DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifischen Angriff
Advisory ansehen veröffentlicht 2024-05-30
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder einen unspezifischen Angriff durchzuführen.
01
beschreibt (100)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-36959US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
If we fail to allocate propname buffer, we need… | ||||
| CVE-2024-36958US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Fix nfsd4_encode_fattr4() crasher
Ensure that args.acl is initialized early. It is used in an
unconditio… | ||||
| CVE-2024-36957US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-af: avoid off-by-one read from userspace
We try to access count + 1 byte from userspace with memdup_… | ||||
| CVE-2024-36956US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
thermal/debugfs: Free all thermal zone debug memory on zone removal
Because thermal_debug_tz_remove() does not… | ||||
| CVE-2024-36955US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()
The documentation for device_get_named_c… | ||||
| CVE-2024-36954US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
tipc: fix a possible memleak in tipc_buf_append
__skb_linearize() doesn't free the skb when it fails, so move… | ||||
| CVE-2024-36953US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
vgic_v2_parse_attr() is responsible for f… | ||||
| CVE-2024-36952US | medium4.7 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
There are cases after NPIV deletio… | ||||
| CVE-2024-36951US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: range check cp bad op exception interrupts
Due to a CP interrupt bug, bad packet garbage exception… | ||||
| CVE-2024-36950US | medium4.4 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
firewire: ohci: mask bus reset interrupts between ISR and bottom half
In the FireWire OHCI interrupt handler,… | ||||
| CVE-2024-36949US | medium4.7 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
amd/amdkfd: sync all devices to wait all processes being evicted
If there are more than one device doing reset… | ||||
| CVE-2024-36948US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/xe_migrate: Cast to output precision before multiplying operands
Addressing potential overflow in resul… | ||||
| CVE-2024-36947US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
qibfs: fix dentry leak
simple_recursive_removal() drops the pinning references to all positives
in subtree. F… | ||||
| CVE-2024-36946US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
phonet: fix rtm_phonet_notify() skb allocation
fill_route() stores three components in the skb:
- struct rtms… | ||||
| CVE-2024-36945US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net/smc: fix neighbour and rtable leak in smc_ib_find_route()
In smc_ib_find_route(), the neighbour found by n… | ||||
| CVE-2024-36944US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
Reapply "drm/qxl: simplify qxl_fence_wait"
This reverts commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea.
Step… | ||||
| CVE-2024-36943US | medium4.7 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
fs/proc/task_mmu: fix loss of young/dirty bits during pagemap scan
make_uffd_wp_pte() was previously doing:… | ||||
| CVE-2024-36942US | — | — | ||
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | ||||
| CVE-2024-36941US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
wifi: nl80211: don't free NULL coalescing rule
If the parsing fails, we can dereference a NULL pointer here. | ||||
| CVE-2024-36940US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: core: delete incorrect free in pinctrl_enable()
The "pctldev" struct is allocated in devm_pinctrl_reg… | ||||
20 von 100 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2024-12682 vom 2024-09-30external
- Red Hat Security Advisory RHSA-2024:10262 vom 2024-11-26external
- Red Hat Security Advisory RHSA-2024:10772 vom 2024-12-04external
- Red Hat Security Advisory RHSA-2024:10773 vom 2024-12-04external
- Red Hat Security Advisory RHSA-2024:4106 vom 2024-06-26external
- Red Hat Security Advisory RHSA-2024:4108 vom 2024-06-26external
- Red Hat Security Advisory RHSA-2024:4151 vom 2024-07-03external
- Red Hat Security Advisory RHSA-2024:4211 vom 2024-07-02external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan