CVEs published in December 2024
3,523 vulnerabilities, 294 critical, 11 exploited.
- linux, linux kernel +1 more9p/xen: fix release of IRQ8.4 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv6: Fix soft lockups in fib6_select_path under high next hop churn7.5 High
- linux, linux kernel +1 morebpf: Mark raw_tp arguments with PTR_MAYBE_NULL5.5 Medium
- linux, linux kernel +1 morepowerpc/pseries: Fix dtl_access_lock to be a rw_semaphore5.5 Medium
- linux, linux kernel +1 moremedia: wl128x: Fix atomicity violation in fmc_send_cmd()5.5 Medium
- linux, linux kernel +1 mores390/pci: Fix potential double remove of hotplug slot7.8 High
- linux, linux kernel +1 moreusb: dwc3: gadget: Fix looping of queued SG entries5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info()5.5 Medium
- linux, linux kernel +1 moreALSA: core: Fix possible NULL dereference caused by kunit_kzalloc()5.5 Medium
- linux, linux kernel +1 moredrm/amdkfd: Use dynamic allocation for CU occupancy array in 'kfd_get_cu_occupancy()'7.8 High
- linux, linux kernel +1 morebpf: fix recursive lock when verdict program return SK_PASS7.5 High
- linux, linux kernel +1 morebrd: defer automatic disk creation until module initialization succeeds7.8 High
- linux, linux kernel +1 moref2fs: fix to do sanity check on node blkaddr in truncate_node()7.8 High
- linux, linux kernel +1 moremfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device5.5 Medium
- linux, linux kernel +1 morecrypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY5.5 Medium
- linux, linux kernel +1 morePCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'5.5 Medium
- linux, linux kernel +1 moresunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport7.5 High
- linux, linux kernel +1 moreusb: musb: Fix hardware lockup on first Rx endpoint request5.5 Medium
- linux, linux kernel +1 moreASoC: mediatek: Check num_codecs is not zero to avoid panic during probe5.5 Medium
- linux, linux kernel +1 moremailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks()8.4 High
- linux, linux kernel +1 moredrm/vc4: hdmi: Avoid hang with debug registers when suspended5.5 Medium
- linux, linux kernel +1 moreirqchip/riscv-aplic: Prevent crash when MSI domain is missing5.5 Medium
- linux, linux kernel +1 morecrypto: bcm - add error check in the ahash_hmac_init function7.8 High
- linux, linux kernel +1 moremedia: intel/ipu6: do not handle interrupts when device is disabled5.5 Medium
- linux, linux kernel +1 moreocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c5.5 Medium
- linux, linux kernel +1 morepowerpc/mm/fault: Fix kfence page fault reporting7.8 High
- linux, linux kernel +1 morepowerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()7.8 High
- linux, linux kernel +1 morethermal: testing: Initialize some variables annoteded with _free()5.5 Medium
- huawei pt9030-15, pt9030-15 firmware, ws7206-10 +15 more +17 moreA connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation...6.4 Medium
- huawei harmonyos ailife solution 8.0Some Huawei home music system products have a path traversal vulnerability. Successful...7.3 High
- huawei tc7001-10, tc7001-10 firmware, ws7200-10 +3 more +5 moreSome Huawei home routers have a connection hijacking vulnerability. Successful exploitation of...7.5 High
- huawei hilink ai life, harmonyos ailife solution 6.0 +1 moreHuawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful...4.0 Medium
- huawei harmonyosSome Huawei wearables have a vulnerability of not verifying the actual data size when reading...7.5 High
- huawei harmonyosSome Huawei wearables have a permission management vulnerability.7.7 High
- huawei ips module, ips module firmware, ngfw module +15 more +17 moreThere are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common...3.7 Low
- huawei ips module, ips module firmware, ngfw module +15 more +17 moreThere are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common...3.7 Low
- huawei ips module, ips module firmware, ngfw module +15 more +17 moreThere are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common...3.7 Low
- huawei ips module, ips module firmware, ngfw module +15 more +17 moreThere are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common...3.7 Low
- huawei ips module, ips module firmware, ngfw module +15 more +17 moreThere are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common...3.7 Low
- imagination technologies graphics ddkGPU DDK - Security: Exploitable PVRSRVBridgePhysmemWrapExtMem may lead to overwrite read-only file/memory (e.g. libc.so)7.8 High
- imagination technologies graphics ddkExploitable kernel use-after-free on psServerMMUContext due to reference count mismanagement7.8 High
- imagination technologies graphics ddkGPU DDK - Security: Reference count overflow in pvr_sync_rollback_export_fence7.8 High
- harfbuzzHarfBuzz heap-buffer-overflow on hb_cairo_glyphs_from_buffer9.3 Critical
- beijing longda jushang technology dbshop商城系统Beijing Longda Jushang Technology DBShop商城系统 home-order cross site scripting5.3 Medium
quincycrates.ioTunnelVision - decloaking VPNs using DHCP5.3 Medium- ruifang-tech rebuildruifang-tech Rebuild Admin Verification Page admin-verify redirect5.3 Medium
- wisi tangram gt31WISI Tangram GT31 HTTP Request server-side request forgery6.9 Medium
- netgear r6900p, r7000p, r6900p firmware +1 more +3 moreNetgear R6900P/R7000P HTTP Header sub_16C4C buffer overflow6.9 Medium
- four-faith f3x24, f3x36, f3x24 firmware +1 more +3 moreFour-Faith Industrial Router adjust_sys_time OS Command Injection7.2 High
- draytek vigor2960, vigor300b, vigor routers +2 more +4 moreDrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection6.9 Medium
- Show moreLoading…