p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de linux-raspi · Página 112

Vulnerabilidades publicadas para linux-raspi en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 3427

  1. CVE-2021-47333

    Media · CVSS 5.5EPSS 0,24%Corrección disponible

    misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge

    In the Linux kernel, the following vulnerability has been resolved: misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge There is an issue with the ASPM(optional) capability checking function. A device might be attached to root complex directly, in this case, bus->self(bridge) will be NULL, thus priv->parent_pdev is NULL. Since alcor_pci_init_check_aspm(priv->parent_pdev) checks the PCI link's ASPM capability and populate parent_cap_off, which will be used later by alcor_pci_aspm_ctrl() to dynamically turn on/off device, what we can do here is to avoid checking the capability if we are on the root complex. This will make pdev_cap

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  2. CVE-2021-47332

    Media · CVSS 5.7EPSS 0,24%Corrección disponible

    ALSA: usx2y: Don't call free_pages_exact() with NULL address

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: Don't call free_pages_exact() with NULL address Unlike some other functions, we can't pass NULL pointer to free_pages_exact(). Add a proper NULL check for avoiding possible Oops.

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  3. CVE-2021-47330

    Media · CVSS 5.5EPSS 0,24%Corrección disponible

    tty: serial: 8250: serial_cs: Fix a memory leak in error handling path

    In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: serial_cs: Fix a memory leak in error handling path In the probe function, if the final 'serial_config()' fails, 'info' is leaking. Add a resource handling path to free this memory.

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  4. CVE-2021-47329

    Media · CVSS 6.2EPSS 0,26%Corrección disponible

    scsi: megaraid_sas: Fix resource leak in case of probe failure

    In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Fix resource leak in case of probe failure The driver doesn't clean up all the allocated resources properly when scsi_add_host(), megasas_start_aen() function fails during the PCI device probe. Clean up all those resources.

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  5. CVE-2021-47328

    Crítica · CVSS 9.8EPSS 0,77%Corrección disponible

    scsi: iscsi: Fix conn use after free during resets

    In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: Fix conn use after free during resets If we haven't done a unbind target call we can race where iscsi_conn_teardown wakes up the EH thread and then frees the conn while those threads are still accessing the conn ehwait. We can only do one TMF per session so this just moves the TMF fields from the conn to the session. We can then rely on the iscsi_session_teardown->iscsi_remove_session->__iscsi_unbind_session call to remove the target and it's devices, and know after that point there is no device or scsi-ml callout trying to access the session.

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  6. CVE-2021-47327

    Alta · CVSS 7.1EPSS 0,26%Corrección disponible

    iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails

    In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails arm_smmu_rpm_get() invokes pm_runtime_get_sync(), which increases the refcount of the "smmu" even though the return value is less than 0. The reference counting issue happens in some error handling paths of arm_smmu_rpm_get() in its caller functions. When arm_smmu_rpm_get() fails, the caller functions forget to decrease the refcount of "smmu" increased by arm_smmu_rpm_get(), causing a refcount leak. Fix this issue by calling pm_runtime_resume_and_get() instead of pm_runtime_get_sync() in arm_smm

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  7. CVE-2021-47325

    Media · CVSS 5.5EPSS 0,25%Corrección disponible

    iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation

    In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation The reference counting issue happens in several exception handling paths of arm_smmu_iova_to_phys_hard(). When those error scenarios occur, the function forgets to decrease the refcount of "smmu" increased by arm_smmu_rpm_get(), causing a refcount leak. Fix this issue by jumping to "out" label when those error scenarios occur.

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  8. CVE-2021-47324

    Alta · CVSS 8.8EPSS 1,16%Corrección disponible

    watchdog: Fix possible use-after-free in wdt_startup()

    In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix possible use-after-free in wdt_startup() This module's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free. Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  9. CVE-2021-47323

    Alta · CVSS 8.8EPSS 1,16%Corrección disponible

    watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()

    In the Linux kernel, the following vulnerability has been resolved: watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() This module's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free. Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  10. CVE-2021-47321

    Alta · CVSS 7.8EPSS 0,25%Corrección disponible

    watchdog: Fix possible use-after-free by calling del_timer_sync()

    In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix possible use-after-free by calling del_timer_sync() This driver's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free. Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  11. CVE-2021-47320

    Media · CVSS 5.5EPSS 0,26%Corrección disponible

    nfs: fix acl memory leak of posix_acl_create()

    In the Linux kernel, the following vulnerability has been resolved: nfs: fix acl memory leak of posix_acl_create() When looking into another nfs xfstests report, I found acl and default_acl in nfs3_proc_create() and nfs3_proc_mknod() error paths are possibly leaked. Fix them in advance.

