2024 CVEs (page 139)
Page 139 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-49886 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug Attaching SST PCI device… |
CVE-2024-49885 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mm, slub: avoid zeroing kmalloc redzone Since commit 946fa0dbf2d8 ("mm/slub: extend redzo… |
CVE-2024-49884 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_at() We hit the following use-after-fr… |
CVE-2024-49883 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: aovid use-after-free in ext4_ext_insert_extent() As Ojaswin mentioned in Link, in e… |
CVE-2024-49882 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse() the buffer of the extents path In ext4_ext_try_to_merge_up(), s… |
CVE-2024-49881 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: update orig_path in ext4_find_extent() In ext4_find_extent(), if the path is not bi… |
CVE-2024-49880 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix off by one issue in alloc_flex_gd() Wesley reported an issue: ================… |
CVE-2024-49879 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm: omapdrm: Add missing check for alloc_ordered_workqueue As it may return NULL pointer… |
CVE-2024-49878 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: resource: fix region_intersects() vs add_memory_driver_managed() On a system with CXL mem… |
CVE-2024-49877 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate When doing cleanup, if fl… |
CVE-2024-49876 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix UAF around queue destruction We currently do stuff like queuing the final des… |
CVE-2024-49875 | High | 7.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: nfsd: map the EBADMSG to nfserr_io to avoid warning Ext4 will throw -EBADMSG through ext4… |
CVE-2024-49874 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Co… |
CVE-2024-49873 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mm/filemap: fix filemap_get_folios_contig THP panic Patch series "memfd-pin huge page fix… |
CVE-2024-49872 | Medium | 4.7 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix memfd_pin_folios alloc race panic If memfd_pin_folios tries to create a huget… |
CVE-2024-49871 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: Input: adp5589-keys - fix NULL pointer dereference We register a devm action to call adp5… |
CVE-2024-49870 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix dentry leak in cachefiles_open_file() A dentry leak may be caused when a… |
CVE-2024-49869 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: btrfs: send: fix buffer overflow detection when copying path to cache entry Starting with… |
CVE-2024-49868 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion [BUG] Syzbot… |
CVE-2024-49867 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping cleaner kthread during umount During unmoun… |
CVE-2024-49866 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Fix a race during cpuhp processing There is another found exception tha… |
CVE-2024-49865 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: move xa_alloc to prevent UAF Evil user can guess the next id of the vm before… |
CVE-2024-49864 | High | 7.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix a race between socket set up and I/O thread creation In rxrpc_open_socket(), i… |
CVE-2024-49863 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() Since commit 3f8ca2e115e5 ("vhos… |
CVE-2024-49368 | Critical | 9.8 | 2024-10-21 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the input and… |
CVE-2024-49367 | High | 7.5 | 2024-10-21 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, the log path of nginxui is controllable. This issue can be combined… |
CVE-2024-49366 | High | 7.5 | 2024-10-21 | Nginx UI is a web user interface for the Nginx web server. Nginx UI v2.0.0-beta.35 and earlier gets the value from the json field without verification, and can… |
CVE-2024-40746 | Medium | 5.4 | 2024-10-21 | A stored cross-site scripting (XSS) vulnerability in HikaShop Joomla Component < 5.1.1 allows remote attackers to execute arbitrary JavaScript in the web brows… |
CVE-2024-48930 | | 2024-10-21 | secp256k1-node is a Node.js binding for an Optimized C library for EC operations on curve secp256k1. In `elliptic`-based version, `loadUncompressedPublicKey` h… | |
CVE-2024-8305 | Medium | 6.5 | 2024-10-21 | prepareUnique index may cause secondaries to crash due to incorrect enforcement of index constraints on secondaries, where in extreme cases may cause multiple… |
CVE-2024-6519 | High | 8.2 | 2024-10-21 | A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape. |
CVE-2024-45309 | High | 7.5 | 2024-10-21 | OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read arbitrary files acces… |
CVE-2024-49862 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix off by one in get_rpi() The rp->priv->rpi array is either rpi_m… |
CVE-2024-49861 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix helper writes to read-only maps Lonial found an issue that despite user- and BPF… |
CVE-2024-49860 | High | 7.3 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method Only buffer objects are valid return val… |
CVE-2024-49859 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to check atomic_file in f2fs ioctl interfaces Some f2fs ioctl interfaces like f… |
CVE-2024-49858 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption The TPM event log… |
CVE-2024-49857 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: set the cipher for secured NDP ranging The cipher pointer is not set… |
CVE-2024-49856 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Fix deadlock in SGX NUMA node search When the current node doesn't have an EPC s… |
CVE-2024-49855 | Critical | 9.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between timeout and normal completion If request timetout is handled by nbd… |
CVE-2024-49854 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for accessing waker_bfqq after splitting After commit 42c306ed7233 ("… |
CVE-2024-49853 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix double free in OPTEE transport Channels can be shared between pro… |
CVE-2024-49852 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() The kref_put() f… |
CVE-2024-49851 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: tpm: Clean up TPM space after command failure tpm_dev_transmit prepares the TPM space bef… |
CVE-2024-49850 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos In case of malformed relocat… |
CVE-2024-47757 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in nilfs_btree_check_delete() The function nilfs_btree_che… |
CVE-2024-47756 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in ks_pcie_quirk() This code accidentally uses… |
CVE-2024-47754 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning Fix a smatch sta… |
CVE-2024-47753 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning Fix a smatch static che… |
