Latest CVE Feed
-
5.5
MEDIUMCVE-2024-26679
In the Linux kernel, the following vulnerability has been resolved: inet: read sk->sk_family once in inet_recv_error() inet_recv_error() is called without holding the socket lock. IPv6 socket could mutate to IPv4 with IPV6_ADDRFORM socket option and tr... Read more
- Published: Apr. 02, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2024-26676
In the Linux kernel, the following vulnerability has been resolved: af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. syzbot reported a warning [0] in __unix_gc() with a repro, which creates a socketpair and sends one socket's fd to itself us... Read more
Affected Products : linux_kernel- Published: Apr. 02, 2024
- Modified: May. 07, 2025
-
5.5
MEDIUMCVE-2024-26667
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup The commit 8b45a26f2ba9 ("drm/msm/dpu: reserve cdm blocks for writeback in case of YUV output") introduced a smatch... Read more
Affected Products : linux_kernel- Published: Apr. 02, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2024-26660
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Implement bounds check for stream encoder creation in DCN301 'stream_enc_regs' array is an array of dcn10_stream_enc_registers structures. The array is initialized with... Read more
Affected Products : linux_kernel- Published: Apr. 02, 2024
- Modified: Mar. 03, 2025
-
5.5
MEDIUMCVE-2024-26657
In the Linux kernel, the following vulnerability has been resolved: drm/sched: fix null-ptr-deref in init entity The bug can be triggered by sending an amdgpu_cs_wait_ioctl to the AMDGPU DRM driver on any ASICs with valid context. The bug was reported b... Read more
Affected Products : linux_kernel- Published: Apr. 02, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2024-26655
In the Linux kernel, the following vulnerability has been resolved: Fix memory leak in posix_clock_open() If the clk ops.open() function returns an error, we don't release the pccontext we allocated for this clock. Re-organize the code slightly to make... Read more
Affected Products : linux_kernel- Published: Apr. 01, 2024
- Modified: Jan. 07, 2025
-
5.5
MEDIUMCVE-2024-26649
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix the null pointer when load rlc firmware If the RLC firmware is invalid because of wrong header size, the pointer to the rlc firmware is released in function amdgpu_ucode... Read more
Affected Products : linux_kernel- Published: Mar. 26, 2024
- Modified: Jan. 27, 2025
-
5.5
MEDIUMCVE-2024-26645
In the Linux kernel, the following vulnerability has been resolved: tracing: Ensure visibility when inserting an element into tracing_map Running the following two commands in parallel on a multi-processor AArch64 machine can sporadically produce an une... Read more
- Published: Mar. 26, 2024
- Modified: Mar. 17, 2025
-
5.5
MEDIUMCVE-2024-26643
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous set... Read more
- Published: Mar. 21, 2024
- Modified: Mar. 13, 2025
-
5.5
MEDIUMCVE-2024-26636
In the Linux kernel, the following vulnerability has been resolved: llc: make llc_ui_sendmsg() more robust against bonding changes syzbot was able to trick llc_ui_sendmsg(), allocating an skb with no headroom, but subsequently trying to push 14 bytes of... Read more
- Published: Mar. 18, 2024
- Modified: Mar. 10, 2025
-
5.5
MEDIUMCVE-2024-26634
In the Linux kernel, the following vulnerability has been resolved: net: fix removing a namespace with conflicting altnames Mark reports a BUG() when a net namespace is removed. kernel BUG at net/core/dev.c:11520! Physical interfaces moved outside... Read more
Affected Products : linux_kernel- Published: Mar. 18, 2024
- Modified: Mar. 10, 2025
-
5.5
MEDIUMCVE-2024-26627
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler Inside scsi_eh_wakeup(), scsi_host_busy() is called & checked with host lock every time for deciding if error... Read more
Affected Products : linux_kernel- Published: Mar. 06, 2024
- Modified: Mar. 14, 2025
-
5.5
MEDIUMCVE-2024-26614
In the Linux kernel, the following vulnerability has been resolved: tcp: make sure init the accept_queue's spinlocks once When I run syz's reproduction C program locally, it causes the following issue: pvqspinlock: lock 0xffff9d181cd5c660 has corrupted ... Read more
- Published: Mar. 11, 2024
- Modified: Apr. 03, 2025
-
5.5
MEDIUMCVE-2024-26611
In the Linux kernel, the following vulnerability has been resolved: xsk: fix usage of multi-buffer BPF helpers for ZC XDP Currently when packet is shrunk via bpf_xdp_adjust_tail() and memory type is set to MEM_TYPE_XSK_BUFF_POOL, null ptr dereference ha... Read more
Affected Products : linux_kernel- Published: Mar. 11, 2024
- Modified: Dec. 12, 2024
-
5.5
MEDIUMCVE-2024-26602
In the Linux kernel, the following vulnerability has been resolved: sched/membarrier: reduce the ability to hammer on sys_membarrier On some systems, sys_membarrier can be very expensive, causing overall slowdowns for everything. So put a lock on the p... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-26600
In the Linux kernel, the following vulnerability has been resolved: phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP If the external phy working together with phy-omap-usb2 does not implement send_srp(), we may still attempt to call it. This... Read more
Affected Products : linux_kernel- Published: Feb. 26, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-26596
In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events After the blamed commit, we started doing this dereference for every NETDEV_CHANGEUPPER and NETDEV_PRECH... Read more
Affected Products : linux_kernel- Published: Feb. 23, 2024
- Modified: Feb. 21, 2025
-
5.5
MEDIUMCVE-2012-5474
The file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-django-horizon package before 2012.1.1) is world readable and exposes the secret key value.... Read more
- EPSS Score: %0.07
- Published: Dec. 30, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-26584
In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTO_TFM_REQ_MAY_BACKLOG flag on our requests to the crypto API, crypto_aead_{encrypt,decrypt} can return -EBU... Read more
Affected Products : linux_kernel- Published: Feb. 21, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-26308
Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue.... Read more
- Published: Feb. 19, 2024
- Modified: Mar. 27, 2025