From 766588e29fa9a3661345bfc0ebb7ecc481723be4 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 24 Dec 2024 12:32:29 +0000 Subject: [PATCH] Advisory Database Sync --- .../GHSA-26x9-cxwc-jfqw.json | 37 +++++++++++ .../GHSA-3285-56f3-892c.json | 44 +++++++++++++ .../GHSA-3x4q-669m-q5vc.json | 40 ++++++++++++ .../GHSA-4xvw-5j63-2hjx.json | 37 +++++++++++ .../GHSA-5652-4j93-xhg6.json | 45 ++++++++++++++ .../GHSA-5hfq-6gvm-pw8c.json | 57 +++++++++++++++++ .../GHSA-7vq8-4frp-4vcv.json | 57 +++++++++++++++++ .../GHSA-8c4h-x48p-mg38.json | 40 ++++++++++++ .../GHSA-8v57-2x2q-jr9m.json | 40 ++++++++++++ .../GHSA-cq77-jhpm-mjmj.json | 48 +++++++++++++++ .../GHSA-cxq4-g7mm-8h76.json | 41 +++++++++++++ .../GHSA-f697-gm3h-xrf9.json | 31 ++++++++++ .../GHSA-fcx4-qhgw-9q8f.json | 49 +++++++++++++++ .../GHSA-gr8w-6777-6rwj.json | 61 +++++++++++++++++++ .../GHSA-gxj3-vh7p-4j4h.json | 41 +++++++++++++ .../GHSA-h5xq-p424-h7cq.json | 61 +++++++++++++++++++ .../GHSA-j876-jhxx-8x3r.json | 40 ++++++++++++ .../GHSA-mp8h-4283-jr44.json | 57 +++++++++++++++++ .../GHSA-pm9c-5p62-35cr.json | 57 +++++++++++++++++ .../GHSA-prjx-w4x5-gf5v.json | 57 +++++++++++++++++ .../GHSA-qfgm-256j-rghm.json | 37 +++++++++++ .../GHSA-rw8v-g4fm-gw3v.json | 61 +++++++++++++++++++ .../GHSA-rxmm-7wj9-jv4p.json | 40 ++++++++++++ .../GHSA-v5hm-gx5h-94jm.json | 61 +++++++++++++++++++ .../GHSA-vhcm-pjgm-q2wv.json | 37 +++++++++++ .../GHSA-vjx6-h67c-v5gj.json | 45 ++++++++++++++ .../GHSA-w2vx-fp9q-36ph.json | 61 +++++++++++++++++++ .../GHSA-w455-65cp-cghc.json | 40 ++++++++++++ .../GHSA-w5gw-f5vp-r675.json | 61 +++++++++++++++++++ .../GHSA-wm3v-h2q8-5pg6.json | 37 +++++++++++ .../GHSA-xq9m-vv28-7f24.json | 40 ++++++++++++ 31 files changed, 1460 insertions(+) create mode 100644 advisories/unreviewed/2024/12/GHSA-26x9-cxwc-jfqw/GHSA-26x9-cxwc-jfqw.json create mode 100644 advisories/unreviewed/2024/12/GHSA-3285-56f3-892c/GHSA-3285-56f3-892c.json create mode 100644 advisories/unreviewed/2024/12/GHSA-3x4q-669m-q5vc/GHSA-3x4q-669m-q5vc.json create mode 100644 advisories/unreviewed/2024/12/GHSA-4xvw-5j63-2hjx/GHSA-4xvw-5j63-2hjx.json create mode 100644 advisories/unreviewed/2024/12/GHSA-5652-4j93-xhg6/GHSA-5652-4j93-xhg6.json create mode 100644 advisories/unreviewed/2024/12/GHSA-5hfq-6gvm-pw8c/GHSA-5hfq-6gvm-pw8c.json create mode 100644 advisories/unreviewed/2024/12/GHSA-7vq8-4frp-4vcv/GHSA-7vq8-4frp-4vcv.json create mode 100644 advisories/unreviewed/2024/12/GHSA-8c4h-x48p-mg38/GHSA-8c4h-x48p-mg38.json create mode 100644 advisories/unreviewed/2024/12/GHSA-8v57-2x2q-jr9m/GHSA-8v57-2x2q-jr9m.json create mode 100644 advisories/unreviewed/2024/12/GHSA-cq77-jhpm-mjmj/GHSA-cq77-jhpm-mjmj.json create mode 100644 advisories/unreviewed/2024/12/GHSA-cxq4-g7mm-8h76/GHSA-cxq4-g7mm-8h76.json create mode 100644 advisories/unreviewed/2024/12/GHSA-f697-gm3h-xrf9/GHSA-f697-gm3h-xrf9.json create mode 100644 advisories/unreviewed/2024/12/GHSA-fcx4-qhgw-9q8f/GHSA-fcx4-qhgw-9q8f.json create mode 100644 advisories/unreviewed/2024/12/GHSA-gr8w-6777-6rwj/GHSA-gr8w-6777-6rwj.json create mode 100644 advisories/unreviewed/2024/12/GHSA-gxj3-vh7p-4j4h/GHSA-gxj3-vh7p-4j4h.json create mode 100644 advisories/unreviewed/2024/12/GHSA-h5xq-p424-h7cq/GHSA-h5xq-p424-h7cq.json create mode 100644 advisories/unreviewed/2024/12/GHSA-j876-jhxx-8x3r/GHSA-j876-jhxx-8x3r.json create mode 100644 advisories/unreviewed/2024/12/GHSA-mp8h-4283-jr44/GHSA-mp8h-4283-jr44.json create mode 100644 advisories/unreviewed/2024/12/GHSA-pm9c-5p62-35cr/GHSA-pm9c-5p62-35cr.json create mode 100644 advisories/unreviewed/2024/12/GHSA-prjx-w4x5-gf5v/GHSA-prjx-w4x5-gf5v.json create mode 100644 advisories/unreviewed/2024/12/GHSA-qfgm-256j-rghm/GHSA-qfgm-256j-rghm.json create mode 100644 advisories/unreviewed/2024/12/GHSA-rw8v-g4fm-gw3v/GHSA-rw8v-g4fm-gw3v.json create mode 100644 advisories/unreviewed/2024/12/GHSA-rxmm-7wj9-jv4p/GHSA-rxmm-7wj9-jv4p.json create mode 100644 advisories/unreviewed/2024/12/GHSA-v5hm-gx5h-94jm/GHSA-v5hm-gx5h-94jm.json create mode 100644 advisories/unreviewed/2024/12/GHSA-vhcm-pjgm-q2wv/GHSA-vhcm-pjgm-q2wv.json create mode 100644 advisories/unreviewed/2024/12/GHSA-vjx6-h67c-v5gj/GHSA-vjx6-h67c-v5gj.json create mode 100644 advisories/unreviewed/2024/12/GHSA-w2vx-fp9q-36ph/GHSA-w2vx-fp9q-36ph.json create mode 100644 advisories/unreviewed/2024/12/GHSA-w455-65cp-cghc/GHSA-w455-65cp-cghc.json create mode 100644 advisories/unreviewed/2024/12/GHSA-w5gw-f5vp-r675/GHSA-w5gw-f5vp-r675.json create mode 100644 advisories/unreviewed/2024/12/GHSA-wm3v-h2q8-5pg6/GHSA-wm3v-h2q8-5pg6.json create mode 100644 advisories/unreviewed/2024/12/GHSA-xq9m-vv28-7f24/GHSA-xq9m-vv28-7f24.json diff --git a/advisories/unreviewed/2024/12/GHSA-26x9-cxwc-jfqw/GHSA-26x9-cxwc-jfqw.json b/advisories/unreviewed/2024/12/GHSA-26x9-cxwc-jfqw/GHSA-26x9-cxwc-jfqw.json new file mode 100644 index 00000000000..bce698b5cf8 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-26x9-cxwc-jfqw/GHSA-26x9-cxwc-jfqw.json @@ -0,0 +1,37 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-26x9-cxwc-jfqw", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-53147" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix out-of-bounds access of directory entries\n\nIn the case of the directory size is greater than or equal to\nthe cluster size, if start_clu becomes an EOF cluster(an invalid\ncluster) due to file system corruption, then the directory entry\nwhere ei->hint_femp.eidx hint is outside the directory, resulting\nin an out-of-bounds access, which may cause further file system\ncorruption.\n\nThis commit adds a check for start_clu, if it is an invalid cluster,\nthe file or directory will be treated as empty.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53147" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/184fa506e392eb78364d9283c961217ff2c0617b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3ddd1cb2b458ff6a193bc845f408dfff217db29e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a0120d6463368378539ef928cf067d02372efb8c" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-3285-56f3-892c/GHSA-3285-56f3-892c.json b/advisories/unreviewed/2024/12/GHSA-3285-56f3-892c/GHSA-3285-56f3-892c.json new file mode 100644 index 00000000000..71f10a2dd77 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-3285-56f3-892c/GHSA-3285-56f3-892c.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3285-56f3-892c", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-12850" + ], + "details": "The Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.32 via the database_backup_ajax_download() function. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12850" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3212315/database-backup/trunk/functions/download.php" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b972626c-6374-4084-a0e1-1ea4a3062228?source=cve" + }, + { + "type": "WEB", + "url": "http://plugins.svn.wordpress.org/database-backup/tags/2.32/functions/download.php" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-22" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T10:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-3x4q-669m-q5vc/GHSA-3x4q-669m-q5vc.json b/advisories/unreviewed/2024/12/GHSA-3x4q-669m-q5vc/GHSA-3x4q-669m-q5vc.json new file mode 100644 index 00000000000..e6056a6dd7f --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-3x4q-669m-q5vc/GHSA-3x4q-669m-q5vc.