# Vulnerabilities published in 2024


- [CVE-2024-56661](https://insights.sbomify.com/CVE-2024-56661/): tipc: fix NULL deref in cleanup_bearer() (medium 5.5)
- [CVE-2024-56660](https://insights.sbomify.com/CVE-2024-56660/): net/mlx5: DR, prevent potential error pointer dereference (medium 5.5)
- [CVE-2024-5666](https://insights.sbomify.com/CVE-2024-5666/): Extensions for Elementor <= 2.0.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter (medium 6.4)
- [CVE-2024-56659](https://insights.sbomify.com/CVE-2024-56659/): net: lapb: increase LAPB_HEADER_LEN (medium 5.5)
- [CVE-2024-56658](https://insights.sbomify.com/CVE-2024-56658/): net: defer final 'struct net' free in netns dismantle (high 7.8)
- [CVE-2024-56657](https://insights.sbomify.com/CVE-2024-56657/): ALSA: control: Avoid WARN() for symlink errors (medium 5.5)
- [CVE-2024-56656](https://insights.sbomify.com/CVE-2024-56656/): bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (critical 9.8)
- [CVE-2024-56655](https://insights.sbomify.com/CVE-2024-56655/): netfilter: nf_tables: do not defer rule destruction via call_rcu (high 7.8)
- [CVE-2024-56654](https://insights.sbomify.com/CVE-2024-56654/): Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating (high 7.8)
- [CVE-2024-56653](https://insights.sbomify.com/CVE-2024-56653/): Bluetooth: btmtk: avoid UAF in btmtk_process_coredump (high 8.8)
- [CVE-2024-56652](https://insights.sbomify.com/CVE-2024-56652/): drm/xe/reg_sr: Remove register pool (high 7.8)
- [CVE-2024-56651](https://insights.sbomify.com/CVE-2024-56651/): can: hi311x: hi3110_can_ist(): fix potential use-after-free (high 8.8)
- [CVE-2024-56650](https://insights.sbomify.com/CVE-2024-56650/): netfilter: x_tables: fix LED ID check in led_tg_check() (high 7.1)
- [CVE-2024-5665](https://insights.sbomify.com/CVE-2024-5665/): Login/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Exposure (medium 4.3)
- [CVE-2024-56649](https://insights.sbomify.com/CVE-2024-56649/): net: enetc: Do not configure preemptible TCs if SIs do not support (medium 5.5)
- [CVE-2024-56648](https://insights.sbomify.com/CVE-2024-56648/): net: hsr: avoid potential out-of-bound access in fill_frame_info() (medium 5.5)
- [CVE-2024-56647](https://insights.sbomify.com/CVE-2024-56647/): net: Fix icmp host relookup triggering ip_rt_bug (medium 5.5)
- [CVE-2024-56646](https://insights.sbomify.com/CVE-2024-56646/): ipv6: avoid possible NULL deref in modify_prefix_route() (medium 5.5)
- [CVE-2024-56645](https://insights.sbomify.com/CVE-2024-56645/): can: j1939: j1939_session_new(): fix skb reference counting (critical 9.8)
- [CVE-2024-56644](https://insights.sbomify.com/CVE-2024-56644/): net/ipv6: release expired exception dst cached in socket (high 7.5)
- [CVE-2024-56643](https://insights.sbomify.com/CVE-2024-56643/): dccp: Fix memory leak in dccp_feat_change_recv (low 3.3)
- [CVE-2024-56642](https://insights.sbomify.com/CVE-2024-56642/): tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (high 7.8)
- [CVE-2024-56641](https://insights.sbomify.com/CVE-2024-56641/): net/smc: initialize close_work early to avoid warning (high 7.5)
- [CVE-2024-56640](https://insights.sbomify.com/CVE-2024-56640/): net/smc: fix LGR and link use-after-free issue (critical 9.8)
- [CVE-2024-5664](https://insights.sbomify.com/CVE-2024-5664/): Cross-site scripting in MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar (medium 6.4)
