Latest CVE Feed
-
5.5
MEDIUMCVE-2024-26714
In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sc8180x: Mark CO0 BCM keepalive The CO0 BCM needs to be up at all times, otherwise some hardware (like the UFS controller) loses its connection to the rest of the So... Read more
Affected Products : linux_kernel- Published: Apr. 03, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2024-26710
In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Limit KASAN thread size increase to 32KB KASAN is seen to increase stack usage, to the point that it was reported to lead to stack overflow on some 32-bit machines (see l... Read more
Affected Products : linux_kernel- Published: Apr. 03, 2024
- Modified: Jun. 19, 2025
-
5.5
MEDIUMCVE-2022-27359
Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a this.maildoc NULL pointer dereference.... Read more
- Published: May. 05, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-26708
In the Linux kernel, the following vulnerability has been resolved: mptcp: really cope with fastopen race Fastopen and PM-trigger subflow shutdown can race, as reported by syzkaller. In my first attempt to close such race, I missed the fact that the su... Read more
Affected Products : linux_kernel- Published: Apr. 03, 2024
- Modified: Apr. 08, 2025
-
5.5
MEDIUMCVE-2017-5499
Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file.... Read more
Affected Products : jasper- Published: Mar. 01, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2024-26711
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4130: zero-initialize clock init data The clk_init_data struct does not have all its members initialized, causing issues when trying to expose the internal clock on the CLK ... Read more
Affected Products : linux_kernel- Published: Apr. 03, 2024
- Modified: Feb. 27, 2025
-
5.5
MEDIUMCVE-2024-26715
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend In current scenario if Plug-out and Plug-In performed continuously there could be a chance while checking for dwc-... Read more
Affected Products : linux_kernel- Published: Apr. 03, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2024-26695
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked The SEV platform device can be shutdown with a null psp_master, e.g., using DEBUG_TEST_DRIVER_REMOVE. Found... Read more
- Published: Apr. 03, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2024-26691
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix circular locking dependency The rule inside kvm enforces that the vcpu->mutex is taken *inside* kvm->lock. The rule is violated by the pkvm_create_hyp_vm() which acquire... Read more
Affected Products : linux_kernel- Published: Apr. 03, 2024
- Modified: Feb. 27, 2025
-
5.5
MEDIUMCVE-2024-26676
In the Linux kernel, the following vulnerability has been resolved: af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. syzbot reported a warning [0] in __unix_gc() with a repro, which creates a socketpair and sends one socket's fd to itself us... Read more
Affected Products : linux_kernel- Published: Apr. 02, 2024
- Modified: May. 07, 2025
-
5.5
MEDIUMCVE-2024-26684
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac: fix handling of DPP safety error for DMA channels Commit 56e58d6c8a56 ("net: stmmac: Implement Safety Features in XGMAC core") checks and reports safety errors, but ... Read more
- Published: Apr. 02, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2024-26685
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential bug in end_buffer_async_write According to a syzbot report, end_buffer_async_write(), which handles the completion of block device writes, may detect abnormal cond... Read more
- Published: Apr. 03, 2024
- Modified: Apr. 08, 2025
-
5.5
MEDIUMCVE-2024-26686
In the Linux kernel, the following vulnerability has been resolved: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats lock_task_sighand() can trigger a hard lockup. If NR_CPUS threads call do_task_stat() at the same time a... Read more
Affected Products : linux_kernel- Published: Apr. 03, 2024
- Modified: May. 02, 2025
-
5.5
MEDIUMCVE-2014-0219
Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.... Read more
Affected Products : karaf- Published: Nov. 15, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2024-26703
In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Move hrtimer_init to timerlat_fd open() Currently, the timerlat's hrtimer is initialized at the first read of timerlat_fd, and destroyed at close(). It works, but it c... Read more
Affected Products : linux_kernel- Published: Apr. 03, 2024
- Modified: Feb. 27, 2025
-
5.5
MEDIUMCVE-2024-26683
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: detect stuck ECSA element in probe resp We recently added some validation that we don't try to connect to an AP that is currently in a channel switch process, since that... Read more
Affected Products : linux_kernel- Published: Apr. 02, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2024-26682
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: improve CSA/ECSA connection refusal As mentioned in the previous commit, we pretty quickly found that some APs have ECSA elements stuck in their probe response, so using... Read more
Affected Products : linux_kernel- Published: Apr. 02, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2014-0243
Check_MK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/lib/check_mk_agent/job.... Read more
Affected Products : check_mk- Published: Jul. 19, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-37646
TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of `tf.raw_ops.StringNGrams` is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then ... Read more
Affected Products : tensorflow- Published: Aug. 12, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-26680
In the Linux kernel, the following vulnerability has been resolved: net: atlantic: Fix DMA mapping for PTP hwts ring Function aq_ring_hwts_rx_alloc() maps extra AQ_CFG_RXDS_DEF bytes for PTP HWTS ring but then generic aq_ring_free() does not take this i... Read more
Affected Products : linux_kernel- Published: Apr. 02, 2024
- Modified: Mar. 17, 2025