kernel

Vulnerabilities (14,027)

• CVE-2024-26877CriApr 17, 2024
  affected >= 5.7.0, < 5.10.214fixed 5.10.214

  In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx - call finalize with bh disabled When calling crypto_finalize_request, BH should be disabled to avoid triggering the following calltrace: ------------[ cut here ]------------ WARNING: CP

• CVE-2024-26876MedApr 17, 2024
  affected >= 4.15.0, < 6.6.55fixed 6.6.55

  In the Linux kernel, the following vulnerability has been resolved: drm/bridge: adv7511: fix crash on irq during probe Moved IRQ registration down to end of adv7511_probe(). If an IRQ already is pending during adv7511_probe (before adv7511_cec_init) then cec_received_msg_ts co

• CVE-2024-26875MedApr 17, 2024
  affected >= 2.6.26, < 4.19.311fixed 4.19.311

  In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix uaf in pvr2_context_set_notify [Syzbot reported] BUG: KASAN: slab-use-after-free in pvr2_context_set_notify+0x2c4/0x310 drivers/media/usb/pvrusb2/pvrusb2-context.c:35 Read of size 4 at addr

• CVE-2024-26874MedApr 17, 2024
  affected >= 4.7.0, < 4.19.311fixed 4.19.311

  In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip It's possible that mtk_crtc->event is NULL in mtk_drm_crtc_finish_page_flip(). pending_needs_vblank value is set by mtk_crtc->event, but

• CVE-2024-26873MedApr 17, 2024
  affected >= 6.7.0, < 6.7.11fixed 6.7.11

  In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Fix a deadlock issue related to automatic dump If we issue a disabling PHY command, the device attached with it will go offline, if a 2 bit ECC error occurs at the same time, a hung task may be

• CVE-2024-26872HigApr 17, 2024
  affected >= 3.3.0, < 5.10.214fixed 5.10.214

  In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Do not register event handler until srpt device is fully setup Upon rare occasions, KASAN reports a use-after-free Write in srpt_refresh_port(). This seems to be because an event handler is register

• CVE-2024-26871MedApr 17, 2024
  affected >= 6.5.0, < 6.6.23fixed 6.6.23

  In the Linux kernel, the following vulnerability has been resolved: f2fs: fix NULL pointer dereference in f2fs_submit_page_write() BUG: kernel NULL pointer dereference, address: 0000000000000014 RIP: 0010:f2fs_submit_page_write+0x6cf/0x780 [f2fs] Call Trace: ? show_regs+

• CVE-2024-26870HigApr 17, 2024
  affected >= 5.9.0, < 5.10.214fixed 5.10.214

  In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 A call to listxattr() with a buffer size = 0 returns the actual size of the buffer needed for a subsequent call. When size > 0, nfs4_listxattr() does

• CVE-2024-26869HigApr 17, 2024
  affected >= 4.19.0, < 6.6.23fixed 6.6.23

  In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption: Thread A GC thread - gc_data_segment - ra_data_block - locked meta_inode page - f2fs_inplace_write

• CVE-2024-26868HigApr 17, 2024
  affected >= 6.1.0, < 6.1.83fixed 6.1.83

  In the Linux kernel, the following vulnerability has been resolved: nfs: fix panic when nfs4_ff_layout_prepare_ds() fails We've been seeing the following panic in production BUG: kernel NULL pointer dereference, address: 0000000000000065 PGD 2f485f067 P4D 2f485f067 PUD 2cc5d80

• CVE-2024-26867MedApr 17, 2024
  affected >= 6.7.0, < 6.7.11fixed 6.7.11

  In the Linux kernel, the following vulnerability has been resolved: comedi: comedi_8255: Correct error in subdevice initialization The refactoring done in commit 5c57b1ccecc7 ("comedi: comedi_8255: Rework subdevice initialization functions") to the initialization of the io fiel

• CVE-2024-26866MedApr 17, 2024
  affected >= 4.10.0, < 6.6.23fixed 6.6.23

  In the Linux kernel, the following vulnerability has been resolved: spi: lpspi: Avoid potential use-after-free in probe() fsl_lpspi_probe() is allocating/disposing memory manually with spi_alloc_host()/spi_alloc_target(), but uses devm_spi_register_controller(). In case of erro

• CVE-2024-26865HigApr 17, 2024
  affected >= 4.3.0, < 6.1.83fixed 6.1.83

  In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsk_timer_handler(). syzkaller reported a warning of netns tracker [0] followed by KASAN splat [1] and another ref tracker warning [1]. syzkaller could not find a repro

• CVE-2024-26864HigApr 17, 2024
  affected < 6.1.83fixed 6.1.83

  In the Linux kernel, the following vulnerability has been resolved: tcp: Fix refcnt handling in __inet_hash_connect(). syzbot reported a warning in sk_nulls_del_node_init_rcu(). The commit 66b60b0c8c4a ("dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalbli

• CVE-2024-26863MedApr 17, 2024
  affected >= 3.17.0, < 4.19.311fixed 4.19.311

  In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in hsr_get_node() KMSAN reported the following uninit-value access issue [1]: ===================================================== BUG: KMSAN: uninit-value in hsr_get_node+0xa2e/0

• CVE-2024-26862MedApr 17, 2024
  affected >= 4.20.0, < 5.4.273fixed 5.4.273

  In the Linux kernel, the following vulnerability has been resolved: packet: annotate data-races around ignore_outgoing ignore_outgoing is read locklessly from dev_queue_xmit_nit() and packet_getsockopt() Add appropriate READ_ONCE()/WRITE_ONCE() annotations. syzbot reported:

• CVE-2024-26861MedApr 17, 2024
  affected >= 5.7.0, < 5.10.214fixed 5.10.214

  In the Linux kernel, the following vulnerability has been resolved: wireguard: receive: annotate data-race around receiving_counter.counter Syzkaller with KCSAN identified a data-race issue when accessing keypair->receiving_counter.counter. Use READ_ONCE() and WRITE_ONCE() anno

• CVE-2024-26860MedApr 17, 2024
  affected < 6.1.83fixed 6.1.83

  In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a memory leak when rechecking the data Memory for the "checksums" pointer will leak if the data is rechecked after checksum failure (because the associated kfree won't happen due to 'goto skip

• CVE-2024-26859MedApr 17, 2024
  affected >= 4.2.0, < 4.19.311fixed 4.19.311

  In the Linux kernel, the following vulnerability has been resolved: net/bnx2x: Prevent access to a freed page in page_pool Fix race condition leading to system crash during EEH error handling During EEH error recovery, the bnx2x driver's transmit timeout logic could cause a ra

• CVE-2024-26858MedApr 17, 2024
  affected < 6.6.22fixed 6.6.22

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map Just simply reordering the functions mlx5e_ptp_metadata_map_put and mlx5e_ptpsq_track_metadata