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  12. CVE-2021-47319

    Media · CVSS 5.5EPSS 0,26%Corrección disponible

    virtio-blk: Fix memory leak among suspend/resume procedure

    In the Linux kernel, the following vulnerability has been resolved: virtio-blk: Fix memory leak among suspend/resume procedure The vblk->vqs should be freed before we call init_vqs() in virtblk_restore().

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  13. CVE-2021-47315

    Media · CVSS 5.5EPSS 0,25%Corrección disponible

    memory: fsl_ifc: fix leak of IO mapping on probe failure

    In the Linux kernel, the following vulnerability has been resolved: memory: fsl_ifc: fix leak of IO mapping on probe failure On probe error the driver should unmap the IO memory. Smatch reports: drivers/memory/fsl_ifc.c:298 fsl_ifc_ctrl_probe() warn: 'fsl_ifc_ctrl_dev->gregs' not released on lines: 298.

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  14. CVE-2021-47314

    Media · CVSS 5.5EPSS 0,24%Corrección disponible

    memory: fsl_ifc: fix leak of private memory on probe failure

    In the Linux kernel, the following vulnerability has been resolved: memory: fsl_ifc: fix leak of private memory on probe failure On probe error the driver should free the memory allocated for private structure. Fix this by using resource-managed allocation.

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  15. CVE-2021-47311

    Alta · CVSS 7.8EPSS 0,25%Corrección disponible

    net: qcom/emac: fix UAF in emac_remove

    In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emac_remove adpt is netdev private data and it cannot be used after free_netdev() call. Using adpt after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  16. CVE-2021-47310

    Alta · CVSS 7.8EPSS 0,25%Corrección disponible

    net: ti: fix UAF in tlan_remove_one

    In the Linux kernel, the following vulnerability has been resolved: net: ti: fix UAF in tlan_remove_one priv is netdev private data and it cannot be used after free_netdev() call. Using priv after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  17. CVE-2021-47309

    Alta · CVSS 7.8EPSS 0,25%Corrección disponible

    net: validate lwtstate->data before returning from skb_tunnel_info()

    In the Linux kernel, the following vulnerability has been resolved: net: validate lwtstate->data before returning from skb_tunnel_info() skb_tunnel_info() returns pointer of lwtstate->data as ip_tunnel_info type without validation. lwtstate->data can have various types such as mpls_iptunnel_encap, etc and these are not compatible. So skb_tunnel_info() should validate before returning that pointer. Splat looks like: BUG: KASAN: slab-out-of-bounds in vxlan_get_route+0x418/0x4b0 [vxlan] Read of size 2 at addr ffff888106ec2698 by task ping/811 CPU: 1 PID: 811 Comm: ping Not tainted 5.13.0+ #1195 Call Trace: dump_stack_lvl+0x56/0x7b print_ad

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  19. CVE-2021-47307

    Alta · CVSS 7.5EPSS 0,69%Corrección disponible

    cifs: prevent NULL deref in cifs_compose_mount_options()

    In the Linux kernel, the following vulnerability has been resolved: cifs: prevent NULL deref in cifs_compose_mount_options() The optional @ref parameter might contain an NULL node_name, so prevent dereferencing it in cifs_compose_mount_options(). Addresses-Coverity: 1476408 ("Explicit null dereferenced")

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  20. CVE-2021-47306

    Alta · CVSS 7.8EPSS 0,23%Corrección disponible

    net: fddi: fix UAF in fza_probe

    In the Linux kernel, the following vulnerability has been resolved: net: fddi: fix UAF in fza_probe fp is netdev private data and it cannot be used after free_netdev() call. Using fp after free_netdev() can cause UAF bug. Fix it by moving free_netdev() after error message. TURBOchannel adapter")

    linux-raspiSistemas operativos
    • Actualiza a 5.4.0-1044.48
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →