Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains security vulnerabilities. These vulnerabilities stem from operations on the firmwarerevision and firmwaredate files, where the debugfsfileget function is not called, and the debugfsremoverecursive function does not wait for ongoing reads. Additionally, when...

CVE-2024-39465 media: mgb4: Fix double debugfs remove

In the Linux kernel, the following vulnerability has been resolved: media: mgb4: Fix double debugfs remove Fixes an error where debugfsremoverecursive is called first on a parent directory and then again on a child which causes a kernel panic. hverkuil: added Fixes/Cc tags...

CVE-2024-39465 media: mgb4: Fix double debugfs remove

In the Linux kernel, the following vulnerability has been resolved: media: mgb4: Fix double debugfs remove Fixes an error where debugfsremoverecursive is called first on a parent directory and then again on a child which causes a kernel panic. hverkuil: added Fixes/Cc tags...

CVE-2024-39465: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: mgb4: Fix double debugfs remove Fixes an error where debugfsremoverecursive is called first on a parent directory and then again on a child which causes a kernel panic. hverkuil: added Fixes/Cc tags...

CVE-2023-52808

Summary: CVE-2023-52808 affects the Linux kernel driver path for the Hisilicon SAS host bus adapter (hisi_sas). The root cause is that after a failed init path, debugfs_remove_recursive() is called but debugfs_dir is not set to NULL, causing a NULL pointer dereference during device removal. Impac...