Summary
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 132
-
Critical 10.0
net: openvswitch: fix overwriting ct original tuple for ICMPv6
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix overwriting ct original tuple for ICMPv6 OVS_PACKET_CMD_EXECUTE has 3 main attributes: - OVS_PACKET_ATTR_KEY - Packet metadata in a netlink format. - OVS_PACKET_ATTR_PAC…
-
Critical 9.8
net: systemport: Add global locking for descriptor lifecycle
In the Linux kernel, the following vulnerability has been resolved: net: systemport: Add global locking for descriptor lifecycle The descriptor list is a shared resource across all of the transmit queues, and the locking mechanism used today only protects con…
-
Critical 9.8
RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt In rxe_comp_queue_pkt() an incoming response packet skb is enqueued to the resp_pkts queue and then a decision is made whether to run the complet…
-
Critical 9.8
gfs2: Fix potential glock use-after-free on unmount
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100…
-
High 8.8
Bluetooth: HCI: Remove HCI_AMP support
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Remove HCI_AMP support Since BT_HS has been remove HCI_AMP controllers no longer has any use so remove it along with the capability of creating AMP controllers. Since we no lo…
-
High 8.2
wifi: carl9170: re-fix fortified-memset warning
In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: re-fix fortified-memset warning The carl9170_tx_release() function sometimes triggers a fortified-memset warning in my randconfig builds: In file included from include/linux/s…
-
High 8.1
mac80211: validate extended element ID is present
In the Linux kernel, the following vulnerability has been resolved: mac80211: validate extended element ID is present Before attempting to parse an extended element, verify that the extended element ID is present.
-
High 8.1
Bluetooth: refactor malicious adv data check
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: refactor malicious adv data check Check for out-of-bound read was being performed at the end of while num_reports loop, and would fill journal with false positives. Added check to …
-
High 7.8
scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() In resp_mode_select() sanity check the block descriptor len to avoid UAF. BUG: KASAN: use-after-free in resp_mode_…
-
High 7.8
io-wq: check for wq exit after adding new worker task_work
In the Linux kernel, the following vulnerability has been resolved: io-wq: check for wq exit after adding new worker task_work We check IO_WQ_BIT_EXIT before attempting to create a new worker, and wq exit cancels pending work if we have any. But it's possible…
-
High 7.8
sit: do not call ipip6_dev_free() from sit_init_net()
In the Linux kernel, the following vulnerability has been resolved: sit: do not call ipip6_dev_free() from sit_init_net() ipip6_dev_free is sit dev->priv_destructor, already called by register_netdevice() if something goes wrong. Alternative would be to make …
-
High 7.8
sch_cake: do not call cake_destroy() from cake_init()
In the Linux kernel, the following vulnerability has been resolved: sch_cake: do not call cake_destroy() from cake_init() qdiscs are not supposed to call their own destroy() method from init(), because core stack already does that. syzbot was able to trigger …
-
High 7.8
dm btree remove: fix use after free in rebalance_children()
In the Linux kernel, the following vulnerability has been resolved: dm btree remove: fix use after free in rebalance_children() Move dm_tm_unlock() after dm_tm_dec().
-
High 7.8
vduse: fix memory corruption in vduse_dev_ioctl()
In the Linux kernel, the following vulnerability has been resolved: vduse: fix memory corruption in vduse_dev_ioctl() The "config.offset" comes from the user. There needs to a check to prevent it being out of bounds. The "config.offset" and "dev->config_size"…
-
High 7.8
i2c: virtio: fix completion handling
In the Linux kernel, the following vulnerability has been resolved: i2c: virtio: fix completion handling The driver currently assumes that the notify callback is only received when the device is done with all the queued buffers. However, this is not true, sin…
-
High 7.8
RDMA/irdma: Fix a user-after-free in add_pble_prm
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix a user-after-free in add_pble_prm When irdma_hmc_sd_one fails, 'chunk' is freed while its still on the PBLE info list. Add the chunk entry to the PBLE info list only after suc…
-
High 7.8
RDMA: Fix use-after-free in rxe_queue_cleanup
In the Linux kernel, the following vulnerability has been resolved: RDMA: Fix use-after-free in rxe_queue_cleanup On error handling path in rxe_qp_from_init() qp->sq.queue is freed and then rxe_create_qp() will drop last reference to this object. qp clean up …
-
High 7.8
net: bridge: mst: fix vlan use-after-free
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix vlan use-after-free syzbot reported a suspicious rcu usage[1] in bridge's mst code. While fixing it I noticed that nothing prevents a vlan to be freed while walking the …
-
High 7.8
of: module: add buffer overflow check in of_modalias()
In the Linux kernel, the following vulnerability has been resolved: of: module: add buffer overflow check in of_modalias() In of_modalias(), if the buffer happens to be too small even for the 1st snprintf() call, the len parameter will become negative and str…
-
High 7.8
RDMA/mana_ib: boundary check before installing cq callbacks
In the Linux kernel, the following vulnerability has been resolved: RDMA/mana_ib: boundary check before installing cq callbacks Add a boundary check inside mana_ib_install_cq_cb to prevent index overflow.
