diff --git a/advisories/unreviewed/2022/05/GHSA-6q2j-8h8q-46mr/GHSA-6q2j-8h8q-46mr.json b/advisories/github-reviewed/2022/05/GHSA-6q2j-8h8q-46mr/GHSA-6q2j-8h8q-46mr.json similarity index 67% rename from advisories/unreviewed/2022/05/GHSA-6q2j-8h8q-46mr/GHSA-6q2j-8h8q-46mr.json rename to advisories/github-reviewed/2022/05/GHSA-6q2j-8h8q-46mr/GHSA-6q2j-8h8q-46mr.json index d39bab3bd42..eccf8512c12 100644 --- a/advisories/unreviewed/2022/05/GHSA-6q2j-8h8q-46mr/GHSA-6q2j-8h8q-46mr.json +++ b/advisories/github-reviewed/2022/05/GHSA-6q2j-8h8q-46mr/GHSA-6q2j-8h8q-46mr.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-6q2j-8h8q-46mr", - "modified": "2025-04-12T13:01:41Z", + "modified": "2025-04-14T21:32:57Z", "published": "2022-05-14T02:08:58Z", "aliases": [ "CVE-2016-5705" ], + "summary": "phpMyAdmin vulnerable to Cross-site Scripting", "details": "Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) server-privileges certificate data fields on the user privileges page, (2) an \"invalid JSON\" error message in the error console, (3) a database name in the central columns implementation, (4) a group name, or (5) a search name in the bookmarks implementation.", "severity": [ { @@ -13,7 +14,46 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "phpmyadmin/phpmyadmin" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.4.0" + }, + { + "fixed": "4.4.15.7" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "phpmyadmin/phpmyadmin" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.6.0" + }, + { + "fixed": "4.6.3" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", @@ -39,10 +79,18 @@ "type": "WEB", "url": "https://github.com/phpmyadmin/phpmyadmin/commit/57ae483bad33059a885366d5445b7e1f6f29860a" }, + { + "type": "PACKAGE", + "url": "https://github.com/phpmyadmin/phpmyadmin" + }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/201701-32" }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20200227223416/http://www.securityfocus.com/bid/91378" + }, { "type": "WEB", "url": "https://www.phpmyadmin.net/security/PMASA-2016-21" @@ -58,10 +106,6 @@ { "type": "WEB", "url": "http://www.debian.org/security/2016/dsa-3627" - }, - { - "type": "WEB", - "url": "http://www.securityfocus.com/bid/91378" } ], "database_specific": { @@ -69,8 +113,8 @@ "CWE-79" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-04-14T21:32:57Z", "nvd_published_at": "2016-07-03T01:59:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-cr65-p662-fx5c/GHSA-cr65-p662-fx5c.json b/advisories/github-reviewed/2022/05/GHSA-cr65-p662-fx5c/GHSA-cr65-p662-fx5c.json similarity index 65% rename from advisories/unreviewed/2022/05/GHSA-cr65-p662-fx5c/GHSA-cr65-p662-fx5c.json rename to advisories/github-reviewed/2022/05/GHSA-cr65-p662-fx5c/GHSA-cr65-p662-fx5c.json index d48dc6445cf..5dd123e0e99 100644 --- a/advisories/unreviewed/2022/05/GHSA-cr65-p662-fx5c/GHSA-cr65-p662-fx5c.json +++ b/advisories/github-reviewed/2022/05/GHSA-cr65-p662-fx5c/GHSA-cr65-p662-fx5c.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-cr65-p662-fx5c", - "modified": "2025-04-12T13:01:41Z", + "modified": "2025-04-14T21:33:31Z", "published": "2022-05-14T02:08:58Z", "aliases": [ "CVE-2016-5733" ], + "summary": "phpMyAdmin vulnerable to Cross-site Scripting", "details": "Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted table name that is mishandled during privilege checking in table_row.phtml, (2) a crafted mysqld log_bin directive that is mishandled in log_selector.phtml, (3) the Transformation implementation, (4) AJAX error handling in js/ajax.js, (5) the Designer implementation, (6) the charts implementation in js/tbl_chart.js, or (7) the zoom-search implementation in rows_zoom.phtml.", "severity": [ { @@ -13,7 +14,65 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "phpmyadmin/phpmyadmin" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.0.10.0" + }, + { + "fixed": "4.0.10.16" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "phpmyadmin/phpmyadmin" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.4.15.0" + }, + { + "fixed": "4.4.15.7" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Packagist", + "name": "phpmyadmin/phpmyadmin" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "4.6.0" + }, + { + "fixed": "4.6.3" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", @@ -51,10 +110,18 @@ "type": "WEB", "url": "https://github.com/phpmyadmin/phpmyadmin/commit/d648ade18d6cbb796a93261491c121f078df2d88" }, + { + "type": "PACKAGE", + "url": "https://github.com/phpmyadmin/phpmyadmin" + }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/201701-32" }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20200227223017/http://www.securityfocus.com/bid/91390" + }, { "type": "WEB", "url": "https://www.phpmyadmin.net/security/PMASA-2016-26" @@ -70,10 +137,6 @@ { "type": "WEB", "url": "http://www.debian.org/security/2016/dsa-3627" - }, - { - "type": "WEB", - "url": "http://www.securityfocus.com/bid/91390" } ], "database_specific": { @@ -81,8 +144,8 @@ "CWE-79" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-04-14T21:33:31Z", "nvd_published_at": "2016-07-03T01:59:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-r9rq-mhxg-686q/GHSA-r9rq-mhxg-686q.json b/advisories/unreviewed/2022/05/GHSA-r9rq-mhxg-686q/GHSA-r9rq-mhxg-686q.json index b170d2fa962..ee4d25b2363 100644 --- a/advisories/unreviewed/2022/05/GHSA-r9rq-mhxg-686q/GHSA-r9rq-mhxg-686q.json +++ b/advisories/unreviewed/2022/05/GHSA-r9rq-mhxg-686q/GHSA-r9rq-mhxg-686q.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-r9rq-mhxg-686q", - "modified": "2022-05-14T00:55:31Z", + "modified": "2025-04-14T21:32:17Z", "published": "2022-05-14T00:55:31Z", "aliases": [ "CVE-2018-1000156" @@ -19,6 +19,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000156" }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20180405231329/https://twitter.com/kurtseifried/status/982028968877436928" + }, { "type": "WEB", "url": "https://usn.ubuntu.com/3624-2" diff --git a/advisories/unreviewed/2022/12/GHSA-29f7-g67q-jv68/GHSA-29f7-g67q-jv68.json b/advisories/unreviewed/2022/12/GHSA-29f7-g67q-jv68/GHSA-29f7-g67q-jv68.json index 280096b211a..60e75f3e037 100644 --- a/advisories/unreviewed/2022/12/GHSA-29f7-g67q-jv68/GHSA-29f7-g67q-jv68.json +++ b/advisories/unreviewed/2022/12/GHSA-29f7-g67q-jv68/GHSA-29f7-g67q-jv68.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-29f7-g67q-jv68", - "modified": "2023-01-05T03:30:36Z", + "modified": "2025-04-14T21:32:17Z", "published": "2022-12-25T21:30:22Z", "aliases": [ "CVE-2022-40005" diff --git a/advisories/unreviewed/2022/12/GHSA-c5f7-v4rr-qv23/GHSA-c5f7-v4rr-qv23.json b/advisories/unreviewed/2022/12/GHSA-c5f7-v4rr-qv23/GHSA-c5f7-v4rr-qv23.json index 0408c7a2363..d175024a10f 100644 --- a/advisories/unreviewed/2022/12/GHSA-c5f7-v4rr-qv23/GHSA-c5f7-v4rr-qv23.json +++ b/advisories/unreviewed/2022/12/GHSA-c5f7-v4rr-qv23/GHSA-c5f7-v4rr-qv23.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-c5f7-v4rr-qv23", - "modified": "2022-12-30T18:30:45Z", + "modified": "2025-04-14T21:32:17Z", "published": "2022-12-23T18:30:41Z", "aliases": [ "CVE-2022-47939" diff --git a/advisories/unreviewed/2022/12/GHSA-pchh-rhx4-655j/GHSA-pchh-rhx4-655j.json b/advisories/unreviewed/2022/12/GHSA-pchh-rhx4-655j/GHSA-pchh-rhx4-655j.json index 31b0c953aaa..c5ba1f5ca46 100644 --- a/advisories/unreviewed/2022/12/GHSA-pchh-rhx4-655j/GHSA-pchh-rhx4-655j.json +++ b/advisories/unreviewed/2022/12/GHSA-pchh-rhx4-655j/GHSA-pchh-rhx4-655j.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-pchh-rhx4-655j", - "modified": "2022-12-19T15:30:29Z", + "modified": "2025-04-14T21:32:16Z", "published": "2022-12-14T21:30:16Z", "aliases": [ "CVE-2022-4283" diff --git a/advisories/unreviewed/2024/01/GHSA-prhq-c3gx-jhwg/GHSA-prhq-c3gx-jhwg.json b/advisories/unreviewed/2024/01/GHSA-prhq-c3gx-jhwg/GHSA-prhq-c3gx-jhwg.json index 17e5f560cd6..f32e842d8d7 100644 --- a/advisories/unreviewed/2024/01/GHSA-prhq-c3gx-jhwg/GHSA-prhq-c3gx-jhwg.json +++ b/advisories/unreviewed/2024/01/GHSA-prhq-c3gx-jhwg/GHSA-prhq-c3gx-jhwg.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-prhq-c3gx-jhwg", - "modified": "2024-06-27T15:30:37Z", + "modified": "2025-04-14T21:32:19Z", "published": "2024-01-04T18:30:21Z", "aliases": [ "CVE-2023-6270" @@ -34,6 +34,10 @@ { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html" + }, + { + "type": "WEB", + "url": "https://web.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/drivers/block/aoe?h=v6.9&id=f98364e926626c678fb4b9004b75cacf92ff0662" } ], "database_specific": { diff --git a/advisories/unreviewed/2025/03/GHSA-57pw-gf47-fr76/GHSA-57pw-gf47-fr76.json b/advisories/unreviewed/2025/03/GHSA-57pw-gf47-fr76/GHSA-57pw-gf47-fr76.json index 7f91f3bdf38..386b0389f21 100644 --- a/advisories/unreviewed/2025/03/GHSA-57pw-gf47-fr76/GHSA-57pw-gf47-fr76.json +++ b/advisories/unreviewed/2025/03/GHSA-57pw-gf47-fr76/GHSA-57pw-gf47-fr76.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-57pw-gf47-fr76", - "modified": "2025-03-27T18:31:24Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:24Z", "aliases": [ "CVE-2022-49756" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nphy: usb: sunplus: Fix potential null-ptr-deref in sp_usb_phy_probe()\n\nsp_usb_phy_probe() will call platform_get_resource_byname() that may fail\nand return NULL. devm_ioremap() will use usbphy->moon4_res_mem->start as\ninput, which may causes null-ptr-deref. Check the ret value of\nplatform_get_resource_byname() to avoid the null-ptr-deref.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -24,8 +29,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:40Z" diff --git a/advisories/unreviewed/2025/03/GHSA-82wr-7889-862x/GHSA-82wr-7889-862x.json b/advisories/unreviewed/2025/03/GHSA-82wr-7889-862x/GHSA-82wr-7889-862x.json index 9e440c3f5bc..5bd79d461b2 100644 --- a/advisories/unreviewed/2025/03/GHSA-82wr-7889-862x/GHSA-82wr-7889-862x.json +++ b/advisories/unreviewed/2025/03/GHSA-82wr-7889-862x/GHSA-82wr-7889-862x.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-82wr-7889-862x", - "modified": "2025-03-27T18:31:28Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:28Z", "aliases": [ "CVE-2023-53013" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nptdma: pt_core_execute_cmd() should use spinlock\n\nThe interrupt handler (pt_core_irq_handler()) of the ptdma\ndriver can be called from interrupt context. The code flow\nin this function can lead down to pt_core_execute_cmd() which\nwill attempt to grab a mutex, which is not appropriate in\ninterrupt context and ultimately leads to a kernel panic.\nThe fix here changes this mutex to a spinlock, which has\nbeen verified to resolve the issue.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -28,8 +33,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-667" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:50Z" diff --git a/advisories/unreviewed/2025/03/GHSA-88rq-q8gm-2chx/GHSA-88rq-q8gm-2chx.json b/advisories/unreviewed/2025/03/GHSA-88rq-q8gm-2chx/GHSA-88rq-q8gm-2chx.json index 69414e2179c..2b9a9d09311 100644 --- a/advisories/unreviewed/2025/03/GHSA-88rq-q8gm-2chx/GHSA-88rq-q8gm-2chx.json +++ b/advisories/unreviewed/2025/03/GHSA-88rq-q8gm-2chx/GHSA-88rq-q8gm-2chx.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-88rq-q8gm-2chx", - "modified": "2025-03-27T18:31:24Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:23Z", "aliases": [ "CVE-2022-49742" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: initialize locks earlier in f2fs_fill_super()\n\nsyzbot is reporting lockdep warning at f2fs_handle_error() [1], for\nspin_lock(&sbi->error_lock) is called before spin_lock_init() is called.\nFor safe locking in error handling, move initialization of locks (and\nobvious structures) in f2fs_fill_super() to immediately after memory\nallocation.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -24,8 +29,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-667" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:38Z" diff --git a/advisories/unreviewed/2025/03/GHSA-8qj8-x8gq-98wm/GHSA-8qj8-x8gq-98wm.json b/advisories/unreviewed/2025/03/GHSA-8qj8-x8gq-98wm/GHSA-8qj8-x8gq-98wm.json index 55a70773c0d..99b9cce422f 100644 --- a/advisories/unreviewed/2025/03/GHSA-8qj8-x8gq-98wm/GHSA-8qj8-x8gq-98wm.json +++ b/advisories/unreviewed/2025/03/GHSA-8qj8-x8gq-98wm/GHSA-8qj8-x8gq-98wm.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-8qj8-x8gq-98wm", - "modified": "2025-03-27T18:31:24Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:24Z", "aliases": [ "CVE-2022-49752" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndevice property: fix of node refcount leak in fwnode_graph_get_next_endpoint()\n\nThe 'parent' returned by fwnode_graph_get_port_parent()\nwith refcount incremented when 'prev' is not NULL, it\nneeds be put when finish using it.\n\nBecause the parent is const, introduce a new variable to\nstore the returned fwnode, then put it before returning\nfrom fwnode_graph_get_next_endpoint().", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -29,7 +34,7 @@ ], "database_specific": { "cwe_ids": [], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:40Z" diff --git a/advisories/unreviewed/2025/03/GHSA-c2pc-4ww4-m54p/GHSA-c2pc-4ww4-m54p.json b/advisories/unreviewed/2025/03/GHSA-c2pc-4ww4-m54p/GHSA-c2pc-4ww4-m54p.json index a8bae9c6a32..b0a9d19fecf 100644 --- a/advisories/unreviewed/2025/03/GHSA-c2pc-4ww4-m54p/GHSA-c2pc-4ww4-m54p.json +++ b/advisories/unreviewed/2025/03/GHSA-c2pc-4ww4-m54p/GHSA-c2pc-4ww4-m54p.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-c2pc-4ww4-m54p", - "modified": "2025-03-27T18:31:24Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:24Z", "aliases": [ "CVE-2022-49746" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init\n\nIf the function sdma_load_context() fails, the sdma_desc will be\nfreed, but the allocated desc->bd is forgot to be freed.\n\nWe already met the sdma_load_context() failure case and the log as\nbelow:\n[ 450.699064] imx-sdma 30bd0000.dma-controller: Timeout waiting for CH0 ready\n...\n\nIn this case, the desc->bd will not be freed without this change.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -40,8 +45,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-401" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:39Z" diff --git a/advisories/unreviewed/2025/03/GHSA-cx4p-cv2h-hf45/GHSA-cx4p-cv2h-hf45.json b/advisories/unreviewed/2025/03/GHSA-cx4p-cv2h-hf45/GHSA-cx4p-cv2h-hf45.json index f0416110f25..afd9ba791b4 100644 --- a/advisories/unreviewed/2025/03/GHSA-cx4p-cv2h-hf45/GHSA-cx4p-cv2h-hf45.json +++ b/advisories/unreviewed/2025/03/GHSA-cx4p-cv2h-hf45/GHSA-cx4p-cv2h-hf45.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-cx4p-cv2h-hf45", - "modified": "2025-03-27T18:31:24Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:24Z", "aliases": [ "CVE-2022-49741" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: smscufx: fix error handling code in ufx_usb_probe\n\nThe current error handling code in ufx_usb_probe have many unmatching\nissues, e.g., missing ufx_free_usb_list, destroy_modedb label should\nonly include framebuffer_release, fb_dealloc_cmap only matches\nfb_alloc_cmap.\n\nMy local syzkaller reports a memory leak bug:\n\nmemory leak in ufx_usb_probe\n\nBUG: memory leak\nunreferenced object 0xffff88802f879580 (size 128):\n comm \"kworker/0:7\", pid 17416, jiffies 4295067474 (age 46.710s)\n hex dump (first 32 bytes):\n 80 21 7c 2e 80 88 ff ff 18 d0 d0 0c 80 88 ff ff .!|.............\n 00 d0 d0 0c 80 88 ff ff e0 ff ff ff 0f 00 00 00 ................\n backtrace:\n [] kmalloc_trace+0x20/0x90 mm/slab_common.c:1045\n [] kmalloc include/linux/slab.h:553 [inline]\n [] kzalloc include/linux/slab.h:689 [inline]\n [] ufx_alloc_urb_list drivers/video/fbdev/smscufx.c:1873 [inline]\n [] ufx_usb_probe+0x11c/0x15a0 drivers/video/fbdev/smscufx.c:1655\n [] usb_probe_interface+0x177/0x370 drivers/usb/core/driver.c:396\n [] call_driver_probe drivers/base/dd.c:560 [inline]\n [] really_probe+0x12d/0x390 drivers/base/dd.c:639\n [] __driver_probe_device+0xbf/0x140 drivers/base/dd.c:778\n [] driver_probe_device+0x2a/0x120 drivers/base/dd.c:808\n [] __device_attach_driver+0xf7/0x150 drivers/base/dd.c:936\n [] bus_for_each_drv+0xb7/0x100 drivers/base/bus.c:427\n [] __device_attach+0x105/0x2d0 drivers/base/dd.c:1008\n [] bus_probe_device+0xc6/0xe0 drivers/base/bus.c:487\n [] device_add+0x642/0xdc0 drivers/base/core.c:3517\n [] usb_set_configuration+0x8ef/0xb80 drivers/usb/core/message.c:2170\n [] usb_generic_driver_probe+0x8c/0xc0 drivers/usb/core/generic.c:238\n [] usb_probe_device+0x5c/0x140 drivers/usb/core/driver.c:293\n [] call_driver_probe drivers/base/dd.c:560 [inline]\n [] really_probe+0x12d/0x390 drivers/base/dd.c:639\n [] __driver_probe_device+0xbf/0x140 drivers/base/dd.c:778\n\nFix this bug by rewriting the error handling code in ufx_usb_probe.