# Vulnerabilities published in 2024


- [CVE-2024-26753](https://insights.sbomify.com/CVE-2024-26753/): crypto: virtio/akcipher - Fix stack overflow on memcpy (high 7.8)
- [CVE-2024-26752](https://insights.sbomify.com/CVE-2024-26752/): l2tp: pass correct message length to ip6_append_data (medium 5.5)
- [CVE-2024-26751](https://insights.sbomify.com/CVE-2024-26751/): ARM: ep93xx: Add terminator to gpiod_lookup_table (medium 5.5)
- [CVE-2024-26750](https://insights.sbomify.com/CVE-2024-26750/): af_unix: Drop oob_skb ref before purging queue in GC. (medium 5.5)
- [CVE-2024-2675](https://insights.sbomify.com/CVE-2024-2675/): Campcodes Online Job Finder System index.php sql injection (medium 6.3)
- [CVE-2024-26749](https://insights.sbomify.com/CVE-2024-26749/): usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() (high 7.8)
- [CVE-2024-26748](https://insights.sbomify.com/CVE-2024-26748/): usb: cdns3: fix memory double free when handle zero packet (high 7.8)
- [CVE-2024-26747](https://insights.sbomify.com/CVE-2024-26747/): usb: roles: fix NULL pointer issue when put module's reference (medium 4.4)
- [CVE-2024-26746](https://insights.sbomify.com/CVE-2024-26746/): dmaengine: idxd: Ensure safe user copy of completion record (medium 5.5)
- [CVE-2024-26745](https://insights.sbomify.com/CVE-2024-26745/): powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (medium 4.4)
- [CVE-2024-26744](https://insights.sbomify.com/CVE-2024-26744/): RDMA/srpt: Support specifying the srpt_service_guid parameter (medium 5.5)
- [CVE-2024-26743](https://insights.sbomify.com/CVE-2024-26743/): RDMA/qedr: Fix qedr_create_user_qp error flow (medium 5.5)
- [CVE-2024-26742](https://insights.sbomify.com/CVE-2024-26742/): scsi: smartpqi: Fix disable_managed_interrupts (high 7.8)
- [CVE-2024-26741](https://insights.sbomify.com/CVE-2024-26741/): dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished(). (medium 5.5)
- [CVE-2024-26740](https://insights.sbomify.com/CVE-2024-26740/): net/sched: act_mirred: use the backlog for mirred ingress (medium 5.5)
- [CVE-2024-2674](https://insights.sbomify.com/CVE-2024-2674/): Campcodes Online Job Finder System index.php sql injection (medium 6.3)
- [CVE-2024-26739](https://insights.sbomify.com/CVE-2024-26739/): net/sched: act_mirred: don't override retval if we already lost the skb (high 7.8)
- [CVE-2024-26738](https://insights.sbomify.com/CVE-2024-26738/): powerpc/pseries/iommu: DLPAR add doesn't completely initialize pci_controller (medium 5.5)
- [CVE-2024-26737](https://insights.sbomify.com/CVE-2024-26737/): bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (high 7.8)
- [CVE-2024-26736](https://insights.sbomify.com/CVE-2024-26736/): afs: Increase buffer size in afs_update_volume_status() (high 8.1)
- [CVE-2024-26735](https://insights.sbomify.com/CVE-2024-26735/): ipv6: sr: fix possible use-after-free and null-ptr-deref (medium 5.5)
- [CVE-2024-26734](https://insights.sbomify.com/CVE-2024-26734/): devlink: fix possible use-after-free and memory leaks in devlink_init() (high 7.0)
- [CVE-2024-26733](https://insights.sbomify.com/CVE-2024-26733/): arp: Prevent overflow in arp_req_get(). (medium 5.5)
- [CVE-2024-26732](https://insights.sbomify.com/CVE-2024-26732/): net: implement lockless setsockopt(SO_PEEK_OFF) (medium 5.5)
- [CVE-2024-26731](https://insights.sbomify.com/CVE-2024-26731/): bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready() (medium 5.3)
