Skip to content
OpenAdvisories
Medium WID-SEC-2024-3134 19 CVEs

Linux Kernel: Mehrere Schwachstellen

Published Oct 9, 2024 · Updated May 6, 2026 · Revision 70 · de-DE

Vendor: Broadcom Vendor: Debian Vendor: Dell Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: Brocade SANnav Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: NetWorker Product: openSUSE Product: QRadar SIEM Product: Rocky Linux Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen offenzulegen oder um einen unspezifischen Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 19

  • Critical 9.1
    CVE-2024-47659

    smack: tcp: ipv4, fix incorrect labeling

    In the Linux kernel, the following vulnerability has been resolved: smack: tcp: ipv4, fix incorrect labeling Currently, Smack mirrors the label of incoming tcp/ipv4 connections: when a label 'foo' connects to a label 'bar' with tcp/ipv4, 'foo' always gets 'fo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-47668

    lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()

    In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth b…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-47670

    ocfs2: add bounds checking to ocfs2_xattr_find_entry()

    In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_xattr_find_entry() Add a paranoia check to make sure it doesn't stray beyond valid memory region containing ocfs2 xattr entries when scanning for a match. …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2024-47658

    crypto: stm32/cryp - call finalize with bh disabled

    In the Linux kernel, the following vulnerability has been resolved: crypto: stm32/cryp - call finalize with bh disabled The finalize operation in interrupt mode produce a produces a spinlock recursion warning. The reason is the fact that BH must be disabled d…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.3
    CVE-2024-47667

    PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)

    In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) Errata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0 (SPRZ452D_July 2018_Revised December 2019 [1]) mentions when an i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.3
    CVE-2024-47669

    nilfs2: fix state management in error path of log writing function

    In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix state management in error path of log writing function After commit a694291a6211 ("nilfs2: separate wait function from nilfs_segctor_write") was applied, the log writing function …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-47665

    i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup

    In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup Definitely condition dma_get_cache_alignment * defined value > 256 during driver initialization is not reason to BUG_ON(). Tu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-42308 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  • Unscored —
    CVE-2024-46870

    drm/amd/display: Disable DMCUB timeout for DCN35

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable DMCUB timeout for DCN35 [Why] DMCUB can intermittently take longer than expected to process commands. Old ASIC policy was to continue while logging a diagnostic error…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-46871

    drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX [Why & How] It actually exposes '6' types in enum dmub_notification_type. Not 5. Using smaller number to create arr…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-47660

    fsnotify: clear PARENT_WATCHED flags lazily

    In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENT_WATCHED flags lazily In some setups directories can have many (usually negative) dentries. Hence __fsnotify_update_child_dentry_flags() function can take a significant …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-47661

    drm/amd/display: Avoid overflow from uint32_t to uint8_t

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid overflow from uint32_t to uint8_t [WHAT & HOW] dmub_rb_cmd's ramping_boundary has size of uint8_t and it is assigned 0xFFFF. Fix it by changing it to uint8_t with value…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-47662

    drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection [Why] These registers should not be read from driver and triggering the security violation when DMCUB work times out an…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-47663

    staging: iio: frequency: ad9834: Validate frequency parameter value

    In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9834: Validate frequency parameter value In ad9834_write_frequency() clk_get_rate() can return 0. In such case ad9834_calc_freqreg() call will lead to division by z…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-47664

    spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware

    In the Linux kernel, the following vulnerability has been resolved: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware If the value of max_speed_hz is 0, it may cause a division by zero error in hisi_calc_effective_speed(). The…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-47666

    scsi: pm80xx: Set phy->enable_completion only when we wait for it

    In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Set phy->enable_completion only when we wait for it pm8001_phy_control() populates the enable_completion pointer with a stack address, sends a PHY_LINK_RESET / PHY_HARD_RESET, w…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-47671

    USB: usbtmc: prevent kernel-usb-infoleak

    In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: prevent kernel-usb-infoleak The syzbot reported a kernel-usb-infoleak in usbtmc_write, we need to clear the structure before filling fields.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-47672 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  • Unscored —
    CVE-2024-47673

    wifi: iwlwifi: mvm: pause TCM when the firmware is stopped

    In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pause TCM when the firmware is stopped Not doing so will make us send a host command to the transport while the firmware is not alive, which will trigger a WARNING. bad st…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Revision history

  1. #70

    Neue Updates von Ubuntu aufgenommen

  2. #69

    Neue Updates von Ubuntu aufgenommen

  3. #68

    Neue Updates von Ubuntu aufgenommen

  4. #67

    Neue Updates von Ubuntu aufgenommen

  5. #66

    Neue Updates von Ubuntu aufgenommen

  6. #65

    Neue Updates von Ubuntu aufgenommen

  7. #64

    Neue Updates von Ubuntu aufgenommen

  8. #63

    Neue Updates von Ubuntu aufgenommen

  9. #62

    Neue Updates von Ubuntu aufgenommen

  10. #61

    Neue Updates von Ubuntu aufgenommen

  11. #60

    Neue Updates von Ubuntu aufgenommen

  12. #59

    Neue Updates von Oracle Linux aufgenommen

  13. #58

    Neue Updates von Oracle Linux aufgenommen

  14. #57

    Neue Updates von SUSE aufgenommen

  15. #56

    Neue Updates von SUSE aufgenommen

  16. #55

    Neue Updates von Debian aufgenommen

  17. #54

    Neue Updates von Debian aufgenommen

  18. #53

    Neue Updates von SUSE aufgenommen

  19. #52

    Neue Updates von SUSE aufgenommen

  20. #51

    Neue Updates von Dell aufgenommen

  21. #50

    Neue Updates von Ubuntu aufgenommen

  22. #49

    Neue Updates von Red Hat aufgenommen

  23. #48

    Neue Updates von Ubuntu aufgenommen

  24. #47

    Neue Updates von Ubuntu aufgenommen

  25. #46

    Neue Updates von Ubuntu aufgenommen

References