List of all vulnerabilities

Report a vulnerability
CVE-2024-50270 – mm/damon/core: avoid overflow in damon_feed_loop_next_input()
11/19/2024
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
Unknown severity
CVE-2024-50269 – usb: musb: sunxi: Fix accessing an released usb phy
11/19/2024
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
Unknown severity
CVE-2024-50268 – usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
11/19/2024
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
Unknown severity
CVE-2024-50267 – USB: serial: io_edgeport: fix use after free in debug printk
11/19/2024
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
High severity
CVE-2024-50266 – clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
11/19/2024
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
Unknown severity
CVE-2024-50265 – ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
11/19/2024
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
Unknown severity
CVE-2024-50264 – vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
11/19/2024
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
High severity
CVE-2023-52921 – drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()
11/19/2024
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
High severity
CVE-2023-52921 – drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()
11/19/2024
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
High severity
CVE-2024-10979 – PostgreSQL PL/Perl environment variable changes execute arbitrary code
11/14/2024
Affected packages: conf-mingw-w64-postgresql-i686 • conf-mingw-w64-postgresql-x86_64 • conf-postgresql • ocsigen-start • postgresql
High severity
CVE-2024-10978 – PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID
11/14/2024
Affected packages: conf-mingw-w64-postgresql-i686 • conf-mingw-w64-postgresql-x86_64 • conf-postgresql • ocsigen-start • postgresql
Medium severity
CVE-2024-10977 – PostgreSQL libpq retains an error message from man-in-the-middle
11/14/2024
Affected packages: conf-mingw-w64-postgresql-i686 • conf-mingw-w64-postgresql-x86_64 • conf-postgresql • ocsigen-start • postgresql
Low severity
CVE-2024-10976 – PostgreSQL row security below e.g. subqueries disregards user ID changes
11/14/2024
Affected packages: conf-mingw-w64-postgresql-i686 • conf-mingw-w64-postgresql-x86_64 • conf-postgresql • ocsigen-start • postgresql
Medium severity
CVE-2023-4134 – Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()
11/14/2024
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
Medium severity
CVE-2024-50263 – fork: only invoke khugepaged, ksm hooks if no error
11/11/2024
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
Unknown severity
CVE-2024-52533
11/11/2024
Affected packages: conf-glib-2
Critical severity
CVE-2024-46954
11/10/2024
Affected packages: conf-ghostscript
High severity
CVE-2024-46956
11/10/2024
Affected packages: conf-ghostscript
High severity
CVE-2024-46955
11/10/2024
Affected packages: conf-ghostscript
Medium severity
CVE-2024-46953
11/10/2024
Affected packages: conf-ghostscript
High severity