Skip to content
OpenAdvisories
Medium 1 exploited CVE WID-SEC-2024-1322 8 CVEs

Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe

Published Jun 9, 2024 · Updated Feb 18, 2026 · Revision 59 · de-DE

Vendor: amazon Vendor: Broadcom Vendor: Debian Vendor: Dell Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Brocade SANnav Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: NetWorker Product: openshift Product: QRadar SIEM Product: Security Guardium Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder einen unspezifischen Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 8

  • High 7.8
    CVE-2024-36971 Exploited Public exploit

    net: fix __dst_negative_advice() race

    In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Aug 7, 2024
  • High 7.8
    CVE-2024-36965

    remoteproc: mediatek: Make sure IPI buffer fits in L2TCM

    In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the S…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-36972

    af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock.

    In the Linux kernel, the following vulnerability has been resolved: af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock. Billy Jheng Bing-Jhong reported a race between __unix_gc() and queue_oob(). __unix_gc() tries to garbage-collect close()d inf…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.6
    CVE-2024-36968

    Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() l2cap_le_flowctl_init() can cause both div-by-zero and an integer overflow since hdev->le_mtu may not fall in the valid range. Mov…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-36966

    erofs: reliably distinguish block based and fscache mode

    In the Linux kernel, the following vulnerability has been resolved: erofs: reliably distinguish block based and fscache mode When erofs_kill_sb() is called in block dev based mode, s_bdev may not have been initialised yet, and if CONFIG_EROFS_FS_ONDEMAND is e…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-36967

    KEYS: trusted: Fix memory leak in tpm2_key_encode()

    In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix memory leak in tpm2_key_encode() 'scratch' is never freed. Fix this by calling kfree() in the success, and in the error case.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-36969

    drm/amd/display: Fix division by zero in setup_dsc_config

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix division by zero in setup_dsc_config When slice_height is 0, the division by slice_height in the calculation of the number of slices will cause a division by zero driver …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-36970

    wifi: iwlwifi: Use request_module_nowait

    In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Use request_module_nowait This appears to work around a deadlock regression that came in with the LED merge in 6.9. The deadlock happens on my system with 24 iwlwifi radios, so…

    Linux Linux linux-raspi2 linux-hwe Linux Ubuntu

Revision history

  1. #59

    Neue Updates von Amazon aufgenommen

  2. #58

    Neue Updates von SUSE aufgenommen

  3. #57

    Neue Updates von SUSE aufgenommen

  4. #56

    Neue Updates von SUSE aufgenommen

  5. #55

    Neue Updates von IBM aufgenommen

  6. #54

    Referenz(en) aufgenommen:

  7. #53

    Neue Updates von SUSE aufgenommen

  8. #52

    Neue Updates von SUSE aufgenommen

  9. #51

    Neue Updates von Red Hat aufgenommen

  10. #50

    Neue Updates von SUSE aufgenommen

  11. #49

    Neue Updates von BROCADE aufgenommen

  12. #48

    Neue Updates von Dell aufgenommen

  13. #47

    Neue Updates von SUSE aufgenommen

  14. #46

    Neue Updates von SUSE aufgenommen

  15. #45

    Neue Updates von SUSE aufgenommen

  16. #44

    Neue Updates von Ubuntu aufgenommen

  17. #43

    Neue Updates von Ubuntu aufgenommen

  18. #42

    Neue Updates von Ubuntu aufgenommen

  19. #41

    Neue Updates von Ubuntu aufgenommen

  20. #40

    Neue Updates von SUSE aufgenommen

  21. #39

    Neue Updates von Ubuntu aufgenommen

  22. #38

    Neue Updates von SUSE aufgenommen

  23. #37

    Neue Updates von Ubuntu aufgenommen

  24. #36

    Neue Updates von Oracle Linux aufgenommen

  25. #35

    Neue Updates von SUSE aufgenommen

References