# Vulnerabilities published in 2024


- [CVE-2024-2666](https://insights.sbomify.com/CVE-2024-2666/): Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (medium 5.4)
- [CVE-2024-26659](https://insights.sbomify.com/CVE-2024-26659/): xhci: handle isoc Babble and Buffer Overrun events properly (high 7.8)
- [CVE-2024-26658](https://insights.sbomify.com/CVE-2024-26658/): bcachefs: grab s_umount only if snapshotting (medium 5.5)
- [CVE-2024-26657](https://insights.sbomify.com/CVE-2024-26657/): drm/sched: fix null-ptr-deref in init entity (medium 5.5)
- [CVE-2024-26656](https://insights.sbomify.com/CVE-2024-26656/): drm/amdgpu: fix use-after-free bug (high 7.8)
- [CVE-2024-26655](https://insights.sbomify.com/CVE-2024-26655/): Fix memory leak in posix_clock_open() (medium 5.5)
- [CVE-2024-26654](https://insights.sbomify.com/CVE-2024-26654/): ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (high 7.8)
- [CVE-2024-26653](https://insights.sbomify.com/CVE-2024-26653/): usb: misc: ljca: Fix double free in error handling path (high 7.8)
- [CVE-2024-26652](https://insights.sbomify.com/CVE-2024-26652/): net: pds_core: Fix possible double free in error handling path (medium 4.1)
- [CVE-2024-26651](https://insights.sbomify.com/CVE-2024-26651/): sr9800: Add check for usbnet_get_endpoints (medium 5.5)
- [CVE-2024-2665](https://insights.sbomify.com/CVE-2024-2665/): Premium Addons for Elementor <= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button (medium 6.4)
- [CVE-2024-26649](https://insights.sbomify.com/CVE-2024-26649/): drm/amdgpu: Fix the null pointer when load rlc firmware (medium 5.5)
- [CVE-2024-26648](https://insights.sbomify.com/CVE-2024-26648/): drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay() (medium 5.5)
- [CVE-2024-26647](https://insights.sbomify.com/CVE-2024-26647/): drm/amd/display: Fix late derefrence 'dsc' check in 'link_set_dsc_pps_packet()' (medium 5.5)
- [CVE-2024-26646](https://insights.sbomify.com/CVE-2024-26646/): thermal: intel: hfi: Add syscore callbacks for system-wide PM (high 7.8)
- [CVE-2024-26645](https://insights.sbomify.com/CVE-2024-26645/): tracing: Ensure visibility when inserting an element into tracing_map (medium 5.5)
- [CVE-2024-26644](https://insights.sbomify.com/CVE-2024-26644/): btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (medium 5.5)
- [CVE-2024-26643](https://insights.sbomify.com/CVE-2024-26643/): netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (high 7.8)
- [CVE-2024-26642](https://insights.sbomify.com/CVE-2024-26642/): netfilter: nf_tables: disallow anonymous set with timeout flag (high 7.8)
- [CVE-2024-26641](https://insights.sbomify.com/CVE-2024-26641/): ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (high 8.6)
- [CVE-2024-26640](https://insights.sbomify.com/CVE-2024-26640/): tcp: add sanity checks to rx zerocopy (high 7.8)
- [CVE-2024-2664](https://insights.sbomify.com/CVE-2024-2664/): Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site Scripting (medium 6.4)
- [CVE-2024-26638](https://insights.sbomify.com/CVE-2024-26638/): nbd: always initialize struct msghdr completely (medium 4.4)
- [CVE-2024-26637](https://insights.sbomify.com/CVE-2024-26637/): wifi: ath11k: rely on mac80211 debugfs handling for vif (high 7.8)
- [CVE-2024-26636](https://insights.sbomify.com/CVE-2024-26636/): llc: make llc_ui_sendmsg() more robust against bonding changes (medium 5.5)
