Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 413 of 521.
- CVE-2024-26753 crypto: virtio/akcipher - Fix stack overflow on memcpy
- CVE-2024-26752 l2tp: pass correct message length to ip6_append_data
- CVE-2024-26751 ARM: ep93xx: Add terminator to gpiod_lookup_table
- CVE-2024-26750 af_unix: Drop oob_skb ref before purging queue in GC.
- CVE-2024-2675 Campcodes Online Job Finder System index.php sql injection
- CVE-2024-26749 usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- CVE-2024-26748 usb: cdns3: fix memory double free when handle zero packet
- CVE-2024-26747 usb: roles: fix NULL pointer issue when put module's reference
- CVE-2024-26746 dmaengine: idxd: Ensure safe user copy of completion record
- CVE-2024-26745 powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV
- CVE-2024-26744 RDMA/srpt: Support specifying the srpt_service_guid parameter
- CVE-2024-26743 RDMA/qedr: Fix qedr_create_user_qp error flow
- CVE-2024-26742 scsi: smartpqi: Fix disable_managed_interrupts
- CVE-2024-26741 dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished().
- CVE-2024-26740 net/sched: act_mirred: use the backlog for mirred ingress
- CVE-2024-2674 Campcodes Online Job Finder System index.php sql injection
- CVE-2024-26739 net/sched: act_mirred: don't override retval if we already lost the skb
- CVE-2024-26738 powerpc/pseries/iommu: DLPAR add doesn't completely initialize pci_controller
- CVE-2024-26737 bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel
- CVE-2024-26736 afs: Increase buffer size in afs_update_volume_status()
- CVE-2024-26735 ipv6: sr: fix possible use-after-free and null-ptr-deref
- CVE-2024-26734 devlink: fix possible use-after-free and memory leaks in devlink_init()
- CVE-2024-26733 arp: Prevent overflow in arp_req_get().
- CVE-2024-26732 net: implement lockless setsockopt(SO_PEEK_OFF)
- CVE-2024-26731 bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
- CVE-2024-26730 hwmon: (nct6775) Fix access to temperature configuration registers
- CVE-2024-2673 Campcodes Online Job Finder System login.php sql injection
- CVE-2024-26729 drm/amd/display: Fix potential null pointer dereference in dc_dmub_srv
- CVE-2024-26728 drm/amd/display: fix null-pointer dereference on edid reading
- CVE-2024-26727 btrfs: do not ASSERT() if the newly created subvolume already got read
- CVE-2024-26726 btrfs: don't drop extent_map for free space inode on write error
- CVE-2024-26725 dpll: fix possible deadlock during netlink dump operation
- CVE-2024-26724 net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers
- CVE-2024-26723 lan966x: Fix crash when adding interface under a lag
- CVE-2024-26722 ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- CVE-2024-26721 drm/i915/dsc: Fix the macro that calculates DSCC_/DSCA_ PPS reg address
- CVE-2024-2672 Campcodes Online Job Finder System controller.php sql injection
- CVE-2024-26719 nouveau: offload fence uevents work to workqueue
- CVE-2024-26718 dm-crypt, dm-verity: disable tasklets
- CVE-2024-26717 HID: i2c-hid-of: fix NULL-deref on failed power up
- CVE-2024-26716 usb: core: Prevent null pointer dereference in update_port_device_state
- CVE-2024-26715 usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend
- CVE-2024-26714 interconnect: qcom: sc8180x: Mark CO0 BCM keepalive
- CVE-2024-26712 powerpc/kasan: Fix addr error caused by page alignment
- CVE-2024-26711 iio: adc: ad4130: zero-initialize clock init data
- CVE-2024-26710 powerpc/kasan: Limit KASAN thread size increase to 32KB
- CVE-2024-2671 Campcodes Online Job Finder System index.php sql injection
- CVE-2024-26709 powerpc/iommu: Fix the missing iommu_group_put() during platform domain attach
- CVE-2024-26708 mptcp: really cope with fastopen race
- CVE-2024-26707 net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
- CVE-2024-26706 parisc: Fix random data corruption from exception handler
- CVE-2024-26705 parisc: BTLB: Fix crash when setting up BTLB at CPU bringup
- CVE-2024-26704 ext4: fix double-free of blocks due to wrong extents moved_len
- CVE-2024-26703 tracing/timerlat: Move hrtimer_init to timerlat_fd open()
- CVE-2024-26702 iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
- CVE-2024-26700 drm/amd/display: Fix MST Null Ptr for RV
- CVE-2024-2670 Campcodes Online Job Finder System index.php sql injection
- CVE-2024-26699 drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr
- CVE-2024-26698 hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
- CVE-2024-26697 nilfs2: fix data corruption in dsync block recovery for small block sizes
- CVE-2024-26696 nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- CVE-2024-26695 crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
- CVE-2024-26694 wifi: iwlwifi: fix double-free bug
- CVE-2024-26693 wifi: iwlwifi: mvm: fix a crash when we run out of stations
- CVE-2024-26692 smb: Fix regression in writes when non-standard maximum write size negotiated
- CVE-2024-26691 KVM: arm64: Fix circular locking dependency
- CVE-2024-26690 net: stmmac: protect updates of 64-bit statistics counters
- CVE-2024-2669 Campcodes Online Job Finder System GET Parameter controller.php sql injection
- CVE-2024-26689 ceph: prevent use-after-free in encode_cap_msg()
- CVE-2024-26688 fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- CVE-2024-26687 xen/events: close evtchn after mapping cleanup
- CVE-2024-26686 fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
- CVE-2024-26685 nilfs2: fix potential bug in end_buffer_async_write
- CVE-2024-26684 net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- CVE-2024-26683 wifi: cfg80211: detect stuck ECSA element in probe resp
- CVE-2024-26682 wifi: mac80211: improve CSA/ECSA connection refusal
- CVE-2024-26681 netdevsim: avoid potential loop in nsim_dev_trap_report_work()
- CVE-2024-26680 net: atlantic: Fix DMA mapping for PTP hwts ring
- CVE-2024-2668 Campcodes Online Job Finder System controller.php sql injection
- CVE-2024-26679 inet: read sk->sk_family once in inet_recv_error()
- CVE-2024-26678 x86/efistub: Use 1:1 file:memory mapping for PE/COFF .compat section
- CVE-2024-26677 rxrpc: Fix delayed ACKs to not set the reference serial number
- CVE-2024-26676 af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC.
- CVE-2024-26675 ppp_async: limit MRU to 64K
- CVE-2024-26674 x86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups
- CVE-2024-26673 netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- CVE-2024-26672 drm/amdgpu: Fix variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get_mca_entry()'
- CVE-2024-26671 blk-mq: fix IO hang from sbitmap wakeup race
- CVE-2024-26670 arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD
- CVE-2024-2667 InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload
- CVE-2024-26669 net/sched: flower: Fix chain template offload
- CVE-2024-26668 netfilter: nft_limit: reject configurations that cause integer overflow
- CVE-2024-26667 drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup
- CVE-2024-26666 wifi: mac80211: fix RCU use in TDLS fast-xmit
- CVE-2024-26665 tunnels: fix out of bounds access when building IPv6 PMTU error
- CVE-2024-26664 hwmon: (coretemp) Fix out-of-bounds memory access
- CVE-2024-26663 tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- CVE-2024-26662 drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- CVE-2024-26661 drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'
- CVE-2024-26660 drm/amd/display: Implement bounds check for stream encoder creation in DCN301