CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- debian linux, linux kernel +1 moreKVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()5.5 Medium
- linux, linux kernel +1 morescsi: lpfc: Move NPIV's transport unregistration to after resource clean up4.7 Medium
- linux, linux kernel +1 moredrm/amdkfd: range check cp bad op exception interrupts5.5 Medium
- debian linux, linux kernel +1 morefirewire: ohci: mask bus reset interrupts between ISR and bottom half4.4 Medium
- linux, linux kernel +1 moreamd/amdkfd: sync all devices to wait all processes being evicted4.7 Medium
- linux, linux kernel +1 moredrm/xe/xe_migrate: Cast to output precision before multiplying operands5.5 Medium
- linux, linux kernel +1 moreqibfs: fix dentry leak5.5 Medium
- debian linux, linux kernel +1 morephonet: fix rtm_phonet_notify() skb allocation5.5 Medium
- linux, linux kernel +1 morenet/smc: fix neighbour and rtable leak in smc_ib_find_route()7.5 High
- linux, linux kernel +1 moreReapply "drm/qxl: simplify qxl_fence_wait"5.5 Medium
- linux, linux kernel +1 morefs/proc/task_mmu: fix loss of young/dirty bits during pagemap scan7.3 High
typo3/cms-corePackagistTYPO3 Denial of Service in Online Media Asset Handling5.3 Medium- emiloimagtolis online discussion forumitsourcecode Online Discussion Forum change_profile_picture.php unrestricted upload5.3 Medium
- debian linux, linux kernel +1 morewifi: nl80211: don't free NULL coalescing rule5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morepinctrl: core: delete incorrect free in pinctrl_enable()7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenfs: Handle error of rpc_proc_register() in nfs_net_init().5.5 Medium
- linux, linux kernel +1 morebpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue5.5 Medium
- linux, linux kernel +1 morexdp: use flags field to disambiguate broadcast redirect5.5 Medium
- linux, linux kernel +1 moreefi/unaccepted: touch soft lockup during memory accept5.5 Medium
- linux, linux kernel +1 moreice: ensure the copied buf is NUL terminated7.1 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morebna: ensure the copied buf is NUL terminated7.8 High
- debian linux, linux kernel +1 morensh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().7.8 High
- linux, linux kernel +1 morethermal/debugfs: Prevent use-after-free from occurring after cdev removal5.5 Medium
- linux, linux kernel +1 mores390/cio: Ensure the copied buf is NUL terminated7.1 High
- linux, linux kernel +1 morespi: fix null pointer dereference within spi_sync5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenet: core: reject skb_copy(_expand) for fraglist GSO skbs7.5 High
- linux, linux kernel +1 mores390/qeth: Fix kernel panic after setting hsuid7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv4: Fix uninit-value access in __ip_make_skb()4.7 Medium
- linux, linux kernel +1 morepowerpc/pseries/iommu: LPAR panics during boot up with a frozen PE5.5 Medium
- linux, linux kernel +1 moreswiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y5.5 Medium
- linux, linux kernel +1 morescsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: iwlwifi: read txq->read_ptr under lock8.8 High
- linux, linux kernel +1 morewifi: iwlwifi: mvm: guard against invalid STA ID on removal8.8 High
- linux, linux kernel +1 morescsi: mpi3mr: Avoid memcpy field-spanning write WARNING5.5 Medium
- debian linux, linux kernel +1 morescsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload5.5 Medium
- linux, linux kernel +1 morebpf: Check bloom filter map value size7.8 High
- linux, linux kernel +1 moreblock: fix overflow in blk_ioctl_discard()5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreblk-iocost: avoid out of bounds shift7.1 High
- linux, linux kernel +1 morenfc: llcp: fix nfc_llcp_setsockopt() unsafe copies7.1 High
- linux, linux kernel +1 moredrm/amd/display: Skip on writeback when it's not applicable7.8 High
- debian linux, linux kernel +1 moreDrivers: hv: vmbus: Leak pages if set_memory_encrypted() fails9.3 Critical
- linux, linux kernel +1 moreDrivers: hv: vmbus: Track decrypted status in vmbus_gpadl9.6 Critical
- linux, linux kernel +1 morehv_netvsc: Don't free decrypted memory9.8 Critical
- linux, linux kernel +1 moreuio_hv_generic: Don't free decrypted memory8.4 High
- linux, linux kernel +1 moreDrivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted9.3 Critical
- linux, linux kernel +1 moreblk-iocost: do not WARN if iocg was already offlined5.5 Medium
- linux, linux kernel +1 moreARM: 9381/1: kasan: clear stale stack poison7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moretcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moretcp: Use refcount_inc_not_zero() in tcp_twsk_unique().7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv6: Fix potential uninit-value access in __ip6_make_skb()5.5 Medium
- Show moreLoading…