# Vulnerabilities published in 2024


- [CVE-2024-26943](https://insights.sbomify.com/CVE-2024-26943/): nouveau/dmem: handle kcalloc() allocation failure (medium 5.5)
- [CVE-2024-26942](https://insights.sbomify.com/CVE-2024-26942/): net: phy: qcom: at803x: fix kernel panic with at8031_probe (medium 5.5)
- [CVE-2024-26941](https://insights.sbomify.com/CVE-2024-26941/): drm/dp: Fix divide-by-zero regression on DP MST unplug with nouveau (medium 5.5)
- [CVE-2024-26940](https://insights.sbomify.com/CVE-2024-26940/): drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (medium 5.5)
- [CVE-2024-2694](https://insights.sbomify.com/CVE-2024-2694/): Betheme <= 27.5.6 - Authenticated (Contributor+) PHP Object Injection (high 8.8)
- [CVE-2024-26939](https://insights.sbomify.com/CVE-2024-26939/): drm/i915/vma: Fix UAF on destroy against retire race (high 7.8)
- [CVE-2024-26938](https://insights.sbomify.com/CVE-2024-26938/): drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() (medium 5.5)
- [CVE-2024-26937](https://insights.sbomify.com/CVE-2024-26937/): drm/i915/gt: Reset queue_priority_hint on parking (medium 5.5)
- [CVE-2024-26936](https://insights.sbomify.com/CVE-2024-26936/): ksmbd: validate request buffer size in smb2_allocate_rsp_buf() (high 8.2)
- [CVE-2024-26935](https://insights.sbomify.com/CVE-2024-26935/): scsi: core: Fix unremoved procfs host directory regression (medium 5.5)
- [CVE-2024-26934](https://insights.sbomify.com/CVE-2024-26934/): USB: core: Fix deadlock in usb_deauthorize_interface() (high 7.8)
- [CVE-2024-26933](https://insights.sbomify.com/CVE-2024-26933/): USB: core: Fix deadlock in port "disable" sysfs attribute (high 7.8)
- [CVE-2024-26932](https://insights.sbomify.com/CVE-2024-26932/): usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd() (high 7.8)
- [CVE-2024-26931](https://insights.sbomify.com/CVE-2024-26931/): scsi: qla2xxx: Fix command flush on cable pull (high 8.8)
- [CVE-2024-26930](https://insights.sbomify.com/CVE-2024-26930/): scsi: qla2xxx: Fix double free of the ha->vp_map pointer (high 7.0)
- [CVE-2024-2693](https://insights.sbomify.com/CVE-2024-2693/): Link Whisper Free <= 0.7.1 - Authenticated (Contributor+) PHP Object Injection (high 8.8)
- [CVE-2024-26928](https://insights.sbomify.com/CVE-2024-26928/): smb: client: fix potential UAF in cifs_debug_files_proc_show() (high 7.8)
- [CVE-2024-26927](https://insights.sbomify.com/CVE-2024-26927/): ASoC: SOF: Add some bounds checking to firmware data (high 8.4)
- [CVE-2024-26926](https://insights.sbomify.com/CVE-2024-26926/): binder: check offset alignment in binder_get_object() (high 7.8)
- [CVE-2024-26925](https://insights.sbomify.com/CVE-2024-26925/): netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (high 7.8)
- [CVE-2024-26924](https://insights.sbomify.com/CVE-2024-26924/): netfilter: nft_set_pipapo: do not free live element (high 7.8)
- [CVE-2024-26923](https://insights.sbomify.com/CVE-2024-26923/): af_unix: Fix garbage collector racing against connect() (high 7.8)
- [CVE-2024-26922](https://insights.sbomify.com/CVE-2024-26922/): drm/amdgpu: validate the parameters of bo mapping operations more clearly (high 7.8)
- [CVE-2024-26921](https://insights.sbomify.com/CVE-2024-26921/): inet: inet_defrag: prevent sk release while still in use (high 7.8)
