Summary
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder einen unspezifischen Angriff durchzuführen.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 88
-
Critical 9.8
net/mlx5e: SHAMPO, Fix incorrect page release
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: SHAMPO, Fix incorrect page release Under the following conditions: 1) No skb created yet 2) header_size == 0 (no SHAMPO header) 3) header_index + 1 % MLX5E_SHAMPO_WQ_HEADER_PER_PAG…
-
Critical 9.8
smb: client: fix double put of @cfile in smb2_rename_path()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2_rename_path() If smb2_set_path_attr() is called with a valid @cfile and returned -EINVAL, we need to call cifs_get_writable_path() again as the r…
-
Critical 9.8
smb: client: fix double put of @cfile in smb2_set_path_size()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2_set_path_size() If smb2_compound_op() is called with a valid @cfile and returned -EINVAL, we need to call cifs_get_writable_path() before retryin…
-
High 8.8
wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() mwifiex_get_priv_by_id() returns the priv pointer corresponding to the bss_num and bss_type, but without checking if the p…
-
High 7.8
dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
In the Linux kernel, the following vulnerability has been resolved: dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor Remove list_del call in msgdma_chan_desc_cleanup, this should be the role of msgdma_free_descriptor. In consequenc…
-
High 7.8
drm/amdgpu: Fix out-of-bounds write warning
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix out-of-bounds write warning Check the ring type value to fix the out-of-bounds write warning
-
High 7.8
drm/amd/display: Ensure array index tg_inst won't be -1
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure array index tg_inst won't be -1 [WHY & HOW] tg_inst will be a negative if timing_generator_count equals 0, which should be checked before used. This fixes 2 OVERRUN is…
-
High 7.8
btrfs: fix race between direct IO write and fsync when using same fd
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between direct IO write and fsync when using same fd If we have 2 threads that are using the same file descriptor and one of them is doing direct IO writes while the other is …
-
High 7.8
VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() When removing a resource from vmci_resource_table in vmci_resource_remove(), the search is performed using the resour…
-
High 7.8
binder: fix UAF caused by offsets overwrite
In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF caused by offsets overwrite Binder objects are processed and copied individually into the target buffer during transactions. Any raw data in-between these objects is copied as…
-
High 7.8
misc: fastrpc: Fix double free of 'buf' in error path
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix double free of 'buf' in error path smatch warning: drivers/misc/fastrpc.c:1926 fastrpc_req_mmap() error: double free of 'buf' In fastrpc_req_mmap() error path, the fastrpc …
-
High 7.8
HID: amd_sfh: free driver_data after destroying hid device
In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: free driver_data after destroying hid device HID driver callbacks aren't called anymore once hid_destroy_device() has been called. Hence, hid driver_data should be freed only af…
-
High 7.8
PCI: Add missing bridge lock to pci_bus_lock()
In the Linux kernel, the following vulnerability has been resolved: PCI: Add missing bridge lock to pci_bus_lock() One of the true positives that the cfg_access_lock lockdep effort identified is this sequence: WARNING: CPU: 14 PID: 1 at drivers/pci/pci.c:4886…
-
High 7.8
btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() Instead of doing a BUG_ON() handle the error by returning -EUCLEAN, aborting the transaction and logging an error me…
-
High 7.8
bpf: Remove tst_run from lwt_seg6local_prog_ops.
In the Linux kernel, the following vulnerability has been resolved: bpf: Remove tst_run from lwt_seg6local_prog_ops. The syzbot reported that the lwt_seg6 related BPF ops can be invoked via bpf_test_run() without without entering input_action_end_bpf() first.…
-
High 7.8
xen: privcmd: Fix possible access to a freed kirqfd instance
In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Fix possible access to a freed kirqfd instance Nothing prevents simultaneous ioctl calls to privcmd_irqfd_assign() and privcmd_irqfd_deassign(). If that happens, it is possible …
-
High 7.8
ice: protect XDP configuration with a mutex
In the Linux kernel, the following vulnerability has been resolved: ice: protect XDP configuration with a mutex The main threat to data consistency in ice_xdp() is a possible asynchronous PF reset. It can be triggered by a user or by TX timeout handler. XDP s…
-
High 7.8
can: bcm: Remove proc entry when dev is unregistered.
