Multiple Linux Kernel Vulnerabilities

September 6, 2024

Severity

Medium

Analysis Summary

CVE-2024-42273 CVSS:5.5

Linux Kernel is vulnerable to a denial of service, caused by a flaw in CURSEG_ALL_DATA_ATGC. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.

CVE-2024-42258 CVSS:5.5

Linux Kernel is vulnerable to a denial of service, caused by an error related to huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines. A local authenticated attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-42259 CVSS:4.1

Linux Kernel is vulnerable to a denial of service, caused by improper bounds checking by drm/i915/gem. A local authenticated attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-41042 CVSS:5.5

Linux Kernel is vulnerable to a denial of service, caused by an error related to netfilter: nf_tables: prefer nft_chain_validate nft_chain_validate. A local authenticated attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-43888 CVSS:5.5

Linux Kernel is vulnerable to a denial of service, caused by a use-after-free in mem_cgroup_from_slab_obj(). By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.

CVE-2024-43910 CVSS:5.5

Linux Kernel is vulnerable to a denial of service, caused by an out-of-bounds memory accesses in check_func_arg_reg_off(). By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.

CVE-2024-42285 CVSS:5.5

Linux Kernel is vulnerable to a denial of service, caused by use-after-free related to destroying CM IDs in service RDMA/iwcm. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.

CVE-2024-42302 CVSS:6.2

Linux Kernel is vulnerable to a denial of service, caused by a use-after-free on concurrent DPC and hot-removal. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.

CVE-2024-43833 CVSS:5.5

Linux Kernel is vulnerable to a denial of service, caused by a NULL pointer dereference in adding ancillary links In v4l2_async_create_ancillary_links(). A local authenticated attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-43857 CVSS:5.5

Linux Kernel is vulnerable to a denial of service, caused by a NULL pointer dereference when checking end of zone. A local authenticated attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-42264 CVSS:5.5

Linux Kernel is vulnerable to a denial of service, caused by an out-of-bounds access in performance query extensions. A local authenticated attacker could exploit this vulnerability to cause a denial of service.

Impact