opensuse/kernel-source-longterm&distro=openSUSE Tumbleweed

Vulnerabilities (694)

• CVE-2024-49944MedOct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start In sctp_listen_start() invoked by sctp_inet_listen(), it should set the sk_state back to CLOSED if sctp_autobind() fails due to whatever

• CVE-2024-49938MedOct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit Syzbot points out that skb_trim() has a sanity check on the existing length of the skb, which can be uninitialised in some error paths.

• CVE-2024-49930HigOct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix array out-of-bound access in SoC stats Currently, the ath11k_soc_dp_stats::hal_reo_error array is defined with a maximum size of DP_REO_DST_RING_MAX. However, the ath11k_dp_process_rx() functi

• CVE-2024-49925MedOct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: Register sysfs groups through driver core The driver core can register and cleanup sysfs groups already. Make use of that functionality to simplify the error handling and cleanup. Also avoid a UA

• CVE-2024-49924HigOct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: fbdev: pxafb: Fix possible use after free in pxafb_task() In the pxafb_probe function, it calls the pxafb_init_fbinfo function, after which &fbi->task is associated with pxafb_task. Moreover, within this pxafb_

• CVE-2024-49903HigOct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uaf in dbFreeBits [syzbot reported] ================================================================== BUG: KASAN: slab-use-after-free in __mutex_lock_common kernel/locking/mutex.c:587 [inline] BUG: KA

• CVE-2024-49902MedOct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: jfs: check if leafidx greater than num leaves per dmap tree syzbot report a out of bounds in dbSplit, it because dmt_leafidx greater than num leaves per dmap tree, add a checking for dmt_leafidx in dbFindLeaf.

• CVE-2024-49900HigOct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of new_ea in ea_buffer syzbot reports that lzo1x_1_do_compress is using uninit-value: ===================================================== BUG: KMSAN: uninit-value in lzo1x_1_do_c

• CVE-2024-49894HigOct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma hardware format translation Fixes index out of bounds issue in `cm_helper_translate_curve_to_degamma_hw_format` function. The issue could occur when the index

• CVE-2024-49892MedOct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize get_bytes_per_element's default to 1 Variables, used as denominators and maybe not assigned to other values, should not be 0. bytes_per_element_y & bytes_per_element_c are initialize

• CVE-2024-49890MedOct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: ensure the fw_info is not null before using it This resolves the dereference null return value warning reported by Coverity.

• CVE-2024-49889HigOct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: avoid use-after-free in ext4_ext_show_leaf() In ext4_find_extent(), path may be freed by error or be reallocated, so using a previously saved *ppath may have been freed and thus may trigger use-after-free

• CVE-2024-49884HigOct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_at() We hit the following use-after-free: ================================================================== BUG: KASAN: slab-use-after-free in ext4_split_ext

• CVE-2024-49883HigOct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: aovid use-after-free in ext4_ext_insert_extent() As Ojaswin mentioned in Link, in ext4_ext_insert_extent(), if the path is reallocated in ext4_ext_create_new_leaf(), we'll use the stale path and cause UAF

• CVE-2024-49882HigOct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse() the buffer of the extents path In ext4_ext_try_to_merge_up(), set path[1].p_bh to NULL after it has been released, otherwise it may be released twice. An example of what triggers this

• CVE-2024-50002Oct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: static_call: Handle module init failure correctly in static_call_del_module() Module insertion invokes static_call_add_module() to initialize the static calls in a module. static_call_add_module() invokes __sta

• CVE-2024-50000Oct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() In mlx5e_tir_builder_alloc() kvzalloc() may return NULL which is dereferenced on the next line in a reference to the modify field. Found by Linux Verifica

• CVE-2024-49999Oct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: afs: Fix the setting of the server responding flag In afs_wait_for_operation(), we set transcribe the call responded flag to the server record that we used after doing the fileserver iteration loop - but it's p

• CVE-2024-49998Oct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: net: dsa: improve shutdown sequence Alexander Sverdlin presents 2 problems during shutdown with the lan9303 driver. One is specific to lan9303 and the other just happens to reproduce there. The first problem i

• CVE-2024-49994Oct 21, 2024
  affected < 6.12.11-1.1fixed 6.12.11-1.1

  In the Linux kernel, the following vulnerability has been resolved: block: fix integer overflow in BLKSECDISCARD I independently rediscovered commit 22d24a544b0d49bbcbd61c8c0eaf77d3c9297155 block: fix overflow in blk_ioctl_discard() but for secure erase. Same problem: ui