- [CVE-2024-26920](https://insights.sbomify.com/CVE-2024-26920/): tracing/trigger: Fix to return error if failed to alloc snapshot (medium 5.5)
- [CVE-2024-2692](https://insights.sbomify.com/CVE-2024-2692/): SiYuan 3.0.3 - RCE via Server Side XSS (critical 9.0)
- [CVE-2024-26919](https://insights.sbomify.com/CVE-2024-26919/): usb: ulpi: Fix debugfs directory leak (high 7.8)
- [CVE-2024-26918](https://insights.sbomify.com/CVE-2024-26918/): PCI: Fix active state requirement in PME polling (medium 6.2)
- [CVE-2024-26917](https://insights.sbomify.com/CVE-2024-26917/): scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" (medium 5.5)
- [CVE-2024-26916](https://insights.sbomify.com/CVE-2024-26916/): Revert "drm/amd: flush any delayed gfxoff on suspend entry" (medium 5.5)
- [CVE-2024-26915](https://insights.sbomify.com/CVE-2024-26915/): drm/amdgpu: Reset IH OVERFLOW_CLEAR bit (medium 5.5)
- [CVE-2024-26914](https://insights.sbomify.com/CVE-2024-26914/): drm/amd/display: fix incorrect mpc_combine array size (high 7.8)
- [CVE-2024-26913](https://insights.sbomify.com/CVE-2024-26913/): drm/amd/display: Fix dcn35 8k30 Underflow/Corruption Issue (high 7.8)
- [CVE-2024-26912](https://insights.sbomify.com/CVE-2024-26912/): drm/nouveau: fix several DMA buffer leaks (medium 5.5)
- [CVE-2024-26911](https://insights.sbomify.com/CVE-2024-26911/): drm/buddy: Fix alloc_range() error handling code (high 7.8)
- [CVE-2024-26910](https://insights.sbomify.com/CVE-2024-26910/): netfilter: ipset: fix performance regression in swap operation (medium 4.7)
- [CVE-2024-2691](https://insights.sbomify.com/CVE-2024-2691/): Cross-site scripting in WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce (medium 6.4)
- [CVE-2024-26909](https://insights.sbomify.com/CVE-2024-26909/): soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free (high 7.0)
- [CVE-2024-26907](https://insights.sbomify.com/CVE-2024-26907/): RDMA/mlx5: Fix fortify source warning while accessing Eth segment (high 7.8)
- [CVE-2024-26906](https://insights.sbomify.com/CVE-2024-26906/): x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (medium 5.5)
- [CVE-2024-26903](https://insights.sbomify.com/CVE-2024-26903/): Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (medium 5.5)
- [CVE-2024-26902](https://insights.sbomify.com/CVE-2024-26902/): perf: RISCV: Fix panic on pmu overflow handler (medium 5.5)
- [CVE-2024-26901](https://insights.sbomify.com/CVE-2024-26901/): do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (medium 5.3)
- [CVE-2024-26900](https://insights.sbomify.com/CVE-2024-26900/): md: fix kmemleak of rdev->serial (medium 5.5)
- [CVE-2024-2690](https://insights.sbomify.com/CVE-2024-2690/): SourceCodester Online Discussion Forum Site uupdate.php unrestricted upload (medium 6.3)
- [CVE-2024-26899](https://insights.sbomify.com/CVE-2024-26899/): block: fix deadlock between bd_link_disk_holder and partition scan (medium 5.5)
- [CVE-2024-26898](https://insights.sbomify.com/CVE-2024-26898/): aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (high 7.8)
- [CVE-2024-26897](https://insights.sbomify.com/CVE-2024-26897/): wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (medium 4.7)
- [CVE-2024-26896](https://insights.sbomify.com/CVE-2024-26896/): wifi: wfx: fix memory leak when starting AP (medium 5.5)
- [CVE-2024-26895](https://insights.sbomify.com/CVE-2024-26895/): wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces (high 7.8)
