Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-49973r8169: add tally counter fields added with RTL8125
- CVE-2024-49972drm/amd/display: Deallocate DML memory if allocation fails
- CVE-2024-49971drm/amd/display: Increase array size of dummy_boolean
- CVE-2024-49970drm/amd/display: Implement bounds check for stream encoder creation in DCN401
- CVE-2024-49969drm/amd/display: Fix index out of bounds in DCN30 color transformation
- CVE-2024-49968ext4: filesystems without casefold feature cannot be mounted with siphash
- CVE-2024-49966ocfs2: cancel dqi_sync_work before freeing oinfo
- CVE-2024-49965ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- CVE-2024-49964mm/hugetlb: fix memfd_pin_folios free_huge_pages leak
- CVE-2024-49963mailbox: bcm2835: Fix timeout during suspend mode
- CVE-2024-49962ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- CVE-2024-49961media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- CVE-2024-49960ext4: fix timer use-after-free on failed mount
- CVE-2024-49959jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- CVE-2024-49958ocfs2: reserve space for inline xattr before attaching reflink tree
- CVE-2024-49957ocfs2: fix null-ptr-deref when journal load failed.
- CVE-2024-49956gfs2: fix double destroy_workqueue error
- CVE-2024-49955ACPI: battery: Fix possible crash when unregistering a battery hook
- CVE-2024-49954static_call: Replace pointless WARN_ON() in static_call_module_notify()
- CVE-2024-49953net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- CVE-2024-49952netfilter: nf_tables: prevent nf_skb_duplicated corruption
- CVE-2024-49951Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- CVE-2024-49950Bluetooth: L2CAP: Fix uaf in l2cap_connect
- CVE-2024-49949net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- CVE-2024-49948net: add more sanity checks to qdisc_pkt_len_init()
- CVE-2024-49947net: test for not too small csum_start in virtio_net_hdr_to_skb()
- CVE-2024-49946ppp: do not assume bh is held in ppp_channel_bridge_input()
- CVE-2024-49945net/ncsi: Disable the ncsi work before freeing the associated structure
- CVE-2024-49944sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- CVE-2024-49943drm/xe/guc_submit: add missing locking in wedged_fini