Summary
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen offenzulegen oder einen unspezifischen Angriff durchzuführen.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 127
-
Critical 9.8
ionic: fix kernel panic in XDP_TX action
In the Linux kernel, the following vulnerability has been resolved: ionic: fix kernel panic in XDP_TX action In the XDP_TX path, ionic driver sends a packet to the TX path with rx page and corresponding dma address. After tx is done, ionic_tx_clean() frees th…
-
Critical 9.8
vmxnet3: disable rx data ring on dma allocation failure
In the Linux kernel, the following vulnerability has been resolved: vmxnet3: disable rx data ring on dma allocation failure When vmxnet3_rq_create() fails to allocate memory for rq->data_ring.base, the subsequent call to vmxnet3_rq_destroy_all_rxdataring does…
-
Critical 9.8
gve: Clear napi->skb before dev_kfree_skb_any()
In the Linux kernel, the following vulnerability has been resolved: gve: Clear napi->skb before dev_kfree_skb_any() gve_rx_free_skb incorrectly leaves napi->skb referencing an skb after it is freed with dev_kfree_skb_any(). This can result in a subsequent cal…
-
Critical 9.8
tipc: force a dst refcount before doing decryption
In the Linux kernel, the following vulnerability has been resolved: tipc: force a dst refcount before doing decryption As it says in commit 3bc07321ccc2 ("xfrm: Force a dst refcount before entering the xfrm type handlers"): "Crypto requests might return async…
-
Critical 9.8
net: ena: Add validation for completion descriptors consistency
In the Linux kernel, the following vulnerability has been resolved: net: ena: Add validation for completion descriptors consistency Validate that `first` flag is set only for the first descriptor in multi-buffer packets. In case of an invalid descriptor, a re…
-
High 8.8
ax25: Fix refcount imbalance on inbound connections
In the Linux kernel, the following vulnerability has been resolved: ax25: Fix refcount imbalance on inbound connections When releasing a socket in ax25_release(), we call netdev_put() to decrease the refcount on the associated ax.25 device. However, the execu…
-
High 8.8
wifi: cfg80211: Lock wiphy in cfg80211_get_station
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Lock wiphy in cfg80211_get_station Wiphy should be locked before calling rdev_get_station() (see lockdep assert in ieee80211_get_station()). This fixes the following kernel NU…
-
High 8.1
SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix UAF in svc_tcp_listen_data_ready() After the listener svc_sock is freed, and before invoking svc_tcp_accept() for the established child sock, there is a window that the newsock re…
-
High 8.1
wifi: iwlwifi: mvm: don't read past the mfuart notifcation
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't read past the mfuart notifcation In case the firmware sends a notification that claims it has more data than it has, we will read past that was allocated for the not…
-
High 7.9
KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
In the Linux kernel, the following vulnerability has been resolved: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() Use {READ,WRITE}_ONCE() to access kvm->last_boosted_vcpu to ensure the loads and stores are atomic. In the extremely unlikely s…
-
High 7.8
ima: Fix use-after-free on a dentry's dname.name
In the Linux kernel, the following vulnerability has been resolved: ima: Fix use-after-free on a dentry's dname.name ->d_name.name can change on rename and the earlier value can be freed; there are conditions sufficient to stabilize it (->d_lock on dentry, ->…
-
High 7.8
greybus: Fix use-after-free bug in gb_interface_release due to race condition.
In the Linux kernel, the following vulnerability has been resolved: greybus: Fix use-after-free bug in gb_interface_release due to race condition. In gb_interface_create, &intf->mode_switch_completion is bound with gb_interface_mode_switch_work. Then it will …
-
High 7.8
btrfs: zoned: fix use-after-free due to race with dev replace
In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after-free due to race with dev replace While loading a zone's info during creation of a block group, we can race with a device replace operation and then trigger a use-…
-
High 7.8
sock_map: avoid race between sock_map_close and sk_psock_put
In the Linux kernel, the following vulnerability has been resolved: sock_map: avoid race between sock_map_close and sk_psock_put sk_psock_get will return NULL if the refcount of psock has gone to 0, which will happen when the last call of sk_psock_put is done…
-
High 7.8
ionic: fix use after netif_napi_del()
In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netif_napi_del() When queues are started, netif_napi_add() and napi_enable() are called. If there are 4 queues and only 3 queues are used for the current configuration, o…
-
High 7.8
netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Lion Ackermann reported that there is a race condition between namespace cleanup in ipset and the garbage coll…
-
High 7.8
io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: Use set_bit() and test_bit() at worker->flags Utilize set_bit() and test_bit() on worker->flags within io_uring/io-wq to address potential data races. The structure io_worker-…
-
High 7.8
