CVE 2024 document archive · 48
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,167 documents · Identifier year 2024 · 48 / 84
- CVE-2024-39282kernel: net: wwan: t7xx: Fix FSM command timeout issue
- CVE-2024-39279microcode_ctl: Insufficient granularity of access control in UEFI firmware
- CVE-2024-39277kernel: dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- CVE-2024-39276kernel: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- CVE-2024-39249nodejs-async: Regular expression denial of service while parsing function in autoinject
- CVE-2024-39134zziplib: Stack buffer overflow via __zzip_fetch_disk_trailer() function at zzip/zip.c
- CVE-2024-39133zziplib: Heap buffer overflow in the __zzip_parse_root_directory() function at /zzip/zip.c
- CVE-2024-38798EDK2: EDK2: Information Disclosure and Privilege Escalation via Local BIOS Access
- CVE-2024-38797edk2: Out-of-bounds Read in EDK2
- CVE-2024-38796edk2: Integer overflows in PeCoffLoaderRelocateImage
- CVE-2024-38780kernel: dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- CVE-2024-38667kernel: riscv: prevent pt_regs corruption for secondary idle threads
- CVE-2024-38664kernel: drm: zynqmp_dpsub: Always register bridge
- CVE-2024-38663kernel: blk-cgroup: fix list corruption from resetting io stat
- CVE-2024-38662kernel: bpf: Allow delete from sockmap/sockhash only if update is allowed
- CVE-2024-38661kernel: s390/ap: Fix crash in AP internal function modify_bitmap()
- CVE-2024-38659kernel: enic: Validate length of nl attributes in enic_set_vf_port
- CVE-2024-38637kernel: greybus: lights: check return of get_channel_from_mode
- CVE-2024-38636kernel: f2fs: multidev: fix to recognize valid zero block address
- CVE-2024-38635kernel: soundwire: cadence: fix invalid PDI offset
- CVE-2024-38634kernel: serial: max3100: Lock port->lock when calling uart_handle_cts_change()
- CVE-2024-38633kernel: serial: max3100: Update uart_driver_registered on driver removal
- CVE-2024-38632kernel: vfio/pci: fix potential memory leak in vfio_intx_enable()
- CVE-2024-38631kernel: iio: adc: PAC1934: fix accessing out of bounds array index
- CVE-2024-38630kernel: watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- CVE-2024-38629kernel: dmaengine: idxd: Avoid unnecessary destruction of file_ida
- CVE-2024-38628kernel: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.
- CVE-2024-38627kernel: stm class: Fix a double free in stm_register_device()
- CVE-2024-38626kernel: fuse: clear FR_SENT when re-adding requests into pending list
- CVE-2024-38625kernel: fs/ntfs3: Check 'folio' pointer for NULL
- CVE-2024-38624kernel: fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- CVE-2024-38623kernel: fs/ntfs3: Use variable length array instead of fixed size
- CVE-2024-38622kernel: drm/msm/dpu: Add callback function pointer check before its call
- CVE-2024-38621kernel: media: stk1160: fix bounds checking in stk1160_copy_video()
- CVE-2024-38620kernel: Bluetooth: HCI: Remove HCI_AMP support
- CVE-2024-38619kernel: usb-storage: alauda: Check whether the media is initialized
- CVE-2024-38618kernel: ALSA: timer: Set lower bound of start tick time
- CVE-2024-38617kernel: kunit/fortify: Fix mismatched kvalloc()/vfree() usage
- CVE-2024-38616kernel: wifi: carl9170: re-fix fortified-memset warning
- CVE-2024-38615kernel: cpufreq: exit() callback is optional
- CVE-2024-38614kernel: openrisc: traps: Don't send signals to kernel mode threads
- CVE-2024-38613kernel: m68k: Fix spinlock race in kernel thread creation
- CVE-2024-38612kernel: ipv6: sr: fix invalid unregister error path
- CVE-2024-38611kernel: media: i2c: et8ek8: Don't strip remove function when driver is builtin
- CVE-2024-38610kernel: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()
- CVE-2024-38609kernel: wifi: mt76: connac: check for null before dereferencing
- CVE-2024-38608kernel: net/mlx5e: Fix netif state handling
- CVE-2024-38607kernel: macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- CVE-2024-38606kernel: crypto: qat - validate slices count returned by FW
- CVE-2024-38605kernel: ALSA: core: Fix NULL module pointer assignment at card init