# Vulnerabilities published in 2024


- [CVE-2024-50112](https://insights.sbomify.com/CVE-2024-50112/): x86/lam: Disable ADDRESS_MASKING in most cases (high 7.8)
- [CVE-2024-50111](https://insights.sbomify.com/CVE-2024-50111/): LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context (medium 5.5)
- [CVE-2024-50110](https://insights.sbomify.com/CVE-2024-50110/): xfrm: fix one more kernel-infoleak in algo dumping (medium 5.5)
- [CVE-2024-5011](https://insights.sbomify.com/CVE-2024-5011/): WhatsUp Gold TestController Chart denial of service vulnerability (high 7.5)
- [CVE-2024-50109](https://insights.sbomify.com/CVE-2024-50109/): md/raid10: fix null ptr dereference in raid10_size() (medium 5.5)
- [CVE-2024-50108](https://insights.sbomify.com/CVE-2024-50108/): drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (medium 5.5)
- [CVE-2024-50107](https://insights.sbomify.com/CVE-2024-50107/): platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid addresses (medium 5.5)
- [CVE-2024-50106](https://insights.sbomify.com/CVE-2024-50106/): nfsd: fix race between laundromat and free_stateid (critical 9.8)
- [CVE-2024-50105](https://insights.sbomify.com/CVE-2024-50105/): ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc (medium 5.5)
- [CVE-2024-50104](https://insights.sbomify.com/CVE-2024-50104/): ASoC: qcom: sdm845: add missing soundwire runtime stream alloc (medium 5.5)
- [CVE-2024-50103](https://insights.sbomify.com/CVE-2024-50103/): ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (medium 5.5)
- [CVE-2024-50102](https://insights.sbomify.com/CVE-2024-50102/): x86: fix user address masking non-canonical speculation issue (medium 5.5)
- [CVE-2024-50101](https://insights.sbomify.com/CVE-2024-50101/): iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (high 7.8)
- [CVE-2024-50100](https://insights.sbomify.com/CVE-2024-50100/): USB: gadget: dummy-hcd: Fix "task hung" problem (medium 5.5)
- [CVE-2024-5010](https://insights.sbomify.com/CVE-2024-5010/): WhatsUp Gold TestController multiple information disclosure vulnerabilities (high 7.5)
- [CVE-2024-50099](https://insights.sbomify.com/CVE-2024-50099/): arm64: probes: Remove broken LDR (literal) uprobe support (high 7.3)
- [CVE-2024-50098](https://insights.sbomify.com/CVE-2024-50098/): scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (medium 5.5)
- [CVE-2024-50097](https://insights.sbomify.com/CVE-2024-50097/): net: fec: don't save PTP state if PTP is unsupported (medium 5.5)
- [CVE-2024-50096](https://insights.sbomify.com/CVE-2024-50096/): nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error (high 7.3)
- [CVE-2024-50095](https://insights.sbomify.com/CVE-2024-50095/): RDMA/mad: Improve handling of timed out WRs of mad agent (high 7.5)
- [CVE-2024-50094](https://insights.sbomify.com/CVE-2024-50094/): sfc: Don't invoke xdp_do_flush() from netpoll. (high 7.5)
- [CVE-2024-50093](https://insights.sbomify.com/CVE-2024-50093/): thermal: intel: int340x: processor: Fix warning during module unload (medium 5.5)
- [CVE-2024-50092](https://insights.sbomify.com/CVE-2024-50092/): net: netconsole: fix wrong warning (low 3.3)
- [CVE-2024-50091](https://insights.sbomify.com/CVE-2024-50091/): dm vdo: don't refer to dedupe_context after releasing it (high 7.8)
- [CVE-2024-50090](https://insights.sbomify.com/CVE-2024-50090/): drm/xe/oa: Fix overflow in oa batch buffer (high 7.8)
- [CVE-2024-5009](https://insights.sbomify.com/CVE-2024-5009/): WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability (high 8.4)
- [CVE-2024-50088](https://insights.sbomify.com/CVE-2024-50088/): btrfs: fix uninitialized pointer free in add_inode_ref() (high 7.8)
- [CVE-2024-50087](https://insights.sbomify.com/CVE-2024-50087/): btrfs: fix uninitialized pointer free on read_alloc_one_name() error (high 7.8)
- [CVE-2024-50086](https://insights.sbomify.com/CVE-2024-50086/): ksmbd: fix user-after-free from session log off (critical 9.8)
- [CVE-2024-50085](https://insights.sbomify.com/CVE-2024-50085/): mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (critical 9.8)
- [CVE-2024-50084](https://insights.sbomify.com/CVE-2024-50084/): net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() (high 7.8)
- [CVE-2024-50083](https://insights.sbomify.com/CVE-2024-50083/): tcp: fix mptcp DSS corruption due to large pmtu xmit (high 7.5)
- [CVE-2024-50082](https://insights.sbomify.com/CVE-2024-50082/): blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (high 7.8)
