KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Korupcja pamięci w jądrze Linux z powodu niewłaściwych rozmiarów buforów USB może prowadzić do awarii systemu.
Błąd w obsłudze pakietów USB w jądrze Linux może prowadzić do odczytu danych poza buforem.
Błąd w jądrze Linuxa pozwala na zablokowanie kontrolera FCoE przez nieautoryzowanego sąsiada L2.
Błąd w jądrze Linuxa może prowadzić do nieskończonej pętli w DAMON przy nieodpowiedniej konfiguracji.
In the Linux kernel, the following vulnerability has been resolved: btrfs: drop recovered reloc root refs on recovery failure During relocation recovery, each fs root gets a reference to its relocation root. If loading or adding a later root fails, or if the first transaction commit fails,…
Błąd w jądrze Linux w MT8192 AFE pozwala na nieprawidłowe zarządzanie energią podczas inicjalizacji.
In the Linux kernel, the following vulnerability has been resolved: hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the device IO. This results in a race condition between hid_input_report() and the point immediately following the…
Wyścig warunków w jądrze Linuxa w sterowniku nzxt-kraken3 prowadzi do podatności UAF.
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix nullptr err of vm_handle_moved If a amdgpu_bo_va is fpriv->prt_va, the bo of this one is always NULL. So, such kind of amdgpu_bo_va should be updated separately before amdgpu_vm_handle_moved.
In the Linux kernel, the following vulnerability has been resolved: pwm: berlin: Fix wrong register in suspend/resume The 'enable' register should be BERLIN_PWM_EN rather than BERLIN_PWM_ENABLE, otherwise, the driver accesses wrong address, there will be cpu exception then kernel panic during…
In the Linux kernel, the following vulnerability has been resolved: pid: Add a judgment for ns null in pid_nr_ns __task_pid_nr_ns ns = task_active_pid_ns(current); pid_nr_ns(rcu_dereference(*task_pid_ptr(task, type)), ns); if (pid && ns->level <= pid->level)…
In the Linux kernel, the following vulnerability has been resolved: blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx In __blk_mq_update_nr_hw_queues() the return value of blk_mq_sysfs_register_hctxs() is not checked. If sysfs creation for hctx fails, later changing…
In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthread_run() function returns error pointers so the max3421_hcd->spi_thread pointer can be either error pointers or NULL. Check for both before…
In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure set_ent is always present Ensure that set_ent is always set since only drbg provides it.
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() qla24xx_process_response_queue() advances ring_ptr past the head IOCB before dispatching, so by the time __qla_consume_iocb() runs, ring_ptr already…
Wyścig w obsłudze SR-IOV w jądrze Linuxa może prowadzić do zakleszczenia podczas usuwania PF.
** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. XEE in the fp: form processor could lead to SSRF, including exposing files from the server to an…
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb The Mesa issue referenced below pointed out a possible deadlock: [ 1231.611031] Possible interrupt unsafe locking scenario: [ 1231.611033] CPU0…
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiex_cfg80211_authenticate() derives the authentication frame length from req->ie_len and req->auth_data_len, both of type size_t, but stores it in a…
In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: handle damon_stop() failure damon_sample_mtier_stop() assumes its damon_stop() call will always successfully stops the two DAMON contexts. Hence it deallocates the two DAMON contexts after the damon_stop()…
In the Linux kernel, the following vulnerability has been resolved: s390/diag: Add missing array_index_nospec() call to memtop_get_page_count() 'level' is user space controlled and used to read from an array. Add the missing array_index_nospec() call to prevent speculative execution.
Błąd w KVM pozwala na nieprawidłowe przetwarzanie przerwań, co może prowadzić do nieautoryzowanego dostępu.
In the Linux kernel, the following vulnerability has been resolved: ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() In '__ocfs2_move_extent()', relax 'BUG()' to 'ocfs2_error()' just to avoid crashing the whole kernel due to a filesystem corruption.
