almalinux/kernel-devel

Vulnerabilities (1,341)

• CVE-2024-26974HigMay 1, 2024
  affected < 4.18.0-553.8.1.el8_10fixed 4.18.0-553.8.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: crypto: qat - resolve race condition during AER recovery During the PCI AER system's error recovery process, the kernel driver may encounter a race condition with freeing the reset_data structure's memory. If t

• CVE-2024-26973MedMay 1, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fat_encode_fh_nostale() encodes file handle without a parent it stores only first 10 bytes of the file handle. However the length of the file handle must

• CVE-2024-26964MedMay 1, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Add error handling in xhci_map_urb_for_dma Currently xhci_map_urb_for_dma() creates a temporary buffer and copies the SG list to the new linear buffer. But if the kzalloc_node() fails, then the follo

• CVE-2024-26961HigMay 1, 2024
  affected < 5.14.0-427.42.1.el9_4fixed 5.14.0-427.42.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154_llsec_key_del() can free resources of a key directly without following the RCU rules for waiting before the end of a grace period.

• CVE-2024-26960HigMay 1, 2024
  affected < 4.18.0-553.16.1.el8_10fixed 4.18.0-553.16.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix race between free_swap_and_cache() and swapoff() There was previously a theoretical window where swapoff() could run and teardown a swap_info_struct while a call to free_swap_and_cache() was runni

• CVE-2024-26947MedMay 1, 2024
  affected < 5.14.0-427.37.1.el9_4fixed 5.14.0-427.37.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses Since commit a4d5613c4dc6 ("arm: extend pfn_valid to take into account freed memory map alignment") changes the semantics of pfn_valid

• CVE-2024-26946MedMay 1, 2024
  affected < 5.14.0-427.35.1.el9_4fixed 5.14.0-427.35.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address Read from an unsafe address with copy_from_kernel_nofault() in arch_adjust_kprobe_addr() because this function is used before checking the

• CVE-2024-26939HigMay 1, 2024
  affected < 4.18.0-553.22.1.el8_10fixed 4.18.0-553.22.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: drm/i915/vma: Fix UAF on destroy against retire race Object debugging tools were sporadically reporting illegal attempts to free a still active i915 VMA object when parking a GT believed to be idle. [161.35944

• CVE-2024-26935MedMay 1, 2024
  affected < 5.14.0-427.42.1.el9_4fixed 5.14.0-427.42.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix unremoved procfs host directory regression Commit fc663711b944 ("scsi: core: Remove the /proc/scsi/${proc_name} directory earlier") fixed a bug related to modules loading/unloading, by adding a

• CVE-2024-26934HigMay 1, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usb_deauthorize_interface() Among the attribute file callback routines in drivers/usb/core/sysfs.c, the interface_authorized_store() function is the only one which acquires a device l

• CVE-2024-26933HigMay 1, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in port "disable" sysfs attribute The show and store callback routines for the "disable" sysfs attribute file in port.c acquire the device lock for the port's parent hub device. This ca

• CVE-2024-26931HigMay 1, 2024
  affected < 5.14.0-427.37.1.el9_4fixed 5.14.0-427.37.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix command flush on cable pull System crash due to command failed to flush back to SCSI layer. BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 PGD 0 P4D 0 Oops: 000

• CVE-2024-26930HigMay 1, 2024
  affected < 5.14.0-427.37.1.el9_4fixed 5.14.0-427.37.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the ha->vp_map pointer Coverity scan reported potential risk of double free of the pointer ha->vp_map. ha->vp_map was freed in qla2x00_mem_alloc(), and again freed in function

• CVE-2024-26925HigApr 25, 2024
  affected < 5.14.0-427.33.1.el9_4fixed 5.14.0-427.33.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path The commit mutex should not be released during the critical section between nft_gc_seq_begin() and nft_gc_seq_end(), otherwise, async GC

• CVE-2024-26924HigApr 25, 2024
  affected < 4.18.0-553.27.1.el8_10fixed 4.18.0-553.27.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: do not free live element Pablo reports a crash with large batches of elements with a back-to-back add/remove pattern. Quoting Pablo: add_elem("00000000") timeout 100 ms ... ad

• CVE-2024-26923HigApr 25, 2024
  affected < 4.18.0-553.22.1.el8_10fixed 4.18.0-553.22.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a peer that carries SCM

• CVE-2024-26921HigApr 18, 2024
  affected < 4.18.0-553.16.1.el8_10fixed 4.18.0-553.16.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: inet: inet_defrag: prevent sk release while still in use ip_local_out() and other functions can pass skb->sk as function argument. If the skb is a fragment and reassembly happens before such function call retu

• CVE-2024-26919HigApr 17, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: Fix debugfs directory leak The ULPI per-device debugfs root is named after the ulpi device's parent, but ulpi_unregister_interface tries to remove a debugfs directory named after the ulpi device itse

• CVE-2024-26907HigApr 17, 2024
  affected < 4.18.0-553.8.1.el8_10fixed 4.18.0-553.8.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix fortify source warning while accessing Eth segment ------------[ cut here ]------------ memcpy: detected field-spanning write (size 56) of single field "eseg->inline_hdr.start" at /var/lib/dkms

• CVE-2024-26906MedApr 17, 2024
  affected < 4.18.0-553.8.1.el8_10fixed 4.18.0-553.8.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() When trying to use copy_from_kernel_nofault() to read vsyscall page through a bpf program, the following oops was reported: BUG: unable to h