Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from an improper locking vulnerability that stems from the use of spinlock in an interruptible context, which could lead to a deadlock. The vulnerability c...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver bsc1203332. CVE-2022-48742: rtnetlink: make sure to refresh masterdev/mops in...

PT-2025-20494

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A long-standing race condition in the Linux kernel's PCI hotplug functionality can lead to a deadlock when hot-removing nested PCI hotplug ports. This issue occurs when a parent hotplug...

kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng

A vulnerability was found in the hwrng component of the Linux kernel, which caused a deadlock when reading from /dev/hwrng into memory and mmap-ed from /dev/hwrng. This issue is triggered by a recursive read during a page fault and allows a local, authenticated attacker to cause a denial of servi...

kernel: scsi: megaraid_sas: Fix for a potential deadlock

In the Linux kernel, the following vulnerability has been resolved: scsi: megaraidsas: Fix for a potential deadlock This fixes a 'possible circular locking dependency detected' warning CPU0 CPU1 ---- ---- lock&instance-resetmutex; lock&shost-scanmutex; lock&instance-resetmutex;...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

kernel: scsi: megaraid_sas: Fix for a potential deadlock

In the Linux kernel, the following vulnerability has been resolved: scsi: megaraidsas: Fix for a potential deadlock This fixes a 'possible circular locking dependency detected' warning CPU0 CPU1 ---- ---- lock&instance-resetmutex; lock&shost-scanmutex; lock&instance-resetmutex;...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-56694)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56694 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47143)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47143 advisory. - In the Linux kernel, the following vulnerability has been resolved: dma-debug: fix a possible deadlock on...

Unbreakable Enterprise kernel security update

5.4.17-2136.341.3.1 - Revert 'NFSD: Limit the number of concurrent async COPY operations' Sherry Yang Orabug: 37667080 5.4.17-2136.341.3 - iouring: fix possible deadlock in ioregisteriowqmaxworkers Hagar Hemdan Orabug: 37565787 - iouring/rw: fix missing NOWAIT check for ODIRECT start write Jens...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56694)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56694 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-43098)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43098 advisory. - In the Linux kernel, the following vulnerability has been resolved: i3c: Use i3cdev-desc-info instead of...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-57807)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57807 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: megaraidsas: Fix for a potential...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: HID: core: zero-initialize the report buffer CVE-2024-50302 kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices CVE-2024-53197 kernel: scsi:...

kernel security update

4.18.0-553.44.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock

...

scsi: megaraid_sas: Fix for a potential deadlock

...

dma-debug: fix a possible deadlock on radix_lock

...

SUSE CVE-2024-58059

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix deadlock during uvcprobe If uvcprobe fails, it can end up calling uvcstatusunregister before uvcstatusinit is called. Fix this by checking if dev-status is NULL or not in uvcstatusunregister...

SUSE CVE-2024-58071

In the Linux kernel, the following vulnerability has been resolved: team: prevent adding a device which is already a team device lower Prevent adding a device which is already a team device lower, e.g. adding veth0 if vlan1 was already added and veth0 is a lower of vlan1. This is not useful in...