https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:10:08 +0000 https://vulnerability.circl.lu/vuln/cve-2023-52510 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ieee802154: ca8210: Fix a potential UAF in ca8210_probe</p> <p>If of_clk_add_provider() fails in ca8210_register_ext_clock(), it calls clk_unregister() to release priv-&gt;clk and returns an error. However, the caller ca8210_probe() then calls ca8210_remove(), where priv-&gt;clk is freed again in ca8210_unregister_ext_clock(). In this case, a use-after-free may happen in the second time we call clk_unregister().</p> <p>Fix this by removing the first clk_unregister(). Also, priv-&gt;clk could be an error code on failure of clk_register_fixed_rate(). Use IS_ERR_OR_NULL to catch this case in ca8210_unregister_ext_clock().</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ieee802154: ca8210: Fix a potential UAF in ca8210_probe</p> <p>If of_clk_add_provider() fails in ca8210_register_ext_clock(), it calls clk_unregister() to release priv-&gt;clk and returns an error. However, the caller ca8210_probe() then calls ca8210_remove(), where priv-&gt;clk is freed again in ca8210_unregister_ext_clock(). In this case, a use-after-free may happen in the second time we call clk_unregister().</p> <p>Fix this by removing the first clk_unregister(). Also, priv-&gt;clk could be an error code on failure of clk_register_fixed_rate(). Use IS_ERR_OR_NULL to catch this case in ca8210_unregister_ext_clock().</p> https://vulnerability.circl.lu/vuln/cve-2023-52510 https://vulnerability.circl.lu/vuln/usn-7069-1 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:Pro:18.04:LTS: linux, Ubuntu:Pro:18.04:LTS: linux-aws, Ubuntu:Pro:18.04:LTS: linux-azure-4.15, Ubuntu:Pro:18.04:LTS: linux-gcp-4.15, Ubuntu:Pro:18.04:LTS: linux-kvm, Ubuntu:Pro:18.04:LTS: linux-oracle</p> <p>Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - CPU frequency scaling framework; - HW tracing; - ISDN/mISDN subsystem; - Media drivers; - Network drivers; - NVME drivers; - S/390 drivers; - SCSI drivers; - USB subsystem; - VFIO drivers; - Watchdog drivers; - JFS file system; - IRQ subsystem; - Core kernel; - Memory management; - Amateur Radio drivers; - IPv4 networking; - IPv6 networking; - IUCV driver; - Network traffic control; - TIPC protocol; - XFRM subsystem; - Integrity Measurement Architecture(IMA) framework; - SoC Audio for Freescale CPUs drivers; - USB sound devices; (CVE-2024-36971, CVE-2024-42271, CVE-2024-38630, CVE-2024-38602, CVE-2024-42223, CVE-2024-44940, CVE-2023-52528, CVE-2024-41097, CVE-2024-27051, CVE-2024-42157, CVE-2024-46673, CVE-2024-39494, CVE-2024-42089, CVE-2024-41073, CVE-2024-26810, CVE-2024-26960, CVE-2024-38611, CVE-2024-31076, CVE-2024-26754, CVE-2023-52510, CVE-2024-40941, CVE-2024-45016, CVE-2024-38627, CVE-2024-38621, CVE-2024-39487, CVE-2024-27436, CVE-2024-40901, CVE-2024-26812, CVE-2024-42244, CVE-2024-42229, CVE-2024-43858, CVE-2024-42280, CVE-2024-26641, CVE-2024-42284, CVE-2024-26602)</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:Pro:16.04:LTS: linux-oracle, Ubuntu:Pro:18.04:LTS: linux, Ubuntu:Pro:18.04:LTS: linux-aws, Ubuntu:Pro:18.04:LTS: linux-azure-4.15, Ubuntu:Pro:18.04:LTS: linux-gcp-4.15, Ubuntu:Pro:18.04:LTS: linux-kvm, Ubuntu:Pro:18.04:LTS: linux-oracle</p> <p>Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - CPU frequency scaling framework; - HW tracing; - ISDN/mISDN subsystem; - Media drivers; - Network drivers; - NVME drivers; - S/390 drivers; - SCSI drivers; - USB subsystem; - VFIO drivers; - Watchdog drivers; - JFS file system; - IRQ subsystem; - Core kernel; - Memory management; - Amateur Radio drivers; - IPv4 networking; - IPv6 networking; - IUCV driver; - Network traffic control; - TIPC protocol; - XFRM subsystem; - Integrity Measurement Architecture(IMA) framework; - SoC Audio for Freescale CPUs drivers; - USB sound devices; (CVE-2024-36971, CVE-2024-42271, CVE-2024-38630, CVE-2024-38602, CVE-2024-42223, CVE-2024-44940, CVE-2023-52528, CVE-2024-41097, CVE-2024-27051, CVE-2024-42157, CVE-2024-46673, CVE-2024-39494, CVE-2024-42089, CVE-2024-41073, CVE-2024-26810, CVE-2024-26960, CVE-2024-38611, CVE-2024-31076, CVE-2024-26754, CVE-2023-52510, CVE-2024-40941, CVE-2024-45016, CVE-2024-38627, CVE-2024-38621, CVE-2024-39487, CVE-2024-27436, CVE-2024-40901, CVE-2024-26812, CVE-2024-42244, CVE-2024-42229, CVE-2024-43858, CVE-2024-42280, CVE-2024-26641, CVE-2024-42284, CVE-2024-26602)</p> https://vulnerability.circl.lu/vuln/usn-7069-1