USN-6994-1 netty vulnerabilities

It was discovered that Netty did not properly sanitize its input parameters. A remote attacker could possibly use this issue to cause a crash. CVE-2023-34462 It was discovered that Netty incorrectly handled request cancellation. A remote attacker could possibly use this issue to cause Netty to...

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to the cancellation of the registration of the flowtable before it is freed using the nftablesflowtableDestroy function. Exploiting this vulnerability can allow an attacker to cause a service failure...

UBUNTU-CVE-2024-42313

In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free in vdecclose There appears to be a possible use after free with vdecclose. The firmware will add buffer release work to the work queue through HFI callbacks as a normal part of decoding. Randomly...

bpf: Fail bpf_timer_cancel when callback is being cancelled

...

kernel: mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work

CVE-2024-35852 addresses a memory leak in the Linux kernel's mlxsw driver, specifically within the Spectrum ACL TCAM module. The issue occurs when rehash work is canceled while pending, leading to allocated hints not being freed properly. This results in a memory leak that can degrade system...

kernel: mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work

CVE-2024-35852 addresses a memory leak in the Linux kernel's mlxsw driver, specifically within the Spectrum ACL TCAM module. The issue occurs when rehash work is canceled while pending, leading to allocated hints not being freed properly. This results in a memory leak that can degrade system...

kernel: mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work

CVE-2024-35852 addresses a memory leak in the Linux kernel's mlxsw driver, specifically within the Spectrum ACL TCAM module. The issue occurs when rehash work is canceled while pending, leading to allocated hints not being freed properly. This results in a memory leak that can degrade system...

kernel: mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work

CVE-2024-35852 addresses a memory leak in the Linux kernel's mlxsw driver, specifically within the Spectrum ACL TCAM module. The issue occurs when rehash work is canceled while pending, leading to allocated hints not being freed properly. This results in a memory leak that can degrade system...

kernel: mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work

CVE-2024-35852 addresses a memory leak in the Linux kernel's mlxsw driver, specifically within the Spectrum ACL TCAM module. The issue occurs when rehash work is canceled while pending, leading to allocated hints not being freed properly. This results in a memory leak that can degrade system...

CVE-2024-42239

A denial of service flaw was found in the linux kernel based on mutual exclusion locking. Two bpftimercancel calls wwill wait for the other callback to finish executing, resulting in a deadlock situation...

SUSE CVE-2024-42239

In the Linux kernel, the following vulnerability has been resolved: bpf: Fail bpftimercancel when callback is being cancelled Given a schedule: timer1 cb timer2 cb bpftimercanceltimer2; bpftimercanceltimer1; Both bpftimercancel calls would wait for the other callback to finish executing,...

UBUNTU-CVE-2024-42239

In the Linux kernel, the following vulnerability has been resolved: bpf: Fail bpftimercancel when callback is being cancelled Given a schedule: timer1 cb timer2 cb bpftimercanceltimer2; bpftimercanceltimer1; Both bpftimercancel calls would wait for the other callback to finish executing,...

Problems with Georgia’s Voter Registration Portal

Its possible to cancel other peoples voter registrations: On Friday, four days after Georgia Democrats began warning that bad actors could abuse the states new online portal for canceling voter registrations, the Secretary of States Office acknowledged to ProPublica that it had identified multipl...

kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel

A use-after-free flaw was found in the Linux kernel’s BPF functionality. This flaw allows a local user to crash the system...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates in the bpf module during a bpftimercancel call, which may result in a deadlock if the callback is being canceled...

DEBIAN-CVE-2024-41063

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: cancel all works upon hciunregisterdev syzbot is reporting that calling hcireleasedev from hcierrorreset due to hcidevput from hcierrorreset can cause deadlock at destroyworkqueue, for hcierrorreset is called...

DEBIAN-CVE-2024-41045

In the Linux kernel, the following vulnerability has been resolved: bpf: Defer work in bpftimercancelandfree Currently, the same case as previous patch two timer callbacks trying to cancel each other can be invoked through bpfmapupdateelem as well, or more precisely, freeing map elements containi...

AZL-57743 CVE-2024-41023 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix taskstruct reference leak During the execution of the following stress test with linux-rt: stress-ng --cyclic 30 --timeout 30 --minimize --quiet kmemleak frequently reported a memory leak concerning the...

AZL-57740 CVE-2024-41023 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix taskstruct reference leak During the execution of the following stress test with linux-rt: stress-ng --cyclic 30 --timeout 30 --minimize --quiet kmemleak frequently reported a memory leak concerning the...

UBUNTU-CVE-2024-41023

In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix taskstruct reference leak During the execution of the following stress test with linux-rt: stress-ng --cyclic 30 --timeout 30 --minimize --quiet kmemleak frequently reported a memory leak concerning the...