Latest CVE Feed
-
5.5
MEDIUMCVE-2024-27012
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: restore set elements when delete set fails From abort path, nft_mapelem_activate() needs to restore refcounters to the original state. Currently, it uses the set->... Read more
- Published: May. 01, 2024
- Modified: Dec. 27, 2024
-
5.5
MEDIUMCVE-2024-26966
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the array... Read more
- Published: May. 01, 2024
- Modified: Dec. 23, 2024
-
5.5
MEDIUMCVE-2024-26858
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map Just simply reordering the functions mlx5e_ptp_metadata_map_put and m... Read more
Affected Products : linux_kernel- Published: Apr. 17, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-26790
In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read There is chip (ls1028a) errata: The SoC may hang on 16 byte unaligned read transactions by QDMA. Unaligned read transac... Read more
- Published: Apr. 04, 2024
- Modified: Feb. 27, 2025
-
5.5
MEDIUMCVE-2024-26743
In the Linux kernel, the following vulnerability has been resolved: RDMA/qedr: Fix qedr_create_user_qp error flow Avoid the following warning by making sure to free the allocated resources in case that qedr_init_user_queue() fail. -----------[ cut here... Read more
- Published: Apr. 03, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2024-26727
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not ASSERT() if the newly created subvolume already got read [BUG] There is a syzbot crash, triggered by the ASSERT() during subvolume creation: assertion failed: !anon_dev,... Read more
- Published: Apr. 03, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2024-26715
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend In current scenario if Plug-out and Plug-In performed continuously there could be a chance while checking for dwc-... Read more
Affected Products : linux_kernel- Published: Apr. 03, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2024-26700
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix MST Null Ptr for RV The change try to fix below error specific to RV platform: BUG: kernel NULL pointer dereference, address: 0000000000000008 PGD 0 P4D 0 Oops: 00... Read more
Affected Products : linux_kernel- Published: Apr. 03, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2024-26686
In the Linux kernel, the following vulnerability has been resolved: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats lock_task_sighand() can trigger a hard lockup. If NR_CPUS threads call do_task_stat() at the same time a... Read more
Affected Products : linux_kernel- Published: Apr. 03, 2024
- Modified: May. 02, 2025
-
5.5
MEDIUMCVE-2024-26662
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()' 'panel_cntl' structure used to control the display panel could be null, dereferencing it could lead to a... Read more
Affected Products : linux_kernel- Published: Apr. 02, 2024
- Modified: Apr. 08, 2025
-
5.5
MEDIUMCVE-2024-26642
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with timeout flag Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure l... Read more
- Published: Mar. 21, 2024
- Modified: Mar. 13, 2025
-
5.5
MEDIUMCVE-2024-26637
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: rely on mac80211 debugfs handling for vif mac80211 started to delete debugfs entries in certain cases, causing a ath11k to crash when it tried to delete the entries later.... Read more
Affected Products : linux_kernel- Published: Mar. 18, 2024
- Modified: Mar. 10, 2025
-
5.5
MEDIUMCVE-2024-26632
In the Linux kernel, the following vulnerability has been resolved: block: Fix iterating over an empty bio with bio_for_each_folio_all If the bio contains no data, bio_first_folio() calls page_folio() on a NULL pointer and oopses. Move the test that we... Read more
Affected Products : linux_kernel- Published: Mar. 18, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-26603
In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Stop relying on userspace for info to fault in xsave buffer Before this change, the expected size of the user space buffer was taken from fx_sw->xstate_size. fx_sw->xstate_size... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-26590
In the Linux kernel, the following vulnerability has been resolved: erofs: fix inconsistent per-file compression format EROFS can select compression algorithms on a per-file basis, and each per-file compression algorithm needs to be marked in the on-dis... Read more
Affected Products : linux_kernel- Published: Feb. 22, 2024
- Modified: Apr. 22, 2025
-
5.5
MEDIUMCVE-2024-26209
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability... Read more
Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_21h2 windows_11_22h2 +6 more products- Published: Apr. 09, 2024
- Modified: Dec. 06, 2024
-
5.5
MEDIUMCVE-2024-26172
Windows DWM Core Library Information Disclosure Vulnerability... Read more
Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_21h2 windows_11_22h2 windows windows_11_23h2 windows_server_2022_23h2 +1 more products- Published: Apr. 09, 2024
- Modified: Jan. 08, 2025
-
5.5
MEDIUMCVE-2024-25629
c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc/nsswitch.conf`, the `HOSTALIASES` file, and if using a c-ares version prior to 1.27.0, the `/etc/hosts` f... Read more
- Published: Feb. 23, 2024
- Modified: Feb. 05, 2025
-
5.5
MEDIUMCVE-2024-24246
Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/shared_ptr_base.h.... Read more
- Published: Feb. 29, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-23266
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to modify protected parts of the file system.... Read more
Affected Products : macos- Published: Mar. 08, 2024
- Modified: Mar. 25, 2025