SUSE CVE-2024-45817

In x86's APIC Advanced Programmable Interrupt Controller architecture, error conditions are reported in a status register. Furthermore, the OS can opt to receive an interrupt when a new error occurs. It is possible to configure the error interrupt with an illegal vector, which generates an error...

Oracle Linux 8 : kernel (ELSA-2024-7000)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-7000 advisory. - wifi: mac80211: Avoid address calculations via out of bounds array indexing Michal Schmidt RHEL-51278 CVE-2024-41071 - protect the fetch of -fdfd in...

SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2024:3423-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3423-1 advisory. - CVE-2024-2201: Mitigation for Native Branch History Injection XSA-456, bsc1222453 - CVE-2024-31143: Fixed double unlock in x86...

SUSE-SU-2024:3424-1 Security update for xen

This update for xen fixes the following issues: - CVE-2024-45817: Fixed a deadlock in vlapicerror. bsc1230366, XSA-462...

SUSE-SU-2024:3423-1 Security update for xen

This update for xen fixes the following issues: - CVE-2024-2201: Mitigation for Native Branch History Injection XSA-456, bsc1222453 - CVE-2024-31143: Fixed double unlock in x86 guest IRQ handling XSA-458, bsc1227355 - CVE-2024-31145: Fixed error handling in x86 IOMMU identity mapping XSA-460,...

SUSE-SU-2024:3422-1 Security update for xen

This update for xen fixes the following issues: - CVE-2024-45817: Fixed a deadlock in vlapicerror XSA-462, bsc1230366...

SUSE-SU-2024:3421-1 Security update for xen

This update for xen fixes the following issues: - CVE-2024-45817: Fixed a deadlock in vlapicerror XSA-462, bsc1230366...

x86: Deadlock in vlapic_error()

ISSUE DESCRIPTION In x86's APIC Advanced Programmable Interrupt Controller architecture, error conditions are reported in a status register. Furthermore, the OS can opt to receive an interrupt when a new error occurs. It is possible to configure the error interrupt with an illegal vector, which...

kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem

CVE-2024-35895 addresses a vulnerability in the Linux kernel's Berkeley Packet Filter BPF subsystem, specifically within the sockmap feature. The issue arises when BPF tracing programs, which can execute in various interrupt contexts, attempt to delete elements from sockmap or sockhash maps. This...

kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery

A vulnerability was found in the Linux kernel's mt76 driver for the mt7921s chip, where a potential deadlock could occur during chip recovery. This situation arises when the kernel worker resetwork holds a lock while waiting for the statworker thread, which is simultaneously waiting for the same...

kernel: NFSv4: Don't hold the layoutget locks across multiple RPC calls

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Don't hold the layoutget locks across multiple RPC calls When doing layoutget as part of the open compound, we have to be careful to release the layout locks before we can call any further RPC calls, such as setattr. The...

kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()

A vulnerability was found in the Linux kernel's mac80211 component within the ieee80211stapsdeliverwakeup function, where improper locking of the sta-pslock can lead to a deadlock condition, which occurs because the function uses a spin lock without preventing softirq execution on the same CPU,...

kernel: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER

A deadlock flaw was found in the Linux kernel’s pinctrl subsystem. This flaw allows a local user to crash the system...

kernel: nvmet-fc: avoid deadlock on delete association path

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: avoid deadlock on delete association path When deleting an association the shutdown path is deadlocking because we try to flush the nvmetwq nested. Avoid this by deadlock by deferring the put work into its own work item...

kernel: nvmet-fc: avoid deadlock on delete association path

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: avoid deadlock on delete association path When deleting an association the shutdown path is deadlocking because we try to flush the nvmetwq nested. Avoid this by deadlock by deferring the put work into its own work item...

kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery

A vulnerability was found in the Linux kernel's mt76 driver for the mt7921s chip, where a potential deadlock could occur during chip recovery. This situation arises when the kernel worker resetwork holds a lock while waiting for the statworker thread, which is simultaneously waiting for the same...

kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()

A vulnerability was found in the Linux kernel's mac80211 component within the ieee80211stapsdeliverwakeup function, where improper locking of the sta-pslock can lead to a deadlock condition, which occurs because the function uses a spin lock without preventing softirq execution on the same CPU,...

kernel: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER

A deadlock flaw was found in the Linux kernel’s pinctrl subsystem. This flaw allows a local user to crash the system...

PT-2024-6570 · Citrix +3 · Citrix Hypervisor 8.2 Cu1 +4

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified XenServer 8 Citrix Hypervisor 8.2 CU1 Description: The issue is related to the x86's APIC architecture, where error conditions are reported in a status register. The OS can opt to receive an interrupt when ...

Unspecified vulnerability in Linux kernel (CNVD-2024-39262)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from the presence of a deadlock problem. No details of the vulnerability are provided at this time...