huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2024-26962: kernel: dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape

For raid456, if reshape is still in progress, then IO across reshape
position will wait for reshape to make progress. However, for dm-raid,
in following cases reshape will never make progress hence IO will hang:

1) the array is read-only;
2) MD_RECOVERY_WAIT is set;
3) MD_RECOVERY_FROZEN is set;

After commit c467e97f079f ("md/raid6: use valid sector values to determine
if an I/O should wait on the reshape") fix the problem that IO across
reshape position doesn't wait for reshape, the dm-raid test
shell/lvconvert-raid-reshape.sh start to hang:

[root@fedora ~]# cat /proc/979/stack
[<0>] wait_woken+0x7d/0x90
[<0>] raid5_make_request+0x929/0x1d70 [raid456]
[<0>] md_handle_request+0xc2/0x3b0 [md_mod]
[<0>] raid_map+0x2c/0x50 [dm_raid]
[<0>] __map_bio+0x251/0x380 [dm_mod]
[<0>] dm_submit_bio+0x1f0/0x760 [dm_mod]
[<0>] __submit_bio+0xc2/0x1c0
[<0>] submit_bio_noacct_nocheck+0x17f/0x450
[<0>] submit_bio_noacct+0x2bc/0x780
[<0>] submit_bio+0x70/0xc0
[<0>] mpage_readahead+0x169/0x1f0
[<0>] blkdev_readahead+0x18/0x30
[<0>] read_pages+0x7c/0x3b0
[<0>] page_cache_ra_unbounded+0x1ab/0x280
[<0>] force_page_cache_ra+0x9e/0x130
[<0>] page_cache_sync_ra+0x3b/0x110
[<0>] filemap_get_pages+0x143/0xa30
[<0>] filemap_read+0xdc/0x4b0
[<0>] blkdev_read_iter+0x75/0x200
[<0>] vfs_read+0x272/0x460
[<0>] ksys_read+0x7a/0x170
[<0>] __x64_sys_read+0x1c/0x30
[<0>] do_syscall_64+0xc6/0x230
[<0>] entry_SYSCALL_64_after_hwframe+0x6c/0x74

This is because reshape can't make progress.

For md/raid, the problem doesn't exist because register new sync_thread
doesn't rely on the IO to be done any more:

1) If array is read-only, it can switch to read-write by ioctl/sysfs;
2) md/raid never set MD_RECOVERY_WAIT;
3) If MD_RECOVERY_FROZEN is set, mddev_suspend() doesn't hold
   'reconfig_mutex', hence it can be cleared and reshape can continue by
   sysfs api 'sync_action'.

However, I'm not sure yet how to avoid the problem in dm-raid yet. This
patch on the one hand make sure raid_message() can't change
sync_thread() through raid_message() after presuspend(), on the other
hand detect the above 3 cases before wait for IO do be done in
dm_suspend(), and let dm-raid requeue those IO.


Affected upstream versions: 6.1.68 < 6.2, 6.6.7 < 6.7, 6.7
Fixed upstream versions: 0, 6.2, 6.7, 6.7.12, 6.8.3, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 5943a34bf6bab5801e08a55f63e1b8d5bc90dae1
CVE-2024-26964: kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

usb: xhci: Add error handling in xhci_map_urb_for_dma

The Linux kernel CVE team has assigned CVE-2024-26964 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050130-CVE-2024-26964-54c8@gregkh/T


Affected upstream versions: 5.11
Fixed upstream versions: 0, 5.15.154, 6.1.84, 6.6.24, 6.7.12, 6.8.3, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 4a49d24fdec0a802aa686a567a3989a9fdf4e5dd
CVE-2024-26973: kernel: fat: fix uninitialized field in nostale filehandles
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

fat: fix uninitialized field in nostale filehandles

The Linux kernel CVE team has assigned CVE-2024-26973 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050132-CVE-2024-26973-54a3@gregkh/T


Affected upstream versions: 3.10
Fixed upstream versions: 0, 4.19.312, 5.10.215, 5.15.154, 5.4.274, 6.1.84, 6.6.24, 6.7.12, 6.8.3, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 9840d1897e28f8733cc1e38f97e044f987dc0a63
CVE-2024-26974: kernel: crypto: qat - resolve race condition during AER recovery
Component: kernel
Severity: Moderate
CVSS v3: 5.8 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H)
Public date: 2024-05-01T00:00:00+00:00

A race condition was found in drivers/crypto/intel/qat/qat_common/adf_aer.c in the Linux kernel during AER recovery.