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3x4q-669m-q5vc", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-11726" + ], + "details": "The Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to SQL Injection via the 'category' parameter of the 'bookingpress_form' shortcode in all versions up to, and including, 1.1.21 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11726" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3206780/bookingpress-appointment-booking/trunk/core/classes/frontend/class.bookingpress_appointment_bookings.php" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6d081b89-1b98-4f4f-8728-d1ea676d7afd?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T11:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-4xvw-5j63-2hjx/GHSA-4xvw-5j63-2hjx.json b/advisories/unreviewed/2024/12/GHSA-4xvw-5j63-2hjx/GHSA-4xvw-5j63-2hjx.json new file mode 100644 index 00000000000..9c7179204ff --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-4xvw-5j63-2hjx/GHSA-4xvw-5j63-2hjx.json @@ -0,0 +1,37 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4xvw-5j63-2hjx", + "modified": "2024-12-24T12:30:43Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-53153" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: qcom-ep: Move controller cleanups to qcom_pcie_perst_deassert()\n\nCurrently, the endpoint cleanup function dw_pcie_ep_cleanup() and EPF\ndeinit notify function pci_epc_deinit_notify() are called during the\nexecution of qcom_pcie_perst_assert() i.e., when the host has asserted\nPERST#. But quickly after this step, refclk will also be disabled by the\nhost.\n\nAll of the Qcom endpoint SoCs supported as of now depend on the refclk from\nthe host for keeping the controller operational. Due to this limitation,\nany access to the hardware registers in the absence of refclk will result\nin a whole endpoint crash. Unfortunately, most of the controller cleanups\nrequire accessing the hardware registers (like eDMA cleanup performed in\ndw_pcie_ep_cleanup(), powering down MHI EPF etc...). So these cleanup\nfunctions are currently causing the crash in the endpoint SoC once host\nasserts PERST#.\n\nOne way to address this issue is by generating the refclk in the endpoint\nitself and not depending on the host. But that is not always possible as\nsome of the endpoint designs do require the endpoint to consume refclk from\nthe host (as I was told by the Qcom engineers).\n\nThus, fix this crash by moving the controller cleanups to the start of\nthe qcom_pcie_perst_deassert() function. qcom_pcie_perst_deassert() is\ncalled whenever the host has deasserted PERST# and it is guaranteed that\nthe refclk would be active at this point. So at the start of this function\n(after enabling resources), the controller cleanup can be performed. Once\nfinished, rest of the code execution for PERST# deassert can continue as\nusual.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53153" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/516969d5765e2302d33b4f251496eedb757d55ea" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/7d7cf89b119af433354f865fc01017b9f8aa411a" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/e03b5f1615c84f4139cb53ef8659f4cdb8d6a563" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-5652-4j93-xhg6/GHSA-5652-4j93-xhg6.json b/advisories/unreviewed/2024/12/GHSA-5652-4j93-xhg6/GHSA-5652-4j93-xhg6.json new file mode 100644 index 00000000000..03d1a892289 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-5652-4j93-xhg6/GHSA-5652-4j93-xhg6.json @@ -0,0 +1,45 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5652-4j93-xhg6", + "modified": "2024-12-24T12:30:43Z", + "published": "2024-12-24T12:30:43Z", + "aliases": [ + "CVE-2024-53154" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: clk-apple-nco: Add NULL check in applnco_probe\n\nAdd NULL check in applnco_probe, to handle kernel NULL pointer\ndereference error.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53154" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/066c14619e8379c1bafbbf8196fd38eac303472b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/534e02f83889ccef5fe6beb46e773ab9d4ae1655" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/72ea9a7e9e260aa39f9d1c9254cf92adfb05c4f5" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/969c765e2b508cca9099d246c010a1e48dcfd089" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/9a5905b725739af6a105f9e564e7c80d69969d2b" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-5hfq-6gvm-pw8c/GHSA-5hfq-6gvm-pw8c.json b/advisories/unreviewed/2024/12/GHSA-5hfq-6gvm-pw8c/GHSA-5hfq-6gvm-pw8c.json new file mode 100644 index 00000000000..cf50d4da1c1 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-5hfq-6gvm-pw8c/GHSA-5hfq-6gvm-pw8c.json @@ -0,0 +1,57 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5hfq-6gvm-pw8c", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-53145" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\num: Fix potential integer overflow during physmem setup\n\nThis issue happens when the real map size is greater than LONG_MAX,\nwhich can be easily triggered on UML/i386.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53145" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/1575df968650d11771359e5ac78278c5b0cc19f3" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/1bd118c5f887802cef2d9ba0d1917258667f1cae" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/5c710f45811e7e2bfcf703980c306f19c7e1ecfe" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a875c023155ea92b75d6323977003e64d92ae7fc" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a98b7761f697e590ed5d610d87fa12be66f23419" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a9c95f787b88b29165563fd97761032db77116e7" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/d1a211e5210d31da8f49fc0021bf7129b726468c" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/e6102b72edc4eb8c0858df00ba74b5ce579c8fa2" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-7vq8-4frp-4vcv/GHSA-7vq8-4frp-4vcv.json b/advisories/unreviewed/2024/12/GHSA-7vq8-4frp-4vcv/GHSA-7vq8-4frp-4vcv.json new file mode 100644 index 00000000000..d65429a1fe3 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-7vq8-4frp-4vcv/GHSA-7vq8-4frp-4vcv.json @@ -0,0 +1,57 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7vq8-4frp-4vcv", + "modified": "2024-12-24T12:30:43Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-53150" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix out of bounds reads when finding clock sources\n\nThe current USB-audio driver code doesn't check bLength of each\ndescriptor at traversing for clock descriptors. That is, when a\ndevice provides a bogus descriptor with a shorter bLength, the driver\nmight hit out-of-bounds reads.