CVE-2024-26963 usb: dwc3-am62: fix module unload/reload behavior

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3-am62: fix module unload/reload behavior As runtime PM is enabled, the module can be runtime suspended when .remove is called. Do a pmruntimegetsync to make sure module is active before doing any register operations. Doi...

CVE-2024-26967: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...

CVE-2024-26966: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...

CVE-2024-26965: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...

CVE-2024-26970: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...

CVE-2024-27039: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: clk: hisilicon: hi3559a: Fix an erroneous devmkfree 'pclk' is an array allocated just before the for loop for all clk that need to be registered. It is incremented at each loop iteration. If a clkregister call fails, 'pclk' may...

CVE-2024-26968: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...

CVE-2024-26971: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...

PT-2024-8926 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the clk dvp probe function in the Linux kernel, where the -num member is assigned after -hws has been accessed. This can cause an array-index-out-of-bounds...

PT-2024-29180

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock has been observed in the Linux kernel when adding the tlv320aic32x4 audio codec to the system. This occurs because the clock provider needs to access i2c, which in turn requir...

SUSE CVE-2024-26879

In the Linux kernel, the following vulnerability has been resolved: clk: meson: Add missing clocks to axgclkregmaps Some clocks were missing from axgclkregmaps, which caused kernel panic during cat /sys/kernel/debug/clk/clksummary 57.349402 Unable to handle kernel NULL pointer dereference at...

CVE-2024-26879

In the Linux kernel, the following vulnerability has been resolved: clk: meson: Add missing clocks to axgclkregmaps Some clocks were missing from axgclkregmaps, which caused kernel panic during cat /sys/kernel/debug/clk/clksummary 57.349402 Unable to handle kernel NULL pointer dereference at...

CVE-2021-47205: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: Unregister clocks/resets when unbinding Currently, unbinding a CCU driver unmaps the device's MMIO region, while leaving its clocks/resets and their providers registered. This can cause a page fault later when some...

SUSE CVE-2024-26711

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4130: zero-initialize clock init data The clkinitdata struct does not have all its members initialized, causing issues when trying to expose the internal clock on the CLK pin. Fix this by zero-initializing the...

PT-2024-7830

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The vulnerability is related to a classic ABBA deadlock in the Linux kernel's clk component. It occurs when a thread is walking the clk tree and calling clk pm runtime get to power on devices...

PT-2024-7853

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's clk component, where a deadlock can occur if devices are not properly runtime resumed before printing the clk summary through debugfs. This can...

DEBIAN-CVE-2024-26711

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4130: zero-initialize clock init data The clkinitdata struct does not have all its members initialized, causing issues when trying to expose the internal clock on the CLK pin. Fix this by zero-initializing the...

CVE-2024-26711

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4130: zero-initialize clock init data The clkinitdata struct does not have all its members initialized, causing issues when trying to expose the internal clock on the CLK pin. Fix this by zero-initializing the...

CVE-2024-26711: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4130: zero-initialize clock init data The clkinitdata struct does not have all its members initialized, causing issues when trying to expose the internal clock on the CLK pin. Fix this by zero-initializing the...

CVE-2024-26655: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: Fix memory leak in posixclockopen If the clk ops.open function returns an error, we don't release the pccontext we allocated for this clock. Re-organize the code slightly to make it all more obvious...