kernel

Vulnerabilities (14,255)

• CVE-2024-57895HigJan 15, 2025
  affected >= 5.15.0, < 6.1.164fixed 6.1.164

  In the Linux kernel, the following vulnerability has been resolved: ksmbd: set ATTR_CTIME flags when setting mtime David reported that the new warning from setattr_copy_mgtime is coming like the following. [ 113.215316] ------------[ cut here ]------------ [ 113.215974] WARN

• CVE-2024-57893HigJan 15, 2025
  affected >= 2.6.12, < 6.1.124fixed 6.1.124

  In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Fix races at processing SysEx messages OSS sequencer handles the SysEx messages split in 6 bytes packets, and ALSA sequencer OSS layer tries to combine those. It stores the data in the internal

• CVE-2024-57892HigJan 15, 2025
  affected >= 4.6.0, < 5.4.290fixed 5.4.290

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv When mounting ocfs2 and then remounting it as read-only, a slab-use-after-free occurs after the user uses a syscall to quota_getnextquota. Specif

• CVE-2024-57891MedJan 15, 2025
  affected >= 6.12.0, < 6.12.9fixed 6.12.9

  In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix invalid irq restore in scx_ops_bypass() While adding outer irqsave/restore locking, 0e7ffff1b811 ("scx: Fix raciness in scx_ops_bypass()") forgot to convert an inner rq_unlock_irqrestore() to rq_

• CVE-2024-57890MedJan 15, 2025
  affected >= 2.6.15, < 5.4.289fixed 5.4.289

  In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Prevent integer overflow issue In the expression "cmd.wqe_size * cmd.wr_count", both variables are u32 values that come from the user so the multiplication can lead to integer wrapping. Then we pa

• CVE-2024-57889MedJan 15, 2025
  affected >= 4.13.0, < 5.4.289fixed 5.4.289

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking If a device uses MCP23xxx IO expander to receive IRQs, the following bug can happen: BUG: sleeping function called from invalid context

• CVE-2024-57888MedJan 15, 2025
  affected >= 4.5.0, < 6.6.72fixed 6.6.72

  In the Linux kernel, the following vulnerability has been resolved: workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker After commit 746ae46c1113 ("drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM") amdgpu started seeing the following

• CVE-2024-57887HigJan 15, 2025
  affected >= 4.8.0, < 5.10.234fixed 5.10.234

  In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533_attach_dsi() The host_node pointer was assigned and freed in adv7533_parse_dt(), and later, adv7533_attach_dsi() uses the same. Fix this use-after-free issue by dropp

• CVE-2024-57886MedJan 15, 2025
  affected >= 6.11.0, < 6.12.9fixed 6.12.9

  In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: fix new damon_target objects leaks on damon_commit_targets() Patch series "mm/damon/core: fix memory leaks and ignored inputs from damon_commit_ctx()". Due to two bugs in damon_commit_targets()

• CVE-2024-57885MedJan 15, 2025
  affected >= 6.2.0, < 6.6.70fixed 6.6.70

  In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: fix sleeping function called from invalid context at print message Address a bug in the kernel that triggers a "sleeping function called from invalid context" warning when /sys/kernel/debug/kmemlea

• CVE-2024-57884MedJan 15, 2025
  affected >= 4.8.0, < 5.4.289fixed 5.4.289

  In the Linux kernel, the following vulnerability has been resolved: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() The task sometimes continues looping in throttle_direct_reclaim() because allow_direct_reclaim(pgdat) keeps returning fal

• CVE-2024-57883HigJan 15, 2025
  affected >= 2.6.20, < 5.10.239fixed 5.10.239

  In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: independent PMD page table shared count The folio refcount may be increased unexpectly through try_get_folio() by caller such as split_huge_pages. In huge_pmd_unshare(), we use refcount to check w

• CVE-2024-57882CriJan 15, 2025
  affected >= 5.15.0, < 5.15.177fixed 5.15.177

  In the Linux kernel, the following vulnerability has been resolved: mptcp: fix TCP options overflow. Syzbot reported the following splat: Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-dere

• CVE-2024-57857HigJan 15, 2025
  affected >= 5.3.0, < 6.12.9fixed 6.12.9

  In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Remove direct link to net_device Do not manage a per device direct link to net_device. Rely on associated ib_devices net_device management, not doubling the effort locally. A badly managed local link

• CVE-2024-57844MedJan 15, 2025
  affected >= 6.12.0, < 6.12.9fixed 6.12.9

  In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix fault on fd close after unbind If userspace holds an fd open, unbinds the device and then closes it, the driver shouldn't try to access the hardware. Protect it by using drm_dev_enter()/drm_dev_exit

• CVE-2024-57841MedJan 15, 2025
  affected < 5.15.176fixed 5.15.176

  In the Linux kernel, the following vulnerability has been resolved: net: fix memory leak in tcp_conn_request() If inet_csk_reqsk_queue_hash_add() return false, tcp_conn_request() will return without free the dst memory, which allocated in af_ops->route_req. Here is the kmemlea

• CVE-2024-57802CriJan 15, 2025
  affected >= 2.6.12, < 5.4.289fixed 5.4.289

  In the Linux kernel, the following vulnerability has been resolved: netrom: check buffer length before accessing it Syzkaller reports an uninit value read from ax25cmp when sending raw message through ieee802154 implementation. =================================================

• CVE-2024-57801HigJan 15, 2025
  affected >= 6.6.0, < 6.6.70fixed 6.6.70

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep without loaded flag During driver unload, unregister_netdev is called after unloading vport rep. So, the mlx5e_rep_priv is already freed while trying to get rpriv-

• CVE-2024-57795HigJan 15, 2025
  affected >= 4.8.0, < 6.6.120fixed 6.6.120

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Remove the direct link to net_device The similar patch in siw is in the link: https://git.kernel.org/rdma/rdma/c/16b87037b48889 This problem also occurred in RXE. The following analyze this problem.

• CVE-2024-54031MedJan 15, 2025
  affected >= 5.4.287, < 5.4.289fixed 5.4.289

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext Access to genmask field in struct nft_set_ext results in unaligned atomic read: [ 72.130109] Unable to handle kernel paging request at vir