almalinux/bpftool

Vulnerabilities (996)

• CVE-2024-38579MedJun 19, 2024
  affected < 7.3.0-427.33.1.el9_4fixed 7.3.0-427.33.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2_dump_omd() value of ptr is increased by ciph_key_len instead of hash_iv_len which could lead to going beyond the buffer boundaries. Fix this bug by changing ciph_key

• CVE-2024-38575MedJun 19, 2024
  affected < 7.3.0-427.31.1.el9_4fixed 7.3.0-427.31.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: pcie: handle randbuf allocation failure The kzalloc() in brcmf_pcie_download_fw_nvram() will return null if the physical memory has run out. As a result, if we use get_random_bytes() to generate

• CVE-2024-38573HigJun 19, 2024
  affected < 7.3.0-427.37.1.el9_4fixed 7.3.0-427.37.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: cppc_cpufreq: Fix possible null pointer dereference cppc_cpufreq_get_rate() and hisi_cppc_cpufreq_get_rate() can be called from different places with various parameters. So cpufreq_cpu_get() can return null as

• CVE-2024-38570CriJun 19, 2024
  affected < 7.3.0-427.37.1.el9_4fixed 7.3.0-427.37.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploi

• CVE-2024-38564HigJun 19, 2024
  affected < 4.18.0-553.30.1.el8_10fixed 4.18.0-553.30.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type for BPF_PROG_TYPE_CGROUP_SKB. link_create uses bpf_prog_g

• CVE-2024-38562HigJun 19, 2024
  affected < 7.3.0-427.37.1.el9_4fixed 7.3.0-427.37.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: Avoid address calculations via out of bounds array indexing Before request->channels[] can be used, request->n_channels must be set. Additionally, address calculations for memory after the "chann

• CVE-2024-38559MedJun 19, 2024
  affected < 7.3.0-427.35.1.el9_4fixed 7.3.0-427.35.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Ensure the copied buf is NUL terminated Currently, we allocate a count-sized kernel buffer and copy count from userspace to that buffer. Later, we use kstrtouint on this buffer but we don't ensure t

• CVE-2024-38558CriJun 19, 2024
  affected < 7.3.0-427.31.1.el9_4fixed 7.3.0-427.31.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix overwriting ct original tuple for ICMPv6 OVS_PACKET_CMD_EXECUTE has 3 main attributes: - OVS_PACKET_ATTR_KEY - Packet metadata in a netlink format. - OVS_PACKET_ATTR_PACKET - Binary pack

• CVE-2024-38556HigJun 19, 2024
  affected < 7.3.0-427.40.1.el9_4fixed 7.3.0-427.40.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Add a timeout to acquire the command queue semaphore Prevent forced completion handling on an entry that has not yet been assigned an index, causing an out of bounds access on idx = -22. Instead of wa

• CVE-2024-38544CriJun 19, 2024
  affected < 7.3.0-427.33.1.el9_4fixed 7.3.0-427.33.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt In rxe_comp_queue_pkt() an incoming response packet skb is enqueued to the resp_pkts queue and then a decision is made whether to run the completer task inline or s

• CVE-2024-38543MedJun 19, 2024
  affected < 7.3.0-427.26.1.el9_4fixed 7.3.0-427.26.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure The kcalloc() in dmirror_device_evict_chunk() will return null if the physical memory has run out. As a result, if src_pfns or dst_pfns is derefe

• CVE-2024-38541HigJun 19, 2024
  affected < 4.18.0-553.27.1.el8_10fixed 4.18.0-553.27.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: of: module: add buffer overflow check in of_modalias() In of_modalias(), if the buffer happens to be too small even for the 1st snprintf() call, the len parameter will become negative and str parameter (if not

• CVE-2024-38540MedJun 19, 2024
  affected < 7.3.0-427.33.1.el9_4fixed 7.3.0-427.33.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq Undefined behavior is triggered when bnxt_qplib_alloc_init_hwq is called with hwq_attr->aux_depth != 0 and hwq_attr->aux_stride == 0. In that

• CVE-2024-38538HigJun 19, 2024
  affected < 7.3.0-427.33.1.el9_4fixed 7.3.0-427.33.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes syzbot triggered an uninit value[1] error in bridge device's xmit path by sending a short (less than ETH_HLEN bytes) skb. To fix it check if we

• CVE-2024-36979HigJun 19, 2024
  affected < 7.3.0-427.35.1.el9_4fixed 7.3.0-427.35.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix vlan use-after-free syzbot reported a suspicious rcu usage[1] in bridge's mst code. While fixing it I noticed that nothing prevents a vlan to be freed while walking the list from the same

• CVE-2024-36978HigJun 19, 2024
  affected < 7.3.0-427.40.1.el9_4fixed 7.3.0-427.40.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multiq: fix possible OOB write in multiq_tune() q->bands will be assigned to qopt->bands to execute subsequent code logic after kmalloc. So the old q->bands should not be used in kmalloc. Otherw

• CVE-2024-36971HigKEVJun 10, 2024
  affected < 7.3.0-427.31.1.el9_4fixed 7.3.0-427.31.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first clear sk->sk_dst_ca

• CVE-2024-36957MedMay 30, 2024
  affected < 7.3.0-427.26.1.el9_4fixed 7.3.0-427.26.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: avoid off-by-one read from userspace We try to access count + 1 byte from userspace with memdup_user(buffer, count + 1). However, the userspace only provides buffer of count bytes and only these c

• CVE-2024-36953MedMay 30, 2024
  affected < 4.18.0-553.22.1.el8_10fixed 4.18.0-553.22.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() vgic_v2_parse_attr() is responsible for finding the vCPU that matches the user-provided CPUID, which (of course) may not be valid. If the ID

• CVE-2024-36952MedMay 30, 2024
  affected < 7.3.0-427.28.1.el9_4fixed 7.3.0-427.28.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vpo