CVE 2024 document archive · 37
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,167 documents · Identifier year 2024 · 37 / 84
- CVE-2024-43856kernel: dma: fix call order in dmam_free_coherent
- CVE-2024-43855kernel: md: fix deadlock between mddev_suspend and flush bio
- CVE-2024-43854kernel: block: initialize integrity buffer to zero before writing it to media
- CVE-2024-43853kernel: cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- CVE-2024-43852kernel: hwmon: (ltc2991) re-order conditions to fix off by one bug
- CVE-2024-43851kernel: soc: xilinx: rename cpu_number1 to dummy_cpu_number
- CVE-2024-43850kernel: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove
- CVE-2024-43849kernel: soc: qcom: pdr: protect locator_addr with the main mutex
- CVE-2024-43848kernel: wifi: mac80211: fix TTLM teardown work
- CVE-2024-43847kernel: wifi: ath12k: fix invalid memory access while processing fragmented packets
- CVE-2024-43846kernel: lib: objagg: Fix general protection fault
- CVE-2024-43845kernel: udf: Fix bogus checksum computation in udf_rename()
- CVE-2024-43844kernel: wifi rtw89 wow: fix GTK offload H2C skbuff issue
- CVE-2024-43843kernel: riscv, bpf: Fix out-of-bounds issue when preparing trampoline image
- CVE-2024-43842kernel: wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()
- CVE-2024-43841kernel: wifi: virt_wifi: avoid reporting connection success with wrong SSID
- CVE-2024-43840kernel: bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- CVE-2024-43839kernel: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- CVE-2024-43838kernel: bpf: fix overflow check in adjust_jmp_off()
- CVE-2024-43837kernel: bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT
- CVE-2024-43836kernel: net: ethtool: pse-pd: Fix possible null-deref
- CVE-2024-43835kernel: virtio_net: Fix napi_skb_cache_put warning
- CVE-2024-43834kernel: xdp: fix invalid wait context of page_pool_destroy()
- CVE-2024-43833kernel: media: v4l: async: Fix NULL pointer dereference in adding ancillary links
- CVE-2024-43832kernel: s390/uv: Don't call folio_wait_writeback() without a folio reference
- CVE-2024-43831kernel: media: mediatek: vcodec: Handle invalid decoder vsi
- CVE-2024-43830kernel: leds: trigger: Unregister sysfs attributes before calling deactivate()
- CVE-2024-43829kernel: drm/qxl: Add check for drm_cvt_mode
- CVE-2024-43828kernel: ext4: fix infinite loop when replaying fast_commit
- CVE-2024-43827kernel: drm/amd/display: Add null check before access structs
- CVE-2024-43826kernel: nfs: pass explicit offset/count to trace events
- CVE-2024-43825kernel: iio: Fix the sorting functionality in iio_gts_build_avail_time_table
- CVE-2024-43824kernel: PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- CVE-2024-43823kernel: PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- CVE-2024-43822kernel: ASoc: PCM6240: Return directly after a failed devm_kzalloc() in pcmdevice_i2c_probe()
- CVE-2024-43821kernel: scsi: lpfc: Fix a possible null pointer dereference
- CVE-2024-43820kernel: dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume
- CVE-2024-43819kernel: kvm: s390: Reject memory region operations for ucontrol VMs
- CVE-2024-43818kernel: ASoC: amd: Adjust error handling in case of absent codec device
- CVE-2024-43817kernel: net: missing check virtio
- CVE-2024-43816kernel: scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages
- CVE-2024-43815kernel: crypto: mxs-dcp - Ensure payload is zero when using key slot
- CVE-2024-43802vim: Heap Buffer Overflow in Vim's Typeahead Buffer Handling
- CVE-2024-43800serve-static: Improper Sanitization in serve-static
- CVE-2024-43799send: Code Execution Vulnerability in Send Library
- CVE-2024-43796express: Improper Input Handling in Express Redirects
- CVE-2024-43790vim: Out of bounds read when performing a search command
- CVE-2024-43788webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule
- CVE-2024-43499dotnet: .NET Core - DoS - (unbounded work factor) in NrbfDecoder component
- CVE-2024-43498dotnet: Type confusion vulnerability leads to AV in .NET Core NrbfDecoder component