# Vulnerabilities published in 2024


- [CVE-2024-3600](https://insights.sbomify.com/CVE-2024-3600/): Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting (high 7.2)
- [CVE-2024-35999](https://insights.sbomify.com/CVE-2024-35999/): smb3: missing lock when picking channel (high 7.5)
- [CVE-2024-35998](https://insights.sbomify.com/CVE-2024-35998/): smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (high 7.5)
- [CVE-2024-35997](https://insights.sbomify.com/CVE-2024-35997/): HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (medium 5.5)
- [CVE-2024-35996](https://insights.sbomify.com/CVE-2024-35996/): cpu: Re-enable CPU mitigations by default for !X86 architectures (medium 5.5)
- [CVE-2024-35995](https://insights.sbomify.com/CVE-2024-35995/): ACPI: CPPC: Use access_width over bit_width for system memory accesses (medium 5.5)
- [CVE-2024-35994](https://insights.sbomify.com/CVE-2024-35994/): firmware: qcom: uefisecapp: Fix memory related IO errors and crashes (high 7.8)
- [CVE-2024-35993](https://insights.sbomify.com/CVE-2024-35993/): mm: turn folio_test_hugetlb into a PageType (high 7.8)
- [CVE-2024-35992](https://insights.sbomify.com/CVE-2024-35992/): phy: marvell: a3700-comphy: Fix out of bounds read (medium 5.5)
- [CVE-2024-35991](https://insights.sbomify.com/CVE-2024-35991/): dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue (medium 5.5)
- [CVE-2024-35990](https://insights.sbomify.com/CVE-2024-35990/): dma: xilinx_dpdma: Fix locking (high 7.8)
- [CVE-2024-3599](https://insights.sbomify.com/CVE-2024-3599/): Missing authorization in Cookie Banner for GDPR / CCPA – WPLP Cookie Consent (medium 5.3)
- [CVE-2024-35989](https://insights.sbomify.com/CVE-2024-35989/): dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (medium 5.5)
- [CVE-2024-35988](https://insights.sbomify.com/CVE-2024-35988/): riscv: Fix TASK_SIZE on 64-bit NOMMU (medium 5.5)
- [CVE-2024-35987](https://insights.sbomify.com/CVE-2024-35987/): riscv: Fix loading 64-bit NOMMU kernels past the start of RAM (high 8.4)
- [CVE-2024-35986](https://insights.sbomify.com/CVE-2024-35986/): phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered (high 7.0)
- [CVE-2024-35985](https://insights.sbomify.com/CVE-2024-35985/): sched/eevdf: Prevent vlag from going out of bounds in reweight_eevdf() (medium 5.5)
- [CVE-2024-35984](https://insights.sbomify.com/CVE-2024-35984/): i2c: smbus: fix NULL function pointer dereference (medium 5.5)
- [CVE-2024-35983](https://insights.sbomify.com/CVE-2024-35983/): bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS (medium 5.5)
- [CVE-2024-35982](https://insights.sbomify.com/CVE-2024-35982/): batman-adv: Avoid infinite loop trying to resize local TT (medium 5.1)
- [CVE-2024-35981](https://insights.sbomify.com/CVE-2024-35981/): virtio_net: Do not send RSS key if it is not supported (medium 5.5)
- [CVE-2024-35980](https://insights.sbomify.com/CVE-2024-35980/): arm64: tlb: Fix TLBI RANGE operand (high 8.4)
- [CVE-2024-3598](https://insights.sbomify.com/CVE-2024-3598/): ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id' (medium 6.4)
- [CVE-2024-35979](https://insights.sbomify.com/CVE-2024-35979/): raid1: fix use-after-free for original bio in raid1_write_request() (high 7.8)
- [CVE-2024-35978](https://insights.sbomify.com/CVE-2024-35978/): Bluetooth: Fix memory leak in hci_req_sync_complete() (medium 5.5)
