CVE-2024-53083 usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier

In the Linux kernel, the following vulnerability has been resolved: usb: typec: qcom-pmic: init value of hdrlen/txbuflen earlier If the read of USBPDPHYRXACKNOWLEDGEREG failed, then hdrlen and txbuflen are uninitialized. This commit stops to print uninitialized value and misleading/false data...

CVE-2024-53069 firmware: qcom: scm: fix a NULL-pointer dereference

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: fix a NULL-pointer dereference Some SCM calls can be invoked with scm being NULL the driver may not have been and will not be probed as there's no SCM entry in device-tree. Make sure we don't dereference a NU...

CVE-2024-53068 firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix slab-use-after-free in scmibusnotifier The scmidev-name is released prematurely in scmidevicedestroy, which causes slab-use-after-free when accessing scmidev-name in scmibusnotifier. So move the release of...

SUSE CVE-2024-50266

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: videocc-sm8350: use HWCTRLTRIGGER for vcodec GDSCs A recent change in the venus driver results in a stuck clock on the Lenovo ThinkPad X13s, for example, when streaming video in firefox: videoccmvs0clk status stuck at...

The vulnerability of the vdec_close() function in the Qualcomm Venus V4L2 driver for Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vdecclose function in the drivers/media/platform/qcom/venus/vdec.c file of the Qualcomm Venus V4L2 driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the qcom component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the qcom component in the Linux operating system’s kernel is related to read misses beyond the buffer boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the qcom component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the qcom component in the Linux operating system’s kernel is related to errors in reading beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the qcom component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the qcom component in the Linux operating system’s kernel is related to read misses beyond the memory boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the qcom component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the qcom component in the Linux operating system’s kernel is related to errors in reading beyond the boundary in the F function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the qcom component in the Linux operating system’s kernel allows a hacker to manipulate the accessibility of protected information.

The vulnerability of the qcom component in the Linux operating system’s kernel is related to errors in reading beyond the boundary of the function F. Exploiting this vulnerability can allow an attacker to influence the accessibility of protected information...

The vulnerability of the qcom component in the Linux operating system’s kernel allows a hacker to influence the accessibility of protected information.

The vulnerability of the qcom component in the Linux operating system’s kernel is related to read misses outside of the memory boundary. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

Qualcomm Bluetooth Controller Vulnerability - Lenovo Support US

No description provided...

Qualcomm Bluetooth Controller Vulnerability - Lenovo Support US

No description provided...

kernel: PCI/ASPM: Fix deadlock when enabling ASPM

A flaw was found in the Linux kernel, where a deadlock scenario was triggered when enabling Active State Power Management ASPM during the probe of Qualcomm PCIe controllers. This deadlock was identified by lockdep and stemmed from a recursive locking scenario. This issue occurred when a task...

kernel: regmap-irq: Fix out-of-bounds access when allocating config buffers

An off-by-one style bug exists in regmapaddirqchipfwnode where the allocation loop uses numconfigregs instead of numconfigbases as its termination condition. When numconfigregs exceeds numconfigbases, memory beyond the allocated row pointer array gets overwritten. KASAN caught this corruption...

SUSE CVE-2024-50240

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data, but mistakenly also removed the initialisation...

AZL-53301 CVE-2024-50239 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data from the qcom-qmp-usb driver, but mistakenl...

DEBIAN-CVE-2024-50239

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data from the qcom-qmp-usb driver, but mistakenl...

UBUNTU-CVE-2024-50240

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data, but mistakenly also removed the initialisation...

UBUNTU-CVE-2024-50238

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data from the qcom-qmp-usb driver, but mistakenly also...