Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: opp: Fix use-after-free in lazyopptables after probe deferral When devpmoppoffindiccpaths in allocateopptable returns -EPROBEDEFER, the opptable is freed again to wait until all interconnect paths become available. However, if th...

CVE-2023-54026

Summary of CVE-2023-54026 (Linux kernel): A use-after-free in lazy_opp_tables can occur when probe deferral (-EPROBE_DEFER) happens during OPP table allocation. If the OPP table uses required-opps and has already been added to the global lazy_opp_tables list, the error path failed to remove it, r...

SUSE CVE-2024-53100

In the Linux kernel, the following vulnerability has been resolved: nvme: tcp: avoid race between queuelock lock and destroy Commit 76d54bf20cdc "nvme-tcp: don't access released socket during error recovery" added a mutexlock call for the queue-queuelock in nvmetcpgetaddress. However, the mutexlo...

DEBIAN-CVE-2024-46680

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix random crash seen while removing driver This fixes the random kernel crash seen while removing the driver, when running the load/unload test over multiple iterations. 1 modprobe btnxpuart 2 hciconfig hci...

CVE-2024-36940

In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrlenable The "pctldev" struct is allocated in devmpinctrlregisterandinit. It's a devm managed pointer that is freed by devmpinctrldevrelease, so freeing it in pinctrlenable will lead t...

UBUNTU-CVE-2024-26854

In the Linux kernel, the following vulnerability has been resolved: ice: fix uninitialized dplls mutex usage The pf-dplls.lock mutex is initialized too late, after its first use. Move it to the top of icedpllinit. Note that the "errexit" error path destroys the mutex. And the mutex is the last...

UVI-2021-1001733 cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory

cpufreq: schedutil: Destroy mutex before kobjectput frees the memory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.10 by commit...

UVI-2021-1001656 cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory

cpufreq: schedutil: Destroy mutex before kobjectput frees the memory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.71 by commit...

UVI-2021-1001537 cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory

cpufreq: schedutil: Destroy mutex before kobjectput frees the memory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.249 by commit...

PT-2021-26071

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description A potential issue exists in the Linux Kernel, specifically in the cpufreq: schedutil component. The problem arises from the destruction of a mutex before the kobject put function frees the...

PT-2021-30030

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description A potential issue exists in the Linux Kernel related to the cpufreq schedutil component. The problem arises from the destruction of a mutex before the kobject put function frees the memory...

PT-2021-26007

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.249 Description A potential issue exists in the Linux Kernel, specifically in the cpufreq: schedutil component. The problem arises from the destruction of a mutex before the kobject put function frees the...

PT-2021-30066

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description A potential issue exists in the Linux Kernel related to the cpufreq schedutil component. The problem arises from the destruction of a mutex before the kobject put function frees the memory...

PT-2021-30198

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description A potential issue exists in the Linux Kernel, specifically in the cpufreq: schedutil component. The problem arises from the destruction of a mutex before the kobject put function frees the...

PT-2021-26126

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description A potential issue exists in the Linux Kernel related to the cpufreq schedutil component. The problem arises from the destruction of a mutex before the kobject put function frees the memory...