CVE-2024-50101 iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix incorrect pciforeachdmaalias for non-PCI devices Previously, the domaincontextclear function incorrectly called pciforeachdmaalias to set up context entries for non-PCI devices. This could lead to kernel hangs or...

CVE-2024-50093

Summary: CVE-2024-50093 relates to the Linux kernel where the processor_thermal/intel int340x driver emitted a warning during module unload due to an unnecessary second pci_disable_device() call after enabling a PCI device with pcim_device_enable(). The connected Astra Linux and Debian Debian-LTS...

CVE-2024-50093 thermal: intel: int340x: processor: Fix warning during module unload

In the Linux kernel, the following vulnerability has been resolved: thermal: intel: int340x: processor: Fix warning during module unload The processorthermal driver uses pcimdeviceenable to enable a PCI device, which means the device will be automatically disabled on driver detach. Thus there is ...

CVE-2024-50093 thermal: intel: int340x: processor: Fix warning during module unload

In the Linux kernel, the following vulnerability has been resolved: thermal: intel: int340x: processor: Fix warning during module unload The processorthermal driver uses pcimdeviceenable to enable a PCI device, which means the device will be automatically disabled on driver detach. Thus there is ...

CVE-2024-50093

In the Linux kernel, the following vulnerability has been resolved: thermal: intel: int340x: processor: Fix warning during module unload The processorthermal driver uses pcimdeviceenable to enable a PCI device, which means the device will be automatically disabled on driver detach. Thus there is ...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the domaincontextclear function in the iommu/vt-d module incorrectly calling pciforeachdmaalias for a non-PC...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which originates in the thermal module, where a warning triggered when uninstalling the module causes PCI devices to be...

PT-2024-33925

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the processor thermal driver in the Linux kernel, which uses pcim device enable to enable a PCI device. This means the device will be automatically disabled on...

PT-2024-37068

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a memory mismanagement problem in the Linux kernel's nvme-pci descriptor table. Specifically, the HMB descriptor table is sized to match the maximum number of...

CVE-2024-50122: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: PCI: Hold rescan lock while adding devices during host probe Since adding the PCI power control code, we may end up with a race between the pwrctl platform device rescanning the bus and host controller probe functions. The latter...

CVE-2024-50135: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix race condition between reset and nvmedevdisable nvmedevdisable modifies the dev-onlinequeues field, therefore nvmepciupdatenrqueues should avoid racing against it, otherwise we could end up passing invalid values to...

CVE-2024-50101: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix incorrect pciforeachdmaalias for non-PCI devices Previously, the domaincontextclear function incorrectly called pciforeachdmaalias to set up context entries for non-PCI devices. This could lead to kernel hangs or...

PT-2024-10206

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's PCI component, specifically the tegra194 endpoint. The problem arises when the host asserts PERST, which leads to the refclk being disabled,...

PT-2024-34121

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A kernel crash occurs when the driver is uninstalled and the Virtual Function VF is disabled concurrently. This happens because the two actions call the pci disable sriov function, whi...

Realtek SD card drivers Buffer Overflow

The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to read and write data in the PCI configuration space...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: bpf: Silence a warning in btftypeidsize CVE-2023-54247 In the Linux kernel, the following vulnerability has been resolved: memcg: protect concurrent access to memcgroupidr CVE-2024-43892 In the Linux kernel, the...

ROS-20241028-04

A vulnerability in the tcp component of the Linux operating system kernel is related to excessive output in the function sockprotinuseadd in net/ipv4/inethashtables.c. Exploitation of the vulnerability could allow an attacker to gain access to confidential information A vulnerability in the btrtl...

SUSE CVE-2024-49886

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug Attaching SST PCI device to VM causes "BUG: KASAN: slab-out-of-bounds". kasan report: 19.411889 ==================================================================...

SUSE CVE-2022-49024

In the Linux kernel, the following vulnerability has been resolved: can: mcan: pci: add missing mcanclassfreedev in probe/remove methods In mcanpciremove and error handling path of mcanpciprobe, mcanclassfreedev should be called to free resource allocated by mcanclassallocatedev, otherwise there...

SUSE CVE-2023-52918

In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: check cx23885vdevinit return cx23885vdevinit can return a NULL pointer, but that pointer is used in the next line without a check. Add a NULL pointer check and go to the error unwind if it is NULL...