-
High 7.8
RDMA/hns: Fix UAF for cq async event
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix UAF for cq async event The refcount of CQ is not protected by locks. When CQ asynchronous events and CQ destruction are concurrent, CQ may have been released, which will cause U…
-
High 7.8
net/mlx5: Add a timeout to acquire the command queue semaphore
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Add a timeout to acquire the command queue semaphore Prevent forced completion handling on an entry that has not yet been assigned an index, causing an out of bounds access on idx =…
-
High 7.8
wifi: nl80211: Avoid address calculations via out of bounds array indexing
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: Avoid address calculations via out of bounds array indexing Before request->channels[] can be used, request->n_channels must be set. Additionally, address calculations for memo…
-
High 7.8
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type for BPF_PROG_TYPE_CGROUP_SKB. link_cre…
-
High 7.8
drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group The perf tool allows users to create event groups through following cmd [1], but the driver does not check whether the…
-
High 7.8
drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group The perf tool allows users to create event groups through following cmd [1], but the driver does not check whether the …
-
High 7.8
wifi: ath12k: fix out-of-bound access of qmi_invoke_handler()
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bound access of qmi_invoke_handler() Currently, there is no terminator entry for ath12k_qmi_msg_handlers hence facing below KASAN warning, ===========================…
-
High 7.8
ecryptfs: Fix buffer size for tag 66 packet
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: Fix buffer size for tag 66 packet The 'TAG 66 Packet Format' description is missing the cipher code and checksum fields that are packed into the message packet. As a result, the buf…
-
High 7.8
epoll: be better about file lifetimes
In the Linux kernel, the following vulnerability has been resolved: epoll: be better about file lifetimes epoll can call out to vfs_poll() with a file pointer that may race with the last 'fput()'. That would make f_count go down to zero, and while the ep->mtx…
-
High 7.8
drm/amdgpu/mes: fix use-after-free issue
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/mes: fix use-after-free issue Delete fence fallback timer to fix the ramdom use-after-free issue. v2: move to amdgpu_mes.c
-
High 7.8
nilfs2: fix use-after-free of timer for log writer thread
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of timer for log writer thread Patch series "nilfs2: fix log writer related issues". This bug fix series covers three nilfs2 log writer-related issues, including a …
-
High 7.8
speakup: Fix sizeof() vs ARRAY_SIZE() bug
In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "buf" pointer is an array of u16 values. This code should be using ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512), otherwise it c…
-
High 7.8
ftrace: Fix possible use-after-free issue in ftrace_location()
In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix possible use-after-free issue in ftrace_location() KASAN reports a bug: BUG: KASAN: use-after-free in ftrace_location+0x90/0x120 Read of size 8 at addr ffff888141d40010 by task in…
-
High 7.8
drm/mediatek: Init `ddp_comp` with devm_kcalloc()
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Init `ddp_comp` with devm_kcalloc() In the case where `conn_routes` is true we allocate an extra slot in the `ddp_comp` array but mtk_drm_crtc_create() never seemed to initializ…
-
High 7.8
jffs2: prevent xattr node from overflowing the eraseblock
In the Linux kernel, the following vulnerability has been resolved: jffs2: prevent xattr node from overflowing the eraseblock Add a check to make sure that the requested xattr node size is no larger than the eraseblock minus the cleanmarker. Unlike the usual …
-
High 7.8
ALSA: core: Fix NULL module pointer assignment at card init
In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix NULL module pointer assignment at card init The commit 81033c6b584b ("ALSA: core: Warn on empty module") introduced a WARN_ON() for a NULL module pointer passed at snd_card ob…
-
High 7.8
drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()
In the Linux kernel, the following vulnerability has been resolved: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() Patch series "mm: follow_pte() improvements and acrn follow_pte() fixes". Patch #1 fixes a bunch of issues I spotted in the acrn …
-
High 7.8
openrisc: traps: Don't send signals to kernel mode threads
In the Linux kernel, the following vulnerability has been resolved: openrisc: traps: Don't send signals to kernel mode threads OpenRISC exception handling sends signals to user processes on floating point exceptions and trap instructions (for debugging) among…
-
High 7.5
RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw
In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw When running blktests nvme/rdma, the following kmemleak issue will appear. kmemleak: Kernel memory leak detector…
-
High 7.5
cppc_cpufreq: Fix possible null pointer dereference
In the Linux kernel, the following vulnerability has been resolved: cppc_cpufreq: Fix possible null pointer dereference cppc_cpufreq_get_rate() and hisi_cppc_cpufreq_get_rate() can be called from different places with various parameters. So cpufreq_cpu_get() …
-
High 7.3
net: bridge: xmit: make sure we have at least eth header len bytes
In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes syzbot triggered an uninit value[1] error in bridge device's xmit path by sending a short (less than ETH_HLEN bytes) skb. To…
-
High 7.3
drm/amd/display: Fix potential index out of bounds in color transformation function
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential index out of bounds in color transformation function Fixes index out of bounds issue in the color transformation function. The issue could occur when the index …
-
High 7.3
media: i2c: et8ek8: Don't strip remove function when driver is builtin
In the Linux kernel, the following vulnerability has been resolved: media: i2c: et8ek8: Don't strip remove function when driver is builtin Using __exit for the remove function results in the remove callback being discarded with CONFIG_VIDEO_ET8EK8=y. When suc…
-
High 7.1
scsi: scsi_debug: Fix type in min_t to avoid stack OOB
In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fix type in min_t to avoid stack OOB Change min_t() to use type "u32" instead of type "int" to avoid stack out of bounds. With min_t() type "int" the values get sign extende…