cachefiles: remove requests from xarray during flushing requests
In the Linux kernel, the following vulnerability has been resolved: cachefiles: remove requests from xarray during flushing requests Even with CACHEFILES_DEAD set, we can still read the requests, so in the following concurrency the request may be used after i…
-
High 7.8
jfs: xattr: fix buffer overflow for invalid xattr
In the Linux kernel, the following vulnerability has been resolved: jfs: xattr: fix buffer overflow for invalid xattr When an xattr size is not what is expected, it is printed out to the kernel log in hex format as a form of debugging. But when that xattr siz…
-
High 7.8
bpf: Fix a potential use-after-free in bpf_link_free()
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a potential use-after-free in bpf_link_free() After commit 1a80dbcb2dba, bpf_link can be freed by link->ops->dealloc_deferred, but the code still tests and uses link->ops->dealloc af…
-
High 7.8
parisc: Try to fix random segmentation faults in package builds
In the Linux kernel, the following vulnerability has been resolved: parisc: Try to fix random segmentation faults in package builds PA-RISC systems with PA8800 and PA8900 processors have had problems with random segmentation faults for many years. Systems wit…
-
High 7.8
drm/i915/dpt: Make DPT object unshrinkable
In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Make DPT object unshrinkable In some scenarios, the DPT object gets shrunk but the actual framebuffer did not and thus its still there on the DPT's vm->bound_list. Then it tries…
-
High 7.8
block: fix request.queuelist usage in flush
In the Linux kernel, the following vulnerability has been resolved: block: fix request.queuelist usage in flush Friedrich Weber reported a kernel crash problem and bisected to commit 81ada09cc25e ("blk-flush: reuse rq queuelist in flush state machine"). The r…
-
High 7.8
ocfs2: fix races between hole punching and AIO+DIO
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix races between hole punching and AIO+DIO After commit "ocfs2: return real error code in ocfs2_dio_wr_get_block", fstests/generic/300 become from always failed to sometimes failed: =…
-
High 7.8
ima: Avoid blocking in RCU read-side critical section
In the Linux kernel, the following vulnerability has been resolved: ima: Avoid blocking in RCU read-side critical section A panic happens in ima_match_policy: BUG: unable to handle kernel NULL pointer dereference at 0000000000000010 PGD 42f873067 P4D 0 Oops: …
-
High 7.8
mm: shmem: fix getting incorrect lruvec when replacing a shmem folio
In the Linux kernel, the following vulnerability has been resolved: mm: shmem: fix getting incorrect lruvec when replacing a shmem folio When testing shmem swapin, I encountered the warning below on my machine. The reason is that replacing an old shmem folio …
-
High 7.8
net: do not leave a dangling sk pointer, when socket creation fails
In the Linux kernel, the following vulnerability has been resolved: net: do not leave a dangling sk pointer, when socket creation fails It is possible to trigger a use-after-free by: * attaching an fentry probe to __sock_release() and the probe calling the bp…
-
High 7.8
dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list Use list_for_each_entry_safe() to allow iterating through the list and deleting the entry in the iteration process. The d…
-
High 7.8
netns: Make get_net_ns() handle zero refcount net
In the Linux kernel, the following vulnerability has been resolved: netns: Make get_net_ns() handle zero refcount net Syzkaller hit a warning: refcount_t: addition on 0; use-after-free. WARNING: CPU: 3 PID: 7890 at lib/refcount.c:25 refcount_warn_saturate+0xd…
-
High 7.8
Avoid hw_desc array overrun in dw-axi-dmac
In the Linux kernel, the following vulnerability has been resolved: Avoid hw_desc array overrun in dw-axi-dmac I have a use case where nr_buffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descs_allocated to be 9.…
-
High 7.8
powerpc/pseries: Enforce hcall result buffer validity and size
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Enforce hcall result buffer validity and size plpar_hcall(), plpar_hcall9(), and related functions expect callers to provide valid result buffers of certain minimum size. Cur…
-
High 7.8
wifi: ath12k: fix kernel crash during resume
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix kernel crash during resume Currently during resume, QMI target memory is not properly handled, resulting in kernel crash in case DMA remap is not supported: BUG: Bad page st…
-
High 7.8
ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." Undo the modifications made in commit d410ee5109a1 ("ACPICA: avoid "Info: mapping multiple BARs. Your kernel i…
-
High 7.8
dmaengine: xilinx: xdma: Fix data synchronisation in xdma_channel_isr()
In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix data synchronisation in xdma_channel_isr() Requests the vchan lock before using xdma->stop_request.
-
High 7.8
KVM: arm64: Disassociate vcpus from redistributor region on teardown
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Disassociate vcpus from redistributor region on teardown When tearing down a redistributor region, make sure we don't have any dangling pointer to that region stored in a vcpu.