- [CVE-2024-26894](https://insights.sbomify.com/CVE-2024-26894/): ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (medium 6.0)
- [CVE-2024-26893](https://insights.sbomify.com/CVE-2024-26893/): firmware: arm_scmi: Fix double free in SMC transport cleanup path (medium 5.5)
- [CVE-2024-26892](https://insights.sbomify.com/CVE-2024-26892/): wifi: mt76: mt7921e: fix use-after-free in free_irq() (high 7.8)
- [CVE-2024-26891](https://insights.sbomify.com/CVE-2024-26891/): iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected (medium 5.5)
- [CVE-2024-26890](https://insights.sbomify.com/CVE-2024-26890/): Bluetooth: btrtl: fix out of bounds memory access (high 7.8)
- [CVE-2024-2689](https://insights.sbomify.com/CVE-2024-2689/): Denial of Service if invalid UTF-8 sent (medium 4.4)
- [CVE-2024-26889](https://insights.sbomify.com/CVE-2024-26889/): Bluetooth: hci_core: Fix possible buffer overflow (medium 5.5)
- [CVE-2024-26888](https://insights.sbomify.com/CVE-2024-26888/): Bluetooth: msft: Fix memory leak (medium 5.5)
- [CVE-2024-26887](https://insights.sbomify.com/CVE-2024-26887/): Bluetooth: btusb: Fix memory leak (medium 5.5)
- [CVE-2024-26886](https://insights.sbomify.com/CVE-2024-26886/): Bluetooth: af_bluetooth: Fix deadlock (medium 6.5)
- [CVE-2024-26885](https://insights.sbomify.com/CVE-2024-26885/): bpf: Fix DEVMAP_HASH overflow check on 32-bit arches (high 7.8)
- [CVE-2024-26884](https://insights.sbomify.com/CVE-2024-26884/): bpf: Fix hashtab overflow check on 32-bit arches (high 7.8)
- [CVE-2024-26883](https://insights.sbomify.com/CVE-2024-26883/): bpf: Fix stackmap overflow check on 32-bit arches (high 7.8)
- [CVE-2024-26882](https://insights.sbomify.com/CVE-2024-26882/): net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() (high 7.3)
- [CVE-2024-26881](https://insights.sbomify.com/CVE-2024-26881/): net: hns3: fix kernel crash when 1588 is received on HIP08 devices (high 7.5)
- [CVE-2024-26880](https://insights.sbomify.com/CVE-2024-26880/): dm: call the resume method on internal suspend (high 7.8)
- [CVE-2024-2688](https://insights.sbomify.com/CVE-2024-2688/): Cross-site scripting in EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more (medium 5.4)
- [CVE-2024-26879](https://insights.sbomify.com/CVE-2024-26879/): clk: meson: Add missing clocks to axg_clk_regmaps (medium 5.5)
- [CVE-2024-26878](https://insights.sbomify.com/CVE-2024-26878/): quota: Fix potential NULL pointer dereference (medium 4.7)
- [CVE-2024-26877](https://insights.sbomify.com/CVE-2024-26877/): crypto: xilinx - call finalize with bh disabled (critical 9.8)
- [CVE-2024-26876](https://insights.sbomify.com/CVE-2024-26876/): drm/bridge: adv7511: fix crash on irq during probe (medium 5.5)
- [CVE-2024-26875](https://insights.sbomify.com/CVE-2024-26875/): media: pvrusb2: fix uaf in pvr2_context_set_notify (medium 6.4)
- [CVE-2024-26874](https://insights.sbomify.com/CVE-2024-26874/): drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip (medium 4.7)
- [CVE-2024-26873](https://insights.sbomify.com/CVE-2024-26873/): scsi: hisi_sas: Fix a deadlock issue related to automatic dump (medium 5.5)
- [CVE-2024-26872](https://insights.sbomify.com/CVE-2024-26872/): RDMA/srpt: Do not register event handler until srpt device is fully setup (high 7.8)
