CVE-2024-35834

CVE-2024-35834 concerns the Linux kernel’s XDP socket path (xsk) where, if the Rx queue is full, a buffer could be recycled incorrectly due to a missing xsk_buff_free() call when __xsk_rcv_zc() fails to enqueue a descriptor to the XSK Rx queue. The description in the connected Astra SUSE page mir...

CVE-2023-52673

CVE-2023-52673 — Linux kernel (drm/amd/display): A debugfs-related NULL pointer error was fixed in the AMD display code. The root cause was calling the get_subvp_en() callback without verifying its existence. The fix adds a check for the callback before invocation, preventing potential NULL deref...

CVE-2023-52667

CVE-2023-52667 affects the Linux kernel net/mlx5e code path. The vulnerability is a potential double-free in fs_any_create_groups when kcalloc() succeeds but kvzalloc() fails, because ft->g could be freed twice up the call chain. The fix implemented is to set ft->g to NULL in fs_any_create_...

CVE-2024-5050

CVE-2024-5050 affects Wangshen SecGate 3600 (up to 20240516). The vulnerability is associated with the request parameter (reqfile) in the endpoint "/?g=log_import_save" which allows manipulation leading to unrestricted file upload. This could enable a remote attacker to upload arbitrary files, as...

CVE-2024-5049

CVE-2024-5049 affects Codezips E-Commerce Site 1.0. The vulnerability is in admin/editproduct.php where manipulating the profilepic parameter leads to unrestricted file upload, enabling remote abuse. The issue is tied to unknown functionality in the editproduct.php handling of profilepic, enablin...

CVE-2024-34982

CVE-2024-34982 concerns LyLme Spage v1.9.5, where the vulnerable component is the file uploader at /include/file.php. The connected documents confirm an arbitrary file upload flaw that enables an attacker to execute arbitrary code on the server, indicating potential remote code execution. The pri...

CVE-2024-35830

CVE-2024-35830 affects the Linux kernel media tc358743 path: v4l2 async device was registered before the device was fully set up. This could let local userspace access the device before proper initialization. The issue is resolved by registering the v4l2 async device only after successful setup. ...

CVE-2024-35827

CVE-2024-35827 stems from a Linux kernel issue in io_uring/net where an overflow check in io_recvmsg_mshot_prep() mis-handles a size_t controllen cast to int, enabling an overflow/underflow mismatch. The root cause is described as casting controllen (size_t) to int fixes the overflow check in che...

CVE-2023-52662

CVE-2023-52662 is a Linux kernel issue. The vulnerability is a memleak in drm/vmwgfx: vmw_gmrid_man_get_node. If ida_alloc_max fails, resources allocated before may not be freed, including memory allocated by kmalloc and ttm_resource_init. The connected Azure Linux Nessus entries reference the sa...

CVE-2023-52661

The CVE-2023-52661 vulnerability concerns the Linux kernel DRM/TeGra module: rgb code path in tegra_dc_rgb_probe() lacked a clk_put() in error handling when clk_get_sys(..., pll_d2_out0) failed. The advisory items describe adding the missing clk_put and introducing a put_pll_d_out0 label to unwin...

CVE-2024-5048

The CVE-2024-5048 entry concerns code-projects Budget Management 1.0. The vulnerability is triggered via the /index.php file, where manipulating the edit parameter enables SQL injection. Attackers can exploit remotely, and public disclosures exist (exploit disclosed). The issue is supported by mu...

CVE-2024-5047

CVE-2024-5047 affects SourceCodester Student Management System 1.0. The vulnerability is in an unknown function of the file /student/controller.php, where manipulating the photo argument leads to unrestricted upload . Impact is described as remote exploitability with potential impact on confident...

CVE-2024-35826

CVE-2024-35826 — Linux kernel: fix page refcounts for unaligned buffers in __bio_release_pages(). This patch corrects the number of pages released for buffers that do not start at the beginning of a page, addressing a vulnerability in block I/O handling. Impact, as described in the FP: local acce...

CVE-2024-35824

No public technical details are provided in the connected documents for CVE-2024-35824; monitor for updates.

CVE-2024-35821

CVE-2024-35821 relates to the Linux kernel ubifs filesystem. The issue arose because page cache reads are lockless, and the page uptodate flag could be set before the page contained the new data, exposing old data to concurrent readers. The fix moves the SetPageUptodate call into ubifs_write_end(...

CVE-2024-35815

CVE-2024-35815: In the Linux kernel, a vulnerability in fs/aio arose because the first kiocb_set_cancel_fn() argument could point to a struct kiocb not embedded in struct aio_kiocb, causing req->ki_ctx to be read around the IOCB_AIO_RW test depending on compiler behavior. The fix guarantees th...

CVE-2024-35810

CVE-2024-35810 : In the Linux kernel, a fix addresses a vulnerability in drm/vmwgfx where the lifetime of bo cursor memory could be mishandled during cleanup while an atomic update is active. The kernel previously allowed cleanup to invalidate memory acquired during the atomic update, potentially...

CVE-2024-35808

In CVE-2024-35808, the Linux kernel md/dm-raid subsystem is vulnerable because md_reap_sync_thread() is invoked from raid_message() without holding reconfig_mutex, risking mutation of fields protected by that mutex and potential deadlocks. The documented fix is to unregister the sync_thread via s...

CVE-2024-35806

The CVE-2024-35806 entry concerns the Linux kernel vulnerability in soc: fsl: qbman where IRQs must be disabled when taking cgr_lock to avoid deadlocks. The description states that smp_call_function_single already disables IRQs in the affected code path and that qman_update_cgr and qman_delete_cg...

CVE-2024-35807

CVE-2024-35807 pertains to a Linux kernel ext4 online resize corruption when resizing a filesystem larger than 16 TiB with 4k blocks. The issue occurs during on-line resize across an 8 GiB boundary, affecting the backup block group descriptor for non-meta_bg layouts and can corrupt data. The root...