almalinux/kernel-rt-64k-debug-core

Vulnerabilities (523)

• CVE-2024-53229MedDec 27, 2024
  affected < 5.14.0-611.5.1.el9_7fixed 5.14.0-611.5.1.el9_7

  In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the qp flush warnings in req When the qp is in error state, the status of WQEs in the queue should be set to error. Or else the following will appear. [ 920.617269] WARNING: CPU: 1 PID: 21 at dr

• CVE-2024-53222MedDec 27, 2024
  affected < 6.12.0-124.8.1.el10_1fixed 6.12.0-124.8.1.el10_1

  In the Linux kernel, the following vulnerability has been resolved: zram: fix NULL pointer in comp_algorithm_show() LTP reported a NULL pointer dereference as followed: CPU: 7 UID: 0 PID: 5995 Comm: cat Kdump: loaded Not tainted 6.12.0-rc6+ #3 Hardware name: QEMU KVM Virtual

• CVE-2024-53216HigDec 27, 2024
  affected < 6.12.0-124.8.1.el10_1fixed 6.12.0-124.8.1.el10_1

  In the Linux kernel, the following vulnerability has been resolved: nfsd: release svc_expkey/svc_export with rcu_work The last reference for `cache_head` can be reduced to zero in `c_show` and `e_show`(using `rcu_read_lock` and `rcu_read_unlock`). Consequently, `svc_export_put`

• CVE-2024-53170HigDec 27, 2024
  affected < 5.14.0-611.5.1.el9_7fixed 5.14.0-611.5.1.el9_7

  In the Linux kernel, the following vulnerability has been resolved: block: fix uaf for flush rq while iterating tags blk_mq_clear_flush_rq_mapping() is not called during scsi probe, by checking blk_queue_init_done(). However, QUEUE_FLAG_INIT_DONE is cleared in del_gendisk by co

• CVE-2024-53147HigDec 24, 2024
  affected < 6.12.0-124.8.1.el10_1fixed 6.12.0-124.8.1.el10_1

  In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entries In the case of the directory size is greater than or equal to the cluster size, if start_clu becomes an EOF cluster(an invalid cluster) due to file system co

• CVE-2024-53241MedDec 24, 2024
  affected < 6.12.0-124.8.1.el10_1fixed 6.12.0-124.8.1.el10_1

  In the Linux kernel, the following vulnerability has been resolved: x86/xen: don't do PV iret hypercall through hypercall page Instead of jumping to the Xen hypercall page for doing the iret hypercall, directly code the required sequence in xen-asm.S. This is done in preparati

• CVE-2024-53143HigDec 7, 2024
  affected < 6.12.0-211.46.1.el10_2fixed 6.12.0-211.46.1.el10_2

  In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix ordering of iput() and watched_objects decrement Ensure the superblock is kept alive until we're done with iput(). Holding a reference to an inode is not allowed unless we ensure the superblock st

• CVE-2024-53135HigDec 4, 2024
  affected < 5.14.0-611.5.1.el9_7fixed 5.14.0-611.5.1.el9_7

  In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN Hide KVM's pt_mode module param behind CONFIG_BROKEN, i.e. disable support for virtualizing Intel PT via guest/host mode unless BROK

• CVE-2024-53119MedDec 2, 2024
  affected < 5.14.0-611.5.1.el9_7fixed 5.14.0-611.5.1.el9_7

  In the Linux kernel, the following vulnerability has been resolved: virtio/vsock: Fix accept_queue memory leak As the final stages of socket destruction may be delayed, it is possible that virtio_transport_recv_listen() will be called after the accept_queue has been flushed, bu

• CVE-2024-53090HigNov 21, 2024
  affected < 5.14.0-611.5.1.el9_7fixed 5.14.0-611.5.1.el9_7

  In the Linux kernel, the following vulnerability has been resolved: afs: Fix lock recursion afs_wake_up_async_call() can incur lock recursion. The problem is that it is called from AF_RXRPC whilst holding the ->notify_lock, but it tries to take a ref on the afs_call struct in

• CVE-2024-53052MedNov 19, 2024
  affected < 5.14.0-611.5.1.el9_7fixed 5.14.0-611.5.1.el9_7

  In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write When io_uring starts a write, it'll call kiocb_start_write() to bump the super block rwsem, preventing any freezes from happening while that write

• CVE-2024-50301HigNov 19, 2024
  affected < 5.14.0-570.51.1.el9_6fixed 5.14.0-570.51.1.el9_6

  In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission KASAN reports an out of bounds read: BUG: KASAN: slab-out-of-bounds in __kuid_val include/linux/uidgid.h:36 BUG: KASAN: slab-out-of-bounds in uid_eq

• CVE-2024-50294HigNov 19, 2024
  affected < 5.14.0-611.5.1.el9_7fixed 5.14.0-611.5.1.el9_7

  In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing locking causing hanging calls If a call gets aborted (e.g. because kafs saw a signal) between it being queued for connection and the I/O thread picking up the call, the abort will be prioriti

• CVE-2024-50195HigNov 8, 2024
  affected < 5.14.0-611.5.1.el9_7fixed 5.14.0-611.5.1.el9_7

  In the Linux kernel, the following vulnerability has been resolved: posix-clock: Fix missing timespec64 check in pc_clock_settime() As Andrew pointed out, it will make sense that the PTP core checked timespec64 struct's tv_sec and tv_nsec range before calling ptp->info->settime

• CVE-2024-50060MedOct 21, 2024
  affected < 5.14.0-611.5.1.el9_7fixed 5.14.0-611.5.1.el9_7

  In the Linux kernel, the following vulnerability has been resolved: io_uring: check if we need to reschedule during overflow flush In terms of normal application usage, this list will always be empty. And if an application does overflow a bit, it'll have a few entries. However,

• CVE-2022-49024MedOct 21, 2024
  affected < 5.14.0-611.5.1.el9_7fixed 5.14.0-611.5.1.el9_7

  In the Linux kernel, the following vulnerability has been resolved: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods In m_can_pci_remove() and error handling path of m_can_pci_probe(), m_can_class_free_dev() should be called to free resource allocated

• CVE-2024-49864HigOct 21, 2024
  affected < 5.14.0-611.5.1.el9_7fixed 5.14.0-611.5.1.el9_7

  In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix a race between socket set up and I/O thread creation In rxrpc_open_socket(), it sets up the socket and then sets up the I/O thread that will handle it. This is a problem, however, as there's a gap b

• CVE-2024-47727HigOct 21, 2024
  affected < 5.14.0-611.5.1.el9_7fixed 5.14.0-611.5.1.el9_7

  In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix "in-kernel MMIO" check TDX only supports kernel-initiated MMIO operations. The handle_mmio() function checks if the #VE exception occurred in the kernel and rejects the operation if it did not. Ho

• CVE-2024-47679HigOct 21, 2024
  affected < 5.14.0-611.5.1.el9_7fixed 5.14.0-611.5.1.el9_7

  In the Linux kernel, the following vulnerability has been resolved: vfs: fix race between evice_inodes() and find_inode()&iput() Hi, all Recently I noticed a bug[1] in btrfs, after digged it into and I believe it'a race in vfs. Let's assume there's a inode (ie ino 261) with i

• CVE-2024-46744HigSep 18, 2024
  affected < 5.14.0-611.5.1.el9_7fixed 5.14.0-611.5.1.el9_7

  In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports a "KMSAN: uninit-value in pick_link" bug. This is caused by an uninitialised page, which is ultimately caused by a corrupted symbolic link size read