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -36,8 +41,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-401" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:38Z" diff --git a/advisories/unreviewed/2025/03/GHSA-fcmx-wvw9-587f/GHSA-fcmx-wvw9-587f.json b/advisories/unreviewed/2025/03/GHSA-fcmx-wvw9-587f/GHSA-fcmx-wvw9-587f.json index ed145e0585c..8dcbf92bf9b 100644 --- a/advisories/unreviewed/2025/03/GHSA-fcmx-wvw9-587f/GHSA-fcmx-wvw9-587f.json +++ b/advisories/unreviewed/2025/03/GHSA-fcmx-wvw9-587f/GHSA-fcmx-wvw9-587f.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-fcmx-wvw9-587f", - "modified": "2025-03-27T15:31:12Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T15:31:12Z", "aliases": [ "CVE-2025-21891" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvlan: ensure network headers are in skb linear part\n\nsyzbot found that ipvlan_process_v6_outbound() was assuming\nthe IPv6 network header isis present in skb->head [1]\n\nAdd the needed pskb_network_may_pull() calls for both\nIPv4 and IPv6 handlers.\n\n[1]\nBUG: KMSAN: uninit-value in __ipv6_addr_type+0xa2/0x490 net/ipv6/addrconf_core.c:47\n __ipv6_addr_type+0xa2/0x490 net/ipv6/addrconf_core.c:47\n ipv6_addr_type include/net/ipv6.h:555 [inline]\n ip6_route_output_flags_noref net/ipv6/route.c:2616 [inline]\n ip6_route_output_flags+0x51/0x720 net/ipv6/route.c:2651\n ip6_route_output include/net/ip6_route.h:93 [inline]\n ipvlan_route_v6_outbound+0x24e/0x520 drivers/net/ipvlan/ipvlan_core.c:476\n ipvlan_process_v6_outbound drivers/net/ipvlan/ipvlan_core.c:491 [inline]\n ipvlan_process_outbound drivers/net/ipvlan/ipvlan_core.c:541 [inline]\n ipvlan_xmit_mode_l3 drivers/net/ipvlan/ipvlan_core.c:605 [inline]\n ipvlan_queue_xmit+0xd72/0x1780 drivers/net/ipvlan/ipvlan_core.c:671\n ipvlan_start_xmit+0x5b/0x210 drivers/net/ipvlan/ipvlan_main.c:223\n __netdev_start_xmit include/linux/netdevice.h:5150 [inline]\n netdev_start_xmit include/linux/netdevice.h:5159 [inline]\n xmit_one net/core/dev.c:3735 [inline]\n dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3751\n sch_direct_xmit+0x399/0xd40 net/sched/sch_generic.c:343\n qdisc_restart net/sched/sch_generic.c:408 [inline]\n __qdisc_run+0x14da/0x35d0 net/sched/sch_generic.c:416\n qdisc_run+0x141/0x4d0 include/net/pkt_sched.h:127\n net_tx_action+0x78b/0x940 net/core/dev.c:5484\n handle_softirqs+0x1a0/0x7c0 kernel/softirq.c:561\n __do_softirq+0x14/0x1a kernel/softirq.c:595\n do_softirq+0x9a/0x100 kernel/softirq.c:462\n __local_bh_enable_ip+0x9f/0xb0 kernel/softirq.c:389\n local_bh_enable include/linux/bottom_half.h:33 [inline]\n rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline]\n __dev_queue_xmit+0x2758/0x57d0 net/core/dev.c:4611\n dev_queue_xmit include/linux/netdevice.h:3311 [inline]\n packet_xmit+0x9c/0x6c0 net/packet/af_packet.c:276\n packet_snd net/packet/af_packet.c:3132 [inline]\n packet_sendmsg+0x93e0/0xa7e0 net/packet/af_packet.c:3164\n sock_sendmsg_nosec net/socket.c:718 [inline]", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -36,8 +41,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-908" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T15:15:57Z" diff --git a/advisories/unreviewed/2025/03/GHSA-gw36-8q8h-w9xm/GHSA-gw36-8q8h-w9xm.json b/advisories/unreviewed/2025/03/GHSA-gw36-8q8h-w9xm/GHSA-gw36-8q8h-w9xm.json index fb8fc800f9b..2d9f5715020 100644 --- a/advisories/unreviewed/2025/03/GHSA-gw36-8q8h-w9xm/GHSA-gw36-8q8h-w9xm.json +++ b/advisories/unreviewed/2025/03/GHSA-gw36-8q8h-w9xm/GHSA-gw36-8q8h-w9xm.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-gw36-8q8h-w9xm", - "modified": "2025-03-27T18:31:24Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:24Z", "aliases": [ "CVE-2022-49751" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nw1: fix WARNING after calling w1_process()\n\nI got the following WARNING message while removing driver(ds2482):\n\n------------[ cut here ]------------\ndo not call blocking ops when !TASK_RUNNING; state=1 set at [<000000002d50bfb6>] w1_process+0x9e/0x1d0 [wire]\nWARNING: CPU: 0 PID: 262 at kernel/sched/core.c:9817 __might_sleep+0x98/0xa0\nCPU: 0 PID: 262 Comm: w1_bus_master1 Tainted: G N 6.1.0-rc3+ #307\nRIP: 0010:__might_sleep+0x98/0xa0\nCall Trace:\n exit_signals+0x6c/0x550\n do_exit+0x2b4/0x17e0\n kthread_exit+0x52/0x60\n kthread+0x16d/0x1e0\n ret_from_fork+0x1f/0x30\n\nThe state of task is set to TASK_INTERRUPTIBLE in loop in w1_process(),\nset it to TASK_RUNNING when it breaks out of the loop to avoid the\nwarning.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -45,7 +50,7 @@ ], "database_specific": { "cwe_ids": [], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:39Z" diff --git a/advisories/unreviewed/2025/03/GHSA-hcxq-v393-38jh/GHSA-hcxq-v393-38jh.json b/advisories/unreviewed/2025/03/GHSA-hcxq-v393-38jh/GHSA-hcxq-v393-38jh.json index 70dee8607e4..631fd5ddb3d 100644 --- a/advisories/unreviewed/2025/03/GHSA-hcxq-v393-38jh/GHSA-hcxq-v393-38jh.json +++ b/advisories/unreviewed/2025/03/GHSA-hcxq-v393-38jh/GHSA-hcxq-v393-38jh.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-hcxq-v393-38jh", - "modified": "2025-03-27T18:31:27Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:27Z", "aliases": [ "CVE-2023-53005" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntrace_events_hist: add check for return value of 'create_hist_field'\n\nFunction 'create_hist_field' is called recursively at\ntrace_events_hist.c:1954 and can return NULL-value that's why we have\nto check it to avoid null pointer dereference.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -40,8 +45,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:49Z" diff --git a/advisories/unreviewed/2025/03/GHSA-hjff-56wf-4v5f/GHSA-hjff-56wf-4v5f.json b/advisories/unreviewed/2025/03/GHSA-hjff-56wf-4v5f/GHSA-hjff-56wf-4v5f.json index 9ed63c20b3f..ac9733d059b 100644 --- a/advisories/unreviewed/2025/03/GHSA-hjff-56wf-4v5f/GHSA-hjff-56wf-4v5f.json +++ b/advisories/unreviewed/2025/03/GHSA-hjff-56wf-4v5f/GHSA-hjff-56wf-4v5f.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-hjff-56wf-4v5f", - "modified": "2025-03-27T18:31:24Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:24Z", "aliases": [ "CVE-2022-49748" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/x86/amd: fix potential integer overflow on shift of a int\n\nThe left shift of int 32 bit integer constant 1 is evaluated using 32 bit\narithmetic and then passed as a 64 bit function argument. In the case where\ni is 32 or more this can lead to an overflow. Avoid this by shifting\nusing the BIT_ULL macro instead.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -36,8 +41,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-190" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:39Z" diff --git a/advisories/unreviewed/2025/03/GHSA-hxj2-x4g6-rhf8/GHSA-hxj2-x4g6-rhf8.json b/advisories/unreviewed/2025/03/GHSA-hxj2-x4g6-rhf8/GHSA-hxj2-x4g6-rhf8.json index ffbfa8b8d58..ba7f8597307 100644 --- a/advisories/unreviewed/2025/03/GHSA-hxj2-x4g6-rhf8/GHSA-hxj2-x4g6-rhf8.json +++ b/advisories/unreviewed/2025/03/GHSA-hxj2-x4g6-rhf8/GHSA-hxj2-x4g6-rhf8.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-hxj2-x4g6-rhf8", - "modified": "2025-03-27T18:31:24Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:24Z", "aliases": [ "CVE-2022-49749" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: designware: use casting of u64 in clock multiplication to avoid overflow\n\nIn functions i2c_dw_scl_lcnt() and i2c_dw_scl_hcnt() may have overflow\nby depending on the values of the given parameters including the ic_clk.\nFor example in our use case where ic_clk is larger than one million,\nmultiplication of ic_clk * 4700 will result in 32 bit overflow.\n\nAdd cast of u64 to the calculation to avoid multiplication overflow, and\nuse the corresponding define for divide.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -32,8 +37,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-190" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:39Z" diff --git a/advisories/unreviewed/2025/03/GHSA-jw73-x24m-whqq/GHSA-jw73-x24m-whqq.json b/advisories/unreviewed/2025/03/GHSA-jw73-x24m-whqq/GHSA-jw73-x24m-whqq.json index 5a2a1780ba7..e4039726187 100644 --- a/advisories/unreviewed/2025/03/GHSA-jw73-x24m-whqq/GHSA-jw73-x24m-whqq.json +++ b/advisories/unreviewed/2025/03/GHSA-jw73-x24m-whqq/GHSA-jw73-x24m-whqq.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-jw73-x24m-whqq", - "modified": "2025-03-27T18:31:28Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:28Z", "aliases": [ "CVE-2023-53011" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: stmmac: enable all safety features by default\n\nIn the original implementation of dwmac5\ncommit 8bf993a5877e (\"net: stmmac: Add support for DWMAC5 and implement Safety Features\")\nall safety features were enabled by default.\n\nLater it seems some implementations didn't have support for all the\nfeatures, so in\ncommit 5ac712dcdfef (\"net: stmmac: enable platform specific safety features\")\nthe safety_feat_cfg structure was added to the callback and defined for\nsome platforms to selectively enable these safety features.\n\nThe problem is that only certain platforms were given that software\nsupport. If the automotive safety package bit is set in the hardware\nfeatures register the safety feature callback is called for the platform,\nand for platforms that didn't get a safety_feat_cfg defined this results\nin the following NULL pointer dereference:\n\n[ 7.933303] Call trace:\n[ 7.935812] dwmac5_safety_feat_config+0x20/0x170 [stmmac]\n[ 7.941455] __stmmac_open+0x16c/0x474 [stmmac]\n[ 7.946117] stmmac_open+0x38/0x70 [stmmac]\n[ 7.950414] __dev_open+0x100/0x1dc\n[ 7.954006] __dev_change_flags+0x18c/0x204\n[ 7.958297] dev_change_flags+0x24/0x6c\n[ 7.962237] do_setlink+0x2b8/0xfa4\n[ 7.965827] __rtnl_newlink+0x4ec/0x840\n[ 7.969766] rtnl_newlink+0x50/0x80\n[ 7.973353] rtnetlink_rcv_msg+0x12c/0x374\n[ 7.977557] netlink_rcv_skb+0x5c/0x130\n[ 7.981500] rtnetlink_rcv+0x18/0x2c\n[ 7.985172] netlink_unicast+0x2e8/0x340\n[ 7.989197] netlink_sendmsg+0x1a8/0x420\n[ 7.993222] ____sys_sendmsg+0x218/0x280\n[ 7.997249] ___sys_sendmsg+0xac/0x100\n[ 8.001103] __sys_sendmsg+0x84/0xe0\n[ 8.004776] __arm64_sys_sendmsg+0x24/0x30\n[ 8.008983] invoke_syscall+0x48/0x114\n[ 8.012840] el0_svc_common.constprop.0+0xcc/0xec\n[ 8.017665] do_el0_svc+0x38/0xb0\n[ 8.021071] el0_svc+0x2c/0x84\n[ 8.024212] el0t_64_sync_handler+0xf4/0x120\n[ 8.028598] el0t_64_sync+0x190/0x194\n\nGo back to the original behavior, if the automotive safety package\nis found to be supported in hardware enable all the features unless\nsafety_feat_cfg is passed in saying this particular platform only\nsupports a subset of the features.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -28,8 +33,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:50Z" diff --git a/advisories/unreviewed/2025/03/GHSA-m76m-37m5-h9wj/GHSA-m76m-37m5-h9wj.json b/advisories/unreviewed/2025/03/GHSA-m76m-37m5-h9wj/GHSA-m76m-37m5-h9wj.json index c4df1683d86..455bcf2688c 100644 --- a/advisories/unreviewed/2025/03/GHSA-m76m-37m5-h9wj/GHSA-m76m-37m5-h9wj.json +++ b/advisories/unreviewed/2025/03/GHSA-m76m-37m5-h9wj/GHSA-m76m-37m5-h9wj.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-m76m-37m5-h9wj", - "modified": "2025-03-27T18:31:24Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:23Z", "aliases": [ "CVE-2022-49740" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads\n\nThis patch fixes slab-out-of-bounds reads in brcmfmac that occur in\nbrcmf_construct_chaninfo() and brcmf_enable_bw40_2g() when the count\nvalue of channel specifications provided by the device is greater than\nthe length of 'list->element[]', decided by the size of the 'list'\nallocated with kzalloc(). The patch adds checks that make the functions\nfree the buffer and return -EINVAL if that is the case. Note that the\nnegative return is handled by the caller, brcmf_setup_wiphybands() or\nbrcmf_cfg80211_attach().\n\nFound by a modified version of syzkaller.\n\nCrash Report from brcmf_construct_chaninfo():\n==================================================================\nBUG: KASAN: slab-out-of-bounds in brcmf_setup_wiphybands+0x1238/0x1430\nRead of size 4 at addr ffff888115f24600 by task kworker/0:2/1896\n\nCPU: 0 PID: 1896 Comm: kworker/0:2 Tainted: G W O 5.14.0+ #132\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.1-0-ga5cab58e9a3f-prebuilt.qemu.org 04/01/2014\nWorkqueue: usb_hub_wq hub_event\nCall Trace:\n dump_stack_lvl+0x57/0x7d\n print_address_description.constprop.0.cold+0x93/0x334\n kasan_report.cold+0x83/0xdf\n brcmf_setup_wiphybands+0x1238/0x1430\n brcmf_cfg80211_attach+0x2118/0x3fd0\n brcmf_attach+0x389/0xd40\n brcmf_usb_probe+0x12de/0x1690\n usb_probe_interface+0x25f/0x710\n really_probe+0x1be/0xa90\n __driver_probe_device+0x2ab/0x460\n driver_probe_device+0x49/0x120\n __device_attach_driver+0x18a/0x250\n bus_for_each_drv+0x123/0x1a0\n __device_attach+0x207/0x330\n bus_probe_device+0x1a2/0x260\n device_add+0xa61/0x1ce0\n usb_set_configuration+0x984/0x1770\n usb_generic_driver_probe+0x69/0x90\n usb_probe_device+0x9c/0x220\n really_probe+0x1be/0xa90\n __driver_probe_device+0x2ab/0x460\n driver_probe_device+0x49/0x120\n __device_attach_driver+0x18a/0x250\n bus_for_each_drv+0x123/0x1a0\n __device_attach+0x207/0x330\n bus_probe_device+0x1a2/0x260\n device_add+0xa61/0x1ce0\n usb_new_device.cold+0x463/0xf66\n hub_event+0x10d5/0x3330\n process_one_work+0x873/0x13e0\n worker_thread+0x8b/0xd10\n kthread+0x379/0x450\n ret_from_fork+0x1f/0x30\n\nAllocated by task 1896:\n kasan_save_stack+0x1b/0x40\n __kasan_kmalloc+0x7c/0x90\n kmem_cache_alloc_trace+0x19e/0x330\n brcmf_setup_wiphybands+0x290/0x1430\n brcmf_cfg80211_attach+0x2118/0x3fd0\n brcmf_attach+0x389/0xd40\n brcmf_usb_probe+0x12de/0x1690\n usb_probe_interface+0x25f/0x710\n really_probe+0x1be/0xa90\n __driver_probe_device+0x2ab/0x460\n driver_probe_device+0x49/0x120\n __device_attach_driver+0x18a/0x250\n bus_for_each_drv+0x123/0x1a0\n __device_attach+0x207/0x330\n bus_probe_device+0x1a2/0x260\n device_add+0xa61/0x1ce0\n usb_set_configuration+0x984/0x1770\n usb_generic_driver_probe+0x69/0x90\n usb_probe_device+0x9c/0x220\n really_probe+0x1be/0xa90\n __driver_probe_device+0x2ab/0x460\n driver_probe_device+0x49/0x120\n __device_attach_driver+0x18a/0x250\n bus_for_each_drv+0x123/0x1a0\n __device_attach+0x207/0x330\n bus_probe_device+0x1a2/0x260\n device_add+0xa61/0x1ce0\n usb_new_device.cold+0x463/0xf66\n hub_event+0x10d5/0x3330\n process_one_work+0x873/0x13e0\n worker_thread+0x8b/0xd10\n kthread+0x379/0x450\n ret_from_fork+0x1f/0x30\n\nThe buggy address belongs to the object at ffff888115f24000\n which belongs to the cache kmalloc-2k of size 2048\nThe buggy address is located 1536 bytes inside of\n 2048-byte region [ffff888115f24000, ffff888115f24800)\n\nMemory state around the buggy address:\n ffff888115f24500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n ffff888115f24580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n>ffff888115f24600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n ^\n ffff888115f24680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n ffff888115f24700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n==================================================================\n\nCrash Report from brcmf_enable_bw40_2g():\n==========\n---truncated---", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -36,8 +41,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-125" + ], + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:38Z" diff --git a/advisories/unreviewed/2025/03/GHSA-p2cv-98qj-r2qc/GHSA-p2cv-98qj-r2qc.json b/advisories/unreviewed/2025/03/GHSA-p2cv-98qj-r2qc/GHSA-p2cv-98qj-r2qc.json index dc47ee15077..ab86cc1ff03 100644 --- a/advisories/unreviewed/2025/03/GHSA-p2cv-98qj-r2qc/GHSA-p2cv-98qj-r2qc.json +++ b/advisories/unreviewed/2025/03/GHSA-p2cv-98qj-r2qc/GHSA-p2cv-98qj-r2qc.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-p2cv-98qj-r2qc", - "modified": "2025-03-27T18:31:24Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:24Z", "aliases": [ "CVE-2022-49754" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Fix a buffer overflow in mgmt_mesh_add()\n\nSmatch Warning:\nnet/bluetooth/mgmt_util.c:375 mgmt_mesh_add() error: __memcpy()\n'mesh_tx->param' too small (48 vs 50)\n\nAnalysis:\n\n'mesh_tx->param' is array of size 48. This is the destination.