CVE-2024-26824
- EPSS 0.02%
- Veröffentlicht 17.04.2024 10:15:09
- Zuletzt bearbeitet 27.03.2025 20:56:14
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - Remove bogus SGL free on zero-length error path When a zero-length message is hashed by algif_hash, and an error is triggered, it tries to free an SG list that...
CVE-2024-26825
- EPSS 0.01%
- Veröffentlicht 17.04.2024 10:15:09
- Zuletzt bearbeitet 27.03.2025 20:56:39
In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free rx_data_reassembly skb on NCI device cleanup rx_data_reassembly skb is stored during NCI data exchange for processing fragmented packets. It is dropped only when the...
CVE-2024-26826
- EPSS 0.07%
- Veröffentlicht 17.04.2024 10:15:09
- Zuletzt bearbeitet 27.03.2025 20:57:04
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data re-injection from stale subflow When the MPTCP PM detects that a subflow is stale, all the packet scheduler must re-inject all the mptcp-level unacked data. To avoi...
CVE-2024-26828
- EPSS 0.02%
- Veröffentlicht 17.04.2024 10:15:09
- Zuletzt bearbeitet 08.04.2025 19:16:26
In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. H...
CVE-2024-26830
- EPSS 0.01%
- Veröffentlicht 17.04.2024 10:15:09
- Zuletzt bearbeitet 02.04.2025 13:19:07
In the Linux kernel, the following vulnerability has been resolved: i40e: Do not allow untrusted VF to remove administratively set MAC Currently when PF administratively sets VF's MAC address and the VF is put down (VF tries to delete all MACs) the...
CVE-2024-26831
- EPSS 0.01%
- Veröffentlicht 17.04.2024 10:15:09
- Zuletzt bearbeitet 02.04.2025 13:19:02
In the Linux kernel, the following vulnerability has been resolved: net/handshake: Fix handshake_req_destroy_test1 Recently, handshake_req_destroy_test1 started failing: Expected handshake_req_destroy_test == req, but handshake_req_destroy_tes...
CVE-2024-26832
- EPSS 0.02%
- Veröffentlicht 17.04.2024 10:15:09
- Zuletzt bearbeitet 02.04.2025 13:18:56
In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix missing folio cleanup in writeback race path In zswap_writeback_entry(), after we get a folio from __read_swap_cache_async(), we grab the tree lock again to check th...
CVE-2024-26834
- EPSS 0.03%
- Veröffentlicht 17.04.2024 10:15:09
- Zuletzt bearbeitet 02.04.2025 13:18:50
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: release dst in case direct xmit path is used Direct xmit does not use it since it calls dev_queue_xmit() to send packets, hence it calls dst_release()....
CVE-2024-26835
- EPSS 0.01%
- Veröffentlicht 17.04.2024 10:15:09
- Zuletzt bearbeitet 02.04.2025 13:18:41
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: set dormant flag on hook register failure We need to set the dormant flag again if we fail to register the hooks. During memory pressure hook registration ca...
CVE-2024-26836
- EPSS 0.01%
- Veröffentlicht 17.04.2024 10:15:09
- Zuletzt bearbeitet 25.11.2025 17:29:27
In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix password opcode ordering for workstations The Lenovo workstations require the password opcode to be run before the attribute value is changed (if Admin...