CVE-2024-53177
- EPSS 0.01%
- Veröffentlicht 27.12.2024 14:15:25
- Zuletzt bearbeitet 24.03.2025 17:26:30
In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to open_cached_dir error paths If open_cached_dir() encounters an error parsing the lease from the server, the error handling may race with receivin...
CVE-2024-53178
- EPSS 0.01%
- Veröffentlicht 27.12.2024 14:15:25
- Zuletzt bearbeitet 01.10.2025 20:17:16
In the Linux kernel, the following vulnerability has been resolved: smb: Don't leak cfid when reconnect races with open_cached_dir open_cached_dir() may either race with the tcon reconnection even before compound_send_recv() or directly trigger a r...
CVE-2024-53179
- EPSS 0.01%
- Veröffentlicht 27.12.2024 14:15:25
- Zuletzt bearbeitet 10.02.2025 18:15:27
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of signing key Customers have reported use-after-free in @ses->auth_key.response with SMB2.1 + sign mounts which occurs due to following race: task...
CVE-2024-53180
- EPSS 0.01%
- Veröffentlicht 27.12.2024 14:15:25
- Zuletzt bearbeitet 03.11.2025 21:17:38
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Add sanity NULL check for the default mmap fault handler A driver might allow the mmap access before initializing its runtime->dma_area properly. Add a proper NULL chec...
CVE-2024-53181
- EPSS 0.01%
- Veröffentlicht 27.12.2024 14:15:25
- Zuletzt bearbeitet 03.11.2025 21:17:38
In the Linux kernel, the following vulnerability has been resolved: um: vector: Do not use drvdata in release The drvdata is not available in release. Let's just use container_of() to get the vector_device instance. Otherwise, removing a vector dev...
CVE-2024-53183
- EPSS 0.01%
- Veröffentlicht 27.12.2024 14:15:25
- Zuletzt bearbeitet 03.11.2025 21:17:38
In the Linux kernel, the following vulnerability has been resolved: um: net: Do not use drvdata in release The drvdata is not available in release. Let's just use container_of() to get the uml_net instance. Otherwise, removing a network device will...
CVE-2024-53184
- EPSS 0.01%
- Veröffentlicht 27.12.2024 14:15:25
- Zuletzt bearbeitet 03.11.2025 21:17:39
In the Linux kernel, the following vulnerability has been resolved: um: ubd: Do not use drvdata in release The drvdata is not available in release. Let's just use container_of() to get the ubd instance. Otherwise, removing a ubd device will result ...
CVE-2024-53173
- EPSS 0.01%
- Veröffentlicht 27.12.2024 14:15:24
- Zuletzt bearbeitet 03.11.2025 21:17:36
In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open() Yang Erkun reports that when two threads are opening files at the same time, and are forced to abort before a reply...
CVE-2024-53174
- EPSS 0.01%
- Veröffentlicht 27.12.2024 14:15:24
- Zuletzt bearbeitet 03.11.2025 21:17:37
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: make sure cache entry active before cache_show The function `c_show` was called with protection from RCU. This only ensures that `cp` will not be freed. Therefore, the refe...
CVE-2024-53176
- EPSS 0.01%
- Veröffentlicht 27.12.2024 14:15:24
- Zuletzt bearbeitet 08.10.2025 14:39:14
In the Linux kernel, the following vulnerability has been resolved: smb: During unmount, ensure all cached dir instances drop their dentry The unmount process (cifs_kill_sb() calling close_all_cached_dirs()) can race with various cached directory o...