\nu8 param[sizeof(struct mgmt_cp_mesh_send) + 29]; // 19 + 29 = 48.\n\nBut in the caller 'mesh_send' we reject only when len > 50.\nlen > (MGMT_MESH_SEND_SIZE + 31) // 19 + 31 = 50.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -24,8 +29,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-120" + ], + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:40Z" diff --git a/advisories/unreviewed/2025/03/GHSA-v985-xp9j-wxfh/GHSA-v985-xp9j-wxfh.json b/advisories/unreviewed/2025/03/GHSA-v985-xp9j-wxfh/GHSA-v985-xp9j-wxfh.json index b715c5b300c..578a2242efb 100644 --- a/advisories/unreviewed/2025/03/GHSA-v985-xp9j-wxfh/GHSA-v985-xp9j-wxfh.json +++ b/advisories/unreviewed/2025/03/GHSA-v985-xp9j-wxfh/GHSA-v985-xp9j-wxfh.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-v985-xp9j-wxfh", - "modified": "2025-03-27T18:31:24Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:24Z", "aliases": [ "CVE-2022-49750" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: CPPC: Add u64 casts to avoid overflowing\n\nThe fields of the _CPC object are unsigned 32-bits values.\nTo avoid overflows while using _CPC's values, add 'u64' casts.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -24,8 +29,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-190" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:39Z" diff --git a/advisories/unreviewed/2025/03/GHSA-vxj7-p6gh-99vg/GHSA-vxj7-p6gh-99vg.json b/advisories/unreviewed/2025/03/GHSA-vxj7-p6gh-99vg/GHSA-vxj7-p6gh-99vg.json index 4c1d073db76..e210e25a8de 100644 --- a/advisories/unreviewed/2025/03/GHSA-vxj7-p6gh-99vg/GHSA-vxj7-p6gh-99vg.json +++ b/advisories/unreviewed/2025/03/GHSA-vxj7-p6gh-99vg/GHSA-vxj7-p6gh-99vg.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-vxj7-p6gh-99vg", - "modified": "2025-03-27T18:31:27Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:27Z", "aliases": [ "CVE-2023-53002" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915: Fix a memory leak with reused mmap_offset\n\ndrm_vma_node_allow() and drm_vma_node_revoke() should be called in\nbalanced pairs. We call drm_vma_node_allow() once per-file everytime a\nuser calls mmap_offset, but only call drm_vma_node_revoke once per-file\non each mmap_offset. As the mmap_offset is reused by the client, the\nper-file vm_count may remain non-zero and the rbtree leaked.\n\nCall drm_vma_node_allow_once() instead to prevent that memory leak.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -24,8 +29,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-401" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:49Z" diff --git a/advisories/unreviewed/2025/03/GHSA-wpc3-48hj-vqgf/GHSA-wpc3-48hj-vqgf.json b/advisories/unreviewed/2025/03/GHSA-wpc3-48hj-vqgf/GHSA-wpc3-48hj-vqgf.json index 69b83dc49c9..7d70a1b9c59 100644 --- a/advisories/unreviewed/2025/03/GHSA-wpc3-48hj-vqgf/GHSA-wpc3-48hj-vqgf.json +++ b/advisories/unreviewed/2025/03/GHSA-wpc3-48hj-vqgf/GHSA-wpc3-48hj-vqgf.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-wpc3-48hj-vqgf", - "modified": "2025-03-27T18:31:27Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:27Z", "aliases": [ "CVE-2023-53008" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix potential memory leaks in session setup\n\nMake sure to free cifs_ses::auth_key.response before allocating it as\nwe might end up leaking memory in reconnect or mounting.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -24,8 +29,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-401" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:49Z" diff --git a/advisories/unreviewed/2025/03/GHSA-x6ch-fhmp-9745/GHSA-x6ch-fhmp-9745.json b/advisories/unreviewed/2025/03/GHSA-x6ch-fhmp-9745/GHSA-x6ch-fhmp-9745.json index e346fe7b360..5ed2163c3e7 100644 --- a/advisories/unreviewed/2025/03/GHSA-x6ch-fhmp-9745/GHSA-x6ch-fhmp-9745.json +++ b/advisories/unreviewed/2025/03/GHSA-x6ch-fhmp-9745/GHSA-x6ch-fhmp-9745.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-x6ch-fhmp-9745", - "modified": "2025-03-27T18:31:24Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-03-27T18:31:24Z", "aliases": [ "CVE-2022-49738" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to do sanity check on i_extra_isize in is_alive()\n\nsyzbot found a f2fs bug:\n\nBUG: KASAN: slab-out-of-bounds in data_blkaddr fs/f2fs/f2fs.h:2891 [inline]\nBUG: KASAN: slab-out-of-bounds in is_alive fs/f2fs/gc.c:1117 [inline]\nBUG: KASAN: slab-out-of-bounds in gc_data_segment fs/f2fs/gc.c:1520 [inline]\nBUG: KASAN: slab-out-of-bounds in do_garbage_collect+0x386a/0x3df0 fs/f2fs/gc.c:1734\nRead of size 4 at addr ffff888076557568 by task kworker/u4:3/52\n\nCPU: 1 PID: 52 Comm: kworker/u4:3 Not tainted 6.1.0-rc4-syzkaller-00362-gfef7fd48922d #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022\nWorkqueue: writeback wb_workfn (flush-7:0)\nCall Trace:\n\n__dump_stack lib/dump_stack.c:88 [inline]\ndump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106\nprint_address_description mm/kasan/report.c:284 [inline]\nprint_report+0x15e/0x45d mm/kasan/report.c:395\nkasan_report+0xbb/0x1f0 mm/kasan/report.c:495\ndata_blkaddr fs/f2fs/f2fs.h:2891 [inline]\nis_alive fs/f2fs/gc.c:1117 [inline]\ngc_data_segment fs/f2fs/gc.c:1520 [inline]\ndo_garbage_collect+0x386a/0x3df0 fs/f2fs/gc.c:1734\nf2fs_gc+0x88c/0x20a0 fs/f2fs/gc.c:1831\nf2fs_balance_fs+0x544/0x6b0 fs/f2fs/segment.c:410\nf2fs_write_inode+0x57e/0xe20 fs/f2fs/inode.c:753\nwrite_inode fs/fs-writeback.c:1440 [inline]\n__writeback_single_inode+0xcfc/0x1440 fs/fs-writeback.c:1652\nwriteback_sb_inodes+0x54d/0xf90 fs/fs-writeback.c:1870\nwb_writeback+0x2c5/0xd70 fs/fs-writeback.c:2044\nwb_do_writeback fs/fs-writeback.c:2187 [inline]\nwb_workfn+0x2dc/0x12f0 fs/fs-writeback.c:2227\nprocess_one_work+0x9bf/0x1710 kernel/workqueue.c:2289\nworker_thread+0x665/0x1080 kernel/workqueue.c:2436\nkthread+0x2e4/0x3a0 kernel/kthread.c:376\nret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306\n\nThe root cause is that we forgot to do sanity check on .i_extra_isize\nin below path, result in accessing invalid address later, fix it.\n- gc_data_segment\n - is_alive\n - data_blkaddr\n - offset_in_addr", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -36,8 +41,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-125" + ], + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-03-27T17:15:38Z" diff --git a/advisories/unreviewed/2025/04/GHSA-283v-8hg2-53qv/GHSA-283v-8hg2-53qv.json b/advisories/unreviewed/2025/04/GHSA-283v-8hg2-53qv/GHSA-283v-8hg2-53qv.json new file mode 100644 index 00000000000..bee0d0d1953 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-283v-8hg2-53qv/GHSA-283v-8hg2-53qv.json @@ -0,0 +1,60 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-283v-8hg2-53qv", + "modified": "2025-04-14T21:32:21Z", + "published": "2025-04-14T21:32:21Z", + "aliases": [ + "CVE-2022-49305" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()\n\nThere is a deadlock in ieee80211_beacons_stop(), which is shown below:\n\n (Thread 1) | (Thread 2)\n | ieee80211_send_beacon()\nieee80211_beacons_stop() | mod_timer()\n spin_lock_irqsave() //(1) | (wait a time)\n ... | ieee80211_send_beacon_cb()\n del_timer_sync() | spin_lock_irqsave() //(2)\n (wait timer to stop) | ...\n\nWe hold ieee->beacon_lock in position (1) of thread 1 and use\ndel_timer_sync() to wait timer to stop, but timer handler\nalso need ieee->beacon_lock in position (2) of thread 2.\nAs a result, ieee80211_beacons_stop() will block forever.\n\nThis patch extracts del_timer_sync() from the protection of\nspin_lock_irqsave(), which could let timer handler to obtain\nthe needed lock.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49305" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/042915c1bfedd684c1d98a841794ee203200571a" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/1fbe033c52480f7954c057510040fa6286c4ea25" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/66f769762f65d957f688f3258755c6ec410bf710" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/806c7b53414934ba2a39449b31fd1a038e500273" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/b34cb54923a6e5ddefbaf358c85c922c6ab456e2" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/b465bb2ebf666116c1ac745cb80c65154dc0d27e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ffc9cab7243f8151be37966301307bfd3cda2db3" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-667" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-2f7m-3653-hg2p/GHSA-2f7m-3653-hg2p.json b/advisories/unreviewed/2025/04/GHSA-2f7m-3653-hg2p/GHSA-2f7m-3653-hg2p.json new file mode 100644 index 00000000000..02068bfdfb7 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-2f7m-3653-hg2p/GHSA-2f7m-3653-hg2p.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2f7m-3653-hg2p", + "modified": "2025-04-14T21:32:24Z", + "published": "2025-04-14T21:32:24Z", + "aliases": [ + "CVE-2022-43850" + ], + "details": "IBM Aspera Console 3.4.0 through 3.4.4\n\nis vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-43850" + }, + { + "type": "WEB", + "url": "https://www.ibm.com/support/pages/node/7169766" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-14T21:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-3mp4-2w7h-6m56/GHSA-3mp4-2w7h-6m56.json b/advisories/unreviewed/2025/04/GHSA-3mp4-2w7h-6m56/GHSA-3mp4-2w7h-6m56.json index b09d7b5df76..858dec24959 100644 --- a/advisories/unreviewed/2025/04/GHSA-3mp4-2w7h-6m56/GHSA-3mp4-2w7h-6m56.json +++ b/advisories/unreviewed/2025/04/GHSA-3mp4-2w7h-6m56/GHSA-3mp4-2w7h-6m56.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-3mp4-2w7h-6m56", - "modified": "2025-04-14T18:31:49Z", + "modified": "2025-04-14T21:32:24Z", "published": "2025-04-14T18:31:49Z", "aliases": [ "CVE-2025-29720" ], "details": "Dify v1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUploadApi.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" + } + ], "affected": [], "references": [ { @@ -24,8 +29,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-918" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-04-14T17:15:26Z" diff --git a/advisories/unreviewed/2025/04/GHSA-3qrr-xcc2-m7cg/GHSA-3qrr-xcc2-m7cg.json b/advisories/unreviewed/2025/04/GHSA-3qrr-xcc2-m7cg/GHSA-3qrr-xcc2-m7cg.json new file mode 100644 index 00000000000..5c56d071363 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-3qrr-xcc2-m7cg/GHSA-3qrr-xcc2-m7cg.json @@ -0,0 +1,68 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3qrr-xcc2-m7cg", + "modified": "2025-04-14T21:32:20Z", + "published": "2025-04-14T21:32:20Z", + "aliases": [ + "CVE-2022-49280" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: prevent underflow in nfssvc_decode_writeargs()\n\nSmatch complains:\n\n\tfs/nfsd/nfsxdr.c:341 nfssvc_decode_writeargs()\n\twarn: no lower bound on 'args->len'\n\nChange the type to unsigned to prevent this issue.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49280" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/184416d4b98509fb4c3d8fc3d6dc1437896cc159" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/1a33e0de60feda402d05ac8a6cf409c19ea3e0b3" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/2764af8ce0bf03cc43ee4a11897cab96bde6caae" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/413d8fefafe531a9442bb623e3fe292a38f88d65" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/438068f4912183a59fcb6b7496a06437f7fd4e2b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/614a61e1592051cc42d3c38f899c9f7bdaad8a1d" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/65e21cc042f4c1518c8c55283f53bc725b78419d" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/85259340fc9bd54e3d567b41b881ecb4d0055da1" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/9f0f048c1bfa7867d565a95fd8c28f4484ba1043" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-191" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-4mff-cr8h-2rm2/GHSA-4mff-cr8h-2rm2.json b/advisories/unreviewed/2025/04/GHSA-4mff-cr8h-2rm2/GHSA-4mff-cr8h-2rm2.json new file mode 100644 index 00000000000..04fdadec0af --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-4mff-cr8h-2rm2/GHSA-4mff-cr8h-2rm2.json @@ -0,0 +1,60 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4mff-cr8h-2rm2", + "modified": "2025-04-14T21:32:23Z", + "published": "2025-04-14T21:32:23Z", + "aliases": [ + "CVE-2022-49374" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: check attribute length for bearer name\n\nsyzbot reported uninit-value:\n=====================================================\nBUG: KMSAN: uninit-value in string_nocheck lib/vsprintf.c:644 [inline]\nBUG: KMSAN: uninit-value in string+0x4f9/0x6f0 lib/vsprintf.c:725\n string_nocheck lib/vsprintf.c:644 [inline]\n string+0x4f9/0x6f0 lib/vsprintf.c:725\n vsnprintf+0x2222/0x3650 lib/vsprintf.c:2806\n vprintk_store+0x537/0x2150 kernel/printk/printk.c:2158\n vprintk_emit+0x28b/0xab0 kernel/printk/printk.c:2256\n vprintk_default+0x86/0xa0 kernel/printk/printk.c:2283\n vprintk+0x15f/0x180 kernel/printk/printk_safe.c:50\n _printk+0x18d/0x1cf kernel/printk/printk.c:2293\n tipc_enable_bearer net/tipc/bearer.c:371 [inline]\n __tipc_nl_bearer_enable+0x2022/0x22a0 net/tipc/bearer.c:1033\n tipc_nl_bearer_enable+0x6c/0xb0 net/tipc/bearer.c:1042\n genl_family_rcv_msg_doit net/netlink/genetlink.c:731 [inline]\n\n- Do sanity check the attribute length for TIPC_NLA_BEARER_NAME.\n- Do not use 'illegal name' in printing message.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49374" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/292be63c382ce20673ee61dff1ee9ed4a3dcaae7" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3af15272cde28fe5c8489174b8624e232c1775ec" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/7f36f798f89bf32c0164049cb0e3fd1af613d0bb" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8b91d0dfc839e67708c905648cd0e7507a2263e5" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/92a930fcf4250fe961f6238b99af0bc405799f39" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/b8fac8e321044a9ac50f7185b4e9d91a7745e4b0" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f07670871f4d19e613740eebe210e7e9ea535973" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-908" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-4r29-2h26-2x44/GHSA-4r29-2h26-2x44.json b/advisories/unreviewed/2025/04/GHSA-4r29-2h26-2x44/GHSA-4r29-2h26-2x44.json new file mode 100644 index 00000000000..8fed2b58e40 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-4r29-2h26-2x44/GHSA-4r29-2h26-2x44.json @@ -0,0 +1,48 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4r29-2h26-2x44", + "modified": "2025-04-14T21:32:20Z", + "published": "2025-04-14T21:32:20Z", + "aliases": [ + "CVE-2022-49284" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncoresight: syscfg: Fix memleak on registration failure in cscfg_create_device\n\ndevice_register() calls device_initialize(),\naccording to doc of device_initialize:\n\n Use put_device() to give up your reference instead of freeing\n * @dev directly once you have called this function.\n\nTo prevent potential memleak, use put_device() for error handling.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49284" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/412225b32986d5b11c3c1ad9234c50a3f5c52c76" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a529af1f5a5c096f3e18f0d5a32cfcc3d82df1ec" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c61e2fc87f24cae4701f352fe9ecd4c5c143106c" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/cfa5dbcdd7aece76f3415284569f2f384aff0253" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-401" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-5rhr-4pf4-xg2q/GHSA-5rhr-4pf4-xg2q.json b/advisories/unreviewed/2025/04/GHSA-5rhr-4pf4-xg2q/GHSA-5rhr-4pf4-xg2q.json new file mode 100644 index 00000000000..19de7587ce2 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-5rhr-4pf4-xg2q/GHSA-5rhr-4pf4-xg2q.json @@ -0,0 +1,68 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5rhr-4pf4-xg2q", + "modified": "2025-04-14T21:32:21Z", + "published": "2025-04-14T21:32:21Z", + "aliases": [ + "CVE-2022-49302" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: host: isp116x: check return value after calling platform_get_resource()\n\nIt will cause null-ptr-deref if platform_get_resource() returns NULL,\nwe need check the return value.