-
High 7.8
RDMA/mlx5: Add check for srq max_sge attribute
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Add check for srq max_sge attribute max_sge attribute is passed by the user, and is inserted and used unchecked, so verify that the value doesn't exceed maximum allowed value befor…
-
High 7.8
dmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id()
In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id() The of_k3_udma_glue_parse_chn_by_id() helper function erroneously invokes "of_node_put()" on the "udmax_np" device-node pass…
-
High 7.8
bpf: Fix reg_set_min_max corruption of fake_reg
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reg_set_min_max corruption of fake_reg Juan reported that after doing some changes to buzzer [0] and implementing a new fuzzing strategy guided by coverage, they noticed the followin…
-
High 7.5
seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors
In the Linux kernel, the following vulnerability has been resolved: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors input_action_end_dx4() and input_action_end_dx6() are called NF_HOOK() for PREROUTING hook, in PREROUTING h…
-
High 7.5
drop_monitor: replace spin_lock by raw_spin_lock
In the Linux kernel, the following vulnerability has been resolved: drop_monitor: replace spin_lock by raw_spin_lock trace_drop_common() is called with preemption disabled, and it acquires a spin_lock. This is problematic for RT kernels because spin_locks are…
-
High 7.5
RDMA/rxe: Fix responder length checking for UD request packets
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix responder length checking for UD request packets According to the IBA specification: If a UD request packet is detected with an invalid length, the request shall be an invalid r…
-
High 7.5
tcp: avoid too many retransmit packets
In the Linux kernel, the following vulnerability has been resolved: tcp: avoid too many retransmit packets If a TCP socket is using TCP_USER_TIMEOUT, and the other peer retracted its window to zero, tcp_retransmit_timer() can retransmit a packet every two jif…
-
High 7.3
scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory There is a potential out-of-bounds access when using test_bit() on a single word. The test_bit() and set_bit() functions …
-
High 7.3
f2fs: remove clear SB_INLINECRYPT flag in default_options
In the Linux kernel, the following vulnerability has been resolved: f2fs: remove clear SB_INLINECRYPT flag in default_options In f2fs_remount, SB_INLINECRYPT flag will be clear and re-set. If create new file or open file during this gap, these files will not …
-
High 7.1
net: bridge: mst: fix suspicious rcu usage in br_mst_set_state
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state I converted br_mst_set_state to RCU to avoid a vlan use-after-free but forgot to change the vlan group dereference helper. Switc…
-
High 7.1
wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids In some versions of cfg80211, the ssids poinet might be a valid one even though n_ssids is 0. Accessing the pointer in this case w…
-
High 7.1
wifi: cfg80211: validate HE operation element parsing
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate HE operation element parsing Validate that the HE operation element has the correct length before parsing it.
-
High 7.0
net: hns3: fix kernel crash problem in concurrent scenario
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash problem in concurrent scenario When link status change, the nic driver need to notify the roce driver to handle this event, but at this time, the roce driver may u…
-
Unscored —
drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) Lack of check for copy-on-write (COW) mapping in drm_gem_shmem_mmap allows users to call mmap with PROT_WRITE and MAP_PRIVATE f…
-
Unscored —
drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2
In the Linux kernel, the following vulnerability has been resolved: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2 [Why] Commit: - commit 5aa1dfcdf0a4 ("drm/mst: Refactor the flow for payload allocation/removement") accidently overwrite the…
-
Unscored —
vmci: prevent speculation leaks by sanitizing event in event_deliver()
In the Linux kernel, the following vulnerability has been resolved: vmci: prevent speculation leaks by sanitizing event in event_deliver() Coverity spotted that event_msg is controlled by user-space, event_msg->event_data.event is passed to event_deliver() an…
-
Unscored —CVE-2024-39501 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
netfilter: nft_inner: validate mandatory meta and payload
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: validate mandatory meta and payload Check for mandatory netlink attributes in payload and meta expression when used embedded from the inner expression, otherwise NULL po…
-
Unscored —
drm/komeda: check for error-valued pointer
In the Linux kernel, the following vulnerability has been resolved: drm/komeda: check for error-valued pointer komeda_pipeline_get_state() may return an error-valued pointer, thus check the pointer for negative or null value before dereferencing.
-
Unscored —
liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
In the Linux kernel, the following vulnerability has been resolved: liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet In lio_vf_rep_copy_packet() pg_info->page is compared to a NULL value, but then it is unconditionally passed to skb_add…
-
Unscored —
HID: core: remove unnecessary WARN_ON() in implement()
In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARN_ON() in implement() Syzkaller hit a warning [1] in a call to implement() when trying to write a value into a field of smaller size in an output report. Sinc…
-
Unscored —
cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read() We got the following issue in a fuzz test of randomly issuing the restore command: ===================================…
-
Unscored —
cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd() We got the following issue in a fuzz test of randomly issuing the restore command: ========================================…
-
Unscored —
usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps There could be a potential use-after-free case in tcpm_register_source_caps(). This could happen when: * new (say invali…
-
Unscored —
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
In the Linux kernel, the following vulnerability has been resolved: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages The syzbot fuzzer found that the interrupt-URB completion callback in the cdc-wdm driver was taking too long, and the driv…
-
Unscored —
ipv6: fix possible race in __fib6_drop_pcpu_from()
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible race in __fib6_drop_pcpu_from() syzbot found a race in __fib6_drop_pcpu_from() [1] If compiler reads more than once (*ppcpu_rt), second read could read NULL, if another cpu…
-
Unscored —
net/mlx5: Always stop health timer during driver removal