- [CVE-2024-50081](https://insights.sbomify.com/CVE-2024-50081/): blk-mq: setup queue ->tag_set before initializing hctx (medium 5.5)
- [CVE-2024-50080](https://insights.sbomify.com/CVE-2024-50080/): ublk: don't allow user copy for unprivileged device (medium 5.5)
- [CVE-2024-5008](https://insights.sbomify.com/CVE-2024-5008/): WhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-50079](https://insights.sbomify.com/CVE-2024-50079/): io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work (medium 5.5)
- [CVE-2024-50078](https://insights.sbomify.com/CVE-2024-50078/): Bluetooth: Call iso_exit() on module unload (high 7.8)
- [CVE-2024-50077](https://insights.sbomify.com/CVE-2024-50077/): Bluetooth: ISO: Fix multiple init when debugfs is disabled (high 7.8)
- [CVE-2024-50076](https://insights.sbomify.com/CVE-2024-50076/): vt: prevent kernel-infoleak in con_font_get() (medium 6.5)
- [CVE-2024-50075](https://insights.sbomify.com/CVE-2024-50075/): xhci: tegra: fix checked USB2 port number (high 8.0)
- [CVE-2024-50074](https://insights.sbomify.com/CVE-2024-50074/): parport: Proper fix for array out-of-bounds access (high 7.8)
- [CVE-2024-50073](https://insights.sbomify.com/CVE-2024-50073/): tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (high 7.8)
- [CVE-2024-50072](https://insights.sbomify.com/CVE-2024-50072/): x86/bugs: Use code segment selector for VERW operand (medium 5.5)
- [CVE-2024-50071](https://insights.sbomify.com/CVE-2024-50071/): pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func() (high 7.8)
- [CVE-2024-50070](https://insights.sbomify.com/CVE-2024-50070/): pinctrl: stm32: check devm_kasprintf() returned value (medium 5.5)
- [CVE-2024-50069](https://insights.sbomify.com/CVE-2024-50069/): pinctrl: apple: check devm_kasprintf() returned value (medium 5.5)
- [CVE-2024-50068](https://insights.sbomify.com/CVE-2024-50068/): mm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets() (medium 5.5)
- [CVE-2024-50067](https://insights.sbomify.com/CVE-2024-50067/): uprobe: avoid out-of-bounds memory access of fetching args (high 7.8)
- [CVE-2024-50066](https://insights.sbomify.com/CVE-2024-50066/): mm/mremap: fix move_normal_pmd/retract_page_tables race (high 7.8)
- [CVE-2024-50065](https://insights.sbomify.com/CVE-2024-50065/): ntfs3: Change to non-blocking allocation in ntfs_d_hash (medium 5.5)
- [CVE-2024-50064](https://insights.sbomify.com/CVE-2024-50064/): zram: free secondary algorithms names (medium 5.5)
- [CVE-2024-50063](https://insights.sbomify.com/CVE-2024-50063/): bpf: Prevent tail call between progs attached to different hooks (high 7.8)
- [CVE-2024-50062](https://insights.sbomify.com/CVE-2024-50062/): RDMA/rtrs-srv: Avoid null pointer deref during path establishment (high 7.5)
- [CVE-2024-50061](https://insights.sbomify.com/CVE-2024-50061/): i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition (high 7.0)
- [CVE-2024-50060](https://insights.sbomify.com/CVE-2024-50060/): io_uring: check if we need to reschedule during overflow flush (medium 5.5)
- [CVE-2024-5006](https://insights.sbomify.com/CVE-2024-5006/): Cross-site scripting in Boostify Header Footer Builder for Elementor (medium 6.4)
- [CVE-2024-50059](https://insights.sbomify.com/CVE-2024-50059/): ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (high 7.8)
- [CVE-2024-50058](https://insights.sbomify.com/CVE-2024-50058/): serial: protect uart_port_dtr_rts() in uart_shutdown() too (medium 5.5)
- [CVE-2024-50057](https://insights.sbomify.com/CVE-2024-50057/): usb: typec: tipd: Free IRQ only if it was requested before (low 3.3)
- [CVE-2024-50056](https://insights.sbomify.com/CVE-2024-50056/): usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (medium 5.5)
- [CVE-2024-50055](https://insights.sbomify.com/CVE-2024-50055/): driver core: bus: Fix double free in driver API bus_register() (high 7.8)
- [CVE-2024-50054](https://insights.sbomify.com/CVE-2024-50054/): mySCADA myPRO Path Traversal (high 8.7)
- [CVE-2024-50053](https://insights.sbomify.com/CVE-2024-50053/): Stored XSS (medium 6.3)
- [CVE-2024-50052](https://insights.sbomify.com/CVE-2024-50052/): Arbitrary post deletion via Playbooks /ignore-thread endpoint (medium 4.3)
- [CVE-2024-50051](https://insights.sbomify.com/CVE-2024-50051/): spi: mpc52xx: Add cancel_work_sync before module remove (high 7.8)
- [CVE-2024-50050](https://insights.sbomify.com/CVE-2024-50050/): Deserialization in Llama Stack (medium 6.3)
