Debian
Page 9 of 100 — Debian CVEs from a corpus of 10223, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-5629 | Medium | 4.7 | 2024-06-05 | An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception whic… |
CVE-2024-5197 | Critical | 9.1 | 2024-06-03 | There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may resul… |
CVE-2024-36964 | High | 8.8 | 2024-06-03 | In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bit… |
CVE-2024-36960 | High | 7.1 | 2024-06-03 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the dr… |
CVE-2024-36957 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: avoid off-by-one read from userspace We try to access count + 1 byte from u… |
CVE-2024-36954 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix a possible memleak in tipc_buf_append __skb_linearize() doesn't free the skb wh… |
CVE-2024-36953 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() vgic_v2_parse_attr()… |
CVE-2024-36950 | Medium | 4.4 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: mask bus reset interrupts between ISR and bottom half In the FireWire OHC… |
CVE-2024-36946 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: phonet: fix rtm_phonet_notify() skb allocation fill_route() stores three components in th… |
CVE-2024-36941 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: don't free NULL coalescing rule If the parsing fails, we can dereference a… |
CVE-2024-36940 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocate… |
CVE-2024-36939 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: nfs: Handle error of rpc_proc_register() in nfs_net_init(). syzkaller reported a warning… |
CVE-2024-36934 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: bna: ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized kernel… |
CVE-2024-36933 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). syzbo… |
CVE-2024-36929 | High | 7.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net: core: reject skb_copy(_expand) for fraglist GSO skbs SKB_GSO_FRAGLIST skbs must not… |
CVE-2024-36919 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload The session reso… |
CVE-2024-36916 | High | 7.1 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: blk-iocost: avoid out of bounds shift UBSAN catches undefined behavior in blk-iocost, whe… |
CVE-2024-36913 | Critical | 9.3 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails In CoCo VMs it is possible… |
CVE-2024-36905 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets TCP_SYN_RECV state is really… |
CVE-2024-36904 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). Anderson Nascimento reported a use… |
CVE-2024-36889 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_nxt is properly initialized on connect Christoph reported a splat hinti… |
CVE-2024-36886 | Critical | 9.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path Sam Page (sam4k) working with Trend Micro Zero Day Initiative… |
CVE-2024-36883 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: net: fix out-of-bounds access in ops_init net_alloc_generic is called by net_alloc, which… |
CVE-2023-52882 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change While PLL CPUX clock rate ch… |
CVE-2024-36020 | High | 7.8 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: i40e: fix vf may be used uninitialized in this function warning To fix the regression int… |
CVE-2024-36017 | Medium | 5.5 | 2024-05-30 | In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation Each attribute inside a… |
CVE-2023-52880 | High | 7.8 | 2024-05-24 | In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Any unprivileged user can att… |
CVE-2024-4453 | High | 7.8 | 2024-05-22 | GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… |
CVE-2021-47489 | High | 7.8 | 2024-05-22 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix even more out of bound writes from debugfs CVE-2021-42327 was fixed by: … |
CVE-2023-52812 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd: check num of link levels when update pcie param In SR-IOV environment, the value… |
CVE-2023-52757 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when releasing mids All release_mid() callers seem to… |
CVE-2023-52752 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() Skip SMB sessions that… |
CVE-2021-47247 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free of encap entry in neigh update handler Function mlx5e_rep_n… |
CVE-2024-36007 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix warning during rehash As previously explained, the rehash d… |
CVE-2024-36006 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage Both the function that migrates al… |
CVE-2024-36005 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: honor table dormant flag from netdev release event path Check for t… |
CVE-2024-36004 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue Issue reported by customer during SRIO… |
CVE-2024-35996 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: cpu: Re-enable CPU mitigations by default for !X86 architectures Rename x86's to CPU_MITI… |
CVE-2024-35988 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: riscv: Fix TASK_SIZE on 64-bit NOMMU On NOMMU, userspace memory can come from anywhere in… |
CVE-2024-35973 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: geneve: fix header validation in geneve[6]_xmit_skb syzbot is able to trigger an uninit-v… |
CVE-2024-35969 | High | 8.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Although ipv6_get_ifad… |
CVE-2024-35967 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix not validating setsockopt user input syzbot reported sco_sock_setsock… |
CVE-2024-35962 | High | 7.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replac… |
CVE-2024-35960 | Critical | 9.1 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Properly link new fs rules into the tree Previously, add_rule_fg would only add… |
CVE-2024-35958 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: ena: Fix incorrect descriptor free behavior ENA has two types of TX queues: - queues… |
CVE-2024-35955 | High | 8.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix possible use-after-free issue on kprobe registration When unloading a module… |
CVE-2024-35950 | High | 7.8 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/client: Fully protect modes[] with dev->mode_config.mutex The modes[] array contains… |
CVE-2024-35947 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: dyndbg: fix old BUG_ON in >control parser Fix a BUG_ON from 2009. Even if it looks "unre… |
CVE-2024-35944 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() Syzkaller hit 'WARNING in dg… |
CVE-2024-35940 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: pstore/zone: Add a null pointer check to the psz_kmsg_read kasprintf() returns a pointer… |