Affected upstream versions: 3.17
Fixed upstream versions: 0, 4.19.312, 5.10.215, 5.15.154, 5.4.274, 6.1.84, 6.6.24, 6.7.12, 6.8.3, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: daba62d9eeddcc5b1081be7d348ca836c83c59d7
CVE-2024-26975: kernel: powercap: intel_rapl: Fix a NULL pointer dereference
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

powercap: intel_rapl: Fix a NULL pointer dereference

The Linux kernel CVE team has assigned CVE-2024-26975 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050133-CVE-2024-26975-d184@gregkh/T


Affected upstream versions: 6.5
Fixed upstream versions: 0, 6.6.24, 6.7.12, 6.8.3, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 0641908b906a133f1494c312a71f9fecbe2b6c78
CVE-2024-26982: kernel: Squashfs: check the inode number is not the invalid value of zero
Component: kernel
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

A flaw was found in the squashfs module in the Linux kernel. A missing check of an inode number with an invalid value of zero can cause an out-of-bounds read and result in a denial of service.

Statement: This vulnerability allows a local attacker to trigger an out-of-bounds read and cause a denial of service, impacting only the availability of the system. For this reason, it was rated with a Moderate severity.

Affected upstream versions: 2.6.29
Fixed upstream versions: 0, 5.10.235, 5.15.179, 5.4.291, 6.1.130, 6.6.30, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 32c114a58236fe67141634774559f21f1dc96fd7
CVE-2024-26984: kernel: nouveau: fix instmem race condition around ptr stores
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

A flaw was found in the nouveau module in the Linux kernel. In some conditions, a race condition can cause a NULL pointer dereference, resulting in a denial of service.


Affected upstream versions: 4.15
Fixed upstream versions: 0, 4.19.313, 5.10.216, 5.15.157, 5.4.275, 6.1.88, 6.6.29, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: bba8ec5e9b16649d85bc9e9086bf7ae5b5716ff9
CVE-2024-26987: kernel: mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled

The Linux kernel CVE team has assigned CVE-2024-26987 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050143-CVE-2024-26987-507c@gregkh/T


Affected upstream versions: 5.18
Fixed upstream versions: 0, 6.1.88, 6.6.29, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 5ef7ba2799a3b5ed292b8f6407376e2c25ef002e
CVE-2024-26988: kernel: init/main.c: Fix potential static_command_line memory overflow
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

A static_command_line memory overflow was found in the Linux kernel. This issue may cause a crash.

Statement: Red Hat has protection mechanisms in place against buffer overflows, such as FORTIFY_SOURCE, Position Independent Executables, or Stack Smashing Protection.

Affected upstream versions: 5.1
Fixed upstream versions: 0, 5.10.216, 5.15.157, 6.1.88, 6.6.29, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 2ef607ea103616aec0289f1b65d103d499fa903a
CVE-2024-26989: kernel: arm64: hibernate: Fix level3 translation fault in swsusp_save()
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

arm64: hibernate: Fix level3 translation fault in swsusp_save()

The Linux kernel CVE team has assigned CVE-2024-26989 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050143-CVE-2024-26989-851d@gregkh/T


Affected upstream versions: 5.14
Fixed upstream versions: 0, 5.15.157, 6.1.88, 6.6.29, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 813f5213f2c612dc800054859aaa396ec8ad7069
CVE-2024-26990: kernel: KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status

The Linux kernel CVE team has assigned CVE-2024-26990 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050143-CVE-2024-26990-0a1f@gregkh/T


Affected upstream versions: 6.4
Fixed upstream versions: 0, 6.6.29, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: cdf811a937471af2d1facdf8ae80e5e68096f1ed
CVE-2024-26991: kernel: KVM: x86/mmu: x86: Don&#39;t overflow lpage_info when checking attributes
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

A flaw was found in the Linux Kernel. A lpage_info overflow can occur when checking attributes. This may lead to a crash.

Statement: Red Hat Enterprise Linux 8 is not affected.

