Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 412 of 521.
- CVE-2024-26849 netlink: add nla be16/32 types to minlen array
- CVE-2024-26847 powerpc/rtas: use correct function name for resetting TCE tables
- CVE-2024-26846 nvme-fc: do not wait in vain when unloading module
- CVE-2024-26845 scsi: target: core: Add TMF to tmr_list handling
- CVE-2024-26844 block: Fix WARNING in _copy_from_iter
- CVE-2024-26843 efi: runtime: Fix potential overflow of soft-reserved region size
- CVE-2024-26842 scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd()
- CVE-2024-26841 LoongArch: Update cpu_sibling_map when disabling nonboot CPUs
- CVE-2024-26840 cachefiles: fix memory leak in cachefiles_add_cache()
- CVE-2024-2684 Campcodes Online Job Finder System index.php cross site scripting
- CVE-2024-26839 IB/hfi1: Fix a memleak in init_credit_return
- CVE-2024-26838 RDMA/irdma: Fix KASAN issue with tasklet
- CVE-2024-26837 net: bridge: switchdev: Skip MDB replays of deferred events on offload
- CVE-2024-26836 platform/x86: think-lmi: Fix password opcode ordering for workstations
- CVE-2024-26835 netfilter: nf_tables: set dormant flag on hook register failure
- CVE-2024-26834 netfilter: nft_flow_offload: release dst in case direct xmit path is used
- CVE-2024-26833 drm/amd/display: Fix memory leak in dm_sw_fini()
- CVE-2024-26832 mm: zswap: fix missing folio cleanup in writeback race path
- CVE-2024-26831 net/handshake: Fix handshake_req_destroy_test1
- CVE-2024-26830 i40e: Do not allow untrusted VF to remove administratively set MAC
- CVE-2024-2683 Campcodes Online Job Finder System index.php cross site scripting
- CVE-2024-26829 media: ir_toy: fix a memleak in irtoy_tx
- CVE-2024-26828 cifs: fix underflow in parse_server_interfaces()
- CVE-2024-26826 mptcp: fix data re-injection from stale subflow
- CVE-2024-26825 nfc: nci: free rx_data_reassembly skb on NCI device cleanup
- CVE-2024-26824 crypto: algif_hash - Remove bogus SGL free on zero-length error path
- CVE-2024-26823 irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems
- CVE-2024-26822 smb: client: set correct id, uid and cruid for multiuser automounts
- CVE-2024-26820 hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- CVE-2024-2682 Campcodes Online Job Finder System controller.php cross site scripting
- CVE-2024-26818 tools/rtla: Fix clang warning about mount_point var size
- CVE-2024-26817 amdkfd: use calloc instead of kzalloc to avoid integer overflow
- CVE-2024-26816 x86, relocs: Ignore relocations in .notes section
- CVE-2024-26815 net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check
- CVE-2024-26814 vfio/fsl-mc: Block calling interrupt handler without trigger
- CVE-2024-26813 vfio/platform: Create persistent IRQ handlers
- CVE-2024-26812 vfio/pci: Create persistent INTx handler
- CVE-2024-26811 ksmbd: validate payload size in ipc response
- CVE-2024-26810 vfio/pci: Lock external INTx masking ops
- CVE-2024-2681 Campcodes Online Job Finder System index.php cross site scripting
- CVE-2024-26809 netfilter: nft_set_pipapo: release elements in clone only from destroy path
- CVE-2024-26808 netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
- CVE-2024-26807 spi: cadence-qspi: fix pointer reference in runtime PM hooks
- CVE-2024-26806 spi: cadence-qspi: remove system-wide suspend helper calls from runtime PM hooks
- CVE-2024-26805 netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- CVE-2024-26804 net: ip_tunnel: prevent perpetual headroom growth
- CVE-2024-26803 net: veth: clear GRO when clearing XDP even when down
- CVE-2024-26802 stmmac: Clear variable when destroying workqueue
- CVE-2024-26801 Bluetooth: Avoid potential use-after-free in hci_error_reset
- CVE-2024-26800 tls: fix use-after-free on failed backlog decryption
