2024 CVEs (page 298)
Page 298 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-27036 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix writeback data corruption cifs writeback doesn't correctly handle the case wher… |
CVE-2024-27035 | High | 7.3 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to guarantee persisting compressed blocks by CP If data block in comp… |
CVE-2024-27034 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover normal cluster write with cp_rwsem When we overwrite compres… |
CVE-2024-27033 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic verify_blkaddr() will trigge… |
CVE-2024-27032 | Medium | 6.3 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULT_BLOCK is on… |
CVE-2024-27031 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: NFS: Fix nfs_netfs_issue_read() xarray locking for writeback interrupt The loop inside nf… |
CVE-2024-27030 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Use separate handlers for interrupts For PF to AF interrupt vector and VF t… |
CVE-2024-27029 | High | 7.1 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix mmhub client id out-of-bounds access Properly handle cid 0x140. |
CVE-2024-27028 | Medium | 6.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-mt65xx: Fix NULL pointer access in interrupt handler The TX buffer in spi_transf… |
CVE-2024-27027 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: dpll: fix dpll_xa_ref_*_del() for multiple registrations Currently, if there are multiple… |
CVE-2024-27026 | High | 7.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix missing reserved tailroom Use rbi->len instead of rcd->len for non-dataring… |
CVE-2024-27025 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nla_nest_start nla_nest_start() may fail and return NULL. Insert a ch… |
CVE-2024-27024 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: net/rds: fix WARNING in rds_conn_connect_if_down If connection isn't established yet, get… |
CVE-2024-27023 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: md: Fix missing release of 'active_io' for flush submit_flushes atomic_set(&mddev->flush… |
CVE-2024-24978 | Medium | 4.3 | 2024-05-01 | Denial-of-service (DoS) vulnerability exists in TvRock 0.9t8a. Receiving a specially crafted request by a remote attacker or having a user of TvRock click a sp… |
CVE-2024-23597 | Medium | 4.3 | 2024-05-01 | Cross-site request forgery (CSRF) vulnerability exists in TvRock 0.9t8a. If a logged-in user of TVRock accesses a specially crafted page, unintended operations… |
CVE-2024-0334 | Medium | 6.4 | 2024-05-01 | The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom attribute of a link in several Elementor widgets in all… |
CVE-2024-33835 | Critical | 9.8 | 2024-05-01 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the remoteIp parameter from formSetSafeWanWebMan function. |
CVE-2024-32984 | High | 7.5 | 2024-05-01 | Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. The Rust implementation of the Yamux stream multiplexer uses a vector for pend… |
CVE-2024-32979 | High | 7.5 | 2024-05-01 | Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL da… |
CVE-2024-32973 | Medium | 4.8 | 2024-05-01 | Pluto is a superset of Lua 5.4 with a focus on general-purpose programming. In affected versions an attacker with the ability to actively intercept network tra… |
CVE-2024-32967 | Medium | 5.3 | 2024-05-01 | Zitadel is an open source identity management system. In case ZITADEL could not connect to the database, connection information including db name, username and… |
CVE-2024-32963 | Medium | 4.2 | 2024-05-01 | Navidrome is an open source web-based music collection server and streamer. In affected versions of Navidrome are subject to a parameter tampering vulnerabilit… |
CVE-2024-32890 | Medium | 6.1 | 2024-05-01 | librespeed/speedtest is an open source, self-hosted speed test for HTML5. In affected versions missing neutralization of the ISP information in a speedtest res… |
CVE-2024-32018 | High | 8.8 | 2024-05-01 | RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. Most codeba… |
CVE-2024-32017 | Critical | 9.8 | 2024-05-01 | RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. The size ch… |
CVE-2024-31225 | High | 8.3 | 2024-05-01 | RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. The `_on_rd… |
CVE-2024-23336 | Medium | 5.0 | 2024-05-01 | MyBB is a free and open source forum software. The default list of disallowed remote hosts does not contain the `127.0.0.0/8` block, which may result in a Serv… |
CVE-2024-23335 | Medium | 4.7 | 2024-05-01 | MyBB is a free and open source forum software. The backup management module of the Admin CP may accept `.htaccess` as the name of the backup file to be deleted… |
CVE-2024-3591 | Medium | 6.5 | 2024-05-01 | The Geo Controller WordPress plugin before 8.6.5 unserializes user input via some of its AJAX actions and REST API routes, which could allow unauthenticated us… |
CVE-2024-32966 | Medium | 5.8 | 2024-05-01 | Static Web Server (SWS) is a tiny and fast production-ready web server suitable to serve static web files or assets. In affected versions if directory listings… |
CVE-2024-27022 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: fork: defer linking file vma until vma is fully initialized Thorvald reported a WARNING [… |
CVE-2024-27021 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: r8169: fix LED-related deadlock on module removal Binding devm_led_classdev_register() to… |
CVE-2024-27020 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() nft_unregister_exp… |
CVE-2024-27019 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() nft_unregister_obj(… |
CVE-2024-27018 | High | 8.2 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: skip conntrack input hook for promisc packets For historical rea… |
CVE-2024-27017 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: walk over current view on netlink dump The generation mask can… |
CVE-2024-27016 | High | 7.1 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate pppoe header Ensure there is sufficient room to access the… |
CVE-2024-27015 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: incorrect pppoe tuple pppoe traffic reaching ingress path does not… |
CVE-2024-27014 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent deadlock while disabling aRFS When disabling aRFS under the `priv->sta… |
CVE-2024-27013 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: tun: limit printing rate when illegal packet received by tun dev vhost_worker will call t… |
CVE-2024-27012 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: restore set elements when delete set fails From abort path, nft_map… |
CVE-2024-27011 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memleak in map from abort path The delete set command does not… |
CVE-2024-27010 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix mirred deadlock on device recursion When the mirred action is used on a cl… |
CVE-2024-27009 | Medium | 4.7 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: s390/cio: fix race condition during online processing A race condition exists in ccw_devi… |
CVE-2024-27008 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm: nv04: Fix out of bounds access When Output Resource (dcb->or) value is assigned in f… |