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always stop health timer during driver removal Currently, if teardown_hca fails to execute during driver removal, mlx5 does not stop the health timer. Afterwards, mlx5 continue with…
-
Unscored —
bpf: Set run context for rawtp test_run callback
In the Linux kernel, the following vulnerability has been resolved: bpf: Set run context for rawtp test_run callback syzbot reported crash when rawtp program executed through the test_run interface calls bpf_get_attach_cookie helper or any other helper that t…
-
Unscored —
wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() The ieee80211_sta_ps_deliver_wakeup() function takes sta->ps_lock to synchronizes with ieee80211_tx_h_unicast_ps_buf() which …
-
Unscored —
cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
In the Linux kernel, the following vulnerability has been resolved: cachefiles: defer exposing anon_fd until after copy_to_user() succeeds After installing the anonymous fd, we can now see it in userland and close it. However, at this point we may not have go…
-
Unscored —
mm/huge_memory: don't unpoison huge_zero_folio
In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: don't unpoison huge_zero_folio When I did memory failure tests recently, below panic occurs: kernel BUG at include/linux/mm.h:1135! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI…
-
Unscored —
riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
In the Linux kernel, the following vulnerability has been resolved: riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context __kernel_map_pages() is a debug function which clears the valid bit in page table entry for deallocated pages to detect …
-
Unscored —
drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
In the Linux kernel, the following vulnerability has been resolved: drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found When reading EDID fails and driver reports no modes available, the DRM core adds an artificial 1024x786 mode to the…
-
Unscored —
memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
In the Linux kernel, the following vulnerability has been resolved: memblock: make memblock_set_node() also warn about use of MAX_NUMNODES On an (old) x86 system with SRAT just covering space above 4Gb: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0xfffffffff] h…
-
Unscored —
bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() In case of token is released due to token->state == BNXT_HWRM_DEFERRED, released token (set to NULL) is…
-
Unscored —
net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state Pass the already obtained vlan group pointer to br_mst_vlan_set_state() instead of dereferencing it again. Each caller has …
-
Unscored —
io_uring/rsrc: don't lock while !TASK_RUNNING
In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don't lock while !TASK_RUNNING There is a report of io_rsrc_ref_quiesce() locking a mutex while not TASK_RUNNING, which is due to forgetting restoring the state back after io_r…
-
Unscored —
drm/nouveau: don't attempt to schedule hpd_work on headless cards
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpd_work on headless cards If the card doesn't have display hardware, hpd_work and hpd_lock are left uninitialized which causes BUG when attempting to s…
-
Unscored —
xhci: Handle TD clearing for multiple streams case
In the Linux kernel, the following vulnerability has been resolved: xhci: Handle TD clearing for multiple streams case When multiple streams are in use, multiple TDs might be in flight when an endpoint is stopped. We need to issue a Set TR Dequeue Pointer for…
-
Unscored —
net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() Clang static checker (scan-build) warning: net/ethtool/ioctl.c:line 2233, column 2 Called function pointer is null (nu…
-
Unscored —
mptcp: ensure snd_una is properly initialized on connect
In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_una is properly initialized on connect This is strictly related to commit fb7a0d334894 ("mptcp: ensure snd_nxt is properly initialized on connect"). It turns out that syzkal…
-
Unscored —
drm/exynos/vidi: fix memory leak in .get_modes()
In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .get_modes() The duplicated EDID is never freed. Fix it.
-
Unscored —
iio: temperature: mlx90635: Fix ERR_PTR dereference in mlx90635_probe()
In the Linux kernel, the following vulnerability has been resolved: iio: temperature: mlx90635: Fix ERR_PTR dereference in mlx90635_probe() When devm_regmap_init_i2c() fails, regmap_ee could be error pointer, instead of checking for IS_ERR(regmap_ee), regmap …
-
Unscored —
HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() Fix a memory leak on logi_dj_recv_send_report() error path.
-
Unscored —
cachefiles: flush all requests after setting CACHEFILES_DEAD
In the Linux kernel, the following vulnerability has been resolved: cachefiles: flush all requests after setting CACHEFILES_DEAD In ondemand mode, when the daemon is processing an open request, if the kernel flags the cache as CACHEFILES_DEAD, the cachefiles_…
-
Unscored —
cxl/region: Fix memregion leaks in devm_cxl_add_region()
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix memregion leaks in devm_cxl_add_region() Move the mode verification to __create_region() before allocating the memregion to avoid the memregion leaks.
-
Unscored —
landlock: Fix d_parent walk
In the Linux kernel, the following vulnerability has been resolved: landlock: Fix d_parent walk The WARN_ON_ONCE() in collect_domain_accesses() can be triggered when trying to link a root mount point. This cannot work in practice because this directory is mou…
-
Unscored —
net: wwan: iosm: Fix tainted pointer delete is case of region creation fail
In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipc_devlink_create_region(), previously created regions delete process starts fr…
-
Unscored —
net/mlx5: Fix tainted pointer delete is case of flow rules creation fail
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail In case of flow rule creation fail in mlx5_lag_create_port_sel_table(), instead of previously created rules, the taint…
-
Unscored —
wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects The hwmp code use objects of type mesh_preq_queue, added to a list in ieee80211_if_mesh, to keep track of mpath we need to resolve. I…
-
Unscored —
x86/kexec: Fix bug with call depth tracking
In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to cc_platform_has() triggers a fault and system crash if call depth tracking is active because the GS segment has been reset by load_segm…
-
Unscored —
iommu: Return right value in iommu_sva_bind_device()
In the Linux kernel, the following vulnerability has been resolved: iommu: Return right value in iommu_sva_bind_device() iommu_sva_bind_device() should return either a sva bond handle or an ERR_PTR value in error cases. Existing drivers (idxd and uacce) only …
-
Unscored —CVE-2024-40946 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
mm/page_table_check: fix crash on ZONE_DEVICE
