Browse CVEs

HIGH 7.8 CVE-2024-47676 In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway Syzbot reports a UAF in h… Linux Kernel 6.10.13 / 6.11.2+ Fix from $1,9502024-10-21 MEDIUM 5.5 CVE-2024-47677 In the Linux kernel, the following vulnerability has been resolved: exfat: resolve memory leak from exfat_create_upcase_table() If exfat_load_upcas… Linux Kernel 6.10.13 / 6.11.2+ Fix from $1,6002024-10-21 MEDIUM 5.5 CVE-2024-47678 In the Linux kernel, the following vulnerability has been resolved: icmp: change the order of rate limits ICMP messages are ratelimited : After th… Linux Kernel 6.1.113 / 6.6.54+ Fix from $1,6002024-10-21 MEDIUM 5.5 CVE-2024-47674 In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out,… Linux Kernel 5.15.168 / 6.1.111+ Fix from $1,6002024-10-15 HIGH 7.8 CVE-2024-47670 In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_xattr_find_entry() Add a paranoia check to … Linux Kernel 6.1.112 / 6.6.53+ Fix from $1,9502024-10-09 MEDIUM 5.5 CVE-2024-47661 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid overflow from uint32_t to uint8_t [WHAT & HOW] dmub_rb_c… Linux Kernel 6.10.9+ Fix from $1,6002024-10-09 MEDIUM 5.5 CVE-2024-47662 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection [Why] T… Linux Kernel 6.10.9+ Fix from $1,6002024-10-09 MEDIUM 5.5 CVE-2024-47663 In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9834: Validate frequency parameter value In ad9834_w… Linux Kernel 5.4.284 / 5.10.226+ Fix from $1,6002024-10-09 MEDIUM 5.5 CVE-2024-47664 In the Linux kernel, the following vulnerability has been resolved: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmwa… Linux Kernel 6.6.51 / 6.10.10+ Fix from $1,6002024-10-09 MEDIUM 5.5 CVE-2024-47665 In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup Definitely co… Linux Kernel 5.15.167 / 6.1.110+ Fix from $1,6002024-10-09 MEDIUM 5.5 CVE-2024-47666 In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Set phy->enable_completion only when we wait for it pm8001_phy_co… Linux Kernel 6.6.51 / 6.10.10+ Fix from $1,6002024-10-09 MEDIUM 5.5 CVE-2024-47667 In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) Errata #i2037 in… Linux Kernel 5.4.284 / 5.10.226+ Fix from $1,6002024-10-09 MEDIUM 5.5 CVE-2024-47669 In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix state management in error path of log writing function After commit… Linux Kernel 4.19.322 / 5.4.284+ Fix from $1,6002024-10-09 MEDIUM 5.5 CVE-2024-47671 In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: prevent kernel-usb-infoleak The syzbot reported a kernel-usb-infol… Linux Kernel 6.1.112 / 6.6.53+ Fix from $1,6002024-10-09 MEDIUM 5.5 CVE-2024-47673 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pause TCM when the firmware is stopped Not doing so will ma… Linux Kernel 6.1.112 / 6.6.53+ Fix from $1,6002024-10-09 HIGH 8.8 CVE-2024-47659 In the Linux kernel, the following vulnerability has been resolved: smack: tcp: ipv4, fix incorrect labeling Currently, Smack mirrors the label of … Linux Kernel 4.19.322 / 5.4.284+ Fix from $1,9502024-10-09 MEDIUM 5.5 CVE-2024-47658 In the Linux kernel, the following vulnerability has been resolved: crypto: stm32/cryp - call finalize with bh disabled The finalize operation in i… Linux Kernel 6.6.50 / 6.10.9+ Fix from $1,6002024-10-09 MEDIUM 5.5 CVE-2024-46869 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: Allocate memory for driver private data Fix driver not… Linux Kernel 6.10.12 / 6.11.1+ Fix from $1,6002024-09-30 MEDIUM 5.5 CVE-2024-46868 In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire() If the __qcuefi po… Linux Kernel 6.10.11+ Fix from $1,6002024-09-27 HIGH 7.1 CVE-2024-46854 In the Linux kernel, the following vulnerability has been resolved: net: dpaa: Pad packets to ETH_ZLEN When sending packets under 60 bytes, up to t… Linux Kernel 6.1.111 / 6.6.52+ Fix from $1,9502024-09-27 HIGH 7.1 CVE-2024-46865 In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a… Linux Kernel Patch available Fix from $1,9502024-09-27 HIGH 7.0 CVE-2024-46858 In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in __timer_delete_sync There are two paths to access mptcp_p… Linux Kernel 6.1.111 / 6.6.52+ Fix from $1,9502024-09-27 MEDIUM 5.5 CVE-2024-46855 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_socket: fix sk refcount leaks We must put 'sk' reference before … Linux Kernel 6.1.111 / 6.6.52+ Fix from $1,6002024-09-27 MEDIUM 5.5 CVE-2024-46856 In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices The probe() … Linux Kernel 6.10.11+ Fix from $1,6002024-09-27 MEDIUM 5.5 CVE-2024-46857 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix bridge mode operations when there are no VFs Currently, trying to… Linux Kernel 6.1.111 / 6.6.52+ Fix from $1,6002024-09-27 MEDIUM 5.5 CVE-2024-46860 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change When dis… Linux Kernel 6.6.52 / 6.10.11+ Fix from $1,6002024-09-27 MEDIUM 5.5 CVE-2024-46861 In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: do not stop RX on failing RX callback RX callbacks can fail for… Linux Kernel 6.6.52 / 6.10.11+ Fix from $1,6002024-09-27 MEDIUM 5.5 CVE-2024-46862 In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-mtl-match: add missing empty item There is no links… Linux Kernel 6.10.11+ Fix from $1,6002024-09-27 MEDIUM 5.5 CVE-2024-46863 In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-lnl-match: add missing empty item There is no links… Linux Kernel 6.6.52 / 6.10.11+ Fix from $1,6002024-09-27 MEDIUM 5.5 CVE-2024-46864 In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: fix kexec crash due to VP assist page corruption commit 9636be85cc5… Linux Kernel 6.6.52+ Fix from $1,6002024-09-27