2024 CVEs (page 63)
Page 63 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-56541 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup() During ath12k module removal… |
CVE-2024-56540 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery invocation during probe and resume Refactor IPC send and rec… |
CVE-2024-56539 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() Replace… |
CVE-2024-56538 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_kms: Unplug DRM device before removal Prevent userspace accesses to the DRM d… |
CVE-2024-56537 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm: xlnx: zynqmp_disp: layer may be null while releasing layer->info can be null if we h… |
CVE-2024-56536 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: cw1200: Fix potential NULL dereference A recent refactoring was identified by stati… |
CVE-2024-56535 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg() kmalloc may fail… |
CVE-2024-56534 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: isofs: avoid memory leak in iocharset A memleak was found as below: unreferenced object… |
CVE-2024-56533 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: Use snd_card_free_when_closed() at disconnection The USB disconnect callback… |
CVE-2024-56532 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Use snd_card_free_when_closed() at disconnection The USB disconnect callbac… |
CVE-2024-56531 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Use snd_card_free_when_closed() at disconnection The USB disconnect callback… |
CVE-2024-53239 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release The current 6fire code tries to release th… |
CVE-2024-53238 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: adjust the position to init iso data anchor MediaTek iso data anchor in… |
CVE-2024-53237 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix use-after-free in device_for_each_child() Syzbot has reported the followin… |
CVE-2024-53236 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: xsk: Free skb when TX metadata options are invalid When a new skb is allocated for transm… |
CVE-2024-53235 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix file-backed mounts over FUSE syzbot reported a null-ptr-deref in fuse_read_arg… |
CVE-2024-53234 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: erofs: handle NONHEAD !delta[1] lclusters gracefully syzbot reported a WARNING in iomap_i… |
CVE-2024-53233 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: unicode: Fix utf8_load() error path utf8_load() requests the symbol "utf8_data_table" and… |
CVE-2024-53232 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Implement blocking domain This fixes a crash when surprise hot-unplugging a P… |
CVE-2024-53231 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() cpufreq_cpu_get_raw(… |
CVE-2024-53230 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() cpufreq_cpu_get_raw()… |
CVE-2024-53229 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the qp flush warnings in req When the qp is in error state, the status of W… |
CVE-2024-53228 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: Fix out-of-bounds array access In kvm_riscv_vcpu_sbi_init() the entry->ext_id… |
CVE-2024-53227 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Fix use-after-free in bfad_im_module_exit() BUG: KASAN: slab-use-after-free in… |
CVE-2024-53226 | High | 7.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() ib_map_mr_sg() allows ULPs… |
CVE-2024-53225 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift When configuring a kernel with… |
CVE-2024-53224 | High | 8.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Move events notifier registration to be after device registration Move pkey ch… |
CVE-2024-53223 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs Base clocks are the fir… |
CVE-2024-53222 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: zram: fix NULL pointer in comp_algorithm_show() LTP reported a NULL pointer dereference a… |
CVE-2024-53221 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix null-ptr-deref in f2fs_submit_page_bio() There's issue as follows when concurre… |
CVE-2024-53220 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to account dirty data in __get_secs_required() It will trigger system panic w/… |
CVE-2024-53219 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: virtiofs: use pages instead of pointer for kernel direct IO When trying to insert a 10MB… |
CVE-2024-53218 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix race in concurrent f2fs_stop_gc_thread In my test case, concurrent calls to f2f… |
CVE-2024-53217 | High | 7.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent NULL dereference in nfsd4_process_cb_update() @ses is initialized to NULL… |
CVE-2024-53216 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: nfsd: release svc_expkey/svc_export with rcu_work The last reference for `cache_head` can… |
CVE-2024-53215 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() There's issue as follows… |
CVE-2024-53214 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Properly hide first-in-list PCIe extended capability There are cases where a PC… |
CVE-2024-53213 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation In lan78xx_prob… |
CVE-2024-53212 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended ex… |
CVE-2024-53211 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net/l2tp: fix warning in l2tp_exit_net found by syzbot In l2tp's net exit handler, we che… |
CVE-2024-53210 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() Passing MSG_PEEK flag to s… |
CVE-2024-53209 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix receive ring space parameters when XDP is active The MTU setting at the time… |
CVE-2024-53208 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync This fixes the followin… |
CVE-2024-53207 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible deadlocks This fixes possible deadlocks like the following… |
CVE-2024-53206 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in reqsk_timer_handler(). The cited commit replaced inet_… |
CVE-2024-53205 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe In rtk_usb2phy_probe() devm_kzallo… |
CVE-2024-53204 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe In rtk_usb3phy_probe() devm_kzallo… |
CVE-2024-53203 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() The "command" variab… |
CVE-2024-53202 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix possible resource leak in fw_log_firmware_info() The alg instance sh… |
CVE-2024-53201 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe This comm… |
CVE-2024-53200 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp This commit a… |
CVE-2024-53199 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-audmix: Add NULL check in imx_audmix_probe devm_kasprintf() can return a NULL p… |