-
High 7.1
vduse: check that offset is within bounds in get_config()
In the Linux kernel, the following vulnerability has been resolved: vduse: check that offset is within bounds in get_config() This condition checks "len" but it does not check "offset" and that could result in an out of bounds read if "offset > dev->config_si…
-
High 7.1
RDMA/hns: Modify the print level of CQE error
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Modify the print level of CQE error Too much print may lead to a panic in kernel. Change ibdev_err() to ibdev_err_ratelimited(), and change the printing level of cqe dump to debug l…
-
High 7.1
crypto: qat - validate slices count returned by FW
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate slices count returned by FW The function adf_send_admin_tl_start() enables the telemetry (TL) feature on a QAT device by sending the ICP_QAT_FW_TL_START message to the …
-
High 7.0
net/mlx5: Discard command completions in internal error
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Discard command completions in internal error Fix use after free when FW completion arrives while device is in internal error state. Avoid calling completion handler in this case, s…
-
High 7.0
rcu: Fix buffer overflow in print_cpu_stall_info()
In the Linux kernel, the following vulnerability has been resolved: rcu: Fix buffer overflow in print_cpu_stall_info() The rcuc-starvation output from print_cpu_stall_info() might overflow the buffer if there is a huge difference in jiffies difference. The si…
-
High 7.0
rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow There is a possibility of buffer overflow in show_rcu_tasks_trace_gp_kthread() if counters, passed to sprintf() are huge. Counte…
-
High 7.0
ipv6: sr: fix invalid unregister error path
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6_init() is wrong in case CONFIG_IPV6_SEG6_LWTUNNEL is not defined. In that case if seg6_hmac_init() fails, the genl_unregiste…
-
Medium 6.5
wifi: ar5523: enable proper endpoint verification
In the Linux kernel, the following vulnerability has been resolved: wifi: ar5523: enable proper endpoint verification Syzkaller reports [1] hitting a warning about an endpoint in use not having an expected type to it. Fix the issue by checking for the existen…
-
Medium 5.5
net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup KASAN reports an out-of-bounds read in rk_gmac_setup on the line: while (ops->regs[i]) { This happens for most platforms since the regs fl…
-
Medium 5.5
net: stmmac: fix tc flower deletion for VLAN priority Rx steering
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix tc flower deletion for VLAN priority Rx steering To replicate the issue:- 1) Add 1 flower filter for VLAN Priority based frame steering:- $ IFDEVNAME=eth0 $ tc qdisc add dev …
-
Medium 5.5
drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
In the Linux kernel, the following vulnerability has been resolved: drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference In cdns_mhdp_atomic_enable(), the return value of drm_mode_duplicate() is assigned to mhdp_state->current_mode, and there is …
-
Medium 5.5
net: micrel: Fix receiving the timestamp in the frame for lan8841
In the Linux kernel, the following vulnerability has been resolved: net: micrel: Fix receiving the timestamp in the frame for lan8841 The blamed commit started to use the ptp workqueue to get the second part of the timestamp. And when the port was set down, t…
-
Medium 5.3
nilfs2: fix potential hang in nilfs_detach_log_writer()
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential hang in nilfs_detach_log_writer() Syzbot has reported a potential hang in nilfs_detach_log_writer() called during nilfs2 unmount. Analysis revealed that this is because …
-
Medium 5.3
ALSA: timer: Set lower bound of start tick time
In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Set lower bound of start tick time Currently ALSA timer doesn't have the lower limit of the start tick time, and it allows a very small size, e.g. 1 tick with 1ns resolution for …
-
Medium 4.4
bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
In the Linux kernel, the following vulnerability has been resolved: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq Undefined behavior is triggered when bnxt_qplib_alloc_init_hwq is called with hwq_attr->aux_depth != 0 and hwq_attr->aux_s…
-
Medium 4.4
ASoC: kirkwood: Fix potential NULL dereference
In the Linux kernel, the following vulnerability has been resolved: ASoC: kirkwood: Fix potential NULL dereference In kirkwood_dma_hw_params() mv_mbus_dram_info() returns NULL if CONFIG_PLAT_ORION macro is not defined. Fix this bug by adding NULL check. Found…
-
Medium 4.4
scsi: qedf: Ensure the copied buf is NUL terminated
In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Ensure the copied buf is NUL terminated Currently, we allocate a count-sized kernel buffer and copy count from userspace to that buffer. Later, we use kstrtouint on this buffer bu…
-
Unscored —CVE-2021-47573 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —CVE-2021-47574 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —CVE-2021-47575 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
scsi: scsi_debug: Don't call kcalloc() if size arg is zero
In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Don't call kcalloc() if size arg is zero If the size arg to kcalloc() is zero, it returns ZERO_SIZE_PTR. Because of that, for a following NULL pointer check to work on the r…
-
Unscored —
ovl: fix warning in ovl_create_real()
In the Linux kernel, the following vulnerability has been resolved: ovl: fix warning in ovl_create_real() Syzbot triggered the following warning in ovl_workdir_create() -> ovl_create_real(): if (!err && WARN_ON(!newdentry->d_inode)) { The reason is that the c…
-
Unscored —CVE-2021-47581 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
USB: core: Make do_proc_control() and do_proc_bulk() killable
In the Linux kernel, the following vulnerability has been resolved: USB: core: Make do_proc_control() and do_proc_bulk() killable The USBDEVFS_CONTROL and USBDEVFS_BULK ioctls invoke usb_start_wait_urb(), which contains an uninterruptible wait with a user-spe…
-
Unscored —
media: mxl111sf: change mutex_init() location
In the Linux kernel, the following vulnerability has been resolved: media: mxl111sf: change mutex_init() location Syzbot reported, that mxl111sf_ctrl_msg() uses uninitialized mutex. The problem was in wrong mutex_init() location. Previous mutex_init(&state->m…
