Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-50104ASoC: qcom: sdm845: add missing soundwire runtime stream alloc
- CVE-2024-50103ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- CVE-2024-50102x86: fix user address masking non-canonical speculation issue
- CVE-2024-50101iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- CVE-2024-50100USB: gadget: dummy-hcd: Fix "task hung" problem
- CVE-2024-50099arm64: probes: Remove broken LDR (literal) uprobe support
- CVE-2024-50098scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- CVE-2024-50097net: fec: don't save PTP state if PTP is unsupported
- CVE-2024-50096nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- CVE-2024-50095RDMA/mad: Improve handling of timed out WRs of mad agent
- CVE-2024-50094sfc: Don't invoke xdp_do_flush() from netpoll.
- CVE-2024-50093thermal: intel: int340x: processor: Fix warning during module unload
- CVE-2024-50092net: netconsole: fix wrong warning
- CVE-2024-50091dm vdo: don't refer to dedupe_context after releasing it
- CVE-2024-50090drm/xe/oa: Fix overflow in oa batch buffer
- CVE-2023-52920bpf: support non-r10 register spill/fill to/from stack in precision tracking
- CVE-2024-50088btrfs: fix uninitialized pointer free in add_inode_ref()
- CVE-2024-50087btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- CVE-2024-50086ksmbd: fix user-after-free from session log off
- CVE-2024-50085mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- CVE-2024-50084net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- CVE-2024-50083tcp: fix mptcp DSS corruption due to large pmtu xmit
- CVE-2024-50082blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- CVE-2024-50081blk-mq: setup queue ->tag_set before initializing hctx
- CVE-2024-50080ublk: don't allow user copy for unprivileged device
- CVE-2024-50079io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work
- CVE-2024-50078Bluetooth: Call iso_exit() on module unload
- CVE-2024-50077Bluetooth: ISO: Fix multiple init when debugfs is disabled
- CVE-2024-50076vt: prevent kernel-infoleak in con_font_get()
- CVE-2024-50075xhci: tegra: fix checked USB2 port number