CLSA-2024-1731606243
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2024-1731606243.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2024-1731606243
- Upstream
- Published
- 2024-11-14T17:44:09Z
- Modified
- 2026-06-04T10:03:39.018055039Z
- Summary
- Fix of 67 CVEs
- Details
-
- CVE-url: https://ubuntu.com/security/CVE-2024-42265
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions
- CVE-url: https://ubuntu.com/security/CVE-2024-47669
- nilfs2: fix state management in error path of log writing function
- CVE-url: https://ubuntu.com/security/CVE-2023-52918
- media: pci: cx23885: check cx23885vdevinit() return
- CVE-url: https://ubuntu.com/security/CVE-2024-46750
- PCI: Add missing bridge lock to pcibuslock()
- CVE-url: https://ubuntu.com/security/CVE-2024-46676
- nfc: pn533: Add poll mod list filling check
- CVE-url: https://ubuntu.com/security/CVE-2024-46755
- wifi: mwifiex: Do not return unused priv in mwifiexgetprivbyid()
- CVE-url: https://ubuntu.com/security/CVE-2024-46721
- apparmor: fix possible NULL pointer dereference
- CVE-url: https://ubuntu.com/security/CVE-2024-44947
- fuse: Initialize beyond-EOF page contents before setting uptodate
- CVE-url: https://ubuntu.com/security/CVE-2024-46675
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- CVE-url: https://ubuntu.com/security/CVE-2024-43893
- serial: core: check uartclk for zero to avoid divide by zero
- CVE-url: https://ubuntu.com/security/CVE-2024-45021
- memcgwriteevent_control(): fix a user-triggerable oops
- CVE-url: https://ubuntu.com/security/CVE-2024-41012
- filelock: Remove locks reliably when fcntl/close race is detected
- CVE-url: https://ubuntu.com/security/CVE-2024-42310
- drm/gma500: fix null pointer dereference in cdvintellvdsgetmodes
- CVE-url: https://ubuntu.com/security/CVE-2024-42311
- hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode()
- CVE-url: https://ubuntu.com/security/CVE-2024-45028
- mmc: mmc_test: Fix NULL dereference on allocation failure
- CVE-url: https://ubuntu.com/security/CVE-2024-43914
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- CVE-url: https://ubuntu.com/security/CVE-2024-43856
- dma: fix call order in dmamfreecoherent
- CVE-url: https://ubuntu.com/security/CVE-2024-43884
- Bluetooth: MGMT: Add error handling to pair_device()
- CVE-url: https://ubuntu.com/security/CVE-2024-42309
- drm/gma500: fix null pointer dereference in psbintellvdsgetmodes
- CVE-url: https://ubuntu.com/security/CVE-2024-50044
- Bluetooth: RFCOMM: FIX possible deadlock in rfcommskstate_change
- CVE-url: https://ubuntu.com/security/CVE-2024-49967
- ext4: no need to continue when the number of entries is 1
- Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE-
url: https://ubuntu.com/security/CVE-2022-49015
- net: hsr: Fix potential use-after-free
- CVE-url: https://ubuntu.com/security/CVE-2024-50033
- slip: make slhc_remember() more robust against malicious packets
- CVE-url: https://ubuntu.com/security/CVE-2024-47670
- ocfs2: add bounds checking to ocfs2xattrfind_entry()
- CVE-url: https://ubuntu.com/security/CVE-2024-49950
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- CVE-url: https://ubuntu.com/security/CVE-2024-49883
- ext4: aovid use-after-free in ext4extinsert_extent()
- Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE-
url: https://ubuntu.com/security/CVE-2022-48960
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- CVE-url: https://ubuntu.com/security/CVE-2024-47745
- mm: call the securitymmapfile() LSM hook in remapfilepages()
- CVE-url: https://ubuntu.com/security/CVE-2024-49860
- ACPI: sysfs: validate return type of _STR method
- CVE-url: https://ubuntu.com/security/CVE-2024-49882
- ext4: fix double brelse() the buffer of the extents path
- CVE-url: https://ubuntu.com/security/CVE-2024-49995
- tipc: guard against string buffer overrun
- CVE-url: https://ubuntu.com/security/CVE-2024-47723
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE-
url: https://ubuntu.com/security/CVE-2022-48988
- memcg: fix possible use-after-free in memcgwriteevent_control()
- CVE-url: https://ubuntu.com/security/CVE-2024-50073
- tty: ngsm: Fix use-after-free in gsmcleanup_mux
