PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 46

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 46 / 84

  1. CVE-2024-40921kernel: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state
  2. CVE-2024-40920kernel: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state
  3. CVE-2024-40919kernel: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()
  4. CVE-2024-40918kernel: parisc: Try to fix random segmentation faults in package builds
  5. CVE-2024-40917kernel: memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
  6. CVE-2024-40916kernel: drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
  7. CVE-2024-40915kernel: riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
  8. CVE-2024-40914kernel: mm/huge_memory: don't unpoison huge_zero_folio
  9. CVE-2024-40913kernel: cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
  10. CVE-2024-40912kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  11. CVE-2024-40911kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station
  12. CVE-2024-40910kernel: ax25: Fix refcount imbalance on inbound connections
  13. CVE-2024-40909kernel: bpf: Fix a potential use-after-free in bpf_link_free()
  14. CVE-2024-40908kernel: bpf: Set run context for rawtp test_run callback
  15. CVE-2024-40907kernel: ionic: fix kernel panic in XDP_TX action
  16. CVE-2024-40906kernel: net/mlx5: Always stop health timer during driver removal
  17. CVE-2024-40905kernel: ipv6: fix possible race in __fib6_drop_pcpu_from()
  18. CVE-2024-40904kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
  19. CVE-2024-40903kernel: usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps
  20. CVE-2024-40902kernel: jfs: xattr: fix buffer overflow for invalid xattr
  21. CVE-2024-40901kernel: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
  22. CVE-2024-40900kernel: cachefiles: remove requests from xarray during flushing requests
  23. CVE-2024-40899kernel: cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
  24. CVE-2024-40898httpd: SSRF in Apache HTTP Server on Windows via mod_rewrite in server/vhost context
  25. CVE-2024-40897orc: Stack-based buffer overflow vulnerability in ORC
  26. CVE-2024-40896libxml2: XXE vulnerability
  27. CVE-2024-40866webkitgtk: Visiting a malicious website may lead to address bar spoofing
  28. CVE-2024-40857webkitgtk: Processing maliciously crafted web content may lead to universal cross site scripting
  29. CVE-2024-40794webkitgtk: webkit2gtk: Private Browsing tabs may be accessed without authentication
  30. CVE-2024-40789webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash
  31. CVE-2024-40782webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management
  32. CVE-2024-40780webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking
  33. CVE-2024-40779webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking
  34. CVE-2024-40776webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution
  35. CVE-2024-40725httpd: source code disclosure with handlers configured via AddType
  36. CVE-2024-39936qtbase: qtbase: Delay any communication until encrypted() can be responded to
  37. CVE-2024-39920kernel: TCP: SnailLoad timing side channel in TCP
  38. CVE-2024-39908rexml: DoS vulnerability in REXML
  39. CVE-2024-39894openssh: Logic error in ObscureKeystrokeTiming
  40. CVE-2024-39884httpd: source code disclosure with handlers configured via AddType
  41. CVE-2024-39695exiv2: Out-of-bounds read in AsfVideo::streamProperties
  42. CVE-2024-39573httpd: Potential SSRF in mod_rewrite
  43. CVE-2024-39510kernel: cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
  44. CVE-2024-39509kernel: HID: core: remove unnecessary WARN_ON() in implement()
  45. CVE-2024-39508kernel: io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
  46. CVE-2024-39507kernel: net: hns3: fix kernel crash problem in concurrent scenario
  47. CVE-2024-39506kernel: liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  48. CVE-2024-39505kernel: drm/komeda: check for error-valued pointer
  49. CVE-2024-39504kernel: netfilter: nft_inner: validate mandatory meta and payload
  50. CVE-2024-39503kernel: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type
CVE 2024 document archive — Page 46 | PulseLinux