In the Linux kernel, the following vulnerability has been resolved: mm/page_table_check: fix crash on ZONE_DEVICE Not all pages may apply to pgtable check. One example is ZONE_DEVICE pages: they map PFNs directly, and they don't allocate page_ext at all even …
-
Unscored —
mm: huge_memory: fix misused mapping_large_folio_support() for anon folios
In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: fix misused mapping_large_folio_support() for anon folios When I did a large folios split test, a WARNING "[ 5059.122759][ T166] Cannot split file folio to non-0 order" was t…
-
Unscored —
ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger()
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger() bdev->bd_super has been removed and commit 8887b94d9322 change the usage from bdev->bd_super to b_assoc_map->host->i_sb. Since ocf…
-
Unscored —
ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty()
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty() bdev->bd_super has been removed and commit 8887b94d9322 change the usage from bdev->bd_super to b_assoc_map->host->i_sb. This intr…
-
Unscored —
ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists() We can trigger a slab-out-of-bounds with the following commands: mkfs.ext4 -F /dev/$disk 10G mount /dev/$disk /tmp/tes…
-
Unscored —
xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
In the Linux kernel, the following vulnerability has been resolved: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() ip6_dst_idev() can return NULL, xfrm6_get_saddr() must act accordingly. syzbot reported: Oops: general protection fault, probably…
-
Unscored —
ipv6: prevent possible NULL dereference in rt6_probe()
In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL dereference in rt6_probe() syzbot caught a NULL dereference in rt6_probe() [1] Bail out if __in6_dev_get() returns NULL. [1] Oops: general protection fault, probab…
-
Unscored —
ipv6: prevent possible NULL deref in fib6_nh_init()
In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL deref in fib6_nh_init() syzbot reminds us that in6_dev_get() can return NULL. fib6_nh_init() ip6_validate_gw( &idev ) ip6_route_check_nh( idev ) *idev = in6_dev_ge…
-
Unscored —
btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes
In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes Shin'ichiro reported that when he's running fstests' test-case btrfs/167 on emulated zoned devices, he's seeing the following…
-
Unscored —
mips: bmips: BCM6358: make sure CBR is correctly set
In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: make sure CBR is correctly set It was discovered that some device have CBR address set to 0 causing kernel panic when arch_sync_dma_for_cpu_all is called. This was notic…
-
Unscored —
ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind() The cs35l41_hda_unbind() function clears the hda_component entry matching it's index and then dereferences the co…
-
Unscored —
i2c: lpi2c: Avoid calling clk_get_rate during transfer
In the Linux kernel, the following vulnerability has been resolved: i2c: lpi2c: Avoid calling clk_get_rate during transfer Instead of repeatedly calling clk_get_rate for each transfer, lock the clock rate and cache the value. A deadlock has been observed whil…
-
Unscored —
tty: add the option to have a tty reject a new ldisc
In the Linux kernel, the following vulnerability has been resolved: tty: add the option to have a tty reject a new ldisc ... and use it to limit the virtual terminals to just N_TTY. They are kind of special, and in particular, the "con_write()" routine violat…
-
Unscored —
serial: imx: Introduce timeout when waiting on transmitter empty
In the Linux kernel, the following vulnerability has been resolved: serial: imx: Introduce timeout when waiting on transmitter empty By waiting at most 1 second for USR2_TXDC to be set, we avoid a potential deadlock. In case of the timeout, there is not much …
-
Unscored —
MIPS: Octeon: Add PCIe link status check
In the Linux kernel, the following vulnerability has been resolved: MIPS: Octeon: Add PCIe link status check The standard PCIe configuration read-write interface is used to access the configuration space of the peripheral PCIe devices of the mips processor af…
-
Unscored —
f2fs: don't set RO when shutting down f2fs
In the Linux kernel, the following vulnerability has been resolved: f2fs: don't set RO when shutting down f2fs Shutdown does not check the error of thaw_super due to readonly, which causes a deadlock like below. f2fs_ioc_shutdown(F2FS_GOING_DOWN_FULLSYNC) iss…
-
Unscored —
ext4: do not create EA inode under buffer lock
In the Linux kernel, the following vulnerability has been resolved: ext4: do not create EA inode under buffer lock ext4_xattr_set_entry() creates new EA inodes while holding buffer lock on the external xattr block. This is problematic as it nests all the allo…
-
Unscored —
media: mtk-vcodec: potential null pointer deference in SCP
In the Linux kernel, the following vulnerability has been resolved: media: mtk-vcodec: potential null pointer deference in SCP The return value of devm_kzalloc() needs to be checked to avoid NULL pointer deference. This is similar to CVE-2022-3113.
-
Unscored —
platform/x86: x86-android-tablets: Unregister devices in reverse order
In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Unregister devices in reverse order Not all subsystems support a device getting removed while there are still consumers of the device with a reference to th…
-
Unscored —
drm/lima: mask irqs in timeout path before hard reset
In the Linux kernel, the following vulnerability has been resolved: drm/lima: mask irqs in timeout path before hard reset There is a race condition in which a rendering job might take just long enough to trigger the drm sched job timeout handler but also stil…
-
Unscored —
wifi: mt76: mt7921s: fix potential hung tasks during chip recovery
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery During chip recovery (e.g. chip reset), there is a possible situation that kernel worker reset_work is holding the lock and …
-
Unscored —
scsi: qedi: Fix crash while reading debugfs attribute
In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedi_dbg_do_not_recover_cmd_read() function invokes sprintf() directly on a __user pointer, which results into the crash. To fix this…
-
Unscored —
batman-adv: bypass empty buckets in batadv_purge_orig_ref()
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bypass empty buckets in batadv_purge_orig_ref() Many syzbot reports are pointing to soft lockups in batadv_purge_orig_ref() [1] Root cause is unknown, but we can avoid spending to…
-
Unscored —CVE-2024-40982 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
net/tcp_ao: Don't leak ao_info on error-path
In the Linux kernel, the following vulnerability has been resolved: net/tcp_ao: Don't leak ao_info on error-path It seems I introduced it together with TCP_AO_CMDF_AO_REQUIRED, on version 5 [1] of TCP-AO patches. Quite frustrative that having all these selfte…
-
Unscored —
drm/amdgpu: fix UBSAN warning in kv_dpm.c
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix UBSAN warning in kv_dpm.c Adds bounds check for sumo_vid_mapping_entry.
