CVE 2024 document archive · 12
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,167 documents · Identifier year 2024 · 12 / 84
- CVE-2024-53427jq: stack-buffer-overflow in the decNumberCopy function in decNumber.c
- CVE-2024-53425assimp: heap-based buffer overflow in SkipSpacesAndLineEnd
- CVE-2024-53382prismjs: DOM Clobbering vulnerability within the Prism library's prism-autoloader plugin
- CVE-2024-53263git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs
- CVE-2024-53241kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466)
- CVE-2024-53240kernel: xen: netfront: Backend can crash Linux netfront (Xen Security Advisory 465)
- CVE-2024-53239kernel: ALSA: 6fire: Release resources at card release
- CVE-2024-53238kernel: Bluetooth: btmtk: adjust the position to init iso data anchor
- CVE-2024-53237kernel: Bluetooth: fix use-after-free in device_for_each_child()
- CVE-2024-53236kernel: xsk: Free skb when TX metadata options are invalid
- CVE-2024-53235kernel: erofs: fix file-backed mounts over FUSE
- CVE-2024-53234kernel: erofs: handle NONHEAD !delta[1] lclusters gracefully
- CVE-2024-53233kernel: unicode: Fix utf8_load() error path
- CVE-2024-53232kernel: iommu/s390: Implement blocking domain
- CVE-2024-53231kernel: cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
- CVE-2024-53230kernel: cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
- CVE-2024-53229kernel: RDMA/rxe: Fix the qp flush warnings in req
- CVE-2024-53228kernel: riscv: kvm: Fix out-of-bounds array access
- CVE-2024-53227kernel: scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- CVE-2024-53226kernel: RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- CVE-2024-53225kernel: iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift
- CVE-2024-53224kernel: RDMA/mlx5: Move events notifier registration to be after device registration
- CVE-2024-53223kernel: clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs
- CVE-2024-53222kernel: zram: fix NULL pointer in comp_algorithm_show()
- CVE-2024-53221kernel: f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- CVE-2024-53220kernel: f2fs: fix to account dirty data in __get_secs_required()
- CVE-2024-53219kernel: virtiofs: use pages instead of pointer for kernel direct IO
- CVE-2024-53218kernel: f2fs: fix race in concurrent f2fs_stop_gc_thread
- CVE-2024-53217kernel: NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- CVE-2024-53216kernel: nfsd: release svc_expkey/svc_export with rcu_work
- CVE-2024-53215kernel: svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
- CVE-2024-53214kernel: vfio/pci: Properly hide first-in-list PCIe extended capability
- CVE-2024-53213kernel: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
- CVE-2024-53212kernel: netlink: fix false positive warning in extack during dumps
- CVE-2024-53211kernel: net/l2tp: fix warning in l2tp_exit_net found by syzbot
- CVE-2024-53210kernel: s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()
- CVE-2024-53209kernel: bnxt_en: Fix receive ring space parameters when XDP is active
- CVE-2024-53208kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
- CVE-2024-53207kernel: Bluetooth: MGMT: Fix possible deadlocks
- CVE-2024-53206kernel: tcp: Fix use-after-free of nreq in reqsk_timer_handler().
- CVE-2024-53205kernel: phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe
- CVE-2024-53204kernel: phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe
- CVE-2024-53203kernel: usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- CVE-2024-53202kernel: firmware_loader: Fix possible resource leak in fw_log_firmware_info()
- CVE-2024-53201kernel: drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe
- CVE-2024-53200kernel: drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp
- CVE-2024-53199kernel: ASoC: imx-audmix: Add NULL check in imx_audmix_probe
- CVE-2024-53198kernel: xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- CVE-2024-53197kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- CVE-2024-53196kernel: KVM: arm64: Don't retire aborted MMIO instruction