AZL-51536 CVE-2024-49893 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check streamstatus before it is used WHAT & HOW dcstategetstreamstatus can return null, and therefore null must be checked before streamstatus is used. This fixes 1 NULLRETURNS issue reported by Coverity...

AZL-51249 CVE-2024-49871 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: Input: adp5589-keys - fix NULL pointer dereference We register a devm action to call adp5589clearconfig and then pass the i2c client as argument so that we can call i2cgetclientdata in order to get our device object. However,...

AZL-50739 CVE-2024-49852 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: elx: libefc: Fix potential use after free in efcnportvportdel The krefput function will call nport-release if the refcount drops to zero. The nport-release release function is efcnportfree which frees "nport". But then we...

AZL-50868 CVE-2024-49851 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: tpm: Clean up TPM space after command failure tpmdevtransmit prepares the TPM space before attempting command transmission. However if the command fails no rollback of this preparation is done. This can result in transient handle...

AZL-50883 CVE-2024-47736 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: erofs: handle overlapped pclusters out of crafted images properly syzbot reported a task hang issue due to a deadlock case where it is waiting for the folio lock of a cached folio that will be used for cache I/Os. After looking...

AZL-51195 CVE-2024-47707 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid possible NULL deref in rt6uncachedlistflushdev Blamed commit accidentally removed a check for rt-rt6iidev being NULL, as spotted by syzbot: Oops: general protection fault, probably for non-canonical address...

AZL-51284 CVE-2024-47702 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fail verification for sign-extension of packet data/dataend/datameta syzbot reported a kernel crash due to commit 1f1e864b6555 "bpf: Handle sign-extenstin ctx member accesses". The reason is due to sign-extension of 32-bit...

PT-2024-33778

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A vulnerability in the Linux kernel has been resolved, related to the wifi: cfg80211 component. When starting CAC in a mode other than AP mode, it returns a warning caused by the chandef.chan...

PT-2024-33893

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the usb: typec: tipd module, where an IRQ is freed even if it was not requested before. This causes a warning wh...

CVE-2024-45019 affecting package kernel for versions less than 6.6.51.1-1

CVE-2024-45019 affecting package kernel for versions less than 6.6.51.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-44983 affecting package kernel for versions less than 6.6.51.1-1

CVE-2024-44983 affecting package kernel for versions less than 6.6.51.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-46673 affecting package kernel for versions less than 6.6.51.1-1

CVE-2024-46673 affecting package kernel for versions less than 6.6.51.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-46721 affecting package kernel for versions less than 6.6.51.1-5

CVE-2024-46721 affecting package kernel for versions less than 6.6.51.1-5. An upgraded version of the package is available that resolves this issue...

CVE-2024-46822 affecting package kernel for versions less than 5.15.167.1-1

CVE-2024-46822 affecting package kernel for versions less than 5.15.167.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-46732 affecting package kernel for versions less than 5.15.167.1-1

CVE-2024-46732 affecting package kernel for versions less than 5.15.167.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-42269 affecting package kernel for versions less than 5.15.167.1-1

CVE-2024-42269 affecting package kernel for versions less than 5.15.167.1-1. A patched version of the package is available...

CVE-2024-46832 affecting package kernel for versions less than 5.15.167.1-1

CVE-2024-46832 affecting package kernel for versions less than 5.15.167.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-44954 affecting package kernel for versions less than 5.15.167.1-1

CVE-2024-44954 affecting package kernel for versions less than 5.15.167.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-43897 affecting package kernel for versions less than 5.15.167.1-1

CVE-2024-43897 affecting package kernel for versions less than 5.15.167.1-1. A patched version of the package is available...

CVE-2024-46759 affecting package kernel for versions less than 5.15.167.1-1

CVE-2024-46759 affecting package kernel for versions less than 5.15.167.1-1. An upgraded version of the package is available that resolves this issue...