Latest CVE Feed
-
5.5
MEDIUMCVE-2022-48947
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix u8 overflow By keep sending L2CAP_CONF_REQ packets, chan->num_conf_rsp increases multiple times and eventually it will wrap around the maximum number (i.e., 255). ... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 25, 2024
-
5.5
MEDIUMCVE-2022-48946
In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundary When preallocation extent is the first one in the extent block, the code would corrupt extent tree header instead. Fix the ... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 25, 2024
-
5.5
MEDIUMCVE-2024-50017
In the Linux kernel, the following vulnerability has been resolved: x86/mm/ident_map: Use gbpages only where full GB page should be mapped. When ident_pud_init() uses only GB pages to create identity maps, large ranges of addresses not actually requeste... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Feb. 17, 2025
-
5.5
MEDIUMCVE-2024-50015
In the Linux kernel, the following vulnerability has been resolved: ext4: dax: fix overflowing extents beyond inode size when partially writing The dax_iomap_rw() does two things in each iteration: map written blocks and copy user data to blocks. If the... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 28, 2024
-
5.5
MEDIUMCVE-2024-50014
In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel trace can be triggered with fstest generic/629 when executed against a filesystem with fast-commit feature ... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Feb. 02, 2025
-
5.5
MEDIUMCVE-2024-50013
In the Linux kernel, the following vulnerability has been resolved: exfat: fix memory leak in exfat_load_bitmap() If the first directory entry in the root directory is not a bitmap directory entry, 'bh' will not be released and reassigned, which will ca... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 25, 2024
-
5.5
MEDIUMCVE-2024-50012
In the Linux kernel, the following vulnerability has been resolved: cpufreq: Avoid a bad reference count on CPU node In the parse_perf_domain function, if the call to of_parse_phandle_with_args returns an error, then the reference to the CPU device node... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Nov. 08, 2024
-
5.5
MEDIUMCVE-2024-50011
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item There is no links_num in struct snd_soc_acpi_mach {}, and we test !link->num_adr as a condition to end the loop in hda_sdw_... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Nov. 01, 2024
-
4.7
MEDIUMCVE-2024-50010
In the Linux kernel, the following vulnerability has been resolved: exec: don't WARN for racy path_noexec check Both i_mode and noexec checks wrapped in WARN_ON stem from an artifact of the previous implementation. They used to legitimately check for th... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Jan. 24, 2025
-
5.5
MEDIUMCVE-2024-50009
In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value cpufreq_cpu_get may return NULL. To avoid NULL-dereference check it and return in case of error. Found by Linux Verifi... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Feb. 02, 2025
-
5.5
MEDIUMCVE-2024-50008
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() Replace one-element array with a flexible-array member in `struct host_cmd_ds_802_11_scan_ext`.... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Nov. 08, 2024
-
7.8
HIGHCVE-2024-50007
In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. We shouldn't t... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Nov. 08, 2024
-
4.7
MEDIUMCVE-2024-50006
In the Linux kernel, the following vulnerability has been resolved: ext4: fix i_data_sem unlock order in ext4_ind_migrate() Fuzzing reports a possible deadlock in jbd2_log_wait_commit. This issue is triggered when an EXT4_IOC_MIGRATE ioctl is set to re... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Nov. 08, 2024
-
7.8
HIGHCVE-2024-50005
In the Linux kernel, the following vulnerability has been resolved: mac802154: Fix potential RCU dereference issue in mac802154_scan_worker In the `mac802154_scan_worker` function, the `scan_req->type` field was accessed after the RCU read-side critical... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Nov. 07, 2024
-
5.5
MEDIUMCVE-2024-50004
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35 [WHY & HOW] Mismatch in DCN35 DML2 cause bw validation failed to acquire unexpected DPP pipe to cause... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Nov. 07, 2024
-
5.5
MEDIUMCVE-2024-50003
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix system hang while resume with TBT monitor [Why] Connected with a Thunderbolt monitor and do the suspend and the system may hang while resume. The TBT monitor HPD w... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Nov. 01, 2024
-
5.4
MEDIUMCVE-2024-48709
CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the membershipType parameter in edit_type.php... Read more
Affected Products : membership_management_system- Published: Oct. 21, 2024
- Modified: Mar. 31, 2025
-
8.7
HIGHCVE-2024-47825
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.16 and 1.15.10, a policy rule denying a prefix that is broader than `/32` may be ignored if there is a policy ... Read more
Affected Products : cilium- Published: Oct. 21, 2024
- Modified: Dec. 19, 2024
-
5.9
MEDIUMCVE-2024-46239
Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php.... Read more
Affected Products : hospital_management_system- Published: Oct. 21, 2024
- Modified: Mar. 31, 2025
-
5.9
MEDIUMCVE-2024-46238
Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php... Read more
Affected Products : hospital_management_system- Published: Oct. 21, 2024
- Modified: Mar. 31, 2025