5.5
CVE-2024-46694 - drm/amd/display: avoid using null object of framebuffer
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state->fb->obj[0] directly, get object from framebuffer by calling drm_gem_fb_get_obj() and return error code when object is null to avoid using null objectβ¦
5.5
CVE-2024-46685 - pinctrl: single: fix potential NULL dereference in pcs_get_function()
In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcs_get_function() pinmux_generic_get_function() can return NULL and the pointer 'function' was dereferenced without checking against NULL. Add checking of pointer 'function' in β¦
5.5
CVE-2024-46677 - gtp: fix a potential NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfd_lookup() fails, gtp_encap_enable_socket() returns a NULL pointer, but its callers only check for error pointers thus miss the NULL pointer case. Fix it by returning an erβ¦
5.5
CVE-2024-46708 - pinctrl: qcom: x1e80100: Fix special pin offsets
In the Linux kernel, the following vulnerability has been resolved: pinctrl: qcom: x1e80100: Fix special pin offsets Remove the erroneus 0x100000 offset to prevent the boards from crashing on pin state setting, as well as for the intended state changes to take effect.
5.5
CVE-2024-46680 - Bluetooth: btnxpuart: Fix random crash seen while removing driver
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix random crash seen while removing driver This fixes the random kernel crash seen while removing the driver, when running the load/unload test over multiple iterations. 1) modprobe btnxpuart 2) hciconfig β¦
5.5
CVE-2024-46676 - nfc: pn533: Add poll mod list filling check
In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In case of im_protocols value is 1 and tm_protocols value is 0 this combination successfully passes the check 'if (!im_protocols && !tm_protocols)' in the nfc_start_poll(). But then aftβ¦
5.5
CVE-2024-46703 - Revert "serial: 8250_omap: Set the console genpd always on if no console suspend"
In the Linux kernel, the following vulnerability has been resolved: Revert "serial: 8250_omap: Set the console genpd always on if no console suspend" This reverts commit 68e6939ea9ec3d6579eadeab16060339cdeaf940. Kevin reported that this causes a crash during suspend on platforms that dont use PMβ¦
6.5
CVE-2024-46047 -
Tenda FH451 v1.0.0.9 has a stack overflow vulnerability in the fromDhcpListClient function.
6.5
CVE-2024-46046 -
Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function.
7.8
CVE-2024-46696 - nfsd: fix potential UAF in nfsd4_cb_getattr_release
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix potential UAF in nfsd4_cb_getattr_release Once we drop the delegation reference, the fields embedded in it are no longer safe to access. Do that last.