In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix deadlock when enabling ASPM A last minute revert in 6.7-final introduced a potential deadlock when enabling ASPM during probe of Qualcomm PCIe controllers as reported by lockdep: ============================================ WARNING: possible recursive locking detected 6.7.0 #40 Not tainted -------------------------------------------- kworker/u16:5/90 is trying to acquire lock: ffffacfa78ced000 (pci_bus_sem){++++}-{3:3}, at: pcie_aspm_pm_state_change+0x58/0xdc but task is already holding lock: ffffacfa78ced000 (pci_bus_sem){++++}-{3:3}, at: pci_walk_bus+0x34/0xbc other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(pci_bus_sem); lock(pci_bus_sem); *** DEADLOCK *** Call trace: print_deadlock_bug+0x25c/0x348 __lock_acquire+0x10a4/0x2064 lock_acquire+0x1e8/0x318 down_read+0x60/0x184 pcie_aspm_pm_state_change+0x58/0xdc pci_set_full_power_state+0xa8/0x114 pci_set_power_state+0xc4/0x120 qcom_pcie_enable_aspm+0x1c/0x3c [pcie_qcom] pci_walk_bus+0x64/0xbc qcom_pcie_host_post_init_2_7_0+0x28/0x34 [pcie_qcom] The deadlock can easily be reproduced on machines like the Lenovo ThinkPad X13s by adding a delay to increase the race window during asynchronous probe where another thread can take a write lock. Add a new pci_set_power_state_locked() and associated helper functions that can be called with the PCI bus semaphore held to avoid taking the read lock twice.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9315 advisory.

    - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56254] {CVE-2024-43892}
    - bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Michal Schmidt) [RHEL-57259] {CVE-2024-44984}
    - dma: fix call order in dmam_free_coherent (Eder Zulian) [RHEL-54751] {CVE-2024-43856}
    - dmaengine: idxd: Avoid unnecessary destruction of file_ida (Jerry Snitselaar) [RHEL-44508]     {CVE-2024-38629}
    - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55074] {CVE-2024-42284}
    - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57119] {CVE-2024-44970}
    - net/mlx5e: Fix CT entry update leaks of modify header context (Michal Schmidt) [RHEL-55628]     {CVE-2024-43864}
    - net/mlx5: Always drain health in shutdown callback (Michal Schmidt) [RHEL-55616] {CVE-2024-43866}
    - net/mlx5: Fix missing lock on sync reset reload (Michal Schmidt) [RHEL-55121] {CVE-2024-42268}
    - ionic: fix kernel panic in XDP_TX action (CKI Backport Bot) [RHEL-47730] {CVE-2024-40907}
    - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (Izabela Bakollari) [RHEL-44037]     {CVE-2024-38586}
    - KVM: s390: fix validity interception issue when gisa is switched off (CKI Backport Bot) [RHEL-57197]     {CVE-2024-45005}
    - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Jose Ignacio Tornos     Martinez) [RHEL-55579] {CVE-2024-43879}
    - wifi: mac80211: fix NULL dereference at band check in starting tx ba session (Jose Ignacio Tornos     Martinez) [RHEL-56191] {CVE-2024-43911}
    - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (Jose Ignacio Tornos Martinez)     [RHEL-54805] {CVE-2024-43842}
    - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51559] {CVE-2024-42079}
    - x86/mm: Fix pti_clone_pgtable() alignment assumption (Rafael Aquini) [RHEL-57170] {CVE-2024-44965}
    - bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (CKI Backport     Bot) [RHEL-47822] {CVE-2024-40919}
    - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44369]     {CVE-2024-36270}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-695 advisory.

    2024-11-13: CVE-2024-35849 was added to this advisory.

    2024-09-12: CVE-2024-35857 was added to this advisory.

    2024-09-12: CVE-2024-35847 was added to this advisory.

    2024-08-14: CVE-2024-35995 was added to this advisory.

    2024-08-14: CVE-2024-26605 was added to this advisory.

    2024-08-14: CVE-2024-27395 was added to this advisory.

    2024-08-14: CVE-2024-26924 was added to this advisory.

    2024-08-14: CVE-2024-26939 was added to this advisory.

