Browse CVEs

HIGH 7.8 CVE-2024-26996 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error … Linux Kernel 5.15.157 / 6.1.88+ Fix from $1,9502024-05-01 HIGH 7.8 CVE-2024-26983 In the Linux kernel, the following vulnerability has been resolved: bootconfig: use memblock_free_late to free xbc memory to buddy On the time to f… Linux Kernel 6.1.88 / 6.6.29+ Fix from $1,9502024-05-01 HIGH 7.0 CVE-2024-26974 In the Linux kernel, the following vulnerability has been resolved: crypto: qat - resolve race condition during AER recovery During the PCI AER sys… Linux Kernel 4.19.312 / 5.4.274+ Fix from $1,9502024-05-01 HIGH 7.8 CVE-2024-26958 In the Linux kernel, the following vulnerability has been resolved: nfs: fix UAF in direct writes In production we have been hitting the following … Linux Kernel 5.10.215 / 5.15.154+ Fix from $1,9502024-05-01 HIGH 7.8 CVE-2024-26961 In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154… Linux Kernel 5.10.215 / 5.15.154+ Fix from $1,9502024-05-01 HIGH 7.8 CVE-2024-26951 In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: check for dangling peer via is_dead instead of empty list I… Linux Kernel 5.10.215 / 5.15.154+ Fix from $1,9502024-05-01 HIGH 7.8 CVE-2024-26957 In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects Tests with hot-plugg… Linux Kernel 4.19.312 / 5.4.274+ Fix from $1,9502024-05-01 HIGH 7.8 CVE-2024-26944 In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after-free in do_zone_finish() Shinichiro reported the fo… Linux Kernel 6.8.3+ Fix from $1,9502024-05-01 HIGH 7.0 CVE-2024-26939 In the Linux kernel, the following vulnerability has been resolved: drm/i915/vma: Fix UAF on destroy against retire race Object debugging tools wer… Linux Kernel 6.1.88 / 6.6.29+ Fix from $1,9502024-05-01 HIGH 8.8 CVE-2024-25648EPSS 16% A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially crafted JavaScript code inside a … Pdf Editor after 2023.3.0.63083 Fix from $1,9502024-04-30 HIGH 8.8 CVE-2024-25938EPSS 16% A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. A specially crafted JavaScript code inside a m… Pdf Editor after 2023.3.0.23028 Fix from $1,9502024-04-30 CRITICAL 9.8 CVE-2022-48666 In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a use-after-free There are two .exit_cmd_priv implementations. … Linux Kernel 5.19.12+ Fix from $2,3002024-04-28 HIGH 7.8 CVE-2022-48649 In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix possible double free of kmem_cache When doing slub_debug te… Linux Kernel 5.19.12+ Fix from $1,9502024-04-28 HIGH 7.8 CVE-2022-48637 In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading the timesta… Linux Kernel 5.15.71 / 5.19.12+ Fix from $1,9502024-04-28 HIGH 7.8 CVE-2024-26928 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_debug_files_proc_show() Skip sessions th… Debian Linux 5.10.237 / 5.15.180+ Fix from $1,9502024-04-28 MEDIUM 6.8 CVE-2024-0671 Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm … 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,6002024-04-19 MEDIUM 5.9 CVE-2024-1065 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Dri… 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,6002024-04-19 HIGH 8.8 CVE-2024-27975 An Use-after-free vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute ar… Avalanche 6.4.3.528+ Fix from $1,9502024-04-19 HIGH 7.8 CVE-2024-31583 Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp. Pytorch 2.2.0+ Fix from $1,9502024-04-17 MEDIUM 6.5 CVE-2024-3914 Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 124.0.6367.60+ Fix from $1,6002024-04-17 HIGH 7.5 CVE-2024-31578 FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function. Fedora 7.0+ Fix from $1,9502024-04-17 HIGH 7.8 CVE-2024-26907 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix fortify source warning while accessing Eth segment ------------… Linux Kernel 5.10.214 / 5.15.153+ Fix from $1,9502024-04-17 MEDIUM 5.5 CVE-2024-26909 In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free A recent DRM serie… Linux Kernel 6.6.23 / 6.7.11+ Fix from $1,6002024-04-17 MEDIUM 6.5 CVE-2024-26886 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: af_bluetooth: Fix deadlock Attemting to do sock_lock on .recvmsg may… Linux Kernel 5.11 / 5.16+ Fix from $1,6002024-04-17 HIGH 7.8 CVE-2024-26892 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix use-after-free in free_irq() From commit a304e1b82808 … Linux Kernel 6.3 / 6.6.23+ Fix from $1,9502024-04-17 HIGH 7.8 CVE-2024-26895 In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces w… Linux Kernel 5.10.214 / 5.15.153+ Fix from $1,9502024-04-17 HIGH 7.8 CVE-2024-26898 In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts This patch is … Linux Kernel 4.19.311 / 5.4.273+ Fix from $1,9502024-04-17 HIGH 7.8 CVE-2024-26865 In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsk_timer_handler(). syzkaller reporte… Linux Kernel 6.1.83 / 6.6.23+ Fix from $1,9502024-04-17 MEDIUM 5.5 CVE-2024-26866 In the Linux kernel, the following vulnerability has been resolved: spi: lpspi: Avoid potential use-after-free in probe() fsl_lpspi_probe() is allo… Linux Kernel 6.6.23 / 6.7.11+ Fix from $1,6002024-04-17 HIGH 7.0 CVE-2024-26872 In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Do not register event handler until srpt device is fully setup Upon … Linux Kernel 5.10.214 / 5.15.153+ Fix from $1,9502024-04-17