p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости linux-lowlatency-hwe-5.15 · Страница 148

За последние 30 дней в linux-lowlatency-hwe-5.15 опубликовано уязвимостей: 0; в каталоге KEV: 0.

RSS ↗ JSON ↗
Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 4513

  1. CVE-2024-44934

    Высокий · CVSS 7.8EPSS 0,22%Есть исправление

    net: bridge: mcast: wait for previous gc cycles when removing port

    In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: wait for previous gc cycles when removing port syzbot hit a use-after-free[1] which is caused because the bridge doesn't make sure that all previous garbage has been collected when removing a port. What happens is: CPU 1 CPU 2 start gc cycle remove port acquire gc lock first wait for lock call br_multicasg_gc() directly acquire lock now but free port the port can be freed while grp timers still running Make sure all previous gc cycles have finished by using flus

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-125.135~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  2. CVE-2024-44931

    Средний · CVSS 5.5EPSS 0,25%Есть исправление

    gpio: prevent potential speculation leaks in gpio_device_get_desc()

    In the Linux kernel, the following vulnerability has been resolved: gpio: prevent potential speculation leaks in gpio_device_get_desc() Userspace may trigger a speculative read of an address outside the gpio descriptor array. Users can do that by calling gpio_ioctl() with an offset out of range. Offset is copied from user and then used as an array index to get the gpio descriptor without sanitization in gpio_device_get_desc(). This change ensures that the offset is sanitized by using array_index_nospec() to mitigate any possibility of speculative information leaks. This bug was discovered and resolved using Coverity Static Analysis Securi

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-127.137~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  3. CVE-2024-43914

    Средний · CVSS 5.5EPSS 0,23%Есть исправление

    md/raid5: avoid BUG_ON() while continue reshape after reassembling

    In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUG_ON() while continue reshape after reassembling Currently, mdadm support --revert-reshape to abort the reshape while reassembling, as the test 07revert-grow. However, following BUG_ON() can be triggerred by the test: kernel BUG at drivers/md/raid5.c:6278! invalid opcode: 0000 [#1] PREEMPT SMP PTI irq event stamp: 158985 CPU: 6 PID: 891 Comm: md0_reshape Not tainted 6.9.0-03335-g7592a0b0049a #94 RIP: 0010:reshape_request+0x3f1/0xe60 Call Trace: <TASK> raid5_sync_request+0x43d/0x550 md_do_sync+0xb7a/0x2110 md_thread+0x294/0x2b0 kthread+0x147/0x1c0 re

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-125.135~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  4. CVE-2024-43909

    Средний · CVSS 5.5EPSS 0,21%Есть исправление

    drm/amdgpu/pm: Fix the null pointer dereference for smu7

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference for smu7 optimize the code to avoid pass a null pointer (hwmgr->backend) to function smu7_update_edc_leakage_table.

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-125.135~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  5. CVE-2024-43908

    Средний · CVSS 5.5EPSS 0,22%Есть исправление

    drm/amdgpu: Fix the null pointer dereference to ras_manager

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the null pointer dereference to ras_manager Check ras_manager before using it

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-125.135~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  6. CVE-2024-43907

    Средний · CVSS 5.5EPSS 0,21%Есть исправление

    drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules Check the pointer value to fix potential null pointer dereference

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-125.135~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  7. CVE-2024-43905

    Средний · CVSS 5.5EPSS 0,21%Есть исправление

    drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr Check return value and conduct null pointer handling to avoid null pointer dereference.

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-125.135~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  8. CVE-2024-43904

    Средний · CVSS 5.7EPSS 0,24%Есть исправление

    drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing This commit adds null checks for the 'stream' and 'plane' variables in the dcn30_apply_idle_power_optimizations function. These variables were previously assumed to be null at line 922, but they were used later in the code without checking if they were null. This could potentially lead to a null pointer dereference, which would cause a crash. The null checks ensure that 'stream' and 'plane' are not null before they are used, preventing potential crashes. Fixes the below static smatch checker: d

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-128.138~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  9. CVE-2024-43902

    Средний · CVSS 5.5EPSS 0,21%Есть исправление

    drm/amd/display: Add null checker before passing variables

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checker before passing variables Checks null pointer before passing variables to functions. This fixes 3 NULL_RETURNS issues reported by Coverity.

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-125.135~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  10. CVE-2024-43900

    Высокий · CVSS 7.8EPSS 0,21%Есть исправление

    media: xc2028: avoid use-after-free in load_firmware_cb()

    In the Linux kernel, the following vulnerability has been resolved: media: xc2028: avoid use-after-free in load_firmware_cb() syzkaller reported use-after-free in load_firmware_cb() [1]. The reason is because the module allocated a struct tuner in tuner_probe(), and then the module initialization failed, the struct tuner was released. A worker which created during module initialization accesses this struct tuner later, it caused use-after-free. The process is as follows: task-6504 worker_thread tuner_probe <= alloc dvb_frontend [2] ... request_firmware_nowait <= create a worker ... tun

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-135.146~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  11. CVE-2024-43894

    Средний · CVSS 5.7EPSS 0,23%Есть исправление

    drm/client: fix null pointer dereference in drm_client_modeset_probe

    In the Linux kernel, the following vulnerability has been resolved: drm/client: fix null pointer dereference in drm_client_modeset_probe In drm_client_modeset_probe(), the return value of drm_mode_duplicate() is assigned to modeset->mode, which will lead to a possible NULL pointer dereference on failure of drm_mode_duplicate(). Add a check to avoid npd.

