# Vulnerabilities published in 2024


- [CVE-2024-27038](https://insights.sbomify.com/CVE-2024-27038/): clk: Fix clk_core_get NULL dereference (medium 5.5)
- [CVE-2024-27037](https://insights.sbomify.com/CVE-2024-27037/): clk: zynq: Prevent null pointer dereference caused by kmalloc failure (medium 5.5)
- [CVE-2024-27036](https://insights.sbomify.com/CVE-2024-27036/): cifs: Fix writeback data corruption (high 7.8)
- [CVE-2024-27035](https://insights.sbomify.com/CVE-2024-27035/): f2fs: compress: fix to guarantee persisting compressed blocks by CP (high 7.3)
- [CVE-2024-27034](https://insights.sbomify.com/CVE-2024-27034/): f2fs: compress: fix to cover normal cluster write with cp_rwsem (high 7.8)
- [CVE-2024-27033](https://insights.sbomify.com/CVE-2024-27033/): f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic (medium 5.5)
- [CVE-2024-27032](https://insights.sbomify.com/CVE-2024-27032/): f2fs: fix to avoid potential panic during recovery (medium 6.3)
- [CVE-2024-27031](https://insights.sbomify.com/CVE-2024-27031/): NFS: Fix nfs_netfs_issue_read() xarray locking for writeback interrupt (medium 5.5)
- [CVE-2024-27030](https://insights.sbomify.com/CVE-2024-27030/): octeontx2-af: Use separate handlers for interrupts (high 7.8)
- [CVE-2024-2703](https://insights.sbomify.com/CVE-2024-2703/): Tenda AC10U SetOnlineDevName formSetDeviceName stack-based overflow (high 8.8)
- [CVE-2024-27029](https://insights.sbomify.com/CVE-2024-27029/): drm/amdgpu: fix mmhub client id out-of-bounds access (high 7.1)
- [CVE-2024-27028](https://insights.sbomify.com/CVE-2024-27028/): spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (medium 6.5)
- [CVE-2024-27027](https://insights.sbomify.com/CVE-2024-27027/): dpll: fix dpll_xa_ref_*_del() for multiple registrations (medium 5.5)
- [CVE-2024-27026](https://insights.sbomify.com/CVE-2024-27026/): vmxnet3: Fix missing reserved tailroom (high 7.5)
- [CVE-2024-27025](https://insights.sbomify.com/CVE-2024-27025/): nbd: null check for nla_nest_start (medium 5.5)
- [CVE-2024-27024](https://insights.sbomify.com/CVE-2024-27024/): net/rds: fix WARNING in rds_conn_connect_if_down (high 7.8)
- [CVE-2024-27023](https://insights.sbomify.com/CVE-2024-27023/): md: Fix missing release of 'active_io' for flush (medium 5.5)
- [CVE-2024-27022](https://insights.sbomify.com/CVE-2024-27022/): fork: defer linking file vma until vma is fully initialized (high 7.8)
- [CVE-2024-27021](https://insights.sbomify.com/CVE-2024-27021/): r8169: fix LED-related deadlock on module removal (high 7.8)
- [CVE-2024-27020](https://insights.sbomify.com/CVE-2024-27020/): netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (high 7.8)
- [CVE-2024-2702](https://insights.sbomify.com/CVE-2024-2702/): WordPress Olive One Click Demo Import plugin <= 1.1.1 - Broken Access Control vulnerability (high 8.2)
- [CVE-2024-27019](https://insights.sbomify.com/CVE-2024-27019/): netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (high 7.8)
- [CVE-2024-27018](https://insights.sbomify.com/CVE-2024-27018/): netfilter: br_netfilter: skip conntrack input hook for promisc packets (high 8.2)
- [CVE-2024-27017](https://insights.sbomify.com/CVE-2024-27017/): netfilter: nft_set_pipapo: walk over current view on netlink dump (high 7.8)
- [CVE-2024-27016](https://insights.sbomify.com/CVE-2024-27016/): netfilter: flowtable: validate pppoe header (high 7.1)
