CVE-2024-49965

In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove unreasonable unlock in ocfs2readblocks Patch series "Misc fixes for ocfs2readblocks", v5. This series contains 2 fixes for ocfs2readblocks. The first patch fix the issue reported by syzbot, which detects bad unlock...

GHSA-QM7J-C969-7J4Q

creationtimestamp| type| source ---|---|--- 2024-10-21 17:03:42+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/970 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:10:45+00:00| seen|...

CVE-2020-5260

creationtimestamp| type| source ---|---|--- 2024-10-21 17:03:42+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/970 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:10:45+00:00| seen|...

CVE-2024-47690

In the Linux kernel, the following vulnerability has been resolved: f2fs: get rid of online repaire on corrupted directory syzbot reports a f2fs bug as below: kernel BUG at fs/f2fs/inode.c:896! RIP: 0010:f2fsevictinode+0x1598/0x15c0 fs/f2fs/inode.c:896 Call Trace: evict+0x532/0x950 fs/inode.c:704...

CVE-2024-47713

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use two-phase skb reclamation in ieee80211dostop Since 'devqueuexmit' should be called with interrupts enabled, the following backtrace: ieee80211dostop ... spinlockirqsave&local-queuestopreasonlock, flags...

CVE-2024-9979

A flaw was found in PyO3. This vulnerability causes a use-after-free issue, potentially leading to memory corruption or crashes via unsound borrowing from weak Python references...

CVE-2024-9823

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service DoS attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory...

CVE-2024-8070

creationtimestamp| type| source ---|---|--- 2024-10-13 23:06:28+00:00| seen| https://t.me/cvedetector/7791 2025-01-23 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-03...

CVE-2024-9002

creationtimestamp| type| source ---|---|--- 2024-10-11 17:01:16+00:00| seen| https://t.me/cvedetector/7677 2025-01-23 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-04...

CVE-2024-47664

In the Linux kernel, the following vulnerability has been resolved: spi: hisi-kunpeng: Add verification for the maxfrequency provided by the firmware If the value of maxspeedhz is 0, it may cause a division by zero error in hisicalceffectivespeed. The value of maxspeedhz is provided by firmware...

CVE-2024-47669

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix state management in error path of log writing function After commit a694291a6211 "nilfs2: separate wait function from nilfssegctorwrite" was applied, the log writing function nilfssegctordoconstruct was able to issue...

CVE-2024-47667

In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata i2037 AM65x SR 1.0 Errata i2037 in AM65x/DRA80xM Processors Silicon Revision 1.0 SPRZ452DJuly 2018Revised December 2019 1 mentions when an inbound PCIe TLP spans more than two internal AXI...

CVE-2024-47666

In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Set phy-enablecompletion only when we wait for it pm8001phycontrol populates the enablecompletion pointer with a stack address, sends a PHYLINKRESET / PHYHARDRESET, waits 300 ms, and returns. The problem arises when...

CVE-2024-8884

creationtimestamp| type| source ---|---|--- 2024-10-08 13:42:45+00:00| seen| https://t.me/cvedetector/7359 2024-10-10 09:20:30+00:00| seen| https://t.me/HackingInsights/15669 2024-10-10 11:33:27+00:00| seen| https://t.me/CyberBulletin/26060 2024-10-10 11:33:27+00:00| seen|...

CVE-2024-47561

creationtimestamp| type| source ---|---|--- 2024-10-03 14:06:25+00:00| seen| https://t.me/cvedetector/6892 2024-10-04 14:13:07+00:00| seen| https://t.me/CyberBulletin/25919 2024-10-04 14:13:07+00:00| seen| https://t.me/CyberBulletin/1024 2024-10-04 14:16:16+00:00| seen|...

CVE-2024-23924

creationtimestamp| type| source ---|---|--- 2024-09-28 10:18:20+00:00| seen| https://t.me/cvedetector/6603 2025-01-22 12:01:16+00:00| seen| https://bsky.app/profile/thezdi.bsky.social/post/3lgdczxofdc27 2025-01-23 07:29:50+00:00| seen| https://bsky.app/profile/thezdi.bsky.social/post/3lgfedodb6k2...

CVE-2024-46817

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpudm initialize when stream nums greater than 6 Why Coverity reports OVERRUN warning. Should abort amdgpudm initialize. How Return failure to amdgpudminit...

CVE-2024-46861

In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: do not stop RX on failing RX callback RX callbacks can fail for multiple reasons: Payload too short Payload formatted incorrecly e.g. bad NCM framing Lack of memory None of these should cause the driver to seize u...

CVE-2024-46857

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix bridge mode operations when there are no VFs Currently, trying to set the bridge mode attribute when numvfs=0 leads to a crash: bridge link set dev eth2 hwmode vepa 168.967392 BUG: kernel NULL pointer dereference,...

CVE-2024-46815

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check numvalidsets before accessing readerwmsets WHY & HOW numvalidsets needs to be checked to avoid a negative index when accessing readerwmsetsnumvalidsets - 1. This fixes an OVERRUN issue reported by Coverity...