Skip to content
OpenAdvisories
Medium WID-SEC-2024-3608 16 CVEs

Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service

Published Dec 4, 2024 · Updated Feb 16, 2026 · Revision 79 · de-DE

Vendor: amazon Vendor: Debian Vendor: Dell Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: NetWorker Product: Rocky Linux Product: Secure Connect Gateway Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 16

  • Critical 9.8
    CVE-2024-53138

    net/mlx5e: kTLS, Fix incorrect page refcounting

    In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix incorrect page refcounting The kTLS tx handling code is using a mix of get_page() and page_ref_inc() APIs to increment the page reference. But on the release path (mlx5e_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2024-53135

    KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN

    In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN Hide KVM's pt_mode module param behind CONFIG_BROKEN, i.e. disable support for virtualizing Intel PT via guest/ho…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-53125

    bpf: sync_linked_regs() must preserve subreg_def

    In the Linux kernel, the following vulnerability has been resolved: bpf: sync_linked_regs() must preserve subreg_def Range propagation must not affect subreg_def marks, otherwise the following example is rewritten by verifier incorrectly when BPF_F_TEST_RND_H…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-53127

    Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"

    In the Linux kernel, the following vulnerability has been resolved: Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" The commit 8396c793ffdf ("mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K") increased the max_req_size, even for…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-53133

    drm/amd/display: Handle dml allocation failure to avoid crash

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Handle dml allocation failure to avoid crash [Why] In the case where a dml allocation fails for any reason, the current state's dml contexts would no longer be valid. Then su…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-53139

    sctp: fix possible UAF in sctp_v6_available()

    In the Linux kernel, the following vulnerability has been resolved: sctp: fix possible UAF in sctp_v6_available() A lockdep report [1] with CONFIG_PROVE_RCU_LIST=y hints that sctp_v6_available() is calling dev_get_by_index_rcu() and ipv6_chk_addr() without ho…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-53140

    netlink: terminate outstanding dump on socket close

    In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data. It provides the families the following ops: - start - (optional) kicks off the dumping process …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2024-53136

    mm: revert "mm: shmem: fix data-race in shmem_getattr()"

    In the Linux kernel, the following vulnerability has been resolved: mm: revert "mm: shmem: fix data-race in shmem_getattr()" Revert d949d1d14fa2 ("mm: shmem: fix data-race in shmem_getattr()") as suggested by Chuck [1]. It is causing deadlocks when accessing …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2024-53126

    vdpa: solidrun: Fix UB bug with devres

    In the Linux kernel, the following vulnerability has been resolved: vdpa: solidrun: Fix UB bug with devres In psnet_open_pf_bar() and snet_open_vf_bar() a string later passed to pcim_iomap_regions() is placed on the stack. Neither pcim_iomap_regions() nor the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-53132

    drm/xe/oa: Fix "Missing outer runtime PM protection" warning

    In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix "Missing outer runtime PM protection" warning Fix the following drm_WARN: [953.586396] xe 0000:00:02.0: [drm] Missing outer runtime PM protection ... <4> [953.587090] ? xe_pm_r…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-53134

    pmdomain: imx93-blk-ctrl: correct remove path

    In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: correct remove path The check condition should be 'i < bc->onecell_data.num_domains', not 'bc->onecell_data.num_domains' which will make the look never finish and ca…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-53137

    ARM: fix cacheflush with PAN

    In the Linux kernel, the following vulnerability has been resolved: ARM: fix cacheflush with PAN It seems that the cacheflush syscall got broken when PAN for LPAE was implemented. User access was not enabled around the cache maintenance instructions, causing …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-53128

    sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers

    In the Linux kernel, the following vulnerability has been resolved: sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers When CONFIG_KASAN_SW_TAGS and CONFIG_KASAN_STACK are enabled, the object_is_on_stack() function may produce incorrect resu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-53129

    drm/rockchip: vop: Fix a dereferenced before check warning

    In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: vop: Fix a dereferenced before check warning The 'state' can't be NULL, we should check crtc_state. Fix warning: drivers/gpu/drm/rockchip/rockchip_drm_vop.c:1096 vop_plane_atomi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-53130

    nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint

    In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint When using the "block:block_dirty_buffer" tracepoint, mark_buffer_dirty() may cause a NULL pointer dereference, or a general protec…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-53131

    nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint

    In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint Patch series "nilfs2: fix null-ptr-deref bugs on block tracepoints". This series fixes null pointer dereference bugs that occur whe…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Revision history

  1. #79

    Neue Updates von SUSE aufgenommen

  2. #78

    Neue Updates von SUSE aufgenommen

  3. #77

    Neue Updates von SUSE aufgenommen

  4. #76

    Neue Updates von Oracle Linux aufgenommen

  5. #75

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  6. #74

    Neue Updates von Ubuntu aufgenommen

  7. #73

    Neue Updates von Red Hat und SUSE aufgenommen

  8. #72

    Neue Updates von Dell aufgenommen

  9. #71

    Neue Updates von SUSE aufgenommen

  10. #70

    Neue Updates von SUSE aufgenommen

  11. #69

    Neue Updates von SUSE aufgenommen

  12. #68

    Neue Updates von Ubuntu aufgenommen

  13. #67

    Neue Updates von Ubuntu aufgenommen

  14. #66

    Neue Updates von SUSE aufgenommen

  15. #65

    Neue Updates von Ubuntu aufgenommen

  16. #64

    Neue Updates von SUSE aufgenommen

  17. #63

    Neue Updates von Ubuntu aufgenommen

  18. #62

    Neue Updates von SUSE und Ubuntu aufgenommen

  19. #61

    Neue Updates von SUSE aufgenommen

  20. #60

    Neue Updates von SUSE aufgenommen

  21. #59

    Referenz(en) aufgenommen:

  22. #58

    Neue Updates von Ubuntu aufgenommen

  23. #57

    Neue Updates von SUSE aufgenommen

  24. #56

    Neue Updates von Ubuntu aufgenommen

  25. #55

    Neue Updates von Ubuntu aufgenommen

References