VIR Vulnerability Intelligence Relay

CVEs from 2024

7,195 normalized CVEs published or assigned in this year.

Total
7,195
critical
critical 114
high
high 1,020
medium
medium 2,013
low
low 42
% Critical
1.6%
% with KEV
2.3%
% with exploit
2.3%

Top vendors

Top products

  • checkmk 10
  • office 8
  • profilegrid 8
  • office_long_term_servicing_channel 6
  • glibc 5
  • virtual_traffic_manager 5
  • element_pack 5
  • propertyhive 5

Top packages

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2024-27010 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix mirred deadlock on device recursion When the mirred action is used on a classful egress qdisc and a packet is mirr… redhatrockylinuxsusedebian+1
CVE-2024-36920 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Avoid memcpy field-spanning write WARNING When the "storcli2 show" command is executed for eHBA-9600, mpi3mr driver… redhatrockylinuxsusedebian+1
CVE-2024-42240 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in #DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF fl… redhatrockylinuxsusedebian+1
CVE-2024-35947 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: dyndbg: fix old BUG_ON in >control parser Fix a BUG_ON from 2009. Even if it looks "unreachable" (I didn't really look), lets ma… redhatrockylinuxsusedebian+1
CVE-2024-31076 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQD_MOVE_PCNTXT prevents immediate effectiv… redhatrockylinuxsusedebian+1
CVE-2024-3727 high — 8.0 2y ago Important: container-tools:rhel8 security update redhatalmalinuxrockylinuxdebian+2
CVE-2024-42226 high — 8.0 2y ago Important: kernel security update redhatrockylinuxsusealmalinux
CVE-2024-35853 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash The rehash delayed work migrates filters from one region to another. This… redhatrockylinuxsusedebian+1
CVE-2024-26740 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: use the backlog for mirred ingress The test Davide added in commit ca22da2fbd69 ("act_mirred: use the back… redhatrockylinuxsusedebian+1
CVE-2024-26837 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: net: bridge: switchdev: Skip MDB replays of deferred events on offload Before this change, generation of the list of MDB events t… redhatrockylinuxsusedebian+1
CVE-2024-42238 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Return error if block header overflows file Return an error from cs_dsp_power_up() if a block header is longer … redhatrockylinuxsusedebian+1
CVE-2024-27011 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memleak in map from abort path The delete set command does not rely on the transaction object for eleme… redhatrockylinuxsusedebian+1
CVE-2024-42084 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: ftruncate: pass a signed offset The old ftruncate() syscall, using the 32-bit off_t misses a sign extension when called in compat… redhatrockylinuxsusedebian+1
CVE-2024-40906 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always stop health timer during driver removal Currently, if teardown_hca fails to execute during driver removal, mlx5 … redhatrockylinuxsusedebian
CVE-2024-38581 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/mes: fix use-after-free issue Delete fence fallback timer to fix the ramdom use-after-free issue. v2: move to amdgpu_… redhatrockylinuxsusedebian+1
CVE-2024-35938 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: decrease MHI channel buffer length to 8KB Currently buf_len field of ath11k_mhi_config_qca6390 is assigned with 0, … redhatrockylinuxsusedebian+1
CVE-2024-26669 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: Fix chain template offload When a qdisc is deleted from a net device the stack instructs the underlying driver… redhatrockylinuxsusedebian+1
CVE-2024-26660 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Implement bounds check for stream encoder creation in DCN301 'stream_enc_regs' array is an array of dcn10_stream… redhatrockylinuxsusedebian+1
CVE-2024-41012 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: filelock: Remove locks reliably when fcntl/close race is detected When fcntl_setlk() races with close(), it removes the created l… redhatrockylinuxsusedebian+1
CVE-2024-26939 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: drm/i915/vma: Fix UAF on destroy against retire race Object debugging tools were sporadically reporting illegal attempts to free … redhatrockylinuxsusedebian+1
CVE-2024-35847 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in its_vpe_irq_domain_alloc() causes a double free when … redhatrockylinuxsusedebian+1
CVE-2024-39276 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() Syzbot reports a warning as follows: =================… redhatrockylinuxsusedebian+1
