CVE-2024-53124

In the Linux kernel, the following vulnerability has been resolved: net: fix data-races around sk-skforwardalloc Syzkaller reported this warning: ------------ cut here ------------ WARNING: CPU: 0 PID: 16 at net/ipv4/afinet.c:156 inetsockdestruct+0x1c5/0x1e0 Modules linked in: CPU: 0 UID: 0 PID: ...

CVE-2024-53111

In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix address wraparound in movepagetables On 32-bit platforms, it is possible for the expression len + oldaddr include include include define ADDR1 void0x60000000 define ADDR2 void0x10000000 define SIZE 0x50000000uL int...

CVE-2024-53109

In the Linux kernel, the following vulnerability has been resolved: nommu: pass NULL argument to vmaiterprealloc When deleting a vma entry from a maple tree, it has to pass NULL to vmaiterprealloc in order to calculate internal state of the tree, but it passed a wrong argument. As a result, nommu...

CVE-2024-53117

In the Linux kernel, the following vulnerability has been resolved: virtio/vsock: Improve MSGZEROCOPY error handling Add a missing kfreeskb to prevent memory leaks...

CVE-2024-53115

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid nullptrderef in vmwframebuffersurfacecreatehandle The 'vmwuserobjectbuffer' function may return NULL with incorrect inputs. To avoid possible null pointer dereference, add a check whether the 'bo' is NULL in the...

CVE-2024-53107

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: prevent integer overflow in pagemapscangetargs The "arg-veclen" variable is a u64 that comes from the user at the start of the function. The "arg-veclen sizeofstruct pageregion" multiplication can lead to integer...

CVE-2024-53108

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adjust VSDB parser for replay feature At some point, the IEEE ID identification for the replay check in the AMD EDID was added. However, this check causes the following out-of-bounds issues when using KASAN:...

CVE-2024-53119

In the Linux kernel, the following vulnerability has been resolved: virtio/vsock: Fix acceptqueue memory leak As the final stages of socket destruction may be delayed, it is possible that virtiotransportrecvlisten will be called after the acceptqueue has been flushed, but before the SOCKDONE flag...

CVE-2024-53112

In the Linux kernel, the following vulnerability has been resolved: ocfs2: uncache inode which has failed entering the group Syzbot has reported the following BUG: kernel BUG at fs/ocfs2/uptodate.c:509! ... Call Trace: ? diebody+0x5f/0xb0 ? die+0x9e/0xc0 ? dotrap+0x15a/0x3a0 ?...

CVE-2024-52457

creationtimestamp| type| source ---|---|--- 2024-12-02 14:06:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113583611952419394...

CVE-2024-43050

creationtimestamp| type| source ---|---|--- 2024-12-02 10:53:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113582852839001009 2024-12-02 12:53:47+00:00| seen| https://t.me/cvedetector/11754...

CVE-2024-33039

creationtimestamp| type| source ---|---|--- 2024-12-02 10:23:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113582734671758966 2024-12-02 12:54:01+00:00| seen| https://t.me/cvedetector/11764...

CVE-2024-51769

creationtimestamp| type| source ---|---|--- 2024-12-02 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1633/ 2025-09-09 20:51:37+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

CVE-2024-20135

creationtimestamp| type| source ---|---|--- 2024-12-02 03:58:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113581223934093962 2024-12-02 06:12:31+00:00| seen| https://t.me/cvedetector/11744...

CVE-2024-20131

creationtimestamp| type| source ---|---|--- 2024-12-02 03:43:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113581164892359056 2024-12-02 06:12:28+00:00| seen| https://t.me/cvedetector/11740...

CVE-2024-52596

SimpleSAMLphp xml-common is a common classes for handling XML-structures. When loading an untrusted XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is fixed in 1.19.0...

Android Security Bulletin December 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2024-12-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Wear OS Security Bulletin—December 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2024-12-05 or later from the December 2024 Android Security Bulletin in addition to all issues in this bulletin. We encourage al...

CVE-2024-53750

creationtimestamp| type| source ---|---|--- 2024-12-01 21:25:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113579675258494279 2024-12-02 00:21:10+00:00| seen| https://t.me/cvedetector/11723...

CVE-2024-22734

creationtimestamp| type| source ---|---|--- 2024-12-01 17:00:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9284 2024-12-02 01:01:21+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/113580525520491734 2024-12-02 02:01:26+00:00| published-proof-of-concept|...