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49302" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/134a3408c2d3f7e23eb0e4556e0a2d9f36c2614e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3592cfd8b848bf0c4d7740d78a87a7b8f6e1fa9a" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3825db88d8c704e7992b685618a03f82bffcf2ef" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/7bffda1560a6f255fdf504e059fbbdb5d46b9e44" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/804de302ada3544699c5f48c5314b249af76faa3" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/82a101f14943f479fd190b1e5b40d91c77e2ac1b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/aca0cab0e9ed33b6371aafb519a6c38f2850ffc3" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c91a74b1f0f2d2d7e728742ae55e3ffe9ba7853d" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ee105039d3653444de4d3ede642383c92855dc1e" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-622r-rj7q-jqg3/GHSA-622r-rj7q-jqg3.json b/advisories/unreviewed/2025/04/GHSA-622r-rj7q-jqg3/GHSA-622r-rj7q-jqg3.json new file mode 100644 index 00000000000..c7d9a7d9222 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-622r-rj7q-jqg3/GHSA-622r-rj7q-jqg3.json @@ -0,0 +1,48 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-622r-rj7q-jqg3", + "modified": "2025-04-14T21:32:20Z", + "published": "2025-04-14T21:32:20Z", + "aliases": [ + "CVE-2022-49294" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Check if modulo is 0 before dividing.\n\n[How & Why]\nIf a value of 0 is read, then this will cause a divide-by-0 panic.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49294" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/07efce8269a038c37814eb656b4de14aa3015fc6" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/10ef82d6e0af5536ec64770c07f6bbabfdd6977c" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/49947b906a6bd9668eaf4f9cf691973c25c26955" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/96725758eff7b3805e4e94d1443a100757412720" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-369" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-66rc-vg9f-48m7/GHSA-66rc-vg9f-48m7.json b/advisories/unreviewed/2025/04/GHSA-66rc-vg9f-48m7/GHSA-66rc-vg9f-48m7.json new file mode 100644 index 00000000000..605574a980f --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-66rc-vg9f-48m7/GHSA-66rc-vg9f-48m7.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-66rc-vg9f-48m7", + "modified": "2025-04-14T21:32:25Z", + "published": "2025-04-14T21:32:24Z", + "aliases": [ + "CVE-2025-3588" + ], + "details": "A vulnerability, which was classified as problematic, has been found in joelittlejohn jsonschema2pojo 1.2.2. This issue affects the function apply of the file org/jsonschema2pojo/rules/SchemaRule.java of the component JSON File Handler. The manipulation leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3588" + }, + { + "type": "WEB", + "url": "https://github.com/joelittlejohn/jsonschema2pojo/issues/1672" + }, + { + "type": "WEB", + "url": "https://github.com/joelittlejohn/jsonschema2pojo/issues/1672#issue-2968446816" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.304643" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.304643" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.550136" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-14T21:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-6c3m-6rx5-566h/GHSA-6c3m-6rx5-566h.json b/advisories/unreviewed/2025/04/GHSA-6c3m-6rx5-566h/GHSA-6c3m-6rx5-566h.json new file mode 100644 index 00000000000..c0d2d0a5f76 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-6c3m-6rx5-566h/GHSA-6c3m-6rx5-566h.json @@ -0,0 +1,54 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6c3m-6rx5-566h", + "modified": "2025-04-14T21:32:22Z", + "published": "2025-04-14T21:32:21Z", + "aliases": [ + "CVE-2022-49346" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list\n\nEvery iteration of for_each_available_child_of_node() decrements\nthe reference count of the previous node.\nwhen breaking early from a for_each_available_child_of_node() loop,\nwe need to explicitly call of_node_put() on the gphy_fw_np.\nAdd missing of_node_put() to avoid refcount leak.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49346" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/0737e018a05e2aa352828c52bdeed3b02cff2930" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/2e007ac6fa7c9c94ad84da075c5c504afad690a0" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/32cd78c5610f02a929f63cac985e73692d05f33e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/54d6802c4d83fa8de7696cfec06f475d5fd92d27" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/7c8df6fad43d9d5d77f281f794b2a93cd02fd1a9" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c2ae49a113a5344232f1ebb93bcf18bbd11e9c39" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-6gv8-fgf9-gqgc/GHSA-6gv8-fgf9-gqgc.json b/advisories/unreviewed/2025/04/GHSA-6gv8-fgf9-gqgc/GHSA-6gv8-fgf9-gqgc.json new file mode 100644 index 00000000000..0a362395b75 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-6gv8-fgf9-gqgc/GHSA-6gv8-fgf9-gqgc.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6gv8-fgf9-gqgc", + "modified": "2025-04-14T21:32:22Z", + "published": "2025-04-14T21:32:22Z", + "aliases": [ + "CVE-2022-49353" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/papr_scm: don't requests stats with '0' sized stats buffer\n\nSachin reported [1] that on a POWER-10 lpar he is seeing a kernel panic being\nreported with vPMEM when papr_scm probe is being called. The panic is of the\nform below and is observed only with following option disabled(profile) for the\nsaid LPAR 'Enable Performance Information Collection' in the HMC:\n\n Kernel attempted to write user page (1c) - exploit attempt? (uid: 0)\n BUG: Kernel NULL pointer dereference on write at 0x0000001c\n Faulting instruction address: 0xc008000001b90844\n Oops: Kernel access of bad area, sig: 11 [#1]\n\n NIP [c008000001b90844] drc_pmem_query_stats+0x5c/0x270 [papr_scm]\n LR [c008000001b92794] papr_scm_probe+0x2ac/0x6ec [papr_scm]\n Call Trace:\n 0xc00000000941bca0 (unreliable)\n papr_scm_probe+0x2ac/0x6ec [papr_scm]\n platform_probe+0x98/0x150\n really_probe+0xfc/0x510\n __driver_probe_device+0x17c/0x230\n\n ---[ end trace 0000000000000000 ]---\n Kernel panic - not syncing: Fatal exception\n\nOn investigation looks like this panic was caused due to a 'stat_buffer' of\nsize==0 being provided to drc_pmem_query_stats() to fetch all performance\nstats-ids of an NVDIMM. However drc_pmem_query_stats() shouldn't have been called\nsince the vPMEM NVDIMM doesn't support and performance stat-id's. This was caused\ndue to missing check for 'p->stat_buffer_len' at the beginning of\npapr_scm_pmu_check_events() which indicates that the NVDIMM doesn't support\nperformance-stats.\n\nFix this by introducing the check for 'p->stat_buffer_len' at the beginning of\npapr_scm_pmu_check_events().\n\n[1] https://lore.kernel.org/all/6B3A522A-6A5F-4CC9-B268-0C63AA6E07D3@linux.ibm.com", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49353" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/07bf9431b1590d1cd7a8d62075d0b50b073f0495" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/e1295aab2ebcda1c1a9ed342baedc080e5c393e5" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-6qhr-h8jp-m2w8/GHSA-6qhr-h8jp-m2w8.json b/advisories/unreviewed/2025/04/GHSA-6qhr-h8jp-m2w8/GHSA-6qhr-h8jp-m2w8.json new file mode 100644 index 00000000000..cb0a903144f --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-6qhr-h8jp-m2w8/GHSA-6qhr-h8jp-m2w8.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6qhr-h8jp-m2w8", + "modified": "2025-04-14T21:32:22Z", + "published": "2025-04-14T21:32:22Z", + "aliases": [ + "CVE-2022-49366" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix reference count leak in smb_check_perm_dacl()\n\nThe issue happens in a specific path in smb_check_perm_dacl(). When\n\"id\" and \"uid\" have the same value, the function simply jumps out of\nthe loop without decrementing the reference count of the object\n\"posix_acls\", which is increased by get_acl() earlier. This may\nresult in memory leaks.\n\nFix it by decreasing the reference count of \"posix_acls\" before\njumping to label \"check_access_bits\".", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49366" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/248d71b440aef829f5cc5f6545ca113ef5062900" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/9758a6653c27867d810de02b4e5697163dda9883" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/cf824b95c12a1abacadbc2d069931963221a3414" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/d21a580dafc69aa04f46e6099616146a536b0724" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-6r4h-5jp9-8j35/GHSA-6r4h-5jp9-8j35.json b/advisories/unreviewed/2025/04/GHSA-6r4h-5jp9-8j35/GHSA-6r4h-5jp9-8j35.json new file mode 100644 index 00000000000..94a5d715e53 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-6r4h-5jp9-8j35/GHSA-6r4h-5jp9-8j35.json @@ -0,0 +1,68 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6r4h-5jp9-8j35", + "modified": "2025-04-14T21:32:21Z", + "published": "2025-04-14T21:32:21Z", + "aliases": [ + "CVE-2022-49304" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: tty: serial: Fix deadlock in sa1100_set_termios()\n\nThere is a deadlock in sa1100_set_termios(), which is shown\nbelow:\n\n (Thread 1) | (Thread 2)\n | sa1100_enable_ms()\nsa1100_set_termios() | mod_timer()\n spin_lock_irqsave() //(1) | (wait a time)\n ... | sa1100_timeout()\n del_timer_sync() | spin_lock_irqsave() //(2)\n (wait timer to stop) | ...\n\nWe hold sport->port.lock in position (1) of thread 1 and\nuse del_timer_sync() to wait timer to stop, but timer handler\nalso need sport->port.lock in position (2) of thread 2. As a result,\nsa1100_set_termios() will block forever.\n\nThis patch moves del_timer_sync() before spin_lock_irqsave()\nin order to prevent the deadlock.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49304" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/0976808d0d171ec837d4bd3e9f4ad4a00ab703b8" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/09a5958a2452ad22d0cb638711ef34ea1863a829" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/2cbfc38df580bff5b2fe19f21c1a7520efcc4b3b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/34d91e555e5582cffdbcbb75517bc9217866823e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/553213432ef0c295becdc08c0207d2094468f673" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/62b2caef400c1738b6d22f636c628d9f85cd4c4c" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/6e2273eefab54a521d9c59efb6e1114e742bdf41" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/85e20f8bd31a46d8c60103d0274a8ebe8f47f2b2" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/920f0ae7a129ffee98a106e3bbdfd61a2a59e939" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-667" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-7qg8-x5g2-p265/GHSA-7qg8-x5g2-p265.json b/advisories/unreviewed/2025/04/GHSA-7qg8-x5g2-p265/GHSA-7qg8-x5g2-p265.json new file mode 100644 index 00000000000..376dec8b05e --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-7qg8-x5g2-p265/GHSA-7qg8-x5g2-p265.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7qg8-x5g2-p265", + "modified": "2025-04-14T21:32:21Z", + "published": "2025-04-14T21:32:21Z", + "aliases": [ + "CVE-2022-49301" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: rtl8712: fix uninit-value in usb_read8() and friends\n\nWhen r8712_usbctrl_vendorreq() returns negative, 'data' in\nusb_read{8,16,32} will not be initialized.\n\nBUG: KMSAN: uninit-value in string_nocheck lib/vsprintf.c:643 [inline]\nBUG: KMSAN: uninit-value in string+0x4ec/0x6f0 lib/vsprintf.c:725\n string_nocheck lib/vsprintf.c:643 [inline]\n string+0x4ec/0x6f0 lib/vsprintf.c:725\n vsnprintf+0x2222/0x3650 lib/vsprintf.c:2806\n va_format lib/vsprintf.c:1704 [inline]\n pointer+0x18e6/0x1f70 lib/vsprintf.c:2443\n vsnprintf+0x1a9b/0x3650 lib/vsprintf.c:2810\n vprintk_store+0x537/0x2150 kernel/printk/printk.c:2158\n vprintk_emit+0x28b/0xab0 kernel/printk/printk.c:2256\n dev_vprintk_emit+0x5ef/0x6d0 drivers/base/core.c:4604\n dev_printk_emit+0x1dd/0x21f drivers/base/core.c:4615\n __dev_printk+0x3be/0x440 drivers/base/core.c:4627\n _dev_info+0x1ea/0x22f drivers/base/core.c:4673\n r871xu_drv_init+0x1929/0x3070 drivers/staging/rtl8712/usb_intf.c:401\n usb_probe_interface+0xf19/0x1600 drivers/usb/core/driver.c:396\n really_probe+0x6c7/0x1350 drivers/base/dd.c:621\n __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:752\n driver_probe_device drivers/base/dd.c:782 [inline]\n __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:899\n bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427\n __device_attach+0x593/0x8e0 drivers/base/dd.c:970\n device_initial_probe+0x4a/0x60 drivers/base/dd.c:1017\n bus_probe_device+0x17b/0x3e0 drivers/base/bus.c:487\n device_add+0x1fff/0x26e0 drivers/base/core.c:3405\n usb_set_configuration+0x37e9/0x3ed0 drivers/usb/core/message.c:2170\n usb_generic_driver_probe+0x13c/0x300 drivers/usb/core/generic.c:238\n usb_probe_device+0x309/0x570 drivers/usb/core/driver.c:293\n really_probe+0x6c7/0x1350 drivers/base/dd.c:621\n __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:752\n driver_probe_device drivers/base/dd.c:782 [inline]\n __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:899\n bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427\n __device_attach+0x593/0x8e0 drivers/base/dd.c:970\n device_initial_probe+0x4a/0x60 drivers/base/dd.c:1017\n bus_probe_device+0x17b/0x3e0 drivers/base/bus.c:487\n device_add+0x1fff/0x26e0 drivers/base/core.c:3405\n usb_new_device+0x1b91/0x2950 drivers/usb/core/hub.c:2566\n hub_port_connect drivers/usb/core/hub.c:5363 [inline]\n hub_port_connect_change drivers/usb/core/hub.c:5507 [inline]\n port_event drivers/usb/core/hub.c:5665 [inline]\n hub_event+0x58e3/0x89e0 drivers/usb/core/hub.c:5747\n process_one_work+0xdb6/0x1820 kernel/workqueue.c:2289\n worker_thread+0x10d0/0x2240 kernel/workqueue.c:2436\n kthread+0x3c7/0x500 kernel/kthread.c:376\n ret_from_fork+0x1f/0x30\n\nLocal variable data created at:\n usb_read8+0x5d/0x130 drivers/staging/rtl8712/usb_ops.c:33\n r8712_read8+0xa5/0xd0 drivers/staging/rtl8712/rtl8712_io.c:29\n\nKMSAN: uninit-value in r871xu_drv_init\nhttps://syzkaller.appspot.com/bug?id=3cd92b1d85428b128503bfa7a250294c9ae00bd8", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49301" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/33ef21d55418ab6a62a63fd550b2dbe297433372" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/58762f1c63c75cbe1dc393eed3c9cf8e38310ca1" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/95b0f54f8a898072a2810c05fab34d971f23a612" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/d1b57669732d09da7e13ef86d058dab0cd57f6e0" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/d7ed3c85da0b230bcdf5329acfe012ed093f3daa" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/de075af8c404f7d59ed34df230aedd9f645fb846" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-908" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-898x-9xrw-84qr/GHSA-898x-9xrw-84qr.json b/advisories/unreviewed/2025/04/GHSA-898x-9xrw-84qr/GHSA-898x-9xrw-84qr.json new file mode 100644 index 00000000000..496d7a668ca --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-898x-9xrw-84qr/GHSA-898x-9xrw-84qr.json @@ -0,0 +1,66 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-898x-9xrw-84qr", + "modified": "2025-04-14T21:32:22Z", + "published": "2025-04-14T21:32:22Z", + "aliases": [ + "CVE-2022-49354" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe\n\nof_find_device_by_node() takes reference, we should use put_device()\nto release it when not need anymore.\nAdd missing put_device() to avoid refcount leak.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49354" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/10d6bdf532902be1d8aa5900b3c03c5671612aa2" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/19cb3ece14547cb1ca2021798aaf49a3f82643d1" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/7bd85c5ba1687daf54e3b6907673c3604b1e75cf" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/888312dc297a8a103f6371ef668c7e04f57a7679" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8d8ad067b90f231b8fdb14acee673ca4012f6045" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a4d3e5f1d7d4f8b5e3834fec0f057a762c55806b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c9782e1b21bee4b783a64b2a91e7e71406c21a21" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/d5a1e7f33c88780b279835d63665d7e38ccb671f" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/fb2cb409b504bb3a69e65a17f3120328c8e50219" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-9368-p9r2-276c/GHSA-9368-p9r2-276c.json b/advisories/unreviewed/2025/04/GHSA-9368-p9r2-276c/GHSA-9368-p9r2-276c.json new file mode 100644 index 00000000000..757cfaaa1b7 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-9368-p9r2-276c/GHSA-9368-p9r2-276c.json @@ -0,0 +1,68 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9368-p9r2-276c", + "modified": "2025-04-14T21:32:20Z", + "published": "2025-04-14T21:32:20Z", + "aliases": [ + "CVE-2022-49290" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmac80211: fix potential double free on mesh join\n\nWhile commit 6a01afcf8468 (\"mac80211: mesh: Free ie data when leaving\nmesh\") fixed a memory leak on mesh leave / teardown it introduced a\npotential memory corruption caused by a double free when rejoining the\nmesh:\n\n ieee80211_leave_mesh()\n -> kfree(sdata->u.mesh.ie);\n ...