Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-23 12:25Z
2024-12-27
2024-12-27 15:15Z
HIGH

CVE-2024-56653 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: avoid UAF

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-56653

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: avoid UAF in btmtk_process_coredump hci_devcd_append may lead to the release of the skb, so it cannot be accessed once it is called. ================================================================== BUG: KASAN: slab-use-after-free in btmtk_process_coredump+0x2a7/0x2d0 [btmtk] Read of size 4 at addr ffff888033cfabb0 by task kworker/0:3/82 CPU: 0 PID: 82 Comm: kworker/0:3 Tainted: G U CVSSv3.1 8.8 (HIGH)

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-12-27
2024-12-27 15:15Z
HIGH

CVE-2024-56651 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110_can_ist(): fix

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-56651

In the Linux kernel, the following vulnerability has been resolved: can: hi311x: hi3110_can_ist(): fix potential use-after-free The commit a22bd630cfff ("can: hi311x: do not report txerr and rxerr during bus-off") removed the reporting of rxerr and txerr even in case of correct operation (i. e. not bus-off). The error count information added to the CAN frame after netif_rx() is a potential use after free, since there is no guarantee that the skb is in the same state. It mi CVSSv3.1 8.8 (HIGH)

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-12-27
2024-12-27 15:15Z
CRIT

CVE-2024-56645 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_session_new(): fix

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-56645

In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_session_new(): fix skb reference counting Since j1939_session_skb_queue() does an extra skb_get() for each new skb, do the same for the initial one in j1939_session_new() to avoid refcount underflow. [mkl: clean up commit message] CVSSv3.1 9.8 (CRITICAL)

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-12-27
2024-12-27 15:15Z
CRIT

CVE-2024-56640 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix LGR and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-56640

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix LGR and link use-after-free issue We encountered a LGR/link use-after-free issue, which manifested as the LGR/link refcnt reaching 0 early and entering the clear process, making resource access unsafe. refcount_t: addition on 0; use-after-free. WARNING: CPU: 14 PID: 107447 at lib/refcount.c:25 refcount_warn_saturate+0x9c/0x140 Workqueue: events smc_lgr_terminate_work [smc] Call trace: re CVSSv3.1 9.8 (CRITICAL)

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-12-27
2024-12-27 15:15Z
HIGH

CVE-2024-56627 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Read

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-56627

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read An offset from client could be a negative value, It could lead to an out-of-bounds read from the stream_buf. Note that this issue is coming when setting 'vfs objects = streams_xattr parameter' in ksmbd.conf. CVSSv3.1 8.1 (HIGH)

CWECWE 125TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-12-27
2024-12-27 15:15Z
HIGH

CVE-2024-56626 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Write

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-56626

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write An offset from client could be a negative value, It could allows to write data outside the bounds of the allocated buffer. Note that this issue is coming when setting 'vfs objects = streams_xattr parameter' in ksmbd.conf. CVSSv3.1 8.8 (HIGH)

CWECWE 787TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-12-27
2024-12-27 15:15Z
HIGH

CVE-2024-56591 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Use disable_delayed_work_sync

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-56591

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Use disable_delayed_work_sync This makes use of disable_delayed_work_sync instead cancel_delayed_work_sync as it not only cancel the ongoing work but also disables new submit which is disarable since the object holding the work is about to be freed. CVSSv3.1 8.8 (HIGH)

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2024-12-27
2024-12-27 14:15Z
HIGH

CVE-2024-53237 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix use-after-free in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-53237

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix use-after-free in device_for_each_child() Syzbot has reported the following KASAN splat: BUG: KASAN: slab-use-after-free in device_for_each_child+0x18f/0x1a0 Read of size 8 at addr ffff88801f605308 by task kbnepd bnep0/4980 CPU: 0 UID: 0 PID: 4980 Comm: kbnepd bnep0 Not tainted 6.12.0-rc4-00161-gae90f6a6170d #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/ CVSSv3.1 8.8 (HIGH)

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-12-27
2024-12-27 14:15Z
HIGH

CVE-2024-53224 — Linux Linux_kernel: BUG: kernel NULL pointer dereference, address: 0000000000000000 PGD 0 P4D 0 Oops: 0000 [#1]

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-53224

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Move events notifier registration to be after device registration Move pkey change work initialization and cleanup from device resources stage to notifier stage, since this is the stage which handles this work events. Fix a race between the device deregistration and pkey change work by moving MLX5_IB_STAGE_DEVICE_NOTIFIER to be after MLX5_IB_STAGE_IB_REG in order to ensure that the notifier is d CVSSv3.1 8.8 (HIGH)

CWECWE 476TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-12-27
2024-12-27 14:15Z
CRIT

CVE-2024-53209 — Linux Linux_kernel: This may result in random memory corruption and crashes as the HW may DMA

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-53209

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix receive ring space parameters when XDP is active The MTU setting at the time an XDP multi-buffer is attached determines whether the aggregation ring will be used and the rx_skb_func handler. This is done in bnxt_set_rx_skb_mode(). If the MTU is later changed, the aggregation ring setting may need to be changed and it may become out-of-sync with the settings initially done in bnxt_set_rx_skb_m CVSSv3.1 9.8 (CRITICAL)

CWECWE 476TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-12-27
2024-12-27 14:15Z
CRIT

CVE-2024-53206 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-53206

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in reqsk_timer_handler(). The cited commit replaced inet_csk_reqsk_queue_drop_and_put() with __inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler(). Then, oreq should be passed to reqsk_put() instead of req; otherwise use-after-free of nreq could happen when reqsk is migrated but the retry attempt failed (e.g. due to timeout). Let's pass oreq to reqsk_put(). CVSSv3.1 9.8 (CRITICAL)

