Spoofing

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Do not enable irqs when handling spurious interrups We triggered the following error while running our 4.19 kernel with the pseudo-NMI patches backported to it: 14.816231 ------------ cut here ------------ 14.8162...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix unconditional securitylockeddown call Currently, the lockdown state is queried unconditionally, even though its result is used only if the PERFSAMPLEREGSINTR bit is set in attr.sampletype. While that doesn't matter...

Design/Logic Flaw

In the Linux kernel, the following vulnerability has been resolved: tools/power turbostat: Fix offset overflow issue in index converting The idxtooffset function returns type int 32-bit signed, but MSRPKGENERGYSTAT is u32 and would be interpreted as a negative number. The end result is that it hi...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/cpufreqcooling: Fix slab OOB issue Slab OOB issue is scanned by KASAN in cpupowertofreq. If power is limited below the power of OPP0 in EM table, it will cause slab out-of-bound issue with negative array index...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: ovl: fix leaked dentry Since commit 6815f479ca90 "ovl: use only uppermetacopy state in ovllookup", overlayfs doesn't put temporary dentry when there is a metacopy error, which leads to dentry leaks when shutting down the related...

CVE-2024-27099

CVE-2024-27099 affects the Azure uAMQP C library (AMQP 1.0) and is caused by a double-free when processing an incorrect AMQP_VALUE failed state, which may lead to remote code execution. The vulnerability is addressed by updating the submodule to commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987. Se...

CVE-2021-46975

CVE-2021-46975 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2021-46974

CVE-2021-46974: In the Linux kernel BPF verifier, the masking/negation logic when the off_reg is in the dst register was incorrect, potentially producing wrong pointer arithmetic results. The fix unconditionally applies the final bitwise and into AX from off_reg, then moves src→dst and uses AX as...

CVE-2021-46972

CVE-2021-46972 affects Linux kernel overlayfs (ovl). The issue is a leaked dentry that occurs when metacopy errors happen during unmount, due to overlayfs not creating a temporary dentry after a metacopy error. The fix (commit 6815f479ca90) switches ovl_lookup() to use only the uppermetacopy stat...

CVE-2021-46971

The CVE-2021-46971 entry corresponds to a Linux kernel fix in perf/core: the lockdown state was queried unconditionally, but its result is only needed if PERF_SAMPLE_REGS_INTR is set in attr.sample_type. This unconditional check could trigger SELinux lockdown hooks unnecessarily, potentially caus...

CVE-2021-46968

CVE-2021-46968 concerns the Linux kernel s390/zcrypt subsystem. The issue was a memleak on hot-unplug for zcard and zqueue due to a mismatch in get/put for an embedded kref counter. The fix adjusts kref handling: the counter starts at 1 on init and must drop to zero on unregister (for both card a...

CVE-2021-46965

CVE-2021-46965 : Linux kernel mtd/physmap/physmap-bt1-rom vulnerability where casting &data to (char ) caused unintentional stack access; the fix corrects the byte offset calculation (data is u32) to prevent out-of-bounds/stacks access. Affected code and root cause are documented in the upstream ...

CVE-2021-46966

CVE-2021-46966 affects the Linux kernel: a use-after-free vulnerability in ACPI custom_method code where cm_write() could access a freed buf if count

CVE-2021-46962

CVE-2021-46962 : Linux kernel mmc: uniphier-sd driver fix for resource leak in remove path. A missing tmio_mmc_host_free() balanced a prior tmio_mmc_host_alloc() in probe, creating a leak in the error path during removal. The fix adds the missing tmio_mmc_host_free() call in the remove function t...

CVE-2021-46963

CVE-2021-46963 is a Linux kernel vulnerability in the SCSI qla2xxx driver where an incorrect free of an Srb object caused a crash. The fix updates qla2xxx_mqueuecommand() to stop freeing srb (now allocated by upper layers), preventing srb double-free/invalid free. Connected advisories confirm the...

CVE-2021-46961

CVE-2021-46961 involves the Linux kernel where handling of spurious interrupts in the GICv3 IRQ path could trigger a nested NMI and a BUG_ON(in_nmi()), causing a kernel panic. The root cause is enabling IRQs while processing spurious interrups; a rewrite of the commit moved spurious interrupt han...

CVE-2021-46960

CVE-2021-46960 corresponds to a Linux kernel CIFS issue where the error code from smb2_get_enc_key was returned incorrectly, triggering a potentially misleading warning in CIFS writeback paths. The description notes that the vulnerability has been resolved in the kernel by returning the correct e...

CVE-2021-46953

The CVE-2021-46953 issue affects the Linux kernel ACPI GTDT driver. If a probe fails due to invalid firmware properties, the driver may unmap an interrupt it mapped earlier without verifying that the mapping succeeded, and if the firmware reports an interrupt number overlapping the GIC SGI range,...

CVE-2021-46951

CVE-2021-46951 (Linux kernel) concerns a local vulnerability in TPM support where tpm_read_log_efi could trigger integer underflow of efi_tpm_final_log_size when a TPM2 driver is loaded/unloaded repeatedly. The issue arises from subtracting final_events_preboot_size from a global final log size, ...

CVE-2021-46949

CVE-2021-46949 concerns the Linux kernel sfc (Solarflare) network driver path: farch TX queue lookup during TX flush done handling. The root cause is starting TXQ processing from a TXQ instance number (qid) rather than a TXQ type, which could cause efx_get_tx_queue() to return NULL and trigger pa...