kernel

Vulnerabilities (14,254)

• CVE-2024-47696HigOct 21, 2024
  affected < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency In the commit aee2424246f9 ("RDMA/iwcm: Fix a use-after-free related to destroying CM IDs"), the function flush_workqueue is invoked to flush

• CVE-2024-47695CriOct 21, 2024
  affected >= 5.8.0, < 5.15.168fixed 5.15.168

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds In the function init_conns(), after the create_con() and create_cm() for loop if something fails. In the cleanup for loop after the destroy tag, we acce

• CVE-2024-47694MedOct 21, 2024
  affected >= 6.11.0, < 6.11.2fixed 6.11.2

  In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix UMR pd cleanup on error flow of driver init The cited commit moves the pd allocation from function mlx5r_umr_resource_cleanup() to a new function mlx5r_umr_cleanup(). So the fix in commit [1] is br

• CVE-2024-47693MedOct 21, 2024
  affected >= 5.7.0, < 5.15.168fixed 5.15.168

  In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix ib_cache_setup_one error flow cleanup When ib_cache_update return an error, we exit ib_cache_setup_one instantly with no proper cleanup, even though before this we had already successfully done gid

• CVE-2024-47692MedOct 21, 2024
  affected >= 5.2.0, < 5.4.285fixed 5.4.285

  In the Linux kernel, the following vulnerability has been resolved: nfsd: return -EINVAL when namelen is 0 When we have a corrupted main.sqlite in /var/lib/nfs/nfsdcld/, it may result in namelen being 0, which will cause memdup_user() to return ZERO_SIZE_PTR. When we access the

• CVE-2024-47691HigOct 21, 2024
  affected >= 4.16.0, < 6.6.54fixed 6.6.54

  In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread() syzbot reports a f2fs bug as below: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 print_report+0xe8/0x5

• CVE-2024-47690HigOct 21, 2024
  affected >= 4.1.0, < 5.15.168fixed 5.15.168

  In the Linux kernel, the following vulnerability has been resolved: f2fs: get rid of online repaire on corrupted directory syzbot reports a f2fs bug as below: kernel BUG at fs/f2fs/inode.c:896! RIP: 0010:f2fs_evict_inode+0x1598/0x15c0 fs/f2fs/inode.c:896 Call Trace: evict+0x5

• CVE-2024-47689MedOct 21, 2024
  affected >= 6.5.0, < 6.6.54fixed 6.6.54

  In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error() syzbot reports a f2fs bug as below: ------------[ cut here ]------------ WARNING: CPU: 1 PID: 58 at kernel/rcu/sync.c:177 rcu_sync_dtor+0xcd/0x1

• CVE-2024-47688MedOct 21, 2024
  affected < 6.6.54fixed 6.6.54

  In the Linux kernel, the following vulnerability has been resolved: driver core: Fix a potential null-ptr-deref in module_add_driver() Inject fault while probing of-fpga-region, if kasprintf() fails in module_add_driver(), the second sysfs_remove_link() in exit path will cause

• CVE-2024-47687MedOct 21, 2024
  affected >= 6.7.0, < 6.10.13fixed 6.10.13

  In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix invalid mr resource destroy Certain error paths from mlx5_vdpa_dev_add() can end up releasing mr resources which never got initialized in the first place. This patch adds the missing check in ml

• CVE-2024-47686HigOct 21, 2024
  affected >= 5.16.0, < 6.1.113fixed 6.1.113

  In the Linux kernel, the following vulnerability has been resolved: ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate() The psc->div[] array has psc->num_div elements. These values come from when we call clk_hw_register_div(). It's adc_divisors and ARRAY_SIZE(adc_diviso

• CVE-2024-47685CriOct 21, 2024
  affected >= 3.18.0, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th->res1) Use skb_put_zero() to clear the w

• CVE-2024-47684MedOct 21, 2024
  affected >= 4.13.0, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: tcp: check skb is non-NULL in tcp_rto_delta_us() We have some machines running stock Ubuntu 20.04.6 which is their 5.4.0-174-generic kernel that are running ceph and recently hit a null ptr dereference in tcp_r

• CVE-2024-47683MedOct 21, 2024
  affected >= 4.15.0, < 6.1.105fixed 6.1.105

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Recompute DSC Params if no Stream on Link [why] Encounter NULL pointer dereference uner mst + dsc setup. BUG: kernel NULL pointer dereference, address: 0000000000000008 PGD 0 P4D 0

• CVE-2024-47682HigOct 21, 2024
  affected >= 5.19.0, < 6.1.113fixed 6.1.113

  In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix off-by-one error in sd_read_block_characteristics() Ff the device returns page 0xb1 with length 8 (happens with qemu v2.x, for example), sd_read_block_characteristics() may attempt an out-of-bound

• CVE-2024-47681MedOct 21, 2024
  affected >= 6.2.0, < 6.6.54fixed 6.6.54

  In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he Fix the NULL pointer dereference in mt7996_mcu_sta_bfer_he routine adding an sta interface to the mt7996 driver. Found by code review.

• CVE-2024-47680MedOct 21, 2024
  affected >= 6.10.0, < 6.10.13fixed 6.10.13

  In the Linux kernel, the following vulnerability has been resolved: f2fs: check discard support for conventional zones As the helper function f2fs_bdev_support_discard() shows, f2fs checks if the target block devices support discard by calling bdev_max_discard_sectors() and bde

• CVE-2024-47679HigOct 21, 2024
  affected >= 2.6.37, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: vfs: fix race between evice_inodes() and find_inode()&iput() Hi, all Recently I noticed a bug[1] in btrfs, after digged it into and I believe it'a race in vfs. Let's assume there's a inode (ie ino 261) with i

• CVE-2024-47678CriOct 21, 2024
  affected >= 3.18.0, < 6.1.113fixed 6.1.113

  In the Linux kernel, the following vulnerability has been resolved: icmp: change the order of rate limits ICMP messages are ratelimited : After the blamed commits, the two rate limiters are applied in this order: 1) host wide ratelimit (icmp_global_allow()) 2) Per destinatio

• CVE-2024-47677MedOct 21, 2024
  affected >= 6.8.0, < 6.10.13fixed 6.10.13

  In the Linux kernel, the following vulnerability has been resolved: exfat: resolve memory leak from exfat_create_upcase_table() If exfat_load_upcase_table reaches end and returns -EINVAL, allocated memory doesn't get freed and while exfat_load_default_upcase_table allocates mor