Skip to content
OpenAdvisories
Medium WID-SEC-2024-1528 14 CVEs

Linux Kernel: Mehrere Schwachstellen

Published Jul 4, 2024 · Updated Feb 16, 2026 · Revision 58 · de-DE

Vendor: amazon Vendor: Broadcom Vendor: Debian Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Brocade SANnav Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: QRadar SIEM Product: Rocky Linux Product: VM Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder einen unspezifischen Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 14

  • High 8.4
    CVE-2024-39480

    kdb: Fix buffer overflow during tab-complete

    In the Linux kernel, the following vulnerability has been resolved: kdb: Fix buffer overflow during tab-complete Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffe…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-39477

    mm/hugetlb: do not call vma_add_reservation upon ENOMEM

    In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: do not call vma_add_reservation upon ENOMEM sysbot reported a splat [1] on __unmap_hugepage_range(). This is because vma_needs_reservation() can return -ENOMEM if allocate_file_re…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-39478

    crypto: starfive - Do not free stack buffer

    In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Do not free stack buffer RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-39479

    drm/i915/hwmon: Get rid of devm

    In the Linux kernel, the following vulnerability has been resolved: drm/i915/hwmon: Get rid of devm When both hwmon and hwmon drvdata (on which hwmon depends) are device managed resources, the expectation, on device unbind, is that hwmon will be released befo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-39481

    media: mc: Fix graph walk in media_pipeline_start

    In the Linux kernel, the following vulnerability has been resolved: media: mc: Fix graph walk in media_pipeline_start The graph walk tries to follow all links, even if they are not between pads. This causes a crash with, e.g. a MEDIA_LNK_FL_ANCILLARY_LINK lin…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-39482

    bcache: fix variable length array abuse in btree_iter

    In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btree_iter btree_iter is used in two ways: either allocated on the stack with a fixed size MAX_BSETS, or from a mempool with a dynamic size based on…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.3
    CVE-2024-39472

    xfs: fix log recovery buffer allocation for the legacy h_size fixup

    In the Linux kernel, the following vulnerability has been resolved: xfs: fix log recovery buffer allocation for the legacy h_size fixup Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values use…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2024-39483

    KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked

    In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs are actually masked, i.e. if the vCPU is…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-39473

    ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension

    In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension If a process module does not have base config extension then the same format applies to all of it's …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-39474

    mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL

    In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL commit a421ef303008 ("mm: allow !GFP_KERNEL allocations for kvmalloc") includes support for __GFP_NOFAIL, but it pres…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-39475

    fbdev: savage: Handle err return when savagefb_check_var failed

    In the Linux kernel, the following vulnerability has been resolved: fbdev: savage: Handle err return when savagefb_check_var failed The commit 04e5eac8f3ab("fbdev: savage: Error out if pixclock equals zero") checks the value of pixclock to avoid divide-by-zer…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-39476

    md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING

    In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING Xiao reported that lvm2 test lvconvert-raid-takeover.sh can hang with small possibility, the root cause is e…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-39484

    mmc: davinci: Don't strip remove function when driver is builtin

    In the Linux kernel, the following vulnerability has been resolved: mmc: davinci: Don't strip remove function when driver is builtin Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a dev…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-39485

    media: v4l: async: Properly re-initialise notifier entry in unregister

    In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Properly re-initialise notifier entry in unregister The notifier_entry of a notifier is not re-initialised after unregistering the notifier. This leads to dangling pointers…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Revision history

  1. #58

    Neue Updates von SUSE aufgenommen

  2. #57

    Neue Updates von SUSE aufgenommen

  3. #56

    Neue Updates von SUSE aufgenommen

  4. #55

    Neue Updates von SUSE aufgenommen

  5. #54

    Neue Updates von BROCADE aufgenommen

  6. #53

    Neue Updates von SUSE aufgenommen

  7. #52

    Neue Updates von SUSE aufgenommen

  8. #51

    Neue Updates von SUSE aufgenommen

  9. #50

    Neue Updates von Ubuntu aufgenommen

  10. #49

    Neue Updates von SUSE aufgenommen

  11. #48

    Neue Updates von Ubuntu aufgenommen

  12. #47

    Neue Updates von Debian aufgenommen

  13. #46

    Neue Updates von SUSE aufgenommen

  14. #45

    Neue Updates von Ubuntu aufgenommen

  15. #44

    Neue Updates von ORACLE aufgenommen

  16. #43

    Neue Updates von Ubuntu aufgenommen

  17. #42

    Neue Updates von Oracle Linux aufgenommen

  18. #41

    Neue Updates von SUSE aufgenommen

  19. #40

    Neue Updates von Ubuntu aufgenommen

  20. #39

    Neue Updates von SUSE aufgenommen

  21. #38

    Neue Updates von Ubuntu und Red Hat aufgenommen

  22. #37

    Neue Updates von Ubuntu aufgenommen

  23. #36

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  24. #35

    Neue Updates von Oracle Linux aufgenommen

  25. #34

    Neue Updates von Red Hat aufgenommen

References