CVE-2024-36956

En el kernel de Linux, se resolvió la siguiente vulnerabilidad: Thermal/debugfs: libera toda la memoria de depuración de la zona térmica al eliminar la zona. Debido a que Thermal_debug_tz_remove() no libera toda la memoria asignada para el diagnóstico de la zona térmica, parte de esa memoria se vuelve inalcanzable después de liberar la zona térmica. objeto struct Thermal_debugfs de la zona. Solucione esto haciendo que Thermal_debug_tz_remove() libere toda la memoria en cuestión. CC :6.8+ # 6.8+

In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Free all thermal zone debug memory on zone removal Because thermal_debug_tz_remove() does not free all memory allocated for thermal zone diagnostics, some of that memory becomes unreachable after freeing the thermal zone's struct thermal_debugfs object. Address this by making thermal_debug_tz_remove() free all of the memory in question. Cc :6.8+ <stable@vger.kernel.org> # 6.8+

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.