PT-2024-11209 · Linux +2 · Linux Kernel +2

🗓️ 25 Mar 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

Linux kernel use-after-free when appending a frag buffer to a shared frag list; fix by linearizing the head before unshare.

Reporter	Title	Published	Views	Family All 18236
BDU FSTEC	The vulnerability of the hnae3_unregister_ae_algo_prepare() function in the drivers/net/ethernet/hisilicon/hns3/hnae3.c module of the Linux kernel allows a malicious actor to cause a service failure.	27 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `cx24116_read_snr_pct()` function in the `drivers/media/dvb-frontends/cx24116.c` file of the Linux kernel allows a hacker to execute arbitrary code.	27 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions DECLARE_RWSEM() and dvb_register_device() in the drivers/media/dvb-core/dvbdev.c module of the Linux kernel allow a hacker to cause a service failure.	27 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nfs_fattr_init() function in the fs/nfs/inode.c module of the Linux kernel allows a hacker to cause a service failure.	27 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the arm64 component of the Linux operating system’s kernel, which allows a hacker to trigger a service failure	27 Mar 202500:00	–	bdu_fstec
BDU FSTEC	Vulnerability of RDMA/mad components of the Linux operating system, allowing a hacker to cause a service failure	27 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of DRM/AMD components in Linux operating systems allows a hacker to trigger a service failure.	27 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the typec_altmode_release() function in the drivers/usb/typec/class.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	27 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `reqsk_queue_unlink()` function in the `net/ipv4/inet_connection_sock.c` module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	27 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s Bluetooth kernel component, which allows a hacker to trigger a service failure	27 Mar 202500:00	–	bdu_fstec

Source	Link
bdu	www.bdu.fstec.ru/vul/2024-10094
bdu	www.bdu.fstec.ru/vul/2024-05829
osv	www.osv.dev/vulnerability/CVE-2021-47162
bdu	www.bdu.fstec.ru/vul/2024-09160
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/715602
git	www.git.kernel.org/stable/c/6da24cfc83ba4f97ea44fc7ae9999a006101755c
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/721316
bdu	www.bdu.fstec.ru/vul/2025-03117
bdu	www.bdu.fstec.ru/vul/2025-04484
bdu	www.bdu.fstec.ru/vul/2025-01947

08 Jan 2025 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.15.5 - 9.8

CVSS 24.6

EPSS0.08555

SSVC