Latest CVE Feed
-
5.5
MEDIUMCVE-2024-46840
In the Linux kernel, the following vulnerability has been resolved: btrfs: clean up our handling of refs == 0 in snapshot delete In reada we BUG_ON(refs == 0), which could be unkind since we aren't holding a lock on the extent leaf and thus could get a ... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 08, 2024
-
5.5
MEDIUMCVE-2024-46838
In the Linux kernel, the following vulnerability has been resolved: userfaultfd: don't BUG_ON() if khugepaged yanks our page table Since khugepaged was changed to allow retracting page tables in file mappings without holding the mmap lock, these BUG_ON(... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 09, 2024
-
5.5
MEDIUMCVE-2024-46842
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info The MBX_TIMEOUT return code is not handled in lpfc_get_sfp_info and the routine unconditionally frees submitted mailbox commands... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 08, 2024
-
5.5
MEDIUMCVE-2024-46829
In the Linux kernel, the following vulnerability has been resolved: rtmutex: Drop rt_mutex::wait_lock before scheduling rt_mutex_handle_deadlock() is called with rt_mutex::wait_lock held. In the good case it returns with the lock held and in the deadlo... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 02, 2024
-
5.5
MEDIUMCVE-2024-46834
In the Linux kernel, the following vulnerability has been resolved: ethtool: fail closed if we can't get max channel used in indirection tables Commit 0d1b7d6c9274 ("bnxt: fix crashes when reducing ring count with active RSS contexts") proves that allow... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 09, 2024
-
5.5
MEDIUMCVE-2024-46822
In the Linux kernel, the following vulnerability has been resolved: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry In a review discussion of the changes to support vCPU hotplug where a check was added on the GICC being enabled if wa... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 02, 2024
-
5.5
MEDIUMCVE-2024-46826
In the Linux kernel, the following vulnerability has been resolved: ELF: fix kernel.randomize_va_space double read ELF loader uses "randomize_va_space" twice. It is sysctl and can change at any moment, so 2 loads could see 2 different values in theory w... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Nov. 20, 2024
-
5.5
MEDIUMCVE-2020-14314
A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with broken indexing. This flaw allows a local user to crash the system if the directory exists. The highest t... Read more
- Published: Sep. 15, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-46824
In the Linux kernel, the following vulnerability has been resolved: iommufd: Require drivers to supply the cache_invalidate_user ops If drivers don't do this then iommufd will oops invalidation ioctls with something like: Unable to handle kernel NULL... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 02, 2024
-
5.5
MEDIUMCVE-2024-46825
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check The lookup function iwl_mvm_rcu_fw_link_id_to_link_conf() is normally called with input from the firmware, so it should use IWL_FW... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Nov. 20, 2024
-
5.5
MEDIUMCVE-2024-46817
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 [Why] Coverity reports OVERRUN warning. Should abort amdgpu_dm initialize. [How] Return failure to amdgpu_dm_... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Nov. 20, 2024
-
5.5
MEDIUMCVE-2020-1367
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1389, CVE-2020-1419, CVE-2020-1426.... Read more
Affected Products : windows_10 windows_server_2016 windows_server_2019 windows_server windows windows_11_23h2- Published: Jul. 14, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-46819
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: the warning dereferencing obj for nbio_v7_4 if ras_manager obj null, don't print NBIO err data... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 04, 2024
-
5.5
MEDIUMCVE-2024-46827
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with a... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Nov. 20, 2024
-
5.5
MEDIUMCVE-2024-46809
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check BIOS images before it is used BIOS images may fail to load and null checks are added before they are used. This fixes 6 NULL_RETURNS issues reported by Coverity.... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Dec. 14, 2024
-
5.5
MEDIUMCVE-2024-46823
In the Linux kernel, the following vulnerability has been resolved: kunit/overflow: Fix UB in overflow_allocation_test The 'device_name' array doesn't exist out of the 'overflow_allocation_test' function scope. However, it is being used as a driver name... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Apr. 10, 2025
-
5.5
MEDIUMCVE-2020-1330
An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability'.... Read more
Affected Products : windows_10 windows_server_2016 windows_server_2019 windows_server windows windows_11_23h2- Published: Jul. 14, 2020
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-46810
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ Make sure the connector is fully initialized before signalling any HPD events via drm_kms_helper_hot... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 04, 2024
-
5.5
MEDIUMCVE-2024-46867
In the Linux kernel, the following vulnerability has been resolved: drm/xe/client: fix deadlock in show_meminfo() There is a real deadlock as well as sleeping in atomic() bug in here, if the bo put happens to be the last ref, since bo destruction wants ... Read more
Affected Products : linux_kernel- Published: Sep. 27, 2024
- Modified: Oct. 01, 2024
-
5.5
MEDIUMCVE-2024-46801
In the Linux kernel, the following vulnerability has been resolved: libfs: fix get_stashed_dentry() get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs to ensure to hold rcu lock before it dereferen... Read more
Affected Products : linux_kernel- Published: Sep. 18, 2024
- Modified: Sep. 20, 2024