PT-2024-35631

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description The issue is related to the use of drvdata in release, which is not available, causing a crash when removing a ubd device. The crash results in a kernel panic with a segfault and no...

PT-2024-35628

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc6-g59b723cd2adb Description A vulnerability in the Linux kernel has been resolved. The issue is related to the use of drvdata in release, which is not available. This can cause a crash when removing a...

CVE-2024-56599: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: avoid NULL pointer error during sdio remove When running 'rmmod ath10k', ath10ksdioremove will free sdio workqueue by destroyworkqueue. But if CONFIGINITONFREEDEFAULTON is set to yes, kernel panic will happen: Call...

CVE-2024-56575: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Ensure power suppliers be suspended before detach them The power suppliers are always requested to suspend asynchronously, devpmdomaindetach requires the caller to ensure proper synchronization of this function...

CVE-2024-56560: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: slab: Fix too strict alignment check in createcache On m68k, where the minimum alignment of unsigned long is 2 bytes: Kernel panic - not syncing: kmemcachecreateargs: Failed to create slab 'iokiocb'. Error -22 CPU: 0 UID: 0 PID: ...

CVE-2024-53220: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to account dirty data in getsecsrequired It will trigger system panic w/ testcase in 1: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2752! RIP: 0010:newcurseg+0xc81/0x2110 Call Trace:...

PT-2024-35630

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc6-g59b723cd2adb Description A vulnerability in the Linux kernel has been resolved. The issue is related to the use of drvdata in release, which is not available, causing a crash when removing a network...

PT-2024-35627

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the ALSA pcm component, where a driver might allow mmap access before properly initializing its runtime-dma...

CVE-2024-56565: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to drop all discards after creating snapshot on lvm device Piergiorgio reported a bug in bugzilla as below: ------------ cut here ------------ WARNING: CPU: 2 PID: 969 at fs/f2fs/segment.c:1330 RIP:...

CVE-2024-53184: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: um: ubd: Do not use drvdata in release The drvdata is not available in release. Let's just use containerof to get the ubd instance. Otherwise, removing a ubd device will result in a crash: RIP: 0033:blkmqfreetagset+0x1f/0xba RSP:...

CVE-2024-56618: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: gpcv2: Adjust delay after power up handshake The udelay5 is not enough, sometimes below kernel panic still be triggered: 4.012973 Kernel panic - not syncing: Asynchronous SError Interrupt 4.012976 CPU: 2 UID: 0 PID...

CVE-2024-53189: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix bounds checker error in nl80211parseschedscan The channels array in the cfg80211scanrequest has a countedby attribute attached to it, which points to the nchannels variable. This attribute is used in bounds...

CVE-2024-53181: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: um: vector: Do not use drvdata in release The drvdata is not available in release. Let's just use containerof to get the vectordevice instance. Otherwise, removing a vector device will result in a crash: RIP:...

CVE-2024-53180: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Add sanity NULL check for the default mmap fault handler A driver might allow the mmap access before initializing its runtime-dmaarea properly. Add a proper NULL check before passing to virttopage for avoiding a panic...

PT-2024-36881

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.36-gd23d64eea511 Description A vulnerability in the Linux kernel has been resolved, specifically in the media: imx-jpeg component. The issue arises when power suppliers are not properly suspended before being...

Unsound usages of `u8` type casting in spl-token-swap

The library provides a safe public API unpack to cast u8 array to arbitrary types, which can cause to undefined behaviors. The length check of array can only prevent out-of-bound access on the return type. However, it can't prevent misaligned pointer when casting u8 pointer to a type aligned to...

AlmaLinux 9 : skopeo (ALSA-2024:11217)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:11217 advisory. encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34156 Tenable...

RockyLinux 8 : container-tools:rhel8 (RLSA-2024:10289)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:10289 advisory. golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents CVE-2021-33198 podman: podman machine...

PT-2025-3638

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a kernel panic that occurs when panic on warn is enabled, caused by the unnecessary use of WARN ON in functionfs bind. This leads to a race condition between the...

PT-2024-40969 · Solana · Solana Program Library

Name of the Vulnerable Software and Affected Versions: Solana Program Library affected versions not specified Description: The issue arises from the unpack function in the library, which can lead to undefined behavior when casting a u8 array to arbitrary types. This is due to the potential for...