Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-915)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-915 advisory. In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero CVE-2024-26982 In the Linux kernel, the following...

CVE-2024-56549 affecting package kernel for versions less than 6.6.78.1-1

CVE-2024-56549 affecting package kernel for versions less than 6.6.78.1-1. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2024-56549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix NULL pointer dereference in object-file At present, the object-file has the...

CVE-2024-56549

creationtimestamp| type| source ---|---|--- 2024-12-27 14:19:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lec6nljrqw22 2024-12-27 15:59:50+00:00| seen| https://t.me/cvedetector/13746...

CVE-2024-56549

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix NULL pointer dereference in object-file At present, the object-file has the NULL pointer dereference problem in ondemand-mode. The root cause is that the allocated fd and object-file lifetime are inconsistent, and...

CVE-2024-56549

CVE-2024-56549 affects the Linux kernel cachefiles subsystem, where object->file can dereference a NULL pointer in ondemand mode due to inconsistent lifetime between the allocated fd and object->file. The root cause is the lifetime mismatch of object->file and its fd, leading to a NULL p...