Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
dlm: fix add msg handle in send_queue ordered
In a benchmark scenario triggering a lot of requests that triggers a lot
of DLM messages on the network it can be that the mh->seq is not ordered
according the oldest seq number.…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
nfs: use nfsi->rwsem to protect traversal of the file lock list
Lingfeng identified a bug and suggested two solutions, but both appear
to have issues.
Generally, we cannot release flc_lock while iterating over the file…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free of fp->owner.name in durable handle owner check
Two concurrent SMB2 durable reconnects (DH2C/DHnC) on the same
persistent_id race the fp->owner.name compare-read in
ksmbd_vfs_compare_durable_owner()…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing file type validation in the 'file_during_checkout' function in all versions up to, and including, 2.9.8. This makes it possible for unauthenticated attackers to upload…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag
The DEV_PATH_BR_VLAN_UNTAG case post-decrements info->num_encaps
inside WARN_ON_ONCE(). num_encaps is u8, so if it's already 0 the
decrement still happens and…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ovpn: finish crypto callback cleanup before peer release
Crypto completion callbacks hold both key-slot and peer references. The
peer reference pins the netdev, and dropping the last peer reference can
let netdev unregistration…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ovpn: skip rehash for peers already removed from by_id
ovpn_nl_peer_set_doit() resolves the target peer via
ovpn_peer_get_by_id() before taking ovpn->lock. In the window between
the lookup (which only takes a refcount) and the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
dibs: initialise dibs->lock in dibs_dev_alloc()
dibs->lock is initialised by dibs_dev_add(), but a dibs device can
already take interrupts before that call: ism_probe() runs
ism_dev_init(), and hence request_irq(), before it…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
tls: rx: restore msg_iter before TLS 1.3 optimistic retry
tls_decrypt_sg() advances msg->msg_iter when it maps user pages for
the optimistic TLS 1.3 zero-copy path. If the decrypted record turns
out not to be unpadded…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
mm/filemap: __filemap_add_folio() restore index before retrying
In __filemap_add_folio()'s split-a-conflict loop, xas_set_order() is
applied repeatedly: each application modifies xas.xa_index, rounding it
down according to the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix UAF in rxgk_issue_challenge()
Fix rxgk_issue_challenge() to free the page containing the challenge
content after invoking the tracepoint as the whdr passed to the tracepoint
points into the page just freed.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
CVSS
9,8
EPSS
0,65 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
In the Linux kernel, the following vulnerability has been resolved:
dlm: fix add msg handle in send_queue ordered
In a benchmark scenario triggering a lot of requests that triggers a lot
of DLM messages on the network it can be that the mh->seq is not ordered
according the oldest seq number.…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
nfs: use nfsi->rwsem to protect traversal of the file lock list
Lingfeng identified a bug and suggested two solutions, but both appear
to have issues.
Generally, we cannot release flc_lock while iterating over the file…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free of fp->owner.name in durable handle owner check
Two concurrent SMB2 durable reconnects (DH2C/DHnC) on the same
persistent_id race the fp->owner.name compare-read in
ksmbd_vfs_compare_durable_owner()…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing file type validation in the 'file_during_checkout' function in all versions up to, and including, 2.9.8. This makes it possible for unauthenticated attackers to upload…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag
The DEV_PATH_BR_VLAN_UNTAG case post-decrements info->num_encaps
inside WARN_ON_ONCE(). num_encaps is u8, so if it's already 0 the
decrement still happens and…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ovpn: finish crypto callback cleanup before peer release
Crypto completion callbacks hold both key-slot and peer references. The
peer reference pins the netdev, and dropping the last peer reference can
let netdev unregistration…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ovpn: skip rehash for peers already removed from by_id
ovpn_nl_peer_set_doit() resolves the target peer via
ovpn_peer_get_by_id() before taking ovpn->lock. In the window between
the lookup (which only takes a refcount) and the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
dibs: initialise dibs->lock in dibs_dev_alloc()
dibs->lock is initialised by dibs_dev_add(), but a dibs device can
already take interrupts before that call: ism_probe() runs
ism_dev_init(), and hence request_irq(), before it…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
tls: rx: restore msg_iter before TLS 1.3 optimistic retry
tls_decrypt_sg() advances msg->msg_iter when it maps user pages for
the optimistic TLS 1.3 zero-copy path. If the decrypted record turns
out not to be unpadded…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
mm/filemap: __filemap_add_folio() restore index before retrying
In __filemap_add_folio()'s split-a-conflict loop, xas_set_order() is
applied repeatedly: each application modifies xas.xa_index, rounding it
down according to the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix UAF in rxgk_issue_challenge()
Fix rxgk_issue_challenge() to free the page containing the challenge
content after invoking the tracepoint as the whdr passed to the tracepoint
points into the page just freed.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
9,8
0,65 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.