# Vulnerabilities published in 2024


- [CVE-2024-50204](https://insights.sbomify.com/CVE-2024-50204/): fs: don't try and remove empty rbtree node (medium 5.5)
- [CVE-2024-50203](https://insights.sbomify.com/CVE-2024-50203/): bpf, arm64: Fix address emission with tag-based KASAN enabled (high 7.8)
- [CVE-2024-50202](https://insights.sbomify.com/CVE-2024-50202/): nilfs2: propagate directory read errors from nilfs_find_entry() (medium 5.5)
- [CVE-2024-50201](https://insights.sbomify.com/CVE-2024-50201/): drm/radeon: Fix encoder->possible_clones (medium 5.5)
- [CVE-2024-50200](https://insights.sbomify.com/CVE-2024-50200/): maple_tree: correct tree corruption on spanning store (high 7.8)
- [CVE-2024-5020](https://insights.sbomify.com/CVE-2024-5020/): Cross-site scripting in Accordion Slider (medium 6.4)
- [CVE-2024-50199](https://insights.sbomify.com/CVE-2024-50199/): mm/swapfile: skip HugeTLB pages for unuse_vma (medium 5.5)
- [CVE-2024-50198](https://insights.sbomify.com/CVE-2024-50198/): iio: light: veml6030: fix IIO device retrieval from embedded device (medium 5.5)
- [CVE-2024-50197](https://insights.sbomify.com/CVE-2024-50197/): pinctrl: intel: platform: fix error path in device_for_each_child_node() (medium 5.5)
- [CVE-2024-50196](https://insights.sbomify.com/CVE-2024-50196/): pinctrl: ocelot: fix system hang on level based interrupts (medium 5.5)
- [CVE-2024-50195](https://insights.sbomify.com/CVE-2024-50195/): posix-clock: Fix missing timespec64 check in pc_clock_settime() (high 7.1)
- [CVE-2024-50194](https://insights.sbomify.com/CVE-2024-50194/): arm64: probes: Fix uprobes for big-endian kernels (medium 5.5)
- [CVE-2024-50193](https://insights.sbomify.com/CVE-2024-50193/): x86/entry_32: Clear CPU buffers after register restore in NMI return (high 7.1)
- [CVE-2024-50192](https://insights.sbomify.com/CVE-2024-50192/): irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (medium 4.7)
- [CVE-2024-50191](https://insights.sbomify.com/CVE-2024-50191/): ext4: don't set SB_RDONLY after filesystem errors (medium 5.5)
- [CVE-2024-50190](https://insights.sbomify.com/CVE-2024-50190/): ice: fix memleak in ice_init_tx_topology() (medium 5.5)
- [CVE-2024-5019](https://insights.sbomify.com/CVE-2024-5019/): WhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure Vulnerability (medium 5.3)
- [CVE-2024-50189](https://insights.sbomify.com/CVE-2024-50189/): HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (high 7.8)
- [CVE-2024-50188](https://insights.sbomify.com/CVE-2024-50188/): net: phy: dp83869: fix memory corruption when enabling fiber (high 7.8)
- [CVE-2024-50187](https://insights.sbomify.com/CVE-2024-50187/): drm/vc4: Stop the active perfmon before being destroyed (high 7.8)
- [CVE-2024-50186](https://insights.sbomify.com/CVE-2024-50186/): net: explicitly clear the sk pointer, when pf->create fails (high 7.8)
- [CVE-2024-50185](https://insights.sbomify.com/CVE-2024-50185/): mptcp: handle consistently DSS corruption (high 8.2)
- [CVE-2024-50184](https://insights.sbomify.com/CVE-2024-50184/): virtio_pmem: Check device status before requesting flush (medium 5.5)
- [CVE-2024-50183](https://insights.sbomify.com/CVE-2024-50183/): scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (medium 4.7)
- [CVE-2024-50182](https://insights.sbomify.com/CVE-2024-50182/): secretmem: disable memfd_secret() if arch cannot set direct map (high 7.1)