CVE-2024-26675 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: ppp_async: limit MRU to 64K syzbot triggered a warning [1] in __alloc_pages(): WARN_ON_ONCE_GFP(order > MAX_PAGE_ORDER, gfp) Wi… redhatrockylinuxsusedebian+1
CVE-2024-26921 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: inet: inet_defrag: prevent sk release while still in use ip_local_out() and other functions can pass skb->sk as function argument… redhatrockylinuxsusedebian+1
CVE-2024-35810 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix the lifetime of the bo cursor memory The cleanup can be dispatched while the atomic update is still active, which… redhatrockylinuxsusedebian+1
CVE-2024-35801 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD Commit 672365477ae8 ("x86/fpu: Update XFD state where required") and commit 8bf… redhatrockylinuxsusedebian+1
CVE-2024-41038 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers Check that all fields of a V2 algorithm header fit into t… redhatrockylinuxsusedebian+1
CVE-2024-41065 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Whitelist dtl slub object for copying to userspace Reading the dispatch trace log from /sys/kernel/debug/powerpc… redhatrockylinuxsusedebian+1
CVE-2024-36917 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: block: fix overflow in blk_ioctl_discard() There is no check for overflow of 'start + len' in blk_ioctl_discard(). Hung task occu… redhatrockylinuxsusedebian+1
CVE-2024-44970 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink When all the strides in a WQE have been consumed, the WQE is unlinked from t… redhatrockylinuxsusedebian
CVE-2024-41060 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: drm/radeon: check bo_va->bo is non-NULL before using it The call to radeon_vm_clear_freed might clear bo_va->bo, so we have to ch… redhatrockylinuxsusedebian+1
CVE-2024-39499 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: vmci: prevent speculation leaks by sanitizing event in event_deliver() Coverity spotted that event_msg is controlled by user-spac… redhatrockylinuxsusedebian+1
CVE-2024-26772 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() Places the logic for checking if the group's block b… redhatrockylinuxsusedebian+1
CVE-2024-40988 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix UBSAN warning in kv_dpm.c Adds bounds check for sumo_vid_mapping_entry. redhatrockylinuxsusedebian+1
CVE-2024-26704 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: ext4: fix double-free of blocks due to wrong extents moved_len In ext4_move_extents(), moved_len is only updated when all moves a… redhatrockylinuxsusedebian+1
CVE-2024-27042 high — 8.0 2y ago Important: kernel security update redhatrockylinuxsusealmalinux
CVE-2024-35814 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fix double-allocation of slots due to broken alignment handling Commit bbb73a103fbb ("swiotlb: fix a braino in the align… redhatrockylinuxsusedebian+1
CVE-2024-35809 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the .runtime_idle() callback and the .remove(… redhatrockylinuxsusedebian+1
CVE-2024-35876 high — 8.0 2y ago Important: kernel-rt security update redhatrockylinuxsusealmalinux
CVE-2024-38555 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Discard command completions in internal error Fix use after free when FW completion arrives while device is in internal… redhatrockylinuxsusedebian+1
CVE-2024-38627 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: stm class: Fix a double free in stm_register_device() The put_device(&stm->dev) call will trigger stm_device_release() which free… redhatrockylinuxsusedebian+1
CVE-2024-35959 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix mlx5e_priv_init() cleanup flow When mlx5e_priv_init() fails, the cleanup flow calls mlx5e_selq_cleanup which calls… redhatrockylinuxsusedebian+1
CVE-2024-40901 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory There is a potential out-of-bounds access when using test_b… redhatrockylinuxsusedebian+1
CVE-2024-40989 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Disassociate vcpus from redistributor region on teardown When tearing down a redistributor region, make sure we don't… redhatrockylinuxsusedebian+1
CVE-2024-36933 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). syzbot triggered various splats (see [0] and … redhatrockylinuxsusedebian+1
CVE-2024-26940 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed The driver creates /sys/kernel/debug/dri/0/mob_ttm even when… redhatrockylinuxsusedebian+1
CVE-2024-36901 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent NULL dereference in ip6_output() According to syzbot, there is a chance that ip6_dst_idev() returns NULL in ip6_out… redhatrockylinuxsusedebian+1
CVE-2024-42154 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: validate source addr length I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4 is at least 4 bytes long,… redhatrockylinuxsusedebian+1
