6201 matches found
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2024-12611)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12611 advisory. - MIPS: Octeon: Add PCIe link status check Dave Kleikamp Orabug: 36952386 CVE-2024-40968 - net: relax socket state check at accept time. Paolo Abeni...
Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6999-1)
The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6999-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...
DEBIAN-CVE-2024-45003
In the Linux kernel, the following vulnerability has been resolved: vfs: Don't evict inode under the inode lru traversing context The inode reclaiming processSee function pruneicachesb collects all reclaimable inodes and mark them with IFREEING flag at first, at that time, other processes will be...
UBUNTU-CVE-2024-45003
In the Linux kernel, the following vulnerability has been resolved: vfs: Don't evict inode under the inode lru traversing context The inode reclaiming processSee function pruneicachesb collects all reclaimable inodes and mark them with IFREEING flag at first, at that time, other processes will be...
CVE-2024-45003
CVE-2024-45003 concerns a Linux kernel vulnerability where inode eviction can deadlock during inode LRU traversal. The issue arises in the inode reclaim path (prune_icache_sb) when reclaiming inodes marks i_freeing and other processes attempt to iget under the same LRU context, risking deadlocks ...
CVE-2024-45003 vfs: Don't evict inode under the inode lru traversing context
In the Linux kernel, the following vulnerability has been resolved: vfs: Don't evict inode under the inode lru traversing context The inode reclaiming processSee function pruneicachesb collects all reclaimable inodes and mark them with IFREEING flag at first, at that time, other processes will be...
CVE-2024-45003: Improper Locking
In the Linux kernel, the following vulnerability has been resolved: vfs: Don't evict inode under the inode lru traversing context The inode reclaiming processSee function pruneicachesb collects all reclaimable inodes and mark them with IFREEING flag at first, at that time, other processes will be...
OracleVM 3.4 : kernel-uek (OVMSA-2024-0011)
The remote OracleVM system is missing necessary patches to address security updates: 4.1.12-124.89.4- isdn: mISDN: netjet: Fix crash in njprobe: Zheyu Ma Orabug: 36940405 CVE-2021-47284- tracing: Restructure traceclockglobal to never block Steven Rostedt VMware Orabug: 36940388 CVE-2021-46939- ud...
PT-2024-7600
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to the function ext4 ext replay update ex in the Linux kernel's ext4 file system module. It involves a double-free vulnerability, where previously freed memory is accessed...
PT-2024-8238
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The issue is related to a use-after-free vulnerability in the ext4 file system, specifically in the ext4 ext show leaf function. This vulnerability can be triggered when EXT DEBUG is defined,...
PT-2024-8236
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The issue is related to a use-after-free vulnerability in the ext4 ext insert extent function. This vulnerability can be exploited to impact the confidentiality, integrity, and availability o...
PT-2024-8235
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The issue is related to the ext4 file system in the Linux kernel, where a vulnerability in the ext4 ext try to merge up function can cause a double release of a buffer, potentially leading to...
PT-2024-32749
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to an out-of-bounds access in the ext4 filesystem when system.data xattr changes underneath the filesystem. This can lead to a use-after-free error detected by KASAN. The...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2024-12606)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12606 advisory. - isdn: mISDN: netjet: Fix crash in njprobe: Zheyu Ma Orabug: 36940405 CVE-2021-47284 - tracing: Restructure traceclockglobal to never block Steve...
PT-2024-8237
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The issue is related to a slab-use-after-free vulnerability in the ext4 split extent at function of the Linux kernel's ext4 file system. This vulnerability can be triggered when the ext4 spli...
PT-2024-32748
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to the ext4 file system in the Linux kernel, where the stripe size compatibility check is missed during remount, potentially leading to unforeseen bugs like divide by zero...
CLSA-2024-1724693366 kernel: Fix of 15 CVEs
net: ice: Fix potential NULL pointer dereference in icebridgesetlink CVE-2024-26855 - tty: Fix out-of-bound vmalloc access in imageblit CVE-2021-47383 - drm/vmwgfx: Fix invalid reads in fence signaled events CVE-2024-36960 - Revert: GFS2: Skip dlmunlock calls during unmount CVE-2024-38570 -...
CVE-2024-43898
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
