Linux Distros Unpatched Vulnerability : CVE-2024-35832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bcachefs: kvfree bchfs::snapshots in bch2fssnapshotsexit bchfs::snapshots is allocated by kvzalloc in snapshottmut. It should be freed by kvfree not kfree. Or...

CVE-2022-49444

In the Linux kernel, the following vulnerability has been resolved: module: fix eshstrndx.shsize=0 OOB access It is trivial to craft a module to trigger OOB access in this line: if info-secstringsstrhdr-shsize - 1 != '\0' BUG: unable to handle page fault for address: ffffc90000aa0fff PGD 10000006...

CVE-2024-56768

CVE-2024-56768 (Linux kernel) : On x86-64, calling bpf_get_smp_processor_id() in builds with CONFIG_SMP disabled can trigger a page fault due to unavailable pcpu_hot. The fix in the patch inline returns 0 for the !CONFIG_SMP path, preventing the fault. References point to the kernel stable histor...