huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2024-26707: kernel: net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
Component: kernel
Severity: Moderate
CVSS v3: 0 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N)
Public date: 2024-04-03T00:00:00+00:00

A vulnerability in the Linux kernel affects the High-availability Seamless Redundancy (HSR) protocol. The issue was identified when a warning (WARN_ONCE()) was triggered due to failed resource allocation for skb in the hsr_init_skb() function. The WARN_ONCE() was initially used to log this failure, but it was not deemed helpful in resolving it. Instead, the kernel maintainers switched to using netdev_warn_once() to better handle the failure and avoid excessive warning reports.

Statement: This vulnerability, though not Critical, can cause issues in network-related functions, particularly in HSR where frames need to be supervised and announced.

Affected upstream versions: 5.9
Fixed upstream versions: 0, 5.10.210, 5.15.149, 6.1.79, 6.6.18, 6.7.6, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 0d8011a878fdf96123bc0d6a12e2fe7ced5fddfb
CVE-2024-26708: kernel: mptcp: really cope with fastopen race
Component: kernel
Severity: Moderate
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

A vulnerability was found in the subflow_simultaneous_connect() function in the mptcp component in the Linux kernel, where not all possible subflow states are evaluated, leading to a potential race condition. This issue could lead to undefined network behavior.

Statement: This vulnerability is rated as moderate because a race condition could be triggered and this could result in undefined network behavior. However, this undefined behavior would most likely only cause issues for a specific TCP connection/subflow.

Affected upstream versions: 6.2
Fixed upstream versions: 0, 6.6.18, 6.7.6, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 4bfe217e075d04e63c092df9d40c608e598c2ef2
CVE-2024-26712: kernel: powerpc/kasan: Fix addr error caused by page alignment
Component: kernel
Severity: Low
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

powerpc/kasan: Fix addr error caused by page alignment

In kasan_init_region, when k_start is not page aligned, at the begin of
for loop, k_cur = k_start & PAGE_MASK is less than k_start, and then
`va = block + k_cur - k_start` is less than block, the addr va is invalid,
because the memory address space from va to block is not alloced by
memblock_alloc, which will not be reserved by memblock_reserve later, it
will be used by other places.

As a result, memory overwriting occurs.

for example:
int __init __weak kasan_init_region(void *start, size_t size)
{
[...]
	/* if say block(dcd97000) k_start(feef7400) k_end(feeff3fe) */
	block = memblock_alloc(k_end - k_start, PAGE_SIZE);
	[...]
	for (k_cur = k_start & PAGE_MASK; k_cur < k_end; k_cur += PAGE_SIZE) {
		/* at the begin of for loop
		 * block(dcd97000) va(dcd96c00) k_cur(feef7000) k_start(feef7400)
		 * va(dcd96c00) is less than block(dcd97000), va is invalid
		 */
		void *va = block + k_cur - k_start;
		[...]
	}
[...]
}

Therefore, page alignment is performed on k_start before
memblock_alloc() to ensure the validity of the VA address.


Affected upstream versions: 5.3.6 < 5.4, 5.4
Fixed upstream versions: 0, 5.10.210, 5.15.149, 5.4, 6.1.79, 6.6.18, 6.7.6, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 230e89b5ad0a33f530a2a976b3e5e4385cb27882
CVE-2024-26717: kernel: HID: i2c-hid-of: fix NULL-deref on failed power up
Component: kernel
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

HID: i2c-hid-of: fix NULL-deref on failed power up

A while back the I2C HID implementation was split in an ACPI and OF
part, but the new OF driver never initialises the client pointer which
is dereferenced on power-up failures.


Affected upstream versions: 5.12
Fixed upstream versions: 0, 5.15.149, 6.1.79, 6.6.18, 6.7.6, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 62f5d219edbd174829aa18d4b3d97cd5fefbb783
CVE-2024-26719: kernel: nouveau: offload fence uevents work to workqueue
Component: kernel
Severity: Low
CWE: CWE-833 (Deadlock)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

nouveau: offload fence uevents work to workqueue

This should break the deadlock between the fctx lock and the irq lock.

This offloads the processing off the work from the irq into a workqueue.


