Latest CVE Feed
-
5.5
MEDIUMCVE-2022-48957
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() The cmd_buff needs to be freed when error happened in dpaa2_switch_acl_entry_add() and ... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 24, 2024
-
7.8
HIGHCVE-2022-48956
In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid use-after-free in ip6_fragment() Blamed commit claimed rcu_read_lock() was held by ip6_fragment() callers. It seems to not be always true, at least for UDP stack. syzbot r... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 24, 2024
-
5.5
MEDIUMCVE-2022-48955
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: fix memory leak in tbnet_open() When tb_ring_alloc_rx() failed in tbnet_open(), ida that allocated in tb_xdomain_alloc_out_hopid() is not released. Add tb_xdomain_rele... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 24, 2024
-
7.8
HIGHCVE-2022-48954
In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix use-after-free in hsci KASAN found that addr was dereferenced after br2dev_event_work was freed. ================================================================== BUG: ... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 24, 2024
-
5.5
MEDIUMCVE-2022-48953
In the Linux kernel, the following vulnerability has been resolved: rtc: cmos: Fix event handler registration ordering issue Because acpi_install_fixed_event_handler() enables the event automatically on success, it is incorrect to call it before the han... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 25, 2024
-
5.5
MEDIUMCVE-2022-48952
In the Linux kernel, the following vulnerability has been resolved: PCI: mt7621: Add sentinel to quirks table Current driver is missing a sentinel in the struct soc_device_attribute array, which causes an oops when assessed by the soc_device_match(mt762... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 25, 2024
-
7.8
HIGHCVE-2022-48951
In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() The bounds checks in snd_soc_put_volsw_sx() are only being applied to the first channel, meaning it is possible to w... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 25, 2024
-
7.8
HIGHCVE-2022-48950
In the Linux kernel, the following vulnerability has been resolved: perf: Fix perf_pending_task() UaF Per syzbot it is possible for perf_pending_task() to run after the event is free()'d. There are two related but distinct cases: - the task_work was a... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 25, 2024
-
5.5
MEDIUMCVE-2022-48949
In the Linux kernel, the following vulnerability has been resolved: igb: Initialize mailbox message for VF reset When a MAC address is not assigned to the VF, that portion of the message sent to the VF is not set. The memory, however, is allocated from ... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 29, 2024
-
7.8
HIGHCVE-2022-48948
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Prevent buffer overflow in setup handler Setup function uvc_function_setup permits control transfer requests with up to 64 bytes of payload (UVC_MAX_REQUEST_SIZE), dat... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 29, 2024
-
5.5
MEDIUMCVE-2022-48947
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix u8 overflow By keep sending L2CAP_CONF_REQ packets, chan->num_conf_rsp increases multiple times and eventually it will wrap around the maximum number (i.e., 255). ... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 25, 2024
-
5.5
MEDIUMCVE-2022-48946
In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundary When preallocation extent is the first one in the extent block, the code would corrupt extent tree header instead. Fix the ... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 25, 2024
-
5.5
MEDIUMCVE-2024-50017
In the Linux kernel, the following vulnerability has been resolved: x86/mm/ident_map: Use gbpages only where full GB page should be mapped. When ident_pud_init() uses only GB pages to create identity maps, large ranges of addresses not actually requeste... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Feb. 17, 2025
-
5.5
MEDIUMCVE-2024-50015
In the Linux kernel, the following vulnerability has been resolved: ext4: dax: fix overflowing extents beyond inode size when partially writing The dax_iomap_rw() does two things in each iteration: map written blocks and copy user data to blocks. If the... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 28, 2024
-
5.5
MEDIUMCVE-2024-50014
In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path The following kernel trace can be triggered with fstest generic/629 when executed against a filesystem with fast-commit feature ... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Feb. 02, 2025
-
5.5
MEDIUMCVE-2024-50013
In the Linux kernel, the following vulnerability has been resolved: exfat: fix memory leak in exfat_load_bitmap() If the first directory entry in the root directory is not a bitmap directory entry, 'bh' will not be released and reassigned, which will ca... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Oct. 25, 2024
-
5.5
MEDIUMCVE-2024-50012
In the Linux kernel, the following vulnerability has been resolved: cpufreq: Avoid a bad reference count on CPU node In the parse_perf_domain function, if the call to of_parse_phandle_with_args returns an error, then the reference to the CPU device node... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Nov. 08, 2024
-
5.5
MEDIUMCVE-2024-50011
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item There is no links_num in struct snd_soc_acpi_mach {}, and we test !link->num_adr as a condition to end the loop in hda_sdw_... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Nov. 01, 2024
-
4.7
MEDIUMCVE-2024-50010
In the Linux kernel, the following vulnerability has been resolved: exec: don't WARN for racy path_noexec check Both i_mode and noexec checks wrapped in WARN_ON stem from an artifact of the previous implementation. They used to legitimately check for th... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Jan. 24, 2025
-
5.5
MEDIUMCVE-2024-50009
In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value cpufreq_cpu_get may return NULL. To avoid NULL-dereference check it and return in case of error. Found by Linux Verifi... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Feb. 02, 2025