\n\nFor addressing it, this patch adds sanity checks to the validator\nfunctions for the clock descriptor traversal. When the descriptor\nlength is shorter than expected, it's skipped in the loop.\n\nFor the clock source and clock multiplier descriptors, we can just\ncheck bLength against the sizeof() of each descriptor type.\nOTOH, the clock selector descriptor of UAC2 and UAC3 has an array\nof bNrInPins elements and two more fields at its tail, hence those\nhave to be checked in addition to the sizeof() check.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53150" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/096bb5b43edf755bc4477e64004fa3a20539ec2f" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/45a92cbc88e4013bfed7fd2ccab3ade45f8e896b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/74cb86e1006c5437b1d90084d22018da30fddc77" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a3dd4d63eeb452cfb064a13862fb376ab108f6a6" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a632bdcb359fd8145e86486ff8612da98e239acd" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ab011f7439d9bbfd34fd3b9cef4b2d6d952c9bb9" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/da13ade87a12dd58829278bc816a61bea06a56a9" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ea0fa76f61cf8e932d1d26e6193513230816e11d" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-8c4h-x48p-mg38/GHSA-8c4h-x48p-mg38.json b/advisories/unreviewed/2024/12/GHSA-8c4h-x48p-mg38/GHSA-8c4h-x48p-mg38.json new file mode 100644 index 00000000000..53d0b0dbb39 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-8c4h-x48p-mg38/GHSA-8c4h-x48p-mg38.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8c4h-x48p-mg38", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-12031" + ], + "details": "The Advanced Floating Content plugin for WordPress is vulnerable to SQL Injection via the 'floating_content_duplicate_post' function in all versions up to, and including, 3.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12031" + }, + { + "type": "WEB", + "url": "https://codecanyon.net/item/advanced-floating-content/9945856" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/927076bc-bafa-43d6-bf3b-5861844c932a?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T10:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-8v57-2x2q-jr9m/GHSA-8v57-2x2q-jr9m.json b/advisories/unreviewed/2024/12/GHSA-8v57-2x2q-jr9m/GHSA-8v57-2x2q-jr9m.json new file mode 100644 index 00000000000..6f330d536b3 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-8v57-2x2q-jr9m/GHSA-8v57-2x2q-jr9m.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8v57-2x2q-jr9m", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-12103" + ], + "details": "The Content No Cache: prevent specific content from being cached plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 0.1.2 via the eos_dyn_get_content action due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12103" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3211815/content-no-cache/trunk/inc/eos-dyn-ajax.php" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/90c6fd67-2140-4835-98d0-cfd1af95ac4c?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-639" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T10:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-cq77-jhpm-mjmj/GHSA-cq77-jhpm-mjmj.json b/advisories/unreviewed/2024/12/GHSA-cq77-jhpm-mjmj/GHSA-cq77-jhpm-mjmj.json new file mode 100644 index 00000000000..ba3f6c0e4ab --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-cq77-jhpm-mjmj/GHSA-cq77-jhpm-mjmj.json @@ -0,0 +1,48 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cq77-jhpm-mjmj", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-10856" + ], + "details": "The Booking Calendar WpDevArt plugin is vulnerable to time-based, blind SQL injection via the `id` parameter in the “wpdevart_booking_calendar” shortcode in versions up to, and including, 3.2.19 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. The vulnerability requires the “delete_prev_date” theme option being enabled. This makes it possible for authenticated attackers, with contributor-level access or above, to append additional SQL queries into already existing query that can be used to extract sensitive information such as passwords from the database.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10856" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/booking-calendar/tags/3.2.15/includes/main_class.php#L90" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/booking-calendar/tags/3.2.15/includes/main_class.php#L91" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3209851%40booking-calendar&new=3209851%40booking-calendar&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/bf297cd8-3d67-4750-b856-38ded4daf4ad?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T11:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-cxq4-g7mm-8h76/GHSA-cxq4-g7mm-8h76.json b/advisories/unreviewed/2024/12/GHSA-cxq4-g7mm-8h76/GHSA-cxq4-g7mm-8h76.json new file mode 100644 index 00000000000..459c1411511 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-cxq4-g7mm-8h76/GHSA-cxq4-g7mm-8h76.json @@ -0,0 +1,41 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cxq4-g7mm-8h76", + "modified": "2024-12-24T12:30:43Z", + "published": "2024-12-24T12:30:43Z", + "aliases": [ + "CVE-2024-53160" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nrcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu\n\nKCSAN reports a data race when access the krcp->monitor_work.timer.expires\nvariable in the schedule_delayed_monitor_work() function:\n\n\nBUG: KCSAN: data-race in __mod_timer / kvfree_call_rcu\n\nread to 0xffff888237d1cce8 of 8 bytes by task 10149 on cpu 1:\n schedule_delayed_monitor_work kernel/rcu/tree.c:3520 [inline]\n kvfree_call_rcu+0x3b8/0x510 kernel/rcu/tree.c:3839\n trie_update_elem+0x47c/0x620 kernel/bpf/lpm_trie.c:441\n bpf_map_update_value+0x324/0x350 kernel/bpf/syscall.c:203\n generic_map_update_batch+0x401/0x520 kernel/bpf/syscall.c:1849\n bpf_map_do_batch+0x28c/0x3f0 kernel/bpf/syscall.c:5143\n __sys_bpf+0x2e5/0x7a0\n __do_sys_bpf kernel/bpf/syscall.c:5741 [inline]\n __se_sys_bpf kernel/bpf/syscall.c:5739 [inline]\n __x64_sys_bpf+0x43/0x50 kernel/bpf/syscall.c:5739\n x64_sys_call+0x2625/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:322\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nwrite to 0xffff888237d1cce8 of 8 bytes by task 56 on cpu 0:\n __mod_timer+0x578/0x7f0 kernel/time/timer.c:1173\n add_timer_global+0x51/0x70 kernel/time/timer.c:1330\n __queue_delayed_work+0x127/0x1a0 kernel/workqueue.c:2523\n queue_delayed_work_on+0xdf/0x190 kernel/workqueue.c:2552\n queue_delayed_work include/linux/workqueue.h:677 [inline]\n schedule_delayed_monitor_work kernel/rcu/tree.c:3525 [inline]\n kfree_rcu_monitor+0x5e8/0x660 kernel/rcu/tree.c:3643\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310\n worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391\n kthread+0x1d1/0x210 kernel/kthread.c:389\n ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: events_unbound kfree_rcu_monitor\n\n\nkfree_rcu_monitor() rearms the work if a \"krcp\" has to be still\noffloaded and this is done without holding krcp->lock, whereas\nthe kvfree_call_rcu() holds it.