UBUNTU-CVE-2024-53184

In the Linux kernel, the following vulnerability has been resolved: um: ubd: Do not use drvdata in release The drvdata is not available in release. Let's just use containerof to get the ubd instance. Otherwise, removing a ubd device will result in a crash: RIP: 0033:blkmqfreetagset+0x1f/0xba RSP:...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47684)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47684 advisory. - In the Linux kernel, the following vulnerability has been resolved: tcp: check skb is non-NULL in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49852)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49852 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: elx: libefc: Fix potential use aft...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50154)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50154 advisory. - In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Don't use timerpending in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49981)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49981 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free bug in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50179)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50179 advisory. - In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50002)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50002 advisory. - In the Linux kernel, the following vulnerability has been resolved: staticcall: Handle module init failure...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50082)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50082 advisory. - In the Linux kernel, the following vulnerability has been resolved: blk-rq-qos: fix crash on rqqoswait vs...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49896)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49896 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check stream before...

PT-2025-3605

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the ASoC: Intel: sof sdw component in the Linux kernel. The code uses the initialised member of the asoc sdw dailink struct to determine if a member of the array ...

PT-2025-8759

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an integer overflow in the Linux kernel, specifically in the tps6594 rtc set offset function. The problem occurs when the offset variable, which is a long in the...

PT-2025-3591

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a problem in the readahead code of the Linux kernel, which can cause the kernel to hang when used with NFS. The problem has been identified as being caused by a...

CVE-2024-53109 nommu: pass NULL argument to vma_iter_prealloc()

In the Linux kernel, the following vulnerability has been resolved: nommu: pass NULL argument to vmaiterprealloc When deleting a vma entry from a maple tree, it has to pass NULL to vmaiterprealloc in order to calculate internal state of the tree, but it passed a wrong argument. As a result, nommu...

PT-2024-36868

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A credential leak issue has been resolved in the Linux kernel. The problem occurred because get current cred increments the reference counter, but the corresponding put cred call was...

CVE-2024-53093 nvme-multipath: defer partition scanning

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: defer partition scanning We need to suppress the partition scan from occuring within the controller's scanwork context. If a path error occurs here, the IO will wait until a path becomes available or all paths are...

CVE-2024-49869

In the Linux kernel, the following vulnerability has been resolved: btrfs: send: fix buffer overflow detection when copying path to cache entry Starting with commit c0247d289e73 "btrfs: send: annotate struct namecacheentry with countedby" we annotated the variable length array "name" from the...

CVE-2022-49003

A vulnerability was found in the Linux kernel's NVMe driver, involving a race condition in multipath configurations with RDMA connections. The nvmenshead list that tracks NVMe namespaces is not properly synchronized with the SRCU lock in the nvmempathrevalidatepaths function. This can cause a...

kernel: Local information disclosure on Intel(R) Atom(R) processors

A vulnerability was found in some Intel Atom Processor's microcode. This issue may allow a malicious actor to achieve a local information disclosure, impacting the data confidentiality of the targeted system...

UBUNTU-CVE-2024-46863

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-lnl-match: add missing empty item There is no linksnum in struct sndsocacpimach , and we test !link-numadr as a condition to end the loop in hdasdwmachineselect. So an empty item in struct...

DEBIAN-CVE-2023-52903

In the Linux kernel, the following vulnerability has been resolved: iouring: lock overflowing for IOPOLL syzbot reports an issue with overflow filling for IOPOLL: WARNING: CPU: 0 PID: 28 at iouring/iouring.c:734 iocqringeventoverflow+0x1c0/0x230 iouring/iouring.c:734 CPU: 0 PID: 28 Comm:...