFLOW_CLEAR bit Allows us to detect subsequent IH ring buffer overflows as well.
-
Medium 5.3
do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
In the Linux kernel, the following vulnerability has been resolved: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak syzbot identified a kernel information leak vulnerability in do_sys_name_to_handle() and issued the following report [1]. [1] "BU…
-
Medium 5.1
powerpc/rtas: use correct function name for resetting TCE tables
In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: use correct function name for resetting TCE tables The PAPR spec spells the function name as "ibm,reset-pe-dma-windows" but in practice firmware uses the singular form: "ibm,res…
-
Medium 4.4
nvme-fc: do not wait in vain when unloading module
In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting all controllers and freeing 'left over IDs'. To prevent double free a synchronization between…
-
Unscored —
wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
In the Linux kernel, the following vulnerability has been resolved: wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled When QoS is disabled, the queue priority value will not map to the correct ieee80211 queue since there is only one queue…
-
Unscored —
pmdomain: mediatek: fix race conditions with genpd
In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix race conditions with genpd If the power domains are registered first with genpd and *after that* the driver attempts to power them on in the probe sequence, then it is…
-
Unscored —
media: ir_toy: fix a memleak in irtoy_tx
In the Linux kernel, the following vulnerability has been resolved: media: ir_toy: fix a memleak in irtoy_tx When irtoy_command fails, buf should be freed since it is allocated by irtoy_tx, or there is a memleak.
-
Unscored —
mm: zswap: fix missing folio cleanup in writeback race path
In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix missing folio cleanup in writeback race path In zswap_writeback_entry(), after we get a folio from __read_swap_cache_async(), we grab the tree lock again to check that the swap…
-
Unscored —
drm/amd/display: Fix memory leak in dm_sw_fini()
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix memory leak in dm_sw_fini() After destroying dmub_srv, the memory associated with it is not freed, causing a memory leak: unreferenced object 0xffff896302b45800 (size 102…
-
Unscored —
netfilter: nf_tables: set dormant flag on hook register failure
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: set dormant flag on hook register failure We need to set the dormant flag again if we fail to register the hooks. During memory pressure hook registration can fail and w…
-
Unscored —
platform/x86: think-lmi: Fix password opcode ordering for workstations
In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix password opcode ordering for workstations The Lenovo workstations require the password opcode to be run before the attribute value is changed (if Admin password i…
-
Unscored —
net: bridge: switchdev: Skip MDB replays of deferred events on offload
In the Linux kernel, the following vulnerability has been resolved: net: bridge: switchdev: Skip MDB replays of deferred events on offload Before this change, generation of the list of MDB events to replay would race against the creation of new group membersh…
-
Unscored —
IB/hfi1: Fix a memleak in init_credit_return
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix a memleak in init_credit_return When dma_alloc_coherent fails to allocate dd->cr_base[i].va, init_credit_return should deallocate dd->cr_base and dd->cr_base[i] that allocated be…
-
Unscored —
cachefiles: fix memory leak in cachefiles_add_cache()
In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix memory leak in cachefiles_add_cache() The following memory leak was reported after unbinding /dev/cachefiles: =================================================================…
-
Unscored —
LoongArch: Update cpu_sibling_map when disabling nonboot CPUs
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Update cpu_sibling_map when disabling nonboot CPUs Update cpu_sibling_map when disabling nonboot CPUs by defining & calling clear_cpu_sibling_map(), otherwise we get such errors on…
-
Unscored —
scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd()
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd() When task_tag >= 32 (in MCQ mode) and sizeof(unsigned int) == 4, 1U << task_tag will out of bounds for a u32 mask. Fix this up to preven…
-
Unscored —
block: Fix WARNING in _copy_from_iter
In the Linux kernel, the following vulnerability has been resolved: block: Fix WARNING in _copy_from_iter Syzkaller reports a warning in _copy_from_iter because an iov_iter is supposedly used in the wrong direction. The reason is that syzcaller managed to gen…
-
Unscored —CVE-2024-26848 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
netlink: add nla be16/32 types to minlen array
In the Linux kernel, the following vulnerability has been resolved: netlink: add nla be16/32 types to minlen array BUG: KMSAN: uninit-value in nla_validate_range_unsigned lib/nlattr.c:222 [inline] BUG: KMSAN: uninit-value in nla_validate_int_range lib/nlattr.…