\n ieee80211_join_mesh()\n -> copy_mesh_setup()\n -> old_ie = ifmsh->ie;\n -> kfree(old_ie);\n\nThis double free / kernel panics can be reproduced by using wpa_supplicant\nwith an encrypted mesh (if set up without encryption via \"iw\" then\nifmsh->ie is always NULL, which avoids this issue). And then calling:\n\n $ iw dev mesh0 mesh leave\n $ iw dev mesh0 mesh join my-mesh\n\nNote that typically these commands are not used / working when using\nwpa_supplicant. And it seems that wpa_supplicant or wpa_cli are going\nthrough a NETDEV_DOWN/NETDEV_UP cycle between a mesh leave and mesh join\nwhere the NETDEV_UP resets the mesh.ie to NULL via a memcpy of\ndefault_mesh_setup in cfg80211_netdev_notifier_call, which then avoids\nthe memory corruption, too.\n\nThe issue was first observed in an application which was not using\nwpa_supplicant but \"Senf\" instead, which implements its own calls to\nnl80211.\n\nFixing the issue by removing the kfree()'ing of the mesh IE in the mesh\njoin function and leaving it solely up to the mesh leave to free the\nmesh IE.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49290" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/12e407a8ef17623823fd0c066fbd7f103953d28d" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/273ebddc5fda2967492cb0b6cdd7d81cfb821b76" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3bbd0000d012f92aec423b224784fbf0f7bf40f8" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/46bb87d40683337757a2f902fcd4244b32bb4e86" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/4a2d4496e15ea5bb5c8e83b94ca8ca7fb045e7d3" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/582d8c60c0c053684f7138875e8150d5749ffc17" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/5d3ff9542a40ce034416bca03864709540a36016" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/615716af8644813355e014314a0bc1e961250f5a" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c1d9c3628ef0a0ca197595d0f9e01cd3b5dda186" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-415" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-9cc8-5cmc-hcj3/GHSA-9cc8-5cmc-hcj3.json b/advisories/unreviewed/2025/04/GHSA-9cc8-5cmc-hcj3/GHSA-9cc8-5cmc-hcj3.json new file mode 100644 index 00000000000..8ed6813ea33 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-9cc8-5cmc-hcj3/GHSA-9cc8-5cmc-hcj3.json @@ -0,0 +1,64 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9cc8-5cmc-hcj3", + "modified": "2025-04-14T21:32:22Z", + "published": "2025-04-14T21:32:21Z", + "aliases": [ + "CVE-2022-49322" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Fix sleeping function called from invalid context on RT kernel\n\nWhen setting bootparams=\"trace_event=initcall:initcall_start tp_printk=1\" in the\ncmdline, the output_printk() was called, and the spin_lock_irqsave() was called in the\natomic and irq disable interrupt context suitation. On the PREEMPT_RT kernel,\nthese locks are replaced with sleepable rt-spinlock, so the stack calltrace will\nbe triggered.\nFix it by raw_spin_lock_irqsave when PREEMPT_RT and \"trace_event=initcall:initcall_start\ntp_printk=1\" enabled.\n\n BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:46\n in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1, name: swapper/0\n preempt_count: 2, expected: 0\n RCU nest depth: 0, expected: 0\n Preemption disabled at:\n [] try_to_wake_up+0x7e/0xba0\n CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.17.1-rt17+ #19 34c5812404187a875f32bee7977f7367f9679ea7\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-2 04/01/2014\n Call Trace:\n \n dump_stack_lvl+0x60/0x8c\n dump_stack+0x10/0x12\n __might_resched.cold+0x11d/0x155\n rt_spin_lock+0x40/0x70\n trace_event_buffer_commit+0x2fa/0x4c0\n ? map_vsyscall+0x93/0x93\n trace_event_raw_event_initcall_start+0xbe/0x110\n ? perf_trace_initcall_finish+0x210/0x210\n ? probe_sched_wakeup+0x34/0x40\n ? ttwu_do_wakeup+0xda/0x310\n ? trace_hardirqs_on+0x35/0x170\n ? map_vsyscall+0x93/0x93\n do_one_initcall+0x217/0x3c0\n ? trace_event_raw_event_initcall_level+0x170/0x170\n ? push_cpu_stop+0x400/0x400\n ? cblist_init_generic+0x241/0x290\n kernel_init_freeable+0x1ac/0x347\n ? _raw_spin_unlock_irq+0x65/0x80\n ? rest_init+0xf0/0xf0\n kernel_init+0x1e/0x150\n ret_from_fork+0x22/0x30\n ", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49322" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/12025abdc8539ed9d5014e2d647a3fd1bd3de5cd" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/1788e6dbb61286215442b1af99e51405a6206762" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/40f9fde06b25884baa0c4bd138b909a9b67218b4" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/43bfc4dccc416c964b53cbdc430e814f8b6f770b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/48c6ee7d6c614f09b2c8553a95eefef6ecf196e0" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/9abf3db8bdb63ab545034148ef2118f4d088ca59" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/9b534640a2c6a8d88168febc82ec6d161184f2ec" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/be1f323fb9d9b14a505ca22d742d321769454de1" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-667" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-9crv-c24c-9g53/GHSA-9crv-c24c-9g53.json b/advisories/unreviewed/2025/04/GHSA-9crv-c24c-9g53/GHSA-9crv-c24c-9g53.json new file mode 100644 index 00000000000..5c4b602ae14 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-9crv-c24c-9g53/GHSA-9crv-c24c-9g53.json @@ -0,0 +1,60 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9crv-c24c-9g53", + "modified": "2025-04-14T21:32:19Z", + "published": "2025-04-14T21:32:19Z", + "aliases": [ + "CVE-2022-49279" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: prevent integer overflow on 32 bit systems\n\nOn a 32 bit system, the \"len * sizeof(*p)\" operation can have an\ninteger overflow.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49279" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/23a9dbbe0faf124fc4c139615633b9d12a3a89ef" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/303cd6173dce0a28d26526c77814eb90a41bd898" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3a2789e8ccb4a3e2a631f6817a2d3bb98b8c4fd8" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/79b1c54fc6ce09ee0d5fe088bb3de26ae2150e3c" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/7af164fa2f1abc577d357d22d83a2f3490875d7e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ce1aa09cc14ed625104acc2d487bd92b9a88efe2" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/e4195d27306ea468a6dc3a27af6f586709951229" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-9f47-5gr7-5wcf/GHSA-9f47-5gr7-5wcf.json b/advisories/unreviewed/2025/04/GHSA-9f47-5gr7-5wcf/GHSA-9f47-5gr7-5wcf.json new file mode 100644 index 00000000000..0fec996785d --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-9f47-5gr7-5wcf/GHSA-9f47-5gr7-5wcf.json @@ -0,0 +1,54 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9f47-5gr7-5wcf", + "modified": "2025-04-14T21:32:22Z", + "published": "2025-04-14T21:32:22Z", + "aliases": [ + "CVE-2022-49373" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe\n\nof_parse_phandle() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\nAdd missing of_node_put() in some error paths.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49373" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/5b110d940417942bc87d9e4bea6d4f24e05ed483" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/5d24df3d690809952528e7a19a43d84bc5b99d44" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/7a4afd8a003d6abf1f5d159c2bb67e6b7cbde253" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/910b1cdf6c50ae8fb222e46657d04fb181577017" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/91fa5aa53f68b85e779164b3127c7e23cad5c457" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f067b5286edfd83d2d3903e8578b561599d62539" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-9jjw-6883-wqjh/GHSA-9jjw-6883-wqjh.json b/advisories/unreviewed/2025/04/GHSA-9jjw-6883-wqjh/GHSA-9jjw-6883-wqjh.json new file mode 100644 index 00000000000..d825fe368ed --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-9jjw-6883-wqjh/GHSA-9jjw-6883-wqjh.json @@ -0,0 +1,68 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9jjw-6883-wqjh", + "modified": "2025-04-14T21:32:23Z", + "published": "2025-04-14T21:32:23Z", + "aliases": [ + "CVE-2022-49375" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: mt6397: check return value after calling platform_get_resource()\n\nIt will cause null-ptr-deref if platform_get_resource() returns NULL,\nwe need check the return value.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49375" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3867f0bbb94773d41e789257abec0d14f37da217" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/58a729c55ce3a432eb827fdaa24c7909cd3b0a6b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/6ecd4d5c28408df36a1a6f0b1973f633c949ac1f" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/79fa3f5758d8712df0678df98161f948fc4370e5" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/82bfea344e8f7e9a0e0b1bf9af27552baa756620" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/865051de2d9eaa50630e055b73921ceaf3c4a7fc" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/d3b43eb505bffb8e4cdf6800c15660c001553fe6" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/d77f28c1bc9d3043a52069fe42e4a26fbf961ebd" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/da38e86d6cf6dd3bc65c602d998f357145aa1a0b" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-9qmf-mrc9-rwrx/GHSA-9qmf-mrc9-rwrx.json b/advisories/unreviewed/2025/04/GHSA-9qmf-mrc9-rwrx/GHSA-9qmf-mrc9-rwrx.json new file mode 100644 index 00000000000..153bf9af3d2 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-9qmf-mrc9-rwrx/GHSA-9qmf-mrc9-rwrx.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9qmf-mrc9-rwrx", + "modified": "2025-04-14T21:32:21Z", + "published": "2025-04-14T21:32:21Z", + "aliases": [ + "CVE-2022-49303" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: staging: rtl8192eu: Fix deadlock in rtw_joinbss_event_prehandle\n\nThere is a deadlock in rtw_joinbss_event_prehandle(), which is shown below:\n\n (Thread 1) | (Thread 2)\n | _set_timer()\nrtw_joinbss_event_prehandle()| mod_timer()\n spin_lock_bh() //(1) | (wait a time)\n ... | rtw_join_timeout_handler()\n | _rtw_join_timeout_handler()\n del_timer_sync() | spin_lock_bh() //(2)\n (wait timer to stop) | ...\n\nWe hold pmlmepriv->lock in position (1) of thread 1 and\nuse del_timer_sync() to wait timer to stop, but timer handler\nalso need pmlmepriv->lock in position (2) of thread 2.\nAs a result, rtw_joinbss_event_prehandle() will block forever.\n\nThis patch extracts del_timer_sync() from the protection of\nspin_lock_bh(), which could let timer handler to obtain\nthe needed lock. What`s more, we change spin_lock_bh() to\nspin_lock_irq() in _rtw_join_timeout_handler() in order to\nprevent deadlock.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49303" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/0fcddf9c7c10202946d5b19409efbdff744fba88" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/25cf414b0610fea29d8e045f315648d9007c9a46" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-667" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-ccpj-r729-pqcf/GHSA-ccpj-r729-pqcf.json b/advisories/unreviewed/2025/04/GHSA-ccpj-r729-pqcf/GHSA-ccpj-r729-pqcf.json new file mode 100644 index 00000000000..0838b8e77dc --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-ccpj-r729-pqcf/GHSA-ccpj-r729-pqcf.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ccpj-r729-pqcf", + "modified": "2025-04-14T21:32:22Z", + "published": "2025-04-14T21:32:22Z", + "aliases": [ + "CVE-2022-49369" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\namt: fix possible memory leak in amt_rcv()\n\nIf an amt receives packets and it finds socket.\nIf it can't find a socket, it should free a received skb.\nBut it doesn't.\nSo, a memory leak would possibly occur.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49369" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/1a1a0e80e005cbdc2c250fc858e1d8570f4e4acb" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/4b8032d39b276c52db57ff834c300405b9da2691" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/60d9c020c69977e138727b3577bc6a0458325e9c" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-401" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-cg4r-9g44-qvw4/GHSA-cg4r-9g44-qvw4.json b/advisories/unreviewed/2025/04/GHSA-cg4r-9g44-qvw4/GHSA-cg4r-9g44-qvw4.json index 7f2a49c12f9..21114910f59 100644 --- a/advisories/unreviewed/2025/04/GHSA-cg4r-9g44-qvw4/GHSA-cg4r-9g44-qvw4.json +++ b/advisories/unreviewed/2025/04/GHSA-cg4r-9g44-qvw4/GHSA-cg4r-9g44-qvw4.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-cg4r-9g44-qvw4", - "modified": "2025-04-11T15:32:30Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-04-11T15:32:30Z", "aliases": [ "CVE-2023-42961" ], "details": "A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, macOS Monterey 12.7. A sandboxed process may be able to circumvent sandbox restrictions.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + } + ], "affected": [], "references": [ { @@ -36,8 +41,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-22" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-04-11T15:15:44Z" diff --git a/advisories/unreviewed/2025/04/GHSA-fc4w-ww8r-wx6x/GHSA-fc4w-ww8r-wx6x.json b/advisories/unreviewed/2025/04/GHSA-fc4w-ww8r-wx6x/GHSA-fc4w-ww8r-wx6x.json new file mode 100644 index 00000000000..1d3773d2485 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-fc4w-ww8r-wx6x/GHSA-fc4w-ww8r-wx6x.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fc4w-ww8r-wx6x", + "modified": "2025-04-14T21:32:20Z", + "published": "2025-04-14T21:32:20Z", + "aliases": [ + "CVE-2022-49282" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: quota: fix loop condition at f2fs_quota_sync()\n\ncnt should be passed to sb_has_quota_active() instead of type to check\nactive quota properly.