CVE-2024-36896

The CVE entry CVE-2024-36896 concerns a Linux kernel USB core fix: usb_hub_to_struct_hub() can return NULL when the hub for a port is concurrently removed, and a dereference occurs before a NULL check. The patch removes an unnecessary dereference and adds a NULL check for hub (hub == NULL) to pre...

CVE-2024-36893

CVE-2024-36893 – Linux kernel : A NULL pointer dereference in usb: typec: tcpm due to typec_register_partner() not guaranteeing partner registration. If port->partner is invalid (NULL or an error value) and is not checked before dereferencing, it can crash the kernel (e.g., kernel NULL pointer...

CVE-2024-36894

CVE-2024-36894 (Linux kernel) : A race in usb: gadget: f_fs between AIO cancellation and AIO completion for FFS UDC USB requests could lead to use-after-free of io_data->req. The issue occurs when an aio_cancel() from the FFS app overlaps with the UDC soft-disconnect path (notably in DWC3-base...

CVE-2024-36892

The CVE-2024-36892 issue affects the Linux kernel SLUB allocator. The fix addresses a bug in single-object free: when init_on_free=1, the freepointer inside the freed object could be zeroed (or its handling was unsafe) and, under slub_debug=F and CONFIG_SLAB_FREELIST_HARDENED, do_slab_free() coul...

CVE-2024-36891

CVE-2024-36891 : Linux kernel issue in maple_tree where mas_start() could yield a NULL maple node and later dereference in mas_data_end(), potentially causing a kernel oops if a user unmapps all VMA regions and re-maps a VMA to recreate the empty maple tree. The fix prevents writing offsets when ...

CVE-2024-36890

CVE-2024-36890 : In the Linux kernel, the slab allocator was fixed so that __free(kfree) now detects error pointers; previously, freeing an error pointer could crash the kernel (e.g., wm831x_gpio_dbg_show). The issue stems from not checking error pointers in the automatic cleanup path. The descri...

CVE-2024-36888

CVE-2024-36888 : Linux kernel workqueue wake_cpu selection bug fixed by masking targeted CPU with cpu_online_mask via cpumask_any_and_distribute() to avoid arch_vcpu_is_preempted() on offline CPUs. Affected trace shows oops during multi-CPU bring-up when cpu_possible_mask=0-63 and cpu_online_mask...

CVE-2024-36889

CVE-2024-36889 concerns the Linux kernel’s MPTCP code. The issue arises when a client falls back to TCP during connect, and snd_nxt is not initialized yet; an incoming ACK could copy that uninitialized value into snd_una. If the MPTCP worker then re-injects data, it may trigger a cleanup using a ...

CVE-2024-36887

CVE-2024-36887 affects the Linux kernel: the e1000e PHY mdic access code originally used usleep_range inside atomic contexts, causing potential kernel panics. A partial revert of a prior workaround reintroduced this by switching usleep_range calls to udelay. The fix is to revert to using usleep_r...

CVE-2024-36886

The CVE-2024-36886 issue is a use-after-free in TIPC (tipc_buf_append) in the Linux kernel, leading to a remote code execution vulnerability via the tipc path. The associated advisories (e.g., ALSA-2024:4583) confirm a fix in kernel security updates and list CVE-2024-36886 among fixed items. Affe...

CVE-2024-36885

This CVE-2024-36885 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-36884

The CVE-2024-36884 issue affects the Linux kernel’s IOMMU arm-smmu path. The vulnerability arose from using the wrong type in nvidia_smmu_context_fault() via a function pointer indirection, causing miscalculation of an offset when iommu_domain is embedded at a non-zero offset, leading to a NULL d...

CVE-2024-36883

CVE-2024-36883 is a Linux kernel vulnerability in the networking code, specifically a out-of-bounds access in the function path associated with pernet ops. The root cause is a sequence where net_alloc_generic reads max_gen_ptrs twice (before and after a potential race) while net_alloc runs withou...

CVE-2024-36882

CVE-2024-36882 is a Linux kernel vulnerability in the memory management subsystem: mm/page_cache_ra_order() could reclaim file-backed pages in a way that may deadlock, resolved by using memalloc_nofs_save() in the readahead path (commit f2c817bed58d). The issue was observed during readahead and p...

CVE-2024-36881

CVE-2024-36881: Linux kernel mm/userfaultfd vulnerability where wr-protected page table entries (uffd_wp) were not cleared on close(), only on UFFDIO_UNREGISTER. The fix unregisters wr-protect bits during close() as well, eliminating potential leftovers in pgtable entries and preventing WARN repo...

CVE-2024-36880

CVE-2024-36880 details (from provided documents): In the Linux kernel, a Bluetooth subsystem issue in the qca firmware parsing was resolved by adding missing sanity checks for firmware files before download, to prevent memory access violations beyond the allocated vmalloc buffer. This vulnerabili...

CVE-2024-36033

CVE-2024-36033 refers to a vulnerability in the Linux kernel where the Bluetooth: qca driver could leak slab data when fetching the board id. The issue was fixed by adding a missing sanity check during the board-id fetch, preventing leakage of slab data when firmware is subsequently requested. Th...

CVE-2024-36032

CVE-2024-36032 relates to the Linux kernel Bluetooth QCA driver: a fix for an info leak when fetching the fw build ID. The patch adds missing sanity checks and moves the 255-byte build-id buffer off the stack to prevent leaking stack data through debugfs if the build-info reply is malformed. Astr...

CVE-2024-36031

CVE-2024-36031 is a Linux kernel vulnerability where, during key instantiation, the expiry time of a key is unconditionally overwritten to TIME64_MAX, effectively making it permanent and breaking DNS updates. The root cause is the unconditional key_set_expiry call during instantiation; the fix re...

CVE-2023-52882

In CVE-2023-52882, the Linux kernel vulnerability affects clk: sunxi-ng: h6 where CPUX reparenting during PLL CPUX rate change can cause instability, system crashes, or undefined behavior when CPUX clock changes while running. The issue was resolved by preventing instability when reparenting to a...