Browse CVEs

HIGH 7.1 CVE-2024-50035 In the Linux kernel, the following vulnerability has been resolved: ppp: fix ppp_async_encode() illegal access syzbot reported an issue in ppp_asyn… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 MEDIUM 5.5 CVE-2022-48949 In the Linux kernel, the following vulnerability has been resolved: igb: Initialize mailbox message for VF reset When a MAC address is not assigned… Linux Kernel 4.14.303 / 4.19.270+ Fix from $1,6002024-10-21 MEDIUM 5.5 CVE-2024-50014 In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel t… Linux Kernel 6.10.14 / 6.11.3+ Fix from $1,6002024-10-21 MEDIUM 5.5 CVE-2024-49990 In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Check GSC structure validity Sometimes xe_gsc is not initialized w… Linux Kernel 6.10.14 / 6.11.3+ Fix from $1,6002024-10-21 HIGH 7.1 CVE-2024-49900 In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of new_ea in ea_buffer syzbot reports that lzo1x_1… Linux Kernel 5.10.227 / 5.15.168+ Fix from $1,9502024-10-21 MEDIUM 5.5 CVE-2024-47687 In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix invalid mr resource destroy Certain error paths from mlx5_vdpa_d… Linux Kernel 6.10.13 / 6.11.2+ Fix from $1,6002024-10-21 HIGH 7.1 CVE-2024-46865 In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a… Linux Kernel Patch available Fix from $1,9502024-09-27 MEDIUM 5.5 CVE-2024-46784 In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup Currently n… Linux Kernel 6.1.110 / 6.6.51+ Fix from $1,6002024-09-18 HIGH 7.1 CVE-2024-44999 In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtp_dev_xmit() syzbot/KMSAN reported use of uninit… Linux Kernel 4.19.321 / 5.4.283+ Fix from $1,9502024-09-04 MEDIUM 5.5 CVE-2024-45005 In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix validity interception issue when gisa is switched off We might r… Linux Kernel 6.6.48 / 6.10.7+ Fix from $1,6002024-09-04 HIGH 7.1 CVE-2024-44983 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate vlan header Ensure there is sufficient room to a… Linux Kernel 5.15.166 / 6.1.107+ Fix from $1,9502024-09-04 HIGH 7.1 CVE-2024-43815 In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - Ensure payload is zero when using key slot We could leak stac… Linux Kernel 6.10.3+ Fix from $1,9502024-08-17 MEDIUM 5.5 CVE-2024-42311 In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() Syzbot … Linux Kernel 4.19.320 / 5.4.282+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42312 In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize i_uid/i_gid Always initialize i_uid/i_gid inside the … Linux Kernel 4.10 / 4.15+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42283 In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Initialize all fields in dumped nexthops struct nexthop_grp conta… Linux Kernel 5.4.282 / 5.10.224+ Fix from $1,6002024-08-17 MEDIUM 5.5 CVE-2024-42272 In the Linux kernel, the following vulnerability has been resolved: sched: act_ct: take care of padding in struct zones_ht_key Blamed commit increa… Linux Kernel 5.10.224 / 5.15.165+ Fix from $1,6002024-08-17 HIGH 7.5 CVE-2024-42225 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skb_put with skb_put_zero Avoid potentially reusing uniniti… Linux Kernel 5.15.163 / 6.1.98+ Fix from $1,9502024-07-30 HIGH 7.0 CVE-2024-42228 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc In… Linux Kernel 6.6.39 / 6.9.9+ Fix from $1,9502024-07-30 MEDIUM 6.3 CVE-2024-42161 In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD [Changes from V1: - U… Linux Kernel 5.10.222 / 5.15.163+ Fix from $1,6002024-07-30 MEDIUM 5.5 CVE-2024-42128 In the Linux kernel, the following vulnerability has been resolved: leds: an30259a: Use devm_mutex_init() for mutex initialization In this driver L… Linux Kernel 6.6.39 / 6.9.9+ Fix from $1,6002024-07-30 MEDIUM 5.5 CVE-2024-42129 In the Linux kernel, the following vulnerability has been resolved: leds: mlxreg: Use devm_mutex_init() for mutex initialization In this driver LED… Linux Kernel 6.1.132 / 6.6.63+ Fix from $1,6002024-07-30 MEDIUM 5.5 CVE-2024-42106 In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag_req_v2 KMSAN reported unini… Linux Kernel 4.19.318 / 5.4.280+ Fix from $1,6002024-07-30 MEDIUM 5.5 CVE-2024-42113 In the Linux kernel, the following vulnerability has been resolved: net: txgbe: initialize num_q_vectors for MSI/INTx interrupts When using MSI/INT… Linux Kernel 6.6.39 / 6.9.9+ Fix from $1,6002024-07-30 MEDIUM 5.5 CVE-2024-42096 In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() The 'profile_pc()' function is us… Linux Kernel 4.19.317 / 5.4.279+ Fix from $1,6002024-07-29 MEDIUM 5.5 CVE-2024-42063 In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode syzbot … Linux Kernel 6.1.97 / 6.6.37+ Fix from $1,6002024-07-29 MEDIUM 5.5 CVE-2024-42076 In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: Initialize unused data in j1939_send_one() syzbot reported ker… Linux Kernel 5.4 / 5.4.279+ Fix from $1,6002024-07-29 HIGH 7.1 CVE-2024-41059 In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copy_name [syzbot reported] BUG: KMSAN: uninit-val… Linux Kernel 4.19.319 / 5.4.281+ Fix from $1,9502024-07-29 MEDIUM 5.5 CVE-2024-41052 In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Init the count variable in collecting hot-reset devices The count var… Linux Kernel 6.6.41 / 6.9.10+ Fix from $1,6002024-07-29 MEDIUM 5.5 CVE-2022-48864 In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command When cont… Linux Kernel 5.15.29 / 5.16.15+ Fix from $1,6002024-07-16 MEDIUM 5.5 CVE-2022-48807 In the Linux kernel, the following vulnerability has been resolved: ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler Currently, the same handl… Linux Kernel 5.15 / 5.15.24+ Fix from $1,6002024-07-16