Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-50164bpf: Fix overloading of MEM_UNINIT's meaning
- CVE-2024-50163bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- CVE-2024-50162bpf: devmap: provide rxq after redirect
- CVE-2024-50161bpf: Check the remaining info_cnt before repeating btf fields
- CVE-2024-50160ALSA: hda/cs8409: Fix possible NULL dereference
- CVE-2024-50159firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- CVE-2024-50158RDMA/bnxt_re: Fix out of bound check
- CVE-2024-50157RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
- CVE-2024-50156drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- CVE-2024-50155netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- CVE-2024-50154tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- CVE-2024-50153scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- CVE-2024-50152smb: client: fix possible double free in smb2_set_ea()
- CVE-2024-50151smb: client: fix OOBs when building SMB2_IOCTL request
- CVE-2024-50150usb: typec: altmode should keep reference to parent
- CVE-2024-50149drm/xe: Don't free job in TDR
- CVE-2024-50148Bluetooth: bnep: fix wild-memory-access in proto_unregister
- CVE-2024-50147net/mlx5: Fix command bitmask initialization
- CVE-2024-50146net/mlx5e: Don't call cleanup on profile rollback failure
- CVE-2024-50145octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- CVE-2024-50144drm/xe: fix unbalanced rpm put() with fence_fini()
- CVE-2024-50143udf: fix uninit-value use in udf_get_fileshortad
- CVE-2024-50142xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- CVE-2024-50141ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- CVE-2024-50140sched/core: Disable page allocation in task_tick_mm_cid()
- CVE-2024-50139KVM: arm64: Fix shift-out-of-bounds bug
- CVE-2024-50138bpf: Use raw_spinlock_t in ringbuf
- CVE-2024-50137reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
- CVE-2024-50136net/mlx5: Unregister notifier on eswitch init failure
- CVE-2024-50135nvme-pci: fix race condition between reset and nvme_dev_disable()