\n\nFix it by acquiring the \"krcp->lock\" for kfree_rcu_monitor() so\nboth functions do not race anymore.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53160" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/05b8ea1f16667f07c8e5843fb4bde3e49d49ead8" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/5ced426d97ce84299ecfcc7bd8b38f975fd11089" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/967a0e61910825d1fad009d836a6cb41f7402395" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a23da88c6c80e41e0503e0b481a22c9eea63f263" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-f697-gm3h-xrf9/GHSA-f697-gm3h-xrf9.json b/advisories/unreviewed/2024/12/GHSA-f697-gm3h-xrf9/GHSA-f697-gm3h-xrf9.json new file mode 100644 index 00000000000..e914eb062e7 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-f697-gm3h-xrf9/GHSA-f697-gm3h-xrf9.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f697-gm3h-xrf9", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-43441" + ], + "details": "Authentication Bypass by Assumed-Immutable Data vulnerability in Apache HugeGraph-Server.\n\nThis issue affects Apache HugeGraph-Server: from 1.0.0 before 1.5.0.\n\nUsers are recommended to upgrade to version 1.5.0, which fixes the issue.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43441" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/h2607yv32wgcrywov960jpxhvsmmlf12" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-302" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:21Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-fcx4-qhgw-9q8f/GHSA-fcx4-qhgw-9q8f.json b/advisories/unreviewed/2024/12/GHSA-fcx4-qhgw-9q8f/GHSA-fcx4-qhgw-9q8f.json new file mode 100644 index 00000000000..8ea9cd467d6 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-fcx4-qhgw-9q8f/GHSA-fcx4-qhgw-9q8f.json @@ -0,0 +1,49 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fcx4-qhgw-9q8f", + "modified": "2024-12-24T12:30:43Z", + "published": "2024-12-24T12:30:43Z", + "aliases": [ + "CVE-2024-53151" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: Address an integer overflow\n\nDan Carpenter reports:\n> Commit 78147ca8b4a9 (\"svcrdma: Add a \"parsed chunk list\" data\n> structure\") from Jun 22, 2020 (linux-next), leads to the following\n> Smatch static checker warning:\n>\n>\tnet/sunrpc/xprtrdma/svc_rdma_recvfrom.c:498 xdr_check_write_chunk()\n>\twarn: potential user controlled sizeof overflow 'segcount * 4 * 4'\n>\n> net/sunrpc/xprtrdma/svc_rdma_recvfrom.c\n> 488 static bool xdr_check_write_chunk(struct svc_rdma_recv_ctxt *rctxt)\n> 489 {\n> 490 u32 segcount;\n> 491 __be32 *p;\n> 492\n> 493 if (xdr_stream_decode_u32(&rctxt->rc_stream, &segcount))\n> ^^^^^^^^\n>\n> 494 return false;\n> 495\n> 496 /* A bogus segcount causes this buffer overflow check to fail. */\n> 497 p = xdr_inline_decode(&rctxt->rc_stream,\n> --> 498 segcount * rpcrdma_segment_maxsz * sizeof(*p));\n>\n>\n> segcount is an untrusted u32. On 32bit systems anything >= SIZE_MAX / 16 will\n> have an integer overflow and some those values will be accepted by\n> xdr_inline_decode().", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53151" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/21e1cf688fb0397788c8dd42e1e0b08d58ac5c7b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3c63d8946e578663b868cb9912dac616ea68bfd0" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/4cbc3ba6dc2f746497cade60bcbaa82ae3696689" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/838dd342962cef4c320632a5af48d3c31f2f9877" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c1f8195bf68edd2cef0f18a4cead394075a54b5a" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/e5c440c227ecdc721f2da0dd88b6358afd1031a7" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-gr8w-6777-6rwj/GHSA-gr8w-6777-6rwj.json b/advisories/unreviewed/2024/12/GHSA-gr8w-6777-6rwj/GHSA-gr8w-6777-6rwj.json new file mode 100644 index 00000000000..2700d55eae6 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-gr8w-6777-6rwj/GHSA-gr8w-6777-6rwj.json @@ -0,0 +1,61 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gr8w-6777-6rwj", + "modified": "2024-12-24T12:30:43Z", + "published": "2024-12-24T12:30:43Z", + "aliases": [ + "CVE-2024-53158" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()\n\nThis loop is supposed to break if the frequency returned from\nclk_round_rate() is the same as on the previous iteration. However,\nthat check doesn't make sense on the first iteration through the loop.\nIt leads to reading before the start of these->clk_perf_tbl[] array.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53158" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/351bb7f9ecb9d1f09bd7767491a2b8d07f4f1ea4" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/37cdd4f0c266560b7b924c42361eeae3dc5f0c3e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/56eda41dcce0ec4d3418b4f85037bdea181486cc" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/748557ca7dc94695a6e209eb68fce365da9a3bb3" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/78261cb08f06c93d362cab5c5034bf5899bc7552" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/7a3465b79ef0539aa10b310ac3cc35e0ae25b79e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/b0a9c6ccaf88c4701787f61ecd2ec0eb014a0677" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c24e019ca12d9ec814af04b30a64dd7173fb20fe" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f4b7bf5a50f1fa25560f0b66a13563465542861b" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-gxj3-vh7p-4j4h/GHSA-gxj3-vh7p-4j4h.json b/advisories/unreviewed/2024/12/GHSA-gxj3-vh7p-4j4h/GHSA-gxj3-vh7p-4j4h.json new file mode 100644 index 00000000000..38148a0fa07 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-gxj3-vh7p-4j4h/GHSA-gxj3-vh7p-4j4h.json @@ -0,0 +1,41 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gxj3-vh7p-4j4h", + "modified": "2024-12-24T12:30:43Z", + "published": "2024-12-24T12:30:43Z", + "aliases": [ + "CVE-2024-53162" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qat/qat_4xxx - fix off by one in uof_get_name()\n\nThe fw_objs[] array has \"num_objs\" elements so the > needs to be >= to\nprevent an out of bounds read.