DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Linux Kernel: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-09-17
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder einen unspezifischen Angriff durchzuführen.
01
beschreibt (88)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-46801US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
libfs: fix get_stashed_dentry()
get_stashed_dentry() tries to optimistically retrieve a stashed dentry
from a… | ||||
| CVE-2024-46800US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
sch/netem: fix use after free in netem_dequeue
If netem_dequeue() enqueues packet to inner qdisc and that qdis… | ||||
| CVE-2024-46799US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX
If number of TX queues are set to 1 we get a NULL… | ||||
| CVE-2024-46798US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
When using kernel with the following extra config,
- CON… | ||||
| CVE-2024-46797US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
powerpc/qspinlock: Fix deadlock in MCS queue
If an interrupt occurs in queued_spin_lock_slowpath() after we in… | ||||
| CVE-2024-46796US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix double put of @cfile in smb2_set_path_size()
If smb2_compound_op() is called with a valid @cf… | ||||
| CVE-2024-46795US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: unset the binding mark of a reused connection
Steve French reported null pointer dereference error from… | ||||
| CVE-2024-46794US | low3.3 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
x86/tdx: Fix data leak in mmio_read()
The mmio_read() function makes a TDVMCALL to retrieve MMIO data for an
a… | ||||
| CVE-2024-46793US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder
Since commit 13f58267cda3 ("ASoC: soc.h:… | ||||
| CVE-2024-46792US | low3.3 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
riscv: misaligned: Restrict user access to kernel memory
raw_copy_{to,from}_user() do not call access_ok(), so… | ||||
| CVE-2024-46791US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
The mcp251x_hw_wake() function is called… | ||||
| CVE-2024-46790US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
codetag: debug: mark codetags for poisoned page as empty
When PG_hwpoison pages are freed they are treated dif… | ||||
| CVE-2024-46789US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
mm/slub: add check for s->flags in the alloc_tagging_slab_free_hook
When enable CONFIG_MEMCG & CONFIG_KFENCE &… | ||||
| CVE-2024-46788US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
tracing/osnoise: Use a cpumask to know what threads are kthreads
The start_kthread() and stop_thread() code wa… | ||||
| CVE-2024-46787US | medium4.7 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
userfaultfd: fix checks for huge PMDs
Patch series "userfaultfd: fix races around pmd_trans_huge() check", v2.… | ||||
| CVE-2024-46786US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
The fscache_cookie_lru_timer is initi… | ||||
| CVE-2024-46785US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
eventfs: Use list_del_rcu() for SRCU protected list variable
Chi Zhiling reported:
We found a null pointer… | ||||
| CVE-2024-46784US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
Currently napi_disable() gets called durin… | ||||
| CVE-2024-46783US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
tcp_bpf: fix return value of tcp_bpf_sendmsg()
When we cork messages in psock->cork, the last message triggers… | ||||
| CVE-2024-46782US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ila: call nf_unregister_net_hooks() sooner
syzbot found an use-after-free Read in ila_nf_input [1]
Issue here… | ||||
20 von 88 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2026-500381 vom 2026-10-12external
- Red Hat Security Advisory RHSA-2025:20518 vom 2025-11-11external
- Red Hat Security Advisory RHSA-2025:6966 vom 2025-05-13external
- Red Hat Security Advisory RHSA-2026:44385 vom 2026-07-23external
- Red Hat Security Advisory RHSA-2026:62568 vom 2026-09-02external
- Amazon Linux Security Advisory ALAS-2024-2695 vom 2024-11-15external
- Amazon Linux Security Advisory ALAS-2024-2696 vom 2024-11-15external
- Amazon Linux Security Advisory ALAS2KERNEL-5.15-2025-078 vom 2025-07-10external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan