2024 CVEs (page 227)
Page 227 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-40990 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Add check for srq max_sge attribute max_sge attribute is passed by the user, a… |
CVE-2024-40989 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Disassociate vcpus from redistributor region on teardown When tearing down a… |
CVE-2024-40988 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix UBSAN warning in kv_dpm.c Adds bounds check for sumo_vid_mapping_entry. |
CVE-2024-40987 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix UBSAN warning in kv_dpm.c Adds bounds check for sumo_vid_mapping_entry. |
CVE-2024-40986 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix data synchronisation in xdma_channel_isr() Requests the vcha… |
CVE-2024-40985 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net/tcp_ao: Don't leak ao_info on error-path It seems I introduced it together with TCP_A… |
CVE-2024-40984 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." Undo the… |
CVE-2024-40983 | Critical | 9.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: tipc: force a dst refcount before doing decryption As it says in commit 3bc07321ccc2 ("xf… |
CVE-2024-40981 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bypass empty buckets in batadv_purge_orig_ref() Many syzbot reports are point… |
CVE-2024-40980 | High | 7.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drop_monitor: replace spin_lock by raw_spin_lock trace_drop_common() is called with preem… |
CVE-2024-40979 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix kernel crash during resume Currently during resume, QMI target memory i… |
CVE-2024-40978 | High | 7.1 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedi_dbg_do_not_recover_cmd_rea… |
CVE-2024-40977 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery During chip recovery (… |
CVE-2024-40976 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/lima: mask irqs in timeout path before hard reset There is a race condition in which… |
CVE-2024-40975 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Unregister devices in reverse order Not all subsystems… |
CVE-2024-40974 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Enforce hcall result buffer validity and size plpar_hcall(), plpar_hcall… |
CVE-2024-40973 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: media: mtk-vcodec: potential null pointer deference in SCP The return value of devm_kzall… |
CVE-2024-40972 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ext4: do not create EA inode under buffer lock ext4_xattr_set_entry() creates new EA inod… |
CVE-2024-40971 | High | 7.3 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: f2fs: remove clear SB_INLINECRYPT flag in default_options In f2fs_remount, SB_INLINECRYPT… |
CVE-2024-40970 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: Avoid hw_desc array overrun in dw-axi-dmac I have a use case where nr_buffers = 3 and in… |
CVE-2024-40969 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: f2fs: don't set RO when shutting down f2fs Shutdown does not check the error of thaw_supe… |
CVE-2024-40968 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: MIPS: Octeon: Add PCIe link status check The standard PCIe configuration read-write inter… |
CVE-2024-40967 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: serial: imx: Introduce timeout when waiting on transmitter empty By waiting at most 1 sec… |
CVE-2024-40966 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: tty: add the option to have a tty reject a new ldisc ... and use it to limit the virtual… |
CVE-2024-40965 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: i2c: lpi2c: Avoid calling clk_get_rate during transfer Instead of repeatedly calling clk_… |
CVE-2024-40964 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind() The cs35l41… |
CVE-2024-40963 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: make sure CBR is correctly set It was discovered that some device h… |
CVE-2024-40962 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes Shin'ichiro reported th… |
CVE-2024-40961 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL deref in fib6_nh_init() syzbot reminds us that in6_dev_get()… |
CVE-2024-40960 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL dereference in rt6_probe() syzbot caught a NULL dereference i… |
CVE-2024-40959 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() ip6_dst_idev() can return N… |
CVE-2024-40958 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: netns: Make get_net_ns() handle zero refcount net Syzkaller hit a warning: refcount_t: ad… |
CVE-2024-40957 | High | 7.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors input… |
CVE-2024-40956 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list Use list_for_each_e… |
CVE-2024-40955 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists() We can trigger a… |
CVE-2024-40954 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net: do not leave a dangling sk pointer, when socket creation fails It is possible to tri… |
CVE-2024-40953 | High | 7.9 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() Use {READ,WRITE}_ONCE() t… |
CVE-2024-40952 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty() bdev->bd_super has been remo… |
CVE-2024-40951 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger() bdev->bd_super has been remo… |
CVE-2024-40950 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: fix misused mapping_large_folio_support() for anon folios When I did a l… |
CVE-2024-40949 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: mm: shmem: fix getting incorrect lruvec when replacing a shmem folio When testing shmem s… |
CVE-2024-40948 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: mm/page_table_check: fix crash on ZONE_DEVICE Not all pages may apply to pgtable check… |
CVE-2024-40947 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ima: Avoid blocking in RCU read-side critical section A panic happens in ima_match_policy… |
CVE-2024-40945 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: iommu: Return right value in iommu_sva_bind_device() iommu_sva_bind_device() should retur… |
CVE-2024-40944 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to cc_platform_has() triggers a faul… |
CVE-2024-40943 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix races between hole punching and AIO+DIO After commit "ocfs2: return real error… |
CVE-2024-40942 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects The hwmp code use objects of ty… |
CVE-2024-40941 | High | 8.1 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't read past the mfuart notifcation In case the firmware sends a n… |
CVE-2024-40940 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail In case of flow… |
