diff --git a/advisories/unreviewed/2022/05/GHSA-hqmw-gvh2-3w2v/GHSA-hqmw-gvh2-3w2v.json b/advisories/unreviewed/2022/05/GHSA-hqmw-gvh2-3w2v/GHSA-hqmw-gvh2-3w2v.json index de9faeca8a7..3de674e36d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-hqmw-gvh2-3w2v/GHSA-hqmw-gvh2-3w2v.json +++ b/advisories/unreviewed/2022/05/GHSA-hqmw-gvh2-3w2v/GHSA-hqmw-gvh2-3w2v.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hqmw-gvh2-3w2v", - "modified": "2022-05-17T00:01:19Z", + "modified": "2024-06-26T15:31:01Z", "published": "2022-05-07T00:00:37Z", "aliases": [ "CVE-2022-29420" diff --git a/advisories/unreviewed/2024/06/GHSA-248p-qmc2-qc97/GHSA-248p-qmc2-qc97.json b/advisories/unreviewed/2024/06/GHSA-248p-qmc2-qc97/GHSA-248p-qmc2-qc97.json new file mode 100644 index 00000000000..13d749025aa --- /dev/null +++ b/advisories/unreviewed/2024/06/GHSA-248p-qmc2-qc97/GHSA-248p-qmc2-qc97.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-248p-qmc2-qc97", + "modified": "2024-06-26T15:31:01Z", + "published": "2024-06-26T15:31:01Z", + "aliases": [ + "CVE-2024-4604" + ], + "details": "URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Magarsus Consultancy SSO (Single Sign On) allows Manipulating Hidden Fields.This issue affects SSO (Single Sign On): from 1.0 before 1.1.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4604" + }, + { + "type": "WEB", + "url": "https://www.usom.gov.tr/bildirim/tr-24-0800" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-601" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-06-26T15:15:20Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-67p8-jrm8-g765/GHSA-67p8-jrm8-g765.json b/advisories/unreviewed/2024/06/GHSA-67p8-jrm8-g765/GHSA-67p8-jrm8-g765.json index 5f9025532d2..3f959d0fbab 100644 --- a/advisories/unreviewed/2024/06/GHSA-67p8-jrm8-g765/GHSA-67p8-jrm8-g765.json +++ b/advisories/unreviewed/2024/06/GHSA-67p8-jrm8-g765/GHSA-67p8-jrm8-g765.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-67p8-jrm8-g765", - "modified": "2024-06-25T21:31:16Z", + "modified": "2024-06-26T15:31:01Z", "published": "2024-06-25T21:31:16Z", "aliases": [ "CVE-2024-5011" @@ -28,6 +28,10 @@ { "type": "WEB", "url": "https://www.progress.com/network-monitoring" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1934" } ], "database_specific": { diff --git a/advisories/unreviewed/2024/06/GHSA-9338-v6x4-3wv5/GHSA-9338-v6x4-3wv5.json b/advisories/unreviewed/2024/06/GHSA-9338-v6x4-3wv5/GHSA-9338-v6x4-3wv5.json index db2e7b46069..dde07604e2c 100644 --- a/advisories/unreviewed/2024/06/GHSA-9338-v6x4-3wv5/GHSA-9338-v6x4-3wv5.json +++ b/advisories/unreviewed/2024/06/GHSA-9338-v6x4-3wv5/GHSA-9338-v6x4-3wv5.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-9338-v6x4-3wv5", - "modified": "2024-06-24T15:31:45Z", + "modified": "2024-06-26T15:31:01Z", "published": "2024-06-24T15:31:45Z", "aliases": [ "CVE-2024-39292" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\num: Add winch to winch_handlers before registering winch IRQ\n\nRegistering a winch IRQ is racy, an interrupt may occur before the winch is\nadded to the winch_handlers list.\n\nIf that happens, register_winch_irq() adds to that list a winch that is\nscheduled to be (or has already been) freed, causing a panic later in\nwinch_cleanup().\n\nAvoid the race by adding the winch to the winch_handlers list before\nregistering the IRQ, and rolling back if um_request_irq() fails.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -53,9 +56,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-415" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-06-24T14:15:12Z" diff --git a/advisories/unreviewed/2024/06/GHSA-9vq2-24jp-74ch/GHSA-9vq2-24jp-74ch.json b/advisories/unreviewed/2024/06/GHSA-9vq2-24jp-74ch/GHSA-9vq2-24jp-74ch.json index f94510180a4..9de02605277 100644 --- a/advisories/unreviewed/2024/06/GHSA-9vq2-24jp-74ch/GHSA-9vq2-24jp-74ch.json +++ b/advisories/unreviewed/2024/06/GHSA-9vq2-24jp-74ch/GHSA-9vq2-24jp-74ch.