-
Unscored —
iocost: Fix divide-by-zero on donation from low hweight cgroup
In the Linux kernel, the following vulnerability has been resolved: iocost: Fix divide-by-zero on donation from low hweight cgroup The donation calculation logic assumes that the donor has non-zero after-donation hweight, so the lowest active hweight a donati…
-
Unscored —
btrfs: fix memory leak in __add_inode_ref()
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak in __add_inode_ref() Line 1169 (#3) allocates a memory chunk for victim_name by kmalloc(), but when the function returns in line 1184 (#4) victim_name allocated by line…
-
Unscored —
igbvf: fix double free in `igbvf_probe`
In the Linux kernel, the following vulnerability has been resolved: igbvf: fix double free in `igbvf_probe` In `igbvf_probe`, if register_netdev() fails, the program will go to label err_hw_init, and then to label err_ioremap. In free_netdev() which is just b…
-
Unscored —
mptcp: fix deadlock in __mptcp_push_pending()
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix deadlock in __mptcp_push_pending() __mptcp_push_pending() may call mptcp_flush_join_list() with subflow socket lock held. If such call hits mptcp_sockopt_sync_all() then subsequent…
-
Unscored —
mptcp: remove tcp ulp setsockopt support
In the Linux kernel, the following vulnerability has been resolved: mptcp: remove tcp ulp setsockopt support TCP_ULP setsockopt cannot be used for mptcp because its already used internally to plumb subflow (tcp) sockets to the mptcp layer. syzbot managed to t…
-
Unscored —
mptcp: clear 'kern' flag from fallback sockets
In the Linux kernel, the following vulnerability has been resolved: mptcp: clear 'kern' flag from fallback sockets The mptcp ULP extension relies on sk->sk_sock_kern being set correctly: It prevents setsockopt(fd, IPPROTO_TCP, TCP_ULP, "mptcp", 6); from worki…
-
Unscored —
mptcp: never allow the PM to close a listener subflow
In the Linux kernel, the following vulnerability has been resolved: mptcp: never allow the PM to close a listener subflow Currently, when deleting an endpoint the netlink PM treverses all the local MPTCP sockets, regardless of their status. If an MPTCP listen…
-
Unscored —
net/sched: sch_ets: don't remove idle classes from the round-robin list
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_ets: don't remove idle classes from the round-robin list Shuang reported that the following script: 1) tc qdisc add dev ddd0 handle 10: parent 1: ets bands 8 strict 4 priomap 7…
-
Unscored —
net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg Currently, the hns3_remove function firstly uninstall client instance, and then uninstall acceletion engine device. The netdevice is …
-
Unscored —
inet_diag: fix kernel-infoleak for UDP sockets
In the Linux kernel, the following vulnerability has been resolved: inet_diag: fix kernel-infoleak for UDP sockets KMSAN reported a kernel-infoleak [1], that can exploited by unpriv users. After analysis it turned out UDP was not initializing r->idiag_expires…
-
Unscored —
btrfs: use latest_dev in btrfs_show_devname
In the Linux kernel, the following vulnerability has been resolved: btrfs: use latest_dev in btrfs_show_devname The test case btrfs/238 reports the warning below: WARNING: CPU: 3 PID: 481 at fs/btrfs/super.c:2509 btrfs_show_devname+0x104/0x1e8 [btrfs] CPU: 2 …
-
Unscored —
tee: amdtee: fix an IS_ERR() vs NULL bug
In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix an IS_ERR() vs NULL bug The __get_free_pages() function does not return error pointers it returns NULL so fix this condition to avoid a NULL dereference.
-
Unscored —
mac80211: track only QoS data frames for admission control
In the Linux kernel, the following vulnerability has been resolved: mac80211: track only QoS data frames for admission control For admission control, obviously all of that only works for QoS data frames, otherwise we cannot even access the QoS field in the he…
-
Unscored —
audit: improve robustness of the audit queue handling
In the Linux kernel, the following vulnerability has been resolved: audit: improve robustness of the audit queue handling If the audit daemon were ever to get stuck in a stopped state the kernel's kauditd_thread() could get blocked attempting to send audit re…
-
Unscored —
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
In the Linux kernel, the following vulnerability has been resolved: net: netlink: af_netlink: Prevent empty skb by adding a check on len. Adding a check on len parameter to avoid empty skb. This prevents a division error in netem_enqueue function which is cau…
-
Unscored —
bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg The implementation of BPF_CMPXCHG on a high level has the following parameters: .-[old-val] .-[new-val] BPF_R0 = cmpxchg{32,64}(…
-
Unscored —
bpf: Fix kernel address leakage in atomic fetch
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix kernel address leakage in atomic fetch The change in commit 37086bfdc737 ("bpf: Propagate stack bounds to registers in atomics w/ BPF_FETCH") around check_mem_access() handling is bu…
-
Unscored —
firmware: arm_scpi: Fix string overflow in SCPI genpd driver
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Fix string overflow in SCPI genpd driver Without the bound checks for scpi_pd->name, it could result in the buffer overflow when copying the SCPI device name from the corr…
-
Unscored —
drm/msm: Fix null ptr access msm_ioctl_gem_submit()
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix null ptr access msm_ioctl_gem_submit() Fix the below null pointer dereference in msm_ioctl_gem_submit(): 26545.260705: Call trace: 26545.263223: kref_put+0x1c/0x60 26545.266452: …
-
Unscored —
nfc: fix segfault in nfc_genl_dump_devices_done
In the Linux kernel, the following vulnerability has been resolved: nfc: fix segfault in nfc_genl_dump_devices_done When kmalloc in nfc_genl_dump_devices() fails then nfc_genl_dump_devices_done() segfaults as below KASAN: null-ptr-deref in range [0x0000000000…
-
Unscored —CVE-2021-47615 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Fix infinite loop in IRQ handler upon power fault The Power Fault Detected bit in the Slot Status register differs from all other hotplug events in that it is sticky: It can only…
-
Unscored —
ARM: 9170/1: fix panic when kasan and kprobe are enabled
In the Linux kernel, the following vulnerability has been resolved: ARM: 9170/1: fix panic when kasan and kprobe are enabled arm32 uses software to simulate the instruction replaced by kprobe. some instructions may be simulated by constructing assembly functi…
-
