# Vulnerabilities published in 2024


- [CVE-2024-58002](https://insights.sbomify.com/CVE-2024-58002/): media: uvcvideo: Remove dangling pointers (high 7.8)
- [CVE-2024-58001](https://insights.sbomify.com/CVE-2024-58001/): ocfs2: handle a symlink read error correctly (medium 5.5)
- [CVE-2024-58000](https://insights.sbomify.com/CVE-2024-58000/): io_uring: prevent reg-wait speculations (medium 5.5)
- [CVE-2024-5800](https://insights.sbomify.com/CVE-2024-5800/): Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime (high 8.3)
- [CVE-2024-57999](https://insights.sbomify.com/CVE-2024-57999/): powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (high 8.8)
- [CVE-2024-57998](https://insights.sbomify.com/CVE-2024-57998/): OPP: add index check to assert to avoid buffer overflow in _read_freq() (high 7.3)
- [CVE-2024-57997](https://insights.sbomify.com/CVE-2024-57997/): wifi: wcn36xx: fix channel survey memory allocation size (high 8.8)
- [CVE-2024-57996](https://insights.sbomify.com/CVE-2024-57996/): net_sched: sch_sfq: don't allow 1 packet limit (high 7.8)
- [CVE-2024-57995](https://insights.sbomify.com/CVE-2024-57995/): wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (high 8.8)
- [CVE-2024-57994](https://insights.sbomify.com/CVE-2024-57994/): ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (medium 5.5)
- [CVE-2024-57993](https://insights.sbomify.com/CVE-2024-57993/): HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (medium 5.5)
- [CVE-2024-57992](https://insights.sbomify.com/CVE-2024-57992/): wifi: wilc1000: unregister wiphy only if it has been registered (medium 5.5)
- [CVE-2024-57991](https://insights.sbomify.com/CVE-2024-57991/): wifi: rtw89: chan: fix soft lockup in rtw89_entity_recalc_mgnt_roles() (medium 5.5)
- [CVE-2024-57990](https://insights.sbomify.com/CVE-2024-57990/): wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (high 7.8)
- [CVE-2024-5799](https://insights.sbomify.com/CVE-2024-5799/): CM Pop-Up Banners for WordPress < 1.7.3 - Contributor+ Stored XSS (medium 4.8)
- [CVE-2024-57989](https://insights.sbomify.com/CVE-2024-57989/): wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (medium 5.5)
- [CVE-2024-57988](https://insights.sbomify.com/CVE-2024-57988/): Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (medium 5.5)
- [CVE-2024-57987](https://insights.sbomify.com/CVE-2024-57987/): Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (medium 5.5)
- [CVE-2024-57986](https://insights.sbomify.com/CVE-2024-57986/): HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (high 7.1)
- [CVE-2024-57985](https://insights.sbomify.com/CVE-2024-57985/): firmware: qcom: scm: Cleanup global '__scm' on probe failures (high 7.0)
- [CVE-2024-57984](https://insights.sbomify.com/CVE-2024-57984/): i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition (high 7.8)
- [CVE-2024-57983](https://insights.sbomify.com/CVE-2024-57983/): mailbox: th1520: Fix memory corruption due to incorrect array size (high 7.8)
- [CVE-2024-57982](https://insights.sbomify.com/CVE-2024-57982/): xfrm: state: fix out-of-bounds read during lookup (high 7.8)
- [CVE-2024-57981](https://insights.sbomify.com/CVE-2024-57981/): usb: xhci: Fix NULL pointer dereference on certain command aborts (medium 5.5)
