CVE-2021-47234

In the Linux kernel, the following vulnerability has been resolved: phy: phy-mtk-tphy: Fix some resource leaks in mtkphyinit Use clkdisableunprepare in the error path of mtkphyinit to fix some resource leaks...

CVE-2021-47233

In the Linux kernel, the following vulnerability has been resolved: regulator: rt4801: Fix NULL pointer dereference if priv-enablegpios is NULL devmgpiodgetarrayoptional may return NULL if no GPIO was assigned...

CVE-2021-47231 can: mcba_usb: fix memory leak in mcba_usb

In the Linux kernel, the following vulnerability has been resolved: can: mcbausb: fix memory leak in mcbausb Syzbot reported memory leak in SocketCAN driver for Microchip CAN BUS Analyzer Tool. The problem was in unfreed usbcoherent. In mcbausbstart 20 coherent buffers are allocated and there is...

CVE-2021-47226 x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer Both Intel and AMD consider it to be architecturally valid for XRSTOR to fail with PF but nonetheless change the register state. The actual conditions under...

CVE-2024-35995

A vulnerability was found in the ACPI subsystem's CPPC driver in the Linux kernel. This issue occurs due to the mishandling of memory access bit width during performance capability calculations, which can lead to misaligned memory accesses and cause kernel panics on affected platforms...

CVE-2024-36009

A vulnerability was found in the Linux kernel's AX.25 protocol implementation. The issue arises from incorrect handling of the netdev reference count, where the devtracker associated with the AX.25 device is improperly managed. Specifically, the devtracker of the ax25cb should be deallocated duri...

CVE-2024-35998

In the Linux kernel, the following vulnerability has been resolved: smb3: fix lock ordering potential deadlock in cifssyncmidresult Coverity spotted that the cifssyncmidresult function could deadlock "Thread deadlock ORDERREVERSAL lockorder: Calling spinlock acquires lock TCPServerInfo.srvlock...

CVE-2024-35957

CVE-2024-35957 is a vulnerability in the Linux kernel's Intel Virtualization Technology for Directed I/O VT-d subsystem. The issue stems from an incorrect assumption that each device has a unique source ID, leading to potential conflicts and system warnings during the IOMMU probe process. This fl...

CVE-2024-35950

In the Linux kernel, the following vulnerability has been resolved: drm/client: Fully protect modes with dev-modeconfig.mutex The modes array contains pointers to modes on the connectors' mode lists, which are protected by dev-modeconfig.mutex. Thus we need to extend modes the same protection or ...

CVE-2024-35979

In the Linux kernel, the following vulnerability has been resolved: raid1: fix use-after-free for original bio in raid1writerequest r1bio-bios is used to record new bios that will be issued to underlying disks, however, in raid1writerequest, r1bio-bios will set to the original bio temporarily...

CVE-2024-35984

In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: fix NULL function pointer dereference Baruch reported an OOPS when using the designware controller as target only. Target-only modes break the assumption of one transfer function always being available. Fix this by...

CVE-2024-35990

A flaw was found in the Linux kernel’s xilinxdpdma module. Improper locking can cause locking dependency warnings, resulting in a denial of service...

CVE-2024-35936

A flaw was found in the Linux kernel’s btrfs module. An unhandled chunk tree lookup error in the btrfsrelocatesyschunks function in the fs/btrfs/volumes.c file will cause a denial of service...

CVE-2024-35863

A use-after-free flaw was found in the Linux kernel in smb isvalidoplockbreak when exiting a session. This flaw allows a local attacker to crash the system...

CVE-2024-35924

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Limit read size on v1.2 Between UCSI 1.2 and UCSI 2.0, the size of the MESSAGEIN region was increased from 16 to 256. In order to avoid overflowing reads for older systems, add a mechanism to use the read UCSI...

CVE-2024-35919

A vulnerability was found in the Linux kernel's MediaTek vcodec driver, where the lack of a lock for the encoder context list ctxlist could lead to accessing a NULL pointer in the vpuencipihandler function. This issue occurs when the context list is deleted unexpectedly due to a behavior in the S...

CVE-2024-35918

A cryptographic low entropy vulnerability was found in the Linux kernel, where the kstackoffset variable only uses the low bits for kernel stack offset entropy. This issue can result in loss of overall security of the system. Mitigation Mitigation for this issue is either not available or the...

CVE-2024-35874

A vulnerability was found in the Linux kernel that causes a NULL pointer dereference in the aiocomplete function during a wakeup operation. The issue arises because finishwait may skip locking if it encounters an empty list head. This leads to a NULL pointer dereference when attempting a wakeup...

CVE-2024-35884

CVE-2024-35884 highlights a flaw in the Linux kernel's handling of UDP packets when Generic Receive Offload GRO forwarding is enabled. The issue occurs because non-tunnel UDP packets are sometimes mistakenly processed as if they belong to a tunnel. This can lead to data corruption or kernel...

CVE-2024-35892

CVE-2024-35892 is a vulnerability in the Linux kernel’s network scheduler caused by improper use of the qdisclookup function. This function assumes the global RTNL lock is held, but in the qdisctreereducebacklog function, only a local queue lock is used. This mismatch creates a race condition tha...