huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2024-35801: kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD

The Linux kernel CVE team has assigned CVE-2024-35801 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024051738-CVE-2024-35801-8038@gregkh/T


Affected upstream versions: 5.16
Fixed upstream versions: 0, 6.1.84, 6.6.24, 6.7.12, 6.8.3, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 21c7c00dae55cb0e3810d5f9506b58f68475d41d
CVE-2024-35805: kernel: dm snapshot: fix lockup in dm_exception_table_exit
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

dm snapshot: fix lockup in dm_exception_table_exit

The Linux kernel CVE team has assigned CVE-2024-35805 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024051739-CVE-2024-35805-179f@gregkh/T


Affected upstream versions: 2.6.12
Fixed upstream versions: 0, 5.10.215, 5.15.154, 5.4.274, 6.1.84, 6.6.24, 6.7.12, 6.8.3, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: e7d4cff57c3c43fdd72342c78d4138f509c7416e
CVE-2024-35807: kernel: ext4: fix corruption during on-line resize
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

A vulnerability was found in the ext4 filesystem in the Linux kernel during on-line resizing operations. When an ext4 filesystem is resized while mounted, it could lead to data corruption.


Affected upstream versions: 3.7
Fixed upstream versions: 0, 4.19.312, 5.10.215, 5.15.154, 5.4.274, 6.1.84, 6.6.24, 6.7.12, 6.8.3, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 75cc31c2e7193b69f5d25650bda5bb42ed92f8a1
CVE-2024-35808: kernel: md/dm-raid: don&#39;t call md_reap_sync_thread() directly
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

A flaw was found in the `md/dm-raid` subsystem in the Linux kernel. If `md_reap_sync_thread()` is called directly, it could lead to potential misuse or system instability.


Affected upstream versions: 3.10
Fixed upstream versions: 0, 6.7.12, 6.8.3, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 347dcdc15a1706f61aa545ae498ededdf31aeebc
CVE-2024-35809: kernel: PCI/PM: Drain runtime-idle callbacks before driver removal
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

A vulnerability was found in the PCI subsystem in the Linux kernel, where runtime-idle callbacks are not always drained before a PCI driver is removed. If these callbacks are still active when the driver is removed, it could result in system instability or crashes.


Affected upstream versions: 2.6.36
Fixed upstream versions: 0, 4.19.312, 5.10.215, 5.15.154, 5.4.274, 6.1.84, 6.6.24, 6.7.12, 6.8.3, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 9a87375bb586515c0af63d5dcdcd58ec4acf20a6
CVE-2024-35810: kernel: drm/vmwgfx: Fix the lifetime of the bo cursor memory
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

A vulnerability was found in the drm/vmwgfx driver in the Linux kernel, concerning the lifetime management of the buffer object (BO) cursor memory. This issue occurs due to improper handling of the cursor memory's lifecycle, which could lead to use-after-free errors or crashes.


Affected upstream versions: 6.2
Fixed upstream versions: 0, 6.6.24, 6.7.12, 6.8.3, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 86cb706a40b7e6b2221ee49a298a65ad9b46c02d
CVE-2024-35814: kernel: swiotlb: Fix double-allocation of slots due to broken alignment handling
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

swiotlb: Fix double-allocation of slots due to broken alignment handling

The Linux kernel CVE team has assigned CVE-2024-35814 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024051742-CVE-2024-35814-98c7@gregkh/T


Affected upstream versions: 6.3
Fixed upstream versions: 0, 6.6.24, 6.7.12, 6.8.3, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 3e7acd6e25ba77dde48c3b721c54c89cd6a10534
CVE-2024-35817: kernel: drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag

The Linux kernel CVE team has assigned CVE-2024-35817 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024051743-CVE-2024-35817-d29b@gregkh/T


Affected upstream versions: 5.10
Fixed upstream versions: 0, 5.15.154, 6.1.84, 6.6.24, 6.7.12, 6.8.3, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 5d5f1a7f3b1039925f79c7894f153c2a905201fb
CVE-2024-35822: kernel: usb: udc: remove warning when queue disabled ep
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

usb: udc: remove warning when queue disabled ep

The Linux kernel CVE team has assigned CVE-2024-35822 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024051744-CVE-2024-35822-410b@gregkh/T


