2024 CVEs (page 62)
Page 62 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-56640 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix LGR and link use-after-free issue We encountered a LGR/link use-after-free i… |
CVE-2024-56639 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: hsr: must allocate more bytes for RedBox support Blamed commit forgot to change hsr_… |
CVE-2024-56638 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: incorrect percpu area handling under softirq Softirq can interrupt… |
CVE-2024-56637 | High | 7.3 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Hold module reference while requesting a module User space may unload i… |
CVE-2024-56636 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: geneve: do not assume mac header is set in geneve_xmit_skb() We should not assume mac hea… |
CVE-2024-56635 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: avoid potential UAF in default_operstate() syzbot reported an UAF in default_opersta… |
CVE-2024-56634 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: gpio: grgpio: Add NULL check in grgpio_probe devm_kasprintf() can return a NULL pointer o… |
CVE-2024-56633 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg The current sk memory accountin… |
CVE-2024-56632 | High | 7.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix the memleak while create new ctrl failed Now while we create new ctrl faile… |
CVE-2024-56631 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Fix slab-use-after-free read in sg_release() Fix a use-after-free bug in sg_rel… |
CVE-2024-56630 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: free inode when ocfs2_get_init_inode() fails syzbot is reporting busy inodes after… |
CVE-2024-56629 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix when get product name maybe null pointer Due to incorrect dev->product re… |
CVE-2024-56628 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific huge_pte_clear() When executing mm selftests run_vmt… |
CVE-2024-56627 | High | 8.1 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read An offset from client could be a n… |
CVE-2024-56626 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write An offset from client could be a… |
CVE-2024-56625 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: can: dev: can_set_termination(): allow sleeping GPIOs In commit 6e86a1543c37 ("can: dev… |
CVE-2024-56624 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix out_fput in iommufd_fault_alloc() As fput() calls the file->f_op->release op… |
CVE-2024-56623 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use after free on unload System crash is observed with stack trace war… |
CVE-2024-56622 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: sysfs: Prevent div by zero Prevent a division by 0 when monitoring is no… |
CVE-2024-56621 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Cancel RTC work during ufshcd_remove() Currently, RTC work is only cance… |
CVE-2024-56620 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled Otherwise, it will result in… |
CVE-2024-56619 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() Syzbot reported t… |
CVE-2024-56618 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: gpcv2: Adjust delay after power up handshake The udelay(5) is not enough… |
CVE-2024-56617 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU Commit … |
CVE-2024-56616 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Fix MST sideband message body length check Fix the MST sideband message body… |
CVE-2024-56615 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: bpf: fix OOB devmap writes when deleting elements Jordy reported issue against XSKMAP whi… |
CVE-2024-56614 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: xsk: fix OOB map writes when deleting elements Jordy says: " In the xsk_map_delete_elem… |
CVE-2024-56613 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: sched/numa: fix memory leak due to the overwritten vma->numab_state [Problem Description]… |
CVE-2024-56612 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: mm/gup: handle NULL pages in unpin_user_pages() The recent addition of "pofs" (pages or f… |
CVE-2024-56611 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM We current… |
CVE-2024-56610 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: kcsan: Turn report_filterlist_lock into a raw_spinlock Ran Xiaokai reports that with a KC… |
CVE-2024-56609 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb When removing kernel modules… |
CVE-2024-56608 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' An issue was ide… |
CVE-2024-56607 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() When I try to manually… |
CVE-2024-56606 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: af_packet: avoid erroring out after sock_init_data() in packet_create() After sock_init_d… |
CVE-2024-56605 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() bt_soc… |
CVE-2024-56604 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() bt_sock_alloc… |
CVE-2024-56603 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: af_can: do not leave a dangling sk pointer in can_create() On error can_create() fre… |
CVE-2024-56602 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() sock_init_data… |
CVE-2024-56601 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inet_create() sock_init_data() attaches… |
CVE-2024-56600 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: inet6: do not leave a dangling sk pointer in inet6_create() sock_init_data() attache… |
CVE-2024-56599 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: avoid NULL pointer error during sdio remove When running 'rmmod ath10k', at… |
CVE-2024-56598 | High | 7.1 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: jfs: array-index-out-of-bounds fix in dtReadFirst The value of stbl can be sometimes out… |
CVE-2024-56597 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix shift-out-of-bounds in dbSplit When dmt_budmin is less than zero, it causes erro… |
CVE-2024-56596 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in jfs_readdir The stbl might contain some invalid val… |
CVE-2024-56595 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree When the value of lp i… |
CVE-2024-56594 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: set the right AMDGPU sg segment limitation The driver needs to set the correc… |
CVE-2024-56593 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() This… |
CVE-2024-56592 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: bpf: Call free_htab_elem() after htab_unlock_bucket() For htab of maps, when the map is r… |
CVE-2024-56591 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Use disable_delayed_work_sync This makes use of disable_delayed_work… |
CVE-2024-56590 | High | 7.6 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet This fixes not che… |
CVE-2024-56589 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Add cond_resched() for no forced preemption model For no forced preemptio… |
