CVSS: -EPSS: 0%CPEs: 2EXPL: 0CVE-2024-41029 – nvmem: core: limit cell sysfs permissions to main attribute ones
https://notcve.org/view.php?id=CVE-2024-41029
In the Linux kernel, the following vulnerability has been resolved: nvmem: core: limit cell sysfs permissions to main attribute ones The cell sysfs attribute should not provide more access to the nvmem data than the main attribute itself. For example if nvme_config::root_only was set, the cell attribute would still provide read access to everybody. Mask out permissions not available on the main attribute. • https://git.kernel.org/stable/c/0331c611949fffdf486652450901a4dc52bc5cca https://git.kernel.org/stable/c/aa066afaaac32caf2160d58d4e3010ee04421c62 https://git.kernel.org/stable/c/6bef98bafd82903a8d461463f9594f19f1fd6a85 •
CVSS: -EPSS: 0%CPEs: 4EXPL: 0CVE-2024-41028 – platform/x86: toshiba_acpi: Fix array out-of-bounds access
https://notcve.org/view.php?id=CVE-2024-41028
In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_acpi: Fix array out-of-bounds access In order to use toshiba_dmi_quirks[] together with the standard DMI matching functions, it must be terminated by a empty entry. Since this entry is missing, an array out-of-bounds access occurs every time the quirk list is processed. Fix this by adding the terminating empty entry. • https://git.kernel.org/stable/c/3cb1f40dfdc3b9f5449076c96b4e2523139f5cd0 https://git.kernel.org/stable/c/e030aa6c972641cb069086a8c7a0f747653e472a https://git.kernel.org/stable/c/639868f1cb87b683cf830353bbee0c4078202313 https://git.kernel.org/stable/c/0d71da43d6b7916d36cf1953d793da80433c50bf https://git.kernel.org/stable/c/b6e02c6b0377d4339986e07aeb696c632cd392aa •
CVSS: -EPSS: 0%CPEs: 5EXPL: 0CVE-2024-41027 – Fix userfaultfd_api to return EINVAL as expected
https://notcve.org/view.php?id=CVE-2024-41027
In the Linux kernel, the following vulnerability has been resolved: Fix userfaultfd_api to return EINVAL as expected Currently if we request a feature that is not set in the Kernel config we fail silently and return all the available features. • https://git.kernel.org/stable/c/e06f1e1dd4998ffc9da37f580703b55a93fc4de4 https://git.kernel.org/stable/c/519547760f16eae7803d2658d9524bc5ba7a20a7 https://git.kernel.org/stable/c/14875fd5f9bcf60ac5518c63bfb676ade44aa7c6 https://git.kernel.org/stable/c/cd94cac4069a763ab5206be2c64c9a8beae590ba https://git.kernel.org/stable/c/8111f902b7c95d75fc80c7e577f5045886c6b384 https://git.kernel.org/stable/c/1723f04caacb32cadc4e063725d836a0c4450694 •
CVSS: -EPSS: 0%CPEs: 2EXPL: 0CVE-2024-41026 – mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length
https://notcve.org/view.php?id=CVE-2024-41026
In the Linux kernel, the following vulnerability has been resolved: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length No check is done on the size of the data to be transmiited. • https://git.kernel.org/stable/c/ed01d210fd910f7fa7933638df14ffb8d4aac2a9 https://git.kernel.org/stable/c/c561c4ecce712f94b442db5960e281f13b28df2e https://git.kernel.org/stable/c/16198eef11c1929374381d7f6271b4bf6aa44615 •
CVSS: -EPSS: 0%CPEs: 3EXPL: 0CVE-2024-41025 – misc: fastrpc: Fix memory leak in audio daemon attach operation
https://notcve.org/view.php?id=CVE-2024-41025
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix memory leak in audio daemon attach operation Audio PD daemon send the name as part of the init IOCTL call. • https://git.kernel.org/stable/c/0871561055e666da421d779397efcc1e5e964cab https://git.kernel.org/stable/c/8b8b82dcf393ceaca8c88939338fd4c30b5b11b2 https://git.kernel.org/stable/c/dbf4c31c9b039fd9734da156036492a2a7f78f64 https://git.kernel.org/stable/c/ad0bd973a033003ca578c42a760d1dc77aeea15e •