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53162" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/05c9a7a5344425860202a8f3efea4d8ed2d10edb" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/475b5098043eef6e72751aadeab687992a5b63d1" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/700852528fc5295897d6089eea0656d67f9b9d88" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/e69d2845aaa080960f38761f78fd25aa856620c6" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-h5xq-p424-h7cq/GHSA-h5xq-p424-h7cq.json b/advisories/unreviewed/2024/12/GHSA-h5xq-p424-h7cq/GHSA-h5xq-p424-h7cq.json new file mode 100644 index 00000000000..e5e12dce8cf --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-h5xq-p424-h7cq/GHSA-h5xq-p424-h7cq.json @@ -0,0 +1,61 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h5xq-p424-h7cq", + "modified": "2024-12-24T12:30:43Z", + "published": "2024-12-24T12:30:43Z", + "aliases": [ + "CVE-2024-53155" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix uninitialized value in ocfs2_file_read_iter()\n\nSyzbot has reported the following KMSAN splat:\n\nBUG: KMSAN: uninit-value in ocfs2_file_read_iter+0x9a4/0xf80\n ocfs2_file_read_iter+0x9a4/0xf80\n __io_read+0x8d4/0x20f0\n io_read+0x3e/0xf0\n io_issue_sqe+0x42b/0x22c0\n io_wq_submit_work+0xaf9/0xdc0\n io_worker_handle_work+0xd13/0x2110\n io_wq_worker+0x447/0x1410\n ret_from_fork+0x6f/0x90\n ret_from_fork_asm+0x1a/0x30\n\nUninit was created at:\n __alloc_pages_noprof+0x9a7/0xe00\n alloc_pages_mpol_noprof+0x299/0x990\n alloc_pages_noprof+0x1bf/0x1e0\n allocate_slab+0x33a/0x1250\n ___slab_alloc+0x12ef/0x35e0\n kmem_cache_alloc_bulk_noprof+0x486/0x1330\n __io_alloc_req_refill+0x84/0x560\n io_submit_sqes+0x172f/0x2f30\n __se_sys_io_uring_enter+0x406/0x41c0\n __x64_sys_io_uring_enter+0x11f/0x1a0\n x64_sys_call+0x2b54/0x3ba0\n do_syscall_64+0xcd/0x1e0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nSince an instance of 'struct kiocb' may be passed from the block layer\nwith 'private' field uninitialized, introduce 'ocfs2_iocb_init_rw_locked()'\nand use it from where 'ocfs2_dio_end_io()' might take care, i.e. in\n'ocfs2_file_read_iter()' and 'ocfs2_file_write_iter()'.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53155" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/366c933c2ab34dd6551acc03b4872726b7605143" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/66b7ddd1804e2c4216dd7ead8eeb746cdbb3b62f" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/6c8f8d1e595dabd5389817f6d798cc8bd95c40ab" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/83f8713a0ef1d55d6a287bcfadcaab8245ac5098" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8c966150d5abff58c3c2bdb9a6e63fd773782905" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8e0de82ed18ba0e71f817adbd81317fd1032ca5a" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/adc77b19f62d7e80f98400b2fca9d700d2afdd6f" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/dc78efe556fed162d48736ef24066f42e463e27c" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f4078ef38d3163e6be47403a619558b19c4bfccd" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-j876-jhxx-8x3r/GHSA-j876-jhxx-8x3r.json b/advisories/unreviewed/2024/12/GHSA-j876-jhxx-8x3r/GHSA-j876-jhxx-8x3r.json new file mode 100644 index 00000000000..6d7d49d90ee --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-j876-jhxx-8x3r/GHSA-j876-jhxx-8x3r.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j876-jhxx-8x3r", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-12881" + ], + "details": "The PlugVersions – Easily rollback to previous versions of your plugins plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the eos_plugin_reviews_restore_version() function in all versions up to, and including, 0.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create arbitrary files leveraging files included locally.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12881" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3211805%40plugversions&new=3211805%40plugversions&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/eb06c43c-bf8c-412b-8b1d-fee004d728d2?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T10:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-mp8h-4283-jr44/GHSA-mp8h-4283-jr44.json b/advisories/unreviewed/2024/12/GHSA-mp8h-4283-jr44/GHSA-mp8h-4283-jr44.json new file mode 100644 index 00000000000..e2427ede57e --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-mp8h-4283-jr44/GHSA-mp8h-4283-jr44.json @@ -0,0 +1,57 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mp8h-4283-jr44", + "modified": "2024-12-24T12:30:43Z", + "published": "2024-12-24T12:30:43Z", + "aliases": [ + "CVE-2024-53161" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/bluefield: Fix potential integer overflow\n\nThe 64-bit argument for the \"get DIMM info\" SMC call consists of mem_ctrl_idx\nleft-shifted 16 bits and OR-ed with DIMM index. With mem_ctrl_idx defined as\n32-bits wide the left-shift operation truncates the upper 16 bits of\ninformation during the calculation of the SMC argument.\n\nThe mem_ctrl_idx stack variable must be defined as 64-bits wide to prevent any\npotential integer overflow, i.e. loss of data from upper 16 bits.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53161" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/000930193fe5eb79ce5563ee2e9ddb0c6e4e1bb5" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/1fe774a93b46bb029b8f6fa9d1f25affa53f06c6" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/4ad7033de109d0fec99086f352f58a3412e378b8" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/578ca89b04680145d41011e7cec8806fefbb59e7" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8cc31cfa36ff37aff399b72faa2ded58110112ae" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ac6ebb9edcdb7077e841862c402697c4c48a7c0a" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/e0269ea7a628fdeddd65b92fe29c09655dbb80b9" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/fdb90006184aa84c7b4e09144ed0936d4e1891a7" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-pm9c-5p62-35cr/GHSA-pm9c-5p62-35cr.json b/advisories/unreviewed/2024/12/GHSA-pm9c-5p62-35cr/GHSA-pm9c-5p62-35cr.json new file mode 100644 index 00000000000..7264be88f59 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-pm9c-5p62-35cr/GHSA-pm9c-5p62-35cr.json @@ -0,0 +1,57 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pm9c-5p62-35cr", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-53148" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncomedi: Flush partial mappings in error case\n\nIf some remap_pfn_range() calls succeeded before one failed, we still have\nbuffer pages mapped into the userspace page tables when we drop the buffer\nreference with comedi_buf_map_put(bm). The userspace mappings are only\ncleaned up later in the mmap error path.\n\nFix it by explicitly flushing all mappings in our VMA on the error path.