# Vulnerabilities published in 2024


- [CVE-2024-26849](https://insights.sbomify.com/CVE-2024-26849/): netlink: add nla be16/32 types to minlen array (medium 5.5)
- [CVE-2024-26847](https://insights.sbomify.com/CVE-2024-26847/): powerpc/rtas: use correct function name for resetting TCE tables (medium 5.1)
- [CVE-2024-26846](https://insights.sbomify.com/CVE-2024-26846/): nvme-fc: do not wait in vain when unloading module (medium 4.4)
- [CVE-2024-26845](https://insights.sbomify.com/CVE-2024-26845/): scsi: target: core: Add TMF to tmr_list handling (high 7.5)
- [CVE-2024-26844](https://insights.sbomify.com/CVE-2024-26844/): block: Fix WARNING in _copy_from_iter (medium 5.5)
- [CVE-2024-26843](https://insights.sbomify.com/CVE-2024-26843/): efi: runtime: Fix potential overflow of soft-reserved region size (medium 6.0)
- [CVE-2024-26842](https://insights.sbomify.com/CVE-2024-26842/): scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd() (high 7.8)
- [CVE-2024-26841](https://insights.sbomify.com/CVE-2024-26841/): LoongArch: Update cpu_sibling_map when disabling nonboot CPUs (medium 5.5)
- [CVE-2024-26840](https://insights.sbomify.com/CVE-2024-26840/): cachefiles: fix memory leak in cachefiles_add_cache() (medium 5.5)
- [CVE-2024-2684](https://insights.sbomify.com/CVE-2024-2684/): Campcodes Online Job Finder System index.php cross site scripting (low 3.5)
- [CVE-2024-26839](https://insights.sbomify.com/CVE-2024-26839/): IB/hfi1: Fix a memleak in init_credit_return (medium 5.5)
- [CVE-2024-26838](https://insights.sbomify.com/CVE-2024-26838/): RDMA/irdma: Fix KASAN issue with tasklet (high 7.8)
- [CVE-2024-26837](https://insights.sbomify.com/CVE-2024-26837/): net: bridge: switchdev: Skip MDB replays of deferred events on offload (medium 4.7)
- [CVE-2024-26836](https://insights.sbomify.com/CVE-2024-26836/): platform/x86: think-lmi: Fix password opcode ordering for workstations (high 7.8)
- [CVE-2024-26835](https://insights.sbomify.com/CVE-2024-26835/): netfilter: nf_tables: set dormant flag on hook register failure (medium 5.5)
- [CVE-2024-26834](https://insights.sbomify.com/CVE-2024-26834/): netfilter: nft_flow_offload: release dst in case direct xmit path is used (high 7.5)
- [CVE-2024-26833](https://insights.sbomify.com/CVE-2024-26833/): drm/amd/display: Fix memory leak in dm_sw_fini() (medium 5.5)
- [CVE-2024-26832](https://insights.sbomify.com/CVE-2024-26832/): mm: zswap: fix missing folio cleanup in writeback race path (medium 5.5)
- [CVE-2024-26831](https://insights.sbomify.com/CVE-2024-26831/): net/handshake: Fix handshake_req_destroy_test1 (medium 5.5)
- [CVE-2024-26830](https://insights.sbomify.com/CVE-2024-26830/): i40e: Do not allow untrusted VF to remove administratively set MAC (high 8.4)
- [CVE-2024-2683](https://insights.sbomify.com/CVE-2024-2683/): Campcodes Online Job Finder System index.php cross site scripting (low 3.5)
- [CVE-2024-26829](https://insights.sbomify.com/CVE-2024-26829/): media: ir_toy: fix a memleak in irtoy_tx (medium 5.5)
- [CVE-2024-26828](https://insights.sbomify.com/CVE-2024-26828/): cifs: fix underflow in parse_server_interfaces() (critical 9.4)
- [CVE-2024-26826](https://insights.sbomify.com/CVE-2024-26826/): mptcp: fix data re-injection from stale subflow (high 7.5)
- [CVE-2024-26825](https://insights.sbomify.com/CVE-2024-26825/): nfc: nci: free rx_data_reassembly skb on NCI device cleanup (medium 5.5)
