Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-50134drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- CVE-2024-50133LoongArch: Don't crash in stack_top() for tasks without vDSO
- CVE-2024-50132tracing/probes: Fix MAX_TRACE_ARGS limit handling
- CVE-2024-50131tracing: Consider the NULL character when validating the event length
- CVE-2024-50130netfilter: bpf: must hold reference on net namespace
- CVE-2024-50129net: pse-pd: Fix out of bound for loop
- CVE-2024-50128net: wwan: fix global oob in wwan_rtnl_policy
- CVE-2024-50127net: sched: fix use-after-free in taprio_change()
- CVE-2024-50126net: sched: use RCU read-side critical section in taprio_dump()
- CVE-2024-50125Bluetooth: SCO: Fix UAF on sco_sock_timeout
- CVE-2024-50124Bluetooth: ISO: Fix UAF on iso_sock_timeout
- CVE-2024-50123bpf: Add the missing BPF_LINK_TYPE invocation for sockmap
- CVE-2024-50122PCI: Hold rescan lock while adding devices during host probe
- CVE-2024-50121nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- CVE-2024-50120smb: client: Handle kstrdup failures for passwords
- CVE-2024-50119cifs: fix warning when destroy 'cifs_io_request_pool'
- CVE-2024-50118btrfs: reject ro->rw reconfiguration if there are hard ro requirements
- CVE-2024-50117drm/amd: Guard against bad data for ATIF ACPI method
- CVE-2024-50116nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- CVE-2024-50115KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- CVE-2024-50114KVM: arm64: Unregister redistributor for failed vCPU creation
- CVE-2024-50113firewire: core: fix invalid port index for parent device
- CVE-2024-50112x86/lam: Disable ADDRESS_MASKING in most cases
- CVE-2024-50111LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- CVE-2024-50110xfrm: fix one more kernel-infoleak in algo dumping
- CVE-2024-50109md/raid10: fix null ptr dereference in raid10_size()
- CVE-2024-50108drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- CVE-2024-50107platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid addresses
- CVE-2024-50106nfsd: fix race between laundromat and free_stateid
- CVE-2024-50105ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc