Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
net: sit: require CAP_NET_ADMIN in the device netns for changelink
ipip6_changelink() operates on at most two netns, dev_net(dev) and the
tunnel link netns t->net. They differ once the device is created in or
moved to a netns…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
lpc32xx_xmit_dma() waits for the DMA completion callback but ignores
wait_for_completion_timeout(). A timed out DMA transfer is therefore
unmapped and reported…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files.
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,68 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY
kvm_arch_prepare_memory_region() computes new->arch.flags, i.e. whether
a memslot is KVM_MEM_HUGEPAGE_CAPABLE or KVM_MEM_HUGEPAGE_INCAPABLE,
only for KVM_MR_CREATE…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
serial: qcom-geni: fix TX DMA buffer flush
When transmit flushing a qcom-geni UART during an ongoing TX DMA, the
UART gets stuck infinitely repeating corrupted TX DMA frames.
The DMA-mode uart_ops does not provide a…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()
Function kvm_vcpu_ioctl_interrupt() can be called from userspace, here
add irq validility cheking in kvm_vcpu_ioctl_interrupt().
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs
The intra-host migration/mirroring feature is not fully implemented for
SEV-SNP VMs. The proper migration requires additional SNP-specific
state such as…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
OrangeHRM is a comprehensive human resource management (HRM) system. From version 5.0 to 5.7, the password reset workflow does not enforce that the username submitted in the final reset request matches the account for which the reset process was originally initiated. After obtaining a valid reset…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID
tegra241_vintf_init_vsid() maps a guest vSID to a single physical Stream ID
taken from master->streams[0], and only warns when the device does not have
exactly one…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Flush context cache with correct SID when tearing down aliases
domain_context_clear_one() and device_pasid_table_teardown() are both
invoked once per DMA alias of a device. Each function locates the context
entry…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Validate MSI data before routing it to EIOINTC
pch_msi_set_irq() passes e->msi.data straight into eiointc_set_irq() as
the irq number. The MSI data comes from userspace, that either via a
KVM_IRQ_ROUTING_MSI…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
vhost-scsi: reject feature changes after endpoint
vhost_scsi_setup_vq_cmds() runs from VHOST_SCSI_SET_ENDPOINT and allocates
each command's protection scatterlist array (prot_sgl) according to the
acknowledged…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
iommu/iommufd: Fix IOPF group ownership UAF
iopf_group_alloc() links each last-page IOPF group into the generic IOPF
pending list before invoking the domain fault handler.
iommufd_fault_iopf_handler() also queued an accepted…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-af: Block VFs from clobbering special CGX PKIND state
PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND
programming. When HiGig2 or EDSA parsing is enabled, a VF NIX LF alloc must
not reset the LMAC…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path
In iommu_dma_map_sg(), when handling PCI P2PDMA cases, the DMA length
of the current scatterlist segment `s` is incorrectly assigned from the
head entry…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Add a max slot check for SQ
The variable WQE mode must be validated against
the maximum slots supported by HW. The max supported
value is 64K. Adding a max and min check and fail if user
supplied value is more than…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
CVSS
8,8
EPSS
0,17 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
In the Linux kernel, the following vulnerability has been resolved:
net: sit: require CAP_NET_ADMIN in the device netns for changelink
ipip6_changelink() operates on at most two netns, dev_net(dev) and the
tunnel link netns t->net. They differ once the device is created in or
moved to a netns…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
lpc32xx_xmit_dma() waits for the DMA completion callback but ignores
wait_for_completion_timeout(). A timed out DMA transfer is therefore
unmapped and reported…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,68 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY
kvm_arch_prepare_memory_region() computes new->arch.flags, i.e. whether
a memslot is KVM_MEM_HUGEPAGE_CAPABLE or KVM_MEM_HUGEPAGE_INCAPABLE,
only for KVM_MR_CREATE…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
serial: qcom-geni: fix TX DMA buffer flush
When transmit flushing a qcom-geni UART during an ongoing TX DMA, the
UART gets stuck infinitely repeating corrupted TX DMA frames.
The DMA-mode uart_ops does not provide a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()
Function kvm_vcpu_ioctl_interrupt() can be called from userspace, here
add irq validility cheking in kvm_vcpu_ioctl_interrupt().
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs
The intra-host migration/mirroring feature is not fully implemented for
SEV-SNP VMs. The proper migration requires additional SNP-specific
state such as…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
OrangeHRM is a comprehensive human resource management (HRM) system. From version 5.0 to 5.7, the password reset workflow does not enforce that the username submitted in the final reset request matches the account for which the reset process was originally initiated. After obtaining a valid reset…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID
tegra241_vintf_init_vsid() maps a guest vSID to a single physical Stream ID
taken from master->streams[0], and only warns when the device does not have
exactly one…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Flush context cache with correct SID when tearing down aliases
domain_context_clear_one() and device_pasid_table_teardown() are both
invoked once per DMA alias of a device. Each function locates the context
entry…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: KVM: Validate MSI data before routing it to EIOINTC
pch_msi_set_irq() passes e->msi.data straight into eiointc_set_irq() as
the irq number. The MSI data comes from userspace, that either via a
KVM_IRQ_ROUTING_MSI…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
vhost-scsi: reject feature changes after endpoint
vhost_scsi_setup_vq_cmds() runs from VHOST_SCSI_SET_ENDPOINT and allocates
each command's protection scatterlist array (prot_sgl) according to the
acknowledged…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
iommu/iommufd: Fix IOPF group ownership UAF
iopf_group_alloc() links each last-page IOPF group into the generic IOPF
pending list before invoking the domain fault handler.
iommufd_fault_iopf_handler() also queued an accepted…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-af: Block VFs from clobbering special CGX PKIND state
PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND
programming. When HiGig2 or EDSA parsing is enabled, a VF NIX LF alloc must
not reset the LMAC…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path
In iommu_dma_map_sg(), when handling PCI P2PDMA cases, the DMA length
of the current scatterlist segment `s` is incorrectly assigned from the
head entry…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Add a max slot check for SQ
The variable WQE mode must be validated against
the maximum slots supported by HW. The max supported
value is 64K. Adding a max and min check and fail if user
supplied value is more than…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
8,8
0,17 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.