Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-50038netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- CVE-2024-50037drm/fbdev-dma: Only cleanup deferred I/O if necessary
- CVE-2024-50036net: do not delay dst_entries_add() in dst_release()
- CVE-2024-50035ppp: fix ppp_async_encode() illegal access
- CVE-2024-50034net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC
- CVE-2024-50033slip: make slhc_remember() more robust against malicious packets
- CVE-2024-50031drm/v3d: Stop the active perfmon before being destroyed
- CVE-2024-50030drm/xe/ct: prevent UAF in send_recv()
- CVE-2024-50029Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- CVE-2024-50028thermal: core: Reference count the zone in thermal_zone_get_by_id()
- CVE-2024-50027thermal: core: Free tzp copy along with the thermal zone
- CVE-2024-50026scsi: wd33c93: Don't use stale scsi_pointer value
- CVE-2024-50025scsi: fnic: Move flush_work initialization out of if block
- CVE-2024-50024net: Fix an unsafe loop on the list
- CVE-2024-50023net: phy: Remove LED entry from LEDs list on unregister
- CVE-2024-50022device-dax: correct pgoff align in dax_set_mapping()
- CVE-2024-50021ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()
- CVE-2024-50020ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()
- CVE-2024-50019kthread: unpark only parked kthread
- CVE-2024-50017x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- CVE-2024-50015ext4: dax: fix overflowing extents beyond inode size when partially writing
- CVE-2024-50014ext4: fix access to uninitialised lock in fc replay path
- CVE-2024-50013exfat: fix memory leak in exfat_load_bitmap()
- CVE-2024-50012cpufreq: Avoid a bad reference count on CPU node
- CVE-2024-50011ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item
- CVE-2024-50010exec: don't WARN for racy path_noexec check
- CVE-2024-50009cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- CVE-2024-50008wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- CVE-2024-50007ALSA: asihpi: Fix potential OOB array access
- CVE-2024-50006ext4: fix i_data_sem unlock order in ext4_ind_migrate()