kernel

Vulnerabilities (14,254)

• CVE-2024-47676HigOct 21, 2024
  affected >= 6.9.0, < 6.10.13fixed 6.10.13

  In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway Syzbot reports a UAF in hugetlb_fault(). This happens because vmf_anon_prepare() could drop the per-VMA lock and allow the current VMA to be freed before h

• CVE-2024-47675HigOct 21, 2024
  affected >= 6.6.0, < 6.6.54fixed 6.6.54

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() If bpf_link_prime() fails, bpf_uprobe_multi_link_attach() goes to the error_free label and frees the array of bpf_uprobe's without calling bpf_uprobe_un

• CVE-2024-47674HigOct 15, 2024
  affected >= 5.13.0, < 5.15.168fixed 5.15.168

  In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal memory mappings, there is no lifetime information associated with the mapping - it

• CVE-2024-47673MedOct 9, 2024
  affected >= 4.18.0, < 5.15.168fixed 5.15.168

  In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pause TCM when the firmware is stopped Not doing so will make us send a host command to the transport while the firmware is not alive, which will trigger a WARNING. bad state = 0 WARNING: C

• CVE-2024-47671MedOct 9, 2024
  affected >= 4.20.0, < 5.4.285fixed 5.4.285

  In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: prevent kernel-usb-infoleak The syzbot reported a kernel-usb-infoleak in usbtmc_write, we need to clear the structure before filling fields.

• CVE-2024-47670HigOct 9, 2024
  affected >= 2.6.28, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_xattr_find_entry() Add a paranoia check to make sure it doesn't stray beyond valid memory region containing ocfs2 xattr entries when scanning for a match. It will prevent ou

• CVE-2024-47669HigOct 9, 2024
  affected >= 2.6.33, < 4.19.322fixed 4.19.322

  In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix state management in error path of log writing function After commit a694291a6211 ("nilfs2: separate wait function from nilfs_segctor_write") was applied, the log writing function nilfs_segctor_do_co

• CVE-2024-47668HigOct 9, 2024
  affected >= 5.1.0, < 5.4.284fixed 5.4.284

  In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth before us, we'll sti

• CVE-2024-47667HigOct 9, 2024
  affected >= 5.2.0, < 5.4.284fixed 5.4.284

  In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) Errata #i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0 (SPRZ452D_July 2018_Revised December 2019 [1]) mentions when an inbound PCIe TLP spa

• CVE-2024-47666MedOct 9, 2024
  affected >= 4.15.0, < 5.10.247fixed 5.10.247

  In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Set phy->enable_completion only when we wait for it pm8001_phy_control() populates the enable_completion pointer with a stack address, sends a PHY_LINK_RESET / PHY_HARD_RESET, waits 300 ms, and re

• CVE-2024-47665MedOct 9, 2024
  affected >= 5.0.0, < 5.15.167fixed 5.15.167

  In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup Definitely condition dma_get_cache_alignment * defined value > 256 during driver initialization is not reason to BUG_ON(). Turn that to graceful

• CVE-2024-47664MedOct 9, 2024
  affected >= 5.13.0, < 6.6.51fixed 6.6.51

  In the Linux kernel, the following vulnerability has been resolved: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware If the value of max_speed_hz is 0, it may cause a division by zero error in hisi_calc_effective_speed(). The value of max_speed

• CVE-2024-47663MedOct 9, 2024
  affected >= 2.6.38, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9834: Validate frequency parameter value In ad9834_write_frequency() clk_get_rate() can return 0. In such case ad9834_calc_freqreg() call will lead to division by zero. Checking 'if (

• CVE-2024-47662MedOct 9, 2024
  affected >= 5.6.0, < 6.10.9fixed 6.10.9

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection [Why] These registers should not be read from driver and triggering the security violation when DMCUB work times out and diagnostics are c

• CVE-2024-47661MedOct 9, 2024
  affected >= 4.15.0, < 6.10.9fixed 6.10.9

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid overflow from uint32_t to uint8_t [WHAT & HOW] dmub_rb_cmd's ramping_boundary has size of uint8_t and it is assigned 0xFFFF. Fix it by changing it to uint8_t with value of 0xFF. This fix

• CVE-2024-47660MedOct 9, 2024
  affected >= 2.6.38, < 5.10.226fixed 5.10.226

  In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENT_WATCHED flags lazily In some setups directories can have many (usually negative) dentries. Hence __fsnotify_update_child_dentry_flags() function can take a significant amount of time. Sin

• CVE-2024-47659CriOct 9, 2024
  affected >= 2.6.30, < 4.19.322fixed 4.19.322

  In the Linux kernel, the following vulnerability has been resolved: smack: tcp: ipv4, fix incorrect labeling Currently, Smack mirrors the label of incoming tcp/ipv4 connections: when a label 'foo' connects to a label 'bar' with tcp/ipv4, 'foo' always gets 'foo' in returned ipv4

• CVE-2024-47658HigOct 9, 2024
  affected >= 4.16.0, < 6.6.50fixed 6.6.50

  In the Linux kernel, the following vulnerability has been resolved: crypto: stm32/cryp - call finalize with bh disabled The finalize operation in interrupt mode produce a produces a spinlock recursion warning. The reason is the fact that BH must be disabled during this process.

• CVE-2024-46871HigOct 9, 2024
  affected >= 4.15.0, < 5.15.174fixed 5.15.174

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX [Why & How] It actually exposes '6' types in enum dmub_notification_type. Not 5. Using smaller number to create array dmub_callback &

• CVE-2024-46870MedOct 9, 2024
  affected >= 4.15.0, < 6.10.9fixed 6.10.9

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable DMCUB timeout for DCN35 [Why] DMCUB can intermittently take longer than expected to process commands. Old ASIC policy was to continue while logging a diagnostic error - which works fin