Linux CVEs
18,386 CVEs and advisories name Linux as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-47729drm/xe: Use reserved copy engine for user binds on faulting devices
- CVE-2024-47728bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- CVE-2024-47727x86/tdx: Fix "in-kernel MMIO" check
- CVE-2024-47726f2fs: fix to wait dio completion
- CVE-2024-47724wifi: ath11k: use work queue to process beacon tx event
- CVE-2024-47723jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- CVE-2024-47721wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading
- CVE-2024-47720drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- CVE-2024-47719iommufd: Protect against overflow of ALIGN() during iova allocation
- CVE-2024-47718wifi: rtw88: always wait for both firmware loading attempts
- CVE-2024-47717RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data
- CVE-2024-47716ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- CVE-2024-47715wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- CVE-2024-47714wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- CVE-2024-47713wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- CVE-2024-47712wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- CVE-2024-47711af_unix: Don't return OOB skb in manage_oob().
- CVE-2024-47710sock_map: Add a cond_resched() in sock_hash_free()
- CVE-2024-47709can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
- CVE-2024-47708netkit: Assign missing bpf_net_context
- CVE-2024-47707ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- CVE-2024-47706block, bfq: fix possible UAF for bfqq->bic with merge chain
- CVE-2024-47705block: fix potential invalid pointer dereference in blk_add_partition
- CVE-2024-47704drm/amd/display: Check link_res->hpo_dp_link_enc before using it
- CVE-2024-47703bpf, lsm: Add check for BPF LSM return value
- CVE-2024-47702bpf: Fail verification for sign-extension of packet data/data_end/data_meta
- CVE-2024-47701ext4: avoid OOB when system.data xattr changes underneath the filesystem
- CVE-2024-47700ext4: check stripe size compatibility on remount as well
- CVE-2024-47699nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- CVE-2024-47698drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error