VulDB Recent Entries

A vulnerability was found in Linux Kernel up to 6.1.102/6.6.43/6.10.2. It has been declared as critical. This vulnerability affects the function cdv_intel_lvds_get_modes. The manipulation leads to null pointer dereference. This vulnerability was named CVE-2024-42310. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.102/6.6.43/6.10.2. It has been classified as problematic. This affects the function hfs_alloc_inode. The manipulation leads to uninitialized pointer. This vulnerability is uniquely identified as CVE-2024-42311. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.102/6.6.43/6.10.2 and classified as critical. Affected by this issue is the function init_cifs of the file fs/smb/client/cifsfs.c of the component cifs. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2024-42307. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.6.43/6.10.2 and classified as critical. Affected by this vulnerability is the function pxp_probe of the component imx-pxp. The manipulation leads to null pointer dereference. This vulnerability is known as CVE-2024-42303. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.102/6.6.43/6.10.2. Affected is an unknown function of the component parport. The manipulation leads to denial of service. This vulnerability is traded as CVE-2024-42301. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.10.2. This issue affects the function z_erofs_get_gbuf of the file fs/erofs/zutil.c. The manipulation leads to race condition. The identification of this vulnerability is CVE-2024-42300. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.6.43/6.10.2. This vulnerability affects the function devm_kasprintf of the component ASoC. The manipulation leads to null pointer dereference. This vulnerability was named CVE-2024-42298. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.1.102/6.6.43/6.10.2. This affects the function nilfs_btnode_create_block of the component nilfs2. The manipulation leads to allocation of resources. This vulnerability is uniquely identified as CVE-2024-42295. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.102/6.6.43/6.10.2. It has been rated as problematic. Affected by this issue is the function clk_prepare. The manipulation leads to Privilege Escalation. This vulnerability is handled as CVE-2024-42290. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.102/6.6.43/6.10.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component qla2xxx. The manipulation leads to memory corruption. This vulnerability is known as CVE-2024-42288. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.102/6.6.43/6.10.2. It has been classified as problematic. Affected is the function log_replay of the component NTFS File Handler. The manipulation leads to Privilege Escalation. This vulnerability is traded as CVE-2024-42299. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.102/6.6.43/6.10.2 and classified as problematic. This issue affects the function zap_modalias_env. The manipulation leads to out-of-bounds read. The identification of this vulnerability is CVE-2024-42292. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.1.102/6.6.43/6.10.2 and classified as critical. This vulnerability affects unknown code of the component qla2xxx. The manipulation leads to null pointer dereference. This vulnerability was named CVE-2024-42287. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.102/6.6.43/6.10.2. This affects the function eh_abort of the component qla2xxx. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2024-42289. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.102/6.6.43/6.10.2. Affected by this issue is the function iw_conn_req_handler. The manipulation leads to use after free. This vulnerability is handled as CVE-2024-42285. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.1.102/6.6.43/6.10.2. Affected by this vulnerability is the function tipc_udp_addr2str. The manipulation leads to buffer overflow. This vulnerability is known as CVE-2024-42284. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.1.102/6.6.43/6.10.2. Affected is the function nla_put_nh_group of the component nexthop. The manipulation leads to improper initialization. This vulnerability is traded as CVE-2024-42283. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.10.2. It has been rated as critical. This issue affects the function mtk_free_dev of the component mediatek. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2024-42282. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.102/6.6.43/6.10.2. It has been declared as problematic. This vulnerability affects unknown code of the component bpf. The manipulation leads to Privilege Escalation. This vulnerability was named CVE-2024-42281. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.43/6.10.2. It has been classified as critical. This affects the function tasdev_load_calibrated_data of the component TAS2781. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2024-42278. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.