In the Linux kernel, the following vulnerability has been resolved: can: bcm: Remove proc entry when dev is unregistered. syzkaller reported a warning in bcm_connect() below. [0] The repro calls connect() to vxcan1, removes vxcan1, and calls connect() with if…
-
High 7.8
udf: Avoid excessive partition lengths
In the Linux kernel, the following vulnerability has been resolved: udf: Avoid excessive partition lengths Avoid mounting filesystems where the partition would overflow the 32-bits used for block number. Also refuse to mount filesystems where the partition le…
-
High 7.8
nilfs2: protect references to superblock parameters exposed in sysfs
In the Linux kernel, the following vulnerability has been resolved: nilfs2: protect references to superblock parameters exposed in sysfs The superblock buffers of nilfs2 can not only be overwritten at runtime for modifications/repairs, but they are also regul…
-
High 7.8
nilfs2: fix missing cleanup on rollforward recovery error
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix missing cleanup on rollforward recovery error In an error injection test of a routine for mount-time recovery, KASAN found a use-after-free bug. It turned out that if data recover…
-
High 7.8
userfaultfd: fix checks for huge PMDs
In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix checks for huge PMDs Patch series "userfaultfd: fix races around pmd_trans_huge() check", v2. The pmd_trans_huge() code in mfill_atomic() is wrong in three different ways dep…
-
High 7.8
tracing/osnoise: Use a cpumask to know what threads are kthreads
In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Use a cpumask to know what threads are kthreads The start_kthread() and stop_thread() code was not always called with the interface_lock held. This means that the kthread var…
-
High 7.8
riscv: misaligned: Restrict user access to kernel memory
In the Linux kernel, the following vulnerability has been resolved: riscv: misaligned: Restrict user access to kernel memory raw_copy_{to,from}_user() do not call access_ok(), so this code allowed userspace to access any virtual memory address.
-
High 7.8
ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object When using kernel with the following extra config, - CONFIG_KASAN=y - CONFIG_KASAN_GENERIC=y - CONFIG_KASAN_INLINE=y - CONFIG_KASAN_VMALLOC=…
-
High 7.8
sch/netem: fix use after free in netem_dequeue
In the Linux kernel, the following vulnerability has been resolved: sch/netem: fix use after free in netem_dequeue If netem_dequeue() enqueues packet to inner qdisc and that qdisc returns __NET_XMIT_STOLEN. The packet is dropped but qdisc_tree_reduce_backlog(…
-
High 7.8
libfs: fix get_stashed_dentry()
In the Linux kernel, the following vulnerability has been resolved: libfs: fix get_stashed_dentry() get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs to ensure to hold rcu lock before it dereference the …
-
High 7.5
nvmet-tcp: fix kernel crash if commands allocation fails
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix kernel crash if commands allocation fails If the commands allocation fails in nvmet_tcp_alloc_cmds() the kernel crashes in nvmet_tcp_release_queue_work() because of a NULL poin…
-
High 7.5
fou: Fix null-ptr-deref in GRO.
In the Linux kernel, the following vulnerability has been resolved: fou: Fix null-ptr-deref in GRO. We observed a null-ptr-deref in fou_gro_receive() while shutting down a host. [0] The NULL pointer is sk->sk_user_data, and the offset 8 is of protocol in stru…
-
High 7.5
net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX If number of TX queues are set to 1 we get a NULL pointer dereference during XDP_TX. ~# ethtool -L eth0 tx 1 ~# ./xdp-trafficgen u…
-
High 7.3
of/irq: Prevent device address out-of-bounds read in interrupt map walk
In the Linux kernel, the following vulnerability has been resolved: of/irq: Prevent device address out-of-bounds read in interrupt map walk When of_irq_parse_raw() is invoked with a device address smaller than the interrupt parent node (from #address-cells pr…
-
High 7.3
bpf: add check for invalid name in btf_name_valid_section()
In the Linux kernel, the following vulnerability has been resolved: bpf: add check for invalid name in btf_name_valid_section() If the length of the name string is 1 and the value of name[0] is NULL byte, an OOB vulnerability occurs in btf_name_valid_section(…
-
Unscored —
drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip wbscl_set_scaler_filter if filter is null Callers can pass null in filter (i.e. from returned from the function wbscl_get_filter_coeffs_16p) and a null check is added to…
-
Unscored —
driver: iio: add missing checks on iio_info's callback access
In the Linux kernel, the following vulnerability has been resolved: driver: iio: add missing checks on iio_info's callback access Some callbacks from iio_info structure are accessed without any check, so if a driver doesn't implement them trying to access the…
-
Unscored —
drm/xe: Don't overmap identity VRAM mapping
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't overmap identity VRAM mapping Overmapping the identity VRAM mapping is triggering hardware bugs on certain platforms. Use 2M pages for the last unaligned (to 1G) VRAM chunk. v2:…
-
Unscored —
usb: typec: ucsi: Fix null pointer dereference in trace
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix null pointer dereference in trace ucsi_register_altmode checks IS_ERR for the alt pointer and treats NULL as valid. When CONFIG_TYPEC_DP_ALTMODE is not enabled, ucsi_reg…
-
Unscored —
drm/amdgpu: fix dereference after null check
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check the pointer hive before use.
