Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-56614xsk: fix OOB map writes when deleting elements
- CVE-2024-56613sched/numa: fix memory leak due to the overwritten vma->numab_state
- CVE-2024-56612mm/gup: handle NULL pages in unpin_user_pages()
- CVE-2024-56611mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- CVE-2024-56610kcsan: Turn report_filterlist_lock into a raw_spinlock
- CVE-2024-56609wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
- CVE-2024-56608drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- CVE-2024-56607wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()
- CVE-2024-56606af_packet: avoid erroring out after sock_init_data() in packet_create()
- CVE-2024-56605Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- CVE-2024-56604Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- CVE-2024-56603net: af_can: do not leave a dangling sk pointer in can_create()
- CVE-2024-56602net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
- CVE-2024-56601net: inet: do not leave a dangling sk pointer in inet_create()
- CVE-2024-56600net: inet6: do not leave a dangling sk pointer in inet6_create()
- CVE-2024-56599wifi: ath10k: avoid NULL pointer error during sdio remove
- CVE-2024-56598jfs: array-index-out-of-bounds fix in dtReadFirst
- CVE-2024-56597jfs: fix shift-out-of-bounds in dbSplit
- CVE-2024-56596jfs: fix array-index-out-of-bounds in jfs_readdir
- CVE-2024-56595jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- CVE-2024-56594drm/amdgpu: set the right AMDGPU sg segment limitation
- CVE-2024-56593wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()
- CVE-2024-56592bpf: Call free_htab_elem() after htab_unlock_bucket()
- CVE-2024-56591Bluetooth: hci_conn: Use disable_delayed_work_sync
- CVE-2024-56590Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
- CVE-2024-56589scsi: hisi_sas: Add cond_resched() for no forced preemption model
- CVE-2024-56588scsi: hisi_sas: Create all dump files during debugfs initialization
- CVE-2024-56587leds: class: Protect brightness_show() with led_cdev->led_access mutex
- CVE-2024-56586f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- CVE-2024-56585LoongArch: Fix sleeping in atomic context for PREEMPT_RT