# Vulnerabilities published in 2024


- [CVE-2024-46830](https://insights.sbomify.com/CVE-2024-46830/): KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS (high 7.8)
- [CVE-2024-4683](https://insights.sbomify.com/CVE-2024-4683/): Campcodes Complete Web-Based School Management System exam_timetable_insert_form.php cross site scripting (medium 5.3)
- [CVE-2024-46829](https://insights.sbomify.com/CVE-2024-46829/): rtmutex: Drop rt_mutex::wait_lock before scheduling (medium 5.5)
- [CVE-2024-46828](https://insights.sbomify.com/CVE-2024-46828/): sched: sch_cake: fix bulk flow accounting logic for host fairness (high 7.1)
- [CVE-2024-46827](https://insights.sbomify.com/CVE-2024-46827/): wifi: ath12k: fix firmware crash due to invalid peer nss (medium 5.5)
- [CVE-2024-46826](https://insights.sbomify.com/CVE-2024-46826/): ELF: fix kernel.randomize_va_space double read (medium 5.5)
- [CVE-2024-46825](https://insights.sbomify.com/CVE-2024-46825/): wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check (medium 5.5)
- [CVE-2024-46824](https://insights.sbomify.com/CVE-2024-46824/): iommufd: Require drivers to supply the cache_invalidate_user ops (medium 5.5)
- [CVE-2024-46823](https://insights.sbomify.com/CVE-2024-46823/): kunit/overflow: Fix UB in overflow_allocation_test (high 8.4)
- [CVE-2024-46822](https://insights.sbomify.com/CVE-2024-46822/): arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (medium 5.5)
- [CVE-2024-46821](https://insights.sbomify.com/CVE-2024-46821/): drm/amd/pm: Fix negative array index read (high 7.8)
- [CVE-2024-46820](https://insights.sbomify.com/CVE-2024-46820/): drm/amdgpu/vcn: remove irq disabling in vcn 5 suspend (high 7.8)
- [CVE-2024-4682](https://insights.sbomify.com/CVE-2024-4682/): Campcodes Complete Web-Based School Management System exam_timetable_update_form.php cross site scripting (medium 5.3)
- [CVE-2024-46819](https://insights.sbomify.com/CVE-2024-46819/): drm/amdgpu: the warning dereferencing obj for nbio_v7_4 (medium 5.5)
- [CVE-2024-46818](https://insights.sbomify.com/CVE-2024-46818/): drm/amd/display: Check gpio_id before used as array index (high 7.8)
- [CVE-2024-46817](https://insights.sbomify.com/CVE-2024-46817/): drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (high 7.4)
- [CVE-2024-46816](https://insights.sbomify.com/CVE-2024-46816/): drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (high 7.8)
- [CVE-2024-46815](https://insights.sbomify.com/CVE-2024-46815/): drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] (high 7.1)
- [CVE-2024-46814](https://insights.sbomify.com/CVE-2024-46814/): drm/amd/display: Check msg_id before processing transcation (high 7.8)
- [CVE-2024-46813](https://insights.sbomify.com/CVE-2024-46813/): drm/amd/display: Check link_index before accessing dc->links[] (high 7.8)
- [CVE-2024-46812](https://insights.sbomify.com/CVE-2024-46812/): drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration (high 7.8)
- [CVE-2024-46811](https://insights.sbomify.com/CVE-2024-46811/): drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box (high 7.3)
- [CVE-2024-46810](https://insights.sbomify.com/CVE-2024-46810/): drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (medium 5.5)
- [CVE-2024-4681](https://insights.sbomify.com/CVE-2024-4681/): Campcodes Legal Case Management System Setting general-setting unrestricted upload (medium 5.1)