-
Unscored —
apparmor: fix possible NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix possible NULL pointer dereference profile->parent->dents[AAFS_PROF_DIR] could be NULL only if its parent is made from __create_missing_ancestors(..) and 'ent->old' is NULL in aa…
-
Unscored —
drm/amdgpu: fix mc_data out-of-bounds read warning
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix mc_data out-of-bounds read warning Clear warning that read mc_data[i-1] may out-of-bounds.
-
Unscored —
drm/amdgpu: fix ucode out-of-bounds read warning
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix ucode out-of-bounds read warning Clear warning that read ucode[] may out-of-bounds.
-
Unscored —
drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number Check the fb_channel_number range to avoid the array out-of-bounds read error
-
Unscored —
drm/amd/display: Ensure index calculation will not overflow
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure index calculation will not overflow [WHY & HOW] Make sure vmid0p72_idx, vnom0p8_idx and vmax0p9_idx calculation will never overflow and exceess array size. This fixes …
-
Unscored —
drm/amd/display: Add otg_master NULL check within resource_log_pipe_topology_update
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add otg_master NULL check within resource_log_pipe_topology_update [Why] Coverity reports NULL_RETURN warning. [How] Add otg_master NULL check.
-
Unscored —
drm/amd/display: Check index for aux_rd_interval before using
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index for aux_rd_interval before using aux_rd_interval has size of 7 and should be checked. This fixes 3 OVERRUN and 1 INTEGER_OVERFLOW issues reported by Coverity.
-
Unscored —
drm/amd/display: Fix incorrect size calculation for loop
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix incorrect size calculation for loop [WHY] fe_clk_en has size of 5 but sizeof(fe_clk_en) has byte size 20 which is lager than the array size. [HOW] Divide byte size 20 by …
-
Unscored —
drm/amd/pm: fix the Out-of-bounds read warning
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix the Out-of-bounds read warning using index i - 1U may beyond element index for mc_data[] when i = 0.
-
Unscored —
drm/amd/display: Assign linear_pitch_alignment even for VM
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign linear_pitch_alignment even for VM [Description] Assign linear_pitch_alignment so we don't cause a divide by 0 error in VM environments
-
Unscored —
btrfs: fix qgroup reserve leaks in cow_file_range
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve leaks in cow_file_range In the buffered write path, the dirty page owns the qgroup reserve until it creates an ordered_extent. Therefore, any errors that occur befor…
-
Unscored —
ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
In the Linux kernel, the following vulnerability has been resolved: ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery() When two UBLK_CMD_START_USER_RECOVERY commands are submitted, the first one sets 'ubq->ubq_daemon' to NULL, and the second…
-
Unscored —
uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind For primary VM Bus channels, primary_channel pointer is always NULL. This pointer is valid only for the secondary channel…
-
Unscored —
smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
In the Linux kernel, the following vulnerability has been resolved: smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() null-ptr-deref will occur when (req_op_level == SMB2_OPLOCK_LEVEL_LEASE) and parse_lease_state() return NULL. Fix thi…
-
Unscored —
Squashfs: sanity check symbolic link size
In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports a "KMSAN: uninit-value in pick_link" bug. This is caused by an uninitialised page, which is ultimately caused by a corrupted symbol…
-
Unscored —
Input: uinput - reject requests with unreasonable number of slots
In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput interface syzkaller may try setting up device with a really large number of slots, which causes memory…
-
Unscored —
HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
In the Linux kernel, the following vulnerability has been resolved: HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup report_fixup for the Cougar 500k Gaming Keyboard was not verifying that the report descriptor size was correct before accessing…
-
Unscored —
cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT
In the Linux kernel, the following vulnerability has been resolved: cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT Set the maximum size of a subrequest that writes to cachefiles to be MAX_RW_COUNT so that we don't overrun the maximum wri…
-
Unscored —
Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush() This adds a check before freeing the rx->skb in flush and close functions to handle the kernel crash seen while removin…
-
Unscored —
btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
In the Linux kernel, the following vulnerability has been resolved: btrfs: replace BUG_ON() with error handling at update_ref_for_cow() Instead of a BUG_ON() just return an error, log an error message and abort the transaction in case we find an extent buffer…
-
Unscored —
btrfs: handle errors from btrfs_dec_ref() properly
In the Linux kernel, the following vulnerability has been resolved: btrfs: handle errors from btrfs_dec_ref() properly In walk_up_proc() we BUG_ON(ret) from btrfs_dec_ref(). This is incorrect, we have proper error handling here, return the error.