- [CVE-2024-26635](https://insights.sbomify.com/CVE-2024-26635/): llc: Drop support for ETH_P_TR_802_2. (medium 5.5)
- [CVE-2024-26634](https://insights.sbomify.com/CVE-2024-26634/): net: fix removing a namespace with conflicting altnames (medium 5.5)
- [CVE-2024-26633](https://insights.sbomify.com/CVE-2024-26633/): ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (medium 5.5)
- [CVE-2024-26632](https://insights.sbomify.com/CVE-2024-26632/): block: Fix iterating over an empty bio with bio_for_each_folio_all (high 7.8)
- [CVE-2024-26631](https://insights.sbomify.com/CVE-2024-26631/): ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work (high 7.8)
- [CVE-2024-26630](https://insights.sbomify.com/CVE-2024-26630/): mm: cachestat: fix folio read-after-free in cache walk (high 7.1)
- [CVE-2024-2663](https://insights.sbomify.com/CVE-2024-2663/): ZD YouTube FLV Player <= 1.2.6 - Server-Side Request Forgery (high 8.3)
- [CVE-2024-26629](https://insights.sbomify.com/CVE-2024-26629/): nfsd: fix RELEASE_LOCKOWNER (medium 5.5)
- [CVE-2024-26627](https://insights.sbomify.com/CVE-2024-26627/): scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (medium 5.5)
- [CVE-2024-26626](https://insights.sbomify.com/CVE-2024-26626/): ipmr: fix kernel panic when forwarding mcast packets (high 7.5)
- [CVE-2024-26625](https://insights.sbomify.com/CVE-2024-26625/): llc: call sock_orphan() at release time (high 7.8)
- [CVE-2024-26623](https://insights.sbomify.com/CVE-2024-26623/): pds_core: Prevent race issues involving the adminq (high 7.8)
- [CVE-2024-26622](https://insights.sbomify.com/CVE-2024-26622/): tomoyo: fix UAF write bug in tomoyo_write_control() (high 7.8)
- [CVE-2024-26621](https://insights.sbomify.com/CVE-2024-26621/): mm: huge_memory: don't force huge page alignment on 32 bit (high 8.2)
- [CVE-2024-26620](https://insights.sbomify.com/CVE-2024-26620/): s390/vfio-ap: always filter entire AP matrix (high 8.2)
- [CVE-2024-2662](https://insights.sbomify.com/CVE-2024-2662/): Command injection in Unlimited Elements For Elementor (high 7.2)
- [CVE-2024-26619](https://insights.sbomify.com/CVE-2024-26619/): riscv: Fix module loading free order (high 7.8)
- [CVE-2024-26618](https://insights.sbomify.com/CVE-2024-26618/): arm64/sme: Always exit sme_alloc() early with existing storage (medium 5.5)
- [CVE-2024-26617](https://insights.sbomify.com/CVE-2024-26617/): fs/proc/task_mmu: move mmu notification mechanism inside mm lock (high 7.8)
- [CVE-2024-26616](https://insights.sbomify.com/CVE-2024-26616/): btrfs: scrub: avoid use-after-free when chunk length is not 64K aligned (high 7.8)
- [CVE-2024-26615](https://insights.sbomify.com/CVE-2024-26615/): net/smc: fix illegal rmb_desc access in SMC-D connection dump (medium 5.5)
- [CVE-2024-26614](https://insights.sbomify.com/CVE-2024-26614/): tcp: make sure init the accept_queue's spinlocks once (high 7.8)
- [CVE-2024-26612](https://insights.sbomify.com/CVE-2024-26612/): netfs, fscache: Prevent Oops in fscache_put_cache() (medium 5.5)
- [CVE-2024-26611](https://insights.sbomify.com/CVE-2024-26611/): xsk: fix usage of multi-buffer BPF helpers for ZC XDP (high 7.5)
- [CVE-2024-26610](https://insights.sbomify.com/CVE-2024-26610/): wifi: iwlwifi: fix a memory corruption (high 7.8)
