KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Błąd w jądrze Linuxa w hid-lenovo-go pozwala na użycie nieaktualnego wskaźnika, co może prowadzić do nieprzewidywalnych skutków.
Błąd w jądrze Linuxa pozwala na wyciek pamięci przy zwalnianiu bufora.
Wyciekanie pamięci w jądrze Linuxa przez niezwolnienie pgtable w migrate_vma_insert_huge_pmd_page.
Błąd dzielenia przez zero w jądrze Linuxa umożliwia awarię systemu przy błędnej wartości częstotliwości.
Podwójne zwolnienie pamięci w uio_pci_generic_sva w jądrze Linuxa może prowadzić do awarii systemu.
In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() In rtl8180_init_rx_ring(), memory is allocated for skb packets and DMA allocations in a loop. When an allocation fails, the previously successful allocations…
In the Linux kernel, the following vulnerability has been resolved: backlight: led-bl: Add devlink to supplier LEDs LED Backlight is a consumer of one or multiple LED class devices, but devlink is currently unable to create correct supplier-producer links when the supplier is a class device. It…
In the Linux kernel, the following vulnerability has been resolved: smack: fix bug: unprivileged task can create labels If an unprivileged task is allowed to relabel itself (/smack/relabel-self is not empty), it can freely create new labels by writing their names into own…
In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() In hfcsusb_probe(), the memory allocated for ctrl_urb gets leaked when setup_instance() fails with an error code. Fix that by freeing the urb before freeing the hw…
In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect There is one use-after-free warning when running NBD_CMD_CONNECT and NBD_CLEAR_SOCK: nbd_genl_connect nbd_alloc_and_init_config // config_refs=1 nbd_start_device //…
In the Linux kernel, the following vulnerability has been resolved: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse The following warning appears when running syzkaller, and this issue also exists in the mainline code. ------------[ cut here ]------------ list_add double add:…
In the Linux kernel, the following vulnerability has been resolved: nbd: defer config put in recv_work There is one uaf issue in recv_work when running NBD_CLEAR_SOCK and NBD_CMD_RECONFIGURE: nbd_genl_connect // conf_ref=2 (connect and recv_work A) nbd_open // conf_ref=3…
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop In cake_drop(), qdisc_tree_reduce_backlog() is used to update the qlen and backlog of the qdisc hierarchy. Its caller, cake_enqueue(), assumes that the parent qdisc…
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx() If a link does not have an assigned channel yet, mt7996_vif_link returns NULL. We still need to store the updated queue settings in that case, and apply them…
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: hisi: Fix potential UAF in OPP handling Ensure all required data is acquired before calling dev_pm_opp_put(opp) to maintain correct resource acquisition and release order.
In the Linux kernel, the following vulnerability has been resolved: usbnet: Prevents free active kevent The root cause of this issue are: 1. When probing the usbnet device, executing usbnet_link_change(dev, 0, 0); put the kevent work in global workqueue. However, the kevent has not yet been…
Błąd w jądrze Linuxa pozwala na nieprawidłowe odczytanie typu pliku z dysku, co może prowadzić do nieautoryzowanego dostępu.
In the Linux kernel, the following vulnerability has been resolved: comedi: check device's attached status in compat ioctls Syzbot identified an issue [1] that crashes kernel, seemingly due to unexistent callback dev->get_valid_routes(). By all means, this should not occur as said callback must…
In the Linux kernel, the following vulnerability has been resolved: comedi: multiq3: sanitize config options in multiq3_attach() Syzbot identified an issue [1] in multiq3_attach() that induces a task timeout due to open() or COMEDI_DEVCONFIG ioctl operations, specifically, in the case of multiq3…
Błąd w kernelu Linux uniemożliwia przywrócenie dostępu do zapisu po zamknięciu pliku wykonywalnego.
