7.5
CVE-2024-23091 -
Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values.
5.5
CVE-2024-42115 - jffs2: Fix potential illegal address access in jffs2_free_inode
In the Linux kernel, the following vulnerability has been resolved: jffs2: Fix potential illegal address access in jffs2_free_inode During the stress testing of the jffs2 file system,the following abnormal printouts were found: [ 2430.649000] Unable to handle kernel paging request at virtual addrโฆ
7.8
CVE-2024-42159 - scsi: mpi3mr: Sanitise num_phys
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Sanitise num_phys Information is stored in mr_sas_port->phy_mask, values larger then size of this field shouldn't be allowed.
5.1
CVE-2024-42143 - kernel: orangefs: fix out-of-bounds fsid access
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
6.1
CVE-2024-42224 - net: dsa: mv88e6xxx: Correct check for empty list
In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Correct check for empty list Since commit a3c53be55c95 ("net: dsa: mv88e6xxx: Support multiple MDIO busses") mv88e6xxx_default_mdio_bus() has checked that the return value of list_first_entry() is non-NULL. โฆ
4.7
CVE-2024-42227 - drm/amd/display: Fix overlapping copy within dml_core_mode_programming
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix overlapping copy within dml_core_mode_programming [WHY] &mode_lib->mp.Watermark and &locals->Watermark are the same address. memcpy may lead to unexpected behavior. [HOW] memmove should be used.
4.1
CVE-2024-42158 - s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings Replace memzero_explicit() and kfree() with kfree_sensitive() to fix warnings reported by Coccinelle: WARNING opportunity for kfree_sensitive/kvfree_sensitive (line 150โฆ
4.4
CVE-2024-42131 - mm: avoid overflows in dirty throttling logic
In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic The dirty throttling logic is interspersed with assumptions that dirty limits in PAGE_SIZE units fit into 32-bit (so that various multiplications fit into 64-bits). If limits end up โฆ
5.5
CVE-2024-42226 - kernel: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
4.4
CVE-2024-42116 - kernel: igc: fix a log entry using uninitialized netdev
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.