Affected upstream versions: 6.8
Fixed upstream versions: 0, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 048cc4a028e635d339687ed968985d2d1669494c
CVE-2024-26992: kernel: KVM: x86/pmu: Disable support for adaptive PEBS
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86/pmu: Disable support for adaptive PEBS

The Linux kernel CVE team has assigned CVE-2024-26992 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050144-CVE-2024-26992-4f0e@gregkh/T


Affected upstream versions: 6.0
Fixed upstream versions: 0, 6.1.88, 6.6.29, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 0fb74c00d140a66128afc0003785dcc57e69d312
CVE-2024-26993: kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection()
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

fs: sysfs: Fix reference leak in sysfs_break_active_protection()

The Linux kernel CVE team has assigned CVE-2024-26993 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050144-CVE-2024-26993-fe52@gregkh/T


Affected upstream versions: 3.16.62 < 3.17, 3.18.121 < 3.19, 4.4.154 < 4.5, 4.9.125 < 4.10, 4.14.68 < 4.15, 4.18.6 < 4.19, 4.19
Fixed upstream versions: 0, 3.17, 3.19, 4.10, 4.15, 4.19, 4.19.313, 4.5, 5.10.216, 5.15.157, 5.4.275, 6.1.88, 6.6.29, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: f28bba37fe244889b81bb5c508d3f6e5c6e342c5
CVE-2024-27003: kernel: clk: Get runtime PM before walking tree for clk_summary
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

clk: Get runtime PM before walking tree for clk_summary

The Linux kernel CVE team has assigned CVE-2024-27003 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050146-CVE-2024-27003-c862@gregkh/T


Affected upstream versions: 5.17
Fixed upstream versions: 0, 6.1.88, 6.6.29, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 83ada89e4a86e2b28ea2b5113c76d6dc7560a4d0
CVE-2024-27008: kernel: drm: nv04: Fix out of bounds access
Component: kernel
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2024-05-01T00:00:00+00:00

A flaw was found in the Linux kernel’s nouveau module. An out-of-bounds access issue can be triggered when the Output Resource is zero, resulting in a denial of service.


Affected upstream versions: 2.6.38
Fixed upstream versions: 0, 4.19.313, 5.10.216, 5.15.157, 5.4.275, 6.1.88, 6.6.29, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: c2b97f26f081ceec3298151481687071075a25cb
CVE-2024-27010: kernel: net/sched: Fix mirred deadlock on device recursion
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Fix mirred deadlock on device recursion

The Linux kernel CVE team has assigned CVE-2024-27010 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050148-CVE-2024-27010-5a68@gregkh/T


Affected upstream versions: 4.2
Fixed upstream versions: 0, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: e6b90468da4dae2281a6e381107f411efb48b0ef
CVE-2024-27011: kernel: netfilter: nf_tables: fix memleak in map from abort path
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: fix memleak in map from abort path

The Linux kernel CVE team has assigned CVE-2024-27011 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050148-CVE-2024-27011-2c70@gregkh/T


Affected upstream versions: 4.12
Fixed upstream versions: 0, 6.6.55, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: a1bd2a38a1c6388fc8556816dc203c3e9dc52237
CVE-2024-27012: kernel: netfilter: nf_tables: restore set elements when delete set fails
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: restore set elements when delete set fails

The Linux kernel CVE team has assigned CVE-2024-27012 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050148-CVE-2024-27012-5564@gregkh/T


Affected upstream versions: 5.15.121 < 5.15.212, 6.1.36 < 6.1.176, 4.19.316 < 4.20, 5.4.262 < 5.5, 5.10.188 < 5.11, 6.3.10 < 6.4, 6.4
Fixed upstream versions: 0, 4.20, 5.11, 5.15.212, 5.5, 6.1.176, 6.4, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 2cf64b16ac55c42c8989d8c819e42a77549cd680
CVE-2024-27013: kernel: tun: limit printing rate when illegal packet received by tun dev
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

tun: limit printing rate when illegal packet received by tun dev

The Linux kernel CVE team has assigned CVE-2024-27013 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050149-CVE-2024-27013-2c26@gregkh/T


Affected upstream versions: 2.6.35
Fixed upstream versions: 0, 4.19.313, 5.10.216, 5.15.157, 5.4.275, 6.1.88, 6.6.29, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 68459b8e3ee554ce71878af9eb69659b9462c588
CVE-2024-27014: kernel: net/mlx5e: Prevent deadlock while disabling aRFS
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

A flaw was found in the Linus Kernel. A potential deadlock can occur while disabling aRFS in drivers/net/ethernet/mellanox/mlx5/core/en_arfs.c.