CVE-2024-27007 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE Commit d7a08838… |
CVE-2024-27006 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Add missing count increment to thermal_debug_tz_trip_up() The count fiel… |
CVE-2024-27005 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: interconnect: Don't access req_list while it's being manipulated The icc_lock mutex was s… |
CVE-2024-27004 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking tree during disable_unused Doug reported [1] the follo… |
CVE-2024-27003 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking tree for clk_summary Similar to the previous commit, w… |
CVE-2024-27002 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: Do a runtime PM get on controllers during probe mt8183-mfgcfg has a mutual… |
CVE-2024-27001 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: comedi: vmk80xx: fix incomplete endpoint checking While vmk80xx does have endpoint checki… |
CVE-2024-27000 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: serial: mxs-auart: add spinlock around changing cts state The uart_handle_cts_change() fu… |
CVE-2024-26999 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: serial/pmac_zilog: Remove flawed mitigation for rx irq flood The mitigation was intended… |
CVE-2024-26998 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: serial: core: Clearing the circular buffer before NULLifying it The circular buffer is NU… |
CVE-2024-26997 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: host: Fix dereference issue in DDMA completion flow. Fixed variable dereferenc… |
CVE-2024-26996 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error When ncm f… |
CVE-2024-26995 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Correct the PDO counting in pd_set Off-by-one errors happen because nr_… |
CVE-2024-26994 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: speakup: Avoid crash on very long word In case a console is set up really large and conta… |
CVE-2024-26993 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: fs: sysfs: Fix reference leak in sysfs_break_active_protection() The sysfs_break_active_p… |
CVE-2024-26992 | High | 7.3 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/pmu: Disable support for adaptive PEBS Drop support for virtualizing adaptive PE… |
CVE-2024-26991 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes Fix KVM_SET_MEMORY_… |
CVE-2024-26990 | High | 8.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status Check kvm_mmu_… |
CVE-2024-26989 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: Fix level3 translation fault in swsusp_save() On arm64 machines, swsusp… |
CVE-2024-26988 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: init/main.c: Fix potential static_command_line memory overflow We allocate memory of size… |
CVE-2024-26987 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled When I did hard… |
CVE-2024-26986 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix memory leak in create_process failure Fix memory leak due to a leaked mmg… |
CVE-2024-26985 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix bo leak in intel_fb_bo_framebuffer_init Add a unreference bo in the error pat… |
CVE-2024-26984 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: nouveau: fix instmem race condition around ptr stores Running a lot of VK CTS in parallel… |
CVE-2024-26983 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: bootconfig: use memblock_free_late to free xbc memory to buddy On the time to free xbc me… |
CVE-2024-26982 | High | 7.1 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero Syskiller has produced… |
CVE-2024-26981 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix OOB in nilfs_set_de_type The size of the nilfs_type_by_mode array in the fs/n… |
CVE-2024-26980 | High | 8.2 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf If ->ProtocolId is SMB2_TRANSFORM_… |
CVE-2024-26978 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: serial: max310x: fix NULL pointer dereference in I2C instantiation When trying to instant… |
CVE-2024-26977 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: pci_iounmap(): Fix MMIO mapping leak The #ifdef ARCH_HAS_GENERIC_IOPORT_MAP accidentally… |
CVE-2024-26976 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: KVM: Always flush async #PF workqueue when vCPU is being destroyed Always flush the per-v… |
CVE-2024-26975 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix a NULL pointer dereference A NULL pointer dereference is trigge… |
CVE-2024-26974 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - resolve race condition during AER recovery During the PCI AER system's erro… |
CVE-2024-26973 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fat_encode_fh_nostale() encodes… |
CVE-2024-26971 | High | 7.3 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays The frequency table arr… |
CVE-2024-26970 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays The frequency table arr… |
CVE-2024-26969 | High | 7.3 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays The frequency table arr… |
CVE-2024-26968 | High | 7.3 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays The frequency table arr… |
CVE-2024-26967 | High | 7.3 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays The frequency table… |
CVE-2024-26966 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays The frequency table ar… |
CVE-2024-26965 | High | 7.3 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays The frequency table ar… |
CVE-2024-26964 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Add error handling in xhci_map_urb_for_dma Currently xhci_map_urb_for_dma() cr… |
CVE-2024-26963 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3-am62: fix module unload/reload behavior As runtime PM is enabled, the module ca… |
CVE-2024-26962 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape Fo… |
CVE-2024-26961 | High | 7.0 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154_llsec_key… |
CVE-2024-26960 | High | 7.0 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix race between free_swap_and_cache() and swapoff() There was previously a the… |
CVE-2024-26959 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix btnxpuart_close Fix scheduling while atomic BUG in btnxpuart_cl… |
CVE-2024-26958 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: nfs: fix UAF in direct writes In production we have been hitting the following warning co… |
CVE-2024-26957 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with hot-plugging crytpo… |
CVE-2024-26956 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix failure to detect DAT corruption in btree and direct mappings Patch series "n… |
CVE-2024-26955 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent kernel bug at submit_bh_wbc() Fix a bug where nilfs_get_block() returns a… |
CVE-2024-26954 | High | 8.1 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() If ->NameOffset of smb2_create_… |
CVE-2024-26953 | Critical | 9.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: esp: fix bad handling of pages from page_pool When the skb is reorganized during esp… |
CVE-2024-26952 | High | 8.3 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer offset is invalid I found potencial out-of… |