- [CVE-2024-50180](https://insights.sbomify.com/CVE-2024-50180/): fbdev: sisfb: Fix strbuf array overflow (high 7.8)
- [CVE-2024-5018](https://insights.sbomify.com/CVE-2024-5018/): WhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure Vulnerability (medium 5.3)
- [CVE-2024-50179](https://insights.sbomify.com/CVE-2024-50179/): ceph: remove the incorrect Fw reference check when dirtying pages (medium 5.5)
- [CVE-2024-50178](https://insights.sbomify.com/CVE-2024-50178/): cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request() (medium 5.5)
- [CVE-2024-50177](https://insights.sbomify.com/CVE-2024-50177/): drm/amd/display: fix a UBSAN warning in DML2.1 (medium 5.5)
- [CVE-2024-50176](https://insights.sbomify.com/CVE-2024-50176/): remoteproc: k3-r5: Fix error handling when power-up failed (medium 5.5)
- [CVE-2024-50175](https://insights.sbomify.com/CVE-2024-50175/): media: qcom: camss: Remove use_count guard in stop_streaming (high 7.8)
- [CVE-2024-50174](https://insights.sbomify.com/CVE-2024-50174/): drm/panthor: Fix race when converting group handle to group object (high 7.8)
- [CVE-2024-50173](https://insights.sbomify.com/CVE-2024-50173/): drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup() (high 7.8)
- [CVE-2024-50172](https://insights.sbomify.com/CVE-2024-50172/): RDMA/bnxt_re: Fix a possible memory leak (medium 5.5)
- [CVE-2024-50171](https://insights.sbomify.com/CVE-2024-50171/): net: systemport: fix potential memory leak in bcm_sysport_xmit() (medium 5.5)
- [CVE-2024-50170](https://insights.sbomify.com/CVE-2024-50170/): net: bcmasp: fix potential memory leak in bcmasp_xmit() (high 7.5)
- [CVE-2024-5017](https://insights.sbomify.com/CVE-2024-5017/): WhatsUp Gold AppProfileImport path traversal vulnerability (medium 6.5)
- [CVE-2024-50169](https://insights.sbomify.com/CVE-2024-50169/): vsock: Update rx_bytes on read_skb() (medium 5.5)
- [CVE-2024-50168](https://insights.sbomify.com/CVE-2024-50168/): net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (medium 5.5)
- [CVE-2024-50167](https://insights.sbomify.com/CVE-2024-50167/): be2net: fix potential memory leak in be_xmit() (medium 5.5)
- [CVE-2024-50166](https://insights.sbomify.com/CVE-2024-50166/): fsl/fman: Fix refcount handling of fman-related devices (medium 5.5)
- [CVE-2024-50165](https://insights.sbomify.com/CVE-2024-50165/): bpf: Preserve param->string when parsing mount options (high 7.8)
- [CVE-2024-50164](https://insights.sbomify.com/CVE-2024-50164/): bpf: Fix overloading of MEM_UNINIT's meaning (high 7.8)
- [CVE-2024-50163](https://insights.sbomify.com/CVE-2024-50163/): bpf: Make sure internal and UAPI bpf_redirect flags don't overlap (medium 5.5)
- [CVE-2024-50162](https://insights.sbomify.com/CVE-2024-50162/): bpf: devmap: provide rxq after redirect (critical 9.8)
- [CVE-2024-50161](https://insights.sbomify.com/CVE-2024-50161/): bpf: Check the remaining info_cnt before repeating btf fields (high 7.8)
- [CVE-2024-50160](https://insights.sbomify.com/CVE-2024-50160/): ALSA: hda/cs8409: Fix possible NULL dereference (medium 5.5)
- [CVE-2024-5016](https://insights.sbomify.com/CVE-2024-5016/): WhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-50159](https://insights.sbomify.com/CVE-2024-50159/): firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (high 7.0)
