Browse CVEs

HIGH 7.8 CVE-2024-41069 In the Linux kernel, the following vulnerability has been resolved: ASoC: topology: Fix references to freed memory Most users after parsing a topol… Linux Kernel 6.1.101 / 6.6.42+ Fix from $1,9502024-07-29 HIGH 7.8 CVE-2024-41070 In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() Al repor… Linux Kernel 5.4.281 / 5.10.223+ Fix from $1,9502024-07-29 HIGH 7.0 CVE-2024-41049 In the Linux kernel, the following vulnerability has been resolved: filelock: fix potential use-after-free in posix_lock_inode Light Hsieh reported… Linux Kernel 5.4.280 / 5.10.222+ Fix from $1,9502024-07-29 HIGH 7.8 CVE-2024-41050 In the Linux kernel, the following vulnerability has been resolved: cachefiles: cyclic allocation of msg_id to avoid reuse Reusing the msg_id after… Linux Kernel 6.1.100 / 6.6.41+ Fix from $1,9502024-07-29 HIGH 7.8 CVE-2024-41051 In the Linux kernel, the following vulnerability has been resolved: cachefiles: wait for ondemand_object_worker to finish when dropping object When… Linux Kernel 6.1.100 / 6.6.41+ Fix from $1,9502024-07-29 HIGH 7.0 CVE-2024-41057 In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() We got the … Linux Kernel 6.1.101 / 6.6.42+ Fix from $1,9502024-07-29 HIGH 7.8 CVE-2024-41058 In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in fscache_withdraw_volume() We got the fol… Linux Kernel 6.1.101 / 6.6.42+ Fix from $1,9502024-07-29 HIGH 7.0 CVE-2024-41040 In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix UAF when resolving a clash KASAN reports the following UAF: BU… Linux Kernel 5.10.222 / 5.13+ Fix from $1,9502024-07-29 HIGH 7.8 CVE-2024-41045 In the Linux kernel, the following vulnerability has been resolved: bpf: Defer work in bpf_timer_cancel_and_free Currently, the same case as previo… Linux Kernel 6.9.10+ Fix from $1,9502024-07-29 HIGH 7.1 CVE-2024-39672 Memory request logic vulnerability in the memory module. Impact: Successful exploitation of this vulnerability will affect integrity and availability. Emui No fix yet Fix from $1,9502024-07-25 MEDIUM 6.3 CVE-2024-41012 In the Linux kernel, the following vulnerability has been resolved: filelock: Remove locks reliably when fcntl/close race is detected When fcntl_se… Linux Kernel 4.19.319 / 5.4.281+ Fix from $1,6002024-07-23 MEDIUM 5.5 CVE-2024-41010 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix too early release of tcx_entry Pedro Pinto and later independently als… Linux Kernel 6.6.41 / 6.9.10+ Fix from $1,6002024-07-17 HIGH 8.8 CVE-2024-3168 Use after free in DevTools in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 122.0.6261.57+ Fix from $1,9502024-07-16 HIGH 8.8 CVE-2024-3169 Use after free in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 121.0.6167.139+ Fix from $1,9502024-07-16 HIGH 8.8 CVE-2024-3170 Use after free in WebRTC in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 121.0.6167.85+ Fix from $1,9502024-07-16 HIGH 8.8 CVE-2024-3171 Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who convinced a user to engage in specific UI gestu… Chrome 122.0.6261.57+ Fix from $1,9502024-07-16 HIGH 8.8 CVE-2023-7010 Use after free in WebRTC in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 117.0.5938.62+ Fix from $1,9502024-07-16 HIGH 8.8 CVE-2024-6775 Use after free in Media Stream in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI gestu… Chrome 126.0.6478.182+ Fix from $1,9502024-07-16 HIGH 8.8 CVE-2024-6776 Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 126.0.6478.182+ Fix from $1,9502024-07-16 MEDIUM 6.5 CVE-2024-6777 Use after free in Navigation in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to po… Chrome 126.0.6478.182+ Fix from $1,6002024-07-16 HIGH 8.8 CVE-2024-6774 Use after free in Screen Capture in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI ges… Chrome 126.0.6478.182+ Fix from $1,9502024-07-16 MEDIUM 5.5 CVE-2022-48861 In the Linux kernel, the following vulnerability has been resolved: vdpa: fix use-after-free on vp_vdpa_remove When vp_vdpa driver is unbind, vp_vd… Linux Kernel 5.15.29 / 5.16.15+ Fix from $1,6002024-07-16 HIGH 7.8 CVE-2022-48851 In the Linux kernel, the following vulnerability has been resolved: staging: gdm724x: fix use after free in gdm_lte_rx() The netif_rx_ni() function… Linux Kernel 4.9.307 / 4.14.272+ Fix from $1,9502024-07-16 HIGH 7.8 CVE-2022-48854 In the Linux kernel, the following vulnerability has been resolved: net: arc_emac: Fix use after free in arc_mdio_probe() If bus->state is equal to… Linux Kernel 5.16.15+ Fix from $1,9502024-07-16 MEDIUM 5.5 CVE-2022-48857 In the Linux kernel, the following vulnerability has been resolved: NFC: port100: fix use-after-free in port100_send_complete Syzbot reported UAF i… Linux Kernel 4.9.307 / 4.14.272+ Fix from $1,6002024-07-16 HIGH 7.0 CVE-2022-48858 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix a race on command flush flow Fix a refcount use after free warnin… Linux Kernel 5.4.185 / 5.10.106+ Fix from $1,9502024-07-16 MEDIUM 5.5 CVE-2022-48838 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: Fix use-after-free bug by not setting udc->dev.driver The syzbot f… Linux Kernel 4.9.308 / 4.14.273+ Fix from $1,6002024-07-16 MEDIUM 5.5 CVE-2022-48844 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix leaking sent_cmd skb sent_cmd memory is not freed befo… Linux Kernel 5.15.30 / 5.16.16+ Fix from $1,6002024-07-16 HIGH 7.8 CVE-2022-48821 In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: avoid double fput() on failed usercopy If the copy back to userl… Linux Kernel 5.4.180 / 5.10.101+ Fix from $1,9502024-07-16 HIGH 7.8 CVE-2022-48822 In the Linux kernel, the following vulnerability has been resolved: usb: f_fs: Fix use-after-free for epfile Consider a case where ffs_func_eps_dis… Linux Kernel 4.14.267 / 4.19.230+ Fix from $1,9502024-07-16