Affected upstream versions: 4.5
Fixed upstream versions: 0, 4.19.312, 5.10.215, 5.15.154, 5.4.274, 6.1.84, 6.6.24, 6.7.12, 6.8.3, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 2b002c308e184feeaeb72987bca3f1b11e5f70b8
CVE-2024-35823: kernel: vt: fix unicode buffer corruption when deleting characters
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

A vulnerability as found in the Linux kernel’s virtual terminal (VT) subsystem, which could lead to unicode buffer corruption when deleting characters. This issue arises from improper handling of unicode data, which can corrupt memory or lead to unintended behavior.


Affected upstream versions: 3.7
Fixed upstream versions: 0, 4.19.312, 5.10.215, 5.15.154, 5.4.274, 6.1.84, 6.6.24, 6.7.12, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: fc7dfe3d123f00e720be80b920da287810a1f37d
CVE-2024-35824: kernel: misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

A vulnerability was found in the `lis3lv02d_i2c` driver in the Linux kernel. This issue involves regulators being enabled and disabled twice during the suspend and resume process, which could lead to unintended behavior or system instability.


Affected upstream versions: 6.1.77 < 6.1.84, 6.6.16 < 6.6.24, 6.7.4 < 6.7.12
Fixed upstream versions: 6.1.84, 6.6.24, 6.7.12
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 4154e767354140db7804207117e7238fb337b0e7
CVE-2024-35827: kernel: io_uring/net: fix overflow check in io_recvmsg_mshot_prep()
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

io_uring/net: fix overflow check in io_recvmsg_mshot_prep()

The Linux kernel CVE team has assigned CVE-2024-35827 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35827-822c@gregkh/T


Affected upstream versions: 6.0
Fixed upstream versions: 0, 6.1.83, 6.6.23, 6.7.11, 6.8.2, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 868ec868616438df487b9e2baa5a99f8662cc47c
CVE-2024-35831: kernel: io_uring: Fix release of pinned pages when __io_uaddr_map fails
Component: kernel
Severity: Moderate
CWE: CWE-402 (Transmission of Private Resources into a New Sphere ('Resource Leak'))
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

A flaw was found in the `io_uring` subsystem in the Linux kernel, where pinned pages are not properly released if the `__io_uaddr_map` function fails. This could lead to resource leaks or other unintended behaviors.

Statement: Red Hat Enterprise Linux 6,7 & 8 is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux kernel used in its distributions.

Affected upstream versions: 6.5.7 < 6.6, 6.6
Fixed upstream versions: 0, 6.6, 6.6.23, 6.7.11, 6.8.2, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 0b6f39c175ba5f0ef72bdb3b9d2a06ad78621d62
CVE-2024-35835: kernel: net/mlx5e: fix a double-free in arfs_create_groups
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

A double-free vulnerability was found in the `arfs_create_groups` function in the Linux kernel's `net/mlx5e` driver. This issue could lead to memory corruption or a system crash if exploited, as freeing the same memory twice may cause undefined behavior.


Affected upstream versions: 4.7
Fixed upstream versions: 0, 4.19.307, 5.10.210, 5.15.149, 5.4.269, 6.1.76, 6.6.15, 6.7.3, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: e3d3ed8c152971dbe64c92c9ecb98fdb52abb629
CVE-2024-35838: kernel: wifi: mac80211: fix potential sta-link leak
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: fix potential sta-link leak

When a station is allocated, links are added but not
set to valid yet (e.g. during connection to an AP MLD),
we might remove the station without ever marking links
valid, and leak them. Fix that.


Affected upstream versions: 6.0
Fixed upstream versions: 0, 6.1.76, 6.6.15, 6.7.3, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 49aaeb8c539b1633b3bd7c2df131ec578aa1eae1
CVE-2024-35839: kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

CVE-2024-35839 is a flaw in the Linux kernel's Netfilter bridge functionality. It occurs when bridging certain packets, such as those involving destination NAT between virtual Ethernet interfaces. A mismatch between the network device associated with a packet and the neighbor's device can lead to incorrect handling, including references to freed memory. This issue could cause system crashes. The problem has been fixed by using safer methods to retrieve the network device during packet processing. Users should update their kernels to a patched version to avoid this vulnerability.


