2024 CVEs (page 247)
Page 247 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-38614 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: openrisc: traps: Don't send signals to kernel mode threads OpenRISC exception handling se… |
CVE-2024-38613 | Medium | 4.7 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: m68k: Fix spinlock race in kernel thread creation Context switching does take care to ret… |
CVE-2024-38612 | High | 7.0 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6_init() is wrong in cas… |
CVE-2024-38611 | High | 7.3 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: et8ek8: Don't strip remove function when driver is builtin Using __exit for t… |
CVE-2024-38610 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() Patch series "mm: follow_pt… |
CVE-2024-38609 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: check for null before dereferencing The wcid can be NULL. It should b… |
CVE-2024-38608 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix netif state handling mlx5e_suspend cleans resources only if netif_device_p… |
CVE-2024-38607 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" The via-mac… |
CVE-2024-38606 | High | 7.1 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate slices count returned by FW The function adf_send_admin_tl_start()… |
CVE-2024-38605 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix NULL module pointer assignment at card init The commit 81033c6b584b ("ALS… |
CVE-2024-38604 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: block: refine the EOF check in blkdev_iomap_begin blkdev_iomap_begin rounds down the offs… |
CVE-2024-38603 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() pci_alloc_irq_vectors()… |
CVE-2024-38602 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issues of ax25_dev The ax25_addr_ax25dev() and ax25_dev_de… |
CVE-2024-38601 | Medium | 4.7 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix a race between readers and resize checks The reader code in rb_get_reade… |
CVE-2024-38600 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ALSA: Fix deadlocks with kctl removals at disconnection In snd_card_disconnect(), we set… |
CVE-2024-38599 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: jffs2: prevent xattr node from overflowing the eraseblock Add a check to make sure that t… |
CVE-2024-38598 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: md: fix resync softlockup when bitmap size is less than array size Is is reported that fo… |
CVE-2024-38597 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: eth: sungem: remove .ndo_poll_controller to avoid deadlocks Erhard reports netpoll warnin… |
CVE-2024-38596 | Medium | 4.7 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg A data-race condition ha… |
CVE-2024-38595 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix peer devlink set for SF representor devlink port The cited patch change reg… |
CVE-2024-38594 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: move the EST lock to struct stmmac_priv Reinitialize the whole EST structure… |
CVE-2024-38593 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: micrel: Fix receiving the timestamp in the frame for lan8841 The blamed commit start… |
CVE-2024-38592 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Init `ddp_comp` with devm_kcalloc() In the case where `conn_routes` is true… |
CVE-2024-38591 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix deadlock on SRQ async events. xa_lock for SRQ table may be required in AEQ… |
CVE-2024-38590 | High | 7.1 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Modify the print level of CQE error Too much print may lead to a panic in kerne… |
CVE-2024-38589 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: netrom: fix possible dead-lock in nr_rt_ioctl() syzbot loves netrom, and found a possible… |
CVE-2024-38588 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix possible use-after-free issue in ftrace_location() KASAN reports a bug: BU… |
CVE-2024-38587 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "buf" pointer is an array of u16 values. T… |
CVE-2024-38586 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: r8169: Fix possible ring buffer corruption on fragmented Tx packets. An issue was found o… |
CVE-2024-38585 | High | 7.1 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: tools/nolibc/stdlib: fix memory error in realloc() Pass user_p_len to memcpy() instead of… |
CVE-2024-38584 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe() In the prueth_probe… |
CVE-2024-38583 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of timer for log writer thread Patch series "nilfs2: fix log w… |
CVE-2024-38582 | Medium | 5.3 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential hang in nilfs_detach_log_writer() Syzbot has reported a potential h… |
CVE-2024-38581 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/mes: fix use-after-free issue Delete fence fallback timer to fix the ramdom us… |
CVE-2024-38580 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: epoll: be better about file lifetimes epoll can call out to vfs_poll() with a file pointe… |
CVE-2024-38579 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2_dump_omd() value of ptr is increased by ciph… |
CVE-2024-38578 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ecryptfs: Fix buffer size for tag 66 packet The 'TAG 66 Packet Format' description is mis… |
CVE-2024-38577 | High | 7.0 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow There is a possibility of… |
CVE-2024-38576 | High | 7.0 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: rcu: Fix buffer overflow in print_cpu_stall_info() The rcuc-starvation output from print_… |
CVE-2024-38575 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: pcie: handle randbuf allocation failure The kzalloc() in brcmf_pcie_downl… |
CVE-2024-38574 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: libbpf: Prevent null-pointer dereference when prog to load has no BTF In bpf_objec_load_p… |
CVE-2024-38573 | High | 7.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: cppc_cpufreq: Fix possible null pointer dereference cppc_cpufreq_get_rate() and hisi_cppc… |
CVE-2024-38572 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bound access of qmi_invoke_handler() Currently, there is no term… |
CVE-2024-38571 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tsens: Fix null pointer dereference compute_intercept_slope() is called f… |
CVE-2024-38570 | Critical | 9.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and… |
CVE-2024-38569 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group The perf tool all… |
CVE-2024-38568 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group The perf tool al… |
CVE-2024-38567 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: add a proper sanity check for endpoints Syzkaller reports [1] hitting a w… |
CVE-2024-38566 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix verifier assumptions about socket->sk The verifier assumes that 'sk' field in 's… |
CVE-2024-38565 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: ar5523: enable proper endpoint verification Syzkaller reports [1] hitting a warning… |
