Security Warnings — Week: 2024-W37

Ivanti Cloud Services Appliance OS Command Injection Vulnerability

2024-09-13 CVE-2024-8190

highIvanti CVE 2024-W37

Linux Kernel: Schwachstelle ermöglicht Denial of Service oder Offenlegung von Informationen

2024-09-11 CVE-2023-4881

mediumRed Hat 2024-W37

A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution or other undesirable effects. This issu

2024-09-10 CVE-2024-45773

highMicrosoft MSRC 2024-W37

Access of Uninitialized Pointer in Wireshark

2024-09-10 CVE-2024-8645

mediumMicrosoft MSRC 2024-W37

ALSA: line6: Fix racy access to midibuf

2024-09-10 CVE-2024-44954

mediumMicrosoft MSRC 2024-W37

apparmor: fix possible NULL pointer dereference

2024-09-10 CVE-2024-46721

mediumMicrosoft MSRC 2024-W37

ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object

2024-09-10 CVE-2024-46798

highMicrosoft MSRC 2024-W37

ASoC: meson: axg-card: fix 'use-after-free'

2024-09-10 CVE-2024-46849

highMicrosoft MSRC 2024-W37

atm: idt77252: prevent use after free in dequeue_rx()

2024-09-10 CVE-2024-44998

highMicrosoft MSRC 2024-W37

binder: fix UAF caused by offsets overwrite

2024-09-10 CVE-2024-46740

highMicrosoft MSRC 2024-W37

binfmt_flat: Fix corruption when not offsetting data start

2024-09-10 CVE-2024-44966

mediumMicrosoft MSRC 2024-W37

Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()

2024-09-10 CVE-2024-46749

mediumMicrosoft MSRC 2024-W37

Bluetooth: btnxpuart: Fix random crash seen while removing driver

2024-09-10 CVE-2024-46680

mediumMicrosoft MSRC 2024-W37

bnxt_en: Fix double DMA unmapping for XDP_REDIRECT

2024-09-10 CVE-2024-44984

mediumMicrosoft MSRC 2024-W37

body-parser vulnerable to denial of service when url encoding is enabled

2024-09-10 CVE-2024-45590

highMicrosoft MSRC 2024-W37

bonding: change ipsec_lock from spin lock to mutex

2024-09-10 CVE-2024-46678

mediumMicrosoft MSRC 2024-W37

bonding: fix null pointer deref in bond_ipsec_offload_ok

2024-09-10 CVE-2024-44990

mediumMicrosoft MSRC 2024-W37

bonding: fix xfrm real_dev null pointer dereference

2024-09-10 CVE-2024-44989

mediumMicrosoft MSRC 2024-W37

bpf: Fix a kernel verifier crash in stacksafe()

2024-09-10 CVE-2024-45020

mediumMicrosoft MSRC 2024-W37

bpf: Remove tst_run from lwt_seg6local_prog_ops.

2024-09-10 CVE-2024-46754

mediumMicrosoft MSRC 2024-W37

btrfs: clean up our handling of refs == 0 in snapshot delete

2024-09-10 CVE-2024-46840

mediumMicrosoft MSRC 2024-W37

btrfs: do not BUG_ON() when freeing tree block after error

2024-09-10 CVE-2024-44963

mediumMicrosoft MSRC 2024-W37

btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()

2024-09-10 CVE-2024-46751

mediumMicrosoft MSRC 2024-W37

btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()

2024-09-10 CVE-2024-46687

highMicrosoft MSRC 2024-W37

btrfs: fix qgroup reserve leaks in cow_file_range

2024-09-10 CVE-2024-46733

mediumMicrosoft MSRC 2024-W37

cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT

2024-09-10 CVE-2024-46748

mediumMicrosoft MSRC 2024-W37

can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open

2024-09-10 CVE-2024-46791

mediumMicrosoft MSRC 2024-W37

char: xillybus: Check USB endpoints when probing device

2024-09-10 CVE-2024-45011

mediumMicrosoft MSRC 2024-W37

ClamAV Memory Handling DoS

2024-09-10 CVE-2024-20505

highMicrosoft MSRC 2024-W37

ClamAV Privilege Handling Escalation Vulnerability

2024-09-10 CVE-2024-20506

mediumMicrosoft MSRC 2024-W37

driver: iio: add missing checks on iio_info's callback access

2024-09-10 CVE-2024-46715

mediumMicrosoft MSRC 2024-W37

drm/amd/display: Add array index check for hdcp ddc access

2024-09-10 CVE-2024-46804

highMicrosoft MSRC 2024-W37

drm/amd/display: Add otg_master NULL check within resource_log_pipe_topology_update