- [CVE-2024-26730](https://insights.sbomify.com/CVE-2024-26730/): hwmon: (nct6775) Fix access to temperature configuration registers (high 7.3)
- [CVE-2024-2673](https://insights.sbomify.com/CVE-2024-2673/): Campcodes Online Job Finder System login.php sql injection (medium 6.3)
- [CVE-2024-26729](https://insights.sbomify.com/CVE-2024-26729/): drm/amd/display: Fix potential null pointer dereference in dc_dmub_srv (medium 5.5)
- [CVE-2024-26728](https://insights.sbomify.com/CVE-2024-26728/): drm/amd/display: fix null-pointer dereference on edid reading (high 7.8)
- [CVE-2024-26727](https://insights.sbomify.com/CVE-2024-26727/): btrfs: do not ASSERT() if the newly created subvolume already got read (medium 5.5)
- [CVE-2024-26726](https://insights.sbomify.com/CVE-2024-26726/): btrfs: don't drop extent_map for free space inode on write error (medium 5.5)
- [CVE-2024-26725](https://insights.sbomify.com/CVE-2024-26725/): dpll: fix possible deadlock during netlink dump operation (medium 5.5)
- [CVE-2024-26724](https://insights.sbomify.com/CVE-2024-26724/): net/mlx5: DPLL, Fix possible use after free after delayed work timer triggers (high 7.8)
- [CVE-2024-26723](https://insights.sbomify.com/CVE-2024-26723/): lan966x: Fix crash when adding interface under a lag (high 7.8)
- [CVE-2024-26722](https://insights.sbomify.com/CVE-2024-26722/): ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() (medium 5.5)
- [CVE-2024-26721](https://insights.sbomify.com/CVE-2024-26721/): drm/i915/dsc: Fix the macro that calculates DSCC_/DSCA_ PPS reg address (medium 5.5)
- [CVE-2024-2672](https://insights.sbomify.com/CVE-2024-2672/): Campcodes Online Job Finder System controller.php sql injection (medium 6.3)
- [CVE-2024-26719](https://insights.sbomify.com/CVE-2024-26719/): nouveau: offload fence uevents work to workqueue (medium 5.5)
- [CVE-2024-26718](https://insights.sbomify.com/CVE-2024-26718/): dm-crypt, dm-verity: disable tasklets (high 7.8)
- [CVE-2024-26717](https://insights.sbomify.com/CVE-2024-26717/): HID: i2c-hid-of: fix NULL-deref on failed power up (medium 5.5)
- [CVE-2024-26716](https://insights.sbomify.com/CVE-2024-26716/): usb: core: Prevent null pointer dereference in update_port_device_state (medium 5.5)
- [CVE-2024-26715](https://insights.sbomify.com/CVE-2024-26715/): usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend (medium 5.5)
- [CVE-2024-26714](https://insights.sbomify.com/CVE-2024-26714/): interconnect: qcom: sc8180x: Mark CO0 BCM keepalive (medium 5.5)
- [CVE-2024-26712](https://insights.sbomify.com/CVE-2024-26712/): powerpc/kasan: Fix addr error caused by page alignment (high 7.8)
- [CVE-2024-26711](https://insights.sbomify.com/CVE-2024-26711/): iio: adc: ad4130: zero-initialize clock init data (medium 5.5)
- [CVE-2024-26710](https://insights.sbomify.com/CVE-2024-26710/): powerpc/kasan: Limit KASAN thread size increase to 32KB (medium 5.5)
- [CVE-2024-2671](https://insights.sbomify.com/CVE-2024-2671/): Campcodes Online Job Finder System index.php sql injection (medium 6.3)
- [CVE-2024-26709](https://insights.sbomify.com/CVE-2024-26709/): powerpc/iommu: Fix the missing iommu_group_put() during platform domain attach (medium 5.5)
- [CVE-2024-26708](https://insights.sbomify.com/CVE-2024-26708/): mptcp: really cope with fastopen race (medium 5.5)
- [CVE-2024-26707](https://insights.sbomify.com/CVE-2024-26707/): net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() (medium 5.5)
