Skip to content
OpenAdvisories
Medium WID-SEC-2024-1431 10 CVEs

Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service

Published Jun 23, 2024 · Updated Feb 16, 2026 · Revision 46 · de-DE

Vendor: amazon Vendor: Broadcom Vendor: Debian Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Brocade SANnav Product: Enterprise Linux Product: InfoSphere Guardium Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: QRadar SIEM Product: Rocky Linux Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 10

  • High 8.8
    CVE-2024-38381

    nfc: nci: Fix uninit-value in nci_rx_work

    In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_rx_work syzbot reported the following uninit-value access issue [1] nci_rx_work() parses received packet from ndev->rx_q. It should be validated header size,…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-38388

    ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup

    In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup Use the control private_free callback to free the associated data block. This ensures that the memory won't leak, whatever way the c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.4
    CVE-2023-52884

    Input: cyapa - add missing input core locking to suspend/resume functions

    In the Linux kernel, the following vulnerability has been resolved: Input: cyapa - add missing input core locking to suspend/resume functions Grab input->mutex during suspend/resume functions like it is done in other input drivers. This fixes the following wa…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-31076

    genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

    In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQD_MOVE_PCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instea…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-36489

    tls: fix missing memory barrier in tls_init

    In the Linux kernel, the following vulnerability has been resolved: tls: fix missing memory barrier in tls_init In tls_init(), a write memory barrier is missing, and store-store reordering may cause NULL dereference in tls_{setsockopt,getsockopt}. CPU0 CPU1 -…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-37353 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  • Unscored —
    CVE-2024-37356

    tcp: Fix shift-out-of-bounds in dctcp_update_alpha().

    In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). In dctcp_update_alpha(), we use a module parameter dctcp_shift_g as follows: alpha -= min_not_zero(alpha, alpha >> dctcp_shift_g); ... de…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-38390

    drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails

    In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails Calling a6xx_destroy() before adreno_gpu_init() leads to a null pointer dereference on: msm_gpu_cleanup() : platform_set_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-38391 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  • Unscored —
    CVE-2024-38621

    media: stk1160: fix bounds checking in stk1160_copy_video()

    In the Linux kernel, the following vulnerability has been resolved: media: stk1160: fix bounds checking in stk1160_copy_video() The subtract in this condition is reversed. The ->length is the length of the buffer. The ->bytesused is how many bytes we have cop…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Revision history

  1. #46

    Neue Updates von SUSE aufgenommen

  2. #45

    Neue Updates von SUSE aufgenommen

  3. #44

    Neue Updates von SUSE aufgenommen

  4. #43

    Neue Updates von BROCADE aufgenommen

  5. #42

    Neue Updates von IBM aufgenommen

  6. #41

    Neue Updates von Red Hat aufgenommen

  7. #40

    Neue Updates von Red Hat aufgenommen

  8. #39

    Neue Updates von Ubuntu aufgenommen

  9. #38

    Neue Updates von Red Hat aufgenommen

  10. #37

    Neue Updates von Red Hat aufgenommen

  11. #36

    Neue Updates von IBM aufgenommen

  12. #35

    Neue Updates von Red Hat aufgenommen

  13. #34

    Neue Updates von Ubuntu aufgenommen

  14. #33

    Neue Updates von Ubuntu aufgenommen

  15. #32

    Neue Updates von SUSE aufgenommen

  16. #31

    Neue Updates von SUSE aufgenommen

  17. #30

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  18. #29

    Neue Updates von SUSE aufgenommen

  19. #28

    Neue Updates von Oracle Linux aufgenommen

  20. #27

    Neue Updates von Ubuntu aufgenommen

  21. #26

    Neue Updates von Red Hat, Ubuntu und SUSE aufgenommen

  22. #25

    Neue Updates von Ubuntu aufgenommen

  23. #24

    Neue Updates von Ubuntu aufgenommen

  24. #23

    Neue Updates von Ubuntu aufgenommen

  25. #22

    Neue Updates von SUSE, Ubuntu und Oracle Linux aufgenommen

References