Affected upstream versions: 4.2
Fixed upstream versions: 0, 6.1.75, 6.6.14, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 7ae19ee81ca56b13c50a78de6c47d5b8fdc9d97b
CVE-2024-35840: kernel: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

CVE-2024-35840 is a vulnerability in the Linux kernel’s Multipath TCP (MPTCP) implementation. It occurs because the subflow_finish_connect() function may handle uninitialized data in certain fields if a specific MPTCP option (OPTION_MPTCP_MPJ_SYNACK) is not correctly set during option parsing. This could lead to unpredictable behavior in MPTCP connections. The issue has been resolved by ensuring proper initialization and handling of these fields.


Affected upstream versions: 5.7
Fixed upstream versions: 0, 5.15.148, 6.1.75, 6.6.14, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 413b913507326972135d2977975dbff8b7f2c453
CVE-2024-35843: kernel: iommu/vt-d: Use device rbtree in iopf reporting path
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Use device rbtree in iopf reporting path

The Linux kernel CVE team has assigned CVE-2024-35843 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024051717-CVE-2024-35843-516e@gregkh/T


Affected upstream versions: 6.1
Fixed upstream versions: 0, 6.8.2, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 3d39238991e745c5df85785604f037f35d9d1b15
CVE-2024-35845: kernel: wifi: iwlwifi: dbg-tlv: ensure NUL termination
Component: kernel
Severity: Moderate
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: dbg-tlv: ensure NUL termination

The Linux kernel CVE team has assigned CVE-2024-35845 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024051718-CVE-2024-35845-65bd@gregkh/T

Statement: The security impact is limited, because bug could happen only when privileged local user enabled debug mode for the iwlwifi driver.

Affected upstream versions: 5.5
Fixed upstream versions: 0, 5.10.214, 5.15.153, 6.1.83, 6.6.23, 6.7.11, 6.8.2, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: fabe2db7de32a881e437ee69db32e0de785a6209
CVE-2024-35847: kernel: irqchip/gic-v3-its: Prevent double free on error
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

irqchip/gic-v3-its: Prevent double free on error

The Linux kernel CVE team has assigned CVE-2024-35847 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024051738-CVE-2024-35847-7e4b@gregkh/T


Affected upstream versions: 4.14
Fixed upstream versions: 0, 4.19.313, 5.10.216, 5.15.158, 5.4.275, 6.1.90, 6.6.30, 6.8.9, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: f5417ff561b8ac9a7e53c747b8627a7ab58378ae
CVE-2024-35848: kernel: eeprom: at24: fix memory corruption race condition
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

CVE-2024-35848 is a vulnerability in the Linux kernel's EEPROM driver (at24) that can lead to memory corruption. The issue arises when an EEPROM device is inaccessible: the system registers an nvmem device, the read operation fails, and the device is subsequently torn down. If another driver attempts to access the nvmem device after this teardown, it may reference invalid memory, causing potential system instability. The problem has been resolved by adjusting the failure handling to occur before the nvmem device is registered, preventing access to invalid memory. Users should update their Linux kernel to a version that includes this fix to ensure system reliability.


Affected upstream versions: 5.3
Fixed upstream versions: 0, 5.10.217, 5.15.159, 6.1.91, 6.6.31, 6.8.9, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: c850f71fca09ea41800ed55905980063d17e01da
CVE-2024-35852: kernel: mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

CVE-2024-35852 addresses a memory leak in the Linux kernel's mlxsw driver, specifically within the Spectrum ACL TCAM module. The issue occurs when rehash work is canceled while pending, leading to allocated hints not being freed properly. This results in a memory leak that can degrade system performance over time. The problem has been resolved by ensuring that any associated hints are freed when the rehash work is canceled. Users should update their Linux kernel to a version that includes this fix to maintain optimal system performance.