- [CVE-2024-56639](https://insights.sbomify.com/CVE-2024-56639/): net: hsr: must allocate more bytes for RedBox support (medium 5.5)
- [CVE-2024-56638](https://insights.sbomify.com/CVE-2024-56638/): netfilter: nft_inner: incorrect percpu area handling under softirq (high 7.8)
- [CVE-2024-56637](https://insights.sbomify.com/CVE-2024-56637/): netfilter: ipset: Hold module reference while requesting a module (high 7.3)
- [CVE-2024-56636](https://insights.sbomify.com/CVE-2024-56636/): geneve: do not assume mac header is set in geneve_xmit_skb() (medium 5.5)
- [CVE-2024-56635](https://insights.sbomify.com/CVE-2024-56635/): net: avoid potential UAF in default_operstate() (high 7.8)
- [CVE-2024-56634](https://insights.sbomify.com/CVE-2024-56634/): gpio: grgpio: Add NULL check in grgpio_probe (medium 5.5)
- [CVE-2024-56633](https://insights.sbomify.com/CVE-2024-56633/): tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (high 7.8)
- [CVE-2024-56632](https://insights.sbomify.com/CVE-2024-56632/): nvme-tcp: fix the memleak while create new ctrl failed (high 7.5)
- [CVE-2024-56631](https://insights.sbomify.com/CVE-2024-56631/): scsi: sg: Fix slab-use-after-free read in sg_release() (high 7.8)
- [CVE-2024-56630](https://insights.sbomify.com/CVE-2024-56630/): ocfs2: free inode when ocfs2_get_init_inode() fails (medium 5.5)
- [CVE-2024-5663](https://insights.sbomify.com/CVE-2024-5663/): Cards for Beaver Builder <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Cards Widget (medium 6.4)
- [CVE-2024-56629](https://insights.sbomify.com/CVE-2024-56629/): HID: wacom: fix when get product name maybe null pointer (medium 5.5)
- [CVE-2024-56628](https://insights.sbomify.com/CVE-2024-56628/): LoongArch: Add architecture specific huge_pte_clear() (high 7.8)
- [CVE-2024-56627](https://insights.sbomify.com/CVE-2024-56627/): ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read (high 8.1)
- [CVE-2024-56626](https://insights.sbomify.com/CVE-2024-56626/): ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write (high 8.8)
- [CVE-2024-56625](https://insights.sbomify.com/CVE-2024-56625/): can: dev: can_set_termination(): allow sleeping GPIOs (medium 5.5)
- [CVE-2024-56624](https://insights.sbomify.com/CVE-2024-56624/): iommufd: Fix out_fput in iommufd_fault_alloc() (high 7.8)
- [CVE-2024-56623](https://insights.sbomify.com/CVE-2024-56623/): scsi: qla2xxx: Fix use after free on unload (high 7.8)
- [CVE-2024-56622](https://insights.sbomify.com/CVE-2024-56622/): scsi: ufs: core: sysfs: Prevent div by zero (medium 5.5)
- [CVE-2024-56621](https://insights.sbomify.com/CVE-2024-56621/): scsi: ufs: core: Cancel RTC work during ufshcd_remove() (medium 5.5)
- [CVE-2024-56620](https://insights.sbomify.com/CVE-2024-56620/): scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (medium 5.5)
- [CVE-2024-5662](https://insights.sbomify.com/CVE-2024-5662/): Cross-site scripting in Ultimate Post Kit Addons for Elementor (medium 6.4)
- [CVE-2024-56619](https://insights.sbomify.com/CVE-2024-56619/): nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (high 7.8)
- [CVE-2024-56618](https://insights.sbomify.com/CVE-2024-56618/): pmdomain: imx: gpcv2: Adjust delay after power up handshake (medium 5.5)
- [CVE-2024-56617](https://insights.sbomify.com/CVE-2024-56617/): cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (medium 5.5)