- [CVE-2024-26706](https://insights.sbomify.com/CVE-2024-26706/): parisc: Fix random data corruption from exception handler (high 7.8)
- [CVE-2024-26705](https://insights.sbomify.com/CVE-2024-26705/): parisc: BTLB: Fix crash when setting up BTLB at CPU bringup (medium 5.5)
- [CVE-2024-26704](https://insights.sbomify.com/CVE-2024-26704/): ext4: fix double-free of blocks due to wrong extents moved_len (high 7.8)
- [CVE-2024-26703](https://insights.sbomify.com/CVE-2024-26703/): tracing/timerlat: Move hrtimer_init to timerlat_fd open() (medium 5.5)
- [CVE-2024-26702](https://insights.sbomify.com/CVE-2024-26702/): iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC (medium 5.5)
- [CVE-2024-26700](https://insights.sbomify.com/CVE-2024-26700/): drm/amd/display: Fix MST Null Ptr for RV (medium 5.5)
- [CVE-2024-2670](https://insights.sbomify.com/CVE-2024-2670/): Campcodes Online Job Finder System index.php sql injection (medium 6.3)
- [CVE-2024-26699](https://insights.sbomify.com/CVE-2024-26699/): drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr (high 7.8)
- [CVE-2024-26698](https://insights.sbomify.com/CVE-2024-26698/): hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (medium 4.7)
- [CVE-2024-26697](https://insights.sbomify.com/CVE-2024-26697/): nilfs2: fix data corruption in dsync block recovery for small block sizes (high 7.8)
- [CVE-2024-26696](https://insights.sbomify.com/CVE-2024-26696/): nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (medium 5.5)
- [CVE-2024-26695](https://insights.sbomify.com/CVE-2024-26695/): crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked (medium 5.5)
- [CVE-2024-26694](https://insights.sbomify.com/CVE-2024-26694/): wifi: iwlwifi: fix double-free bug (high 7.8)
- [CVE-2024-26693](https://insights.sbomify.com/CVE-2024-26693/): wifi: iwlwifi: mvm: fix a crash when we run out of stations (medium 5.5)
- [CVE-2024-26692](https://insights.sbomify.com/CVE-2024-26692/): smb: Fix regression in writes when non-standard maximum write size negotiated (high 8.3)
- [CVE-2024-26691](https://insights.sbomify.com/CVE-2024-26691/): KVM: arm64: Fix circular locking dependency (medium 5.5)
- [CVE-2024-26690](https://insights.sbomify.com/CVE-2024-26690/): net: stmmac: protect updates of 64-bit statistics counters (high 7.5)
- [CVE-2024-2669](https://insights.sbomify.com/CVE-2024-2669/): Campcodes Online Job Finder System GET Parameter controller.php sql injection (medium 6.3)
- [CVE-2024-26689](https://insights.sbomify.com/CVE-2024-26689/): ceph: prevent use-after-free in encode_cap_msg() (high 8.8)
- [CVE-2024-26688](https://insights.sbomify.com/CVE-2024-26688/): fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (medium 5.5)
- [CVE-2024-26687](https://insights.sbomify.com/CVE-2024-26687/): xen/events: close evtchn after mapping cleanup (medium 5.5)
- [CVE-2024-26686](https://insights.sbomify.com/CVE-2024-26686/): fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (medium 5.5)
- [CVE-2024-26685](https://insights.sbomify.com/CVE-2024-26685/): nilfs2: fix potential bug in end_buffer_async_write (medium 5.5)
- [CVE-2024-26684](https://insights.sbomify.com/CVE-2024-26684/): net: stmmac: xgmac: fix handling of DPP safety error for DMA channels (medium 5.5)
- [CVE-2024-26683](https://insights.sbomify.com/CVE-2024-26683/): wifi: cfg80211: detect stuck ECSA element in probe resp (medium 5.5)