CVE-2024-35936 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() The unhandled case i… |
CVE-2024-35935 | Low | 3.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: btrfs: send: handle path ref underflow in header iterate_inode_ref() Change BUG_ON to pro… |
CVE-2024-35934 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() Many syzbot reports show… |
CVE-2024-35933 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Fix null ptr deref in btintel_read_version If hci_cmd_sync_complete()… |
CVE-2024-35930 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() The call to lpfc_sli4_resume_rp… |
CVE-2024-35925 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: block: prevent division by zero in blk_rq_stat_sum() The expression dst->nr_samples + src… |
CVE-2024-35922 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: fbmon: prevent division by zero in fb_videomode_from_videomode() The expression htotal *… |
CVE-2023-52699 | Medium | 5.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sb_bread() with pointers_lock held syzbot is reporting sleep in atomic c… |
CVE-2024-35915 | High | 8.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet syzbot reported the following… |
CVE-2024-35910 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: tcp: properly terminate timers for kernel sockets We had various syzbot reports about tcp… |
CVE-2024-35905 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protecti… |
CVE-2024-35902 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp->cp_conn would pro… |
CVE-2024-35900 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject new basechain after table flag update When dormant flag is t… |
CVE-2024-35899 | High | 7.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: flush pending destroy work before exit_net release Similar to 2c9f0… |
CVE-2024-35898 | High | 7.0 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft_unregiste… |
CVE-2024-35897 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: discard table flag update with pending basechain deletion Hook unre… |
CVE-2024-35896 | High | 7.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing… |
CVE-2024-35895 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Prevent lock inversion deadlock in map delete elem syzkaller started using… |
CVE-2024-35893 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbmod: prevent kernel-infoleak syzbot found that tcf_skbmod_dump() was co… |
CVE-2024-35888 | High | 7.3 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspan_base_hdr is present in skb->head syzbot reported a problem in ip… |
CVE-2024-35886 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix infinite recursion in fib6_dump_done(). syzkaller reported infinite recursive c… |
CVE-2024-35884 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: udp: do not accept non-tunnel GSO skbs landing in a tunnel When rx-udp-gro-forwarding is… |
CVE-2024-35879 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: of: dynamic: Synchronize of_changeset_destroy() with the devlink removals In the followin… |
CVE-2024-35877 | Medium | 5.5 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: fix VM_PAT handling in COW mappings PAT handling won't do the right thing in… |
CVE-2024-35871 | High | 7.1 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: riscv: process: Fix kernel gp leakage childregs represents the registers which are active… |
CVE-2024-35867 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_stats_proc_show() Skip sessions that are being tea… |
CVE-2024-35866 | High | 7.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_dump_full_key() Skip sessions that are being teare… |
CVE-2024-35854 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash The rehash delayed wo… |
CVE-2024-35853 | Medium | 6.4 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash The rehash delayed work migrates… |
CVE-2024-35849 | High | 7.1 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix information leak in btrfs_ioctl_logical_to_ino() Syzbot reported the following… |
CVE-2024-35848 | High | 7.0 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory corruption race condition If the eeprom is not accessible, an nv… |
CVE-2024-35847 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in its_vpe_irq_d… |
CVE-2024-35845 | Critical | 9.1 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwl_fw_ini_debug_info_tlv is used as a… |
CVE-2023-52696 | High | 7.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_powercap_init() kasprintf() returns a p… |
CVE-2023-52694 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function With tpd12s015_re… |
CVE-2023-52693 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: ACPI: video: check for error while searching for backlight device parent If acpi_get_pare… |
CVE-2023-52691 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a double-free in si_dpm_init When the allocation of adev->pm.dpm.dyn_stat… |
CVE-2023-52690 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check to scom_debug_init_one() kasprintf() returns a… |
CVE-2023-52686 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_event_init() kasprintf() returns a poin… |
CVE-2023-52683 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: ACPI: LPIT: Avoid u32 multiplication overflow In lpit_update_residency() there is a possi… |
CVE-2023-52679 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: of: Fix double free in of_parse_phandle_with_args_map In of_parse_phandle_with_args_map()… |
CVE-2024-35837 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: clear BM pool before initialization Register value persist after booting the… |
CVE-2024-35835 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a double-free in arfs_create_groups When `in` allocated by kvzalloc fails… |
CVE-2024-35833 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA This dma_alloc_co… |
CVE-2024-35830 | High | 7.8 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: media: tc358743: register v4l2 async device only after successful setup Ensure the device… |
CVE-2024-35829 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: drm/lima: fix a memleak in lima_heap_alloc When lima_vm_map_bo fails, the resources need… |
CVE-2024-35828 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() In the for statement of lb… |
CVE-2024-35825 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ncm: Fix handling of zero block length packets While connecting to a Linux h… |
CVE-2024-35823 | Medium | 5.3 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: vt: fix unicode buffer corruption when deleting characters This is the same issue that wa… |
CVE-2024-35822 | Medium | 5.5 | 2024-05-17 | In the Linux kernel, the following vulnerability has been resolved: usb: udc: remove warning when queue disabled ep It is possible trigger below warning mess… |