- [CVE-2024-26824](https://insights.sbomify.com/CVE-2024-26824/): crypto: algif_hash - Remove bogus SGL free on zero-length error path (high 7.8)
- [CVE-2024-26823](https://insights.sbomify.com/CVE-2024-26823/): irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems (high 7.8)
- [CVE-2024-26822](https://insights.sbomify.com/CVE-2024-26822/): smb: client: set correct id, uid and cruid for multiuser automounts (high 8.7)
- [CVE-2024-26820](https://insights.sbomify.com/CVE-2024-26820/): hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (medium 5.5)
- [CVE-2024-2682](https://insights.sbomify.com/CVE-2024-2682/): Campcodes Online Job Finder System controller.php cross site scripting (low 3.5)
- [CVE-2024-26818](https://insights.sbomify.com/CVE-2024-26818/): tools/rtla: Fix clang warning about mount_point var size (medium 5.5)
- [CVE-2024-26817](https://insights.sbomify.com/CVE-2024-26817/): amdkfd: use calloc instead of kzalloc to avoid integer overflow (medium 5.5)
- [CVE-2024-26816](https://insights.sbomify.com/CVE-2024-26816/): x86, relocs: Ignore relocations in .notes section (medium 5.5)
- [CVE-2024-26815](https://insights.sbomify.com/CVE-2024-26815/): net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check (high 7.8)
- [CVE-2024-26814](https://insights.sbomify.com/CVE-2024-26814/): vfio/fsl-mc: Block calling interrupt handler without trigger (medium 5.5)
- [CVE-2024-26813](https://insights.sbomify.com/CVE-2024-26813/): vfio/platform: Create persistent IRQ handlers (medium 5.5)
- [CVE-2024-26812](https://insights.sbomify.com/CVE-2024-26812/): vfio/pci: Create persistent INTx handler (high 7.8)
- [CVE-2024-26811](https://insights.sbomify.com/CVE-2024-26811/): ksmbd: validate payload size in ipc response (critical 9.8)
- [CVE-2024-26810](https://insights.sbomify.com/CVE-2024-26810/): vfio/pci: Lock external INTx masking ops (high 7.8)
- [CVE-2024-2681](https://insights.sbomify.com/CVE-2024-2681/): Campcodes Online Job Finder System index.php cross site scripting (low 3.5)
- [CVE-2024-26809](https://insights.sbomify.com/CVE-2024-26809/): netfilter: nft_set_pipapo: release elements in clone only from destroy path (high 7.8)
- [CVE-2024-26808](https://insights.sbomify.com/CVE-2024-26808/): netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (high 7.8)
- [CVE-2024-26807](https://insights.sbomify.com/CVE-2024-26807/): spi: cadence-qspi: fix pointer reference in runtime PM hooks (high 7.8)
- [CVE-2024-26806](https://insights.sbomify.com/CVE-2024-26806/): spi: cadence-qspi: remove system-wide suspend helper calls from runtime PM hooks (medium 5.5)
- [CVE-2024-26805](https://insights.sbomify.com/CVE-2024-26805/): netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (medium 5.5)
- [CVE-2024-26804](https://insights.sbomify.com/CVE-2024-26804/): net: ip_tunnel: prevent perpetual headroom growth (high 7.8)
- [CVE-2024-26803](https://insights.sbomify.com/CVE-2024-26803/): net: veth: clear GRO when clearing XDP even when down (medium 5.5)
- [CVE-2024-26802](https://insights.sbomify.com/CVE-2024-26802/): stmmac: Clear variable when destroying workqueue (high 7.8)
- [CVE-2024-26801](https://insights.sbomify.com/CVE-2024-26801/): Bluetooth: Avoid potential use-after-free in hci_error_reset (high 8.8)
- [CVE-2024-26800](https://insights.sbomify.com/CVE-2024-26800/): tls: fix use-after-free on failed backlog decryption (critical 9.8)
