CVE-2024-36902

CVE-2024-36902 is a Linux kernel vulnerability: fib6_rules may dereference a NULL from ip6_dst_idev() in fib6_rule_action(), potentially enabling a crash (general protection fault). A fix has been applied in the Linux kernel; remediation is to update to a version containing the patch. Other conne...

CVE-2024-36900

CVE-2024-36900 affects the Linux kernel’s net/hns3 driver. The vulnerability arises when a devlink reload occurs during hardware initialization: the reload can access hardware resources before initialization, potentially causing a kernel crash. The fix is to register devlink after hardware initia...

CVE-2024-36901

CVE-2024-36901 affects the Linux kernel IPv6 stack. The issue is a NULL dereference in ip6_output() when ip6_dst_idev() returns NULL, causing a general protection fault. The syzbot report indicates a crash path in ip6_output+0x231/0x3f0, traceable to net/ipv6/ip6_output.c:237, with a NULL idev de...

CVE-2024-36898

CVE-2024-36898 affects Linux kernel gpiolib: cdev. The issue is an uninitialised kfifo when software debounce is active and edge-detection is re-enabled, causing events to be written/read from an uninitialised queue. The published fix initializes the kfifo in the debounce-active path. Connected a...

CVE-2024-36899

CVE-2024-36899 affects the Linux kernel gpiolib, specifically the cdev path usedwhen closing a GPIO chip device file. The issue is a use-after-free involving watched_lines: during gpio_chrdev_release(), watched_lines is freed with bitmap_free(), but lineinfo_changed_nb notifier chain unregistrati...

CVE-2024-36897

CVE-2024-36897 — Linux kernel (drm/amd/display, DCN35) Root cause: a new UMA carveout BIOS (version 2.3) wasn’t handled by the DAL BIOS parsing, causing a NULL dereference when code attempted to access Ctx->dc_bios->integrated_info if that pointer was NULL. Affected component: drm/amd/displ...

CVE-2024-36896

The CVE entry CVE-2024-36896 concerns a Linux kernel USB core fix: usb_hub_to_struct_hub() can return NULL when the hub for a port is concurrently removed, and a dereference occurs before a NULL check. The patch removes an unnecessary dereference and adds a NULL check for hub (hub == NULL) to pre...

CVE-2024-36895

The CVE-2024-36895 issue in the Linux kernel affects usb gadget uvc configfs parsing. A heap-allocated temp buffer used by __uvcg_iter_item_entries() was not constrained by a computed max size (previously size-checked via sizeof()), causing overly small max item sizes on some architectures (7 byt...

CVE-2024-36894

CVE-2024-36894 relates to a race in the Linux kernel USB gadget stack (usb: gadget: f_fs) between aio_cancel() and AIO completion for FFS-based USB requests on the UDC. The issue could cause a stale/hanging pointer when a completion runs concurrently with an aio_cancel, as io_data->req may be ...

CVE-2024-36893

CVE-2024-36893 – Linux kernel : A NULL pointer dereference in usb: typec: tcpm due to typec_register_partner() not guaranteeing partner registration. If port->partner is invalid (NULL or an error value) and is not checked before dereferencing, it can crash the kernel (e.g., kernel NULL pointer...

CVE-2024-36892

The CVE-2024-36892 issue affects the Linux kernel SLUB allocator. The fix addresses a bug in single-object free: when init_on_free=1, the freepointer inside the freed object could be zeroed (or its handling was unsafe) and, under slub_debug=F and CONFIG_SLAB_FREELIST_HARDENED, do_slab_free() coul...

CVE-2024-36891

CVE-2024-36891 : Linux kernel issue in maple_tree where mas_start() could yield a NULL maple node and later dereference in mas_data_end(), potentially causing a kernel oops if a user unmapps all VMA regions and re-maps a VMA to recreate the empty maple tree. The fix prevents writing offsets when ...

CVE-2024-36890

CVE-2024-36890: Linux kernel mm/slab fix to have __free(kfree) treat error pointers as valid data. Previously, automatic cleanup could crash if an allocation freed as an error pointer was not checked; wm831x_gpio_dbg_show() is cited as an example. The resolution updates the auto cleanup path to v...

CVE-2024-36888

CVE-2024-36888 : Linux kernel workqueue wake_cpu selection bug fixed by masking targeted CPU with cpu_online_mask via cpumask_any_and_distribute() to avoid arch_vcpu_is_preempted() on offline CPUs. Affected trace shows oops during multi-CPU bring-up when cpu_possible_mask=0-63 and cpu_online_mask...

CVE-2024-36889

CVE-2024-36889 concerns the Linux kernel’s MPTCP code. The issue arises when a client falls back to TCP during connect, and snd_nxt is not initialized yet; an incoming ACK could copy that uninitialized value into snd_una. If the MPTCP worker then re-injects data, it may trigger a cleanup using a ...

CVE-2024-36886

CVE-2024-36886 is a Linux kernel TIPC UAF (tipc_buf_append error path) that can lead to remote code execution. A fix was implemented in the kernel, addressing a use-after-free in TIPC message reassembly (tipc_buf_append path). Affected systems require applying a kernel update that includes the pa...

CVE-2024-36887

CVE-2024-36887 affects the Linux kernel: the e1000e PHY mdic access code originally used usleep_range inside atomic contexts, causing potential kernel panics. A partial revert of a prior workaround reintroduced this by switching usleep_range calls to udelay. The fix is to revert to using usleep_r...

CVE-2024-36885

This CVE-2024-36885 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-36884

CVE-2024-36884 — Linux kernel iommu/arm-smmu (nvidia_smmu_context_fault): The issue stems from using a void* where a struct arm_smmu_domain is required inside nvidia_smmu_context_fault(), which is also registered as an irq handler. Because iommu_domain is embedded at a non-zero offset, this cause...

CVE-2024-36883

CVE-2024-36883 is a Linux kernel vulnerability in the networking code, specifically a out-of-bounds access in the function path associated with pernet ops. The root cause is a sequence where net_alloc_generic reads max_gen_ptrs twice (before and after a potential race) while net_alloc runs withou...