- [CVE-2024-50158](https://insights.sbomify.com/CVE-2024-50158/): RDMA/bnxt_re: Fix out of bound check (high 7.8)
- [CVE-2024-50157](https://insights.sbomify.com/CVE-2024-50157/): RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (medium 5.5)
- [CVE-2024-50156](https://insights.sbomify.com/CVE-2024-50156/): drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (medium 5.5)
- [CVE-2024-50155](https://insights.sbomify.com/CVE-2024-50155/): netdevsim: use cond_resched() in nsim_dev_trap_report_work() (high 7.8)
- [CVE-2024-50154](https://insights.sbomify.com/CVE-2024-50154/): tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (critical 9.8)
- [CVE-2024-50153](https://insights.sbomify.com/CVE-2024-50153/): scsi: target: core: Fix null-ptr-deref in target_alloc_device() (medium 5.5)
- [CVE-2024-50152](https://insights.sbomify.com/CVE-2024-50152/): smb: client: fix possible double free in smb2_set_ea() (critical 9.8)
- [CVE-2024-50151](https://insights.sbomify.com/CVE-2024-50151/): smb: client: fix OOBs when building SMB2_IOCTL request (high 7.8)
- [CVE-2024-50150](https://insights.sbomify.com/CVE-2024-50150/): usb: typec: altmode should keep reference to parent (high 7.8)
- [CVE-2024-5015](https://insights.sbomify.com/CVE-2024-5015/): WhatsUp Gold SessionControler Server-Side Request Forgery Information Disclosure Vulnerability (high 7.1)
- [CVE-2024-50149](https://insights.sbomify.com/CVE-2024-50149/): drm/xe: Don't free job in TDR (high 7.8)
- [CVE-2024-50148](https://insights.sbomify.com/CVE-2024-50148/): Bluetooth: bnep: fix wild-memory-access in proto_unregister (medium 5.5)
- [CVE-2024-50147](https://insights.sbomify.com/CVE-2024-50147/): net/mlx5: Fix command bitmask initialization (medium 5.5)
- [CVE-2024-50146](https://insights.sbomify.com/CVE-2024-50146/): net/mlx5e: Don't call cleanup on profile rollback failure (medium 5.5)
- [CVE-2024-50145](https://insights.sbomify.com/CVE-2024-50145/): octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx() (high 7.5)
- [CVE-2024-50144](https://insights.sbomify.com/CVE-2024-50144/): drm/xe: fix unbalanced rpm put() with fence_fini() (medium 5.5)
- [CVE-2024-50143](https://insights.sbomify.com/CVE-2024-50143/): udf: fix uninit-value use in udf_get_fileshortad (high 7.8)
- [CVE-2024-50142](https://insights.sbomify.com/CVE-2024-50142/): xfrm: validate new SA's prefixlen using SA family when sel.family is unset (medium 5.5)
- [CVE-2024-50141](https://insights.sbomify.com/CVE-2024-50141/): ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (high 7.8)
- [CVE-2024-50140](https://insights.sbomify.com/CVE-2024-50140/): sched/core: Disable page allocation in task_tick_mm_cid() (medium 5.5)
- [CVE-2024-5014](https://insights.sbomify.com/CVE-2024-5014/): WhatsUp Gold GetASPReport Server-Side Request Forgery Information Disclosure (high 7.1)
- [CVE-2024-50139](https://insights.sbomify.com/CVE-2024-50139/): KVM: arm64: Fix shift-out-of-bounds bug (high 7.9)
- [CVE-2024-50138](https://insights.sbomify.com/CVE-2024-50138/): bpf: Use raw_spinlock_t in ringbuf (medium 5.5)
- [CVE-2024-50137](https://insights.sbomify.com/CVE-2024-50137/): reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC (medium 5.5)
- [CVE-2024-50136](https://insights.sbomify.com/CVE-2024-50136/): net/mlx5: Unregister notifier on eswitch init failure (medium 5.5)
