Vulnerabilities > Linux

DATE CVE VULNERABILITY TITLE RISK
2024-05-01 CVE-2024-27071 NULL Pointer Dereference vulnerability in Linux Kernel 6.8/6.8.1
In the Linux kernel, the following vulnerability has been resolved: backlight: hx8357: Fix potential NULL pointer dereference The "im" pins are optional.
local
low complexity
linux CWE-476
5.5
2024-05-01 CVE-2024-27074 Memory Leak vulnerability in multiple products
In the Linux kernel, the following vulnerability has been resolved: media: go7007: fix a memleak in go7007_load_encoder In go7007_load_encoder, bounce(i.e.
local
low complexity
linux debian CWE-401
5.5
2024-05-01 CVE-2024-27076 Memory Leak vulnerability in multiple products
In the Linux kernel, the following vulnerability has been resolved: media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak Free the memory allocated in v4l2_ctrl_handler_init on release.
local
low complexity
linux debian CWE-401
5.5
2024-05-01 CVE-2024-27077 Memory Leak vulnerability in multiple products
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity The entity->name (i.e.
local
low complexity
linux debian CWE-401
5.5
2024-05-01 CVE-2024-27078 Memory Leak vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: fix some memleaks in tpg_alloc In tpg_alloc, resources should be deallocated in each and every error-handling paths, since they are allocated in for statements. Otherwise there would be memleaks because tpg_free is called only when tpg_alloc return 0.
local
low complexity
linux CWE-401
5.5
2024-05-01 CVE-2024-27388 Memory Leak vulnerability in multiple products
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssx_dec_option_array The creds and oa->data need to be freed in the error-handling paths after their allocation.
local
low complexity
linux debian CWE-401
5.5
2024-05-01 CVE-2024-27392 Double Free vulnerability in Linux Kernel 6.8/6.8.1
In the Linux kernel, the following vulnerability has been resolved: nvme: host: fix double-free of struct nvme_id_ns in ns_update_nuse() When nvme_identify_ns() fails, it frees the pointer to the struct nvme_id_ns before it returns.
local
low complexity
linux CWE-415
7.8
2024-05-01 CVE-2024-26930 Double Free vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the ha->vp_map pointer Coverity scan reported potential risk of double free of the pointer ha->vp_map.
local
low complexity
linux CWE-415
7.8
2024-05-01 CVE-2024-26932 Double Free vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd() When unregister pd capabilitie in tcpm, KASAN will capture below double -free issue.
local
low complexity
linux CWE-415
7.8
2024-05-01 CVE-2024-26933 Improper Locking vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in port "disable" sysfs attribute The show and store callback routines for the "disable" sysfs attribute file in port.c acquire the device lock for the port's parent hub device.
local
low complexity
linux CWE-667
7.8