- [CVE-2024-2661](https://insights.sbomify.com/CVE-2024-2661/): Barcode Scanner with Inventory & Order Manager <= 1.5.4 - Authenticated (Subscriber+) SQL Injection (high 8.8)
- [CVE-2024-26608](https://insights.sbomify.com/CVE-2024-26608/): ksmbd: fix global oob in ksmbd_nl_policy (high 7.8)
- [CVE-2024-26607](https://insights.sbomify.com/CVE-2024-26607/): drm/bridge: sii902x: Fix probing race issue (medium 4.7)
- [CVE-2024-26606](https://insights.sbomify.com/CVE-2024-26606/): binder: signal epoll threads of self-work (medium 5.5)
- [CVE-2024-26605](https://insights.sbomify.com/CVE-2024-26605/): PCI/ASPM: Fix deadlock when enabling ASPM (medium 5.5)
- [CVE-2024-26604](https://insights.sbomify.com/CVE-2024-26604/): Revert "kobject: Remove redundant checks for whether ktype is NULL" (medium 5.5)
- [CVE-2024-26603](https://insights.sbomify.com/CVE-2024-26603/): x86/fpu: Stop relying on userspace for info to fault in xsave buffer (medium 5.5)
- [CVE-2024-26602](https://insights.sbomify.com/CVE-2024-26602/): sched/membarrier: reduce the ability to hammer on sys_membarrier (medium 5.5)
- [CVE-2024-26601](https://insights.sbomify.com/CVE-2024-26601/): ext4: regenerate buddy after block freeing failed if under fc replay (high 7.8)
- [CVE-2024-26600](https://insights.sbomify.com/CVE-2024-26600/): phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (medium 5.5)
- [CVE-2024-2660](https://insights.sbomify.com/CVE-2024-2660/): Vault TLS Cert Auth Method Did Not Correctly Validate OCSP Responses (medium 6.4)
- [CVE-2024-26599](https://insights.sbomify.com/CVE-2024-26599/): pwm: Fix out-of-bounds access in of_pwm_single_xlate() (high 7.8)
- [CVE-2024-26598](https://insights.sbomify.com/CVE-2024-26598/): KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (high 8.8)
- [CVE-2024-26597](https://insights.sbomify.com/CVE-2024-26597/): net: qualcomm: rmnet: fix global oob in rmnet_policy (high 7.8)
- [CVE-2024-26596](https://insights.sbomify.com/CVE-2024-26596/): net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (medium 5.5)
- [CVE-2024-26595](https://insights.sbomify.com/CVE-2024-26595/): mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (medium 5.5)
- [CVE-2024-26594](https://insights.sbomify.com/CVE-2024-26594/): ksmbd: validate mech token in session setup (critical 9.1)
- [CVE-2024-26593](https://insights.sbomify.com/CVE-2024-26593/): i2c: i801: Fix block process call transactions (high 7.1)
- [CVE-2024-26592](https://insights.sbomify.com/CVE-2024-26592/): ksmbd: fix UAF issue in ksmbd_tcp_new_connection() (critical 9.8)
- [CVE-2024-26591](https://insights.sbomify.com/CVE-2024-26591/): bpf: Fix re-attachment branch in bpf_tracing_prog_attach (medium 5.5)
- [CVE-2024-26590](https://insights.sbomify.com/CVE-2024-26590/): erofs: fix inconsistent per-file compression format (medium 5.5)
- [CVE-2024-2659](https://insights.sbomify.com/CVE-2024-2659/): Command injection in SMM, SMM2, FPC (high 7.2)
- [CVE-2024-26589](https://insights.sbomify.com/CVE-2024-26589/): bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (high 7.8)
- [CVE-2024-26588](https://insights.sbomify.com/CVE-2024-26588/): LoongArch: BPF: Prevent out-of-bounds memory access (high 7.8)
- [CVE-2024-26587](https://insights.sbomify.com/CVE-2024-26587/): net: netdevsim: don't try to destroy PHC on VFs (medium 5.5)
- [CVE-2024-26586](https://insights.sbomify.com/CVE-2024-26586/): mlxsw: spectrum_acl_tcam: Fix stack corruption (high 7.8)