- [CVE-2024-56616](https://insights.sbomify.com/CVE-2024-56616/): drm/dp_mst: Fix MST sideband message body length check (high 7.8)
- [CVE-2024-56615](https://insights.sbomify.com/CVE-2024-56615/): bpf: fix OOB devmap writes when deleting elements (high 7.8)
- [CVE-2024-56614](https://insights.sbomify.com/CVE-2024-56614/): xsk: fix OOB map writes when deleting elements (high 7.8)
- [CVE-2024-56613](https://insights.sbomify.com/CVE-2024-56613/): sched/numa: fix memory leak due to the overwritten vma->numab_state (medium 5.5)
- [CVE-2024-56612](https://insights.sbomify.com/CVE-2024-56612/): mm/gup: handle NULL pages in unpin_user_pages() (medium 5.5)
- [CVE-2024-56611](https://insights.sbomify.com/CVE-2024-56611/): mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (medium 5.5)
- [CVE-2024-56610](https://insights.sbomify.com/CVE-2024-56610/): kcsan: Turn report_filterlist_lock into a raw_spinlock (medium 5.5)
- [CVE-2024-5661](https://insights.sbomify.com/CVE-2024-5661/): Potential Denial of Service affecting XenServer and Citrix Hypervisor (medium 6.0)
- [CVE-2024-56609](https://insights.sbomify.com/CVE-2024-56609/): wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (high 7.8)
- [CVE-2024-56608](https://insights.sbomify.com/CVE-2024-56608/): drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (high 7.8)
- [CVE-2024-56607](https://insights.sbomify.com/CVE-2024-56607/): wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (medium 5.5)
- [CVE-2024-56606](https://insights.sbomify.com/CVE-2024-56606/): af_packet: avoid erroring out after sock_init_data() in packet_create() (high 7.8)
- [CVE-2024-56605](https://insights.sbomify.com/CVE-2024-56605/): Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (high 7.8)
- [CVE-2024-56604](https://insights.sbomify.com/CVE-2024-56604/): Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (high 7.8)
- [CVE-2024-56603](https://insights.sbomify.com/CVE-2024-56603/): net: af_can: do not leave a dangling sk pointer in can_create() (high 7.8)
- [CVE-2024-56602](https://insights.sbomify.com/CVE-2024-56602/): net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (high 7.0)
- [CVE-2024-56601](https://insights.sbomify.com/CVE-2024-56601/): net: inet: do not leave a dangling sk pointer in inet_create() (high 7.8)
- [CVE-2024-56600](https://insights.sbomify.com/CVE-2024-56600/): net: inet6: do not leave a dangling sk pointer in inet6_create() (high 7.8)
- [CVE-2024-5660](https://insights.sbomify.com/CVE-2024-5660/): Security feature bypass in Cortex-78C (critical 9.8)
- [CVE-2024-56599](https://insights.sbomify.com/CVE-2024-56599/): wifi: ath10k: avoid NULL pointer error during sdio remove (medium 5.5)
- [CVE-2024-56598](https://insights.sbomify.com/CVE-2024-56598/): jfs: array-index-out-of-bounds fix in dtReadFirst (high 7.1)
- [CVE-2024-56597](https://insights.sbomify.com/CVE-2024-56597/): jfs: fix shift-out-of-bounds in dbSplit (high 7.8)
- [CVE-2024-56596](https://insights.sbomify.com/CVE-2024-56596/): jfs: fix array-index-out-of-bounds in jfs_readdir (high 7.8)
- [CVE-2024-56595](https://insights.sbomify.com/CVE-2024-56595/): jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (high 7.8)
- [CVE-2024-56594](https://insights.sbomify.com/CVE-2024-56594/): drm/amdgpu: set the right AMDGPU sg segment limitation (medium 5.5)
- [CVE-2024-56593](https://insights.sbomify.com/CVE-2024-56593/): wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (medium 5.5)