In the Linux kernel, the following vulnerability has been resolved: ext4: verify orphan file size is not too big In principle orphan file can be arbitrarily large. However orphan replay needs to traverse it all and we also pin all its buffers in memory. Thus filesystems with absurdly large…
In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in ks_sa_rng_init Fix division by zero in ks_sa_rng_init caused by missing clock pointer initialization. The clk_get_rate() call is performed on an uninitialized clk pointer, resulting in…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Korupcja pamięci w jądrze Linux z powodu niewłaściwych rozmiarów buforów USB może prowadzić do awarii systemu. | Korupcja pamięci w jądrze Linux z powodu niewłaściwych rozmiarów buforów USB może prowadzić do awarii systemu. |
Do weryfikacji | Nieustalone | 0,23 % | ||
| Błąd w obsłudze pakietów USB w jądrze Linux może prowadzić do odczytu danych poza buforem. | Błąd w obsłudze pakietów USB w jądrze Linux może prowadzić do odczytu danych poza buforem. |
Do weryfikacji | Nieustalone | 0,23 % | ||
| Błąd w jądrze Linuxa pozwala na zablokowanie kontrolera FCoE przez nieautoryzowanego sąsiada L2. | Błąd w jądrze Linuxa pozwala na zablokowanie kontrolera FCoE przez nieautoryzowanego sąsiada L2. |
Do weryfikacji | Nieustalone | 0,23 % | ||
| Błąd w jądrze Linuxa może prowadzić do nieskończonej pętli w DAMON przy nieodpowiedniej konfiguracji. | Błąd w jądrze Linuxa może prowadzić do nieskończonej pętli w DAMON przy nieodpowiedniej konfiguracji. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: btrfs: drop recovered reloc root refs on recovery failure During… | In the Linux kernel, the following vulnerability has been resolved: btrfs: drop recovered reloc root refs on recovery failure During relocation recovery, each fs root gets a reference to its relocation root. If loading or adding a later root fails, or if the first transaction commit fails,… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| Błąd w jądrze Linux w MT8192 AFE pozwala na nieprawidłowe zarządzanie energią podczas inicjalizacji. | Błąd w jądrze Linux w MT8192 AFE pozwala na nieprawidłowe zarządzanie energią podczas inicjalizacji. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: hwmon: (gigabyte_waterforce) Stop device IO before calling… | In the Linux kernel, the following vulnerability has been resolved: hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the device IO. This results in a race condition between hid_input_report() and the point immediately following the… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| Wyścig warunków w jądrze Linuxa w sterowniku nzxt-kraken3 prowadzi do podatności UAF. | Wyścig warunków w jądrze Linuxa w sterowniku nzxt-kraken3 prowadzi do podatności UAF. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix nullptr err of vm_handle_moved If a amdgpu_bo_va is… | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix nullptr err of vm_handle_moved If a amdgpu_bo_va is fpriv->prt_va, the bo of this one is always NULL. So, such kind of amdgpu_bo_va should be updated separately before amdgpu_vm_handle_moved. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: pwm: berlin: Fix wrong register in suspend/resume The 'enable'… | In the Linux kernel, the following vulnerability has been resolved: pwm: berlin: Fix wrong register in suspend/resume The 'enable' register should be BERLIN_PWM_EN rather than BERLIN_PWM_ENABLE, otherwise, the driver accesses wrong address, there will be cpu exception then kernel panic during… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: pid: Add a judgment for ns null in pid_nr_ns __task_pid_nr_ns… | In the Linux kernel, the following vulnerability has been resolved: pid: Add a judgment for ns null in pid_nr_ns __task_pid_nr_ns ns = task_active_pid_ns(current); pid_nr_ns(rcu_dereference(*task_pid_ptr(task, type)), ns); if (pid && ns->level <= pid->level)… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: blk-mq: check kobject state_in_sysfs before deleting in… | In the Linux kernel, the following vulnerability has been resolved: blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx In __blk_mq_update_nr_hw_queues() the return value of blk_mq_sysfs_register_hctxs() is not checked. If sysfs creation for hctx fails, later changing… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe… | In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthread_run() function returns error pointers so the max3421_hcd->spi_thread pointer can be either error pointers or NULL. Check for both before… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure set_ent is always present Ensure that set_ent… | In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure set_ent is always present Ensure that set_ent is always set since only drbg provides it. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix response queue over-consumption in… | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() qla24xx_process_response_queue() advances ring_ptr past the head IOCB before dispatching, so by the time __qla_consume_iocb() runs, ring_ptr already… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| Wyścig w obsłudze SR-IOV w jądrze Linuxa może prowadzić do zakleszczenia podczas usuwania PF. | Wyścig w obsłudze SR-IOV w jądrze Linuxa może prowadzić do zakleszczenia podczas usuwania PF. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in… | ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. XEE in the fp: form processor could lead to SSRF, including exposing files from the server to an… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb The Mesa… | In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb The Mesa issue referenced below pointed out a possible deadlock: [ 1231.611031] Possible interrupt unsafe locking scenario: [ 1231.611033] CPU0… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length… | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiex_cfg80211_authenticate() derives the authentication frame length from req->ie_len and req->auth_data_len, both of type size_t, but stores it in a… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: handle damon_stop()… | In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: handle damon_stop() failure damon_sample_mtier_stop() assumes its damon_stop() call will always successfully stops the two DAMON contexts. Hence it deallocates the two DAMON contexts after the damon_stop()… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: s390/diag: Add missing array_index_nospec() call to… | In the Linux kernel, the following vulnerability has been resolved: s390/diag: Add missing array_index_nospec() call to memtop_get_page_count() 'level' is user space controlled and used to read from an array. Add the missing array_index_nospec() call to prevent speculative execution. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| Błąd w KVM pozwala na nieprawidłowe przetwarzanie przerwań, co może prowadzić do nieautoryzowanego dostępu. | Błąd w KVM pozwala na nieprawidłowe przetwarzanie przerwań, co może prowadzić do nieautoryzowanego dostępu. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() In… | In the Linux kernel, the following vulnerability has been resolved: ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() In '__ocfs2_move_extent()', relax 'BUG()' to 'ocfs2_error()' just to avoid crashing the whole kernel due to a filesystem corruption. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ext4: verify orphan file size is not too big In principle orphan… | In the Linux kernel, the following vulnerability has been resolved: ext4: verify orphan file size is not too big In principle orphan file can be arbitrarily large. However orphan replay needs to traverse it all and we also pin all its buffers in memory. Thus filesystems with absurdly large… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in ks_sa_rng_init Fix division… | In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in ks_sa_rng_init Fix division by zero in ks_sa_rng_init caused by missing clock pointer initialization. The clk_get_rate() call is performed on an uninitialized clk pointer, resulting in… |
Do weryfikacji | Nieustalone | 0,22 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.