Поиск уязвимостей
Количество 23
Количество 23
CVE-2024-47705
In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blk_add_partition The blk_add_partition() function initially used a single if-condition (IS_ERR(part)) to check for errors when adding a partition. This was modified to handle the specific case of -ENXIO separately, allowing the function to proceed without logging the error in this case. However, this change unintentionally left a path where md_autodetect_dev() could be called without confirming that part is a valid pointer. This commit separates the error handling logic by splitting the initial if-condition, improving code readability and handling specific error scenarios explicitly. The function now distinguishes the general error case from -ENXIO without altering the existing behavior of md_autodetect_dev() calls.
CVE-2024-47705
In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blk_add_partition The blk_add_partition() function initially used a single if-condition (IS_ERR(part)) to check for errors when adding a partition. This was modified to handle the specific case of -ENXIO separately, allowing the function to proceed without logging the error in this case. However, this change unintentionally left a path where md_autodetect_dev() could be called without confirming that part is a valid pointer. This commit separates the error handling logic by splitting the initial if-condition, improving code readability and handling specific error scenarios explicitly. The function now distinguishes the general error case from -ENXIO without altering the existing behavior of md_autodetect_dev() calls.
CVE-2024-47705
In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blk_add_partition The blk_add_partition() function initially used a single if-condition (IS_ERR(part)) to check for errors when adding a partition. This was modified to handle the specific case of -ENXIO separately, allowing the function to proceed without logging the error in this case. However, this change unintentionally left a path where md_autodetect_dev() could be called without confirming that part is a valid pointer. This commit separates the error handling logic by splitting the initial if-condition, improving code readability and handling specific error scenarios explicitly. The function now distinguishes the general error case from -ENXIO without altering the existing behavior of md_autodetect_dev() calls.
CVE-2024-47705
block: fix potential invalid pointer dereference in blk_add_partition
CVE-2024-47705
In the Linux kernel, the following vulnerability has been resolved: b ...
GHSA-5vwr-fpff-94gx
In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blk_add_partition The blk_add_partition() function initially used a single if-condition (IS_ERR(part)) to check for errors when adding a partition. This was modified to handle the specific case of -ENXIO separately, allowing the function to proceed without logging the error in this case. However, this change unintentionally left a path where md_autodetect_dev() could be called without confirming that part is a valid pointer. This commit separates the error handling logic by splitting the initial if-condition, improving code readability and handling specific error scenarios explicitly. The function now distinguishes the general error case from -ENXIO without altering the existing behavior of md_autodetect_dev() calls.
BDU:2025-03290
Уязвимость компонента block ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20250311-01
Множественные уязвимости kernel-lt
ALT-PU-2024-17943
ALT-PU-2024-17943: package `kernel-image-un-def` update to version 6.6.54-alt0.p11.1
SUSE-SU-2024:3983-1
Security update for the Linux Kernel
SUSE-SU-2024:3985-1
Security update for the Linux Kernel
ALT-PU-2024-14270
ALT-PU-2024-14270: package `kernel-image-std-def` update to version 5.10.227-alt1
ELSA-2024-12887
ELSA-2024-12887: Unbreakable Enterprise kernel security update (IMPORTANT)
SUSE-SU-2024:3986-1
Security update for the Linux Kernel
SUSE-SU-2024:3984-1
Security update for the Linux Kernel
ALT-PU-2024-16172
ALT-PU-2024-16172: package `kernel-image-rt` update to version 5.10.229-alt1.rt121
ALT-PU-2024-14268
ALT-PU-2024-14268: package `kernel-image-un-def` update to version 6.1.113-alt1
ELSA-2025-6966
ELSA-2025-6966: kernel security update (MODERATE)
ALT-PU-2024-17924
ALT-PU-2024-17924: package `kernel-image-pine` update to version 6.10.14-alt1
