opensuse/kernel-source&distro=openSUSE Tumbleweed

Vulnerabilities (2,129)

• CVE-2024-50082HigOct 29, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race We're seeing crashes from rq_qos_wake_function that look like this: BUG: unable to handle page fault for address: ffffafe180a40084 #PF: su

• CVE-2024-50081MedOct 29, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: blk-mq: setup queue ->tag_set before initializing hctx Commit 7b815817aa58 ("blk-mq: add helper for checking if one CPU is mapped to specified hctx") needs to check queue mapping via tag set in hctx's cpuhp han

• CVE-2024-50080MedOct 29, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: ublk: don't allow user copy for unprivileged device UBLK_F_USER_COPY requires userspace to call write() on ublk char device for filling request buffer, and unprivileged device can't be trusted. So don't allow

• CVE-2024-50079MedOct 29, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work When the sqpoll is exiting and cancels pending work items, it may need to run task_work. If this happens from within io_uring_cancel_gen

• CVE-2024-50078HigOct 29, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Call iso_exit() on module unload If iso_init() has been called, iso_exit() must be called on module unload. Without that, the struct proto that iso_init() registered with proto_register() becomes inv

• CVE-2024-50077HigOct 29, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix multiple init when debugfs is disabled If bt_debugfs is not created successfully, which happens if either CONFIG_DEBUG_FS or CONFIG_DEBUG_FS_ALLOW_ALL is unset, then iso_init() returns early

• CVE-2024-50076MedOct 29, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: vt: prevent kernel-infoleak in con_font_get() font.data may not initialize all memory spaces depending on the implementation of vc->vc_sw->con_font_get. This may cause info-leak, so to prevent this, it is safes

• CVE-2024-50075HigOct 29, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: xhci: tegra: fix checked USB2 port number If USB virtualizatoin is enabled, USB2 ports are shared between all Virtual Functions. The USB2 port number owned by an USB2 root hub in a Virtual Function may be less

• CVE-2024-50074HigOct 29, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: parport: Proper fix for array out-of-bounds access The recent fix for array out-of-bounds accesses replaced sprintf() calls blindly with snprintf(). However, since snprintf() returns the would-be-printed size,

• CVE-2024-50073HigOct 29, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux BUG: KASAN: slab-use-after-free in gsm_cleanup_mux+0x77b/0x7b0 drivers/tty/n_gsm.c:3160 [n_gsm] Read of size 8 at addr ffff88815fe99c00 by task poc/3379 CPU: 0

• CVE-2024-50072MedOct 29, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Use code segment selector for VERW operand Robert Gill reported below #GP in 32-bit mode when dosemu software was executing vm86() system call: general protection fault: 0000 [#1] PREEMPT SMP CPU

• CVE-2024-50071HigOct 29, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func() 'new_map' is allocated using devm_* which takes care of freeing the allocated data on device removal, call to .dt_free_map = pinconf_g

• CVE-2024-50070MedOct 29, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: stm32: check devm_kasprintf() returned value devm_kasprintf() can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value. Found by code rev

• CVE-2024-50069MedOct 29, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: pinctrl: apple: check devm_kasprintf() returned value devm_kasprintf() can return a NULL pointer on failure but this returned value is not checked. Fix this lack and check the returned value. Found by code rev

• CVE-2024-50068MedOct 29, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: mm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets() The sysfs_target->regions allocated in damon_sysfs_regions_alloc() is not freed in damon_sysfs_test_add_targets(), which cause the

• CVE-2024-50067HigOct 28, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: uprobe: avoid out-of-bounds memory access of fetching args Uprobe needs to fetch args into a percpu buffer, and then copy to ring buffer to avoid non-atomic context problem. Sometimes user-space strings, array

• CVE-2024-50066HigOct 23, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix move_normal_pmd/retract_page_tables race In mremap(), move_page_tables() looks at the type of the PMD entry and the specified address range to figure out by which method the next chunk of page ta

• CVE-2024-50065MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: ntfs3: Change to non-blocking allocation in ntfs_d_hash d_hash is done while under "rcu-walk" and should not sleep. __get_name() allocates using GFP_KERNEL, having the possibility to sleep when under memory pre

• CVE-2024-50064MedOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: zram: free secondary algorithms names We need to kfree() secondary algorithms names when reset zram device that had multi-streams, otherwise we leak memory. [[email protected]: kfree(NULL) is legal]

• CVE-2024-50063HigOct 21, 2024
  affected < 6.11.8-1.1fixed 6.11.8-1.1

  In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tail call between progs attached to different hooks bpf progs can be attached to kernel functions, and the attached functions can take different parameters or return different return values. If pro