Unscored —
i40e: Fix queues reservation for XDP
In the Linux kernel, the following vulnerability has been resolved: i40e: Fix queues reservation for XDP When XDP was configured on a system with large number of CPUs and X722 NIC there was a call trace with NULL pointer dereference. i40e 0000:87:00.0: failed…
-
Unscored —
lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure
In the Linux kernel, the following vulnerability has been resolved: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure The kcalloc() in dmirror_device_evict_chunk() will return null if the physical memory has run out. As a result, if src_pfns or …
-
Unscored —
drm: vc4: Fix possible null pointer dereference
In the Linux kernel, the following vulnerability has been resolved: drm: vc4: Fix possible null pointer dereference In vc4_hdmi_audio_init() of_get_address() may return NULL which is later dereferenced. Fix this bug by adding NULL check. Found by Linux Verifi…
-
Unscored —
media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
In the Linux kernel, the following vulnerability has been resolved: media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries The allocation failure of mycs->yuv_scaler_binary in load_video_binaries() is followed with a dereference of myc…
-
Unscored —
drm/mediatek: Add 0 size check to mtk_drm_gem_obj
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add 0 size check to mtk_drm_gem_obj Add a check to mtk_drm_gem_init if we attempt to allocate a GEM object of 0 bytes. Currently, no such check exists and the kernel will panic …
-
Unscored —
ASoC: mediatek: Assign dummy when codec not specified for a DAI link
In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Assign dummy when codec not specified for a DAI link MediaTek sound card drivers are checking whether a DAI link is present and used on a board to assign the correct parameter…
-
Unscored —
net: fec: remove .ndo_poll_controller to avoid deadlocks
In the Linux kernel, the following vulnerability has been resolved: net: fec: remove .ndo_poll_controller to avoid deadlocks There is a deadlock issue found in sungem driver, please refer to the commit ac0a230f719b ("eth: sungem: remove .ndo_poll_controller t…
-
Unscored —
ax25: Fix reference count leak issue of net_device
In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issue of net_device There is a reference count leak issue of the object "net_device" in ax25_dev_device_down(). When the ax25 device is shutting down, the ax25_…
-
Unscored —
net/mlx5: Reload only IB representors upon lag disable/enable
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Reload only IB representors upon lag disable/enable On lag disable, the bond IB device along with all of its representors are destroyed, and then the slaves' representors get reload…
-
Unscored —
scsi: bfa: Ensure the copied buf is NUL terminated
In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but w…
-
Unscored —
kunit: Fix kthread reference
In the Linux kernel, the following vulnerability has been resolved: kunit: Fix kthread reference There is a race condition when a kthread finishes after the deadline and before the call to kthread_stop(), which may lead to use after free.
-
Unscored —
wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature Without this commit, reading chip temperature will cause memory leakage.
-
Unscored —
bpf: Fix verifier assumptions about socket->sk
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix verifier assumptions about socket->sk The verifier assumes that 'sk' field in 'struct socket' is valid and non-NULL when 'socket' pointer itself is trusted and non-NULL. That may not…
-
Unscored —
wifi: carl9170: add a proper sanity check for endpoints
In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: add a proper sanity check for endpoints Syzkaller reports [1] hitting a warning which is caused by presence of a wrong endpoint type at the URB sumbitting stage. While there w…
-
Unscored —
thermal/drivers/tsens: Fix null pointer dereference
In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tsens: Fix null pointer dereference compute_intercept_slope() is called from calibrate_8960() (in tsens-8960.c) as compute_intercept_slope(priv, p1, NULL, ONE_PT_CALIB) which …
-
Unscored —
libbpf: Prevent null-pointer dereference when prog to load has no BTF
In the Linux kernel, the following vulnerability has been resolved: libbpf: Prevent null-pointer dereference when prog to load has no BTF In bpf_objec_load_prog(), there's no guarantee that obj->btf is non-NULL when passing it to btf__fd(), and this function …
-
Unscored —
wifi: brcmfmac: pcie: handle randbuf allocation failure
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: pcie: handle randbuf allocation failure The kzalloc() in brcmf_pcie_download_fw_nvram() will return null if the physical memory has run out. As a result, if we use get_random_…
-
Unscored —
crypto: bcm - Fix pointer arithmetic
In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2_dump_omd() value of ptr is increased by ciph_key_len instead of hash_iv_len which could lead to going beyond the buffer boundaries. Fix this bug b…
-
Unscored —
net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe()
In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe() In the prueth_probe() function, if one of the calls to emac_phy_connect() fails due to of_phy_connect() returning NULL, t…
-
Unscored —
tools/nolibc/stdlib: fix memory error in realloc()
In the Linux kernel, the following vulnerability has been resolved: tools/nolibc/stdlib: fix memory error in realloc() Pass user_p_len to memcpy() instead of heap->len to prevent realloc() from copying an extra sizeof(heap) bytes from beyond the allocated reg…
-
Unscored —
r8169: Fix possible ring buffer corruption on fragmented Tx packets.
In the Linux kernel, the following vulnerability has been resolved: r8169: Fix possible ring buffer corruption on fragmented Tx packets. An issue was found on the RTL8125b when transmitting small fragmented packets, whereby invalid entries were inserted into …
-
Unscored —
netrom: fix possible dead-lock in nr_rt_ioctl()
In the Linux kernel, the following vulnerability has been resolved: netrom: fix possible dead-lock in nr_rt_ioctl() syzbot loves netrom, and found a possible deadlock in nr_rt_ioctl [1] Make sure we always acquire nr_node_list_lock before nr_node_lock(nr_node…
-
Unscored —
RDMA/hns: Fix deadlock on SRQ async events.
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix deadlock on SRQ async events. xa_lock for SRQ table may be required in AEQ. Use xa_store_irq()/ xa_erase_irq() to avoid deadlock.
