CVE-2024-42162

HIGH Year: 2024
CVSS v3 Score
7.0
High
Weakness Type
CWE-754
View all →

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: gve: Account for stopped queues when reading NIC stats We now account for the fact that the NIC might send us stats for a subset of queues. Without this change, gve_get_ethtool_stats might make an invalid access on the priv->stats_report->stats array.

Related Vulnerabilities

CVE-2017-0610

HIGH
CVSS:7.0(High)

An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High ...

CWE-7542017

CVE-2021-0002

HIGH
CVSS:7.1(High)

Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated user to potentially enable information disclosure or denial of...

CWE-7542021

CVE-2020-16125

MEDIUM
CVSS:6.8(Medium)

gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could b...

CWE-7542020

CVE-2020-8334

MEDIUM
CVSS:6.8(Medium)

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access.

CWE-7542020

CVE-2021-35108

MEDIUM
CVSS:6.8(Medium)

Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivity, Snapdragon Mobile

CWE-7542021

CVE-2023-34733

MEDIUM
CVSS:6.8(Medium)

A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers to cause a Denial of Service (DoS) via supplying crafted media files when conne...

CWE-7542023