2024 CVEs (page 195)
Page 195 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-43856 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: dma: fix call order in dmam_free_coherent dmam_free_coherent() frees a DMA allocation, wh… |
CVE-2024-43855 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: md: fix deadlock between mddev_suspend and flush bio Deadlock occurs when mddev is being… |
CVE-2024-43854 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: block: initialize integrity buffer to zero before writing it to media Metadata added by b… |
CVE-2024-43853 | High | 7.0 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proc_cpuset_show() An UAF can happen when /proc/cpuset is r… |
CVE-2024-43852 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc2991) re-order conditions to fix off by one bug LTC2991_T_INT_CH_NR is 4. The… |
CVE-2024-43851 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: rename cpu_number1 to dummy_cpu_number The per cpu variable cpu_number1 is p… |
CVE-2024-43850 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove The following warni… |
CVE-2024-43849 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: protect locator_addr with the main mutex If the service locator server is… |
CVE-2024-43848 | High | 8.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix TTLM teardown work The worker calculates the wrong sdata pointer, so… |
CVE-2024-43847 | High | 8.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid memory access while processing fragmented packets The monitor r… |
CVE-2024-43846 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: lib: objagg: Fix general protection fault The library supports aggregation of objects int… |
CVE-2024-43845 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: udf: Fix bogus checksum computation in udf_rename() Syzbot reports uninitialized memory a… |
CVE-2024-43844 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: wow: fix GTK offload H2C skbuff issue We mistakenly put skb too large and th… |
CVE-2024-43843 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix out-of-bounds issue when preparing trampoline image We get the size of th… |
CVE-2024-43842 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() In rtw89_sta_info_get_i… |
CVE-2024-43841 | Low | 3.3 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: avoid reporting connection success with wrong SSID When user issues a co… |
CVE-2024-43840 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG When BPF_TRAMP_F_CALL_ORIG is set, t… |
CVE-2024-43839 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures To have enough space to wri… |
CVE-2024-43838 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix overflow check in adjust_jmp_off() adjust_jmp_off() incorrectly used the insn->i… |
CVE-2024-43837 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT When loadi… |
CVE-2024-43836 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE… |
CVE-2024-43835 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix napi_skb_cache_put warning After the commit bdacf3e34945 ("net: Use neste… |
CVE-2024-43834 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: xdp: fix invalid wait context of page_pool_destroy() If the driver uses a page pool, it c… |
CVE-2024-43833 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix NULL pointer dereference in adding ancillary links In v4l2_async_c… |
CVE-2024-43832 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: s390/uv: Don't call folio_wait_writeback() without a folio reference folio_wait_writeback… |
CVE-2024-43831 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Handle invalid decoder vsi Handle an invalid decoder vsi in vpu_… |
CVE-2024-43830 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate() Triggers which hav… |
CVE-2024-43829 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: drm/qxl: Add check for drm_cvt_mode Add check for the return value of drm_cvt_mode() and… |
CVE-2024-43828 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix infinite loop when replaying fast_commit When doing fast_commit replay an infin… |
CVE-2024-43827 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check before access structs In enable_phantom_plane, we should… |
CVE-2024-43826 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: nfs: pass explicit offset/count to trace events nfs_folio_length is unsafe to use without… |
CVE-2024-43825 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: iio: Fix the sorting functionality in iio_gts_build_avail_time_table The sorting in iio_g… |
CVE-2024-43824 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()… |
CVE-2024-43823 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_re… |
CVE-2024-43822 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: ASoc: PCM6240: Return directly after a failed devm_kzalloc() in pcmdevice_i2c_probe() The… |
CVE-2024-43821 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix a possible null pointer dereference In function lpfc_xcvr_data_show, the… |
CVE-2024-43820 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume rm-raid devices will occas… |
CVE-2024-43819 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: kvm: s390: Reject memory region operations for ucontrol VMs This change rejects the KVM_S… |
CVE-2024-43818 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: Adjust error handling in case of absent codec device acpi_get_first_physical_n… |
CVE-2024-43817 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: net: missing check virtio Two missing check in virtio_net_hdr_to_skb() allowed syzbot to… |
CVE-2024-43816 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages On big endi… |
CVE-2024-43815 | High | 7.1 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - Ensure payload is zero when using key slot We could leak stack memory t… |
CVE-2024-7887 | Low | 2.7 | 2024-08-17 | A vulnerability was found in LimeSurvey 6.3.0-231016 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php… |
CVE-2024-42322 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: ipvs: properly dereference pe in ip_vs_add_service Use pe directly to resolve sparse warn… |
CVE-2024-42321 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE The following splat is easy to reproduce… |
CVE-2024-42320 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error checks in dasd_copy_pair_store() dasd_add_busid() can return an erro… |
CVE-2024-42319 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable() Wh… |
CVE-2024-42318 | High | 8.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: landlock: Don't lose track of restrictions on cred_transfer When a process' cred struct i… |
CVE-2024-42317 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: avoid PMD-size page cache if needed xarray can't support arbitrary page c… |
