Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 410 of 521.
- CVE-2024-27038 clk: Fix clk_core_get NULL dereference
- CVE-2024-27037 clk: zynq: Prevent null pointer dereference caused by kmalloc failure
- CVE-2024-27036 cifs: Fix writeback data corruption
- CVE-2024-27035 f2fs: compress: fix to guarantee persisting compressed blocks by CP
- CVE-2024-27034 f2fs: compress: fix to cover normal cluster write with cp_rwsem
- CVE-2024-27033 f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic
- CVE-2024-27032 f2fs: fix to avoid potential panic during recovery
- CVE-2024-27031 NFS: Fix nfs_netfs_issue_read() xarray locking for writeback interrupt
- CVE-2024-27030 octeontx2-af: Use separate handlers for interrupts
- CVE-2024-2703 Tenda AC10U SetOnlineDevName formSetDeviceName stack-based overflow
- CVE-2024-27029 drm/amdgpu: fix mmhub client id out-of-bounds access
- CVE-2024-27028 spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
- CVE-2024-27027 dpll: fix dpll_xa_ref_*_del() for multiple registrations
- CVE-2024-27026 vmxnet3: Fix missing reserved tailroom
- CVE-2024-27025 nbd: null check for nla_nest_start
- CVE-2024-27024 net/rds: fix WARNING in rds_conn_connect_if_down
- CVE-2024-27023 md: Fix missing release of 'active_io' for flush
- CVE-2024-27022 fork: defer linking file vma until vma is fully initialized
- CVE-2024-27021 r8169: fix LED-related deadlock on module removal
- CVE-2024-27020 netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- CVE-2024-2702 WordPress Olive One Click Demo Import plugin <= 1.1.1 - Broken Access Control vulnerability
- CVE-2024-27019 netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- CVE-2024-27018 netfilter: br_netfilter: skip conntrack input hook for promisc packets
- CVE-2024-27017 netfilter: nft_set_pipapo: walk over current view on netlink dump
- CVE-2024-27016 netfilter: flowtable: validate pppoe header
- CVE-2024-27015 netfilter: flowtable: incorrect pppoe tuple
- CVE-2024-27014 net/mlx5e: Prevent deadlock while disabling aRFS
- CVE-2024-27013 tun: limit printing rate when illegal packet received by tun dev
- CVE-2024-27012 netfilter: nf_tables: restore set elements when delete set fails
- CVE-2024-27011 netfilter: nf_tables: fix memleak in map from abort path
- CVE-2024-27010 net/sched: Fix mirred deadlock on device recursion
- CVE-2024-27009 s390/cio: fix race condition during online processing
- CVE-2024-27008 drm: nv04: Fix out of bounds access
- CVE-2024-27007 userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE
- CVE-2024-27006 thermal/debugfs: Add missing count increment to thermal_debug_tz_trip_up()
- CVE-2024-27005 interconnect: Don't access req_list while it's being manipulated
- CVE-2024-27004 clk: Get runtime PM before walking tree during disable_unused
- CVE-2024-27003 clk: Get runtime PM before walking tree for clk_summary
- CVE-2024-27002 clk: mediatek: Do a runtime PM get on controllers during probe
- CVE-2024-27001 comedi: vmk80xx: fix incomplete endpoint checking
- CVE-2024-27000 serial: mxs-auart: add spinlock around changing cts state
- CVE-2024-2700 Quarkus-core: leak of local configuration properties into quarkus applications
- CVE-2024-26999 serial/pmac_zilog: Remove flawed mitigation for rx irq flood
- CVE-2024-26998 serial: core: Clearing the circular buffer before NULLifying it
- CVE-2024-26997 usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- CVE-2024-26996 usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error
- CVE-2024-26995 usb: typec: tcpm: Correct the PDO counting in pd_set
- CVE-2024-26994 speakup: Avoid crash on very long word
- CVE-2024-26993 fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- CVE-2024-26992 KVM: x86/pmu: Disable support for adaptive PEBS
- CVE-2024-26991 KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes
- CVE-2024-26990 KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
- CVE-2024-26989 arm64: hibernate: Fix level3 translation fault in swsusp_save()
- CVE-2024-26988 init/main.c: Fix potential static_command_line memory overflow
- CVE-2024-26987 mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled
- CVE-2024-26986 drm/amdkfd: Fix memory leak in create_process failure
- CVE-2024-26985 drm/xe: Fix bo leak in intel_fb_bo_framebuffer_init
- CVE-2024-26984 nouveau: fix instmem race condition around ptr stores
- CVE-2024-26983 bootconfig: use memblock_free_late to free xbc memory to buddy
- CVE-2024-26982 Squashfs: check the inode number is not the invalid value of zero
- CVE-2024-26981 nilfs2: fix OOB in nilfs_set_de_type
- CVE-2024-26980 ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf
- CVE-2024-2698 Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service
- CVE-2024-26978 serial: max310x: fix NULL pointer dereference in I2C instantiation
- CVE-2024-26977 pci_iounmap(): Fix MMIO mapping leak
- CVE-2024-26976 KVM: Always flush async #PF workqueue when vCPU is being destroyed
- CVE-2024-26975 powercap: intel_rapl: Fix a NULL pointer dereference
- CVE-2024-26974 crypto: qat - resolve race condition during AER recovery
- CVE-2024-26973 fat: fix uninitialized field in nostale filehandles
- CVE-2024-26971 clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays
- CVE-2024-26970 clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- CVE-2024-2697 Swift Framework < 2024.0.0 - Contributor+ Stored XSS via Shortcode
- CVE-2024-26969 clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- CVE-2024-26968 clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays
- CVE-2024-26967 clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays
- CVE-2024-26966 clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- CVE-2024-26965 clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- CVE-2024-26964 usb: xhci: Add error handling in xhci_map_urb_for_dma
- CVE-2024-26963 usb: dwc3-am62: fix module unload/reload behavior
- CVE-2024-26962 dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape
- CVE-2024-26961 mac802154: fix llsec key resources release in mac802154_llsec_key_del
- CVE-2024-26960 mm: swap: fix race between free_swap_and_cache() and swapoff()
- CVE-2024-2696 Swift Framework < 2024.04.30 - Admin+ Stored XSS via Settings
- CVE-2024-26959 Bluetooth: btnxpuart: Fix btnxpuart_close
- CVE-2024-26958 nfs: fix UAF in direct writes
- CVE-2024-26957 s390/zcrypt: fix reference counting on zcrypt card objects
- CVE-2024-26956 nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- CVE-2024-26955 nilfs2: prevent kernel bug at submit_bh_wbc()
- CVE-2024-26954 ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- CVE-2024-26953 net: esp: fix bad handling of pages from page_pool
- CVE-2024-26952 ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- CVE-2024-26951 wireguard: netlink: check for dangling peer via is_dead instead of empty list
- CVE-2024-26950 wireguard: netlink: access device through ctx instead of peer
- CVE-2024-2695 Shariff Wrapper <= 4.6.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-26949 drm/amdgpu/pm: Fix NULL pointer dereference when get power limit
- CVE-2024-26948 drm/amd/display: Add a dc_state NULL check in dc_state_release
- CVE-2024-26947 ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- CVE-2024-26946 kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address
- CVE-2024-26945 crypto: iaa - Fix nr_cpus < nr_iaa case
- CVE-2024-26944 btrfs: zoned: fix use-after-free in do_zone_finish()