- [CVE-2024-5005](https://insights.sbomify.com/CVE-2024-5005/): Incorrect Provision of Specified Functionality in GitLab (medium 4.3)
- [CVE-2024-50049](https://insights.sbomify.com/CVE-2024-50049/): drm/amd/display: Check null pointer before dereferencing se (medium 5.5)
- [CVE-2024-50048](https://insights.sbomify.com/CVE-2024-50048/): fbcon: Fix a NULL pointer dereference issue in fbcon_putcs (medium 5.5)
- [CVE-2024-50047](https://insights.sbomify.com/CVE-2024-50047/): smb: client: fix UAF in async decryption (critical 9.8)
- [CVE-2024-50046](https://insights.sbomify.com/CVE-2024-50046/): NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (critical 9.8)
- [CVE-2024-50045](https://insights.sbomify.com/CVE-2024-50045/): netfilter: br_netfilter: fix panic with metadata_dst skb (high 7.5)
- [CVE-2024-50044](https://insights.sbomify.com/CVE-2024-50044/): Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (low 3.3)
- [CVE-2024-50043](https://insights.sbomify.com/CVE-2024-50043/): nfsd: fix possible badness in FREE_STATEID (critical 9.8)
- [CVE-2024-50042](https://insights.sbomify.com/CVE-2024-50042/): ice: Fix increasing MSI-X on VF (high 7.1)
- [CVE-2024-50041](https://insights.sbomify.com/CVE-2024-50041/): i40e: Fix macvlan leak by synchronizing access to mac_filter_hash (high 8.8)
- [CVE-2024-50040](https://insights.sbomify.com/CVE-2024-50040/): igb: Do not bring the device up after non-fatal error (medium 5.5)
- [CVE-2024-5004](https://insights.sbomify.com/CVE-2024-5004/): CM Popup Plugin for WordPress < 1.6.6 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2024-50039](https://insights.sbomify.com/CVE-2024-50039/): net/sched: accept TCA_STAB only for root qdisc (high 7.8)
- [CVE-2024-50038](https://insights.sbomify.com/CVE-2024-50038/): netfilter: xtables: avoid NFPROTO_UNSPEC where needed (medium 5.5)
- [CVE-2024-50037](https://insights.sbomify.com/CVE-2024-50037/): drm/fbdev-dma: Only cleanup deferred I/O if necessary (medium 5.5)
- [CVE-2024-50036](https://insights.sbomify.com/CVE-2024-50036/): net: do not delay dst_entries_add() in dst_release() (high 7.8)
- [CVE-2024-50035](https://insights.sbomify.com/CVE-2024-50035/): ppp: fix ppp_async_encode() illegal access (high 7.1)
- [CVE-2024-50034](https://insights.sbomify.com/CVE-2024-50034/): net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC (medium 5.5)
- [CVE-2024-50033](https://insights.sbomify.com/CVE-2024-50033/): slip: make slhc_remember() more robust against malicious packets (critical 9.8)
- [CVE-2024-50031](https://insights.sbomify.com/CVE-2024-50031/): drm/v3d: Stop the active perfmon before being destroyed (high 7.8)
- [CVE-2024-50030](https://insights.sbomify.com/CVE-2024-50030/): drm/xe/ct: prevent UAF in send_recv() (high 7.8)
- [CVE-2024-5003](https://insights.sbomify.com/CVE-2024-5003/): WP Stacker <= 1.8.5 - Stored XSS via CSRF (medium 5.4)
- [CVE-2024-50029](https://insights.sbomify.com/CVE-2024-50029/): Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (high 8.8)
- [CVE-2024-50028](https://insights.sbomify.com/CVE-2024-50028/): thermal: core: Reference count the zone in thermal_zone_get_by_id() (high 7.8)
- [CVE-2024-50027](https://insights.sbomify.com/CVE-2024-50027/): thermal: core: Free tzp copy along with the thermal zone (high 7.8)
- [CVE-2024-50026](https://insights.sbomify.com/CVE-2024-50026/): scsi: wd33c93: Don't use stale scsi_pointer value (medium 5.5)
- [CVE-2024-50025](https://insights.sbomify.com/CVE-2024-50025/): scsi: fnic: Move flush_work initialization out of if block (medium 5.5)
- [CVE-2024-50024](https://insights.sbomify.com/CVE-2024-50024/): net: Fix an unsafe loop on the list (high 7.3)
- [CVE-2024-50023](https://insights.sbomify.com/CVE-2024-50023/): net: phy: Remove LED entry from LEDs list on unregister (medium 5.5)
- [CVE-2024-50022](https://insights.sbomify.com/CVE-2024-50022/): device-dax: correct pgoff align in dax_set_mapping() (medium 5.5)
- [CVE-2024-50021](https://insights.sbomify.com/CVE-2024-50021/): ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() (medium 5.5)
- [CVE-2024-50020](https://insights.sbomify.com/CVE-2024-50020/): ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() (medium 5.5)
- [CVE-2024-5002](https://insights.sbomify.com/CVE-2024-5002/): User Submitted Posts < 20240516 - Admin+ Stored XSS (medium 4.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/232/