Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 185 of 521.
- CVE-2024-56755 netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING
- CVE-2024-56754 crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- CVE-2024-56753 drm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfx_v9_0 Module
- CVE-2024-56752 drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
- CVE-2024-56751 ipv6: release nexthop on device removal
- CVE-2024-56750 erofs: fix blksize < PAGE_SIZE for file-backed mounts
- CVE-2024-5675 Unreliable data deserialization vulnerability in Mentor
- CVE-2024-56749 dlm: fix dlm_recover_members refcount on error
- CVE-2024-56748 scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- CVE-2024-56747 scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- CVE-2024-56746 fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- CVE-2024-56745 PCI: Fix reset_method_store() memory leak
- CVE-2024-56744 f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
- CVE-2024-56743 nfs_common: must not hold RCU while calling nfsd_file_put_local
- CVE-2024-56742 vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
- CVE-2024-56740 nfs/localio: must clear res.replen in nfs_local_read_done
- CVE-2024-5674 Newsletter - API v1 and v2 addon for Newsletter <= 2.4.5 - Missing Authorization to Email Subscribers Management
- CVE-2024-56739 rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- CVE-2024-56738 Weak cryptography in GRUB2
- CVE-2024-56737 Memory corruption in GRUB2
- CVE-2024-56736 Apache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config Oss
- CVE-2024-56734 Better Auth has an Open Redirect Vulnerability in Verify Email Endpoint
- CVE-2024-56733 Password Pusher Allows Session Token Interception Leading to Potential Hijacking
- CVE-2024-56732 HarfBuzz heap-buffer-overflow on hb_cairo_glyphs_from_buffer
- CVE-2024-56731 Gogs deletion of internal files allows remote command execution
- CVE-2024-56730 net/9p/usbg: fix handling of the failed kzalloc() memory allocation
- CVE-2024-5673 Cross-Site Scripting in PHP File Manager by Dulldusk
- CVE-2024-56729 smb: Initialize cfid->tcon before performing network ops
- CVE-2024-56728 octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- CVE-2024-56727 octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c
- CVE-2024-56726 octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
- CVE-2024-56725 octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c
- CVE-2024-56724 mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
- CVE-2024-56723 mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
- CVE-2024-56722 RDMA/hns: Fix cpu stuck caused by printings during reset
- CVE-2024-56721 x86/CPU/AMD: Terminate the erratum_1386_microcode array
- CVE-2024-56720 bpf, sockmap: Several fixes to bpf_msg_pop_data
- CVE-2024-5672 Red Lion Europe: mbNET.mini vulnerable to OS command injection
- CVE-2024-56719 net: stmmac: fix TSO DMA API usage causing oops
- CVE-2024-56718 net/smc: protect link down work from execute after lgr freed
- CVE-2024-56717 net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()
- CVE-2024-56716 netdevsim: prevent bad user input in nsim_dev_health_break_write()
- CVE-2024-56715 ionic: Fix netdev notifier unregister on failure
- CVE-2024-56714 ionic: no double destroy workqueue
- CVE-2024-56713 net: netdevsim: fix nsim_pp_hold_write()
- CVE-2024-56712 udmabuf: fix memory leak on last export_udmabuf() error path
- CVE-2024-56711 drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference
- CVE-2024-56710 ceph: fix memory leak in ceph_direct_read_write()
- CVE-2024-5671 Deserialization in Intrusion Prevention System (IPS) Manager
- CVE-2024-56709 io_uring: check if iowq is killed before queuing
- CVE-2024-56708 EDAC/igen6: Avoid segmentation fault on module unload
- CVE-2024-56707 octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c
- CVE-2024-56706 s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex
- CVE-2024-56705 media: atomisp: Add check for rgby_data memory allocation failure
- CVE-2024-56704 9p/xen: fix release of IRQ
- CVE-2024-56703 ipv6: Fix soft lockups in fib6_select_path under high next hop churn
- CVE-2024-56702 bpf: Mark raw_tp arguments with PTR_MAYBE_NULL
- CVE-2024-56701 powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- CVE-2024-56700 media: wl128x: Fix atomicity violation in fmc_send_cmd()
- CVE-2024-5670 Softnext Mail SQR Expert and Mail Archiving Expert - OS Command Injection
- CVE-2024-56699 s390/pci: Fix potential double remove of hotplug slot
- CVE-2024-56698 usb: dwc3: gadget: Fix looping of queued SG entries
- CVE-2024-56697 drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info()
- CVE-2024-56696 ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc()
- CVE-2024-56695 drm/amdkfd: Use dynamic allocation for CU occupancy array in 'kfd_get_cu_occupancy()'
- CVE-2024-56694 bpf: fix recursive lock when verdict program return SK_PASS
- CVE-2024-56693 brd: defer automatic disk creation until module initialization succeeds
- CVE-2024-56692 f2fs: fix to do sanity check on node blkaddr in truncate_node()
- CVE-2024-56691 mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- CVE-2024-56690 crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- CVE-2024-5669 Missing authorization in Happy WooCommerce FAQs – Ultimate Product FAQ Plugin
- CVE-2024-56689 PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'
- CVE-2024-56688 sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- CVE-2024-56687 usb: musb: Fix hardware lockup on first Rx endpoint request
- CVE-2024-56685 ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe
- CVE-2024-56684 mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks()
- CVE-2024-56683 drm/vc4: hdmi: Avoid hang with debug registers when suspended
- CVE-2024-56682 irqchip/riscv-aplic: Prevent crash when MSI domain is missing
- CVE-2024-56681 crypto: bcm - add error check in the ahash_hmac_init function
- CVE-2024-56680 media: intel/ipu6: do not handle interrupts when device is disabled
- CVE-2024-5668 Cross-site scripting in Lightbox & Modal Popup WordPress Plugin – FooBox
- CVE-2024-56679 octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
- CVE-2024-56678 powerpc/mm/fault: Fix kfence page fault reporting
- CVE-2024-56677 powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()
- CVE-2024-56676 thermal: testing: Initialize some variables annoteded with _free()
- CVE-2024-56675 bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
- CVE-2024-56674 virtio_net: correct netdev_tx_reset_queue() invocation point
- CVE-2024-56673 riscv: mm: Do not call pmd dtor on vmemmap page table teardown
- CVE-2024-56672 blk-cgroup: Fix UAF in blkcg_unpin_online()
- CVE-2024-56671 gpio: graniterapids: Fix vGPIO driver crash
- CVE-2024-56670 usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer
- CVE-2024-5667 Cross-site scripting in Responsive Lightbox & Gallery
- CVE-2024-56669 iommu/vt-d: Remove cache tags before disabling ATS
- CVE-2024-56668 iommu/vt-d: Fix qi_batch NULL pointer with nested parent domain
- CVE-2024-56667 drm/i915: Fix NULL pointer dereference in capture_engine
- CVE-2024-56666 drm/amdkfd: Dereference null return value
- CVE-2024-56665 bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
- CVE-2024-56664 bpf, sockmap: Fix race between element replace and close()
- CVE-2024-56663 wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
- CVE-2024-56662 acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl