Lucene search

K
osvGoogleOSV:USN-6767-2
HistoryMay 14, 2024 - 9:00 a.m.

linux-bluefield vulnerabilities

2024-05-1409:00:08
Google
osv.dev
8
rds protocol
denial of service
arm64 architecture
powerpc architecture
s390 architecture
block layer
android drivers
hardware random number generator
gpu drivers
hardware monitoring
i2c subsystem
iio magnetometer sensors
infiniband drivers
network drivers
pci driver
phy drivers
ceph file system
ext4 file system
jfs file system
nilfs2 file system
pstore file system
memory management
can network layer
networking core
ipv4 networking
logical link layer
netfilter
nfc subsystem
smc sockets
sun rpc protocol
tipc protocol
realtek audio codecs.

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.9%

Chenyuan Yang discovered that the RDS Protocol implementation in the Linux
kernel contained an out-of-bounds read vulnerability. An attacker could use
this to possibly cause a denial of service (system crash). (CVE-2024-23849)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • S390 architecture;
  • Block layer subsystem;
  • Android drivers;
  • Hardware random number generator core;
  • GPU drivers;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Network drivers;
  • PCI driver for MicroSemi Switchtec;
  • PHY drivers;
  • Ceph distributed file system;
  • Ext4 file system;
  • JFS file system;
  • NILFS2 file system;
  • Pstore file system;
  • Core kernel;
  • Memory management;
  • CAN network layer;
  • Networking core;
  • IPv4 networking;
  • Logical Link layer;
  • Netfilter;
  • NFC subsystem;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • Realtek audio codecs;
    (CVE-2024-26696, CVE-2023-52583, CVE-2024-26720, CVE-2023-52615,
    CVE-2023-52599, CVE-2023-52587, CVE-2024-26635, CVE-2024-26704,
    CVE-2024-26625, CVE-2024-26825, CVE-2023-52622, CVE-2023-52435,
    CVE-2023-52617, CVE-2023-52598, CVE-2024-26645, CVE-2023-52619,
    CVE-2024-26593, CVE-2024-26685, CVE-2023-52602, CVE-2023-52486,
    CVE-2024-26697, CVE-2024-26675, CVE-2024-26600, CVE-2023-52604,
    CVE-2024-26664, CVE-2024-26606, CVE-2023-52594, CVE-2024-26671,
    CVE-2024-26598, CVE-2024-26673, CVE-2024-26920, CVE-2024-26722,
    CVE-2023-52601, CVE-2024-26602, CVE-2023-52637, CVE-2023-52623,
    CVE-2024-26702, CVE-2023-52597, CVE-2024-26684, CVE-2023-52606,
    CVE-2024-26679, CVE-2024-26663, CVE-2024-26910, CVE-2024-26615,
    CVE-2023-52595, CVE-2023-52607, CVE-2024-26636)

References

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.9%