Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel has a security vulnerability. An attacker exploiting the vulnerability can cause the kernel to crash. No details of the vulnerability are provided at this time...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability. An attacker exploiting the vulnerability can cause the kernel to crash...

kernel: Kernel: Denial of Service via improper return value check in mmc_add_host()

A flaw was found in the Linux kernel's mmc: wmt-sdmmc component. An improper return value check in the mmcaddhost function may allow a local attacker to cause a memory leak. This can lead to a kernel crash, resulting in a Denial of Service DoS...

kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter

A flaw was foundin the Linux Kernel when specifying the srptserviceguid parameter, which may lead to kernel crash...

kernel: vmxnet3: disable rx data ring on dma allocation failure

A vulnerability was found in the Linux kernel's vmxnet3 driver in the vmxnet3rqcreate function, where this issue occurs when memory allocation fails for the RX data ring, leading to an improper reference size that may cause the hypervisor to access invalid memory during packet reception, which ca...

kernel: mm: vmalloc: check if a hash-index is in cpu_possible_mask

A vulnerability was found in the Linux kernel that involves improper handling of per-CPU data in systems where cpupossiblemask has gaps between CPUs. This can lead to an index which accesses non-existent or unset CPU areas and potentially causes kernel crashes...

kernel: block: fix request.queuelist usage in flush

A vulnerability was found in the Linux kernel's block subsystem, where the issue arises when the request queue list is not properly initialized for the first request in the PREFLUSH/POSTFLUSH sequences, leading to potential kernel crashes due to improper list manipulation...

kernel: Kernel: Denial of Service in mmc: moxart due to improper return value check

A flaw was found in the Linux kernel component mmc: moxart. A local attacker with low privileges could exploit this vulnerability by triggering an improper return value check in the mmcaddhost function. This oversight can lead to a memory leak, which may ultimately cause a kernel crash, resulting...

kernel: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds

In the Linux kernel, the following vulnerability has been resolved: can: dev: canputechoskb: don't crash kernel if canpriv::echoskb is accessed out of bounds If the "struct canpriv::echooskb" is accessed out of bounds, this would cause a kernel crash. Instead, issue a meaningful warning message a...

kernel: Bluetooth: btusb: Add date->evt_skb is NULL check

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Add date-evtskb is NULL check fix crash because of null pointers 6104.969662 BUG: kernel NULL pointer dereference, address: 00000000000000c8 6104.969667 PF: supervisor read access in kernel mode 6104.969668 PF:...

kernel: bpf: Fix crash due to out of bounds access into reg2btf_ids.

bpf in linux kernel incorrectly managed register types, leading to out of bounds access and possible kernel crashing when bad pointer gets dereferenced...

kernel: thermal: of: fix double-free on unregistration

A flaw was found in the Linux kernel's thermal subsystem. A double-free vulnerability occurs during thermal zone device unregistration when using device tree OF bindings. The thermalofzoneregister function leaks the original tzp structure and double-frees the internal copy, which can lead to memo...

kernel: nfs: pass explicit offset/count to trace events

nfs in linux kernel permits using nfsfoliolength without locking the folio and without checking for null mapping. This can permit truncation and lead to kernel crash...

kernel: net: hns3: fix kernel crash problem in concurrent scenario

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash problem in concurrent scenario When link status change, the nic driver need to notify the roce driver to handle this event, but at this time, the roce driver may uninit, then cause kernel crash. To fix...

kernel: usb: typec: bus: verify partner exists in typec_altmode_attention

A NULL pointer dereference flaw was found in the Linux kernel's USB Type-C subsystem. When certain USB hubs perform a data role swap after entering DisplayPort Alt Mode, all alternate modes are unregistered. If the hub continues sending Attention messages afterward, the typecaltmodeattention...

kernel: ext4: correct grp validation in ext4_mb_good_group

A NULL pointer dereference vulnerability was found in the ext4 filesystem in the Linux kernel. In ext4mbgoodgroup, the group corruption check accesses the grp structure memory before verifying that grp is not NULL. If grp is NULL, this leads to a kernel crash. The fix adds a NULL check before...

kernel: mmc: atmel-mci: fix return value check of mmc_add_host()

In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmcallochost is leaked. 2. In the remove path, mmcremovehos...

AZL-53333 CVE-2024-50258 affecting package kernel for versions less than 5.15.182.1-1

In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gsomaxsize/gsoipv4maxsize Config a small gsomaxsize/gsoipv4maxsize will lead to an underflow in skdstgsomaxsize, which may trigger a BUGON crash, because sk-skgsomaxsize would be much bigger than...

CVE-2024-50226 cxl/port: Fix use-after-free, permit out-of-order decoder shutdown

In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown In support of investigating an initialization failure report 1, cxltest was updated to register mock memory-devices after the mock root-port/bus device had been...

CVE-2024-50122

In the Linux kernel, the following vulnerability has been resolved: PCI: Hold rescan lock while adding devices during host probe Since adding the PCI power control code, we may end up with a race between the pwrctl platform device rescanning the bus and host controller probe functions. The latter...