- [CVE-2024-26871](https://insights.sbomify.com/CVE-2024-26871/): f2fs: fix NULL pointer dereference in f2fs_submit_page_write() (medium 5.5)
- [CVE-2024-26870](https://insights.sbomify.com/CVE-2024-26870/): NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (high 7.8)
- [CVE-2024-2687](https://insights.sbomify.com/CVE-2024-2687/): Campcodes Online Job Finder System index.php sql injection (medium 6.3)
- [CVE-2024-26869](https://insights.sbomify.com/CVE-2024-26869/): f2fs: fix to truncate meta inode pages forcely (high 7.8)
- [CVE-2024-26868](https://insights.sbomify.com/CVE-2024-26868/): nfs: fix panic when nfs4_ff_layout_prepare_ds() fails (high 7.5)
- [CVE-2024-26867](https://insights.sbomify.com/CVE-2024-26867/): comedi: comedi_8255: Correct error in subdevice initialization (medium 5.5)
- [CVE-2024-26866](https://insights.sbomify.com/CVE-2024-26866/): spi: lpspi: Avoid potential use-after-free in probe() (medium 5.5)
- [CVE-2024-26865](https://insights.sbomify.com/CVE-2024-26865/): rds: tcp: Fix use-after-free of net in reqsk_timer_handler(). (high 7.8)
- [CVE-2024-26864](https://insights.sbomify.com/CVE-2024-26864/): tcp: Fix refcnt handling in __inet_hash_connect(). (high 7.8)
- [CVE-2024-26863](https://insights.sbomify.com/CVE-2024-26863/): hsr: Fix uninit-value access in hsr_get_node() (medium 5.5)
- [CVE-2024-26862](https://insights.sbomify.com/CVE-2024-26862/): packet: annotate data-races around ignore_outgoing (medium 4.7)
- [CVE-2024-26861](https://insights.sbomify.com/CVE-2024-26861/): wireguard: receive: annotate data-race around receiving_counter.counter (medium 4.7)
- [CVE-2024-26860](https://insights.sbomify.com/CVE-2024-26860/): dm-integrity: fix a memory leak when rechecking the data (medium 5.5)
- [CVE-2024-2686](https://insights.sbomify.com/CVE-2024-2686/): Campcodes Online Job Finder System controller.php cross site scripting (low 3.5)
- [CVE-2024-26859](https://insights.sbomify.com/CVE-2024-26859/): net/bnx2x: Prevent access to a freed page in page_pool (medium 4.7)
- [CVE-2024-26858](https://insights.sbomify.com/CVE-2024-26858/): net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (medium 5.5)
- [CVE-2024-26857](https://insights.sbomify.com/CVE-2024-26857/): geneve: make sure to pull inner header in geneve_rx() (high 7.3)
- [CVE-2024-26856](https://insights.sbomify.com/CVE-2024-26856/): net: sparx5: Fix use after free inside sparx5_del_mact_entry (high 8.8)
- [CVE-2024-26855](https://insights.sbomify.com/CVE-2024-26855/): net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (medium 5.5)
- [CVE-2024-26854](https://insights.sbomify.com/CVE-2024-26854/): ice: fix uninitialized dplls mutex usage (high 7.5)
- [CVE-2024-26853](https://insights.sbomify.com/CVE-2024-26853/): igc: avoid returning frame twice in XDP_REDIRECT (critical 9.8)
- [CVE-2024-26852](https://insights.sbomify.com/CVE-2024-26852/): net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (high 7.8)
- [CVE-2024-26851](https://insights.sbomify.com/CVE-2024-26851/): netfilter: nf_conntrack_h323: Add protection for bmp length out of range (high 7.5)
- [CVE-2024-26850](https://insights.sbomify.com/CVE-2024-26850/): mm/debug_vm_pgtable: fix BUG_ON with pud advanced test (medium 5.5)
- [CVE-2024-2685](https://insights.sbomify.com/CVE-2024-2685/): Campcodes Online Job Finder System index.php cross site scripting (low 3.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/411/