- [CVE-2024-35977](https://insights.sbomify.com/CVE-2024-35977/): platform/chrome: cros_ec_uart: properly fix race condition (medium 4.7)
- [CVE-2024-35976](https://insights.sbomify.com/CVE-2024-35976/): xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (high 7.1)
- [CVE-2024-35975](https://insights.sbomify.com/CVE-2024-35975/): octeontx2-pf: Fix transmit scheduler resource leak (medium 5.5)
- [CVE-2024-35974](https://insights.sbomify.com/CVE-2024-35974/): block: fix q->blkg_list corruption during disk rebind (medium 5.5)
- [CVE-2024-35973](https://insights.sbomify.com/CVE-2024-35973/): geneve: fix header validation in geneve[6]_xmit_skb (medium 5.5)
- [CVE-2024-35972](https://insights.sbomify.com/CVE-2024-35972/): bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() (medium 5.5)
- [CVE-2024-35971](https://insights.sbomify.com/CVE-2024-35971/): net: ks8851: Handle softirqs at the end of IRQ thread to fix hang (high 7.5)
- [CVE-2024-35970](https://insights.sbomify.com/CVE-2024-35970/): af_unix: Clear stale u->oob_skb. (medium 6.3)
- [CVE-2024-3597](https://insights.sbomify.com/CVE-2024-3597/): Export WP Page to Static HTML/CSS <= 2.2.2 - Open Redirect (high 7.1)
- [CVE-2024-35969](https://insights.sbomify.com/CVE-2024-35969/): ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (high 8.8)
- [CVE-2024-35968](https://insights.sbomify.com/CVE-2024-35968/): pds_core: Fix pdsc_check_pci_health function to use work thread (high 7.8)
- [CVE-2024-35967](https://insights.sbomify.com/CVE-2024-35967/): Bluetooth: SCO: Fix not validating setsockopt user input (high 7.1)
- [CVE-2024-35966](https://insights.sbomify.com/CVE-2024-35966/): Bluetooth: RFCOMM: Fix not validating setsockopt user input (high 7.1)
- [CVE-2024-35965](https://insights.sbomify.com/CVE-2024-35965/): Bluetooth: L2CAP: Fix not validating setsockopt user input (high 7.1)
- [CVE-2024-35964](https://insights.sbomify.com/CVE-2024-35964/): Bluetooth: ISO: Fix not validating setsockopt user input (high 7.1)
- [CVE-2024-35963](https://insights.sbomify.com/CVE-2024-35963/): Bluetooth: hci_sock: Fix not validating setsockopt user input (high 7.1)
- [CVE-2024-35962](https://insights.sbomify.com/CVE-2024-35962/): netfilter: complete validation of user input (high 7.1)
- [CVE-2024-35961](https://insights.sbomify.com/CVE-2024-35961/): net/mlx5: Register devlink first under devlink lock (medium 5.5)
- [CVE-2024-35960](https://insights.sbomify.com/CVE-2024-35960/): net/mlx5: Properly link new fs rules into the tree (critical 9.1)
- [CVE-2024-3596](https://insights.sbomify.com/CVE-2024-3596/): RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. (critical 9.0)
- [CVE-2024-35959](https://insights.sbomify.com/CVE-2024-35959/): net/mlx5e: Fix mlx5e_priv_init() cleanup flow (medium 5.5)
- [CVE-2024-35958](https://insights.sbomify.com/CVE-2024-35958/): net: ena: Fix incorrect descriptor free behavior (high 7.8)
- [CVE-2024-35957](https://insights.sbomify.com/CVE-2024-35957/): iommu/vt-d: Fix WARN_ON in iommu probe path (medium 5.9)
- [CVE-2024-35956](https://insights.sbomify.com/CVE-2024-35956/): btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations (medium 5.5)
- [CVE-2024-35955](https://insights.sbomify.com/CVE-2024-35955/): kprobes: Fix possible use-after-free issue on kprobe registration (high 8.8)
