Security Warnings — Week: 2024-W41

drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error

2024-10-08 CVE-2024-47698

highMicrosoft MSRC 2024-W41

drm: omapdrm: Add missing check for alloc_ordered_workqueue

2024-10-08 CVE-2024-49879

mediumMicrosoft MSRC 2024-W41

drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw

2024-10-08 CVE-2024-49915

mediumMicrosoft MSRC 2024-W41

drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func

2024-10-08 CVE-2024-49909

mediumMicrosoft MSRC 2024-W41

drm/amd/display: Avoid overflow from uint32_t to uint8_t

2024-10-08 CVE-2024-47661

mediumMicrosoft MSRC 2024-W41

drm/amd/display: Check null pointer before dereferencing se

2024-10-08 CVE-2024-50049

mediumMicrosoft MSRC 2024-W41

drm/amd/display: Check null pointers before multiple uses

2024-10-08 CVE-2024-49920

mediumMicrosoft MSRC 2024-W41

drm/amd/display: Check null pointers before used

2024-10-08 CVE-2024-49921

mediumMicrosoft MSRC 2024-W41

drm/amd/display: Check stream_status before it is used

2024-10-08 CVE-2024-49893

mediumMicrosoft MSRC 2024-W41

drm/amd/display: Deallocate DML memory if allocation fails

2024-10-08 CVE-2024-49972

mediumMicrosoft MSRC 2024-W41

drm/amd/display: Disable DMCUB timeout for DCN35

2024-10-08 CVE-2024-46870

mediumMicrosoft MSRC 2024-W41

drm/amd/display: fix array index out of bound error in DCN32 DML

2024-10-08 CVE-2022-48979

mediumMicrosoft MSRC 2024-W41

drm/amd/display: fix double free issue during amdgpu module unload

2024-10-08 CVE-2024-49989

highMicrosoft MSRC 2024-W41

drm/amd/display: Fix index out of bounds in DCN30 color transformation

2024-10-08 CVE-2024-49969

highMicrosoft MSRC 2024-W41

drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation

2024-10-08 CVE-2024-49895

highMicrosoft MSRC 2024-W41

drm/amd/display: Increase array size of dummy_boolean

2024-10-08 CVE-2024-49971

mediumMicrosoft MSRC 2024-W41

drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection

2024-10-08 CVE-2024-47662

mediumMicrosoft MSRC 2024-W41

drm/amd/pm: ensure the fw_info is not null before using it

2024-10-08 CVE-2024-49890

mediumMicrosoft MSRC 2024-W41

drm/amdgpu: add list empty check to avoid null pointer issue

2024-10-08 CVE-2024-49904

mediumMicrosoft MSRC 2024-W41

drm/amdgpu: fix use-after-free during gpu recovery

2024-10-08 CVE-2022-48990

highMicrosoft MSRC 2024-W41

drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer

2024-10-08 CVE-2024-49991

highMicrosoft MSRC 2024-W41

drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs

2024-10-08 CVE-2024-49901

mediumMicrosoft MSRC 2024-W41

drm/stm: Avoid use-after-free issues with crtc and plane

2024-10-08 CVE-2024-49992

highMicrosoft MSRC 2024-W41

drm/v3d: Stop the active perfmon before being destroyed

2024-10-08 CVE-2024-50031

mediumMicrosoft MSRC 2024-W41

Erroneous parsing of multipart form data

2024-10-08 CVE-2024-8925

mediumMicrosoft MSRC 2024-W41

exec: don't WARN for racy path_noexec check

2024-10-08 CVE-2024-50010

mediumMicrosoft MSRC 2024-W41

execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

2024-10-08 CVE-2024-48957

highMicrosoft MSRC 2024-W41

execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

2024-10-08 CVE-2024-48958

highMicrosoft MSRC 2024-W41

ext4: aovid use-after-free in ext4_ext_insert_extent()

