Skip to content
OpenAdvisories
Medium WID-SEC-2025-0035 18 CVEs

Linux Kernel: Mehrere Schwachstellen

Published Jan 8, 2025 · Updated Nov 9, 2026 · Revision 47 · de

Vendor: Debian Vendor: Google Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Cloud Platform Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Rocky Linux Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder andere nicht spezifizierte Auswirkungen zu verursachen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 18

  • Critical 9.8
    CVE-2024-56779

    nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur

    In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur The action force umount(umount -f) will attempt to kill all rpc_task even umount operation may ultimately fail if some files rem…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-56772

    kunit: string-stream: Fix a UAF bug in kunit_init_suite()

    In the Linux kernel, the following vulnerability has been resolved: kunit: string-stream: Fix a UAF bug in kunit_init_suite() In kunit_debugfs_create_suite(), if alloc_string_stream() fails in the kunit_suite_for_each_test_case() loop, the "suite->log = strea…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-56775

    drm/amd/display: Fix handling of plane refcount

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount [Why] The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the refcount of the plane changes i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-56784

    drm/amd/display: Adding array index check to prevent memory corruption

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adding array index check to prevent memory corruption [Why & How] Array indices out of bound caused memory corruption. Adding checks to ensure that array index stays in bound.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-56770

    net/sched: netem: account for backlog updates from child qdisc

    In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: account for backlog updates from child qdisc In general, 'qlen' of any classful qdisc should keep track of the number of packets that the qdisc itself and all of its childre…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-56771

    mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information

    In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information These four chips: * W25N512GW * W25N01GW * W25N01JW * W25N02JW all require a single bit of ECC strength and thus feature …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-56773

    kunit: Fix potential null dereference in kunit_device_driver_test()

    In the Linux kernel, the following vulnerability has been resolved: kunit: Fix potential null dereference in kunit_device_driver_test() kunit_kzalloc() may return a NULL pointer, dereferencing it without NULL check may lead to NULL dereference. Add a NULL che…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-56774

    btrfs: add a sanity check for btrfs root in btrfs_search_slot()

    In the Linux kernel, the following vulnerability has been resolved: btrfs: add a sanity check for btrfs root in btrfs_search_slot() Syzbot reports a null-ptr-deref in btrfs_search_slot(). The reproducer is using rescue=ibadroots, and the extent tree root is c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-56776

    drm/sti: avoid potential dereference of error pointers

    In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers The return value of drm_atomic_get_crtc_state() needs to be checked. To avoid use of error pointer 'crtc_state' in case of the failure.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-56777

    drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check

    In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check The return value of drm_atomic_get_crtc_state() needs to be checked. To avoid use of error pointer 'crtc_state' …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-56778

    drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check

    In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check The return value of drm_atomic_get_crtc_state() needs to be checked. To avoid use of error pointer 'crtc_state…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-56780

    quota: flush quota_release_work upon quota writeback

    In the Linux kernel, the following vulnerability has been resolved: quota: flush quota_release_work upon quota writeback One of the paths quota writeback is called from is: freeze_super() sync_filesystem() ext4_sync_fs() dquot_writeback_dquots() Since we curr…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-56782

    ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()

    In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() acpi_dev_hid_match() does not check for adev == NULL, dereferencing it unconditional. Add a check for adev being NULL be…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-56783

    netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level cgroup maximum depth is INT_MAX by default, there is a cgroup toggle to restrict this maximum depth to a more reasonable val…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-56785

    MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a

    In the Linux kernel, the following vulnerability has been resolved: MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a Fix the dtc warnings: arch/mips/boot/dts/loongson/ls7a-pch.dtsi:68.16-416.5: Warning (interrupt_provider): /bus@10000000/pci@1a00000…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-56787

    soc: imx8m: Probe the SoC driver as platform driver

    In the Linux kernel, the following vulnerability has been resolved: soc: imx8m: Probe the SoC driver as platform driver With driver_async_probe=* on kernel command line, the following trace is produced because on i.MX8M Plus hardware because the soc-imx8m.c d…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-56781 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  • Unscored —
    CVE-2024-56786 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

Revision history

  1. #47

    Neue Updates von Ubuntu aufgenommen

  2. #46

    Neue Updates von Ubuntu aufgenommen

  3. #45

    Neue Updates von Ubuntu aufgenommen

  4. #44

    Neue Updates von SUSE aufgenommen

  5. #43

    Neue Updates von SUSE aufgenommen

  6. #42

    Neue Updates von SUSE aufgenommen

  7. #41

    Neue Updates von Oracle Linux aufgenommen

  8. #40

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  9. #39

    Neue Updates von Red Hat und SUSE aufgenommen

  10. #38

    Neue Updates von Oracle Linux aufgenommen

  11. #37

    Referenz(en) aufgenommen:

  12. #36

    Neue Updates von SUSE aufgenommen

  13. #35

    Neue Updates von SUSE aufgenommen

  14. #34

    Neue Updates von SUSE aufgenommen

  15. #33

    Neue Updates von SUSE aufgenommen

  16. #32

    Neue Updates von SUSE aufgenommen

  17. #31

    Neue Updates von SUSE aufgenommen

  18. #30

    Neue Updates von SUSE aufgenommen

  19. #29

    Neue Updates von SUSE aufgenommen

  20. #28

    Neue Updates von SUSE aufgenommen

  21. #27

    Neue Updates von Ubuntu aufgenommen

  22. #26

    Neue Updates von Ubuntu aufgenommen

  23. #25

    Neue Updates von Ubuntu aufgenommen

  24. #24

    Neue Updates von Ubuntu aufgenommen

  25. #23

    Neue Updates von Red Hat aufgenommen

References