2024 CVEs (page 309)
Page 309 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-26900 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: md: fix kmemleak of rdev->serial If kobject_add() is fail in bind_rdev_to_array(), 'rdev-… |
CVE-2024-26899 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: block: fix deadlock between bd_link_disk_holder and partition scan 'open_mutex' of gendis… |
CVE-2024-26898 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts This patch is against CV… |
CVE-2024-26897 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete The ath9k_wmi_… |
CVE-2024-26896 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix memory leak when starting AP Kmemleak reported this error: unreferenc… |
CVE-2024-26895 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces wilc_netdev… |
CVE-2024-26894 | Medium | 6.0 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() After unregistering… |
CVE-2024-26893 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix double free in SMC transport cleanup path When the generic SCMI c… |
CVE-2024-26892 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix use-after-free in free_irq() From commit a304e1b82808 ("[PATCH]… |
CVE-2024-26891 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected For those en… |
CVE-2024-26890 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: fix out of bounds memory access The problem is detected by KASAN. btrtl… |
CVE-2024-26889 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size na… |
CVE-2024-26888 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: Fix memory leak Fix leaking buffer allocated to send MSFT_OP_LE_MONITOR_… |
CVE-2024-26887 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Fix memory leak This checks if CONFIG_DEV_COREDUMP is enabled before at… |
CVE-2024-26886 | Medium | 6.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: af_bluetooth: Fix deadlock Attemting to do sock_lock on .recvmsg may cause a d… |
CVE-2024-26885 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix DEVMAP_HASH overflow check on 32-bit arches The devmap code allocates a number h… |
CVE-2024-26884 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix hashtab overflow check on 32-bit arches The hashtab code relies on roundup_pow_o… |
CVE-2024-26883 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stackmap overflow check on 32-bit arches The stackmap code relies on roundup_pow… |
CVE-2024-26882 | High | 7.3 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() Apply the same fix than… |
CVE-2024-26881 | High | 7.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when 1588 is received on HIP08 devices The HIP08 devices does… |
CVE-2024-26880 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: dm: call the resume method on internal suspend There is this reported crash when experime… |
CVE-2024-26879 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: clk: meson: Add missing clocks to axg_clk_regmaps Some clocks were missing from axg_clk_r… |
CVE-2024-26878 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: quota: Fix potential NULL pointer dereference Below race may cause NULL pointer dereferen… |
CVE-2024-26877 | Critical | 9.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx - call finalize with bh disabled When calling crypto_finalize_request, BH… |
CVE-2024-26876 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: adv7511: fix crash on irq during probe Moved IRQ registration down to end of… |
CVE-2024-26875 | Medium | 6.4 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix uaf in pvr2_context_set_notify [Syzbot reported] BUG: KASAN: slab-use… |
CVE-2024-26874 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip It's possible tha… |
CVE-2024-26873 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Fix a deadlock issue related to automatic dump If we issue a disabling PH… |
CVE-2024-26872 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Do not register event handler until srpt device is fully setup Upon rare occas… |
CVE-2024-26871 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix NULL pointer dereference in f2fs_submit_page_write() BUG: kernel NULL pointer d… |
CVE-2024-26870 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 A call to listxattr() with a… |
CVE-2024-26869 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption… |
CVE-2024-26868 | High | 7.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: nfs: fix panic when nfs4_ff_layout_prepare_ds() fails We've been seeing the following pan… |
CVE-2024-26867 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: comedi: comedi_8255: Correct error in subdevice initialization The refactoring done in co… |
CVE-2024-26866 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: spi: lpspi: Avoid potential use-after-free in probe() fsl_lpspi_probe() is allocating/dis… |
CVE-2024-26865 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsk_timer_handler(). syzkaller reported a warnin… |
CVE-2024-26864 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix refcnt handling in __inet_hash_connect(). syzbot reported a warning in sk_nulls_… |
CVE-2024-26863 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in hsr_get_node() KMSAN reported the following uninit-value… |
CVE-2024-26862 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: packet: annotate data-races around ignore_outgoing ignore_outgoing is read locklessly fro… |
CVE-2024-26861 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: wireguard: receive: annotate data-race around receiving_counter.counter Syzkaller with KC… |
CVE-2024-26860 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a memory leak when rechecking the data Memory for the "checksums" point… |
CVE-2024-26859 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net/bnx2x: Prevent access to a freed page in page_pool Fix race condition leading to syst… |
CVE-2024-26858 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after po… |
CVE-2024-26857 | High | 7.3 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: geneve: make sure to pull inner header in geneve_rx() syzbot triggered a bug in geneve_rx… |
CVE-2024-26856 | High | 8.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net: sparx5: Fix use after free inside sparx5_del_mact_entry Based on the static analyzis… |
CVE-2024-26855 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() The function ice… |
CVE-2024-26854 | High | 7.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: ice: fix uninitialized dplls mutex usage The pf->dplls.lock mutex is initialized too late… |
CVE-2024-26853 | Critical | 9.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: igc: avoid returning frame twice in XDP_REDIRECT When a frame can not be transmitted in X… |
CVE-2024-26852 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() syzbot found another use-after-f… |
CVE-2024-26851 | High | 7.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: Add protection for bmp length out of range UBSAN load repor… |