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-9vq2-24jp-74ch", - "modified": "2024-06-24T15:31:45Z", + "modified": "2024-06-26T15:31:01Z", "published": "2024-06-24T15:31:45Z", "aliases": [ "CVE-2024-33687" ], "details": "Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-345" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-06-24T15:15:11Z" diff --git a/advisories/unreviewed/2024/06/GHSA-9w72-8p6g-p73f/GHSA-9w72-8p6g-p73f.json b/advisories/unreviewed/2024/06/GHSA-9w72-8p6g-p73f/GHSA-9w72-8p6g-p73f.json index f258ab0c072..6f4446eb9f4 100644 --- a/advisories/unreviewed/2024/06/GHSA-9w72-8p6g-p73f/GHSA-9w72-8p6g-p73f.json +++ b/advisories/unreviewed/2024/06/GHSA-9w72-8p6g-p73f/GHSA-9w72-8p6g-p73f.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-9w72-8p6g-p73f", - "modified": "2024-06-24T18:31:37Z", + "modified": "2024-06-26T15:31:01Z", "published": "2024-06-24T18:31:37Z", "aliases": [ "CVE-2024-33880" ], "details": "An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. It discloses full pathnames via Virto.SharePoint.FileDownloader/Api/Download.ashx?action=archive.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-06-24T17:15:10Z" diff --git a/advisories/unreviewed/2024/06/GHSA-c473-9ccp-22gc/GHSA-c473-9ccp-22gc.json b/advisories/unreviewed/2024/06/GHSA-c473-9ccp-22gc/GHSA-c473-9ccp-22gc.json new file mode 100644 index 00000000000..e4cbe38ac35 --- /dev/null +++ b/advisories/unreviewed/2024/06/GHSA-c473-9ccp-22gc/GHSA-c473-9ccp-22gc.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-c473-9ccp-22gc", + "modified": "2024-06-26T15:31:01Z", + "published": "2024-06-26T15:31:01Z", + "aliases": [ + "CVE-2024-6349" + ], + "details": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6349" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-06-26T15:15:20Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-cqg5-mcpx-q78p/GHSA-cqg5-mcpx-q78p.json b/advisories/unreviewed/2024/06/GHSA-cqg5-mcpx-q78p/GHSA-cqg5-mcpx-q78p.json index ac174388e05..3e43d7840d2 100644 --- a/advisories/unreviewed/2024/06/GHSA-cqg5-mcpx-q78p/GHSA-cqg5-mcpx-q78p.json +++ b/advisories/unreviewed/2024/06/GHSA-cqg5-mcpx-q78p/GHSA-cqg5-mcpx-q78p.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-cqg5-mcpx-q78p", - "modified": "2024-06-24T15:31:45Z", + "modified": "2024-06-26T15:31:01Z", "published": "2024-06-24T15:31:45Z", "aliases": [ "CVE-2024-38667" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: prevent pt_regs corruption for secondary idle threads\n\nTop of the kernel thread stack should be reserved for pt_regs. However\nthis is not the case for the idle threads of the secondary boot harts.\nTheir stacks overlap with their pt_regs, so both may get corrupted.\n\nSimilar issue has been fixed for the primary hart, see c7cdd96eca28\n(\"riscv: prevent stack corruption by reserving task_pt_regs(p) early\").\nHowever that fix was not propagated to the secondary harts. The problem\nhas been noticed in some CPU hotplug tests with V enabled. The function\nsmp_callin stored several registers on stack, corrupting top of pt_regs\nstructure including status field. As a result, kernel attempted to save\nor restore inexistent V context.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -37,9 +40,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-787" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-06-24T14:15:12Z" diff --git a/advisories/unreviewed/2024/06/GHSA-f69p-5x38-xrmw/GHSA-f69p-5x38-xrmw.json b/advisories/unreviewed/2024/06/GHSA-f69p-5x38-xrmw/GHSA-f69p-5x38-xrmw.json new file mode 100644 index 00000000000..be9c0ca4722 --- /dev/null +++ b/advisories/unreviewed/2024/06/GHSA-f69p-5x38-xrmw/GHSA-f69p-5x38-xrmw.