Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2024-26973	fat: fix uninitialized field in nostale filehandles Description: In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fat_encode_fh_nostale() encodes file handle without a parent it stores only first 10 bytes of the file handle. However the length of the file handle must be a multiple of 4 so the file handle is actually 12 bytes long and the last two bytes remain uninitialized. This is not great at we potentially leak uninitialized information with the handle to userspace. Properly initialize the full handle length. EPSS Score: 0.04% Source: CVE December 20th, 2024 (5 months ago)
CVE-2024-26971	clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays Description: In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). EPSS Score: 0.05% Source: CVE December 20th, 2024 (5 months ago)
CVE-2024-26970	clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays Description: In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested. EPSS Score: 0.04% Source: CVE December 20th, 2024 (5 months ago)
CVE-2024-26969	clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays Description: In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested. EPSS Score: 0.04% Source: CVE December 20th, 2024 (5 months ago)
CVE-2024-26968	clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays Description: In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested. EPSS Score: 0.04% Source: CVE December 20th, 2024 (5 months ago)
CVE-2024-26967	clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays Description: In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested. EPSS Score: 0.04% Source: CVE December 20th, 2024 (5 months ago)
CVE-2024-26966	clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays Description: In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested. EPSS Score: 0.04% Source: CVE December 20th, 2024 (5 months ago)
CVE-2024-26965	clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays Description: In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested. EPSS Score: 0.04% Source: CVE December 20th, 2024 (5 months ago)
CVE-2024-26964	usb: xhci: Add error handling in xhci_map_urb_for_dma Description: In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Add error handling in xhci_map_urb_for_dma Currently xhci_map_urb_for_dma() creates a temporary buffer and copies the SG list to the new linear buffer. But if the kzalloc_node() fails, then the following sg_pcopy_to_buffer() can lead to crash since it tries to memcpy to NULL pointer. So return -ENOMEM if kzalloc returns null pointer. EPSS Score: 0.04% Source: CVE December 20th, 2024 (5 months ago)
CVE-2024-26963	usb: dwc3-am62: fix module unload/reload behavior Description: In the Linux kernel, the following vulnerability has been resolved: usb: dwc3-am62: fix module unload/reload behavior As runtime PM is enabled, the module can be runtime suspended when .remove() is called. Do a pm_runtime_get_sync() to make sure module is active before doing any register operations. Doing a pm_runtime_put_sync() should disable the refclk so no need to disable it again. Fixes the below warning at module removel. [ 39.705310] ------------[ cut here ]------------ [ 39.710004] clk:162:3 already disabled [ 39.713941] WARNING: CPU: 0 PID: 921 at drivers/clk/clk.c:1090 clk_core_disable+0xb0/0xb8 We called of_platform_populate() in .probe() so call the cleanup function of_platform_depopulate() in .remove(). Get rid of the now unnnecessary dwc3_ti_remove_core(). Without this, module re-load doesn't work properly. EPSS Score: 0.05% Source: CVE December 20th, 2024 (5 months ago)