Affected upstream versions: 6.2
Fixed upstream versions: 0, 6.6.18, 6.7.6, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: cc0037fa592d56e4abb9c7d1c52c4d2dc25cd906
CVE-2024-26725: kernel: dpll: fix possible deadlock during netlink dump operation
Component: kernel
Severity: Moderate
CWE: CWE-833 (Deadlock)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

A vulnerability was found in the Linux kernel, where an ABBA deadlock condition may be created if multiple CPUs attempt a DPLL netlink dump operation simultaneously. This deadlock could lead to performance issues.


Affected upstream versions: 6.7
Fixed upstream versions: 0, 6.7.6, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 087739cbd0d0b87b6cec2c0799436ac66e24acc8
CVE-2024-26733: kernel: arp: Prevent overflow in arp_req_get().
Component: kernel
Severity: Moderate
CWE: CWE-122 (Heap-based Buffer Overflow)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

A vulnerability was found in the arp_req_get() function in the Linux kernel when handling the SIOCGARP ioctl (input/output control) request. This function copies data over into a fixed-length buffer which could result in a buffer overflow and cause memory corruption, undefined behavior, or crashes.


Affected upstream versions: 2.6.12
Fixed upstream versions: 0, 5.10.211, 5.15.150, 6.1.80, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: dbc9b22d0ed319b4e29034ce0a3fe32a3ee2c587
CVE-2024-26734: kernel: devlink: fix possible use-after-free and memory leaks in devlink_init()
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

A vulnerability was found in the devlink_init() function in the Linux kernel. Use-after-free and memory leak issues can occur due to an incorrect order of initialization and cleanup in case of errors. This issue could lead to memory corruption or crashes.

Statement: Red Hat Enterprise Linux 8 is not affected by this vulnerability.

Affected upstream versions: 6.3
Fixed upstream versions: 0, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 919092bd5482b7070ae66d1daef73b600738f3a2
CVE-2024-26735: kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

A use-after-free flaw was found in the Linux kernel’s IPv6 protocol functionality. This flaw allows a local user to potentially crash the system.


Affected upstream versions: 4.10
Fixed upstream versions: 0, 4.19.308, 5.10.211, 5.15.150, 5.4.270, 6.1.80, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 953f42934533c151f440cd32390044d2396b87aa
CVE-2024-26737: kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel
Component: kernel
Severity: Moderate
CWE: CWE-825 (Expired Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

A use-after-free flaw was found in the Linux kernel’s BPF functionality. This flaw allows a local user to crash the system.


Affected upstream versions: 5.15
Fixed upstream versions: 0, 5.15.150, 6.1.80, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 5268bb02107b9eedfdcd51db75b407d10043368c
CVE-2024-26739: kernel: net/sched: act_mirred: don't override retval if we already lost the skb
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

A use-after-free flaw was found in net/sched/act_mirred.c in the Linux kernel. This may result in a crash.


Affected upstream versions: 4.19
Fixed upstream versions: 0, 5.10.238, 5.15.182, 6.1.136, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 0117fe0a4615a7c8d30d6ebcbf87332fbe63e6fd
CVE-2024-26740: kernel: net/sched: act_mirred: use the backlog for mirred ingress
Component: kernel
Severity: Moderate
CWE: CWE-833 (Deadlock)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

A potential deadlock flaw was found in net/sched/act_mirred.c in the Linux kernel. This may lead to compromised Availability.


Affected upstream versions: 4.10
Fixed upstream versions: 0, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 7c787888d164689da8b1b115f3ef562c1e843af4
CVE-2024-26743: kernel: RDMA/qedr: Fix qedr_create_user_qp error flow
Component: kernel
Severity: Low
CWE: CWE-459 (Incomplete Cleanup)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

RDMA/qedr: Fix qedr_create_user_qp error flow

The Linux kernel CVE team has assigned CVE-2024-26743 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024040301-CVE-2024-26743-6034@gregkh/T


Affected upstream versions: 4.11
Fixed upstream versions: 0, 5.10.211, 5.15.150, 6.1.80, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 5639414a52a29336ffa1ede80a67c6d927acbc5a
CVE-2024-26744: kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

A flaw was foundin the Linux Kernel when specifying the srpt_service_guid parameter, which may lead to  kernel crash.