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix unsafe locking in the scx_dump_state() For built with CONFIG_PREEMPT_RT=y kernels, the dump_lock will be converted sleepable spinlock and not disable-irq, so the following scenarios occur: inconsistent…
In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loop due to incomplete zstd-compressed data Currently, the decompression logic incorrectly spins if compressed data is truncated in crafted (deliberately corrupted) images.
In the Linux kernel, the following vulnerability has been resolved: codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext When alloc_slab_obj_exts() fails and then later succeeds in allocating a slab extension vector, it calls handle_failed_objexts_alloc() to mark…
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up The function ring_buffer_map_get_reader() is a bit more strict than the other get reader functions, and except for certain situations…
Błąd w jądrze Linuxa pozwalał na uszkodzenie pamięci sterownika przez nieprawidłowe wartości PBA.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Błąd w jądrze Linuxa w hid-lenovo-go pozwala na użycie nieaktualnego wskaźnika, co może prowadzić do nieprzewidywalnych skutków. | Błąd w jądrze Linuxa w hid-lenovo-go pozwala na użycie nieaktualnego wskaźnika, co może prowadzić do nieprzewidywalnych skutków. |
Do weryfikacji | Nieustalone | 0,2 % | ||
| Błąd w jądrze Linuxa pozwala na wyciek pamięci przy zwalnianiu bufora. | Błąd w jądrze Linuxa pozwala na wyciek pamięci przy zwalnianiu bufora. |
Do weryfikacji | Nieustalone | 0,2 % | ||
| Wyciekanie pamięci w jądrze Linuxa przez niezwolnienie pgtable w migrate_vma_insert_huge_pmd_page. | Wyciekanie pamięci w jądrze Linuxa przez niezwolnienie pgtable w migrate_vma_insert_huge_pmd_page. |
Do weryfikacji | Nieustalone | 0,2 % | ||
| Błąd dzielenia przez zero w jądrze Linuxa umożliwia awarię systemu przy błędnej wartości częstotliwości. | Błąd dzielenia przez zero w jądrze Linuxa umożliwia awarię systemu przy błędnej wartości częstotliwości. |
Do weryfikacji | Nieustalone | 0,2 % | ||
| Podwójne zwolnienie pamięci w uio_pci_generic_sva w jądrze Linuxa może prowadzić do awarii systemu. | Podwójne zwolnienie pamięci w uio_pci_generic_sva w jądrze Linuxa może prowadzić do awarii systemu. |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in… | In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() In rtl8180_init_rx_ring(), memory is allocated for skb packets and DMA allocations in a loop. When an allocation fails, the previously successful allocations… |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: backlight: led-bl: Add devlink to supplier LEDs LED Backlight is a… | In the Linux kernel, the following vulnerability has been resolved: backlight: led-bl: Add devlink to supplier LEDs LED Backlight is a consumer of one or multiple LED class devices, but devlink is currently unable to create correct supplier-producer links when the supplier is a class device. It… |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: smack: fix bug: unprivileged task can create labels If an… | In the Linux kernel, the following vulnerability has been resolved: smack: fix bug: unprivileged task can create labels If an unprivileged task is allowed to relabel itself (/smack/relabel-self is not empty), it can freely create new labels by writing their names into own… |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() In… | In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() In hfcsusb_probe(), the memory allocated for ctrl_urb gets leaked when setup_instance() fails with an error code. Fix that by freeing the urb before freeing the hw… |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect There is one… | In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect There is one use-after-free warning when running NBD_CMD_CONNECT and NBD_CLEAR_SOCK: nbd_genl_connect nbd_alloc_and_init_config // config_refs=1 nbd_start_device //… |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse The… | In the Linux kernel, the following vulnerability has been resolved: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse The following warning appears when running syzkaller, and this issue also exists in the mainline code. ------------[ cut here ]------------ list_add double add:… |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: nbd: defer config put in recv_work There is one uaf issue in… | In the Linux kernel, the following vulnerability has been resolved: nbd: defer config put in