CVE-2024-57800

CVE-2024-57800 affects the Linux kernel in ALSA memalloc handling. When DMA API debugging is enabled, it may warn about a device driver failing to check a DMA address map, e.g. device address 0x00000000ffff0000, due to explicit address checks instead of using dma_mapping_error(). The documented f...

CVE-2024-57800 ALSA: memalloc: prefer dma_mapping_error() over explicit address checking

In the Linux kernel, the following vulnerability has been resolved: ALSA: memalloc: prefer dmamappingerror over explicit address checking With CONFIGDMAAPIDEBUG enabled, the following warning is observed: DMA-API: sndhdaintel 0000:03:00.1: device driver failed to check map errordevice...

CVE-2024-48881

In the Linux kernel, the following vulnerability has been resolved: bcache: revert replacing ISERRORNULL with ISERR again Commit 028ddcac477b "bcache: Remove unnecessary NULL point check in node allocations" leads a NULL pointer deference in cachesetflush. 1721 if !ISERRORNULLc-root 1722...

SUSE-SU-2025:0067-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - CVE-2024-47530: Fixed an uninitialized stack memory in Matroska/WebM demuxer. boo1234421 - CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. boo1234414 - CVE-2024-47539: Fixed an out-of-bounds write in...

The vulnerability of the Drupal CMS system’s kernel allows attackers to compromise the integrity of the protected information.

The vulnerability of the Drupal CMS system’s kernel is related to deficiencies in handling error situations. Exploiting this vulnerability allows an attacker to potentially compromise the integrity of the protected information...

CVE-2024-56772

In the Linux kernel, the following vulnerability has been resolved: kunit: string-stream: Fix a UAF bug in kunitinitsuite In kunitdebugfscreatesuite, if allocstringstream fails in the kunitsuiteforeachtestcase loop, the "suite-log = stream" has assigned before, and the error path only free the...

CVE-2024-53165

In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in registerintccontroller In the error handling for this function, d is freed without ever removing it from intclist which would lead to a use after free. To fix this, let's only add it to the lis...

CVE-2024-56772

In the Linux kernel, the following vulnerability has been resolved: kunit: string-stream: Fix a UAF bug in kunitinitsuite In kunitdebugfscreatesuite, if allocstringstream fails in the kunitsuiteforeachtestcase loop, the "suite-log = stream" has assigned before, and the error path only free the...

CVE-2024-56787 soc: imx8m: Probe the SoC driver as platform driver

In the Linux kernel, the following vulnerability has been resolved: soc: imx8m: Probe the SoC driver as platform driver With driverasyncprobe= on kernel command line, the following trace is produced because on i.MX8M Plus hardware because the soc-imx8m.c driver calls ofclkgetbyname which returns...

CVE-2024-56772

The CVE-2024-56772 entry describes a use-after-free in Linux kernel kunit: in kunit_debugfs_create_suite(), if alloc_string_stream() fails during kunit_suite_for_each_test_case(), suite->log has already been assigned and the error path frees the stream but does not NULL the pointer. This leads...

CVE-2024-56772 kunit: string-stream: Fix a UAF bug in kunit_init_suite()

In the Linux kernel, the following vulnerability has been resolved: kunit: string-stream: Fix a UAF bug in kunitinitsuite In kunitdebugfscreatesuite, if allocstringstream fails in the kunitsuiteforeachtestcase loop, the "suite-log = stream" has assigned before, and the error path only free the...

CVE-2024-56772 kunit: string-stream: Fix a UAF bug in kunit_init_suite()

In the Linux kernel, the following vulnerability has been resolved: kunit: string-stream: Fix a UAF bug in kunitinitsuite In kunitdebugfscreatesuite, if allocstringstream fails in the kunitsuiteforeachtestcase loop, the "suite-log = stream" has assigned before, and the error path only free the...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A code issue vulnerability exists in Linux kernel that originates from the STI DRM driver not checking the return value of drmatomicgetcrtcstate when handling error pointers,...

PT-2025-4353

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.10 Description The issue is related to incorrect locking of resources in the fs/afs/addr prefs.c module of the Linux kernel. This can lead to a denial of service. The problem occurs when the function returns...

CVE-2024-56762

In the Linux kernel, the following vulnerability has been resolved: iouring/sqpoll: fix sqpoll error handling races BUG: KASAN: slab-use-after-free in lockacquire+0x370b/0x4a10 kernel/locking/lockdep.c:5089 Call Trace: ... rawspinlockirqsave+0x3d/0x60 kernel/locking/spinlock.c:162...

CVE-2024-56769

In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib3000mb: fix uninit-value in dib3000writereg Syzbot reports 1 an uninitialized value issue found by KMSAN in dib3000readreg. Local u8 rb2 is used in i2ctransfer as a read buffer; in case that call fails, t...

CVE-2024-56767

In the Linux kernel, the following vulnerability has been resolved: dmaengine: atxdmac: avoid nullprtderef in atxdmacprepdmamemset The atxdmacmemsetcreatedesc may return NULL, which will lead to a null pointer dereference. For example, the len input is error, or the atchan-freedescslist is empty...

CVE-2024-56762

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-56769 media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg

In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib3000mb: fix uninit-value in dib3000writereg Syzbot reports 1 an uninitialized value issue found by KMSAN in dib3000readreg. Local u8 rb2 is used in i2ctransfer as a read buffer; in case that call fails, t...

CVE-2024-56769 media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg

In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib3000mb: fix uninit-value in dib3000writereg Syzbot reports 1 an uninitialized value issue found by KMSAN in dib3000readreg. Local u8 rb2 is used in i2ctransfer as a read buffer; in case that call fails, t...