CVE 2024 document archive
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,167 documents · Identifier year 2024 · 1 / 84
- CVE-2024-58384tornado: Tornado: CRLF injection in CurlAsyncHTTPClient allows arbitrary header injection or new HTTP requests.
- CVE-2024-58266shlex: Shlex Command Injection Vulnerability
- CVE-2024-58262curve25519-dalek: Curve25519-Dalek Scalar Timing Vulnerability
- CVE-2024-58261sequoia-openpgp: Sequoia OpenPGP: RawCertParser Infinite Loop Vulnerability
- CVE-2024-58241kernel: Kernel: Bluetooth HCI local DoS
- CVE-2024-58240kernel: tls: separate no-async decryption request handling from async
- CVE-2024-58239kernel: tls: stop recv() if initial process_rx_list gave us non-DATA
- CVE-2024-58238kernel: Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- CVE-2024-58237kernel: bpf: consider that tail calls invalidate packet pointers
- CVE-2024-58100kernel: bpf: check changes_pkt_data property for extension programs
- CVE-2024-58099kernel: vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- CVE-2024-58098kernel: bpf: track changes_pkt_data property for global functions
- CVE-2024-58097kernel: wifi: ath11k: fix RCU stall while reaping monitor destination ring
- CVE-2024-58096kernel: wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
- CVE-2024-58095kernel: jfs: add check read-only before txBeginAnon() call
- CVE-2024-58094kernel: jfs: add check read-only before truncation in jfs_truncate_nolock()
- CVE-2024-58093kernel: Linux kernel: PCI/ASPM use-after-free during hot-unplug
- CVE-2024-58092kernel: nfsd: fix legacy client tracking initialization
- CVE-2024-58091kernel: drm/fbdev-dma: Add shadow buffering for deferred I/O
- CVE-2024-58090kernel: sched/core: Prevent rescheduling when interrupts are disabled
- CVE-2024-58089kernel: btrfs: fix double accounting race when btrfs_run_delalloc_range() failed
- CVE-2024-58088kernel: bpf: Fix deadlock when freeing cgroup storage
- CVE-2024-58087kernel: ksmbd: fix racy issue from session lookup and expire
- CVE-2024-58086kernel: drm/v3d: Stop active perfmon if it is being destroyed
- CVE-2024-58085kernel: tomoyo: don't emit warning in tomoyo_write_control()
- CVE-2024-58084kernel: firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool()
- CVE-2024-58083kernel: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- CVE-2024-58082kernel: media: nuvoton: Fix an error check in npcm_video_ece_init()
- CVE-2024-58081kernel: clk: mmp2: call pm_genpd_init() only after genpd.name is set
- CVE-2024-58080kernel: clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
- CVE-2024-58079kernel: media: uvcvideo: Fix crash during unbind if gpio unit is in use
- CVE-2024-58078kernel: misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
- CVE-2024-58077kernel: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
- CVE-2024-58076kernel: clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
- CVE-2024-58075kernel: crypto: tegra - do not transfer req when tegra init fails
- CVE-2024-58074kernel: drm/i915: Grab intel_display from the encoder to avoid potential oopsies
- CVE-2024-58073kernel: drm/msm/dpu: check dpu_plane_atomic_print_state() for valid sspp
- CVE-2024-58072kernel: wifi: rtlwifi: remove unused check_buddy_priv
- CVE-2024-58071kernel: team: prevent adding a device which is already a team device lower
- CVE-2024-58070kernel: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
- CVE-2024-58069kernel: rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
- CVE-2024-58068kernel: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
- CVE-2024-58067kernel: clk: mmp: pxa1908-mpmu: Fix a NULL vs IS_ERR() check
- CVE-2024-58066kernel: clk: mmp: pxa1908-apbcp: Fix a NULL vs IS_ERR() check
- CVE-2024-58065kernel: clk: mmp: pxa1908-apbc: Fix NULL vs IS_ERR() check
- CVE-2024-58064kernel: wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap()
- CVE-2024-58063kernel: wifi: rtlwifi: fix memory leaks and invalid access at probe error path
- CVE-2024-58062kernel: wifi: iwlwifi: mvm: avoid NULL pointer dereference
- CVE-2024-58061kernel: wifi: mac80211: prohibit deactivating all links
- CVE-2024-58060kernel: bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing