Chronologiczny przegląd publikacji. Ostatnie modyfikacje są w osobnym widoku.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
pfcp: make sure the SEID is linear before reading it
pfcp_encap_recv() only makes sure that the UDP header and the 4 byte
PFCP header are in the linear area. When the S flag is set,
pfcp_session_recv() then reads the 8 byte SEID…
Opis źródłowy NVD · ENCVSS 7,3 · EPSS 0,38 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
devlink: fix devlink_rel reference leak when notify work is pending
devlink_rel_nested_in_notify_work_schedule() takes a reference on the
devlink_rel for the notify work and then queues the work, ignoring the
return value of…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
net: always dissect GSO packets in __virtio_net_hdr_to_skb()
Commit 9e8db5913264 ("net: avoid false positives in untrusted gso
validation") added a '&& skb->network_header' check before flow-dissecting
GSO packets without…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
flow_dissector: avoid u16 truncation of skb->len when computing thoff
__skb_flow_dissect() computes key_control->thoff using:
key_control->thoff = min_t(u16, nhoff, skb ? skb->len : hlen);
min_t(u16, ...) casts both…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
ASoC: adau1372: allow sleepy powerdown GPIOs
gpiod_set_value() emits a WARN when the GPIO provider indicates that it
can sleep, as is typical for I2C controlled GPIO expanders. Since the
powerdown GPIO is only manipulated in…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
ext4: don't enable large folios on encrypted inodes
Commit 709f0f1f1bf5 ("ext4: add checks for large folio
incompatibilities when BS > PS") disables large folios at mount time
if the "encrypt" feature is set. However, enabling…
Opis źródłowy NVD · ENCVSS 7,0 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
sched_ext: Build the cid tables privately and publish them with RCU
The cid tables are visible to the cid kfuncs while being modified: the
first enable publishes the global pointers before filling them,
ops.init_cids() overrides…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
HID: steam: Refactor registration
This refactors and simplifies the registration/unregistration flow. Since
we now only perform registration when the client isn't opened anymore, the
logic for handling that can be removed, and…
Opis źródłowy NVD · ENCVSS 7,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
HID: steam: Rearrange teardown sequence
This fixes a narrow window during the teardown sequence where callbacks
could still be scheduled during cleanup that would then have a dangling
pointer to the now-freed steam struct.
This…
Opis źródłowy NVD · ENCVSS 7,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
drm/vc4: Disable the V3D interrupt across runtime suspend
vc4_irq_disable() masks the V3D interrupt sources and then calls
synchronize_irq() before the V3D is powered down. However, by itself,
this is not enough to quiesce the…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
vsock: Fix memory leak in vmci_transport_recv_dgram_cb()
During the closure of a datagram socket, the vmci_transport_recv_dgram_cb()
function may be called, which will add the packets
to the socket's backlog; then, after the…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
mlxsw: spectrum_flower: Fix port range register leak in tmplt_create()
mlxsw_sp_flower_tmplt_create() parses a flow_cls_offload template
into a stack-local struct mlxsw_sp_acl_rule_info purely to compute
rulei.values.elusage.…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
EDAC/altera: Fix use-after-free in error paths
In both altr_edac_a10_device_add() and altr_portb_setup(), the error path
freed the dci structure before releasing the devres group. Since the managed
single and double bit IRQ…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
usb: hub: use shorter 120ms post resume hold for SS root hubs
Holding a USB3 hub PM runtime reference for 200ms at hub resume triggers
an AMD platform issue. Users running Android adb report crashes after
adb has been polling…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()
Since commit d58e468b1112 ("flow_dissector: implements flow dissector
BPF hook") __skb_flow_dissect() needs a net pointer, either from
skb->dev, skb->sk, or since commit…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak
The struct rtc_wkalrm has padding holes after the 'pending' member.
When returned to userspace via the RTC_WKALRM_RD ioctl, uninitialized
kernel stack data…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: reset ar->num_stations on hardware start
When (multiple) hw restart occurs, we end up in a situation where we
cannot accept new stations / mesh peers. This seems to be the
'num_stations' in 'struct ath11k' that did…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
perf/core: Check kernel access when kernel callchains are requested
perf_event_open() currently gates perf_allow_kernel() only on
!attr.exclude_kernel.
However, users can still request kernel callchain collection…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
rust: irq: pass RegistrationInner as cookie to request_irq
With commit ba268514ea14 ("rust: devres: fix race condition due to
nesting"), Devres::new() returns Result<Self> by value instead of
initializing in-place via PinInit.…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
x86/mm: Drop unnecessary PMD page copy when freeing
On a box with a discrete GPU, lockdep reports a possible deadlock as
soon as kswapd shrinks the TTM page pool. The immediate cause is an
x86 commit that added an…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
ASoC: qcom: lpass-cpu: use DAI table index for playback constraints
The DAI ID is a hardware port ID and is not necessarily the index of
the corresponding entry in variant->dai_driver.