-
Unscored —CVE-2024-46756 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —CVE-2024-46757 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —CVE-2024-46758 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
hwmon: (adc128d818) Fix underflows seen when writing limit attributes
In the Linux kernel, the following vulnerability has been resolved: hwmon: (adc128d818) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -9223372036854775808 is pr…
-
Unscored —
wifi: rtw88: usb: schedule rx work after everything is set up
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: schedule rx work after everything is set up Right now it's possible to hit NULL pointer dereference in rtw_rx_fill_rx_status on hw object and/or its fields because initializ…
-
Unscored —
pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
In the Linux kernel, the following vulnerability has been resolved: pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv The hotplug driver for powerpc (pci/hotplug/pnv_php.c) causes a kernel crash when we try to hot-unplug/disable the PCIe switch/bridge …
-
Unscored —
ice: move netif_queue_set_napi to rtnl-protected sections
In the Linux kernel, the following vulnerability has been resolved: ice: move netif_queue_set_napi to rtnl-protected sections Currently, netif_queue_set_napi() is called from ice_vsi_rebuild() that is not rtnl-locked when called from the reset. This creates t…
-
Unscored —
net: phy: Fix missing of_node_put() for leds
In the Linux kernel, the following vulnerability has been resolved: net: phy: Fix missing of_node_put() for leds The call of of_get_child_by_name() will cause refcount incremented for leds, if it succeeds, it should call of_node_put() to decrease it, fix it.
-
Unscored —
hwmon: (hp-wmi-sensors) Check if WMI event data exists
In the Linux kernel, the following vulnerability has been resolved: hwmon: (hp-wmi-sensors) Check if WMI event data exists The BIOS can choose to return no event data in response to a WMI event, so the ACPI object passed to the WMI notify handler can be NULL.…
-
Unscored —
spi: intel: Add check devm_kasprintf() returned value
In the Linux kernel, the following vulnerability has been resolved: spi: intel: Add check devm_kasprintf() returned value intel_spi_populate_chip() use devm_kasprintf() to set pdata->name. This can return a NULL pointer on failure but this returned value is n…
-
Unscored —
ice: Add netif_device_attach/detach into PF reset flow
In the Linux kernel, the following vulnerability has been resolved: ice: Add netif_device_attach/detach into PF reset flow Ethtool callbacks can be executed while reset is in progress and try to access deleted resources, e.g. getting coalesce settings can res…
-
Unscored —
drm/amd/display: Check denominator crb_pipes before used
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check denominator crb_pipes before used [WHAT & HOW] A denominator cannot be 0, and is checked before used. This fixes 2 DIVIDE_BY_ZERO issues reported by Coverity.
-
Unscored —
drm/amd/display: Check denominator pbn_div before used
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check denominator pbn_div before used [WHAT & HOW] A denominator cannot be 0, and is checked before used. This fixes 1 DIVIDE_BY_ZERO issue reported by Coverity.
