5309 matches found
OESA-2024-1794 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change While PLL CPUX clock rate change when CPU is running from it works in vast majority of cases, now an...
AZL-43270 CVE-2024-39483 affecting package kernel for versions less than 5.15.162.2-1
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs are actually masked, i.e. if the vCPU is already handling an NMI. KVM's ABI fo...
DEBIAN-CVE-2024-39483
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs are actually masked, i.e. if the vCPU is already handling an NMI. KVM's ABI fo...
UBUNTU-CVE-2024-39483
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs are actually masked, i.e. if the vCPU is already handling an NMI. KVM's ABI fo...
PT-2024-29750
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43 Description The issue arises from the idxd driver interrupt completion handler using threaded interrupt, which is not compatible with the hard or soft interrupt context required by netif rx. To resolve thi...
SUSE CVE-2024-39292
In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winchhandlers list. If that happens, registerwinchirq adds to that list a winch...
DEBIAN-CVE-2024-38385
In the Linux kernel, the following vulnerability has been resolved: genirq/irqdesc: Prevent use-after-free in irqfindatorafter irqfindatorafter dereferences the interrupt descriptor which is returned by mtfind while neither holding sparseirqlock nor RCU read lock, which means the descriptor can b...
UBUNTU-CVE-2024-38385
In the Linux kernel, the following vulnerability has been resolved: genirq/irqdesc: Prevent use-after-free in irqfindatorafter irqfindatorafter dereferences the interrupt descriptor which is returned by mtfind while neither holding sparseirqlock nor RCU read lock, which means the descriptor can b...
AZL-42937 CVE-2024-39292 affecting package kernel for versions less than 5.15.162.2-1
In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winchhandlers list. If that happens, registerwinchirq adds to that list a winch...
AZL-42889 CVE-2024-39292 affecting package kernel for versions less than 6.6.35.1-4
In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winchhandlers list. If that happens, registerwinchirq adds to that list a winch...
UBUNTU-CVE-2024-39292
In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winchhandlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winchhandlers list. If that happens, registerwinchirq adds to that list a winch...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which arises from a competing registration of winch IRQs, resulting in an interrupt if a winch is registered before it is...
SUSE CVE-2022-48752
In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: Fix powerpmudisable to call clearpmiirqpending only if PMI is pending Running selftest with CONFIGPPCIRQSOFTMASKDEBUG enabled in kernel triggered below warning: 172.851380 ------------ cut here ------------ 172.8513...
SUSE CVE-2024-31076
In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...
CVE-2024-31076
In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...
AZL-42819 CVE-2024-38780 affecting package kernel for versions less than 6.6.35.1-4
In the Linux kernel, the following vulnerability has been resolved: dma-buf/sw-sync: don't enable IRQ from syncprintobj Since commit a6aa8fca4d79 "dma-buf/sw-sync: Reduce irqsave/irqrestore from known context" by error replaced spinunlockirqrestore with spinunlockirq for both syncdebugfsshow and...
UBUNTU-CVE-2024-38780
In the Linux kernel, the following vulnerability has been resolved: dma-buf/sw-sync: don't enable IRQ from syncprintobj Since commit a6aa8fca4d79 "dma-buf/sw-sync: Reduce irqsave/irqrestore from known context" by error replaced spinunlockirqrestore with spinunlockirq for both syncdebugfsshow and...
DEBIAN-CVE-2024-31076
In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...
UBUNTU-CVE-2024-31076
In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...
CVE-2024-31076
In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...