PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 25

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 25 / 84

  1. CVE-2024-49876kernel: drm/xe: fix UAF around queue destruction
  2. CVE-2024-49875kernel: nfsd: map the EBADMSG to nfserr_io to avoid warning
  3. CVE-2024-49874kernel: i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
  4. CVE-2024-49873kernel: mm/filemap: fix filemap_get_folios_contig THP panic
  5. CVE-2024-49872kernel: mm/gup: fix memfd_pin_folios alloc race panic
  6. CVE-2024-49871kernel: Input: adp5589-keys - fix NULL pointer dereference
  7. CVE-2024-49870kernel: cachefiles: fix dentry leak in cachefiles_open_file()
  8. CVE-2024-49869kernel: btrfs: send: fix buffer overflow detection when copying path to cache entry
  9. CVE-2024-49868kernel: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
  10. CVE-2024-49867kernel: btrfs: wait for fixup workers before stopping cleaner kthread during umount
  11. CVE-2024-49866kernel: tracing/timerlat: Fix a race during cpuhp processing
  12. CVE-2024-49865kernel: drm/xe/vm: move xa_alloc to prevent UAF
  13. CVE-2024-49864kernel: rxrpc: Fix a race between socket set up and I/O thread creation
  14. CVE-2024-49863kernel: vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
  15. CVE-2024-49862kernel: powercap: intel_rapl: Fix off by one in get_rpi()
  16. CVE-2024-49861kernel: bpf: Fix helper writes to read-only maps
  17. CVE-2024-49860kernel: ACPI: sysfs: validate return type of _STR method
  18. CVE-2024-49859kernel: f2fs: fix to check atomic_file in f2fs ioctl interfaces
  19. CVE-2024-49858kernel: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
  20. CVE-2024-49857kernel: wifi: iwlwifi: mvm: set the cipher for secured NDP ranging
  21. CVE-2024-49856kernel: x86/sgx: Fix deadlock in SGX NUMA node search
  22. CVE-2024-49855kernel: nbd: fix race between timeout and normal completion
  23. CVE-2024-49854kernel: block, bfq: fix uaf for accessing waker_bfqq after splitting
  24. CVE-2024-49853kernel: firmware: arm_scmi: Fix double free in OPTEE transport
  25. CVE-2024-49852kernel: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
  26. CVE-2024-49851kernel: tpm: Clean up TPM space after command failure
  27. CVE-2024-49850kernel: bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
  28. CVE-2024-49766werkzeug: python-werkzeug: Werkzeug safe_join not safe on Windows
  29. CVE-2024-49761rexml: REXML ReDoS vulnerability
  30. CVE-2024-49573kernel: sched/fair: Fix NEXT_BUDDY
  31. CVE-2024-49571kernel: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
  32. CVE-2024-49570kernel: drm/xe/tracing: Fix a potential TP_printk UAF
  33. CVE-2024-49569kernel: nvme-rdma: unquiesce admin_q before destroy it
  34. CVE-2024-49568kernel: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
  35. CVE-2024-49504grub2: grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images
  36. CVE-2024-49395mutt: neomutt: Bcc email header field is indirectly leaked by cryptographic info block
  37. CVE-2024-49394mutt: neomutt: In-Reply-To email header field it not protected by cryptograpic signing
  38. CVE-2024-49393mutt: neomutt: To and Cc email header fields are not protected by cryptographic signing
  39. CVE-2024-49214haproxy: Spoofed IP Bypass in HAProxy QUIC Listener 0-RTT Sessions
  40. CVE-2024-48958libarchive: Out-of-bounds access in libarchive's RAR file handling
  41. CVE-2024-48957libarchive: Out-of-bounds access in libarchive's archive file handling
  42. CVE-2024-48949elliptic: Missing Validation in Elliptic's EDDSA Signature Verification
  43. CVE-2024-48948elliptic: ECDSA signature verification error may reject legitimate transactions
  44. CVE-2024-48916ceph: rhceph-container: Authentication bypass in CEPH RadosGW
  45. CVE-2024-48910dompurify: DOMPurify vulnerable to tampering by prototype pollution
  46. CVE-2024-48881kernel: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
  47. CVE-2024-48876kernel: stackdepot: fix stack_depot_save_flags() in NMI context
  48. CVE-2024-48875kernel: btrfs: don't take dev_replace rwsem on task already holding it
  49. CVE-2024-48873kernel: wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
  50. CVE-2024-48869microcode_ctl: Improper restriction of software interfaces to hardware features
CVE 2024 document archive — Page 25 | PulseLinux