CVE-2024-26769

CVE-2024-26769 affects the Linux kernel vulnerability in the nvmet-fc path. The issue occurs when deleting an association, where the shutdown path can deadlock by flushing the nested nvmet_wq, leading to a denial of service risk. The fix defers the problematic work by moving the put operation int...

CVE-2024-26766

CVE-2024-26766 is a Linux kernel vulnerability in the IB/hfi1 SDMA path. The issue was an off-by-one error in sdma.h tx->num_descs that, after a prior fix, could cause the descs array to overflow for certain 6-descriptor SDMA sends requiring padding in the 7th descriptor. This overflow could c...

CVE-2024-26760

Summary: CVE-2024-26760 affects the Linux kernel, specifically the SCSI PSCI path (scsi: target: pscsi). The issue stems from memory handling in bio_kmalloc: after a non-success path, bio_uninit() and kfree() are not reliably invoked, which can lead to a WARN and a NULL pointer dereference in bio...

CVE-2024-26758

CVE-2024-26758 relates to the Linux kernel’s md subsystem: md_check_recovery() previously could fail to clear MD_RECOVERY_RUNNING when suspended, allowing a hanging sync_thread during suspend/resume of md devices. The fix ignores the suspended array in md_check_recovery(), addressing a hang where...

CVE-2024-26757

CVE-2024-26757 is a Linux kernel vulnerability affecting the md/mdadm dm-raid path. The root cause: read-only array handling allowed a race between read/write state transitions and sync-thread registration, leading to a potential hang in the recovery/sync flow when the array is toggled between re...

CVE-2024-26754

CVE-2024-26754 : In the Linux kernel, a use-after-free and null pointer dereference in gtp_genl_dump_pdp() was fixed. The root cause is that the gtp_net_ops pernet operations structure for the gtp subsystem must be registered before the generic netlink family is registered. Affected code path inv...

CVE-2024-26739

CVE-2024-26739 affects the Linux kernel net/sched component (act_mirred) where overriding the skb return value after routing could lead to Use-After-Free if tcf_mirred_forward() had been called. The fix moves the retval override to the error path that actually requires it, preventing UaF when the...

CVE-2024-26734

CVE-2024-26734 affects the Linux kernel devlink subsystem. The issue arises from use-after-free and memory leaks in devlink_init() due to the ordering of registration: the pernet operations structure must be registered before the generic netlink family, and a proper unregister path is needed if r...

CVE-2024-26735

CVE-2024-26735 concerns the Linux kernel IPv6 SR subsystem. The issue is a use-after-free and a null pointer dereference in the ipv6/sr path, caused by registering the pernet operations structure for the subsystem after the generic netlink family, i.e., the pernet ops are not registered in the co...

CVE-2024-26731

CVE-2024-26731 affects the Linux kernel’s BPF sockmap path. The issue is a NULL pointer dereference in sk_psock_verdict_data_ready() that can occur when sk_psock_verdict_data_ready() and sk_psock_stop_verdict() run concurrently, leaving psock->saved_data_ready NULL. The fix calls the appropria...

CVE-2024-26729

In CVE-2024-26729, the Linux kernel’s DRM AMD display code (dc_dmub_srv) had potential null pointer dereferences in dc_dmub_srv_cmd_list_queue_execute() and dc_dmub_srv_is_hw_pwr_up(). The root cause was dereferencing the dc_dmub_srv pointer before a null check, which could crash or corrupt memor...

CVE-2023-52641

CVE-2023-52641 : Linux kernel vulnerability in the ntfs3 file system driver. A NULL pointer dereference could occur at the end of attr_allocate_frame(); a patch adds NULL pointer checks and directs exit via the out: label to avoid dereference of debugging helpers. The issue is resolved by this fi...

CVE-2023-52640

CVE-2023-52640 (Linux kernel ntfs3): The issue is a local, out-of-bounds in ntfs_listxattr where the length of the name must not exceed the allocated EA space. Affected code path is in the ntfs3 filesystem. The connected Astra Linux advisory confirms the same vulnerability and indicates a resolve...

CVE-2024-1180

CVE-2024-1180 refers to a command-injection vulnerability in TP-Link Omada ER605 where the root cause is improper validation of a user-supplied string in the name field of the access control UI. This flaw can allow network-adjacent attackers to execute arbitrary code with root privileges, and exp...

CVE-2024-20362

CVE-2024-20362 affects Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers. The web-based management interface has insufficient input validation, enabling an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack by enticing a user to visit maliciou...

CVE-2024-20283

Cisco Nexus Dashboard contains an information-disclosure vulnerability (CVE-2024-20283) due to improper access controls on a specific API endpoint. An authenticated remote attacker could query the API to access metrics and deployment information for devices within the Nexus Dashboard cluster. The...

CVE-2024-30366

Foxit PDF Reader/Editor is affected by an AcroForm Use-After-Free remote code execution (CVE-2024-30366). The flaw arises from not validating object existence before operating on it, enabling code execution in the current process when a user opens a malicious file/page. Exploitation requires user...

CVE-2024-30333

CVE-2024-30333 is a Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution vulnerability. The flaw arises from not validating the existence of a Doc object before performing operations, enabling an attacker to execute code in the process context. Exploitation requires user interaction (...

CVE-2024-30332

Foxit PDF Reader is affected by a Doc Object Use-After-Free Remote Code Execution vulnerability (CVE-2024-30332). The flaw stems from not validating the existence of a Doc object before performing operations, enabling code execution in the context of the current process. The issue requires user i...

CVE-2024-20368

CVE-2024-20368 affects Cisco Identity Services Engine (ISE) web-based management interface. The issue is insufficient CSRF protections, enabling an unauthenticated, remote attacker to induce a user to click a crafted link and perform arbitrary actions on the device with the targeted user’s privil...