- [CVE-2024-35954](https://insights.sbomify.com/CVE-2024-35954/): scsi: sg: Avoid sg device teardown race (high 7.8)
- [CVE-2024-35953](https://insights.sbomify.com/CVE-2024-35953/): accel/ivpu: Fix deadlock in context_xa (medium 5.5)
- [CVE-2024-35952](https://insights.sbomify.com/CVE-2024-35952/): drm/ast: Fix soft lockup (medium 5.5)
- [CVE-2024-35951](https://insights.sbomify.com/CVE-2024-35951/): drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() (high 7.8)
- [CVE-2024-35950](https://insights.sbomify.com/CVE-2024-35950/): drm/client: Fully protect modes[] with dev->mode_config.mutex (high 7.8)
- [CVE-2024-3595](https://insights.sbomify.com/CVE-2024-3595/): Pure Chat – Live Chat Plugin & More! <= 2.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting (medium 6.4)
- [CVE-2024-35949](https://insights.sbomify.com/CVE-2024-35949/): btrfs: make sure that WRITTEN is set on all metadata blocks (high 7.8)
- [CVE-2024-35948](https://insights.sbomify.com/CVE-2024-35948/): bcachefs: Check for journal entries overruning end of sb clean section (high 7.8)
- [CVE-2024-35947](https://insights.sbomify.com/CVE-2024-35947/): dyndbg: fix old BUG_ON in >control parser (medium 5.5)
- [CVE-2024-35946](https://insights.sbomify.com/CVE-2024-35946/): wifi: rtw89: fix null pointer access when abort scan (medium 5.5)
- [CVE-2024-35945](https://insights.sbomify.com/CVE-2024-35945/): net: phy: phy_device: Prevent nullptr exceptions on ISR (medium 5.5)
- [CVE-2024-35944](https://insights.sbomify.com/CVE-2024-35944/): VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (medium 5.5)
- [CVE-2024-35943](https://insights.sbomify.com/CVE-2024-35943/): pmdomain: ti: Add a null pointer check to the omap_prm_domain_init (medium 5.5)
- [CVE-2024-35942](https://insights.sbomify.com/CVE-2024-35942/): pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain (medium 5.5)
- [CVE-2024-35940](https://insights.sbomify.com/CVE-2024-35940/): pstore/zone: Add a null pointer check to the psz_kmsg_read (medium 5.5)
- [CVE-2024-3594](https://insights.sbomify.com/CVE-2024-3594/): IDonate <= 1.9.0 - Admin+ Stored XSS (high 8.7)
- [CVE-2024-35939](https://insights.sbomify.com/CVE-2024-35939/): dma-direct: Leak pages on dma_set_decrypted() failure (critical 9.3)
- [CVE-2024-35938](https://insights.sbomify.com/CVE-2024-35938/): wifi: ath11k: decrease MHI channel buffer length to 8KB (medium 5.5)
- [CVE-2024-35937](https://insights.sbomify.com/CVE-2024-35937/): wifi: cfg80211: check A-MSDU format more carefully (high 8.1)
- [CVE-2024-35936](https://insights.sbomify.com/CVE-2024-35936/): btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (medium 5.5)
- [CVE-2024-35935](https://insights.sbomify.com/CVE-2024-35935/): btrfs: send: handle path ref underflow in header iterate_inode_ref() (low 3.3)
- [CVE-2024-35934](https://insights.sbomify.com/CVE-2024-35934/): net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (medium 5.5)
- [CVE-2024-35933](https://insights.sbomify.com/CVE-2024-35933/): Bluetooth: btintel: Fix null ptr deref in btintel_read_version (medium 5.5)
- [CVE-2024-35932](https://insights.sbomify.com/CVE-2024-35932/): drm/vc4: don't check if plane->state->fb == state->fb (high 7.8)
- [CVE-2024-35931](https://insights.sbomify.com/CVE-2024-35931/): drm/amdgpu: Skip do PCI error slot reset during RAS recovery (high 7.8)
