openEuler 22.03 LTS update for kernel



Risk Low
Patch available YES
Number of vulnerabilities 16
CVE-ID CVE-2022-48655
CVE-2023-52628
CVE-2023-52642
CVE-2023-6270
CVE-2024-26671
CVE-2024-26688
CVE-2024-26792
CVE-2024-26817
CVE-2024-26839
CVE-2024-26840
CVE-2024-26843
CVE-2024-26855
CVE-2024-26875
CVE-2024-26878
CVE-2024-26893
CVE-2024-26898
CWE-ID CWE-125
CWE-121
CWE-269
CWE-416
CWE-119
CWE-476
CWE-415
CWE-190
CWE-401
Exploitation vector Local
Public exploit N/A
Vulnerable software
 openEuler
Operating systems & Components / Operating system

bpftool-debuginfo
Operating systems & Components / Operating system package or component

kernel-tools
Operating systems & Components / Operating system package or component

kernel-tools-debuginfo
Operating systems & Components / Operating system package or component

bpftool
Operating systems & Components / Operating system package or component

perf
Operating systems & Components / Operating system package or component

kernel-source
Operating systems & Components / Operating system package or component

kernel-devel
Operating systems & Components / Operating system package or component

perf-debuginfo
Operating systems & Components / Operating system package or component

kernel-headers
Operating systems & Components / Operating system package or component

kernel-tools-devel
Operating systems & Components / Operating system package or component

kernel-debugsource
Operating systems & Components / Operating system package or component

kernel-debuginfo
Operating systems & Components / Operating system package or component

python3-perf-debuginfo
Operating systems & Components / Operating system package or component

python3-perf
Operating systems & Components / Operating system package or component

kernel
Operating systems & Components / Operating system package or component

Vendor openEuler

Security Bulletin

This security bulletin contains information about 16 vulnerabilities.

1) Out-of-bounds read

EUVDB-ID: #VU91400

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48655

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to an out-of-bounds read error within the scmi_domain_reset() function in drivers/firmware/arm_scmi/reset.c. A local user can execute arbitrary code.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Stack-based buffer overflow

EUVDB-ID: #VU87901

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52628

CWE-ID: CWE-121 - Stack-based buffer overflow

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the nft_exthdr_sctp_eval(), nft_exthdr_tcp_eval(), and nft_exthdr_ipv6_eval() functions. A local user can pass specially crafted data to the system, trigger a stack-based buffer overflow and execute arbitrary code with elevated privileges.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Improper privilege management

EUVDB-ID: #VU93736

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52642

CWE-ID: CWE-269 - Improper Privilege Management

Exploit availability: No

Description

The vulnerability allows a local user to read and manipulate data.

The vulnerability exists due to improperly imposed permissions within the lirc_dev_exit() and rc_dev_get_from_fd() functions in drivers/media/rc/lirc_dev.c, within the lirc_prog_attach(), lirc_prog_detach() and lirc_prog_query() functions in drivers/media/rc/bpf-lirc.c. A local user can read and manipulate data.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Use-after-free

EUVDB-ID: #VU91599

Risk: Low

CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-6270

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the aoecmd_cfg_pkts() function in the ATA over Ethernet (AoE) driver. A local user can trigger a use-after-free error and escalate privileges on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Buffer overflow

EUVDB-ID: #VU92977

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26671

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the blk_mq_mark_tag_wait() function in block/blk-mq.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) NULL pointer dereference

EUVDB-ID: #VU90603

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26688

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the hugetlbfs_parse_param() function in fs/hugetlbfs/inode.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Double free

EUVDB-ID: #VU90897

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26792

CWE-ID: CWE-415 - Double Free

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a double free error within the create_pending_snapshot() function in fs/btrfs/transaction.c, within the create_subvol() function in fs/btrfs/ioctl.c, within the btrfs_free_fs_info(), btrfs_init_fs_root(), btrfs_put_root() and btrfs_get_fs_root() functions in fs/btrfs/disk-io.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Integer overflow

EUVDB-ID: #VU88544

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26817

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to integer overflow within the kfd_ioctl_get_process_apertures_new() function in drivers/gpu/drm/amd/amdkfd/kfd_chardev.c. A local user can trigger an integer overflow and execute arbitrary code with elevated privileges.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Memory leak

EUVDB-ID: #VU90471

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26839

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the init_credit_return() function in drivers/infiniband/hw/hfi1/pio.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Memory leak

EUVDB-ID: #VU90005

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26840

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the kmem_cache_free() and cachefiles_daemon_unbind() functions in fs/cachefiles/bind.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Buffer overflow

EUVDB-ID: #VU93404

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26843

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the riscv_enable_runtime_services() function in drivers/firmware/efi/riscv-runtime.c, within the arm_enable_runtime_services() function in drivers/firmware/efi/arm-runtime.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) NULL pointer dereference

EUVDB-ID: #VU90576

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26855

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the ice_bridge_setlink() function in drivers/net/ethernet/intel/ice/ice_main.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Use-after-free

EUVDB-ID: #VU90193

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26875

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the pvr2_context_exit() function in drivers/media/usb/pvrusb2/pvrusb2-context.c. A local user can escalate privileges on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) NULL pointer dereference

EUVDB-ID: #VU90574

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26878

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the dquot_mark_dquot_dirty(), __dquot_alloc_space(), dquot_alloc_inode(), EXPORT_SYMBOL(), dquot_claim_space_nodirty(), dquot_reclaim_space_nodirty(), __dquot_free_space(), dquot_free_inode() and __dquot_transfer() functions in fs/quota/dquot.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) NULL pointer dereference

EUVDB-ID: #VU90577

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26893

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the smc_chan_free() function in drivers/firmware/arm_scmi/smc.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Use-after-free

EUVDB-ID: #VU90197

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26898

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the tx() function in drivers/block/aoe/aoenet.c, within the aoecmd_cfg_pkts() function in drivers/block/aoe/aoecmd.c. A local user can escalate privileges on the system.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 22.03 LTS

bpftool-debuginfo: before 5.10.0-60.137.0.164

kernel-tools: before 5.10.0-60.137.0.164

kernel-tools-debuginfo: before 5.10.0-60.137.0.164

bpftool: before 5.10.0-60.137.0.164

perf: before 5.10.0-60.137.0.164

kernel-source: before 5.10.0-60.137.0.164

kernel-devel: before 5.10.0-60.137.0.164

perf-debuginfo: before 5.10.0-60.137.0.164

kernel-headers: before 5.10.0-60.137.0.164

kernel-tools-devel: before 5.10.0-60.137.0.164

kernel-debugsource: before 5.10.0-60.137.0.164

kernel-debuginfo: before 5.10.0-60.137.0.164

python3-perf-debuginfo: before 5.10.0-60.137.0.164

python3-perf: before 5.10.0-60.137.0.164

kernel: before 5.10.0-60.137.0.164

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1619


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###