-
Unscored —
net: stmmac: move the EST lock to struct stmmac_priv
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: move the EST lock to struct stmmac_priv Reinitialize the whole EST structure would also reset the mutex lock which is embedded in the EST structure, and then trigger the followin…
-
Unscored —
net/mlx5: Fix peer devlink set for SF representor devlink port
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix peer devlink set for SF representor devlink port The cited patch change register devlink flow, and neglect to reflect the changes for peer devlink set logic. Peer devlink set is…
-
Unscored —
af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg A data-race condition has been identified in af_unix. In one data path, the write function unix_release_sock() atomically writ…
-
Unscored —
eth: sungem: remove .ndo_poll_controller to avoid deadlocks
In the Linux kernel, the following vulnerability has been resolved: eth: sungem: remove .ndo_poll_controller to avoid deadlocks Erhard reports netpoll warnings from sungem: netpoll_send_skb_on_dev(): eth0 enabled interrupts in poll (gem_start_xmit+0x0/0x398) …
-
Unscored —
md: fix resync softlockup when bitmap size is less than array size
In the Linux kernel, the following vulnerability has been resolved: md: fix resync softlockup when bitmap size is less than array size Is is reported that for dm-raid10, lvextend + lvchange --syncaction will trigger following softlockup: kernel:watchdog: BUG:…
-
Unscored —
ALSA: Fix deadlocks with kctl removals at disconnection
In the Linux kernel, the following vulnerability has been resolved: ALSA: Fix deadlocks with kctl removals at disconnection In snd_card_disconnect(), we set card->shutdown flag at the beginning, call callbacks and do sync for card->power_ref_sleep waiters at …
-
Unscored —
ring-buffer: Fix a race between readers and resize checks
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix a race between readers and resize checks The reader code in rb_get_reader_page() swaps a new reader page into the ring buffer by doing cmpxchg on old->list.prev->next to poin…
-
Unscored —
ax25: Fix reference count leak issues of ax25_dev
In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issues of ax25_dev The ax25_addr_ax25dev() and ax25_dev_device_down() exist a reference count leak issue of the object "ax25_dev". Memory leak issue in ax25_add…
-
Unscored —
drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() pci_alloc_irq_vectors() allocates an irq vector. When devm_add_action() fails, the irq vector is not freed, which leads to a …
-
Unscored —
block: refine the EOF check in blkdev_iomap_begin
In the Linux kernel, the following vulnerability has been resolved: block: refine the EOF check in blkdev_iomap_begin blkdev_iomap_begin rounds down the offset to the logical block size before stashing it in iomap->offset and checking that it still is inside …
-
Unscored —
macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
In the Linux kernel, the following vulnerability has been resolved: macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" The via-macii ADB driver calls request_irq() after disabling hard interrupts. But disabling interrupts isn't nece…
-
Unscored —
net/mlx5e: Fix netif state handling
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix netif state handling mlx5e_suspend cleans resources only if netif_device_present() returns true. However, mlx5e_resume changes the state of netif, via mlx5e_nic_enable, only if…
-
Unscored —
wifi: mt76: connac: check for null before dereferencing
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: check for null before dereferencing The wcid can be NULL. It should be checked for validity before dereferencing it to avoid crash.
-
Unscored —
m68k: Fix spinlock race in kernel thread creation
In the Linux kernel, the following vulnerability has been resolved: m68k: Fix spinlock race in kernel thread creation Context switching does take care to retain the correct lock owner across the switch from 'prev' to 'next' tasks. This does rely on interrupts…
-
Unscored —
cpufreq: exit() callback is optional
In the Linux kernel, the following vulnerability has been resolved: cpufreq: exit() callback is optional The exit() callback is optional and shouldn't be called without checking a valid pointer first. Also, we must clear freq_table pointer even if the exit() …
-
Unscored —
kunit/fortify: Fix mismatched kvalloc()/vfree() usage
In the Linux kernel, the following vulnerability has been resolved: kunit/fortify: Fix mismatched kvalloc()/vfree() usage The kv*() family of tests were accidentally freeing with vfree() instead of kvfree(). Use kvfree() instead.
