p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de linux-nvidia-tegra-5.15 · Página 122

Vulnerabilidades publicadas para linux-nvidia-tegra-5.15 en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 2668

  1. CVE-2023-52438

    Alta · CVSS 7.8EPSS 0,29%Corrección disponible

    binder: fix use-after-free in shinker's callback

    In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in shinker's callback The mmap read lock is used during the shrinker's callback, which means that using alloc->vma pointer isn't safe as it can race with munmap(). As of commit dd2283f2605e ("mm: mmap: zap pages with read mmap_sem in munmap") the mmap lock is downgraded after the vma has been isolated. I was able to reproduce this issue by manually adding some delays and triggering page reclaiming through the shrinker's debug sysfs. The following KASAN report confirms the UAF: ==================================================================

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1025.25~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  2. CVE-2023-52436

    Alta · CVSS 7.8EPSS 0,3%Corrección disponible

    f2fs: explicitly null-terminate the xattr list

    In the Linux kernel, the following vulnerability has been resolved: f2fs: explicitly null-terminate the xattr list When setting an xattr, explicitly null-terminate the xattr list. This eliminates the fragile assumption that the unused xattr space is always zeroed.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1025.25~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  3. CVE-2023-52435

    Media · CVSS 6.8EPSS 0,23%Corrección disponible

    net: prevent mss overflow in skb_segment()

    In the Linux kernel, the following vulnerability has been resolved: net: prevent mss overflow in skb_segment() Once again syzbot is able to crash the kernel in skb_segment() [1] GSO_BY_FRAGS is a forbidden value, but unfortunately the following computation in skb_segment() can reach it quite easily : mss = mss * partial_segs; 65535 = 3 * 5 * 17 * 257, so many initial values of mss can lead to a bad final result. Make sure to limit segmentation so that the new mss value is smaller than GSO_BY_FRAGS. [1] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1027.27~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  4. CVE-2023-52434

    Alta · CVSS 8.1EPSS 1,02%Corrección disponible

    smb: client: fix potential OOBs in smb2_parse_contexts()

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2_parse_contexts() Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts(). This fixes following oops when accessing invalid create contexts from server: BUG: unable to handle page fault for address: ffff8881178d8cc3 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 4a01067 P4D 4a01067 PUD 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID: 1736 Comm: mount.cifs Not tainted 6.7.0-rc4 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1027.27~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  5. CVE-2024-26581

    Alta · CVSS 7.8EPSS 2,22%Corrección disponible

    netfilter: nft_set_rbtree: skip end interval element from gc

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1025.25~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  7. CVE-2024-25741

    Media · CVSS 5.5EPSS 0,31%Corrección disponible

    CVE-2024-25741

    printer_write in drivers/usb/gadget/function/f_printer.c in the Linux kernel through 6.7.4 does not properly call usb_ep_queue, which might allow attackers to cause a denial of service or have unspecified other impact.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1030.30~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  10. CVE-2024-1151

    Media · CVSS 5.5EPSS 0,27%Corrección disponible

    Kernel: stack overflow problem in open vswitch kernel module leading to dos

    A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result, this can lead to a crash or other related issues.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1027.27~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  11. CVE-2023-6536

    Media · CVSS 6.5EPSS 1,55%Corrección disponible

    Kernel: null pointer dereference in __nvmet_req_complete

    A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1025.25~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  12. CVE-2023-6535

    Media · CVSS 6.5EPSS 1,55%Corrección disponible

    Kernel: null pointer dereference in nvmet_tcp_execute_request

    A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1025.25~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  13. CVE-2023-6356

    Media · CVSS 6.5EPSS 1,46%Corrección disponible

    Kernel: null pointer dereference in nvmet_tcp_build_iovec

    A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a denial of service.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1025.25~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  14. CVE-2024-24857

    Media · CVSS 4.6EPSS 0,32%Corrección disponible

    Race condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()

    A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1027.27~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  15. CVE-2024-24858

    Media · CVSS 4.6EPSS 0,33%Corrección disponible

    Race condition vulnerability in Linux kernel net/bluetooth in {conn,adv}_{min,max}_interval_set()

    A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to denial of service.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1027.27~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  16. CVE-2024-24859

    Media · CVSS 4.6EPSS 0,71%Corrección disponible

    Race condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()

    A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1027.27~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  17. CVE-2024-24860

    Media · CVSS 4.6EPSS 0,8%Corrección disponible

    Race condition vulnerability in Linux kernel bluetooth driver in {min,max}_key_size_set()

    A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1025.25~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  18. CVE-2024-24861

    Baja · CVSS 3.3EPSS 0,21%Corrección disponible

    Race condition vulnerability in Linux kernel media/xc4000 xc4000_get_frequency()

    A race condition was found in the Linux kernel's media/xc4000 device driver in xc4000 xc4000_get_frequency() function. This can result in return value overflow issue, possibly leading to malfunction or denial of service issue.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1027.27~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  19. CVE-2024-24855

    Media · CVSS 5EPSS 0,18%Corrección disponible

    Race condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan()

    A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1025.25~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  20. CVE-2024-23196

    Media · CVSS 5.3EPSS 0,17%Corrección disponible

    Race condition vulnerability in Linux kernel sound/hda snd_hdac_regmap_sync

    A race condition was found in the Linux kernel's sound/hda device driver in snd_hdac_regmap_sync() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

    linux-nvidia-tegra-5.15Sistemas operativos
    • Actualiza a 5.15.0-1020.20~20.04.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →