PT-2024-11320 · Linux +6 · Linux Kernel +6

🗓️ 21 Jun 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 23 Views

Linux kernel watchdog driver use-after-free from non-synced timer deletion; fix is timer sync; no patch known.

Reporter	Title	Published	Views	Family All 16750
BDU FSTEC	Vulnerability of the emacremove() function in the drivers/net/ethernet/qualcomm/emac/emac.c module – A driver for supporting Ethernet adapter devices in Qualcomm-based Linux operating systems, which allows a hacker to cause a service failure.	23 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the lpc18xx_wdt_remove() function in the drivers/watchdog/lpc18xx_wdt.c module allows a hacker to trigger a service failure in the Linux operating system’s kernel watchdog timer.	23 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ibmasm_init_one() function in the drivers/misc/ibmasm/module.c module of the Linux kernel allows a hacker to cause a service failure.	23 Jun 202500:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the fb_set_var() function in the drivers/video/fbdev/core/fbmem.c module – The driver for supporting kernel frame buffer devices in Linux systems, which allows a hacker to cause a system failure.	23 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the kvm_vm_ioctl_unregister_coalesced_mmio() function in the virt/kvm/coalesced_mmio.c module of the Linux Kernel-Based Virtual Machine (KVM) virtualization subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.	23 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the strset_reply_size() function in the net/ethtool/strset.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.	23 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the qtrr_endpoint_post() function in the net/qrtr/qrtr.c module allows a hacker to trigger a service failure in the Qualcomm IPC kernel of the Linux operating system.	23 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `synproxy_parse_options()` function in the `net/netfilter/nf_synproxy_core.c` module of the `netfilter` component of the Linux operating system allows a hacker to trigger a service failure.	23 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ngene_command_config_free_buf() function in the driver drivers/media/pci/ngene/ngene-core.c file of Micronas PCI Express card adapters in Linux operating systems allows a hacker to cause a service failure.	23 Jun 202500:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the tlanremove_one() function in the drivers/net/ethernet/ti/tlan.c module – A driver for supporting Ethernet adapter devices from Texas Instruments’ Linux kernel, which allows a hacker to cause a service failure.	23 Jun 202500:00	–	bdu_fstec

Source	Link
github	www.github.com/lanleft/CVE-2023-1829
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2025-07317
bdu	www.bdu.fstec.ru/vul/2025-07519
bdu	www.bdu.fstec.ru/vul/2025-07487
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2024-07744
bdu	www.bdu.fstec.ru/vul/2025-02850

26 Dec 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.8 - 9.8

CVSS 27.5

EPSS0.17563

SSVC