-
Unscored —
drm/radeon: fix UBSAN warning in kv_dpm.c
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix UBSAN warning in kv_dpm.c Adds bounds check for sumo_vid_mapping_entry.
-
Unscored —
netfilter: ipset: Fix suspicious rcu_dereference_protected()
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix suspicious rcu_dereference_protected() When destroying all sets, we are either in pernet exit phase or are executing a "destroy all sets command" from userspace. The lat…
-
Unscored —
ptp: fix integer overflow in max_vclocks_store
In the Linux kernel, the following vulnerability has been resolved: ptp: fix integer overflow in max_vclocks_store On 32bit systems, the "4 * max" multiply can overflow. Use kcalloc() to do the allocation to prevent this.
-
Unscored —
net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() syzbot found hanging tasks waiting on rtnl_lock [1] A reproducer is available in the syzbot bug. When a request to add …
-
Unscored —
bpf: Avoid splat in pskb_pull_reason
In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid splat in pskb_pull_reason syzkaller builds (CONFIG_DEBUG_NET=y) frequently trigger a debug hint in pskb_may_pull. We'd like to retain this debug check because it might hint at inte…
-
Unscored —
cpufreq: amd-pstate: fix memory leak on CPU EPP exit
In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: fix memory leak on CPU EPP exit The cpudata memory from kzalloc() in amd_pstate_epp_cpu_init() is not freed in the analogous exit function, so fix that. [ rjw: Subject an…
-
Unscored —
ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() In the following concurrency we will access the uninitialized rs->lock: ext4_fill_super ext4_register_sysfs // sysf…
-
Unscored —
block/ioctl: prefer different overflow check
In the Linux kernel, the following vulnerability has been resolved: block/ioctl: prefer different overflow check Running syzkaller with the newly reintroduced signed integer overflow sanitizer shows this report: [ 62.982337] ------------[ cut here ]----------…
-
Unscored —
io_uring/sqpoll: work around a potential audit memory leak
In the Linux kernel, the following vulnerability has been resolved: io_uring/sqpoll: work around a potential audit memory leak kmemleak complains that there's a memory leak related to connect handling: unreferenced object 0xffff0001093bdf00 (size 128): comm "…
-
Unscored —
crypto: hisilicon/sec - Fix memory leak for sec resource release
In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - Fix memory leak for sec resource release The AIV is one of the SEC resources. When releasing resources, it need to release the AIV resources at the same time. Otherwis…
-
Unscored —
tracing: Build event generation tests only as modules
In the Linux kernel, the following vulnerability has been resolved: tracing: Build event generation tests only as modules The kprobes and synth event generation test modules add events and lock (get a reference) those event file reference in module init funct…
-
Unscored —
netpoll: Fix race condition in netpoll_owner_active
In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix race condition in netpoll_owner_active KCSAN detected a race condition in netpoll: BUG: KCSAN: data-race in net_rx_action / netpoll_send_skb write (marked) to 0xffff8881164168b0 …
-
Unscored —
netrom: Fix a memory leak in nr_heartbeat_expiry()
In the Linux kernel, the following vulnerability has been resolved: netrom: Fix a memory leak in nr_heartbeat_expiry() syzbot reported a memory leak in nr_create() [0]. Commit 409db27e3a2e ("netrom: Fix use-after-free of a listening socket.") added sock_hold(…
Revision history
-
#157
Neue Updates von Ubuntu aufgenommen
-
#156
Neue Updates von Oracle Linux aufgenommen
-
#155
Neue Updates von Oracle Linux aufgenommen
-
#154
Neue Updates von Oracle Linux aufgenommen
-
#153
Neue Updates von Amazon aufgenommen
-
#152
Neue Updates von SUSE aufgenommen
-
#151
Neue Updates von SUSE aufgenommen
-
#150
Neue Updates von SUSE aufgenommen
-
#149
Neue Updates von Ubuntu aufgenommen
-
#148
Neue Updates von Ubuntu aufgenommen
-
#147
Neue Updates von Ubuntu aufgenommen
-
#146
Neue Updates von Ubuntu aufgenommen
-
#145
Neue Updates von Oracle Linux aufgenommen
-
#144
Neue Updates von Ubuntu aufgenommen
-
#143
Neue Updates von Ubuntu aufgenommen
-
#142
Referenz(en) aufgenommen:
-
#141
Neue Updates von IBM aufgenommen
-
#140
Neue Updates von Oracle Linux aufgenommen
-
#139
Neue Updates aufgenommen
-
#138
Neue Updates von SUSE aufgenommen
-
#137
Neue Updates von SUSE aufgenommen
-
#136
Neue Updates von SUSE aufgenommen
-
#135
Neue Updates von SUSE aufgenommen
-
#134
Neue Updates von SUSE aufgenommen
-
#133
Neue Updates von SUSE aufgenommen
References
-
SUSE Security Update SUSE-SU-2024:4234-1 vom 2024-12-06
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/B6RMLGICBLD3BNXSBS7J23W3GCEJMFJA/
-
