Skip to content
OpenAdvisories
Medium WID-SEC-2024-1927 17 CVEs

Linux Kernel: Mehrere Schwachstellen

Published Aug 26, 2024 · Updated Feb 16, 2026 · Revision 69 · de-DE

Vendor: Broadcom Vendor: Debian Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Brocade SANnav Product: Enterprise Linux Product: InfoSphere Guardium Product: Linux Product: Linux Product: Linux Product: Linux Product: QRadar SIEM Product: Rocky Linux Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder einen nicht spezifizierten Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 17

  • High 7.8
    CVE-2024-43888

    mm: list_lru: fix UAF for memory cgroup

    In the Linux kernel, the following vulnerability has been resolved: mm: list_lru: fix UAF for memory cgroup The mem_cgroup_from_slab_obj() is supposed to be called under rcu lock or cgroup_mutex or others which could prevent returned memcg from being freed. F…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-43891

    tracing: Have format file honor EVENT_FILE_FL_FREED

    In the Linux kernel, the following vulnerability has been resolved: tracing: Have format file honor EVENT_FILE_FL_FREED When eventfs was introduced, special care had to be done to coordinate the freeing of the file meta data with the files that are exposed to…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-43892

    memcg: protect concurrent access to mem_cgroup_idr

    In the Linux kernel, the following vulnerability has been resolved: memcg: protect concurrent access to mem_cgroup_idr Commit 73f576c04b94 ("mm: memcontrol: fix cgroup creation failure after many small jobs") decoupled the memcg IDs from the CSS ID space to f…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-43897

    net: drop bad gso csum_start and offset in virtio_net_hdr

    In the Linux kernel, the following vulnerability has been resolved: net: drop bad gso csum_start and offset in virtio_net_hdr Tighten csum_start and csum_offset checks in virtio_net_hdr_to_skb for GSO packets. The function already checks that a checksum reque…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-44939

    jfs: fix null ptr deref in dtInsertEntry

    In the Linux kernel, the following vulnerability has been resolved: jfs: fix null ptr deref in dtInsertEntry [syzbot reported] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-der…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-44941

    f2fs: fix to cover read extent cache access with lock

    In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to cover read extent cache access with lock syzbot reports a f2fs bug as below: BUG: KASAN: slab-use-after-free in sanity_check_extent_cache+0x370/0x410 fs/f2fs/extent_cache.c:46 Re…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-44942

    f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC

    In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC syzbot reports a f2fs bug as below: ------------[ cut here ]------------ kernel BUG at fs/f2fs/inline.c:258! CPU: 1 PI…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2024-44940

    fou: remove warn in gue_gro_receive on unsupported protocol

    In the Linux kernel, the following vulnerability has been resolved: fou: remove warn in gue_gro_receive on unsupported protocol Drop the WARN_ON_ONCE inn gue_gro_receive if the encapsulated type is not known or does not have a GRO handler. Such a packet is ea…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-43885 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  • Unscored —
    CVE-2024-43886

    drm/amd/display: Add null check in resource_log_pipe_topology_update

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check in resource_log_pipe_topology_update [WHY] When switching from "Extend" to "Second Display Only" we sometimes call resource_get_otg_master_for_stream on a stre…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-43887

    net/tcp: Disable TCP-AO static key after RCU grace period

    In the Linux kernel, the following vulnerability has been resolved: net/tcp: Disable TCP-AO static key after RCU grace period The lifetime of TCP-AO static_key is the same as the last tcp_ao_info. On the socket destruction tcp_ao_info ceases to be with RCU gr…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-43889

    padata: Fix possible divide-by-0 panic in padata_mt_helper()

    In the Linux kernel, the following vulnerability has been resolved: padata: Fix possible divide-by-0 panic in padata_mt_helper() We are hit with a not easily reproducible divide-by-0 panic in padata.c at bootup time. [ 10.017908] Oops: divide error: 0000 1 PR…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-43890

    tracing: Fix overflow in get_free_elt()

    In the Linux kernel, the following vulnerability has been resolved: tracing: Fix overflow in get_free_elt() "tracing_map->next_elt" in get_free_elt() is at risk of overflowing. Once it overflows, new elements can still be inserted into the tracing_map even th…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-43893

    serial: core: check uartclk for zero to avoid divide by zero

    In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid divide by zero Calling ioctl TIOCSSERIAL with an invalid baud_base can result in uartclk being zero, which will result in a divide by zero error …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-43894

    drm/client: fix null pointer dereference in drm_client_modeset_probe

    In the Linux kernel, the following vulnerability has been resolved: drm/client: fix null pointer dereference in drm_client_modeset_probe In drm_client_modeset_probe(), the return value of drm_mode_duplicate() is assigned to modeset->mode, which will lead to a…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-43895 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  • Unscored —
    CVE-2024-44938

    jfs: Fix shift-out-of-bounds in dbDiscardAG

    In the Linux kernel, the following vulnerability has been resolved: jfs: Fix shift-out-of-bounds in dbDiscardAG When searching for the next smaller log2 block, BLKSTOL2() returned 0, causing shift exponent -1 to be negative. This patch fixes the issue by exit…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Revision history

  1. #69

    Neue Updates von SUSE aufgenommen

  2. #68

    Neue Updates von SUSE aufgenommen

  3. #67

    Neue Updates von Oracle Linux aufgenommen

  4. #66

    Neue Updates von Ubuntu aufgenommen

  5. #65

    Neue Updates von Ubuntu aufgenommen

  6. #64

    Neue Updates von Ubuntu aufgenommen

  7. #63

    Neue Updates von Ubuntu aufgenommen

  8. #62

    Neue Updates von Ubuntu aufgenommen

  9. #61

    Neue Updates von Red Hat aufgenommen

  10. #60

    Neue Updates von Oracle Linux aufgenommen

  11. #59

    Neue Updates von SUSE aufgenommen

  12. #58

    Neue Updates von Ubuntu aufgenommen

  13. #57

    Neue Updates von Debian aufgenommen

  14. #56

    Neue Updates von Red Hat aufgenommen

  15. #55

    Neue Updates von Ubuntu aufgenommen

  16. #54

    Neue Updates von Ubuntu aufgenommen

  17. #53

    Neue Updates von Ubuntu aufgenommen

  18. #52

    Neue Updates von Ubuntu aufgenommen

  19. #51

    Neue Updates von Ubuntu aufgenommen

  20. #50

    Neue Updates von Ubuntu aufgenommen

  21. #49

    Neue Updates von Ubuntu aufgenommen

  22. #48

    Neue Updates von Ubuntu aufgenommen

  23. #47

    Neue Updates von Red Hat aufgenommen

  24. #46

    Neue Updates von Red Hat aufgenommen

  25. #45

    Neue Updates von Ubuntu aufgenommen

References