-
Unscored —
usb-storage: alauda: Check whether the media is initialized
In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesize" of struct alauda_info will remain 0 if alauda_init_media() fails, potentially causing divide errors in alaud…
Revision history
-
#192
Neue Updates von Red Hat und Debian aufgenommen
-
#191
Neue Updates von Ubuntu aufgenommen
-
#190
Neue Updates von Ubuntu aufgenommen
-
#189
Neue Updates von SUSE und Ubuntu aufgenommen
-
#188
Neue Updates von Ubuntu aufgenommen
-
#187
Neue Updates von SUSE aufgenommen
-
#186
Neue Updates von SUSE aufgenommen
-
#185
Neue Updates von Ubuntu aufgenommen
-
#184
Neue Updates von Ubuntu und SUSE aufgenommen
-
#183
Neue Updates von Ubuntu aufgenommen
-
#182
Neue Updates von Ubuntu aufgenommen
-
#181
Neue Updates von Ubuntu aufgenommen
-
#180
Neue Updates von Ubuntu aufgenommen
-
#179
Neue Updates von Ubuntu aufgenommen
-
#178
Neue Updates von Ubuntu aufgenommen
-
#177
Neue Updates von Ubuntu aufgenommen
-
#176
Neue Updates von Amazon aufgenommen
-
#175
Neue Updates von SUSE aufgenommen
-
#174
Neue Updates von SUSE aufgenommen
-
#173
Neue Updates von SUSE aufgenommen
-
#172
Neue Updates von SUSE aufgenommen
-
#171
Neue Updates von Ubuntu aufgenommen
-
#170
Neue Updates von Dell aufgenommen
-
#169
Neue Updates von Ubuntu aufgenommen
-
#168
Neue Updates von Ubuntu aufgenommen
References
-
SUSE Security Update SUSE-SU-2024:4235-1 vom 2024-12-06
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LIMMCWFWYJUMJTABZZ7ZEYXOOVE5BZY7/
-
SUSE Security Update SUSE-SU-2024:4242-1 vom 2024-12-06
https://lists.suse.com/pipermail/sle-security-updates/2024-December/019958.html
-
SUSE Security Update SUSE-SU-2024:4256-1 vom 2024-12-06
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/34BVCDIDBQSXQ6Y3TVDGD4FSZ7N3D3LI/
-
SUSE Security Update SUSE-SU-2024:4243-1 vom 2024-12-06
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/GDL3TRRFKGYVQIW7MMTUJS76GCW7B3JZ/
-
SUSE Security Update SUSE-SU-2024:4248-1 vom 2024-12-06
https://lists.suse.com/pipermail/sle-security-updates/2024-December/019954.html
-
SUSE Security Update SUSE-SU-2024:4228-1 vom 2024-12-06
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/SUCQUP757AUWMZNCNQ2DGQICEYBRZUIC/
-
SUSE Security Update SUSE-SU-2024:4250-1 vom 2024-12-06
https://lists.suse.com/pipermail/sle-security-updates/2024-December/019952.html
-
SUSE Security Update SUSE-SU-2024:4246-1 vom 2024-12-06
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/3LFFLGXO55CBY4WD74GYLL6CL2HWJM2Q/
-
SUSE Security Update SUSE-SU-2024:4236-1 vom 2024-12-06
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ODASOBSBN3UUGHNO44MK2K4MC35CPLXJ/
-
SUSE Security Update SUSE-SU-2024:4234-1 vom 2024-12-06
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/B6RMLGICBLD3BNXSBS7J23W3GCEJMFJA/
-
SUSE Security Update SUSE-SU-2024:4231-1 vom 2024-12-06
https://lists.suse.com/pipermail/sle-security-updates/2024-December/019946.html
-
Ubuntu Security Notice USN-7159-1 vom 2024-12-12
https://ubuntu.com/security/notices/USN-7159-1
-
Ubuntu Security Notice USN-7159-2 vom 2024-12-18
https://ubuntu.com/security/notices/USN-7166-2
-
Ubuntu Security Notice USN-7173-1 vom 2024-12-17
https://ubuntu.com/security/notices/USN-7173-1
-
Ubuntu Security Notice USN-7159-2 vom 2024-12-18
https://ubuntu.com/security/notices/USN-7159-3
-
Ubuntu Security Notice USN-7159-2 vom 2024-12-17
https://ubuntu.com/security/notices/USN-7159-2
-
Ubuntu Security Notice USN-7166-1 vom 2024-12-17
https://ubuntu.com/security/notices/USN-7166-1
-
SUSE Security Update SUSE-SU-2024:4364-1 vom 2024-12-17
https://lists.suse.com/pipermail/sle-security-updates/2024-December/020019.html
-
Debian Security Advisory DLA-4008 vom 2025-01-03
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
-
SUSE Security Update SUSE-SU-2024:4263-1 vom 2024-12-09
https://lists.suse.com/pipermail/sle-security-updates/2024-December/019971.html
-
SUSE Security Update SUSE-SU-2024:4264-1 vom 2024-12-09
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/SZPUHL7SUZ57L3OJFO25IHYVDJ76ONGC/
-
Ubuntu Security Notice USN-7144-1 vom 2024-12-09
https://ubuntu.com/security/notices/USN-7144-1
-
SUSE Security Update SUSE-SU-2024:4266-1 vom 2024-12-09
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RRJRAM3LFR4MNOHCFB2XIOS6OJUDNUPE/
-
SUSE Security Update SUSE-SU-2024:4262-1 vom 2024-12-09
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AF5MYHVYCHCM3AIO34JSXWJNP2WUCOHS/
-
SUSE Security Update SUSE-SU-2024:4315-1 vom 2024-12-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LQPWDP54GSTHYCV4CTCOE67D2ANVPPUW/
-
SUSE Security Update SUSE-SU-2024:4318-1 vom 2024-12-13
https://lists.suse.com/pipermail/sle-security-updates/2024-December/019999.html
-
SUSE Security Update SUSE-SU-2024:4316-1 vom 2024-12-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/S4I5Z6ALCJLHTP25U3HMJHEXN4DR2USM/
-
SUSE Security Update SUSE-SU-2024:4314-1 vom 2024-12-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/SARXL66CQHD5VSFG5PUBNBVBPVFUN4KT/
-
Ubuntu Security Notice USN-7185-2 vom 2025-01-09
https://ubuntu.com/security/notices/USN-7185-2
-
Ubuntu Security Notice USN-7195-1 vom 2025-01-09
https://ubuntu.com/security/notices/USN-7195-1
-
Ubuntu Security Notice USN-7186-2 vom 2025-01-09
https://ubuntu.com/security/notices/USN-7186-2
-
Ubuntu Security Notice USN-7194-1 vom 2025-01-09
https://ubuntu.com/security/notices/USN-7194-1
-
Ubuntu Security Notice USN-7166-3 vom 2024-12-20
https://ubuntu.com/security/notices/USN-7166-3
-
Ubuntu Security Notice USN-7179-1 vom 2024-12-20
https://ubuntu.com/security/notices/USN-7179-1
-
