AZL-49678 CVE-2024-46732 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign linearpitchalignment even for VM Description Assign linearpitchalignment so we don't cause a divide by 0 error in VM environments...

AZL-49672 CVE-2024-46728 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index for auxrdinterval before using auxrdinterval has size of 7 and should be checked. This fixes 3 OVERRUN and 1 INTEGEROVERFLOW issues reported by Coverity...

AZL-49737 CVE-2024-46727 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add otgmaster NULL check within resourcelogpipetopologyupdate Why Coverity reports NULLRETURN warning. How Add otgmaster NULL check...

CVE-2024-46787 userfaultfd: fix checks for huge PMDs

In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix checks for huge PMDs Patch series "userfaultfd: fix races around pmdtranshuge check", v2. The pmdtranshuge code in mfillatomic is wrong in three different ways depending on kernel version: 1. The pmdtranshuge che...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2024-084 (ALASKERNEL-5.4-2024-084)

The version of kernel installed on the remote host is prior to 5.4.279-193.377. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2024-084 advisory. A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2024-053 (ALASKERNEL-5.15-2024-053)

The version of kernel installed on the remote host is prior to 5.15.162-107.160. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2024-053 advisory. A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the functi...

AZL-49212 CVE-2024-45029 affecting package kernel for versions less than 6.6.51.1-1

In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: Do not mark ACPI devices as irq safe On ACPI machines, the tegra i2c module encounters an issue due to a mutex being called inside a spinlock. This leads to the following bug: BUG: sleeping function called from invali...

CVE-2024-41049 affecting package kernel for versions less than 6.6.47.1-1

CVE-2024-41049 affecting package kernel for versions less than 6.6.47.1-1. An upgraded version of the package is available that resolves this issue...

AZL-48237 CVE-2024-43907 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference in applystateadjustrules Check the pointer value to fix potential null pointer dereference...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized CVE-2024-38619 In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fully validate NFTDATAVALUE on store to data...

CVE-2024-42244 affecting package kernel for versions less than 5.15.164.1-1

CVE-2024-42244 affecting package kernel for versions less than 5.15.164.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-42102 affecting package kernel for versions less than 5.15.164.1-1

CVE-2024-42102 affecting package kernel for versions less than 5.15.164.1-1. An upgraded version of the package is available that resolves this issue...

AZL-47835 CVE-2024-42284 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipcudpaddr2str on error tipcudpaddr2str should return non-zero value if the UDP media address is invalid. Otherwise, a buffer overflow access can occur in tipcmediaaddrprintf. Fix this by returni...

AZL-47793 CVE-2024-42294 affecting package kernel for versions less than 6.6.47.1-1

In the Linux kernel, the following vulnerability has been resolved: block: fix deadlock between sdremove & sdrelease Our test report the following hung task: 2538.459400 INFO: task "kworker/0:0":7 blocked for more than 188 seconds. 2538.459427 Call trace: 2538.459430 switchto+0x174/0x338...

CVE-2024-42268 net/mlx5: Fix missing lock on sync reset reload

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix missing lock on sync reset reload On sync reset reload work, when remote host updates devlink on reload actions performed on that host, it misses taking devlink lock before calling devlinkremotereloadactionsperforme...

CVE-2024-42153 affecting package kernel for versions less than 6.6.43.1-7

CVE-2024-42153 affecting package kernel for versions less than 6.6.43.1-7. An upgraded version of the package is available that resolves this issue...

CVE-2024-42070 affecting package kernel for versions less than 6.6.43.1-7

CVE-2024-42070 affecting package kernel for versions less than 6.6.43.1-7. An upgraded version of the package is available that resolves this issue...

CVE-2024-23307 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-23307 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...

CVE-2024-0646 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-0646 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...

CVE-2024-35984 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-35984 affecting package kernel for versions less than 6.6.35.1-4. An upgraded version of the package is available that resolves this issue...