- CVE-url: https://ubuntu.com/security/CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE-
url: https://ubuntu.com/security/CVE-2022-49029
- hwmon: (ibmpex) Fix possible UAF when ibmpexregisterbmc() fails
- Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) // CVE-
url: https://ubuntu.com/security/CVE-2022-48948
- usb: gadget: uvc: Prevent buffer overflow in setup handler
- CVE-url: https://ubuntu.com/security/CVE-2024-47698
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- CVE-url: https://ubuntu.com/security/CVE-2022-49026
- e100: Fix possible use after free in e100xmitprepare
- Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE-
url: https://ubuntu.com/security/CVE-2022-48967
- NFC: nci: Bounds check struct nfc_target arrays
- CVE-url: https://ubuntu.com/security/CVE-2024-47742
- firmware_loader: Block path traversal
- CVE-url: https://ubuntu.com/security/CVE-2024-50035
- ppp: fix pppasyncencode() illegal access
- CVE-url: https://ubuntu.com/security/CVE-2024-47757
- nilfs2: fix potential oob read in nilfsbtreecheck_delete()
- CVE-url: https://ubuntu.com/security/CVE-2024-49884
- ext4: avoid ext4error()'s caused by ENOMEM in the truncate path
- ext4: fix slab-use-after-free in ext4splitextentat()
- CVE-url: https://ubuntu.com/security/CVE-2022-49006
- tracing: Only have rmmod clear buffers that its events were active in
- tracing: Free buffers when a used dynamic event is removed
- CVE-url: https://ubuntu.com/security/CVE-2024-49903
- jfs: Fix uaf in dbFreeBits
- CVE-url: https://ubuntu.com/security/CVE-2024-47701
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- CVE-url: https://ubuntu.com/security/CVE-2024-49889
- ext4: avoid use-after-free in ext4extshow_leaf()
- CVE-url: https://ubuntu.com/security/CVE-2024-49900
- jfs: Fix uninit-value access of newea in eabuffer
- CVE-url: https://ubuntu.com/security/CVE-2024-47697
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- CVE-url: https://ubuntu.com/security/CVE-2022-48951
- ASoC: ops: Check bounds for second channel in sndsocputvolswsx()
- CVE-url: https://ubuntu.com/security/CVE-2024-43839
- bna: adjust 'name' buf size of bnatcb and bnaccb structures
- CVE-url: https://ubuntu.com/security/CVE-2024-47659
- smack: tcp: ipv4, fix incorrect labeling
- CVE-url: https://ubuntu.com/security/CVE-2024-47685
- netfilter: nfrejectipv6: fix nfrejectip6tcphdrput()
- CVE-url: https://ubuntu.com/security/CVE-2024-38602
- ax25: Fix reference count leak issues of ax25_dev
- CVE-url: https://ubuntu.com/security/CVE-2024-26641
- net: Fix unwanted sign extension in netdevstatsto_stats64()
- CVE-url: https://ubuntu.com/security/CVE-2024-42223
- media: dvb-frontends: tda10048: Fix integer overflow
- CVE-url: https://ubuntu.com/security/CVE-2021-3759
- memcg: enable accounting of ipc resources
- CVE-url: https://ubuntu.com/security/CVE-2024-38632
- vfio/pci: fix potential memory leak in vfiointxenable()
- CVE-url: https://ubuntu.com/security/CVE-2024-46840
- btrfs: clean up our handling of refs == 0 in snapshot delete
- CVE-url: https://ubuntu.com/security/CVE-2024-44954
- ALSA: line6: Fix racy access to midibuf
- CVE-url: https://ubuntu.com/security/CVE-2024-45003
- vfs: Don't evict inode under the inode lru traversing context
- CVE-url: https://ubuntu.com/security/CVE-2024-46841
- btrfs: don't BUGON on ENOMEM from btrfslookupextentinfo() in walkdownproc()
- CVE-url: https://ubuntu.com/security/CVE-2024-44950
- serial: sc16is7xx: fix invalid FIFO access with special register set
- CVE-url: https://ubuntu.com/security/CVE-2024-26812
- Revert "kernfs: do not account ino_ida allocations to memcg"
- Revert "gfp: add _GFPNOACCOUNT"
- memcg: only account kmem allocations marked as _GFPACCOUNT
- vfio: Introduce interface to flush virqfd inject workqueue
- vfio/pci: Create persistent INTx handler
- CVE-url: https://ubuntu.com/security/CVE-2023-52528
- usbnet/smsc75xx: silence uninitialized variable warning
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xxreadreg
- CVE-url: https://ubuntu.com/security/CVE-2024-42229
- crypto: aead,cipher - zeroize key buffer after use
- CVE-url: https://ubuntu.com/security/CVE-2024-42265
- References