-
Unscored —
mm/debug_vm_pgtable: fix BUG_ON with pud advanced test
In the Linux kernel, the following vulnerability has been resolved: mm/debug_vm_pgtable: fix BUG_ON with pud advanced test Architectures like powerpc add debug checks to ensure we find only devmap PUD pte entries. These debug checks are only done with CONFIG_…
-
Unscored —
net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
In the Linux kernel, the following vulnerability has been resolved: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() The function ice_bridge_setlink() may encounter a NULL pointer dereference if nlmsg_find_attr() returns NULL and br_sp…
-
Unscored —
net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map Just simply reordering the functions mlx5e_ptp_metadata_map_put and mlx5e_p…
-
Unscored —
net/bnx2x: Prevent access to a freed page in page_pool
In the Linux kernel, the following vulnerability has been resolved: net/bnx2x: Prevent access to a freed page in page_pool Fix race condition leading to system crash during EEH error handling During EEH error recovery, the bnx2x driver's transmit timeout logi…
-
Unscored —
dm-integrity: fix a memory leak when rechecking the data
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a memory leak when rechecking the data Memory for the "checksums" pointer will leak if the data is rechecked after checksum failure (because the associated kfree won't happe…
-
Unscored —
wireguard: receive: annotate data-race around receiving_counter.counter
In the Linux kernel, the following vulnerability has been resolved: wireguard: receive: annotate data-race around receiving_counter.counter Syzkaller with KCSAN identified a data-race issue when accessing keypair->receiving_counter.counter. Use READ_ONCE() an…
-
Unscored —
packet: annotate data-races around ignore_outgoing
In the Linux kernel, the following vulnerability has been resolved: packet: annotate data-races around ignore_outgoing ignore_outgoing is read locklessly from dev_queue_xmit_nit() and packet_getsockopt() Add appropriate READ_ONCE()/WRITE_ONCE() annotations. s…
-
Unscored —
hsr: Fix uninit-value access in hsr_get_node()
In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in hsr_get_node() KMSAN reported the following uninit-value access issue [1]: ===================================================== BUG: KMSAN: uninit-value in hs…
-
Unscored —
spi: lpspi: Avoid potential use-after-free in probe()
In the Linux kernel, the following vulnerability has been resolved: spi: lpspi: Avoid potential use-after-free in probe() fsl_lpspi_probe() is allocating/disposing memory manually with spi_alloc_host()/spi_alloc_target(), but uses devm_spi_register_controller…
-
Unscored —
comedi: comedi_8255: Correct error in subdevice initialization
In the Linux kernel, the following vulnerability has been resolved: comedi: comedi_8255: Correct error in subdevice initialization The refactoring done in commit 5c57b1ccecc7 ("comedi: comedi_8255: Rework subdevice initialization functions") to the initializa…
-
Unscored —
f2fs: fix NULL pointer dereference in f2fs_submit_page_write()
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix NULL pointer dereference in f2fs_submit_page_write() BUG: kernel NULL pointer dereference, address: 0000000000000014 RIP: 0010:f2fs_submit_page_write+0x6cf/0x780 [f2fs] Call Trace: …
-
Unscored —
scsi: hisi_sas: Fix a deadlock issue related to automatic dump
In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Fix a deadlock issue related to automatic dump If we issue a disabling PHY command, the device attached with it will go offline, if a 2 bit ECC error occurs at the same time, …
-
Unscored —
drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip It's possible that mtk_crtc->event is NULL in mtk_drm_crtc_finish_page_flip(). pending_needs_vblank value is set by mtk…
-
Unscored —
drm/bridge: adv7511: fix crash on irq during probe
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: adv7511: fix crash on irq during probe Moved IRQ registration down to end of adv7511_probe(). If an IRQ already is pending during adv7511_probe (before adv7511_cec_init) then cec_…
-
Unscored —
quota: Fix potential NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved: quota: Fix potential NULL pointer dereference Below race may cause NULL pointer dereference P1 P2 dquot_free_inode quota_off drop_dquot_ref remove_dquot_ref dquots = i_dquot(inode) dquots = i…
-
Unscored —
clk: meson: Add missing clocks to axg_clk_regmaps
In the Linux kernel, the following vulnerability has been resolved: clk: meson: Add missing clocks to axg_clk_regmaps Some clocks were missing from axg_clk_regmaps, which caused kernel panic during cat /sys/kernel/debug/clk/clk_summary [ 57.349402] Unable to …
-
Unscored —
Bluetooth: btusb: Fix memory leak
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Fix memory leak This checks if CONFIG_DEV_COREDUMP is enabled before attempting to clone the skb and also make sure btmtk_process_coredump frees the skb passed following the…
-
Unscored —
Bluetooth: msft: Fix memory leak
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: Fix memory leak Fix leaking buffer allocated to send MSFT_OP_LE_MONITOR_ADVERTISEMENT.
