7328 matches found
CVE-2024-47704 drm/amd/display: Check link_res->hpo_dp_link_enc before using it
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check linkres-hpodplinkenc before using it WHAT & HOW Functions dpenablelinkphy and dpdisablelinkphy can pass linkres without initializing hpodplinkenc and it is necessary to check for null before dereferencing...
CVE-2024-47703
CVE-2024-47703 — Linux kernel (BPF-LSM return value) details . A BPF program attached to the file_alloc_security LSM hook could cause a kernel panic if the LSM returns a positive value, which the kernel could misinterpret as a file pointer. The issue arises because the positive return was not val...
CVE-2024-47703 bpf, lsm: Add check for BPF LSM return value
In the Linux kernel, the following vulnerability has been resolved: bpf, lsm: Add check for BPF LSM return value A bpf prog returning a positive number attached to fileallocsecurity hook makes kernel panic. This happens because file system can not filter out the positive number returned by the LS...
CVE-2024-47701 ext4: avoid OOB when system.data xattr changes underneath the filesystem
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem When looking up for an entry in an inlined directory, if evalueoffs is changed underneath the filesystem by some change in the block device, it will lead to...
CVE-2024-47695 RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Reset cid to connum - 1 to stay in bounds In the function initconns, after the createcon and createcm for loop if something fails. In the cleanup for loop after the destroy tag, we access out of bound memory becaus...
CVE-2024-47695
CVE-2024-47695 affects the Linux kernel RDMA/rtrs-clt component. The bug occurs in init_conns() cleanup: after create_con() and create_cm(), cid can go out of bounds, leading to out-of-bounds memory access when clt_path->s.con_num is used. A patch fixes this by resetting cid to clt_path->s....
CVE-2024-47691 f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid use-after-free in f2fsstopgcthread syzbot reports a f2fs bug as below: dumpstack lib/dumpstack.c:88 inline dumpstacklvl+0x241/0x360 lib/dumpstack.c:114 printreport+0xe8/0x550 mm/kasan/report.c:491...
CVE-2024-47687 vdpa/mlx5: Fix invalid mr resource destroy
In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix invalid mr resource destroy Certain error paths from mlx5vdpadevadd can end up releasing mr resources which never got initialized in the first place. This patch adds the missing check in mlx5vdpadestroymrresources ...
CVE-2024-47679
In CVE-2024-47679, a race exists in the Linux kernel VFS between evict_inodes() (triggered via iput() and generic_shutdown_super()) and btrfs/iget() path through find_inode(). The race can allow an inode (example ino 261) to be evicted by one thread while another thread revalidates and reuses it,...
OESA-2024-2262 systemd security update
systemd is a system and service manager that runs as PID 1 and starts the rest of the system. Security Fixes: A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middl...
CVE-2024-46762 affecting package kernel for versions less than 6.6.51.1-5
CVE-2024-46762 affecting package kernel for versions less than 6.6.51.1-5. An upgraded version of the package is available that resolves this issue...
CVE-2024-47674
Technical details about CVE-2024-47674 are not publicly provided in the supplied documents; monitor for updates from official advisories.
CVE-2024-47674 mm: avoid leaving partial pfn mappings around in error case
In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal memory mappings, there is no lifetime information associated with the mapping - it is just a raw...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-44946)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44946 advisory. - In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcmsendmsg for the same...
CVE-2024-46757 affecting package kernel for versions less than 5.15.167.1-1
CVE-2024-46757 affecting package kernel for versions less than 5.15.167.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-47868
Gradio is an open-source Python package designed for quick prototyping. This is a data validation vulnerability affecting several Gradio components, which allows arbitrary file leaks through the post-processing step. Attackers can exploit these components by crafting requests that bypass expected...
CVE-2024-47668
In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in genradixptralloc If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth before us, we'll still have a preallocated no...
CVE-2024-47668
In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in genradixptralloc If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth before us, we'll still have a preallocated no...
CVE-2024-47673 wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pause TCM when the firmware is stopped Not doing so will make us send a host command to the transport while the firmware is not alive, which will trigger a WARNING. bad state = 0 WARNING: CPU: 2 PID: 17434 at...