CVE-2024-52531

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soupheaderparseparamliststrict. There is a plausible way to reach this remotely via soupmessageheadersgetcontenttype e.g., an application may want to retrieve the content type of a request or...

CVE-2024-43430

A flaw was found in moodle. External API access to Quiz can override contained insufficient access control...

CVE-2024-51595

creationtimestamp| type| source ---|---|--- 2024-11-09 14:39:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113453511317043120 2024-11-09 17:16:36+00:00| seen| https://t.me/cvedetector/10399...

CVE-2024-50261

creationtimestamp| type| source ---|---|--- 2024-11-09 13:17:46+00:00| seen| https://t.me/cvedetector/10323 2024-11-09 13:19:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113453195765546881...

CVE-2024-50254

In the Linux kernel, the following vulnerability has been resolved: bpf: Free dynamically allocated bits in bpfiterbitsdestroy bpfiterbitsdestroy uses "kit-nrbits kmemleakalloc+0x4b/0x80 kmallocnodenoprof+0x480/0x5c0 alloc.isra.0+0x89/0xb0 allocbulk+0x2af/0x720 prefillmemcache+0x7f/0xb0...

CVE-2024-50247

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check if more than chunk-size bytes are written A incorrectly formatted chunk may decompress into more than LZNTCHUNKSIZE bytes and a index out of bounds will occur in smaxoff...

CVE-2024-50249

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Make rmwlock a rawspinlock The following BUG was triggered: ============================= BUG: Invalid wait context 6.12.0-rc2-XXX 406 Not tainted ----------------------------- kworker/1:1/62 is trying to lock:...

CVE-2024-50219

creationtimestamp| type| source ---|---|--- 2024-11-09 10:34:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113452546189851707...

CVE-2024-51787

creationtimestamp| type| source ---|---|--- 2024-11-09 08:48:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113452129722050722 2024-11-09 10:46:40+00:00| seen| https://t.me/cvedetector/10287...

CVE-2024-45764

creationtimestamp| type| source ---|---|--- 2024-11-08 16:10:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113448204258373928 2024-11-08 18:02:42+00:00| seen| https://t.me/cvedetector/10203 2024-11-09 07:19:03+00:00| seen|...

CVE-2024-50204

In the Linux kernel, the following vulnerability has been resolved: fs: don't try and remove empty rbtree node When copying a namespace we won't have added the new copy into the namespace rbtree until after the copy succeeded. Calling freemntns will try to remove the copy from the rbtree which is...

CVE-2024-50191

In the Linux kernel, the following vulnerability has been resolved: ext4: don't set SBRDONLY after filesystem errors When the filesystem is mounted with errors=remount-ro, we were setting SBRDONLY flag to stop all filesystem modifications. We knew this misses proper locking sb-sumount and does no...

CVE-2024-50177

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a UBSAN warning in DML2.1 When programming phantom pipe, since cursorwidth is explicity set to 0, this causes calculation logic to trigger overflow for an unsigned int triggering the kernel's UBSAN check as...

CVE-2024-50210

In the Linux kernel, the following vulnerability has been resolved: posix-clock: posix-clock: Fix unbalanced locking in pcclocksettime If getclockdesc succeeds, it calls fget for the clockid's fd, and get the clk-rwsem read lock, so the error path should release the lock to make the lock balance...

CVE-2024-50200

In the Linux kernel, the following vulnerability has been resolved: mapletree: correct tree corruption on spanning store Patch series "mapletree: correct tree corruption on spanning store", v3. There has been a nasty yet subtle maple tree corruption bug that appears to have been in existence sinc...

CVE-2024-50199

In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: skip HugeTLB pages for unusevma I got a bad pud error and lost a 1GB HugeTLB when calling swapoff. The problem can be reproduced by the following steps: 1. Allocate an anonymous 1GB HugeTLB and some other anonymous...

CVE-2024-50186

In the Linux kernel, the following vulnerability has been resolved: net: explicitly clear the sk pointer, when pf-create fails We have recently noticed the exact same KASAN splat as in commit 6cd4a78d962b "net: do not leave a dangling sk pointer, when socket creation fails". The problem is that...

CVE-2024-50208

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Fix a bug while setting up Level-2 PBL pages Avoid memory corruption while setting up Level-2 PBL pages for the non MR resources when numpages 256K. There will be a single PDE page address contiguous pages in the cas...

CVE-2024-50180

In the Linux kernel, the following vulnerability has been resolved: fbdev: sisfb: Fix strbuf array overflow The values of the variables xres and yres are placed in strbuf. These variables are obtained from strbuf1. The strbuf1 array contains digit characters and a space if the array contains...

CVE-2024-10963

creationtimestamp| type| source ---|---|--- 2024-11-07 16:13:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113442553936741151 2024-11-07 17:46:19+00:00| seen| https://t.me/cvedetector/10096 2025-10-15 19:34:49+00:00| seen|...