Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 208 of 521.
- CVE-2024-53199 ASoC: imx-audmix: Add NULL check in imx_audmix_probe
- CVE-2024-53198 xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- CVE-2024-53197 Linux Kernel Out-of-Bounds Access
- CVE-2024-53196 KVM: arm64: Don't retire aborted MMIO instruction
- CVE-2024-53195 KVM: arm64: Get rid of userspace_irqchip_in_use
- CVE-2024-53194 PCI: Fix use-after-free of slot->bus on hot remove
- CVE-2024-53193 clk: clk-loongson2: Fix memory corruption bug in struct loongson2_clk_provider
- CVE-2024-53192 clk: clk-loongson2: Fix potential buffer overflow in flexible-array member access
- CVE-2024-53191 wifi: ath12k: fix warning when unbinding
- CVE-2024-53190 wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- CVE-2024-53189 wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan
- CVE-2024-53188 wifi: ath12k: fix crash when unbinding
- CVE-2024-53187 io_uring: check for overflows in io_pin_pages
- CVE-2024-53186 ksmbd: fix use-after-free in SMB request handling
- CVE-2024-53185 smb: client: fix NULL ptr deref in crypto_aead_setkey()
- CVE-2024-53184 um: ubd: Do not use drvdata in release
- CVE-2024-53183 um: net: Do not use drvdata in release
- CVE-2024-53182 Revert "block, bfq: merge bfq_release_process_ref() into bfq_put_cooperator()"
- CVE-2024-53181 um: vector: Do not use drvdata in release
- CVE-2024-53180 ALSA: pcm: Add sanity NULL check for the default mmap fault handler
- CVE-2024-5318 Missing Authorization in GitLab
- CVE-2024-53179 smb: client: fix use-after-free of signing key
- CVE-2024-53178 smb: Don't leak cfid when reconnect races with open_cached_dir
- CVE-2024-53177 smb: prevent use-after-free due to open_cached_dir error paths
- CVE-2024-53176 smb: During unmount, ensure all cached dir instances drop their dentry
- CVE-2024-53175 ipc: fix memleak if msg_init_ns failed in create_ipc_ns
- CVE-2024-53174 SUNRPC: make sure cache entry active before cache_show
- CVE-2024-53173 NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- CVE-2024-53172 ubi: fastmap: Fix duplicate slab cache names while attaching
- CVE-2024-53171 ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- CVE-2024-53170 block: fix uaf for flush rq while iterating tags
- CVE-2024-5317 Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1
- CVE-2024-53169 nvme-fabrics: fix kernel crash while shutting down controller
- CVE-2024-53168 sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- CVE-2024-53167 nfs/blocklayout: Don't attempt unregister for invalid block device
- CVE-2024-53166 block, bfq: fix bfqq uaf in bfq_limit_depth()
- CVE-2024-53165 sh: intc: Fix use-after-free bug in register_intc_controller()
- CVE-2024-53164 net: sched: fix ordering of qlen adjustment
- CVE-2024-53163 crypto: qat/qat_420xx - fix off by one in uof_get_name()
- CVE-2024-53162 crypto: qat/qat_4xxx - fix off by one in uof_get_name()
- CVE-2024-53161 EDAC/bluefield: Fix potential integer overflow
- CVE-2024-53160 rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
- CVE-2024-53158 soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- CVE-2024-53157 firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
- CVE-2024-53156 wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- CVE-2024-53155 ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- CVE-2024-53154 clk: clk-apple-nco: Add NULL check in applnco_probe
- CVE-2024-53153 PCI: qcom-ep: Move controller cleanups to qcom_pcie_perst_deassert()
- CVE-2024-53152 PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert()
- CVE-2024-53151 svcrdma: Address an integer overflow
- CVE-2024-53150 Linux Kernel Out-of-Bounds Read
- CVE-2024-5315 Multiple vulnerabilities in DOLIBARR's ERP CMS
- CVE-2024-53149 usb: typec: ucsi: glink: fix off-by-one in connector_status
- CVE-2024-53148 comedi: Flush partial mappings in error case
- CVE-2024-53147 exfat: fix out-of-bounds access of directory entries
- CVE-2024-53146 NFSD: Prevent a potential integer overflow
- CVE-2024-53145 um: Fix potential integer overflow during physmem setup
- CVE-2024-53144 Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- CVE-2024-53143 fsnotify: Fix ordering of iput() and watched_objects decrement
- CVE-2024-53142 initramfs: avoid filename buffer overrun
- CVE-2024-53141 netfilter: ipset: add missing range check in bitmap_ip_uadt
- CVE-2024-53140 netlink: terminate outstanding dump on socket close
- CVE-2024-5314 Multiple vulnerabilities in DOLIBARR's ERP CMS
- CVE-2024-53139 sctp: fix possible UAF in sctp_v6_available()
- CVE-2024-53138 net/mlx5e: kTLS, Fix incorrect page refcounting
- CVE-2024-53137 ARM: fix cacheflush with PAN
- CVE-2024-53136 mm: revert "mm: shmem: fix data-race in shmem_getattr()"
- CVE-2024-53135 KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN
- CVE-2024-53134 pmdomain: imx93-blk-ctrl: correct remove path
- CVE-2024-53133 drm/amd/display: Handle dml allocation failure to avoid crash
- CVE-2024-53132 drm/xe/oa: Fix "Missing outer runtime PM protection" warning
- CVE-2024-53131 nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- CVE-2024-53130 nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- CVE-2024-5313 Misconfiguration in EVlink Home Smart
- CVE-2024-53129 drm/rockchip: vop: Fix a dereferenced before check warning
- CVE-2024-53128 sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
- CVE-2024-53127 Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
- CVE-2024-53126 vdpa: solidrun: Fix UB bug with devres
- CVE-2024-53125 bpf: sync_linked_regs() must preserve subreg_def
- CVE-2024-53124 net: fix data-races around sk->sk_forward_alloc
- CVE-2024-53123 mptcp: error out earlier on disconnect
- CVE-2024-53122 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
- CVE-2024-53121 net/mlx5: fs, lock FTE when checking if active
- CVE-2024-53120 net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
- CVE-2024-5312 Cross-Site Scripting vulnerability in PHP Server Monitor
- CVE-2024-53119 virtio/vsock: Fix accept_queue memory leak
- CVE-2024-53118 vsock: Fix sk_error_queue memory leak
- CVE-2024-53117 virtio/vsock: Improve MSG_ZEROCOPY error handling
- CVE-2024-53116 drm/panthor: Fix handling of partial GPU mapping of BOs
- CVE-2024-53115 drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle
- CVE-2024-53114 x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- CVE-2024-53113 mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
- CVE-2024-53112 ocfs2: uncache inode which has failed entering the group
- CVE-2024-53111 mm/mremap: fix address wraparound in move_page_tables()
- CVE-2024-53110 vp_vdpa: fix id_table array not null terminated error
- CVE-2024-5311 DigiWin EasyFlow .NET - SQL Injection
- CVE-2024-53109 nommu: pass NULL argument to vma_iter_prealloc()
- CVE-2024-53108 drm/amd/display: Adjust VSDB parser for replay feature
- CVE-2024-53107 fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()
- CVE-2024-53106 ima: fix buffer overrun in ima_eventdigest_init_common