Affected upstream versions: 3.3
Fixed upstream versions: 0, 4.19.308, 5.10.211, 5.15.150, 5.4.293, 6.1.80, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 84f1dac960cfa210a3b7a7522e6c2320ae91932b
CVE-2024-26757: kernel: md: Don't ignore read-only array in md_check_recovery()
Component: kernel
Severity: Low
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

md: Don&#39;t ignore read-only array in md_check_recovery()

The Linux kernel CVE team has assigned CVE-2024-26757 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024040304-CVE-2024-26757-7f96@gregkh/T


Affected upstream versions: 4.8
Fixed upstream versions: 0, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 2ea169c5a0b1134d573d07fc27a16f327ad0e7d3
CVE-2024-26758: kernel: md: Don't ignore suspended array in md_check_recovery()
Component: kernel
Severity: Low
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

md: Don&#39;t ignore suspended array in md_check_recovery()

The Linux kernel CVE team has assigned CVE-2024-26758 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024040304-CVE-2024-26758-dcc3@gregkh/T


Affected upstream versions: 3.0
Fixed upstream versions: 0, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: a55f0d6179a19c6b982e2dc344d58c98647a3be0
CVE-2024-26759: kernel: mm/swap: fix race when skipping swapcache
Component: kernel
Severity: Low
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

mm/swap: fix race when skipping swapcache

The Linux kernel CVE team has assigned CVE-2024-26759 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024040304-CVE-2024-26759-45f1@gregkh/T


Affected upstream versions: 4.15
Fixed upstream versions: 0, 6.1.80, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 2dedda77d4493f3e92e414b272bfa60f1f51ed95
CVE-2024-26761: kernel: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window
Component: kernel
Severity: Low
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window

The Linux kernel CVE team has assigned CVE-2024-26761 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024040305-CVE-2024-26761-0646@gregkh/T


Affected upstream versions: 5.19
Fixed upstream versions: 0, 6.1.80, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 031217128990d7f0ab8c46db1afb3cf1e075fd29
CVE-2024-26766: kernel: IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
Component: kernel
Severity: Moderate
CWE: CWE-193 (Off-by-one Error)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

A vulnerability was found in the Linux kernel's infiniband hfi1 driver. This issue is caused by the incorrect handling of SDMA descriptors, which can lead to an array overflow and potential memory corruption or crashes.

Statement: None of the products shipped by Red Hat are affected by this vulnerability.

Affected upstream versions: 4.19.291 < 4.19.308, 5.4.251 < 5.4.270, 5.10.188 < 5.10.211, 5.15.99 < 5.15.150, 6.1.16 < 6.1.80, 6.2.3 < 6.3, 6.3
Fixed upstream versions: 0, 4.19.308, 5.10.211, 5.15.150, 5.4.270, 6.1.80, 6.3, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 115b7f3bc1dce590a6851a2dcf23dc1100c49790
CVE-2024-26767: kernel: drm/amd/display: fixed integer types and null check locations
Component: kernel
Severity: Low
CWE: CWE-170 (Improper Null Termination)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: fixed integer types and null check locations

[why]:
issues fixed:
- comparison with wider integer type in loop condition which can cause
infinite loops
- pointer dereference before null check


Affected upstream versions: 6.1
Fixed upstream versions: 0, 6.1.130, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 070fda699dfdce560755379bc428d9edada7a54e
CVE-2024-26769: kernel: nvmet-fc: avoid deadlock on delete association path
Component: kernel
Severity: Low
CWE: CWE-833 (Deadlock)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

nvmet-fc: avoid deadlock on delete association path

When deleting an association the shutdown path is deadlocking because we
try to flush the nvmet_wq nested. Avoid this by deadlock by deferring
the put work into its own work item.


Affected upstream versions: 4.8
Fixed upstream versions: 0, 5.15.150, 6.1.80, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 5e0bc09a52b6169ce90f7ac6e195791adb16cec4
CVE-2024-26772: kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
Component: kernel
Severity: Moderate
CWE: CWE-229 (Improper Handling of Values)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

A vulnerability was found in the ext4_mb_find_by_goal() function in the Linux kernel. This issue could lead to memory corruption or crashes due to the allocation of blocks from a group with a corrupted block bitmap.


