Oracle Linux: CVE-2024-42310: ELSA-2024-12782: Unbreakable Enterprise kernel-container security update (IMPORTANT) (Multiple Advisories)

Oracle Linux: CVE-2024-42310: ELSA-2024-12782: Unbreakable Enterprise kernel-container security update (IMPORTANT) (Multiple Advisories)

Severity

5

CVSS

(AV:L/AC:L/Au:S/C:N/I:N/A:C)

Published

08/17/2024

Created

10/18/2024

Added

10/16/2024

Modified

01/23/2025

Description

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes In cdv_intel_lvds_get_modes(), the return value of drm_mode_duplicate() is assigned to mode, which will lead to a NULL pointer dereference on failure of drm_mode_duplicate(). Add a check to avoid npd. A null pointer dereference flaw was found in cdv_intel_lvds_get_modes in the Linux kernel. This issue may lead to a crash.

Solution(s)

• oracle-linux-upgrade-kernel-uek

References

• https://attackerkb.com/topics/cve-2024-42310
• CVE - 2024-42310
• ELSA-2024-12782
• ELSA-2024-12780
• ELSA-2024-12815
• ELSA-2024-12868