Skip to content
OpenAdvisories
Medium WID-SEC-2024-1443 14 CVEs

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Jun 24, 2024 · Updated Feb 15, 2026 · Revision 37 · de-DE

Vendor: Broadcom Vendor: Debian Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Brocade SANnav Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Rocky Linux Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 14

  • High 7.8
    CVE-2024-32936

    media: ti: j721e-csi2rx: Fix races while restarting DMA

    In the Linux kernel, the following vulnerability has been resolved: media: ti: j721e-csi2rx: Fix races while restarting DMA After the frame is submitted to DMA, it may happen that the submitted list is not updated soon enough, and the DMA callback is triggere…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-34027

    f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock

    In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock It needs to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock to avoid racing with checkpoint, other…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-38384

    blk-cgroup: fix list corruption from reorder of WRITE ->lqueued

    In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from reorder of WRITE ->lqueued __blkcg_rstat_flush() can be run anytime, especially when blk_cgroup_bio_start is being executed. If WRITE of `->lqueued` is re…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-38663

    blk-cgroup: fix list corruption from resetting io stat

    In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from resetting io stat Since commit 3b8cc6298724 ("blk-cgroup: Optimize blkcg_rstat_flush()"), each iostat instance is added to blkcg percpu list, so blkcg_res…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-39292

    um: Add winch to winch_handlers before registering winch IRQ

    In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winch_handlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winch_handlers list. If that happens, reg…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2024-33847

    f2fs: compress: don't allow unaligned truncation on released compress inode

    In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: don't allow unaligned truncation on released compress inode f2fs image may be corrupted after below testcase: - mkfs.f2fs -O extra_attr,compression -f /dev/vdb - mount /dev/vd…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.7
    CVE-2024-34030

    PCI: of_property: Return error for int_map allocation failure

    In the Linux kernel, the following vulnerability has been resolved: PCI: of_property: Return error for int_map allocation failure Return -ENOMEM from of_pci_prop_intr_map() if kcalloc() fails to prevent a NULL pointer dereference in this case. [bhelgaas: comm…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-35247

    fpga: region: add owner module and take its refcount

    In the Linux kernel, the following vulnerability has been resolved: fpga: region: add owner module and take its refcount The current implementation of the fpga region assumes that the low-level module registers a driver for the parent device and uses its owne…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-36479

    fpga: bridge: add owner module and take its refcount

    In the Linux kernel, the following vulnerability has been resolved: fpga: bridge: add owner module and take its refcount The current implementation of the fpga bridge assumes that the low-level module registers a driver for the parent device and uses its owne…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-37021

    fpga: manager: add owner module and take its refcount

    In the Linux kernel, the following vulnerability has been resolved: fpga: manager: add owner module and take its refcount The current implementation of the fpga manager assumes that the low-level module registers a driver for the parent device and uses its ow…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-37026

    drm/xe: Only use reserved BCS instances for usm migrate exec queue

    In the Linux kernel, the following vulnerability has been resolved: drm/xe: Only use reserved BCS instances for usm migrate exec queue The GuC context scheduling queue is 2 entires deep, thus it is possible for a migration job to be stuck behind a fault if mi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-38664

    drm: zynqmp_dpsub: Always register bridge

    In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_dpsub: Always register bridge We must always register the DRM bridge, since zynqmp_dp_hpd_work_func calls drm_bridge_hpd_notify, which in turn expects hpd_mutex to be initialized.…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-38667

    riscv: prevent pt_regs corruption for secondary idle threads

    In the Linux kernel, the following vulnerability has been resolved: riscv: prevent pt_regs corruption for secondary idle threads Top of the kernel thread stack should be reserved for pt_regs. However this is not the case for the idle threads of the secondary …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-39291

    drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode()

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode() The function gfx_v9_4_3_init_microcode in gfx_v9_4_3.c was generating about potential truncation of …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Revision history

  1. #37

    Neue Updates von SUSE aufgenommen

  2. #36

    Neue Updates von SUSE aufgenommen

  3. #35

    Neue Updates von Debian aufgenommen

  4. #34

    Neue Updates von BROCADE aufgenommen

  5. #33

    Neue Updates von Ubuntu aufgenommen

  6. #32

    Neue Updates von Ubuntu aufgenommen

  7. #31

    Neue Updates von Ubuntu aufgenommen

  8. #30

    Neue Updates von Oracle Linux aufgenommen

  9. #29

    Neue Updates von Ubuntu aufgenommen

  10. #28

    Neue Updates von Red Hat aufgenommen

  11. #27

    Neue Updates von Red Hat aufgenommen

  12. #26

    Neue Updates von Ubuntu aufgenommen

  13. #25

    Neue Updates von Ubuntu aufgenommen

  14. #24

    Neue Updates von Ubuntu aufgenommen

  15. #23

    Neue Updates von Ubuntu aufgenommen

  16. #22

    Neue Updates von Ubuntu aufgenommen

  17. #21

    Neue Updates von Oracle Linux und Ubuntu aufgenommen

  18. #20

    Neue Updates von Ubuntu aufgenommen

  19. #19

    Neue Updates von Ubuntu aufgenommen

  20. #18

    Neue Updates von Ubuntu aufgenommen

  21. #17

    Neue Updates von Ubuntu aufgenommen

  22. #16

    Neue Updates von Ubuntu aufgenommen

  23. #15

    Neue Updates von SUSE aufgenommen

  24. #14

    Neue Updates von Ubuntu aufgenommen

  25. #13

    Neue Updates von SUSE aufgenommen

References