Skip to content
OpenAdvisories
Medium 1 exploited CVE WID-SEC-2024-3756 19 CVEs

Linux Kernel: Mehrere Schwachstellen

Published Dec 26, 2024 · Updated Oct 18, 2026 · Revision 89 · de-DE

Vendor: Debian Vendor: Dell Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: NetWorker Product: openshift Product: PowerProtect Data Domain Product: PowerScale OneFS Product: QRadar SIEM Product: Rocky Linux Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Zustand herbeizuführen, Daten zu manipulieren oder nicht näher spezifizierte Auswirkungen zu erzielen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 19

  • High 7.1
    CVE-2024-53150 Exploited

    ALSA: usb-audio: Fix out of bounds reads when finding clock sources

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver code doesn't check bLength of each descriptor at traversing for clock descriptors. That is, wh…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Apr 9, 2025
  • Critical 9.1
    CVE-2024-53146

    NFSD: Prevent a potential integer overflow

    In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is >= U32_MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into se…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-53147

    exfat: fix out-of-bounds access of directory entries

    In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entries In the case of the directory size is greater than or equal to the cluster size, if start_clu becomes an EOF cluster(an invalid cluster) du…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-53148

    comedi: Flush partial mappings in error case

    In the Linux kernel, the following vulnerability has been resolved: comedi: Flush partial mappings in error case If some remap_pfn_range() calls succeeded before one failed, we still have buffer pages mapped into the userspace page tables when we drop the buf…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-53156

    wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()

    In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() I found the following bug in my fuzzer: UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath9k/htc_hst.c:26…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2024-53151

    svcrdma: Address an integer overflow

    In the Linux kernel, the following vulnerability has been resolved: svcrdma: Address an integer overflow Dan Carpenter reports: > Commit 78147ca8b4a9 ("svcrdma: Add a "parsed chunk list" data > structure") from Jun 22, 2020 (linux-next), leads to the followin…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2024-53155

    ocfs2: fix uninitialized value in ocfs2_file_read_iter()

    In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix uninitialized value in ocfs2_file_read_iter() Syzbot has reported the following KMSAN splat: BUG: KMSAN: uninit-value in ocfs2_file_read_iter+0x9a4/0xf80 ocfs2_file_read_iter+0x9a4…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2024-53162

    crypto: qat/qat_4xxx - fix off by one in uof_get_name()

    In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat_4xxx - fix off by one in uof_get_name() The fw_objs[] array has "num_objs" elements so the > needs to be >= to prevent an out of bounds read.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-53145

    um: Fix potential integer overflow during physmem setup

    In the Linux kernel, the following vulnerability has been resolved: um: Fix potential integer overflow during physmem setup This issue happens when the real map size is greater than LONG_MAX, which can be easily triggered on UML/i386.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-53154

    clk: clk-apple-nco: Add NULL check in applnco_probe

    In the Linux kernel, the following vulnerability has been resolved: clk: clk-apple-nco: Add NULL check in applnco_probe Add NULL check in applnco_probe, to handle kernel NULL pointer dereference error.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-53157

    firmware: arm_scpi: Check the DVFS OPP count returned by the firmware

    In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: Check the DVFS OPP count returned by the firmware Fix a kernel crash with the below call trace when the SCPI firmware returns OPP count of zero. dvfs_info.opp_count may be…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-53158

    soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()

    In the Linux kernel, the following vulnerability has been resolved: soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() This loop is supposed to break if the frequency returned from clk_round_rate() is the same as on the previous iteration. Howev…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-53161

    EDAC/bluefield: Fix potential integer overflow

    In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fix potential integer overflow The 64-bit argument for the "get DIMM info" SMC call consists of mem_ctrl_idx left-shifted 16 bits and OR-ed with DIMM index. With mem_ctrl_idx …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-53163

    crypto: qat/qat_420xx - fix off by one in uof_get_name()

    In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat_420xx - fix off by one in uof_get_name() This is called from uof_get_name_420xx() where "num_objs" is the ARRAY_SIZE() of fw_objs[]. The > needs to be >= to prevent an out of …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.7
    CVE-2024-53160

    rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu

    In the Linux kernel, the following vulnerability has been resolved: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu KCSAN reports a data race when access the krcp->monitor_work.timer.expires variable in the schedule_delayed_monitor_work() function:…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-53149

    usb: typec: ucsi: glink: fix off-by-one in connector_status

    In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connector_status UCSI connector's indices start from 1 up to 3, PMIC_GLINK_MAX_PORTS. Correct the condition in the pmic_glink_ucsi_connector_status(…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-53152

    PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert()

    In the Linux kernel, the following vulnerability has been resolved: PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert() Currently, the endpoint cleanup function dw_pcie_ep_cleanup() and EPF deinit notify function pci_epc_deinit_notify()…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-53153

    PCI: qcom-ep: Move controller cleanups to qcom_pcie_perst_deassert()

    In the Linux kernel, the following vulnerability has been resolved: PCI: qcom-ep: Move controller cleanups to qcom_pcie_perst_deassert() Currently, the endpoint cleanup function dw_pcie_ep_cleanup() and EPF deinit notify function pci_epc_deinit_notify() are c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-53159 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

Revision history

  1. #89

    Neue Updates von Oracle Linux aufgenommen

  2. #88

    Neue Updates von IBM aufgenommen

  3. #87

    Neue Updates von Oracle Linux aufgenommen

  4. #86

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  5. #85

    Neue Updates von Red Hat aufgenommen

  6. #84

    Neue Updates von SUSE aufgenommen

  7. #83

    Neue Updates von SUSE aufgenommen

  8. #82

    Neue Updates von SUSE aufgenommen

  9. #81

    Neue Updates von SUSE aufgenommen

  10. #80

    Neue Updates von SUSE aufgenommen

  11. #79

    Neue Updates von SUSE aufgenommen

  12. #78

    Neue Updates von Oracle Linux aufgenommen

  13. #77

    Neue Updates von SUSE aufgenommen

  14. #76

    Neue Updates von SUSE aufgenommen

  15. #75

    Neue Updates von SUSE aufgenommen

  16. #74

    Neue Updates von SUSE aufgenommen

  17. #73

    Neue Updates von Oracle Linux aufgenommen

  18. #72

    Neue Updates von Oracle Linux aufgenommen

  19. #71

    Neue Updates von Dell aufgenommen

  20. #70

    Neue Updates von Oracle Linux aufgenommen

  21. #69

    Neue Updates von Ubuntu aufgenommen

  22. #68

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  23. #67

    Neue Updates von Ubuntu aufgenommen

  24. #66

    Neue Updates von SUSE aufgenommen

  25. #65

    Neue Updates von Red Hat aufgenommen

References