Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
dibs: initialise dibs->lock in dibs_dev_alloc()
dibs->lock is initialised by dibs_dev_add(), but a dibs device can
already take interrupts before that call: ism_probe() runs
ism_dev_init(), and hence request_irq(), before it…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
tls: rx: restore msg_iter before TLS 1.3 optimistic retry
tls_decrypt_sg() advances msg->msg_iter when it maps user pages for
the optimistic TLS 1.3 zero-copy path. If the decrypted record turns
out not to be unpadded…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
mm/filemap: __filemap_add_folio() restore index before retrying
In __filemap_add_folio()'s split-a-conflict loop, xas_set_order() is
applied repeatedly: each application modifies xas.xa_index, rounding it
down according to the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix UAF in rxgk_issue_challenge()
Fix rxgk_issue_challenge() to free the page containing the challenge
content after invoking the tracepoint as the whdr passed to the tracepoint
points into the page just freed.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix double unlock in rxrpc_recvmsg()
Fix a double unlock in rxrpc_recvmsg() when dealing with OOB messages.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
nvme: fix FDP fdpcidx bounds check
The fdpcidx bounds check sets n = NUMFDPC + 1 but used > instead of >=,
incorrectly accepting fdp_idx when it equals n (i.e. NUMFDPC + 1).
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
bnxt: fix head underflow on XDP head-grow
The xdp.py test test_xdp_native_adjst_head_grow_data crashes when run on
a bnxt machine (and also crashes in NIPA).
It seems that the bug is an underflow in bnxt_rx_multi_page_skb,…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Replace waitqueue and flag with completion
The driver previously used a waitqueue along with an explicit
request_done flag, but without proper barriers around request_done.
An earlier patch by Gui-Dong Han…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ipv6: ioam: fix type confusion of dst_entry
IOAM uses a dummy dst_entry(null_dst) to mark that the destination should
not be changed after the transformation. This dst is stored in the IOAM lwt
state and may be passed to…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix netfs_create_write_req() to handle async cache object creation
netfs_create_write_req() will skip caching if the fscache cookie is
disabled, but this is a problem because async cache object creation might
not have got…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix barriering when walking subrequest list
Fix the barriering used when walking the subrequest list in retry as
there's a possibility of seeing a subreq that's just been added by the
application thread.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ntfs: detect mapping-pairs LCN accumulator overflow
The NTFS mapping-pairs parser accumulates relative LCN deltas in a
signed integer. A corrupted attribute can drive that addition past
the representable range.
One corrupt…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net: mana: Sync page pool RX frags for CPU
MANA allocates RX buffers from page pool fragments when frag_count is
greater than 1. In that case the buffers remain DMA mapped by page pool
and the RX completion path does not call…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument username/password results in sql injection. The attack may be…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
CVSS
9,8
EPSS
0,65 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
In the Linux kernel, the following vulnerability has been resolved:
dibs: initialise dibs->lock in dibs_dev_alloc()
dibs->lock is initialised by dibs_dev_add(), but a dibs device can
already take interrupts before that call: ism_probe() runs
ism_dev_init(), and hence request_irq(), before it…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
tls: rx: restore msg_iter before TLS 1.3 optimistic retry
tls_decrypt_sg() advances msg->msg_iter when it maps user pages for
the optimistic TLS 1.3 zero-copy path. If the decrypted record turns
out not to be unpadded…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
mm/filemap: __filemap_add_folio() restore index before retrying
In __filemap_add_folio()'s split-a-conflict loop, xas_set_order() is
applied repeatedly: each application modifies xas.xa_index, rounding it
down according to the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix UAF in rxgk_issue_challenge()
Fix rxgk_issue_challenge() to free the page containing the challenge
content after invoking the tracepoint as the whdr passed to the tracepoint
points into the page just freed.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix double unlock in rxrpc_recvmsg()
Fix a double unlock in rxrpc_recvmsg() when dealing with OOB messages.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
nvme: fix FDP fdpcidx bounds check
The fdpcidx bounds check sets n = NUMFDPC + 1 but used > instead of >=,
incorrectly accepting fdp_idx when it equals n (i.e. NUMFDPC + 1).
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
bnxt: fix head underflow on XDP head-grow
The xdp.py test test_xdp_native_adjst_head_grow_data crashes when run on
a bnxt machine (and also crashes in NIPA).
It seems that the bug is an underflow in bnxt_rx_multi_page_skb,…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Replace waitqueue and flag with completion
The driver previously used a waitqueue along with an explicit
request_done flag, but without proper barriers around request_done.
An earlier patch by Gui-Dong Han…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ipv6: ioam: fix type confusion of dst_entry
IOAM uses a dummy dst_entry(null_dst) to mark that the destination should
not be changed after the transformation. This dst is stored in the IOAM lwt
state and may be passed to…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix netfs_create_write_req() to handle async cache object creation
netfs_create_write_req() will skip caching if the fscache cookie is
disabled, but this is a problem because async cache object creation might
not have got…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix barriering when walking subrequest list
Fix the barriering used when walking the subrequest list in retry as
there's a possibility of seeing a subreq that's just been added by the
application thread.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ntfs: detect mapping-pairs LCN accumulator overflow
The NTFS mapping-pairs parser accumulates relative LCN deltas in a
signed integer. A corrupted attribute can drive that addition past
the representable range.
One corrupt…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net: mana: Sync page pool RX frags for CPU
MANA allocates RX buffers from page pool fragments when frag_count is
greater than 1. In that case the buffers remain DMA mapped by page pool
and the RX completion path does not call…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument username/password results in sql injection. The attack may be…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
9,8
0,65 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.