CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HIn the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() In rb_allocate_cpu_buffer(), bpage->order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGE_SIZE if when freed: free_buffer_page() relies on this value. Align the value with the actual allocation size (buffer::subbuf_order). A flaw was found in the Linux kernel's ring-buffer component. The `rb_allocate_cpu_buffer()` function failed to initialize the `bpage->order` value, leaving it as zero. This uninitialized value is later used by `free_buffer_page()` when deallocating ring-buffers with sub-buffers larger than a page size. An attacker could potentially exploit this to cause incorrect memory deallocation, leading to system instability or a denial of service (DoS).
Multiple vulnerabilities have been discovered in the Linux kernel of Debian. These vulnerabilities allow for privilege escalation, data compromise, and denial of service. The affected Debian versions are prior to 6.12.10…