CVE-2024-35805

CVE-2024-35805 affects the Linux kernel in the dm snapshot code path. The issue was a lockup when exiting a snapshot with many exceptions, resolved by adding a cond_resched in the loop that frees the exceptions in dm_exception_table_exit. The root cause is a lockup during exit of large dm-snapsho...

CVE-2024-35800

CVE-2024-35800 affects the Linux kernel EFI/kdump path. The root cause is calling get_next_variable() without validating the pointer, which in kdump can be NULL and cause a panic during kexec-ed kernel boot. The fix introduces a validity check before calling get_next_variable(), and the issue was...

CVE-2024-35801

CVE-2024-35801 : Linux kernel x86/fpu vulnerability where per-CPU xfd_state could be out of sync with the MSR_IA32_XFD after CPU hotplug, causing XRSTOR to raise #NM and crash. The fix introduces xfd_set_state() to write xfd_state alongside MSR_IA32_XFD and updates all MSR_IA32_XFD writes to use ...

CVE-2024-35799

CVE-2024-35799 relates to the Linux kernel, specifically the DRM/AMD display path. The issue occurs when disabling a stream encoder, where a function invoked during disable no longer exists. The fix adds a null-check for the function declaration in the disable-stream encoder path to prevent a cra...

CVE-2024-35796

The CVE-2024-35796 vulnerability concerns the Linux kernel net/ ll_temac code where platform_get_resource was replaced by devm_platform_ioremap_resource_byname and invoked with a 0-length name, leading to a path that ends up calling platform_get_resource_byname and dereferencing a NULL pointer in...

CVE-2024-35792

CVE-2024-35792 refers to a Linux kernel issue in the crypto/rk3288 path where a use-after-free could occur due to an incorrect call order. The description in the connected documents states: the unprepare call must be carried out before the finalize call, as the finalize can free the request. The ...

CVE-2024-35786

The CVE-2024-35786 issue affects the Linux kernel’s DRM Nouveau driver, specifically a stale locked mutex in nouveau_gem_ioctl_pushbuf that can cause a deadlock if VM_BIND is enabled and a legacy submission ioctl is attempted. The vulnerability is resolved by a kernel fix; the provided connected ...

CVE-2024-35784

The CVE-2024-35784 entry concerns the Linux kernel: btrfs deadlock during fiemap/extent locking. Root cause: the extent lock was held for the entire fiemap traversal, risking pagefaults and deadlocks when fiemap data is copied to user space (mkwrite during mmap). Impact: potential deadlock in fil...

CVE-2024-27434

CVE-2024-27434 : In the Linux kernel, the wifi driver iwlwifi/mvm incorrectly set the MFP flag for GTK, which could crash the firmware when an AP uses TKIP with MFPC. The patch ensures GTK is not marked with MFP, mitigating the issue. CVSS v3.1 base score 5.5 (LOCAL, LOW attack complexity, LOW pr...

CVE-2024-27433

CVE-2024-27433 affects the Linux kernel clock driver: mediatek mt7622-apmixedsys. The root cause was an error path where clk_data, allocated via mtk_devm_alloc_clk_data(), could be double-freed if mtk_free_clk_data() remained in the remove path. The fix removes this redundant deallocation in the ...

CVE-2024-27432

CVE-2024-27432 affects the Linux kernel net: ethernet: mtk_eth_soc (MTK PPE) where PPE could hang when disabling during reboot due to PPE scan mode not being disabled first. A patch in MediaTek’s GPL SDK fixes this by disabling PPE scan mode before PPE shutdown. The advisory notes explicit root c...

CVE-2024-5055

Summary: CVE-2024-5055 affects XAMPP for Windows, with version 7.3.2 and earlier. The issue is an uncontrolled/resource consumption DoS caused when XAMPP processes many incomplete HTTP requests, leading to exhaustion of resources and potential crashes. Concrete details across connected sources co...

CVE-2024-27430

CVE-2024-27430 entry is rejected/not used as stated in the Initial Description.

CVE-2024-27429

CVE-2024-27429 entry is rejected and not used; not an active vulnerability.

CVE-2024-27427

CVE-2024-27427 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-27424

This CVE-2024-27424 entry is rejected/not used.

CVE-2024-27423

Affected component: Linux kernel netrom module. Issue: a race condition when reading the sysctl_netrom_transport_requested_window_size resource due to a missing lock, potentially impacting system stability and causing a denial of service. Public details on affected versions, exploitability, or pa...

CVE-2024-27422

This CVE ID is rejected/withdrawn by the CVE Numbering Authority and is not an active vulnerability entry.

CVE-2024-27420

CVE-2024-27420 entry is rejected/withdrawn by its CVE Numbering Authority and not active.

CVE-2024-27419

CVE-2024-27419 – Linux kernel data race in sysctl_net_busy_read The connected Astra Linux advisory and the initial description confirm a Linux kernel vulnerability: netrom: Fix data-races around sysctl_net_busy_read. The issue involved reading a sysctl value that could be modified concurrently, n...