Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry
device_pasid_table_teardown() zeroes the 128-bit scalable-mode context
entry with context_clear_entry() while the Present bit is still set.…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI NetworkAcknowledgement React component (NetworkAcknowledgement.jsx:42). A malicious actor can inject script into stored network acknowledgement data that executes in…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Sign-extend VA for range-based TLBI invalidation
When the decode_range_tlbi() helper was moved to be used for S1 TLBIs,
the required sign extension was omitted. Add it.
As a result, special care must be taken to not…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Remove VM-wide VNCR mapping counter
The global VNCR mapping counter is used to decide whether an L1
provided VNCR page is mapped in L0 on any CPU at the point of
dealing with a TLB invalidation. It is incremented…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry
A VNCR TLB invalidation can occur on one vcpu while another vcpu is
faulting in this same page. Without correctly handling this, we can
end up with the…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Correctly handle end of VA space TLBI invalidation
Our TLB invalidation by VA code is based on comparing two ranges,
one defined by the TLB, and one defined by the TLBI instruction.
Each range is defined by a start…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
idpf: bound interrupt-vector register fill to the allocated array
idpf_get_reg_intr_vecs() fills the caller-allocated reg_vals[] array from
the VIRTCHNL2_OP_ALLOC_VECTORS reply in adapter->req_vec_chunks, bounding
its inner loop…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE
arm_vsmmu_vsid_to_sid() maps a guest's vSID to a single physical Stream ID
taken from master->streams[0], assuming a device has exactly one stream. A
device…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Avoid repeated requests to allocate WC pages
Applications can request multiple WC pages for the same ucontext.
As of now, only 1 WC page per ucontext is supported. Add a lock to
avoid concurrent access and a check…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory
When constructing an L1 VNCR mapping, KVM unconditionally uses cacheable
memory attributes, even if the underlying PFN isn't memory. This gets
particularly hairy if…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: nv: Re-translate VNCR before injecting abort
KVM faults in the VNCR page with FOLL_WRITE whenever the guest aborts
for a write, similar to how a regular stage-2 mapping is handled. It is
entirely possible that the…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,69 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net/liquidio: drop cached VF pci_dev LUT
The PF SR-IOV enable path caches VF pci_dev pointers in
dpiring_to_vfpcidev_lut[] by iterating with pci_get_device(). Those
entries do not own a reference, because the iterator drops the…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
vhost/net: complete zerocopy ubufs only once
vhost-net initializes one ubuf_info per outstanding zerocopy TX
descriptor and hands it to the backend socket. The networking stack may
then clone a zerocopy skb before all skb…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
When the service of ABP and AES is installed in a directory writable by non-administrative users, an attacker can replace or plant a DLL with the same name as one loaded by the service. Upon service restart, the malicious DLL is loaded and executed under the LocalSystem account, resulting in…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic: Fix race between LPI release and re-registration
Fix a potential race between decrementing an LPI's reference count and
evicting that structure from the LPI xarray.
LPI structures are maintained in the VGIC…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BGP Monitoring…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,69 % · rekomendacja wg zapisanej polityki
CVSS
9,2
EPSS
0,69 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry
device_pasid_table_teardown() zeroes the 128-bit scalable-mode context
entry with context_clear_entry() while the Present bit is still set.…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI NetworkAcknowledgement React component (NetworkAcknowledgement.jsx:42). A malicious actor can inject script into stored network acknowledgement data that executes in…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Sign-extend VA for range-based TLBI invalidation
When the decode_range_tlbi() helper was moved to be used for S1 TLBIs,
the required sign extension was omitted. Add it.
As a result, special care must be taken to not…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Remove VM-wide VNCR mapping counter
The global VNCR mapping counter is used to decide whether an L1
provided VNCR page is mapped in L0 on any CPU at the point of
dealing with a TLB invalidation. It is incremented…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry
A VNCR TLB invalidation can occur on one vcpu while another vcpu is
faulting in this same page. Without correctly handling this, we can
end up with the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Correctly handle end of VA space TLBI invalidation
Our TLB invalidation by VA code is based on comparing two ranges,
one defined by the TLB, and one defined by the TLBI instruction.
Each range is defined by a start…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
idpf: bound interrupt-vector register fill to the allocated array
idpf_get_reg_intr_vecs() fills the caller-allocated reg_vals[] array from
the VIRTCHNL2_OP_ALLOC_VECTORS reply in adapter->req_vec_chunks, bounding
its inner loop…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE
arm_vsmmu_vsid_to_sid() maps a guest's vSID to a single physical Stream ID
taken from master->streams[0], assuming a device has exactly one stream. A
device…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Avoid repeated requests to allocate WC pages
Applications can request multiple WC pages for the same ucontext.
As of now, only 1 WC page per ucontext is supported. Add a lock to
avoid concurrent access and a check…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory
When constructing an L1 VNCR mapping, KVM unconditionally uses cacheable
memory attributes, even if the underlying PFN isn't memory. This gets
particularly hairy if…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: nv: Re-translate VNCR before injecting abort
KVM faults in the VNCR page with FOLL_WRITE whenever the guest aborts
for a write, similar to how a regular stage-2 mapping is handled. It is
entirely possible that the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,69 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are not…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net/liquidio: drop cached VF pci_dev LUT
The PF SR-IOV enable path caches VF pci_dev pointers in
dpiring_to_vfpcidev_lut[] by iterating with pci_get_device(). Those
entries do not own a reference, because the iterator drops the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
vhost/net: complete zerocopy ubufs only once
vhost-net initializes one ubuf_info per outstanding zerocopy TX
descriptor and hands it to the backend socket. The networking stack may
then clone a zerocopy skb before all skb…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
When the service of ABP and AES is installed in a directory writable by non-administrative users, an attacker can replace or plant a DLL with the same name as one loaded by the service. Upon service restart, the malicious DLL is loaded and executed under the LocalSystem account, resulting in…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic: Fix race between LPI release and re-registration
Fix a potential race between decrementing an LPI's reference count and
evicting that structure from the LPI xarray.
LPI structures are maintained in the VGIC…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BGP Monitoring…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,69 % · rekomendacja wg zapisanej polityki
9,2
0,69 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.