CVE-2024-36932

CVE-2024-36932 pertains to the Linux kernel, where a use-after-free can occur in thermal_debugfs after cdev removal. The root cause is that thermal_debug_cdev_remove() runs without holding cdev->lock, potentially freeing the thermal_debugfs object while thermal_debug_cdev_state_update() may st...

CVE-2024-36931

The CVE-2024-36931 issue affects the Linux kernel on s390 architecture, specifically in s390/cio where a copied user buffer (lbuf-sized) is not guaranteed to be NUL-terminated before a scanf, enabling an out-of-bounds read. The root cause is missing termination inside the copied buffer, which is ...

CVE-2024-36924

CVE-2024-36924 – Linux kernel (scsi: lpfc) has a deadlock risk when lpfc_worker_wake_up() is invoked while the hbalock is held. The fix is to release hbalock before calling lpfc_worker_wake_up(), preventing deadlocks in the lpfc SCSI loop. Public advisories from Unity Linux (UTSA-2026-005051) and...

CVE-2024-36923

CVE-2024-36923 is documented in a connected Nessus entry as a Linux kernel vulnerability affecting fs/9p inode eviction. Root cause: when iget fails to retrieve server information, the inode may be partially initialized; during eviction, references to uninitialized structures (e.g., fscache cooki...

CVE-2024-36922

CVE-2024-36922 is grounded in the Linux kernel wifi stack: the iwlwifi driver could read txq->read_ptr without holding the lock, risking reading the same value twice and later reclaiming the same entry twice, triggering a WARN_ONCE. The vulnerability is resolved by reading txq->read_ptr und...

CVE-2024-36918

The CVE-2024-36918 issue affects the Linux kernel’s BPF bloom filter map: a missing check allowed value sizes that overflow int, risking kernel crashes. A patch rejects values above KMALLOC_MAX_SIZE during bloom filter creation; this aligns bloom map protection with other map types. The vulnerabi...

CVE-2024-36917

CVE-2024-36917 : In the Linux kernel, a vulnerability in blk_ioctl_discard() allowed an overflow of start+len, potentially causing a hung task when a discard ioctl with start=0x80000000000ff000 and len=0x8000000000fff000 was submitted. A patch was added to validate the overflow, preventing the NU...

CVE-2024-36911

CVE-2024-36911 affects the Linux kernel hv_netvsc driver used in CoCo VMs. The vulnerability stems from the netvsc path freeing decrypted memory when set_memory_decrypted() fails, potentially causing decrypted/shared pages to be returned to the page allocator. The underlying issue is that the cal...

CVE-2024-36907

CVE-2024-36907 is rejected/not used; this CVE entry does not represent an active vulnerability.

CVE-2024-36905

Mode C: The connected Broadcom advisory lists CVE-2024-36905 as not affected for Brocade Fabric OS before 10.0.0, with inline mitigations already in place. No other connected document provides concrete product/version details for this CVE beyond that note. Therefore, no active vulnerability detai...

CVE-2024-36906

CVE-2024-36906: In the Linux kernel for ARM64, KASAN stack-poison was not cleared on exit via cpuidle, causing out-of-bounds reports when returning to the idle path. Root cause: instrumented functions leave stack shadow poisoned as CPUs unwind through idle, and prior context restoration can forge...

CVE-2024-36904

The provided connected advisories confirm CVE-2024-36904 affects the Linux kernel TCP TIME-WAIT handling. Specifically, a race window during connect() could allow refcount mismanagement in tcp_twsk_unique() if a TIME-WAIT sk is reused with zero refcnt, potentially leading to a use-after-free. The...

CVE-2024-36902

CVE-2024-36902 is a Linux kernel vulnerability: fib6_rules may dereference a NULL from ip6_dst_idev() in fib6_rule_action(), potentially enabling a crash (general protection fault). A fix has been applied in the Linux kernel; remediation is to update to a version containing the patch. Other conne...

CVE-2024-36903

CVE-2024-36903 is a Linux kernel vulnerability related to potential uninitialized value access in IPv6 processing. The cited fix targets __ip6_make_skb() in the IPv6 path by mirroring the IPv4 correction: it now validates FLOWI_FLAG_KNOWN_NH on fl6->flowi6_flags instead of testing HDRINCL on t...

CVE-2024-36901

CVE-2024-36901 affects the Linux kernel IPv6 stack. The issue is a NULL dereference in ip6_output() when ip6_dst_idev() returns NULL, causing a general protection fault. The syzbot report indicates a crash path in ip6_output+0x231/0x3f0, traceable to net/ipv6/ip6_output.c:237, with a NULL idev de...

CVE-2024-36900

CVE-2024-36900 affects the Linux kernel’s net/hns3 driver. The vulnerability arises when a devlink reload occurs during hardware initialization: the reload can access hardware resources before initialization, potentially causing a kernel crash. The fix is to register devlink after hardware initia...

CVE-2024-36899

CVE-2024-36899 affects the Linux kernel gpiolib, specifically the cdev path usedwhen closing a GPIO chip device file. The issue is a use-after-free involving watched_lines: during gpio_chrdev_release(), watched_lines is freed with bitmap_free(), but lineinfo_changed_nb notifier chain unregistrati...

CVE-2024-36898

CVE-2024-36898 affects Linux kernel gpiolib: cdev. The issue is an uninitialised kfifo when software debounce is active and edge-detection is re-enabled, causing events to be written/read from an uninitialised queue. The published fix initializes the kfifo in the debounce-active path. Connected a...

CVE-2024-36897

CVE-2024-36897 — Linux kernel (drm/amd/display, DCN35) Root cause: a new UMA carveout BIOS (version 2.3) wasn’t handled by the DAL BIOS parsing, causing a NULL dereference when code attempted to access Ctx->dc_bios->integrated_info if that pointer was NULL. Affected component: drm/amd/displ...

CVE-2024-36895

The CVE-2024-36895 issue in the Linux kernel affects usb gadget uvc configfs parsing. A heap-allocated temp buffer used by __uvcg_iter_item_entries() was not constrained by a computed max size (previously size-checked via sizeof()), causing overly small max item sizes on some architectures (7 byt...