Lucene search

K
cloudlinuxCloudLinuxCLSA-2024:1724774331
HistoryAug 27, 2024 - 3:58 p.m.

kernel: Fix of 11 CVEs

2024-08-2715:58:54
repo.cloudlinux.com
10
kernel
cve
race conditions
use-after-free
invalid reads

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:P/I:P/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8

Confidence

Low

  • drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
  • af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
  • ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
  • aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2023-6270}
  • smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752}
  • hdlc_ppp: add range checks in ppp_cp_parse_cr() {CVE-2020-25643}
  • perf/core: Fix race in the perf_mmap_close() function {CVE-2020-14351}
  • media: xirlink_cit: add missing descriptor sanity checks {CVE-2020-11668}
  • vt: selection, close sel_buffer race {CVE-2020-8648}
  • net: sched: sch_qfq: Fix UAF in qfq_dequeue() {CVE-2023-4921}
  • media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445}

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:P/I:P/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8

Confidence

Low