Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2024-10-21 CVE-2024-50060 Unspecified vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: io_uring: check if we need to reschedule during overflow flush In terms of normal application usage, this list will always be empty. And if an application does overflow a bit, it'll have a few entries. However, nothing obviously prevents syzbot from running a test case that generates a ton of overflow entries, and then flushing them can take quite a while. Check for needing to reschedule while flushing, and drop our locks and do so if necessary.
local
low complexity
linux
5.5
2024-10-21 CVE-2024-50061 Use After Free vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition In the cdns_i3c_master_probe function, &master->hj_work is bound with cdns_i3c_master_hj.
local
high complexity
linux CWE-416
7.0
2024-10-21 CVE-2024-50062 NULL Pointer Dereference vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Avoid null pointer deref during path establishment For RTRS path establishment, RTRS client initiates and completes con_num of connections.
local
low complexity
linux CWE-476
5.5
2024-10-21 CVE-2024-50063 Unspecified vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tail call between progs attached to different hooks bpf progs can be attached to kernel functions, and the attached functions can take different parameters or return different return values.
local
low complexity
linux
7.8
2024-10-21 CVE-2024-50064 Memory Leak vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: zram: free secondary algorithms names We need to kfree() secondary algorithms names when reset zram device that had multi-streams, otherwise we leak memory. [[email protected]: kfree(NULL) is legal] Link: https://lkml.kernel.org/r/[email protected]
local
low complexity
linux CWE-401
5.5
2024-10-21 CVE-2024-50065 Unspecified vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: ntfs3: Change to non-blocking allocation in ntfs_d_hash d_hash is done while under "rcu-walk" and should not sleep. __get_name() allocates using GFP_KERNEL, having the possibility to sleep when under memory pressure.
local
low complexity
linux
5.5
2024-10-21 CVE-2024-47825 Unspecified vulnerability in Cilium
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
network
high complexity
cilium
8.7
2024-10-21 CVE-2024-50003 NULL Pointer Dereference vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix system hang while resume with TBT monitor [Why] Connected with a Thunderbolt monitor and do the suspend and the system may hang while resume. The TBT monitor HPD will be triggered during the resume procedure and call the drm_client_modeset_probe() while struct drm_connector connector->dev->master is NULL. It will mess up the pipe topology after resume. [How] Skip the TBT monitor HPD during the resume procedure because we currently will probe the connectors after resume by default. (cherry picked from commit 453f86a26945207a16b8f66aaed5962dc2b95b85)
local
low complexity
linux CWE-476
5.5
2024-10-21 CVE-2024-50004 Unspecified vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35 [WHY & HOW] Mismatch in DCN35 DML2 cause bw validation failed to acquire unexpected DPP pipe to cause grey screen and system hang.
local
low complexity
linux
5.5
2024-10-21 CVE-2024-50005 Use After Free vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: mac802154: Fix potential RCU dereference issue in mac802154_scan_worker In the `mac802154_scan_worker` function, the `scan_req->type` field was accessed after the RCU read-side critical section was unlocked.
local
low complexity
linux CWE-416
7.8