Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-53053scsi: ufs: core: Fix another deadlock during RTC update
- CVE-2024-53052io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- CVE-2024-53051drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
- CVE-2024-53050drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- CVE-2024-53049slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof
- CVE-2024-53048ice: fix crash on probe for DPLL enabled E810 LOM
- CVE-2024-53047mptcp: init: protect sched with rcu_read_lock
- CVE-2024-53046arm64: dts: imx8ulp: correct the flexspi compatible string
- CVE-2024-53045ASoC: dapm: fix bounds checker error in dapm_widget_list_create
- CVE-2024-53044net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()
- CVE-2024-53043mctp i2c: handle NULL header address
- CVE-2024-53042ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- CVE-2024-50304ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
- CVE-2024-50303resource,kexec: walk_system_ram_res_rev must retain resource flags
- CVE-2024-50302HID: core: zero-initialize the report buffer
- CVE-2024-50301security/keys: fix slab-out-of-bounds in key_task_permission
- CVE-2024-50300regulator: rtq2208: Fix uninitialized use of regulator_config
- CVE-2024-50299sctp: properly validate chunk size in sctp_sf_ootb()
- CVE-2024-50298net: enetc: allocate vf_state during PF probes
- CVE-2024-50297net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
- CVE-2024-50296net: hns3: fix kernel crash when uninstalling driver
- CVE-2024-50295net: arc: fix the device for dma_map_single/dma_unmap_single
- CVE-2024-50294rxrpc: Fix missing locking causing hanging calls
- CVE-2024-50293net/smc: do not leave a dangling sk pointer in __smc_create()
- CVE-2024-50292ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- CVE-2024-50291media: dvb-core: add missing buffer index check
- CVE-2024-50290media: cx24116: prevent overflows on SNR calculus
- CVE-2024-50289media: av7110: fix a spectre vulnerability
- CVE-2024-50288media: vivid: fix buffer overwrite when using > 32 buffers
- CVE-2024-50287media: v4l2-tpg: prevent the risk of a division by zero