CVE-2024-40939 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of re… |
CVE-2024-40938 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: landlock: Fix d_parent walk The WARN_ON_ONCE() in collect_domain_accesses() can be trigge… |
CVE-2024-40937 | Critical | 9.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: gve: Clear napi->skb before dev_kfree_skb_any() gve_rx_free_skb incorrectly leaves napi->… |
CVE-2024-40936 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix memregion leaks in devm_cxl_add_region() Move the mode verification to __… |
CVE-2024-40935 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: flush all requests after setting CACHEFILES_DEAD In ondemand mode, when the d… |
CVE-2024-40934 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() Fix a memory leak o… |
CVE-2024-40933 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: iio: temperature: mlx90635: Fix ERR_PTR dereference in mlx90635_probe() When devm_regmap_… |
CVE-2024-40932 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .get_modes() The duplicated EDID is never freed. Fix… |
CVE-2024-40931 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_una is properly initialized on connect This is strictly related to comm… |
CVE-2024-40930 | High | 7.1 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate HE operation element parsing Validate that the HE operation elem… |
CVE-2024-40929 | High | 7.1 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids In some versions of cfg80211… |
CVE-2024-40928 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() Clang static che… |
CVE-2024-40927 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: xhci: Handle TD clearing for multiple streams case When multiple streams are in use, mult… |
CVE-2024-40926 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpd_work on headless cards If the card doesn't hav… |
CVE-2024-40925 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: block: fix request.queuelist usage in flush Friedrich Weber reported a kernel crash probl… |
CVE-2024-40924 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Make DPT object unshrinkable In some scenarios, the DPT object gets shrunk… |
CVE-2024-40923 | Critical | 9.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: vmxnet3: disable rx data ring on dma allocation failure When vmxnet3_rq_create() fails to… |
CVE-2024-40922 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don't lock while !TASK_RUNNING There is a report of io_rsrc_ref_quiesce()… |
CVE-2024-40921 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state Pass the already obta… |
CVE-2024-40920 | High | 7.1 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state I converted br_mst_set_sta… |
CVE-2024-40919 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() I… |
CVE-2024-40918 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: parisc: Try to fix random segmentation faults in package builds PA-RISC systems with PA88… |
CVE-2024-40917 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: memblock: make memblock_set_node() also warn about use of MAX_NUMNODES On an (old) x86 sy… |
CVE-2024-40916 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found When reading… |
CVE-2024-40915 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context __kernel_map_pages… |
CVE-2024-40914 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: don't unpoison huge_zero_folio When I did memory failure tests recently… |
CVE-2024-40913 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: defer exposing anon_fd until after copy_to_user() succeeds After installing t… |
CVE-2024-40912 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() The ieee80211_sta_ps_de… |
CVE-2024-40911 | High | 8.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Lock wiphy in cfg80211_get_station Wiphy should be locked before calling… |
CVE-2024-40910 | High | 8.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ax25: Fix refcount imbalance on inbound connections When releasing a socket in ax25_relea… |
CVE-2024-40909 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a potential use-after-free in bpf_link_free() After commit 1a80dbcb2dba, bpf_lin… |
CVE-2024-40908 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: bpf: Set run context for rawtp test_run callback syzbot reported crash when rawtp program… |
CVE-2024-40907 | Critical | 9.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ionic: fix kernel panic in XDP_TX action In the XDP_TX path, ionic driver sends a packet… |
CVE-2024-40906 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always stop health timer during driver removal Currently, if teardown_hca fails… |
CVE-2024-40905 | Medium | 4.7 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible race in __fib6_drop_pcpu_from() syzbot found a race in __fib6_drop_pcp… |
CVE-2024-40904 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages The syzbot fuzzer fo… |
CVE-2024-40903 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps There could be a p… |
CVE-2024-40902 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: jfs: xattr: fix buffer overflow for invalid xattr When an xattr size is not what is expec… |
CVE-2024-40901 | High | 7.3 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory There is a potentia… |
CVE-2024-40900 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: remove requests from xarray during flushing requests Even with CACHEFILES_DEA… |
CVE-2024-40899 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd() We got the following… |
CVE-2024-39510 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read() We got the follo… |
CVE-2024-39509 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARN_ON() in implement() Syzkaller hit a warning [1] in a c… |
CVE-2024-39508 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: Use set_bit() and test_bit() at worker->flags Utilize set_bit() and test_… |
CVE-2024-39507 | High | 7.0 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash problem in concurrent scenario When link status change, the n… |
CVE-2024-39506 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet In lio_vf_rep_cop… |
CVE-2024-39505 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/komeda: check for error-valued pointer komeda_pipeline_get_state() may return an erro… |
CVE-2024-39504 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: validate mandatory meta and payload Check for mandatory netlink att… |
CVE-2024-39503 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Lion Ack… |
CVE-2024-39502 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netif_napi_del() When queues are started, netif_napi_add() and napi_… |
CVE-2024-39500 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: sock_map: avoid race between sock_map_close and sk_psock_put sk_psock_get will return NUL… |