\n\nSee commit 79a61cc3fc04 (\"mm: avoid leaving partial pfn mappings around in\nerror case\").", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53148" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/16c507df509113c037cdc0ba642b9ab3389bd26c" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/297f14fbb81895f4ccdb0ad25d196786d6461e00" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/57f048c2d205b85e34282a9b0b0ae177e84c2f44" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8797b7712de704dc231f9e821d8eb3b9aeb3a032" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/9b07fb464eb69a752406e78e62ab3a60bfa7b00d" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/b9322408d83accc8b96322bc7356593206288c56" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c6963a06ce5c61d3238751ada04ee1569663a828" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ce8f9fb651fac95dd41f69afe54d935420b945bd" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-prjx-w4x5-gf5v/GHSA-prjx-w4x5-gf5v.json b/advisories/unreviewed/2024/12/GHSA-prjx-w4x5-gf5v/GHSA-prjx-w4x5-gf5v.json new file mode 100644 index 00000000000..3c5aaeaf3d1 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-prjx-w4x5-gf5v/GHSA-prjx-w4x5-gf5v.json @@ -0,0 +1,57 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-prjx-w4x5-gf5v", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-53240" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen/netfront: fix crash when removing device\n\nWhen removing a netfront device directly after a suspend/resume cycle\nit might happen that the queues have not been setup again, causing a\ncrash during the attempt to stop the queues another time.\n\nFix that by checking the queues are existing before trying to stop\nthem.\n\nThis is XSA-465 / CVE-2024-53240.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53240" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/1d5354a9182b6d302ae10367cbec1ca339d4e4e7" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/20f7f0cf7af5d81b218202ef504223af84b16a8f" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/2657ba851fa3381256d81e431b20041dc232fd88" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/7728e974ffbf14f17648dd92ea640b42b654d47c" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8b41e6bccf7de93982781be4125211443382e66d" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f9244fb55f37356f75c739c57323d9422d7aa0f8" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/fe9a8f5250aed0948b668c8a4e051e3b0fc29f09" + }, + { + "type": "WEB", + "url": "http://xenbits.xen.org/xsa/advisory-465.html" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T10:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-qfgm-256j-rghm/GHSA-qfgm-256j-rghm.json b/advisories/unreviewed/2024/12/GHSA-qfgm-256j-rghm/GHSA-qfgm-256j-rghm.json new file mode 100644 index 00000000000..2a615ca1051 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-qfgm-256j-rghm/GHSA-qfgm-256j-rghm.json @@ -0,0 +1,37 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qfgm-256j-rghm", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-53149" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: ucsi: glink: fix off-by-one in connector_status\n\nUCSI connector's indices start from 1 up to 3, PMIC_GLINK_MAX_PORTS.\nCorrect the condition in the pmic_glink_ucsi_connector_status()\ncallback, fixing Type-C orientation reporting for the third USB-C\nconnector.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53149" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/4a22918810980897393fa1776ea3877e4baf8cca" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/6ba6f7f29e0dff47a2799e60dcd1b5c29cd811a5" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/9a5a8b5bd72169aa7a8ec800ef57be2f2cb4d9b2" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-rw8v-g4fm-gw3v/GHSA-rw8v-g4fm-gw3v.json b/advisories/unreviewed/2024/12/GHSA-rw8v-g4fm-gw3v/GHSA-rw8v-g4fm-gw3v.json new file mode 100644 index 00000000000..3605e6524b5 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-rw8v-g4fm-gw3v/GHSA-rw8v-g4fm-gw3v.json @@ -0,0 +1,61 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rw8v-g4fm-gw3v", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-53146" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Prevent a potential integer overflow\n\nIf the tag length is >= U32_MAX - 3 then the \"length + 4\" addition\ncan result in an integer overflow. Address this by splitting the\ndecoding into several steps so that decode_cb_compound4res() does\nnot have to perform arithmetic on the unsafe length value.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53146" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/084f797dbc7e52209a4ab6dbc7f0109268754eb9" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3c5f545c9a1f8a1869246f6f3ae8c17289d6a841" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/745f7ce5a95e783ba62fe774325829466aec2aa8" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/7f33b92e5b18e904a481e6e208486da43e4dc841" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/842f1c27a1aef5367e535f9e85c8c3b06352151a" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/90adbae9dd158da8331d9fdd32077bd1af04f553" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ccd3394f9a7200d6b088553bf38e688620cd27af" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/dde654cad08fdaac370febb161ec41eb58e9d2a2" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/de53c5305184ca1333b87e695d329d1502d694ce" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-rxmm-7wj9-jv4p/GHSA-rxmm-7wj9-jv4p.json b/advisories/unreviewed/2024/12/GHSA-rxmm-7wj9-jv4p/GHSA-rxmm-7wj9-jv4p.json new file mode 100644 index 00000000000..1ce2c3fe652 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-rxmm-7wj9-jv4p/GHSA-rxmm-7wj9-jv4p.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rxmm-7wj9-jv4p", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-12268" + ], + "details": "The Responsive Blocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'responsive-block-editor-addons/portfolio' block in all versions up to, and including, 1.9.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12268" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3208350/responsive-block-editor-addons/tags/1.9.8/src/blocks/portfolio/index.php" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0e951b97-3d17-4360-8fec-393e2f0c13d2?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T11:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-v5hm-gx5h-94jm/GHSA-v5hm-gx5h-94jm.json b/advisories/unreviewed/2024/12/GHSA-v5hm-gx5h-94jm/GHSA-v5hm-gx5h-94jm.json new file mode 100644 index 00000000000..c56c0d0dea9 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-v5hm-gx5h-94jm/GHSA-v5hm-gx5h-94jm.json @@ -0,0 +1,61 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v5hm-gx5h-94jm", + "modified": "2024-12-24T12:30:43Z", + "published": "2024-12-24T12:30:43Z", + "aliases": [ + "CVE-2024-53156" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()\n\nI found the following bug in my fuzzer:\n\n UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath9k/htc_hst.c:26:51\n index 255 is out of range for type 'htc_endpoint [22]'\n CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc6-dirty #14\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n Workqueue: events request_firmware_work_func\n Call Trace:\n \n dump_stack_lvl+0x180/0x1b0\n __ubsan_handle_out_of_bounds+0xd4/0x130\n htc_issue_send.constprop.0+0x20c/0x230\n ? _raw_spin_unlock_irqrestore+0x3c/0x70\n ath9k_wmi_cmd+0x41d/0x610\n ? mark_held_locks+0x9f/0xe0\n ...