Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing user-space copy operations on unprivileged devices, which could lead to security risks...

CVE-2024-50080: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ublk: don't allow user copy for unprivileged device UBLKFUSERCOPY requires userspace to call write on ublk char device for filling request buffer, and unprivileged device can't be trusted. So don't allow user copy for unprivilege...

PT-2024-33913

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel related to the ublk module. The issue concerns the UBLK F USER COPY feature, which requires userspace to call write on the ublk...

PT-2024-34056

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: The issue is related to the copy page from iter atomic function in the Linux kernel, which can cause a warning and then hang when CONFIG DEBUG KMAP LOCAL FORCE MAP is enabled with highmem on...

D-Link DIR-605L Router Data Compromise

The vulnerability of the formSetWANWizard51 and formSetWANWizard52 functions in the D-Link DIR-605L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

SUSE CVE-2024-49974

In the Linux kernel, the following vulnerability has been resolved: NFSD: Limit the number of concurrent async COPY operations Nothing appears to limit the number of concurrent async COPY operations that clients can start. In addition, AFAICT each async COPY can copy an unlimited number of 4MB...

PT-2024-33928

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A security issue has been identified in the Linux kernel, specifically in the nouveau/dmem component. The nouveau dmem copy one function does not track whether the copy push command is...

SUSE CVE-2024-49942

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Prevent null pointer access in xemigratecopy xemigratecopy designed to copy content of TTM resources. When source resource is null, it will trigger a NULL pointer dereference in xemigratecopy. To avoid this situation,...

CVE-2024-48426: Buffer Copy without Checking Size of Input

A segmentation fault SEGV was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an invalid memory address 0x1000c9714971...

SUSE CVE-2024-49980

In the Linux kernel, the following vulnerability has been resolved: vrf: revert "vrf: Remove unnecessary RCU-bh critical section" This reverts commit 504fc6f4f7f681d2a03aa5f68aad549d90eab853. devqueuexmitnit is expected to be called with BH disabled. devqueuexmit has the following: / Disable soft...

PT-2024-34129

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.0-rc3-custom-gd95d9a31aceb Description: The issue is related to a suspicious RCU usage warning in the ip tunnel find function. The per-netns IP tunnel hash table is protected by the RTNL mutex, and ip tunne...

PT-2024-36986

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the Linux kernel, specifically the powerpc/mm/fault component, where a problem with kfence page fault reporting has been resolved. The copy from kernel nofault functio...

TP-Link TL-WDR7660 DoS

The vulnerability of the wacWhitelistJsonToBin function in the microprogramming software for TP-Link TL-WDR7660 routers stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to trigger a...

D-Link DIR-605L Router Code Execution

The vulnerability of the formWlanWizardSetup function /goform/formWlanWizardSetup in the D-Link DIR-605L router software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

D-Link DIR-605L Router Code Execution

The vulnerability of the formSetPassword function /goform/formSetPassword in the D-Link DIR-605L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code usi...

CVE-2024-49974

In the Linux kernel, the following vulnerability has been resolved: NFSD: Limit the number of concurrent async COPY operations Nothing appears to limit the number of concurrent async COPY operations that clients can start. In addition, AFAICT each async COPY can copy an unlimited number of 4MB...

SUSE CVE-2024-50005

In the Linux kernel, the following vulnerability has been resolved: mac802154: Fix potential RCU dereference issue in mac802154scanworker In the mac802154scanworker function, the scanreq-type field was accessed after the RCU read-side critical section was unlocked. According to RCU usage rules,...

DEBIAN-CVE-2024-50046

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Prevent NULL-pointer dereference in nfs42completecopies On the node of an NFS client, some files saved in the mountpoint of the NFS server were copied to another location of the same NFS server. Accidentally, the...

UBUNTU-CVE-2022-48994

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix function prototype mismatch in sndseqexpandvarevent With clang's kernel control flow integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer prototype to make sure...

UBUNTU-CVE-2024-50005

In the Linux kernel, the following vulnerability has been resolved: mac802154: Fix potential RCU dereference issue in mac802154scanworker In the mac802154scanworker function, the scanreq-type field was accessed after the RCU read-side critical section was unlocked. According to RCU usage rules,...