-
Unscored —
iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected For those endpoint devices connect to system via hotplug capable ports, users could request a hot reset to the dev…
-
Unscored —
wifi: mt76: mt7921e: fix use-after-free in free_irq()
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix use-after-free in free_irq() From commit a304e1b82808 ("[PATCH] Debug shared irqs"), there is a test to make sure the shared irq handler should be able to handle the …
-
Unscored —
firmware: arm_scmi: Fix double free in SMC transport cleanup path
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix double free in SMC transport cleanup path When the generic SCMI code tears down a channel, it calls the chan_free callback function, defined by each transport. Since m…
-
Unscored —
wifi: wfx: fix memory leak when starting AP
In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix memory leak when starting AP Kmemleak reported this error: unreferenced object 0xd73d1180 (size 184): comm "wpa_supplicant", pid 1559, jiffies 13006305 (age 964.245s) hex dump …
-
Unscored —
wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete The ath9k_wmi_event_tasklet() used in ath9k_htc assumes that all the data structures have been fully initialised by …
-
Unscored —
block: fix deadlock between bd_link_disk_holder and partition scan
In the Linux kernel, the following vulnerability has been resolved: block: fix deadlock between bd_link_disk_holder and partition scan 'open_mutex' of gendisk is used to protect open/close block devices. But in bd_link_disk_holder(), it is used to protect the…
-
Unscored —
md: fix kmemleak of rdev->serial
In the Linux kernel, the following vulnerability has been resolved: md: fix kmemleak of rdev->serial If kobject_add() is fail in bind_rdev_to_array(), 'rdev->serial' will be alloc not be freed, and kmemleak occurs. unreferenced object 0xffff88815a350000 (size…
-
Unscored —
perf: RISCV: Fix panic on pmu overflow handler
In the Linux kernel, the following vulnerability has been resolved: perf: RISCV: Fix panic on pmu overflow handler (1 << idx) of int is not desired when setting bits in unsigned long overflowed_ctrs, use BIT() instead. This panic happens when running 'perf re…
-
Unscored —CVE-2024-26904 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —CVE-2024-26905 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() When trying to use copy_from_kernel_nofault() to read vsyscall page through a bpf program, the following oops was reported: …
-
Unscored —CVE-2024-26908 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
netfilter: ipset: fix performance regression in swap operation
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix performance regression in swap operation The patch "netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test", commit 28628fa9 fixes a race…
-
Unscored —
drm/nouveau: fix several DMA buffer leaks
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix several DMA buffer leaks Nouveau manages GSP-RM DMA buffers with nvkm_gsp_mem objects. Several of these buffers are never dealloced. Some of them can be deallocated right aft…
-
Unscored —
drm/amd/display: Fix dcn35 8k30 Underflow/Corruption Issue
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dcn35 8k30 Underflow/Corruption Issue [why] odm calculation is missing for pipe split policy determination and cause Underflow/Corruption issue. [how] Add the odm calcula…
-
Unscored —
Revert "drm/amd: flush any delayed gfxoff on suspend entry"
In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: flush any delayed gfxoff on suspend entry" commit ab4750332dbe ("drm/amdgpu/sdma5.2: add begin/end_use ring callbacks") caused GFXOFF control to be used more heavily and the …
