CVEs published in September 2024
3,764 vulnerabilities, 306 critical, 13 exploited.
- linuxext4: fix invalid free tracking in ext4_xattr_move_to_block()7.8 High
- linuxiommufd: Set end correctly when doing batch carry8.8 High
- linuxwifi: mt76: mt7921: fix skb leak by txs missing in AMSDU2.3 Low
- linuxRDMA/bnxt_re: Prevent handling any completions after qp destroy7.8 High
- linuxBluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link7.8 High
- linuxbpf: fix a memory leak in the LRU and LRU_PERCPU hash maps5.6 Medium
- linuxvdpa: Add queue index attr to vdpa_nl_policy for nlattr length check7.8 High
- linuxio_uring/net: don't overflow multishot recv7.8 High
- linuxRDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"2.0 Low
- linuxopp: Fix use-after-free in lazy_opp_tables after probe deferral7.8 High
- linuxALSA: usb-audio: Fix potential memory leaks at error path for UMP open7.8 High
- linuxext4: set goal start correctly in ext4_mb_normalize_request2.0 Low
- linuxwifi: ath12k: Fix memory leak in rx_desc and tx_desc7.8 High
- linuxvirtio_vdpa: build affinity masks conditionally7.8 High
- linuxaf_unix: Fix data-race around unix_tot_inflight.0.0 None
- linuxPCI/DOE: Fix memory leak with CONFIG_DEBUG_OBJECTS=y7.8 High
- linuxwifi: cfg80211: ocb: don't leave if not joined6.8 Medium
- linuxSMB3: Add missing locks to protect deferred close file list7.8 High
- linuxnetlink: do not hard code device address lenth in fdb dumps2.0 Low
- linuxdm: don't attempt to queue IO under RCU protection7.8 High
- linuxbpf: bpf_sk_storage: Fix invalid wait context lockdep report5.6 Medium
- linuxusb-storage: alauda: Fix uninit-value in alauda_check_media()5.2 Medium
- linuxASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove7.8 High
- linuxdrm/i915: Fix NULL ptr deref by checking new_crtc_state7.8 High
- linuxblock/rq_qos: protect rq_qos apis with a new lock7.8 High
- linuxamdgpu: validate offset_in_bo of drm_amdgpu_gem_va7.8 High
- linuxext4: fix rbtree traversal bug in ext4_mb_use_preallocated7.8 High
- linuxblk-mq: release crypto keyslot before reporting I/O complete7.8 High
- linuxdrm/amd/display: populate subvp cmd info only for the top pipe7.8 High
- linuxmd: fix warning for holder mismatch from export_rdev()7.8 High
- linuxdrm: bridge: dw_hdmi: fix connector access for scdc7.8 High
- linuxBluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync8.8 High
- linuxcifs: fix potential use-after-free bugs in TCP_Server_Info::hostname9.8 Critical
- linuxPCI: Free released resource after coalescing7.8 High
- linuxblk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost5.7 Medium
- linuxarm64: csum: Fix OoB access in IP checksum code for negative lengths7.1 High
- linuxarm64: sme: Use STR P to clear FFR context field in streaming SVE mode7.8 High
- linuxNFS: Fix a potential data corruption8.2 High
- linuxring-buffer: Handle race between rb_move_tail and rb_check_pages7.8 High
- linux, linux kernel +1 moreBluetooth: hci_event: call disconnect callback before deleting conn8.8 High
- linux, linux kernel +1 moreASoC: codecs: wcd938x: fix missing mbhc init error handling5.5 Medium
- linux, linux kernel +1 moremd: don't dereference mddev after export_rdev()5.5 Medium
- linux, linux kernel +1 moreOPP: Fix potential null ptr dereference in dev_pm_opp_get_required_pstate()5.5 Medium
- linux, linux kernel +1 moreKVM: nSVM: Check instead of asserting on nested TSC scaling support5.5 Medium
- linux, linux kernel +1 morebpf, cpumap: Handle skb as well when clean up ptr_ring7.8 High
- linux, linux kernel +1 morercu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed5.5 Medium
- linux, linux kernel +1 morevdpa: Add features attr to vdpa_nl_policy for nlattr length check7.8 High
- linux, linux kernel +1 moreDrivers: hv: vmbus: Don't dereference ACPI root object handle5.5 Medium
- linux, linux kernel +1 morebpf: Make bpf_refcount_acquire fallible for non-owning refs7.8 High
- linux, linux kernel +1 morenet/mlx5e: Take RTNL lock when needed before calling xdp_set_features()5.5 Medium
- Show moreLoading…