CVE-2024-36927 high — 8.0 2y ago In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in __ip_make_skb() KMSAN reported uninit-value access in __ip_make_skb() [1]. __ip_make_skb() test… redhatrockylinuxsusedebian+1
CVE-2024-9407 high — 8.0 2y ago Important: podman security update redhatrockylinuxdebiansuse+2
CVE-2024-9676 high — 8.0 2y ago Important: podman security update almalinuxredhatrockylinuxdebian+1
CVE-2024-10464 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-10462 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-10461 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-10460 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-10465 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-10467 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-10463 high — 8.0 2y ago Important: thunderbird security update redhatrockylinuxdebiansuse
CVE-2024-10459 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-47875 high — 8.0 2y ago Important: grafana security update redhatdebianrockylinuxsuse+1
CVE-2024-9675 high — 8.0 2y ago Important: podman security update redhatrockylinuxdebiansuse+2
CVE-2024-49761 high — 8.0 2y ago Important: ruby:3.1 security update redhatrockylinuxsusedebian+2
CVE-2024-54534 high — 8.0 2y ago The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processi… redhatsusedebian
CVE-2024-4558 high — 8.0 2y ago Important: webkit2gtk3 security update redhatrockylinuxdebianalmalinux
CVE-2024-23263 high — 8.0 2y ago A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 1… redhatsusedebian
CVE-2024-40782 high — 8.0 2y ago Important: webkit2gtk3 security update redhatrockylinuxsusedebian
CVE-2024-40779 high — 8.0 2y ago Important: webkit2gtk3 security update redhatrockylinuxsusedebian
CVE-2024-23254 high — 8.0 2y ago The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. A malicious website may exfi… redhatsusedebian
CVE-2024-27856 high — 8.0 2y ago The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Pro… redhatsusedebian
CVE-2024-40780 high — 8.0 2y ago Important: webkit2gtk3 security update redhatrockylinuxsusedebian
CVE-2024-23280 high — 8.0 2y ago An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A maliciously crafted webpage may … redhatsusedebian
CVE-2024-44185 high — 8.0 2y ago Important: webkit2gtk3 security update redhatrockylinuxsusedebian+1
CVE-2024-27851 high — 8.0 2y ago Important: webkit2gtk3 security update redhatrockylinuxsusedebian
CVE-2024-40789 high — 8.0 2y ago Important: webkit2gtk3 security update redhatrockylinuxsusedebian
CVE-2024-40866 high — 8.0 2y ago Important: webkit2gtk3 security update redhatrockylinuxsusedebian+1
CVE-2024-27820 high — 8.0 2y ago Important: webkit2gtk3 security update redhatrockylinuxsusedebian
CVE-2024-27838 high — 8.0 2y ago Important: webkit2gtk3 security update redhatrockylinuxsusedebian
CVE-2024-23284 high — 8.0 2y ago A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, wat… redhatsusedebian
CVE-2024-40776 high — 8.0 2y ago Important: webkit2gtk3 security update redhatsuserockylinuxdebian
CVE-2024-44187 high — 8.0 2y ago Important: webkit2gtk3 security update redhatrockylinuxsusedebian+1
CVE-2024-9341 high — 8.0 2y ago Important: podman security update redhatrockylinuxdebiansuse+2
CVE-2024-43485 high — 8.0 2y ago Important: .NET 8.0 security update redhatrockylinuxalmalinuxnuget
CVE-2024-38229 high — 8.0 2y ago Important: .NET 8.0 security update redhatrockylinuxalmalinuxnuget
CVE-2024-43483 high — 8.0 2y ago Important: .NET 8.0 security update redhatrockylinuxalmalinuxnuget
CVE-2024-43484 high — 8.0 2y ago Important: .NET 8.0 security update redhatrockylinuxalmalinuxnuget
CVE-2024-8900 high — 8.0 2y ago Important: firefox security update rockylinuxdebian
CVE-2024-9403 high — 8.0 2y ago Important: thunderbird security update redhatrockylinuxdebiansuse
CVE-2024-9400 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-9392 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-9401 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-9396 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-9394 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-9402 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-9393 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-9399 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-9398 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-9397 high — 8.0 2y ago Important: firefox security update redhatrockylinuxdebiansuse
CVE-2024-47076 high — 8.0 2y ago Important: cups-filters security update redhatrockylinuxdebiansuse
CVE-2024-47850 high — 8.0 2y ago CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability t… redhatdebiansuse
CVE-2024-47176 high — 8.0 2y ago Important: cups-filters security update redhatrockylinuxdebiansuse