CVE-2024-53193

CVE-2024-53193 – Linux kernel (Loongson2 clock) vulnerability : A memory corruption bug occurred in loongson2_clk_provider where a flexible array member (clk_hw_onecell_data.hws) was placed in the middle of the provider struct, causing clp->clk_lock to be overwritten during allocation and writ...

CVE-2024-53192 clk: clk-loongson2: Fix potential buffer overflow in flexible-array member access

In the Linux kernel, the following vulnerability has been resolved: clk: clk-loongson2: Fix potential buffer overflow in flexible-array member access Flexible-array member hws in struct clkhwonecelldata is annotated with the countedby attribute. This means that when memory is allocated for this...

CVE-2024-53192

In the Linux kernel, the following vulnerability has been resolved: clk: clk-loongson2: Fix potential buffer overflow in flexible-array member access Flexible-array member hws in struct clkhwonecelldata is annotated with the countedby attribute. This means that when memory is allocated for this...

SUSE CVE-2024-53154

In the Linux kernel, the following vulnerability has been resolved: clk: clk-apple-nco: Add NULL check in applncoprobe Add NULL check in applncoprobe, to handle kernel NULL pointer dereference error...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a memory corruption in the struct loongson2clkprovider structure in the clk:clk-loongson2 module...

CVE-2024-53154

In the Linux kernel, the following vulnerability has been resolved: clk: clk-apple-nco: Add NULL check in applncoprobe Add NULL check in applncoprobe, to handle kernel NULL pointer dereference error...

UBUNTU-CVE-2024-53154

In the Linux kernel, the following vulnerability has been resolved: clk: clk-apple-nco: Add NULL check in applncoprobe Add NULL check in applncoprobe, to handle kernel NULL pointer dereference error...

CVE-2024-53158

CVE-2024-53158 relates to the Linux kernel: in soc: qcom: geni-se, an array underflow in geni_se_clk_tbl_get() occurred because a loop’s break condition using clk_round_rate() poorly handled the first iteration, causing reads before the start of these->clk_perf_tbl[]. The issue was fixed in th...

CVE-2024-53158 soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: geni-se: fix array underflow in geniseclktblget This loop is supposed to break if the frequency returned from clkroundrate is the same as on the previous iteration. However, that check doesn't make sense on the first...

CVE-2024-53154 clk: clk-apple-nco: Add NULL check in applnco_probe

In the Linux kernel, the following vulnerability has been resolved: clk: clk-apple-nco: Add NULL check in applncoprobe Add NULL check in applncoprobe, to handle kernel NULL pointer dereference error...

CVE-2024-53154 clk: clk-apple-nco: Add NULL check in applnco_probe

In the Linux kernel, the following vulnerability has been resolved: clk: clk-apple-nco: Add NULL check in applncoprobe Add NULL check in applncoprobe, to handle kernel NULL pointer dereference error...

The vulnerability of the clk_dvp_probe() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the clkdvpprobe function in the drivers/clk/bcm/clk-bcm2711-dvp.c kernel module of the Linux operating system is related to the use of memory before initialization. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the clk-mt2701 component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the clk-mt2701 component in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the clk-mt7629-eth component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the clk-mt7629-eth component in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the clk-mt6779 component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the clk-mt6779 component in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of the functions mtk_topckgen_init(), mtk_infrasys_init_early(), and mtk_infrasys_init() of the clk-mt6797 component in Linux operating systems allow a hacker to cause a service failure.

The vulnerabilities of the functions mtktopckgeninit, mtkinfrasysinitearly, and mtkinfrasysinit of the clk-mt6797 kernel component in Linux operating systems are related to pointer arithmetic errors. Exploiting these vulnerabilities can allow attackers to cause system failures...

The vulnerability of the functions clk_mt6765_apmixed_probe(), clk_mt6765_top_probe(), and clk_mt6765_ifr_probe() of the clk-mt6765 component in Linux operating systems allows a hacker to cause system failures.

The vulnerability of the functions clkmt6765apmixedprobe, clkmt6765topprobe, and clkmt6765ifrprobe of the clk-mt6765 component in Linux operating systems is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the clk component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the clk component in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the clkcoreget function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the clk component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the clk component in the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: clk: Get runtime PM before walking tree for clk_summary

In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking tree for clksummary The Linux kernel CVE team has assigned CVE-2024-27003 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050146-CVE-2024-27003-c862@gregkh/T...