PT-2024-11255 · Linux +2 · Linux Kernel +2

🗓️ 21 May 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 18 Views

Linux kernel vulnerability from race between close() and udp abort() may cause panic without fix.

Reporter	Title	Published	Views	Family All 17481
BDU FSTEC	The vulnerability of the xive_irq_bitmap_add() function in the arch/powerpc/sysdev/xive/spapr.c module of the PowerPC platform supports for the Linux operating system allows a hacker to gain unauthorized access to protected information or cause a service failure.	26 Feb 202600:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the validate_region_size() function in the drivers/md/dm-raid.c module – A driver for supporting multiple device types (RAID and LVM) in the Linux operating system. This function allows an attacker to access protected information or cause service failures.	26 Feb 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cx25821_finidev() function in the drivers/media/pci/cx25821/cx25821-core.c file of the Linux kernel’s multimedia device support driver allows a attacker to cause a service failure.	26 Feb 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `get_handler_for_db()` function in the `security/integrity/platform_certs/keyring_handler.h` module of the Linux kernel’s security/integrity subsystem allows a attacker to trigger a service failure.	6 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the md_bitmap_read_sb() function in the drivers/md/md-bitmap.c file of the driver module exposes it to being exploited by attackers, causing service interruptions for systems supporting multiple devices such as RAID and LVM in the Linux kernel.	6 Mar 202600:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the qat_dh_compute_value() function in the drivers/crypto/qat/qat_common/qat_asym_algs.c module – a driver for the Linux kernel’s cryptographic accelerator, allowing a hacker to cause a service failure.	6 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the xdr_stream_decode_uint32_array() function in the include/linux/sunrpc/xdr.h module of the Linux kernel allows a attacker to cause a service failure.	6 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nfsd_proc_write() function in the fs/nfsd/nfsproc.c module, which is part of the NFS network file system support in Linux kernel, allows a attacker to cause a service failure.	6 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the r871xu_drv_init() function in the drivers/staging/rtl8712/usb_intf.c module, which supports additional devices in the Linux operating system, allows a hacker to cause a service failure.	6 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the usb_read8() function in the drivers/staging/rtl8712/usb_ops.c module allows a hacker to cause a service failure within the Linux operating system.	6 Mar 202600:00	–	bdu_fstec

Source	Link
github	www.github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md
github	www.github.com/EdwardOwusuAdjei/Spectre-PoC
bdu	www.bdu.fstec.ru/vul/2022-01630
git	www.git.kernel.org/stable/c/65310b0aff86980a011c7c7bfa487a333d4ca241
bdu	www.bdu.fstec.ru/vul/2025-04335
osv	www.osv.dev/vulnerability/SUSE-SU-2024:2184-1
bdu	www.bdu.fstec.ru/vul/2022-02361
cve	www.cve.org/CVERecord
bdu	www.bdu.fstec.ru/vul/2025-06551
bdu	www.bdu.fstec.ru/vul/2025-06062

15 Apr 2025 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 3.14.7 - 9.8

CVSS 26.9

EPSS0.93838

SSVC

linux kernel vulnerability race condition panic udp abort socket lock