CVE-2024-57877 – Linux Kernel arm64: ptrace: POR_EL0 Information Leak

In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NT_ARM_POE Currently poe_set() doesn’t initialize the temporary ‘ctrl’ variable, and a SETREGSET call with a length of zero will leave this uninitialized. Consequently an arbitrary value will be written back to target->thread.por_el0, potentially leaking up to 64 bits of […]

CVE-2024-57872 – “ufs UFS Dellocate HBA Memory Leak Vulnerability in SCSI Linux Kernel”

The following table lists the changes that have been made to the CVE-2024-57872 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action […]

CVE-2024-57839 – NFS Linux Kernel Readahead Hang Vulnerability

The following table lists the changes that have been made to the CVE-2024-57839 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action […]

CVE-2024-57876 – Linux Kernel DRM DP MST Information Disclosure Vulnerability

In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Fix resetting msg rx state after topology removal If the MST topology is removed during the reception of an MST down reply or MST up request sideband message, the drm_dp_mst_topology_mgr::up_req_recv/down_rep_recv states could be reset from one thread via drm_dp_mst_topology_mgr_set_mst(false), racing with the reading/parsing of […]

CVE-2024-57875 – Linux kernel Drupal Uninitialized Pointer

The following table lists the changes that have been made to the CVE-2024-57875 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action […]

CVE-2024-57874 – Linux Kernel Arm64 CPU Address Control Information Leak Vulnerability

In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL Currently tagged_addr_ctrl_set() doesn’t initialize the temporary ‘ctrl’ variable, and a SETREGSET call with a length of zero will leave this uninitialized. Consequently tagged_addr_ctrl_set() will consume an arbitrary value, potentially leaking up to 64 bits of memory from the […]

CVE-2024-57850 – Linux JFFS2 Memory Corruption (Bounds Error) Vulnerability

The following table lists the changes that have been made to the CVE-2024-57850 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action […]

CVE-2024-57849 – “IBM s390 cpu hotplug sample buffer use after free vulnerability”

The following table lists the changes that have been made to the CVE-2024-57849 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 11, 2025 Action […]

CVE-2024-57843 – “VMware virtio-net Buffer Overflow Vulnerability”

CVE ID : CVE-2024-57843 Published : Jan. 11, 2025, 3:15 p.m. | 36 minutes ago Description : In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix overflow inside virtnet_rq_alloc When the frag just got a page, then may lead to regression on VM. Specially if the sysctl net.core.high_order_alloc_disable value is 1, then the […]

CVE-2024-57838 – IBM zSeries s390 Linux Kernel Stack Depot Stack Overflow Vulnerability

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Mark IRQ entries to fix stack depot warnings The stack depot filters out everything outside of the top interrupt context as an uninteresting or irrelevant part of the stack traces. This helps with stack trace de-duplication, avoiding an explosion of saved stack traces that […]