- [CVE-2024-27015](https://insights.sbomify.com/CVE-2024-27015/): netfilter: flowtable: incorrect pppoe tuple (medium 5.5)
- [CVE-2024-27014](https://insights.sbomify.com/CVE-2024-27014/): net/mlx5e: Prevent deadlock while disabling aRFS (medium 5.5)
- [CVE-2024-27013](https://insights.sbomify.com/CVE-2024-27013/): tun: limit printing rate when illegal packet received by tun dev (medium 5.5)
- [CVE-2024-27012](https://insights.sbomify.com/CVE-2024-27012/): netfilter: nf_tables: restore set elements when delete set fails (high 7.8)
- [CVE-2024-27011](https://insights.sbomify.com/CVE-2024-27011/): netfilter: nf_tables: fix memleak in map from abort path (medium 5.5)
- [CVE-2024-27010](https://insights.sbomify.com/CVE-2024-27010/): net/sched: Fix mirred deadlock on device recursion (medium 5.5)
- [CVE-2024-27009](https://insights.sbomify.com/CVE-2024-27009/): s390/cio: fix race condition during online processing (medium 4.7)
- [CVE-2024-27008](https://insights.sbomify.com/CVE-2024-27008/): drm: nv04: Fix out of bounds access (high 7.8)
- [CVE-2024-27007](https://insights.sbomify.com/CVE-2024-27007/): userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE (high 7.8)
- [CVE-2024-27006](https://insights.sbomify.com/CVE-2024-27006/): thermal/debugfs: Add missing count increment to thermal_debug_tz_trip_up() (medium 5.5)
- [CVE-2024-27005](https://insights.sbomify.com/CVE-2024-27005/): interconnect: Don't access req_list while it's being manipulated (high 7.8)
- [CVE-2024-27004](https://insights.sbomify.com/CVE-2024-27004/): clk: Get runtime PM before walking tree during disable_unused (medium 5.5)
- [CVE-2024-27003](https://insights.sbomify.com/CVE-2024-27003/): clk: Get runtime PM before walking tree for clk_summary (medium 5.5)
- [CVE-2024-27002](https://insights.sbomify.com/CVE-2024-27002/): clk: mediatek: Do a runtime PM get on controllers during probe (medium 5.5)
- [CVE-2024-27001](https://insights.sbomify.com/CVE-2024-27001/): comedi: vmk80xx: fix incomplete endpoint checking (medium 5.5)
- [CVE-2024-27000](https://insights.sbomify.com/CVE-2024-27000/): serial: mxs-auart: add spinlock around changing cts state (high 7.8)
- [CVE-2024-2700](https://insights.sbomify.com/CVE-2024-2700/): Quarkus-core: leak of local configuration properties into quarkus applications (high 7.0)
- [CVE-2024-26999](https://insights.sbomify.com/CVE-2024-26999/): serial/pmac_zilog: Remove flawed mitigation for rx irq flood (medium 5.5)
- [CVE-2024-26998](https://insights.sbomify.com/CVE-2024-26998/): serial: core: Clearing the circular buffer before NULLifying it (medium 5.5)
- [CVE-2024-26997](https://insights.sbomify.com/CVE-2024-26997/): usb: dwc2: host: Fix dereference issue in DDMA completion flow. (medium 5.5)
- [CVE-2024-26996](https://insights.sbomify.com/CVE-2024-26996/): usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (high 7.8)
- [CVE-2024-26995](https://insights.sbomify.com/CVE-2024-26995/): usb: typec: tcpm: Correct the PDO counting in pd_set (high 7.8)
- [CVE-2024-26994](https://insights.sbomify.com/CVE-2024-26994/): speakup: Avoid crash on very long word (high 7.8)
- [CVE-2024-26993](https://insights.sbomify.com/CVE-2024-26993/): fs: sysfs: Fix reference leak in sysfs_break_active_protection() (medium 5.5)
- [CVE-2024-26992](https://insights.sbomify.com/CVE-2024-26992/): KVM: x86/pmu: Disable support for adaptive PEBS (high 7.3)