Affected upstream versions: 3.12
Fixed upstream versions: 0, 4.19.308, 5.10.211, 5.15.150, 5.4.270, 6.1.80, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 5a6dcc4ad0f7f7fa8e8d127b5526e7c5f2d38a43
CVE-2024-26773: kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
Component: kernel
Severity: Moderate
CWE: CWE-229 (Improper Handling of Values)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

A vulnerability was found in the ext4_mb_try_best_found() function in the Linux kernel. This issue could lead to memory corruption or crashes due to the allocation of blocks from a group with a corrupted block bitmap.


Affected upstream versions: 3.12
Fixed upstream versions: 0, 4.19.308, 5.10.211, 5.15.150, 5.4.270, 6.1.80, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 21f8cfe79f776287459343e9cfa6055af61328ea
CVE-2024-26774: kernel: ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt
Component: kernel
Severity: Low
CWE: CWE-369 (Divide By Zero)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt

The Linux kernel CVE team has assigned CVE-2024-26774 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024040308-CVE-2024-26774-52d9@gregkh/T


Affected upstream versions: 5.19.12 < 5.20, 6.0
Fixed upstream versions: 0, 5.20, 6.1.80, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 8b40eb2e716b503f7a4e1090815a17b1341b2150
CVE-2024-26779: kernel: wifi: mac80211: fix race condition on enabling fast-xmit
Component: kernel
Severity: Moderate
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-03T00:00:00+00:00

A vulnerability was found in the mac80211 driver in the Linux kernel. This issue could lead to potential crashes or memory corruption due to of a situation where the driver attempts to utilize data structures that haven't been fully initialized yet.


Affected upstream versions: 4.2
Fixed upstream versions: 0, 4.19.308, 5.10.211, 5.15.150, 5.4.270, 6.1.80, 6.6.19, 6.7.7, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 76fad1174a0cae6fc857b9f88b261a2e4f07d587
CVE-2024-26783: kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index
Component: kernel
Severity: Moderate
CWE: CWE-762 (Mismatched Memory Management Routines)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-04T00:00:00+00:00

A vulnerability was found in the Linux kernel's memory management subsystem. The `wakeup_kswapd()` function was called with an incorrect zone index. This error could disrupt the proper functioning of memory management, potentially leading to system instability or performance issues.


Affected upstream versions: 5.18
Fixed upstream versions: 0, 6.1.140, 6.6.22, 6.7.9, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: e5ec1c24e71dbf144677a975d6ba91043c2193db
CVE-2024-26785: kernel: iommufd: Fix protection fault in iommufd_test_syz_conv_iova
Component: kernel
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-04T00:00:00+00:00

A protection fault vulnerability was found in the iommufd subsystem of the Linux kernel. This flaw could lead to unexpected behavior or system instability.

Statement: Red Hat Enterprise Linux 6, 7 & 8 is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux kernel used in its distributions.

Affected upstream versions: 6.6
Fixed upstream versions: 0, 6.6.55, 6.7.9, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: fd4d5cd7a2e8f08357c9bfc0905957cffe8ce568
CVE-2024-26786: kernel: iommufd: Fix iopt_access_list_id overwrite bug
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-04T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

iommufd: Fix iopt_access_list_id overwrite bug

The Linux kernel CVE team has assigned CVE-2024-26786 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024040459-CVE-2024-26786-802f@gregkh/T


Affected upstream versions: 6.6
Fixed upstream versions: 0, 6.6.21, 6.7.9, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: f1fb745ee0a6fe43f1d84ec369c7e6af2310fda9
CVE-2024-26801: kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-04-04T00:00:00+00:00

A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in how it handles hardware failure when it occurs. This flaw allows a local user to potentially crash the system.


Affected upstream versions: 4.0
Fixed upstream versions: 0, 4.19.309, 5.10.212, 5.15.151, 5.4.271, 6.1.81, 6.6.21, 6.7.9, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: e0b278650f07acf2e0932149183458468a731c03