2024-10-08 CVE-2024-49883

highMicrosoft MSRC 2024-W41

ext4: dax: fix overflowing extents beyond inode size when partially writing

2024-10-08 CVE-2024-50015

mediumMicrosoft MSRC 2024-W41

ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free

2024-10-08 CVE-2024-49983

highMicrosoft MSRC 2024-W41

ext4: filesystems without casefold feature cannot be mounted with siphash

2024-10-08 CVE-2024-49968

mediumMicrosoft MSRC 2024-W41

ext4: fix double brelse() the buffer of the extents path

2024-10-08 CVE-2024-49882

highMicrosoft MSRC 2024-W41

ext4: fix slab-use-after-free in ext4_split_extent_at()

2024-10-08 CVE-2024-49884

highMicrosoft MSRC 2024-W41

ext4: fix timer use-after-free on failed mount

2024-10-08 CVE-2024-49960

highMicrosoft MSRC 2024-W41

f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()

2024-10-08 CVE-2024-47691

highMicrosoft MSRC 2024-W41

f2fs: fix to check atomic_file in f2fs ioctl interfaces

2024-10-08 CVE-2024-49859

mediumMicrosoft MSRC 2024-W41

f2fs: fix to wait dio completion

2024-10-08 CVE-2024-47726

mediumMicrosoft MSRC 2024-W41

fbdev: efifb: Register sysfs groups through driver core

2024-10-08 CVE-2024-49925

mediumMicrosoft MSRC 2024-W41

fbdev: pxafb: Fix possible use after free in pxafb_task()

2024-10-08 CVE-2024-49924

highMicrosoft MSRC 2024-W41

firmware_loader: Block path traversal

2024-10-08 CVE-2024-47742

highMicrosoft MSRC 2024-W41

fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name

2024-10-08 CVE-2024-49934

mediumMicrosoft MSRC 2024-W41

Golang-fips: golang fips zeroed buffer

2024-10-08 CVE-2024-9355

mediumMicrosoft MSRC 2024-W41

Hackerone: CVE-2024-6197 Freeing stack buffer in utf8asn1str

2024-10-08 CVE-2024-6197

highMicrosoft MSRC 2024-W41

i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition

2024-10-08 CVE-2024-50061

highMicrosoft MSRC 2024-W41

Imagine Cup site Information Disclosure Vulnerability

2024-10-08 CVE-2024-38204

highMicrosoft MSRC 2024-W41

Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability

2024-10-08 CVE-2024-43515

highMicrosoft MSRC 2024-W41

jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error

2024-10-08 CVE-2024-49959

mediumMicrosoft MSRC 2024-W41

jfs: Fix uaf in dbFreeBits

2024-10-08 CVE-2024-49903

highMicrosoft MSRC 2024-W41

KEYS: prevent NULL pointer dereference in find_asymmetric_key()

2024-10-08 CVE-2024-47743

mediumMicrosoft MSRC 2024-W41

KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock

2024-10-08 CVE-2024-47744

mediumMicrosoft MSRC 2024-W41

l2tp: prevent possible tunnel refcount underflow

2024-10-08 CVE-2024-49940

mediumMicrosoft MSRC 2024-W41

libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.

2024-10-08 CVE-2024-50613

mediumMicrosoft MSRC 2024-W41

libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.

2024-10-08 CVE-2024-50612

mediumMicrosoft MSRC 2024-W41

Low-level invalid GF(2^m) parameters lead to OOB memory access

2024-10-08 CVE-2024-9143

mediumMicrosoft MSRC 2024-W41

Lua library commands may lead to stack overflow and RCE in Redis

2024-10-08 CVE-2024-31449

highMicrosoft MSRC 2024-W41

mac802154: Fix potential RCU dereference issue in mac802154_scan_worker

2024-10-08 CVE-2024-50005

mediumMicrosoft MSRC 2024-W41

Mariner

2024-10-08 CVE-2016-2124

mediumMicrosoft MSRC 2024-W41

Mariner

2024-10-08 CVE-2017-12150

highMicrosoft MSRC 2024-W41

Mariner

2024-10-08 CVE-2017-15275

highMicrosoft MSRC 2024-W41