- [CVE-2024-26991](https://insights.sbomify.com/CVE-2024-26991/): KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes (medium 5.5)
- [CVE-2024-26990](https://insights.sbomify.com/CVE-2024-26990/): KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status (high 8.8)
- [CVE-2024-26989](https://insights.sbomify.com/CVE-2024-26989/): arm64: hibernate: Fix level3 translation fault in swsusp_save() (high 7.8)
- [CVE-2024-26988](https://insights.sbomify.com/CVE-2024-26988/): init/main.c: Fix potential static_command_line memory overflow (high 7.8)
- [CVE-2024-26987](https://insights.sbomify.com/CVE-2024-26987/): mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled (medium 5.5)
- [CVE-2024-26986](https://insights.sbomify.com/CVE-2024-26986/): drm/amdkfd: Fix memory leak in create_process failure (medium 5.5)
- [CVE-2024-26985](https://insights.sbomify.com/CVE-2024-26985/): drm/xe: Fix bo leak in intel_fb_bo_framebuffer_init (medium 5.5)
- [CVE-2024-26984](https://insights.sbomify.com/CVE-2024-26984/): nouveau: fix instmem race condition around ptr stores (medium 5.5)
- [CVE-2024-26983](https://insights.sbomify.com/CVE-2024-26983/): bootconfig: use memblock_free_late to free xbc memory to buddy (high 7.8)
- [CVE-2024-26982](https://insights.sbomify.com/CVE-2024-26982/): Squashfs: check the inode number is not the invalid value of zero (high 7.1)
- [CVE-2024-26981](https://insights.sbomify.com/CVE-2024-26981/): nilfs2: fix OOB in nilfs_set_de_type (high 7.8)
- [CVE-2024-26980](https://insights.sbomify.com/CVE-2024-26980/): ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf (high 8.2)
- [CVE-2024-2698](https://insights.sbomify.com/CVE-2024-2698/): Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service (high 8.8)
- [CVE-2024-26978](https://insights.sbomify.com/CVE-2024-26978/): serial: max310x: fix NULL pointer dereference in I2C instantiation (medium 5.5)
- [CVE-2024-26977](https://insights.sbomify.com/CVE-2024-26977/): pci_iounmap(): Fix MMIO mapping leak (medium 5.5)
- [CVE-2024-26976](https://insights.sbomify.com/CVE-2024-26976/): KVM: Always flush async #PF workqueue when vCPU is being destroyed (high 7.8)
- [CVE-2024-26975](https://insights.sbomify.com/CVE-2024-26975/): powercap: intel_rapl: Fix a NULL pointer dereference (medium 5.5)
- [CVE-2024-26974](https://insights.sbomify.com/CVE-2024-26974/): crypto: qat - resolve race condition during AER recovery (high 7.8)
- [CVE-2024-26973](https://insights.sbomify.com/CVE-2024-26973/): fat: fix uninitialized field in nostale filehandles (medium 5.5)
- [CVE-2024-26971](https://insights.sbomify.com/CVE-2024-26971/): clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays (high 7.3)
- [CVE-2024-26970](https://insights.sbomify.com/CVE-2024-26970/): clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays (medium 5.5)
- [CVE-2024-2697](https://insights.sbomify.com/CVE-2024-2697/): Swift Framework < 2024.0.0 - Contributor+ Stored XSS via Shortcode (medium 6.5)
- [CVE-2024-26969](https://insights.sbomify.com/CVE-2024-26969/): clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays (high 7.3)
- [CVE-2024-26968](https://insights.sbomify.com/CVE-2024-26968/): clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays (high 7.3)
- [CVE-2024-26967](https://insights.sbomify.com/CVE-2024-26967/): clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays (high 7.3)