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f69p-5x38-xrmw", + "modified": "2024-06-26T15:31:01Z", + "published": "2024-06-26T15:31:01Z", + "aliases": [ + "CVE-2024-4228" + ], + "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor, CWE - 522 - Insufficiently Protected Credentials vulnerability in Magarsus Consultancy SSO (Single Sign On) allows SQL Injection.This issue affects SSO (Single Sign On): from 1.0 before 1.1.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4228" + }, + { + "type": "WEB", + "url": "https://www.usom.gov.tr/bildirim/tr-24-0800" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-06-26T15:15:19Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-fmp7-6783-4ggp/GHSA-fmp7-6783-4ggp.json b/advisories/unreviewed/2024/06/GHSA-fmp7-6783-4ggp/GHSA-fmp7-6783-4ggp.json index 00352159427..7af1f7f6f24 100644 --- a/advisories/unreviewed/2024/06/GHSA-fmp7-6783-4ggp/GHSA-fmp7-6783-4ggp.json +++ b/advisories/unreviewed/2024/06/GHSA-fmp7-6783-4ggp/GHSA-fmp7-6783-4ggp.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-fmp7-6783-4ggp", - "modified": "2024-06-24T15:31:45Z", + "modified": "2024-06-26T15:31:01Z", "published": "2024-06-24T15:31:45Z", "aliases": [ "CVE-2024-4748" @@ -36,7 +36,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-77" + "CWE-77", + "CWE-78" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/06/GHSA-j658-fjmg-478v/GHSA-j658-fjmg-478v.json b/advisories/unreviewed/2024/06/GHSA-j658-fjmg-478v/GHSA-j658-fjmg-478v.json index 00352baee62..20d54626721 100644 --- a/advisories/unreviewed/2024/06/GHSA-j658-fjmg-478v/GHSA-j658-fjmg-478v.json +++ b/advisories/unreviewed/2024/06/GHSA-j658-fjmg-478v/GHSA-j658-fjmg-478v.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-j658-fjmg-478v", - "modified": "2024-06-24T15:31:45Z", + "modified": "2024-06-26T15:31:01Z", "published": "2024-06-24T15:31:45Z", "aliases": [ "CVE-2024-39291" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode()\n\nThe function gfx_v9_4_3_init_microcode in gfx_v9_4_3.c was generating\nabout potential truncation of output when using the snprintf function.\nThe issue was due to the size of the buffer 'ucode_prefix' being too\nsmall to accommodate the maximum possible length of the string being\nwritten into it.\n\nThe string being written is \"amdgpu/%s_mec.bin\" or \"amdgpu/%s_rlc.bin\",\nwhere %s is replaced by the value of 'chip_name'. The length of this\nstring without the %s is 16 characters. The warning message indicated\nthat 'chip_name' could be up to 29 characters long, resulting in a total\nof 45 characters, which exceeds the buffer size of 30 characters.\n\nTo resolve this issue, the size of the 'ucode_prefix' buffer has been\nreduced from 30 to 15. This ensures that the maximum possible length of\nthe string being written into the buffer will not exceed its size, thus\npreventing potential buffer overflow and truncation issues.\n\nFixes the below with gcc W=1:\ndrivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c: In function ‘gfx_v9_4_3_early_init’:\ndrivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c:379:52: warning: ‘%s’ directive output may be truncated writing up to 29 bytes into a region of size 23 [-Wformat-truncation=]\n 379 | snprintf(fw_name, sizeof(fw_name), \"amdgpu/%s_rlc.bin\", chip_name);\n | ^~\n......