Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:ALSA-2024:3618
HistoryJun 05, 2024 - 12:00 a.m.

Moderate: kernel update

2024-06-0500:00:00
Google
osv.dev
linux kernel
vulnerabilities
side-channel leakage
information disclosure
memory leaks
block process
buffer overruns.

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.3%

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Marvin vulnerability side-channel leakage in the RSA decryption
    operation (CVE-2023-6240)
  • kernel: Information disclosure in vhost/vhost.c:vhost_new_msg()
    (CVE-2024-0340)
  • kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
  • kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
  • kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
  • kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer
    that cause loop forever (CVE-2024-26603)
  • kernel: use after free in i2c (CVE-2019-25162)
  • kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
  • kernel: media: dvbdev: Fix memory leak in dvb_media_device_free()
    (CVE-2020-36777)
  • kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors
    (CVE-2023-52477)
  • kernel: mtd: require write permissions for locking and badblock ioctls
    (CVE-2021-47055)
  • kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump
    (CVE-2024-26615)
  • kernel: vt: fix memory overlapping when deleting chars in the buffer
    (CVE-2022-48627)
  • kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
  • kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu()
    (CVE-2023-52565)
  • kernel: net: bridge: data races indata-races in br_handle_frame_finish()
    (CVE-2023-52578)
  • kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
    (CVE-2023-52528)
  • kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
  • kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
  • kernel: pid: take a reference when initializing cad_pid (CVE-2021-47118)
  • kernel: net/sched: act_ct: fix skb leak and crash on ooo frags
    (CVE-2023-52610)
  • kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set
    with timeout (CVE-2024-26643)
  • kernel: netfilter: nf_tables: disallow anonymous set with timeout flag
    (CVE-2024-26642)
  • kernel: i2c: i801: Don't generate an interrupt on bus reset
    (CVE-2021-47153)
  • kernel: xhci: handle isoc Babble and Buffer Overrun events properly
    (CVE-2024-26659)
  • kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
  • kernel: wifi: mac80211: fix race condition on enabling fast-xmit
    (CVE-2024-26779)
  • kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter
    (CVE-2024-26744)
  • kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
  • kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
    (CVE-2021-47185)
  • kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
    (CVE-2024-26901)
  • kernel: RDMA/srpt: Do not register event handler until srpt device is fully
    setup (CVE-2024-26872)
  • kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
  • kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
  • kernel: USB: core: Fix deadlock in usb_deauthorize_interface()
    (CVE-2024-26934)
  • kernel: USB: core: Fix deadlock in port "disable" sysfs attribute
    (CVE-2024-26933)
  • kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection()
    (CVE-2024-26993)
  • kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
  • kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
    (CVE-2024-27059)
  • kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (CVE-2021-47013)
  • kernel: net: usb: fix memory leak in smsc75xx_bind (CVE-2021-47171)
  • kernel: powerpc/pseries: Fix potential memleak in papr_get_attr() (CVE-2022-48669)
  • kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)
  • kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (CVE-2023-52594)
  • kernel: wifi: rt2x00: restart beacon queue when hardware reset (CVE-2023-52595)

References

Related

nessus 14
osv 3
rocky 2
almalinux 2
oraclelinux 2
redhat 4
ubuntucve 26
nvd 27
redhatcve 29
debiancve 23
cve 22
cvelist 24
prion 8
vulnrichment 11
cbl_mariner 2
nessus
nessus
RHEL 8 : kernel-rt (RHSA-2024:3627)
2024-06-05 00:00:00
AlmaLinux 8 : kernel-rt (ALSA-2024:3627)
2024-06-05 00:00:00
Rocky Linux 8 : kernel-rt (RLSA-2024:3627)
2024-06-14 00:00:00
osv
osv
Moderate: kernel-rt security and bug fix update
2024-06-05 00:00:00
Moderate: kernel-rt security and bug fix update
2024-06-14 13:59:36
Moderate: kernel update
2024-06-14 13:59:16
rocky
rocky
kernel-rt security and bug fix update
2024-06-14 13:59:36
kernel update
2024-06-14 13:59:16
almalinux
almalinux
Moderate: kernel update
2024-06-05 00:00:00
Moderate: kernel-rt security and bug fix update
2024-06-05 00:00:00
oraclelinux
oraclelinux
kernel update
2024-06-05 00:00:00
kernel security and bug fix update
2024-05-23 00:00:00
redhat
redhat
(RHSA-2024:3462) Moderate: kernel security and bug fix update
2024-05-29 07:38:48
(RHSA-2024:3461) Moderate: kernel security and bug fix update
2024-05-29 07:38:15
(RHSA-2024:3460) Moderate: kernel-rt security and bug fix update
2024-05-29 07:38:15
ubuntucve
ubuntucve
CVE-2024-26694
2024-04-03 00:00:00
CVE-2024-26693
2024-04-03 00:00:00
CVE-2024-27056
2024-05-01 00:00:00
nvd
nvd
CVE-2024-26694
2024-04-03 15:15:52
CVE-2024-26693
2024-04-03 15:15:52
CVE-2019-25162
2024-02-26 18:15:07
redhatcve
redhatcve
CVE-2023-52565
2024-03-04 17:25:40
CVE-2024-26693
2024-04-03 23:07:53
CVE-2024-26694
2024-04-03 22:40:50
debiancve
debiancve
CVE-2024-26694
2024-04-03 15:15:52
CVE-2024-26693
2024-04-03 15:15:52
CVE-2021-47153
2024-03-25 09:15:09
cve
cve
CVE-2024-27056
2024-05-01 13:15:50
CVE-2024-26693
2024-04-03 15:15:52
CVE-2024-26694
2024-04-03 15:15:52
cvelist
cvelist
CVE-2024-26694 wifi: iwlwifi: fix double-free bug
2024-04-03 14:54:55
CVE-2024-26693 wifi: iwlwifi: mvm: fix a crash when we run out of stations
2024-04-03 14:54:54
CVE-2023-52513 RDMA/siw: Fix connection failure handling
2024-03-02 21:52:24
prion
prion
Spoofing
2024-03-02 22:15:00
Spoofing
2024-03-02 22:15:00
Design/Logic Flaw
2024-02-27 19:04:00
vulnrichment
vulnrichment
CVE-2024-26693 wifi: iwlwifi: mvm: fix a crash when we run out of stations
2024-04-03 14:54:54
CVE-2024-27056 wifi: iwlwifi: mvm: ensure offloading TID queue exists
2024-05-01 12:54:56
CVE-2024-26694 wifi: iwlwifi: fix double-free bug
2024-04-03 14:54:55
cbl_mariner
cbl_mariner
CVE-2024-26993 affecting package hyperv-daemons for versions less than 5.15.158.1-1
2024-06-12 22:23:00
CVE-2024-27014 affecting package kernel for versions less than 5.15.158.1-1
2024-06-12 22:23:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.3%

JSON
Related for OSV:ALSA-2024:3618
nessus14osv3rocky2almalinux2oraclelinux2redhat4ubuntucve26nvd27redhatcve29debiancve23cve22cvelist24prion8vulnrichment11cbl_mariner2