CVE-2024-57893 – ALSA OSS Linux Kernel Data Out-of-Bounds Access Vuln

The following table lists the changes that have been made to the CVE-2024-57893 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 15, 2025 Action […]

CVE-2024-57892 – Linux Kernel Ocfs2 Slab-Use-After-Free Vulnerability

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv When mounting ocfs2 and then remounting it as read-only, a slab-use-after-free occurs after the user uses a syscall to quota_getnextquota. Specifically, sb_dqinfo(sb, type)->dqi_priv is the dangling pointer. During the remounting process, the pointer dqi_priv is freed but […]

CVE-2024-57891 – Linux Kernel – Unpredictable IRQ Restoration Vulnerability in Sched Ext

The following table lists the changes that have been made to the CVE-2024-57891 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 15, 2025 Action […]

CVE-2024-57890 – Linux Kernel RDMA/uverbs Integer Overflow Vulnerability

The following table lists the changes that have been made to the CVE-2024-57890 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 15, 2025 Action […]

CVE-2024-57888 – “AMDGPU Workqueue Memory Reclaim False Positive Vulnerability”

In the Linux kernel, the following vulnerability has been resolved: workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker After commit 746ae46c1113 (“drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM”) amdgpu started seeing the following warning: [ ] workqueue: WQ_MEM_RECLAIM sdma0:drm_sched_run_job_work [gpu_sched] is flushing !WQ_MEM_RECLAIM events:amdgpu_device_delay_enable_gfx_off [amdgpu] … [ ] Workqueue: sdma0 drm_sched_run_job_work [gpu_sched] […]

CVE-2024-57889 – Linux Kernel PineA64 Pinctrl regmap(mutex)

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking If a device uses MCP23xxx IO expander to receive IRQs, the following bug can happen: BUG: sleeping function called from invalid context at kernel/locking/mutex.c:283 in_atomic(): 1, irqs_disabled(): 1, non_block: 0, … preempt_count: 1, expected: […]

CVE-2024-57887 – Linux Kernelony Use-After-Free Vulnerability in Adv7511 DRM

The following table lists the changes that have been made to the CVE-2024-57887 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 15, 2025 Action […]

CVE-2024-57883 – VMware vmkernel Bad Page State Vulnerability

CVE ID : CVE-2024-57883 Published : Jan. 15, 2025, 1:15 p.m. | 26 minutes ago Description : In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: independent PMD page table shared count The folio refcount may be increased unexpectly through try_get_folio() by caller such as split_huge_pages. In huge_pmd_unshare(), we use refcount to check […]

CVE-2024-57885 – Linux Kernel sleeping function called from invalid context when printing kmemleak debug information with SELinux and RT_PREEMPT.

In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: fix sleeping function called from invalid context at print message Address a bug in the kernel that triggers a “sleeping function called from invalid context” warning when /sys/kernel/debug/kmemleak is printed under specific conditions: – CONFIG_PREEMPT_RT=y – Set SELinux as the LSM for the system […]

CVE-2024-57884 – Linux Kernel DMA32 Zone Reclaiming Infinite Loop

In the Linux kernel, the following vulnerability has been resolved: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() The task sometimes continues looping in throttle_direct_reclaim() because allow_direct_reclaim(pgdat) keeps returning false. #0 [ffff80002cb6f8d0] __switch_to at ffff8000080095ac #1 [ffff80002cb6f900] __schedule at ffff800008abbd1c #2 [ffff80002cb6f990] schedule at ffff800008abc50c #3 [ffff80002cb6f9b0] throttle_direct_reclaim at ffff800008273550 #4 […]