opensuse/kernel-source&distro=openSUSE Tumbleweed

Vulnerabilities (1,862)

• CVE-2024-50222HigNov 9, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP generic/077 on x86_32 CONFIG_DEBUG_KMAP_LOCAL_FORCE_MAP=y with highmem, on huge=always tmpfs, issues a warning and then hangs (interruptibly):

• CVE-2024-50221HigNov 9, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Vangogh: Fix kernel memory out of bounds write KASAN reports that the GPU metrics table allocated in vangogh_tables_init() is not large enough for the memset done in smu_cmn_init_soft_gpu_metrics().

• CVE-2024-50220MedNov 9, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: fork: do not invoke uffd on fork if error occurs Patch series "fork: do not expose incomplete mm on fork". During fork we may place the virtual memory address space into an inconsistent state before the fork o

• CVE-2024-50218MedNov 9, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow Syzbot reported a kernel BUG in ocfs2_truncate_inline. There are two reasons for this: first, the parameter value passed is greater than ocfs2_max_inline

• CVE-2024-50217HigNov 9, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids() Mounting btrfs from two images (which have the same one fsid and two different dev_uuids) in certain executing order may trigger an

• CVE-2024-50216MedNov 9, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: xfs: fix finding a last resort AG in xfs_filestream_pick_ag When the main loop in xfs_filestream_pick_ag fails to find a suitable AG it tries to just pick the online AG. But the loop for that uses args->pag as

• CVE-2024-50215HigNov 9, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: assign dh_key to NULL after kfree_sensitive ctrl->dh_key might be used across multiple calls to nvmet_setup_dhgroup() for the same controller. So it's better to nullify it after release on error pat

• CVE-2024-50214MedNov 9, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic() modprobe drm_connector_test and then rmmod drm_connector_test, the following memory leak occurs. The `mode` allocated in drm_mode_duplica

• CVE-2024-50213MedNov 9, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic() modprobe drm_hdmi_state_helper_test and then rmmod it, the following memory leak occurs. The `mode` allocated in drm_mode_duplicate() called

• CVE-2024-50212MedNov 9, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: lib: alloc_tag_module_unload must wait for pending kfree_rcu calls Ben Greear reports following splat: ------------[ cut here ]------------ net/netfilter/nf_nat_core.c:1114 module nf_nat func:nf_nat_register_

• CVE-2024-50211HigNov 8, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: udf: refactor inode_bmap() to handle error Refactor inode_bmap() to handle error since udf_next_aext() can return error now. On situations like ftruncate, udf_extend_file() can now detect errors and bail out ea

• CVE-2024-50210MedNov 8, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() If get_clock_desc() succeeds, it calls fget() for the clockid's fd, and get the clk->rwsem read lock, so the error path should release the

• CVE-2024-50209HigNov 8, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a check for memory allocation __alloc_pbl() can return error when memory allocation fails. Driver is not checking the status on one of the instances.

• CVE-2024-50208HigNov 8, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages Avoid memory corruption while setting up Level-2 PBL pages for the non MR resources when num_pages > 256K. There will be a single PDE page address (co

• CVE-2024-50207HigNov 8, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix reader locking when changing the sub buffer order The function ring_buffer_subbuf_order_set() updates each ring_buffer_per_cpu and installs new sub buffers that match the requested page order.

• CVE-2024-50206CriNov 8, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init The loop responsible for allocating up to MTK_FQ_DMA_LENGTH buffers must only touch as many descriptors, otherwise it ends up corrupting unre

• CVE-2024-50205MedNov 8, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check be

• CVE-2024-50201MedNov 8, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix encoder->possible_clones Include the encoder itself in its possible_clones bitmask. In the past nothing validated that drivers were populating possible_clones correctly, but that changed in comm

• CVE-2024-50200HigNov 8, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: maple_tree: correct tree corruption on spanning store Patch series "maple_tree: correct tree corruption on spanning store", v3. There has been a nasty yet subtle maple tree corruption bug that appears to have

• CVE-2024-50199MedNov 8, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: skip HugeTLB pages for unuse_vma I got a bad pud error and lost a 1GB HugeTLB when calling swapoff. The problem can be reproduced by the following steps: 1. Allocate an anonymous 1GB HugeTLB and