SUSE Security Update SUSE-SU-2024:4228-1 vom 2024-12-06
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/SUCQUP757AUWMZNCNQ2DGQICEYBRZUIC/
-
SUSE Security Update SUSE-SU-2024:4236-1 vom 2024-12-06
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ODASOBSBN3UUGHNO44MK2K4MC35CPLXJ/
-
SUSE Security Update SUSE-SU-2024:4243-1 vom 2024-12-06
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/GDL3TRRFKGYVQIW7MMTUJS76GCW7B3JZ/
-
SUSE Security Update SUSE-SU-2024:4235-1 vom 2024-12-06
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LIMMCWFWYJUMJTABZZ7ZEYXOOVE5BZY7/
-
Ubuntu Security Notice USN-7156-1 vom 2024-12-12
https://ubuntu.com/security/notices/USN-7156-1
-
Red Hat Security Advisory RHSA-2024:11313 vom 2024-12-18
https://access.redhat.com/errata/RHSA-2024:11313
-
SUSE Security Update SUSE-SU-2024:4364-1 vom 2024-12-17
https://lists.suse.com/pipermail/sle-security-updates/2024-December/020019.html
-
Ubuntu Security Notice USN-7173-1 vom 2024-12-17
https://ubuntu.com/security/notices/USN-7173-1
-
IBM Security Bulletin 7180361 vom 2025-01-07
https://www.ibm.com/support/pages/node/7180361
-
Ubuntu Security Notice USN-7144-1 vom 2024-12-09
https://ubuntu.com/security/notices/USN-7144-1
-
SUSE Security Update SUSE-SU-2024:4266-1 vom 2024-12-09
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RRJRAM3LFR4MNOHCFB2XIOS6OJUDNUPE/
-
SUSE Security Update SUSE-SU-2024:4262-1 vom 2024-12-09
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AF5MYHVYCHCM3AIO34JSXWJNP2WUCOHS/
-
SUSE Security Update SUSE-SU-2024:4314-1 vom 2024-12-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/SARXL66CQHD5VSFG5PUBNBVBPVFUN4KT/
-
SUSE Security Update SUSE-SU-2024:4316-1 vom 2024-12-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/S4I5Z6ALCJLHTP25U3HMJHEXN4DR2USM/
-
SUSE Security Update SUSE-SU-2024:4315-1 vom 2024-12-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LQPWDP54GSTHYCV4CTCOE67D2ANVPPUW/
-
SUSE Security Update SUSE-SU-2024:4318-1 vom 2024-12-13
https://lists.suse.com/pipermail/sle-security-updates/2024-December/019999.html
-
Ubuntu Security Notice USN-7186-2 vom 2025-01-09
https://ubuntu.com/security/notices/USN-7186-2
-
Ubuntu Security Notice USN-7185-2 vom 2025-01-09
https://ubuntu.com/security/notices/USN-7185-2
-
Ubuntu Security Notice USN-7195-1 vom 2025-01-09
https://ubuntu.com/security/notices/USN-7195-1
-
Ubuntu Security Notice USN-7194-1 vom 2025-01-09
https://ubuntu.com/security/notices/USN-7194-1
-
Ubuntu Security Notice USN-7173-2 vom 2024-12-20
https://ubuntu.com/security/notices/USN-7173-2
-
Ubuntu Security Notice USN-7179-1 vom 2024-12-20
https://ubuntu.com/security/notices/USN-7179-1
-
SUSE Security Update SUSE-SU-2024:4376-1 vom 2024-12-18
https://lists.suse.com/pipermail/sle-security-updates/2024-December/020028.html
-
Red Hat Security Advisory RHSA-2024:11482 vom 2024-12-19
https://access.redhat.com/errata/RHSA-2024:11482
-
Red Hat Security Advisory RHSA-2024:11483 vom 2024-12-19
https://access.redhat.com/errata/RHSA-2024:11483
-
SUSE Security Update SUSE-SU-2024:4376-1 vom 2024-12-18
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/WFOJHFFEHK42VPQ6XLZWB77H5OEJ3FF4/
-
SUSE Security Update SUSE-SU-2024:4376-1 vom 2024-12-18
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WFOJHFFEHK42VPQ6XLZWB77H5OEJ3FF4/
-
Oracle Linux Security Advisory ELSA-2024-12887 vom 2024-12-18
https://linux.oracle.com/errata/ELSA-2024-12887.html
-
Ubuntu Security Notice USN-7179-3 vom 2025-01-07
https://ubuntu.com/security/notices/USN-7179-3
-
Ubuntu Security Notice USN-7183-1 vom 2025-01-06
https://ubuntu.com/security/notices/USN-7183-1
-
Ubuntu Security Notice USN-7184-1 vom 2025-01-06
https://ubuntu.com/security/notices/USN-7184-1
-
Ubuntu Security Notice USN-7186-1 vom 2025-01-06
https://ubuntu.com/security/notices/USN-7186-1
-
Ubuntu Security Notice USN-7179-2 vom 2025-01-06
https://ubuntu.com/security/notices/USN-7179-2
-
SUSE Security Update SUSE-SU-2025:0034-1 vom 2025-01-08
https://lists.suse.com/pipermail/sle-security-updates/2025-January/020071.html
-
Juniper Security Advisory JSA92874 vom 2024-01-09
https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-24-1R2-release
-
ORACLE OVMSA-2024-0016 vom 2024-12-10
https://oss.oracle.com/pipermail/oraclevm-errata/2024-December/001104.html
-
SUSE Security Update SUSE-SU-2024:4275-1 vom 2024-12-10
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/YTZ2WGLML4Q6E3IG32UCJ6NFIDUTWN22/
-
SUSE Security Update SUSE-SU-2024:4275-1 vom 2024-12-10
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YTZ2WGLML4Q6E3IG32UCJ6NFIDUTWN22/
-
Linux CVE Announcement CVE-2023-52885 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071432-CVE-2023-52885-e934@gregkh/
-
Linux CVE Announcement CVE-2024-39494 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071259-CVE-2024-39494-119a@gregkh/
-
Linux CVE Announcement CVE-2024-39495 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071202-CVE-2024-39495-457b@gregkh/
