Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-49852scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- CVE-2024-49851tpm: Clean up TPM space after command failure
- CVE-2024-49850bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- CVE-2024-47757nilfs2: fix potential oob read in nilfs_btree_check_delete()
- CVE-2024-47756PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- CVE-2024-47754media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- CVE-2024-47753media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- CVE-2024-47752media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- CVE-2024-47751PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- CVE-2024-47750RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- CVE-2024-47749RDMA/cxgb4: Added NULL check for lookup_atid
- CVE-2024-47748vhost_vdpa: assign irq bypass producer token correctly
- CVE-2024-47747net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- CVE-2024-47746fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set
- CVE-2024-47745mm: call the security_mmap_file() LSM hook in remap_file_pages()
- CVE-2024-47744KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- CVE-2024-47743KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- CVE-2024-47742firmware_loader: Block path traversal
- CVE-2024-47741btrfs: fix race setting file private on concurrent lseek using same fd
- CVE-2024-47740f2fs: Require FMODE_WRITE for atomic write ioctls
- CVE-2024-47739padata: use integer wrap around to prevent deadlock on seq_nr overflow
- CVE-2024-47738wifi: mac80211: don't use rate mask for offchannel TX either
- CVE-2024-47737nfsd: call cache_put if xdr_reserve_space returns NULL
- CVE-2024-47736erofs: handle overlapped pclusters out of crafted images properly
- CVE-2024-47735RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- CVE-2024-47734bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- CVE-2024-47733netfs: Delete subtree of 'fs/netfs' when netfs module exits
- CVE-2024-47732crypto: iaa - Fix potential use after free bug
- CVE-2024-47731drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- CVE-2024-47730crypto: hisilicon/qm - inject error before stopping queue