Affected upstream versions: 4.7
Fixed upstream versions: 0, 6.1.88, 6.6.29, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 46efa4d5930cf3c2af8c01f75e0a47e4fc045e3b
CVE-2024-27015: kernel: netfilter: flowtable: incorrect pppoe tuple
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: incorrect pppoe tuple

pppoe traffic reaching ingress path does not match the flowtable entry
because the pppoe header is expected to be at the network header offset.
This bug causes a mismatch in the flow table lookup, so pppoe packets
enter the classical forwarding path.


Affected upstream versions: 5.13
Fixed upstream versions: 0, 5.15.157, 6.1.88, 6.6.29, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: e719b52d0c56989b0f3475a03a6d64f182c85b56
CVE-2024-27016: kernel: netfilter: flowtable: validate pppoe header
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: validate pppoe header

Ensure there is sufficient room to access the protocol field of the
PPPoe header. Validate it once before the flowtable lookup, then use a
helper function to access protocol field.


Affected upstream versions: 5.13
Fixed upstream versions: 0, 5.15.157, 6.1.88, 6.6.29, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: d06977b9a4109f8738bb276125eb6a0b772bc433
CVE-2024-27017: kernel: netfilter: nft_set_pipapo: walk over current view on netlink dump
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_pipapo: walk over current view on netlink dump

The Linux kernel CVE team has assigned CVE-2024-27017 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050150-CVE-2024-27017-d867@gregkh/T


Affected upstream versions: 5.10.186 < 5.10.227, 5.15.119 < 5.15.168, 6.1.36 < 6.1.112, 6.3.10 < 6.4, 6.4
Fixed upstream versions: 0, 5.10.227, 5.15.168, 6.1.112, 6.4, 6.6.53, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: ff89db14c63a827066446460e39226c0688ef786
CVE-2024-27019: kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

A potential data-race flaw was found in __nft_obj_type_get() in the Linux kernel. This issue can lead to a crash.


Affected upstream versions: 4.10
Fixed upstream versions: 0, 5.10.219, 5.15.157, 6.1.88, 6.6.29, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: cade34279c2249eafe528564bd2e203e4ff15f88
CVE-2024-27020: kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
Component: kernel
Severity: Moderate
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

A flaw was found in the Linux kernel. A potential data-race in the __nft_expr_type_get() function exists.


Affected upstream versions: 3.13
Fixed upstream versions: 0, 4.19.313, 5.10.216, 5.15.157, 5.4.275, 6.1.88, 6.6.29, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 939109c0a8e2a006a6cc8209e262d25065f4403a
CVE-2024-27022: kernel: fork: defer linking file vma until vma is fully initialized
Component: kernel
Severity: Moderate
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
CVSS v3: 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

A flaw was found in the Linux kernel. A race condition can occur when the fork system call is called due to improper locking, triggering a warning, impacting system stability, and resulting in a denial of service.

Statement: This issue can result in a denial of service with no other security impact. Additionally, this issue requires a race condition, which increases the complexity of exploitation. For these reasons, this vulnerability has been rated with a moderate severity.

The Linux kernel as shipped in Red Hat Enterprise Linux 8 is not affected by this vulnerability because the vulnerable code was introduced in a newer version of the Linux kernel.

Affected upstream versions: 6.1
Fixed upstream versions: 0, 6.6.134, 6.8.8, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 2e5cbab8ccbfc7d4a3d8a21d3c2a1f2c1aa29b5b
CVE-2024-27023: kernel: md: Fix missing release of &#39;active_io&#39; for flush
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

md: Fix missing release of &#39;active_io&#39; for flush

The Linux kernel CVE team has assigned CVE-2024-27023 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050105-CVE-2024-27023-4810@gregkh/T


Affected upstream versions: 6.1.75 < 6.1.80, 6.6.14 < 6.6.19, 6.7.2 < 6.7.7
Fixed upstream versions: 6.1.80, 6.6.19, 6.7.7
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 6b2ff10390b19a2364af622b6666b690443f9f3f
CVE-2024-27025: kernel: nbd: null check for nla_nest_start
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-05-01T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

nbd: null check for nla_nest_start

The Linux kernel CVE team has assigned CVE-2024-27025 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050107-CVE-2024-27025-babd@gregkh/T


Affected upstream versions: 4.12
Fixed upstream versions: 0, 5.10.214, 5.15.153, 5.4.273, 6.1.83, 6.6.23, 6.7.11, 6.8.2, 6.9
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 44214d744be32a4769faebba764510888f1eb19e