Поиск уязвимостей
Количество 21
Количество 21
CVE-2023-52457
In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed Returning an error code from .remove() makes the driver core emit the little helpful error message: remove callback returned a non-zero value. This will be ignored. and then remove the device anyhow. So all resources that were not freed are leaked in this case. Skipping serial8250_unregister_port() has the potential to keep enough of the UART around to trigger a use-after-free. So replace the error return (and with it the little helpful error message) by a more useful error message and continue to cleanup.
CVE-2023-52457
In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed Returning an error code from .remove() makes the driver core emit the little helpful error message: remove callback returned a non-zero value. This will be ignored. and then remove the device anyhow. So all resources that were not freed are leaked in this case. Skipping serial8250_unregister_port() has the potential to keep enough of the UART around to trigger a use-after-free. So replace the error return (and with it the little helpful error message) by a more useful error message and continue to cleanup.
CVE-2023-52457
In the Linux kernel, the following vulnerability has been resolved: s ...
GHSA-9xmv-37c3-q98h
In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed Returning an error code from .remove() makes the driver core emit the little helpful error message: remove callback returned a non-zero value. This will be ignored. and then remove the device anyhow. So all resources that were not freed are leaked in this case. Skipping serial8250_unregister_port() has the potential to keep enough of the UART around to trigger a use-after-free. So replace the error return (and with it the little helpful error message) by a more useful error message and continue to cleanup.
BDU:2024-01833
Уязвимость функции omap8250_remove() в модуле drivers/tty/serial/8250/8250_omap.c драйвера последовательного интерфейса 8250 ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
ROS-20240813-02
Множественные уязвимости kernel-lt
SUSE-SU-2024:0910-1
Security update for the Linux Kernel
SUSE-SU-2024:0858-1
Security update for the Linux Kernel
SUSE-SU-2024:0977-1
Security update for the Linux Kernel
SUSE-SU-2024:0900-1
Security update for the Linux Kernel
SUSE-SU-2024:0855-1
Security update for the Linux Kernel
ALT-PU-2024-17576
ALT-PU-2024-17576: package `kernel-image-std-def` update to version 5.10.209-alt2
ALT-PU-2024-18073
ALT-PU-2024-18073: package `kernel-image-rt` update to version 5.10.209-alt1.rt101
ALT-PU-2024-18054
ALT-PU-2024-18054: package `kernel-image-un-def` update to version 6.1.75-alt1
ALT-PU-2024-18358
ALT-PU-2024-18358: package `kernel-image-std-def` update to version 6.1.75-alt2
ALT-PU-2024-18254
ALT-PU-2024-18254: package `kernel-image-rt` update to version 6.1.75-alt1.rt23
ALT-PU-2024-18462
ALT-PU-2024-18462: package `kernel-image-un-def` update to version 6.6.14-alt1
ALT-PU-2024-18203
ALT-PU-2024-18203: package `kernel-image-pine` update to version 6.6.14-alt1
ALT-PU-2024-1865
ALT-PU-2024-1865: package `kernel-image-mp` update to version 6.6.16-alt1
ALT-PU-2024-4843
ALT-PU-2024-4843: package `kernel-image-rpi-un` update to version 6.1.77-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2023-52457 In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed Returning an error code from .remove() makes the driver core emit the little helpful error message: remove callback returned a non-zero value. This will be ignored. and then remove the device anyhow. So all resources that were not freed are leaked in this case. Skipping serial8250_unregister_port() has the potential to keep enough of the UART around to trigger a use-after-free. So replace the error return (and with it the little helpful error message) by a more useful error message and continue to cleanup. | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад | |
CVE-2023-52457 In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed Returning an error code from .remove() makes the driver core emit the little helpful error message: remove callback returned a non-zero value. This will be ignored. and then remove the device anyhow. So all resources that were not freed are leaked in this case. Skipping serial8250_unregister_port() has the potential to keep enough of the UART around to trigger a use-after-free. So replace the error return (and with it the little helpful error message) by a more useful error message and continue to cleanup. | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад | |
CVE-2023-52457 In the Linux kernel, the following vulnerability has been resolved: s ... | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад | |
GHSA-9xmv-37c3-q98h In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed Returning an error code from .remove() makes the driver core emit the little helpful error message: remove callback returned a non-zero value. This will be ignored. and then remove the device anyhow. So all resources that were not freed are leaked in this case. Skipping serial8250_unregister_port() has the potential to keep enough of the UART around to trigger a use-after-free. So replace the error return (and with it the little helpful error message) by a more useful error message and continue to cleanup. | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад | |
BDU:2024-01833 Уязвимость функции omap8250_remove() в модуле drivers/tty/serial/8250/8250_omap.c драйвера последовательного интерфейса 8250 ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код | CVSS3: 7.8 | 0% Низкий | почти 3 года назад | |
ROS-20240813-02 Множественные уязвимости kernel-lt | CVSS3: 7.8 | около 2 лет назад | ||
SUSE-SU-2024:0910-1 Security update for the Linux Kernel | больше 2 лет назад | |||
SUSE-SU-2024:0858-1 Security update for the Linux Kernel | больше 2 лет назад | |||
SUSE-SU-2024:0977-1 Security update for the Linux Kernel | больше 2 лет назад | |||
SUSE-SU-2024:0900-1 Security update for the Linux Kernel | больше 2 лет назад | |||
SUSE-SU-2024:0855-1 Security update for the Linux Kernel | больше 2 лет назад | |||
ALT-PU-2024-17576 ALT-PU-2024-17576: package `kernel-image-std-def` update to version 5.10.209-alt2 | CVSS3: 9.8 | почти 3 года назад | ||
ALT-PU-2024-18073 ALT-PU-2024-18073: package `kernel-image-rt` update to version 5.10.209-alt1.rt101 | CVSS3: 9.8 | больше 2 лет назад | ||
ALT-PU-2024-18054 ALT-PU-2024-18054: package `kernel-image-un-def` update to version 6.1.75-alt1 | CVSS3: 9.8 | почти 3 года назад | ||
ALT-PU-2024-18358 ALT-PU-2024-18358: package `kernel-image-std-def` update to version 6.1.75-alt2 | CVSS3: 9.8 | почти 3 года назад | ||
ALT-PU-2024-18254 ALT-PU-2024-18254: package `kernel-image-rt` update to version 6.1.75-alt1.rt23 | CVSS3: 9.8 | почти 3 года назад | ||
ALT-PU-2024-18462 ALT-PU-2024-18462: package `kernel-image-un-def` update to version 6.6.14-alt1 | CVSS3: 9.8 | почти 3 года назад | ||
ALT-PU-2024-18203 ALT-PU-2024-18203: package `kernel-image-pine` update to version 6.6.14-alt1 | CVSS3: 9.8 | почти 3 года назад | ||
ALT-PU-2024-1865 ALT-PU-2024-1865: package `kernel-image-mp` update to version 6.6.16-alt1 | CVSS3: 9.8 | почти 3 года назад | ||
ALT-PU-2024-4843 ALT-PU-2024-4843: package `kernel-image-rpi-un` update to version 6.1.77-alt1 | CVSS3: 10 | больше 2 лет назад |
Уязвимостей на страницу