- [CVE-2024-2680](https://insights.sbomify.com/CVE-2024-2680/): Campcodes Online Job Finder System index.php cross site scripting (low 3.5)
- [CVE-2024-26799](https://insights.sbomify.com/CVE-2024-26799/): ASoC: qcom: Fix uninitialized pointer dmactl (high 7.0)
- [CVE-2024-26798](https://insights.sbomify.com/CVE-2024-26798/): fbcon: always restore the old font data in fbcon_do_set_font() (medium 5.5)
- [CVE-2024-26797](https://insights.sbomify.com/CVE-2024-26797/): drm/amd/display: Prevent potential buffer overflow in map_hw_resources (high 7.8)
- [CVE-2024-26796](https://insights.sbomify.com/CVE-2024-26796/): drivers: perf: ctr_get_width function for legacy is not defined (medium 5.5)
- [CVE-2024-26795](https://insights.sbomify.com/CVE-2024-26795/): riscv: Sparse-Memory/vmemmap out-of-bounds fix (high 7.8)
- [CVE-2024-26793](https://insights.sbomify.com/CVE-2024-26793/): gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (high 7.8)
- [CVE-2024-26792](https://insights.sbomify.com/CVE-2024-26792/): btrfs: fix double free of anonymous device after snapshot creation failure (high 7.8)
- [CVE-2024-26791](https://insights.sbomify.com/CVE-2024-26791/): btrfs: dev-replace: properly validate device names (high 7.1)
- [CVE-2024-26790](https://insights.sbomify.com/CVE-2024-26790/): dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read (medium 5.5)
- [CVE-2024-2679](https://insights.sbomify.com/CVE-2024-2679/): Campcodes Online Job Finder System index.php cross site scripting (low 3.5)
- [CVE-2024-26789](https://insights.sbomify.com/CVE-2024-26789/): crypto: arm64/neonbs - fix out-of-bounds access on short input (high 7.8)
- [CVE-2024-26788](https://insights.sbomify.com/CVE-2024-26788/): dmaengine: fsl-qdma: init irq after reg initialization (medium 5.5)
- [CVE-2024-26787](https://insights.sbomify.com/CVE-2024-26787/): mmc: mmci: stm32: fix DMA API overlapping mappings warning (medium 5.5)
- [CVE-2024-26786](https://insights.sbomify.com/CVE-2024-26786/): iommufd: Fix iopt_access_list_id overwrite bug (high 7.8)
- [CVE-2024-26785](https://insights.sbomify.com/CVE-2024-26785/): iommufd: Fix protection fault in iommufd_test_syz_conv_iova (medium 5.5)
- [CVE-2024-26784](https://insights.sbomify.com/CVE-2024-26784/): pmdomain: arm: Fix NULL dereference on scmi_perf_domain removal (medium 5.5)
- [CVE-2024-26783](https://insights.sbomify.com/CVE-2024-26783/): mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (medium 5.5)
- [CVE-2024-26782](https://insights.sbomify.com/CVE-2024-26782/): mptcp: fix double-free on socket dismantle (critical 9.8)
- [CVE-2024-26781](https://insights.sbomify.com/CVE-2024-26781/): mptcp: fix possible deadlock in subflow diag (medium 5.5)
- [CVE-2024-26780](https://insights.sbomify.com/CVE-2024-26780/): af_unix: Fix task hung while purging oob_skb in GC. (medium 5.5)
- [CVE-2024-2678](https://insights.sbomify.com/CVE-2024-2678/): Campcodes Online Job Finder System controller.php sql injection (medium 6.3)
- [CVE-2024-26779](https://insights.sbomify.com/CVE-2024-26779/): wifi: mac80211: fix race condition on enabling fast-xmit (high 8.8)
- [CVE-2024-26778](https://insights.sbomify.com/CVE-2024-26778/): fbdev: savage: Error out if pixclock equals zero (medium 5.5)
- [CVE-2024-26777](https://insights.sbomify.com/CVE-2024-26777/): fbdev: sis: Error out if pixclock equals zero (medium 5.5)