\n\nSince this bug has been confirmed to be caused by insufficient verification\nof conn_rsp_epid, I think it would be appropriate to add a range check for\nconn_rsp_epid to htc_connect_service() to prevent the bug from occurring.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53156" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3fe99b9690b99606d3743c9961ebee865cfa1ab8" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/5f177fb9d01355ac183e65ad8909ea8ef734e0cf" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/70eae50d2156cb6e078d0d78809b49bf2f4c7540" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8619593634cbdf5abf43f5714df49b04e4ef09ab" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8965db7fe2e913ee0802b05fc94c6d6aa74e0596" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/b6551479daf2bfa80bfd5d9016b02a810e508bfb" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/bc981179ab5d1a2715f35e3db4e4bb822bacc849" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c941af142200d975dd3be632aeb490f4cb91dae4" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/cb480ae80fd4d0f1ac9e107ce799183beee5124b" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-vhcm-pjgm-q2wv/GHSA-vhcm-pjgm-q2wv.json b/advisories/unreviewed/2024/12/GHSA-vhcm-pjgm-q2wv/GHSA-vhcm-pjgm-q2wv.json new file mode 100644 index 00000000000..b4f1f45352f --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-vhcm-pjgm-q2wv/GHSA-vhcm-pjgm-q2wv.json @@ -0,0 +1,37 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vhcm-pjgm-q2wv", + "modified": "2024-12-24T12:30:43Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-53152" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert()\n\nCurrently, the endpoint cleanup function dw_pcie_ep_cleanup() and EPF\ndeinit notify function pci_epc_deinit_notify() are called during the\nexecution of pex_ep_event_pex_rst_assert() i.e., when the host has asserted\nPERST#. But quickly after this step, refclk will also be disabled by the\nhost.\n\nAll of the tegra194 endpoint SoCs supported as of now depend on the refclk\nfrom the host for keeping the controller operational. Due to this\nlimitation, any access to the hardware registers in the absence of refclk\nwill result in a whole endpoint crash. Unfortunately, most of the\ncontroller cleanups require accessing the hardware registers (like eDMA\ncleanup performed in dw_pcie_ep_cleanup(), etc...). So these cleanup\nfunctions can cause the crash in the endpoint SoC once host asserts PERST#.\n\nOne way to address this issue is by generating the refclk in the endpoint\nitself and not depending on the host. But that is not always possible as\nsome of the endpoint designs do require the endpoint to consume refclk from\nthe host.\n\nThus, fix this crash by moving the controller cleanups to the start of\nthe pex_ep_event_pex_rst_deassert() function. This function is called\nwhenever the host has deasserted PERST# and it is guaranteed that the\nrefclk would be active at this point. So at the start of this function\n(after enabling resources) the controller cleanup can be performed. Once\nfinished, rest of the code execution for PERST# deassert can continue as\nusual.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53152" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/40e2125381dc11379112485e3eefdd25c6df5375" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/70212c2300971506e986d95000d2745529cac9d7" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/72034050ccf4202cd6558b0afd2474f756ea3b9b" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-vjx6-h67c-v5gj/GHSA-vjx6-h67c-v5gj.json b/advisories/unreviewed/2024/12/GHSA-vjx6-h67c-v5gj/GHSA-vjx6-h67c-v5gj.json new file mode 100644 index 00000000000..47ef90fffb5 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-vjx6-h67c-v5gj/GHSA-vjx6-h67c-v5gj.json @@ -0,0 +1,45 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vjx6-h67c-v5gj", + "modified": "2024-12-24T12:30:43Z", + "published": "2024-12-24T12:30:43Z", + "aliases": [ + "CVE-2024-53159" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (nct6775-core) Fix overflows seen when writing limit attributes\n\nDIV_ROUND_CLOSEST() after kstrtoul() results in an overflow if a large\nnumber such as 18446744073709551615 is provided by the user.\nFix it by reordering clamp_val() and DIV_ROUND_CLOSEST() operations.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53159" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/57ee12b6c514146c19b6a159013b48727a012960" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/685c10269c41d23d7a2b85d3fd6b6345390c8746" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a4712e4485f5c388bbe0d0e8f52978241ab34a29" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ae703f8ff083c5267af30d6c8cf096d562623b3b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/dfa8bedfffcae87976b34a45a724deb9c3a0a88e" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-w2vx-fp9q-36ph/GHSA-w2vx-fp9q-36ph.json b/advisories/unreviewed/2024/12/GHSA-w2vx-fp9q-36ph/GHSA-w2vx-fp9q-36ph.json new file mode 100644 index 00000000000..3d9527ce733 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-w2vx-fp9q-36ph/GHSA-w2vx-fp9q-36ph.json @@ -0,0 +1,61 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w2vx-fp9q-36ph", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-53241" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/xen: don't do PV iret hypercall through hypercall page\n\nInstead of jumping to the Xen hypercall page for doing the iret\nhypercall, directly code the required sequence in xen-asm.S.\n\nThis is done in preparation of no longer using hypercall page at all,\nas it has shown to cause problems with speculation mitigations.\n\nThis is part of XSA-466 / CVE-2024-53241.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53241" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/05df6e6cd9a76b778aee33c3c18c9f3b3566d4a5" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/82c211ead1ec440dbf81727e17b03b5e3c44b93d" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a2796dff62d6c6bfc5fbebdf2bee0d5ac0438906" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c7b4cfa6213a44fa48714186dfdf125072d036e3" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f7c3fdad0a474062d566aae3289d490d7e702d30" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/fa719857f613fed94a79da055b13ca51214c694f" + }, + { + "type": "WEB", + "url": "http://www.openwall.com/lists/oss-security/2024/12/17/2" + }, + { + "type": "WEB", + "url": "http://www.openwall.com/lists/oss-security/2024/12/23/1" + }, + { + "type": "WEB", + "url": "http://xenbits.xen.org/xsa/advisory-466.html" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T10:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-w455-65cp-cghc/GHSA-w455-65cp-cghc.json b/advisories/unreviewed/2024/12/GHSA-w455-65cp-cghc/GHSA-w455-65cp-cghc.json new file mode 100644 index 00000000000..7765fa41344 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-w455-65cp-cghc/GHSA-w455-65cp-cghc.