CVE-2024-34953

The software taurusxin ncmdump v1.3.2 is vulnerable to a Denial of Service (DoS) attack caused by memory exhaustion . An attacker can trigger this condition by supplying a crafted .ncm file to the application. As a temporary workaround, users should avoid processing untrusted .ncm files and restr...

CVE-2024-4323

CVE-2024-4323 is a memory corruption vulnerability in Fluent Bit caused by inadequate bounds checking in the embedded HTTP server’s trace request handling. The issue allows heap buffer overflow from copying request data without proper validation, potentially leading to Denial of Service, informat...

CVE-2024-35989

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms During the removal of the idxd driver, registered offline callback is invoked as part of the clean up process. However, on systems with only one CPU online, no valid...

CVE-2024-35988

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix TASKSIZE on 64-bit NOMMU On NOMMU, userspace memory can come from anywhere in physical RAM. The current definition of TASKSIZE is wrong if any RAM exists above 4G, causing spurious failures in the userspace access...

CVE-2024-35998

CVE-2024-35998 – Linux kernel SMB3 deadlock fix Root cause: In cifs_sync_mid_result, incorrect lock ordering could cause a thread deadlock (ORDER_REVERSAL) where TCP_Server_Info.srv_lock is acquired while TCP_Server_Info.mid_lock is held. Impact: Deadlock potential in the SMB/CIFS path (smb3) wit...

CVE-2024-35996

Technical details for CVE-2024-35996 are not provided in the supplied documents. The description summarizes kernel-mitigation changes, but there are no explicit affected products, versions, impacts, or fixes. Monitor vendor advisories for updates.

CVE-2024-35985

CVE-2024-35985 concerns the Linux kernel vulnerability where the eevdf scheduler could yield an out-of-bounds vlag and a NULL-deref in certain edge cases. The connected Astra/Nessus documents reiterate that reweight_eevdf() could compute vlag beyond the intended bound, since the vlag is used with...

CVE-2024-35980

CVE-2024-35980 affects the Linux kernel (arm64/KVM) where TLBI RANGE operand sorting could produce an incorrect address range during live migration, causing destination VMs to crash as some dirty pages were not flushed. The issue arises from how kvm_tlb_flush_vmid_range() interacts with __kvm_tlb...

CVE-2024-35974

CVE-2024-35974 affects the Linux kernel block subsystem. The vulnerability arises from a q->blkg_list corruption introduced when multiple gendisk instances are allocated for a single request queue during disk rebind, allowing a blkg to linger in q->blkg_list during blkcg_init_disk() and thu...

CVE-2024-35970

In the Linux kernel, the following vulnerability has been resolved: afunix: Clear stale u-oobskb. syzkaller started to report deadlock of unixgclock after commit 4090fa373f0e "afunix: Replace garbage collection algorithm.", but it just uncovers the bug that has been there since commit 314001f0bf9...

CVE-2024-35968

In CVE-2024-35968, the Linux kernel pds_core/pdsc health path was fixed to avoid a deadlock when fw_status == 0xff. Previously, the driver attempted a PCI reset from within the health thread, while pdsc_reset_prepare tried to stop/flush that health thread. The fix queues a new pdsc_pci_reset_thre...

CVE-2024-35965

CVE-2024-35965 affects the Linux kernel Bluetooth stack (L2CAP) where setsockopt input length is not validated before copying data. The root cause is missing validation of user input length, enabling potential memory/contagion issues as described in vendor advisories that reference this CVE (e.g....

CVE-2024-35966

CVE-2024-35966 (Linux kernel) : A Bluetooth RFCOMM vulnerability where rfcomm_sock_setsockopt_old() could copy data beyond the input length, due to not validating user input in setsockopt. This caused KASAN slab-out-of-bounds access in copy_from_sockptr_offset and related code paths in net/blueto...

CVE-2024-35964

CVE-2024-35964 : Linux kernel Bluetooth ISO component fixed an issue where setsockopt user input was not properly validated. The description states to check input length before copying data, indicating a potential input-validation/overflow risk. Connected advisories reference the CVE and confirm ...

CVE-2024-35963

CVE-2024-35963: In the Linux kernel, the Bluetooth subsystem (hci_sock) was fixed for not validating user input passed to setsockopt. The fix validates input length before copying data, mitigating a potential improper input handling vector in Bluetooth setsockopt. The vulnerability is described i...

CVE-2024-35962

CVE-2024-35962 (Linux kernel): The issue is a netfilter input validation bug in the kernel’s user input handling. The vulnerability arises from do_replace() paths using copy_from_sockptr() followed by unsafe copy_from_sockptr_offset() calls, enabling insufficient validation of optlen against the ...

CVE-2024-35955

In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix possible use-after-free issue on kprobe registration When unloading a module, its state is changing MODULESTATELIVE - MODULESTATEGOING - MODULESTATEUNFORMED. Each change will take a time. ismoduletextaddress and...

CVE-2024-35953

The CVE-2024-35953 issue affects the Linux kernel’s accel/ivpu code: ivpu_device->context_xa could deadlock because the XA lock could be held in a thread and interrupted by IRQs that also lock it. The fix is to pass XA_FLAGS_LOCK_IRQ during initialization to prevent the second lock in IRQ cont...

CVE-2024-5137

CVE-2024-5137 affects PHPGurukul Directory Management System 1.0. The issue is in the /admin/admin-profile.php file of the Searchbar component, where input manipulation leads to cross-site scripting. The vulnerability can be exploited remotely, and the exploit has been disclosed publicly (VDB-265...

CVE-2024-5134

SourceCodester Electricity Consumption Monitoring Tool 1.0 has a SQL injection flaw in /endpoint/delete-bill.php caused by unsafely handling the bill parameter. The vulnerability can be exploited remotely and is considered high impact (as per CVSS notes: critical in NVD, with high confidentiality...