Browse CVEs

MEDIUM 5.5 CVE-2024-42311 In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() Syzbot … Linux Kernel 4.19.320 / 5.4.282+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42312 In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize i_uid/i_gid Always initialize i_uid/i_gid inside the … Linux Kernel 4.10 / 4.15+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42283 In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Initialize all fields in dumped nexthops struct nexthop_grp conta… Linux Kernel 5.4.282 / 5.10.224+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42272 In the Linux kernel, the following vulnerability has been resolved: sched: act_ct: take care of padding in struct zones_ht_key Blamed commit increa… Linux Kernel 5.10.224 / 5.15.165+ Fix from $1,6002024-08-17 HIGH 8.2 CVE-2024-7868 In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept… Xpdf 4.06+ Fix from $1,9502024-08-15 MEDIUM 5.5 CVE-2024-38122 Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability Windows 10 1507 10.0.10240.20751 / 10.0.14393.7259+ Fix from $1,6002024-08-13 MEDIUM 5.5 CVE-2024-38118 Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability Windows 10 1507 10.0.10240.20751 / 10.0.14393.7259+ Fix from $1,6002024-08-13 MEDIUM 6.5 CVE-2024-7526 ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. Th… Firefox 115.14.0 / 129.0+ Fix from $1,6002024-08-06 HIGH 7.8 CVE-2024-33021 Memory corruption while processing IOCTL call to set metainfo. Ar8035 Firmware Patch available Fix from $1,9502024-08-05 HIGH 8.8 CVE-2024-6990 Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory ac… Chrome 127.0.6533.88+ Fix from $1,9502024-08-01 MEDIUM 6.3 CVE-2024-42161 In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD [Changes from V1: - U… Linux Kernel 5.10.222 / 5.15.163+ Fix from $1,6002024-07-30 HIGH 7.5 CVE-2024-42225 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skb_put with skb_put_zero Avoid potentially reusing uniniti… Linux Kernel 5.15.163 / 6.1.98+ Fix from $1,9502024-07-30 HIGH 7.0 CVE-2024-42228 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc In… Linux Kernel 6.6.39 / 6.9.9+ Fix from $1,9502024-07-30 MEDIUM 5.5 CVE-2024-42128 In the Linux kernel, the following vulnerability has been resolved: leds: an30259a: Use devm_mutex_init() for mutex initialization In this driver L… Linux Kernel 6.6.39 / 6.9.9+ Fix from $1,6002024-07-30 MEDIUM 5.5 CVE-2024-42129 In the Linux kernel, the following vulnerability has been resolved: leds: mlxreg: Use devm_mutex_init() for mutex initialization In this driver LED… Linux Kernel 6.1.132 / 6.6.63+ Fix from $1,6002024-07-30 MEDIUM 5.5 CVE-2024-42106 In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag_req_v2 KMSAN reported unini… Linux Kernel 4.19.318 / 5.4.280+ Fix from $1,6002024-07-30 MEDIUM 5.5 CVE-2024-42113 In the Linux kernel, the following vulnerability has been resolved: net: txgbe: initialize num_q_vectors for MSI/INTx interrupts When using MSI/INT… Linux Kernel 6.6.39 / 6.9.9+ Fix from $1,6002024-07-30 MEDIUM 5.5 CVE-2024-42096 In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() The 'profile_pc()' function is us… Linux Kernel 4.19.317 / 5.4.279+ Fix from $1,6002024-07-29 MEDIUM 5.5 CVE-2024-42063 In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode syzbot … Linux Kernel 6.1.97 / 6.6.37+ Fix from $1,6002024-07-29 MEDIUM 5.5 CVE-2024-42076 In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: Initialize unused data in j1939_send_one() syzbot reported ker… Linux Kernel 5.4 / 5.4.279+ Fix from $1,6002024-07-29 MEDIUM 5.5 CVE-2024-41052 In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Init the count variable in collecting hot-reset devices The count var… Linux Kernel 6.6.41 / 6.9.10+ Fix from $1,6002024-07-29 HIGH 7.1 CVE-2024-41059 In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copy_name [syzbot reported] BUG: KMSAN: uninit-val… Linux Kernel 4.19.319 / 5.4.281+ Fix from $1,9502024-07-29 MEDIUM 5.5 CVE-2022-48864 In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command When cont… Linux Kernel 5.15.29 / 5.16.15+ Fix from $1,6002024-07-16 MEDIUM 5.5 CVE-2022-48807 In the Linux kernel, the following vulnerability has been resolved: ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler Currently, the same handl… Linux Kernel 5.15 / 5.15.24+ Fix from $1,6002024-07-16 MEDIUM 5.5 CVE-2024-40998 In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() In … Linux Kernel 6.6.36 / 6.9.7+ Fix from $1,6002024-07-12 MEDIUM 5.5 CVE-2024-40926 In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpd_work on headless cards If the card d… Linux Kernel 6.9.6+ Fix from $1,6002024-07-12 MEDIUM 5.5 CVE-2024-40931 In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_una is properly initialized on connect This is strictly relat… Linux Kernel 5.10.221 / 5.15.162+ Fix from $1,6002024-07-12 MEDIUM 5.5 CVE-2024-39507 In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash problem in concurrent scenario When link status cha… Linux Kernel 5.15.162 / 6.1.95+ Fix from $1,6002024-07-12 MEDIUM 5.5 CVE-2024-39491 In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance The cs_dsp instance is init… Linux Kernel 6.6.33 / 6.9.4+ Fix from $1,6002024-07-10 HIGH 7.5 CVE-2024-38064 Windows TCP/IP Information Disclosure Vulnerability Windows 10 1507 10.0.10240.20710 / 10.0.14393.7159+ Fix from $1,9502024-07-09