Affected upstream versions: 5.1
Fixed upstream versions: 0, 5.10.216, 5.15.158, 5.4.275, 6.1.90, 6.6.30, 6.8.9, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 51cefc9da400b953fee749c9e5d26cd4a2b5d758
CVE-2024-35853: kernel: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

mlxsw: spectrum_acl_tcam: Fix memory leak during rehash

The Linux kernel CVE team has assigned CVE-2024-35853 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024051740-CVE-2024-35853-869a@gregkh/T


Affected upstream versions: 5.1
Fixed upstream versions: 0, 5.10.216, 5.15.158, 5.4.275, 6.1.90, 6.6.30, 6.8.9, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: c6f3fa7f5a748bf6e5c4eb742686d6952f854e76
CVE-2024-35854: kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash

The Linux kernel CVE team has assigned CVE-2024-35854 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024051740-CVE-2024-35854-d17b@gregkh/T


Affected upstream versions: 5.1
Fixed upstream versions: 0, 5.10.216, 5.15.158, 5.4.275, 6.1.90, 6.6.30, 6.8.9, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: e118e7ea24d1392878ef85926627c6bc640c4388
CVE-2024-35855: kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update

The Linux kernel CVE team has assigned CVE-2024-35855 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024051741-CVE-2024-35855-c1fb@gregkh/T


Affected upstream versions: 5.1
Fixed upstream versions: 0, 5.10.216, 5.15.158, 5.4.275, 6.1.90, 6.6.30, 6.8.9, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 1b73f6e4ea770410a937a8db98f77e52594d23a0
CVE-2024-35857: kernel: icmp: prevent possible NULL dereferences from icmp_build_probe()
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Public date: 2024-05-17T00:00:00+00:00

A flaw was found in the Linux kernel's ICMP protocol. Under some conditions, a NULL pointer dereference can be triggered due to a missing check, causing a system crash and resulting in a denial of service.

Statement: The Linux kernel as shipped in Red Hat Enterprise Linux 8 is not affected by this vulnerability because the vulnerable code was introduced in a newer version of the Linux kernel.

Affected upstream versions: 5.13
Fixed upstream versions: 0, 5.15.158, 6.1.90, 6.6.30, 6.8.9, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 23b7ee4a8d559bf38eac7ce5bb2f6ebf76f9c401
CVE-2024-35859: kernel: block: fix module reference leakage from bdev_open_by_dev error path
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-17T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

block: fix module reference leakage from bdev_open_by_dev error path

The Linux kernel CVE team has assigned CVE-2024-35859 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024051742-CVE-2024-35859-23c9@gregkh/T


Affected upstream versions: 6.8
Fixed upstream versions: 0, 6.8.9, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 0e9327c67410b129bf85e5c3a5aaea518328636f
CVE-2024-35861: kernel: smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-19T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()

Skip sessions that are being teared down (status == SES_EXITING) to
avoid UAF.


Affected upstream versions: 5.17.2 < 5.18, 5.18
Fixed upstream versions: 0, 5.18, 6.1.85, 6.6.26, 6.8.5, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 7e8360ac8774e19b0b25f44fff84a105bb2417e4
CVE-2024-35862: kernel: smb: client: fix potential UAF in smb2_is_network_name_deleted()
Component: kernel
Severity: Low
CWE: CWE-416 (Use After Free)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-19T00:00:00+00:00

A use-after-free flaw was found in the Linux kernel in smb smb2_is_network_name_deleted() when exiting a session. This flaw allows a local attacker to crash the system.


Affected upstream versions: 5.12
Fixed upstream versions: 0, 6.1.85, 6.6.26, 6.8.5, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: f9414004798d9742c1af23a1d839fe6a9503751c
CVE-2024-35863: kernel: smb: client: fix potential UAF in is_valid_oplock_break()
Component: kernel
Severity: Low
CWE: CWE-416 (Use After Free)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-19T00:00:00+00:00

A use-after-free flaw was found in the Linux kernel in smb is_valid_oplock_break() when exiting a session. This flaw allows a local attacker to crash the system.


Affected upstream versions: 3.12.48 < 3.13, 3.13
Fixed upstream versions: 0, 3.13, 6.1.85, 6.6.26, 6.8.5, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 494c91e1e9413b407d12166a61b84200d4d54fac