CVE-2024-26850 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: mm/debug_vm_pgtable: fix BUG_ON with pud advanced test Architectures like powerpc add deb… |
CVE-2024-26849 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: netlink: add nla be16/32 types to minlen array BUG: KMSAN: uninit-value in nla_validate_r… |
CVE-2024-26847 | Medium | 5.1 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: use correct function name for resetting TCE tables The PAPR spec spells the… |
CVE-2024-32531 | High | 7.1 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest themes GuCherry Blog allows Reflected XSS.This is… |
CVE-2024-32530 | Medium | 6.5 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PressTigers Simple Testimonials Showcase allows Stored XS… |
CVE-2024-32529 | Medium | 6.5 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Momoyoga Yoga Schedule Momoyoga allows Stored XSS.This is… |
CVE-2024-32528 | High | 7.1 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Seerox WP Dynamic Keywords Injector allows Reflected XSS… |
CVE-2024-32527 | Medium | 6.5 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jotform Jotform Online Forms allows Stored XSS.This issue… |
CVE-2024-32526 | Medium | 6.5 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Flector Easy Textillate allows Stored XSS.This issue affe… |
CVE-2024-32510 | High | 7.1 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Loopus WP Cost Estimation & Payment Forms Builder allows… |
CVE-2024-32508 | Medium | 6.5 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in deTheme DethemeKit For Elementor allows Stored XSS.This i… |
CVE-2024-32505 | Medium | 6.5 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite… |
CVE-2024-32457 | Medium | 6.5 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The CSSIgniter Team Elements Plus! allows Stored XSS.This… |
CVE-2024-32456 | Medium | 6.5 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EnvoThemes Envo Extra allows Stored XSS.This issue affect… |
CVE-2024-32130 | Medium | 6.5 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paystack Payment Forms for Paystack allows Stored XSS.Thi… |
CVE-2024-26846 | Medium | 4.4 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between… |
CVE-2024-26845 | High | 7.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Add TMF to tmr_list handling An abort that is responded to by iSCSI i… |
CVE-2024-26844 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: block: Fix WARNING in _copy_from_iter Syzkaller reports a warning in _copy_from_iter beca… |
CVE-2024-26843 | Medium | 6.0 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size md_size will have been… |
CVE-2024-26842 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd() When task_tag >= 32 (in MCQ mode)… |
CVE-2024-26841 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Update cpu_sibling_map when disabling nonboot CPUs Update cpu_sibling_map when… |
CVE-2024-26840 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix memory leak in cachefiles_add_cache() The following memory leak was repor… |
CVE-2024-26839 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix a memleak in init_credit_return When dma_alloc_coherent fails to allocate dd… |
CVE-2024-26838 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix KASAN issue with tasklet KASAN testing revealed the following issue assoc… |
CVE-2024-26837 | Medium | 4.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: switchdev: Skip MDB replays of deferred events on offload Before this change… |
CVE-2024-26836 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix password opcode ordering for workstations The Lenovo worksta… |
CVE-2024-26835 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: set dormant flag on hook register failure We need to set the dorman… |
CVE-2024-26834 | High | 7.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: release dst in case direct xmit path is used Direct xmit doe… |
CVE-2024-26833 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix memory leak in dm_sw_fini() After destroying dmub_srv, the memory as… |
CVE-2024-26832 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix missing folio cleanup in writeback race path In zswap_writeback_entry(), a… |
CVE-2024-26831 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: net/handshake: Fix handshake_req_destroy_test1 Recently, handshake_req_destroy_test1 star… |
CVE-2024-26830 | High | 8.4 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: i40e: Do not allow untrusted VF to remove administratively set MAC Currently when PF admi… |
CVE-2024-26829 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: media: ir_toy: fix a memleak in irtoy_tx When irtoy_command fails, buf should be freed si… |
CVE-2024-26828 | Critical | 9.4 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer… |
CVE-2024-26826 | High | 7.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data re-injection from stale subflow When the MPTCP PM detects that a subflow… |
CVE-2024-26825 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free rx_data_reassembly skb on NCI device cleanup rx_data_reassembly skb is sto… |
CVE-2024-26824 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - Remove bogus SGL free on zero-length error path When a zero-length m… |
CVE-2024-26823 | High | 7.8 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems While refactoring the wa… |
CVE-2024-26822 | High | 8.7 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, uid and cruid for multiuser automounts When uid, gid and cru… |
CVE-2024-26820 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed If hv_netvsc driver… |
CVE-2024-26818 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: tools/rtla: Fix clang warning about mount_point var size clang is reporting this warning… |
CVE-2024-1350 | Medium | 5.3 | 2024-04-17 | Missing Authorization vulnerability in Prasidhda Malla Honeypot for WP Comment.This issue affects Honeypot for WP Comment: from n/a through 2.2.3. |
CVE-2024-32546 | High | 7.1 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adam Bowen Tax Rate Upload allows Reflected XSS.This issu… |
CVE-2024-32545 | High | 7.1 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Canva Canva – Design beautiful blog graphics allows Refle… |
CVE-2024-32544 | High | 7.1 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Netgsm allows Reflected XSS.This issue affects Netgsm: fr… |
CVE-2024-32543 | High | 7.1 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Minoji MJ Update History allows Reflected XSS.This issue… |
CVE-2024-32542 | High | 7.1 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Organic Themes Bulk Block Converter allows Reflected XSS… |
CVE-2024-32541 | High | 7.1 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tobias Battenberg WP-Cufon allows Stored XSS.This issue a… |
CVE-2024-32540 | Medium | 5.9 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Web357 Fixed HTML Toolbar allows Stored XSS.This issue af… |
CVE-2024-32539 | Medium | 6.5 | 2024-04-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomUnited WP File Download Light allows Stored XSS.This… |