CVE-2022-49320 dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type

In the Linux kernel, the following vulnerability has been resolved: dmaengine: zynqmpdma: In struct zynqmpdmachan fix descsize data type In zynqmpdmaalloc/freechanresources functions there is a potential overflow in the below expressions. dmaalloccoherentchan-dev, 2 chan-descsize ZYNQMPDMANUMDESC...

CLSA-2025-1740131776 Fix CVE(s): CVE-2024-12747

SECURITY UPDATE: race condition during rsync's handling of symbolic links - debian/patches/CVE-2024-12747.patch: prevent symlink race preventing a normal file from being replaced by a symlink - CVE-2024-12747 debian/rules, debian/patches/series: use series file to manage patches...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: jfs: added a check to prevent array-index-out-of-bounds in dbAdjTree. When the value of lp is 0 at the beginning of the for loop, it will become negative during the next assignment, and we should take appropriate measures to avoi...

CVE-2022-39395

Vela is a Pipeline Automation CI/CD framework built on Linux container technology written in Golang. In Vela Server and Vela Worker prior to version 0.16.0 and Vela UI prior to version 0.17.0, some default configurations for Vela allow exploitation and container breakouts. Users should upgrade to...

AZL-68576 CVE-2024-57899 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix mbss changed flags corruption on 32 bit systems On 32-bit systems, the size of an unsigned long is 4 bytes, while a u64 is 8 bytes. Therefore, when using oreachsetbitbit, &bits, sizeofchanged BITSPERBYTE, the...

CVE-2024-57899 wifi: mac80211: fix mbss changed flags corruption on 32 bit systems

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix mbss changed flags corruption on 32 bit systems On 32-bit systems, the size of an unsigned long is 4 bytes, while a u64 is 8 bytes. Therefore, when using oreachsetbitbit, &bits, sizeofchanged BITSPERBYTE, the...

CVE-2024-57843

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix overflow inside virtnetrqalloc When the frag just got a page, then may lead to regression on VM. Specially if the sysctl net.core.highorderallocdisable value is 1, then the frag always get a page when do refill...

CVE-2024-57843 virtio-net: fix overflow inside virtnet_rq_alloc

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix overflow inside virtnetrqalloc When the frag just got a page, then may lead to regression on VM. Specially if the sysctl net.core.highorderallocdisable value is 1, then the frag always get a page when do refill...

CVE-2024-54193 accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal()

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix WARN in ivpuipcsendreceiveinternal Move pmruntimesetactive to ivpupminit so when ivpuipcsendreceiveinternal is executed before ivpupmenable it already has correct runtime state, even if last resume was not...

CVE-2024-53682

In the Linux kernel, the following vulnerability has been resolved: regulator: axp20x: AXP717: set rampdelay AXP717 datasheet says that regulator ramp delay is 15.625 us/step, which is 10mV in our case. Add a AXPDESCRANGESDELAY macro and update AXPDESCRANGES macro to expand to AXPDESCRANGESDELAY...

kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust

A divide by zero flaw was found in the Linux kernel's Multipath TCP MPTCP. This issue could allow a remote user to crash the system...

UBUNTU-CVE-2024-56750

In the Linux kernel, the following vulnerability has been resolved: erofs: fix blksize sblocksize,bits directly for file-backed mounts when the fs block size is smaller than PAGESIZE. Previously, EROFS used sbsetblocksize, which caused a panic if bdev-backed mounts is not used...

CVE-2024-56750 erofs: fix blksize < PAGE_SIZE for file-backed mounts

In the Linux kernel, the following vulnerability has been resolved: erofs: fix blksize sblocksize,bits directly for file-backed mounts when the fs block size is smaller than PAGESIZE. Previously, EROFS used sbsetblocksize, which caused a panic if bdev-backed mounts is not used...

CVE-2024-56750 erofs: fix blksize < PAGE_SIZE for file-backed mounts

In the Linux kernel, the following vulnerability has been resolved: erofs: fix blksize sblocksize,bits directly for file-backed mounts when the fs block size is smaller than PAGESIZE. Previously, EROFS used sbsetblocksize, which caused a panic if bdev-backed mounts is not used...

CVE-2024-56750 erofs: fix blksize < PAGE_SIZE for file-backed mounts

In the Linux kernel, the following vulnerability has been resolved: erofs: fix blksize sblocksize,bits directly for file-backed mounts when the fs block size is smaller than PAGESIZE. Previously, EROFS used sbsetblocksize, which caused a panic if bdev-backed mounts is not used...

CVE-2024-56710 ceph: fix memory leak in ceph_direct_read_write()

In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in cephdirectreadwrite The bvecs array which is allocated in itergetbvecsalloc is leaked and pages remain pinned if cephallocsparseextmap fails. There is no need to delay the allocation of sparseext map unti...

CVE-2024-56618

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: gpcv2: Adjust delay after power up handshake The udelay5 is not enough, sometimes below kernel panic still be triggered: 4.012973 Kernel panic - not syncing: Asynchronous SError Interrupt 4.012976 CPU: 2 UID: 0 PID...

DEBIAN-CVE-2024-56618

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: gpcv2: Adjust delay after power up handshake The udelay5 is not enough, sometimes below kernel panic still be triggered: 4.012973 Kernel panic - not syncing: Asynchronous SError Interrupt 4.012976 CPU: 2 UID: 0 PID...

CVE-2024-56618 pmdomain: imx: gpcv2: Adjust delay after power up handshake

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: gpcv2: Adjust delay after power up handshake The udelay5 is not enough, sometimes below kernel panic still be triggered: 4.012973 Kernel panic - not syncing: Asynchronous SError Interrupt 4.012976 CPU: 2 UID: 0 PID...

CVE-2024-56618

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: gpcv2: Adjust delay after power up handshake The udelay5 is not enough, sometimes below kernel panic still be triggered: 4.012973 Kernel panic - not syncing: Asynchronous SError Interrupt 4.012976 CPU: 2 UID: 0 PID...