CVE-2024-38624
- EPSS 0.02%
- Published 21.06.2024 11:15:11
- Last modified 03.10.2025 16:08:44
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow For example, in the expression: vbo = 2 * vbo + skip
CVE-2024-38626
- EPSS 0.05%
- Published 21.06.2024 11:15:11
- Last modified 03.10.2025 14:49:28
In the Linux kernel, the following vulnerability has been resolved: fuse: clear FR_SENT when re-adding requests into pending list The following warning was reported by lee bruce: ------------[ cut here ]------------ WARNING: CPU: 0 PID: 8264 a...
CVE-2024-38628
- EPSS 0.02%
- Published 21.06.2024 11:15:11
- Last modified 24.03.2025 18:09:37
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. Hang on to the control IDs instead of pointers since those are correctly handled with lock...
CVE-2024-38629
- EPSS 0.02%
- Published 21.06.2024 11:15:11
- Last modified 03.10.2025 14:53:37
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Avoid unnecessary destruction of file_ida file_ida is allocated during cdev open and is freed accordingly during cdev release. This sequence is guaranteed by drive...
CVE-2024-36484
- EPSS 0.01%
- Published 21.06.2024 11:15:10
- Last modified 01.10.2025 13:59:32
In the Linux kernel, the following vulnerability has been resolved: net: relax socket state check at accept time. Christoph reported the following splat: WARNING: CPU: 1 PID: 772 at net/ipv4/af_inet.c:761 __inet_accept+0x1f4/0x4a0 Modules linked i...
CVE-2024-37356
- EPSS 0.02%
- Published 21.06.2024 11:15:10
- Last modified 17.09.2025 16:54:51
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). In dctcp_update_alpha(), we use a module parameter dctcp_shift_g as follows: alpha -= min_not_zero(alpha, alpha >> dctcp_sh...
CVE-2024-38388
- EPSS 0.02%
- Published 21.06.2024 11:15:10
- Last modified 01.04.2025 18:28:22
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup Use the control private_free callback to free the associated data block. This ensures that the memory won't leak, whateve...
CVE-2023-52884
- EPSS 0.01%
- Published 21.06.2024 11:15:09
- Last modified 24.03.2025 18:10:20
In the Linux kernel, the following vulnerability has been resolved: Input: cyapa - add missing input core locking to suspend/resume functions Grab input->mutex during suspend/resume functions like it is done in other input drivers. This fixes the f...
CVE-2024-31076
- EPSS 0.01%
- Published 21.06.2024 11:15:09
- Last modified 29.09.2025 18:25:35
In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQD_MOVE_PCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via pro...
CVE-2024-33621
- EPSS 0.01%
- Published 21.06.2024 11:15:09
- Last modified 01.10.2025 14:02:37
In the Linux kernel, the following vulnerability has been resolved: ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound Raw packet from PF_PACKET socket ontop of an IPv6-backed ipvlan device will hit WARN_ON_ONCE() in sk_mc_loop() through sc...