CVE-2022-48735 ALSA: hda: Fix UAF of leds class devs at unbinding

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix UAF of leds class devs at unbinding The LED class devices that are created by HD-audio codec drivers are registered via devmledclassdevregister and associated with the HD-audio codec device. Unfortunately, it turne...

CVE-2022-48735 ALSA: hda: Fix UAF of leds class devs at unbinding

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix UAF of leds class devs at unbinding The LED class devices that are created by HD-audio codec drivers are registered via devmledclassdevregister and associated with the HD-audio codec device. Unfortunately, it turne...

CVE-2022-48735

CVE-2022-48735 concerns a use‑after‑free in the Linux kernel ALSA hda LED class devices created by HD‑audio codec drivers. The issue arises because LED class devices are registered via devm_led_classdev_register() and tied to the codec device, but the devres release can execute before the devm ch...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which originates from a post-release reuse vulnerability in the leds class of devices when the ALSA:hda module is unbound...

SUSE CVE-2024-27063

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: netdev: Fix kernel panic on interface rename trig notify Commit d5e01266e7f5 "leds: trigger: netdev: add additional specific link speed mode" in the various changes, reworked the way to set the LINKUP mode in commi...

UBUNTU-CVE-2024-27063

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: netdev: Fix kernel panic on interface rename trig notify Commit d5e01266e7f5 "leds: trigger: netdev: add additional specific link speed mode" in the various changes, reworked the way to set the LINKUP mode in commi...

CVE-2024-27063 leds: trigger: netdev: Fix kernel panic on interface rename trig notify

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: netdev: Fix kernel panic on interface rename trig notify Commit d5e01266e7f5 "leds: trigger: netdev: add additional specific link speed mode" in the various changes, reworked the way to set the LINKUP mode in commi...

PT-2024-29760

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Linux kernel versions prior to 6.6.43 Description The issue in the Linux kernel is related to the use of mutex initialization in the LEDs driver. The driver registers LEDs using devm led classdev...

PT-2024-29761

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the use of mutex initialization in the Linux kernel's leds: mlxreg driver. LEDs are registered using devm led classdev register, which automatically unregisters...

PT-2024-7845 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a kernel panic that occurs when renaming an interface, specifically due to a problem in the leds: trigger: netdev component. The logic change in the...

CLSA-2024-1706617379 Fix of 12 CVEs

Jammy update: v5.15.140 upstream stable release LP: 2050038 // CVE-url: https://ubuntu.com/security/CVE-2024-0607 - netfilter: nftables: fix pointer math issue in nftbyteordereval CVE-url: https://ubuntu.com/security/CVE-2024-0607 - netfilter: nftables: Introduce new 64-bit helper register...

kernel: ALSA: hda: Fix UAF of leds class devs at unbinding

A use-after-free vulnerability has been identified in the Linux kernel, specifically related to a stale setbrightnessdelay callback function. This flaw can lead to compromised system availability. Due to the nature of use-after-free vulnerabilities, successful exploitation could result in...

PT-2024-11889 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an out-of-bounds read in the afe4404 read|write raw function. A KASAN report indicates a global-out-of-bounds read in afe4404 read raw+0x2ce/0x380. The bug is...

kernel: ALSA: hda: Fix UAF of leds class devs at unbinding

A use-after-free vulnerability has been identified in the Linux kernel, specifically related to a stale setbrightnessdelay callback function. This flaw can lead to compromised system availability. Due to the nature of use-after-free vulnerabilities, successful exploitation could result in...

GSD-2022-1000572 ALSA: hda: Fix UAF of leds class devs at unbinding

ALSA: hda: Fix UAF of leds class devs at unbinding This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...

GSD-2022-1000218 ALSA: hda: Fix UAF of leds class devs at unbinding

ALSA: hda: Fix UAF of leds class devs at unbinding This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.99 by commit...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:2687-1 Rating: important References: 1065729 1085224 1094840 1113295 1152472 1152489 1153274 1154353 1155518 1156395 1170511 1176447 1176940 1179243 1180092 1180814 1183871 1184114 1184350 1184631...

CVE-2019-13991

Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs directly connected to GPIO pins via a laser, because of LED photosensitivity...

Code injection

Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs directly connected to GPIO pins via a laser, because of LED photosensitivity...

CVE-2019-13991

CVE-2019-13991 affects embedded Arduino-based systems before Rev3, where a remote attacker can send data to LEDs connected directly to GPIO pins via a laser due to LED photosensitivity. The connected records consistently describe the vulnerability as a remote-access data delivery path to on-board...