CVEs published in July 2024
3,166 vulnerabilities, 289 critical, 12 exploited.
- linux, linux kernel +1 moreata: libata-core: Fix double free on error7.8 High
- linux, linux kernel +1 morebcachefs: Fix sb_field_downgrade validation7.8 High
- linux, linux kernel +1 morecxl/mem: Fix no cxl_nvd during pmem region auto-assembling5.5 Medium
- linux, linux kernel +1 morecxl/region: Avoid null pointer dereference in region lookup5.5 Medium
- linux, linux kernel +1 morenetfs: Fix netfs_page_mkwrite() to check folio->mapping is valid5.5 Medium
- twistedHTML injection in HTTP redirect body6.1 Medium
- linux, linux kernel +1 morenvme-fabrics: use reserved tag for reg read/write command5.5 Medium
- linux, linux kernel +1 moreila: block BH in ila_output()9.8 Critical
- linux, linux kernel +1 moreio_uring: fix possible deadlock in io_register_iowq_max_workers()5.5 Medium
- linux, linux kernel +1 morenvmet: always initialize cqe.result7.5 High
- linux, linux kernel +1 morebtrfs: qgroup: fix quota root leak after quota disable failure5.5 Medium
- tgstation tgstation-servertgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users8.4 High
- linux, linux kernel +1 morenull_blk: fix validation of block size5.5 Medium
- linux, linux kernel +1 moreNFSv4: Fix memory leak in nfs4_set_security_label5.5 Medium
- linux, linux kernel +1 morecachefiles: add consistency check for copen/cread7.8 High
- linux, linux kernel +1 morecachefiles: Set object to close if ondemand_id < 0 in copen7.8 High
- debian linux, linux kernel +1 morenvme: avoid double free special payload9.8 Critical
- linux, linux kernel +1 morewifi: cfg80211: wext: add extra SIOCSIWSCAN data check5.5 Medium
- linux, linux kernel +1 moreKVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()7.8 High
- linux, linux kernel +1 moreASoC: topology: Fix references to freed memory7.8 High
- linux, linux kernel +1 mores390/sclp: Fix sclp_init() cleanup on failure5.5 Medium
- linux, linux kernel +1 morebtrfs: scrub: handle RST lookup error correctly5.5 Medium
- linux, linux kernel +1 moreibmvnic: Add tx check to prevent skb leak7.5 High
- linux, linux kernel +1 morepowerpc/pseries: Whitelist dtl slub object for copying to userspace5.5 Medium
- linux, linux kernel +1 morepowerpc/eeh: avoid possible crash when edev->pdev changes7.8 High
- linux, linux kernel +1 moreBluetooth: hci_core: cancel all works upon hci_unregister_dev()5.5 Medium
- linux, linux kernel +1 morebluetooth/l2cap: sync sock recv cb and release8.8 High
- linux, linux kernel +1 moredrm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport7.8 High
- linux, linux kernel +1 moredrm/radeon: check bo_va->bo is non-NULL before using it7.8 High
- linux, linux kernel +1 morehfsplus: fix uninit-value in copy_name7.8 High
- linux, linux kernel +1 morecachefiles: fix slab-use-after-free in fscache_withdraw_volume()7.8 High
- linux, linux kernel +1 morecachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie()7.8 High
- openmage magento, magento-lts +1 moreMagento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configs4.1 Medium
- twistedtwisted.web has disordered HTTP pipeline response8.3 High
- linux, linux kernel +1 morefirmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files7.3 High
- linux, linux kernel +1 moremm: prevent derefencing NULL ptr in pfn_section_valid()5.5 Medium
- linux, linux kernel +1 morescsi: ufs: core: Fix ufshcd_clear_cmd racing issue5.5 Medium
- linux, linux kernel +1 morescsi: ufs: core: Fix ufshcd_abort_one racing issue5.5 Medium
- linux, linux kernel +1 morevfio/pci: Init the count variable in collecting hot-reset devices5.5 Medium
- linux, linux kernel +1 morecachefiles: wait for ondemand_object_worker to finish when dropping object7.8 High
- linux, linux kernel +1 morecachefiles: cyclic allocation of msg_id to avoid reuse7.8 High
- linux, linux kernel +1 morefilelock: fix potential use-after-free in posix_lock_inode7.8 High
- linux, linux kernel +1 moreskmsg: Skip zero length skb in sk_msg_recvmsg7.5 High
- linux, linux kernel +1 morei40e: Fix XDP program unloading while removing the driver5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 morenet: ethernet: lantiq_etop: fix double free in detach8.8 High
- linux, linux kernel +1 morebpf: Defer work in bpf_timer_cancel_and_free7.8 High
- linux, linux kernel +1 moreppp: reject claimed-as-LCP but actually malformed packets5.5 Medium
- linux, linux kernel +1 morenetfilter: nfnetlink_queue: drop bogus WARN_ON5.5 Medium
- linux, linux kernel +1 morenetfilter: nf_tables: prefer nft_chain_validate7.8 High
- linux, linux kernel +1 moreudp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().7.8 High
- Show moreLoading…