Debian Linux vulnerabilities

CVE-2024-38617 [MEDIUM] CVE-2024-38617: linux - In the Linux kernel, the following vulnerability has been resolved: kunit/forti... In the Linux kernel, the following vulnerability has been resolved: kunit/fortify: Fix mismatched kvalloc()/vfree() usage The kv*() family of tests were accidentally freeing with vfree() instead of kvfree(). Use kvfree() instead. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.8.12-1) sid: resolved (fixed in 6.8.12-1) trixie: resolved

CVE-2024-47752 [MEDIUM] CVE-2024-47752: linux - In the Linux kernel, the following vulnerability has been resolved: media: medi... In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning Fix a smatch static checker warning on vdec_h264_req_if.c. Which leads to a kernel crash when fb is NULL. Scope: local bookworm: open bullseye: resolved forky: resolved (fixed in 6.11.2-1) sid: resolved (fixed in 6.11.2-1) trixie: re

CVE-2024-40933 [MEDIUM] CVE-2024-40933: linux - In the Linux kernel, the following vulnerability has been resolved: iio: temper... In the Linux kernel, the following vulnerability has been resolved: iio: temperature: mlx90635: Fix ERR_PTR dereference in mlx90635_probe() When devm_regmap_init_i2c() fails, regmap_ee could be error pointer, instead of checking for IS_ERR(regmap_ee), regmap is checked which looks like a copy paste error. Scope: local bookworm: resolved bullseye: resolved forky: res

CVE-2022-50191 [MEDIUM] CVE-2022-50191: linux - In the Linux kernel, the following vulnerability has been resolved: regulator: ... In the Linux kernel, the following vulnerability has been resolved: regulator: of: Fix refcount leak bug in of_get_regulation_constraints() We should call the of_node_put() for the reference returned by of_get_child_by_name() which has increased the refcount. Scope: local bookworm: resolved (fixed in 6.0.2-1) bullseye: resolved (fixed in 5.10.140-1) forky: resolved

CVE-2022-50207 [MEDIUM] CVE-2022-50207: linux - In the Linux kernel, the following vulnerability has been resolved: ARM: bcm: F... In the Linux kernel, the following vulnerability has been resolved: ARM: bcm: Fix refcount leak in bcm_kona_smc_init of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. Scope: local bookworm: resolved (fixed in 6.0.2-1) bullseye: resolved

CVE-2022-50204 [MEDIUM] CVE-2022-50204: linux - In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+... In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: pdata-quirks: Fix refcount leak bug In pdata_quirks_init_clocks(), the loop contains of_find_node_by_name() but without corresponding of_node_put(). Scope: local bookworm: resolved (fixed in 5.19.6-1) bullseye: resolved forky: resolved (fixed in 5.19.6-1) sid: resolved (fixed in 5.19.6-

CVE-2021-47398 [MEDIUM] CVE-2021-47398: linux - In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: ... In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Fix kernel pointer leak Pointers should be printed with %p or %px rather than cast to 'unsigned long long' and printed with %llx. Change %llx to %p to print the secured pointer. Scope: local bookworm: resolved (fixed in 5.14.12-1) bullseye: resolved forky: resolved (fixed in 5.14.12-1) si

CVE-2024-56776 [MEDIUM] CVE-2024-56776: linux - In the Linux kernel, the following vulnerability has been resolved: drm/sti: av... In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers The return value of drm_atomic_get_crtc_state() needs to be checked. To avoid use of error pointer 'crtc_state' in case of the failure. Scope: local bookworm: resolved (fixed in 6.1.123-1) bullseye: open forky: resolved (fixed in 6.12.5-1) sid:

CVE-2024-56763 [MEDIUM] CVE-2024-56763: linux - In the Linux kernel, the following vulnerability has been resolved: tracing: Pr... In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracing_cpumask_write If a large count is provided, it will trigger a warning in bitmap_parse_user. Also check zero for it. Scope: local bookworm: resolved (fixed in 6.1.123-1) bullseye: resolved (fixed in 5.10.234-1) forky: resolved (fixed in 6.12.8-1) sid: resolved (

CVE-2024-47665 [MEDIUM] CVE-2024-47665: linux - In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i... In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup Definitely condition dma_get_cache_alignment * defined value > 256 during driver initialization is not reason to BUG_ON(). Turn that to graceful error out with -EINVAL. Scope: local bookworm: resolved (fixed in 6.1.112-1) bullseye: op

