Browse CVEs

MEDIUM 5.5 CVE-2024-40959 In the Linux kernel, the following vulnerability has been resolved: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() ip6_dst_idev() ca… Linux Kernel 4.19.317 / 5.4.279+ Fix from $1,6002024-07-12 MEDIUM 5.5 CVE-2024-40945 In the Linux kernel, the following vulnerability has been resolved: iommu: Return right value in iommu_sva_bind_device() iommu_sva_bind_device() sh… Linux Kernel 5.4.279 / 5.10.221+ Fix from $1,6002024-07-12 MEDIUM 5.5 CVE-2024-40928 In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() Clang … Linux Kernel 6.6.35 / 6.9.6+ Fix from $1,6002024-07-12 MEDIUM 5.5 CVE-2024-40911 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Lock wiphy in cfg80211_get_station Wiphy should be locked befor… Linux Kernel 5.15.162 / 6.1.95+ Fix from $1,6002024-07-12 MEDIUM 5.5 CVE-2024-40919 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm… Linux Kernel 6.1.95 / 6.6.35+ Fix from $1,6002024-07-12 MEDIUM 5.5 CVE-2024-39498 In the Linux kernel, the following vulnerability has been resolved: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2 [Why] Commit:… Linux Kernel 6.9.6+ Fix from $1,6002024-07-12 MEDIUM 5.5 CVE-2024-39504 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: validate mandatory meta and payload Check for mandatory n… Linux Kernel 6.6.35 / 6.9.6+ Fix from $1,6002024-07-12 MEDIUM 5.5 CVE-2024-39505 In the Linux kernel, the following vulnerability has been resolved: drm/komeda: check for error-valued pointer komeda_pipeline_get_state() may retu… Linux Kernel 5.4.279 / 5.10.221+ Fix from $1,6002024-07-12 MEDIUM 5.5 CVE-2024-39506 In the Linux kernel, the following vulnerability has been resolved: liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet In lio_… Linux Kernel 4.19.317 / 5.4.279+ Fix from $1,6002024-07-12 HIGH 7.5 CVE-2024-38536 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A memory allocation failure due… Suricata 7.0.6+ Fix from $1,9502024-07-11 MEDIUM 5.3 CVE-2024-28068 A vulnerability was discovered in SS in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, … Exynos 9820 Firmware Mitigation only Fix from $1,6002024-07-09 HIGH 7.5 CVE-2024-38072 Windows Remote Desktop Licensing Service Denial of Service Vulnerability Windows Server 2016 10.0.14393.7159 / 10.0.17763.6054+ Fix from $1,9502024-07-09 MEDIUM 5.5 CVE-2024-39473 In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Fix input format query of process modules without base… Linux Kernel 6.4 / 6.6.34+ Fix from $1,6002024-07-05 MEDIUM 6.5 CVE-2024-3332 A malicious BLE device can send a specific order of packet sequence to cause a DoS attack on the victim BLE device Zephyr after 3.6.0 Fix from $1,6002024-07-03 HIGH 7.5 CVE-2024-38477 null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users … HTTP Server 2.4.60+ Fix from $1,9502024-07-01 MEDIUM 5.4 CVE-2024-36387 Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, de… HTTP Server after 2.4.59 Fix from $1,6002024-07-01 HIGH 7.5 CVE-2024-36982 In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an attacker coul… Cloud 9.0.10 / 9.1.5+ Fix from $1,9502024-07-01 MEDIUM 6.5 CVE-2024-39132 A NULL Pointer Dereference vulnerability in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function VerifyCommandLine() … Mitigation only Fix from $1,6002024-06-27 HIGH 7.5 CVE-2024-39130 A NULL Pointer Dereference discovered in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the function DumpOneStream() at /src… Mitigation only Fix from $1,9502024-06-27 MEDIUM 5.4 CVE-2024-37820 A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expression.inferCollation. Mitigation only Fix from $1,6002024-06-25 MEDIUM 5.5 CVE-2024-39466 In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/qcom/lmh: Check for SCM availability at probe Up until now, the… Linux Kernel 5.15.161 / 6.1.94+ Fix from $1,6002024-06-25 MEDIUM 5.5 CVE-2024-39470 In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix a possible null pointer dereference in eventfs_find_events() In fu… Linux Kernel 6.6.34 / 6.9.5+ Fix from $1,6002024-06-25 MEDIUM 5.5 CVE-2024-39371 In the Linux kernel, the following vulnerability has been resolved: io_uring: check for non-NULL file pointer in io_file_can_poll() In earlier kern… Linux Kernel 6.1.95 / 6.6.35+ Fix from $1,6002024-06-25 MEDIUM 5.5 CVE-2024-39464 In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix notifier list entry init struct v4l2_async_notifier has … Linux Kernel 6.6.34 / 6.9.5+ Fix from $1,6002024-06-25 MEDIUM 5.5 CVE-2022-48772 In the Linux kernel, the following vulnerability has been resolved: media: lgdt3306a: Add a check against null-pointer-def The driver should check … Linux Kernel 5.4.278 / 5.10.219+ Fix from $1,6002024-06-25 MEDIUM 5.5 CVE-2024-35247 In the Linux kernel, the following vulnerability has been resolved: fpga: region: add owner module and take its refcount The current implementation… Linux Kernel 5.10.219 / 5.15.161+ Fix from $1,6002024-06-24 MEDIUM 5.5 CVE-2024-36479 In the Linux kernel, the following vulnerability has been resolved: fpga: bridge: add owner module and take its refcount The current implementation… Linux Kernel 6.1.120 / 6.6.33+ Fix from $1,6002024-06-24 MEDIUM 5.5 CVE-2024-37021 In the Linux kernel, the following vulnerability has been resolved: fpga: manager: add owner module and take its refcount The current implementatio… Linux Kernel 6.1.120 / 6.6.33+ Fix from $1,6002024-06-24 MEDIUM 5.5 CVE-2024-38633 In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Update uart_driver_registered on driver removal The removal of… Linux Kernel 4.19.316 / 5.4.278+ Fix from $1,6002024-06-21 MEDIUM 5.5 CVE-2024-38637 In the Linux kernel, the following vulnerability has been resolved: greybus: lights: check return of get_channel_from_mode If channel for the given… Linux Kernel 4.19.316 / 5.4.278+ Fix from $1,6002024-06-21