Security Warnings — Week: 2024-W50

fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()

2024-12-10 CVE-2024-56746

lowMicrosoft MSRC 2024-W50

ftrace: Fix regression with module command in stack_trace_filter

2024-12-10 CVE-2024-56569

mediumMicrosoft MSRC 2024-W50

GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.

2024-12-10 CVE-2024-56738

mediumMicrosoft MSRC 2024-W50

GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.

2024-12-10 CVE-2024-56737

mediumMicrosoft MSRC 2024-W50

GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD (Binary File Descriptor) library's handling of tekhex format files.

2024-12-10 CVE-2024-53589

mediumMicrosoft MSRC 2024-W50

gpio: grgpio: Add NULL check in grgpio_probe

2024-12-10 CVE-2024-56634

mediumMicrosoft MSRC 2024-W50

HarfBuzz heap-buffer-overflow on hb_cairo_glyphs_from_buffer

2024-12-10 CVE-2024-56732

highMicrosoft MSRC 2024-W50

hfsplus: don't query the device logical block size multiple times

2024-12-10 CVE-2024-56548

highMicrosoft MSRC 2024-W50

hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer

2024-12-10 CVE-2024-53103

highMicrosoft MSRC 2024-W50

In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entit

2024-12-10 CVE-2024-40896

criticalMicrosoft MSRC 2024-W50

initramfs: avoid filename buffer overrun

2024-12-10 CVE-2024-53142

mediumMicrosoft MSRC 2024-W50

Input Method Editor (IME) Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49079

highMicrosoft MSRC 2024-W50

io_uring: check if iowq is killed before queuing

2024-12-10 CVE-2024-56709

mediumMicrosoft MSRC 2024-W50

io_uring/tctx: work around xa_store() allocation error issue

2024-12-10 CVE-2024-56584

mediumMicrosoft MSRC 2024-W50

iommu/arm-smmu: Defer probe of clients after smmu device bound

2024-12-10 CVE-2024-56568

mediumMicrosoft MSRC 2024-W50

iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.

2024-12-10 CVE-2024-53580

highMicrosoft MSRC 2024-W50

iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible to overflow memory o

2024-12-10 CVE-2024-52949

highMicrosoft MSRC 2024-W50

jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree

2024-12-10 CVE-2024-56595

highMicrosoft MSRC 2024-W50

jfs: array-index-out-of-bounds fix in dtReadFirst

2024-12-10 CVE-2024-56598

highMicrosoft MSRC 2024-W50

jfs: fix array-index-out-of-bounds in jfs_readdir

2024-12-10 CVE-2024-56596

highMicrosoft MSRC 2024-W50

Jinja has a sandbox breakout through indirect reference to format method

2024-12-10 CVE-2024-56326

highMicrosoft MSRC 2024-W50

Jinja has a sandbox breakout through malicious filenames

2024-12-10 CVE-2024-56201

highMicrosoft MSRC 2024-W50

ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read

2024-12-10 CVE-2024-56627

highMicrosoft MSRC 2024-W50

ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write

2024-12-10 CVE-2024-56626

highMicrosoft MSRC 2024-W50

ksmbd: fix use-after-free in SMB request handling

2024-12-10 CVE-2024-53186

mediumMicrosoft MSRC 2024-W50

KVM: arm64: Don't retire aborted MMIO instruction

2024-12-10 CVE-2024-53196

mediumMicrosoft MSRC 2024-W50

KVM: arm64: Get rid of userspace_irqchip_in_use

2024-12-10 CVE-2024-53195

mediumMicrosoft MSRC 2024-W50

KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN

2024-12-10 CVE-2024-53135

mediumMicrosoft MSRC 2024-W50

leds: class: Protect brightness_show() with led_cdev->led_access mutex

2024-12-10 CVE-2024-56587

mediumMicrosoft MSRC 2024-W50

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

2024-12-10 CVE-2024-49124

highMicrosoft MSRC 2024-W50

Linux-Kernel (bluetooth): Schwachstelle ermöglicht Denial of Service und Code-Ausführung

2024-12-10 CVE-2023-51779

mediumRed Hat 2024-W50

Mariner

2024-12-10 CVE-2019-14584

highMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2021-24032

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2021-28361

highMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2021-3847

highMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2021-43565

highMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2022-1055

highMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2022-28737

highMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2022-3474

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2022-35205

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2022-3650

highMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2022-3854

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2022-41862

lowMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2022-47007

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2022-47008

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2022-47010

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2022-47011

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2022-48063

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2022-48554

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2023-1972

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2023-2455

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2023-32067

highMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2023-3724

highMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2023-38469

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2023-38470

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2023-38471

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2023-38472

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2023-38473

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2023-40546

mediumMicrosoft MSRC 2024-W50

Mariner

2024-12-10 CVE-2023-40548

highMicrosoft MSRC 2024-W50