PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 26

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 26 / 84

  1. CVE-2024-48615libarchive: Null Pointer Dereference in Libarchive
  2. CVE-2024-48426assimp: SEGV in SortByPTypeProcess::Execute
  3. CVE-2024-48425assimp: SEGV in Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode
  4. CVE-2024-48424assimp: heap-buffer-overflow in OpenDDLParser::parseStructure
  5. CVE-2024-48423assimp: arbitrary code execution via CallbackToLogRedirector function
  6. CVE-2024-47875dompurify: nesting-based mutation XSS vulnerability
  7. CVE-2024-47850cups-browsed: cups-filters: cups-browsed vulnerable to DDoS amplification attack
  8. CVE-2024-47835gstreamer1-plugins-base: NULL-pointer dereference in LRC subtitle parser
  9. CVE-2024-47834gstreamer1-plugins-good: Use-After-Free read in Matroska CodecPrivate
  10. CVE-2024-47831next.js: Next.js image optimization has Denial of Service condition
  11. CVE-2024-47814vim: use-after-free when closing buffers in Vim
  12. CVE-2024-47809kernel: dlm: fix possible lkb_resource null dereference
  13. CVE-2024-47794kernel: bpf: Prevent tailcall infinite loop caused by freplace
  14. CVE-2024-47778gstreamer1-plugins-good: OOB-read in gst_wavparse_adtl_chunk
  15. CVE-2024-47777gstreamer1-plugins-good: OOB-read in gst_wavparse_smpl_chunk
  16. CVE-2024-47776gstreamer1-plugins-good: OOB-read in gst_wavparse_cue_chunk
  17. CVE-2024-47775gstreamer1-plugins-good: OOB-read in parse_ds64
  18. CVE-2024-47774gstreamer1-plugins-good: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk
  19. CVE-2024-47757kernel: nilfs2: fix potential oob read in nilfs_btree_check_delete()
  20. CVE-2024-47756kernel: PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
  21. CVE-2024-47754kernel: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
  22. CVE-2024-47753kernel: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
  23. CVE-2024-47752kernel: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
  24. CVE-2024-47751kernel: PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
  25. CVE-2024-47750kernel: RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
  26. CVE-2024-47749kernel: RDMA/cxgb4: Added NULL check for lookup_atid
  27. CVE-2024-47747kernel: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
  28. CVE-2024-47746kernel: fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set
  29. CVE-2024-47745kernel: mm: call the security_mmap_file() LSM hook in remap_file_pages()
  30. CVE-2024-47744kernel: KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
  31. CVE-2024-47743kernel: KEYS: prevent NULL pointer dereference in find_asymmetric_key()
  32. CVE-2024-47742kernel: firmware_loader: Block path traversal
  33. CVE-2024-47741kernel: btrfs: fix race setting file private on concurrent lseek using same fd
  34. CVE-2024-47740kernel: f2fs: Require FMODE_WRITE for atomic write ioctls
  35. CVE-2024-47739kernel: padata: use integer wrap around to prevent deadlock on seq_nr overflow
  36. CVE-2024-47738kernel: wifi: mac80211: don't use rate mask for offchannel TX either
  37. CVE-2024-47737kernel: nfsd: call cache_put if xdr_reserve_space returns NULL
  38. CVE-2024-47736kernel: erofs: handle overlapped pclusters out of crafted images properly
  39. CVE-2024-47735kernel: RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
  40. CVE-2024-47734kernel: bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
  41. CVE-2024-47733kernel: netfs: Delete subtree of 'fs/netfs' when netfs module exits
  42. CVE-2024-47732kernel: crypto: iaa - Fix potential use after free bug
  43. CVE-2024-47731kernel: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
  44. CVE-2024-47730kernel: crypto: hisilicon/qm - inject error before stopping queue
  45. CVE-2024-47729kernel: drm/xe: Use reserved copy engine for user binds on faulting devices
  46. CVE-2024-47728kernel: bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  47. CVE-2024-47727kernel: x86/tdx: Fix "in-kernel MMIO" check
  48. CVE-2024-47726kernel: f2fs: fix to wait dio completion
  49. CVE-2024-47725kernel: dm-verity: restart or panic on an I/O error
  50. CVE-2024-47724kernel: wifi: ath11k: use work queue to process beacon tx event
CVE 2024 document archive — Page 26 | PulseLinux