- CVE-2024-2680 Campcodes Online Job Finder System index.php cross site scripting
- CVE-2024-26799 ASoC: qcom: Fix uninitialized pointer dmactl
- CVE-2024-26798 fbcon: always restore the old font data in fbcon_do_set_font()
- CVE-2024-26797 drm/amd/display: Prevent potential buffer overflow in map_hw_resources
- CVE-2024-26796 drivers: perf: ctr_get_width function for legacy is not defined
- CVE-2024-26795 riscv: Sparse-Memory/vmemmap out-of-bounds fix
- CVE-2024-26793 gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- CVE-2024-26792 btrfs: fix double free of anonymous device after snapshot creation failure
- CVE-2024-26791 btrfs: dev-replace: properly validate device names
- CVE-2024-26790 dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- CVE-2024-2679 Campcodes Online Job Finder System index.php cross site scripting
- CVE-2024-26789 crypto: arm64/neonbs - fix out-of-bounds access on short input
- CVE-2024-26788 dmaengine: fsl-qdma: init irq after reg initialization
- CVE-2024-26787 mmc: mmci: stm32: fix DMA API overlapping mappings warning
- CVE-2024-26786 iommufd: Fix iopt_access_list_id overwrite bug
- CVE-2024-26785 iommufd: Fix protection fault in iommufd_test_syz_conv_iova
- CVE-2024-26784 pmdomain: arm: Fix NULL dereference on scmi_perf_domain removal
- CVE-2024-26783 mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index
- CVE-2024-26782 mptcp: fix double-free on socket dismantle
- CVE-2024-26781 mptcp: fix possible deadlock in subflow diag
- CVE-2024-26780 af_unix: Fix task hung while purging oob_skb in GC.
- CVE-2024-2678 Campcodes Online Job Finder System controller.php sql injection
- CVE-2024-26779 wifi: mac80211: fix race condition on enabling fast-xmit
- CVE-2024-26778 fbdev: savage: Error out if pixclock equals zero
- CVE-2024-26777 fbdev: sis: Error out if pixclock equals zero
- CVE-2024-26776 spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
- CVE-2024-26775 aoe: avoid potential deadlock at set_capacity
- CVE-2024-26774 ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt
- CVE-2024-26773 ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
- CVE-2024-26772 ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- CVE-2024-26771 dmaengine: ti: edma: Add some null pointer checks to the edma_probe
- CVE-2024-26770 HID: nvidia-shield: Add missing null pointer checks to LED initialization
- CVE-2024-2677 Campcodes Online Job Finder System controller.php sql injection
- CVE-2024-26769 nvmet-fc: avoid deadlock on delete association path
- CVE-2024-26768 LoongArch: Change acpi_core_pic[NR_CPUS] to acpi_core_pic[MAX_CORE_PIC]
- CVE-2024-26767 drm/amd/display: fixed integer types and null check locations
- CVE-2024-26766 IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
- CVE-2024-26765 LoongArch: Disable IRQ before init_fn() for nonboot CPUs
- CVE-2024-26764 fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- CVE-2024-26763 dm-crypt: don't modify the data when using authenticated encryption
- CVE-2024-26762 cxl/pci: Skip to handle RAS errors if CXL.mem device is detached
- CVE-2024-26761 cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window
- CVE-2024-26760 scsi: target: pscsi: Fix bio_put() for error case
- CVE-2024-2676 Campcodes Online Job Finder System controller.php sql injection
- CVE-2024-26759 mm/swap: fix race when skipping swapcache
- CVE-2024-26758 md: Don't ignore suspended array in md_check_recovery()
- CVE-2024-26757 md: Don't ignore read-only array in md_check_recovery()
- CVE-2024-26756 md: Don't register sync_thread for reshape directly
- CVE-2024-26755 md: Don't suspend the array for interrupted reshape
- CVE-2024-26754 gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()