CVE-2024-41057

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefileswithdrawcookie We got the following issue in our fault injection stress test: ================================================================== BUG: KASAN: slab-use-after-free in...

CVE-2024-41058

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in fscachewithdrawvolume We got the following issue in our fault injection stress test: ================================================================== BUG: KASAN: slab-use-after-free in...

CVE-2024-41038

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into the available firmware data buffer. The wmfw V2 format introduced variable-length strings in the...

CVE-2024-41055

In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfnsectionvalid Commit 5ec8e8ea8b77 "mm/sparsemem: fix race in accessing memorysection-usage" changed pfnsectionvalid to add a READONCE call around "ms-usage" to fix a race with sectiondeactiva...

CVE-2024-41045

In the Linux kernel, the following vulnerability has been resolved: bpf: Defer work in bpftimercancelandfree Currently, the same case as previous patch two timer callbacks trying to cancel each other can be invoked through bpfmapupdateelem as well, or more precisely, freeing map elements containi...

CVE-2024-41028

In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshibaacpi: Fix array out-of-bounds access In order to use toshibadmiquirks together with the standard DMI matching functions, it must be terminated by a empty entry. Since this entry is missing, an array...

CVE-2024-41059

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copyname syzbot reported BUG: KMSAN: uninit-value in sizedstrscpy+0xc4/0x160 sizedstrscpy+0xc4/0x160 copyname+0x2af/0x320 fs/hfsplus/xattr.c:411 hfspluslistxattr+0x11e9/0x1a50 fs/hfsplus/xattr.c:750...

CVE-2024-41068

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix sclpinit cleanup on failure If sclpinit fails it only partially cleans up: if there are multiple failing calls to sclpinit sclpstatechangeevent will be added several times to sclpreglist, which results in the...

CVE-2024-41052

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Init the count variable in collecting hot-reset devices The count variable is used without initialization, it results in mistakes in the device counting and crashes the userspace if the get hot reset info path is...

CVE-2024-41051

In the Linux kernel, the following vulnerability has been resolved: cachefiles: wait for ondemandobjectworker to finish when dropping object When queuing ondemandobjectworker to re-open the object, cachefilesobject is not pinned. The cachefilesobject may be freed when the pending read request is...

CVE-2024-41022

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix signedness bug in sdmav40processtrapirq The "instance" variable needs to be signed for the error handling to work...

CVE-2024-5679

creationtimestamp| type| source ---|---|--- 2024-07-11 11:37:49+00:00| seen| https://t.me/cvedetector/649 2024-12-10 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-02...

CVE-2024-6285

Integer Underflow Wrap or Wraparound vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses...

CVE-2024-28825

Improper restriction of excessive authentication attempts on some authentication methods in Checkmk before 2.3.0b5 beta, 2.2.0p26, 2.1.0p43, and in Checkmk 2.0.0 EOL facilitates password brute-forcing...

CVE-2024-28824

Least privilege violation and reliance on untrusted inputs in the mkinformix Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows local users to escalate privileges...

CVE-2024-2330

creationtimestamp| type| source ---|---|--- 2024-03-09 10:26:46+00:00| seen| https://t.me/ctinow/203871 2024-03-09 10:31:46+00:00| seen| https://t.me/ctinow/203872 2024-12-15 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-15 2025-05-15 00:00:00+00:00|...

CVE-2019-8805

creationtimestamp| type| source ---|---|--- 2024-01-31 15:41:36+00:00| seen| https://t.me/ctinow/176831 2024-07-24 09:39:46+00:00| seen| https://t.me/thebugbountyhunter/8960 2024-07-24 12:51:30+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10876 2024-07-24...

CVE-2024-23725

creationtimestamp| type| source ---|---|--- 2024-01-21 05:31:38+00:00| seen| https://t.me/ctinow/170747 2024-02-16 00:02:21+00:00| seen| https://t.me/ctinow/185993 2024-12-08 13:30:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113617443439155721...

CVE-2023-49797

creationtimestamp| type| source ---|---|--- 2024-01-01 07:56:39+00:00| published-proof-of-concept| https://t.me/ctinow/161218 2024-12-03 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1641/...

CVE-2023-25135

creationtimestamp| type| source ---|---|--- 2023-02-03 07:25:33+00:00| seen| https://t.me/cibsecurity/57440 2023-02-04 17:08:41+00:00| published-proof-of-concept| Telegram/AqbQcSruHnWkutfE8evxRkyLJKRGDqBk7h61RFWxZdE1Lg 2023-02-04 18:01:24+00:00| published-proof-of-concept|...