CVE-2024-56588 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Create all dump files during debugfs initialization For the current debug… |
CVE-2024-56587 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: leds: class: Protect brightness_show() with led_cdev->led_access mutex There is NULL poin… |
CVE-2024-56586 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. creating a larg… |
CVE-2024-56585 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix sleeping in atomic context for PREEMPT_RT Commit bab1c299f3945ffe79 ("Loon… |
CVE-2024-56584 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: io_uring/tctx: work around xa_store() allocation error issue syzbot triggered the followi… |
CVE-2024-56583 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix warning in migrate_enable for boosted tasks When running the followin… |
CVE-2024-56582 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free in btrfs_encoded_read_endio() Shinichiro reported the following… |
CVE-2024-56581 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: ref-verify: fix use-after-free after invalid ref action At btrfs_ref_tree_mod() af… |
CVE-2024-56580 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: fix error path on configuration of power domains There is a chance to… |
CVE-2024-56579 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: media: amphion: Set video drvdata before register video device The video drvdata should b… |
CVE-2024-56578 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Set video drvdata before register video device The video drvdata should… |
CVE-2024-56577 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: Fix null-ptr-deref during unload module The workqueue should be destroye… |
CVE-2024-56576 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix crash in the probe error path when using polling If an error oc… |
CVE-2024-56575 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Ensure power suppliers be suspended before detach them The power supplie… |
CVE-2024-56574 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: media: ts2020: fix null-ptr-deref in ts2020_probe() KASAN reported a null-ptr-deref issue… |
CVE-2024-56573 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: efi/libstub: Free correct pointer on failure cmdline_ptr is an out parameter, which is no… |
CVE-2024-56572 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() The… |
CVE-2024-56570 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovl_dentry_wei… |
CVE-2024-56569 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix regression with module command in stack_trace_filter When executing the follo… |
CVE-2024-56568 | Medium | 4.7 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Defer probe of clients after smmu device bound Null pointer dereference o… |
CVE-2024-56567 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ad7780: fix division by zero in ad7780_write_raw() In the ad7780_write_raw() , val2 can b… |
CVE-2024-56566 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: mm/slub: Avoid list corruption when removing a slab from the full list Boot with slub_deb… |
CVE-2024-56565 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to drop all discards after creating snapshot on lvm device Piergiorgio reported… |
CVE-2024-56564 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ceph: pass cred pointer to ceph_mds_auth_match() This eliminates a redundant get_current_… |
CVE-2024-56563 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix cred leak in ceph_mds_check_access() get_current_cred() increments the referenc… |
CVE-2024-56562 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() if (dev->boardinfo… |
CVE-2024-56561 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy() pci_epc_destroy() invokes p… |
CVE-2024-56560 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: slab: Fix too strict alignment check in create_cache() On m68k, where the minimum alignme… |
CVE-2024-56559 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address into one oper… |
CVE-2024-56558 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: nfsd: make sure exp active before svc_export_show The function `e_show` was called with p… |
CVE-2024-56557 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer The AD7923 was updated to… |
CVE-2024-56556 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: binder: fix node UAF in binder_add_freeze_work() In binder_add_freeze_work() we iterate o… |
CVE-2024-56555 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: binder: fix OOB in binder_add_freeze_work() In binder_add_freeze_work() we iterate over t… |
CVE-2024-56554 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: binder: fix freeze UAF in binder_release_work() When a binder reference is cleaned up, an… |
CVE-2024-56553 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: binder: fix memleak of proc->delivered_freeze If a freeze notification is cleared with BC… |
CVE-2024-56552 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc_submit: fix race around suspend_pending Currently in some testcases we can tri… |
CVE-2024-56551 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix usage slab after free [ +0.000021] BUG: KASAN: slab-use-after-free in dr… |
CVE-2024-56550 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: s390/stacktrace: Use break instead of return statement arch_stack_walk_user_common() cont… |
CVE-2024-12985 | Medium | 6.3 | 2024-12-27 | A vulnerability classified as critical was found in Overtek OT-E801G OTE801G65.1.1.0. This vulnerability affects unknown code of the file /diag_ping.cmd?action… |
CVE-2024-12984 | Medium | 5.3 | 2024-12-27 | A vulnerability classified as problematic has been found in Amcrest IP2M-841B, IP2M-841W, IPC-IP2M-841B, IPC-IP3M-943B, IPC-IP3M-943S, IPC-IP3M-HX2B and IPC-IP… |
CVE-2024-56549 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix NULL pointer dereference in object->file At present, the object->file has… |
CVE-2024-56548 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't query the device logical block size multiple times Devices block sizes may… |
CVE-2024-56547 | Medium | 4.7 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: rcu/nocb: Fix missed RCU barrier on deoffloading Currently, running rcutorture test with… |
CVE-2024-56546 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend() If we fail to al… |
CVE-2024-56545 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: streamline driver probe to avoid devres issues It was found that unloading '… |
CVE-2024-56544 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: udmabuf: change folios array from kmalloc to kvmalloc When PAGE_SIZE 4096, MAX_PAGE_ORDER… |
CVE-2024-56543 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Skip Rx TID cleanup for self peer During peer create, dp setup for the peer… |
CVE-2024-56542 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a memleak issue when driver is removed Running "modprobe amdgpu" the… |