Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 411 of 521.
- CVE-2024-26943 nouveau/dmem: handle kcalloc() allocation failure
- CVE-2024-26942 net: phy: qcom: at803x: fix kernel panic with at8031_probe
- CVE-2024-26941 drm/dp: Fix divide-by-zero regression on DP MST unplug with nouveau
- CVE-2024-26940 drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed
- CVE-2024-2694 Betheme <= 27.5.6 - Authenticated (Contributor+) PHP Object Injection
- CVE-2024-26939 drm/i915/vma: Fix UAF on destroy against retire race
- CVE-2024-26938 drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode()
- CVE-2024-26937 drm/i915/gt: Reset queue_priority_hint on parking
- CVE-2024-26936 ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- CVE-2024-26935 scsi: core: Fix unremoved procfs host directory regression
- CVE-2024-26934 USB: core: Fix deadlock in usb_deauthorize_interface()
- CVE-2024-26933 USB: core: Fix deadlock in port "disable" sysfs attribute
- CVE-2024-26932 usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd()
- CVE-2024-26931 scsi: qla2xxx: Fix command flush on cable pull
- CVE-2024-26930 scsi: qla2xxx: Fix double free of the ha->vp_map pointer
- CVE-2024-2693 Link Whisper Free <= 0.7.1 - Authenticated (Contributor+) PHP Object Injection
- CVE-2024-26928 smb: client: fix potential UAF in cifs_debug_files_proc_show()
- CVE-2024-26927 ASoC: SOF: Add some bounds checking to firmware data
- CVE-2024-26926 binder: check offset alignment in binder_get_object()
- CVE-2024-26925 netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- CVE-2024-26924 netfilter: nft_set_pipapo: do not free live element
- CVE-2024-26923 af_unix: Fix garbage collector racing against connect()
- CVE-2024-26922 drm/amdgpu: validate the parameters of bo mapping operations more clearly
- CVE-2024-26921 inet: inet_defrag: prevent sk release while still in use
- CVE-2024-26920 tracing/trigger: Fix to return error if failed to alloc snapshot
- CVE-2024-2692 SiYuan 3.0.3 - RCE via Server Side XSS
- CVE-2024-26919 usb: ulpi: Fix debugfs directory leak
- CVE-2024-26918 PCI: Fix active state requirement in PME polling
- CVE-2024-26917 scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"
- CVE-2024-26916 Revert "drm/amd: flush any delayed gfxoff on suspend entry"
- CVE-2024-26915 drm/amdgpu: Reset IH OVERFLOW_CLEAR bit
- CVE-2024-26914 drm/amd/display: fix incorrect mpc_combine array size
- CVE-2024-26913 drm/amd/display: Fix dcn35 8k30 Underflow/Corruption Issue
- CVE-2024-26912 drm/nouveau: fix several DMA buffer leaks
- CVE-2024-26911 drm/buddy: Fix alloc_range() error handling code
- CVE-2024-26910 netfilter: ipset: fix performance regression in swap operation
- CVE-2024-2691 Cross-site scripting in WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
- CVE-2024-26909 soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free
- CVE-2024-26907 RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- CVE-2024-26906 x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
- CVE-2024-26903 Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- CVE-2024-26902 perf: RISCV: Fix panic on pmu overflow handler
- CVE-2024-26901 do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- CVE-2024-26900 md: fix kmemleak of rdev->serial
- CVE-2024-2690 SourceCodester Online Discussion Forum Site uupdate.php unrestricted upload
- CVE-2024-26899 block: fix deadlock between bd_link_disk_holder and partition scan
- CVE-2024-26898 aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- CVE-2024-26897 wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
- CVE-2024-26896 wifi: wfx: fix memory leak when starting AP
- CVE-2024-26895 wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces
- CVE-2024-26894 ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- CVE-2024-26893 firmware: arm_scmi: Fix double free in SMC transport cleanup path
- CVE-2024-26892 wifi: mt76: mt7921e: fix use-after-free in free_irq()
- CVE-2024-26891 iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected
- CVE-2024-26890 Bluetooth: btrtl: fix out of bounds memory access
- CVE-2024-2689 Denial of Service if invalid UTF-8 sent
- CVE-2024-26889 Bluetooth: hci_core: Fix possible buffer overflow
- CVE-2024-26888 Bluetooth: msft: Fix memory leak
- CVE-2024-26887 Bluetooth: btusb: Fix memory leak
- CVE-2024-26886 Bluetooth: af_bluetooth: Fix deadlock
- CVE-2024-26885 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- CVE-2024-26884 bpf: Fix hashtab overflow check on 32-bit arches
- CVE-2024-26883 bpf: Fix stackmap overflow check on 32-bit arches
- CVE-2024-26882 net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- CVE-2024-26881 net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- CVE-2024-26880 dm: call the resume method on internal suspend
- CVE-2024-2688 Cross-site scripting in EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more
- CVE-2024-26879 clk: meson: Add missing clocks to axg_clk_regmaps
- CVE-2024-26878 quota: Fix potential NULL pointer dereference
- CVE-2024-26877 crypto: xilinx - call finalize with bh disabled
- CVE-2024-26876 drm/bridge: adv7511: fix crash on irq during probe
- CVE-2024-26875 media: pvrusb2: fix uaf in pvr2_context_set_notify
- CVE-2024-26874 drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- CVE-2024-26873 scsi: hisi_sas: Fix a deadlock issue related to automatic dump
- CVE-2024-26872 RDMA/srpt: Do not register event handler until srpt device is fully setup
- CVE-2024-26871 f2fs: fix NULL pointer dereference in f2fs_submit_page_write()
- CVE-2024-26870 NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- CVE-2024-2687 Campcodes Online Job Finder System index.php sql injection
- CVE-2024-26869 f2fs: fix to truncate meta inode pages forcely
- CVE-2024-26868 nfs: fix panic when nfs4_ff_layout_prepare_ds() fails
- CVE-2024-26867 comedi: comedi_8255: Correct error in subdevice initialization
- CVE-2024-26866 spi: lpspi: Avoid potential use-after-free in probe()
- CVE-2024-26865 rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
- CVE-2024-26864 tcp: Fix refcnt handling in __inet_hash_connect().
- CVE-2024-26863 hsr: Fix uninit-value access in hsr_get_node()
- CVE-2024-26862 packet: annotate data-races around ignore_outgoing
- CVE-2024-26861 wireguard: receive: annotate data-race around receiving_counter.counter
- CVE-2024-26860 dm-integrity: fix a memory leak when rechecking the data
- CVE-2024-2686 Campcodes Online Job Finder System controller.php cross site scripting
- CVE-2024-26859 net/bnx2x: Prevent access to a freed page in page_pool
- CVE-2024-26858 net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map
- CVE-2024-26857 geneve: make sure to pull inner header in geneve_rx()
- CVE-2024-26856 net: sparx5: Fix use after free inside sparx5_del_mact_entry
- CVE-2024-26855 net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- CVE-2024-26854 ice: fix uninitialized dplls mutex usage
- CVE-2024-26853 igc: avoid returning frame twice in XDP_REDIRECT
- CVE-2024-26852 net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- CVE-2024-26851 netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- CVE-2024-26850 mm/debug_vm_pgtable: fix BUG_ON with pud advanced test
- CVE-2024-2685 Campcodes Online Job Finder System index.php cross site scripting