CVE-2024-42316 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: mm/mglru: fix div-by-zero in vmpressure_calc_level() evict_folios() uses a second pass to… |
CVE-2024-42315 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential deadlock on __exfat_get_dentry_set When accessing a file with more e… |
CVE-2024-42314 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when adding pages to compressed bio At add_ra_bio_pa… |
CVE-2024-42313 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free in vdec_close There appears to be a possible use after f… |
CVE-2024-42312 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize i_uid/i_gid Always initialize i_uid/i_gid inside the sysfs core… |
CVE-2024-42311 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() Syzbot reports un… |
CVE-2024-42310 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes In cdv_intel_lvds_ge… |
CVE-2024-42309 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes In psb_intel_lvds_ge… |
CVE-2024-42307 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path Dan Car… |
CVE-2024-42306 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: udf: Avoid using corrupted block bitmap buffer When the filesystem block bitmap is corrup… |
CVE-2024-42305 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: ext4: check dot and dotdot of dx_root before making dir indexed Syzbot reports a issue as… |
CVE-2024-42304 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole The syzbot constructs a directory… |
CVE-2024-42303 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: media: imx-pxp: Fix ERR_PTR dereference in pxp_probe() devm_regmap_init_mmio() can fail… |
CVE-2024-42302 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal Keith reports a use-after-f… |
CVE-2024-42301 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of-bounds risk Fixed array out-of-bounds issues caused by… |
CVE-2024-42300 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix race in z_erofs_get_gbuf() In z_erofs_get_gbuf(), the current task may be migr… |
CVE-2024-42299 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed If an NTFS file system i… |
CVE-2024-42298 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value devm_kasprintf() can retu… |
CVE-2024-42297 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to don't dirty inode for readonly filesystem syzbot reports f2fs bug as below: … |
CVE-2024-42296 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fs_convert_inline_inode() If device is readonly, make f2fs_co… |
CVE-2024-42295 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: handle inconsistent state in nilfs_btnode_create_block() Syzbot reported that a b… |
CVE-2024-42294 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: block: fix deadlock between sd_remove & sd_release Our test report the following hung tas… |
CVE-2024-42293 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: arm64: mm: Fix lockless walks with static and dynamic page-table folding Lina reports ran… |
CVE-2024-42292 | High | 7.1 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: kobject_uevent: Fix OOB access within zap_modalias_env() zap_modalias_env() wrongly calcu… |
CVE-2024-42291 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: ice: Add a per-VF limit on number of FDIR filters While the iavf driver adds a s/w limit… |
CVE-2024-42290 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: irqchip/imx-irqsteer: Handle runtime power management correctly The power domain is autom… |
CVE-2024-42289 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: During vport delete send async logout explicitly During vport delete, it i… |
CVE-2024-42288 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix for possible memory corruption Init Control Block is dereferenced inco… |
CVE-2024-42287 | High | 8.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Complete command early within lock A crash was observed while performing N… |
CVE-2024-42286 | High | 7.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: validate nvme_local_port correctly The driver load failed with error messa… |
CVE-2024-42285 | Critical | 9.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iw_conn_req_handler() associ… |
CVE-2024-42284 | Critical | 9.1 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipc_udp_addr2str() on error tipc_udp_addr2str() should… |
CVE-2024-42283 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Initialize all fields in dumped nexthops struct nexthop_grp contains two re… |
CVE-2024-42282 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling Move t… |
CVE-2024-42281 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a segment issue when downgrading gso_size Linearize the skb when downgrading gso… |
CVE-2024-42280 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: mISDN: Fix a use after free in hfcmulti_tx() Don't dereference *sp after calling dev_kfre… |
CVE-2024-42279 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer While transm… |
CVE-2024-42278 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: ASoC: TAS2781: Fix tasdev_load_calibrated_data() This function has a reversed if statemen… |
CVE-2024-42277 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en In sprd_iommu_cleanup() before calling… |
CVE-2024-42276 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing condition check for existence of mapped data nvme_map_data() is cal… |
CVE-2024-42275 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix error code in drm_client_buffer_vmap_local() This function accidentally r… |
CVE-2024-42274 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: Revert "ALSA: firewire-lib: operate for period elapse event in process context" Commit 7b… |
CVE-2024-42273 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid mkdir /mnt/test/comp f2fs_io setfla… |
CVE-2024-42272 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: sched: act_ct: take care of padding in struct zones_ht_key Blamed commit increased lookup… |
CVE-2024-42271 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix use after free in iucv_sock_close() iucv_sever_path() is called from proces… |
CVE-2024-42270 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). We had a report that… |
CVE-2024-42269 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). ip6table_… |
CVE-2024-42268 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix missing lock on sync reset reload On sync reset reload work, when remote ho… |
CVE-2024-42267 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error() Handle VM_FAULT_SIGSEGV i… |
CVE-2024-42266 | High | 7.8 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: btrfs: make cow_file_range_inline() honor locked_page on error The btrfs buffered write p… |
CVE-2024-42265 | Medium | 5.5 | 2024-08-17 | In the Linux kernel, the following vulnerability has been resolved: protect the fetch of ->fd[fd] in do_dup2() from mispredictions both callers have verified… |