kernel

Vulnerabilities (14,255)

• CVE-2024-57931MedJan 21, 2025
  affected >= 4.3.0, < 5.4.289fixed 5.4.289

  In the Linux kernel, the following vulnerability has been resolved: selinux: ignore unknown extended permissions When evaluating extended permissions, ignore unknown permissions instead of calling BUG(). This commit ensures that future permissions can be added without interferi

• CVE-2024-57930MedJan 21, 2025
  affected >= 6.1.122, < 6.1.124fixed 6.1.124

  In the Linux kernel, the following vulnerability has been resolved: tracing: Have process_string() also allow arrays In order to catch a common bug where a TRACE_EVENT() TP_fast_assign() assigns an address of an allocated string to the ring buffer and then references it in TP_p

• CVE-2025-21655HigJan 20, 2025
  affected >= 6.1.0, < 6.1.125fixed 6.1.125

  In the Linux kernel, the following vulnerability has been resolved: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period io_eventfd_do_signal() is invoked from an RCU callback, but when dropping the reference to the io_ev_fd, it calls io_eventfd_free() directl

• CVE-2023-52923HigJan 20, 2025
  affected >= 4.1.0, < 4.19.316fixed 4.19.316

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: adapt set backend to use GC transaction API Use the GC transaction API to replace the old and buggy gc API and the busy mark approach. No set elements are removed from async garbage colle

• CVE-2024-57929HigJan 19, 2025
  affected >= 4.9.0, < 5.4.290fixed 5.4.290

  In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice in dm_array_cursor_end When dm_bm_read_lock() fails due to locking or checksum errors, it releases the faulty block implicitly while leaving an invalid output

• CVE-2024-57928HigJan 19, 2025
  affected >= 6.12.0, < 6.12.10fixed 6.12.10

  In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If netfs_read_to_pagecache() gets an error from either ->prepare_read() or from netfs_prepare_read_iterator(), it needs to decrement ->nr_outstanding, cancel the sub

• CVE-2024-57927MedJan 19, 2025
  affected >= 6.12.0, < 6.12.10fixed 6.12.10

  In the Linux kernel, the following vulnerability has been resolved: nfs: Fix oops in nfs_netfs_init_request() when copying to cache When netfslib wants to copy some data that has just been read on behalf of nfs, it creates a new write request and calls nfs_netfs_init_request()

• CVE-2024-57926HigJan 19, 2025
  affected >= 6.4.0, < 6.6.72fixed 6.6.72

  In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err The pointer need to be set to NULL, otherwise KASAN complains about use-after-free. Because in mtk_drm_bind, all private's

• CVE-2024-57925HigJan 19, 2025
  affected < 5.15.177fixed 5.15.177

  In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check bug In the smb2_send_interim_resp(), if ksmbd_alloc_work_struct() fails to allocate a node, it returns a NULL pointer to the in_work pointer. This can lead to an illegal

• CVE-2024-57924MedJan 19, 2025
  affected >= 3.8.0, < 6.1.151fixed 6.1.151

  In the Linux kernel, the following vulnerability has been resolved: fs: relax assertions on failure to encode file handles Encoding file handles is usually performed by a filesystem >encode_fh() method that may fail for various reasons. The legacy users of exportfs_encode_fh()

• CVE-2024-57923MedJan 19, 2025
  affected >= 6.12.0, < 6.12.10fixed 6.12.10

  In the Linux kernel, the following vulnerability has been resolved: btrfs: zlib: fix avail_in bytes for s390 zlib HW compression path Since the input data length passed to zlib_compress_folios() can be arbitrary, always setting strm.avail_in to a multiple of PAGE_SIZE may cause

• CVE-2024-57922MedJan 19, 2025
  affected >= 4.15.0, < 5.4.290fixed 5.4.290

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add check for granularity in dml ceil/floor helpers [Why] Wrapper functions for dcn_bw_ceil2() and dcn_bw_floor2() should check for granularity is non zero to avoid assert and divide-by-zero er

• CVE-2024-57921HigJan 19, 2025
  affected >= 6.11.0, < 6.12.10fixed 6.12.10

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add a lock when accessing the buddy trim function When running YouTube videos and Steam games simultaneously, the tester found a system hang / race condition issue with the multi-display configurati

• CVE-2024-57919MedJan 19, 2025
  affected >= 6.11.0, < 6.12.10fixed 6.12.10

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix divide error in DM plane scale calcs dm_get_plane_scale doesn't take into account plane scaled size equal to zero, leading to a kernel oops due to division by zero. Fix by setting out-scale

• CVE-2024-57918HigJan 19, 2025
  affected >= 6.11.0, < 6.12.10fixed 6.12.10

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix page fault due to max surface definition mismatch DC driver is using two different values to define the maximum number of surfaces: MAX_SURFACES and MAX_SURFACE_NUM. Consolidate MAX_SURFACE

• CVE-2024-57917HigJan 19, 2025
  affected >= 5.15.0, < 5.15.177fixed 5.15.177

  In the Linux kernel, the following vulnerability has been resolved: topology: Keep the cpumask unchanged when printing cpumap During fuzz testing, the following warning was discovered: different return values (15 and 11) from vsnprintf("%*pbl ", ...) test:keyward is WARNIN

• CVE-2024-57916MedJan 19, 2025
  affected >= 6.1.0, < 6.1.125fixed 6.1.125

  In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling Resolve kernel panic caused by improper handling of IRQs while accessing GPIO values. This is done by replacing generic_handle_irq with h

• CVE-2024-57914MedJan 19, 2025
  affected >= 6.12.0, < 6.12.10fixed 6.12.10

  In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix NULL pointer issue on shared irq case The tcpci_irq() may meet below NULL pointer dereference issue: [ 2.641851] Unable to handle kernel NULL pointer dereference at virtual address 00

• CVE-2024-57913MedJan 19, 2025
  affected >= 2.6.35, < 5.4.290fixed 5.4.290

  In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Remove WARN_ON in functionfs_bind This commit addresses an issue related to below kernel panic where panic_on_warn is enabled. It is caused by the unnecessary use of WARN_ON in functionsfs_bi

• CVE-2024-57912HigJan 19, 2025
  affected >= 4.9.0, < 5.4.290fixed 5.4.290

  In the Linux kernel, the following vulnerability has been resolved: iio: pressure: zpa2326: fix information leak in triggered buffer The 'sample' local struct is used to push data to user space from a triggered buffer, but it has a hole between the temperature and the timestamp