CVEs published April 28, 2024
44 CVEs were published on April 28, 2024: 1 critical, 14 high.
- Published
- 44
- Critical
- 1
- High
- 14
- Medium
- 7
- Low
- 0
- Unrated
- 22
- Now in CISA KEV
- 0
- Fix available
- 8
Most affected products
- Linux
- 40
- ejs
- 1
- IBM i · IBM Rational Development Studio for i
- 1
Critical 1
High 14
- CVE-2022-48665exfat: fix overflow for large capacity partitionLinux
- CVE-2022-48662drm/i915/gem: Really move i915_gem_context.link under ref protectionLinux
- CVE-2022-48658mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context.Linux
- CVE-2022-48655firmware: arm_scmi: Harden accesses to the reset domainsLinux
- CVE-2022-48654netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()Linux
- CVE-2022-48652ice: Fix crash by keep old cfg when update TCs more than queuesLinux
- CVE-2022-48651ipvlan: Fix out-of-bound bugs caused by unset skb->mac_headerLinux
- CVE-2022-48637bnxt: prevent skb UAF after handing over to PTP workerLinux
- CVE-2022-48636s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroupLinux
- CVE-2022-48632i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()Linux
- CVE-2024-25050IBM i privilege escalationIBM i · IBM Rational Development Studio for i
- CVE-2024-26927ASoC: SOF: Add some bounds checking to firmware dataLinux
- CVE-2024-33891Delinea Secret Server before 11.7.000001 allows attackers to bypass authentication via the SOAP API in SecretServer/webservices/SSWebService
- CVE-2024-33899RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI
Medium, low and unrated 29
- CVE-2022-48668smb3: fix temporary data corruption in collapse rangeLinux
- CVE-2022-48667smb3: fix temporary data corruption in insert rangeLinux
- CVE-2022-48664btrfs: fix hang during unmount when stopping a space reclaim workerLinux
- CVE-2022-48663gpio: mockup: fix NULL pointer dereference when removing debugfsLinux
- CVE-2022-48661gpio: mockup: Fix potential resource leakage when register a chipLinux
- CVE-2022-48660gpiolib: cdev: Set lineevent_state::irq after IRQ register successfullyLinux
- CVE-2022-48659mm/slub: fix to return errno if kmalloc() failsLinux
- CVE-2022-48657arm64: topology: fix possible overflow in amu_fie_setup()Linux
- CVE-2022-48656dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()Linux
- CVE-2022-48653ice: Don't double unplug aux on peer initiated resetLinux
- CVE-2022-48650scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()Linux
- CVE-2022-48649mm/slab_common: fix possible double free of kmem_cacheLinux
- CVE-2022-48648sfc: fix null pointer dereference in efx_hard_start_xmitLinux
- CVE-2022-48647sfc: fix TX channel offset when using legacy interruptsLinux
- CVE-2022-48646sfc/siena: fix null pointer dereference in efx_hard_start_xmitLinux
- CVE-2022-48645net: enetc: deny offload of tc-based TSN features on VF interfacesLinux
- CVE-2022-48644net/sched: taprio: avoid disabling offload when it was never enabledLinux
- CVE-2022-48643netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()Linux
- CVE-2022-48642netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()Linux
- CVE-2022-48641netfilter: ebtables: fix memory leak when blob is malformedLinux
- CVE-2022-48640bonding: fix NULL deref in bond_rr_gen_slave_idLinux
- CVE-2022-48639net: sched: fix possible refcount leak in tc_new_tfilter()Linux
- CVE-2022-48638cgroup: cgroup_get_from_id() must check the looked-up kn is a directoryLinux
- CVE-2022-48635fsdax: Fix infinite loop in dax_iomap_rw()Linux
- CVE-2022-48634drm/gma500: Fix BUG: sleeping function called from invalid context errorsLinux
- CVE-2022-48633drm/gma500: Fix WARN_ON(lock->magic != lock) errorLinux
- CVE-2022-48631ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0Linux
- CVE-2024-26928smb: client: fix potential UAF in cifs_debug_files_proc_show()Linux
- CVE-2024-33883The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.ejs