-
Unscored —
scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"
In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" This reverts commit 1a1975551943f681772720f639ff42fbaa746212. This commit causes interrupts to be lost for FCoE devices, s…
-
Unscored —
tracing/trigger: Fix to return error if failed to alloc snapshot
In the Linux kernel, the following vulnerability has been resolved: tracing/trigger: Fix to return error if failed to alloc snapshot Fix register_snapshot_trigger() to return error code if it failed to allocate a snapshot instead of 0 (success). Unless that, …
Revision history
-
#179
Neue Updates von Dell aufgenommen
-
#178
Neue Updates von SUSE aufgenommen
-
#177
Neue Updates von SUSE aufgenommen
-
#176
Neue Updates von SUSE aufgenommen
-
#175
Neue Updates von SUSE aufgenommen
-
#174
Neue Updates von SUSE aufgenommen
-
#173
Neue Updates von Ubuntu aufgenommen
-
#172
Neue Updates von Ubuntu aufgenommen
-
#171
Neue Updates von Dell aufgenommen
-
#170
Neue Updates von Ubuntu aufgenommen
-
#169
Neue Updates von Ubuntu aufgenommen
-
#168
Neue Updates von Ubuntu aufgenommen
-
#167
Neue Updates von Ubuntu aufgenommen
-
#166
Neue Updates von IBM aufgenommen
-
#165
Neue Updates von Red Hat aufgenommen
-
#164
Neue Updates von IBM aufgenommen
-
#163
Neue Updates von SUSE aufgenommen
-
#162
Neue Updates von SUSE aufgenommen
-
#161
Neue Updates von Red Hat aufgenommen
-
#160
Neue Updates von SUSE aufgenommen
-
#159
Neue Updates von SUSE aufgenommen
-
#158
Neue Updates von Red Hat aufgenommen
-
#157
Neue Updates von Red Hat aufgenommen
-
#156
Neue Updates von Ubuntu aufgenommen
-
#155
Neue Updates von Ubuntu aufgenommen
References
-
Linux Kernel CVE Announcements vom 2024-04-17
https://lore.kernel.org/linux-cve-announce/
-
SUSE Security Update SUSE-SU-2024:1322-2 vom 2024-04-18
https://lists.suse.com/pipermail/sle-security-updates/2024-April/018377.html
-
SUSE Security Update SUSE-SU-2024:1454-1 vom 2024-04-26
https://lists.suse.com/pipermail/sle-security-updates/2024-April/018431.html
-
SUSE Security Update SUSE-SU-2024:1466-1 vom 2024-04-29
https://lists.suse.com/pipermail/sle-security-updates/2024-April/018438.html
-
SUSE Security Update SUSE-SU-2024:1480-1 vom 2024-04-30
https://lists.suse.com/pipermail/sle-security-updates/2024-April/018444.html
-
SUSE Security Update SUSE-SU-2024:1490-1 vom 2024-05-03
https://lists.suse.com/pipermail/sle-security-updates/2024-May/018445.html
-
Debian Security Advisory DSA-5681 vom 2024-05-06
https://lists.debian.org/debian-security-announce/2024/msg00090.html
-
Ubuntu Security Notice USN-6767-1 vom 2024-05-07
https://ubuntu.com/security/notices/USN-6767-1
-
Ubuntu Security Notice USN-6766-1 vom 2024-05-07
https://ubuntu.com/security/notices/USN-6766-1
-
Oracle Linux Security Advisory ELSA-2024-12380 vom 2024-05-14
http://linux.oracle.com/errata/ELSA-2024-12380.html
-
Ubuntu Security Notice USN-6767-2 vom 2024-05-14
https://ubuntu.com/security/notices/USN-6767-2
-
SUSE Security Update SUSE-SU-2024:1641-1 vom 2024-05-14
https://lists.suse.com/pipermail/sle-security-updates/2024-May/018531.html
-
SUSE Security Update SUSE-SU-2024:1642-1 vom 2024-05-14
https://lists.suse.com/pipermail/sle-security-updates/2024-May/018530.html
-
SUSE Security Update SUSE-SU-2024:1647-1 vom 2024-05-14
https://lists.suse.com/pipermail/sle-security-updates/2024-May/018525.html
-
SUSE Security Update SUSE-SU-2024:1643-1 vom 2024-05-14
https://lists.suse.com/pipermail/sle-security-updates/2024-May/018529.html
-
SUSE Security Update SUSE-SU-2024:1644-1 vom 2024-05-14
