CLSA-2024-1722533082
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2024-1722533082.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2024-1722533082
- Upstream
- Published
- 2024-08-01T17:34:23Z
- Modified
- 2026-05-27T11:36:10.294244773Z
- Summary
- kernel: Fix of 47 CVEs
- Details
-
- af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
- netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668}
- libbpf: Fix use-after-free in btfdumpname_dups {CVE-2022-3534}
- bpf: Fix partial dynptr stack slot reads/writes {CVE-2023-39191}
- ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
- ima: define imamaxdigest_data struct without a flexible array variable
- ima: detect changes to the backing overlay file
- tpm: fix reference counting for struct tpm_chip {CVE-2022-2977}
- tty: ngsm: fix the UAF caused by race condition in gsmcleanup_mux {CVE-2023-6546}
- tty: n_gsm: fix restart handling via CLD command
- r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586}
- netfilter: tproxy: bail out if IP has been disabled on the device {CVE-2024-36270}
- tcp: Use refcountincnotzero() in tcptwsk_unique(). {CVE-2024-36904}
- Bluetooth: Fix double free in hciconncleanup {CVE-2023-28464}
- fs,hugetlb: fix NULL pointer dereference in hugetlbsfillsuper {CVE-2024-0841}
- net/ipv6: avoid possible UAF in ip6routempath_notify() {CVE-2024-26852}
- tipc: fix UAF in error path {CVE-2024-36886}
- Bluetooth: af_bluetooth: Fix deadlock {CVE-2024-26886}
- Bluetooth: afbluetooth: Fix Use-After-Free in btsock_recvmsg {CVE-2023-51779}
- dma-mapping: benchmark: handle NUMANONODE correctly {CVE-2024-39277}
- net/mlx5e: Prevent deadlock while disabling aRFS {CVE-2024-27014}
- net/mlx5e: Introduce flow steering API {CVE-2024-27014}
- x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
- x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25742}
- x86: Introduce ia32_enabled() {CVE-2024-25742}
- x86/entry: Do not allow external 0x80 interrupts {CVE-2024-25742}
- x86/entry: Convert INT 0x80 emulation to IDTENTRY {CVE-2024-25742}
- RDMA/srpt: Support specifying the srptserviceguid parameter {CVE-2024-26744}
- platform/x86: think-lmi: Fix reference leak {CVE-2023-52520}
- USB: usb-storage: Prevent divide-by-0 error in isd200atacommand {CVE-2024-27059}
- fat: fix uninitialized field in nostale filehandles {CVE-2024-26973}
- usb: xhci: Add error handling in xhcimapurbfordma {CVE-2024-26964}
- wifi: ath9k: delay all of ath9kwmievent_tasklet() until init is complete {CVE-2024-26897}
- wifi: mac80211: fix race condition on enabling fast-xmit {CVE-2024-26779}
- RDMA/qedr: Fix qedrcreateuser_qp error flow {CVE-2024-26743}
- wifi: iwlwifi: fix a memory corruption {CVE-2024-26610}
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer {CVE-2024-26603}
- wifi: rt2x00: restart beacon queue when hardware reset {CVE-2023-52595}
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9khtctxstatus() {CVE-2023-52594}
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xxreadreg {CVE-2023-52528}
- RDMA/siw: Fix connection failure handling {CVE-2023-52513}
- usb: hub: Guard against accesses to uninitialized BOS descriptors {CVE-2023-52477}
- tty: ttybuffer: Fix the softlockup issue in flushto_ldisc {CVE-2021-47185}
- sctp: fail if no bound addresses can be used for a given scope {CVE-2023-1074}
- memcg: enable accounting for file lock caches {CVE-2022-0480}
- net/tls: do not free tlsrec on async operation in bpfexectxverdict() {CVE-2023-6176}
- RDMA/srpt: Do not register event handler until srpt device is fully setup {CVE-2024-26872}
- drm/amd/display: Atom Integrated System Info v2_2 for DCN35 {CVE-2024-36897}
- net/mlx5e: fix a potential double-free in fsanycreate_groups {CVE-2023-52667}
- ipv6: fib6rules: avoid possible NULL dereference in fib6rule_action() {CVE-2024-36902}
- ipv6: prevent NULL dereference in ip6_output() {CVE-2024-36901}
- vt: fix memory overlapping when deleting chars in the buffer {CVE-2022-48627}
- hwmon: (coretemp) Fix out-of-bounds memory access {CVE-2024-26664}
- i2c: Fix a potential use after free {CVE-2019-25162}
- net/smc: fix illegal rmb_desc access in SMC-D connection dump {CVE-2024-26615}
- References