Latest CVE Feed
-
5.5
MEDIUMCVE-2024-56746
In the Linux kernel, the following vulnerability has been resolved: fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() When information such as info->screen_base is not ready, calling sh7760fb_free_mem() does not release memory correctl... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Apr. 17, 2025
-
5.5
MEDIUMCVE-2024-56725
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c Add error pointer check after calling otx2_mbox_get_rsp().... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Jan. 09, 2025
-
5.5
MEDIUMCVE-2024-56710
In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in ceph_direct_read_write() The bvecs array which is allocated in iter_get_bvecs_alloc() is leaked and pages remain pinned if ceph_alloc_sparse_ext_map() fails. T... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Apr. 17, 2025
-
5.5
MEDIUMCVE-2024-56743
In the Linux kernel, the following vulnerability has been resolved: nfs_common: must not hold RCU while calling nfsd_file_put_local Move holding the RCU from nfs_to_nfsd_file_put_local to nfs_to_nfsd_net_put. It is the call to nfs_to->nfsd_serv_put tha... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2024-56726
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c Add error pointer check after calling otx2_mbox_get_rsp().... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Jan. 06, 2025
-
5.5
MEDIUMCVE-2024-56697
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info() Fix two issues with memory allocation in amdgpu_discovery_get_nps_info() for mem_ranges: - Add a check f... Read more
Affected Products : linux_kernel- Published: Dec. 28, 2024
- Modified: Jan. 08, 2025
-
5.5
MEDIUMCVE-2024-56712
In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix memory leak on last export_udmabuf() error path In export_udmabuf(), if dma_buf_fd() fails because the FD table is full, a dma_buf owning the udmabuf has already been creat... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Apr. 17, 2025
-
5.5
MEDIUMCVE-2024-56673
In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Do not call pmd dtor on vmemmap page table teardown The vmemmap's, which is used for RV64 with SPARSEMEM_VMEMMAP, page tables are populated using pmd (page middle directory) ... Read more
Affected Products : linux_kernel- Published: Dec. 27, 2024
- Modified: Jan. 06, 2025
-
5.5
MEDIUMCVE-2024-56717
In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic() Packets injected by the CPU should have a SRC_PORT field equal to the CPU port module index in the Analyzer... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Jan. 10, 2025
-
5.5
MEDIUMCVE-2024-56661
In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in cleanup_bearer() syzbot found [1] that after blamed commit, ub->ubsock->sk was NULL when attempting the atomic_dec() : atomic_dec(&tipc_net(sock_net(ub->ubsock-... Read more
Affected Products : linux_kernel- Published: Dec. 27, 2024
- Modified: Jan. 06, 2025
-
5.5
MEDIUMCVE-2024-56779
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur The action force umount(umount -f) will attempt to kill all rpc_task even umount operation may ultimately fail if some fil... Read more
Affected Products : linux_kernel- Published: Jan. 08, 2025
- Modified: Jan. 09, 2025
- Vuln Type: Race Condition
-
5.5
MEDIUMCVE-2024-56752
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() When the call to gf100_grctx_generate() fails, unlock gr->fecs.mutex before returning the error. Fixes smatch warning: ... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Jan. 06, 2025
-
5.5
MEDIUMCVE-2024-56771
In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information These four chips: * W25N512GW * W25N01GW * W25N01JW * W25N02JW all require a single bit of ECC strength and thus fe... Read more
Affected Products : linux_kernel- Published: Jan. 08, 2025
- Modified: Jan. 10, 2025
- Vuln Type: Misconfiguration
-
5.5
MEDIUMCVE-2024-56660
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, prevent potential error pointer dereference The dr_domain_add_vport_cap() function generally returns NULL on error but sometimes we want it to return ERR_PTR(-EBUSY) so th... Read more
Affected Products : linux_kernel- Published: Dec. 27, 2024
- Modified: Jan. 06, 2025
-
5.5
MEDIUMCVE-2024-56724
In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has (in... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Jan. 09, 2025
-
5.5
MEDIUMCVE-2024-56689
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio' If platform_get_resource_byname() fails and returns NULL because DT lacks an 'mmio' property for the MHI endpoint, dere... Read more
Affected Products : linux_kernel- Published: Dec. 28, 2024
- Modified: Jan. 08, 2025
-
5.5
MEDIUMCVE-2024-56668
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix qi_batch NULL pointer with nested parent domain The qi_batch is allocated when assigning cache tag for a domain. While for nested parent domain, it is missed. Hence, whe... Read more
Affected Products : linux_kernel- Published: Dec. 27, 2024
- Modified: Jan. 06, 2025
-
5.5
MEDIUMCVE-2024-56659
In the Linux kernel, the following vulnerability has been resolved: net: lapb: increase LAPB_HEADER_LEN It is unclear if net/lapb code is supposed to be ready for 8021q. We can at least avoid crashes like the following : skbuff: skb_under_panic: text:... Read more
Affected Products : linux_kernel- Published: Dec. 27, 2024
- Modified: Jan. 06, 2025
-
5.5
MEDIUMCVE-2024-56745
In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reset_method_store() memory leak In reset_method_store(), a string is allocated via kstrndup() and assigned to the local "options". options is then used in with strsep() to fin... Read more
Affected Products : linux_kernel- Published: Dec. 29, 2024
- Modified: Apr. 17, 2025
-
5.5
MEDIUMCVE-2024-56667
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix NULL pointer dereference in capture_engine When the intel_context structure contains NULL, it raises a NULL pointer dereference error in drm_info(). (cherry picked from c... Read more
Affected Products : linux_kernel- Published: Dec. 27, 2024
- Modified: Jan. 06, 2025