- [CVE-2024-50135](https://insights.sbomify.com/CVE-2024-50135/): nvme-pci: fix race condition between reset and nvme_dev_disable() (medium 4.7)
- [CVE-2024-50134](https://insights.sbomify.com/CVE-2024-50134/): drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (medium 5.5)
- [CVE-2024-50133](https://insights.sbomify.com/CVE-2024-50133/): LoongArch: Don't crash in stack_top() for tasks without vDSO (medium 5.5)
- [CVE-2024-50132](https://insights.sbomify.com/CVE-2024-50132/): tracing/probes: Fix MAX_TRACE_ARGS limit handling (high 7.8)
- [CVE-2024-50131](https://insights.sbomify.com/CVE-2024-50131/): tracing: Consider the NULL character when validating the event length (high 7.3)
- [CVE-2024-50130](https://insights.sbomify.com/CVE-2024-50130/): netfilter: bpf: must hold reference on net namespace (high 7.8)
- [CVE-2024-5013](https://insights.sbomify.com/CVE-2024-5013/): WhatsUp Gold InstallController Denial-of-Service Vulnerability (high 7.5)
- [CVE-2024-50129](https://insights.sbomify.com/CVE-2024-50129/): net: pse-pd: Fix out of bound for loop (high 7.8)
- [CVE-2024-50128](https://insights.sbomify.com/CVE-2024-50128/): net: wwan: fix global oob in wwan_rtnl_policy (high 7.8)
- [CVE-2024-50127](https://insights.sbomify.com/CVE-2024-50127/): net: sched: fix use-after-free in taprio_change() (high 7.8)
- [CVE-2024-50126](https://insights.sbomify.com/CVE-2024-50126/): net: sched: use RCU read-side critical section in taprio_dump() (high 7.8)
- [CVE-2024-50125](https://insights.sbomify.com/CVE-2024-50125/): Bluetooth: SCO: Fix UAF on sco_sock_timeout (high 8.0)
- [CVE-2024-50124](https://insights.sbomify.com/CVE-2024-50124/): Bluetooth: ISO: Fix UAF on iso_sock_timeout (high 8.0)
- [CVE-2024-50123](https://insights.sbomify.com/CVE-2024-50123/): bpf: Add the missing BPF_LINK_TYPE invocation for sockmap (high 7.1)
- [CVE-2024-50122](https://insights.sbomify.com/CVE-2024-50122/): PCI: Hold rescan lock while adding devices during host probe (medium 5.5)
- [CVE-2024-50121](https://insights.sbomify.com/CVE-2024-50121/): nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (high 7.8)
- [CVE-2024-50120](https://insights.sbomify.com/CVE-2024-50120/): smb: client: Handle kstrdup failures for passwords (medium 5.5)
- [CVE-2024-5012](https://insights.sbomify.com/CVE-2024-5012/): WhatsUp Gold Missing Authentication GetWindowsCredential Information Disclosure Vulnerability (high 8.6)
- [CVE-2024-50119](https://insights.sbomify.com/CVE-2024-50119/): cifs: fix warning when destroy 'cifs_io_request_pool' (high 7.0)
- [CVE-2024-50118](https://insights.sbomify.com/CVE-2024-50118/): btrfs: reject ro->rw reconfiguration if there are hard ro requirements (medium 5.5)
- [CVE-2024-50117](https://insights.sbomify.com/CVE-2024-50117/): drm/amd: Guard against bad data for ATIF ACPI method (high 7.3)
- [CVE-2024-50116](https://insights.sbomify.com/CVE-2024-50116/): nilfs2: fix kernel bug due to missing clearing of buffer delay flag (medium 5.5)
- [CVE-2024-50115](https://insights.sbomify.com/CVE-2024-50115/): KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (high 8.4)
- [CVE-2024-50114](https://insights.sbomify.com/CVE-2024-50114/): KVM: arm64: Unregister redistributor for failed vCPU creation (high 7.8)
- [CVE-2024-50113](https://insights.sbomify.com/CVE-2024-50113/): firewire: core: fix invalid port index for parent device (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/231/