SUSE-SU-2024:4364-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2024-47705 In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blk_add_partition The blk_add_partition() function initially used a single if-condition (IS_ERR(part)) to check for errors when adding a partition. This was modified to handle the specific case of -ENXIO separately, allowing the function to proceed without logging the error in this case. However, this change unintentionally left a path where md_autodetect_dev() could be called without confirming that part is a valid pointer. This commit separates the error handling logic by splitting the initial if-condition, improving code readability and handling specific error scenarios explicitly. The function now distinguishes the general error case from -ENXIO without altering the existing behavior of md_autodetect_dev() calls. | CVSS3: 5.5 | 0% Низкий | около 2 лет назад | |
CVE-2024-47705 In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blk_add_partition The blk_add_partition() function initially used a single if-condition (IS_ERR(part)) to check for errors when adding a partition. This was modified to handle the specific case of -ENXIO separately, allowing the function to proceed without logging the error in this case. However, this change unintentionally left a path where md_autodetect_dev() could be called without confirming that part is a valid pointer. This commit separates the error handling logic by splitting the initial if-condition, improving code readability and handling specific error scenarios explicitly. The function now distinguishes the general error case from -ENXIO without altering the existing behavior of md_autodetect_dev() calls. | CVSS3: 5.5 | 0% Низкий | около 2 лет назад | |
CVE-2024-47705 In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blk_add_partition The blk_add_partition() function initially used a single if-condition (IS_ERR(part)) to check for errors when adding a partition. This was modified to handle the specific case of -ENXIO separately, allowing the function to proceed without logging the error in this case. However, this change unintentionally left a path where md_autodetect_dev() could be called without confirming that part is a valid pointer. This commit separates the error handling logic by splitting the initial if-condition, improving code readability and handling specific error scenarios explicitly. The function now distinguishes the general error case from -ENXIO without altering the existing behavior of md_autodetect_dev() calls. | CVSS3: 5.5 | 0% Низкий | около 2 лет назад | |
CVE-2024-47705 block: fix potential invalid pointer dereference in blk_add_partition | CVSS3: 5.5 | 0% Низкий | почти 2 года назад | |
CVE-2024-47705 In the Linux kernel, the following vulnerability has been resolved: b ... | CVSS3: 5.5 | 0% Низкий | около 2 лет назад | |
GHSA-5vwr-fpff-94gx In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blk_add_partition The blk_add_partition() function initially used a single if-condition (IS_ERR(part)) to check for errors when adding a partition. This was modified to handle the specific case of -ENXIO separately, allowing the function to proceed without logging the error in this case. However, this change unintentionally left a path where md_autodetect_dev() could be called without confirming that part is a valid pointer. This commit separates the error handling logic by splitting the initial if-condition, improving code readability and handling specific error scenarios explicitly. The function now distinguishes the general error case from -ENXIO without altering the existing behavior of md_autodetect_dev() calls. | CVSS3: 5.5 | 0% Низкий | около 2 лет назад | |
BDU:2025-03290 Уязвимость компонента block ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.5 | 0% Низкий | около 2 лет назад | |
ROS-20250311-01 Множественные уязвимости kernel-lt | CVSS3: 9.1 | больше 1 года назад | ||
ALT-PU-2024-17943 ALT-PU-2024-17943: package `kernel-image-un-def` update to version 6.6.54-alt0.p11.1 | CVSS3: 9.1 | около 2 лет назад | ||
SUSE-SU-2024:3983-1 Security update for the Linux Kernel | почти 2 года назад | |||
SUSE-SU-2024:3985-1 Security update for the Linux Kernel | почти 2 года назад | |||
ALT-PU-2024-14270 ALT-PU-2024-14270: package `kernel-image-std-def` update to version 5.10.227-alt1 | CVSS3: 9.1 | около 2 лет назад | ||
ELSA-2024-12887 ELSA-2024-12887: Unbreakable Enterprise kernel security update (IMPORTANT) | почти 2 года назад | |||
SUSE-SU-2024:3986-1 Security update for the Linux Kernel | почти 2 года назад | |||
SUSE-SU-2024:3984-1 Security update for the Linux Kernel | почти 2 года назад | |||
ALT-PU-2024-16172 ALT-PU-2024-16172: package `kernel-image-rt` update to version 5.10.229-alt1.rt121 | CVSS3: 9.1 | почти 2 года назад | ||
ALT-PU-2024-14268 ALT-PU-2024-14268: package `kernel-image-un-def` update to version 6.1.113-alt1 | CVSS3: 9.1 | около 2 лет назад | ||
ELSA-2025-6966 ELSA-2025-6966: kernel security update (MODERATE) | больше 1 года назад | |||
ALT-PU-2024-17924 ALT-PU-2024-17924: package `kernel-image-pine` update to version 6.10.14-alt1 | CVSS3: 9.1 | около 2 лет назад | ||
SUSE-SU-2024:4364-1 Security update for the Linux Kernel | почти 2 года назад |
Уязвимостей на страницу