KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Błąd w kernelu Linux pozwala na wykonanie kodu przez nieuprawnionych użytkowników z powodu błędnego ustawienia flagi.
Błąd w jądrze Linuxa umożliwia odczyt niezinicjalizowanych danych ze stosu przez złośliwe urządzenie.
Korupcja pamięci w jądrze Linux przy obsłudze USB może prowadzić do dereferencji wskaźnika NULL.
Korupcja pamięci w jądrze Linux przy obsłudze USB może prowadzić do uszkodzenia pamięci przez urządzenia.
Podział przez zero w mptcp w funkcji __tcp_select_window może prowadzić do awarii systemu.
In the Linux kernel, the following vulnerability has been resolved: mmc: core: Cancel SDIO IRQ work before freeing host A host controller that uses sdio_signal_irq() schedules host->sdio_irq_work from its interrupt handler. That work is only cancelled on the suspend path (mmc_sdio_suspend()),…
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpu_cs_pass1() dispatches on chunk_id once per chunk without rejecting repeated ids. p->uf_bo is a single-slot field, so a submission carrying two AMDGPU_CHUNK_ID_FENCE…
In the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification errors xlog_recover_dquot_commit_pass2() validates the recovered dquot with xfs_dqblk_verify() and, on failure, sets error = -EFSCORRUPTED and jumps to out_release. But out_release…
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak in btrfs_do_encoded_write() Local fuzzing of 6.12.94 has found the following memory leak: Unreferenced object 0xffff888018050a80 (size 64): comm "syz.0.17", pid 10297, jiffies 4294953601 hex dump…
In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race between ptdump and vmap pgtable freeing", v6. Kernel page table walkers fall into two broad categories - those…
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mrp: fix uninitialised bytes on the wire br_mrp_alloc_test_skb() builds MRP test frames on an skb from dev_alloc_skb(), which does not clear the linear data area. On the MRA ring-role branch the sub-option TLV…
In the Linux kernel, the following vulnerability has been resolved: mm/ptdump: always stabilise against page table freeing using init_mm Previous commits have established the invariant that kernel page table freeing is performed while an mmap read lock on init_mm is held, which fixes races…
In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after devm_hwmon_device_register_with_info() has been called. At that time,…
In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 Unlike NCT6106, NCT6116 only has three temperature registers, and with it only three temperature source and temperature source configuration registers. The…
In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race Commit fbefe22811c3 ("scsi: libsas: Don't always drain event workqueue for HA resume") introduced sas_resume_ha_no_sync() to avoid a deadlock: the…
In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read If the fan data becomes 0 between the FAN_DATA_VALID() check and the FAN_PERIOD_TO_RPM() conversion, it will result in a divide-by-zero crash due to a race with…
Błąd w KVM dla s390 prowadzi do nieprawidłowego zarządzania pamięcią, co może skutkować wyciekiem zasobów.
Wykryto wyciek pamięci w ksmbd, umożliwiający nieautoryzowanym klientom wysyłanie powtarzających się żądań SMB2 NEGOTIATE.
In the Linux kernel, the following vulnerability has been resolved: ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() ublk_ctrl_add_dev() memcpy()s the userspace ublksrv_ctrl_dev_info into ub->dev_info and then fixes up the fields the driver owns, but misses ->state and…
In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure es58x_read_bulk_callback() resubmits the RX URB after processing a received packet. If the resubmit succeeds, the URB remains anchored and…
Warunki wyścigu w jądrze Linuxa podczas wyrejestrowania portu mogą prowadzić do dereferencji wskaźnika NULL.
In the Linux kernel, the following vulnerability has been resolved: fbcon: fix NULL pointer dereference for a console without vc_data fbcon_new_modelist() runs when a framebuffer's modelist changes. For each console mapped to it with fb_display[i].mode set, it reads vc_cons[i].d and passes the…
In the Linux kernel, the following vulnerability has been resolved: evm: terminate and bound the evm_xattrs read buffer evm_read_xattrs() allocates size + 1 bytes, fills them from the list of enabled xattrs, and then passes strlen(temp) to simple_read_from_buffer(). When no configured xattrs are…
In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous resource upon removal When dev_dax_kmem_probe() partially succeeds (at least one range is mapped) but a subsequent range fails request_mem_region() or add_memory_driver_managed(), the…
In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Allow entries in BO caches to be freed When a buffer object is pinned via host1x_bo_pin() with a cache, the resulting mapping is kept in the cache so it can be reused on subsequent pins. Each mapping held a…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Błąd w kernelu Linux pozwala na wykonanie kodu przez nieuprawnionych użytkowników z powodu błędnego ustawienia flagi. | Błąd w kernelu Linux pozwala na wykonanie kodu przez nieuprawnionych użytkowników z powodu błędnego ustawienia flagi. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| Błąd w jądrze Linuxa umożliwia odczyt niezinicjalizowanych danych ze stosu przez złośliwe urządzenie. | Błąd w jądrze Linuxa umożliwia odczyt niezinicjalizowanych danych ze stosu przez złośliwe urządzenie. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| Korupcja pamięci w jądrze Linux przy obsłudze USB może prowadzić do dereferencji wskaźnika NULL. | Korupcja pamięci w jądrze Linux przy obsłudze USB może prowadzić do dereferencji wskaźnika NULL. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| Korupcja pamięci w jądrze Linux przy obsłudze USB może prowadzić do uszkodzenia pamięci przez urządzenia. | Korupcja pamięci w jądrze Linux przy obsłudze USB może prowadzić do uszkodzenia pamięci przez urządzenia. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| Podział przez zero w mptcp w funkcji __tcp_select_window może prowadzić do awarii systemu. | Podział przez zero w mptcp w funkcji __tcp_select_window może prowadzić do awarii systemu. