CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- salesagility suitecrmAuthenticated SQL injection in AM_ProjectTemplates controller in SuiteCRM8.8 High
- combodo itopSSRF through arbitrary PHP class instantiation in the user portal in Combodo iTop4.3 Medium
- combodo itopUsers enumeration allowed through Rest API in Combodo iTop7.5 High
- workos authkit-remixRefresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-remix2.1 Low
- workos authkit-nextjsRefresh tokens are logged when the debug flag is enabled in @workos-inc/authkit-nextjs2.1 Low
- linux, linux kernel +1 morebpf: Use raw_spinlock_t in ringbuf5.5 Medium
- linux, linux kernel +1 morereset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC5.5 Medium
- linux, linux kernel +1 morenet/mlx5: Unregister notifier on eswitch init failure5.5 Medium
- linux, linux kernel +1 morenvme-pci: fix race condition between reset and nvme_dev_disable()4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA5.5 Medium
- linux, linux kernel +1 moreLoongArch: Don't crash in stack_top() for tasks without vDSO5.5 Medium
- linux, linux kernel +1 moretracing/probes: Fix MAX_TRACE_ARGS limit handling7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moretracing: Consider the NULL character when validating the event length7.3 High
- linux, linux kernel +1 morenetfilter: bpf: must hold reference on net namespace7.8 High
- linux, linux kernel +1 morenet: pse-pd: Fix out of bound for loop7.8 High
- linux, linux kernel +1 morenet: wwan: fix global oob in wwan_rtnl_policy7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: sched: fix use-after-free in taprio_change()7.8 High
- linux, linux kernel +1 morenet: sched: use RCU read-side critical section in taprio_dump()7.8 High
- linux, linux kernel +1 moreBluetooth: SCO: Fix UAF on sco_sock_timeout8.0 High
- linux, linux kernel +1 moreBluetooth: ISO: Fix UAF on iso_sock_timeout8.0 High
- linux, linux kernel +1 morebpf: Add the missing BPF_LINK_TYPE invocation for sockmap7.1 High
- linux, linux kernel +1 morePCI: Hold rescan lock while adding devices during host probe5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net7.8 High
- linux, linux kernel +1 moresmb: client: Handle kstrdup failures for passwords5.5 Medium
- linux, linux kernel +1 morecifs: fix warning when destroy 'cifs_io_request_pool'7.0 High
- linux, linux kernel +1 morebtrfs: reject ro->rw reconfiguration if there are hard ro requirements5.5 Medium
- linux, linux kernel +1 moredrm/amd: Guard against bad data for ATIF ACPI method7.3 High
- linux, linux kernel +1 morenilfs2: fix kernel bug due to missing clearing of buffer delay flag5.5 Medium
- linux, linux kernel +1 moreKVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory8.4 High
- linux, linux kernel +1 moreKVM: arm64: Unregister redistributor for failed vCPU creation7.8 High
- linux, linux kernel +1 morefirewire: core: fix invalid port index for parent device8.8 High
- linux, linux kernel +1 morex86/lam: Disable ADDRESS_MASKING in most cases7.8 High
- linux, linux kernel +1 moreLoongArch: Enable IRQ if do_ale() triggered in irq-enabled context5.5 Medium
- linux, linux kernel +1 morexfrm: fix one more kernel-infoleak in algo dumping5.5 Medium
- linux, linux kernel +1 moremd/raid10: fix null ptr dereference in raid10_size()5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Disable PSR-SU on Parade 08-01 TCON too5.5 Medium
- linux, linux kernel +1 moreplatform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid addresses5.5 Medium
- linux, linux kernel +1 morenfsd: fix race between laundromat and free_stateid9.8 Critical
- linux, linux kernel +1 moreASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc5.5 Medium
- linux, linux kernel +1 moreASoC: qcom: sdm845: add missing soundwire runtime stream alloc5.5 Medium
- linux, linux kernel +1 moreASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()5.5 Medium
- linux, linux kernel +1 morex86: fix user address masking non-canonical speculation issue5.5 Medium
- linux, linux kernel +1 moreiommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices7.8 High
- linux, linux kernel +1 moreUSB: gadget: dummy-hcd: Fix "task hung" problem5.5 Medium
- linux, linux kernel +1 morearm64: probes: Remove broken LDR (literal) uprobe support7.3 High
- linux, linux kernel +1 morescsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down5.5 Medium
- linux, linux kernel +1 morenet: fec: don't save PTP state if PTP is unsupported5.5 Medium
- linux, linux kernel +1 morenouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error7.3 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreRDMA/mad: Improve handling of timed out WRs of mad agent7.5 High
- linux, linux kernel +1 moresfc: Don't invoke xdp_do_flush() from netpoll.7.5 High
- Show moreLoading…