黄思聪 discovered that the NFC Controller Interface (NCI) implementation in
the Linux kernel did not properly handle certain memory allocation failure
conditions, leading to a null pointer dereference vulnerability. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2023-46343)
It was discovered that a race condition existed in the Bluetooth subsystem
of the Linux kernel, leading to a use-after-free vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2023-51779)
It was discovered that a race condition existed in the Rose X.25 protocol
implementation in the Linux kernel, leading to a use-after- free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2023-51782)
Alon Zahavi discovered that the NVMe-oF/TCP subsystem of the Linux kernel
did not properly handle connect command payloads in certain situations,
leading to an out-of-bounds read vulnerability. A remote attacker could use
this to expose sensitive information (kernel memory). (CVE-2023-6121)
Jann Horn discovered that the io_uring subsystem in the Linux kernel
contained an out-of-bounds access vulnerability. A local attacker could use
this to cause a denial of service (system crash). (CVE-2023-6560)
Dan Carpenter discovered that the netfilter subsystem in the Linux kernel
did not store data in properly sized memory locations. A local user could
use this to cause a denial of service (system crash). (CVE-2024-0607)
Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and
Shweta Shinde discovered that the Confidential Computing framework in the
Linux kernel for x86 platforms did not properly handle 32-bit emulation on
TDX and SEV. An attacker with access to the VMM could use this to cause a
denial of service (guest crash) or possibly execute arbitrary code.
(CVE-2024-25744)
More Stories
nodejs-bash-language-server-5.6.0-1.fc41 nodejs-pnpm-10.9.0-1.fc41
FEDORA-2025-d4cc30bdfb Packages in this update: nodejs-bash-language-server-5.6.0-1.fc41 nodejs-pnpm-10.9.0-1.fc41 Update description: Update pnpm to version 10.9.0 to fix CVE-2024-47829 and nodejs-bash-language-server to...
nodejs-bash-language-server-5.6.0-2.fc42 nodejs-pnpm-10.9.0-1.fc42
FEDORA-2025-69a1acbbc0 Packages in this update: nodejs-bash-language-server-5.6.0-2.fc42 nodejs-pnpm-10.9.0-1.fc42 Update description: Update pnpm to version 10.9.0 to fix CVE-2024-47829 and nodejs-bash-language-server to...
valkey-8.0.3-1.fc41
FEDORA-2025-d191ee2f9a Packages in this update: valkey-8.0.3-1.fc41 Update description: Valkey 8.0.3 - Released Wed 23 Apr 2025 Upgrade urgency SECURITY: This...
valkey-8.0.3-1.el9
FEDORA-EPEL-2025-eb3543f6b8 Packages in this update: valkey-8.0.3-1.el9 Update description: Valkey 8.0.3 - Released Wed 23 Apr 2025 Upgrade urgency SECURITY: This...
valkey-8.0.3-1.fc42
FEDORA-2025-2ccc1f4ed9 Packages in this update: valkey-8.0.3-1.fc42 Update description: Valkey 8.0.3 - Released Wed 23 Apr 2025 Upgrade urgency SECURITY: This...
valkey-8.0.3-1.fc40
FEDORA-2025-59ebc165fc Packages in this update: valkey-8.0.3-1.fc40 Update description: Valkey 8.0.3 - Released Wed 23 Apr 2025 Upgrade urgency SECURITY: This...