kernel

Vulnerabilities (14,119)

• CVE-2024-42253HigAug 8, 2024
  affected >= 4.7.0, < 6.1.101fixed 6.1.101

  In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race Ensure that `i2c_lock' is held when setting interrupt latch and mask in pca953x_irq_bus_sync_unlock() in order to avoid races. The other (non-probe) call sit

• CVE-2024-42252MedAug 8, 2024
  affected >= 3.10.0, < 6.1.120fixed 6.1.120

  In the Linux kernel, the following vulnerability has been resolved: closures: Change BUG_ON() to WARN_ON() If a BUG_ON() can be hit in the wild, it shouldn't be a BUG_ON() For reference, this has popped up once in the CI, and we'll need more info to debug it: 03240 ----------

• CVE-2024-42251MedAug 8, 2024
  affected >= 6.6.0, < 6.6.42fixed 6.6.42

  In the Linux kernel, the following vulnerability has been resolved: mm: page_ref: remove folio_try_get_rcu() The below bug was reported on a non-SMP kernel: [ 275.267158][ T4335] ------------[ cut here ]------------ [ 275.267949][ T4335] kernel BUG at include/linux/page_ref.

• CVE-2024-42250HigAug 7, 2024
  affected >= 6.8.0, < 6.9.10fixed 6.9.10

  In the Linux kernel, the following vulnerability has been resolved: cachefiles: add missing lock protection when polling Add missing lock protection in poll routine when iterating xarray, otherwise: Even with RCU read lock held, only the slot of the radix tree is ensured to be

• CVE-2024-42249HigAug 7, 2024
  affected >= 6.9.0, < 6.9.10fixed 6.9.10

  In the Linux kernel, the following vulnerability has been resolved: spi: don't unoptimize message in spi_async() Calling spi_maybe_unoptimize_message() in spi_async() is wrong because the message is likely to be in the queue and not transferred yet. This can corrupt the message

• CVE-2024-42248MedAug 7, 2024
  affected >= 6.5.0, < 6.6.41fixed 6.6.41

  In the Linux kernel, the following vulnerability has been resolved: tty: serial: ma35d1: Add a NULL check for of_node The pdev->dev.of_node can be NULL if the "serial" node is absent. Add a NULL check to return an error in such cases.

• CVE-2024-42247HigAug 7, 2024
  affected >= 5.6.0, < 5.10.222fixed 5.10.222

  In the Linux kernel, the following vulnerability has been resolved: wireguard: allowedips: avoid unaligned 64-bit memory accesses On the parisc platform, the kernel issues kernel warnings because swap_endian() tries to load a 128-bit IPv6 address from an unaligned memory locati

• CVE-2024-42246MedAug 7, 2024
  affected >= 4.17.0, < 4.19.322fixed 4.19.322

  In the Linux kernel, the following vulnerability has been resolved: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket When using a BPF program on kernel_connect(), the call can return -EPERM. This causes xs_tcp_setup_socket() to loop forever, filling

• CVE-2024-42245MedAug 7, 2024
  affected >= 6.1.0, < 6.1.100fixed 6.1.100

  In the Linux kernel, the following vulnerability has been resolved: Revert "sched/fair: Make sure to try to detach at least one movable task" This reverts commit b0defa7ae03ecf91b8bfd10ede430cff12fcbd06. b0defa7ae03ec changed the load balancing logic to ignore env.max_loop if

• CVE-2024-42244MedAug 7, 2024
  affected >= 3.3.0, < 5.10.222fixed 5.10.222

  In the Linux kernel, the following vulnerability has been resolved: USB: serial: mos7840: fix crash on resume Since commit c49cfa917025 ("USB: serial: use generic method if no alternative is provided in usb serial layer"), USB serial core calls the generic resume implementation

• CVE-2024-42243MedAug 7, 2024
  affected >= 5.18.0, < 6.6.41fixed 6.6.41

  In the Linux kernel, the following vulnerability has been resolved: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray Patch series "mm/filemap: Limit page cache size to that supported by xarray", v2. Currently, xarray can't support arbitrary page cache size. More deta

• CVE-2024-42242MedAug 7, 2024
  affected >= 6.9.0, < 6.9.10fixed 6.9.10

  In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE blk_queue_max_segment_size() ensured: if (max_size < PAGE_SIZE) max_size = PAGE_SIZE; whereas: blk_validate_limits() makes it an error: if (WARN_ON_ONCE(

• CVE-2024-42241MedAug 7, 2024
  affected >= 5.17.0, < 6.6.41fixed 6.6.41

  In the Linux kernel, the following vulnerability has been resolved: mm/shmem: disable PMD-sized page cache if needed For shmem files, it's possible that PMD-sized page cache can't be supported by xarray. For example, 512MB page cache on ARM64 when the base page size is 64KB ca

• CVE-2024-42240MedAug 7, 2024
  affected < 5.15.163fixed 5.15.163

  In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in #DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF flag set then entry_SYSENTER_compat() uses CLEAR_BRANCH_HISTORY and calls the clear

• CVE-2024-42239MedAug 7, 2024
  affected >= 5.15.0, < 6.6.41fixed 6.6.41

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fail bpf_timer_cancel when callback is being cancelled Given a schedule: timer1 cb timer2 cb bpf_timer_cancel(timer2); bpf_timer_cancel(timer1); Both bpf_timer_cancel calls would wait for the other ca

• CVE-2024-42238MedAug 7, 2024
  affected >= 5.16.0, < 6.1.100fixed 6.1.100

  In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Return error if block header overflows file Return an error from cs_dsp_power_up() if a block header is longer than the amount of data left in the file. The previous code in cs_dsp_load() and

• CVE-2024-42237MedAug 7, 2024
  affected >= 5.16.0, < 6.1.100fixed 6.1.100

  In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Validate payload length before processing block Move the payload length check in cs_dsp_load() and cs_dsp_coeff_load() to be done before the block is processed. The check that the length of a

• CVE-2024-42236HigAug 7, 2024
  affected >= 3.10.0, < 4.19.318fixed 4.19.318

  In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() Userspace provided string 's' could trivially have the length zero. Left unchecked this will firstly result in an OOB read in the form `if (str

• CVE-2024-42235HigAug 7, 2024
  affected >= 6.6.0, < 6.6.41fixed 6.6.41

  In the Linux kernel, the following vulnerability has been resolved: s390/mm: Add NULL pointer check to crst_table_free() base_crst_free() crst_table_free() used to work with NULL pointers before the conversion to ptdescs. Since crst_table_free() can be called with a NULL point

• CVE-2024-42234HigAug 7, 2024
  affected >= 6.7.0, < 6.9.10fixed 6.9.10

  In the Linux kernel, the following vulnerability has been resolved: mm: fix crashes from deferred split racing folio migration Even on 6.10-rc6, I've been seeing elusive "Bad page state"s (often on flags when freeing, yet the flags shown are not bad: PG_locked had been set and