CVE-2024-53208

CVE-2024-53208 is a slab-use-after-free in Bluetooth MGMT set_powered_sync in the Linux kernel. Noise in the Miracle/SUSE advisories confirms the issue and lists it among fixed items in kernel live patches for SLES SLE 15 SPx. Remediation: upgrade/apply the kernel live patch referenced in SUSE/SO...

CVE-2024-53208 Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in setpoweredsync This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free in setpoweredsync+0x3a/0xc0...

CVE-2024-53208 Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in setpoweredsync This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free in setpoweredsync+0x3a/0xc0...

CVE-2024-53208 Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in setpoweredsync This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free in setpoweredsync+0x3a/0xc0...

CVE-2024-53182

The CVE-2024-53182 issue affects the Linux kernel BFQ Scheduler. A revert of the patch that merged bfq_release_process_ref() into bfq_put_cooperator() caused bic_set_bfqq to operate on a freed bic data structure, yielding a slab-use-after-free detected by KASAN in bic_set_bfqq+0x200/0x230. Impact...

CVE-2024-53182 Revert "block, bfq: merge bfq_release_process_ref() into bfq_put_cooperator()"

In the Linux kernel, the following vulnerability has been resolved: Revert "block, bfq: merge bfqreleaseprocessref into bfqputcooperator" This reverts commit bc3b1e9e7c50e1de0f573eea3871db61dd4787de. The bic is associated with syncbfqq, and bfqreleaseprocessref cannot be put into bfqputcooperator...

CVE-2024-53172 ubi: fastmap: Fix duplicate slab cache names while attaching

In the Linux kernel, the following vulnerability has been resolved: ubi: fastmap: Fix duplicate slab cache names while attaching Since commit 4c39529663b9 "slab: Warn on duplicate cache names when DEBUGVM=y", the duplicate slab cache names can be detected and a kernel WARNING is thrown out. In UB...

CVE-2024-53172 ubi: fastmap: Fix duplicate slab cache names while attaching

In the Linux kernel, the following vulnerability has been resolved: ubi: fastmap: Fix duplicate slab cache names while attaching Since commit 4c39529663b9 "slab: Warn on duplicate cache names when DEBUGVM=y", the duplicate slab cache names can be detected and a kernel WARNING is thrown out. In UB...

CVE-2024-53172

CVE-2024-53172 (Linux kernel, UBI fastmap) : The issue arises in the fast attaching path where alloc_ai() could be invoked twice with the same slab cache name 'ubi_aeb_slab_cache', triggering a kernel WARNING "kmem_cache_create_args". The root cause is duplicate slab cache names during fastmap at...

CVE-2024-53172

In the Linux kernel, the following vulnerability has been resolved: ubi: fastmap: Fix duplicate slab cache names while attaching Since commit 4c39529663b9 "slab: Warn on duplicate cache names when DEBUGVM=y", the duplicate slab cache names can be detected and a kernel WARNING is thrown out. In UB...

PT-2024-36865 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.0 Description: The issue is related to a too strict alignment check in the create cache function, which can cause a kernel panic on certain systems, such as m68k, where the minimum alignment of unsigned lon...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a duplicate slab cache name issue in the fastmap function in the ubi module...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a strict alignment checking issue in the createcache function in the slab subsystem...

PT-2025-3576

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc3-syzkaller-00399-g9197b73fd7bb Description A slab-use-after-free issue has been identified in the Linux kernel, specifically in the RDMA/rxe component. This problem occurs when the event ib cache event...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50301)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50301 advisory. - In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49886)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49886 advisory. - In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Fix the KASAN report...

security/keys: fix slab-out-of-bounds in key_task_permission

...

platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug

...

SUSE SLES15 Security Update : kernel (Live Patch 44 for SLE 15 SP3) (SUSE-SU-2024:4180-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4180-1 advisory. This update for the Linux Kernel 5.3.18-15030059161 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use...

SUSE SLES15 Security Update : kernel (Live Patch 48 for SLE 15 SP2) (SUSE-SU-2024:4250-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4250-1 advisory. This update for the Linux Kernel 5.3.18-15020024191 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use...