Browse CVEs

HIGH 7.8 CVE-2024-49936 In the Linux kernel, the following vulnerability has been resolved: net/xen-netback: prevent UAF in xenvif_flush_hash() During the list_for_each_en… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 MEDIUM 5.5 CVE-2024-49925 In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: Register sysfs groups through driver core The driver core can reg… Linux Kernel 6.6.55 / 6.10.14+ Fix from $1,6002024-10-21 HIGH 7.0 CVE-2024-49903 In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uaf in dbFreeBits [syzbot reported] ==================================… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 HIGH 7.8 CVE-2024-49889 In the Linux kernel, the following vulnerability has been resolved: ext4: avoid use-after-free in ext4_ext_show_leaf() In ext4_find_extent(), path … Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 HIGH 7.8 CVE-2024-49876 In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix UAF around queue destruction We currently do stuff like queuing the… Linux Kernel 6.10.14 / 6.11.3+ Fix from $1,9502024-10-21 HIGH 7.0 CVE-2024-49874 In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due … Linux Kernel 6.6.55 / 6.10.14+ Fix from $1,9502024-10-21 HIGH 7.8 CVE-2024-49865 In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: move xa_alloc to prevent UAF Evil user can guess the next id of the … Linux Kernel 6.11.3+ Fix from $1,9502024-10-21 MEDIUM 5.5 CVE-2024-49867 In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping cleaner kthread during umount Dur… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,6002024-10-21 HIGH 7.8 CVE-2024-49854 In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for accessing waker_bfqq after splitting After commit 42c30… Linux Kernel 5.15.168 / 6.1.113+ Fix from $1,9502024-10-21 HIGH 7.0 CVE-2024-49855 In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between timeout and normal completion If request timetout is hand… Linux Kernel 5.19 / 6.1.113+ Fix from $1,9502024-10-21 HIGH 7.8 CVE-2024-47750 In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 Currently rsv_qp is freed befor… Linux Kernel 6.1.113 / 6.6.54+ Fix from $1,9502024-10-21 HIGH 7.8 CVE-2024-49852 In the Linux kernel, the following vulnerability has been resolved: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() The kr… Linux Kernel 5.15.168 / 6.1.113+ Fix from $1,9502024-10-21 HIGH 7.8 CVE-2024-47748 In the Linux kernel, the following vulnerability has been resolved: vhost_vdpa: assign irq bypass producer token correctly We used to call irq_bypa… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 HIGH 7.0 CVE-2024-47747 In the Linux kernel, the following vulnerability has been resolved: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Conditi… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 MEDIUM 5.5 CVE-2024-47732 In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix potential use after free bug The free_device_compression_mode… Linux Kernel 6.10.13 / 6.11.2+ Fix from $1,6002024-10-21 HIGH 7.8 CVE-2024-47718 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: always wait for both firmware loading attempts In 'rtw_wait_firmwa… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 HIGH 7.8 CVE-2024-47711 In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't return OOB skb in manage_oob(). syzbot reported use-after-free i… Linux Kernel 6.10 / 6.11.2+ Fix from $1,9502024-10-21 MEDIUM 5.5 CVE-2024-47706 In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible UAF for bfqq->bic with merge chain 1) initial state, t… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,6002024-10-21 HIGH 7.8 CVE-2024-47696 In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency In the com… Linux Kernel 5.4 / 5.10+ Fix from $1,9502024-10-21 HIGH 7.8 CVE-2024-47701 In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem When l… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 HIGH 7.8 CVE-2024-47691 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread() syzbot reports a f2f… Linux Kernel 6.6.54 / 6.10.13+ Fix from $1,9502024-10-21 HIGH 7.8 CVE-2024-47675 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() If bpf_link_prime() f… Linux Kernel 6.6.54 / 6.10.13+ Fix from $1,9502024-10-21 HIGH 7.8 CVE-2024-47676 In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway Syzbot reports a UAF in h… Linux Kernel 6.10.13 / 6.11.2+ Fix from $1,9502024-10-21 MEDIUM 5.5 CVE-2024-47666 In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Set phy->enable_completion only when we wait for it pm8001_phy_co… Linux Kernel 6.6.51 / 6.10.10+ Fix from $1,6002024-10-09 HIGH 7.0 CVE-2024-46858 In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in __timer_delete_sync There are two paths to access mptcp_p… Linux Kernel 6.1.111 / 6.6.52+ Fix from $1,9502024-09-27 HIGH 7.8 CVE-2024-46845 In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Only clear timer if a kthread exists The timerlat tracer can … Linux Kernel 6.6.51 / 6.10.10+ Fix from $1,9502024-09-27 MEDIUM 5.5 CVE-2024-46842 In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info The MBX_TIMEOUT return… Linux Kernel 6.10.10+ Fix from $1,6002024-09-27 HIGH 7.8 CVE-2024-46831 In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: Fix use-after-free error in kunit test This is a clear us… Linux Kernel 6.6.51 / 6.10.10+ Fix from $1,9502024-09-27 HIGH 7.8 CVE-2024-46796 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2_set_path_size() If smb2_compound_… Linux Kernel 6.6.51 / 6.10.10+ Fix from $1,9502024-09-18 HIGH 7.8 CVE-2024-46798 In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object When using kernel with the f… Linux Kernel 5.4.284 / 5.10.226+ Fix from $1,9502024-09-18