CVE 2024 document archive · 42
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,167 documents · Identifier year 2024 · 42 / 84
- CVE-2024-42079kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush
- CVE-2024-42078kernel: nfsd: initialise nfsd_info.mutex early.
- CVE-2024-42077kernel: ocfs2: fix DIO failure due to insufficient transaction credits
- CVE-2024-42076kernel: net: can: j1939: Initialize unused data in j1939_send_one()
- CVE-2024-42075kernel: bpf: Fix remap of arena.
- CVE-2024-42074kernel: ASoC: amd: acp: add a null check for chip_pdev structure
- CVE-2024-42073kernel: mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems
- CVE-2024-42072kernel: bpf: Fix may_goto with negative offset.
- CVE-2024-42071kernel: ionic: use dev_consume_skb_any outside of napi
- CVE-2024-42070kernel: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- CVE-2024-42069kernel: net: mana: Fix possible double free in error handling path
- CVE-2024-42068kernel: bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- CVE-2024-42067kernel: bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- CVE-2024-42066kernel: drm/xe: Fix potential integer overflow in page size calculation
- CVE-2024-42065kernel: drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init
- CVE-2024-42064kernel: drm/amd/display: Skip pipe if the pipe idx not set properly
- CVE-2024-42063kernel: bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
- CVE-2024-41996openssl: remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations
- CVE-2024-41965vim: Double-Free Vulnerability in Vim Could Cause Application Crashes
- CVE-2024-41957vim: Double-free/use-after-free vulnerability with Vim editor
- CVE-2024-41946rexml: DoS vulnerability in REXML
- CVE-2024-41935kernel: f2fs: fix to shrink read extent node in batches
- CVE-2024-41932kernel: sched: fix warning in sched_setaffinity
- CVE-2024-41817ImageMagick: Possible arbitrary code execution by loading malicious configuration files or shared libraries
- CVE-2024-41810python-twisted: Reflected XSS via HTML Injection in Redirect Response
- CVE-2024-41184keepalived: Integer overflow vulnerability in vrrp_ipsets_handler
- CVE-2024-41149kernel: block: avoid to reuse `hctx` not removed from cpuhp callback list
- CVE-2024-41123rexml: rubygem-rexml: DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>
- CVE-2024-41110moby: Authz zero length regression
- CVE-2024-41098kernel: ata: libata-core: Fix null pointer dereference on error
- CVE-2024-41097kernel: usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- CVE-2024-41096kernel: PCI/MSI: Fix UAF in msi_capability_init
- CVE-2024-41095kernel: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- CVE-2024-41094kernel: drm/fbdev-dma: Only set smem_start is enable per module option
- CVE-2024-41093kernel: drm/amdgpu: avoid using null object of framebuffer
- CVE-2024-41092kernel: drm/i915/gt: Fix potential UAF by revoke of fence registers
- CVE-2024-41091kernel: virtio-net: tun: mlx5_core short frame denial of service
- CVE-2024-41090kernel: virtio-net: tap: mlx5_core short frame denial of service
- CVE-2024-41089kernel: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- CVE-2024-41088kernel: can: mcp251xfd: fix infinite loop when xmit fails
- CVE-2024-41087kernel: ata: libata-core: Fix double free on error
- CVE-2024-41086kernel: bcachefs: Fix sb_field_downgrade validation
- CVE-2024-41085kernel: cxl/mem: Fix no cxl_nvd during pmem region auto-assembling
- CVE-2024-41084kernel: cxl/region: Avoid null pointer dereference in region lookup
- CVE-2024-41083kernel: netfs: Fix netfs_page_mkwrite() to check folio-->mapping is valid
- CVE-2024-41082kernel: nvme-fabrics: use reserved tag for reg read/write command
- CVE-2024-41081kernel: ila: block BH in ila_output()
- CVE-2024-41080kernel: io_uring: fix possible deadlock in io_register_iowq_max_workers()
- CVE-2024-41079kernel: nvmet: always initialize cqe.result
- CVE-2024-41078kernel: btrfs: qgroup: fix quota root leak after quota disable failure