- [CVE-2024-46809](https://insights.sbomify.com/CVE-2024-46809/): drm/amd/display: Check BIOS images before it is used (medium 5.5)
- [CVE-2024-46808](https://insights.sbomify.com/CVE-2024-46808/): drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range (medium 5.5)
- [CVE-2024-46807](https://insights.sbomify.com/CVE-2024-46807/): drm/amd/amdgpu: Check tbo resource pointer (medium 5.5)
- [CVE-2024-46806](https://insights.sbomify.com/CVE-2024-46806/): drm/amdgpu: Fix the warning division or modulo by zero (medium 5.5)
- [CVE-2024-46805](https://insights.sbomify.com/CVE-2024-46805/): drm/amdgpu: fix the waring dereferencing hive (medium 5.5)
- [CVE-2024-46804](https://insights.sbomify.com/CVE-2024-46804/): drm/amd/display: Add array index check for hdcp ddc access (high 7.8)
- [CVE-2024-46803](https://insights.sbomify.com/CVE-2024-46803/): drm/amdkfd: Check debug trap enable before write dbg_ev_file (high 7.8)
- [CVE-2024-46802](https://insights.sbomify.com/CVE-2024-46802/): drm/amd/display: added NULL check at start of dc_validate_stream (medium 5.5)
- [CVE-2024-46801](https://insights.sbomify.com/CVE-2024-46801/): libfs: fix get_stashed_dentry() (high 7.8)
- [CVE-2024-46800](https://insights.sbomify.com/CVE-2024-46800/): sch/netem: fix use after free in netem_dequeue (high 7.8)
- [CVE-2024-4680](https://insights.sbomify.com/CVE-2024-4680/): Insufficient Session Expiration in zenml-io/zenml (low 3.9)
- [CVE-2024-46799](https://insights.sbomify.com/CVE-2024-46799/): net: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX (high 7.5)
- [CVE-2024-46798](https://insights.sbomify.com/CVE-2024-46798/): ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object (high 7.8)
- [CVE-2024-46797](https://insights.sbomify.com/CVE-2024-46797/): powerpc/qspinlock: Fix deadlock in MCS queue (medium 5.5)
- [CVE-2024-46796](https://insights.sbomify.com/CVE-2024-46796/): smb: client: fix double put of @cfile in smb2_set_path_size() (critical 9.8)
- [CVE-2024-46795](https://insights.sbomify.com/CVE-2024-46795/): ksmbd: unset the binding mark of a reused connection (medium 5.5)
- [CVE-2024-46794](https://insights.sbomify.com/CVE-2024-46794/): x86/tdx: Fix data leak in mmio_read() (low 3.3)
- [CVE-2024-46793](https://insights.sbomify.com/CVE-2024-46793/): ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder (medium 5.5)
- [CVE-2024-46792](https://insights.sbomify.com/CVE-2024-46792/): riscv: misaligned: Restrict user access to kernel memory (high 7.8)
- [CVE-2024-46791](https://insights.sbomify.com/CVE-2024-46791/): can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open (medium 5.5)
- [CVE-2024-46790](https://insights.sbomify.com/CVE-2024-46790/): codetag: debug: mark codetags for poisoned page as empty (medium 5.5)
- [CVE-2024-4679](https://insights.sbomify.com/CVE-2024-4679/): Folder Permission Vulnerability in JP1/Extensible SNMP Agent (high 7.8)
- [CVE-2024-46789](https://insights.sbomify.com/CVE-2024-46789/): mm/slub: add check for s->flags in the alloc_tagging_slab_free_hook (medium 5.5)
- [CVE-2024-46788](https://insights.sbomify.com/CVE-2024-46788/): tracing/osnoise: Use a cpumask to know what threads are kthreads (high 7.8)
- [CVE-2024-46787](https://insights.sbomify.com/CVE-2024-46787/): userfaultfd: fix checks for huge PMDs (high 7.8)
- [CVE-2024-46786](https://insights.sbomify.com/CVE-2024-46786/): fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF (high 7.8)
