CVE-2024-35830

The CVE-2024-35830 issue concerns the Linux kernel media driver tc358743. Concrete details from connected advisories show the vulnerability arises when the v4l2 async device is registered before the device is fully set up. The fix is to register the v4l2 async device only after successful setup, ...

CVE-2024-35827

CVE-2024-35827 – Linux kernel io_uring/net overflow fix : The vulnerability arises in io_recvmsg_mshot_prep() where a size_t controllen (unsigned long) is cast to int for overflow checking, allowing an overflow misinterpretation if the value becomes negative. The check_add_overflow() logic depend...

CVE-2023-52662

The CVE-2023-52662 issue affects the Linux kernel DRM vmwgfx path: a memleak in vmw_gmrid_man_get_node when ida_alloc_max fails, where resources allocated prior (including kmalloc‑allocated memory and ttm_resource_init structures) were not freed. The connected Astra/Tenable entries corroborate th...

CVE-2023-52661

The CVE-2023-52661 vulnerability concerns the Linux kernel DRM/TeGra module: rgb code path in tegra_dc_rgb_probe() lacked a clk_put() in error handling when clk_get_sys(..., pll_d2_out0) failed. The advisory items describe adding the missing clk_put and introducing a put_pll_d_out0 label to unwin...

CVE-2024-5048

The CVE-2024-5048 entry concerns code-projects Budget Management 1.0. The vulnerability is triggered via the /index.php file, where manipulating the edit parameter enables SQL injection. Attackers can exploit remotely, and public disclosures exist (exploit disclosed). The issue is supported by mu...

CVE-2024-5047

CVE-2024-5047 affects SourceCodester Student Management System 1.0. The vulnerability is in an unknown function of the file /student/controller.php, where manipulating the photo argument leads to unrestricted upload . Impact is described as remote exploitability with potential impact on confident...

CVE-2024-35826

CVE-2024-35826 — Linux kernel: fix page refcounts for unaligned buffers in __bio_release_pages(). This patch corrects the number of pages released for buffers that do not start at the beginning of a page, addressing a vulnerability in block I/O handling. Impact, as described in the FP: local acce...

CVE-2024-35824

No public technical details are provided in the connected documents for CVE-2024-35824; monitor for updates.

CVE-2024-35821

The Linux kernel contains a vulnerability in the ubifs component where the "uptodate" flag of a page was set in the wrong location. Because page cache reads are lockless, setting this flag before the page was fully overwritten with new data allowed simultaneous readers to see old data . The fix i...

CVE-2024-35815

CVE-2024-35815: In the Linux kernel, a vulnerability in fs/aio arose because the first kiocb_set_cancel_fn() argument could point to a struct kiocb not embedded in struct aio_kiocb, causing req->ki_ctx to be read around the IOCB_AIO_RW test depending on compiler behavior. The fix guarantees th...

CVE-2024-35810

CVE-2024-35810 – Linux kernel (drm/vmwgfx): The issue was caused by cleanup potentially running while an atomic update is active, leading to memory used during the atomic update being invalidated. The vmw_plane_state objects previously tried to manage their own mapped memory lifetimes; the fix sw...

CVE-2024-35808

CVE-2024-35808 concerns the Linux kernel, specifically the md/dm-raid subsystem. The issue arises because md_reap_sync_thread() is invoked from raid_message() without holding reconfig_mutex, risking modification of fields protected by that mutex. The advisory notes that holding reconfig_mutex is ...

CVE-2024-35806

The CVE-2024-35806 entry concerns the Linux kernel vulnerability in soc: fsl: qbman where IRQs must be disabled when taking cgr_lock to avoid deadlocks. The description states that smp_call_function_single already disables IRQs in the affected code path and that qman_update_cgr and qman_delete_cg...

CVE-2024-35807

CVE-2024-35807 pertains to a Linux kernel ext4 online resize corruption when resizing a filesystem larger than 16 TiB with 4k blocks. The issue occurs during on-line resize across an 8 GiB boundary, affecting the backup block group descriptor for non-meta_bg layouts and can corrupt data. The root...

CVE-2024-35805

CVE-2024-35805 affects the Linux kernel in the dm snapshot code path. The issue was a lockup when exiting a snapshot with many exceptions, resolved by adding a cond_resched in the loop that frees the exceptions in dm_exception_table_exit. The root cause is a lockup during exit of large dm-snapsho...

CVE-2024-35800

CVE-2024-35800 affects the Linux kernel EFI/kdump path. The root cause is calling get_next_variable() without validating the pointer, which in kdump can be NULL and cause a panic during kexec-ed kernel boot. The fix introduces a validity check before calling get_next_variable(), and the issue was...

CVE-2024-35801

A vulnerability exists in the Linux kernel (x86/fpu) where the xfd_state variable can become desynchronized from MSR_IA32_XFD during a CPU hotplug event. While the MSR is reset, the per-CPU cached value is not, leading to potential failures in xfd_update_state() . This discrepancy can cause XRSTO...

CVE-2024-35799

CVE-2024-35799 relates to the Linux kernel, specifically the DRM/AMD display path. The issue occurs when disabling a stream encoder, where a function invoked during disable no longer exists. The fix adds a null-check for the function declaration in the disable-stream encoder path to prevent a cra...

CVE-2024-35796

The CVE-2024-35796 vulnerability concerns the Linux kernel net/ ll_temac code where platform_get_resource was replaced by devm_platform_ioremap_resource_byname and invoked with a 0-length name, leading to a path that ends up calling platform_get_resource_byname and dereferencing a NULL pointer in...

CVE-2024-35792

CVE-2024-35792 refers to a Linux kernel issue in the crypto/rk3288 path where a use-after-free could occur due to an incorrect call order. The description in the connected documents states: the unprepare call must be carried out before the finalize call, as the finalize can free the request. The ...