- [CVE-2024-26776](https://insights.sbomify.com/CVE-2024-26776/): spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected (medium 5.5)
- [CVE-2024-26775](https://insights.sbomify.com/CVE-2024-26775/): aoe: avoid potential deadlock at set_capacity (medium 5.5)
- [CVE-2024-26774](https://insights.sbomify.com/CVE-2024-26774/): ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt (medium 5.5)
- [CVE-2024-26773](https://insights.sbomify.com/CVE-2024-26773/): ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (high 7.8)
- [CVE-2024-26772](https://insights.sbomify.com/CVE-2024-26772/): ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (high 7.8)
- [CVE-2024-26771](https://insights.sbomify.com/CVE-2024-26771/): dmaengine: ti: edma: Add some null pointer checks to the edma_probe (medium 5.5)
- [CVE-2024-26770](https://insights.sbomify.com/CVE-2024-26770/): HID: nvidia-shield: Add missing null pointer checks to LED initialization (medium 5.5)
- [CVE-2024-2677](https://insights.sbomify.com/CVE-2024-2677/): Campcodes Online Job Finder System controller.php sql injection (medium 6.3)
- [CVE-2024-26769](https://insights.sbomify.com/CVE-2024-26769/): nvmet-fc: avoid deadlock on delete association path (high 7.5)
- [CVE-2024-26768](https://insights.sbomify.com/CVE-2024-26768/): LoongArch: Change acpi_core_pic[NR_CPUS] to acpi_core_pic[MAX_CORE_PIC] (high 7.2)
- [CVE-2024-26767](https://insights.sbomify.com/CVE-2024-26767/): drm/amd/display: fixed integer types and null check locations (medium 5.5)
- [CVE-2024-26766](https://insights.sbomify.com/CVE-2024-26766/): IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (high 7.8)
- [CVE-2024-26765](https://insights.sbomify.com/CVE-2024-26765/): LoongArch: Disable IRQ before init_fn() for nonboot CPUs (medium 5.5)
- [CVE-2024-26764](https://insights.sbomify.com/CVE-2024-26764/): fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (low 3.3)
- [CVE-2024-26763](https://insights.sbomify.com/CVE-2024-26763/): dm-crypt: don't modify the data when using authenticated encryption (high 7.1)
- [CVE-2024-26762](https://insights.sbomify.com/CVE-2024-26762/): cxl/pci: Skip to handle RAS errors if CXL.mem device is detached (high 7.8)
- [CVE-2024-26761](https://insights.sbomify.com/CVE-2024-26761/): cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window (medium 5.5)
- [CVE-2024-26760](https://insights.sbomify.com/CVE-2024-26760/): scsi: target: pscsi: Fix bio_put() for error case (critical 9.8)
- [CVE-2024-2676](https://insights.sbomify.com/CVE-2024-2676/): Campcodes Online Job Finder System controller.php sql injection (medium 6.3)
- [CVE-2024-26759](https://insights.sbomify.com/CVE-2024-26759/): mm/swap: fix race when skipping swapcache (high 7.8)
- [CVE-2024-26758](https://insights.sbomify.com/CVE-2024-26758/): md: Don't ignore suspended array in md_check_recovery() (medium 5.5)
- [CVE-2024-26757](https://insights.sbomify.com/CVE-2024-26757/): md: Don't ignore read-only array in md_check_recovery() (medium 5.5)
- [CVE-2024-26756](https://insights.sbomify.com/CVE-2024-26756/): md: Don't register sync_thread for reshape directly (medium 5.5)
- [CVE-2024-26755](https://insights.sbomify.com/CVE-2024-26755/): md: Don't suspend the array for interrupted reshape (medium 5.3)
- [CVE-2024-26754](https://insights.sbomify.com/CVE-2024-26754/): gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/412/