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: mmc: core: Cancel SDIO IRQ work before freeing host A host… | In the Linux kernel, the following vulnerability has been resolved: mmc: core: Cancel SDIO IRQ work before freeing host A host controller that uses sdio_signal_irq() schedules host->sdio_irq_work from its interrupt handler. That work is only cancelled on the suspend path (mmc_sdio_suspend()),… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one… | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpu_cs_pass1() dispatches on chunk_id once per chunk without rejecting repeated ids. p->uf_bo is a single-slot field, so a submission carrying two AMDGPU_CHUNK_ID_FENCE… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification… | In the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification errors xlog_recover_dquot_commit_pass2() validates the recovered dquot with xfs_dqblk_verify() and, on failure, sets error = -EFSCORRUPTED and jumps to out_release. But out_release… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak in btrfs_do_encoded_write() Local fuzzing of… | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak in btrfs_do_encoded_write() Local fuzzing of 6.12.94 has found the following memory leak: Unreferenced object 0xffff888018050a80 (size 64): comm "syz.0.17", pid 10297, jiffies 4294953601 hex dump… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump… | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race between ptdump and vmap pgtable freeing", v6. Kernel page table walkers fall into two broad categories - those… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: net: bridge: mrp: fix uninitialised bytes on the… | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mrp: fix uninitialised bytes on the wire br_mrp_alloc_test_skb() builds MRP test frames on an skb from dev_alloc_skb(), which does not clear the linear data area. On the MRA ring-role branch the sub-option TLV… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: mm/ptdump: always stabilise against page table freeing using… | In the Linux kernel, the following vulnerability has been resolved: mm/ptdump: always stabilise against page table freeing using init_mm Previous commits have established the invariant that kernel page table freeing is performed while an mmap read lock on init_mm is held, which fixes races… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Only report alarms if driver is ready Userspace can… | In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Only report alarms if driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after devm_hwmon_device_register_with_info() has been called. At that time,… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Fix number of temperature registers for… | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 Unlike NCT6106, NCT6116 only has three temperature registers, and with it only three temperature source and temperature source configuration registers. The… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake… | In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race Commit fbefe22811c3 ("scsi: libsas: Don't always drain event workqueue for HA resume") introduced sas_resume_ha_no_sync() to avoid a deadlock: the… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed… | In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read If the fan data becomes 0 between the FAN_DATA_VALID() check and the FAN_PERIOD_TO_RPM() conversion, it will result in a divide-by-zero crash due to a race with… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| Błąd w KVM dla s390 prowadzi do nieprawidłowego zarządzania pamięcią, co może skutkować wyciekiem zasobów. | Błąd w KVM dla s390 prowadzi do nieprawidłowego zarządzania pamięcią, co może skutkować wyciekiem zasobów. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| Wykryto wyciek pamięci w ksmbd, umożliwiający nieautoryzowanym klientom wysyłanie powtarzających się żądań SMB2 NEGOTIATE. | Wykryto wyciek pamięci w ksmbd, umożliwiający nieautoryzowanym klientom wysyłanie powtarzających się żądań SMB2 NEGOTIATE. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ublk: reset kernel-owned dev_info fields in… | In the Linux kernel, the following vulnerability has been resolved: ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() ublk_ctrl_add_dev() memcpy()s the userspace ublksrv_ctrl_dev_info into ub->dev_info and then fixes up the fields the driver owns, but misses ->state and… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on… | In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure es58x_read_bulk_callback() resubmits the RX URB after processing a received packet. If the resubmit succeeds, the URB remains anchored and… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| Warunki wyścigu w jądrze Linuxa podczas wyrejestrowania portu mogą prowadzić do dereferencji wskaźnika NULL. | Warunki wyścigu w jądrze Linuxa podczas wyrejestrowania portu mogą prowadzić do dereferencji wskaźnika NULL. |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: fbcon: fix NULL pointer dereference for a console without… | In the Linux kernel, the following vulnerability has been resolved: fbcon: fix NULL pointer dereference for a console without vc_data fbcon_new_modelist() runs when a framebuffer's modelist changes. For each console mapped to it with fb_display[i].mode set, it reads vc_cons[i].d and passes the… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: evm: terminate and bound the evm_xattrs read… | In the Linux kernel, the following vulnerability has been resolved: evm: terminate and bound the evm_xattrs read buffer evm_read_xattrs() allocates size + 1 bytes, fills them from the list of enabled xattrs, and then passes strlen(temp) to simple_read_from_buffer(). When no configured xattrs are… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous resource upon… | In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous resource upon removal When dev_dax_kmem_probe() partially succeeds (at least one range is mapped) but a subsequent range fails request_mem_region() or add_memory_driver_managed(), the… |
Do weryfikacji | Nieustalone | 0,22 % | ||
| In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Allow entries in BO caches to be freed When a buffer… | In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Allow entries in BO caches to be freed When a buffer object is pinned via host1x_bo_pin() with a cache, the resulting mapping is kept in the cache so it can be reused on subsequent pins. Each mapping held a… |
Do weryfikacji | Nieustalone | 0,22 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.