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-12-27
2024-12-27 14:15Z
CRIT

CVE-2024-53186 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-53186

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in SMB request handling A race condition exists between SMB request handling in `ksmbd_conn_handler_loop()` and the freeing of `ksmbd_conn` in the workqueue handler `handle_ksmbd_work()`. This leads to a UAF. - KASAN: slab-use-after-free Read in handle_ksmbd_work - KASAN: slab-use-after-free in rtlock_slowlock_locked This race condition arises as follows: - `ksmbd_conn_handler_loo CVSSv3.1 9.8 (CRITICAL)

CWECWE 416CWECWE 362TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-12-27
2024-12-27 14:15Z
CRIT

CVE-2024-53179 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-53179

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of signing key Customers have reported use-after-free in @ses->auth_key.response with SMB2.1 + sign mounts which occurs due to following race: task A task B cifs_mount() dfs_mount_share() get_session() cifs_mount_get_session() cifs_send_recv() cifs_get_smb_ses() compound_send_recv() cifs_setup_session() smb2_setup_req CVSSv3.1 9.8 (CRITICAL)

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-12-27
2024-12-27 14:15Z
CRIT

CVE-2024-53177 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-53177

In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to open_cached_dir error paths If open_cached_dir() encounters an error parsing the lease from the server, the error handling may race with receiving a lease break, resulting in open_cached_dir() freeing the cfid while the queued work is pending. Update open_cached_dir() to drop refs rather than directly freeing the cfid. Have cached_dir_lease_break(), cfids_laundromat_work CVSSv3.1 9.8 (CRITICAL)

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-12-27
2024-12-27 14:15Z
CRIT

CVE-2024-53176 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: smb: During unmount, ensure

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-53176

In the Linux kernel, the following vulnerability has been resolved: smb: During unmount, ensure all cached dir instances drop their dentry The unmount process (cifs_kill_sb() calling close_all_cached_dirs()) can race with various cached directory operations, which ultimately results in dentries not being dropped and these kernel BUGs: BUG: Dentry ffff88814f37e358{i=1000000000080,n=/} still in use (2) [unmount of cifs cifs] VFS: Busy inodes after unmount of cifs (cifs) --- CVSSv3.1 9.8 (CRITICAL)

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-12-27
2024-12-27 14:15Z
CRIT

CVE-2024-53169 — Linux Linux_kernel: This may lead to a race between the fabric controller admin queue destroy code

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-53169

In the Linux kernel, the following vulnerability has been resolved: nvme-fabrics: fix kernel crash while shutting down controller The nvme keep-alive operation, which executes at a periodic interval, could potentially sneak in while shutting down a fabric controller. This may lead to a race between the fabric controller admin queue destroy code path (invoked while shutting down controller) and hw/hctx queue dispatcher called from the nvme keep-alive async request queuing op CVSSv3.1 9.8 (CRITICAL)

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-12-25
2024-12-25 13:15Z
CRIT

CVE-2024-8950 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-8950

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024. CVSSv3.1 9.9 (CRITICAL) · EPSS 15th percentile

CWECWE 89TYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2024-12-24
2024-12-24 12:15Z
CRIT

CVE-2024-53146 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-53146

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is >= U32_MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decode_cb_compound4res() does not have to perform arithmetic on the unsafe length value. CVSSv3.1 9.1 (CRITICAL)

CWECWE 190TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2024-12-21
2024-12-21 07:15Z
HIGH

CVE-2024-12066 — SMSA: The SMSA Shipping(official) plugin for WordPress is vulnerable to arbitrary file deletion due to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-12066

The SMSA Shipping(official) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the smsa_delete_label() function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). CVE-2024-49249 is likely a duplica CVSSv3.1 8.8 (HIGH)

CWECWE 73VNDSmsaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-12-20
2024-12-20 05:15Z
HIGH

CVE-2024-21549 — Versions of the package spatie/browsershot before 5.0.3 are vulnerable to Improper Input Validation due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-21549

Versions of the package spatie/browsershot before 5.0.3 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method. An attacker can exploit this vulnerability by utilizing view-source:file://, which allows for arbitrary file reading on a local file. **Note:** This is a bypass of the fix for [CVE-2024-21544](https://security.snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-8496745). CVSSv3.1 8.6 (HIGH) · EPSS 15th percentile

CWECWE 20TYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2024-12-19
2024-12-19 14:15Z
CRIT

CVE-2024-10244 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-10244

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ISDO Software Web Software allows SQL Injection. This issue affects Web Software: before 3.6. CVSSv3.1 9.8 (CRITICAL) · EPSS 28th percentile

CWECWE 89TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-12-18
2024-12-18 19:15Z
CRIT

CVE-2024-56057 — Vibethemes Wordpress_learning_management_system: Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-56057

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2. CVSSv3.1 9.9 (CRITICAL)

CWECWE 434VNDVibethemesTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2024-12-18
2024-12-18 19:15Z
HIGH

CVE-2024-56055 — Vibethemes Wordpress_learning_management_system: Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-56055

Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.2. CVSSv3.1 8.5 (HIGH)

CWECWE 35VNDVibethemesTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2024-12-18
2024-12-18 19:15Z
CRIT

CVE-2024-56054 — Vibethemes Wordpress_learning_management_system: Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-56054

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2. CVSSv3.1 9.1 (CRITICAL)

CWECWE 434VNDVibethemesTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2024-12-18
2024-12-18 19:15Z
CRIT

CVE-2024-56052 — Vibethemes Wordpress_learning_management_system: Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-56052

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplms_plugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through < 1.9.9.5.2. CVSSv3.1 9.9 (CRITICAL)

CWECWE 434VNDVibethemesTYPVulnerability
9.9
CVSS v3.1
100
Edit Score