recv_work There is one uaf issue in recv_work when running NBD_CLEAR_SOCK and NBD_CMD_RECONFIGURE: nbd_genl_connect // conf_ref=2 (connect and recv_work A) nbd_open // conf_ref=3… |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop In… | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop In cake_drop(), qdisc_tree_reduce_backlog() is used to update the qlen and backlog of the qdisc hierarchy. Its caller, cake_enqueue(), assumes that the parent qdisc… |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx() If a… | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx() If a link does not have an assigned channel yet, mt7996_vif_link returns NULL. We still need to store the updated queue settings in that case, and apply them… |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: hisi: Fix potential UAF in OPP handling Ensure all… | In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: hisi: Fix potential UAF in OPP handling Ensure all required data is acquired before calling dev_pm_opp_put(opp) to maintain correct resource acquisition and release order. |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: usbnet: Prevents free active kevent The root cause of this issue… | In the Linux kernel, the following vulnerability has been resolved: usbnet: Prevents free active kevent The root cause of this issue are: 1. When probing the usbnet device, executing usbnet_link_change(dev, 0, 0); put the kevent work in global workqueue. However, the kevent has not yet been… |
Do weryfikacji | Nieustalone | 0,2 % | ||
| Błąd w jądrze Linuxa pozwala na nieprawidłowe odczytanie typu pliku z dysku, co może prowadzić do nieautoryzowanego dostępu. | Błąd w jądrze Linuxa pozwala na nieprawidłowe odczytanie typu pliku z dysku, co może prowadzić do nieautoryzowanego dostępu. |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: comedi: check device's attached status in compat ioctls Syzbot… | In the Linux kernel, the following vulnerability has been resolved: comedi: check device's attached status in compat ioctls Syzbot identified an issue [1] that crashes kernel, seemingly due to unexistent callback dev->get_valid_routes(). By all means, this should not occur as said callback must… |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: comedi: multiq3: sanitize config options in multiq3_attach() Syzbot… | In the Linux kernel, the following vulnerability has been resolved: comedi: multiq3: sanitize config options in multiq3_attach() Syzbot identified an issue [1] in multiq3_attach() that induces a task timeout due to open() or COMEDI_DEVCONFIG ioctl operations, specifically, in the case of multiq3… |
Do weryfikacji | Nieustalone | 0,2 % | ||
| Błąd w kernelu Linux uniemożliwia przywrócenie dostępu do zapisu po zamknięciu pliku wykonywalnego. | Błąd w kernelu Linux uniemożliwia przywrócenie dostępu do zapisu po zamknięciu pliku wykonywalnego. |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix unsafe locking in the scx_dump_state() For built with… | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix unsafe locking in the scx_dump_state() For built with CONFIG_PREEMPT_RT=y kernels, the dump_lock will be converted sleepable spinlock and not disable-irq, so the following scenarios occur: inconsistent… |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loop due to incomplete zstd-compressed… | In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loop due to incomplete zstd-compressed data Currently, the decompression logic incorrectly spins if compressed data is truncated in crafted (deliberately corrupted) images. |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty… | In the Linux kernel, the following vulnerability has been resolved: codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext When alloc_slab_obj_exts() fails and then later succeeds in allocating a slab extension vector, it calls handle_failed_objexts_alloc() to mark… |
Do weryfikacji | Nieustalone | 0,2 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader… | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up The function ring_buffer_map_get_reader() is a bit more strict than the other get reader functions, and except for certain situations… |
Do weryfikacji | Nieustalone | 0,2 % | ||
| Błąd w jądrze Linuxa pozwalał na uszkodzenie pamięci sterownika przez nieprawidłowe wartości PBA. | Błąd w jądrze Linuxa pozwalał na uszkodzenie pamięci sterownika przez nieprawidłowe wartości PBA. |
Do weryfikacji | Nieustalone | 0,2 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.