\n\nMoreover, when the type is -1, the compiler with enough inline knowledge\ncan discard sb_has_quota_active() check altogether, causing a NULL pointer\ndereference at the following inode_lock(dqopt->files[cnt]):\n\n[ 2.796010] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0\n[ 2.796024] Mem abort info:\n[ 2.796025] ESR = 0x96000005\n[ 2.796028] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 2.796029] SET = 0, FnV = 0\n[ 2.796031] EA = 0, S1PTW = 0\n[ 2.796032] Data abort info:\n[ 2.796034] ISV = 0, ISS = 0x00000005\n[ 2.796035] CM = 0, WnR = 0\n[ 2.796046] user pgtable: 4k pages, 39-bit VAs, pgdp=00000003370d1000\n[ 2.796048] [00000000000000a0] pgd=0000000000000000, pud=0000000000000000\n[ 2.796051] Internal error: Oops: 96000005 [#1] PREEMPT SMP\n[ 2.796056] CPU: 7 PID: 640 Comm: f2fs_ckpt-259:7 Tainted: G S 5.4.179-arter97-r8-64666-g2f16e087f9d8 #1\n[ 2.796057] Hardware name: Qualcomm Technologies, Inc. Lahaina MTP lemonadep (DT)\n[ 2.796059] pstate: 80c00005 (Nzcv daif +PAN +UAO)\n[ 2.796065] pc : down_write+0x28/0x70\n[ 2.796070] lr : f2fs_quota_sync+0x100/0x294\n[ 2.796071] sp : ffffffa3f48ffc30\n[ 2.796073] x29: ffffffa3f48ffc30 x28: 0000000000000000\n[ 2.796075] x27: ffffffa3f6d718b8 x26: ffffffa415fe9d80\n[ 2.796077] x25: ffffffa3f7290048 x24: 0000000000000001\n[ 2.796078] x23: 0000000000000000 x22: ffffffa3f7290000\n[ 2.796080] x21: ffffffa3f72904a0 x20: ffffffa3f7290110\n[ 2.796081] x19: ffffffa3f77a9800 x18: ffffffc020aae038\n[ 2.796083] x17: ffffffa40e38e040 x16: ffffffa40e38e6d0\n[ 2.796085] x15: ffffffa40e38e6cc x14: ffffffa40e38e6d0\n[ 2.796086] x13: 00000000000004f6 x12: 00162c44ff493000\n[ 2.796088] x11: 0000000000000400 x10: ffffffa40e38c948\n[ 2.796090] x9 : 0000000000000000 x8 : 00000000000000a0\n[ 2.796091] x7 : 0000000000000000 x6 : 0000d1060f00002a\n[ 2.796093] x5 : ffffffa3f48ff718 x4 : 000000000000000d\n[ 2.796094] x3 : 00000000060c0000 x2 : 0000000000000001\n[ 2.796096] x1 : 0000000000000000 x0 : 00000000000000a0\n[ 2.796098] Call trace:\n[ 2.796100] down_write+0x28/0x70\n[ 2.796102] f2fs_quota_sync+0x100/0x294\n[ 2.796104] block_operations+0x120/0x204\n[ 2.796106] f2fs_write_checkpoint+0x11c/0x520\n[ 2.796107] __checkpoint_and_complete_reqs+0x7c/0xd34\n[ 2.796109] issue_checkpoint_thread+0x6c/0xb8\n[ 2.796112] kthread+0x138/0x414\n[ 2.796114] ret_from_fork+0x10/0x18\n[ 2.796117] Code: aa0803e0 aa1f03e1 52800022 aa0103e9 (c8e97d02)\n[ 2.796120] ---[ end trace 96e942e8eb6a0b53 ]---\n[ 2.800116] Kernel panic - not syncing: Fatal exception\n[ 2.800120] SMP: stopping secondary CPUs", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49282" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/680af5b824a52faa819167628665804a14f0e0df" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/724469814d805820cd37ea789769dba94123ff1a" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/e58ee6bd939b773675240f5d0f5b88a367c037c4" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/e9ebf1e8fc50b6a9336f9aea1082d7845e568d0e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f1d5946d47c0827bae39e1537959ce8d6f0224c5" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f9156db0987f1b426015d56505e2c58dee70c90d" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-fg3p-xv26-qc77/GHSA-fg3p-xv26-qc77.json b/advisories/unreviewed/2025/04/GHSA-fg3p-xv26-qc77/GHSA-fg3p-xv26-qc77.json new file mode 100644 index 00000000000..f9a0b441881 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-fg3p-xv26-qc77/GHSA-fg3p-xv26-qc77.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fg3p-xv26-qc77", + "modified": "2025-04-14T21:32:24Z", + "published": "2025-04-14T21:32:24Z", + "aliases": [ + "CVE-2022-43852" + ], + "details": "IBM Aspera Console 3.4.0 through 3.4.4 could disclose sensitive information in HTTP headers that could be used in further attacks against the system.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-43852" + }, + { + "type": "WEB", + "url": "https://www.ibm.com/support/pages/node/7169766" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-497" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-14T21:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-fh2c-3j7r-hvgv/GHSA-fh2c-3j7r-hvgv.json b/advisories/unreviewed/2025/04/GHSA-fh2c-3j7r-hvgv/GHSA-fh2c-3j7r-hvgv.json new file mode 100644 index 00000000000..f05e3a2fd41 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-fh2c-3j7r-hvgv/GHSA-fh2c-3j7r-hvgv.json @@ -0,0 +1,48 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fh2c-3j7r-hvgv", + "modified": "2025-04-14T21:32:22Z", + "published": "2025-04-14T21:32:22Z", + "aliases": [ + "CVE-2022-49365" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()\n\nThe > ARRAY_SIZE() should be >= ARRAY_SIZE() to prevent an out of bounds\naccess.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49365" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/607c5cd1a08e196d9f2bd3b25a8083ed27ad7ceb" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a35faec3db0e13aac8ea720bc1a3503081dd5a3d" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/b0808b7a04157b3f56e919f27023fec37a075fad" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ec9ec3bc08b18c5b1b2feafd306ea7c348013898" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-193" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-fjrf-m4f9-hh77/GHSA-fjrf-m4f9-hh77.json b/advisories/unreviewed/2025/04/GHSA-fjrf-m4f9-hh77/GHSA-fjrf-m4f9-hh77.json new file mode 100644 index 00000000000..5181ae26a6a --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-fjrf-m4f9-hh77/GHSA-fjrf-m4f9-hh77.json @@ -0,0 +1,64 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fjrf-m4f9-hh77", + "modified": "2025-04-14T21:32:21Z", + "published": "2025-04-14T21:32:21Z", + "aliases": [ + "CVE-2022-49300" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnbd: fix race between nbd_alloc_config() and module removal\n\nWhen nbd module is being removing, nbd_alloc_config() may be\ncalled concurrently by nbd_genl_connect(), although try_module_get()\nwill return false, but nbd_alloc_config() doesn't handle it.\n\nThe race may lead to the leak of nbd_config and its related\nresources (e.g, recv_workq) and oops in nbd_read_stat() due\nto the unload of nbd module as shown below:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000040\n Oops: 0000 [#1] SMP PTI\n CPU: 5 PID: 13840 Comm: kworker/u17:33 Not tainted 5.14.0+ #1\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996)\n Workqueue: knbd16-recv recv_work [nbd]\n RIP: 0010:nbd_read_stat.cold+0x130/0x1a4 [nbd]\n Call Trace:\n recv_work+0x3b/0xb0 [nbd]\n process_one_work+0x1ed/0x390\n worker_thread+0x4a/0x3d0\n kthread+0x12a/0x150\n ret_from_fork+0x22/0x30\n\nFixing it by checking the return value of try_module_get()\nin nbd_alloc_config(). As nbd_alloc_config() may return ERR_PTR(-ENODEV),\nassign nbd->config only when nbd_alloc_config() succeeds to ensure\nthe value of nbd->config is binary (valid or NULL).\n\nAlso adding a debug message to check the reference counter\nof nbd_config during module removal.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49300" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/122e4adaff2439f1cc18cc7e931980fa7560df5c" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/165cf2e0019fa6cedc75b456490c41494c34abb4" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/2573f2375b64280be977431701ed5d33b75b9ad0" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/2888fa41985f93ed0a6837cfbb06bcbfd7fa2314" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/71c142f910da44421213ade601bcbd23ceae19fa" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8a7da4ced236ce6637fe70f14ca18e718d4bf9e9" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c55b2b983b0fa012942c3eb16384b2b722caa810" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/d09525720dd5201756f698bee1076de9aefd4602" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-362" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-fwjh-6558-x5c8/GHSA-fwjh-6558-x5c8.json b/advisories/unreviewed/2025/04/GHSA-fwjh-6558-x5c8/GHSA-fwjh-6558-x5c8.json new file mode 100644 index 00000000000..742f6605e7a --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-fwjh-6558-x5c8/GHSA-fwjh-6558-x5c8.json @@ -0,0 +1,68 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fwjh-6558-x5c8", + "modified": "2025-04-14T21:32:22Z", + "published": "2025-04-14T21:32:22Z", + "aliases": [ + "CVE-2022-49368" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()\n\nThe \"fsp->location\" variable comes from user via ethtool_get_rxnfc().\nCheck that it is valid to prevent an out of bounds read.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49368" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/0b238f75b65ed4462ef4cdfa718cac0ac7fce3b8" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/2bd1faedb74dc2a2be3972abcd4239b75a3e7b00" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/4cde554c70d7397cfa2e4116bacb4accdfb6fd48" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/5ba81f82607ead85fe36f50869fc4f5661359ab8" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/657e7174603f0aab2cdedc64ac81edffd2a87afe" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/71ae30662ec610b92644d13f79c78f76f17873b3" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/b24ca1cf846273361d5bd73a35de95a486a54b6d" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/b4f0e57ea0d867aacffad7999527e48bd4ea9293" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/e7e7104e2d5ddf3806a28695670f21bef471f1e1" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-125" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-gcr7-hvf6-ph59/GHSA-gcr7-hvf6-ph59.json b/advisories/unreviewed/2025/04/GHSA-gcr7-hvf6-ph59/GHSA-gcr7-hvf6-ph59.json new file mode 100644 index 00000000000..82bf69366cd --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-gcr7-hvf6-ph59/GHSA-gcr7-hvf6-ph59.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gcr7-hvf6-ph59", + "modified": "2025-04-14T21:32:20Z", + "published": "2025-04-14T21:32:20Z", + "aliases": [ + "CVE-2022-49296" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix possible deadlock when holding Fwb to get inline_data\n\n1, mount with wsync.\n2, create a file with O_RDWR, and the request was sent to mds.0:\n\n ceph_atomic_open()-->\n ceph_mdsc_do_request(openc)\n finish_open(file, dentry, ceph_open)-->\n ceph_open()-->\n ceph_init_file()-->\n ceph_init_file_info()-->\n ceph_uninline_data()-->\n {\n ...\n if (inline_version == 1 || /* initial version, no data */\n inline_version == CEPH_INLINE_NONE)\n goto out_unlock;\n ...\n }\n\nThe inline_version will be 1, which is the initial version for the\nnew create file. And here the ci->i_inline_version will keep with 1,\nit's buggy.\n\n3, buffer write to the file immediately:\n\n ceph_write_iter()-->\n ceph_get_caps(file, need=Fw, want=Fb, ...);\n generic_perform_write()-->\n a_ops->write_begin()-->\n ceph_write_begin()-->\n netfs_write_begin()-->\n netfs_begin_read()-->\n netfs_rreq_submit_slice()-->\n netfs_read_from_server()-->\n rreq->netfs_ops->issue_read()-->\n ceph_netfs_issue_read()-->\n {\n ...\n if (ci->i_inline_version != CEPH_INLINE_NONE &&\n ceph_netfs_issue_op_inline(subreq))\n return;\n ...\n }\n ceph_put_cap_refs(ci, Fwb);\n\nThe ceph_netfs_issue_op_inline() will send a getattr(Fsr) request to\nmds.1.\n\n4, then the mds.1 will request the rd lock for CInode::filelock from\nthe auth mds.0, the mds.0 will do the CInode::filelock state transation\nfrom excl --> sync, but it need to revoke the Fxwb caps back from the\nclients.\n\nWhile the kernel client has aleady held the Fwb caps and waiting for\nthe getattr(Fsr).\n\nIt's deadlock!\n\nURL: https://tracker.ceph.com/issues/55377", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49296" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/292b7a7275ce535a1abfa4dd0b2e586162aaae1e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/825978fd6a0defc3c29d8a38b6cea76a0938d21e" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-667" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-gf5c-p7m8-wjpg/GHSA-gf5c-p7m8-wjpg.json b/advisories/unreviewed/2025/04/GHSA-gf5c-p7m8-wjpg/GHSA-gf5c-p7m8-wjpg.json new file mode 100644 index 00000000000..5580cf63139 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-gf5c-p7m8-wjpg/GHSA-gf5c-p7m8-wjpg.json @@ -0,0 +1,66 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gf5c-p7m8-wjpg", + "modified": "2025-04-14T21:32:22Z", + "published": "2025-04-14T21:32:22Z", + "aliases": [ + "CVE-2022-49351" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: altera: Fix refcount leak in altera_tse_mdio_create\n\nEvery iteration of for_each_child_of_node() decrements\nthe reference count of the previous node.\nWhen break from a for_each_child_of_node() loop,\nwe need to explicitly call of_node_put() on the child node when\nnot need anymore.\nAdd missing of_node_put() to avoid refcount leak.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49351" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/11ec18b1d8d92b9df307d31950dcba0b3dd7283c" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/1fd12298a0e0ca23478c715e672ee64c85670584" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/4f850fe0a32c3f1e19b76996a3b1ca32637a14de" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/5cd0e22fa11f4a21a8c09cc258f20b1474c95801" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/803b217f1fb49a2dbb2123acdb45111b9c48b8be" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8174acbef87b8dd8bf3731eba2a5af1ac857e239" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/96bf5ed057df2d157274d4e2079002f9a9404bb8" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a013fa884d8738ad8455aa1a843b8c9d80c6c833" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/e31d9ba169860687dba19bdc8fccbfd34077f655" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-ggw9-xmqw-whqq/GHSA-ggw9-xmqw-whqq.json b/advisories/unreviewed/2025/04/GHSA-ggw9-xmqw-whqq/GHSA-ggw9-xmqw-whqq.json new file mode 100644 index 00000000000..4a500bfa97d --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-ggw9-xmqw-whqq/GHSA-ggw9-xmqw-whqq.json @@ -0,0 +1,62 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ggw9-xmqw-whqq", + "modified": "2025-04-14T21:32:22Z", + "published": "2025-04-14T21:32:22Z", + "aliases": [ + "CVE-2022-49367" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register\n\nof_get_child_by_name() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\n\nmv88e6xxx_mdio_register() pass the device node to of_mdiobus_register().\nWe don't need the device node after it.\n\nAdd missing of_node_put() to avoid refcount leak.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49367" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/02ded5a173619b11728b8bf75a3fd995a2c1ff28" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/42658e47f1abbbe592007d3ba303de466114d0bb" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/86c3c5f8e4bd1325e24f6fba9017cade29933377" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8a1a1255152da4fb934290e7ababc66f24985520" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a101793994c0a14c70bb4e44c7fda597eeebba0a" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c1df9cb756e5a9ba1841648c44ee5d92306b9c65" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/dc1cf8c6f9793546696fded437a5b4c84944c48b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/e0d763d0c7665c7897e4f5a0847ab0c82543345f" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-gj57-w9c9-x3x9/GHSA-gj57-w9c9-x3x9.json b/advisories/unreviewed/2025/04/GHSA-gj57-w9c9-x3x9/GHSA-gj57-w9c9-x3x9.json new file mode 100644 index 00000000000..d9db9ee5324 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-gj57-w9c9-x3x9/GHSA-gj57-w9c9-x3x9.json @@ -0,0 +1,34 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gj57-w9c9-x3x9", + "modified": "2025-04-14T21:32:24Z", + "published": "2025-04-14T21:32:24Z", + "aliases": [ + "CVE-2022-43840" + ], + "details": "IBM Aspera Console 3.4.0 through 3.4.4\n\nis vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-43840" + }, + { + "type": "WEB", + "url": "https://www.ibm.com/support/pages/node/7169766" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-14T21:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-gmvc-v65c-677x/GHSA-gmvc-v65c-677x.json b/advisories/unreviewed/2025/04/GHSA-gmvc-v65c-677x/GHSA-gmvc-v65c-677x.json new file mode 100644 index 00000000000..a61d11fc4b5 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-gmvc-v65c-677x/GHSA-gmvc-v65c-677x.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gmvc-v65c-677x", + "modified": "2025-04-14T21:32:25Z", + "published": "2025-04-14T21:32:25Z", + "aliases": [ + "CVE-2025-3589" + ], + "details": "A vulnerability, which was classified as critical, was found in SourceCodester Music Class Enrollment System 1.0. Affected is an unknown function of the file /manage_class.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3589" + }, + { + "type": "WEB", + "url": "https://github.com/byxs0x0/SQL/blob/main/SQL6.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.304644" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.304644" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.550267" + }, + { + "type": "WEB", + "url": "https://www.sourcecodester.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-14T21:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-gv56-7jpr-6c22/GHSA-gv56-7jpr-6c22.json b/advisories/unreviewed/2025/04/GHSA-gv56-7jpr-6c22/GHSA-gv56-7jpr-6c22.json new file mode 100644 index 00000000000..c3d253cea11 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-gv56-7jpr-6c22/GHSA-gv56-7jpr-6c22.json @@ -0,0 +1,68 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gv56-7jpr-6c22", + "modified": "2025-04-14T21:32:21Z", + "published": "2025-04-14T21:32:21Z", + "aliases": [ + "CVE-2022-49298" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: rtl8712: fix uninit-value in r871xu_drv_init()\n\nWhen 'tmpU1b' returns from r8712_read8(padapter, EE_9346CR) is 0,\n'mac[6]' will not be initialized.