6340 matches found
CVE-2024-26720
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-26693
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix a crash when we run out of stations A DoS tool that injects loads of authentication frames made our AP crash. The iwlmvmisdup function couldn't find the per-queue dupdata which was not allocated. The root...
CVE-2024-26699
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix array-index-out-of-bounds in dcn35clkmgr Why There is a potential memory access violation while iterating through array of dcn35 clks. How Limit iteration per array size...
CVE-2024-26711
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4130: zero-initialize clock init data The clkinitdata struct does not have all its members initialized, causing issues when trying to expose the internal clock on the CLK pin. Fix this by zero-initializing the...
CVE-2024-26698
In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Fix race condition between netvscprobe and netvscremove In commit ac5047671758 "hvnetvsc: Disable NAPI before closing the VMBus channel", napidisable was getting called for all channels, including all subchannels withou...
CVE-2024-26707
In the Linux kernel, the following vulnerability has been resolved: net: hsr: remove WARNONCE in sendhsrsupervisionframe Syzkaller reported 1 hitting a warning after failing to allocate resources for skb in hsrinitskb. Since a WARNONCE call will not help much in this case, it might be prudent to...
CVE-2024-26685
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential bug in endbufferasyncwrite According to a syzbot report, endbufferasyncwrite, which handles the completion of block device writes, may detect abnormal condition of the buffer asyncwrite flag and cause a BUGO...
CVE-2024-26727
CVE-2024-26727 (Linux kernel, btrfs subvolume creation) Concrete details are present in connected Astra/Linux advisory. The issue arises when creating a new subvolume under btrfs: after inserting the root item, a backref/read could access the subvolume before a preallocated anonymous device (anon...
CVE-2024-26714
CVE-2024-26714 affects the Linux kernel interconnect/qcom sc8180x module. Root cause: CO0 BCM must stay up as a keepalive to prevent hardware such as the UFS controller from losing connectivity, which can hang the platform and trigger heavy logspam. Documented fix marks CO0 BCM keepalive to ensur...
CVE-2024-26710 powerpc/kasan: Limit KASAN thread size increase to 32KB
In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Limit KASAN thread size increase to 32KB KASAN is seen to increase stack usage, to the point that it was reported to lead to stack overflow on some 32-bit machines see link. To avoid overflows the stack size was...
CVE-2024-26709 powerpc/iommu: Fix the missing iommu_group_put() during platform domain attach
In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the missing iommugroupput during platform domain attach The function spaprtceplatformiommuattachdev is missing to call iommugroupput when the domain is already set. This refcount leak shows up with BUGON during...
CVE-2024-26709 powerpc/iommu: Fix the missing iommu_group_put() during platform domain attach
In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the missing iommugroupput during platform domain attach The function spaprtceplatformiommuattachdev is missing to call iommugroupput when the domain is already set. This refcount leak shows up with BUGON during...
CVE-2024-26707
The connected documents provide concrete details for CVE-2024-26707: in the Linux kernel net/hsr code, WARN_ONCE() in send_hsr_supervision_frame() is removed and replaced with netdev_warn_once(), and a similar change is suggested for send_prp_supervision_frame() to quiet syzkaller warnings. This ...
CVE-2024-26705
The CVE-2024-26705 issue affects the Linux kernel parisc BTLB path during CPU bringup with hotplug for 32-bit CPUs. The crash occurred when querying BTLB information from firmware to set up static TLB entries, because the static btlb_info struct required write access but was marked __ro_after_ini...
CVE-2024-26705
In the Linux kernel, the following vulnerability has been resolved: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup When using hotplug and bringing up a 32-bit CPU, ask the firmware about the BTLB information to set up the static block TLB entries. For that write access to the static...
CVE-2024-26702
In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: rm3100: add boundary check for the value read from RM3100REGTMRC Recently, we encounter kernel crash in function rm3100commonprobe caused by out of bound access of array rm3100samprates because of underlying...
CVE-2024-26703
CVE-2024-26703 affects the Linux kernel tracing/timerlat: the hrtimer was previously initialized at first timerlat_fd read and destroyed on close, which could trigger a NULL pointer dereference if a user opens and closes timerlat_fd without reading. A fix was implemented to move hrtimer_init to t...
CVE-2024-26699 drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix array-index-out-of-bounds in dcn35clkmgr Why There is a potential memory access violation while iterating through array of dcn35 clks. How Limit iteration per array size...