CVE-2024-53198 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() This pat… |
CVE-2024-53197 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus… |
CVE-2024-53196 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't retire aborted MMIO instruction Returning an abort to the guest for an… |
CVE-2024-53195 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Get rid of userspace_irqchip_in_use Improper use of userspace_irqchip_in_use… |
CVE-2024-53194 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot->bus on hot remove Dennis reports a boot crash on recent… |
CVE-2024-53193 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: clk: clk-loongson2: Fix memory corruption bug in struct loongson2_clk_provider Some heap… |
CVE-2024-53192 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: clk: clk-loongson2: Fix potential buffer overflow in flexible-array member access Flexibl… |
CVE-2024-53191 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix warning when unbinding If there is an error during some initialization… |
CVE-2024-53190 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures Syzkalle… |
CVE-2024-53189 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan The channels array in… |
CVE-2024-53188 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix crash when unbinding If there is an error during some initialization re… |
CVE-2024-53187 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: io_uring: check for overflows in io_pin_pages WARNING: CPU: 0 PID: 5834 at io_uring/memma… |
CVE-2024-53186 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in SMB request handling A race condition exists between SMB req… |
CVE-2024-53185 | High | 7.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix NULL ptr deref in crypto_aead_setkey() Neither SMB3.0 or SMB3.02 support… |
CVE-2024-53184 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: um: ubd: Do not use drvdata in release The drvdata is not available in release. Let's jus… |
CVE-2024-53183 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: um: net: Do not use drvdata in release The drvdata is not available in release. Let's jus… |
CVE-2024-53182 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: Revert "block, bfq: merge bfq_release_process_ref() into bfq_put_cooperator()" This rever… |
CVE-2024-53181 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: um: vector: Do not use drvdata in release The drvdata is not available in release. Let's… |
CVE-2024-53180 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Add sanity NULL check for the default mmap fault handler A driver might allow… |
CVE-2024-53179 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of signing key Customers have reported use-after-free in… |
CVE-2024-53178 | High | 7.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: smb: Don't leak cfid when reconnect races with open_cached_dir open_cached_dir() may eith… |
CVE-2024-53177 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to open_cached_dir error paths If open_cached_dir() encou… |
CVE-2024-53176 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: smb: During unmount, ensure all cached dir instances drop their dentry The unmount proces… |
CVE-2024-53175 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ipc: fix memleak if msg_init_ns failed in create_ipc_ns Percpu memory allocation may fail… |
CVE-2024-53174 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: make sure cache entry active before cache_show The function `c_show` was called w… |
CVE-2024-53173 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open() Yang Erkun reports that… |
CVE-2024-53172 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ubi: fastmap: Fix duplicate slab cache names while attaching Since commit 4c39529663b9 ("… |
CVE-2024-53171 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit After an insertion in T… |
CVE-2024-53170 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: block: fix uaf for flush rq while iterating tags blk_mq_clear_flush_rq_mapping() is not c… |
CVE-2024-53169 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: nvme-fabrics: fix kernel crash while shutting down controller The nvme keep-alive operati… |
CVE-2024-53168 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket BUG: KASAN: slab-use-after-f… |
CVE-2024-53167 | High | 7.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: nfs/blocklayout: Don't attempt unregister for invalid block device Since commit d869da91c… |
CVE-2024-53166 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix bfqq uaf in bfq_limit_depth() Set new allocated bfqq to bic or remove fre… |
CVE-2024-53165 | High | 7.4 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for… |
CVE-2024-53164 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch->q.qlen around qdisc_tree_redu… |
CVE-2024-3393 | High | 7.5 | 2024-12-27 | A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious pack… |
CVE-2024-12983 | Low | 2.4 | 2024-12-27 | A vulnerability classified as problematic has been found in code-projects Hospital Management System 1.0. This affects an unknown part of the file /hospital/hm… |
CVE-2024-56527 | High | 7.5 | 2024-12-27 | An issue was discovered in TCPDF before 6.8.0. The Error function lacks an htmlspecialchars call for the error message. |
CVE-2024-12982 | Low | 2.4 | 2024-12-27 | A vulnerability was found in PHPGurukul Blood Bank & Donor Management System 2.4. It has been rated as problematic. Affected by this issue is some unknown func… |
CVE-2024-12981 | Medium | 6.3 | 2024-12-27 | A vulnerability was found in CodeAstro Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of t… |
CVE-2024-11921 | Medium | 4.8 | 2024-12-27 | The GiveWP WordPress plugin before 3.19.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Sc… |
CVE-2024-11842 | Medium | 4.3 | 2024-12-27 | The DN Shipping by Weight for WooCommerce WordPress plugin before 1.2 does not have CSRF check in place when updating its settings, which could allow attackers… |
CVE-2024-11645 | Medium | 4.8 | 2024-12-27 | The float block WordPress plugin through 1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2024-11644 | Medium | 5.9 | 2024-12-27 | The WP-SVG WordPress plugin through 0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shor… |
CVE-2024-11605 | Medium | 4.8 | 2024-12-27 | The wp-publications WordPress plugin through 1.2 does not escape filenames before outputting them back in the page, which could allow high privilege users such… |
CVE-2024-56522 | High | 7.5 | 2024-12-27 | An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != (aka loose comparison) and does not use a constant-time function to compare TCPDF ta… |
CVE-2024-56521 | Critical | 9.8 | 2024-12-27 | An issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely. |
CVE-2024-56520 | High | 7.3 | 2024-12-27 | An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and… |