- [CVE-2024-46785](https://insights.sbomify.com/CVE-2024-46785/): eventfs: Use list_del_rcu() for SRCU protected list variable (medium 5.5)
- [CVE-2024-46784](https://insights.sbomify.com/CVE-2024-46784/): net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (medium 5.5)
- [CVE-2024-46783](https://insights.sbomify.com/CVE-2024-46783/): tcp_bpf: fix return value of tcp_bpf_sendmsg() (medium 5.5)
- [CVE-2024-46782](https://insights.sbomify.com/CVE-2024-46782/): ila: call nf_unregister_net_hooks() sooner (high 7.8)
- [CVE-2024-46781](https://insights.sbomify.com/CVE-2024-46781/): nilfs2: fix missing cleanup on rollforward recovery error (high 7.8)
- [CVE-2024-46780](https://insights.sbomify.com/CVE-2024-46780/): nilfs2: protect references to superblock parameters exposed in sysfs (high 7.8)
- [CVE-2024-4678](https://insights.sbomify.com/CVE-2024-4678/): Campcodes Complete Web-Based School Management System find_friends.php cross site scripting (medium 5.3)
- [CVE-2024-46779](https://insights.sbomify.com/CVE-2024-46779/): drm/imagination: Free pvr_vm_gpuva after unlink (medium 5.5)
- [CVE-2024-46778](https://insights.sbomify.com/CVE-2024-46778/): drm/amd/display: Check UnboundedRequestEnabled's value (medium 5.5)
- [CVE-2024-46777](https://insights.sbomify.com/CVE-2024-46777/): udf: Avoid excessive partition lengths (high 7.8)
- [CVE-2024-46776](https://insights.sbomify.com/CVE-2024-46776/): drm/amd/display: Run DC_LOG_DC after checking link->link_enc (medium 5.5)
- [CVE-2024-46775](https://insights.sbomify.com/CVE-2024-46775/): drm/amd/display: Validate function returns (medium 5.5)
- [CVE-2024-46774](https://insights.sbomify.com/CVE-2024-46774/): powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (high 7.1)
- [CVE-2024-46773](https://insights.sbomify.com/CVE-2024-46773/): drm/amd/display: Check denominator pbn_div before used (medium 5.5)
- [CVE-2024-46772](https://insights.sbomify.com/CVE-2024-46772/): drm/amd/display: Check denominator crb_pipes before used (medium 5.5)
- [CVE-2024-46771](https://insights.sbomify.com/CVE-2024-46771/): can: bcm: Remove proc entry when dev is unregistered. (high 7.8)
- [CVE-2024-46770](https://insights.sbomify.com/CVE-2024-46770/): ice: Add netif_device_attach/detach into PF reset flow (medium 5.5)
- [CVE-2024-4677](https://insights.sbomify.com/CVE-2024-4677/): Campcodes Complete Web-Based School Management System my_student_exam_marks1.php cross site scripting (medium 5.3)
- [CVE-2024-46769](https://insights.sbomify.com/CVE-2024-46769/): spi: intel: Add check devm_kasprintf() returned value (medium 5.5)
- [CVE-2024-46768](https://insights.sbomify.com/CVE-2024-46768/): hwmon: (hp-wmi-sensors) Check if WMI event data exists (medium 5.5)
- [CVE-2024-46767](https://insights.sbomify.com/CVE-2024-46767/): net: phy: Fix missing of_node_put() for leds (medium 5.5)
- [CVE-2024-46766](https://insights.sbomify.com/CVE-2024-46766/): ice: move netif_queue_set_napi to rtnl-protected sections (high 7.8)
- [CVE-2024-46765](https://insights.sbomify.com/CVE-2024-46765/): ice: protect XDP configuration with a mutex (high 7.8)
- [CVE-2024-46764](https://insights.sbomify.com/CVE-2024-46764/): bpf: add check for invalid name in btf_name_valid_section() (high 7.3)
- [CVE-2024-46763](https://insights.sbomify.com/CVE-2024-46763/): fou: Fix null-ptr-deref in GRO. (high 7.5)
