Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 209 of 521.
- CVE-2024-53105 mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
- CVE-2024-53104 Linux Kernel Out-of-Bounds Write
- CVE-2024-53103 hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
- CVE-2024-53101 fs: Fix uninitialized value issue in from_kuid and from_kgid
- CVE-2024-53100 nvme: tcp: avoid race between queue_lock lock and destroy
- CVE-2024-5310 JFinalCMS content cross site scripting
- CVE-2024-53099 bpf: Check validity of link->type in bpf_link_show_fdinfo()
- CVE-2024-53098 drm/xe/ufence: Prefetch ufence addr to catch bogus address
- CVE-2024-53097 mm: krealloc: Fix MTE false alarm in __do_krealloc
- CVE-2024-53096 mm: resolve faulty mmap_region() error path behaviour
- CVE-2024-53095 smb: client: Fix use-after-free of network namespace.
- CVE-2024-53094 RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
- CVE-2024-53093 nvme-multipath: defer partition scanning
- CVE-2024-53092 virtio_pci: Fix admin vq cleanup by using correct info pointer
- CVE-2024-53091 bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx
- CVE-2024-53090 afs: Fix lock recursion
- CVE-2024-5309 Form Vibes – Database Manager for Forms <= 1.4.12 - Missing Authorization in Multiple Functions
- CVE-2024-53089 LoongArch: KVM: Mark hrtimer to expire in hard interrupt context
- CVE-2024-53088 i40e: fix race condition by adding filter's intermediate sync state
- CVE-2024-53087 drm/xe: Fix possible exec queue leak in exec IOCTL
- CVE-2024-53086 drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
- CVE-2024-53085 tpm: Lock TPM chip in tpm_pm_suspend() first
- CVE-2024-53084 drm/imagination: Break an object reference loop
- CVE-2024-53083 usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- CVE-2024-53082 virtio_net: Add hash_key_length check
- CVE-2024-53081 media: ar0521: don't overflow when checking PLL values
- CVE-2024-53080 drm/panthor: Lock XArray when getting entries for the VM
- CVE-2024-53079 mm/thp: fix deferred split unqueue naming and locking
- CVE-2024-53078 drm/tegra: Fix NULL vs IS_ERR() check in probe()
- CVE-2024-53077 rpcrdma: Always release the rpcrdma_device's xa_array
- CVE-2024-53076 iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- CVE-2024-53075 riscv: Prevent a bad reference count on CPU nodes
- CVE-2024-53074 wifi: iwlwifi: mvm: don't leak a link on AP removal
- CVE-2024-53073 NFSD: Never decrement pending_async_copies on error
- CVE-2024-53072 platform/x86/amd/pmc: Detect when STB is not available
- CVE-2024-53071 drm/panthor: Be stricter about IO mapping flags
- CVE-2024-53070 usb: dwc3: fix fault at system suspend if device was already runtime suspended
- CVE-2024-5307 Kofax Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2024-53069 firmware: qcom: scm: fix a NULL-pointer dereference
- CVE-2024-53068 firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- CVE-2024-53067 scsi: ufs: core: Start the RTC update work later
- CVE-2024-53066 nfs: Fix KMSAN warning in decode_getfattr_attrs()
- CVE-2024-53065 mm/slab: fix warning caused by duplicate kmem_cache creation in kmem_buckets_create
- CVE-2024-53064 idpf: fix idpf_vc_core_init error path
- CVE-2024-53063 media: dvbdev: prevent the risk of out of memory access
- CVE-2024-53062 media: mgb4: protect driver against spectre
- CVE-2024-53061 media: s5p-jpeg: prevent buffer overflows
- CVE-2024-53060 drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- CVE-2024-5306 Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability
- CVE-2024-53059 wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- CVE-2024-53058 net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- CVE-2024-53057 net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- CVE-2024-53056 drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()
- CVE-2024-53055 wifi: iwlwifi: mvm: fix 6 GHz scan construction
- CVE-2024-53053 scsi: ufs: core: Fix another deadlock during RTC update
- CVE-2024-53052 io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- CVE-2024-53051 drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
- CVE-2024-53050 drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- CVE-2024-5305 Kofax Power PDF PDF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-53049 slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof
- CVE-2024-53048 ice: fix crash on probe for DPLL enabled E810 LOM
- CVE-2024-53047 mptcp: init: protect sched with rcu_read_lock
- CVE-2024-53046 arm64: dts: imx8ulp: correct the flexspi compatible string
- CVE-2024-53045 ASoC: dapm: fix bounds checker error in dapm_widget_list_create
- CVE-2024-53044 net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()
- CVE-2024-53043 mctp i2c: handle NULL header address
- CVE-2024-53042 ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- CVE-2024-53041 Memory corruption in Teamcenter Visualization V14.2
- CVE-2024-5304 Kofax Power PDF TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-53034 Untrusted Pointer Dereference in DSP_Services
- CVE-2024-53033 Untrusted Pointer Dereference in DSP_Services
- CVE-2024-53032 Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform
- CVE-2024-53031 Improper Input Validation in Automotive OS Platform
- CVE-2024-53030 Improper Input Validation in Automotive OS Platform
- CVE-2024-5303 Kofax Power PDF PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-53029 Improper Input Validation in Automotive OS Platform
- CVE-2024-53028 Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Vehicle Networks
- CVE-2024-53027 Buffer Copy Without Checking Size of Input in WLAN Host
- CVE-2024-53026 Buffer Over-read in Data Network Stack & Connectivity
- CVE-2024-53025 Integer Overflow or Wraparound in BT Controller
- CVE-2024-53024 NULL Pointer Dereference in Display
- CVE-2024-53023 Use After Free in Automotive Android OS
- CVE-2024-53022 Improper Input Validation in Automotive OS Platform
- CVE-2024-53021 Buffer Over-read in Data Network Stack & Connectivity
- CVE-2024-53020 Buffer Over-read in Data Network Stack & Connectivity
- CVE-2024-5302 Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-53019 Buffer Over-read in Data Network Stack & Connectivity
- CVE-2024-53018 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
- CVE-2024-53017 Use of Out-of-range Pointer Offset in Camera Driver
- CVE-2024-53016 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
- CVE-2024-53015 Use After Free in Computer Vision
- CVE-2024-53014 Improper Validation of Array Index in Audio
- CVE-2024-53013 Buffer Copy Without Checking Size of Input in Audio
- CVE-2024-53012 Improper Input Validation in Automotive OS Platform
- CVE-2024-53011 Permissions, Privileges, and Access Controls in Video Analytics and Processing
- CVE-2024-53010 Improper Access Control in Core
- CVE-2024-5301 Kofax Power PDF PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-53009 Improper Validation of Array Index in Automotive Autonomy
- CVE-2024-53008 Security feature bypass in HAProxy 2.6
- CVE-2024-53007 SQL injection in ProjectWise Integration Server