CVE-2024-35942

CVE-2024-35942 relates to the Linux kernel and affects the imx8mp block clock handling. The issue occurs when the fdcc clock, intended for the HDMI RX domain, is added to the hdmimix domain while HDMI TX/LCDIF probe sequencing can disable it. If the clock is disabled before HDMI/LCDIF probe, LCDI...

CVE-2024-35940

CVE-2024-35940 affects the Linux kernel. The vulnerability stems from pstore/zone: missing NULL pointer check in psz_kmsg_read after kasprintf() can return NULL on allocation failure. The impact is a potential NULL pointer dereference in kernel code paths involving kasprintf results, with publicl...

CVE-2024-35937

CVE-2024-35937 affects the Linux kernel wifi stack: cfg80211 A-MSDU handling can read data out of bounds if a subframe header appears but is not fully present. The vulnerability root cause is insufficient validation of A-MSDU subframes; the fix tightens checks to ensure a subframe header can actu...

CVE-2024-35936

CVE-2024-35936. In the Linux kernel, the btrfs relocation code (btrfs_relocate_sys_chunks) contains an unhandled corruption case in its chunk-tree lookup loop. The issue arises from two theoretically impossible conditions: (1) an inexact search yields a key with offset -1 for a chunk-tree item, a...

CVE-2024-35934

The CVE-2024-35934 issue affects the Linux kernel net/smc subsystem. Affected component: smc_pnet-related code in net/smc (pnet IDs list creation). Root cause: excessive RTNL (rtnl) lock pressure during net namespace/pnet initialization, caused by smc_pnet_create_pnetids_list() acquiring rtnl in ...

CVE-2024-35930

CVE-2024-35930 concerns the Linux kernel SCSI lpfc driver. It fixes a memory leak in lpfc_rcv_padisc() where a failed return from lpfc_sli4_resume_rpi() could leave an elsiocb unreleased and its resources leaked. The remediation is to check the return value of lpfc_sli4_resume_rpi() and, on failu...

CVE-2024-35925

The CVE-2024-35925 issue concerns the Linux kernel blk_rq_stat_sum() path. The root cause is a potential division by zero when computing stats, caused by the expression dst->nr_samples + src->nr_samples reaching zero due to overflow. Multiple connected advisories (Unity Linux security updat...

CVE-2024-35923

CVE-2024-35923 is rejected by the CNA and does not represent an active vulnerability entry.

CVE-2024-35922

The CVE-2024-35922 issue is a Linux kernel vulnerability in fbmon/fb_videomode_from_videomode() where htotal * vtotal can overflow to zero, risking division by zero. The root cause is overflow during videomode computation; the fix mirrors fb_var_to_videomode() by preventing division by zero. Affe...

CVE-2024-35918

CVE-2024-35918 is rejected by its CVE Numbering Authority and is not an active vulnerability entry.

CVE-2024-35916

CVE-2024-35916 affects the Linux kernel: a NULL pointer dereference in the dma-buf sanitycheck() path when mock_chain() returns NULL due to allocation failure. The fix is to call dma_fence_enable_sw_signaling() only if mock_chain() succeeds. Affected products/versions are not listed in the initia...

CVE-2024-35913

CVE-2024-35913 affects the Linux kernel’s wireless stack (iwlwifi, iwlmvm). The issue arises in SESSION_PROTECTION_NOTIF handling: when determining whether to read mac_id or link_id in struct iwl_mvm_session_prot_notif, the code does not consistently pick the correct field based on the version, l...

CVE-2024-35910

CVE-2024-35910: In the Linux kernel, TCP timer termination for kernel sockets was improved. Previously, inet_csk_clear_xmit_timers() stopped timers via del_timer(), which could allow in-flight kernel-timers to finish after the associated netns had been dismantled, risking use-after-free when the ...

CVE-2024-35909

CVE-2024-35909 affects the Linux kernel wwan/t7xx path where 64-bit register accesses could fault due to 32-bit alignment in some 64‑bit platforms. The fix splits 64-bit accesses into 32-bit pairs to ensure proper alignment, preventing OOPS/paging faults as shown in the crash trace. Remediation i...

CVE-2024-35903

The CVE-2024-35903 entry: In the Linux kernel, x86/bpf: Fix IP after emitting call depth accounting. The issue adjusts the IP passed to emit_patch to compute the correct offset for a CALL when x86_call_depth_emit_accounting emits code; without this, instructions may be skipped and the system coul...

CVE-2024-35901

CVE-2024-35901 relates to the Linux kernel mana driver: mana_get_rxbuf_cfg() aligns the RX DMA datasize to a multiple of 64, enabling a packet around MTU+14 (e.g., 1536) to be received and trigger skb_over_panic. The impact is a kernel panic/BUG in net/core/skbuff.c when skb_panic is hit during s...

CVE-2024-35894

CVE-2024-35894: In the Linux kernel, a mitigation for a subflow-level BPF access issue was implemented in mptcp by preventing BPF from accessing mptcp-level proto_ops from a subflow scope. The root cause was a misconfigured interaction where BPF could reach mptcp proto_ops through a tcp subflow, ...

CVE-2024-35891

The CVE-2024-35891 issue affects the Linux kernel net:phy: micrel area, specifically lan8814_get_sig_rx() and lan8814_get_sig_tx(). The vulnerability stems from ptp_parse_header() returning NULL for abnormally formed or corrupted packets, leading to a potential null pointer dereference. The fix a...

CVE-2024-35890

CVE-2024-35890 : In the Linux kernel, a GRO (generic receive offload) fraglist ownership transfer bug can lead to use-after-free/dos conditions when packets are GROed with fraglist. The issue arises because skb_gro_receive_list removes the socket reference but the skb_segment_list may reuse skbs ...

CVE-2024-35884

The CVE-2024-35884 vulnerability is in the Linux kernel UDP GRO handling for tunneled packets. When rx-udp-gro-forwarding is enabled, GRO can be applied to UDP packets that land in a tunnel, causing various issues due to mismatched geneve/frag_list handling. The issue manifested as incorrect GSO ...