Debian Linux vulnerabilities

CVE-2016-10741 [MEDIUM] CVE-2016-10741: linux - In the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause ... In the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause a denial of service (system crash) because there is a race condition between direct and memory-mapped I/O (associated with a hole) that is handled with BUG_ON instead of an I/O failure. Scope: local bookworm: resolved (fixed in 4.9.6-1) bullseye: resolved (fixed in 4.9.6-1) forky: resolv

CVE-2016-3138 [MEDIUM] CVE-2016-3138: linux - The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before... The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both a control and a data endpoint descriptor. Scope: local bookworm: resolved (fixed in 4.5.1-1) bullseye: resolved (fixed in 4.5.1-1) forky: reso

CVE-2022-45887 [MEDIUM] CVE-2022-45887: linux - An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttu... An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a dvb_frontend_detach call. Scope: local bookworm: resolved (fixed in 6.1.37-1) bullseye: resolved (fixed in 5.10.191-1) forky: resolved (fixed in 6.3.7-1) sid: resolved (fixed in 6.3.7-1) trixie: resolved (fixed in 6.3.7-1)

CVE-2013-1792 [MEDIUM] CVE-2013-1792: linux - Race condition in the install_user_keyrings function in security/keys/process_ke... Race condition in the install_user_keyrings function in security/keys/process_keys.c in the Linux kernel before 3.8.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) via crafted keyctl system calls that trigger keyring operations in simultaneous threads. Scope: local bookworm: resolved (fixed in 3.2.41-1) bullseye: resolved

CVE-2021-29265 [MEDIUM] CVE-2021-29265: linux - An issue was discovered in the Linux kernel before 5.11.7. usbip_sockfd_store in... An issue was discovered in the Linux kernel before 5.11.7. usbip_sockfd_store in drivers/usb/usbip/stub_dev.c allows attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status, aka CID-9380afd6df70. Scope: local bookworm: resolved (fixed in 5.10.24-1) bullseye: resolved (fixed in 5.10

CVE-2014-4656 [MEDIUM] CVE-2014-4656: linux - Multiple integer overflows in sound/core/control.c in the ALSA control implement... Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allow local users to cause a denial of service by leveraging /dev/snd/controlCX access, related to (1) index values in the snd_ctl_add function and (2) numid values in the snd_ctl_remove_numid_conflict function. Scope: local bookworm: resolved (fixed

CVE-2024-27040 [MEDIUM] CVE-2024-27040: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amd/dis... In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()' In the first if statement, we're checking if 'replay' is NULL. But in the second if statement, we're not checking if 'replay' is NULL again before calling replay->funcs->replay_set_power_opt(). if (replay == NULL && force_st

CVE-2020-36780 [MEDIUM] CVE-2020-36780: linux - In the Linux kernel, the following vulnerability has been resolved: i2c: sprd: ... In the Linux kernel, the following vulnerability has been resolved: i2c: sprd: fix reference leak when pm_runtime_get_sync fails The PM reference count is not expected to be incremented on return in sprd_i2c_master_xfer() and sprd_i2c_remove(). However, pm_runtime_get_sync will increment the PM reference count even failed. Forgetting to putting operation will result

CVE-2013-7421 [LOW] CVE-2013-7421: linux - The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbi... The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different vulnerability than CVE-2014-9644. Scope: local bookworm: resolved (fixed in 3.16.7-ckt4-2) bullseye: resolved (fixed in 3.16.7-ckt4-2) forky: resolved (fixed in 3.16.7-ckt4-

CVE-2022-49599 [MEDIUM] CVE-2022-49599: linux - In the Linux kernel, the following vulnerability has been resolved: tcp: Fix da... In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_l3mdev_accept. While reading sysctl_tcp_l3mdev_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Scope: local bookworm: resolved (fixed in 5.18.16-1) bullseye: resolved (fixed in 5.10.140-1) forky: resolved (fixed in 5.18.1

CVE-2022-49594 [MEDIUM] CVE-2022-49594: linux - In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a ... In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. While reading sysctl_tcp_mtu_probe_floor, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Scope: local bookworm: resolved (fixed in 5.18.16-1) bullseye: resolved (fixed in 5.10.136-1) forky: resolved (fixed in 5.

CVE-2024-50277 [MEDIUM] CVE-2024-50277: linux - In the Linux kernel, the following vulnerability has been resolved: dm: fix a c... In the Linux kernel, the following vulnerability has been resolved: dm: fix a crash if blk_alloc_disk fails If blk_alloc_disk fails, the variable md->disk is set to an error value. cleanup_mapped_device will see that md->disk is non-NULL and it will attempt to access it, causing a crash on this statement "md->disk->private_data = NULL;". Scope: local bookworm: resol

CVE-2022-49598 [MEDIUM] CVE-2022-49598: linux - In the Linux kernel, the following vulnerability has been resolved: tcp: Fix da... In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_mtu_probing. While reading sysctl_tcp_mtu_probing, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Scope: local bookworm: resolved (fixed in 5.18.16-1) bullseye: resolved (fixed in 5.10.136-1) forky: resolved (fixed in 5.18.16-1)

CVE-2022-49571 [MEDIUM] CVE-2022-49571: linux - In the Linux kernel, the following vulnerability has been resolved: tcp: Fix da... In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_max_reordering. While reading sysctl_tcp_max_reordering, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Scope: local bookworm: resolved (fixed in 5.18.16-1) bullseye: resolved (fixed in 5.10.136-1) forky: resolved (fixed in 5.18

CVE-2022-49595 [MEDIUM] CVE-2022-49595: linux - In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a ... In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_probe_threshold. While reading sysctl_tcp_probe_threshold, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Scope: local bookworm: resolved (fixed in 5.18.16-1) bullseye: resolved (fixed in 5.10.136-1) forky: resolved (fixed in 5.

CVE-2022-49575 [MEDIUM] CVE-2022-49575: linux - In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a ... In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. While reading sysctl_tcp_thin_linear_timeouts, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Scope: local bookworm: resolved (fixed in 5.18.16-1) bullseye: resolved (fixed in 5.10.136-1) forky: resolved (f

CVE-2022-49601 [MEDIUM] CVE-2022-49601: linux - In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: F... In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. While reading sysctl_tcp_fwmark_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Scope: local bookworm: resolved (fixed in 5.18.16-1) bullseye: resolved (fixed in 5.10.136-1) forky: resolved (fixed in 5

CVE-2022-49586 [MEDIUM] CVE-2022-49586: linux - In the Linux kernel, the following vulnerability has been resolved: tcp: Fix da... In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_fastopen. While reading sysctl_tcp_fastopen, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Scope: local bookworm: resolved (fixed in 5.18.16-1) bullseye: resolved (fixed in 5.10.136-1) forky: resolved (fixed in 5.18.16-1) sid:

CVE-2022-49593 [MEDIUM] CVE-2022-49593: linux - In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a ... In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_probe_interval. While reading sysctl_tcp_probe_interval, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Scope: local bookworm: resolved (fixed in 5.18.16-1) bullseye: resolved (fixed in 5.10.136-1) forky: resolved (fixed in 5.18

CVE-2022-49572 [MEDIUM] CVE-2022-49572: linux - In the Linux kernel, the following vulnerability has been resolved: tcp: Fix da... In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. While reading sysctl_tcp_slow_start_after_idle, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Scope: local bookworm: resolved (fixed in 5.18.16-1) bullseye: resolved (fixed in 5.10.136-1) forky: resolved