CVE-2024-26682

A vulnerability was found in the Linux kernel, in the handling of CSA and ECSA elements during connection attempts. This issue can lead to network instability issues where certain APs are never connected to because the connection is wrongly blocked...

CVE-2024-26677

A vulnerability in the Linux kernel affects the Remote Procedure Call over the Rx protocol rxrpc subsystem. The flaw involves an issue with delayed acknowledgments ACKs in which the system mistakenly sets the reference serial number. This reference serial number is not valid in this context and...

CVE-2024-26683

A vulnerability was found in the Linux kernel. This issue occurs when an AP continually advertises a stuck ECSA element, leading to incorrect channel switch process handling. This can lead to network connectivity issues if the AP is stuck in a state where it continuously advertises a false channe...

CVE-2024-26672

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix variable 'mcafuncs' dereferenced before NULL check in 'amdgpumcasmugetmcaentry' Fixes the below: drivers/gpu/drm/amd/amdgpu/amdgpumca.c:377 amdgpumcasmugetmcaentry warn: variable dereferenced before check 'mcafunc...

CVE-2023-52630

A vulnerability was found in the blk-iocost module of Linux Kernel, where a shift-out-of-bounds warning due to discrepancies in timestamp handling during CPU transitions in iocgkickdelay, occurred when called from a different CPU, @now could be earlier than @iocg-delayat, triggering an...

CVE-2024-26661

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21setpipe' In "u32 otginst = pipectx-streamres.tg-inst;" pipectx-streamres.tg could be NULL, it is relying on the caller to ensure the tg is not NULL...

CVE-2024-26671

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix IO hang from sbitmap wakeup race In blkmqmarktagwait, addwaitqueue may be re-ordered with the following blkmqgetdrivertag in case of getting driver tag failure. Then in sbitmapqueuewakeup, waitqueueactive may not...

CVE-2024-26668

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlimit: reject configurations that cause integer overflow Reject bogus configs where internal token counter wraps around. This only occurs with very very large requests, such as 17gbyte/s. Its better to reject this...

CVE-2023-52631

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix an NULL dereference bug The issue here is when this is called from ntfsloadattrlist. The "size" comes from le32tocpuattr-res.datasize so it can't overflow on a 64bit systems but on 32bit systems the "+ 1023" can...

Advisory ROSA-SA-2024-2387

Software: slapi-nis 0.56.6 OS: ROSA Virtualization 2.1 packageevrstring: slapi-nis-0.56.6-2.rv3 CVE-ID: CVE-2021-3480 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Dereferencing a null pointer during DN binding analysis could allow an unauthenticated attacker to cause the 389-ds-base directory server to...

CVE-2024-26684

CVE-2024-26684 relates to the Linux kernel net/stmmac/xgmac path. The root cause is unhandled Data Path Parity Errors (DPP) for DMA channels, which can trigger a storm of interrupts. The fix, per the connected sources, is to check and clear the DMA_DPP_Interrupt_Status register for each channel. ...

CVE-2024-26684

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac: fix handling of DPP safety error for DMA channels Commit 56e58d6c8a56 "net: stmmac: Implement Safety Features in XGMAC core" checks and reports safety errors, but leaves the Data Path Parity Errors for each...

CVE-2024-26683 wifi: cfg80211: detect stuck ECSA element in probe resp

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: detect stuck ECSA element in probe resp We recently added some validation that we don't try to connect to an AP that is currently in a channel switch process, since that might want the channel to be quiet or we...

CVE-2024-26682

CVE-2024-26682 affects the Linux kernel's wifi/mac80211 CSA/ECSA handling. The patch fixes: (1) ignoring ECSA elements stuck in probe responses when cfg80211 previously detected them, preventing false connection refusals during CSA; and (2) permitting connections to APs switching to a channel alr...

CVE-2024-26679

In the Linux kernel, the following vulnerability has been resolved: inet: read sk-skfamily once in inetrecverror inetrecverror is called without holding the socket lock. IPv6 socket could mutate to IPv4 with IPV6ADDRFORM socket option and trigger a KCSAN warning...

CVE-2024-26678

CVE-2024-26678 affects the Linux kernel’s x86/efistub pathway. The vulnerability arises from using a 1:1 file:memory mapping for the PE/COFF .compat section, which is an 8-byte dummy section containing the 32-bit entrypoint address of a 64-bit kernel image when booted from 32-bit firmware (CONFIG...

CVE-2024-26675

In the Linux kernel, the following vulnerability has been resolved: pppasync: limit MRU to 64K syzbot triggered a warning 1 in allocpages: WARNONONCEGFPorder MAXPAGEORDER, gfp Willem fixed a similar issue in commit c0a2a1b0d631 "ppp: limit MRU to 64K" Adopt the same sanity check for...

CVE-2023-52636

The connected OSV entries confirm CVE-2023-52636 affects the Linux kernel’s libceph OSD client sparse-read path. Specifically, a misbehavior in read_partial_sparse_msg_data() during a short socket read could cause the sparse-read state machine to misinterpret the footer, potentially derailing op ...

CVE-2024-26673

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: sanitize layer 3 and 4 protocol number in custom expectations - Disallow families other than NFPROTOIPV4,IPV6,INET. - Disallow layer 4 protocol with no ports, since destination port is a mandatory attribute for...

CVE-2024-26672 drm/amdgpu: Fix variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get_mca_entry()'

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix variable 'mcafuncs' dereferenced before NULL check in 'amdgpumcasmugetmcaentry' Fixes the below: drivers/gpu/drm/amd/amdgpu/amdgpumca.c:377 amdgpumcasmugetmcaentry warn: variable dereferenced before check 'mcafunc...