When configuring a DAI with…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
fs: avoid repeated scans in evict_inodes()
We observed hung tasks when users attempted to unmount a filesystem
after its disk had been removed while still in use. During device
removal, fs_bdev_mark_dead() calls evict_inodes()…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
bpf, sockmap: Fix self-redirect copied_seq double-counting
When a BPF stream_verdict program redirects an skb back to the same
socket (self-redirect with BPF_F_INGRESS), sk_psock_verdict_apply()
calls tcp_eat_skb() which…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Remove sink usage from DPMS
[Why]
stream->sink is optional and can be null, so should always be checked
before dereference. Additionally, most of its usage in DPMS sequences
is for stream->sink->link, which can…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: nv: Fix life cycle of the nested_mmus array
The nested_mmus array holds the shadow page tables that are used when
a guest is running a nested context. These structures are allocated on
VCPU_INIT for whole guest,…
Opis źródłowy NVD · ENCVSS 7,0 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
CVSS
7,0
EPSS
0,15 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
In the Linux kernel, the following vulnerability has been resolved:
pfcp: make sure the SEID is linear before reading it
pfcp_encap_recv() only makes sure that the UDP header and the 4 byte
PFCP header are in the linear area. When the S flag is set,
pfcp_session_recv() then reads the 8 byte SEID…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,3 · EPSS 0,38 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
devlink: fix devlink_rel reference leak when notify work is pending
devlink_rel_nested_in_notify_work_schedule() takes a reference on the
devlink_rel for the notify work and then queues the work, ignoring the
return value of…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
net: always dissect GSO packets in __virtio_net_hdr_to_skb()
Commit 9e8db5913264 ("net: avoid false positives in untrusted gso
validation") added a '&& skb->network_header' check before flow-dissecting
GSO packets without…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
flow_dissector: avoid u16 truncation of skb->len when computing thoff
__skb_flow_dissect() computes key_control->thoff using:
key_control->thoff = min_t(u16, nhoff, skb ? skb->len : hlen);
min_t(u16, ...) casts both…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
ASoC: adau1372: allow sleepy powerdown GPIOs
gpiod_set_value() emits a WARN when the GPIO provider indicates that it
can sleep, as is typical for I2C controlled GPIO expanders. Since the
powerdown GPIO is only manipulated in…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
ext4: don't enable large folios on encrypted inodes
Commit 709f0f1f1bf5 ("ext4: add checks for large folio
incompatibilities when BS > PS") disables large folios at mount time
if the "encrypt" feature is set. However, enabling…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,0 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
sched_ext: Build the cid tables privately and publish them with RCU
The cid tables are visible to the cid kfuncs while being modified: the
first enable publishes the global pointers before filling them,
ops.init_cids() overrides…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
HID: steam: Refactor registration
This refactors and simplifies the registration/unregistration flow. Since
we now only perform registration when the client isn't opened anymore, the
logic for handling that can be removed, and…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
HID: steam: Rearrange teardown sequence
This fixes a narrow window during the teardown sequence where callbacks
could still be scheduled during cleanup that would then have a dangling
pointer to the now-freed steam struct.
This…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
drm/vc4: Disable the V3D interrupt across runtime suspend
vc4_irq_disable() masks the V3D interrupt sources and then calls
synchronize_irq() before the V3D is powered down. However, by itself,
this is not enough to quiesce the…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
vsock: Fix memory leak in vmci_transport_recv_dgram_cb()
During the closure of a datagram socket, the vmci_transport_recv_dgram_cb()
function may be called, which will add the packets
to the socket's backlog; then, after the…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
mlxsw: spectrum_flower: Fix port range register leak in tmplt_create()
mlxsw_sp_flower_tmplt_create() parses a flow_cls_offload template
into a stack-local struct mlxsw_sp_acl_rule_info purely to compute
rulei.values.elusage.…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
EDAC/altera: Fix use-after-free in error paths
In both altr_edac_a10_device_add() and altr_portb_setup(), the error path
freed the dci structure before releasing the devres group. Since the managed
single and double bit IRQ…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
usb: hub: use shorter 120ms post resume hold for SS root hubs
Holding a USB3 hub PM runtime reference for 200ms at hub resume triggers
an AMD platform issue. Users running Android adb report crashes after
adb has been polling…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()
Since commit d58e468b1112 ("flow_dissector: implements flow dissector
BPF hook") __skb_flow_dissect() needs a net pointer, either from
skb->dev, skb->sk, or since commit…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak
The struct rtc_wkalrm has padding holes after the 'pending' member.
When returned to userspace via the RTC_WKALRM_RD ioctl, uninitialized
kernel stack data…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: reset ar->num_stations on hardware start
When (multiple) hw restart occurs, we end up in a situation where we
cannot accept new stations / mesh peers. This seems to be the
'num_stations' in 'struct ath11k' that did…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
perf/core: Check kernel access when kernel callchains are requested
perf_event_open() currently gates perf_allow_kernel() only on
!attr.exclude_kernel.
However, users can still request kernel callchain collection…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
rust: irq: pass RegistrationInner as cookie to request_irq
With commit ba268514ea14 ("rust: devres: fix race condition due to
nesting"), Devres::new() returns Result<Self> by value instead of
initializing in-place via PinInit.…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
x86/mm: Drop unnecessary PMD page copy when freeing
On a box with a discrete GPU, lockdep reports a possible deadlock as
soon as kswapd shrinks the TTM page pool. The immediate cause is an
x86 commit that added an…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
ASoC: qcom: lpass-cpu: use DAI table index for playback constraints
The DAI ID is a hardware port ID and is not necessarily the index of
the corresponding entry in variant->dai_driver.
When configuring a DAI with…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
fs: avoid repeated scans in evict_inodes()
We observed hung tasks when users attempted to unmount a filesystem
after its disk had been removed while still in use. During device
removal, fs_bdev_mark_dead() calls evict_inodes()…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
bpf, sockmap: Fix self-redirect copied_seq double-counting
When a BPF stream_verdict program redirects an skb back to the same
socket (self-redirect with BPF_F_INGRESS), sk_psock_verdict_apply()
calls tcp_eat_skb() which…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Remove sink usage from DPMS
[Why]
stream->sink is optional and can be null, so should always be checked
before dereference. Additionally, most of its usage in DPMS sequences
is for stream->sink->link, which can…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: nv: Fix life cycle of the nested_mmus array
The nested_mmus array holds the shadow page tables that are used when
a guest is running a nested context. These structures are allocated on
VCPU_INIT for whole guest,…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,0 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
7,0
0,15 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.