2024-09-10 CVE-2024-46727

mediumMicrosoft MSRC 2024-W37

drm/amd/display: added NULL check at start of dc_validate_stream

2024-09-10 CVE-2024-46802

mediumMicrosoft MSRC 2024-W37

drm/amd/display: Assign linear_pitch_alignment even for VM

2024-09-10 CVE-2024-46732

mediumMicrosoft MSRC 2024-W37

drm/amd/display: avoid using null object of framebuffer

2024-09-10 CVE-2024-46694

mediumMicrosoft MSRC 2024-W37

drm/amd/display: Check BIOS images before it is used

2024-09-10 CVE-2024-46809

mediumMicrosoft MSRC 2024-W37

drm/amd/display: Check denominator crb_pipes before used

2024-09-10 CVE-2024-46772

mediumMicrosoft MSRC 2024-W37

drm/amd/display: Check gpio_id before used as array index

2024-09-10 CVE-2024-46818

highMicrosoft MSRC 2024-W37

drm/amd/display: Check index for aux_rd_interval before using

2024-09-10 CVE-2024-46728

mediumMicrosoft MSRC 2024-W37

drm/amd/display: Ensure array index tg_inst won't be -1

2024-09-10 CVE-2024-46730

mediumMicrosoft MSRC 2024-W37

drm/amd/display: Ensure index calculation will not overflow

2024-09-10 CVE-2024-46726

mediumMicrosoft MSRC 2024-W37

drm/amd/display: Fix incorrect size calculation for loop

2024-09-10 CVE-2024-46729

highMicrosoft MSRC 2024-W37

drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box

2024-09-10 CVE-2024-46811

highMicrosoft MSRC 2024-W37

drm/amd/display: Skip wbscl_set_scaler_filter if filter is null

2024-09-10 CVE-2024-46714

mediumMicrosoft MSRC 2024-W37

drm/amd/pm: Fix negative array index read

2024-09-10 CVE-2024-46821

highMicrosoft MSRC 2024-W37

drm/amd/pm: fix the Out-of-bounds read warning

2024-09-10 CVE-2024-46731

highMicrosoft MSRC 2024-W37

drm/amdgpu: fix dereference after null check

2024-09-10 CVE-2024-46720

mediumMicrosoft MSRC 2024-W37

drm/amdgpu: fix mc_data out-of-bounds read warning

2024-09-10 CVE-2024-46722

highMicrosoft MSRC 2024-W37

drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number

2024-09-10 CVE-2024-46724

highMicrosoft MSRC 2024-W37

drm/amdgpu: Fix out-of-bounds write warning

2024-09-10 CVE-2024-46725

highMicrosoft MSRC 2024-W37

drm/amdgpu: Fix the warning division or modulo by zero

2024-09-10 CVE-2024-46806

mediumMicrosoft MSRC 2024-W37

drm/amdgpu: fix ucode out-of-bounds read warning

2024-09-10 CVE-2024-46723

highMicrosoft MSRC 2024-W37

drm/amdgpu: Validate TA binary size

2024-09-10 CVE-2024-44977

highMicrosoft MSRC 2024-W37

drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails

2024-09-10 CVE-2024-44982

mediumMicrosoft MSRC 2024-W37

drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()

2024-09-10 CVE-2024-45015

mediumMicrosoft MSRC 2024-W37

drm/vmwgfx: Fix prime with external buffers

2024-09-10 CVE-2024-46709

mediumMicrosoft MSRC 2024-W37

drm/vmwgfx: Prevent unmapping active read buffers

2024-09-10 CVE-2024-46710

mediumMicrosoft MSRC 2024-W37

ethtool: check device is present when getting link settings

2024-09-10 CVE-2024-46679

mediumMicrosoft MSRC 2024-W37

ethtool: fail closed if we can't get max channel used in indirection tables

2024-09-10 CVE-2024-46834

mediumMicrosoft MSRC 2024-W37