- [CVE-2024-57980](https://insights.sbomify.com/CVE-2024-57980/): media: uvcvideo: Fix double free in error path (high 7.8)
- [CVE-2024-5798](https://insights.sbomify.com/CVE-2024-5798/): Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims (low 2.6)
- [CVE-2024-57979](https://insights.sbomify.com/CVE-2024-57979/): pps: Fix a use-after-free (high 7.8)
- [CVE-2024-57978](https://insights.sbomify.com/CVE-2024-57978/): media: imx-jpeg: Fix potential error pointer dereference in detach_pm() (medium 5.5)
- [CVE-2024-57977](https://insights.sbomify.com/CVE-2024-57977/): memcg: fix soft lockup in the OOM process (medium 5.5)
- [CVE-2024-57976](https://insights.sbomify.com/CVE-2024-57976/): btrfs: do proper folio cleanup when cow_file_range() failed (high 7.8)
- [CVE-2024-57975](https://insights.sbomify.com/CVE-2024-57975/): btrfs: do proper folio cleanup when run_delalloc_nocow() failed (high 7.8)
- [CVE-2024-57974](https://insights.sbomify.com/CVE-2024-57974/): udp: Deal with race between UDP socket address change and rehash (medium 4.7)
- [CVE-2024-57973](https://insights.sbomify.com/CVE-2024-57973/): rdma/cxgb4: Prevent potential integer overflow on 32bit (high 8.1)
- [CVE-2024-57972](https://insights.sbomify.com/CVE-2024-57972/): Denial of service in HoloLens (medium 6.5)
- [CVE-2024-57971](https://insights.sbomify.com/CVE-2024-57971/): Code injection in KNOWAGE (critical 9.1)
- [CVE-2024-57970](https://insights.sbomify.com/CVE-2024-57970/): Memory corruption in libarchive (medium 4.0)
- [CVE-2024-57969](https://insights.sbomify.com/CVE-2024-57969/): Missing authorization in MISP (medium 4.3)
- [CVE-2024-57968](https://insights.sbomify.com/CVE-2024-57968/): Advantive VeraCore Unrestricted File Upload (critical 9.9, exploited in the wild)
- [CVE-2024-57967](https://insights.sbomify.com/CVE-2024-57967/): Privilege escalation in Privileged Access Manager (medium 4.2)
- [CVE-2024-57966](https://insights.sbomify.com/CVE-2024-57966/): Path traversal in ark (medium 5.0)
- [CVE-2024-57965](https://insights.sbomify.com/CVE-2024-57965/): Security feature bypass in axios (not scored)
- [CVE-2024-57964](https://insights.sbomify.com/CVE-2024-57964/): Insecure Loading of Dynamic Link Libraries in HVAC Energy Saving Program (high 7.3)
- [CVE-2024-57963](https://insights.sbomify.com/CVE-2024-57963/): Insecure Loading of Dynamic Link Libraries in USB-CONVERTERCABLE DRIVER (high 7.3)
- [CVE-2024-57962](https://insights.sbomify.com/CVE-2024-57962/): Other in HarmonyOS (medium 6.1)
- [CVE-2024-57961](https://insights.sbomify.com/CVE-2024-57961/): Memory corruption in EMUI (medium 6.8)
- [CVE-2024-57960](https://insights.sbomify.com/CVE-2024-57960/): Other in EMUI (high 7.7)
- [CVE-2024-5796](https://insights.sbomify.com/CVE-2024-5796/): Infinite <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via project_url Parameter (medium 6.4)
- [CVE-2024-57959](https://insights.sbomify.com/CVE-2024-57959/): Use after free in EMUI (medium 6.1)
- [CVE-2024-57958](https://insights.sbomify.com/CVE-2024-57958/): Memory corruption in EMUI (medium 5.7)
- [CVE-2024-57957](https://insights.sbomify.com/CVE-2024-57957/): Information disclosure in HarmonyOS (medium 6.6)
- [CVE-2024-57956](https://insights.sbomify.com/CVE-2024-57956/): Memory corruption in HarmonyOS (low 2.8)
