CVE-2024-36029

CVE-2024-36029 affects the Linux kernel’s MMC subsystem, specifically the mmc: sdhci-msm driver. The vulnerability arises because the sdhci-msm driver does not set the host->runtime_suspended flag, which protects access to the LED device registered by the generic sdhci code. As a result, acces...

CVE-2024-36030

CVE-2024-36030 refers to a Linux kernel vulnerability in the octeontx2-af driver where a double free could occur in rvu_npc_freemem() due to an extra free of memory previously released (npc_mcam_rsrcs_deinit() freed mcam->counters.bmap). The fix, as noted in the connected documents, was to del...

CVE-2024-36028

CVE-2024-36028: Linux kernel mm/hugetlb vulnerability fixed. The issue caused DEBUG_LOCKS_WARN_ON(1) during dissolve_free_hugetlb_folio(), leading to a kernel warning and panic. Connected sources attribute the root cause to a field packing problem where folio.deferred is unioned with folio._huget...

CVE-2024-3300

CVE-2024-3300 describes an unsafe ".NET" object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 that enables pre‑authentication remote code execution. The issue stems from deserializing untrusted .NET objects, allowing an attacker to execute arbitrary code before ...

CVE-2024-36021

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when devlink reload during pf initialization The devlink reload process will access the hardware resources, but the register operation is done before the hardware is initialized. So, processing the...

CVE-2024-36027

CVE-2024-36027 affects the Linux kernel’s BTRFS zoned write path. The issue arises when btrfs_clear_buffer_dirty() marks an extent buffer as EXTENT_BUFFER_ZONED_ZEROOUT and a write IO is in progress (WRITEBACK, not DIRTY); a ZEROOUT flag could be added just before bio submission, potentially clea...

CVE-2024-36026

CVE-2024-36026 affects the Linux kernel DRM/AMD PM path (drm/amd/pm). The issue causes random hangs during S4 stress tests when using SMU v13.0.4/11, as GC/RLC/PMFW can enter an invalid state and trigger hard hangs. A workaround implemented in the patch adds a GFX reset just before sending the MP...

CVE-2024-36025

CVE-2024-36025 is validated by connected MiracleLinux security advisory AXSA:2024-8783:27. Affected: Linux kernel scsi qla2xxx driver. Root cause: memory corruption from an off-by-one in qla_edif_app_getstats() where app_reply->elem[] (allocated for app_req.num_ports) could be overrun due to a...

CVE-2024-36024

Summary: CVE-2024-36024 affects the drm/amd/display path in the Linux kernel. It describes a race condition during the DMCUB handshake that can cause a hardware hang by touching INBOX1 RPTR. The documented mitigation is to disable idle reallow as part of command/gpint execution to create a necess...

CVE-2024-36023

CVE-2024-36023 is a Linux kernel vulnerability involving a null pointer dereference. The alteration was reported by Julia Lawall and has been resolved in the kernel code base, as reflected by the linked advisories and the CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with a base score of 5.5 ...

CVE-2024-36022

CVE-2024-36022 is rejected/not used and does not represent an active vulnerability entry.

CVE-2024-35504

CVE-2024-35504 affects FineSoft v8.0, with a cross-site scripting (XSS) vulnerability in the login page that allows an attacker to execute arbitrary scripts via a crafted payload in the URL’s errorname parameter after a failed login. The Red Hat / NVD / CVE enrichment entries confirm the issue as...

CVE-2024-36021

CVE-2024-36021 affects the Linux kernel net driver for hns3, causing a kernel crash when a devlink reload occurs during PF initialization. The root cause is devlink reload accessing hardware resources before the hardware is initialized. A patch fixes this by taking devl_lock during initialization...

CVE-2024-36020

CVE-2024-36020 centers on the Linux kernel i40e driver: a regression caused a may-be-uninitialized VF pointer, leading to stale VF references and potential instability. The fix removes a redundant variable and uses a single VF pointer across the affected function to guarantee pointer validity. Th...

CVE-2024-3924

The CVE-2024-3924 issue affects hugggingface/text-generation-inference across versions up to 2.0.0 and was fixed in 2.0.0. It stems from insecure handling of github.head_ref in the autodocs.yml workflow, where user input is used to dynamically build a command to install software. An attacker coul...

CVE-2024-36019

CVE-2024-36019 has concrete Linux kernel details in the connected document set: the issue is in the Linux kernel regmap maple driver, where cache corruption occurred due to indexing regcache_maple_entry[] by the register address instead of the required offset when preserving the upper end of a ca...

CVE-2024-36018

CVE-2024-36018 : In the Linux kernel, the remap operation for nouveau/uvmm had incorrect addr/range calculations, causing an unmap from 0x3fffed0000+0xf0000 and a 0x100000 range to corrupt pagetables and oops the kernel. The fix changes the calculations to use explicit start/end and then maps bac...

CVE-2024-5517

CVE-2024-5517 affects itsourcecode Online Blood Bank Management System 1.0. The vulnerability is an SQL injection in the changepwd.php functionality triggered by the useremail parameter, reported to be exploitable remotely. Multiple connected sources corroborate: the issue is tied to changepwd.ph...

CVE-2024-1100

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Vadi Corporate Information Systems DIGIKENT GIS allows SQL Injection. This issue affects DIGIKENT GIS: through 2.23.5...

CVE-2024-1100

The CVE-2024-1100 entry concerns a SQL injection vulnerability in Vadi Corporate Information Systems DIGIKENT GIS, affecting DIGIKENT GIS versions up to 2.23.5. The issue arises from improper neutralization of special elements in SQL commands (SQL Injection). Documented impact is severe, with hig...