CLSA-2024-1725187614 kernel: Fix of 11 CVEs

drm/vmwgfx: Fix invalid reads in fence signaled events CVE-2024-36960 - afunix: Fix garbage collector racing against connect CVE-2024-26923 - ipv6: remove maxsize check inline with ipv4 CVE-2023-52340 - aoe: fix the potential use-after-free problem in aoecmdcfgpkts CVE-2023-6270 - smb: client:...

SUSE CVE-2024-44942

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on F2FSINLINEDATA flag in inode during GC syzbot reports a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/inline.c:258! CPU: 1 PID: 34 Comm: kworker/u8:2 Not tainted...

CLSA-2024-1724693366 kernel: Fix of 15 CVEs

net: ice: Fix potential NULL pointer dereference in icebridgesetlink CVE-2024-26855 - tty: Fix out-of-bound vmalloc access in imageblit CVE-2021-47383 - drm/vmwgfx: Fix invalid reads in fence signaled events CVE-2024-36960 - Revert: GFS2: Skip dlmunlock calls during unmount CVE-2024-38570 -...

DEBIAN-CVE-2024-44942

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on F2FSINLINEDATA flag in inode during GC syzbot reports a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/inline.c:258! CPU: 1 PID: 34 Comm: kworker/u8:2 Not tainted...

CVE-2024-44942

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on F2FSINLINEDATA flag in inode during GC syzbot reports a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/inline.c:258! CPU: 1 PID: 34 Comm: kworker/u8:2 Not tainted...

CVE-2024-44942

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on F2FSINLINEDATA flag in inode during GC syzbot reports a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/inline.c:258! CPU: 1 PID: 34 Comm: kworker/u8:2 Not tainted...

UBUNTU-CVE-2024-44942

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on F2FSINLINEDATA flag in inode during GC syzbot reports a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/inline.c:258! CPU: 1 PID: 34 Comm: kworker/u8:2 Not tainted...

CVE-2024-44942

CVE-2024-44942 concerns the Linux kernel’s f2fs inline data handling during garbage collection. According to the connected Astra Linux bulletin, the root cause is that an inline_data inode can be fuzzed, allowing a valid blkaddr in its direct node; when background GC migrates the block, a f2fs_bu...

CVE-2024-43898

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to perform proper soundness checks when operating on inodes with the F2FSINLINEDATA flag during GC...

UBUNTU-CVE-2023-52914

In the Linux kernel, the following vulnerability has been resolved: iouring/poll: add hash if ready poll request can't complete inline If we don't, then we may lose access to it completely, leading to a request leak. This will eventually stall the ring exit process as well...

CVE-2023-52914 io_uring/poll: add hash if ready poll request can't complete inline

In the Linux kernel, the following vulnerability has been resolved: iouring/poll: add hash if ready poll request can't complete inline If we don't, then we may lose access to it completely, leading to a request leak. This will eventually stall the ring exit process as well...

SUSE CVE-2024-42296

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fsconvertinlineinode If device is readonly, make f2fsconvertinlineinode return EROFS instead of zero, otherwise it may trigger panic during writeback of inline inode's dirty page as below:...

DEBIAN-CVE-2024-42296

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fsconvertinlineinode If device is readonly, make f2fsconvertinlineinode return EROFS instead of zero, otherwise it may trigger panic during writeback of inline inode's dirty page as below:...

CVE-2024-42296

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fsconvertinlineinode If device is readonly, make f2fsconvertinlineinode return EROFS instead of zero, otherwise it may trigger panic during writeback of inline inode's dirty page as below:...

UBUNTU-CVE-2024-42296

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fsconvertinlineinode If device is readonly, make f2fsconvertinlineinode return EROFS instead of zero, otherwise it may trigger panic during writeback of inline inode's dirty page as below:...

CVE-2024-42296 f2fs: fix return value of f2fs_convert_inline_inode()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fsconvertinlineinode If device is readonly, make f2fsconvertinlineinode return EROFS instead of zero, otherwise it may trigger panic during writeback of inline inode's dirty page as below:...

CVE-2024-42296

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fsconvertinlineinode If device is readonly, make f2fsconvertinlineinode return EROFS instead of zero, otherwise it may trigger panic during writeback of inline inode's dirty page as below:...

CVE-2024-42296 f2fs: fix return value of f2fs_convert_inline_inode()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fsconvertinlineinode If device is readonly, make f2fsconvertinlineinode return EROFS instead of zero, otherwise it may trigger panic during writeback of inline inode's dirty page as below:...

CVE-2024-42296 f2fs: fix return value of f2fs_convert_inline_inode()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fsconvertinlineinode If device is readonly, make f2fsconvertinlineinode return EROFS instead of zero, otherwise it may trigger panic during writeback of inline inode's dirty page as below:...