Browse CVEs

MEDIUM 5.5 CVE-2024-54030 in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through use after free. Openharmony after 4.1.2 Fix from $1,6002025-01-07 CRITICAL 9.8 CVE-2024-46981EPSS 8% Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the gar… Redis 6.2.17 / 7.2.7+ Fix from $2,3002025-01-06 HIGH 7.8 CVE-2024-56764 In the Linux kernel, the following vulnerability has been resolved: ublk: detach gendisk from ublk device if add_disk() fails Inside ublk_abort_req… Linux Kernel 6.12.8+ Fix from $1,9502025-01-06 HIGH 7.8 CVE-2024-56765 In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/vas: Add close() callback in vas_vm_ops struct The mapping VMA … Linux Kernel 6.1.123 / 6.6.69+ Fix from $1,9502025-01-06 HIGH 7.8 CVE-2024-56759 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when COWing tree bock and tracing is enabled When a C… Linux Kernel 6.12.8+ Fix from $1,9502025-01-06 HIGH 7.8 CVE-2024-45553 Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is… Ar8035 Firmware Patch available Fix from $1,9502025-01-06 HIGH 7.8 CVE-2024-33055 Memory corruption while invoking IOCTL calls to unmap the DMA buffers. Fastconnect 6900 Firmware Patch available Fix from $1,9502025-01-06 HIGH 7.8 CVE-2024-33059 Memory corruption while processing frame command IOCTL calls. Fastconnect 6900 Firmware Patch available Fix from $1,9502025-01-06 HIGH 7.8 CVE-2024-56693 In the Linux kernel, the following vulnerability has been resolved: brd: defer automatic disk creation until module initialization succeeds My coll… Linux Kernel 5.15.174 / 6.1.120+ Fix from $1,9502024-12-28 HIGH 7.8 CVE-2024-56678 In the Linux kernel, the following vulnerability has been resolved: powerpc/mm/fault: Fix kfence page fault reporting copy_from_kernel_nofault() ca… Linux Kernel 5.15.174 / 6.1.120+ Fix from $1,9502024-12-28 HIGH 7.8 CVE-2024-46973 Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. Mitigation only Fix from $1,9502024-12-28 HIGH 7.0 CVE-2024-56672 In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix UAF in blkcg_unpin_online() blkcg_unpin_online() walks up the b… Linux Kernel 6.1.121 / 6.6.67+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-56675 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors Uprobes always use… Linux Kernel 6.1.121 / 6.6.67+ Fix from $1,9502024-12-27 HIGH 7.0 CVE-2024-56664 In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close() Element replace (wit… Linux Kernel 6.6.67 / 6.12.6+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-56669 In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove cache tags before disabling ATS The current implementation r… Linux Kernel 6.12.6+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-56652 In the Linux kernel, the following vulnerability has been resolved: drm/xe/reg_sr: Remove register pool That pool implementation doesn't really wor… Linux Kernel 6.12.6+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-56653 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: avoid UAF in btmtk_process_coredump hci_devcd_append may lead… Linux Kernel 6.6.67 / 6.12.6+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-56658 In the Linux kernel, the following vulnerability has been resolved: net: defer final 'struct net' free in netns dismantle Ilya reported a slab-use-… Linux Kernel 3.13 / 3.19+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-56651 In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110_can_ist(): fix potential use-after-free The commit a22bd630… Linux Kernel 4.15 / 4.20+ Fix from $1,9502024-12-27 HIGH 7.0 CVE-2024-56635 In the Linux kernel, the following vulnerability has been resolved: net: avoid potential UAF in default_operstate() syzbot reported an UAF in defau… Linux Kernel 6.6.66 / 6.12.5+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-56640 In the Linux kernel, the following vulnerability has been resolved: net/smc: fix LGR and link use-after-free issue We encountered a LGR/link use-af… Linux Kernel 5.15.174 / 6.1.120+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-56642 In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free of kernel socket in cleanup_bearer(). syzkaller report… Linux Kernel 5.4.287 / 5.10.231+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-56631 In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Fix slab-use-after-free read in sg_release() Fix a use-after-free bug… Linux Kernel 6.6.66 / 6.12.5+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-56619 In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() Syzbot … Linux Kernel 5.4.287 / 5.10.231+ Fix from $1,9502024-12-27 MEDIUM 5.5 CVE-2024-56623 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use after free on unload System crash is observed with stack… Linux Kernel 5.10.231 / 5.15.174+ Fix from $1,6002024-12-27 HIGH 7.8 CVE-2024-56606 In the Linux kernel, the following vulnerability has been resolved: af_packet: avoid erroring out after sock_init_data() in packet_create() After s… Linux Kernel 5.4.287 / 5.10.231+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-56600 In the Linux kernel, the following vulnerability has been resolved: net: inet6: do not leave a dangling sk pointer in inet6_create() sock_init_data… Linux Kernel 5.4.287 / 5.10.231+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-56601 In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inet_create() sock_init_data()… Linux Kernel 5.4.287 / 5.10.231+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-56602 In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() sock… Linux Kernel 5.4.287 / 5.10.231+ Fix from $1,9502024-12-27 HIGH 7.8 CVE-2024-56603 In the Linux kernel, the following vulnerability has been resolved: net: af_can: do not leave a dangling sk pointer in can_create() On error can_cr… Linux Kernel 5.4.287 / 5.10.231+ Fix from $1,9502024-12-27