KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before requesting IRQ snd_harmony_create() registers the IRQ before initializing h->lock and h->mixer_lock. A pending interrupt can invoke the handler while these locks are…
In the Linux kernel, the following vulnerability has been resolved: media: saa7164: fix cleanup on resource allocation failure saa7164_dev_setup() adds the device to the global saa7164_devlist before requesting the PCI BAR memory regions. If get_resources() fails, saa7164_dev_setup() decrements…
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read in read_log_rec_buf() read_log_rec_buf() copies a log record into a caller buffer starting at u32 off = lsn_to_page_off(log, lsn) + log->record_header_len; log->record_header_len (and…
Błąd w kernelu Linux w funkcji ghes_handle_arm_hw_error może prowadzić do odczytu poza sekcją CPER.
Nieprawidłowa walidacja numeru czujnika w jądrze Linux prowadzi do odczytu i zapisu poza granicami pamięci.
Błąd w jądrze Linuxa w ALSA pozwala na wywołanie nieprzewidzianego zachowania w obsłudze przerwań.
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() qrtr_endpoint_post() validates an incoming packet with if (!size || len != ALIGN(size, 4) + hdrlen) goto err; where size comes from the wire. On 32-bit, size_t…
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass In log_replay()'s analysis pass, after find_dp() returns a valid DIR_PAGE_ENTRY for the (target_attr, target_vcn) tuple, the copy_lcns block walks lrh->lcns_follow…
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound DeleteIndexEntryAllocation memmove length In do_action()'s DeleteIndexEntryAllocation case, e->size comes from an on-disk INDEX_BUFFER entry. When e->size makes e + e->size point past hdr +…
Błąd w funkcji bpf_msg_push_data w jądrze Linuxa może prowadzić do nieprawidłowego przetwarzania danych w scatterlist.
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL…
Wpis poza granice w IGSS Definition może prowadzić do utraty danych lub wykonania kodu.
A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler (snap-confine). The default seccomp security templates generated by the engine to restrict system calls do not filter or reject process operations capable of creating or…
Wykonanie kodu w JetBrains PyCharm było możliwe przez nieautoryzowane narzędzia Jupyter MCP.
OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying…
Przepełnienie bufora w jądrze Linux NTFS3 umożliwia dostęp do danych lub ich zniszczenie.
Lokalny atakujący może wykonać dowolny kod w Vimie poprzez funkcję vms_fixfilename().
Słaba ochrona klucza w NetSupport Manager umożliwia zdalne przejęcie kontroli nad systemami.
In the Linux kernel, the following vulnerability has been resolved: cpuidle: dt_idle_genpd: kfree() the original name allocation dt_idle_pd_alloc() kasprintf()s the full node path, then points pd->name at kbasename() of that string. dt_idle_pd_free() kfree()s pd->name, which is no longer the…
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation ha->msix_count is u16, but ha->max_req_queues, ha->max_rsp_queues and ha->max_qpairs are u8. Deriving the queue count as "ha->max_req_queues = ha->msix_count -…
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16_MAX entries During $LogFile replay, log_replay() indexes the transaction table by the transact_id taken from the log record header. check_log_rec() only verifies that transact_id…
Błąd w jądrze Linuxa umożliwia dereferencję zwolnionego węzła urządzenia, co prowadzi do potencjalnego wycieku pamięci.
Dereferencja wskaźnika NULL w psxpad_spi_suspend w jądrze Linux prowadzi do awarii systemu.
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach() In cxl_cancel_auto_attach(), it assumes cxled->pos is a valid index for accessing p->targets[]. However, cxled->pos can be set to negative errno in…
In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer spill metadata during half-slot cleanup __clean_func_state() cleans dead stack slots in 4-byte halves. When the high half of a STACK_SPILL slot is dead and the low half remains live, cleanup converts the…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before requesting… | In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before requesting IRQ snd_harmony_create() registers the IRQ before initializing h->lock and h->mixer_lock. A pending interrupt can invoke the handler while these locks are… |
Obserwuj | 8,4 | 0,19 % | ||
| In the Linux kernel, the following vulnerability has been resolved: media: saa7164: fix cleanup on resource allocation… | In the Linux kernel, the following vulnerability has been resolved: media: saa7164: fix cleanup on resource allocation failure saa7164_dev_setup() adds the device to the global saa7164_devlist before requesting the PCI BAR memory regions. If get_resources() fails, saa7164_dev_setup() decrements… |
Obserwuj | 8,4 | 0,19 % | ||
| In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read in read_log_rec_buf() read_log_rec_b… | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read in read_log_rec_buf() read_log_rec_buf() copies a log record into a caller buffer starting at u32 off = lsn_to_page_off(log, lsn) + log->record_header_len; log->record_header_len (and… |
Obserwuj | 8,4 | 0,19 % | ||
| Błąd w kernelu Linux w funkcji ghes_handle_arm_hw_error może prowadzić do odczytu poza sekcją CPER. | Błąd w kernelu Linux w funkcji ghes_handle_arm_hw_error może prowadzić do odczytu poza sekcją CPER. |
Obserwuj | 8,4 | 0,19 % | ||