-
Unscored —
powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() Smatch warns: arch/powerpc/kernel/rtas.c:1932 __do_sys_rtas() warn: potential spectre issue 'args.args' [r] (local cap) The …
-
Unscored —
drm/amd/display: Validate function returns
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate function returns [WHAT & HOW] Function return values must be checked before data can be used in subsequent functions. This fixes 4 CHECKED_RETURN issues reported by …
-
Unscored —
drm/amd/display: Run DC_LOG_DC after checking link->link_enc
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Run DC_LOG_DC after checking link->link_enc [WHAT] The DC_LOG_DC should be run after link->link_enc is checked, not before. This fixes 1 REVERSE_INULL issue reported by Cover…
-
Unscored —
drm/amd/display: Check UnboundedRequestEnabled's value
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check UnboundedRequestEnabled's value CalculateSwathAndDETConfiguration_params_st's UnboundedRequestEnabled is a pointer (i.e. dml_bool_t *UnboundedRequestEnabled), and thus …
-
Unscored —
drm/imagination: Free pvr_vm_gpuva after unlink
In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Free pvr_vm_gpuva after unlink This caused a measurable memory leak. Although the individual allocations are small, the leaks occurs in a high-usage codepath (remapping or un…
-
Unscored —
ila: call nf_unregister_net_hooks() sooner
In the Linux kernel, the following vulnerability has been resolved: ila: call nf_unregister_net_hooks() sooner syzbot found an use-after-free Read in ila_nf_input [1] Issue here is that ila_xlat_exit_net() frees the rhashtable, then call nf_unregister_net_hoo…
-
Unscored —
tcp_bpf: fix return value of tcp_bpf_sendmsg()
In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: fix return value of tcp_bpf_sendmsg() When we cork messages in psock->cork, the last message triggers the flushing will result in sending a sk_msg larger than the current message siz…
-
Unscored —
net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup Currently napi_disable() gets called during rxq and txq cleanup, even before napi is enabled and hrtimer is initialized. It…
-
Unscored —
eventfs: Use list_del_rcu() for SRCU protected list variable
In the Linux kernel, the following vulnerability has been resolved: eventfs: Use list_del_rcu() for SRCU protected list variable Chi Zhiling reported: We found a null pointer accessing in tracefs[1], the reason is that the variable 'ei_child' is set to LIST_P…
-
Unscored —
fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
In the Linux kernel, the following vulnerability has been resolved: fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF The fscache_cookie_lru_timer is initialized when the fscache module is inserted, but is not deleted when the fscache m…
-
Unscored —
mm/slub: add check for s->flags in the alloc_tagging_slab_free_hook
In the Linux kernel, the following vulnerability has been resolved: mm/slub: add check for s->flags in the alloc_tagging_slab_free_hook When enable CONFIG_MEMCG & CONFIG_KFENCE & CONFIG_KMEMLEAK, the following warning always occurs,This is because the followi…
-
Unscored —
codetag: debug: mark codetags for poisoned page as empty
In the Linux kernel, the following vulnerability has been resolved: codetag: debug: mark codetags for poisoned page as empty When PG_hwpoison pages are freed they are treated differently in free_pages_prepare() and instead of being released they are isolated.…
-
Unscored —
can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
In the Linux kernel, the following vulnerability has been resolved: can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open The mcp251x_hw_wake() function is called with the mpc_lock mutex held and disables the interrupt handler so that no inter…
-
Unscored —
ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder Since commit 13f58267cda3 ("ASoC: soc.h: don't create dummy Component via COMP_DUMMY()") dummy codecs declared like this: …
-
Unscored —
x86/tdx: Fix data leak in mmio_read()
In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmio_read() The mmio_read() function makes a TDVMCALL to retrieve MMIO data for an address from the VMM. Sean noticed that mmio_read() unintentionally exposes the va…
-
Unscored —
ksmbd: unset the binding mark of a reused connection
In the Linux kernel, the following vulnerability has been resolved: ksmbd: unset the binding mark of a reused connection Steve French reported null pointer dereference error from sha256 lib. cifs.ko can send session setup requests on reused connection. If reu…
-
Unscored —
powerpc/qspinlock: Fix deadlock in MCS queue
In the Linux kernel, the following vulnerability has been resolved: powerpc/qspinlock: Fix deadlock in MCS queue If an interrupt occurs in queued_spin_lock_slowpath() after we increment qnodesp->count and before node->lock is initialized, another CPU might se…
Revision history
-
#135
Neue Updates von Ubuntu aufgenommen
-
#134
Neue Updates von Ubuntu aufgenommen
-
#133
Neue Updates von Oracle Linux aufgenommen
-
#132
Neue Updates von Oracle Linux aufgenommen
-
#131
Neue Updates von Oracle Linux aufgenommen
-
#130
Neue Updates von Oracle Linux aufgenommen
-
#129
Neue Updates von Ubuntu aufgenommen
-
#128
Neue Updates von Debian aufgenommen
-
#127
Neue Updates von Red Hat aufgenommen
-
#126
Neue Updates von Ubuntu aufgenommen
-
#125
Neue Updates von Ubuntu aufgenommen
-
#124
Neue Updates von Ubuntu aufgenommen
-
#123
Neue Updates von Ubuntu aufgenommen
-
#122
Neue Updates von Ubuntu aufgenommen
-
#121
Neue Updates von Ubuntu aufgenommen
-
#120
Neue Updates von Ubuntu aufgenommen
-
#119
Neue Updates von Ubuntu aufgenommen
-
#118
Neue Updates von Siemens aufgenommen
-
#117
Neue Updates von Ubuntu aufgenommen
-
#116
Neue Updates von Ubuntu aufgenommen
-
#115
Neue Updates von Ubuntu aufgenommen
-
#114
Neue Updates von Ubuntu aufgenommen
-
#113
Neue Updates von Ubuntu aufgenommen
-
#112
Neue Updates von SUSE aufgenommen
-
#111
Neue Updates von SUSE aufgenommen
References
-
Linux Kernel CVE Announcement vom 2024-09-17
https://lore.kernel.org/linux-cve-announce/
-
Amazon Linux Security Advisory ALASKERNEL-5.10-2024-070 vom 2024-10-02
https://alas.aws.amazon.com/AL2/ALASKERNEL-5.10-2024-070.html
-
Amazon Linux Security Advisory ALASKERNEL-5.10-2024-071 vom 2024-10-02
https://alas.aws.amazon.com/AL2/ALASKERNEL-5.10-2024-071.html
-
ORACLE OVMSA-2024-0013 vom 2024-10-03
https://oss.oracle.com/pipermail/el-errata/2024-October/016481.html
-
Amazon Linux Security Advisory ALASKERNEL-5.4-2024-086 vom 2024-10-02
https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2024-086.html
-
Debian Security Advisory DSA-5782 vom 2024-10-03
https://lists.debian.org/debian-security-announce/2024/msg00195.html
-
Amazon Linux Security Advisory ALASKERNEL-5.15-2024-055 vom 2024-10-02
https://alas.aws.amazon.com/AL2/ALASKERNEL-5.15-2024-055.html
-
Debian Security Advisory DLA-3912 vom 2024-10-07
https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
-
SUSE Security Update SUSE-SU-2024:3551-1 vom 2024-10-08
https://lists.suse.com/pipermail/sle-security-updates/2024-October/019562.html
-
SUSE Security Update SUSE-SU-2024:3551-1 vom 2024-10-08
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/Q7MIMQMCXNGMVS32KLTADYTPQCKF5HWU/
-
SUSE Security Update SUSE-SU-2024:3553-1 vom 2024-10-08
https://lists.suse.com/pipermail/sle-security-updates/2024-October/019560.html
-
SUSE Security Update SUSE-SU-2024:3547-1 vom 2024-10-08
https://lists.suse.com/pipermail/sle-security-updates/2024-October/019566.html
-
SUSE Security Update SUSE-SU-2024:3563-1 vom 2024-10-09
https://lists.suse.com/pipermail/sle-security-updates/2024-October/019579.html
-
SUSE Security Update SUSE-SU-2024:3566-1 vom 2024-10-09
https://lists.suse.com/pipermail/sle-security-updates/2024-October/019578.html