\n 439 | r = gfx_v9_4_3_init_rlc_microcode(adev, ucode_prefix);\n | ~~~~~~~~~~~~\ndrivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c:379:9: note: ‘snprintf’ output between 16 and 45 bytes into a destination of size 30\n 379 | snprintf(fw_name, sizeof(fw_name), \"amdgpu/%s_rlc.bin\", chip_name);\n | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\ndrivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c:413:52: warning: ‘%s’ directive output may be truncated writing up to 29 bytes into a region of size 23 [-Wformat-truncation=]\n 413 | snprintf(fw_name, sizeof(fw_name), \"amdgpu/%s_mec.bin\", chip_name);\n | ^~\n......\n 443 | r = gfx_v9_4_3_init_cp_compute_microcode(adev, ucode_prefix);\n | ~~~~~~~~~~~~\ndrivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c:413:9: note: ‘snprintf’ output between 16 and 45 bytes into a destination of size 30\n 413 | snprintf(fw_name, sizeof(fw_name), \"amdgpu/%s_mec.bin\", chip_name);\n | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-120" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-06-24T14:15:12Z" diff --git a/advisories/unreviewed/2024/06/GHSA-qh69-9h65-cjx9/GHSA-qh69-9h65-cjx9.json b/advisories/unreviewed/2024/06/GHSA-qh69-9h65-cjx9/GHSA-qh69-9h65-cjx9.json index 63a0f6dccf5..53439f5efda 100644 --- a/advisories/unreviewed/2024/06/GHSA-qh69-9h65-cjx9/GHSA-qh69-9h65-cjx9.json +++ b/advisories/unreviewed/2024/06/GHSA-qh69-9h65-cjx9/GHSA-qh69-9h65-cjx9.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-qh69-9h65-cjx9", - "modified": "2024-06-24T18:31:36Z", + "modified": "2024-06-26T15:31:01Z", "published": "2024-06-24T18:31:36Z", "aliases": [ "CVE-2024-33879" ], "details": "An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows arbitrary file download and deletion via absolute path traversal in the path parameter.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-22" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-06-24T17:15:10Z" diff --git a/advisories/unreviewed/2024/06/GHSA-r24r-m7ff-ghq2/GHSA-r24r-m7ff-ghq2.json b/advisories/unreviewed/2024/06/GHSA-r24r-m7ff-ghq2/GHSA-r24r-m7ff-ghq2.json index 7e55e685586..ddeb61c16a8 100644 --- a/advisories/unreviewed/2024/06/GHSA-r24r-m7ff-ghq2/GHSA-r24r-m7ff-ghq2.json +++ b/advisories/unreviewed/2024/06/GHSA-r24r-m7ff-ghq2/GHSA-r24r-m7ff-ghq2.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-r24r-m7ff-ghq2", - "modified": "2024-06-24T18:31:37Z", + "modified": "2024-06-26T15:31:01Z", "published": "2024-06-24T18:31:37Z", "aliases": [ "CVE-2024-33881" ], "details": "An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows an NTLMv2 hash leak via a UNC share pathname in the path parameter.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-22" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-06-24T17:15:10Z" diff --git a/advisories/unreviewed/2024/06/GHSA-rj28-pp8g-vc2r/GHSA-rj28-pp8g-vc2r.json b/advisories/unreviewed/2024/06/GHSA-rj28-pp8g-vc2r/GHSA-rj28-pp8g-vc2r.json index 7622bafb03e..c5ad3411acd 100644 --- a/advisories/unreviewed/2024/06/GHSA-rj28-pp8g-vc2r/GHSA-rj28-pp8g-vc2r.json +++ b/advisories/unreviewed/2024/06/GHSA-rj28-pp8g-vc2r/GHSA-rj28-pp8g-vc2r.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-rj28-pp8g-vc2r", - "modified": "2024-06-24T15:31:45Z", + "modified": "2024-06-26T15:31:01Z", "published": "2024-06-24T15:31:45Z", "aliases": [ "CVE-2024-38664" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: zynqmp_dpsub: Always register bridge\n\nWe must always register the DRM bridge, since zynqmp_dp_hpd_work_func\ncalls drm_bridge_hpd_notify, which in turn expects hpd_mutex to be\ninitialized. We do this before zynqmp_dpsub_drm_init since that calls\ndrm_bridge_attach. This fixes the following lockdep warning:\n\n[ 19.217084] ------------[ cut here ]------------\n[ 19.227530] DEBUG_LOCKS_WARN_ON(lock->magic != lock)\n[ 19.227768] WARNING: CPU: 0 PID: 140 at