Skip to content
OpenAdvisories
Medium WID-SEC-2025-0016 13 CVEs

Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service

Published Jan 6, 2025 · Updated Nov 9, 2026 · Revision 52 · de

Vendor: Debian Vendor: Dell Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: NetWorker Product: PowerProtect Data Domain Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder nicht spezifizierte Effekte zu erzeugen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 13

  • High 7.8
    CVE-2024-56757

    Bluetooth: btusb: mediatek: add intf release flow when usb disconnect

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: add intf release flow when usb disconnect MediaTek claim an special usb intr interface for ISO data transmission. The interface need to be released before unregist…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-56759

    btrfs: fix use-after-free when COWing tree bock and tracing is enabled

    In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when COWing tree bock and tracing is enabled When a COWing a tree block, at btrfs_cow_block(), and we have the tracepoint trace_btrfs_cow_block() enabled and preempt…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-56764

    ublk: detach gendisk from ublk device if add_disk() fails

    In the Linux kernel, the following vulnerability has been resolved: ublk: detach gendisk from ublk device if add_disk() fails Inside ublk_abort_requests(), gendisk is grabbed for aborting all inflight requests. And ublk_abort_requests() is called when exiting…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-56765

    powerpc/pseries/vas: Add close() callback in vas_vm_ops struct

    In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/vas: Add close() callback in vas_vm_ops struct The mapping VMA address is saved in VAS window struct when the paste address is mapped. This VMA address is used during migratio…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-56760

    PCI/MSI: Handle lack of irqdomain gracefully

    In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Handle lack of irqdomain gracefully Alexandre observed a warning emitted from pci_msi_setup_msi_irqs() on a RISCV platform which does not provide PCI/MSI support: WARNING: CPU: 1 PID…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-56768

    bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP

    In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP On x86-64 calling bpf_get_smp_processor_id() in a kernel with CONFIG_SMP disabled can trigger the following bug, as pcpu_hot is unavailable:…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2024-56758

    btrfs: check folio mapping after unlock in relocate_one_folio()

    In the Linux kernel, the following vulnerability has been resolved: btrfs: check folio mapping after unlock in relocate_one_folio() When we call btrfs_read_folio() to bring a folio uptodate, we unlock the folio. The result of that is that a different thread c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-56761

    x86/fred: Clear WFE in missing-ENDBRANCH #CPs

    In the Linux kernel, the following vulnerability has been resolved: x86/fred: Clear WFE in missing-ENDBRANCH #CPs An indirect branch instruction sets the CPU indirect branch tracker (IBT) into WAIT_FOR_ENDBRANCH (WFE) state and WFE stays asserted across the i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-56762 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  • Unscored —
    CVE-2024-56763

    tracing: Prevent bad count for tracing_cpumask_write

    In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracing_cpumask_write If a large count is provided, it will trigger a warning in bitmap_parse_user. Also check zero for it.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-56766

    mtd: rawnand: fix double free in atmel_pmecc_create_user()

    In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix double free in atmel_pmecc_create_user() The "user" pointer was converted from being allocated with kzalloc() to being allocated by devm_kzalloc(). Calling kfree(user) will …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-56767

    dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset

    In the Linux kernel, the following vulnerability has been resolved: dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset The at_xdmac_memset_create_desc may return NULL, which will lead to a null pointer dereference. For example, the len inpu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-56769

    media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg

    In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg Syzbot reports [1] an uninitialized value issue found by KMSAN in dib3000_read_reg(). Local u8 rb[2] is used in i2c_tran…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Revision history

  1. #52

    Neue Updates von Ubuntu aufgenommen

  2. #51

    Neue Updates von Ubuntu aufgenommen

  3. #50

    Neue Updates von Ubuntu aufgenommen

  4. #49

    Neue Updates von SUSE aufgenommen

  5. #48

    Neue Updates von SUSE aufgenommen

  6. #47

    Neue Updates von Ubuntu aufgenommen

  7. #46

    Neue Updates von Ubuntu aufgenommen

  8. #45

    Neue Updates von Ubuntu aufgenommen

  9. #44

    Neue Updates von Ubuntu aufgenommen

  10. #43

    Neue Updates von Debian aufgenommen

  11. #42

    Neue Updates von Dell aufgenommen

  12. #41

    Neue Updates von Oracle Linux aufgenommen

  13. #40

    Neue Updates von Debian aufgenommen

  14. #39

    Neue Updates von Oracle Linux aufgenommen

  15. #38

    Neue Updates von SUSE aufgenommen

  16. #37

    Neue Updates von SUSE aufgenommen

  17. #36

    Neue Updates von SUSE aufgenommen

  18. #35

    Neue Updates von SUSE aufgenommen

  19. #34

    Neue Updates von Ubuntu aufgenommen

  20. #33

    Neue Updates von Ubuntu aufgenommen

  21. #32

    Neue Updates von Ubuntu aufgenommen

  22. #31

    Neue Updates von Ubuntu aufgenommen

  23. #30

    Neue Updates von Ubuntu aufgenommen

  24. #29

    Neue Updates von Red Hat aufgenommen

  25. #28

    Neue Updates von Oracle Linux aufgenommen

References