Latest CVE Feed
-
5.5
MEDIUMCVE-2024-53119
In the Linux kernel, the following vulnerability has been resolved: virtio/vsock: Fix accept_queue memory leak As the final stages of socket destruction may be delayed, it is possible that virtio_transport_recv_listen() will be called after the accept_q... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 19, 2024
-
5.5
MEDIUMCVE-2024-53118
In the Linux kernel, the following vulnerability has been resolved: vsock: Fix sk_error_queue memory leak Kernel queues MSG_ZEROCOPY completion notifications on the error queue. Where they remain, until explicitly recv()ed. To prevent memory leaks, clea... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 11, 2024
-
5.5
MEDIUMCVE-2024-53117
In the Linux kernel, the following vulnerability has been resolved: virtio/vsock: Improve MSG_ZEROCOPY error handling Add a missing kfree_skb() to prevent memory leaks.... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 11, 2024
-
5.5
MEDIUMCVE-2024-53116
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix handling of partial GPU mapping of BOs This commit fixes the bug in the handling of partial mapping of the buffer objects to the GPU, which caused kernel warnings. Pan... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 11, 2024
-
5.5
MEDIUMCVE-2024-53115
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle The 'vmw_user_object_buffer' function may return NULL with incorrect inputs. To avoid possible null pointer der... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 11, 2024
-
5.5
MEDIUMCVE-2024-53114
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client A number of Zen4 client SoCs advertise the ability to use virtualized VMLOAD/VMSAVE, but using these instructions is reported... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 11, 2024
-
5.5
MEDIUMCVE-2024-53113
In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof We triggered a NULL pointer dereference for ac.preferred_zoneref->zone in alloc_pages_bulk_noprof() when the task is migrated... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 14, 2024
-
5.5
MEDIUMCVE-2024-53112
In the Linux kernel, the following vulnerability has been resolved: ocfs2: uncache inode which has failed entering the group Syzbot has reported the following BUG: kernel BUG at fs/ocfs2/uptodate.c:509! ... Call Trace: <TASK> ? __die_body+0x5f/0xb0 ... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 14, 2024
-
5.5
MEDIUMCVE-2024-53111
In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix address wraparound in move_page_tables() On 32-bit platforms, it is possible for the expression `len + old_addr < old_end` to be false-positive if `len + old_addr` wraps ... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 11, 2024
-
5.5
MEDIUMCVE-2024-53110
In the Linux kernel, the following vulnerability has been resolved: vp_vdpa: fix id_table array not null terminated error Allocate one extra virtio_device_id as null terminator, otherwise vdpa_mgmtdev_get_classes() may iterate multiple times and visit u... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 11, 2024
-
5.5
MEDIUMCVE-2024-53109
In the Linux kernel, the following vulnerability has been resolved: nommu: pass NULL argument to vma_iter_prealloc() When deleting a vma entry from a maple tree, it has to pass NULL to vma_iter_prealloc() in order to calculate internal state of the tree... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 11, 2024
-
7.1
HIGHCVE-2024-53108
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adjust VSDB parser for replay feature At some point, the IEEE ID identification for the replay check in the AMD EDID was added. However, this check causes the following... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 12, 2024
-
5.5
MEDIUMCVE-2024-53107
In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args() The "arg->vec_len" variable is a u64 that comes from the user at the start of the function. The "arg->vec_len * si... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 12, 2024
-
0.0
NACVE-2024-53106
In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in ima_eventdigest_init_common Function ima_eventdigest_init() calls ima_eventdigest_init_common() with HASH_ALGO__LAST which is then used to access the array ha... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 02, 2024
-
0.0
NACVE-2024-53105
In the Linux kernel, the following vulnerability has been resolved: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() Syzbot reported a bad page state problem caused by a page being freed using free_page() still having a mlocked flag... Read more
Affected Products : linux_kernel- Published: Dec. 02, 2024
- Modified: Dec. 14, 2024
-
6.5
MEDIUMCVE-2024-52503
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tailored Web Services Tailored Tools allows Stored XSS.This issue affects Tailored Tools: from n/a through 1.8.4.... Read more
Affected Products :- Published: Dec. 02, 2024
- Modified: Dec. 02, 2024
-
6.5
MEDIUMCVE-2024-52502
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imbasynergy ImbaChat allows DOM-Based XSS.This issue affects ImbaChat: from n/a through 3.1.4.... Read more
Affected Products :- Published: Dec. 02, 2024
- Modified: Dec. 02, 2024
-
5.9
MEDIUMCVE-2024-52494
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt Varone, Tim Berneman Dynamic "To Top" allows Stored XSS.This issue affects Dynamic "To Top": from 3.5.2 through n/a.... Read more
Affected Products :- Published: Dec. 02, 2024
- Modified: Dec. 02, 2024
-
5.9
MEDIUMCVE-2024-52493
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh Leuze Meteor Slides allows Stored XSS.This issue affects Meteor Slides: from n/a through 1.5.7.... Read more
Affected Products : meteor_slides- Published: Dec. 02, 2024
- Modified: Jun. 09, 2025
-
5.9
MEDIUMCVE-2024-52492
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gopi Ramasamy Image horizontal reel scroll slideshow allows Stored XSS.This issue affects Image horizontal reel scroll slideshow: from n/a through 13.4.... Read more
Affected Products : image_horizontal_reel_scroll_slideshow- Published: Dec. 02, 2024
- Modified: Dec. 02, 2024