kernel

Vulnerabilities (14,254)

• CVE-2024-49892MedOct 21, 2024
  affected >= 4.15.0, < 5.4.285fixed 5.4.285

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize get_bytes_per_element's default to 1 Variables, used as denominators and maybe not assigned to other values, should not be 0. bytes_per_element_y & bytes_per_element_c are initialize

• CVE-2024-49891MedOct 21, 2024
  affected >= 4.11.0, < 6.1.120fixed 6.1.120

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths When the HBA is undergoing a reset or is handling an errata event, NULL ptr dereference crashes may occur in routines such as lpfc_s

• CVE-2024-49890MedOct 21, 2024
  affected >= 4.5.0, < 5.10.227fixed 5.10.227

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: ensure the fw_info is not null before using it This resolves the dereference null return value warning reported by Coverity.

• CVE-2024-49889HigOct 21, 2024
  affected >= 3.18.0, < 5.10.227fixed 5.10.227

  In the Linux kernel, the following vulnerability has been resolved: ext4: avoid use-after-free in ext4_ext_show_leaf() In ext4_find_extent(), path may be freed by error or be reallocated, so using a previously saved *ppath may have been freed and thus may trigger use-after-free

• CVE-2024-49888MedOct 21, 2024
  affected >= 6.6.0, < 6.10.14fixed 6.10.14

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a sdiv overflow issue Zac Ecob reported a problem where a bpf program may cause kernel crash due to the following error: Oops: divide error: 0000 [#1] PREEMPT SMP KASAN PTI The failure is due to the

• CVE-2024-49887MedOct 21, 2024
  affected >= 6.9.0, < 6.10.14fixed 6.10.14

  In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to don't panic system for no free segment fault injection f2fs: fix to don't panic system for no free segment fault injection syzbot reports a f2fs bug as below: F2FS-fs (loop0): inject no free segm

• CVE-2024-49886HigOct 21, 2024
  affected < 5.15.168fixed 5.15.168

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug Attaching SST PCI device to VM causes "BUG: KASAN: slab-out-of-bounds". kasan report: [ 19.411889] =============================================

• CVE-2024-49885MedOct 21, 2024
  affected >= 6.2.0, < 6.10.14fixed 6.10.14

  In the Linux kernel, the following vulnerability has been resolved: mm, slub: avoid zeroing kmalloc redzone Since commit 946fa0dbf2d8 ("mm/slub: extend redzone check to extra allocated kmalloc space than requested"), setting orig_size treats the wasted space (object_size - orig

• CVE-2024-49884HigOct 21, 2024
  affected >= 3.18.0, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_at() We hit the following use-after-free: ================================================================== BUG: KASAN: slab-use-after-free in ext4_split_ext

• CVE-2024-49883HigOct 21, 2024
  affected >= 3.18.0, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: ext4: aovid use-after-free in ext4_ext_insert_extent() As Ojaswin mentioned in Link, in ext4_ext_insert_extent(), if the path is reallocated in ext4_ext_create_new_leaf(), we'll use the stale path and cause UAF

• CVE-2024-49882HigOct 21, 2024
  affected >= 3.7.0, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse() the buffer of the extents path In ext4_ext_try_to_merge_up(), set path[1].p_bh to NULL after it has been released, otherwise it may be released twice. An example of what triggers this

• CVE-2024-49881MedOct 21, 2024
  affected >= 3.18.0, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: ext4: update orig_path in ext4_find_extent() In ext4_find_extent(), if the path is not big enough, we free it and set *orig_path to NULL. But after reallocating and successfully initializing the path, we don't

• CVE-2024-49880HigOct 21, 2024
  affected >= 6.8.0, < 6.10.14fixed 6.10.14

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix off by one issue in alloc_flex_gd() Wesley reported an issue: ================================================================== EXT4-fs (dm-5): resizing filesystem from 7168 to 786432 blocks -------

• CVE-2024-49879MedOct 21, 2024
  affected >= 4.11.0, < 5.4.285fixed 5.4.285

  In the Linux kernel, the following vulnerability has been resolved: drm: omapdrm: Add missing check for alloc_ordered_workqueue As it may return NULL pointer and cause NULL pointer dereference. Add check for the return value of alloc_ordered_workqueue.

• CVE-2024-49878MedOct 21, 2024
  affected >= 5.1.0, < 5.4.285fixed 5.4.285

  In the Linux kernel, the following vulnerability has been resolved: resource: fix region_intersects() vs add_memory_driver_managed() On a system with CXL memory, the resource tree (/proc/iomem) related to CXL memory may look like something as follows. 490000000-50fffffff : CXL

• CVE-2024-49877MedOct 21, 2024
  affected < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate When doing cleanup, if flags without OCFS2_BH_READAHEAD, it may trigger NULL pointer dereference in the following ocfs2_set_buffer_uptodate() if b

• CVE-2024-49876HigOct 21, 2024
  affected >= 6.8.0, < 6.10.14fixed 6.10.14

  In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix UAF around queue destruction We currently do stuff like queuing the final destruction step on a random system wq, which will outlive the driver instance. With bad timing we can teardown the driver w

• CVE-2024-49875HigOct 21, 2024
  affected >= 4.4.0, < 5.10.227fixed 5.10.227

  In the Linux kernel, the following vulnerability has been resolved: nfsd: map the EBADMSG to nfserr_io to avoid warning Ext4 will throw -EBADMSG through ext4_readdir when a checksum error occurs, resulting in the following WARNING. Fix it by mapping EBADMSG to nfserr_io. nfsd

• CVE-2024-49874HigOct 21, 2024
  affected >= 6.4.0, < 6.6.55fixed 6.6.55

  In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition In the svc_i3c_master_probe function, &master->hj_work is bound with svc_i3c_master_hj_work, &master->ibi_work i

• CVE-2024-49873MedOct 21, 2024
  affected >= 6.11.0, < 6.11.3fixed 6.11.3

  In the Linux kernel, the following vulnerability has been resolved: mm/filemap: fix filemap_get_folios_contig THP panic Patch series "memfd-pin huge page fixes". Fix multiple bugs that occur when using memfd_pin_folios with hugetlb pages and THP. The hugetlb bugs only bite wh