almalinux/bpftool

Vulnerabilities (901)

• CVE-2024-26810MedApr 5, 2024
  affected < 7.3.0-427.33.1.el9_4fixed 7.3.0-427.33.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask operations through config space changes to DisINTx may race INTx configuration changes via ioctl. Create wrappers that add locking for paths outside of the core in

• CVE-2024-26808Apr 4, 2024
  affected < 7.3.0-427.31.1.el9_4fixed 7.3.0-427.31.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain Remove netdevice from inet/ingress basechain in case NETDEV_UNREGISTER event is reported, otherwise a stale reference to netdevic

• CVE-2024-26804Apr 4, 2024
  affected < 7.3.0-427.18.1.el9_4fixed 7.3.0-427.18.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growth syzkaller triggered following kasan splat: BUG: KASAN: use-after-free in __skb_flow_dissect+0x19d1/0x7a50 net/core/flow_dissector.c:1170 Read of size 1 at addr

• CVE-2024-26802Apr 4, 2024
  affected < 4.18.0-553.16.1.el8_10fixed 4.18.0-553.16.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: stmmac: Clear variable when destroying workqueue Currently when suspending driver and stopping workqueue it is checked whether workqueue is not NULL and if so, it is destroyed. Function destroy_workqueue() does

• CVE-2024-26801Apr 4, 2024
  affected < 7.3.0-427.24.1.el9_4fixed 7.3.0-427.24.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Avoid potential use-after-free in hci_error_reset While handling the HCI_EV_HARDWARE_ERROR event, if the underlying BT controller is not responding, the GPIO reset mechanism would free the hci_dev an

• CVE-2024-26783Apr 4, 2024
  affected < 7.3.0-427.26.1.el9_4fixed 7.3.0-427.26.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index With numa balancing on, when a numa system is running where a numa node doesn't have its local memory so it has no managed zones, the followi

• CVE-2024-26779Apr 3, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix race condition on enabling fast-xmit fast-xmit must only be enabled after the sta has been uploaded to the driver, otherwise it could end up passing the not-yet-uploaded sta via drv_tx calls

• CVE-2024-26773Apr 3, 2024
  affected < 7.3.0-427.28.1.el9_4fixed 7.3.0-427.28.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() Determine if the group block bitmap is corrupted before using ac_b_ex in ext4_mb_try_best_found() to avoid allocating blocks from a

• CVE-2024-26769Apr 3, 2024
  affected < 4.18.0-553.22.1.el8_10fixed 4.18.0-553.22.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: avoid deadlock on delete association path When deleting an association the shutdown path is deadlocking because we try to flush the nvmet_wq nested. Avoid this by deadlock by deferring the put work in

• CVE-2024-26766Apr 3, 2024
  affected < 4.18.0-553.100.1.el8_10fixed 4.18.0-553.100.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix sdma.h tx->num_descs off-by-one error Unfortunately the commit `fd8958efe877` introduced another error causing the `descs` array to overflow. This reults in further crashes easily reproducible by `

• CVE-2024-26759Apr 3, 2024
  affected < 4.18.0-553.8.1.el8_10fixed 4.18.0-553.8.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix race when skipping swapcache When skipping swapcache for SWP_SYNCHRONOUS_IO, if two or more threads swapin the same entry at the same time, they get different pages (A, B). Before one thread (T0)

• CVE-2024-26744Apr 3, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Support specifying the srpt_service_guid parameter Make loading ib_srpt with this parameter set work. The current behavior is that setting that parameter while loading the ib_srpt kernel module trigg

• CVE-2024-26743Apr 3, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: RDMA/qedr: Fix qedr_create_user_qp error flow Avoid the following warning by making sure to free the allocated resources in case that qedr_init_user_queue() fail. -----------[ cut here ]----------- WARNING: CP

• CVE-2024-26739Apr 3, 2024
  affected < 7.3.0-427.37.1.el9_4fixed 7.3.0-427.37.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: don't override retval if we already lost the skb If we're redirecting the skb, and haven't called tcf_mirred_forward(), yet, we need to tell the core to drop the skb by setting the retcod

• CVE-2024-26737Apr 3, 2024
  affected < 7.3.0-427.28.1.el9_4fixed 7.3.0-427.28.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel The following race is possible between bpf_timer_cancel_and_free and bpf_timer_cancel. It will lead a UAF on the timer->timer. bpf_timer_c

• CVE-2024-26735Apr 3, 2024
  affected < 7.3.0-427.20.1.el9_4fixed 7.3.0-427.20.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered before registering the generic netlink family.

• CVE-2024-26733Apr 3, 2024
  affected < 4.18.0-553.16.1.el8_10fixed 4.18.0-553.16.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: arp: Prevent overflow in arp_req_get(). syzkaller reported an overflown write in arp_req_get(). [0] When ioctl(SIOCGARP) is issued, arp_req_get() looks up an neighbour entry and copies neigh->ha to struct arpr

• CVE-2024-26717Apr 3, 2024
  affected < 4.18.0-553.22.1.el8_10fixed 4.18.0-553.22.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementation was split in an ACPI and OF part, but the new OF driver never initialises the client pointer which is dereferenced on p

• CVE-2024-26698Apr 3, 2024
  affected < 4.18.0-553.16.1.el8_10fixed 4.18.0-553.16.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove In commit ac5047671758 ("hv_netvsc: Disable NAPI before closing the VMBus channel"), napi_disable was getting called for all channels, includ

• CVE-2023-52638Apr 3, 2024
  affected < 7.3.0-427.26.1.el9_4fixed 7.3.0-427.26.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock The following 3 locks would race against each other, causing the deadlock situation in the Syzbot bug report: - j1939_socks_lock - active_ses