Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 232 of 521.
- CVE-2024-50112 x86/lam: Disable ADDRESS_MASKING in most cases
- CVE-2024-50111 LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- CVE-2024-50110 xfrm: fix one more kernel-infoleak in algo dumping
- CVE-2024-5011 WhatsUp Gold TestController Chart denial of service vulnerability
- CVE-2024-50109 md/raid10: fix null ptr dereference in raid10_size()
- CVE-2024-50108 drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- CVE-2024-50107 platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid addresses
- CVE-2024-50106 nfsd: fix race between laundromat and free_stateid
- CVE-2024-50105 ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc
- CVE-2024-50104 ASoC: qcom: sdm845: add missing soundwire runtime stream alloc
- CVE-2024-50103 ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- CVE-2024-50102 x86: fix user address masking non-canonical speculation issue
- CVE-2024-50101 iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- CVE-2024-50100 USB: gadget: dummy-hcd: Fix "task hung" problem
- CVE-2024-5010 WhatsUp Gold TestController multiple information disclosure vulnerabilities
- CVE-2024-50099 arm64: probes: Remove broken LDR (literal) uprobe support
- CVE-2024-50098 scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- CVE-2024-50097 net: fec: don't save PTP state if PTP is unsupported
- CVE-2024-50096 nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- CVE-2024-50095 RDMA/mad: Improve handling of timed out WRs of mad agent
- CVE-2024-50094 sfc: Don't invoke xdp_do_flush() from netpoll.
- CVE-2024-50093 thermal: intel: int340x: processor: Fix warning during module unload
- CVE-2024-50092 net: netconsole: fix wrong warning
- CVE-2024-50091 dm vdo: don't refer to dedupe_context after releasing it
- CVE-2024-50090 drm/xe/oa: Fix overflow in oa batch buffer
- CVE-2024-5009 WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability
- CVE-2024-50088 btrfs: fix uninitialized pointer free in add_inode_ref()
- CVE-2024-50087 btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- CVE-2024-50086 ksmbd: fix user-after-free from session log off
- CVE-2024-50085 mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- CVE-2024-50084 net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- CVE-2024-50083 tcp: fix mptcp DSS corruption due to large pmtu xmit
- CVE-2024-50082 blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- CVE-2024-50081 blk-mq: setup queue ->tag_set before initializing hctx
- CVE-2024-50080 ublk: don't allow user copy for unprivileged device
- CVE-2024-5008 WhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerability
- CVE-2024-50079 io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work
- CVE-2024-50078 Bluetooth: Call iso_exit() on module unload
- CVE-2024-50077 Bluetooth: ISO: Fix multiple init when debugfs is disabled
- CVE-2024-50076 vt: prevent kernel-infoleak in con_font_get()
- CVE-2024-50075 xhci: tegra: fix checked USB2 port number
- CVE-2024-50074 parport: Proper fix for array out-of-bounds access
- CVE-2024-50073 tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- CVE-2024-50072 x86/bugs: Use code segment selector for VERW operand
- CVE-2024-50071 pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func()
- CVE-2024-50070 pinctrl: stm32: check devm_kasprintf() returned value
- CVE-2024-50069 pinctrl: apple: check devm_kasprintf() returned value
- CVE-2024-50068 mm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets()
- CVE-2024-50067 uprobe: avoid out-of-bounds memory access of fetching args
- CVE-2024-50066 mm/mremap: fix move_normal_pmd/retract_page_tables race
- CVE-2024-50065 ntfs3: Change to non-blocking allocation in ntfs_d_hash
- CVE-2024-50064 zram: free secondary algorithms names
- CVE-2024-50063 bpf: Prevent tail call between progs attached to different hooks
- CVE-2024-50062 RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- CVE-2024-50061 i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- CVE-2024-50060 io_uring: check if we need to reschedule during overflow flush
- CVE-2024-5006 Cross-site scripting in Boostify Header Footer Builder for Elementor
- CVE-2024-50059 ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- CVE-2024-50058 serial: protect uart_port_dtr_rts() in uart_shutdown() too
- CVE-2024-50057 usb: typec: tipd: Free IRQ only if it was requested before
- CVE-2024-50056 usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- CVE-2024-50055 driver core: bus: Fix double free in driver API bus_register()
- CVE-2024-50054 mySCADA myPRO Path Traversal
- CVE-2024-50053 Stored XSS
- CVE-2024-50052 Arbitrary post deletion via Playbooks /ignore-thread endpoint
- CVE-2024-50051 spi: mpc52xx: Add cancel_work_sync before module remove
- CVE-2024-50050 Deserialization in Llama Stack
- CVE-2024-5005 Incorrect Provision of Specified Functionality in GitLab
- CVE-2024-50049 drm/amd/display: Check null pointer before dereferencing se
- CVE-2024-50048 fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- CVE-2024-50047 smb: client: fix UAF in async decryption
- CVE-2024-50046 NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- CVE-2024-50045 netfilter: br_netfilter: fix panic with metadata_dst skb
- CVE-2024-50044 Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- CVE-2024-50043 nfsd: fix possible badness in FREE_STATEID
- CVE-2024-50042 ice: Fix increasing MSI-X on VF
- CVE-2024-50041 i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- CVE-2024-50040 igb: Do not bring the device up after non-fatal error
- CVE-2024-5004 CM Popup Plugin for WordPress < 1.6.6 - Contributor+ Stored XSS
- CVE-2024-50039 net/sched: accept TCA_STAB only for root qdisc
- CVE-2024-50038 netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- CVE-2024-50037 drm/fbdev-dma: Only cleanup deferred I/O if necessary
- CVE-2024-50036 net: do not delay dst_entries_add() in dst_release()
- CVE-2024-50035 ppp: fix ppp_async_encode() illegal access
- CVE-2024-50034 net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC
- CVE-2024-50033 slip: make slhc_remember() more robust against malicious packets
- CVE-2024-50031 drm/v3d: Stop the active perfmon before being destroyed
- CVE-2024-50030 drm/xe/ct: prevent UAF in send_recv()
- CVE-2024-5003 WP Stacker <= 1.8.5 - Stored XSS via CSRF
- CVE-2024-50029 Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- CVE-2024-50028 thermal: core: Reference count the zone in thermal_zone_get_by_id()
- CVE-2024-50027 thermal: core: Free tzp copy along with the thermal zone
- CVE-2024-50026 scsi: wd33c93: Don't use stale scsi_pointer value
- CVE-2024-50025 scsi: fnic: Move flush_work initialization out of if block
- CVE-2024-50024 net: Fix an unsafe loop on the list
- CVE-2024-50023 net: phy: Remove LED entry from LEDs list on unregister
- CVE-2024-50022 device-dax: correct pgoff align in dax_set_mapping()
- CVE-2024-50021 ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()
- CVE-2024-50020 ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()
- CVE-2024-5002 User Submitted Posts < 20240516 - Admin+ Stored XSS