CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0CVE-2024-58068 – OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
https://notcve.org/view.php?id=CVE-2024-58068
06 Mar 2025 — In the Linux kernel, the following vulnerability has been resolved: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized If a driver calls dev_pm_opp_find_bw_ceil/floor() the retrieve bandwidth from the OPP table but the bandwidth table was not created because the interconnect properties were missing in the OPP consumer node, the kernel will crash with: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000004 ... pc : _read_bw+0x8/0x10 lr : _opp_table_find_key+0x9... • https://git.kernel.org/stable/c/add1dc094a7456d3c56782b7478940b6a550c7ed •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2024-58067 – clk: mmp: pxa1908-mpmu: Fix a NULL vs IS_ERR() check
https://notcve.org/view.php?id=CVE-2024-58067
06 Mar 2025 — In the Linux kernel, the following vulnerability has been resolved: clk: mmp: pxa1908-mpmu: Fix a NULL vs IS_ERR() check The devm_kzalloc() function returns NULL on error, not error pointers. Update the check to match. In the Linux kernel, the following vulnerability has been resolved: clk: mmp: pxa1908-mpmu: Fix a NULL vs IS_ERR() check The devm_kzalloc() function returns NULL on error, not error pointers. Update the check to match. • https://git.kernel.org/stable/c/ebac87cdd230685fc5245a61bde79c9100ac348a •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2024-58066 – clk: mmp: pxa1908-apbcp: Fix a NULL vs IS_ERR() check
https://notcve.org/view.php?id=CVE-2024-58066
06 Mar 2025 — In the Linux kernel, the following vulnerability has been resolved: clk: mmp: pxa1908-apbcp: Fix a NULL vs IS_ERR() check The devm_kzalloc() function doesn't return error pointers, it returns NULL on error. Update the check to match. In the Linux kernel, the following vulnerability has been resolved: clk: mmp: pxa1908-apbcp: Fix a NULL vs IS_ERR() check The devm_kzalloc() function doesn't return error pointers, it returns NULL on error. Update the check to match. • https://git.kernel.org/stable/c/a89233dbd4df521094caa0dbcd03338259f8ead6 •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2024-58065 – clk: mmp: pxa1908-apbc: Fix NULL vs IS_ERR() check
https://notcve.org/view.php?id=CVE-2024-58065
06 Mar 2025 — In the Linux kernel, the following vulnerability has been resolved: clk: mmp: pxa1908-apbc: Fix NULL vs IS_ERR() check The devm_kzalloc() function returns NULL on error, not error pointers. Fix the check. In the Linux kernel, the following vulnerability has been resolved: clk: mmp: pxa1908-apbc: Fix NULL vs IS_ERR() check The devm_kzalloc() function returns NULL on error, not error pointers. Fix the check. • https://git.kernel.org/stable/c/51ce5591927389985451c0875f576701664f0a38 •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2024-58064 – wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap()
https://notcve.org/view.php?id=CVE-2024-58064
06 Mar 2025 — In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap() kunit_kzalloc() may return NULL, dereferencing it without NULL check may lead to NULL dereference. Add a NULL check for ies. In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap() kunit_kzalloc() may return NULL, dereferencing it without NULL chec... • https://git.kernel.org/stable/c/45d43937a44c806b8649323b8f5d9f42ae838b0e •
CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0CVE-2024-58063 – wifi: rtlwifi: fix memory leaks and invalid access at probe error path
https://notcve.org/view.php?id=CVE-2024-58063
06 Mar 2025 — In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: fix memory leaks and invalid access at probe error path Deinitialize at reverse order when probe fails. When init_sw_vars fails, rtl_deinit_core should not be called, specially now that it destroys the rtl_wq workqueue. And call rtl_pci_deinit and deinit_sw_vars, otherwise, memory will be leaked. Remove pci_set_drvdata call as it will already be cleaned up by the core driver code and could lead to memory leaks too. cf. commit... • https://git.kernel.org/stable/c/0c8173385e549f95cd80c3fff5aab87b4f881d8d •
CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 0CVE-2024-58062 – wifi: iwlwifi: mvm: avoid NULL pointer dereference
https://notcve.org/view.php?id=CVE-2024-58062
06 Mar 2025 — In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: avoid NULL pointer dereference When iterating over the links of a vif, we need to make sure that the pointer is valid (in other words - that the link exists) before dereferncing it. Use for_each_vif_active_link that also does the check. In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: avoid NULL pointer dereference When iterating over the links of a vif, we need to make sure that th... • https://git.kernel.org/stable/c/2b7ee1a10a72ef8f3df621133ac04e80e8214037 •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2024-58061 – wifi: mac80211: prohibit deactivating all links
https://notcve.org/view.php?id=CVE-2024-58061
06 Mar 2025 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: prohibit deactivating all links In the internal API this calls this is a WARN_ON, but that should remain since internally we want to know about bugs that may cause this. Prevent deactivating all links in the debugfs write directly. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: prohibit deactivating all links In the internal API this calls this is a WARN_ON, but that should remain since i... • https://git.kernel.org/stable/c/3d901102922723eedce6ef10ebd03315a7abb8a5 •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2024-58060 – bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing
https://notcve.org/view.php?id=CVE-2024-58060
06 Mar 2025 — In the Linux kernel, the following vulnerability has been resolved: bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing There is a UAF report in the bpf_struct_ops when CONFIG_MODULES=n. In particular, the report is on tcp_congestion_ops that has a "struct module *owner" member. For struct_ops that has a "struct module *owner" member, it can be extended either by the regular kernel module or by the bpf_struct_ops. bpf_try_module_get() will be used to do the refcounting ... • https://git.kernel.org/stable/c/1611603537a4b88cec7993f32b70c03113801a46 • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2024-58059 – media: uvcvideo: Fix deadlock during uvc_probe
https://notcve.org/view.php?id=CVE-2024-58059
06 Mar 2025 — In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix deadlock during uvc_probe If uvc_probe() fails, it can end up calling uvc_status_unregister() before uvc_status_init() is called. Fix this by checking if dev->status is NULL or not in uvc_status_unregister(). In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix deadlock during uvc_probe If uvc_probe() fails, it can end up calling uvc_status_unregister() before uvc_status_init() is cal... • https://git.kernel.org/stable/c/c5fe3ed618f995b4a903e574bf2e993cdebeefca •