CVE-2024-54191

CVE-2024-54191 affects the Linux kernel Bluetooth stack (ISO). The issue arises from a circular lock between the socket lock and hdev lock in the ISO path. The fix reworks iso_sock_recvmsg and related code so that the socket lock is released before acquiring hdev, breaking the circular dependency...

PT-2025-3591 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a problem in the readahead code of the Linux kernel, which can cause the kernel to hang when used with NFS. The problem has been identified as being caused by a...

PT-2025-3605 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the ASoC: Intel: sof sdw component in the Linux kernel. The code uses the initialised member of the asoc sdw dailink struct to determine if a member of the arra...

CVE-2024-56550

A vulnerability was found in the archstackwalkusercommon function in the Linux kernel's S390 stack trace component, where a logic error can cause a missing pagefaultenable call. This occurs due to a return statement being used instead of a break, leading to unresolved page faults that can termina...

CVE-2024-56589 scsi: hisi_sas: Add cond_resched() for no forced preemption model

In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Add condresched for no forced preemption model For no forced preemption model kernel, in the scenario where the expander is connected to 12 high performance SAS SSDs, the following call trace may occur: 214.409199...

CVE-2024-56586

CVE-2024-56586 concerns the Linux kernel f2fs subsystem. The issue arises when uninstalling a filesystem after a sequence that creates large files during a disabled checkpoint period, which can exhaust free segments. This leads to a BUG_ON in f2fs_evict_inode() when the root inode is dirty at unm...

CVE-2024-56565 f2fs: fix to drop all discards after creating snapshot on lvm device

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to drop all discards after creating snapshot on lvm device Piergiorgio reported a bug in bugzilla as below: ------------ cut here ------------ WARNING: CPU: 2 PID: 969 at fs/f2fs/segment.c:1330 RIP:...

UBUNTU-CVE-2024-53184

In the Linux kernel, the following vulnerability has been resolved: um: ubd: Do not use drvdata in release The drvdata is not available in release. Let's just use containerof to get the ubd instance. Otherwise, removing a ubd device will result in a crash: RIP: 0033:blkmqfreetagset+0x1f/0xba RSP:...

PT-2024-36868 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A credential leak issue has been resolved in the Linux kernel. The problem occurred because get current cred increments the reference counter, but the corresponding put cred call was...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50154)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50154 advisory. - In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Don't use timerpending in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50082)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50082 advisory. - In the Linux kernel, the following vulnerability has been resolved: blk-rq-qos: fix crash on rqqoswait vs...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50179)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50179 advisory. - In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49981)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49981 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free bug in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49896)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49896 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check stream before...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50002)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50002 advisory. - In the Linux kernel, the following vulnerability has been resolved: staticcall: Handle module init failure...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49852)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49852 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: elx: libefc: Fix potential use aft...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47684)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47684 advisory. - In the Linux kernel, the following vulnerability has been resolved: tcp: check skb is non-NULL in...

CVE-2024-53109 nommu: pass NULL argument to vma_iter_prealloc()

In the Linux kernel, the following vulnerability has been resolved: nommu: pass NULL argument to vmaiterprealloc When deleting a vma entry from a maple tree, it has to pass NULL to vmaiterprealloc in order to calculate internal state of the tree, but it passed a wrong argument. As a result, nommu...

CVE-2024-53093 nvme-multipath: defer partition scanning

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: defer partition scanning We need to suppress the partition scan from occuring within the controller's scanwork context. If a path error occurs here, the IO will wait until a path becomes available or all paths are...

CVE-2024-49869

In the Linux kernel, the following vulnerability has been resolved: btrfs: send: fix buffer overflow detection when copying path to cache entry Starting with commit c0247d289e73 "btrfs: send: annotate struct namecacheentry with countedby" we annotated the variable length array "name" from the...