Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 258 of 521.
- CVE-2024-46830 KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
- CVE-2024-4683 Campcodes Complete Web-Based School Management System exam_timetable_insert_form.php cross site scripting
- CVE-2024-46829 rtmutex: Drop rt_mutex::wait_lock before scheduling
- CVE-2024-46828 sched: sch_cake: fix bulk flow accounting logic for host fairness
- CVE-2024-46827 wifi: ath12k: fix firmware crash due to invalid peer nss
- CVE-2024-46826 ELF: fix kernel.randomize_va_space double read
- CVE-2024-46825 wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- CVE-2024-46824 iommufd: Require drivers to supply the cache_invalidate_user ops
- CVE-2024-46823 kunit/overflow: Fix UB in overflow_allocation_test
- CVE-2024-46822 arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- CVE-2024-46821 drm/amd/pm: Fix negative array index read
- CVE-2024-46820 drm/amdgpu/vcn: remove irq disabling in vcn 5 suspend
- CVE-2024-4682 Campcodes Complete Web-Based School Management System exam_timetable_update_form.php cross site scripting
- CVE-2024-46819 drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- CVE-2024-46818 drm/amd/display: Check gpio_id before used as array index
- CVE-2024-46817 drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- CVE-2024-46816 drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- CVE-2024-46815 drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- CVE-2024-46814 drm/amd/display: Check msg_id before processing transcation
- CVE-2024-46813 drm/amd/display: Check link_index before accessing dc->links[]
- CVE-2024-46812 drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- CVE-2024-46811 drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- CVE-2024-46810 drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- CVE-2024-4681 Campcodes Legal Case Management System Setting general-setting unrestricted upload
- CVE-2024-46809 drm/amd/display: Check BIOS images before it is used
- CVE-2024-46808 drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range
- CVE-2024-46807 drm/amd/amdgpu: Check tbo resource pointer
- CVE-2024-46806 drm/amdgpu: Fix the warning division or modulo by zero
- CVE-2024-46805 drm/amdgpu: fix the waring dereferencing hive
- CVE-2024-46804 drm/amd/display: Add array index check for hdcp ddc access
- CVE-2024-46803 drm/amdkfd: Check debug trap enable before write dbg_ev_file
- CVE-2024-46802 drm/amd/display: added NULL check at start of dc_validate_stream
- CVE-2024-46801 libfs: fix get_stashed_dentry()
- CVE-2024-46800 sch/netem: fix use after free in netem_dequeue
- CVE-2024-4680 Insufficient Session Expiration in zenml-io/zenml
- CVE-2024-46799 net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX
- CVE-2024-46798 ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- CVE-2024-46797 powerpc/qspinlock: Fix deadlock in MCS queue
- CVE-2024-46796 smb: client: fix double put of @cfile in smb2_set_path_size()
- CVE-2024-46795 ksmbd: unset the binding mark of a reused connection
- CVE-2024-46794 x86/tdx: Fix data leak in mmio_read()
- CVE-2024-46793 ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder
- CVE-2024-46792 riscv: misaligned: Restrict user access to kernel memory
- CVE-2024-46791 can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- CVE-2024-46790 codetag: debug: mark codetags for poisoned page as empty
- CVE-2024-4679 Folder Permission Vulnerability in JP1/Extensible SNMP Agent
- CVE-2024-46789 mm/slub: add check for s->flags in the alloc_tagging_slab_free_hook
- CVE-2024-46788 tracing/osnoise: Use a cpumask to know what threads are kthreads
- CVE-2024-46787 userfaultfd: fix checks for huge PMDs
- CVE-2024-46786 fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- CVE-2024-46785 eventfs: Use list_del_rcu() for SRCU protected list variable
- CVE-2024-46784 net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- CVE-2024-46783 tcp_bpf: fix return value of tcp_bpf_sendmsg()
- CVE-2024-46782 ila: call nf_unregister_net_hooks() sooner
- CVE-2024-46781 nilfs2: fix missing cleanup on rollforward recovery error
- CVE-2024-46780 nilfs2: protect references to superblock parameters exposed in sysfs
- CVE-2024-4678 Campcodes Complete Web-Based School Management System find_friends.php cross site scripting
- CVE-2024-46779 drm/imagination: Free pvr_vm_gpuva after unlink
- CVE-2024-46778 drm/amd/display: Check UnboundedRequestEnabled's value
- CVE-2024-46777 udf: Avoid excessive partition lengths
- CVE-2024-46776 drm/amd/display: Run DC_LOG_DC after checking link->link_enc
- CVE-2024-46775 drm/amd/display: Validate function returns
- CVE-2024-46774 powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- CVE-2024-46773 drm/amd/display: Check denominator pbn_div before used
- CVE-2024-46772 drm/amd/display: Check denominator crb_pipes before used
- CVE-2024-46771 can: bcm: Remove proc entry when dev is unregistered.
- CVE-2024-46770 ice: Add netif_device_attach/detach into PF reset flow
- CVE-2024-4677 Campcodes Complete Web-Based School Management System my_student_exam_marks1.php cross site scripting
- CVE-2024-46769 spi: intel: Add check devm_kasprintf() returned value
- CVE-2024-46768 hwmon: (hp-wmi-sensors) Check if WMI event data exists
- CVE-2024-46767 net: phy: Fix missing of_node_put() for leds
- CVE-2024-46766 ice: move netif_queue_set_napi to rtnl-protected sections
- CVE-2024-46765 ice: protect XDP configuration with a mutex
- CVE-2024-46764 bpf: add check for invalid name in btf_name_valid_section()
- CVE-2024-46763 fou: Fix null-ptr-deref in GRO.
- CVE-2024-46762 xen: privcmd: Fix possible access to a freed kirqfd instance
- CVE-2024-46761 pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- CVE-2024-46760 wifi: rtw88: usb: schedule rx work after everything is set up
- CVE-2024-4676 Campcodes Complete Web-Based School Management System range_grade_text.php cross site scripting
- CVE-2024-46759 hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- CVE-2024-46755 wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- CVE-2024-46754 bpf: Remove tst_run from lwt_seg6local_prog_ops.
- CVE-2024-46753 btrfs: handle errors from btrfs_dec_ref() properly
- CVE-2024-46752 btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- CVE-2024-46751 btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- CVE-2024-46750 PCI: Add missing bridge lock to pci_bus_lock()
- CVE-2024-4675 Campcodes Complete Web-Based School Management System show_events.php cross site scripting
- CVE-2024-46749 Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- CVE-2024-46748 cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT
- CVE-2024-46747 HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- CVE-2024-46746 HID: amd_sfh: free driver_data after destroying hid device
- CVE-2024-46745 Input: uinput - reject requests with unreasonable number of slots
- CVE-2024-46744 Squashfs: sanity check symbolic link size
- CVE-2024-46743 of/irq: Prevent device address out-of-bounds read in interrupt map walk
- CVE-2024-46742 smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- CVE-2024-46741 misc: fastrpc: Fix double free of 'buf' in error path
- CVE-2024-46740 binder: fix UAF caused by offsets overwrite
- CVE-2024-4674 Campcodes Complete Web-Based School Management System show_friend_request.php cross site scripting
- CVE-2024-46739 uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- CVE-2024-46738 VMCI: Fix use-after-free when removing resource in vmci_resource_remove()