Ubuntu Security Notice USN-7159-4 vom 2024-12-20
https://ubuntu.com/security/notices/USN-7159-4
-
Ubuntu Security Notice USN-7173-2 vom 2024-12-20
https://ubuntu.com/security/notices/USN-7173-2
-
SUSE Security Update SUSE-SU-2024:4376-1 vom 2024-12-18
https://lists.suse.com/pipermail/sle-security-updates/2024-December/020028.html
-
SUSE Security Update SUSE-SU-2024:4376-1 vom 2024-12-18
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/WFOJHFFEHK42VPQ6XLZWB77H5OEJ3FF4/
-
Oracle Linux Security Advisory ELSA-2024-12887 vom 2024-12-18
https://linux.oracle.com/errata/ELSA-2024-12887.html
-
SUSE Security Update SUSE-SU-2024:4376-1 vom 2024-12-18
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WFOJHFFEHK42VPQ6XLZWB77H5OEJ3FF4/
-
Rocky Linux Security Advisory RLSA-2024:10282 vom 2024-12-19
https://errata.build.resf.org/RLSA-2024:10282
-
Red Hat Security Advisory RHSA-2024:11486 vom 2024-12-19
https://access.redhat.com/errata/RHSA-2024:11486
-
Ubuntu Security Notice USN-7179-3 vom 2025-01-07
https://ubuntu.com/security/notices/USN-7179-3
-
Ubuntu Security Notice USN-7179-2 vom 2025-01-06
https://ubuntu.com/security/notices/USN-7179-2
-
Ubuntu Security Notice USN-7186-1 vom 2025-01-06
https://ubuntu.com/security/notices/USN-7186-1
-
Ubuntu Security Notice USN-7184-1 vom 2025-01-06
https://ubuntu.com/security/notices/USN-7184-1
-
Oracle Linux Security Advisory ELSA-2024-11486 vom 2025-01-07
https://linux.oracle.com/errata/ELSA-2024-11486.html
-
Ubuntu Security Notice USN-7183-1 vom 2025-01-06
https://ubuntu.com/security/notices/USN-7183-1
-
Ubuntu Security Notice USN-7159-5 vom 2025-01-06
https://ubuntu.com/security/notices/USN-7159-5
-
SUSE Security Update SUSE-SU-2025:0034-1 vom 2025-01-08
https://lists.suse.com/pipermail/sle-security-updates/2025-January/020071.html
-
Juniper Security Advisory JSA92874 vom 2024-01-09
https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-24-1R2-release
-
Red Hat Security Advisory RHSA-2024:10946 vom 2024-12-11
https://access.redhat.com/errata/RHSA-2024:10946
-
ORACLE OVMSA-2024-0016 vom 2024-12-10
https://oss.oracle.com/pipermail/oraclevm-errata/2024-December/001104.html
-
Ubuntu Security Notice USN-7148-1 vom 2024-12-10
https://ubuntu.com/security/notices/USN-7148-1
-
Red Hat Security Advisory RHSA-2024:10945 vom 2024-12-11
https://access.redhat.com/errata/RHSA-2024:10945
-
SUSE Security Update SUSE-SU-2024:4275-1 vom 2024-12-10
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/YTZ2WGLML4Q6E3IG32UCJ6NFIDUTWN22/
-
SUSE Security Update SUSE-SU-2024:4275-1 vom 2024-12-10
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YTZ2WGLML4Q6E3IG32UCJ6NFIDUTWN22/
-
Linux CVE Announcement CVE-2021-47573 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061911-CVE-2021-47573-5c43@gregkh/
-
Linux CVE Announcement CVE-2021-47574 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061914-CVE-2021-47574-18b4@gregkh/
-
Linux CVE Announcement CVE-2021-47575 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061914-CVE-2021-47575-a011@gregkh/
-
Linux CVE Announcement CVE-2021-47576 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061914-CVE-2021-47576-5f60@gregkh/
-
Linux CVE Announcement CVE-2021-47577 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061915-CVE-2021-47577-c4c7@gregkh/
-
Linux CVE Announcement CVE-2021-47578 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061915-CVE-2021-47578-e81a@gregkh/
-
Linux CVE Announcement CVE-2021-47579 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061915-CVE-2021-47579-4f78@gregkh/
-
Linux CVE Announcement CVE-2021-47580 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061916-CVE-2021-47580-eac9@gregkh/
-
Linux CVE Announcement CVE-2021-47581 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061916-CVE-2021-47581-1d34@gregkh/
-
Linux CVE Announcement CVE-2021-47582 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061916-CVE-2021-47582-69aa@gregkh/
-
Linux CVE Announcement CVE-2021-47583 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061916-CVE-2021-47583-b02c@gregkh/
-
Linux CVE Announcement CVE-2021-47584 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061917-CVE-2021-47584-5246@gregkh/
-
Linux CVE Announcement CVE-2021-47585 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061917-CVE-2021-47585-0a6a@gregkh/
-
Linux CVE Announcement CVE-2021-47586 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061917-CVE-2021-47586-69ce@gregkh/
-
Linux CVE Announcement CVE-2021-47587 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061918-CVE-2021-47587-9146@gregkh/
-
Linux CVE Announcement CVE-2021-47588 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061918-CVE-2021-47588-7298@gregkh/
-
Linux CVE Announcement CVE-2021-47589 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061918-CVE-2021-47589-d405@gregkh/
-
Linux CVE Announcement CVE-2021-47590 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061919-CVE-2021-47590-6db0@gregkh/
-
Linux CVE Announcement CVE-2021-47591 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061919-CVE-2021-47591-955a@gregkh/
-
Linux CVE Announcement CVE-2021-47592 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061919-CVE-2021-47592-7ca6@gregkh/
-
Linux CVE Announcement CVE-2021-47593 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061919-CVE-2021-47593-a7a7@gregkh/
-
Linux CVE Announcement CVE-2021-47594 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061920-CVE-2021-47594-953e@gregkh/
-
Linux CVE Announcement CVE-2021-47595 vom 2024-06-19
https://lore.kernel.org/linux-cve-announce/2024061920-CVE-2021-47595-e9f3@gregkh/