CVE-2025-0614 – Qualifio Wheel of Fortune Case Sensitive Email Injection Vulnerability
The following table lists the changes that have been made to the CVE-2025-0614 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Jan. 21, 2025 Action […]
CVE-2024-57938 – Linux SCTP Integer Overflow Vulnerability
The following table lists the changes that have been made to the CVE-2024-57938 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 21, 2025 Action […]
CVE-2024-57937 – “Linux Kernel Memfd F_SEAL_WRITE Read-Only Mapping Reinstatement”
In the Linux kernel, the following vulnerability has been resolved: mm: reinstate ability to map write-sealed memfd mappings read-only Patch series “mm: reinstate ability to map write-sealed memfd mappings read-only”. In commit 158978945f31 (“mm: perform the mapping_map_writable() check after call_mmap()”) (and preceding changes in the same series) it became possible to mmap() F_SEAL_WRITE sealed memfd […]
CVE-2024-57936 – NetXtreme RDMA Linux Kernel Buffer Overflowulnerability
The following table lists the changes that have been made to the CVE-2024-57936 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 21, 2025 Action […]
CVE-2024-57934 – “Linux_kernel fgraph_array READ_ONCE NULL Pointer Dereference Vulnerability”
In the Linux kernel, the following vulnerability has been resolved: fgraph: Add READ_ONCE() when accessing fgraph_array[] In __ftrace_return_to_handler(), a loop iterates over the fgraph_array[] elements, which are fgraph_ops. The loop checks if an element is a fgraph_stub to prevent using a fgraph_stub afterward. However, if the compiler reloads fgraph_array[] after this check, it might race […]
CVE-2024-57935 – Intel RDMA HNS Invalid Pointer Dereference
The following table lists the changes that have been made to the CVE-2024-57935 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 21, 2025 Action […]
CVE-2024-57933 – Linux Kernel GVE XSK Queue Guard
In the Linux kernel, the following vulnerability has been resolved: gve: guard XSK operations on the existence of queues This patch predicates the enabling and disabling of XSK pools on the existence of queues. As it stands, if the interface is down, disabling or enabling XSK pools would result in a crash, as the RX […]
CVE-2024-57932 – Apache Linux Kernel Divide By Zero and Null Pointer Vulnerability
In the Linux kernel, the following vulnerability has been resolved: gve: guard XDP xmit NDO on existence of xdp queues In GVE, dedicated XDP queues only exist when an XDP program is installed and the interface is up. As such, the NDO XDP XMIT callback should return early if either of these conditions are false. […]
CVE-2024-57931 – Linux SELinux Unknown Extended Permissions Ignorance Vulnerability
The following table lists the changes that have been made to the CVE-2024-57931 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 21, 2025 Action […]
CVE-2024-57930 – Linux Kernel Array Dereference Vulnerability in Tracing
In the Linux kernel, the following vulnerability has been resolved: tracing: Have process_string() also allow arrays In order to catch a common bug where a TRACE_EVENT() TP_fast_assign() assigns an address of an allocated string to the ring buffer and then references it in TP_printk(), which can be executed hours later when the string is free, […]