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w455-65cp-cghc", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-8721" + ], + "details": "The Tracking Code Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the tracking code field in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8721" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3211908%40tracking-code-manager&new=3211908%40tracking-code-manager&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/443d2e80-31db-40ac-9c35-88eec841ebba?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T10:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-w5gw-f5vp-r675/GHSA-w5gw-f5vp-r675.json b/advisories/unreviewed/2024/12/GHSA-w5gw-f5vp-r675/GHSA-w5gw-f5vp-r675.json new file mode 100644 index 00000000000..c7db0fd8fcd --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-w5gw-f5vp-r675/GHSA-w5gw-f5vp-r675.json @@ -0,0 +1,61 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w5gw-f5vp-r675", + "modified": "2024-12-24T12:30:43Z", + "published": "2024-12-24T12:30:43Z", + "aliases": [ + "CVE-2024-53157" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scpi: Check the DVFS OPP count returned by the firmware\n\nFix a kernel crash with the below call trace when the SCPI firmware\nreturns OPP count of zero.\n\ndvfs_info.opp_count may be zero on some platforms during the reboot\ntest, and the kernel will crash after dereferencing the pointer to\nkcalloc(info->count, sizeof(*opp), GFP_KERNEL).\n\n | Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028\n | Mem abort info:\n | ESR = 0x96000004\n | Exception class = DABT (current EL), IL = 32 bits\n | SET = 0, FnV = 0\n | EA = 0, S1PTW = 0\n | Data abort info:\n | ISV = 0, ISS = 0x00000004\n | CM = 0, WnR = 0\n | user pgtable: 4k pages, 48-bit VAs, pgdp = 00000000faefa08c\n | [0000000000000028] pgd=0000000000000000\n | Internal error: Oops: 96000004 [#1] SMP\n | scpi-hwmon: probe of PHYT000D:00 failed with error -110\n | Process systemd-udevd (pid: 1701, stack limit = 0x00000000aaede86c)\n | CPU: 2 PID: 1701 Comm: systemd-udevd Not tainted 4.19.90+ #1\n | Hardware name: PHYTIUM LTD Phytium FT2000/4/Phytium FT2000/4, BIOS\n | pstate: 60000005 (nZCv daif -PAN -UAO)\n | pc : scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi]\n | lr : clk_register+0x438/0x720\n | Call trace:\n | scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi]\n | devm_clk_hw_register+0x50/0xa0\n | scpi_clk_ops_init.isra.2+0xa0/0x138 [clk_scpi]\n | scpi_clocks_probe+0x528/0x70c [clk_scpi]\n | platform_drv_probe+0x58/0xa8\n | really_probe+0x260/0x3d0\n | driver_probe_device+0x12c/0x148\n | device_driver_attach+0x74/0x98\n | __driver_attach+0xb4/0xe8\n | bus_for_each_dev+0x88/0xe0\n | driver_attach+0x30/0x40\n | bus_add_driver+0x178/0x2b0\n | driver_register+0x64/0x118\n | __platform_driver_register+0x54/0x60\n | scpi_clocks_driver_init+0x24/0x1000 [clk_scpi]\n | do_one_initcall+0x54/0x220\n | do_init_module+0x54/0x1c8\n | load_module+0x14a4/0x1668\n | __se_sys_finit_module+0xf8/0x110\n | __arm64_sys_finit_module+0x24/0x30\n | el0_svc_common+0x78/0x170\n | el0_svc_handler+0x38/0x78\n | el0_svc+0x8/0x340\n | Code: 937d7c00 a94153f3 a8c27bfd f9400421 (b8606820)\n | ---[ end trace 06feb22469d89fa8 ]---\n | Kernel panic - not syncing: Fatal exception\n | SMP: stopping secondary CPUs\n | Kernel Offset: disabled\n | CPU features: 0x10,a0002008\n | Memory Limit: none", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53157" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/025067eeb945aa17c7dd483a63960125b7efb577" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/06258e57fee253f4046d3a6a86d7fde09f596eac" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/109aa654f85c5141e813b2cd1bd36d90be678407" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/12e2c520a0a4202575e4a45ea41f06a8e9aa3417" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/2a5b8de6fcb944f9af0c5fcb30bb0c039705e051" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/380c0e1d96f3b522f3170c18ee5e0f1a28fec5d6" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8be4e51f3ecfb0915e3510b600c4cce0dc68a383" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/9beaff47bcea5eec7d4ead98f5043057161fd71a" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/dfc9c2aa7f04f7db7e7225a5e118a24bf1c3b325" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-wm3v-h2q8-5pg6/GHSA-wm3v-h2q8-5pg6.json b/advisories/unreviewed/2024/12/GHSA-wm3v-h2q8-5pg6/GHSA-wm3v-h2q8-5pg6.json new file mode 100644 index 00000000000..b00ef3076c0 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-wm3v-h2q8-5pg6/GHSA-wm3v-h2q8-5pg6.json @@ -0,0 +1,37 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wm3v-h2q8-5pg6", + "modified": "2024-12-24T12:30:43Z", + "published": "2024-12-24T12:30:43Z", + "aliases": [ + "CVE-2024-53163" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qat/qat_420xx - fix off by one in uof_get_name()\n\nThis is called from uof_get_name_420xx() where \"num_objs\" is the\nARRAY_SIZE() of fw_objs[]. The > needs to be >= to prevent an out of\nbounds access.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53163" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/91eef1ad75f03d37dba926b73f9dd6f058bc4d58" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/93a11608fb3720e1bc2b19a2649ac2b49cca1921" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c23661a36eea840b657e485d48ed88b246da1bb8" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T12:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-xq9m-vv28-7f24/GHSA-xq9m-vv28-7f24.json b/advisories/unreviewed/2024/12/GHSA-xq9m-vv28-7f24/GHSA-xq9m-vv28-7f24.json new file mode 100644 index 00000000000..64b5b79bea2 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-xq9m-vv28-7f24/GHSA-xq9m-vv28-7f24.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xq9m-vv28-7f24", + "modified": "2024-12-24T12:30:42Z", + "published": "2024-12-24T12:30:42Z", + "aliases": [ + "CVE-2024-10584" + ], + "details": "The DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.6.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. When DirectoryPress Frontend is installed, this can be exploited by unauthenticated users.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10584" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3205071/directorypress/trunk/includes/directorypress_svg.php" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4625072b-815d-41d2-bf8f-ac290efde369?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-434" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-24T11:15:05Z" + } +} \ No newline at end of file