CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- dgtlmoon changedetection.iochangedetection.io has Improper Input Validation Leading to LFR/Path Traversal8.6 High
- kovah linkaceFile Upload Vulnerability Leading to XSS in LinkAce v1.15.57.6 High
- kovah linkaceReflected Cross-Site Scripting (XSS) Vulnerability in LinkAce4.6 Medium
- draytek vigor2960, vigor300b, vigor2960 firmware +1 more +3 moreDrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection6.9 Medium
- linux, linux kernel +1 morebpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors7.8 High
- linux, linux kernel +1 morevirtio_net: correct netdev_tx_reset_queue() invocation point5.5 Medium
- linux, linux kernel +1 moreriscv: mm: Do not call pmd dtor on vmemmap page table teardown5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreblk-cgroup: Fix UAF in blkcg_unpin_online()7.8 High
- linux, linux kernel +1 moregpio: graniterapids: Fix vGPIO driver crash5.5 Medium
- linux, linux kernel +1 moreusb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer5.5 Medium
- linux, linux kernel +1 moreiommu/vt-d: Remove cache tags before disabling ATS8.8 High
- linux, linux kernel +1 moreiommu/vt-d: Fix qi_batch NULL pointer with nested parent domain5.5 Medium
- linux, linux kernel +1 moredrm/i915: Fix NULL pointer dereference in capture_engine5.5 Medium
- linux, linux kernel +1 moredrm/amdkfd: Dereference null return value5.5 Medium
- linux, linux kernel +1 morebpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog5.5 Medium
- linux, linux kernel +1 morebpf, sockmap: Fix race between element replace and close()7.8 High
- linux, linux kernel +1 morewifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one7.8 High
- linux, linux kernel +1 moreacpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl7.8 High
- linux, linux kernel +1 moretipc: fix NULL deref in cleanup_bearer()5.5 Medium
- linux, linux kernel +1 morenet/mlx5: DR, prevent potential error pointer dereference5.5 Medium
- linux, linux kernel +1 morenet: lapb: increase LAPB_HEADER_LEN5.5 Medium
- linux, linux kernel +1 morenet: defer final 'struct net' free in netns dismantle7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: control: Avoid WARN() for symlink errors5.5 Medium
- linux, linux kernel +1 morebnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips9.8 Critical
- linux, linux kernel +1 morenetfilter: nf_tables: do not defer rule destruction via call_rcu7.8 High
- linux, linux kernel +1 moreBluetooth: hci_event: Fix using rcu_read_(un)lock while iterating7.8 High
- linux, linux kernel +1 moreBluetooth: btmtk: avoid UAF in btmtk_process_coredump8.8 High
- linux, linux kernel +1 moredrm/xe/reg_sr: Remove register pool7.8 High
- linux, linux kernel +1 morecan: hi311x: hi3110_can_ist(): fix potential use-after-free8.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morenetfilter: x_tables: fix LED ID check in led_tg_check()7.1 High
- linux, linux kernel +1 morenet: enetc: Do not configure preemptible TCs if SIs do not support5.5 Medium
- linux, linux kernel +1 morenet: hsr: avoid potential out-of-bound access in fill_frame_info()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: Fix icmp host relookup triggering ip_rt_bug5.5 Medium
- linux, linux kernel +1 moreipv6: avoid possible NULL deref in modify_prefix_route()5.5 Medium
- linux, linux kernel +1 morecan: j1939: j1939_session_new(): fix skb reference counting9.8 Critical
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morenet/ipv6: release expired exception dst cached in socket7.5 High
- linux, linux kernel +1 moredccp: Fix memory leak in dccp_feat_change_recv5.5 Medium
- linux, linux kernel +1 moretipc: Fix use-after-free of kernel socket in cleanup_bearer().7.8 High
- linux, linux kernel +1 morenet/smc: initialize close_work early to avoid warning7.5 High
- linux, linux kernel +1 morenet/smc: fix LGR and link use-after-free issue9.8 Critical
- linux, linux kernel +1 morenet: hsr: must allocate more bytes for RedBox support5.5 Medium
- linux, linux kernel +1 morenetfilter: nft_inner: incorrect percpu area handling under softirq7.8 High
- linux, linux kernel +1 morenetfilter: ipset: Hold module reference while requesting a module7.3 High
- linux, linux kernel +1 moregeneve: do not assume mac header is set in geneve_xmit_skb()5.5 Medium
- linux, linux kernel +1 morenet: avoid potential UAF in default_operstate()7.8 High
- linux, linux kernel +1 moregpio: grgpio: Add NULL check in grgpio_probe5.5 Medium
- linux, linux kernel +1 moretcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg7.8 High
- linux, linux kernel +1 morenvme-tcp: fix the memleak while create new ctrl failed7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morescsi: sg: Fix slab-use-after-free read in sg_release()7.8 High
- overtek ot-e801gOvertek OT-E801G passwd os command injection5.3 Medium
- Show moreLoading…