Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the net/phy module not properly handling null pointer dereferences in the event of a probe failure...

kernel: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER

A deadlock flaw was found in the Linux kernel’s pinctrl subsystem. This flaw allows a local user to crash the system...

kernel: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER

A deadlock flaw was found in the Linux kernel’s pinctrl subsystem. This flaw allows a local user to crash the system...

PT-2024-33998

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: A reference leak issue has been identified in the Linux kernel, specifically in the fsl/fman part. The problem arises in the mac probe function, where multiple calls to of find device by node...

CLSA-2024-1728935304 kernel: Fix of 12 CVEs

xfs: don't walk off the end of a directory data block CVE-2024-41013 - net/sched: clsu32: fix netns refcount changes in u32change CVE-2022-29581 - net/packet: fix slab-out-of-bounds access in packetrecvmsg CVE-2022-20368 - openvswitch: fix OOB access in reservesfasize CVE-2022-2639 - net: sched:...

scsi: aacraid: Fix double-free on probe failure

...

CVE-2024-43894

...

CVE-2024-38397 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing probe response and assoc response frame...

CVE-2024-38397 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing probe response and assoc response frame...

CVE-2024-38397

CVE-2024-38397 describes a transient denial-of-service in Qualcomm WLAN chipsets during parsing probe response and association response frames. Affected component is Qualcomm embedded/wireless chipset software handling WLAN host communications. Root cause is a parsing/buffer issue (buffer over-re...

CVE-2024-33070 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing ESP IE from beacon/probe response frame...

CVE-2024-33070 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing ESP IE from beacon/probe response frame...

The vulnerability of the sony_probe() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sonyprobe function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2024-25108 · Qualcomm · Snapdragon +3

Name of the Vulnerable Software and Affected Versions: No specific software or affected versions are mentioned in the provided descriptions. Description: A transient Denial of Service DOS issue can occur when parsing the ESP Information Element IE from a beacon or probe response frame. This issue...

SUSE CVE-2024-46856

In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices The probe function is only used for DP83822 and DP83826 PHY, leaving the private data pointer uninitialized for the DP83825 models which causes a NULL pointer...

SUSE CVE-2024-46859

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses The panasonic laptop code in various places uses the SINF array with index values of 0 - SINFCURBRIGHT0x0d without checking that the SINF array is big enough...

CVE-2024-46856

In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices The probe function is only used for DP83822 and DP83826 PHY, leaving the private data pointer uninitialized for the DP83825 models which causes a NULL pointer...

DEBIAN-CVE-2024-46856

In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices The probe function is only used for DP83822 and DP83826 PHY, leaving the private data pointer uninitialized for the DP83825 models which causes a NULL pointer...

CVE-2024-46859

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses The panasonic laptop code in various places uses the SINF array with index values of 0 - SINFCURBRIGHT0x0d without checking that the SINF array is big enough...

DEBIAN-CVE-2024-46859

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses The panasonic laptop code in various places uses the SINF array with index values of 0 - SINFCURBRIGHT0x0d without checking that the SINF array is big enough...