CVE-2024-38564 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE bpf_prog_att… |
CVE-2024-38563 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature Without th… |
CVE-2024-38562 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: Avoid address calculations via out of bounds array indexing Before request… |
CVE-2024-38561 | High | 7.0 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: kunit: Fix kthread reference There is a race condition when a kthread finishes after the… |
CVE-2024-38560 | High | 7.1 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized… |
CVE-2024-38559 | Medium | 4.4 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Ensure the copied buf is NUL terminated Currently, we allocate a count-sized… |
CVE-2024-38558 | Critical | 10.0 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix overwriting ct original tuple for ICMPv6 OVS_PACKET_CMD_EXECUTE has… |
CVE-2024-38557 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Reload only IB representors upon lag disable/enable On lag disable, the bond IB… |
CVE-2024-38556 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Add a timeout to acquire the command queue semaphore Prevent forced completion… |
CVE-2024-38555 | High | 7.0 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Discard command completions in internal error Fix use after free when FW comple… |
CVE-2024-38554 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issue of net_device There is a reference count leak issue… |
CVE-2024-38553 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: fec: remove .ndo_poll_controller to avoid deadlocks There is a deadlock issue found… |
CVE-2024-38552 | High | 7.3 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential index out of bounds in color transformation function Fixes… |
CVE-2024-38551 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Assign dummy when codec not specified for a DAI link MediaTek sound card… |
CVE-2024-38550 | Medium | 4.4 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: ASoC: kirkwood: Fix potential NULL dereference In kirkwood_dma_hw_params() mv_mbus_dram_i… |
CVE-2024-38549 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add 0 size check to mtk_drm_gem_obj Add a check to mtk_drm_gem_init if we a… |
CVE-2024-38548 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference In cdns_mhdp_atomic_ena… |
CVE-2024-38547 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries The alloca… |
CVE-2024-38546 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: drm: vc4: Fix possible null pointer dereference In vc4_hdmi_audio_init() of_get_address()… |
CVE-2024-38545 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix UAF for cq async event The refcount of CQ is not protected by locks. When C… |
CVE-2024-38544 | Critical | 9.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt In rxe_comp_queue_pkt() an incoming respons… |
CVE-2024-38543 | Medium | 5.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure The kcalloc() in dmirror_… |
CVE-2024-38542 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mana_ib: boundary check before installing cq callbacks Add a boundary check inside m… |
CVE-2024-38541 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: of: module: add buffer overflow check in of_modalias() In of_modalias(), if the buffer ha… |
CVE-2024-38540 | Medium | 4.4 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq Undefined behavior i… |
CVE-2024-38539 | High | 7.5 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw When runni… |
CVE-2024-38538 | High | 7.3 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes syzbot triggered an un… |
CVE-2024-38329 | High | 7.7 | 2024-06-19 | IBM Storage Protect for Virtual Environments: Data Protection for VMware 8.1.0.0 through 8.1.22.0 could allow a remote authenticated attacker to bypass securit… |
CVE-2024-36979 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: fix vlan use-after-free syzbot reported a suspicious rcu usage[1] in br… |
CVE-2024-23443 | Medium | 4.9 | 2024-06-19 | A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack. |
CVE-2024-35780 | High | 8.5 | 2024-06-19 | Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer.This issue affects Page Builder: Live Composer: from n/a thro… |
CVE-2024-35765 | Medium | 6.5 | 2024-06-19 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wpsoul Greenshift – animation and page builder blo… |
CVE-2024-5676 | Medium | 6.8 | 2024-06-19 | The Paradox IP150 Internet Module in version 1.40.00 is vulnerable to Cross-Site Request Forgery (CSRF) attacks due to a lack of countermeasures and the use of… |
CVE-2024-4632 | Medium | 6.4 | 2024-06-19 | The WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site… |
CVE-2024-0383 | Medium | 6.4 | 2024-06-19 | The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [wprm-recipe-instructions] and [wprm-recipe-ingredients]… |
CVE-2024-0789 | Medium | 5.3 | 2024-06-19 | The WP Maintenance plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 6.1.9.2 due to insufficient IP address valid… |
CVE-2024-3894 | Medium | 6.4 | 2024-06-19 | The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an Image Title in all versions up… |
CVE-2024-37881 | Medium | 5.3 | 2024-06-19 | SiteGuard WP Plugin provides a functionality to customize the path to the login page wp-login.php and implements a measure to avoid redirection from other URLs… |
CVE-2024-37387 | Medium | 4.0 | 2024-06-19 | Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, files in the PC where the product is i… |
CVE-2024-37124 | Critical | 9.8 | 2024-06-19 | Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, an attacker may create an arbitrary fi… |
CVE-2024-36978 | High | 7.8 | 2024-06-19 | In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multiq: fix possible OOB write in multiq_tune() q->bands will be assigned… |
CVE-2024-36480 | Critical | 9.8 | 2024-06-19 | Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain L… |
CVE-2024-36252 | Medium | 6.3 | 2024-06-19 | Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability… |
CVE-2024-1407 | Medium | 5.4 | 2024-06-19 | The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all… |
CVE-2024-6132 | High | 8.8 | 2024-06-19 | The Pexels: Free Stock Photos plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'pexels_fsp_images_option… |
CVE-2024-5853 | Critical | 9.9 | 2024-06-19 | The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the sirv_upload… |
CVE-2024-5574 | High | 7.5 | 2024-06-19 | The WP Magazine Modules Lite plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.2 via the 'blockLayout' param… |
CVE-2024-5343 | High | 8.8 | 2024-06-19 | The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3… |
CVE-2024-5208 | Medium | 6.5 | 2024-06-19 | An uncontrolled resource consumption vulnerability exists in the `upload-link` endpoint of mintplex-labs/anything-llm. This vulnerability allows attackers to c… |
CVE-2024-3229 | Critical | 9.8 | 2024-06-19 | The Salon booking system plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SLN_Action_Ajax_ImportAssistan… |