CVE 2024 document archive · 21
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,167 documents · Identifier year 2024 · 21 / 84
- CVE-2024-50086kernel: ksmbd: fix user-after-free from session log off
- CVE-2024-50085kernel: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- CVE-2024-50084kernel: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- CVE-2024-50083kernel: tcp: fix mptcp DSS corruption due to large pmtu xmit
- CVE-2024-50082kernel: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- CVE-2024-50081kernel: blk-mq: setup queue ->tag_set before initializing hctx
- CVE-2024-50080kernel: ublk: don't allow user copy for unprivileged device
- CVE-2024-50079kernel: io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work
- CVE-2024-50078kernel: Bluetooth: Call iso_exit() on module unload
- CVE-2024-50077kernel: Bluetooth: ISO: Fix multiple init when debugfs is disabled
- CVE-2024-50076kernel: vt: prevent kernel-infoleak in con_font_get()
- CVE-2024-50075kernel: xhci: tegra: fix checked USB2 port number
- CVE-2024-50074kernel: parport: Proper fix for array out-of-bounds access
- CVE-2024-50073kernel: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- CVE-2024-50072kernel: x86/bugs: Use code segment selector for VERW operand
- CVE-2024-50071kernel: pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func()
- CVE-2024-50070kernel: pinctrl: stm32: check devm_kasprintf() returned value
- CVE-2024-50069kernel: pinctrl: apple: check devm_kasprintf() returned value
- CVE-2024-50068kernel: mm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets()
- CVE-2024-50067kernel: uprobe: avoid out-of-bounds memory access of fetching args
- CVE-2024-50066kernel: mm/mremap: fix move_normal_pmd/retract_page_tables race
- CVE-2024-50065kernel: ntfs3: Change to non-blocking allocation in ntfs_d_hash
- CVE-2024-50064kernel: zram: free secondary algorithms names
- CVE-2024-50063kernel: bpf: Prevent tail call between progs attached to different hooks
- CVE-2024-50062kernel: RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- CVE-2024-50061kernel: i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- CVE-2024-50060kernel: io_uring: check if we need to reschedule during overflow flush
- CVE-2024-50059kernel: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- CVE-2024-50058kernel: serial: protect uart_port_dtr_rts() in uart_shutdown() too
- CVE-2024-50057kernel: usb: typec: tipd: Free IRQ only if it was requested before
- CVE-2024-50056kernel: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- CVE-2024-50055kernel: driver core: bus: Fix double free in driver API bus_register()
- CVE-2024-50051kernel: spi: mpc52xx: Add cancel_work_sync before module remove
- CVE-2024-50049kernel: drm/amd/display: Check null pointer before dereferencing se
- CVE-2024-50048kernel: fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- CVE-2024-50047kernel: smb: client: fix UAF in async decryption
- CVE-2024-50046kernel: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- CVE-2024-50045kernel: netfilter: br_netfilter: fix panic with metadata_dst skb
- CVE-2024-50044kernel: Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- CVE-2024-50043kernel: nfsd: fix possible badness in FREE_STATEID
- CVE-2024-50042kernel: ice: Fix increasing MSI-X on VF
- CVE-2024-50041kernel: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- CVE-2024-50040kernel: igb: Do not bring the device up after non-fatal error
- CVE-2024-50039kernel: net/sched: accept TCA_STAB only for root qdisc
- CVE-2024-50038kernel: netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- CVE-2024-50037kernel: drm/fbdev-dma: Only cleanup deferred I/O if necessary
- CVE-2024-50036kernel: net: do not delay dst_entries_add() in dst_release()
- CVE-2024-50035kernel: ppp: fix ppp_async_encode() illegal access
- CVE-2024-50034kernel: net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC
- CVE-2024-50033kernel: slip: make slhc_remember() more robust against malicious packets