Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-50286ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- CVE-2024-50285ksmbd: check outstanding simultaneous SMB operations
- CVE-2024-50284ksmbd: Fix the missing xa_store error check
- CVE-2024-50283ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- CVE-2024-50282drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- CVE-2024-50281KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation
- CVE-2024-50280dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- CVE-2024-50279dm cache: fix out-of-bounds access to the dirty bitset when resizing
- CVE-2024-50278dm cache: fix potential out-of-bounds access on the first resume
- CVE-2024-50277dm: fix a crash if blk_alloc_disk fails
- CVE-2024-50276net: vertexcom: mse102x: Fix possible double free of TX skb
- CVE-2024-50275arm64/sve: Discard stale CPU state when handling SVE traps
- CVE-2024-50274idpf: avoid vport access in idpf_get_link_ksettings
- CVE-2024-50273btrfs: reinitialize delayed ref list after deleting it from the list
- CVE-2024-50272filemap: Fix bounds checking in filemap_read()
- CVE-2024-50271signal: restore the override_rlimit logic
- CVE-2024-50270mm/damon/core: avoid overflow in damon_feed_loop_next_input()
- CVE-2024-50269usb: musb: sunxi: Fix accessing an released usb phy
- CVE-2024-50268usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- CVE-2024-50267USB: serial: io_edgeport: fix use after free in debug printk
- CVE-2024-50266clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
- CVE-2024-50265ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- CVE-2024-50264vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
- CVE-2023-52921drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()
- CVE-2024-50263fork: only invoke khugepaged, ksm hooks if no error
- CVE-2024-50262bpf: Fix out-of-bounds write in trie_get_next_key()
- CVE-2024-50261macsec: Fix use-after-free while sending the offloading packet
- CVE-2024-50260sock_map: fix a NULL pointer dereference in sock_map_link_update_prog()
- CVE-2024-50259netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- CVE-2024-50258net: fix crash when config small gso_max_size/gso_ipv4_max_size