UBUNTU-CVE-2022-49731

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in atahostallocpinfo In an unlikely and probably wrong? case that the 'ppi' parameter of atahostallocpinfo points to an array starting with a NULL pointer, there's going to be a kernel oop...

CVE-2022-49731 ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in atahostallocpinfo In an unlikely and probably wrong? case that the 'ppi' parameter of atahostallocpinfo points to an array starting with a NULL pointer, there's going to be a kernel oop...

CVE-2022-49267

CVE-2022-49267 affects the Linux kernel MMC core: the sysfs output path used sprintf(), which could overflow buffers. The fix replaces sprintf() with sysfs_emit() to prevent buffer overflows. Public documents confirm the vulnerability and its remediation, with no exploitation details provided.

CVE-2022-49267

...

CVE-2022-49267 mmc: core: use sysfs_emit() instead of sprintf()

In the Linux kernel, the following vulnerability has been resolved: mmc: core: use sysfsemit instead of sprintf sprintf still used in the MMC core for the sysfs output is vulnerable to the buffer overflow. Use the new-fangled sysfsemit instead. Found by Linux Verification Center linuxtesting.org...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize The step variable is initialized to zero. It is changed during the loop, but if it isn’t changed, it will remain zero. Add a variable check before the division...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tsens: Fixed null pointer dereferencing. The function computeinterceptslope is called from calibrate8960 in tsens-8960.c. This call involves computeinterceptslopepriv, p1, NULL, ONEPTCALIB, which leads to a null...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fixed the NULL dereference in mlx5etirbuilderalloc. In mlx5etirbuilderalloc, kvzalloc may return NULL, which will be dereferenced on the next line as a reference to the modify field. This issue was identified by the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: bcm – Fix pointer arithmetic In spu2dumpomd, the value of ptr is increased by ciphkeylen, instead of hashivlen. This could lead to exceeding the buffer boundaries. This bug has been fixed by changing ciphkeylen to...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Staging: iio: frequency: ad9834: Validate frequency parameter value In ad9834writefrequency, clkgetrate may return 0. In such cases, the call to ad9834calcfreqreg will result in a division by zero. Checking if fout clkfreq / 2 do...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxrproc: Skip over the memory region when the node value is NULL In imxrprocaddrinit, the function “nph = ofcountphandlewithargs” simply counts the number of phandles. However, the phandles may be empty. Therefore, t...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47749)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47749 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for...

Azure Linux 3.0 Security Update: kernel (CVE-2024-39277)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39277 advisory. - In the Linux kernel, the following vulnerability has been resolved: dma-mapping: benchmark: handle NUMANONOD...

Azure Linux 3.0 Security Update: kernel (CVE-2024-43860)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43860 advisory. - In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxrproc: Skip over memory...

Azure Linux 3.0 Security Update: kernel (CVE-2024-38577)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-38577 advisory. - In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix showrcutaskstracegpkthrea...

Azure Linux 3.0 Security Update: kernel (CVE-2024-38571)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-38571 advisory. - In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tsens: Fix null pointer...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50000)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50000 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in...

CVE-2025-21680

In the Linux kernel, the following vulnerability has been resolved: pktgen: Avoid out-of-bounds access in getimixentries Passing a sufficient amount of imix entries leads to invalid access to the pktdev-imixentries array because of the incorrect boundary check. UBSAN: array-index-out-of-bounds in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50205)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50205 advisory. - In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by ze...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50000)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50000 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in...