    In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix deadlock when enabling     ASPM A last minute revert in 6.7-final introduced a potential deadlock when enabling ASPM during probe of     Qualcomm PCIe controllers as reported by lockdep (CVE-2024-26605)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nft_set_pipapo: do not free live element (CVE-2024-26924)

    In the Linux kernel, the following vulnerability has been resolved: drm/i915/vma: Fix UAF on destroy     against retire race Object debugging tools were sporadically reporting illegal attempts to free a still     active i915 VMA object when parking a GT believed to be idle. (CVE-2024-26939)

    In the Linux kernel, the following vulnerability has been resolved:

    mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled (CVE-2024-26987)

    In the Linux kernel, the following vulnerability has been resolved:

    arm64: hibernate: Fix level3 translation fault in swsusp_save() (CVE-2024-26989)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: x86/pmu: Disable support for adaptive PEBS (CVE-2024-26992)

    In the Linux kernel, the following vulnerability has been resolved:

    tun: limit printing rate when illegal packet received by tun dev (CVE-2024-27013)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: flowtable: incorrect pppoe tuple (CVE-2024-27015)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: flowtable: validate pppoe header (CVE-2024-27016)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: br_netfilter: skip conntrack input hook for promisc packets (CVE-2024-27018)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020)

    In the Linux kernel, the following vulnerability has been resolved:

    net: openvswitch: Fix Use-After-Free in ovs_ct_exit (CVE-2024-27395)

    In the Linux kernel, the following vulnerability has been resolved:

    irqchip/gic-v3-its: Prevent double free on error (CVE-2024-35847)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (CVE-2024-35849)

    In the Linux kernel, the following vulnerability has been resolved:

    icmp: prevent possible NULL dereferences from icmp_build_probe() (CVE-2024-35857)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: CPPC: Use access_width over bit_width for system memory accesses (CVE-2024-35995)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-639 advisory.

    2024-07-03: CVE-2024-26605 was added to this advisory.

    2024-07-03: CVE-2024-35995 was added to this advisory.

    In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix deadlock when enabling     ASPM A last minute revert in 6.7-final introduced a potential deadlock when enabling ASPM during probe of     Qualcomm PCIe controllers as reported by lockdep (CVE-2024-26605)

    In the Linux kernel, the following vulnerability has been resolved: drm/i915/vma: Fix UAF on destroy     against retire race Object debugging tools were sporadically reporting illegal attempts to free a still     active i915 VMA object when parking a GT believed to be idle. (CVE-2024-26939)

    In the Linux kernel, the following vulnerability has been resolved:

    ACPI: CPPC: Use access_width over bit_width for system memory accesses (CVE-2024-35995)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5680 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5680-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     May 06, 2024                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2024-26605 CVE-2024-26817 CVE-2024-26922 CVE-2024-26923                      CVE-2024-26924 CVE-2024-26925 CVE-2024-26926 CVE-2024-26936                      CVE-2024-26939 CVE-2024-26980 CVE-2024-26981 CVE-2024-26983                      CVE-2024-26984 CVE-2024-26987 CVE-2024-26988 CVE-2024-26989                      CVE-2024-26992 CVE-2024-26993 CVE-2024-26994 CVE-2024-26996                      CVE-2024-26997 CVE-2024-26999 CVE-2024-27000 CVE-2024-27001                      CVE-2024-27002 CVE-2024-27003 CVE-2024-27004 CVE-2024-27008                      CVE-2024-27009 CVE-2024-27013 CVE-2024-27014 CVE-2024-27015                      CVE-2024-27016 CVE-2024-27018 CVE-2024-27019 CVE-2024-27020                      CVE-2024-27022

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (bookworm), these problems have been fixed in     version 6.1.90-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
211575	Oracle Linux 9 : kernel (ELSA-2024-9315)	Nessus	Oracle Linux Local Security Checks	high
210815	RHEL 9 : kernel (RHSA-2024:9315)	Nessus	Red Hat Local Security Checks	high
205098	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-695)	Nessus	Amazon Linux Local Security Checks	high
200261	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-639)	Nessus	Amazon Linux Local Security Checks	medium
195024	Debian dsa-5680 : affs-modules-6.1.0-21-4kc-malta-di - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2024-26605

medium

Tenable Plugins

high

high

high

medium

high