KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Wykonanie poleceń w captive browser pozwala na eskalację uprawnień użytkownika.
Błąd w obliczeniach pamięci ftrace w jądrze Linux prowadzi do nadmiernej alokacji stron.
In the Linux kernel, the following vulnerability has been resolved: bpf: Use array_map_meta_equal for percpu array inner map replacement percpu_array_map_ops.map_meta_equal points to the generic bpf_map_meta_equal(), which does not compare max_entries. When a percpu array serves as an inner…
In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains When a TC filter attached to a qdisc filter chain returns TC_ACT_REDIRECT (ex: via an eBPF program calling bpf_redirect() or an act_bpf action), the redirect was…
In the Linux kernel, the following vulnerability has been resolved: sched/cache: Introduce task_struct->sched_cache_grp to fix UAF Add a sched_cache_grp pointer to task_struct so that scheduler code can access the cache group directly via the task, without going through mm->sched_cache_grp.…
In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation IP-in-IP GSO can re-enter inet_gso_segment() or ipv6_gso_segment() for each nested IP header. encap_level tracks header bytes, not callback depth, so a deep chain can exhaust the…
In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in proc_dointvec_ms_jiffies_minmax Add the range check to do_proc_int_conv_ms_jiffies_minmax that commit d174174c6776 ("sysctl: replace SYSCTL_INT_CONV_CUSTOM macro with functions") incorrectly removed.
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended to be exported. Disable exporting support explicitly.
In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcp_write_data_fin When sending a DATA_FIN without data, and because the DATA_FIN occupies 1 octet of the connection-level sequence space [1], it is then required to add a DSS mapping with…
In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to…
In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched_cache_group from mm to fix UAF Currently the sched cache grouping is by mm and the scheduling statistics sched_cache_stat lives in the mm structure. This ties the life cycle of scheduling stats with…
In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpi_bus_get_primary_device() The acpi_get_first_physical_node() usage in acpi_platform_fill_resource() and acpi_create_platform_device() is generally unsafe because in theory the device returned by it may be…
In the Linux kernel, the following vulnerability has been resolved: ext4: fix transaction overflow during writeback Commit 95ad8ee45cdb ("ext4: correct the reserved credits for extent conversion") was correct to note that we need to reserve enough credits for all extents possibly underlying a…
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A chain whose command_count is zero passes the payload length check, because struct_size(payload, data, 0) is just the header. The fill loop then does not run, so…
In the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP placement id array nvme_query_fdp_info() is called per-path and therefore prone to races. It populates head->nr_plids/head->plids for fdp registration. But nothing protects that pair from concurrent…
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local leak in write_mft_record_nolock() error paths write_mft_record_nolock() maps the MFT record folio with kmap_local_folio(), but the pre_write_mst_fixup() and bio_add_folio() failure paths jump to the error…
In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure update_reparse_data() ignores the return value of set_reparse_index(). When index insertion fails, the code removes the just-written reparse data as cleanup but still returns 0,…
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put the chained BO when its mapping fails amdxdna_cmd_set_error() looks up the first BO of a command chain, which takes a reference, and drops it at the end of the function. The mapping of that BO is established…
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time (most of it the two inlined dc_scratch_space copies) and now sits close to the page allocator's 4 MiB contiguous allocation limit. Its…
Nieprawidłowa kontrola dostępu w Infiniflow umożliwia nieautoryzowane operacje między sesjami.
Luki w Langchain-Chatchat umożliwiają atakującemu zapis danych w dowolnej lokalizacji.
Błąd kontroli dostępu w Infiniflow umożliwia nieautoryzowany dostęp do danych.
Nieprawidłowa kontrola dostępu w Infiniflow umożliwia nieautoryzowany dostęp do danych.
W podatnej funkcji save_code_to_project w Devika v1.0 można zapisać pliki poza dozwolonym obszarem, co zagraża serwerowi.
