Browse CVEs

MEDIUM 5.5 CVE-2021-46988 In the Linux kernel, the following vulnerability has been resolved: userfaultfd: release page in error path to avoid BUG_ON Consider the following … Linux Kernel 4.14.233 / 4.19.191+ Fix from $1,6002024-02-28 HIGH 7.8 CVE-2021-46991 In the Linux kernel, the following vulnerability has been resolved: i40e: Fix use-after-free in i40e_client_subtask() Currently the call to i40e_cl… Linux Kernel 4.19.191 / 5.4.120+ Fix from $1,9502024-02-28 HIGH 7.8 CVE-2020-36785 In the Linux kernel, the following vulnerability has been resolved: media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs() The "s3a_bu… Linux Kernel 5.10.37 / 5.11.21+ Fix from $1,9502024-02-28 HIGH 7.8 CVE-2021-46966 In the Linux kernel, the following vulnerability has been resolved: ACPI: custom_method: fix potential use-after-free issue In cm_write(), buf is a… Linux Kernel 4.4.269 / 4.9.269+ Fix from $1,9502024-02-27 HIGH 7.8 CVE-2021-46969 In the Linux kernel, the following vulnerability has been resolved: bus: mhi: core: Fix invalid error returning in mhi_queue mhi_queue returns an e… Linux Kernel 5.12.3+ Fix from $1,9502024-02-27 HIGH 7.8 CVE-2021-46973 In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Avoid potential use after free in MHI send It is possible that the M… Linux Kernel after 5.12.2 Fix from $1,9502024-02-27 HIGH 7.8 CVE-2021-46936 In the Linux kernel, the following vulnerability has been resolved: net: fix use-after-free in tw_timer_handler A real world panic issue was found … Linux Kernel 4.4.298 / 4.9.296+ Fix from $1,9502024-02-27 MEDIUM 5.5 CVE-2021-46929 In the Linux kernel, the following vulnerability has been resolved: sctp: use call_rcu to free endpoint This patch is to delay the endpoint free by… Linux Kernel 4.14.261 / 4.19.224+ Fix from $1,6002024-02-27 MEDIUM 5.5 CVE-2021-46930 In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: fix list_head check warning This is caused by uninitialization of li… Linux Kernel 5.4.170 / 5.10.90+ Fix from $1,6002024-02-27 MEDIUM 5.5 CVE-2021-46933 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. ffs_data_clear is indir… Linux Kernel 4.4.298 / 4.9.296+ Fix from $1,6002024-02-27 HIGH 7.8 CVE-2019-25162 In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure only after we are d… Linux Kernel 4.14.291 / 4.19.256+ Fix from $1,9502024-02-26 HIGH 7.5 CVE-2024-26455 fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia/calyptia.c. Fluent Bit No fix yet Fix from $1,9502024-02-26 MEDIUM 6.5 CVE-2024-25767 nanomq 0.21.2 contains a Use-After-Free vulnerability in /nanomq/nng/src/core/socket.c. Nanomq No fix yet Fix from $1,6002024-02-26 MEDIUM 5.5 CVE-2024-25763 openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c. Opennds No fix yet Fix from $1,6002024-02-26 HIGH 8.1 CVE-2024-23839 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, specially craf… Fedora 7.0.3+ Fix from $1,9502024-02-26 HIGH 7.8 CVE-2023-52468 In the Linux kernel, the following vulnerability has been resolved: class: fix use-after-free in class_register() The lock_class_key is still regis… Linux Kernel 6.6.14 / 6.7.2+ Fix from $1,9502024-02-26 HIGH 7.8 CVE-2023-52469 In the Linux kernel, the following vulnerability has been resolved: drivers/amd/pm: fix a use-after-free in kv_parse_power_table When ps allocated … Linux Kernel 4.19.306 / 5.4.268+ Fix from $1,9502024-02-26 HIGH 7.8 CVE-2022-48626 In the Linux kernel, the following vulnerability has been resolved: moxart: fix potential use-after-free on remove path It was reported that the mm… Linux Kernel 4.9.301 / 4.14.266+ Fix from $1,9502024-02-26 HIGH 7.8 CVE-2024-26598 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache There is a p… Linux Kernel 5.4.269 / 5.10.209+ Fix from $1,9502024-02-23 HIGH 7.8 CVE-2023-52457 In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() f… Linux Kernel 5.4.268 / 5.10.209+ Fix from $1,9502024-02-23 MEDIUM 6.2 CVE-2024-25385 An issue in flvmeta v.1.2.2 allows a local attacker to cause a denial of service via the flvmeta/src/flv.c:375:21 function in flv_close. Flvmeta No fix yet Fix from $1,6002024-02-22 HIGH 7.8 CVE-2024-26592 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF issue in ksmbd_tcp_new_connection() The race is between the hand… Linux Kernel 5.15.149 / 6.1.75+ Fix from $1,9502024-02-22 HIGH 7.8 CVE-2023-52445 In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a… Linux Kernel 4.19.306 / 5.4.268+ Fix from $1,9502024-02-22 HIGH 7.8 CVE-2023-52446 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a race condition between btf_put() and map_free() When running `./test… Linux Kernel 6.6.14 / 6.7.2+ Fix from $1,9502024-02-22 MEDIUM 6.7 CVE-2023-52447 In the Linux kernel, the following vulnerability has been resolved: bpf: Defer the free of inner map when necessary When updating or deleting an in… Linux Kernel 5.10.214 / 5.15.153+ Fix from $1,6002024-02-22 HIGH 7.8 CVE-2024-23134 A maliciously crafted IGS file in tbb.dll when parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. This vulnerability, alon… Autocad 2021.1.4 / 2022.1.4+ Fix from $1,9502024-02-22 HIGH 7.8 CVE-2024-23135 A maliciously crafted SLDPRT file in ASMkern228A.dll when parsed through Autodesk applications can be used in user-after-free vulnerability. This vul… Autocad 2021.1.4 / 2022.1.4+ Fix from $1,9502024-02-22 HIGH 7.8 CVE-2024-26582 In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tls_decrypt_s… Linux Kernel 6.1.79 / 6.6.18+ Fix from $1,9502024-02-21 HIGH 8.8 CVE-2024-1670EPSS 9% Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 122.0.6261.57+ Fix from $1,9502024-02-21 HIGH 8.8 CVE-2024-1673 Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potenti… Chrome 122.0.6261.57+ Fix from $1,9502024-02-21