- [CVE-2024-35930](https://insights.sbomify.com/CVE-2024-35930/): scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (medium 5.5)
- [CVE-2024-3593](https://insights.sbomify.com/CVE-2024-3593/): UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Reset (high 7.2)
- [CVE-2024-35929](https://insights.sbomify.com/CVE-2024-35929/): rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock() (high 7.8)
- [CVE-2024-35927](https://insights.sbomify.com/CVE-2024-35927/): drm: Check output polling initialized before disabling (medium 5.5)
- [CVE-2024-35926](https://insights.sbomify.com/CVE-2024-35926/): crypto: iaa - Fix async_disable descriptor leak (medium 5.5)
- [CVE-2024-35925](https://insights.sbomify.com/CVE-2024-35925/): block: prevent division by zero in blk_rq_stat_sum() (medium 5.5)
- [CVE-2024-35924](https://insights.sbomify.com/CVE-2024-35924/): usb: typec: ucsi: Limit read size on v1.2 (high 7.1)
- [CVE-2024-35922](https://insights.sbomify.com/CVE-2024-35922/): fbmon: prevent division by zero in fb_videomode_from_videomode() (medium 5.5)
- [CVE-2024-35921](https://insights.sbomify.com/CVE-2024-35921/): media: mediatek: vcodec: Fix oops when HEVC init fails (high 7.8)
- [CVE-2024-35920](https://insights.sbomify.com/CVE-2024-35920/): media: mediatek: vcodec: adding lock to protect decoder context list (high 7.8)
- [CVE-2024-3592](https://insights.sbomify.com/CVE-2024-3592/): SQL injection in Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker (critical 9.9)
- [CVE-2024-35919](https://insights.sbomify.com/CVE-2024-35919/): media: mediatek: vcodec: adding lock to protect encoder context list (high 7.8)
- [CVE-2024-35917](https://insights.sbomify.com/CVE-2024-35917/): s390/bpf: Fix bpf_plt pointer arithmetic (medium 5.5)
- [CVE-2024-35916](https://insights.sbomify.com/CVE-2024-35916/): dma-buf: Fix NULL pointer dereference in sanitycheck() (medium 5.3)
- [CVE-2024-35915](https://insights.sbomify.com/CVE-2024-35915/): nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (high 8.8)
- [CVE-2024-35914](https://insights.sbomify.com/CVE-2024-35914/): nfsd: Fix error cleanup path in nfsd_rename() (high 7.5)
- [CVE-2024-35913](https://insights.sbomify.com/CVE-2024-35913/): wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF (high 7.1)
- [CVE-2024-35912](https://insights.sbomify.com/CVE-2024-35912/): wifi: iwlwifi: mvm: rfi: fix potential response leaks (medium 5.5)
- [CVE-2024-35911](https://insights.sbomify.com/CVE-2024-35911/): ice: fix memory corruption bug with suspend and rebuild (high 7.8)
- [CVE-2024-35910](https://insights.sbomify.com/CVE-2024-35910/): tcp: properly terminate timers for kernel sockets (high 7.8)
- [CVE-2024-3591](https://insights.sbomify.com/CVE-2024-3591/): WordPress Geo Controller < 8.6.5 - PHP Object Injection (medium 6.5)
- [CVE-2024-35909](https://insights.sbomify.com/CVE-2024-35909/): net: wwan: t7xx: Split 64bit accesses to fix alignment issues (medium 5.5)
- [CVE-2024-35908](https://insights.sbomify.com/CVE-2024-35908/): tls: get psock ref after taking rxlock to avoid leak (medium 5.5)
- [CVE-2024-35907](https://insights.sbomify.com/CVE-2024-35907/): mlxbf_gige: call request_irq() after NAPI initialized (medium 5.5)
- [CVE-2024-35905](https://insights.sbomify.com/CVE-2024-35905/): bpf: Protect against int overflow for stack access size (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/342/