CVE-2024-53213 net: usb: lan78xx: Fix double free issue with interrupt buffer allocation

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation In lan78xxprobe, the buffer buf was being freed twice: once implicitly through usbfreeurbdev-urbintr with the URBFREEBUFFER flag and again explicitly by...

CVE-2024-53199 ASoC: imx-audmix: Add NULL check in imx_audmix_probe

In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-audmix: Add NULL check in imxaudmixprobe devmkasprintf can return a NULL pointer on failure,but this returned value in imxaudmixprobe is not checked. Add NULL check in imxaudmixprobe, to handle kernel NULL pointer...

CVE-2024-53198 xen: Fix the issue of resource not being properly released in xenbus_dev_probe()

In the Linux kernel, the following vulnerability has been resolved: xen: Fix the issue of resource not being properly released in xenbusdevprobe This patch fixes an issue in the function xenbusdevprobe. In the xenbusdevprobe function, within the if err branch at line 313, the program incorrectly...

CVE-2024-53170 block: fix uaf for flush rq while iterating tags

In the Linux kernel, the following vulnerability has been resolved: block: fix uaf for flush rq while iterating tags blkmqclearflushrqmapping is not called during scsi probe, by checking blkqueueinitdone. However, QUEUEFLAGINITDONE is cleared in delgendisk by commit aec89dc5d421 "block: keep...

CVE-2024-53170 block: fix uaf for flush rq while iterating tags

In the Linux kernel, the following vulnerability has been resolved: block: fix uaf for flush rq while iterating tags blkmqclearflushrqmapping is not called during scsi probe, by checking blkqueueinitdone. However, QUEUEFLAGINITDONE is cleared in delgendisk by commit aec89dc5d421 "block: keep...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a crash in the probe error path when using polling in the media:i2c:tc358743 module...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a crash in the probe error path when using polling in the media:i2c:tc358743 module...

PT-2024-36882

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.11.0 Description A crash can occur in the Linux kernel when using polling in the probe error path of the tc358743 i2c driver. If an error occurs in the probe function, the polling timer that was alarmed earlier should be...

PT-2024-36880

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc2+ Description A null pointer dereference issue was found in the Linux kernel when using sysfs to dynamically register an i2c device. The issue occurs because the probe process of ts2020 needs to use...

CVE-2024-53223: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs Base clocks are the first in being probed and are real dependencies of the rest of fixed, factor and peripheral clocks. For old ralink SoCs RT2880, RT305x and RT38...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer issue in imxaudmixprobe in the ASoC imx-audmix subsystem. No detailed vulnerability details a...

PT-2024-36873

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A null pointer dereference occurs due to a race between the smmu driver probe and client driver probe. This happens when of dma configure for the client is called after iommu device register fo...

PT-2024-35645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource release issue in the xenbus dev probe function has been identified. The function incorrectly returns an error without releasing resources allocated by drv-probedev, id, leadin...

CVE-2024-56576: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix crash in the probe error path when using polling If an error occurs in the probe function, we should remove the polling timer that was alarmed earlier, otherwise the timer is called with arguments that a...

igbvf Component Privilege Escalation

The vulnerability of the igbvf component in the Linux operating system’s kernel is related to errors that occur after the igbvfprobe function is called. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

Linux kernel Macintosh DoS

The vulnerability of the Macintosh/ViaMacII components of the Linux operating system is related to errors in resource management within the maciiprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the mm/hugememory component in the Linux operating system’s kernel is related to improper error handling in the functions cs35l56hdaunbind, cs35l56hdacommonprobe, and cs35l56hdaremove. Exploiting this vulnerability can allow an attacker to cause a service failure...

arm_scpi Component DoS

The vulnerability of the armscpi component in the Linux operating system’s kernel is related to a memory corruption in the scpipmdomainprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

AZL-54930 CVE-2024-53154 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: clk: clk-apple-nco: Add NULL check in applncoprobe Add NULL check in applncoprobe, to handle kernel NULL pointer dereference error...

DEBIAN-CVE-2024-53157

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Check the DVFS OPP count returned by the firmware Fix a kernel crash with the below call trace when the SCPI firmware returns OPP count of zero. dvfsinfo.oppcount may be zero on some platforms during the reboot...