CVE-2024-42136
- EPSS 0.01%
- Published 30.07.2024 08:15:05
- Last modified 03.11.2025 22:17:41
In the Linux kernel, the following vulnerability has been resolved: cdrom: rearrange last_media_change check to avoid unintentional overflow When running syzkaller with the newly reintroduced signed integer wrap sanitizer we encounter this splat: ...
CVE-2024-42137
- EPSS 0.01%
- Published 30.07.2024 08:15:05
- Last modified 03.11.2025 22:17:41
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot Commit 272970be3dab ("Bluetooth: hci_qca: Fix driver shutdown on closed serdev") will cause below regressi...
CVE-2024-42138
- EPSS 0.01%
- Published 30.07.2024 08:15:05
- Last modified 03.11.2025 22:17:41
In the Linux kernel, the following vulnerability has been resolved: mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file In case of invalid INI file mlxsw_linecard_types_init() deallocates memory but doesn't reset point...
CVE-2024-42139
- EPSS 0.01%
- Published 30.07.2024 08:15:05
- Last modified 11.12.2024 15:13:24
In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper extts handling Extts events are disabled and enabled by the application ts2phc. However, in case where the driver is removed when the application is running, a sp...
CVE-2024-42140
- EPSS 0.01%
- Published 30.07.2024 08:15:05
- Last modified 03.11.2025 22:17:42
In the Linux kernel, the following vulnerability has been resolved: riscv: kexec: Avoid deadlock in kexec crash path If the kexec crash code is called in the interrupt context, the machine_kexec_mask_interrupts() function will trigger a deadlock wh...
CVE-2024-42141
- EPSS 0.01%
- Published 30.07.2024 08:15:05
- Last modified 11.12.2024 15:17:03
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Check socket flag instead of hcon This fixes the following Smatch static checker warning: net/bluetooth/iso.c:1364 iso_sock_recvmsg() error: we previously assumed ...
CVE-2024-42142
- EPSS 0.01%
- Published 30.07.2024 08:15:05
- Last modified 03.11.2025 22:17:42
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-switch, Create ingress ACL when needed Currently, ingress acl is used for three features. It is created only when vport metadata match and prio tag are enabled. But act...
CVE-2024-42117
- EPSS 0.02%
- Published 30.07.2024 08:15:04
- Last modified 26.09.2025 15:29:52
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: ASSERT when failing to find index by plane/stream id [WHY] find_disp_cfg_idx_by_plane_id and find_disp_cfg_idx_by_stream_id returns an array index and they return ...
CVE-2024-42118
- EPSS 0.02%
- Published 30.07.2024 08:15:04
- Last modified 29.09.2025 14:57:08
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not return negative stream id for array [WHY] resource_stream_to_stream_idx returns an array index and it return -1 when not found; however, -1 is not a valid a...
CVE-2024-42119
- EPSS 0.01%
- Published 30.07.2024 08:15:04
- Last modified 03.11.2025 22:17:40
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip finding free audio for unknown engine_id [WHY] ENGINE_ID_UNKNOWN = -1 and can not be used as an array index. Plus, it also means it is uninitialized and does ...