- [CVE-2024-26966](https://insights.sbomify.com/CVE-2024-26966/): clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (high 7.8)
- [CVE-2024-26965](https://insights.sbomify.com/CVE-2024-26965/): clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (high 7.3)
- [CVE-2024-26964](https://insights.sbomify.com/CVE-2024-26964/): usb: xhci: Add error handling in xhci_map_urb_for_dma (medium 5.5)
- [CVE-2024-26963](https://insights.sbomify.com/CVE-2024-26963/): usb: dwc3-am62: fix module unload/reload behavior (medium 5.5)
- [CVE-2024-26962](https://insights.sbomify.com/CVE-2024-26962/): dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape (medium 5.5)
- [CVE-2024-26961](https://insights.sbomify.com/CVE-2024-26961/): mac802154: fix llsec key resources release in mac802154_llsec_key_del (high 7.0)
- [CVE-2024-26960](https://insights.sbomify.com/CVE-2024-26960/): mm: swap: fix race between free_swap_and_cache() and swapoff() (high 7.0)
- [CVE-2024-2696](https://insights.sbomify.com/CVE-2024-2696/): Swift Framework < 2024.04.30 - Admin+ Stored XSS via Settings (medium 4.8)
- [CVE-2024-26959](https://insights.sbomify.com/CVE-2024-26959/): Bluetooth: btnxpuart: Fix btnxpuart_close (medium 5.5)
- [CVE-2024-26958](https://insights.sbomify.com/CVE-2024-26958/): nfs: fix UAF in direct writes (high 7.8)
- [CVE-2024-26957](https://insights.sbomify.com/CVE-2024-26957/): s390/zcrypt: fix reference counting on zcrypt card objects (high 7.8)
- [CVE-2024-26956](https://insights.sbomify.com/CVE-2024-26956/): nilfs2: fix failure to detect DAT corruption in btree and direct mappings (medium 5.5)
- [CVE-2024-26955](https://insights.sbomify.com/CVE-2024-26955/): nilfs2: prevent kernel bug at submit_bh_wbc() (high 7.8)
- [CVE-2024-26954](https://insights.sbomify.com/CVE-2024-26954/): ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() (high 8.1)
- [CVE-2024-26953](https://insights.sbomify.com/CVE-2024-26953/): net: esp: fix bad handling of pages from page_pool (critical 9.8)
- [CVE-2024-26952](https://insights.sbomify.com/CVE-2024-26952/): ksmbd: fix potencial out-of-bounds when buffer offset is invalid (high 8.3)
- [CVE-2024-26951](https://insights.sbomify.com/CVE-2024-26951/): wireguard: netlink: check for dangling peer via is_dead instead of empty list (high 7.8)
- [CVE-2024-26950](https://insights.sbomify.com/CVE-2024-26950/): wireguard: netlink: access device through ctx instead of peer (high 7.8)
- [CVE-2024-2695](https://insights.sbomify.com/CVE-2024-2695/): Shariff Wrapper <= 4.6.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2024-26949](https://insights.sbomify.com/CVE-2024-26949/): drm/amdgpu/pm: Fix NULL pointer dereference when get power limit (medium 5.5)
- [CVE-2024-26948](https://insights.sbomify.com/CVE-2024-26948/): drm/amd/display: Add a dc_state NULL check in dc_state_release (medium 5.5)
- [CVE-2024-26947](https://insights.sbomify.com/CVE-2024-26947/): ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (medium 5.5)
- [CVE-2024-26946](https://insights.sbomify.com/CVE-2024-26946/): kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (medium 5.5)
- [CVE-2024-26945](https://insights.sbomify.com/CVE-2024-26945/): crypto: iaa - Fix nr_cpus < nr_iaa case (high 8.4)
- [CVE-2024-26944](https://insights.sbomify.com/CVE-2024-26944/): btrfs: zoned: fix use-after-free in do_zone_finish() (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/410/