| Nieprawidłowa walidacja numeru czujnika w jądrze Linux prowadzi do odczytu i zapisu poza granicami pamięci. | Nieprawidłowa walidacja numeru czujnika w jądrze Linux prowadzi do odczytu i zapisu poza granicami pamięci. |
Obserwuj | 8,4 | 0,19 % | ||
| Błąd w jądrze Linuxa w ALSA pozwala na wywołanie nieprzewidzianego zachowania w obsłudze przerwań. | Błąd w jądrze Linuxa w ALSA pozwala na wywołanie nieprzewidzianego zachowania w obsłudze przerwań. |
Obserwuj | 8,4 | 0,19 % | ||
| In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix 32-bit integer overflow in… | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() qrtr_endpoint_post() validates an incoming packet with if (!size || len != ALIGN(size, 4) + hdrlen) goto err; where size comes from the wire. On 32-bit, size_t… |
Obserwuj | 8,4 | 0,19 % | ||
| In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass In… | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass In log_replay()'s analysis pass, after find_dp() returns a valid DIR_PAGE_ENTRY for the (target_attr, target_vcn) tuple, the copy_lcns block walks lrh->lcns_follow… |
Obserwuj | 8,4 | 0,19 % | ||
| In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound DeleteIndexEntryAllocation memmove length In… | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound DeleteIndexEntryAllocation memmove length In do_action()'s DeleteIndexEntryAllocation case, e->size comes from an on-disk INDEX_BUFFER entry. When e->size makes e + e->size point past hdr +… |
Obserwuj | 8,4 | 0,19 % | ||
| Błąd w funkcji bpf_msg_push_data w jądrze Linuxa może prowadzić do nieprawidłowego przetwarzania danych w scatterlist. | Błąd w funkcji bpf_msg_push_data w jądrze Linuxa może prowadzić do nieprawidłowego przetwarzania danych w scatterlist. |
Obserwuj | 8,4 | 0,19 % | ||
| A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL… |
Obserwuj | 8,4 | 0,18 % | ||
| Wpis poza granice w IGSS Definition może prowadzić do utraty danych lub wykonania kodu. | Wpis poza granice w IGSS Definition może prowadzić do utraty danych lub wykonania kodu. |
Obserwuj | 8,4 | 0,18 % | ||
| A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler (snap-confine). | A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler (snap-confine). The default seccomp security templates generated by the engine to restrict system calls do not filter or reject process operations capable of creating or… |
Obserwuj | 8,4 | 0,18 % | ||
| Wykonanie kodu w JetBrains PyCharm było możliwe przez nieautoryzowane narzędzia Jupyter MCP. | Wykonanie kodu w JetBrains PyCharm było możliwe przez nieautoryzowane narzędzia Jupyter MCP. |
Obserwuj | 8,4 | 0,18 % | ||
| OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt… | OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying… |
Obserwuj | 8,4 | 0,18 % | ||
| Przepełnienie bufora w jądrze Linux NTFS3 umożliwia dostęp do danych lub ich zniszczenie. | Przepełnienie bufora w jądrze Linux NTFS3 umożliwia dostęp do danych lub ich zniszczenie. |
Obserwuj | 8,4 | 0,18 % | ||
| Lokalny atakujący może wykonać dowolny kod w Vimie poprzez funkcję vms_fixfilename(). | Lokalny atakujący może wykonać dowolny kod w Vimie poprzez funkcję vms_fixfilename(). |
Obserwuj | 8,4 | 0,18 % | ||
| Słaba ochrona klucza w NetSupport Manager umożliwia zdalne przejęcie kontroli nad systemami. | Słaba ochrona klucza w NetSupport Manager umożliwia zdalne przejęcie kontroli nad systemami. |
Obserwuj | 8,4 | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: cpuidle: dt_idle_genpd: kfree() the original name… | In the Linux kernel, the following vulnerability has been resolved: cpuidle: dt_idle_genpd: kfree() the original name allocation dt_idle_pd_alloc() kasprintf()s the full node path, then points pd->name at kbasename() of that string. dt_idle_pd_free() kfree()s pd->name, which is no longer the… |
Obserwuj | 8,4 | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid… | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation ha->msix_count is u16, but ha->max_req_queues, ha->max_rsp_queues and ha->max_qpairs are u8. Deriving the queue count as "ha->max_req_queues = ha->msix_count -… |
Obserwuj | 8,4 | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16_MAX entries During… | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16_MAX entries During $LogFile replay, log_replay() indexes the transaction table by the transact_id taken from the log record header. check_log_rec() only verifies that transact_id… |
Obserwuj | 8,4 | 0,18 % | ||
| Błąd w jądrze Linuxa umożliwia dereferencję zwolnionego węzła urządzenia, co prowadzi do potencjalnego wycieku pamięci. | Błąd w jądrze Linuxa umożliwia dereferencję zwolnionego węzła urządzenia, co prowadzi do potencjalnego wycieku pamięci. |
Obserwuj | 8,4 | 0,18 % | ||
| Dereferencja wskaźnika NULL w psxpad_spi_suspend w jądrze Linux prowadzi do awarii systemu. | Dereferencja wskaźnika NULL w psxpad_spi_suspend w jądrze Linux prowadzi do awarii systemu. |
Obserwuj | 8,4 | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach() In… | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach() In cxl_cancel_auto_attach(), it assumes cxled->pos is a valid index for accessing p->targets[]. However, cxled->pos can be set to negative errno in… |
Obserwuj | 8,4 | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer spill metadata during half-slot… | In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer spill metadata during half-slot cleanup __clean_func_state() cleans dead stack slots in 4-byte halves. When the high half of a STACK_SPILL slot is dead and the low half remains live, cleanup converts the… |
Obserwuj | 8,4 | 0,18 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.