https://lists.suse.com/pipermail/sle-security-updates/2024-May/018528.html
-
SUSE Security Update SUSE-SU-2024:1646-1 vom 2024-05-14
https://lists.suse.com/pipermail/sle-security-updates/2024-May/018526.html
-
SUSE Security Update SUSE-SU-2024:1645-1 vom 2024-05-14
https://lists.suse.com/pipermail/sle-security-updates/2024-May/018527.html
-
SUSE Security Update SUSE-SU-2024:1648-1 vom 2024-05-14
https://lists.suse.com/pipermail/sle-security-updates/2024-May/018524.html
-
SUSE Security Update SUSE-SU-2024:1650-1 vom 2024-05-15
https://lists.suse.com/pipermail/sle-security-updates/2024-May/018533.html
-
Ubuntu Security Notice USN-6766-2 vom 2024-05-15
https://ubuntu.com/security/notices/USN-6766-2
-
SUSE Security Update SUSE-SU-2024:1659-1 vom 2024-05-15
https://lists.suse.com/pipermail/sle-security-updates/2024-May/018538.html
-
Ubuntu Security Notice USN-6766-3 vom 2024-05-20
https://ubuntu.com/security/notices/USN-6766-3
-
SUSE Security Update SUSE-SU-2024:1648-2 vom 2024-05-21
https://lists.suse.com/pipermail/sle-security-updates/2024-May/018572.html
-
Amazon Linux Security Advisory ALASKERNEL-5.10-2024-054 vom 2024-05-24
https://alas.aws.amazon.com/AL2/ALASKERNEL-5.10-2024-054.html
-
Ubuntu Security Notice USN-6795-1 vom 2024-05-28
https://ubuntu.com/security/notices/USN-6795-1
-
SUSE Security Update SUSE-SU-2024:1870-1 vom 2024-05-30
https://lists.suse.com/pipermail/sle-security-updates/2024-May/018634.html
-
Amazon Linux Security Advisory ALAS-2024-2549 vom 2024-05-30
https://alas.aws.amazon.com/AL2/ALAS-2024-2549.html
-
Amazon Linux Security Advisory ALASKERNEL-5.4-2024-067 vom 2024-05-30
https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2024-067.html
-
Debian Security Advisory DSA-5703 vom 2024-06-02
https://lists.debian.org/debian-security-announce/2024/msg00113.html
-
Red Hat Security Advisory RHSA-2024:3618 vom 2024-06-05
https://access.redhat.com/errata/RHSA-2024:3618
-
Oracle Linux Security Advisory ELSA-2024-12377 vom 2024-06-05
https://oss.oracle.com/pipermail/el-errata/2024-June/015802.html
-
Oracle Linux Security Advisory ELSA-2024-12377 vom 2024-06-05
https://oss.oracle.com/pipermail/el-errata/2024-June/015801.html
-
Red Hat Security Advisory RHSA-2024:3627 vom 2024-06-05
https://access.redhat.com/errata/RHSA-2024:3627
-
Oracle Linux Security Advisory ELSA-2024-12385 vom 2024-06-05
https://oss.oracle.com/pipermail/el-errata/2024-June/015806.html
-
Oracle Linux Security Advisory ELSA-2024-12385 vom 2024-06-05
https://oss.oracle.com/pipermail/el-errata/2024-June/015807.html
-
Oracle Linux Security Advisory ELSA-2024-3618 vom 2024-06-06
https://linux.oracle.com/errata/ELSA-2024-3618.html
-
Ubuntu Security Notice USN-6817-1 vom 2024-06-08
https://ubuntu.com/security/notices/USN-6817-1
-
Ubuntu Security Notice USN-6821-1 vom 2024-06-08
https://ubuntu.com/security/notices/USN-6821-1
-
Ubuntu Security Notice USN-6816-1 vom 2024-06-08
https://ubuntu.com/security/notices/USN-6816-1
-
Ubuntu Security Notice USN-6820-1 vom 2024-06-08
https://ubuntu.com/security/notices/USN-6820-1
-
Ubuntu Security Notice USN-6821-2 vom 2024-06-10
https://ubuntu.com/security/notices/USN-6821-2
-
SUSE Security Update SUSE-SU-2024:1979-1 vom 2024-06-11
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018685.html
-
Ubuntu Security Notice USN-6817-2 vom 2024-06-11
https://ubuntu.com/security/notices/USN-6817-2
-
Amazon Linux Security Advisory ALASKERNEL-5.15-2024-044 vom 2024-06-12
https://alas.aws.amazon.com/AL2/ALASKERNEL-5.15-2024-044.html
-
SUSE Security Update SUSE-SU-2024:1983-1 vom 2024-06-11
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018700.html
-
Ubuntu Security Notice LSN-0104-1 vom 2024-06-11
https://ubuntu.com/security/notices/LSN-0104-1
