CVE 2024 document archive · 43
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,167 documents · Identifier year 2024 · 43 / 84
- CVE-2024-41077kernel: null_blk: fix validation of block size
- CVE-2024-41076kernel: NFSv4: Fix memory leak in nfs4_set_security_label
- CVE-2024-41075kernel: cachefiles: add consistency check for copen/cread
- CVE-2024-41074kernel: cachefiles: Set object to close if ondemand_id < 0 in copen
- CVE-2024-41073kernel: nvme: avoid double free special payload
- CVE-2024-41072kernel: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- CVE-2024-41070kernel: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- CVE-2024-41069kernel: ASoC: topology: Fix references to freed memory
- CVE-2024-41068kernel: s390/sclp: Fix sclp_init() cleanup on failure
- CVE-2024-41067kernel: btrfs: scrub: handle RST lookup error correctly
- CVE-2024-41066kernel: ibmvnic: Add tx check to prevent skb leak
- CVE-2024-41065kernel: powerpc/pseries: Whitelist dtl slub object for copying to userspace
- CVE-2024-41064kernel: powerpc/eeh: avoid possible crash when edev->pdev changes
- CVE-2024-41063kernel: Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- CVE-2024-41062kernel: bluetooth/l2cap: sync sock recv cb and release
- CVE-2024-41061kernel: drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport
- CVE-2024-41060kernel: drm/radeon: check bo_va->bo is non-NULL before using it
- CVE-2024-41059kernel: hfsplus: fix uninit-value in copy_name
- CVE-2024-41058kernel: cachefiles: fix slab-use-after-free in fscache_withdraw_volume()
- CVE-2024-41056kernel: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
- CVE-2024-41055kernel: mm: prevent derefencing NULL ptr in pfn_section_valid()
- CVE-2024-41054kernel: scsi: ufs: core: Fix ufshcd_clear_cmd racing issue
- CVE-2024-41053kernel: scsi: ufs: core: Fix ufshcd_abort_one racing issue
- CVE-2024-41052kernel: vfio/pci: Init the count variable in collecting hot-reset devices
- CVE-2024-41051kernel: cachefiles: wait for ondemand_object_worker to finish when dropping object
- CVE-2024-41050kernel: cachefiles: cyclic allocation of msg_id to avoid reuse
- CVE-2024-41049kernel: filelock: fix potential use-after-free in posix_lock_inode
- CVE-2024-41048kernel: skmsg: Skip zero length skb in sk_msg_recvmsg
- CVE-2024-41047kernel: i40e: Fix XDP program unloading while removing the driver
- CVE-2024-41046kernel: net: ethernet: lantiq_etop: fix double free in detach
- CVE-2024-41045kernel: bpf: Defer work in bpf_timer_cancel_and_free
- CVE-2024-41044kernel: ppp: reject claimed-as-LCP but actually malformed packets
- CVE-2024-41043kernel: netfilter: nfnetlink_queue: drop bogus WARN_ON
- CVE-2024-41042kernel: netfilter: nf_tables: prefer nft_chain_validate
- CVE-2024-41041kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port()
- CVE-2024-41040kernel: net/sched: Fix UAF when resolving a clash
- CVE-2024-41039kernel: firmware: cs_dsp: Fix overflow checking of wmfw header
- CVE-2024-41038kernel: firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
- CVE-2024-41037kernel: ASoC: SOF: Intel: hda: fix null deref on system suspend entry
- CVE-2024-41036kernel: net: ks8851: Fix deadlock with the SPI chip variant
- CVE-2024-41035kernel: USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- CVE-2024-41034kernel: nilfs2: fix kernel bug on rename operation of broken directory
- CVE-2024-41033kernel: cachestat: do not flush stats in recency check
- CVE-2024-41032kernel: mm: vmalloc: check if a hash-index is in cpu_possible_mask
- CVE-2024-41031kernel: mm/filemap: skip to create PMD-sized page cache if needed
- CVE-2024-41030kernel: ksmbd: discard write access to the directory open
- CVE-2024-41029kernel: nvmem: core: limit cell sysfs permissions to main attribute ones
- CVE-2024-41028kernel: platform/x86: toshiba_acpi: Fix array out-of-bounds access
- CVE-2024-41027kernel: Fix userfaultfd_api to return EINVAL as expected
- CVE-2024-41026kernel: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length