kernel/locking/mutex.c:582 __mutex_lock+0x4bc/0x550\n[ 19.241696] Modules linked in:\n[ 19.244937] CPU: 0 PID: 140 Comm: kworker/0:4 Not tainted 6.6.20+ #96\n[ 19.252046] Hardware name: xlnx,zynqmp (DT)\n[ 19.256421] Workqueue: events zynqmp_dp_hpd_work_func\n[ 19.261795] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 19.269104] pc : __mutex_lock+0x4bc/0x550\n[ 19.273364] lr : __mutex_lock+0x4bc/0x550\n[ 19.277592] sp : ffffffc085c5bbe0\n[ 19.281066] x29: ffffffc085c5bbe0 x28: 0000000000000000 x27: ffffff88009417f8\n[ 19.288624] x26: ffffff8800941788 x25: ffffff8800020008 x24: ffffffc082aa3000\n[ 19.296227] x23: ffffffc080d90e3c x22: 0000000000000002 x21: 0000000000000000\n[ 19.303744] x20: 0000000000000000 x19: ffffff88002f5210 x18: 0000000000000000\n[ 19.311295] x17: 6c707369642e3030 x16: 3030613464662072 x15: 0720072007200720\n[ 19.318922] x14: 0000000000000000 x13: 284e4f5f4e524157 x12: 0000000000000001\n[ 19.326442] x11: 0001ffc085c5b940 x10: 0001ff88003f388b x9 : 0001ff88003f3888\n[ 19.334003] x8 : 0001ff88003f3888 x7 : 0000000000000000 x6 : 0000000000000000\n[ 19.341537] x5 : 0000000000000000 x4 : 0000000000001668 x3 : 0000000000000000\n[ 19.349054] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffffff88003f3880\n[ 19.356581] Call trace:\n[ 19.359160] __mutex_lock+0x4bc/0x550\n[ 19.363032] mutex_lock_nested+0x24/0x30\n[ 19.367187] drm_bridge_hpd_notify+0x2c/0x6c\n[ 19.371698] zynqmp_dp_hpd_work_func+0x44/0x54\n[ 19.376364] process_one_work+0x3ac/0x988\n[ 19.380660] worker_thread+0x398/0x694\n[ 19.384736] kthread+0x1bc/0x1c0\n[ 19.388241] ret_from_fork+0x10/0x20\n[ 19.392031] irq event stamp: 183\n[ 19.395450] hardirqs last enabled at (183): [] finish_task_switch.isra.0+0xa8/0x2d4\n[ 19.405140] hardirqs last disabled at (182): [] __schedule+0x714/0xd04\n[ 19.413612] softirqs last enabled at (114): [] srcu_invoke_callbacks+0x158/0x23c\n[ 19.423128] softirqs last disabled at (110): [] srcu_invoke_callbacks+0x158/0x23c\n[ 19.432614] ---[ end trace 0000000000000000 ]---\n\n(cherry picked from commit 61ba791c4a7a09a370c45b70a81b8c7d4cf6b2ae)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-667" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-06-24T14:15:12Z" diff --git a/advisories/unreviewed/2024/06/GHSA-rw28-wf4m-hxpv/GHSA-rw28-wf4m-hxpv.json b/advisories/unreviewed/2024/06/GHSA-rw28-wf4m-hxpv/GHSA-rw28-wf4m-hxpv.json index 6580c48359d..a91651ba682 100644 --- a/advisories/unreviewed/2024/06/GHSA-rw28-wf4m-hxpv/GHSA-rw28-wf4m-hxpv.json +++ b/advisories/unreviewed/2024/06/GHSA-rw28-wf4m-hxpv/GHSA-rw28-wf4m-hxpv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-rw28-wf4m-hxpv", - "modified": "2024-06-25T21:31:16Z", + "modified": "2024-06-26T15:31:01Z", "published": "2024-06-25T21:31:16Z", "aliases": [ "CVE-2024-5010" @@ -28,6 +28,10 @@ { "type": "WEB", "url": "https://www.progress.com/network-monitoring" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1933" } ], "database_specific": { diff --git a/advisories/unreviewed/2024/06/GHSA-rxw3-jm8w-c989/GHSA-rxw3-jm8w-c989.json b/advisories/unreviewed/2024/06/GHSA-rxw3-jm8w-c989/GHSA-rxw3-jm8w-c989.json index c8f0a6317fa..864f7a32aee 100644 --- a/advisories/unreviewed/2024/06/GHSA-rxw3-jm8w-c989/GHSA-rxw3-jm8w-c989.json +++ b/advisories/unreviewed/2024/06/GHSA-rxw3-jm8w-c989/GHSA-rxw3-jm8w-c989.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-rxw3-jm8w-c989", - "modified": "2024-06-25T21:31:18Z", + "modified": "2024-06-26T15:31:01Z", "published": "2024-06-25T21:31:18Z", "aliases": [ "CVE-2024-5017" @@ -28,6 +28,10 @@ { "type": "WEB", "url": "https://www.progress.com/network-monitoring" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1932" } ], "database_specific": {