Latest CVE Feed
-
5.5
MEDIUMCVE-2024-26833
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix memory leak in dm_sw_fini() After destroying dmub_srv, the memory associated with it is not freed, causing a memory leak: unreferenced object 0xffff896302b45800 (s... Read more
- Published: Apr. 17, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2024-26829
In the Linux kernel, the following vulnerability has been resolved: media: ir_toy: fix a memleak in irtoy_tx When irtoy_command fails, buf should be freed since it is allocated by irtoy_tx, or there is a memleak.... Read more
Affected Products : linux_kernel- Published: Apr. 17, 2024
- Modified: Jun. 19, 2025
-
5.5
MEDIUMCVE-2024-26825
In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free rx_data_reassembly skb on NCI device cleanup rx_data_reassembly skb is stored during NCI data exchange for processing fragmented packets. It is dropped only when the last... Read more
- Published: Apr. 17, 2024
- Modified: Mar. 27, 2025
-
5.5
MEDIUMCVE-2024-26823
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems While refactoring the way the ITSs are probed, the handling of quirks applicable to ACPI-based platforms was lost. As a ... Read more
Affected Products : linux_kernel- Published: Apr. 17, 2024
- Modified: Mar. 27, 2025
-
5.5
MEDIUMCVE-2024-26816
In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CONFIG_XEN_PV=y, .text symbols are emitted into the .notes section so that Xen can find the "startup_xen" entry poin... Read more
- Published: Apr. 10, 2024
- Modified: Mar. 27, 2025
-
5.5
MEDIUMCVE-2024-26822
In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, uid and cruid for multiuser automounts When uid, gid and cruid are not specified, we need to dynamically set them into the filesystem context used for autom... Read more
Affected Products : linux_kernel- Published: Apr. 17, 2024
- Modified: Mar. 27, 2025
-
5.5
MEDIUMCVE-2024-26824
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - Remove bogus SGL free on zero-length error path When a zero-length message is hashed by algif_hash, and an error is triggered, it tries to free an SG list that was ... Read more
Affected Products : linux_kernel- Published: Apr. 17, 2024
- Modified: Mar. 27, 2025
-
5.5
MEDIUMCVE-2024-26814
In the Linux kernel, the following vulnerability has been resolved: vfio/fsl-mc: Block calling interrupt handler without trigger The eventfd_ctx trigger pointer of the vfio_fsl_mc_irq object is initially NULL and may become NULL if the user sets the tri... Read more
- Published: Apr. 05, 2024
- Modified: Mar. 27, 2025
-
5.5
MEDIUMCVE-2024-26807
In the Linux kernel, the following vulnerability has been resolved: Both cadence-quadspi ->runtime_suspend() and ->runtime_resume() implementations start with: struct cqspi_st *cqspi = dev_get_drvdata(dev); struct spi_controller *host = dev_get_drvdat... Read more
Affected Products : linux_kernel- Published: Apr. 04, 2024
- Modified: May. 22, 2025
-
5.5
MEDIUMCVE-2024-26808
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain Remove netdevice from inet/ingress basechain in case NETDEV_UNREGISTER event is reported, otherwise a st... Read more
- Published: Apr. 04, 2024
- Modified: Apr. 04, 2025
-
5.5
MEDIUMCVE-2024-26806
In the Linux kernel, the following vulnerability has been resolved: spi: cadence-qspi: remove system-wide suspend helper calls from runtime PM hooks The ->runtime_suspend() and ->runtime_resume() callbacks are not expected to call spi_controller_suspend... Read more
Affected Products : linux_kernel- Published: Apr. 04, 2024
- Modified: Mar. 27, 2025
-
5.5
MEDIUMCVE-2024-26801
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Avoid potential use-after-free in hci_error_reset While handling the HCI_EV_HARDWARE_ERROR event, if the underlying BT controller is not responding, the GPIO reset mechanism ... Read more
Affected Products : linux_kernel- Published: Apr. 04, 2024
- Modified: Dec. 20, 2024
-
5.5
MEDIUMCVE-2021-29338
Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files.... Read more
- Published: Apr. 14, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-26790
In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read There is chip (ls1028a) errata: The SoC may hang on 16 byte unaligned read transactions by QDMA. Unaligned read transac... Read more
- Published: Apr. 04, 2024
- Modified: Feb. 27, 2025
-
5.5
MEDIUMCVE-2024-26860
In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a memory leak when rechecking the data Memory for the "checksums" pointer will leak if the data is rechecked after checksum failure (because the associated kfree won't... Read more
Affected Products : linux_kernel- Published: Apr. 17, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2024-26785
In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix protection fault in iommufd_test_syz_conv_iova Syzkaller reported the following bug: general protection fault, probably for non-canonical address 0xdffffc0000000038: 000... Read more
Affected Products : linux_kernel- Published: Apr. 04, 2024
- Modified: Apr. 04, 2025
-
5.5
MEDIUMCVE-2022-22600
The issue was addressed with improved permissions logic. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A malicious application may be able to bypass certain Privacy preferences.... Read more
- Published: Mar. 18, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-26787
In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: stm32: fix DMA API overlapping mappings warning Turning on CONFIG_DMA_API_DEBUG_SG results in the following warning: DMA-API: mmci-pl18x 48220000.mmc: cacheline tracking EEX... Read more
- Published: Apr. 04, 2024
- Modified: Mar. 20, 2025
-
5.5
MEDIUMCVE-2024-26788
In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-qdma: init irq after reg initialization Initialize the qDMA irqs after the registers are configured so that interrupts that may have been pending from a primary kernel do... Read more
- Published: Apr. 04, 2024
- Modified: Apr. 01, 2025
-
5.5
MEDIUMCVE-2024-26773
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() Determine if the group block bitmap is corrupted before using ac_b_ex in ext4_mb_try_best_found() to avoid... Read more
- Published: Apr. 03, 2024
- Modified: Mar. 18, 2025