CLSA-2024-1711026398
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2024-1711026398.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2024-1711026398
- Upstream
- Published
- 2024-03-21T13:09:26Z
- Modified
- 2026-05-27T11:34:24.351121246Z
- Summary
- kernel: Fix of 7 CVEs
- Details
-
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197}
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier {CVE-2023-52449}
- media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445}
- net: prevent mss overflow in skb_segment() {CVE-2023-52435}
- RDMA/core: Update CMA destination address on rdmaresolveaddr {CVE-2023-2176}
- tty: ngsm: fix the UAF caused by race condition in gsmcleanup_mux {CVE-2023-6546}
- tty: n_gsm: fix restart handling via CLD command {CVE-2023-6546}
- tty: ngsm: fix deadlock in gsmttyopen() {CVE-2023-6546}
- nvmet-tcp: Fix the H2C expected PDU len calculation {CVE-2023-6536}
- nvmet-tcp: remove boilerplate code {CVE-2023-6536}
- nvmet-tcp: add bounds check on Transfer Tag {CVE-2023-6536}
- nvmet-tcp: fix a crash in nvmetreqcomplete() {CVE-2023-6536}
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length {CVE-2023-6536}
- References