Vulnerabilities > Linux

DATE CVE VULNERABILITY TITLE RISK
2024-05-01 CVE-2024-26961 Use After Free vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154_llsec_key_del() can free resources of a key directly without following the RCU rules for waiting before the end of a grace period.
local
low complexity
linux CWE-416
7.8
2024-05-01 CVE-2024-26962 Improper Locking vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape For raid456, if reshape is still in progress, then IO across reshape position will wait for reshape to make progress.
local
low complexity
linux CWE-667
5.5
2024-05-01 CVE-2024-26964 NULL Pointer Dereference vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Add error handling in xhci_map_urb_for_dma Currently xhci_map_urb_for_dma() creates a temporary buffer and copies the SG list to the new linear buffer.
local
low complexity
linux CWE-476
5.5
2024-05-01 CVE-2024-26966 Improper Validation of Array Index vulnerability in multiple products
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element.
local
low complexity
linux debian CWE-129
5.5
2024-05-01 CVE-2024-26967 Improper Validation of Array Index vulnerability in Linux Kernel 6.8.1/6.8.2
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element.
local
low complexity
linux CWE-129
5.5
2024-05-01 CVE-2024-26968 Improper Validation of Array Index vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element.
local
low complexity
linux CWE-129
5.5
2024-05-01 CVE-2024-26969 Improper Validation of Array Index vulnerability in multiple products
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element.
local
low complexity
linux debian CWE-129
5.5
2024-05-01 CVE-2024-26971 Unspecified vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element.
local
low complexity
linux
5.5
2024-05-01 CVE-2024-26973 In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fat_encode_fh_nostale() encodes file handle without a parent it stores only first 10 bytes of the file handle.
local
low complexity
linux debian
5.5
2024-05-01 CVE-2024-26974 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in multiple products
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - resolve race condition during AER recovery During the PCI AER system's error recovery process, the kernel driver may encounter a race condition with freeing the reset_data structure's memory.
local
high complexity
linux debian CWE-367
7.0