kernel

Vulnerabilities (14,254)

• CVE-2024-46869HigSep 30, 2024
  affected >= 6.10.0, < 6.10.12fixed 6.10.12

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: Allocate memory for driver private data Fix driver not allocating memory for struct btintel_data which is used to store internal data.

• CVE-2024-46868MedSep 27, 2024
  affected >= 6.7.0, < 6.10.11fixed 6.10.11

  In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire() If the __qcuefi pointer is not set, then in the original code, we would hold onto the lock. That means that if we tried to set it later, then it wou

• CVE-2024-46867MedSep 27, 2024
  affected >= 6.8.0, < 6.10.11fixed 6.10.11

  In the Linux kernel, the following vulnerability has been resolved: drm/xe/client: fix deadlock in show_meminfo() There is a real deadlock as well as sleeping in atomic() bug in here, if the bo put happens to be the last ref, since bo destruction wants to grab the same spinlock

• CVE-2024-46866HigSep 27, 2024
  affected >= 6.8.0, < 6.10.11fixed 6.10.11

  In the Linux kernel, the following vulnerability has been resolved: drm/xe/client: add missing bo locking in show_meminfo() bo_meminfo() wants to inspect bo state like tt and the ttm resource, however this state can change at any point leading to stuff like NPD and UAF, if the

• CVE-2024-46865CriSep 27, 2024
  affected >= 5.10.226, < 5.10.227fixed 5.10.227

  In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized.

• CVE-2024-46864MedSep 27, 2024
  affected >= 6.4.0, < 6.6.52fixed 6.6.52

  In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: fix kexec crash due to VP assist page corruption commit 9636be85cc5b ("x86/hyperv: Fix hyperv_pcpu_input_arg handling when CPUs go online/offline") introduces a new cpuhp state for hyperv initializa

• CVE-2024-46863HigSep 27, 2024
  affected >= 6.10.0, < 6.10.11fixed 6.10.11

  In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-lnl-match: add missing empty item There is no links_num in struct snd_soc_acpi_mach {}, and we test !link->num_adr as a condition to end the loop in hda_sdw_machine_select(). So an e

• CVE-2024-46862HigSep 27, 2024
  affected >= 6.10.0, < 6.10.11fixed 6.10.11

  In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-mtl-match: add missing empty item There is no links_num in struct snd_soc_acpi_mach {}, and we test !link->num_adr as a condition to end the loop in hda_sdw_machine_select(). So an e

• CVE-2024-46861MedSep 27, 2024
  affected >= 6.5.0, < 6.6.52fixed 6.6.52

  In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: do not stop RX on failing RX callback RX callbacks can fail for multiple reasons: * Payload too short * Payload formatted incorrecly (e.g. bad NCM framing) * Lack of memory None of these shoul

• CVE-2024-46860MedSep 27, 2024
  affected >= 4.16.0, < 6.6.52fixed 6.6.52

  In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change When disabling wifi mt7921_ipv6_addr_change() is called as a notifier. At this point mvif->phy is already NULL so we cannot use it here.

• CVE-2024-46859HigSep 27, 2024
  affected >= 3.3.0, < 5.15.168fixed 5.15.168

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses The panasonic laptop code in various places uses the SINF array with index values of 0 - SINF_CUR_BRIGHT(0x0d) without checking that the SIN

• CVE-2024-46858HigSep 27, 2024
  affected >= 5.10.0, < 5.10.227fixed 5.10.227

  In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in __timer_delete_sync There are two paths to access mptcp_pm_del_add_timer, result in a race condition: CPU1 CPU2 ==== ==== net_rx_action

• CVE-2024-46857MedSep 27, 2024
  affected >= 5.1.0, < 6.1.111fixed 6.1.111

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix bridge mode operations when there are no VFs Currently, trying to set the bridge mode attribute when numvfs=0 leads to a crash: bridge link set dev eth2 hwmode vepa [ 168.967392] BUG: kernel NU

• CVE-2024-46856MedSep 27, 2024
  affected >= 6.10.0, < 6.10.11fixed 6.10.11

  In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices The probe() function is only used for DP83822 and DP83826 PHY, leaving the private data pointer uninitialized for the DP83825 models which caus

• CVE-2024-46855HigSep 27, 2024
  affected >= 5.3.0, < 5.4.295fixed 5.4.295

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_socket: fix sk refcount leaks We must put 'sk' reference before returning.

• CVE-2024-46854HigSep 27, 2024
  affected >= 4.10.0, < 4.19.323fixed 4.19.323

  In the Linux kernel, the following vulnerability has been resolved: net: dpaa: Pad packets to ETH_ZLEN When sending packets under 60 bytes, up to three bytes of the buffer following the data may be leaked. Avoid this by extending all packets to ETH_ZLEN, ensuring nothing is lea

• CVE-2024-46853HigSep 27, 2024
  affected >= 5.1.0, < 5.4.285fixed 5.4.285

  In the Linux kernel, the following vulnerability has been resolved: spi: nxp-fspi: fix the KASAN report out-of-bounds bug Change the memcpy length to fix the out-of-bounds issue when writing the data that is not 4 byte aligned to TX FIFO. To reproduce the issue, write 3 bytes

• CVE-2024-46852HigSep 27, 2024
  affected >= 5.11.0, < 5.15.168fixed 5.15.168

  In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fix off-by-one in CMA heap fault handler Until VM_DONTEXPAND was added in commit 1c1914d6e8c6 ("dma-buf: heaps: Don't track CMA dma-buf pages under RssFile") it was possible to obtain a mapping

• CVE-2024-46851MedSep 27, 2024
  affected >= 6.7.0, < 6.10.11fixed 6.10.11

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid race between dcn10_set_drr() and dc_state_destruct() dc_state_destruct() nulls the resource context of the DC state. The pipe context passed to dcn10_set_drr() is a member of this resourc

• CVE-2024-46850HigSep 27, 2024
  affected >= 6.7.0, < 6.10.11fixed 6.10.11

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid race between dcn35_set_drr() and dc_state_destruct() dc_state_destruct() nulls the resource context of the DC state. The pipe context passed to dcn35_set_drr() is a member of this resourc