CVE-2024-57801

En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/mlx5e: Omitir reglas de restauración de TC para vport rep sin indicador cargado Durante la descarga del controlador, se llama a unregister_netdev después de descargar vport rep. Por lo tanto, mlx5e_rep_priv ya está liberado al intentar obtener rpriv->netdev, o recorrer rpriv->tc_ht, lo que da como resultado un use-after-free. Por lo tanto, agregue la verificación para asegurarse de acceder a los datos de vport rep que aún están cargados.

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep without loaded flag During driver unload, unregister_netdev is called after unloading vport rep. So, the mlx5e_rep_priv is already freed while trying to get rpriv->netdev, or walk rpriv->tc_ht, which results in use-after-free. So add the checking to make sure access the data of vport rep which is still loaded.

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service or possibly execute arbitrary code. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.