- [CVE-2024-57955](https://insights.sbomify.com/CVE-2024-57955/): Memory corruption in HarmonyOS (medium 6.1)
- [CVE-2024-57954](https://insights.sbomify.com/CVE-2024-57954/): Missing authorization in HarmonyOS (medium 6.2)
- [CVE-2024-57953](https://insights.sbomify.com/CVE-2024-57953/): rtc: tps6594: Fix integer overflow on 32bit systems (medium 5.5)
- [CVE-2024-57952](https://insights.sbomify.com/CVE-2024-57952/): Revert "libfs: fix infinite directory reads for offset dir" (high 7.1)
- [CVE-2024-57951](https://insights.sbomify.com/CVE-2024-57951/): hrtimers: Handle CPU state correctly on hotplug (high 7.8)
- [CVE-2024-57950](https://insights.sbomify.com/CVE-2024-57950/): drm/amd/display: Initialize denominator defaults to 1 (medium 5.5)
- [CVE-2024-5795](https://insights.sbomify.com/CVE-2024-5795/): Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion (high 7.7)
- [CVE-2024-57949](https://insights.sbomify.com/CVE-2024-57949/): irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() (medium 5.5)
- [CVE-2024-57948](https://insights.sbomify.com/CVE-2024-57948/): mac802154: check local interfaces before deleting sdata list (medium 5.5)
- [CVE-2024-57947](https://insights.sbomify.com/CVE-2024-57947/): netfilter: nf_set_pipapo: fix initial map fill (critical 9.8)
- [CVE-2024-57946](https://insights.sbomify.com/CVE-2024-57946/): virtio-blk: don't keep queue frozen during system suspend (medium 5.5)
- [CVE-2024-57945](https://insights.sbomify.com/CVE-2024-57945/): riscv: mm: Fix the out of bound issue of vmemmap address (high 7.8)
- [CVE-2024-57944](https://insights.sbomify.com/CVE-2024-57944/): iio: adc: ti-ads1298: Add NULL check in ads1298_init (medium 5.5)
- [CVE-2024-57943](https://insights.sbomify.com/CVE-2024-57943/): exfat: fix the new buffer was not zeroed before writing (high 7.8)
- [CVE-2024-57942](https://insights.sbomify.com/CVE-2024-57942/): netfs: Fix ceph copy to cache on write-begin (medium 5.5)
- [CVE-2024-57941](https://insights.sbomify.com/CVE-2024-57941/): netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (medium 5.5)
- [CVE-2024-57940](https://insights.sbomify.com/CVE-2024-57940/): exfat: fix the infinite loop in exfat_readdir() (medium 5.5)
- [CVE-2024-57939](https://insights.sbomify.com/CVE-2024-57939/): riscv: Fix sleeping in invalid context in die() (medium 5.5)
- [CVE-2024-57938](https://insights.sbomify.com/CVE-2024-57938/): net/sctp: Prevent autoclose integer overflow in sctp_association_init() (medium 5.5)
- [CVE-2024-57936](https://insights.sbomify.com/CVE-2024-57936/): RDMA/bnxt_re: Fix max SGEs for the Work Request (critical 9.8)
- [CVE-2024-57935](https://insights.sbomify.com/CVE-2024-57935/): RDMA/hns: Fix accessing invalid dip_ctx during destroying QP (medium 5.5)
- [CVE-2024-57934](https://insights.sbomify.com/CVE-2024-57934/): fgraph: Add READ_ONCE() when accessing fgraph_array[] (medium 4.7)
- [CVE-2024-57933](https://insights.sbomify.com/CVE-2024-57933/): gve: guard XSK operations on the existence of queues (medium 5.5)
- [CVE-2024-57932](https://insights.sbomify.com/CVE-2024-57932/): gve: guard XDP xmit NDO on existence of xdp queues (critical 9.8)
- [CVE-2024-57931](https://insights.sbomify.com/CVE-2024-57931/): selinux: ignore unknown extended permissions (medium 5.5)
- [CVE-2024-57930](https://insights.sbomify.com/CVE-2024-57930/): tracing: Have process_string() also allow arrays (medium 5.5)
