CLSA-2024-1715949385 kernel: Fix of 12 CVEs

fs,hugetlb: fix NULL pointer dereference in hugetlbsfillsuper CVE-2024-0841 - bpf: Fix incorrect verifier pruning due to missing register precision taints CVE-2023-2163 - bpf: Fix hashtab overflow check on 32-bit arches CVE-2024-26884 - RDMA/mlx5: Fix fortify source warning while accessing Eth...

CVE-2024-27433 clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clkmt8135apmixedprobe 'clkdata' is allocated with mtkdevmallocclkdata. So calling mtkfreeclkdata explicitly in the remove function would lead to a double-free. Remov...

CVE-2024-27433 clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clkmt8135apmixedprobe 'clkdata' is allocated with mtkdevmallocclkdata. So calling mtkfreeclkdata explicitly in the remove function would lead to a double-free. Remov...

CVE-2024-27433

CVE-2024-27433 affects the Linux kernel clock driver: mediatek mt7622-apmixedsys. The root cause was an error path where clk_data, allocated via mtk_devm_alloc_clk_data(), could be double-freed if mtk_free_clk_data() remained in the remove path. The fix removes this redundant deallocation in the ...

OESA-2024-1618 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tunfreenetdev Avoid double free in tunfreenetdev by moving the dev-tstats and tun-security allocs to a new ndoinit routine tunnetinit...

SUSE SLES12: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2024:1646-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1646-1 advisory. The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

The vulnerability of the `tcpm_port_unregister_pd()` function in the `drivers/usb/typec/tcpm/tcpm.c` file of the Linux kernel-based Type-C controller driver allows a attacker to cause a service failure or exert other adverse effects.

The vulnerability of the tcpmportunregisterpd function in the drivers/usb/typec/tcpm/tcpm.c file of the Linux kernel’s Type-C controller driver is related to the re-liberation of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure or have othe...

CVE-2023-44247

A double free vulnerability CWE-415 vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests...

CVE-2023-44247

A double free vulnerability CWE-415 vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests...

CVE-2023-52384

Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52384

Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52383

Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52383

Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability...

PT-2024-3553

Name of the Vulnerable Software and Affected Versions FortiOS versions prior to 7.0.0 Description The issue is related to a double free vulnerability, which may allow a privileged attacker to execute unauthorized code or commands. This can be achieved via crafted HTTP or HTTPS requests...

Double free with double usage of json_object_put

...

F5 Networks BIG-IP : libxml2 vulnerability (K000139594)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.2.2 / 17.5.0. It is, therefore, affected by a vulnerability as referenced in the K000139594 advisory. An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2024-12378)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12378 advisory. - netfilter: nftables: reject QUEUE/DROP verdict parameters Florian Westphal Orabug: 36466544 CVE-2024-1086 Tenable has extracted the preceding description blo...

OESA-2024-1569 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tunfreenetdev Avoid double free in tunfreenetdev by moving the dev-tstats and tun-security allocs to a new ndoinit routine tunnetinit...

CVE-2023-52384

Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52384

CVE-2023-52384 describes a double-free vulnerability in the RSMC module. The metadata and related sources indicate the impact is on availability, with a potential local attack vector (attack vector: LOCAL; complexity: LOW; privileges: LOW; UI: NONE; scope: UNCHANGED). Public entries reference Hua...