CVE-2024-27425

A flaw was found in the netrom module in the Linux kernel. A race condition can occur when reading the sysctlnetromtransportacknowledgedelay resource due to a missing lock, which may impact system stability and result in a denial of service...

CVE-2024-27423

A flaw was found in the Linux kernel's netrom module. A race condition can occur when reading the sysctlnetromtransportrequestedwindowsize resource due to a missing lock, which may impact system stability and result in a denial of service...

CVE-2024-27421

A flaw was found in the netrom module in the Linux kernel. A race condition can occur when reading the sysctlnetromroutingcontrol resource due to a missing lock, which may impact system stability and result in a denial of service...

CVE-2024-27419

A flaw was found in the netrom module in the Linux kernel. A race condition can occur when reading the sysctlnetbusyread resource due to a missing lock, which may impact system stability and can result in a denial of service...

CVE-2024-27417

A flaw was discovered in the Linux kernel's IPv6 implementation, specifically within the inet6rtmgetaddr function. The issue arises when user space provides a valid IFATARGETNETNSID value but omits the IFAADDRESS and IFALOCAL attributes. In such cases, the function returns an -EINVAL error while...

CVE-2024-35792

A vulnerability was found in the Linux kernel's rockchip rk3288cryptoahash.c driver in the rkhashrun function, where a use-after-free scenario can occur. This flaw is caused by improper function call ordering, where rkhashunprepare is called after cryptofinalizehashrequest. This may free some of...

CVE-2024-35791

A security vulnerability was identified in the Linux kernel's Kernel-based Virtual Machine subsystem KVM, specifically affecting the Secure Virtual Machine SVM feature used on AMD processors. The issue arises from a use-after-free condition in the svmregisterencregion function, which can lead to...

CVE-2024-35790

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group The DisplayPort driver's sysfs nodes may be present to the userspace before typecaltmodesetdrvdata completes in dpaltmodeprobe. This...

CVE-2024-27428

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-35852

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak when canceling rehash work The rehash delayed work is rescheduled with a delay if the number of credits at end of the work is not negative as supposedly it means that the migration ended...

CVE-2024-35854

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during rehash The rehash delayed work migrates filters from one region to another according to the number of available credits. The migrated from region is destroyed at the end ...

CVE-2024-35847

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in itsvpeirqdomainalloc causes a double free when itsvpeinit fails after successfully allocating at least one interrupt. This happens because...

CVE-2023-52695

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check writeback connectors in createvalidatestreamforsink WHY & HOW This is to check connector type to avoid unhandled null pointer for writeback connectors...

CVE-2023-52696

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opalpowercapinit kasprintf returns a pointer to dynamically allocated memory which can be NULL upon failure...

CVE-2023-52683

In the Linux kernel, the following vulnerability has been resolved: ACPI: LPIT: Avoid u32 multiplication overflow In lpitupdateresidency there is a possibility of overflow in multiplication, if tsckhz is large enough UINTMAX/1000. Change multiplication to mulu32u32. Found by Linux Verification...

CVE-2023-52679

In the Linux kernel, the following vulnerability has been resolved: of: Fix double free in ofparsephandlewithargsmap In ofparsephandlewithargsmap the inner loop that iterates through the map entries calls ofnodeputnew to free the reference acquired by the previous iteration of the inner loop. Thi...

CVE-2023-52681

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Free sfsinfo on unmount Now that we allocate a sfsinfo struct on fs context creation, we should ensure that we free it again when the superblock goes away...

CVE-2023-52674

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add clamp in scarlett2mixerctlput Ensure the value passed to scarlett2mixerctlput is between 0 and SCARLETT2MIXERMAXVALUE so we don't attempt to access outside scarlett2mixervalues...

CVE-2023-52695

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check writeback connectors in createvalidatestreamforsink WHY & HOW This is to check connector type to avoid unhandled null pointer for writeback connectors...

CVE-2024-35847

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in itsvpeirqdomainalloc causes a double free when itsvpeinit fails after successfully allocating at least one interrupt. This happens because...