Debian Linux vulnerabilities

CVE-2013-0309 [MEDIUM] CVE-2013-0309: linux - arch/x86/include/asm/pgtable.h in the Linux kernel before 3.6.2, when transparen... arch/x86/include/asm/pgtable.h in the Linux kernel before 3.6.2, when transparent huge pages are used, does not properly support PROT_NONE memory regions, which allows local users to cause a denial of service (system crash) via a crafted application. Scope: local bookworm: resolved (fixed in 3.2.32-1) bullseye: resolved (fixed in 3.2.32-1) forky: resolved (fixed in 3.

CVE-2016-3951 [MEDIUM] CVE-2016-3951: linux - Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel befor... Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor. Scope: local bookworm: resolved (fixed in 4.5.1-1) bullseye: resolved (fixed in 4.5.1-1) forky: resolv

CVE-2013-6432 [MEDIUM] CVE-2013-6432: linux - The ping_recvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 d... The ping_recvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 does not properly interact with read system calls on ping sockets, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging unspecified privileges to execute a crafted application. Scope: local bookworm: resolved (fixed in 3.12.6-1) bul

CVE-2024-34030 [MEDIUM] CVE-2024-34030: linux - In the Linux kernel, the following vulnerability has been resolved: PCI: of_pro... In the Linux kernel, the following vulnerability has been resolved: PCI: of_property: Return error for int_map allocation failure Return -ENOMEM from of_pci_prop_intr_map() if kcalloc() fails to prevent a NULL pointer dereference in this case. [bhelgaas: commit log] Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.9.7-1) sid: resolved (

CVE-2013-1819 [MEDIUM] CVE-2013-1819: linux - The _xfs_buf_find function in fs/xfs/xfs_buf.c in the Linux kernel before 3.7.6 ... The _xfs_buf_find function in fs/xfs/xfs_buf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging the ability to mount an XFS filesystem containing a metadata inode with an invalid extent map. Scope: l

CVE-2021-47382 [MEDIUM] CVE-2021-47382: linux - In the Linux kernel, the following vulnerability has been resolved: s390/qeth: ... In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix deadlock during failing recovery Commit 0b9902c1fcc5 ("s390/qeth: fix deadlock during recovery") removed taking discipline_mutex inside qeth_do_reset(), fixing potential deadlocks. An error path was missed though, that still takes discipline_mutex and thus has the original deadlock po

CVE-2024-53149 [MEDIUM] CVE-2024-53149: linux - In the Linux kernel, the following vulnerability has been resolved: usb: typec:... In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connector_status UCSI connector's indices start from 1 up to 3, PMIC_GLINK_MAX_PORTS. Correct the condition in the pmic_glink_ucsi_connector_status() callback, fixing Type-C orientation reporting for the third USB-C connector. Scope: local bookworm: resolve

CVE-2014-9644 [LOW] CVE-2014-9644: linux - The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbi... The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the salg_name field, as demonstrated by the vfat(aes) expression, a different vulnerability than CVE-2013-7421. Scope: local bookworm: resolved (fixed in 3.16.7-ckt4-2) bullseye

CVE-2019-19045 [MEDIUM] CVE-2019-19045: linux - A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet... A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7. Scope: local bookworm: resolved (fixed in 5.3.15-1) bullseye: resolved (fixed in 5.3.15-1)

CVE-2019-20806 [MEDIUM] CVE-2019-20806: linux - An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer ... An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864_handle_frame() in drivers/media/pci/tw5864/tw5864-video.c, which may cause denial of service, aka CID-2e7682ebfc75. Scope: local bookworm: resolved (fixed in 5.2.6-1) bullseye: resolved (fixed in 5.2.6-1) forky: resolved (fixed in 5.2.6-1) sid: resolved (fixed in 5.

CVE-2014-2580 [MEDIUM] CVE-2014-2580: linux - The netback driver in Xen, when using certain Linux versions that do not allow s... The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a denial of service ("scheduling while atomic" error and host crash) via a malformed packet, which causes a mutex to be taken when trying to disable the interface. Scope: local bookworm: resolved (fixed in 3.13.10-1) bu

CVE-2022-0168 [MEDIUM] CVE-2022-0168: linux - A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query... A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user function. This flaw allows a local, privileged (CAP_SYS_ADMIN) attacker to crash the system. Scope: local bookworm: resolved (fixed in 5.17.3-1) bullseye: resolved (fi

CVE-2013-3302 [MEDIUM] CVE-2013-3302: linux - Race condition in the smb_send_rqst function in fs/cifs/transport.c in the Linux... Race condition in the smb_send_rqst function in fs/cifs/transport.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via vectors involving a reconnection event. Scope: local bookworm: resolved (fixed in 3.8-1) bullseye: resolved (fixed in 3.8-1) forky: resolve

CVE-2024-38550 [MEDIUM] CVE-2024-38550: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: kirkw... In the Linux kernel, the following vulnerability has been resolved: ASoC: kirkwood: Fix potential NULL dereference In kirkwood_dma_hw_params() mv_mbus_dram_info() returns NULL if CONFIG_PLAT_ORION macro is not defined. Fix this bug by adding NULL check. Found by Linux Verification Center (linuxtesting.org) with SVACE. Scope: local bookworm: resolved (fixed in 6.1.94

CVE-2024-42123 [MEDIUM] CVE-2024-42123: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu:... In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix double free err_addr pointer warnings In amdgpu_umc_bad_page_polling_timeout, the amdgpu_umc_handle_bad_pages will be run many times so that double free err_addr in some special case. So set the err_addr to NULL to avoid the warnings. Scope: local bookworm: open bullseye: open forky:

CVE-2019-12614 [MEDIUM] CVE-2019-12614: linux - An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pse... An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup of prop->name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). Scope: local bookworm: resolved (fixed in 5.3.7-1) bullseye: resolved (fixed in 5.3.7-1) fo

CVE-2019-19537 [MEDIUM] CVE-2019-19537: linux - In the Linux kernel before 5.2.10, there is a race condition bug that can be cau... In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c. Scope: local bookworm: resolved (fixed in 5.2.17-1) bullseye: resolved (fixed in 5.2.17-1) forky: resolved (fixed in 5.2.17-1) sid: resolved (fixed in 5.2.1

CVE-2014-5472 [MEDIUM] CVE-2014-5472: linux - The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux ker... The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry. Scope: local bookworm: resolved (fixed in 3.16.2-1) bullseye: resolved (fixed in 3.16.2-1) forky: resolved (fixed in 3.16.2-1) sid: re

CVE-2015-8374 [MEDIUM] CVE-2015-8374: linux - fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline e... fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action. Scope: local bookworm: resolved (fixed in 4.2.6-2) bullseye: resolved (fixed in 4.2.6-2) forky: resolved (fixed in 4.2.6-2) sid: resolved (fixed in 4.2.6-2) trixie: resolved (fix

CVE-2013-4592 [MEDIUM] CVE-2013-4592: linux - Memory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c in th... Memory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c in the Linux kernel before 3.9 allows local users to cause a denial of service (memory consumption) by leveraging certain device access to trigger movement of memory slots. Scope: local bookworm: resolved (fixed in 3.8-1) bullseye: resolved (fixed in 3.8-1) forky: resolved (fixed in 3.8-1) sid: