CVE-2024-56730

In the Linux kernel, the following vulnerability has been resolved: net/9p/usbg: fix handling of the failed kzalloc memory allocation On the linux-next, next-20241108 vanilla kernel, the coccinelle tool gave the following error report: ./net/9p/transusbg.c:912:5-11: ERROR: allocation function on...

CVE-2024-56741

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-56743

In the Linux kernel, the following vulnerability has been resolved: nfscommon: must not hold RCU while calling nfsdfileputlocal Move holding the RCU from nfstonfsdfileputlocal to nfstonfsdnetput. It is the call to nfsto-nfsdservput that requires the RCU anyway the puts for nfsdfile and netns were...

CVE-2024-56756

The CVE-2024-56756 issue occurs in the Linux kernel’s nvme-pci driver, where the HMB descriptor table could be freed with an incorrect size. The root cause is that __nvme_alloc_host_mem might exit earlier on memory allocation failure and end up using fewer descriptors than planned, causing an inc...

CVE-2024-56754 crypto: caam - Fix the pointer passed to caam_qi_shutdown()

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - Fix the pointer passed to caamqishutdown The type of the last parameter given to devmaddactionorreset is "struct caamdrvprivate ", but in caamqishutdown, it is casted to "struct device ". Pass the correct parameter...

CVE-2024-56751

Summary (CVE-2024-56751): A Linux kernel IPv6 issue involving releasing a nexthop on device removal. The vulnerability is tied to a hang in the pmtu self-test when removing a network device, caused by a stale or lingering nexthop/dst reference that prevents proper cleanup. The root cause is descr...

CVE-2024-56749 dlm: fix dlm_recover_members refcount on error

In the Linux kernel, the following vulnerability has been resolved: dlm: fix dlmrecovermembers refcount on error If dlmrecovermembers fails we don't drop the references of the previous created rootlist that holds and keep all rsbs alive during the recovery. It might be not an unlikely event becau...

CVE-2024-56748 scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()

In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix a possible memory leak in qedfallocandinitsb Hook "qedops-common-sbinit = qedsbinit" does not release the DMA memory sbvirt when it fails. Add dmafreecoherent to free it. This is the same way as qedrallocmemsb and...

CVE-2024-56747

CVE-2024-56747 concerns the Linux kernel scsi/qedi memory leak. The vulnerable path occurs when the sb (shared memory) for qedi_sb_init is allocated but not freed if sb_init fails, leading to a memory leak. The fix adds dma_free_coherent() to release sb_virt, aligning with the handling in qedr_al...

CVE-2024-56729 smb: Initialize cfid->tcon before performing network ops

In the Linux kernel, the following vulnerability has been resolved: smb: Initialize cfid-tcon before performing network ops Avoid leaking a tcon ref when a lease break races with opening the cached directory. Processing the leak break might take a reference to the tcon in cacheddirleasebreak and...

CVE-2024-56728 octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2mboxgetrsp errors in otx2ethtool.c Add error pointer check after calling otx2mboxgetrsp...

CVE-2024-56727

Technical details for CVE-2024-56727 are not provided in the connected documents. No affected product/version or remediation is disclosed here. Monitor for updates.

CVE-2024-56723

CVE-2024-56723 affects the Linux kernel driver for mfd/intel_soc_pmic_bxtwc. The vulnerability stems from not respecting IRQ domains when creating each MFD device, which can lead to incorrect IRQ handling and a WARN() on IRQ 0 (vIRQ) via platform_get_irq(). The Astra Linux security bulletin mirro...

UBUNTU-CVE-2024-56711

In the Linux kernel, the following vulnerability has been resolved: drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference drmmodeduplicate could return NULL due to lack of memory, which will then call NULL pointer dereference. Add a check to prevent it...

CVE-2024-56717 net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()

In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix incorrect IFH SRCPORT field in ocelotifhsetbasic Packets injected by the CPU should have a SRCPORT field equal to the CPU port module index in the Analyzer block ocelot-numphysports. The blamed commit copie...

CVE-2024-56717

CVE-2024-56717 affects the Linux kernel ocelot switchdev path (net: mscc: ocelot). The root cause is an incorrect SRC_PORT argument passed to ocelot_ifh_set_basic(), copied from ocelot_xmit_common() as a port mask instead of a single port index. This produces packing failures (Cannot store 0x40 i...

CVE-2024-56707

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2mboxgetrsp errors in otx2dmacflt.c Add error pointer checks after calling otx2mboxgetrsp...

CVE-2024-56699

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix potential double remove of hotplug slot In commit 6ee600bfbe0f "s390/pci: remove hotplug slot when releasing the device" the zpciexitslot was moved from zpcidevicereserved to zpcireleasedevice with the intention of...

CVE-2024-56682

In the Linux kernel, the following vulnerability has been resolved: irqchip/riscv-aplic: Prevent crash when MSI domain is missing If the APLIC driver is probed before the IMSIC driver, the parent MSI domain will be missing, which causes a NULL pointer dereference in msicreatedeviceirqdomain. Avoi...

CVE-2024-56706 s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex

In the Linux kernel, the following vulnerability has been resolved: s390/cpumsf: Fix and protect memory allocation of SDBs with mutex Reservation of the PMU hardware is done at first event creation and is protected by a pair of mutexlock and mutexunlock. After reservation of the PMU hardware the...