Latest CVE Feed
-
5.5
MEDIUMCVE-2024-45020
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe() Daniel Hodges reported a kernel verifier crash when playing with sched-ext. Further investigation shows that the crash is due to invalid ... Read more
Affected Products : linux_kernel- Published: Sep. 11, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-45005
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix validity interception issue when gisa is switched off We might run into a SIE validity if gisa has been disabled either via using kernel parameter "kvm.use_gisa=0" or by ... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Oct. 09, 2024
-
5.5
MEDIUMCVE-2024-45017
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec RoCE MPV trace call Prevent the call trace below from happening, by not allowing IPsec creation over a slave, if master device doesn't support IPsec. WARNING: CPU: ... Read more
Affected Products : linux_kernel- Published: Sep. 11, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-45002
In the Linux kernel, the following vulnerability has been resolved: rtla/osnoise: Prevent NULL dereference in error handling If the "tool->data" allocation fails then there is no need to call osnoise_free_top() and, in fact, doing so will lead to a NULL... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Sep. 06, 2024
-
5.5
MEDIUMCVE-2024-44991
In the Linux kernel, the following vulnerability has been resolved: tcp: prevent concurrent execution of tcp_sk_exit_batch Its possible that two threads call tcp_sk_exit_batch() concurrently, once from the cleanup_net workqueue, once from a task that fa... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Oct. 09, 2024
-
5.5
MEDIUMCVE-2024-44996
In the Linux kernel, the following vulnerability has been resolved: vsock: fix recursive ->recvmsg calls After a vsock socket has been added to a BPF sockmap, its prot->recvmsg has been replaced with vsock_bpf_recvmsg(). Thus the following recursiion co... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Sep. 16, 2024
-
5.5
MEDIUMCVE-2024-45001
In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix RX buf alloc_size alignment and atomic op panic The MANA driver's RX buffer alloc_size is passed into napi_build_skb() to create SKB. skb_shinfo(skb) is located at the en... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Oct. 09, 2024
-
5.5
MEDIUMCVE-2024-45019
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Take state lock during tx timeout reporter mlx5e_safe_reopen_channels() requires the state lock taken. The referenced changed in the Fixes tag removed the lock to fix another... Read more
Affected Products : linux_kernel- Published: Sep. 11, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-44984
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT Remove the dma_unmap_page_attrs() call in the driver's XDP_REDIRECT code path. This should have been removed when we let the page poo... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Oct. 10, 2024
-
5.5
MEDIUMCVE-2024-45022
In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 The __vmap_pages_range_noflush() assumes its argument pages** contains pages with the same page... Read more
Affected Products : linux_kernel- Published: Sep. 11, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-44979
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix missing workqueue destroy in xe_gt_pagefault On driver reload we never free up the memory for the pagefault and access counter workqueues. Add those destroy calls here. (ch... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Oct. 10, 2024
-
5.5
MEDIUMCVE-2024-44990
In the Linux kernel, the following vulnerability has been resolved: bonding: fix null pointer deref in bond_ipsec_offload_ok We must check if there is an active slave before dereferencing the pointer.... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Sep. 06, 2024
-
5.5
MEDIUMCVE-2024-44980
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix opregion leak Being part o the display, ideally the setup and cleanup would be done by display itself. However this is a bigger refactor that needs to be done on both i915 a... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Oct. 10, 2024
-
5.5
MEDIUMCVE-2024-44976
In the Linux kernel, the following vulnerability has been resolved: ata: pata_macio: Fix DMA table overflow Kolbjørn and Jonáš reported that their 32-bit PowerMacs were crashing in pata-macio since commit 09fe2bfa6b83 ("ata: pata_macio: Fix max_segment_... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Oct. 10, 2024
-
5.5
MEDIUMCVE-2017-2616
A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.... Read more
- Published: Jul. 27, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-44971
In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() bcm_sf2_mdio_register() calls of_phy_find_device() and then phy_device_remove() in a loop to remove existing PHY... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Sep. 05, 2024
-
5.5
MEDIUMCVE-2024-44975
In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: fix panic caused by partcmd_update We find a bug as below: BUG: unable to handle page fault for address: 00000003 PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Oct. 03, 2024
-
5.5
MEDIUMCVE-2024-44965
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix pti_clone_pgtable() alignment assumption Guenter reported dodgy crashes on an i386-nosmp build using GCC-11 that had the form of endless traps until entry stack exhaust and ... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Oct. 04, 2024
-
5.5
MEDIUMCVE-2024-44995
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix a deadlock problem when config TC during resetting When config TC during the reset process, may cause a deadlock, the flow is as below: pf re... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Sep. 15, 2024
-
5.5
MEDIUMCVE-2024-44963
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUG_ON() when freeing tree block after error When freeing a tree block, at btrfs_free_tree_block(), if we fail to create a delayed reference we don't deal with the error a... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Dec. 09, 2024