5.5
CVE-2023-52657 - Revert "drm/amd/pm: resolve reboot exception for si oland"
In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd/pm: resolve reboot exception for si oland" This reverts commit e490d60a2f76bff636c68ce4fe34c1b6c34bbd86. This causes hangs on SI when DC is enabled and errors on driver reboot and power off cycles.
5.5
CVE-2023-52666 - kernel: ksmbd: fix potential circular locking issue in smb2_set_ea()
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
5.5
CVE-2024-27414 - rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back
In the Linux kernel, the following vulnerability has been resolved: rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back In the commit d73ef2d69c0d ("rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length"), an adjustment was made to the old loop logic in the function `rtnl_briβ¦
5.5
CVE-2024-35784 - btrfs: fix deadlock with fiemap and extent locking
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock with fiemap and extent locking While working on the patchset to remove extent locking I got a lockdep splat with fiemap and pagefaulting with my new extent lock replacement lock. This deadlock exists with ourβ¦
5.5
CVE-2024-35796 - net: ll_temac: platform_get_resource replaced by wrong function
In the Linux kernel, the following vulnerability has been resolved: net: ll_temac: platform_get_resource replaced by wrong function The function platform_get_resource was replaced with devm_platform_ioremap_resource_byname and is called using 0 as name. This eventually ends up in platform_get_reβ¦
5.5
CVE-2024-27426 - kernel: netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
5.5
CVE-2023-52675 - powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.
8.8
CVE-2024-34058 -
The WebTop package for NethServer 7 and 8 allows stored XSS (for example, via the Subject field if an e-mail message).
5.5
CVE-2024-35820 - kernel: io_uring: fix io_queue_proc modifying req->flags
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
5.5
CVE-2024-35830 - media: tc358743: register v4l2 async device only after successful setup
In the Linux kernel, the following vulnerability has been resolved: media: tc358743: register v4l2 async device only after successful setup Ensure the device has been setup correctly before registering the v4l2 async device, thus allowing userspace to access.