\n\nBUG: KMSAN: uninit-value in r871xu_drv_init+0x2d54/0x3070 drivers/staging/rtl8712/usb_intf.c:541\n r871xu_drv_init+0x2d54/0x3070 drivers/staging/rtl8712/usb_intf.c:541\n usb_probe_interface+0xf19/0x1600 drivers/usb/core/driver.c:396\n really_probe+0x653/0x14b0 drivers/base/dd.c:596\n __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:752\n driver_probe_device drivers/base/dd.c:782 [inline]\n __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:899\n bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427\n __device_attach+0x593/0x8e0 drivers/base/dd.c:970\n device_initial_probe+0x4a/0x60 drivers/base/dd.c:1017\n bus_probe_device+0x17b/0x3e0 drivers/base/bus.c:487\n device_add+0x1fff/0x26e0 drivers/base/core.c:3405\n usb_set_configuration+0x37e9/0x3ed0 drivers/usb/core/message.c:2170\n usb_generic_driver_probe+0x13c/0x300 drivers/usb/core/generic.c:238\n usb_probe_device+0x309/0x570 drivers/usb/core/driver.c:293\n really_probe+0x653/0x14b0 drivers/base/dd.c:596\n __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:752\n driver_probe_device drivers/base/dd.c:782 [inline]\n __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:899\n bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427\n __device_attach+0x593/0x8e0 drivers/base/dd.c:970\n device_initial_probe+0x4a/0x60 drivers/base/dd.c:1017\n bus_probe_device+0x17b/0x3e0 drivers/base/bus.c:487\n device_add+0x1fff/0x26e0 drivers/base/core.c:3405\n usb_new_device+0x1b8e/0x2950 drivers/usb/core/hub.c:2566\n hub_port_connect drivers/usb/core/hub.c:5358 [inline]\n hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]\n port_event drivers/usb/core/hub.c:5660 [inline]\n hub_event+0x58e3/0x89e0 drivers/usb/core/hub.c:5742\n process_one_work+0xdb6/0x1820 kernel/workqueue.c:2307\n worker_thread+0x10b3/0x21e0 kernel/workqueue.c:2454\n kthread+0x3c7/0x500 kernel/kthread.c:377\n ret_from_fork+0x1f/0x30\n\nLocal variable mac created at:\n r871xu_drv_init+0x1771/0x3070 drivers/staging/rtl8712/usb_intf.c:394\n usb_probe_interface+0xf19/0x1600 drivers/usb/core/driver.c:396\n\nKMSAN: uninit-value in r871xu_drv_init\nhttps://syzkaller.appspot.com/bug?id=3cd92b1d85428b128503bfa7a250294c9ae00bd8", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49298" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/0458e5428e5e959d201a40ffe71d762a79ecedc4" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/0b7371a22489cbb2e8e826ca03fb5ce92afb04fe" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/277faa442fe0c59f418ac53f47a78e1266addd65" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/52a0d88c328098b4e9fb8f2f3877fec0eff4104b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/70df04433fd351ba72bc635bd0b5fe443d9ac964" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/76a964ad0ea8f2b10abd69a7532e174a28258283" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a6535d00a9d54ce1c2a8d86a85001ffb6844f9b2" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f36e754a1f0bafb9feeea63463de78080acb6de0" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ff727ab0b7d7a56b5ef281f12abd00c4b85894e9" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-908" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-hqj3-8v2m-82w8/GHSA-hqj3-8v2m-82w8.json b/advisories/unreviewed/2025/04/GHSA-hqj3-8v2m-82w8/GHSA-hqj3-8v2m-82w8.json new file mode 100644 index 00000000000..fa73ae7d97c --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-hqj3-8v2m-82w8/GHSA-hqj3-8v2m-82w8.json @@ -0,0 +1,68 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hqj3-8v2m-82w8", + "modified": "2025-04-14T21:32:22Z", + "published": "2025-04-14T21:32:22Z", + "aliases": [ + "CVE-2022-49370" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle\n\nkobject_init_and_add() takes reference even when it fails.\nAccording to the doc of kobject_init_and_add()\n\n If this function returns an error, kobject_put() must be called to\n properly clean up the memory associated with the object.\n\nFix this issue by calling kobject_put().", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49370" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3ba359ebe914ac3f8c6c832b28007c14c39d3766" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/660ba678f9998aca6db74f2dd912fa5124f0fa31" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/985706bd3bbeffc8737bc05965ca8d24837bc7db" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a724634b2a49f6ff0177a9e19a5a92fc1545e1b7" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a9bfb37d6ba7c376b0d53337a4c5f5ff324bd725" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c66cc3c62870a27ea8f060a7e4c1ad8d26dd3f0d" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ec752973aa721ee281d5441e497364637c626c7b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ed38d04342dfbe9e5aca745c8b5eb4188a74f0ef" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/fdffa4ad8f6bf1ece877edfb807f2b2c729d8578" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-401" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-hvr9-mmhm-xx2r/GHSA-hvr9-mmhm-xx2r.json b/advisories/unreviewed/2025/04/GHSA-hvr9-mmhm-xx2r/GHSA-hvr9-mmhm-xx2r.json new file mode 100644 index 00000000000..0df1cf7792e --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-hvr9-mmhm-xx2r/GHSA-hvr9-mmhm-xx2r.json @@ -0,0 +1,68 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hvr9-mmhm-xx2r", + "modified": "2025-04-14T21:32:23Z", + "published": "2025-04-14T21:32:23Z", + "aliases": [ + "CVE-2022-49381" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\njffs2: fix memory leak in jffs2_do_fill_super\n\nIf jffs2_iget() or d_make_root() in jffs2_do_fill_super() returns\nan error, we can observe the following kmemleak report:\n\n--------------------------------------------\nunreferenced object 0xffff888105a65340 (size 64):\n comm \"mount\", pid 710, jiffies 4302851558 (age 58.239s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [] kmem_cache_alloc_trace+0x475/0x8a0\n [] jffs2_sum_init+0x96/0x1a0\n [] jffs2_do_mount_fs+0x745/0x2120\n [] jffs2_do_fill_super+0x35c/0x810\n [] jffs2_fill_super+0x2b9/0x3b0\n [...]\nunreferenced object 0xffff8881bd7f0000 (size 65536):\n comm \"mount\", pid 710, jiffies 4302851558 (age 58.239s)\n hex dump (first 32 bytes):\n bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................\n bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................\n backtrace:\n [] kmalloc_order+0xda/0x110\n [] kmalloc_order_trace+0x21/0x130\n [] __kmalloc+0x711/0x8a0\n [] jffs2_sum_init+0xd9/0x1a0\n [] jffs2_do_mount_fs+0x745/0x2120\n [] jffs2_do_fill_super+0x35c/0x810\n [] jffs2_fill_super+0x2b9/0x3b0\n [...]\n--------------------------------------------\n\nThis is because the resources allocated in jffs2_sum_init() are not\nreleased. Call jffs2_sum_exit() to release these resources to solve\nthe problem.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49381" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/28048a4cf3813b7cf5cc8cce629dfdc7951cb1c2" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3252d327f977b14663a10967f3b0930d6c325687" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/4ba7bbeab8009faf3a726e565d98816593ddd5b0" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/4da8763a3d2b684c773b72ed80fad40bc264bc40" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/69295267c481545f636b69ff341b8db75aa136b9" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c14adb1cf70a984ed081c67e9d27bc3caad9537c" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/cf9db013e167bc8fc2ecd7a13ed97a37df0c9dab" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/d3a4fff1e7e408c32649030daa7c2c42a7e19a95" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ecc53e58596542791e82eff00702f8af7a313f70" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-401" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-m562-wccv-64rv/GHSA-m562-wccv-64rv.json b/advisories/unreviewed/2025/04/GHSA-m562-wccv-64rv/GHSA-m562-wccv-64rv.json new file mode 100644 index 00000000000..ecf88031a1b --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-m562-wccv-64rv/GHSA-m562-wccv-64rv.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-m562-wccv-64rv", + "modified": "2025-04-14T21:32:23Z", + "published": "2025-04-14T21:32:22Z", + "aliases": [ + "CVE-2022-49376" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sd: Fix potential NULL pointer dereference\n\nIf sd_probe() sees an early error before sdkp->device is initialized,\nsd_zbc_release_disk() is called. This causes a NULL pointer dereference\nwhen sd_is_zoned() is called inside that function. Avoid this by removing\nthe call to sd_zbc_release_disk() in sd_probe() error path.\n\nThis change is safe and does not result in zone information memory leakage\nbecause the zone information for a zoned disk is allocated only when\nsd_revalidate_disk() is called, at which point sdkp->disk_dev is fully set,\nresulting in sd_disk_release() being called when needed to cleanup a disk\nzone information using sd_zbc_release_disk().", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49376" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/05fbde3a77a4f1d62e4c4428f384288c1f1a0be5" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/0fcb0b131cc90c8f523a293d84c58d0c7273c96f" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3733439593ad12f7b54ae35c273ea6f15d692de3" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/78f8e96df06e2d04d82d4071c299b59d28744f47" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c1f0187025905e9981000d44a92e159468b561a8" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-mr22-c455-3h5p/GHSA-mr22-c455-3h5p.json b/advisories/unreviewed/2025/04/GHSA-mr22-c455-3h5p/GHSA-mr22-c455-3h5p.json new file mode 100644 index 00000000000..1d07dbffd13 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-mr22-c455-3h5p/GHSA-mr22-c455-3h5p.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mr22-c455-3h5p", + "modified": "2025-04-14T21:32:24Z", + "published": "2025-04-14T21:32:24Z", + "aliases": [ + "CVE-2022-43851" + ], + "details": "IBM Aspera Console 3.4.0 through 3.4.4\n\nuses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-43851" + }, + { + "type": "WEB", + "url": "https://www.ibm.com/support/pages/node/7169766" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-327" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-14T21:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-mr46-3995-mfjf/GHSA-mr46-3995-mfjf.json b/advisories/unreviewed/2025/04/GHSA-mr46-3995-mfjf/GHSA-mr46-3995-mfjf.json new file mode 100644 index 00000000000..26aefcd4c42 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-mr46-3995-mfjf/GHSA-mr46-3995-mfjf.json @@ -0,0 +1,66 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mr46-3995-mfjf", + "modified": "2025-04-14T21:32:21Z", + "published": "2025-04-14T21:32:21Z", + "aliases": [ + "CVE-2022-49314" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: Fix a possible resource leak in icom_probe\n\nWhen pci_read_config_dword failed, call pci_release_regions() and\npci_disable_device() to recycle the resource previously allocated.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49314" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/23e155b51d403c0ccedc60c0d6c3c452afed07fe" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/5f9b2e4ca88cab1a96b86ecd45544e488ca43faf" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8c014373f178a4f13a08e045ef63bdb23f62e892" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/9a8305f357a8d03698fc7bc855ff9c6865d5486b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a2df0b4d080cc770b4da7bff487048c803dfd07e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/cb7147afd328c07edeeee287710d8d96ac0459f5" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/d703d912a985c1c5b50dd38c3181fc3540fa77cb" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ee157a79e7c82b01ae4c25de0ac75899801f322c" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f4c836d90da1ece88905d62ce2ce39a962f25d1a" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-mw36-6r6x-grr2/GHSA-mw36-6r6x-grr2.json b/advisories/unreviewed/2025/04/GHSA-mw36-6r6x-grr2/GHSA-mw36-6r6x-grr2.json new file mode 100644 index 00000000000..993e939505b --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-mw36-6r6x-grr2/GHSA-mw36-6r6x-grr2.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mw36-6r6x-grr2", + "modified": "2025-04-14T21:32:24Z", + "published": "2025-04-14T21:32:24Z", + "aliases": [ + "CVE-2022-43847" + ], + "details": "IBM Aspera Console 3.4.0 through 3.4.4 \n\nis vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-43847" + }, + { + "type": "WEB", + "url": "https://www.ibm.com/support/pages/node/7169766" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-644" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-14T21:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-pxjp-rx36-g2q8/GHSA-pxjp-rx36-g2q8.json b/advisories/unreviewed/2025/04/GHSA-pxjp-rx36-g2q8/GHSA-pxjp-rx36-g2q8.json new file mode 100644 index 00000000000..4509cb7ee87 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-pxjp-rx36-g2q8/GHSA-pxjp-rx36-g2q8.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pxjp-rx36-g2q8", + "modified": "2025-04-14T21:32:19Z", + "published": "2025-04-14T21:32:19Z", + "aliases": [ + "CVE-2024-11447" + ], + "details": "The Community by PeepSo – Download from PeepSo.com plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filter’ parameter in all versions up to, and including, 7.0.3.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11447" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/peepso-core/tags/6.4.6.2/templates/activity/activity-stream-filters-simple.php#L131" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/peepso-core/tags/6.4.6.2/templates/activity/activity-stream-filters.php#L179" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/peepso-core/trunk/classes/template.php#L68" + }, + { + "type": "WEB", + "url": "https://www.peepso.com/7.0.4.0" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/049a36b1-4e24-4ac9-a594-9cabdc0dfe0f?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-21T11:15:31Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-qh32-f63v-gpm9/GHSA-qh32-f63v-gpm9.json b/advisories/unreviewed/2025/04/GHSA-qh32-f63v-gpm9/GHSA-qh32-f63v-gpm9.json new file mode 100644 index 00000000000..3a2855b7ea0 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-qh32-f63v-gpm9/GHSA-qh32-f63v-gpm9.json @@ -0,0 +1,54 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qh32-f63v-gpm9", + "modified": "2025-04-14T21:32:21Z", + "published": "2025-04-14T21:32:21Z", + "aliases": [ + "CVE-2022-49318" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: remove WARN_ON in f2fs_is_valid_blkaddr\n\nSyzbot triggers two WARNs in f2fs_is_valid_blkaddr and\n__is_bitmap_valid. For example, in f2fs_is_valid_blkaddr,\nif type is DATA_GENERIC_ENHANCE or DATA_GENERIC_ENHANCE_READ,\nit invokes WARN_ON if blkaddr is not in the right range.\nThe call trace is as follows:\n\n f2fs_get_node_info+0x45f/0x1070\n read_node_page+0x577/0x1190\n __get_node_page.part.0+0x9e/0x10e0\n __get_node_page\n f2fs_get_node_page+0x109/0x180\n do_read_inode\n f2fs_iget+0x2a5/0x58b0\n f2fs_fill_super+0x3b39/0x7ca0\n\nFix these two WARNs by replacing WARN_ON with dump_stack.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49318" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/0a7a1fc7e71eecf2e5053a6c312c9f0dcbb9b8fd" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/32bea51fe4c6e92c00403739f7547c89219bea88" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8c62c5e26345c34d199b4b8c8e69255ba3d0e751" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/99c09b298e47ebbe345a6da9f268b32a6b0f4582" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/cd6374af36cc548464d8c47a93fdba7303bb82a4" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/dc2f78e2d4cc844a1458653d57ce1b54d4a29f21" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-qx93-7wx9-6wp7/GHSA-qx93-7wx9-6wp7.json b/advisories/unreviewed/2025/04/GHSA-qx93-7wx9-6wp7/GHSA-qx93-7wx9-6wp7.json new file mode 100644 index 00000000000..d1138df838e --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-qx93-7wx9-6wp7/GHSA-qx93-7wx9-6wp7.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qx93-7wx9-6wp7", + "modified": "2025-04-14T21:32:24Z", + "published": "2025-04-14T21:32:24Z", + "aliases": [ + "CVE-2025-1782" + ], + "details": "In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized \nbefore being used and can be misused to include an arbitrary file in the\n PHP code allowing an attacker to do anything as the web server user. \nThis flaw requires the attacker to be authenticated with a valid user account.