- [CVE-2024-26682](https://insights.sbomify.com/CVE-2024-26682/): wifi: mac80211: improve CSA/ECSA connection refusal (medium 5.5)
- [CVE-2024-26681](https://insights.sbomify.com/CVE-2024-26681/): netdevsim: avoid potential loop in nsim_dev_trap_report_work() (medium 5.5)
- [CVE-2024-26680](https://insights.sbomify.com/CVE-2024-26680/): net: atlantic: Fix DMA mapping for PTP hwts ring (medium 5.5)
- [CVE-2024-2668](https://insights.sbomify.com/CVE-2024-2668/): Campcodes Online Job Finder System controller.php sql injection (medium 6.3)
- [CVE-2024-26679](https://insights.sbomify.com/CVE-2024-26679/): inet: read sk->sk_family once in inet_recv_error() (medium 5.5)
- [CVE-2024-26678](https://insights.sbomify.com/CVE-2024-26678/): x86/efistub: Use 1:1 file:memory mapping for PE/COFF .compat section (medium 5.5)
- [CVE-2024-26677](https://insights.sbomify.com/CVE-2024-26677/): rxrpc: Fix delayed ACKs to not set the reference serial number (medium 5.5)
- [CVE-2024-26676](https://insights.sbomify.com/CVE-2024-26676/): af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. (medium 5.5)
- [CVE-2024-26675](https://insights.sbomify.com/CVE-2024-26675/): ppp_async: limit MRU to 64K (medium 5.5)
- [CVE-2024-26674](https://insights.sbomify.com/CVE-2024-26674/): x86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (high 7.1)
- [CVE-2024-26673](https://insights.sbomify.com/CVE-2024-26673/): netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (high 7.1)
- [CVE-2024-26672](https://insights.sbomify.com/CVE-2024-26672/): drm/amdgpu: Fix variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get_mca_entry()' (high 7.1)
- [CVE-2024-26671](https://insights.sbomify.com/CVE-2024-26671/): blk-mq: fix IO hang from sbitmap wakeup race (medium 4.7)
- [CVE-2024-26670](https://insights.sbomify.com/CVE-2024-26670/): arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD (medium 5.5)
- [CVE-2024-2667](https://insights.sbomify.com/CVE-2024-2667/): InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.22 - Unauthenticated Arbitrary File Upload (critical 9.8)
- [CVE-2024-26669](https://insights.sbomify.com/CVE-2024-26669/): net/sched: flower: Fix chain template offload (high 7.1)
- [CVE-2024-26668](https://insights.sbomify.com/CVE-2024-26668/): netfilter: nft_limit: reject configurations that cause integer overflow (medium 5.5)
- [CVE-2024-26667](https://insights.sbomify.com/CVE-2024-26667/): drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup (medium 5.5)
- [CVE-2024-26666](https://insights.sbomify.com/CVE-2024-26666/): wifi: mac80211: fix RCU use in TDLS fast-xmit (high 7.1)
- [CVE-2024-26665](https://insights.sbomify.com/CVE-2024-26665/): tunnels: fix out of bounds access when building IPv6 PMTU error (critical 9.1)
- [CVE-2024-26664](https://insights.sbomify.com/CVE-2024-26664/): hwmon: (coretemp) Fix out-of-bounds memory access (high 7.8)
- [CVE-2024-26663](https://insights.sbomify.com/CVE-2024-26663/): tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (high 7.8)
- [CVE-2024-26662](https://insights.sbomify.com/CVE-2024-26662/): drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()' (medium 5.5)
- [CVE-2024-26661](https://insights.sbomify.com/CVE-2024-26661/): drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()' (medium 5.5)
- [CVE-2024-26660](https://insights.sbomify.com/CVE-2024-26660/): drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (high 7.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/413/