- [CVE-2024-26585](https://insights.sbomify.com/CVE-2024-26585/): tls: fix race between tx work scheduling and socket close (critical 9.8)
- [CVE-2024-26584](https://insights.sbomify.com/CVE-2024-26584/): net: tls: handle backlogging of crypto requests (critical 9.8)
- [CVE-2024-26583](https://insights.sbomify.com/CVE-2024-26583/): tls: fix race between async notify and socket close (critical 9.8)
- [CVE-2024-26582](https://insights.sbomify.com/CVE-2024-26582/): net: tls: fix use-after-free with partial reads and async decrypt (critical 9.8)
- [CVE-2024-26581](https://insights.sbomify.com/CVE-2024-26581/): netfilter: nft_set_rbtree: skip end interval element from gc (high 7.8)
- [CVE-2024-26580](https://insights.sbomify.com/CVE-2024-26580/): Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability (critical 9.1)
- [CVE-2024-2658](https://insights.sbomify.com/CVE-2024-2658/): Local privilege escalation in FlexNet Publisher (high 8.5)
- [CVE-2024-26579](https://insights.sbomify.com/CVE-2024-26579/): Apache Inlong JDBC Vulnerability (critical 9.8)
- [CVE-2024-26578](https://insights.sbomify.com/CVE-2024-26578/): Apache Answer: Repeated submission at registration created duplicate users with the same name (medium 5.9)
- [CVE-2024-26577](https://insights.sbomify.com/CVE-2024-26577/): VSeeFace through 1.13.38.c2 allows attackers to cause a denial of service (application hang) via a spoofed UDP packet containing at least 10 digits in JSON data. (high 7.5)
- [CVE-2024-26574](https://insights.sbomify.com/CVE-2024-26574/): Misconfiguration in wondershare:filmora (high 7.8)
- [CVE-2024-2657](https://insights.sbomify.com/CVE-2024-2657/): Font Farsi <= 1.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting (medium 4.4)
- [CVE-2024-26566](https://insights.sbomify.com/CVE-2024-26566/): Auth bypass in iscute:cute http file server (high 8.2)
- [CVE-2024-2656](https://insights.sbomify.com/CVE-2024-2656/): Icegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV import (medium 4.4)
- [CVE-2024-26559](https://insights.sbomify.com/CVE-2024-26559/): Information disclosure in dagg:uverif (medium 5.3)
- [CVE-2024-26557](https://insights.sbomify.com/CVE-2024-26557/): Cross-site scripting in codiad:codiad (medium 5.4)
- [CVE-2024-2655](https://insights.sbomify.com/CVE-2024-2655/): Elementor Addons by Livemesh <= 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name (medium 6.4)
- [CVE-2024-26548](https://insights.sbomify.com/CVE-2024-26548/): File upload in vivotek:camera firmware (critical 9.8)
- [CVE-2024-26542](https://insights.sbomify.com/CVE-2024-26542/): Cross-site scripting in bonitasoft:bonita web (medium 6.1)
- [CVE-2024-26540](https://insights.sbomify.com/CVE-2024-26540/): Memory corruption in cimg:cimg (high 7.8)
- [CVE-2024-2654](https://insights.sbomify.com/CVE-2024-2654/): File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal (medium 6.8)
- [CVE-2024-2653](https://insights.sbomify.com/CVE-2024-2653/): CVE-2024-2653 (high 8.2)
- [CVE-2024-26529](https://insights.sbomify.com/CVE-2024-26529/): Denial of service in mz-automation:libiec61850 (high 7.5)
- [CVE-2024-26521](https://insights.sbomify.com/CVE-2024-26521/): HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to execute arbitrary code, escalate privileges, and (medium 4.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/414/