-
SUSE Security Update SUSE-SU-2024:3569-1 vom 2024-10-09
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/6GBL67LQ3MUSYQCQRQH2AZH3XWILTO5A/
-
SUSE Security Update SUSE-SU-2024:3567-1 vom 2024-10-09
https://lists.suse.com/pipermail/sle-security-updates/2024-October/019577.html
-
SUSE Security Update SUSE-SU-2024:3561-1 vom 2024-10-09
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LSUY4BSWS5WR46CHS4FPBIJIRLKHRDHV/
-
SUSE Security Update SUSE-SU-2024:3559-1 vom 2024-10-09
https://lists.suse.com/pipermail/sle-security-updates/2024-October/019575.html
-
SUSE Security Update SUSE-SU-2024:3564-1 vom 2024-10-09
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/R7FS3QARF7WUPH5GFL22NW3G3SDO2C7Z/
-
SUSE Security Update SUSE-SU-2024:3565-1 vom 2024-10-09
https://lists.suse.com/pipermail/sle-security-updates/2024-October/019573.html
-
SUSE Security Update SUSE-SU-2024:3592-1 vom 2024-10-10
https://lists.suse.com/pipermail/sle-security-updates/2024-October/019589.html
-
SUSE Security Update SUSE-SU-2024:3585-1 vom 2024-10-10
https://lists.suse.com/pipermail/sle-security-updates/2024-October/019586.html
-
SUSE Security Update SUSE-SU-2024:3591-1 vom 2024-10-10
https://lists.suse.com/pipermail/sle-security-updates/2024-October/019587.html
-
SUSE Security Update SUSE-SU-2024:3587-1 vom 2024-10-10
https://lists.suse.com/pipermail/sle-security-updates/2024-October/019588.html
-
Oracle Linux Security Advisory ELSA-2024-12782 vom 2024-10-14
https://linux.oracle.com/errata/ELSA-2024-12782.html
-
Oracle Linux Security Advisory ELSA-2024-12779 vom 2024-10-14
https://linux.oracle.com/errata/ELSA-2024-12779.html
-
Ubuntu Security Notice USN-7088-1 vom 2024-10-31
https://ubuntu.com/security/notices/USN-7088-1
-
Ubuntu Security Notice USN-7088-2 vom 2024-11-04
https://ubuntu.com/security/notices/USN-7088-2
-
Ubuntu Security Notice USN-7088-3 vom 2024-11-06
https://ubuntu.com/security/notices/USN-7088-3
-
Ubuntu Security Notice USN-7100-1 vom 2024-11-11
https://ubuntu.com/security/notices/USN-7100-1
-
Oracle Linux Security Advisory ELSA-2024-12813 vom 2024-11-13
https://linux.oracle.com/errata/ELSA-2024-12813.html
-
Ubuntu Security Notice USN-7100-2 vom 2024-11-12
https://ubuntu.com/security/notices/USN-7100-2
-
Oracle Linux Security Advisory ELSA-2024-12815 vom 2024-11-13
https://linux.oracle.com/errata/ELSA-2024-12815.html
-
SUSE Security Update SUSE-SU-2024:3986-1 vom 2024-11-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/CIC23R3UQSPF2K4P2CX54TPCX5T7KWQG/
-
SUSE Security Update SUSE-SU-2024:3985-1 vom 2024-11-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KB6DG7QR5KXDQRV57H4IY2TB2LW42K4S/
-
SUSE Security Update SUSE-SU-2024:3984-1 vom 2024-11-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/L52VEDNTEHWEPR56WZN4KZNMEUYGCJX6/
-
SUSE Security Update SUSE-SU-2024:3983-1 vom 2024-11-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QUOFKELDJYP3JMHIXPCVKVI4REVXAKTX/
-
Ubuntu Security Notice USN-7088-5 vom 2024-11-14
https://ubuntu.com/security/notices/USN-7088-5
-
Amazon Linux Security Advisory ALAS-2024-2695 vom 2024-11-15
https://alas.aws.amazon.com/AL2/ALAS-2024-2695.html
-
Amazon Linux Security Advisory ALAS-2024-2696 vom 2024-11-15
https://alas.aws.amazon.com/AL2/ALAS-2024-2696.html
-
Ubuntu Security Notice USN-7120-1 vom 2024-11-20
https://ubuntu.com/security/notices/USN-7120-1
-
Ubuntu Security Notice USN-7119-1 vom 2024-11-20
https://ubuntu.com/security/notices/USN-7119-1
-
Ubuntu Security Notice USN-7121-1 vom 2024-11-20
https://ubuntu.com/security/notices/USN-7121-1
-
Ubuntu Security Notice USN-7120-2 vom 2024-11-20
https://ubuntu.com/security/notices/USN-7120-2
-
Ubuntu Security Notice USN-7121-2 vom 2024-11-20
https://ubuntu.com/security/notices/USN-7121-2
-
Ubuntu Security Notice USN-7123-1 vom 2024-11-20
https://ubuntu.com/security/notices/USN-7123-1
-
Ubuntu Security Notice USN-7120-3 vom 2024-11-21