-
Linux CVE Announcement CVE-2024-39496 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071202-CVE-2024-39496-7948@gregkh/
-
Linux CVE Announcement CVE-2024-39497 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071202-CVE-2024-39497-834c@gregkh/
-
Linux CVE Announcement CVE-2024-39498 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071203-CVE-2024-39498-8421@gregkh/
-
Linux CVE Announcement CVE-2024-39499 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071203-CVE-2024-39499-ed0a@gregkh/
-
Linux CVE Announcement CVE-2024-39500 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071203-CVE-2024-39500-eba6@gregkh/
-
Linux CVE Announcement CVE-2024-39501 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071204-CVE-2024-39501-058b@gregkh/
-
Linux CVE Announcement CVE-2024-39502 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071204-CVE-2024-39502-afe9@gregkh/
-
Linux CVE Announcement CVE-2024-39503 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071204-CVE-2024-39503-e604@gregkh/
-
Linux CVE Announcement CVE-2024-39504 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071204-CVE-2024-39504-1223@gregkh/
-
Linux CVE Announcement CVE-2024-39505 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071205-CVE-2024-39505-8e03@gregkh/
-
Linux CVE Announcement CVE-2024-39506 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071205-CVE-2024-39506-b0cc@gregkh/
-
Linux CVE Announcement CVE-2024-39507 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071205-CVE-2024-39507-cbc6@gregkh/
-
Linux CVE Announcement CVE-2024-39508 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071206-CVE-2024-39508-20c3@gregkh/
-
Linux CVE Announcement CVE-2024-39509 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071206-CVE-2024-39509-fce1@gregkh/
-
Linux CVE Announcement CVE-2024-39510 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071206-CVE-2024-39510-9f8c@gregkh/
-
Linux CVE Announcement CVE-2024-40899 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071207-CVE-2024-40899-a342@gregkh/
-
Linux CVE Announcement CVE-2024-40900 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071207-CVE-2024-40900-7497@gregkh/
-
Linux CVE Announcement CVE-2024-40901 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071207-CVE-2024-40901-05c4@gregkh/
-
Linux CVE Announcement CVE-2024-40902 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071207-CVE-2024-40902-122a@gregkh/
-
Linux CVE Announcement CVE-2024-40903 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071208-CVE-2024-40903-8fd1@gregkh/
-
Linux CVE Announcement CVE-2024-40904 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071208-CVE-2024-40904-48b1@gregkh/
-
Linux CVE Announcement CVE-2024-40905 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071208-CVE-2024-40905-44f9@gregkh/
-
Linux CVE Announcement CVE-2024-40906 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071209-CVE-2024-40906-b9e3@gregkh/
-
Linux CVE Announcement CVE-2024-40907 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071209-CVE-2024-40907-5305@gregkh/
-
Linux CVE Announcement CVE-2024-40908 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071209-CVE-2024-40908-bdc0@gregkh/
-
Linux CVE Announcement CVE-2024-40909 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071210-CVE-2024-40909-1706@gregkh/
-
Linux CVE Announcement CVE-2024-40910 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071210-CVE-2024-40910-d7d9@gregkh/
-
Linux CVE Announcement CVE-2024-40911 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071210-CVE-2024-40911-2382@gregkh/
-
Linux CVE Announcement CVE-2024-40912 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071210-CVE-2024-40912-7286@gregkh/
-
Linux CVE Announcement CVE-2024-40913 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071210-CVE-2024-40913-5952@gregkh/
-
Linux CVE Announcement CVE-2024-40914 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071210-CVE-2024-40914-0e04@gregkh/
-
Linux CVE Announcement CVE-2024-40915 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071211-CVE-2024-40915-ba8c@gregkh/
-
Linux CVE Announcement CVE-2024-40916 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071211-CVE-2024-40916-845e@gregkh/
-
Linux CVE Announcement CVE-2024-40917 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071211-CVE-2024-40917-0a05@gregkh/
-
Linux CVE Announcement CVE-2024-40918 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071212-CVE-2024-40918-1830@gregkh/
-
Linux CVE Announcement CVE-2024-40919 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071212-CVE-2024-40919-2997@gregkh/
-
Linux CVE Announcement CVE-2024-40920 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071212-CVE-2024-40920-c766@gregkh/
-
Linux CVE Announcement CVE-2024-40921 vom 2024-07-14
https://lore.kernel.org/linux-cve-announce/2024071213-CVE-2024-40921-b535@gregkh/