-
Ubuntu Security Notice USN-6820-2 vom 2024-06-11
https://ubuntu.com/security/notices/USN-6820-2
-
Ubuntu Security Notice USN-6821-3 vom 2024-06-11
https://ubuntu.com/security/notices/USN-6821-3
-
Ubuntu Security Notice USN-6828-1 vom 2024-06-11
https://ubuntu.com/security/notices/USN-6828-1
-
SUSE Security Update SUSE-SU-2024:2008-1 vom 2024-06-12
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018706.html
-
SUSE Security Update SUSE-SU-2024:2011-1 vom 2024-06-12
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018710.html
-
SUSE Security Update SUSE-SU-2024:2010-1 vom 2024-06-12
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018711.html
-
Ubuntu Security Notice USN-6831-1 vom 2024-06-12
https://ubuntu.com/security/notices/USN-6831-1
-
Ubuntu Security Notice USN-6821-4 vom 2024-06-14
https://ubuntu.com/security/notices/USN-6821-4
-
Ubuntu Security Notice USN-6817-3 vom 2024-06-14
https://ubuntu.com/security/notices/USN-6817-3
-
SUSE Security Update SUSE-SU-2024:2096-1 vom 2024-06-19
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018763.html
-
SUSE Security Update SUSE-SU-2024:2101-1 vom 2024-06-19
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018760.html
-
SUSE Security Update SUSE-SU-2024:2100-1 vom 2024-06-19
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018761.html
-
SUSE Security Update SUSE-SU-2024:2099-1 vom 2024-06-19
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018762.html
-
SUSE Security Update SUSE-SU-2024:2091-1 vom 2024-06-19
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018766.html
-
SUSE Security Update SUSE-SU-2024:2092-1 vom 2024-06-19
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018765.html
-
SUSE Security Update SUSE-SU-2024:2094-1 vom 2024-06-19
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018764.html
-
SUSE Security Update SUSE-SU-2024:2109-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018772.html
-
SUSE Security Update SUSE-SU-2024:2135-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018783.html
-
SUSE Security Update SUSE-SU-2024:2145-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018791.html
-
SUSE Security Update SUSE-SU-2024:2139-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018773.html
-
SUSE Security Update SUSE-SU-2024:2148-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018789.html
-
SUSE Security Update SUSE-SU-2024:2156-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018787.html
-
SUSE Security Update SUSE-SU-2024:2130-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018774.html
-
SUSE Security Update SUSE-SU-2024:2160-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018786.html
-
SUSE Security Update SUSE-SU-2024:2162-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018785.html
-
SUSE Security Update SUSE-SU-2024:2124-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018775.html
-
SUSE Security Update SUSE-SU-2024:2163-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018784.html
-
SUSE Security Update SUSE-SU-2024:2121-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018776.html
-
SUSE Security Update SUSE-SU-2024:2166-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018797.html
-
SUSE Security Update SUSE-SU-2024:2143-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018792.html
-
SUSE Security Update SUSE-SU-2024:2120-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018777.html
-
SUSE Security Update SUSE-SU-2024:2165-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018798.html
-
SUSE Security Update SUSE-SU-2024:2115-1 vom 2024-06-21
https://lists.suse.com/pipermail/sle-security-updates/2024-June/018778.html