CVE-2024-43842 wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Fix array index mistake in rtw89stainfogetiter In rtw89stainfogetiter 'status-hegi' is compared to array size. But then 'rate-hegi' is used as array index instead of 'status-hegi'. This can lead to go beyond array...

CVE-2024-43839 bna: adjust 'name' buf size of bna_tcb and bna_ccb structures

In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bnatcb and bnaccb structures To have enough space to write all possible sprintf args. Currently 'name' size is 16, but the first '%s' specifier may already need at least 16 characters, since...

CVE-2024-43839

CVE-2024-43839 : Linux kernel vulnerability fixed by increasing the internal name buffer in bna_tcb and bna_ccb from 16 to accommodate longer sprintf arguments, and replacing sprintf with snprintf. The change accounts for bnad->netdev->name and expected expansions for %d specifiers, using B...

CVE-2024-43839 bna: adjust 'name' buf size of bna_tcb and bna_ccb structures

In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bnatcb and bnaccb structures To have enough space to write all possible sprintf args. Currently 'name' size is 16, but the first '%s' specifier may already need at least 16 characters, since...

CVE-2024-43823 PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()

In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix NULL pointer dereference in case of DT error in kspciesetuprcappregs If IORESOURCEMEM is not provided in Device Tree due to any error, resourcelistfirsttype will return NULL and pciparserequestofpciranges will...

CVE-2024-43823 PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()

In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix NULL pointer dereference in case of DT error in kspciesetuprcappregs If IORESOURCEMEM is not provided in Device Tree due to any error, resourcelistfirsttype will return NULL and pciparserequestofpciranges will...

CVE-2024-43823 PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()

In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix NULL pointer dereference in case of DT error in kspciesetuprcappregs If IORESOURCEMEM is not provided in Device Tree due to any error, resourcelistfirsttype will return NULL and pciparserequestofpciranges will...

CVE-2024-43818

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: Adjust error handling in case of absent codec device acpigetfirstphysicalnode can return NULL in several cases no such device, ACPI table error, reference count drop to 0, etc. Existing check just emit error message, b...

CVE-2024-42277

In the Linux kernel, the following vulnerability has been resolved: iommu: sprd: Avoid NULL deref in sprdiommuhwen In sprdiommucleanup before calling function sprdiommuhwen dom-sdev is equal to NULL, which leads to null dereference. Found by Linux Verification Center linuxtesting.org with SVACE...

CVE-2024-42277

In the Linux kernel, the following vulnerability has been resolved: iommu: sprd: Avoid NULL deref in sprdiommuhwen In sprdiommucleanup before calling function sprdiommuhwen dom-sdev is equal to NULL, which leads to null dereference. Found by Linux Verification Center linuxtesting.org with SVACE...

CVE-2024-42277 iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en

In the Linux kernel, the following vulnerability has been resolved: iommu: sprd: Avoid NULL deref in sprdiommuhwen In sprdiommucleanup before calling function sprdiommuhwen dom-sdev is equal to NULL, which leads to null dereference. Found by Linux Verification Center linuxtesting.org with SVACE...

CVE-2024-42277 iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en

In the Linux kernel, the following vulnerability has been resolved: iommu: sprd: Avoid NULL deref in sprdiommuhwen In sprdiommucleanup before calling function sprdiommuhwen dom-sdev is equal to NULL, which leads to null dereference. Found by Linux Verification Center linuxtesting.org with SVACE...

CVE-2024-42277

In the Linux kernel, the following vulnerability has been resolved: iommu: sprd: Avoid NULL deref in sprdiommuhwen In sprdiommucleanup before calling function sprdiommuhwen dom-sdev is equal to NULL, which leads to null dereference. Found by Linux Verification Center linuxtesting.org with SVACE...

CVE-2024-42138

In the Linux kernel, the following vulnerability has been resolved: mlxsw: corelinecards: Fix double memory deallocation in case of invalid INI file In case of invalid INI file mlxswlinecardtypesinit deallocates memory but doesn't reset pointer to NULL and returns 0. In case of any error occurred...

CVE-2024-42092

In the Linux kernel, the following vulnerability has been resolved: gpio: davinci: Validate the obtained number of IRQs Value of pdata-gpiounbanked is taken from Device Tree. In case of broken DT due to any error this value can be any. Without this value validation there can be out of chips-irqs...

CVE-2024-42092 gpio: davinci: Validate the obtained number of IRQs

In the Linux kernel, the following vulnerability has been resolved: gpio: davinci: Validate the obtained number of IRQs Value of pdata-gpiounbanked is taken from Device Tree. In case of broken DT due to any error this value can be any. Without this value validation there can be out of chips-irqs...

CVE-2024-42092

CVE-2024-42092 — Linux kernel GPIO (DaVinci) vulnerability Affected: Linux kernel (gpio: davinci) where pdata->gpio_unbanked is read from the Device Tree. If DT is broken, this value may be invalid and could cause out-of-bounds access to chips->irqs in davinci_gpio_probe(). Root cause: lack...

CVE-2024-42092 gpio: davinci: Validate the obtained number of IRQs

In the Linux kernel, the following vulnerability has been resolved: gpio: davinci: Validate the obtained number of IRQs Value of pdata-gpiounbanked is taken from Device Tree. In case of broken DT due to any error this value can be any. Without this value validation there can be out of chips-irqs...

CVE-2022-48863

A vulnerability was found in the dsppipelinebuild function in the Linux kernel's mISDN driver, which can cause a memory leak when the function allocates memory with kstrdup and subsequently modifies the pointer with strsep, leading to a scenario where kfree is called on a NULL pointer. Mitigation...

CVE-2024-40939

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipcdevlinkcreateregion, previously created regions delete process starts from tainted pointer which actually holds err...