CVE-2024-35950

In the Linux kernel, the following vulnerability has been resolved: drm/client: Fully protect modes with dev-modeconfig.mutex The modes array contains pointers to modes on the connectors' mode lists, which are protected by dev-modeconfig.mutex. Thus we need to extend modes the same protection or ...

CVE-2024-35979

In the Linux kernel, the following vulnerability has been resolved: raid1: fix use-after-free for original bio in raid1writerequest r1bio-bios is used to record new bios that will be issued to underlying disks, however, in raid1writerequest, r1bio-bios will set to the original bio temporarily...

CVE-2024-35984

In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: fix NULL function pointer dereference Baruch reported an OOPS when using the designware controller as target only. Target-only modes break the assumption of one transfer function always being available. Fix this by...

CVE-2024-35990

A flaw was found in the Linux kernel’s xilinxdpdma module. Improper locking can cause locking dependency warnings, resulting in a denial of service...

CVE-2024-35936

A flaw was found in the Linux kernel’s btrfs module. An unhandled chunk tree lookup error in the btrfsrelocatesyschunks function in the fs/btrfs/volumes.c file will cause a denial of service...

CVE-2024-35863

A use-after-free flaw was found in the Linux kernel in smb isvalidoplockbreak when exiting a session. This flaw allows a local attacker to crash the system...

CVE-2024-35924

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Limit read size on v1.2 Between UCSI 1.2 and UCSI 2.0, the size of the MESSAGEIN region was increased from 16 to 256. In order to avoid overflowing reads for older systems, add a mechanism to use the read UCSI...

CVE-2024-35919

A vulnerability was found in the Linux kernel's MediaTek vcodec driver, where the lack of a lock for the encoder context list ctxlist could lead to accessing a NULL pointer in the vpuencipihandler function. This issue occurs when the context list is deleted unexpectedly due to a behavior in the S...

CVE-2024-35918

A cryptographic low entropy vulnerability was found in the Linux kernel, where the kstackoffset variable only uses the low bits for kernel stack offset entropy. This issue can result in loss of overall security of the system. Mitigation Mitigation for this issue is either not available or the...

CVE-2024-35874

A vulnerability was found in the Linux kernel that causes a NULL pointer dereference in the aiocomplete function during a wakeup operation. The issue arises because finishwait may skip locking if it encounters an empty list head. This leads to a NULL pointer dereference when attempting a wakeup...

CVE-2024-35884

CVE-2024-35884 highlights a flaw in the Linux kernel's handling of UDP packets when Generic Receive Offload GRO forwarding is enabled. The issue occurs because non-tunnel UDP packets are sometimes mistakenly processed as if they belong to a tunnel. This can lead to data corruption or kernel...

CVE-2024-35892

CVE-2024-35892 is a vulnerability in the Linux kernel’s network scheduler caused by improper use of the qdisclookup function. This function assumes the global RTNL lock is held, but in the qdisctreereducebacklog function, only a local queue lock is used. This mismatch creates a race condition tha...

CVE-2024-35902

In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp-cpconn would produce null dereference Simon Horman adds: Analysis: cp is a parameter of rdsrdmamap and is not reassigned. The following call-sites pass a NULL...

CVE-2024-35901

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix Rx DMA datasize and skboverpanic managetrxbufcfg aligns the RX buffer's DMA datasize to be multiple of 64. So a packet slightly bigger than mtu+14, say 1536, can be received and cause skboverpanic. Sample dmesg:...

CVE-2024-35914

In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix error cleanup path in nfsdrename Commit a8b0026847b8 "rename: avoid a deadlock in the case of parents having no common ancestor" added an error bail out path. However this path does not drop the remount protection that...

CVE-2024-35912

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: rfi: fix potential response leaks If the rx payload length check fails, or if kmemdup fails, we still need to free the command response. Fix that...

CVE-2024-35992

In the Linux kernel, the following vulnerability has been resolved: phy: marvell: a3700-comphy: Fix out of bounds read There is an out of bounds read access of 'gbephyinitfixfixidx.addr' every iteration after 'fixidx' reaches 'ARRAYSIZEgbephyinitfix'. Make sure 'gbephyinitaddr' is used when all...

CVE-2024-35996

In the Linux kernel, the following vulnerability has been resolved: cpu: Re-enable CPU mitigations by default for !X86 architectures Rename x86's to CPUMITIGATIONS, define it in generic code, and force it on for all architectures exception x86. A recent commit to turn mitigations off by default i...

CVE-2024-35981

In the Linux kernel, the following vulnerability has been resolved: virtionet: Do not send RSS key if it is not supported There is a bug when setting the RSS options in virtionet that can break the whole machine, getting the kernel into an infinite loop. Running the following command in any QEMU...

CVE-2024-35979

In the Linux kernel, the following vulnerability has been resolved: raid1: fix use-after-free for original bio in raid1writerequest r1bio-bios is used to record new bios that will be issued to underlying disks, however, in raid1writerequest, r1bio-bios will set to the original bio temporarily...