- [CVE-2024-5793](https://insights.sbomify.com/CVE-2024-5793/): Houzez Theme - Functionality <= 3.2.2 - Authenticated (Seller+) SQL Injection (high 8.8)
- [CVE-2024-57929](https://insights.sbomify.com/CVE-2024-57929/): dm array: fix releasing a faulty array block twice in dm_array_cursor_end (high 7.8)
- [CVE-2024-57928](https://insights.sbomify.com/CVE-2024-57928/): netfs: Fix enomem handling in buffered reads (high 7.1)
- [CVE-2024-57927](https://insights.sbomify.com/CVE-2024-57927/): nfs: Fix oops in nfs_netfs_init_request() when copying to cache (medium 5.5)
- [CVE-2024-57926](https://insights.sbomify.com/CVE-2024-57926/): drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err (high 7.8)
- [CVE-2024-57925](https://insights.sbomify.com/CVE-2024-57925/): ksmbd: fix a missing return value check bug (high 7.1)
- [CVE-2024-57924](https://insights.sbomify.com/CVE-2024-57924/): fs: relax assertions on failure to encode file handles (medium 5.5)
- [CVE-2024-57923](https://insights.sbomify.com/CVE-2024-57923/): btrfs: zlib: fix avail_in bytes for s390 zlib HW compression path (medium 5.5)
- [CVE-2024-57922](https://insights.sbomify.com/CVE-2024-57922/): drm/amd/display: Add check for granularity in dml ceil/floor helpers (medium 5.5)
- [CVE-2024-57921](https://insights.sbomify.com/CVE-2024-57921/): drm/amdgpu: Add a lock when accessing the buddy trim function (high 7.8)
- [CVE-2024-5792](https://insights.sbomify.com/CVE-2024-5792/): Houzez CRM <= 1.4.2 - Authenticated (Seller+) SQL Injection (high 8.8)
- [CVE-2024-57919](https://insights.sbomify.com/CVE-2024-57919/): drm/amd/display: fix divide error in DM plane scale calcs (medium 5.5)
- [CVE-2024-57918](https://insights.sbomify.com/CVE-2024-57918/): drm/amd/display: fix page fault due to max surface definition mismatch (high 7.8)
- [CVE-2024-57917](https://insights.sbomify.com/CVE-2024-57917/): topology: Keep the cpumask unchanged when printing cpumap (high 7.8)
- [CVE-2024-57916](https://insights.sbomify.com/CVE-2024-57916/): misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling (medium 5.5)
- [CVE-2024-57914](https://insights.sbomify.com/CVE-2024-57914/): usb: typec: tcpci: fix NULL pointer issue on shared irq case (medium 5.5)
- [CVE-2024-57913](https://insights.sbomify.com/CVE-2024-57913/): usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (medium 4.7)
- [CVE-2024-57912](https://insights.sbomify.com/CVE-2024-57912/): iio: pressure: zpa2326: fix information leak in triggered buffer (high 7.1)
- [CVE-2024-57911](https://insights.sbomify.com/CVE-2024-57911/): iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (high 7.1)
- [CVE-2024-57910](https://insights.sbomify.com/CVE-2024-57910/): iio: light: vcnl4035: fix information leak in triggered buffer (high 7.1)
- [CVE-2024-5791](https://insights.sbomify.com/CVE-2024-5791/): Cross-site scripting in Online Booking & Scheduling Calendar for WordPress by vcita (high 7.2)
- [CVE-2024-57909](https://insights.sbomify.com/CVE-2024-57909/): iio: light: bh1745: fix information leak in triggered buffer (high 7.1)
- [CVE-2024-57908](https://insights.sbomify.com/CVE-2024-57908/): iio: imu: kmx61: fix information leak in triggered buffer (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/178/