Latest CVE Feed
-
5.5
MEDIUMCVE-2024-53180
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Add sanity NULL check for the default mmap fault handler A driver might allow the mmap access before initializing its runtime->dma_area properly. Add a proper NULL check bef... Read more
Affected Products : linux_kernel- Published: Dec. 27, 2024
- Modified: Jan. 16, 2025
-
5.5
MEDIUMCVE-2024-53163
In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat_420xx - fix off by one in uof_get_name() This is called from uof_get_name_420xx() where "num_objs" is the ARRAY_SIZE() of fw_objs[]. The > needs to be >= to prevent an ... Read more
Affected Products : linux_kernel- Published: Dec. 24, 2024
- Modified: Mar. 06, 2025
-
5.5
MEDIUMCVE-2024-53145
In the Linux kernel, the following vulnerability has been resolved: um: Fix potential integer overflow during physmem setup This issue happens when the real map size is greater than LONG_MAX, which can be easily triggered on UML/i386.... Read more
Affected Products : linux_kernel- Published: Dec. 24, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2024-53138
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix incorrect page refcounting The kTLS tx handling code is using a mix of get_page() and page_ref_inc() APIs to increment the page reference. But on the release path (... Read more
Affected Products : linux_kernel- Published: Dec. 04, 2024
- Modified: Dec. 14, 2024
-
5.5
MEDIUMCVE-2024-53112
In the Linux kernel, the following vulnerability has been resolved: ocfs2: uncache inode which has failed entering the group Syzbot has reported the following BUG: kernel BUG at fs/ocfs2/uptodate.c:509! ... Call Trace: <TASK> ? __die_body+0x5f/0xb0 ... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 14, 2024
-
5.5
MEDIUMCVE-2024-53085
In the Linux kernel, the following vulnerability has been resolved: tpm: Lock TPM chip in tpm_pm_suspend() first Setting TPM_CHIP_FLAG_SUSPENDED in the end of tpm_pm_suspend() can be racy according, as this leaves window for tpm_hwrng_read() to be calle... Read more
Affected Products : linux_kernel- Published: Nov. 19, 2024
- Modified: Dec. 09, 2024
-
5.5
MEDIUMCVE-2024-53077
In the Linux kernel, the following vulnerability has been resolved: rpcrdma: Always release the rpcrdma_device's xa_array Dai pointed out that the xa_init_flags() in rpcrdma_add_one() needs to have a matching xa_destroy() in rpcrdma_remove_one() to rele... Read more
Affected Products : linux_kernel- Published: Nov. 19, 2024
- Modified: Nov. 25, 2024
-
5.5
MEDIUMCVE-2024-53073
In the Linux kernel, the following vulnerability has been resolved: NFSD: Never decrement pending_async_copies on error The error flow in nfsd4_copy() calls cleanup_async_copy(), which already decrements nn->pending_async_copies.... Read more
Affected Products : linux_kernel- Published: Nov. 19, 2024
- Modified: Dec. 14, 2024
-
5.5
MEDIUMCVE-2024-53064
In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpf_vc_core_init error path In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and wa... Read more
Affected Products : linux_kernel- Published: Nov. 19, 2024
- Modified: Nov. 25, 2024
-
5.5
MEDIUMCVE-2024-53049
In the Linux kernel, the following vulnerability has been resolved: slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof 'modprobe slub_kunit' will have a warning as shown below. The root cause is that __kmalloc_cache_noprof was directly us... Read more
Affected Products : linux_kernel- Published: Nov. 19, 2024
- Modified: Nov. 22, 2024
-
5.5
MEDIUMCVE-2024-52337
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker coul... Read more
- Published: Nov. 26, 2024
- Modified: Feb. 25, 2025
-
5.5
MEDIUMCVE-2024-50300
In the Linux kernel, the following vulnerability has been resolved: regulator: rtq2208: Fix uninitialized use of regulator_config Fix rtq2208 driver uninitialized use to cause kernel error.... Read more
Affected Products : linux_kernel- Published: Nov. 19, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-50288
In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix buffer overwrite when using > 32 buffers The maximum number of buffers that can be requested was increased to 64 for the video capture queue. But video capture used a ... Read more
Affected Products : linux_kernel- Published: Nov. 19, 2024
- Modified: Nov. 27, 2024
-
5.5
MEDIUMCVE-2024-50271
In the Linux kernel, the following vulnerability has been resolved: signal: restore the override_rlimit logic Prior to commit d64696905554 ("Reimplement RLIMIT_SIGPENDING on top of ucounts") UCOUNT_RLIMIT_SIGPENDING rlimit was not enforced for a class o... Read more
Affected Products : linux_kernel- Published: Nov. 19, 2024
- Modified: Nov. 27, 2024
-
5.5
MEDIUMCVE-2024-50202
In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors from nilfs_find_entry() Syzbot reported that a task hang occurs in vcs_open() during a fuzzing test for nilfs2. The root cause of this problem i... Read more
Affected Products : linux_kernel- Published: Nov. 08, 2024
- Modified: Nov. 19, 2024
-
5.5
MEDIUMCVE-2024-50196
In the Linux kernel, the following vulnerability has been resolved: pinctrl: ocelot: fix system hang on level based interrupts The current implementation only calls chained_irq_enter() and chained_irq_exit() if it detects pending interrupts. ``` for (i... Read more
Affected Products : linux_kernel- Published: Nov. 08, 2024
- Modified: Nov. 29, 2024
-
5.5
MEDIUMCVE-2024-50173
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup() The group variable can't be used to retrieve ptdev in our second loop, because it points to the previously iterat... Read more
Affected Products : linux_kernel- Published: Nov. 08, 2024
- Modified: Nov. 27, 2024
-
5.5
MEDIUMCVE-2024-50172
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a possible memory leak In bnxt_re_setup_chip_ctx() when bnxt_qplib_map_db_bar() fails driver is not freeing the memory allocated for "rdev->chip_ctx".... Read more
Affected Products : linux_kernel- Published: Nov. 07, 2024
- Modified: Nov. 13, 2024
-
5.5
MEDIUMCVE-2024-50165
In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve param->string when parsing mount options In bpf_parse_param(), keep the value of param->string intact so it can be freed later. Otherwise, the kmalloc area pointed to by p... Read more
Affected Products : linux_kernel- Published: Nov. 07, 2024
- Modified: Nov. 22, 2024
-
5.5
MEDIUMCVE-2024-50166
In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix refcount handling of fman-related devices In mac_probe() there are multiple calls to of_find_device_by_node(), fman_bind() and fman_port_bind() which takes references to o... Read more
Affected Products : linux_kernel- Published: Nov. 07, 2024
- Modified: Nov. 22, 2024