Latest CVE Feed
-
5.5
MEDIUMCVE-2024-46797
In the Linux kernel, the following vulnerability has been resolved: powerpc/qspinlock: Fix deadlock in MCS queue If an interrupt occurs in queued_spin_lock_slowpath() after we increment qnodesp->count and before node->lock is initialized, another CPU mi... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Sep. 29, 2024
-
5.5
MEDIUMCVE-2024-46771
In the Linux kernel, the following vulnerability has been resolved: can: bcm: Remove proc entry when dev is unregistered. syzkaller reported a warning in bcm_connect() below. [0] The repro calls connect() to vxcan1, removes vxcan1, and calls connect() ... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Nov. 20, 2024
-
5.5
MEDIUMCVE-2024-46750
In the Linux kernel, the following vulnerability has been resolved: PCI: Add missing bridge lock to pci_bus_lock() One of the true positives that the cfg_access_lock lockdep effort identified is this sequence: WARNING: CPU: 14 PID: 1 at drivers/pci/p... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Sep. 30, 2024
-
5.5
MEDIUMCVE-2024-46708
In the Linux kernel, the following vulnerability has been resolved: pinctrl: qcom: x1e80100: Fix special pin offsets Remove the erroneus 0x100000 offset to prevent the boards from crashing on pin state setting, as well as for the intended state changes ... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 19, 2024
-
5.5
MEDIUMCVE-2024-46678
In the Linux kernel, the following vulnerability has been resolved: bonding: change ipsec_lock from spin lock to mutex In the cited commit, bond->ipsec_lock is added to protect ipsec_list, hence xdo_dev_state_add and xdo_dev_state_delete are called insi... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 23, 2024
-
5.5
MEDIUMCVE-2024-46698
In the Linux kernel, the following vulnerability has been resolved: video/aperture: optionally match the device in sysfb_disable() In aperture_remove_conflicting_pci_devices(), we currently only call sysfb_disable() on vga class devices. This leads to ... Read more
Affected Products : linux_kernel- Published: Sep. 13, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-45017
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec RoCE MPV trace call Prevent the call trace below from happening, by not allowing IPsec creation over a slave, if master device doesn't support IPsec. WARNING: CPU: ... Read more
Affected Products : linux_kernel- Published: Sep. 11, 2024
- Modified: Sep. 13, 2024
-
5.5
MEDIUMCVE-2024-44953
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix deadlock during RTC update There is a deadlock when runtime suspend waits for the flush of RTC work, and the RTC work calls ufshcd_rpm_get_sync() to wait for runtim... Read more
Affected Products : linux_kernel- Published: Sep. 04, 2024
- Modified: Mar. 07, 2025
-
5.5
MEDIUMCVE-2024-44298
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access information about a user's contacts.... Read more
Affected Products : macos- Published: Dec. 20, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2024-44200
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may be able to read sensitive location information.... Read more
- Published: Dec. 12, 2024
- Modified: Dec. 13, 2024
-
5.5
MEDIUMCVE-2024-43912
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: disallow setting special AP channel widths Setting the AP channel width is meant for use with the normal 20/40/... MHz channel width progression, and switching around in ... Read more
Affected Products : linux_kernel- Published: Aug. 26, 2024
- Modified: Sep. 05, 2024
-
5.5
MEDIUMCVE-2024-43899
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null pointer deref in dcn20_resource.c Fixes a hang thats triggered when MPV is run on a DCN401 dGPU: mpv --hwdec=vaapi --vo=gpu --hwdec-codecs=all and then enabl... Read more
Affected Products : linux_kernel- Published: Aug. 26, 2024
- Modified: Aug. 27, 2024
-
5.5
MEDIUMCVE-2024-43860
In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_rproc: Skip over memory region when node value is NULL In imx_rproc_addr_init() "nph = of_count_phandle_with_args()" just counts number of phandles. But phandles may be ... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Aug. 22, 2024
-
5.5
MEDIUMCVE-2024-43827
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check before access structs In enable_phantom_plane, we should better check null pointer before accessing various structs.... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Sep. 30, 2024
-
5.5
MEDIUMCVE-2024-43554
Windows Kernel-Mode Driver Information Disclosure Vulnerability... Read more
Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_21h2 windows_11_22h2 windows_10_1507 +5 more products- Published: Oct. 08, 2024
- Modified: Oct. 17, 2024
-
5.5
MEDIUMCVE-2024-42286
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: validate nvme_local_port correctly The driver load failed with error message, qla2xxx [0000:04:00.0]-ffff:0: register_localport failed: ret=ffffffef and with a kernel c... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Sep. 10, 2024
-
5.5
MEDIUMCVE-2024-42270
In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). We had a report that iptables-restore sometimes triggered null-ptr-deref at boot time. [0] The problem is that ipta... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Aug. 19, 2024
-
5.5
MEDIUMCVE-2024-42269
In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). ip6table_nat_table_init() accesses net->gen->ptr[ip6table_nat_net_ops.id], but the function is exposed to... Read more
Affected Products : linux_kernel- Published: Aug. 17, 2024
- Modified: Aug. 19, 2024
-
5.5
MEDIUMCVE-2024-42254
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix error pbuf checking Syz reports a problem, which boils down to NULL vs IS_ERR inconsistent error handling in io_alloc_pbuf_ring(). KASAN: null-ptr-deref in range [0x00000... Read more
Affected Products : linux_kernel- Published: Aug. 08, 2024
- Modified: Mar. 24, 2025
-
5.5
MEDIUMCVE-2024-42149
In the Linux kernel, the following vulnerability has been resolved: fs: don't misleadingly warn during thaw operations The block device may have been frozen before it was claimed by a filesystem. Concurrently another process might try to mount that froz... Read more
Affected Products : linux_kernel- Published: Jul. 30, 2024
- Modified: Dec. 09, 2024