CVE-2024-47752 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning Fix a smatch static ch… |
CVE-2024-47751 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() Within kirin_pcie_parse_port()… |
CVE-2024-47750 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 Currently rsv_qp is freed before ib_unreg… |
CVE-2024-47749 | High | 7.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookup_atid The lookup_atid() function can return NULL i… |
CVE-2024-47748 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: vhost_vdpa: assign irq bypass producer token correctly We used to call irq_bypass_unregis… |
CVE-2024-47747 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition In the… |
CVE-2024-47746 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set This may be a typo. The comment… |
CVE-2024-47745 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mm: call the security_mmap_file() LSM hook in remap_file_pages() The remap_file_pages sys… |
CVE-2024-47744 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock Use a dedicated mut… |
CVE-2024-47743 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: KEYS: prevent NULL pointer dereference in find_asymmetric_key() In find_asymmetric_key()… |
CVE-2024-47742 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Block path traversal Most firmware names are hardcoded strings, or are c… |
CVE-2024-47741 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race setting file private on concurrent lseek using same fd When doing concurr… |
CVE-2024-47740 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: Require FMODE_WRITE for atomic write ioctls The F2FS ioctls for starting and commit… |
CVE-2024-47739 | High | 7.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: padata: use integer wrap around to prevent deadlock on seq_nr overflow When submitting mo… |
CVE-2024-47738 | Low | 3.3 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't use rate mask for offchannel TX either Like the commit ab9177d83c04… |
CVE-2024-47737 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: nfsd: call cache_put if xdr_reserve_space returns NULL If not enough buffer space availab… |
CVE-2024-47736 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: erofs: handle overlapped pclusters out of crafted images properly syzbot reported a task… |
CVE-2024-47735 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled Fix missuse of spin_lock_… |
CVE-2024-47734 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() syzbot reported… |
CVE-2024-47733 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: netfs: Delete subtree of 'fs/netfs' when netfs module exits In netfs_init() or fscache_pr… |
CVE-2024-47732 | High | 7.0 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix potential use after free bug The free_device_compression_mode(iaa_devic… |
CVE-2024-47731 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing The alibaba_uncore_pmu dri… |
CVE-2024-47730 | High | 7.0 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - inject error before stopping queue The master ooo cannot be comple… |
CVE-2024-47729 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use reserved copy engine for user binds on faulting devices User binds map to eng… |
CVE-2024-47728 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error For all non-tracing helpers… |
CVE-2024-47727 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix "in-kernel MMIO" check TDX only supports kernel-initiated MMIO operations. T… |
CVE-2024-47726 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to wait dio completion It should wait all existing dio write IOs before block r… |
CVE-2024-47724 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: use work queue to process beacon tx event Commit 3a415daa3e8b ("wifi: ath11… |
CVE-2024-47723 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix out-of-bounds in dbNextAG() and diAlloc() In dbNextAG() , there is no check for… |
CVE-2024-49321 | Medium | 4.3 | 2024-10-21 | Missing Authorization vulnerability in colorlibplugins Simple Custom Post Order simple-custom-post-order allows Exploiting Incorrectly Configured Access Contro… |
CVE-2024-49293 | Medium | 4.3 | 2024-10-21 | Missing Authorization vulnerability in RexTheme WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: fr… |
CVE-2024-49273 | Medium | 4.3 | 2024-10-21 | Missing Authorization vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities.This issue affects ProfileGrid : from n/a throug… |
CVE-2024-48231 | High | 7.2 | 2024-10-21 | Funadmin 5.0.2 is vulnerable to SQL Injection via the selectFields parameter in the index method of \backend\controller\auth\Auth.php. |
CVE-2024-47721 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-… |
CVE-2024-47720 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func Th… |
CVE-2024-47719 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Protect against overflow of ALIGN() during iova allocation Userspace can supply… |
CVE-2024-47718 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: always wait for both firmware loading attempts In 'rtw_wait_firmware_complet… |
CVE-2024-47717 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data With the latest Linux-6… |
CVE-2024-47716 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros Floating point instructions in use… |
CVE-2024-47715 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix oops on non-dbdc mt7986 mt7915_band_config() sets band_idx = 1 on… |
CVE-2024-47714 | High | 7.6 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: use hweight16 to get correct tx antenna The chainmask is u16 so using… |
CVE-2024-47713 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() Since '__dev_queue_x… |
CVE-2024-47712 | High | 8.3 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param In the `… |
CVE-2024-47711 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't return OOB skb in manage_oob(). syzbot reported use-after-free in unix_str… |
CVE-2024-47710 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: sock_map: Add a cond_resched() in sock_hash_free() Several syzbot soft lockup reports all… |
CVE-2024-47709 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). syzbot reported a warning in… |
CVE-2024-47708 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: netkit: Assign missing bpf_net_context During the introduction of struct bpf_net_context… |
CVE-2024-47707 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() Blamed commit accidental… |
CVE-2024-47706 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible UAF for bfqq->bic with merge chain 1) initial state, three tasks… |
CVE-2024-47705 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blk_add_partition The blk_add_partiti… |
CVE-2024-47704 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check link_res->hpo_dp_link_enc before using it [WHAT & HOW] Functions d… |