almalinux/kernel

Vulnerabilities (1,333)

• CVE-2023-52594HigMar 6, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() Fix an array-index-out-of-bounds read in ath9k_htc_txstatus(). The bug occurs when txs->cnt, data from a URB provided by a USB d

• CVE-2021-47101HigMar 4, 2024
  affected < 4.18.0-553.22.1.el8_10fixed 4.18.0-553.22.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asix_mdio_read() asix_read_cmd() may read less than sizeof(smsr) bytes and in this case smsr will be uninitialized. Fail log: BUG: KMSAN: uninit-value in asix_check_host_enable driver

• CVE-2021-47097HigMar 4, 2024
  affected < 4.18.0-553.22.1.el8_10fixed 4.18.0-553.22.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: Input: elantech - fix stack out of bound access in elantech_change_report_id() The array param[] in elantech_change_report_id() must be at least 3 bytes, because elantech_read_reg_params() is calling ps2_comman

• CVE-2023-52581MedMar 2, 2024
  affected < 5.14.0-427.13.1.el9_4fixed 5.14.0-427.13.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memleak when more than 255 elements expired When more than 255 elements expired we're supposed to switch to a new gc container structure. This never happens: u8 type will wrap before

• CVE-2023-52580MedMar 2, 2024
  affected < 5.14.0-427.13.1.el9_4fixed 5.14.0-427.13.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: net/core: Fix ETH_P_1588 flow dissector When a PTP ethernet raw frame with a size of more than 256 bytes followed by a 0xff pattern is sent to __skb_flow_dissect, nhoff value calculation is wrong. For example:

• CVE-2023-52578HigMar 2, 2024
  affected < 5.14.0-427.13.1.el9_4fixed 5.14.0-427.13.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV_STATS_INC() syzbot/KCSAN reported data-races in br_handle_frame_finish() [1] This function can run from multiple cpus without mutual exclusion. Adopt SMP safe DEV_STATS_INC() to update dev

• CVE-2023-52574HigMar 2, 2024
  affected < 5.14.0-427.13.1.el9_4fixed 5.14.0-427.13.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: team: fix null-ptr-deref when team device type is changed Get a null-ptr-deref bug as follows with reproducer [1]. BUG: kernel NULL pointer dereference, address: 0000000000000228 ... RIP: 0010:vlan_dev_hard_he

• CVE-2023-52565HigMar 2, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix OOB read If the index provided by the user is bigger than the mask size, we might do an out of bound read.

• CVE-2023-52560MedMar 2, 2024
  affected < 4.18.0-553.8.1.el8_10fixed 4.18.0-553.8.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() When CONFIG_DAMON_VADDR_KUNIT_TEST=y and making CONFIG_DEBUG_KMEMLEAK=y and CONFIG_DEBUG_KMEMLEAK_AUTO_SCAN=y, the below memory leak i

• CVE-2023-52529MedMar 2, 2024
  affected < 5.14.0-427.13.1.el9_4fixed 5.14.0-427.13.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: HID: sony: Fix a potential memory leak in sony_probe() If an error occurs after a successful usb_alloc_urb() call, usb_free_urb() should be called.

• CVE-2023-52528MedMar 2, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported the following uninit-value access issue: ===================================================== BUG: KMSAN: uninit-value in sms

• CVE-2023-52522HigMar 2, 2024
  affected < 5.14.0-427.13.1.el9_4fixed 5.14.0-427.13.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neigh_periodic_work() While looking at a related syzbot report involving neigh_periodic_work(), I found that I forgot to add an annotation when deleting an RCU protected item

• CVE-2023-52520MedMar 2, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix reference leak If a duplicate attribute is found using kset_find_obj(), a reference to that attribute is returned which needs to be disposed accordingly using kobject_put(). Move th

• CVE-2023-52513HigMar 2, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix connection failure handling In case immediate MPA request processing fails, the newly created endpoint unlinks the listening endpoint and is ready to be dropped. This special case was not handled

• CVE-2022-48627MedMar 2, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleting chars in the buffer A memory overlapping copy occurs when deleting a long line. This memory overlapping copy can cause data corruption when scr_memcpyw is optimized to m

• CVE-2021-47073MedMar 1, 2024
  affected < 4.18.0-553.8.1.el8_10fixed 4.18.0-553.8.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios init_dell_smbios_wmi() only registers the dell_smbios_wmi_driver on systems where the Dell WMI interface is supported. While exit_dell_smbios_wmi() u

• CVE-2021-47055HigFeb 29, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: mtd: require write permissions for locking and badblock ioctls MEMLOCK, MEMUNLOCK and OTPLOCK modify protection bits. Thus require write permission. Depending on the hardware MEMLOCK might even be write-once, e

• CVE-2023-52478HigFeb 29, 2024
  affected < 4.18.0-553.22.1.el8_10fixed 4.18.0-553.22.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect hidpp_connect_event() has *four* time-of-check vs time-of-use (TOCTOU) races when it races with itself. hidpp_connect_event() primarily runs fro

• CVE-2023-52477MedFeb 29, 2024
  affected < 4.18.0-553.5.1.el8_10fixed 4.18.0-553.5.1.el8_10

  In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev->bos without checking if it was allocated and init

• CVE-2023-52476MedFeb 29, 2024
  affected < 5.14.0-427.13.1.el9_4fixed 5.14.0-427.13.1.el9_4

  In the Linux kernel, the following vulnerability has been resolved: perf/x86/lbr: Filter vsyscall addresses We found that a panic can occur when a vsyscall is made while LBR sampling is active. If the vsyscall is interrupted (NMI) for perf sampling, this call sequence can occur