- [CVE-2024-56592](https://insights.sbomify.com/CVE-2024-56592/): bpf: Call free_htab_elem() after htab_unlock_bucket() (medium 5.5)
- [CVE-2024-56591](https://insights.sbomify.com/CVE-2024-56591/): Bluetooth: hci_conn: Use disable_delayed_work_sync (high 8.8)
- [CVE-2024-56590](https://insights.sbomify.com/CVE-2024-56590/): Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (high 7.6)
- [CVE-2024-5659](https://insights.sbomify.com/CVE-2024-5659/): Rockwell Automation Multicast Request Causes major nonrecoverable fault on Select Controllers (high 8.3)
- [CVE-2024-56589](https://insights.sbomify.com/CVE-2024-56589/): scsi: hisi_sas: Add cond_resched() for no forced preemption model (medium 5.5)
- [CVE-2024-56588](https://insights.sbomify.com/CVE-2024-56588/): scsi: hisi_sas: Create all dump files during debugfs initialization (medium 5.5)
- [CVE-2024-56587](https://insights.sbomify.com/CVE-2024-56587/): leds: class: Protect brightness_show() with led_cdev->led_access mutex (medium 5.5)
- [CVE-2024-56586](https://insights.sbomify.com/CVE-2024-56586/): f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (medium 5.5)
- [CVE-2024-56585](https://insights.sbomify.com/CVE-2024-56585/): LoongArch: Fix sleeping in atomic context for PREEMPT_RT (medium 5.5)
- [CVE-2024-56584](https://insights.sbomify.com/CVE-2024-56584/): io_uring/tctx: work around xa_store() allocation error issue (medium 5.5)
- [CVE-2024-56583](https://insights.sbomify.com/CVE-2024-56583/): sched/deadline: Fix warning in migrate_enable for boosted tasks (medium 5.5)
- [CVE-2024-56582](https://insights.sbomify.com/CVE-2024-56582/): btrfs: fix use-after-free in btrfs_encoded_read_endio() (high 7.8)
- [CVE-2024-56581](https://insights.sbomify.com/CVE-2024-56581/): btrfs: ref-verify: fix use-after-free after invalid ref action (high 7.0)
- [CVE-2024-56580](https://insights.sbomify.com/CVE-2024-56580/): media: qcom: camss: fix error path on configuration of power domains (medium 5.5)
- [CVE-2024-5658](https://insights.sbomify.com/CVE-2024-5658/): CraftCMS Plugin - Two-Factor Authentication - TOTP Token Stays Valid After Use (medium 4.8)
- [CVE-2024-56579](https://insights.sbomify.com/CVE-2024-56579/): media: amphion: Set video drvdata before register video device (medium 5.5)
- [CVE-2024-56578](https://insights.sbomify.com/CVE-2024-56578/): media: imx-jpeg: Set video drvdata before register video device (medium 5.5)
- [CVE-2024-56577](https://insights.sbomify.com/CVE-2024-56577/): media: mtk-jpeg: Fix null-ptr-deref during unload module (medium 5.5)
- [CVE-2024-56576](https://insights.sbomify.com/CVE-2024-56576/): media: i2c: tc358743: Fix crash in the probe error path when using polling (high 7.8)
- [CVE-2024-56575](https://insights.sbomify.com/CVE-2024-56575/): media: imx-jpeg: Ensure power suppliers be suspended before detach them (medium 5.5)
- [CVE-2024-56574](https://insights.sbomify.com/CVE-2024-56574/): media: ts2020: fix null-ptr-deref in ts2020_probe() (medium 5.5)
- [CVE-2024-56573](https://insights.sbomify.com/CVE-2024-56573/): efi/libstub: Free correct pointer on failure (high 7.0)
- [CVE-2024-56572](https://insights.sbomify.com/CVE-2024-56572/): media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (low 3.3)
- [CVE-2024-56570](https://insights.sbomify.com/CVE-2024-56570/): ovl: Filter invalid inodes with missing lookup function (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/186/