The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned (CVE-2023-52458)
- kernel: ext4: avoid allocating blocks from corrupted group in ext4mbtrybestfound() (CVE-2024-26773)
- kernel: bpf: Fix racing between bpftimercancelandfree and bpftimercancel (CVE-2024-26737)
- kernel: dm: call the resume method on internal suspend (CVE-2024-26880)
- kernel: net/ipv6: avoid possible UAF in ip6routempath_notify() (CVE-2024-26852)
- kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
- kernel: nfp: flower: handle acti_netdevs allocation failure (CVE-2024-27046)
- kernel: octeontx2-af: Use separate handlers for interrupts (CVE-2024-27030)
- kernel: icmp: prevent possible NULL dereferences from icmpbuildprobe() (CVE-2024-35857)
- kernel: mlxbfgige: call requestirq() after NAPI initialized (CVE-2024-35907)
- kernel: mlxbf_gige: stop interface during shutdown (CVE-2024-35885)
- kernel: scsi: libfc: Fix potential NULL pointer dereference in fclportptp_setup() (CVE-2023-52809)
- kernel: can: j1939: j1939netdevstart(): fix UAF for rxkref of j1939priv (CVE-2021-47459)
- kernel: scsi: lpfc: Release hbalock before calling lpfcworkerwake_up() (CVE-2024-36924)
- kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (CVE-2024-36952)
- kernel: net: amd-xgbe: Fix skb data length underflow (CVE-2022-48743)
- kernel: epoll: be better about file lifetimes (CVE-2024-38580)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.