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-125.135~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  12. CVE-2024-43893

    Средний · CVSS 5.5EPSS 0,26%Есть исправление

    serial: core: check uartclk for zero to avoid divide by zero

    In the Linux kernel, the following vulnerability has been resolved: serial: core: check uartclk for zero to avoid divide by zero Calling ioctl TIOCSSERIAL with an invalid baud_base can result in uartclk being zero, which will result in a divide by zero error in uart_get_divisor(). The check for uartclk being zero in uart_set_info() needs to be done before other settings are made as subsequent calls to ioctl TIOCSSERIAL for the same port would be impacted if the uartclk check was done where uartclk gets set. Oops: divide error: 0000 PREEMPT SMP KASAN PTI RIP: 0010:uart_get_divisor (drivers/tty/serial/serial_core.c:580) Call Trace: <TASK>

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-125.135~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  13. CVE-2024-43892

    Высокий · CVSS 7.8EPSS 0,25%Есть исправление

    memcg: protect concurrent access to mem_cgroup_idr

    In the Linux kernel, the following vulnerability has been resolved: memcg: protect concurrent access to mem_cgroup_idr Commit 73f576c04b94 ("mm: memcontrol: fix cgroup creation failure after many small jobs") decoupled the memcg IDs from the CSS ID space to fix the cgroup creation failures. It introduced IDR to maintain the memcg ID space. The IDR depends on external synchronization mechanisms for modifications. For the mem_cgroup_idr, the idr_alloc() and idr_replace() happen within css callback and thus are protected through cgroup_mutex from concurrent modifications. However idr_remove() for mem_cgroup_idr was not protected against co

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-125.135~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  14. CVE-2024-43890

    Средний · CVSS 5.5EPSS 0,26%Есть исправление

    tracing: Fix overflow in get_free_elt()

    In the Linux kernel, the following vulnerability has been resolved: tracing: Fix overflow in get_free_elt() "tracing_map->next_elt" in get_free_elt() is at risk of overflowing. Once it overflows, new elements can still be inserted into the tracing_map even though the maximum number of elements (`max_elts`) has been reached. Continuing to insert elements after the overflow could result in the tracing_map containing "tracing_map->max_size" elements, leaving no empty entries. If any attempt is made to insert an element into a full tracing_map using `__tracing_map_insert()`, it will cause an infinite loop with preemption disabled, leading to a

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-125.135~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  15. CVE-2024-43889

    Средний · CVSS 5.5EPSS 0,24%Есть исправление

    padata: Fix possible divide-by-0 panic in padata_mt_helper()

    In the Linux kernel, the following vulnerability has been resolved: padata: Fix possible divide-by-0 panic in padata_mt_helper() We are hit with a not easily reproducible divide-by-0 panic in padata.c at bootup time. [ 10.017908] Oops: divide error: 0000 1 PREEMPT SMP NOPTI [ 10.017908] CPU: 26 PID: 2627 Comm: kworker/u1666:1 Not tainted 6.10.0-15.el10.x86_64 #1 [ 10.017908] Hardware name: Lenovo ThinkSystem SR950 [7X12CTO1WW]/[7X12CTO1WW], BIOS [PSE140J-2.30] 07/20/2021 [ 10.017908] Workqueue: events_unbound padata_mt_helper [ 10.017908] RIP: 0010:padata_mt_helper+0x39/0xb0 : [ 10.017963] Call Trace: [ 10.0

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-125.135~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  16. CVE-2024-43884

    Средний · CVSS 5.5EPSS 0,26%Есть исправление

    Bluetooth: MGMT: Add error handling to pair_device()

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Add error handling to pair_device() hci_conn_params_add() never checks for a NULL value and could lead to a NULL pointer dereference causing a crash. Fixed by adding error handling in the function.

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-125.135~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  17. CVE-2024-43883

    Критический · CVSS 9.8EPSS 0,65%Есть исправление

    usb: vhci-hcd: Do not drop references before new references are gained

    In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new references are gained At a few places the driver carries stale pointers to references that can still be used. Make sure that does not happen. This strictly speaking closes ZDI-CAN-22273, though there may be similar races in the driver.

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-125.135~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  18. CVE-2022-48877

    Средний · CVSS 5.5Есть исправление

    UBUNTU-CVE-2022-48877

    Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-70.77~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  19. CVE-2023-52913

    Высокий · CVSS 7.8EPSS 0,25%Есть исправление

    drm/i915: Fix potential context UAFs

    In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential context UAFs gem_context_register() makes the context visible to userspace, and which point a separate thread can trigger the I915_GEM_CONTEXT_DESTROY ioctl. So we need to ensure that nothing uses the ctx ptr after this. And we need to ensure that adding the ctx to the xarray is the *last* thing that gem_context_register() does with the ctx pointer. [tursulin: Stable and fixes tags add/tidy.] (cherry picked from commit bed4b455cf5374e68879be56971c1da563bcd90c)

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-133.143~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  20. CVE-2023-52910

    Высокий · CVSS 8.8EPSS 0,24%Есть исправление

    iommu/iova: Fix alloc iova overflows issue

    In the Linux kernel, the following vulnerability has been resolved: iommu/iova: Fix alloc iova overflows issue In __alloc_and_insert_iova_range, there is an issue that retry_pfn overflows. The value of iovad->anchor.pfn_hi is ~0UL, then when iovad->cached_node is iovad->anchor, curr_iova->pfn_hi + 1 will overflow. As a result, if the retry logic is executed, low_pfn is updated to 0, and then new_pfn < low_pfn returns false to make the allocation successful. This issue occurs in the following two situations: 1. The first iova size exceeds the domain size. When initializing iova domain, iovad->cached_node is assigned as iovad->anchor. For ex

    linux-lowlatency-hwe-5.15Операционные системы
    • Обновитесь до 5.15.0-70.77~20.04.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →