CVE-2024-58077

CVE-2024-58077 affects the Linux kernel ASoC: soc-pcm path. The root cause is invoking soc_pcm_ret() on the .prepare callback, which previously ignored -EINVAL to avoid user-space DoS via logs. The fix changes behavior to stop using soc_pcm_ret() in the .prepare callback, addressing the invalid-p...

CVE-2024-58077 ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: don't use socpcmret on .prepare callback commit 1f5664351410 "ASoC: lower "no backend DAIs enabled for ... Port" log severity" ignores -EINVAL error message on common socpcmret. It is used from many functions,...

CVE-2024-58067 clk: mmp: pxa1908-mpmu: Fix a NULL vs IS_ERR() check

In the Linux kernel, the following vulnerability has been resolved: clk: mmp: pxa1908-mpmu: Fix a NULL vs ISERR check The devmkzalloc function returns NULL on error, not error pointers. Update the check to match...

CVE-2024-58067

The CVE-2024-58067 issue affects the Linux kernel in the clk: mmp: pxa1908-mpmu path. Root cause: an incorrect NULL vs IS_ERR() check around devm_kzalloc() where NULL is returned on error; the check has been updated to match. Impact, as per listed metadata, is availability impact HIGH with no con...

CVE-2024-58067

In the Linux kernel, the following vulnerability has been resolved: clk: mmp: pxa1908-mpmu: Fix a NULL vs ISERR check The devmkzalloc function returns NULL on error, not error pointers. Update the check to match...

CVE-2024-58063

CVE-2024-58063 affects the Linux kernel wireless stack (rtlwifi). The described issue is memory leaks and invalid access on probe error paths in the rtlwifi PCI handling, with deinitialization performed in reverse order when probe fails. Specifically, when init_sw_vars fails, rtl_deinit_core shou...

CVE-2024-58056 remoteproc: core: Fix ida_free call while not allocated

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Fix idafree call while not allocated In the rprocalloc function, on error, putdevice&rproc-dev is called, leading to the call of the rproctyperelease function. An error can occurs before idaalloc is called. In...

CVE-2024-58056

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Fix idafree call while not allocated In the rprocalloc function, on error, putdevice&rproc-dev is called, leading to the call of the rproctyperelease function. An error can occurs before idaalloc is called. In...

CVE-2024-58056

The CVE-2024-58056 entry documents a Linux kernel remoteproc issue in which rproc_alloc() can trigger ida_free() via rproc_type_release() on an error path before ida_alloc() has been called. The underlying cause is rproc->index being initialized to 0, making rproc->index >= 0 true when t...

CVE-2024-58056 remoteproc: core: Fix ida_free call while not allocated

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Fix idafree call while not allocated In the rprocalloc function, on error, putdevice&rproc-dev is called, leading to the call of the rproctyperelease function. An error can occurs before idaalloc is called. In...

Linux Distros Unpatched Vulnerability : CVE-2024-56769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000writereg Syzbot reports 1 an uninitialized value issue found by KMSAN in dib3000readreg. Local u8 rb...

Linux Distros Unpatched Vulnerability : CVE-2024-56540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery invocation during probe and resume Refactor IPC send and receiv...

Linux Distros Unpatched Vulnerability : CVE-2025-21721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: handle errors that nilfspreparechunk may return Patch series nilfs2: fix issues with rename operations. This series fixes BUGON check failures reported ...

Linux Distros Unpatched Vulnerability : CVE-2024-56777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/sti: avoid potential dereference of error pointers in stigdpatomiccheck The return value of drmatomicgetcrtcstate needs to be checked. To avoid use of error...

Linux Distros Unpatched Vulnerability : CVE-2024-50176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: remoteproc: k3-r5: Fix error handling when power-up failed By simply bailing out, the driver...

Amazon Linux 2 : docker (ALASECS-2025-048)

The version of docker installed on the remote host is prior to 25.0.8-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2025-048 advisory. golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to...

Linux Distros Unpatched Vulnerability : CVE-2024-56714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ionic: no double destroy workqueue There are some FW error handling paths that can cause us ...

Linux Distros Unpatched Vulnerability : CVE-2024-50292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: spdifrx: fix dma channel release in stm32spdifrxremove In case of error when...

Linux Distros Unpatched Vulnerability : CVE-2025-21725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: client: fix oops due to unset link speed It isn't guaranteed that...

kernel: cifs: Return correct error code from smb2_get_enc_key

In the Linux kernel, the following vulnerability has been resolved: cifs: Return correct error code from smb2getenckey Avoid a warning if the error percolates back up: 440700.376476 CIFS VFS: \otters.example.com cryptmessage: Could not get encryption key 440700.386947 ------------ cut here...