Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 230 of 521.
- CVE-2024-50298 net: enetc: allocate vf_state during PF probes
- CVE-2024-50297 net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
- CVE-2024-50296 net: hns3: fix kernel crash when uninstalling driver
- CVE-2024-50295 net: arc: fix the device for dma_map_single/dma_unmap_single
- CVE-2024-50294 rxrpc: Fix missing locking causing hanging calls
- CVE-2024-50293 net/smc: do not leave a dangling sk pointer in __smc_create()
- CVE-2024-50292 ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- CVE-2024-50291 media: dvb-core: add missing buffer index check
- CVE-2024-50290 media: cx24116: prevent overflows on SNR calculus
- CVE-2024-5029 CM Table Of Contents – WordPress TOC Plugin < 1.2.4 - Stored XSS via CSRF
- CVE-2024-50289 media: av7110: fix a spectre vulnerability
- CVE-2024-50288 media: vivid: fix buffer overwrite when using > 32 buffers
- CVE-2024-50287 media: v4l2-tpg: prevent the risk of a division by zero
- CVE-2024-50286 ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- CVE-2024-50285 ksmbd: check outstanding simultaneous SMB operations
- CVE-2024-50284 ksmbd: Fix the missing xa_store error check
- CVE-2024-50283 ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- CVE-2024-50282 drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- CVE-2024-50281 KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation
- CVE-2024-50280 dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- CVE-2024-5028 CM WordPress Search And Replace Plugin < 1.3.9 - Plugin Reset via CSRF
- CVE-2024-50279 dm cache: fix out-of-bounds access to the dirty bitset when resizing
- CVE-2024-50278 dm cache: fix potential out-of-bounds access on the first resume
- CVE-2024-50277 dm: fix a crash if blk_alloc_disk fails
- CVE-2024-50276 net: vertexcom: mse102x: Fix possible double free of TX skb
- CVE-2024-50275 arm64/sve: Discard stale CPU state when handling SVE traps
- CVE-2024-50274 idpf: avoid vport access in idpf_get_link_ksettings
- CVE-2024-50273 btrfs: reinitialize delayed ref list after deleting it from the list
- CVE-2024-50272 filemap: Fix bounds checking in filemap_read()
- CVE-2024-50271 signal: restore the override_rlimit logic
- CVE-2024-50270 mm/damon/core: avoid overflow in damon_feed_loop_next_input()
- CVE-2024-50269 usb: musb: sunxi: Fix accessing an released usb phy
- CVE-2024-50268 usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- CVE-2024-50267 USB: serial: io_edgeport: fix use after free in debug printk
- CVE-2024-50266 clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
- CVE-2024-50265 ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- CVE-2024-50264 vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
- CVE-2024-50263 fork: only invoke khugepaged, ksm hooks if no error
- CVE-2024-50262 bpf: Fix out-of-bounds write in trie_get_next_key()
- CVE-2024-50261 macsec: Fix use-after-free while sending the offloading packet
- CVE-2024-50260 sock_map: fix a NULL pointer dereference in sock_map_link_update_prog()
- CVE-2024-5026 CM Tooltip Glossary < 4.3.4 - Admin+ Stored XSS
- CVE-2024-50259 netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- CVE-2024-50258 net: fix crash when config small gso_max_size/gso_ipv4_max_size
- CVE-2024-50257 netfilter: Fix use-after-free in get_info()
- CVE-2024-50256 netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- CVE-2024-50255 Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- CVE-2024-50254 bpf: Free dynamically allocated bits in bpf_iter_bits_destroy()
- CVE-2024-50253 bpf: Check the validity of nr_words in bpf_iter_bits_new()
- CVE-2024-50252 mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- CVE-2024-50251 netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- CVE-2024-50250 fsdax: dax_unshare_iter needs to copy entire blocks
- CVE-2024-5025 MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter
- CVE-2024-50249 ACPI: CPPC: Make rmw_lock a raw_spin_lock
- CVE-2024-50248 ntfs3: Add bounds checking to mi_enum_attr()
- CVE-2024-50247 fs/ntfs3: Check if more than chunk-size bytes are written
- CVE-2024-50246 fs/ntfs3: Add rough attr alloc_size check
- CVE-2024-50245 fs/ntfs3: Fix possible deadlock in mi_read
- CVE-2024-50244 fs/ntfs3: Additional check in ni_clear()
- CVE-2024-50243 fs/ntfs3: Fix general protection fault in run_is_mapped_full
- CVE-2024-50242 fs/ntfs3: Additional check in ntfs_file_release
- CVE-2024-50241 NFSD: Initialize struct nfsd4_copy earlier
- CVE-2024-50240 phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- CVE-2024-5024 MemberPress <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters
- CVE-2024-50239 phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- CVE-2024-50238 phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend
- CVE-2024-50237 wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- CVE-2024-50236 wifi: ath10k: Fix memory leak in management tx
- CVE-2024-50235 wifi: cfg80211: clear wdev->cqm_config pointer on free
- CVE-2024-50234 wifi: iwlegacy: Clear stale interrupts before resuming device
- CVE-2024-50233 staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- CVE-2024-50232 iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- CVE-2024-50231 iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- CVE-2024-50230 nilfs2: fix kernel bug due to missing clearing of checked flag
- CVE-2024-5023 Arbitrary File Read Vulnerability in ConsoleMe via Limited Git command RCE
- CVE-2024-50229 nilfs2: fix potential deadlock with newly created symlinks
- CVE-2024-50227 thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan()
- CVE-2024-50226 cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- CVE-2024-50225 btrfs: fix error propagation of split bios
- CVE-2024-50224 spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- CVE-2024-50223 sched/numa: Fix the potential null pointer dereference in task_numa_work()
- CVE-2024-50222 iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- CVE-2024-50221 drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
- CVE-2024-50220 fork: do not invoke uffd on fork if error occurs
- CVE-2024-5022 Other in Focus for iOS
- CVE-2024-50218 ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- CVE-2024-50217 btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids()
- CVE-2024-50216 xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- CVE-2024-50215 nvmet-auth: assign dh_key to NULL after kfree_sensitive
- CVE-2024-50214 drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic()
- CVE-2024-50213 drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic()
- CVE-2024-50212 lib: alloc_tag_module_unload must wait for pending kfree_rcu calls
- CVE-2024-50211 udf: refactor inode_bmap() to handle error
- CVE-2024-50210 posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- CVE-2024-5021 WordPress Picture / Portfolio / Media Gallery <= 3.0.1 - Unauthenticated Server-Side Request Forgery
- CVE-2024-50209 RDMA/bnxt_re: Add a check for memory allocation
- CVE-2024-50208 RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- CVE-2024-50207 ring-buffer: Fix reader locking when changing the sub buffer order
- CVE-2024-50206 net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init
- CVE-2024-50205 ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()