kernel

Vulnerabilities (14,255)

• CVE-2024-53135HigDec 4, 2024
  affected >= 5.0.0, < 5.4.287fixed 5.4.287

  In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN Hide KVM's pt_mode module param behind CONFIG_BROKEN, i.e. disable support for virtualizing Intel PT via guest/host mode unless BROK

• CVE-2024-53134MedDec 4, 2024
  affected >= 6.1.0, < 6.6.63fixed 6.6.63

  In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: correct remove path The check condition should be 'i < bc->onecell_data.num_domains', not 'bc->onecell_data.num_domains' which will make the look never finish and cause kernel panic.

• CVE-2024-53133HigDec 4, 2024
  affected >= 6.8.0, < 6.11.10fixed 6.11.10

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Handle dml allocation failure to avoid crash [Why] In the case where a dml allocation fails for any reason, the current state's dml contexts would no longer be valid. Then subsequent calls dc_s

• CVE-2024-53132MedDec 4, 2024
  affected >= 6.11.0, < 6.11.10fixed 6.11.10

  In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix "Missing outer runtime PM protection" warning Fix the following drm_WARN: [953.586396] xe 0000:00:02.0: [drm] Missing outer runtime PM protection ... <4> [953.587090] ? xe_pm_runtime_get_noresu

• CVE-2024-53131MedDec 4, 2024
  affected >= 3.9.0, < 4.19.325fixed 4.19.325

  In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint Patch series "nilfs2: fix null-ptr-deref bugs on block tracepoints". This series fixes null pointer dereference bugs that occur when using nilfs2 and

• CVE-2024-53130MedDec 4, 2024
  affected >= 3.9.0, < 4.19.325fixed 4.19.325

  In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint When using the "block:block_dirty_buffer" tracepoint, mark_buffer_dirty() may cause a NULL pointer dereference, or a general protection fault when KAS

• CVE-2024-53129MedDec 4, 2024
  affected >= 5.13.0, < 5.15.174fixed 5.15.174

  In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: vop: Fix a dereferenced before check warning The 'state' can't be NULL, we should check crtc_state. Fix warning: drivers/gpu/drm/rockchip/rockchip_drm_vop.c:1096 vop_plane_atomic_async_check() wa

• CVE-2024-53128MedDec 4, 2024
  affected >= 5.9.0, < 5.15.181fixed 5.15.181

  In the Linux kernel, the following vulnerability has been resolved: sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers When CONFIG_KASAN_SW_TAGS and CONFIG_KASAN_STACK are enabled, the object_is_on_stack() function may produce incorrect results due to the pres

• CVE-2024-53127HigDec 4, 2024
  affected < 4.19.325fixed 4.19.325

  In the Linux kernel, the following vulnerability has been resolved: Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" The commit 8396c793ffdf ("mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K") increased the max_req_size, even for 4K pages, causing

• CVE-2024-53126HigDec 4, 2024
  affected >= 6.3.0, < 6.6.63fixed 6.6.63

  In the Linux kernel, the following vulnerability has been resolved: vdpa: solidrun: Fix UB bug with devres In psnet_open_pf_bar() and snet_open_vf_bar() a string later passed to pcim_iomap_regions() is placed on the stack. Neither pcim_iomap_regions() nor the functions it calls

• CVE-2024-53125HigDec 4, 2024
  affected >= 5.10.0, < 5.10.232fixed 5.10.232

  In the Linux kernel, the following vulnerability has been resolved: bpf: sync_linked_regs() must preserve subreg_def Range propagation must not affect subreg_def marks, otherwise the following example is rewritten by verifier incorrectly when BPF_F_TEST_RND_HI32 flag is set:

• CVE-2024-53124HigDec 2, 2024
  affected >= 4.4.0, < 5.4.290fixed 5.4.290

  In the Linux kernel, the following vulnerability has been resolved: net: fix data-races around sk->sk_forward_alloc Syzkaller reported this warning: ------------[ cut here ]------------ WARNING: CPU: 0 PID: 16 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x1c5/0x1e0 Modules

• CVE-2024-53123MedDec 2, 2024
  affected < 6.1.119fixed 6.1.119

  In the Linux kernel, the following vulnerability has been resolved: mptcp: error out earlier on disconnect Eric reported a division by zero splat in the MPTCP protocol: Oops: divide error: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 UID: 0 PID: 6094 Comm: syz-executor317 Not tainte

• CVE-2024-53122HigDec 2, 2024
  affected >= 5.10.0, < 5.15.174fixed 5.15.174

  In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e. created by the in kernel path manager - are included into the subflow list before starting the 3whs. A racing rec

• CVE-2024-53121HigDec 2, 2024
  affected >= 5.1.0, < 5.4.287fixed 5.4.287

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, lock FTE when checking if active The referenced commits introduced a two-step process for deleting FTEs: - Lock the FTE, delete it from hardware, set the hardware deletion function to NULL and

• CVE-2024-53120HigDec 2, 2024
  affected >= 5.14.0, < 5.15.174fixed 5.15.174

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow In error flow of mlx5_tc_ct_entry_add_rule(), in case ct_rule_add() callback returns error, zone_rule->attr is used uninitiated. Fix it to use attr which h

• CVE-2024-53119MedDec 2, 2024
  affected >= 5.10.0, < 5.10.232fixed 5.10.232

  In the Linux kernel, the following vulnerability has been resolved: virtio/vsock: Fix accept_queue memory leak As the final stages of socket destruction may be delayed, it is possible that virtio_transport_recv_listen() will be called after the accept_queue has been flushed, bu

• CVE-2024-53118MedDec 2, 2024
  affected >= 6.7.0, < 6.11.10fixed 6.11.10

  In the Linux kernel, the following vulnerability has been resolved: vsock: Fix sk_error_queue memory leak Kernel queues MSG_ZEROCOPY completion notifications on the error queue. Where they remain, until explicitly recv()ed. To prevent memory leaks, clean up the queue when the s

• CVE-2024-53117MedDec 2, 2024
  affected >= 6.7.0, < 6.11.10fixed 6.11.10

  In the Linux kernel, the following vulnerability has been resolved: virtio/vsock: Improve MSG_ZEROCOPY error handling Add a missing kfree_skb() to prevent memory leaks.

• CVE-2024-53116MedDec 2, 2024
  affected >= 6.10.0, < 6.11.10fixed 6.11.10

  In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix handling of partial GPU mapping of BOs This commit fixes the bug in the handling of partial mapping of the buffer objects to the GPU, which caused kernel warnings. Panthor didn't correctly han