Skip to content
OpenAdvisories
Medium WID-SEC-2024-3289 21 CVEs

Linux Kernel: Mehrere Schwachstellen

Published Oct 28, 2024 · Updated Sep 3, 2026 · Revision 67 · de-DE

Vendor: amazon Vendor: Debian Vendor: Dell Vendor: IBM Vendor: NETAPP Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: ActiveIQ Unified Manager Product: Avamar Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: NetWorker Product: openSUSE Product: PowerProtect Data Domain Product: QRadar SIEM Product: Rocky Linux Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder einen unspezifischen Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 21

  • Critical 9.8
    CVE-2024-50085

    mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow

    In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow Syzkaller reported this splat: ================================================================== BUG: KASAN: slab-use-after-free in …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-50086

    ksmbd: fix user-after-free from session log off

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix user-after-free from session log off There is racy issue between smb2 session log off and smb2 session setup. It will cause user-after-free from session log off. This add session_l…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.0
    CVE-2024-50075

    xhci: tegra: fix checked USB2 port number

    In the Linux kernel, the following vulnerability has been resolved: xhci: tegra: fix checked USB2 port number If USB virtualizatoin is enabled, USB2 ports are shared between all Virtual Functions. The USB2 port number owned by an USB2 root hub in a Virtual Fu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-50071

    pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func()

    In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func() 'new_map' is allocated using devm_* which takes care of freeing the allocated data on device removal, call to .dt_fre…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-50073

    tty: n_gsm: Fix use-after-free in gsm_cleanup_mux

    In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux BUG: KASAN: slab-use-after-free in gsm_cleanup_mux+0x77b/0x7b0 drivers/tty/n_gsm.c:3160 [n_gsm] Read of size 8 at addr ffff88815fe99c00 by ta…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-50074

    parport: Proper fix for array out-of-bounds access

    In the Linux kernel, the following vulnerability has been resolved: parport: Proper fix for array out-of-bounds access The recent fix for array out-of-bounds accesses replaced sprintf() calls blindly with snprintf(). However, since snprintf() returns the woul…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-50077

    Bluetooth: ISO: Fix multiple init when debugfs is disabled

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix multiple init when debugfs is disabled If bt_debugfs is not created successfully, which happens if either CONFIG_DEBUG_FS or CONFIG_DEBUG_FS_ALLOW_ALL is unset, then iso_i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-50078

    Bluetooth: Call iso_exit() on module unload

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Call iso_exit() on module unload If iso_init() has been called, iso_exit() must be called on module unload. Without that, the struct proto that iso_init() registered with proto_reg…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-50082

    blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race

    In the Linux kernel, the following vulnerability has been resolved: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race We're seeing crashes from rq_qos_wake_function that look like this: BUG: unable to handle page fault for address: ffffafe180…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-50084

    net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()

    In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() Commit a3c1e45156ad ("net: microchip: vcap: Fix use-after-free error in kunit test") fixed the use-after-free error, …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-50087

    btrfs: fix uninitialized pointer free on read_alloc_one_name() error

    In the Linux kernel, the following vulnerability has been resolved: btrfs: fix uninitialized pointer free on read_alloc_one_name() error The function read_alloc_one_name() does not initialize the name field of the passed fscrypt_str struct if kmalloc fails to…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-50088

    btrfs: fix uninitialized pointer free in add_inode_ref()

    In the Linux kernel, the following vulnerability has been resolved: btrfs: fix uninitialized pointer free in add_inode_ref() The add_inode_ref() function does not initialize the "name" struct when it is declared. If any of the following calls to "read_one_ino…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-50068

    mm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets()

    In the Linux kernel, the following vulnerability has been resolved: mm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets() The sysfs_target->regions allocated in damon_sysfs_regions_alloc() is not freed in damon_sysfs_test_add_targets…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-50069

    pinctrl: apple: check devm_kasprintf() returned value

    In the Linux kernel, the following vulnerability has been resolved: pinctrl: apple: check devm_kasprintf() returned value devm_kasprintf() can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value.…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-50079

    io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work

    In the Linux kernel, the following vulnerability has been resolved: io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work When the sqpoll is exiting and cancels pending work items, it may need to run task_work. If this happens from within …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-50080

    ublk: don't allow user copy for unprivileged device

    In the Linux kernel, the following vulnerability has been resolved: ublk: don't allow user copy for unprivileged device UBLK_F_USER_COPY requires userspace to call write() on ublk char device for filling request buffer, and unprivileged device can't be truste…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-50081

    blk-mq: setup queue ->tag_set before initializing hctx

    In the Linux kernel, the following vulnerability has been resolved: blk-mq: setup queue ->tag_set before initializing hctx Commit 7b815817aa58 ("blk-mq: add helper for checking if one CPU is mapped to specified hctx") needs to check queue mapping via tag set …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-50070

    pinctrl: stm32: check devm_kasprintf() returned value

    In the Linux kernel, the following vulnerability has been resolved: pinctrl: stm32: check devm_kasprintf() returned value devm_kasprintf() can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value.…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-50072

    x86/bugs: Use code segment selector for VERW operand

    In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Use code segment selector for VERW operand Robert Gill reported below #GP in 32-bit mode when dosemu software was executing vm86() system call: general protection fault: 0000 [#1] P…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-50076

    vt: prevent kernel-infoleak in con_font_get()

    In the Linux kernel, the following vulnerability has been resolved: vt: prevent kernel-infoleak in con_font_get() font.data may not initialize all memory spaces depending on the implementation of vc->vc_sw->con_font_get. This may cause info-leak, so to preven…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-50083

    tcp: fix mptcp DSS corruption due to large pmtu xmit

    In the Linux kernel, the following vulnerability has been resolved: tcp: fix mptcp DSS corruption due to large pmtu xmit Syzkaller was able to trigger a DSS corruption: TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. -…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Revision history

  1. #67

    Neue Updates von Dell aufgenommen

  2. #66

    Neue Updates von Red Hat aufgenommen

  3. #65

    Neue Updates von SUSE aufgenommen

  4. #64

    Neue Updates von SUSE aufgenommen

  5. #63

    Neue Updates von SUSE aufgenommen

  6. #62

    Neue Updates von Oracle Linux aufgenommen

  7. #61

    Neue Updates von Ubuntu aufgenommen

  8. #60

    Neue Updates von Ubuntu aufgenommen

  9. #59

    Neue Updates von Dell aufgenommen

  10. #58

    Neue Updates von Ubuntu aufgenommen

  11. #57

    Neue Updates von Ubuntu aufgenommen

  12. #56

    Neue Updates von Ubuntu aufgenommen

  13. #55

    Neue Updates von Ubuntu aufgenommen

  14. #54

    Neue Updates von Ubuntu aufgenommen

  15. #53

    Neue Updates von Ubuntu aufgenommen

  16. #52

    Neue Updates von Ubuntu aufgenommen

  17. #51

    Neue Updates von Ubuntu aufgenommen

  18. #50

    Neue Updates von Red Hat aufgenommen

  19. #49

    Neue Updates von SUSE aufgenommen

  20. #48

    Neue Updates von SUSE aufgenommen

  21. #47

    Neue Updates von SUSE aufgenommen

  22. #46

    Neue Updates von SUSE aufgenommen

  23. #45

    Neue Updates von SUSE aufgenommen

  24. #44

    Neue Updates von SUSE aufgenommen

  25. #43

    Neue Updates von SUSE aufgenommen

References