CVE-2024-43839

A vulnerability was found in the Linux kernel involving insufficient buffer size in the bnatcb and bnaccb structures. The buffer, named name, was originally 16 bytes, which was inadequate for all possible sprintf arguments, especially when handling %s and %d specifiers. This limitation could...

CVE-2024-43830

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate Triggers which have trigger specific sysfs attributes typically store related data in trigger-data allocated by the activate callback and freed by the deactivat...

CVE-2024-43831

A flaw was found in the Linux kernel's MediaTek video codec driver involving improper handling of invalid decoder Video Streaming Interface VSI values in the vpudecinit function. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Ha...

CVE-2024-43829

In the Linux kernel, the following vulnerability has been resolved: drm/qxl: Add check for drmcvtmode Add check for the return value of drmcvtmode and return the error if it fails in order to avoid NULL pointer dereference...

CVE-2024-43851

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: rename cpunumber1 to dummycpunumber The per cpu variable cpunumber1 is passed to xlnxeventhandler as argument "devid", but it is not used in this function. So drop the initialization of this variable and rename it to...

CVE-2024-41081

A race condition flaw was found in the Linux kernel's IP Last Anomaly ILA subsystem. This issue occurs when the ilaoutput function, called from lwtunneloutput in process context and under RCU read lock, could be interrupted by a softirq, leading to potential corruption of dstcache data structures...

CVE-2024-43848

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix TTLM teardown work The worker calculates the wrong sdata pointer, so if it ever runs, it'll crash. Fix that...

CVE-2024-43858

In the Linux kernel, the following vulnerability has been resolved: jfs: Fix array-index-out-of-bounds in diFree...

CVE-2024-43844

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: wow: fix GTK offload H2C skbuff issue We mistakenly put skb too large and that may exceed skb-end. Therefore, we fix it. skbuff: skboverpanic: text:ffffffffc09e9a9d len:416 put:204 head:ffff8fba04eca780...

CVE-2024-43820

In the Linux kernel, the following vulnerability has been resolved: dm-raid: Fix WARNONONCE check for syncthread in raidresume rm-raid devices will occasionally trigger the following warning when being resumed after a table load because DMRECOVERYRUNNING is set: WARNING: CPU: 7 PID: 5660 at...

CVE-2024-43825

In the Linux kernel, the following vulnerability has been resolved: iio: Fix the sorting functionality in iiogtsbuildavailtimetable The sorting in iiogtsbuildavailtimetable is not working as intended. It could result in an out-of-bounds access when the time is zero. Here are more details: 1. When...

CVE-2024-43827

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check before access structs In enablephantomplane, we should better check null pointer before accessing various structs...

CVE-2024-43832

In the Linux kernel, the following vulnerability has been resolved: s390/uv: Don't call foliowaitwriteback without a folio reference foliowaitwriteback requires that no spinlocks are held and that a folio reference is held, as documented. After we dropped the PTL, the folio could get freed...

CVE-2024-43817

In the Linux kernel, the following vulnerability has been resolved: net: missing check virtio Two missing check in virtionethdrtoskb allowed syzbot to crash kernels again 1. After the skbsegment function the buffer may become non-linear nrfrags != 0, but since the SKBTXSHAREDFRAG flag is not set...

CVE-2024-43822

In the Linux kernel, the following vulnerability has been resolved: ASoc: PCM6240: Return directly after a failed devmkzalloc in pcmdevicei2cprobe The value “-ENOMEM” was assigned to the local variable “ret” in one if branch after a devmkzalloc call failed at the beginning. This error code will...

CVE-2024-43832

In the Linux kernel, the following vulnerability has been resolved: s390/uv: Don't call foliowaitwriteback without a folio reference foliowaitwriteback requires that no spinlocks are held and that a folio reference is held, as documented. After we dropped the PTL, the folio could get freed...

CVE-2024-43831

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Handle invalid decoder vsi Handle an invalid decoder vsi in vpudecinit to ensure the decoder vsi is valid for future use...

CVE-2024-43820

In the Linux kernel, the following vulnerability has been resolved: dm-raid: Fix WARNONONCE check for syncthread in raidresume rm-raid devices will occasionally trigger the following warning when being resumed after a table load because DMRECOVERYRUNNING is set: WARNING: CPU: 7 PID: 5660 at...

CVE-2024-43860

CVE-2024-43860 affects the Linux kernel remoteproc component for imx_rproc. In imx_rproc_addr_init(), the code may dereference NULL during parsing because of_count_phandle_with_args() can yield empty phandles and of_parse_phandle() may return NULL. The fix adds a NULL-return check to prevent dere...

CVE-2024-43859 f2fs: fix to truncate preallocated blocks in f2fs_file_open()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate preallocated blocks in f2fsfileopen chenyuwen reports a f2fs bug as below: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000011 fscryptsetbiocryptctx+0x78/0x1e8...