CVE-2024-56777 [MEDIUM] CVE-2024-56777: linux - In the Linux kernel, the following vulnerability has been resolved: drm/sti: av... In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check The return value of drm_atomic_get_crtc_state() needs to be checked. To avoid use of error pointer 'crtc_state' in case of the failure. Scope: local bookworm: resolved (fixed in 6.1.123-1) bullseye: open forky: resolved (

CVE-2024-56725 [MEDIUM] CVE-2024-56725: linux - In the Linux kernel, the following vulnerability has been resolved: octeontx2-p... In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c Add error pointer check after calling otx2_mbox_get_rsp(). Scope: local bookworm: resolved (fixed in 6.1.123-1) bullseye: resolved forky: resolved (fixed in 6.12.3-1) sid: resolved (fixed in 6.12.3-1) trixie: resolved (fixed in 6.12.3-1)

CVE-2024-56778 [MEDIUM] CVE-2024-56778: linux - In the Linux kernel, the following vulnerability has been resolved: drm/sti: av... In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check The return value of drm_atomic_get_crtc_state() needs to be checked. To avoid use of error pointer 'crtc_state' in case of the failure. Scope: local bookworm: resolved (fixed in 6.1.123-1) bullseye: open forky: resolved

CVE-2024-47753 [MEDIUM] CVE-2024-47753: linux - In the Linux kernel, the following vulnerability has been resolved: media: medi... In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning Fix a smatch static checker warning on vdec_vp8_req_if.c. Which leads to a kernel crash when fb is NULL. Scope: local bookworm: resolved (fixed in 6.1.133-1) bullseye: resolved forky: resolved (fixed in 6.11.2-1) sid: resolved (fixed

CVE-2024-56726 [MEDIUM] CVE-2024-56726: linux - In the Linux kernel, the following vulnerability has been resolved: octeontx2-p... In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c Add error pointer check after calling otx2_mbox_get_rsp(). Scope: local bookworm: resolved (fixed in 6.1.123-1) bullseye: resolved forky: resolved (fixed in 6.12.3-1) sid: resolved (fixed in 6.12.3-1) trixie: resolved (fixed in 6.12.3-1)

CVE-2024-56727 [MEDIUM] CVE-2024-56727: linux - In the Linux kernel, the following vulnerability has been resolved: octeontx2-p... In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c Adding error pointer check after calling otx2_mbox_get_rsp(). Scope: local bookworm: resolved (fixed in 6.1.123-1) bullseye: resolved forky: resolved (fixed in 6.12.3-1) sid: resolved (fixed in 6.12.3-1) trixie: resolved (fixed in 6.12.3-

CVE-2024-56622 [MEDIUM] CVE-2024-56622: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ... In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: sysfs: Prevent div by zero Prevent a division by 0 when monitoring is not enabled. Scope: local bookworm: resolved (fixed in 6.1.123-1) bullseye: resolved forky: resolved (fixed in 6.12.5-1) sid: resolved (fixed in 6.12.5-1) trixie: resolved (fixed in 6.12.5-1)

CVE-2024-35831 [MEDIUM] CVE-2024-35831: linux - In the Linux kernel, the following vulnerability has been resolved: io_uring: F... In the Linux kernel, the following vulnerability has been resolved: io_uring: Fix release of pinned pages when __io_uaddr_map fails Looking at the error path of __io_uaddr_map, if we fail after pinning the pages for any reasons, ret will be set to -EINVAL and the error handler won't properly release the pinned pages. I didn't manage to trigger it without forcing a f

CVE-2023-52919 [MEDIUM] CVE-2023-52919: linux - In the Linux kernel, the following vulnerability has been resolved: nfc: nci: f... In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Handle memory allocation failure from nci_skb_alloc() (calling alloc_skb()) to avoid possible NULL pointer dereference. Scope: local bookworm: resolved (fixed in 6.1.64-1) bullseye: resolved (fixed in 5.10.205-1) forky: resolved (

CVE-2022-49890 [MEDIUM] CVE-2022-49890: linux - In the Linux kernel, the following vulnerability has been resolved: capabilitie... In the Linux kernel, the following vulnerability has been resolved: capabilities: fix potential memleak on error path from vfs_getxattr_alloc() In cap_inode_getsecurity(), we will use vfs_getxattr_alloc() to complete the memory allocation of tmpbuf, if we have completed the memory allocation of tmpbuf, but failed to call handler->get(...), there will be a memleak in