Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:ALSA-2024:3618
HistoryJun 05, 2024 - 12:00 a.m.

Moderate: kernel update

2024-06-0500:00:00
Google
osv.dev
10
linux kernel
vulnerabilities
side-channel leakage
information disclosure
memory leaks
block process
buffer overruns.

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

46.8%

JSON

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Marvin vulnerability side-channel leakage in the RSA decryption
    operation (CVE-2023-6240)
  • kernel: Information disclosure in vhost/vhost.c:vhost_new_msg()
    (CVE-2024-0340)
  • kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
  • kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
  • kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
  • kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer
    that cause loop forever (CVE-2024-26603)
  • kernel: use after free in i2c (CVE-2019-25162)
  • kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
  • kernel: media: dvbdev: Fix memory leak in dvb_media_device_free()
    (CVE-2020-36777)
  • kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors
    (CVE-2023-52477)
  • kernel: mtd: require write permissions for locking and badblock ioctls
    (CVE-2021-47055)
  • kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump
    (CVE-2024-26615)
  • kernel: vt: fix memory overlapping when deleting chars in the buffer
    (CVE-2022-48627)
  • kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
  • kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu()
    (CVE-2023-52565)
  • kernel: net: bridge: data races indata-races in br_handle_frame_finish()
    (CVE-2023-52578)
  • kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
    (CVE-2023-52528)
  • kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
  • kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
  • kernel: pid: take a reference when initializing cad_pid (CVE-2021-47118)
  • kernel: net/sched: act_ct: fix skb leak and crash on ooo frags
    (CVE-2023-52610)
  • kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set
    with timeout (CVE-2024-26643)
  • kernel: netfilter: nf_tables: disallow anonymous set with timeout flag
    (CVE-2024-26642)
  • kernel: i2c: i801: Don't generate an interrupt on bus reset
    (CVE-2021-47153)
  • kernel: xhci: handle isoc Babble and Buffer Overrun events properly
    (CVE-2024-26659)
  • kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
  • kernel: wifi: mac80211: fix race condition on enabling fast-xmit
    (CVE-2024-26779)
  • kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter
    (CVE-2024-26744)
  • kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
  • kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
    (CVE-2021-47185)
  • kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
    (CVE-2024-26901)
  • kernel: RDMA/srpt: Do not register event handler until srpt device is fully
    setup (CVE-2024-26872)
  • kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
  • kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
  • kernel: USB: core: Fix deadlock in usb_deauthorize_interface()
    (CVE-2024-26934)
  • kernel: USB: core: Fix deadlock in port "disable" sysfs attribute
    (CVE-2024-26933)
  • kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection()
    (CVE-2024-26993)
  • kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
  • kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
    (CVE-2024-27059)
  • kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (CVE-2021-47013)
  • kernel: net: usb: fix memory leak in smsc75xx_bind (CVE-2021-47171)
  • kernel: powerpc/pseries: Fix potential memleak in papr_get_attr() (CVE-2022-48669)
  • kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)
  • kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (CVE-2023-52594)
  • kernel: wifi: rt2x00: restart beacon queue when hardware reset (CVE-2023-52595)

References

Related

redhat 9
rocky 2
nessus 15
osv 7
oraclelinux 2
almalinux 2
ibm 6
redhatcve 21
prion 7
vulnrichment 23
cve 19
debiancve 23
cvelist 23
ubuntucve 18
nvd 21
cbl_mariner 1
redhat
redhat
(RHSA-2024:3627) Moderate: kernel-rt security and bug fix update
2024-06-05 09:30:39
(RHSA-2024:3618) Moderate: kernel update
2024-06-05 00:07:54
(RHSA-2024:4151) Important: OpenShift Container Platform 4.15.20 security update
2024-07-02 18:15:29
rocky
rocky
kernel update
2024-06-14 13:59:16
kernel-rt security and bug fix update
2024-06-14 13:59:36
nessus
nessus
RHEL 8 : kernel-rt (RHSA-2024:3627)
2024-06-05 00:00:00
AlmaLinux 8 : kernel-rt (ALSA-2024:3627)
2024-06-05 00:00:00
Rocky Linux 8 : kernel-rt (RLSA-2024:3627)
2024-06-14 00:00:00
osv
osv
Moderate: kernel-rt security and bug fix update
2024-06-05 00:00:00
Moderate: kernel-rt security and bug fix update
2024-06-14 13:59:36
Moderate: kernel update
2024-06-14 13:59:16
oraclelinux
oraclelinux
kernel update
2024-06-05 00:00:00
kernel security and bug fix update
2024-05-23 00:00:00
almalinux
almalinux
Moderate: kernel-rt security and bug fix update
2024-06-05 00:00:00
Moderate: kernel update
2024-06-05 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Storage Copy Data Management
2024-09-27 18:14:10
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-07-31 12:54:26
Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Storage Copy Data Management
2024-09-27 18:11:19
redhatcve
redhatcve
CVE-2023-52565
2024-03-04 17:25:40
CVE-2021-47153
2024-03-25 17:53:26
CVE-2020-36777
2024-02-28 21:31:46
prion
prion
Spoofing
2024-03-02 22:15:00
Spoofing
2024-03-02 22:15:00
Design/Logic Flaw
2024-02-27 19:04:00
vulnrichment
vulnrichment
CVE-2023-52520 platform/x86: think-lmi: Fix reference leak
2024-03-02 21:52:28
CVE-2024-27056 wifi: iwlwifi: mvm: ensure offloading TID queue exists
2024-05-01 12:54:56
CVE-2020-36777 media: dvbdev: Fix memory leak in dvb_media_device_free()
2024-02-27 18:40:26
cve
cve
CVE-2023-52565
2024-03-02 22:15:48
CVE-2024-27056
2024-05-01 13:15:50
CVE-2021-47013
2024-02-28 09:15:38
debiancve
debiancve
CVE-2023-52513
2024-03-02 22:15:47
CVE-2023-52565
2024-03-02 22:15:48
CVE-2024-26694
2024-04-03 15:15:52
cvelist
cvelist
CVE-2023-52513 RDMA/siw: Fix connection failure handling
2024-03-02 21:52:24
CVE-2023-52565 media: uvcvideo: Fix OOB read
2024-03-02 21:59:37
CVE-2021-47055 mtd: require write permissions for locking and badblock ioctls
2024-02-29 22:37:30
ubuntucve
ubuntucve
CVE-2020-36777
2024-02-27 00:00:00
CVE-2024-26693
2024-04-03 00:00:00
CVE-2024-26694
2024-04-03 00:00:00
nvd
nvd
CVE-2024-26693
2024-04-03 15:15:52
CVE-2024-26694
2024-04-03 15:15:52
CVE-2023-52565
2024-03-02 22:15:48
cbl_mariner
cbl_mariner
CVE-2022-48669 affecting package hyperv-daemons for versions less than 6.6.35.1-1
2024-07-23 02:21:02

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

46.8%

JSON
Related for OSV:ALSA-2024:3618
redhat9rocky2nessus15osv7oraclelinux2almalinux2ibm6redhatcve21prion7vulnrichment23cve19debiancve23cvelist23ubuntucve18nvd21cbl_mariner1