kernel

Vulnerabilities (14,254)

• CVE-2024-49973HigOct 21, 2024
  affected >= 5.4.0, < 5.4.285fixed 5.4.285

  In the Linux kernel, the following vulnerability has been resolved: r8169: add tally counter fields added with RTL8125 RTL8125 added fields to the tally counter, what may result in the chip dma'ing these new fields to unallocated memory. Therefore make sure that the allocated m

• CVE-2024-49972MedOct 21, 2024
  affected >= 6.7.0, < 6.11.3fixed 6.11.3

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Deallocate DML memory if allocation fails [Why] When DC state create DML memory allocation fails, memory is not deallocated subsequently, resulting in uninitialized structure that is not NULL.

• CVE-2024-49971MedOct 21, 2024
  affected >= 6.11.0, < 6.11.3fixed 6.11.3

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Increase array size of dummy_boolean [WHY] dml2_core_shared_mode_support and dml_core_mode_support access the third element of dummy_boolean, i.e. hw_debug5 = &s->dummy_boolean[2], when dummy_b

• CVE-2024-49970MedOct 21, 2024
  affected >= 4.15.0, < 6.11.3fixed 6.11.3

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Implement bounds check for stream encoder creation in DCN401 'stream_enc_regs' array is an array of dcn10_stream_enc_registers structures. The array is initialized with four elements, correspon

• CVE-2024-49969HigOct 21, 2024
  affected >= 5.9.0, < 5.10.227fixed 5.10.227

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 color transformation This commit addresses a potential index out of bounds issue in the `cm3_helper_translate_curve_to_hw_format` function in the DCN30 color ma

• CVE-2024-49968MedOct 21, 2024
  affected >= 5.13.0, < 5.15.198fixed 5.15.198

  In the Linux kernel, the following vulnerability has been resolved: ext4: filesystems without casefold feature cannot be mounted with siphash When mounting the ext4 filesystem, if the default hash version is set to DX_HASH_SIPHASH but the casefold feature is not set, exit the m

• CVE-2024-49966HigOct 21, 2024
  affected >= 2.6.29, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqi_sync_work before freeing oinfo ocfs2_global_read_info() will initialize and schedule dqi_sync_work at the end, if error occurs after successfully reading global quota, it will trigger the foll

• CVE-2024-49965HigOct 21, 2024
  affected < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove unreasonable unlock in ocfs2_read_blocks Patch series "Misc fixes for ocfs2_read_blocks", v5. This series contains 2 fixes for ocfs2_read_blocks(). The first patch fix the issue reported by syzb

• CVE-2024-49964MedOct 21, 2024
  affected >= 6.11.0, < 6.11.3fixed 6.11.3

  In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix memfd_pin_folios free_huge_pages leak memfd_pin_folios followed by unpin_folios fails to restore free_huge_pages if the pages were not already faulted in, because the folio refcount for pages cr

• CVE-2024-49963MedOct 21, 2024
  affected >= 4.2.0, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: mailbox: bcm2835: Fix timeout during suspend mode During noirq suspend phase the Raspberry Pi power driver suffer of firmware property timeouts. The reason is that the IRQ of the underlying BCM2835 mailbox is d

• CVE-2024-49962MedOct 21, 2024
  affected >= 4.4.0, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() ACPICA commit 4d4547cf13cca820ff7e0f859ba83e1a610b9fd0 ACPI_ALLOCATE_ZEROED() may fail, elements might be NULL and will cause

• CVE-2024-49961MedOct 21, 2024
  affected >= 6.0.0, < 6.1.113fixed 6.1.113

  In the Linux kernel, the following vulnerability has been resolved: media: i2c: ar0521: Use cansleep version of gpiod_set_value() If we use GPIO reset from I2C port expander, we must use *_cansleep() variant of GPIO functions. This was not done in ar0521_power_on()/ar0521_power

• CVE-2024-49960HigOct 21, 2024
  affected < 5.10.237fixed 5.10.237

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix timer use-after-free on failed mount Syzbot has found an ODEBUG bug in ext4_fill_super The del_timer_sync function cancels the s_err_report timer, which reminds about filesystem errors daily. We shou

• CVE-2024-49959MedOct 21, 2024
  affected >= 2.6.28, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error In __jbd2_log_wait_for_space(), we might call jbd2_cleanup_journal_tail() to recover some journal space. But if an error occurs while

• CVE-2024-49958HigOct 21, 2024
  affected >= 3.11.0, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: reserve space for inline xattr before attaching reflink tree One of our customers reported a crash and a corrupted ocfs2 filesystem. The crash was due to the detection of corruption. Upon troubleshooti

• CVE-2024-49957MedOct 21, 2024
  affected >= 2.6.32, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix null-ptr-deref when journal load failed. During the mounting process, if journal_reset() fails because of too short journal, then lead to jbd2_journal_load() fails with NULL j_sb_buffer. Subsequentl

• CVE-2024-49956HigOct 21, 2024
  affected >= 6.11.0, < 6.11.3fixed 6.11.3

  In the Linux kernel, the following vulnerability has been resolved: gfs2: fix double destroy_workqueue error When gfs2_fill_super() fails, destroy_workqueue() is called within gfs2_gl_hash_clear(), and the subsequent code path calls destroy_workqueue() on the same work queue ag

• CVE-2024-49955MedOct 21, 2024
  affected >= 4.17.0, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: ACPI: battery: Fix possible crash when unregistering a battery hook When a battery hook returns an error when adding a new battery, then the battery hook is automatically unregistered. However the battery hook

• CVE-2024-49954MedOct 21, 2024
  affected >= 5.10.0, < 5.15.168fixed 5.15.168

  In the Linux kernel, the following vulnerability has been resolved: static_call: Replace pointless WARN_ON() in static_call_module_notify() static_call_module_notify() triggers a WARN_ON(), when memory allocation fails in __static_call_add_module(). That's not really justified

• CVE-2024-49953MedOct 21, 2024
  affected >= 6.4.0, < 6.6.55fixed 6.6.55

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice The km.state is not checked in driver's delayed work. When xfrm_state_check_expire() is called, the state can be reset to XFRM_STATE_EXPIRED, e