Problem z przejściem ścieżki w deeptutor 1.4.0 pozwala na edycję plików poza dozwolonym obszarem.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Wykonanie poleceń w captive browser pozwala na eskalację uprawnień użytkownika. | Wykonanie poleceń w captive browser pozwala na eskalację uprawnień użytkownika. |
Do weryfikacji | Nieustalone | 0,15 % | ||
| Błąd w obliczeniach pamięci ftrace w jądrze Linux prowadzi do nadmiernej alokacji stron. | Błąd w obliczeniach pamięci ftrace w jądrze Linux prowadzi do nadmiernej alokacji stron. |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: bpf: Use array_map_meta_equal for percpu array inner map… | In the Linux kernel, the following vulnerability has been resolved: bpf: Use array_map_meta_equal for percpu array inner map replacement percpu_array_map_ops.map_meta_equal points to the generic bpf_map_meta_equal(), which does not compare max_entries. When a percpu array serves as an inner… |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains When a TC… | In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains When a TC filter attached to a qdisc filter chain returns TC_ACT_REDIRECT (ex: via an eBPF program calling bpf_redirect() or an act_bpf action), the redirect was… |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: sched/cache: Introduce task_struct->sched_cache_grp to fix UAF Add a… | In the Linux kernel, the following vulnerability has been resolved: sched/cache: Introduce task_struct->sched_cache_grp to fix UAF Add a sched_cache_grp pointer to task_struct so that scheduler code can access the cache group directly via the task, without going through mm->sched_cache_grp.… |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation IP-in-IP GSO can… | In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation IP-in-IP GSO can re-enter inet_gso_segment() or ipv6_gso_segment() for each nested IP header. encap_level tracks header bytes, not callback depth, so a deep chain can exhaust the… |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in proc_dointvec_ms_jiffies_minmax Add the… | In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in proc_dointvec_ms_jiffies_minmax Add the range check to do_proc_int_conv_ms_jiffies_minmax that commit d174174c6776 ("sysctl: replace SYSCTL_INT_CONV_CUSTOM macro with functions") incorrectly removed. |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are… | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended to be exported. Disable exporting support explicitly. |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcp_write_data_fin When… | In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcp_write_data_fin When sending a DATA_FIN without data, and because the DATA_FIN occupies 1 octet of the connection-level sequence space [1], it is then required to add a DSS mapping with… |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async… | In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to… |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched_cache_group from mm to fix UAF Currently… | In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched_cache_group from mm to fix UAF Currently the sched cache grouping is by mm and the scheduling statistics sched_cache_stat lives in the mm structure. This ties the life cycle of scheduling stats with… |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpi_bus_get_primary_device() The… | In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpi_bus_get_primary_device() The acpi_get_first_physical_node() usage in acpi_platform_fill_resource() and acpi_create_platform_device() is generally unsafe because in theory the device returned by it may be… |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ext4: fix transaction overflow during writeback Commit 95ad8ee45cdb… | In the Linux kernel, the following vulnerability has been resolved: ext4: fix transaction overflow during writeback Commit 95ad8ee45cdb ("ext4: correct the reserved credits for extent conversion") was correct to note that we need to reserve enough credits for all extents possibly underlying a… |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A… | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A chain whose command_count is zero passes the payload length check, because struct_size(payload, data, 0) is just the header. The fill loop then does not run, so… |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP placement id… | In the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP placement id array nvme_query_fdp_info() is called per-path and therefore prone to races. It populates head->nr_plids/head->plids for fdp registration. But nothing protects that pair from concurrent… |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local leak in write_mft_record_nolock() error… | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local leak in write_mft_record_nolock() error paths write_mft_record_nolock() maps the MFT record folio with kmap_local_folio(), but the pre_write_mst_fixup() and bio_add_folio() failure paths jump to the error… |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion… | In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure update_reparse_data() ignores the return value of set_reparse_index(). When index insertion fails, the code removes the just-written reparse data as cleanup but still returns 0,… |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put the chained BO when its mapping… | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put the chained BO when its mapping fails amdxdna_cmd_set_error() looks up the first BO of a command chain, which takes a reference, and drops it at the end of the function. The mapping of that BO is established… |
Do weryfikacji | Nieustalone | 0,15 % | ||
| In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has… | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time (most of it the two inlined dc_scratch_space copies) and now sits close to the page allocator's 4 MiB contiguous allocation limit. Its… |
Do weryfikacji | Nieustalone | 0,15 % | ||
| Nieprawidłowa kontrola dostępu w Infiniflow umożliwia nieautoryzowane operacje między sesjami. | Nieprawidłowa kontrola dostępu w Infiniflow umożliwia nieautoryzowane operacje między sesjami. |
Do weryfikacji | Nieustalone | 0,14 % | ||
| Luki w Langchain-Chatchat umożliwiają atakującemu zapis danych w dowolnej lokalizacji. | Luki w Langchain-Chatchat umożliwiają atakującemu zapis danych w dowolnej lokalizacji. |
Do weryfikacji | Nieustalone | 0,14 % | ||
| Błąd kontroli dostępu w Infiniflow umożliwia nieautoryzowany dostęp do danych. | Błąd kontroli dostępu w Infiniflow umożliwia nieautoryzowany dostęp do danych. |
Do weryfikacji | Nieustalone | 0,14 % | ||
| Nieprawidłowa kontrola dostępu w Infiniflow umożliwia nieautoryzowany dostęp do danych. | Nieprawidłowa kontrola dostępu w Infiniflow umożliwia nieautoryzowany dostęp do danych. |
Do weryfikacji | Nieustalone | 0,14 % | ||
| W podatnej funkcji save_code_to_project w Devika v1.0 można zapisać pliki poza dozwolonym obszarem, co zagraża serwerowi. | W podatnej funkcji save_code_to_project w Devika v1.0 można zapisać pliki poza dozwolonym obszarem, co zagraża serwerowi. |
Do weryfikacji | Nieustalone | 0,14 % | ||
| Problem z przejściem ścieżki w deeptutor 1.4.0 pozwala na edycję plików poza dozwolonym obszarem. | Problem z przejściem ścieżki w deeptutor 1.4.0 pozwala na edycję plików poza dozwolonym obszarem. |
Do weryfikacji | Nieustalone | 0,14 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.