PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2024 document archive · 53

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,167 documents · Identifier year 2024 · 53 / 84

  1. CVE-2024-36880kernel: Bluetooth: qca: add missing firmware sanity checks
  2. CVE-2024-36699gdb: buffer overflow in gdb.selected_inferior().read_memory
  3. CVE-2024-36600libcdio: crafted iso image file leads to arbitrary code execution
  4. CVE-2024-36489kernel: tls: fix missing memory barrier in tls_init
  5. CVE-2024-36484kernel: net: relax socket state check at accept time.
  6. CVE-2024-36481kernel: tracing/probes: fix error check in parse_btf_field()
  7. CVE-2024-36479kernel: fpga: bridge: add owner module and take its refcount
  8. CVE-2024-36478kernel: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
  9. CVE-2024-36477kernel: tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer
  10. CVE-2024-36476kernel: RDMA/rtrs: Ensure 'ib_sge list' is accessible
  11. CVE-2024-36474libgsf: Compound Document Binary File Directory integer overflow vulnerability
  12. CVE-2024-36472gnome-shell: code execution in portal helper
  13. CVE-2024-36387mod_http2: DoS by null pointer in websocket over HTTP/2
  14. CVE-2024-36357kernel: transient execution vulnerability in some AMD processors
  15. CVE-2024-36353kernel: hw:amd Cross-Process GPU memory disclosure
  16. CVE-2024-36350kernel: information leak via transient execution vulnerability in some AMD processors
  17. CVE-2024-36347kernel: hw:amd: Improper signature verification in AMD CPU ROM microcode patch loader
  18. CVE-2024-36293kernel: microcode_ctl: From CVEorg collector
  19. CVE-2024-36288kernel: SUNRPC: Fix loop termination condition in gss_free_in_token_pages()
  20. CVE-2024-36286kernel: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
  21. CVE-2024-36281kernel: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules
  22. CVE-2024-36270kernel: netfilter: tproxy: bail out if IP has been disabled on the device
  23. CVE-2024-36244kernel: net/sched: taprio: extend minimum interval restriction to entire cycle too
  24. CVE-2024-36137nodejs: fs.fchown/fchmod bypasses permission model
  25. CVE-2024-36039python-pymysql: SQL injection if used with untrusted JSON input
  26. CVE-2024-36033kernel: Bluetooth: qca: fix info leak when fetching board id
  27. CVE-2024-36032kernel: Bluetooth: qca: fix info leak when fetching fw build id
  28. CVE-2024-36031kernel: keys: Fix overwrite of key expiration on instantiation
  29. CVE-2024-36030kernel: octeontx2-af: fix the double free in rvu_npc_freemem()
  30. CVE-2024-36029kernel: mmc: sdhci-msm: pervent access to suspended controller
  31. CVE-2024-36028kernel: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio()
  32. CVE-2024-36027kernel: btrfs: zoned: do not flag ZEROOUT on non-dirty extent buffer
  33. CVE-2024-36026kernel: drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11
  34. CVE-2024-36025kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()
  35. CVE-2024-36024kernel: drm/amd/display: Disable idle reallow as part of command/gpint execution
  36. CVE-2024-36023kernel: Julia Lawall reported this null pointer dereference, this should fix it.
  37. CVE-2024-36022kernel: drm/amdgpu: Init zone device and drm client after mode-1 reset on reload
  38. CVE-2024-36021kernel: net: hns3: fix kernel crash when devlink reload during pf initialization
  39. CVE-2024-36020kernel: i40e: fix vf may be used uninitialized in this function warning
  40. CVE-2024-36019kernel: regmap: maple: Fix cache corruption in regcache_maple_drop()
  41. CVE-2024-36018kernel: nouveau/uvmm: fix addr/range calcs for remap operations
  42. CVE-2024-36017kernel: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
  43. CVE-2024-36016kernel: tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  44. CVE-2024-36015kernel: ppdev: Add an error check in register_device
  45. CVE-2024-36014kernel: drm/arm/malidp: fix a possible null pointer dereference
  46. CVE-2024-36013kernel: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()
  47. CVE-2024-36012kernel: Bluetooth: msft: fix slab-use-after-free in msft_do_close()
  48. CVE-2024-36011kernel: Bluetooth: HCI: Fix potential null-ptr-deref
  49. CVE-2024-36010kernel: igb: Fix string truncation warnings in igb_set_fw_version
  50. CVE-2024-36009kernel: ax25: Fix netdev refcount issue
CVE 2024 document archive — Page 53 | PulseLinux