Msrc Azure Linux 3.0 Arm vulnerabilities

CVE-2024-35786 [MEDIUM] CWE-667 drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source li

CVE-2024-35848 [MEDIUM] eeprom: at24: fix memory corruption race condition eeprom: at24: fix memory corruption race condition FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is com

CVE-2024-26977 [MEDIUM] pci_iounmap(): Fix MMIO mapping leak pci_iounmap(): Fix MMIO mapping leak FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committe

CVE-2024-27058 [MEDIUM] tmpfs: fix race on handling dquot rbtree tmpfs: fix race on handling dquot rbtree FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is

CVE-2024-27078 [MEDIUM] CWE-401 media: v4l2-tpg: fix some memleaks in tpg_alloc media: v4l2-tpg: fix some memleaks in tpg_alloc FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is c

CVE-2024-27026 [MEDIUM] vmxnet3: Fix missing reserved tailroom vmxnet3: Fix missing reserved tailroom FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is comm

CVE-2024-26963 [MEDIUM] usb: dwc3-am62: fix module unload/reload behavior usb: dwc3-am62: fix module unload/reload behavior FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is compo

CVE-2024-35790 [MEDIUM] usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most

CVE-2024-35816 [MEDIUM] firewire: ohci: prevent leak of left-over IRQ on unbind firewire: ohci: prevent leak of left-over IRQ on unbind FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the dis

CVE-2024-35787 [MEDIUM] md/md-bitmap: fix incorrect usage for sb_index md/md-bitmap: fix incorrect usage for sb_index FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. M

CVE-2024-27077 [MEDIUM] CWE-401 media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source librar

CVE-2024-26988 [HIGH] init/main.c: Fix potential static_command_line memory overflow init/main.c: Fix potential static_command_line memory overflow FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with w

CVE-2024-27003 [MEDIUM] CWE-667 clk: Get runtime PM before walking tree for clk_summary clk: Get runtime PM before walking tree for clk_summary FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which

CVE-2024-33876 [MEDIUM] CWE-120 HDF5 Library through 1.14.3 has a heap buffer overflow in H5S__point_deserialize in H5Spoint.c. HDF5 Library through 1.14.3 has a heap buffer overflow in H5S__point_deserialize in H5Spoint.c. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with

CVE-2023-52663 [MEDIUM] CWE-401 ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe() ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe() FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which t

CVE-2024-35917 [MEDIUM] CWE-476 s390/bpf: Fix bpf_plt pointer arithmetic s390/bpf: Fix bpf_plt pointer arithmetic FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Micro

CVE-2024-27001 [MEDIUM] comedi: vmk80xx: fix incomplete endpoint checking comedi: vmk80xx: fix incomplete endpoint checking FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is compo

CVE-2024-35852 [MEDIUM] CWE-401 mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open s

CVE-2024-26978 [MEDIUM] CWE-476 serial: max310x: fix NULL pointer dereference in I2C instantiation serial: max310x: fix NULL pointer dereference in I2C instantiation FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open sourc

CVE-2024-26968 [MEDIUM] CWE-129 clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source