kernel

Vulnerabilities (14,255)

• CVE-2024-53213HigDec 27, 2024
  affected < 5.10.258fixed 5.10.258

  In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation In lan78xx_probe(), the buffer `buf` was being freed twice: once implicitly through `usb_free_urb(dev->urb_intr)` with the `URB_FREE_BUF

• CVE-2024-53212MedDec 27, 2024
  affected >= 6.10.0, < 6.11.11fixed 6.11.11

  In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended extack reporting to dumps. It works under normal conditions, because extack errors are usually reported during ->start() or

• CVE-2024-53211MedDec 27, 2024
  affected >= 6.12.0, < 6.12.2fixed 6.12.2

  In the Linux kernel, the following vulnerability has been resolved: net/l2tp: fix warning in l2tp_exit_net found by syzbot In l2tp's net exit handler, we check that an IDR is empty before destroying it: WARN_ON_ONCE(!idr_is_empty(&pn->l2tp_tunnel_idr)); idr_destroy(&pn->l2tp

• CVE-2024-53210MedDec 27, 2024
  affected >= 2.6.21, < 6.1.120fixed 6.1.120

  In the Linux kernel, the following vulnerability has been resolved: s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() Passing MSG_PEEK flag to skb_recv_datagram() increments skb refcount (skb->users) and iucv_sock_recvmsg() does not decrement skb refcount at exit.

• CVE-2024-53209CriDec 27, 2024
  affected < 6.1.140fixed 6.1.140

  In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix receive ring space parameters when XDP is active The MTU setting at the time an XDP multi-buffer is attached determines whether the aggregation ring will be used and the rx_skb_func handler. This

• CVE-2024-53208HigDec 27, 2024
  affected >= 5.17.0, < 6.1.120fixed 6.1.120

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free in set_power

• CVE-2024-53207HigDec 27, 2024
  affected < 6.6.64fixed 6.6.64

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible deadlocks This fixes possible deadlocks like the following caused by hci_cmd_sync_dequeue causing the destroy function to run: INFO: task kworker/u19:0:143 blocked for more than

• CVE-2024-53206CriDec 27, 2024
  affected < 5.15.174fixed 5.15.174

  In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in reqsk_timer_handler(). The cited commit replaced inet_csk_reqsk_queue_drop_and_put() with __inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler(). Then, oreq s

• CVE-2024-53205MedDec 27, 2024
  affected >= 6.6.0, < 6.6.4fixed 6.6.4

  In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe In rtk_usb2phy_probe() devm_kzalloc() may return NULL but this returned value is not checked.

• CVE-2024-53204MedDec 27, 2024
  affected >= 6.6.0, < 6.6.4fixed 6.6.4

  In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe In rtk_usb3phy_probe() devm_kzalloc() may return NULL but this returned value is not checked.

• CVE-2024-53203HigDec 27, 2024
  affected >= 5.6.0, < 5.10.238fixed 5.10.238

  In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() The "command" variable can be controlled by the user via debugfs. The worry is that if con_index is zero then "&uc->ucsi->connector[con_inde

• CVE-2024-53202MedDec 27, 2024
  affected >= 6.4.0, < 6.6.64fixed 6.6.64

  In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix possible resource leak in fw_log_firmware_info() The alg instance should be released under the exception path, otherwise there may be resource leak here. To mitigate this, free the alg ins

• CVE-2024-53201MedDec 27, 2024
  affected < 6.11.11fixed 6.11.11

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe This commit addresses a null pointer dereference issue in dcn20_program_pipe(). Previously, commit 8e4ed3cf1642 ("drm/amd/display:

• CVE-2024-53200MedDec 27, 2024
  affected >= 6.5.0, < 6.6.64fixed 6.6.64

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp This commit addresses a null pointer dereference issue in hwss_setup_dpp(). The issue could occur when pipe_ctx->plane_state is null.

• CVE-2024-53199MedDec 27, 2024
  affected >= 6.11.0, < 6.11.11fixed 6.11.11

  In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-audmix: Add NULL check in imx_audmix_probe devm_kasprintf() can return a NULL pointer on failure,but this returned value in imx_audmix_probe() is not checked. Add NULL check in imx_audmix_probe(), to

• CVE-2024-53198HigDec 27, 2024
  affected >= 2.6.23, < 5.4.287fixed 5.4.287

  In the Linux kernel, the following vulnerability has been resolved: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() This patch fixes an issue in the function xenbus_dev_probe(). In the xenbus_dev_probe() function, within the if (err) branch at l

• CVE-2024-53197HigKEVDec 27, 2024
  affected >= 2.6.12, < 4.19.325fixed 4.19.325

  In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configuration for allocating

• CVE-2024-53196MedDec 27, 2024
  affected >= 5.5.0, < 6.1.120fixed 6.1.120

  In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't retire aborted MMIO instruction Returning an abort to the guest for an unsupported MMIO access is a documented feature of the KVM UAPI. Nevertheless, it's clear that this plumbing has seen lim

• CVE-2024-53195MedDec 27, 2024
  affected >= 3.11.0, < 6.6.64fixed 6.6.64

  In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Get rid of userspace_irqchip_in_use Improper use of userspace_irqchip_in_use led to syzbot hitting the following WARN_ON() in kvm_timer_update_irq(): WARNING: CPU: 0 PID: 3281 at arch/arm64/kvm/arc

• CVE-2024-53194HigDec 27, 2024
  affected >= 2.6.27, < 4.19.325fixed 4.19.325

  In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot->bus on hot remove Dennis reports a boot crash on recent Lenovo laptops with a USB4 dock. Since commit 0fc70886569c ("thunderbolt: Reset USB4 v2 host router") and commit 59a54c5