CLSA-2024-1722977984
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2024-1722977984.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2024-1722977984
- Upstream
- Published
- 2024-08-06T20:59:47Z
- Modified
- 2026-05-27T11:35:52.819591184Z
- Summary
- kernel: Fix of 16 CVEs
- Details
-
- ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
- ima: define imamaxdigest_data struct without a flexible array variable
- ima: detect changes to the backing overlay file
- tcp: Use refcountincnotzero() in tcptwsk_unique(). {CVE-2024-36904}
- af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
- net/ipv6: avoid possible UAF in ip6routempath_notify() {CVE-2024-26852}
- net/mlx5: Fix a race on command flush flow {CVE-2022-48858}
- sctp: fix kernel-infoleak for SCTP sockets {CVE-2022-48855}
- bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. {CVE-2022-0500}
- bpf: Make percpuptr return rdonly PTRTOMEM. {CVE-2022-0500}
- bpf: Introduce MEM_RDONLY flag {CVE-2022-0500}
- bpf: Replace PTRTOXXXORNULL with PTRTOXXX | PTRMAYBENULL {CVE-2022-0500}
- bpf: Replace RETXXXORNULL with RETXXX | PTRMAYBENULL {CVE-2022-0500}
- bpf: Replace ARGXXXORNULL with ARGXXX | PTRMAYBENULL {CVE-2022-0500}
- bpf: Introduce composable reg, ret and arg types. {CVE-2022-0500}
- bpf: Extract nullable reg type conversion into a helper function {CVE-2022-0500}
- bpf: Rename bpfregstate variables {CVE-2022-0500}
- libbpf: Fix use-after-free in btfdumpname_dups {CVE-2022-3534}
- net: fix __dstnegativeadvice() race {CVE-2024-36971}
- ext4: fix kernel BUG in 'ext4writeinlinedataend()' {CVE-2021-33631}
- tipc: fix UAF in error path {CVE-2024-36886}
- smb: client: fix parsing of SMB3.1.1 POSIX create context {CVE-2023-52434}
- smb: client: fix potential OOBs in smb2parsecontexts() {CVE-2023-52434}
- perf: Disallow mis-matched inherited group reads {CVE-2023-5717}
- afunix: Fix null-ptr-deref in unixstream_sendpage(). {CVE-2023-4622}
- sched/rt: picknextrtentity(): check listentry {CVE-2023-1077}
- i2c: Fix a potential use after free {CVE-2019-25162}
- References