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1782" + }, + { + "type": "WEB", + "url": "https://www.ifax.com/security/CVE-2025-1782.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-94" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-14T19:15:36Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-r3fw-g849-9j8v/GHSA-r3fw-g849-9j8v.json b/advisories/unreviewed/2025/04/GHSA-r3fw-g849-9j8v/GHSA-r3fw-g849-9j8v.json new file mode 100644 index 00000000000..3f53bcb6254 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-r3fw-g849-9j8v/GHSA-r3fw-g849-9j8v.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r3fw-g849-9j8v", + "modified": "2025-04-14T21:32:24Z", + "published": "2025-04-14T21:32:24Z", + "aliases": [ + "CVE-2025-3587" + ], + "details": "A vulnerability classified as critical was found in ZeroWdd/code-projects studentmanager 1.0. This vulnerability affects unknown code of the file /getTeacherList. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3587" + }, + { + "type": "WEB", + "url": "https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/ZeroWdd-studentmanager-authority.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.304642" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.304642" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.550129" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-266" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-14T20:15:19Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-r45q-6fx6-2q7q/GHSA-r45q-6fx6-2q7q.json b/advisories/unreviewed/2025/04/GHSA-r45q-6fx6-2q7q/GHSA-r45q-6fx6-2q7q.json new file mode 100644 index 00000000000..45c36b4ce25 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-r45q-6fx6-2q7q/GHSA-r45q-6fx6-2q7q.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r45q-6fx6-2q7q", + "modified": "2025-04-14T21:32:22Z", + "published": "2025-04-14T21:32:22Z", + "aliases": [ + "CVE-2022-49371" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndriver core: fix deadlock in __device_attach\n\nIn __device_attach function, The lock holding logic is as follows:\n...\n__device_attach\ndevice_lock(dev) // get lock dev\n async_schedule_dev(__device_attach_async_helper, dev); // func\n async_schedule_node\n async_schedule_node_domain(func)\n entry = kzalloc(sizeof(struct async_entry), GFP_ATOMIC);\n\t/* when fail or work limit, sync to execute func, but\n\t __device_attach_async_helper will get lock dev as\n\t well, which will lead to A-A deadlock. */\n\tif (!entry || atomic_read(&entry_count) > MAX_WORK) {\n\t func;\n\telse\n\t queue_work_node(node, system_unbound_wq, &entry->work)\n device_unlock(dev)\n\nAs shown above, when it is allowed to do async probes, because of\nout of memory or work limit, async work is not allowed, to do\nsync execute instead. it will lead to A-A deadlock because of\n__device_attach_async_helper getting lock dev.\n\nTo fix the deadlock, move the async_schedule_dev outside device_lock,\nas we can see, in async_schedule_node_domain, the parameter of\nqueue_work_node is system_unbound_wq, so it can accept concurrent\noperations. which will also not change the code logic, and will\nnot lead to deadlock.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49371" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/34fdd9b7def9d2fcb71bb7b0bc4848dd7313767e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/36ee9ffca8ef56c302f2855c4a5fccf61c0c1ada" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/593b595332bd2d65e1a5c1ae7897996c157f5468" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/b232b02bf3c205b13a26dcec08e53baddd8e59ed" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/d53a227bfcd5160ce1b61d9954901968a20651e7" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/df6de52b80aa3b46f5ac804412355ffe2e1df93e" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-667" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-r864-6v77-6j77/GHSA-r864-6v77-6j77.json b/advisories/unreviewed/2025/04/GHSA-r864-6v77-6j77/GHSA-r864-6v77-6j77.json new file mode 100644 index 00000000000..22394a079f7 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-r864-6v77-6j77/GHSA-r864-6v77-6j77.json @@ -0,0 +1,64 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r864-6v77-6j77", + "modified": "2025-04-14T21:32:20Z", + "published": "2025-04-14T21:32:20Z", + "aliases": [ + "CVE-2022-49295" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnbd: call genl_unregister_family() first in nbd_cleanup()\n\nOtherwise there may be race between module removal and the handling of\nnetlink command, which can lead to the oops as shown below:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000098\n Oops: 0002 [#1] SMP PTI\n CPU: 1 PID: 31299 Comm: nbd-client Tainted: G E 5.14.0-rc4\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996)\n RIP: 0010:down_write+0x1a/0x50\n Call Trace:\n start_creating+0x89/0x130\n debugfs_create_dir+0x1b/0x130\n nbd_start_device+0x13d/0x390 [nbd]\n nbd_genl_connect+0x42f/0x748 [nbd]\n genl_family_rcv_msg_doit.isra.0+0xec/0x150\n genl_rcv_msg+0xe5/0x1e0\n netlink_rcv_skb+0x55/0x100\n genl_rcv+0x29/0x40\n netlink_unicast+0x1a8/0x250\n netlink_sendmsg+0x21b/0x430\n ____sys_sendmsg+0x2a4/0x2d0\n ___sys_sendmsg+0x81/0xc0\n __sys_sendmsg+0x62/0xb0\n __x64_sys_sendmsg+0x1f/0x30\n do_syscall_64+0x3b/0xc0\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n Modules linked in: nbd(E-)", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49295" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/013a79f1b5c89290e2e97f1ebf14b14e0cf5fe5c" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/06c4da89c24e7023ea448cadf8e9daf06a0aae6e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/1be608e1ee1f222464b2856bda9b85ab5184a33e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3d5da1ffba3388c2ae2e6c598855a4d887d3bf79" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/6f505bbb8063fd3a238a4239d2d8c165e5279f6f" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8a1435c862ea09b06be7acda325128dc08458e25" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c0868f6e728c3c28bef0e8bee89d2daf86a8bbca" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/cbeafa7a79d08ecdb55f8f1d41a11323d0f709db" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-rj34-pxf7-99v6/GHSA-rj34-pxf7-99v6.json b/advisories/unreviewed/2025/04/GHSA-rj34-pxf7-99v6/GHSA-rj34-pxf7-99v6.json index 839a48355dd..e2e27b11a56 100644 --- a/advisories/unreviewed/2025/04/GHSA-rj34-pxf7-99v6/GHSA-rj34-pxf7-99v6.json +++ b/advisories/unreviewed/2025/04/GHSA-rj34-pxf7-99v6/GHSA-rj34-pxf7-99v6.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-rj34-pxf7-99v6", - "modified": "2025-04-11T15:32:31Z", + "modified": "2025-04-14T21:32:23Z", "published": "2025-04-11T15:32:31Z", "aliases": [ "CVE-2023-42982" ], "details": "Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" + } + ], "affected": [], "references": [ { @@ -20,8 +25,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-125" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-04-11T15:15:45Z" diff --git a/advisories/unreviewed/2025/04/GHSA-rxg6-f53c-h5x3/GHSA-rxg6-f53c-h5x3.json b/advisories/unreviewed/2025/04/GHSA-rxg6-f53c-h5x3/GHSA-rxg6-f53c-h5x3.json new file mode 100644 index 00000000000..674752da0a5 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-rxg6-f53c-h5x3/GHSA-rxg6-f53c-h5x3.json @@ -0,0 +1,68 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rxg6-f53c-h5x3", + "modified": "2025-04-14T21:32:21Z", + "published": "2025-04-14T21:32:21Z", + "aliases": [ + "CVE-2022-49299" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc2: gadget: don't reset gadget's driver->bus\n\nUDC driver should not touch gadget's driver internals, especially it\nshould not reset driver->bus. This wasn't harmful so far, but since\ncommit fc274c1e9973 (\"USB: gadget: Add a new bus for gadgets\") gadget\nsubsystem got it's own bus and messing with ->bus triggers the\nfollowing NULL pointer dereference:\n\ndwc2 12480000.hsotg: bound driver g_ether\n8<--- cut here ---\nUnable to handle kernel NULL pointer dereference at virtual address 00000000\n[00000000] *pgd=00000000\nInternal error: Oops: 5 [#1] SMP ARM\nModules linked in: ...\nCPU: 0 PID: 620 Comm: modprobe Not tainted 5.18.0-rc5-next-20220504 #11862\nHardware name: Samsung Exynos (Flattened Device Tree)\nPC is at module_add_driver+0x44/0xe8\nLR is at sysfs_do_create_link_sd+0x84/0xe0\n...\nProcess modprobe (pid: 620, stack limit = 0x(ptrval))\n...\n module_add_driver from bus_add_driver+0xf4/0x1e4\n bus_add_driver from driver_register+0x78/0x10c\n driver_register from usb_gadget_register_driver_owner+0x40/0xb4\n usb_gadget_register_driver_owner from do_one_initcall+0x44/0x1e0\n do_one_initcall from do_init_module+0x44/0x1c8\n do_init_module from load_module+0x19b8/0x1b9c\n load_module from sys_finit_module+0xdc/0xfc\n sys_finit_module from ret_fast_syscall+0x0/0x54\nException stack(0xf1771fa8 to 0xf1771ff0)\n...\ndwc2 12480000.hsotg: new device is high-speed\n---[ end trace 0000000000000000 ]---\n\nFix this by removing driver->bus entry reset.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49299" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/172cfc167c8ee6238f24f9c16efd598602af643c" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3120aac6d0ecd9accf56894aeac0e265f74d3d5a" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/5127c0f365265bb69cd776ad6e4b872c309f3fa8" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/547ebdc200b862dff761ff4890f66d8217c33316" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/5b0c0298f7c3b57417f1729ec4071f76864b72dd" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/bee8f9808a7e82addfc73a0973b16a8bb684205b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/d2159feb9d28ce496d77df98313ab454646372ac" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/d232ca0bbc7d03144bad0ffd1792c3352bfd03fa" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/efb15ff4a77fe053c941281775fefa91c87770e0" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-v435-p7h6-v9pj/GHSA-v435-p7h6-v9pj.json b/advisories/unreviewed/2025/04/GHSA-v435-p7h6-v9pj/GHSA-v435-p7h6-v9pj.json index 9eb9bf4fd1f..d6eb1975e25 100644 --- a/advisories/unreviewed/2025/04/GHSA-v435-p7h6-v9pj/GHSA-v435-p7h6-v9pj.json +++ b/advisories/unreviewed/2025/04/GHSA-v435-p7h6-v9pj/GHSA-v435-p7h6-v9pj.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-v435-p7h6-v9pj", - "modified": "2025-04-11T15:32:31Z", + "modified": "2025-04-14T21:32:24Z", "published": "2025-04-11T15:32:31Z", "aliases": [ "CVE-2023-42983" ], "details": "Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" + } + ], "affected": [], "references": [ { @@ -20,8 +25,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-400" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-04-11T15:15:45Z" diff --git a/advisories/unreviewed/2025/04/GHSA-wpfj-mj4c-x9cf/GHSA-wpfj-mj4c-x9cf.json b/advisories/unreviewed/2025/04/GHSA-wpfj-mj4c-x9cf/GHSA-wpfj-mj4c-x9cf.json new file mode 100644 index 00000000000..3dc99d84cdd --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-wpfj-mj4c-x9cf/GHSA-wpfj-mj4c-x9cf.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wpfj-mj4c-x9cf", + "modified": "2025-04-14T21:32:25Z", + "published": "2025-04-14T21:32:25Z", + "aliases": [ + "CVE-2023-27272" + ], + "details": "IBM Aspera Console 3.4.0 through 3.4.4 allows passwords to be reused when a new user logs into the system.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-27272" + }, + { + "type": "WEB", + "url": "https://www.ibm.com/support/pages/node/7169766" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-521" + ], + "severity": "LOW", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-14T21:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-x97p-h9j9-9889/GHSA-x97p-h9j9-9889.json b/advisories/unreviewed/2025/04/GHSA-x97p-h9j9-9889/GHSA-x97p-h9j9-9889.json new file mode 100644 index 00000000000..d06047870a4 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-x97p-h9j9-9889/GHSA-x97p-h9j9-9889.json @@ -0,0 +1,68 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x97p-h9j9-9889", + "modified": "2025-04-14T21:32:21Z", + "published": "2025-04-14T21:32:21Z", + "aliases": [ + "CVE-2022-49313" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: usb: host: Fix deadlock in oxu_bus_suspend()\n\nThere is a deadlock in oxu_bus_suspend(), which is shown below:\n\n (Thread 1) | (Thread 2)\n | timer_action()\noxu_bus_suspend() | mod_timer()\n spin_lock_irq() //(1) | (wait a time)\n ... | oxu_watchdog()\n del_timer_sync() | spin_lock_irq() //(2)\n (wait timer to stop) | ...\n\nWe hold oxu->lock in position (1) of thread 1, and use\ndel_timer_sync() to wait timer to stop, but timer handler\nalso need oxu->lock in position (2) of thread 2. As a result,\noxu_bus_suspend() will block forever.\n\nThis patch extracts del_timer_sync() from the protection of\nspin_lock_irq(), which could let timer handler to obtain\nthe needed lock.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49313" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/2dcec0bc142be2096af71a5703d63237127db204" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/4187b291a76664a3c03d3f0d9bfadc8322881868" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/4d378f2ae58138d4c55684e1d274e7dd94aa6524" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/9b58d255f27b0ed6a2e43208960864d67579db58" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a3d380188bde8900c3f604e82b56572896499124" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/b97aae8b43b718314012e8170b7e03dbfd2e7677" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/d888753872190abd18f68a7d77b9c7c367f0a7ab" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f8242044c91cafbba9e320b0fb31abf2429a3221" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ffe9440d698274c6462d2e304562c6ddfc8c84df" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-667" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-xg42-33mc-4587/GHSA-xg42-33mc-4587.json b/advisories/unreviewed/2025/04/GHSA-xg42-33mc-4587/GHSA-xg42-33mc-4587.json new file mode 100644 index 00000000000..e0bfac4cce5 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-xg42-33mc-4587/GHSA-xg42-33mc-4587.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xg42-33mc-4587", + "modified": "2025-04-14T21:32:22Z", + "published": "2025-04-14T21:32:22Z", + "aliases": [ + "CVE-2022-49358" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: memleak flow rule from commit path\n\nAbort path release flow rule object, however, commit path does not.\nUpdate code to destroy these objects before releasing the transaction.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49358" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/330c0c6cd2150a2d7f47af16aa590078b0d2f736" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/5b8d63489c3b701eb2a76f848ec94d8cbc9373b9" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/80de9ea1f5b808a6601e91111fae601df2b26369" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/9dd732e0bdf538b1b76dc7c157e2b5e560ff30d3" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ab9f34a30c23f656e76f4c5b83125a4e7b53c86e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/e33d9bd563e71f6c6528b96008d65524a459c4dc" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-401" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T07:01:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-xpfq-7j72-x4px/GHSA-xpfq-7j72-x4px.json b/advisories/unreviewed/2025/04/GHSA-xpfq-7j72-x4px/GHSA-xpfq-7j72-x4px.json index 0ddcf310d97..be490f599f5 100644 --- a/advisories/unreviewed/2025/04/GHSA-xpfq-7j72-x4px/GHSA-xpfq-7j72-x4px.json +++ b/advisories/unreviewed/2025/04/GHSA-xpfq-7j72-x4px/GHSA-xpfq-7j72-x4px.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-xpfq-7j72-x4px", - "modified": "2025-04-13T00:30:22Z", + "modified": "2025-04-14T21:32:24Z", "published": "2025-04-13T00:30:22Z", "aliases": [ "CVE-2025-2814" ], "details": "Crypt::CBC versions between 1.21 and 3.04 for Perl may use the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.\n\nThis issue affects operating systems where \"/dev/urandom'\" is unavailable.  In that case, Crypt::CBC will fallback to use the insecure rand() function.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], "affected": [], "references": [ { @@ -31,7 +36,7 @@ "cwe_ids": [ "CWE-338" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-04-13T00:15:14Z"