Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 231 of 521.
- CVE-2024-50204 fs: don't try and remove empty rbtree node
- CVE-2024-50203 bpf, arm64: Fix address emission with tag-based KASAN enabled
- CVE-2024-50202 nilfs2: propagate directory read errors from nilfs_find_entry()
- CVE-2024-50201 drm/radeon: Fix encoder->possible_clones
- CVE-2024-50200 maple_tree: correct tree corruption on spanning store
- CVE-2024-5020 Cross-site scripting in Accordion Slider
- CVE-2024-50199 mm/swapfile: skip HugeTLB pages for unuse_vma
- CVE-2024-50198 iio: light: veml6030: fix IIO device retrieval from embedded device
- CVE-2024-50197 pinctrl: intel: platform: fix error path in device_for_each_child_node()
- CVE-2024-50196 pinctrl: ocelot: fix system hang on level based interrupts
- CVE-2024-50195 posix-clock: Fix missing timespec64 check in pc_clock_settime()
- CVE-2024-50194 arm64: probes: Fix uprobes for big-endian kernels
- CVE-2024-50193 x86/entry_32: Clear CPU buffers after register restore in NMI return
- CVE-2024-50192 irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- CVE-2024-50191 ext4: don't set SB_RDONLY after filesystem errors
- CVE-2024-50190 ice: fix memleak in ice_init_tx_topology()
- CVE-2024-5019 WhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure Vulnerability
- CVE-2024-50189 HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- CVE-2024-50188 net: phy: dp83869: fix memory corruption when enabling fiber
- CVE-2024-50187 drm/vc4: Stop the active perfmon before being destroyed
- CVE-2024-50186 net: explicitly clear the sk pointer, when pf->create fails
- CVE-2024-50185 mptcp: handle consistently DSS corruption
- CVE-2024-50184 virtio_pmem: Check device status before requesting flush
- CVE-2024-50183 scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- CVE-2024-50182 secretmem: disable memfd_secret() if arch cannot set direct map
- CVE-2024-50180 fbdev: sisfb: Fix strbuf array overflow
- CVE-2024-5018 WhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure Vulnerability
- CVE-2024-50179 ceph: remove the incorrect Fw reference check when dirtying pages
- CVE-2024-50178 cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request()
- CVE-2024-50177 drm/amd/display: fix a UBSAN warning in DML2.1
- CVE-2024-50176 remoteproc: k3-r5: Fix error handling when power-up failed
- CVE-2024-50175 media: qcom: camss: Remove use_count guard in stop_streaming
- CVE-2024-50174 drm/panthor: Fix race when converting group handle to group object
- CVE-2024-50173 drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()
- CVE-2024-50172 RDMA/bnxt_re: Fix a possible memory leak
- CVE-2024-50171 net: systemport: fix potential memory leak in bcm_sysport_xmit()
- CVE-2024-50170 net: bcmasp: fix potential memory leak in bcmasp_xmit()
- CVE-2024-5017 WhatsUp Gold AppProfileImport path traversal vulnerability
- CVE-2024-50169 vsock: Update rx_bytes on read_skb()
- CVE-2024-50168 net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- CVE-2024-50167 be2net: fix potential memory leak in be_xmit()
- CVE-2024-50166 fsl/fman: Fix refcount handling of fman-related devices
- CVE-2024-50165 bpf: Preserve param->string when parsing mount options
- CVE-2024-50164 bpf: Fix overloading of MEM_UNINIT's meaning
- CVE-2024-50163 bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- CVE-2024-50162 bpf: devmap: provide rxq after redirect
- CVE-2024-50161 bpf: Check the remaining info_cnt before repeating btf fields
- CVE-2024-50160 ALSA: hda/cs8409: Fix possible NULL dereference
- CVE-2024-5016 WhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2024-50159 firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- CVE-2024-50158 RDMA/bnxt_re: Fix out of bound check
- CVE-2024-50157 RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
- CVE-2024-50156 drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- CVE-2024-50155 netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- CVE-2024-50154 tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- CVE-2024-50153 scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- CVE-2024-50152 smb: client: fix possible double free in smb2_set_ea()
- CVE-2024-50151 smb: client: fix OOBs when building SMB2_IOCTL request
- CVE-2024-50150 usb: typec: altmode should keep reference to parent
- CVE-2024-5015 WhatsUp Gold SessionControler Server-Side Request Forgery Information Disclosure Vulnerability
- CVE-2024-50149 drm/xe: Don't free job in TDR
- CVE-2024-50148 Bluetooth: bnep: fix wild-memory-access in proto_unregister
- CVE-2024-50147 net/mlx5: Fix command bitmask initialization
- CVE-2024-50146 net/mlx5e: Don't call cleanup on profile rollback failure
- CVE-2024-50145 octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- CVE-2024-50144 drm/xe: fix unbalanced rpm put() with fence_fini()
- CVE-2024-50143 udf: fix uninit-value use in udf_get_fileshortad
- CVE-2024-50142 xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- CVE-2024-50141 ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- CVE-2024-50140 sched/core: Disable page allocation in task_tick_mm_cid()
- CVE-2024-5014 WhatsUp Gold GetASPReport Server-Side Request Forgery Information Disclosure
- CVE-2024-50139 KVM: arm64: Fix shift-out-of-bounds bug
- CVE-2024-50138 bpf: Use raw_spinlock_t in ringbuf
- CVE-2024-50137 reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
- CVE-2024-50136 net/mlx5: Unregister notifier on eswitch init failure
- CVE-2024-50135 nvme-pci: fix race condition between reset and nvme_dev_disable()
- CVE-2024-50134 drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- CVE-2024-50133 LoongArch: Don't crash in stack_top() for tasks without vDSO
- CVE-2024-50132 tracing/probes: Fix MAX_TRACE_ARGS limit handling
- CVE-2024-50131 tracing: Consider the NULL character when validating the event length
- CVE-2024-50130 netfilter: bpf: must hold reference on net namespace
- CVE-2024-5013 WhatsUp Gold InstallController Denial-of-Service Vulnerability
- CVE-2024-50129 net: pse-pd: Fix out of bound for loop
- CVE-2024-50128 net: wwan: fix global oob in wwan_rtnl_policy
- CVE-2024-50127 net: sched: fix use-after-free in taprio_change()
- CVE-2024-50126 net: sched: use RCU read-side critical section in taprio_dump()
- CVE-2024-50125 Bluetooth: SCO: Fix UAF on sco_sock_timeout
- CVE-2024-50124 Bluetooth: ISO: Fix UAF on iso_sock_timeout
- CVE-2024-50123 bpf: Add the missing BPF_LINK_TYPE invocation for sockmap
- CVE-2024-50122 PCI: Hold rescan lock while adding devices during host probe
- CVE-2024-50121 nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- CVE-2024-50120 smb: client: Handle kstrdup failures for passwords
- CVE-2024-5012 WhatsUp Gold Missing Authentication GetWindowsCredential Information Disclosure Vulnerability
- CVE-2024-50119 cifs: fix warning when destroy 'cifs_io_request_pool'
- CVE-2024-50118 btrfs: reject ro->rw reconfiguration if there are hard ro requirements
- CVE-2024-50117 drm/amd: Guard against bad data for ATIF ACPI method
- CVE-2024-50116 nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- CVE-2024-50115 KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- CVE-2024-50114 KVM: arm64: Unregister redistributor for failed vCPU creation
- CVE-2024-50113 firewire: core: fix invalid port index for parent device