CVE-2024-35853
- EPSS 0.19%
- Veröffentlicht 17.05.2024 15:15:22
- Zuletzt bearbeitet 07.04.2025 19:03:01
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash The rehash delayed work migrates filters from one region to another. This is done by iterating over all chunks (all the filt...
CVE-2024-35854
- EPSS 0.19%
- Veröffentlicht 17.05.2024 15:15:22
- Zuletzt bearbeitet 07.04.2025 19:00:03
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash The rehash delayed work migrates filters from one region to another according to the number of available credits...
CVE-2024-35855
- EPSS 0.02%
- Veröffentlicht 17.05.2024 15:15:22
- Zuletzt bearbeitet 30.12.2024 18:11:57
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update The rule activity update delayed work periodically traverses the list of configured rules and queries t...
CVE-2024-35839
- EPSS 0.02%
- Veröffentlicht 17.05.2024 15:15:21
- Zuletzt bearbeitet 24.09.2025 21:02:31
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: replace physindev with physinif in nf_bridge_info An skb can be added to a neigh->arp_queue while waiting for an arp reply. Where original skb's skb->dev can be ...
CVE-2024-35840
- EPSS 0.02%
- Veröffentlicht 17.05.2024 15:15:21
- Zuletzt bearbeitet 24.09.2025 21:00:50
In the Linux kernel, the following vulnerability has been resolved: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() subflow_finish_connect() uses four fields (backup, join_id, thmac, none) that may contain garbage unless OPTION_MPTCP...
CVE-2024-35843
- EPSS 0.02%
- Veröffentlicht 17.05.2024 15:15:21
- Zuletzt bearbeitet 07.04.2025 19:05:09
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Use device rbtree in iopf reporting path The existing I/O page fault handler currently locates the PCI device by calling pci_get_domain_bus_and_slot(). This function se...
CVE-2024-35844
- EPSS 0.02%
- Veröffentlicht 17.05.2024 15:15:21
- Zuletzt bearbeitet 26.09.2025 16:04:43
In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix reserve_cblocks counting error when out of space When a file only needs one direct_node, performing the following operations will cause the file to be unrepaira...
CVE-2024-35845
- EPSS 0.41%
- Veröffentlicht 17.05.2024 15:15:21
- Zuletzt bearbeitet 12.05.2026 12:16:37
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwl_fw_ini_debug_info_tlv is used as a string, so we must ensure the string is terminated correctly before using it.
CVE-2024-35847
- EPSS 0.02%
- Veröffentlicht 17.05.2024 15:15:21
- Zuletzt bearbeitet 30.12.2024 17:41:16
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in its_vpe_irq_domain_alloc() causes a double free when its_vpe_init() fails after successfully allocating ...
CVE-2024-35848
- EPSS 0.02%
- Veröffentlicht 17.05.2024 15:15:21
- Zuletzt bearbeitet 23.12.2025 19:33:51
In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory corruption race condition If the eeprom is not accessible, an nvmem device will be registered, the read will fail, and the device will be torn down. If ano...