kernel

Vulnerabilities (14,254)

• CVE-2024-47716MedOct 21, 2024
  affected >= 6.6.0, < 6.6.54fixed 6.6.54

  In the Linux kernel, the following vulnerability has been resolved: ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros Floating point instructions in userspace can crash some arm kernels built with clang/LLD 17.0.6: BUG: unsupported FP instruction in kernel mode FP

• CVE-2024-47715MedOct 21, 2024
  affected < 6.6.54fixed 6.6.54

  In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix oops on non-dbdc mt7986 mt7915_band_config() sets band_idx = 1 on the main phy for mt7986 with MT7975_ONE_ADIE or MT7976_ONE_ADIE. Commit 0335c034e726 ("wifi: mt76: fix race condition r

• CVE-2024-47714HigOct 21, 2024
  affected >= 6.2.0, < 6.6.54fixed 6.6.54

  In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: use hweight16 to get correct tx antenna The chainmask is u16 so using hweight8 cannot get correct tx_ant. Without this patch, the tx_ant of band 2 would be -1 and lead to the following issue

• CVE-2024-47713MedOct 21, 2024
  affected >= 2.6.32, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() Since '__dev_queue_xmit()' should be called with interrupts enabled, the following backtrace: ieee80211_do_stop() ... spin_lock_irqsave(&l

• CVE-2024-47712HigOct 21, 2024
  affected < 5.4.285fixed 5.4.285

  In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param In the `wilc_parse_join_bss_param` function, the TSF field of the `ies` structure is accessed after the RCU read-side critical se

• CVE-2024-47711HigOct 21, 2024
  affected >= 6.10.0, < 6.11.2fixed 6.11.2

  In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't return OOB skb in manage_oob(). syzbot reported use-after-free in unix_stream_recv_urg(). [0] The scenario is 1. send(MSG_OOB) 2. recv(MSG_OOB) -> The consumed OOB remains in recv queu

• CVE-2024-47710MedOct 21, 2024
  affected < 5.4.285fixed 5.4.285

  In the Linux kernel, the following vulnerability has been resolved: sock_map: Add a cond_resched() in sock_hash_free() Several syzbot soft lockup reports all have in common sock_hash_free() If a map with a large number of buckets is destroyed, we need to yield the cpu when nee

• CVE-2024-47709MedOct 21, 2024
  affected < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). syzbot reported a warning in bcm_release(). [0] The blamed change fixed another warning that is triggered when connect() is issued again for a socke

• CVE-2024-47708MedOct 21, 2024
  affected >= 6.11.0, < 6.11.2fixed 6.11.2

  In the Linux kernel, the following vulnerability has been resolved: netkit: Assign missing bpf_net_context During the introduction of struct bpf_net_context handling for XDP-redirect, the netkit driver has been missed, which also requires it because NETKIT_REDIRECT invokes skb_

• CVE-2024-47707MedOct 21, 2024
  affected >= 4.3.0, < 5.4.290fixed 5.4.290

  In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() Blamed commit accidentally removed a check for rt->rt6i_idev being NULL, as spotted by syzbot: Oops: general protection fault, probably for non-

• CVE-2024-47706HigOct 21, 2024
  affected >= 4.12.0, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible UAF for bfqq->bic with merge chain 1) initial state, three tasks: Process 1 Process 2 Process 3 (BIC1) (BIC2) (BIC3) | Λ | Λ | Λ | |

• CVE-2024-47705MedOct 21, 2024
  affected >= 5.5.0, < 5.10.227fixed 5.10.227

  In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blk_add_partition The blk_add_partition() function initially used a single if-condition (IS_ERR(part)) to check for errors when adding a partition. This was m

• CVE-2024-47704MedOct 21, 2024
  affected >= 4.15.0, < 6.1.151fixed 6.1.151

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check link_res->hpo_dp_link_enc before using it [WHAT & HOW] Functions dp_enable_link_phy and dp_disable_link_phy can pass link_res without initializing hpo_dp_link_enc and it is necessary to c

• CVE-2024-47703HigOct 21, 2024
  affected >= 5.7.0, < 6.10.13fixed 6.10.13

  In the Linux kernel, the following vulnerability has been resolved: bpf, lsm: Add check for BPF LSM return value A bpf prog returning a positive number attached to file_alloc_security hook makes kernel panic. This happens because file system can not filter out the positive num

• CVE-2024-47702HigOct 21, 2024
  affected >= 6.6.0, < 6.10.13fixed 6.10.13

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fail verification for sign-extension of packet data/data_end/data_meta syzbot reported a kernel crash due to commit 1f1e864b6555 ("bpf: Handle sign-extenstin ctx member accesses"). The reason is due to s

• CVE-2024-47701HigOct 21, 2024
  affected >= 3.8.0, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem When looking up for an entry in an inlined directory, if e_value_offs is changed underneath the filesystem by some change in the block de

• CVE-2024-47700MedOct 21, 2024
  affected >= 6.5.0, < 6.6.54fixed 6.6.54

  In the Linux kernel, the following vulnerability has been resolved: ext4: check stripe size compatibility on remount as well We disable stripe size in __ext4_fill_super if it is not a multiple of the cluster ratio however this check is missed when trying to remount. This can le

• CVE-2024-47699MedOct 21, 2024
  affected >= 2.6.30, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() Patch series "nilfs2: fix potential issues with empty b-tree nodes". This series addresses three potential issues with empty b-tree nodes that can o

• CVE-2024-47698HigOct 21, 2024
  affected >= 4.0.0, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error Ensure index in rtl2832_pid_filter does not exceed 31 to prevent out-of-bounds access. dev->filters is a 32-bit value, so set_bit and cle

• CVE-2024-47697HigOct 21, 2024
  affected >= 4.0.0, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error Ensure index in rtl2830_pid_filter does not exceed 31 to prevent out-of-bounds access. dev->filters is a 32-bit value, so set_bit and cle