DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
Advisory ansehen veröffentlicht 2024-07-29
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
01
beschreibt (187)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-42231US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
btrfs: zoned: fix calc_available_free_space() for zoned mode
calc_available_free_space() returns the total siz… | ||||
| CVE-2024-42230US | medium4.4 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
powerpc/pseries: Fix scv instruction crash with kexec
kexec on pseries disables AIL (reloc_on_exc), required f… | ||||
| CVE-2024-42229US | medium4.1 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
crypto: aead,cipher - zeroize key buffer after use
I.G 9.7.B for FIPS 140-3 specifies that variables temporari… | ||||
| CVE-2024-42228US | high7.0 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
Initialize the size before callin… | ||||
| CVE-2024-42227US | medium4.7 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix overlapping copy within dml_core_mode_programming
[WHY]
&mode_lib->mp.Watermark and &loca… | ||||
| CVE-2024-42226US | — | — | ||
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | ||||
| CVE-2024-42225US | high7.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: replace skb_put with skb_put_zero
Avoid potentially reusing uninitialized data | ||||
| CVE-2024-42224US | medium6.1 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: mv88e6xxx: Correct check for empty list
Since commit a3c53be55c95 ("net: dsa: mv88e6xxx: Support mul… | ||||
| CVE-2024-42223US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
media: dvb-frontends: tda10048: Fix integer overflow
state->xtal_hz can be up to 16M, so it can overflow a 32… | ||||
| CVE-2024-42162US | high7.0 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
gve: Account for stopped queues when reading NIC stats
We now account for the fact that the NIC might send us… | ||||
| CVE-2024-42161US | medium6.3 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
[Changes from V1:
- Use a default branch in the swit… | ||||
| CVE-2024-42160US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- It missed to check validation of fault attr… | ||||
| CVE-2024-42159US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Sanitise num_phys
Information is stored in mr_sas_port->phy_mask, values larger then size of
thi… | ||||
| CVE-2024-42158US | medium4.1 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
Replace memzero_explicit() and kfree() with kfree_… | ||||
| CVE-2024-42157US | medium4.1 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
s390/pkey: Wipe sensitive data on failure
Wipe sensitive data from stack also if the copy_to_user() fails. | ||||
| CVE-2024-42156US | medium4.1 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
s390/pkey: Wipe copies of clear-key structures on failure
Wipe all sensitive data from stack for all IOCTLs, w… | ||||
| CVE-2024-42155US | low1.9 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
s390/pkey: Wipe copies of protected- and secure-keys
Although the clear-key of neither protected- nor secure-k… | ||||
| CVE-2024-42154US | medium4.4 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
tcp_metrics: validate source addr length
I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4
is at… | ||||
| CVE-2024-42153US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
When del_timer_sync() is called in… | ||||
| CVE-2024-42152US | medium4.7 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
nvmet: fix a possible leak when destroy a ctrl during qp establishment
In nvmet_sq_destroy we capture sq->ctrl… | ||||
20 von 187 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2024-12682 vom 2024-09-30external
- Oracle Linux Security Advisory ELSA-2024-12851 vom 2024-12-05external
- Oracle Linux Security Advisory ELSA-2026-13577 vom 2026-05-07external
- Red Hat Security Advisory RHSA-2024:10262 vom 2024-11-26external
- Red Hat Security Advisory RHSA-2024:10771 vom 2024-12-04external
- Red Hat Security Advisory RHSA-2024:10772 vom 2024-12-04external
- Red Hat Security Advisory RHSA-2024:10773 vom 2024-12-04external
- Red Hat Security Advisory RHSA-2024:10942 vom 2024-12-11external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan