CVE-2024-50103

CVE-2024-50103 concerns a Linux kernel vulnerability in ASoC: qcom where asoc_qcom_lpass_cpu_platform_probe() could dereference a NULL pointer from a devm_kzalloc() call. The fixed code adds a NULL check after allocation to prevent NULL Pointer Dereference. Affected component is the kernel’s ASoC...

CVE-2024-50103 ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix NULL Dereference in asocqcomlpasscpuplatformprobe A devmkzalloc in asocqcomlpasscpuplatformprobe could possibly return NULL pointer. NULL Pointer Dereference may be triggerred without addtional check. Add a NULL...

CVE-2024-50104: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: sdm845: add missing soundwire runtime stream alloc During the migration of Soundwire runtime stream allocation from the Qualcomm Soundwire controller to SoC's soundcard drivers the sdm845 soundcard was forgotten. At...

PT-2024-33936

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: A NULL Pointer Dereference issue has been identified in the Linux kernel, specifically in the asoc qcom lpass cpu platform probe function. This issue arises when a devm kzalloc call returns a...

CVE-2024-50105: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc Commit 15c7fab0e047 "ASoC: qcom: Move Soundwire runtime stream alloc to soundcards" moved the allocation of Soundwire stream runtime from the Qualcomm Soundwire drive...

CVE-2024-50103: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix NULL Dereference in asocqcomlpasscpuplatformprobe A devmkzalloc in asocqcomlpasscpuplatformprobe could possibly return NULL pointer. NULL Pointer Dereference may be triggerred without addtional check. Add a NULL...

PT-2024-10197

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the function qcom pcie perst deassert in the Linux kernel, which is connected to an uncontrolled reachable assertion. This could allow a remote attacker to cause ...

PT-2024-35547

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the usb: typec: qcom-pmic module. The issue occurs when the read of USB PDPHY RX ACKNOWLEDGE REG fails, resulting i...

Oracle Linux 7 / 8 / 9 : linux-firmware (ELSA-2024-12797)

The remote Oracle Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12797 advisory. 20241003-999.35.git95bfe086.el8 - Rebase to latest upstream Orabug: 37132142 - Fix build error in ol7 due to linking in copy-firmware.sh Orabu...

PT-2024-33938

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel, specifically the ASoC: qcom: sc7280 component. A commit moved the allocation of Soundwire stream runtime from the Qualcomm Soundwire driver to...

PT-2024-34069

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the phy: qcom: qmp-usbc driver. The issue was caused by a commit that removed the initialisation of the platform...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-46689)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46689 advisory. - In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as...

PT-2024-35532

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL-pointer dereference in the Linux kernel's firmware, specifically in the qcom scm component. Some SCM calls can be invoked with scm being NULL, which occurs...

PT-2024-41617

Уязвимость функции qcom scm get tzmem pool модуля drivers/firmware/qcom/qcom scm.c - драйвера поддержки прошивок ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2024-071 (ALASKERNEL-5.10-2024-071)

The version of kernel installed on the remote host is prior to 5.10.225-213.878. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2024-071 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: don't allow mapping the...

PT-2024-9928

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an array underflow in the geni se clk tbl get function of the QCOM GENI Serial Engine Driver in the Linux kernel. This underflow occurs because a loop does not...

SUSE CVE-2024-46868

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix deadlock in qcuefiacquire If the qcuefi pointer is not set, then in the original code, we would hold onto the lock. That means that if we tried to set it later, then it would cause a deadlock. Drop...

CVE-2024-46868

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix deadlock in qcuefiacquire If the qcuefi pointer is not set, then in the original code, we would hold onto the lock. That means that if we tried to set it later, then it would cause a deadlock. Drop...

DEBIAN-CVE-2024-46868

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix deadlock in qcuefiacquire If the qcuefi pointer is not set, then in the original code, we would hold onto the lock. That means that if we tried to set it later, then it would cause a deadlock. Drop...

CVE-2024-46868

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix deadlock in qcuefiacquire If the qcuefi pointer is not set, then in the original code, we would hold onto the lock. That means that if we tried to set it later, then it would cause a deadlock. Drop...