CVE 2024 document archive · 49
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
4,167 documents · Identifier year 2024 · 49 / 84
- CVE-2024-38604kernel: block: refine the EOF check in blkdev_iomap_begin
- CVE-2024-38603kernel: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- CVE-2024-38602kernel: ax25: Fix reference count leak issues of ax25_dev
- CVE-2024-38601kernel: ring-buffer: Fix a race between readers and resize checks
- CVE-2024-38600kernel: ALSA: Fix deadlocks with kctl removals at disconnection
- CVE-2024-38599kernel: jffs2: prevent xattr node from overflowing the eraseblock
- CVE-2024-38598kernel: md: fix resync softlockup when bitmap size is less than array size
- CVE-2024-38597kernel: eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- CVE-2024-38596kernel: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- CVE-2024-38595kernel: net/mlx5: Fix peer devlink set for SF representor devlink port
- CVE-2024-38594kernel: net: stmmac: move the EST lock to struct stmmac_priv
- CVE-2024-38593kernel: net: micrel: Fix receiving the timestamp in the frame for lan8841
- CVE-2024-38592kernel: drm/mediatek: Init `ddp_comp` with devm_kcalloc()
- CVE-2024-38591kernel: RDMA/hns: Fix deadlock on SRQ async events.
- CVE-2024-38590kernel: RDMA/hns: Modify the print level of CQE error
- CVE-2024-38589kernel: netrom: fix possible dead-lock in nr_rt_ioctl()
- CVE-2024-38588kernel: ftrace: Fix possible use-after-free issue in ftrace_location()
- CVE-2024-38587kernel: speakup: Fix sizeof() vs ARRAY_SIZE() bug
- CVE-2024-38586kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- CVE-2024-38585kernel: tools/nolibc/stdlib: fix memory error in realloc()
- CVE-2024-38584kernel: net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe()
- CVE-2024-38583kernel: nilfs2: fix use-after-free of timer for log writer thread
- CVE-2024-38582kernel: nilfs2: fix potential hang in nilfs_detach_log_writer()
- CVE-2024-38581kernel: drm/amdgpu/mes: fix use-after-free issue
- CVE-2024-38580kernel: epoll: be better about file lifetimes
- CVE-2024-38579kernel: crypto: bcm - Fix pointer arithmetic
- CVE-2024-38578kernel: ecryptfs: Fix buffer size for tag 66 packet
- CVE-2024-38577kernel: rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- CVE-2024-38576kernel: rcu: Fix buffer overflow in print_cpu_stall_info()
- CVE-2024-38575kernel: wifi: brcmfmac: pcie: handle randbuf allocation failure
- CVE-2024-38574kernel: libbpf: Prevent null-pointer dereference when prog to load has no BTF
- CVE-2024-38573kernel: cppc_cpufreq: Fix possible null pointer dereference
- CVE-2024-38572kernel: wifi: ath12k: fix out-of-bound access of qmi_invoke_handler()
- CVE-2024-38571kernel: thermal/drivers/tsens: Fix null pointer dereference
- CVE-2024-38570kernel: gfs2: Fix potential glock use-after-free on unmount
- CVE-2024-38569kernel: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- CVE-2024-38568kernel: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- CVE-2024-38567kernel: wifi: carl9170: add a proper sanity check for endpoints
- CVE-2024-38566kernel: bpf: Fix verifier assumptions about socket->sk
- CVE-2024-38565kernel: wifi: ar5523: enable proper endpoint verification
- CVE-2024-38564kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- CVE-2024-38563kernel: wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature
- CVE-2024-38562kernel: wifi: nl80211: Avoid address calculations via out of bounds array indexing
- CVE-2024-38561kernel: kunit: Fix kthread reference
- CVE-2024-38560kernel: scsi: bfa: Ensure the copied buf is NUL terminated
- CVE-2024-38559kernel: scsi: qedf: Ensure the copied buf is NUL terminated
- CVE-2024-38558kernel: net: openvswitch: fix overwriting ct original tuple for ICMPv6
- CVE-2024-38557kernel: net/mlx5: Reload only IB representors upon lag disable/enable
- CVE-2024-38556kernel: net/mlx5: Add a timeout to acquire the command queue semaphore
- CVE-2024-38555kernel: net/mlx5: Discard command completions in internal error