169 matches found
Ubuntu 23.10 : Linux kernel (ARM laptop) vulnerabilities (USN-6818-2)
The remote Ubuntu 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6818-2 advisory. Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference...
CVE-2024-36926
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE At the time of LPAR boot up, partition firmware provides Open Firmware property ibm,dma-window for the PE. This property is provided on the PCI bus the PE is...
CVE-2024-36926
CVE-2024-36926 affects the Linux kernel on PowerPC pseries hardware, where LPARs boot with a frozen PE may lack the ibm,dma-window property. This can cause a NULL pointer dereference while configuring PCI, leading to an oops/panic during boot. The vulnerability is described with kernel traces (pc...
CVE-2024-36926 powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE At the time of LPAR boot up, partition firmware provides Open Firmware property ibm,dma-window for the PE. This property is provided on the PCI bus the PE is...
SUSE CVE-2023-52650
In the Linux kernel, the following vulnerability has been resolved: drm/tegra: dsi: Add missing check for offinddevicebynode Add check for the return value of offinddevicebynode and return the error if it fails in order to avoid NULL pointer dereference...
UBUNTU-CVE-2024-26717
In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementation was split in an ACPI and OF part, but the new OF driver never initialises the client pointer which is dereferenced on power-up failures...
kernel: ASoC: SOF: avoid a NULL dereference with unsupported widgets
A NULL pointer dereference was found in the Sound Open Firmware SOF driver. When a topology contains an unsupported widget type, the moduleinfo field is NULL, and dereferencing it during route setup crashes the kernel...
kernel: ASoC: SOF: avoid a NULL dereference with unsupported widgets
A NULL pointer dereference was found in the Sound Open Firmware SOF driver. When a topology contains an unsupported widget type, the moduleinfo field is NULL, and dereferencing it during route setup crashes the kernel...
alsa-sof-firmware enhancement update
An update is available for alsa-sof-firmware. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The alsa-sof-firmware package contains the firmware binaries for th...
sound-open-firmware:sof-ipc3: Crash in pthread_create
Detailed Report: https://oss-fuzz.com/testcase?key=6693063771422720 Project: sound-open-firmware Fuzzing Engine: libFuzzer Fuzz Target: sof-ipc3 Job Type: libfuzzerasani386sound-open-firmware Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x07020505 Crash State: pthreadcreate...
kernel: ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf()
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf snprintf returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in the buffer overflow although it's...
kernel: ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf()
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf snprintf returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in the buffer overflow although it's...
PT-2025-54019
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the of led get function within the leds subsystem of the Linux kernel. The class find device by of node function calls class find device, which takes a...
PT-2025-37503
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak bug was resolved in the of get ddr timings function within the Linux kernel. The issue occurs when iterating through child nodes and requires adding of node put to...
alsa-sof-firmware bug fix update
An update is available for alsa-sof-firmware. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The alsa-sof-firmware package contains the firmware binaries for th...
ALEA-2022:1551 alsa-sof-firmware bug fix and enhancement update
The alsa-sof-firmware package contains firmware binaries for the Sound Open Firmware project. Bug Fixes and Enhancements: Update Intel SOF firmware to 1.9 BZ2044420...
alsa-sof-firmware bug fix and enhancement update
An update is available for alsa-sof-firmware. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The alsa-sof-firmware package contains firmware binaries for the...
grub2 bug fix and enhancement update
The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Bug Fixes and Enhancements: Make...
sound-open-firmware:fuzz_ipc: Crash in [heap]
Detailed Report: https://oss-fuzz.com/testcase?key=6533464049451008 Project: sound-open-firmware Fuzzing Engine: libFuzzer Fuzz Target: fuzzipc Job Type: libfuzzerubsansound-open-firmware Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000001fee1f8 Crash State: heap Sanitizer:...
sound-open-firmware:fuzz_ipc: Heap-use-after-free in ipc_comp_value
Detailed Report: https://oss-fuzz.com/testcase?key=5886698849435648 Project: sound-open-firmware Fuzzing Engine: libFuzzer Fuzz Target: fuzzipc Job Type: libfuzzerasansound-open-firmware Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x604000052be0 Crash State:...