CVE-2024-53170 block: fix uaf for flush rq while iterating tags

In the Linux kernel, the following vulnerability has been resolved: block: fix uaf for flush rq while iterating tags blkmqclearflushrqmapping is not called during scsi probe, by checking blkqueueinitdone. However, QUEUEFLAGINITDONE is cleared in delgendisk by commit aec89dc5d421 "block: keep...

CVE-2024-53170 block: fix uaf for flush rq while iterating tags

In the Linux kernel, the following vulnerability has been resolved: block: fix uaf for flush rq while iterating tags blkmqclearflushrqmapping is not called during scsi probe, by checking blkqueueinitdone. However, QUEUEFLAGINITDONE is cleared in delgendisk by commit aec89dc5d421 "block: keep...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a crash in the probe error path when using polling in the media:i2c:tc358743 module...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a crash in the probe error path when using polling in the media:i2c:tc358743 module...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer issue in imxaudmixprobe in the ASoC imx-audmix subsystem. No detailed vulnerability details a...

The vulnerability of the igbvf component in the Linux operating system’s kernel allows a hacker to gain elevated privileges within the system.

The vulnerability of the igbvf component in the Linux operating system’s kernel is related to errors that occur after the igbvfprobe function is called. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

The vulnerability of the components in Linux operating systems’ kernels for Macintosh/Via MacII, which allows a hacker to cause a service failure.

The vulnerability of the Macintosh/ViaMacII components of the Linux operating system is related to errors in resource management within the maciiprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mm/huge_memory component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mm/hugememory component in the Linux operating system’s kernel is related to improper error handling in the functions cs35l56hdaunbind, cs35l56hdacommonprobe, and cs35l56hdaremove. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the arm_scpi component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the armscpi component in the Linux operating system’s kernel is related to a memory corruption in the scpipmdomainprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

AZL-54930 CVE-2024-53154 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: clk: clk-apple-nco: Add NULL check in applncoprobe Add NULL check in applncoprobe, to handle kernel NULL pointer dereference error...

DEBIAN-CVE-2024-53157

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Check the DVFS OPP count returned by the firmware Fix a kernel crash with the below call trace when the SCPI firmware returns OPP count of zero. dvfsinfo.oppcount may be zero on some platforms during the reboot...

DEBIAN-CVE-2024-53154

In the Linux kernel, the following vulnerability has been resolved: clk: clk-apple-nco: Add NULL check in applncoprobe Add NULL check in applncoprobe, to handle kernel NULL pointer dereference error...

UBUNTU-CVE-2024-53154

In the Linux kernel, the following vulnerability has been resolved: clk: clk-apple-nco: Add NULL check in applncoprobe Add NULL check in applncoprobe, to handle kernel NULL pointer dereference error...

OESA-2024-2571 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Let probe fail when workqueue cannot be enabled The workqueue is enabled when the appropriate driver is loaded and disabled when the driver is...

OESA-2024-2569 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Let probe fail when workqueue cannot be enabled The workqueue is enabled when the appropriate driver is loaded and disabled when the driver is...

arm64: probes: Remove broken LDR (literal) uprobe support

...

ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()

...

The vulnerability of the carl9170 component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the carl9170 component in the Linux operating system is related to insufficient validation of input data in the carl9170usbprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ar5523 component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ar5523 component in the Linux operating system is related to errors in resource management within the ar5523probe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the clk_dvp_probe() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the clkdvpprobe function in the drivers/clk/bcm/clk-bcm2711-dvp.c kernel module of the Linux operating system is related to the use of memory before initialization. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...