https://ubuntu.com/security/notices/USN-7120-3
-
Ubuntu Security Notice USN-7121-3 vom 2024-11-25
https://ubuntu.com/security/notices/USN-7121-3
-
SUSE Security Update SUSE-SU-2024:4082-1 vom 2024-11-27
https://lists.suse.com/pipermail/sle-security-updates/2024-November/019851.html
-
SUSE Security Update SUSE-SU-2024:4100-1 vom 2024-11-28
https://lists.suse.com/pipermail/sle-security-updates/2024-November/019864.html
-
SUSE Security Update SUSE-SU-2024:4131-1 vom 2024-12-02
https://lists.suse.com/pipermail/sle-security-updates/2024-December/019887.html
-
Oracle Linux Security Advisory ELSA-2024-12868 vom 2024-12-09
https://linux.oracle.com/errata/ELSA-2024-12868.html
-
Ubuntu Security Notice USN-7144-1 vom 2024-12-09
https://ubuntu.com/security/notices/USN-7144-1
-
Ubuntu Security Notice USN-7148-1 vom 2024-12-10
https://ubuntu.com/security/notices/USN-7148-1
-
Ubuntu Security Notice USN-7159-1 vom 2024-12-12
https://ubuntu.com/security/notices/USN-7159-1
-
Ubuntu Security Notice USN-7156-1 vom 2024-12-12
https://ubuntu.com/security/notices/USN-7156-1
-
Ubuntu Security Notice USN-7155-1 vom 2024-12-12
https://ubuntu.com/security/notices/USN-7155-1
-
Ubuntu Security Notice USN-7154-1 vom 2024-12-12
https://ubuntu.com/security/notices/USN-7154-1
-
SUSE Security Update SUSE-SU-2024:4316-1 vom 2024-12-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/S4I5Z6ALCJLHTP25U3HMJHEXN4DR2USM/
-
SUSE Security Update SUSE-SU-2024:4314-1 vom 2024-12-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/SARXL66CQHD5VSFG5PUBNBVBPVFUN4KT/
-
SUSE Security Update SUSE-SU-2024:4318-1 vom 2024-12-13
https://lists.suse.com/pipermail/sle-security-updates/2024-December/019999.html
-
Oracle Linux Security Advisory ELSA-2024-12884 vom 2024-12-17
https://linux.oracle.com/errata/ELSA-2024-12884.html
-
SUSE Security Update SUSE-SU-2024:4367-1 vom 2024-12-17
https://lists.suse.com/pipermail/sle-security-updates/2024-December/020025.html
-
Ubuntu Security Notice USN-7159-2 vom 2024-12-18
https://ubuntu.com/security/notices/USN-7166-2
-
Ubuntu Security Notice USN-7159-2 vom 2024-12-18
https://ubuntu.com/security/notices/USN-7159-3
-
Ubuntu Security Notice USN-7159-2 vom 2024-12-17
https://ubuntu.com/security/notices/USN-7159-2
-
SUSE Security Update SUSE-SU-2024:4364-1 vom 2024-12-17
https://lists.suse.com/pipermail/sle-security-updates/2024-December/020019.html
-
SUSE Security Update SUSE-SU-2024:4376-1 vom 2024-12-18
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/WFOJHFFEHK42VPQ6XLZWB77H5OEJ3FF4/
-
SUSE Security Update SUSE-SU-2024:4376-1 vom 2024-12-18
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WFOJHFFEHK42VPQ6XLZWB77H5OEJ3FF4/
-
SUSE Security Update SUSE-SU-2024:4376-1 vom 2024-12-18
https://lists.suse.com/pipermail/sle-security-updates/2024-December/020028.html
-
SUSE Security Update SUSE-SU-2024:4387-1 vom 2024-12-19
https://lists.suse.com/pipermail/sle-security-updates/2024-December/020032.html
-
Ubuntu Security Notice USN-7159-4 vom 2024-12-20
https://ubuntu.com/security/notices/USN-7159-4
-
Debian Security Advisory DLA-4008 vom 2025-01-03
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
-
Ubuntu Security Notice USN-7159-5 vom 2025-01-06
https://ubuntu.com/security/notices/USN-7159-5
-
Ubuntu Security Notice USN-7154-2 vom 2025-01-06
https://ubuntu.com/security/notices/USN-7154-2
-
SUSE Security Update SUSE-SU-2025:0034-1 vom 2025-01-08
https://lists.suse.com/pipermail/sle-security-updates/2025-January/020071.html
-
SUSE Security Update SUSE-SU-2025:0035-1 vom 2025-01-08
https://lists.suse.com/pipermail/sle-security-updates/2025-January/020070.html
-
Ubuntu Security Notice USN-7196-1 vom 2025-01-09
https://ubuntu.com/security/notices/USN-7196-1
-
Ubuntu Security Notice USN-7195-1 vom 2025-01-09
https://ubuntu.com/security/notices/USN-7195-1
-
Ubuntu Security Notice USN-7194-1 vom 2025-01-09
https://ubuntu.com/security/notices/USN-7194-1