CLSA-2024-1731933167
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2024-1731933167.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2024-1731933167
- Upstream
- Published
- 2024-11-18T18:33:38Z
- Modified
- 2026-05-27T11:34:59.343047518Z
- Summary
- kernel: Fix of 36 CVEs
- Details
-
- smb: client: fix use-after-free in smb2queryinfo_compound() {CVE-2023-52751}
- smb: client: prevent new fids from being removed by laundromat {CVE-2023-52751}
- cifs: fix dentry lookups in directory handle cache {CVE-2023-52751}
- uprobe: avoid out-of-bounds memory access of fetching args {CVE-2024-50067}
- net: do not delay dstentriesadd() in dst_release() {CVE-2024-50036}
- smb: client: fix UAF in async decryption {CVE-2024-50047}
- smb3: rename encryption/decryption TFMs
- mm: call the securitymmapfile() LSM hook in remapfilepages() {CVE-2024-47745}
- ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701}
- tty: ngsm: Fix use-after-free in gsmcleanup_mux {CVE-2024-50073}
- driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055}
- drm/amdkfd: amdkfdfreegtt_mem clear the correct pointer {CVE-2024-49991}
- drm/amd/display: fix double free issue during amdgpu module unload {CVE-2024-49989}
- ext4: fix timer use-after-free on failed mount {CVE-2024-49960}
- Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950}
- Bluetooth: l2cap: Don't double set the HCICONNMGMT_CONNECTED bit {CVE-2024-49950}
- mptcp: pm: Fix uaf in __timerdeletesync {CVE-2024-46858}
- of: fdt: fix off-by-one error in unflattendtnodes() {CVE-2022-48672}
- filelock: fix potential use-after-free in posixlockinode {CVE-2024-41049}
- locks: fix KASAN: use-after-free in traceeventraweventfilelock_lock {CVE-2024-41049}
- drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092}
- ext4: no need to continue when the number of entries is 1 {CVE-2024-49967}
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation {CVE-2024-49895}
- slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033}
- drm/amd/display: Fix index out of bounds in DCN30 color transformation {CVE-2024-49969}
- drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894}
- ext4: aovid use-after-free in ext4extinsert_extent() {CVE-2024-49883}
- ACPI: sysfs: validate return type of _STR method {CVE-2024-49860}
- ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882}
- tipc: guard against string buffer overrun {CVE-2024-49995}
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698}
- firmware_loader: Block path traversal {CVE-2024-47742}
- ppp: fix pppasyncencode() illegal access {CVE-2024-50035}
- netfilter: nfrejectipv6: fix nfrejectip6tcphdrput() {CVE-2024-47685}
- ext4: fix slab-use-after-free in ext4splitextent_at() {CVE-2024-49884}
- drm/amd/display: Correct the defined value for AMDGPUDMUBNOTIFICATION_MAX {CVE-2024-46871}
- ext4: avoid use-after-free in ext4extshow_leaf() {CVE-2024-49889}
- wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930}
- net: do not leave a dangling sk pointer, when socket creation fails {CVE-2024-40954}
- net: sched: schmultiq: fix possible OOB write in multiqtune() {CVE-2024-36978}
- drm/amdgpu: Validate TA binary size {CVE-2024-44977}
- References