- [CVE-2024-46762](https://insights.sbomify.com/CVE-2024-46762/): xen: privcmd: Fix possible access to a freed kirqfd instance (high 7.8)
- [CVE-2024-46761](https://insights.sbomify.com/CVE-2024-46761/): pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (medium 5.5)
- [CVE-2024-46760](https://insights.sbomify.com/CVE-2024-46760/): wifi: rtw88: usb: schedule rx work after everything is set up (medium 5.5)
- [CVE-2024-4676](https://insights.sbomify.com/CVE-2024-4676/): Campcodes Complete Web-Based School Management System range_grade_text.php cross site scripting (medium 5.3)
- [CVE-2024-46759](https://insights.sbomify.com/CVE-2024-46759/): hwmon: (adc128d818) Fix underflows seen when writing limit attributes (high 7.8)
- [CVE-2024-46755](https://insights.sbomify.com/CVE-2024-46755/): wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (high 8.8)
- [CVE-2024-46754](https://insights.sbomify.com/CVE-2024-46754/): bpf: Remove tst_run from lwt_seg6local_prog_ops. (high 7.8)
- [CVE-2024-46753](https://insights.sbomify.com/CVE-2024-46753/): btrfs: handle errors from btrfs_dec_ref() properly (medium 5.5)
- [CVE-2024-46752](https://insights.sbomify.com/CVE-2024-46752/): btrfs: replace BUG_ON() with error handling at update_ref_for_cow() (medium 5.5)
- [CVE-2024-46751](https://insights.sbomify.com/CVE-2024-46751/): btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() (high 7.8)
- [CVE-2024-46750](https://insights.sbomify.com/CVE-2024-46750/): PCI: Add missing bridge lock to pci_bus_lock() (high 7.8)
- [CVE-2024-4675](https://insights.sbomify.com/CVE-2024-4675/): Campcodes Complete Web-Based School Management System show_events.php cross site scripting (medium 5.3)
- [CVE-2024-46749](https://insights.sbomify.com/CVE-2024-46749/): Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush() (medium 5.5)
- [CVE-2024-46748](https://insights.sbomify.com/CVE-2024-46748/): cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT (medium 5.5)
- [CVE-2024-46747](https://insights.sbomify.com/CVE-2024-46747/): HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (high 7.1)
- [CVE-2024-46746](https://insights.sbomify.com/CVE-2024-46746/): HID: amd_sfh: free driver_data after destroying hid device (high 7.8)
- [CVE-2024-46745](https://insights.sbomify.com/CVE-2024-46745/): Input: uinput - reject requests with unreasonable number of slots (medium 5.5)
- [CVE-2024-46744](https://insights.sbomify.com/CVE-2024-46744/): Squashfs: sanity check symbolic link size (high 7.8)
- [CVE-2024-46743](https://insights.sbomify.com/CVE-2024-46743/): of/irq: Prevent device address out-of-bounds read in interrupt map walk (high 7.3)
- [CVE-2024-46742](https://insights.sbomify.com/CVE-2024-46742/): smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() (medium 5.5)
- [CVE-2024-46741](https://insights.sbomify.com/CVE-2024-46741/): misc: fastrpc: Fix double free of 'buf' in error path (high 7.8)
- [CVE-2024-46740](https://insights.sbomify.com/CVE-2024-46740/): binder: fix UAF caused by offsets overwrite (high 7.8)
- [CVE-2024-4674](https://insights.sbomify.com/CVE-2024-4674/): Campcodes Complete Web-Based School Management System show_friend_request.php cross site scripting (medium 5.3)
- [CVE-2024-46739](https://insights.sbomify.com/CVE-2024-46739/): uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (medium 5.5)
- [CVE-2024-46738](https://insights.sbomify.com/CVE-2024-46738/): VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/258/