Latest CVE Feed
-
5.5
MEDIUMCVE-2024-26692
In the Linux kernel, the following vulnerability has been resolved: smb: Fix regression in writes when non-standard maximum write size negotiated The conversion to netfs in the 6.3 kernel caused a regression when maximum write size is set by the server ... Read more
Affected Products : linux_kernel- Published: Apr. 03, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2024-26662
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()' 'panel_cntl' structure used to control the display panel could be null, dereferencing it could lead to a... Read more
Affected Products : linux_kernel- Published: Apr. 02, 2024
- Modified: Apr. 08, 2025
-
5.5
MEDIUMCVE-2020-27946
An information disclosure issue was addressed with improved state management. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a mal... Read more
- Published: Apr. 02, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-26693
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix a crash when we run out of stations A DoS tool that injects loads of authentication frames made our AP crash. The iwl_mvm_is_dup() function couldn't find the per... Read more
Affected Products : linux_kernel- Published: Apr. 03, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2024-26679
In the Linux kernel, the following vulnerability has been resolved: inet: read sk->sk_family once in inet_recv_error() inet_recv_error() is called without holding the socket lock. IPv6 socket could mutate to IPv4 with IPV6_ADDRFORM socket option and tr... Read more
- Published: Apr. 02, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2024-26660
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Implement bounds check for stream encoder creation in DCN301 'stream_enc_regs' array is an array of dcn10_stream_enc_registers structures. The array is initialized with... Read more
Affected Products : linux_kernel- Published: Apr. 02, 2024
- Modified: Mar. 03, 2025
-
5.5
MEDIUMCVE-2014-0155
The ioapic_deliver function in virt/kvm/ioapic.c in the Linux kernel through 3.14.1 does not properly validate the kvm_irq_delivery_to_apic return value, which allows guest OS users to cause a denial of service (host OS crash) via a crafted entry in the r... Read more
Affected Products : linux_kernel- Published: Apr. 14, 2014
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2024-26656
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix use-after-free bug The bug can be triggered by sending a single amdgpu_gem_userptr_ioctl to the AMDGPU DRM driver on any ASICs with an invalid address and size. The bug ... Read more
Affected Products : linux_kernel- Published: Apr. 02, 2024
- Modified: Mar. 28, 2025
-
5.5
MEDIUMCVE-2024-26649
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the null pointer when load rlc firmware If the RLC firmware is invalid because of wrong header size, the pointer to the rlc firmware is released in function amdgpu_ucode... Read more
Affected Products : linux_kernel- Published: Mar. 26, 2024
- Modified: Jan. 27, 2025
-
5.5
MEDIUMCVE-2014-0146
The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service (NULL pointer dereference) via a crafted image which causes an error, related to the initialization of the snapshot_of... Read more
Affected Products : qemu- Published: Aug. 10, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2024-26655
In the Linux kernel, the following vulnerability has been resolved: Fix memory leak in posix_clock_open() If the clk ops.open() function returns an error, we don't release the pccontext we allocated for this clock. Re-organize the code slightly to make... Read more
Affected Products : linux_kernel- Published: Apr. 01, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2021-40468
Windows Bind Filter Driver Information Disclosure Vulnerability... Read more
- Published: Oct. 13, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-26651
In the Linux kernel, the following vulnerability has been resolved: sr9800: Add check for usbnet_get_endpoints Add check for usbnet_get_endpoints() and return the error if it fails in order to transfer the error.... Read more
Affected Products : linux_kernel- Published: Mar. 27, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2021-46956
In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix memory leak in virtio_fs_probe() When accidentally passing twice the same tag to qemu, kmemleak ended up reporting a memory leak in virtiofs. Also, looking at the log I s... Read more
Affected Products : linux_kernel- Published: Feb. 27, 2024
- Modified: Dec. 06, 2024
-
5.5
MEDIUMCVE-2024-26646
In the Linux kernel, the following vulnerability has been resolved: thermal: intel: hfi: Add syscore callbacks for system-wide PM The kernel allocates a memory buffer and provides its location to the hardware, which uses it to update the HFI table. This... Read more
Affected Products : linux_kernel- Published: Mar. 26, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2024-26642
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with timeout flag Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure l... Read more
- Published: Mar. 21, 2024
- Modified: Mar. 13, 2025
-
5.5
MEDIUMCVE-2024-26643
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous set... Read more
- Published: Mar. 21, 2024
- Modified: Mar. 13, 2025
-
5.5
MEDIUMCVE-2024-26635
In the Linux kernel, the following vulnerability has been resolved: llc: Drop support for ETH_P_TR_802_2. syzbot reported an uninit-value bug below. [0] llc supports ETH_P_802_2 (0x0004) and used to support ETH_P_TR_802_2 (0x0011), and syzbot abused th... Read more
- Published: Mar. 18, 2024
- Modified: Mar. 10, 2025
-
5.5
MEDIUMCVE-2024-26641
In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() syzbot found __ip6_tnl_rcv() could access unitiliazed data [1]. Call pskb_inet_may_pull() to fix this, and initialize ipv6... Read more
Affected Products : linux_kernel debian_linux active_iq_unified_manager ontap_select_deploy_administration_utility c190_firmware a220_firmware fas2720_firmware fas2750_firmware a800_firmware fas2820_firmware +16 more products- Published: Mar. 18, 2024
- Modified: Mar. 28, 2025
-
5.5
MEDIUMCVE-2022-32883
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An app may be able to read sensitive location information.... Read more
- Published: Sep. 20, 2022
- Modified: May. 29, 2025