Publish Advisories

GHSA-2862-5xjv-8phr GHSA-33fw-34vg-hgjh GHSA-38qw-v9q4-hm9j GHSA-482h-w5qp-gfxw GHSA-4qph-c4vr-m25p GHSA-5752-wxxv-m9xh GHSA-72q5-rjgc-hrvj GHSA-7pwm-mqqh-jmmq GHSA-8g6r-2qgw-fhv7 GHSA-92cr-jqq3-99x4 GHSA-95mr-34pq-hc3c GHSA-cm9m-hp76-grcq GHSA-f8v3-3x87-4mpx GHSA-frr7-rgvg-v3p9 GHSA-g72g-w36f-8rf4 GHSA-gc88-hrfw-f9hq GHSA-pmwj-r76w-m8f7 GHSA-qr7p-mcrr-3xxp GHSA-rc6x-q5fh-8f53 GHSA-rc9p-g2q3-x488 GHSA-v5xv-g87f-x57w GHSA-vmrv-fwh7-gvm4 GHSA-vpr7-cgq2-g5rr GHSA-wcph-x6mx-4gh6
2026-05-22 18:04:22 -07:00 · 2024-08-22 06:31:47 +00:00
parent 52a0d65d21
commit da699280bc
24 changed files with 1224 additions and 0 deletions
@@ -0,0 +1,47 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2862-5xjv-8phr",
+  "modified": "2024-08-22T06:30:29Z",
+  "published": "2024-08-22T06:30:29Z",
+  "aliases": [
+    "CVE-2022-48941"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: fix concurrent reset and removal of VFs\n\nCommit c503e63200c6 (\"ice: Stop processing VF messages during teardown\")\nintroduced a driver state flag, ICE_VF_DEINIT_IN_PROGRESS, which is\nintended to prevent some issues with concurrently handling messages from\nVFs while tearing down the VFs.\n\nThis change was motivated by crashes caused while tearing down and\nbringing up VFs in rapid succession.\n\nIt turns out that the fix actually introduces issues with the VF driver\ncaused because the PF no longer responds to any messages sent by the VF\nduring its .remove routine. This results in the VF potentially removing\nits DMA memory before the PF has shut down the device queues.\n\nAdditionally, the fix doesn't actually resolve concurrency issues within\nthe ice driver. It is possible for a VF to initiate a reset just prior\nto the ice driver removing VFs. This can result in the remove task\nconcurrently operating while the VF is being reset. This results in\nsimilar memory corruption and panics purportedly fixed by that commit.\n\nFix this concurrency at its root by protecting both the reset and\nremoval flows using the existing VF cfg_lock. This ensures that we\ncannot remove the VF while any outstanding critical tasks such as a\nvirtchnl message or a reset are occurring.\n\nThis locking change also fixes the root cause originally fixed by commit\nc503e63200c6 (\"ice: Stop processing VF messages during teardown\"), so we\ncan simply revert it.\n\nNote that I kept these two changes together because simply reverting the\noriginal commit alone would leave the driver vulnerable to worse race\nconditions.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48941"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/05ae1f0fe9c6c5ead08b306e665763a352d20716"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/2a3e61de89bab6696aa28b70030eb119968c5586"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/3c805fce07c9dbc47d8a9129c7c5458025951957"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/fadead80fe4c033b5e514fcbadd20b55c4494112"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T04:15:17Z"
+  }
+}
@@ -0,0 +1,47 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-33fw-34vg-hgjh",
+  "modified": "2024-08-22T06:30:29Z",
+  "published": "2024-08-22T06:30:29Z",
+  "aliases": [
+    "CVE-2022-48938"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nCDC-NCM: avoid overflow in sanity checking\n\nA broken device may give an extreme offset like 0xFFF0\nand a reasonable length for a fragment. In the sanity\ncheck as formulated now, this will create an integer\noverflow, defeating the sanity check. Both offset\nand offset + len need to be checked in such a manner\nthat no overflow can occur.\nAnd those quantities should be unsigned.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48938"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/49909c9f8458cacb5b241106cba65aba5a6d8f4c"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/69560efa001397ebb8dc1c3e6a3ce00302bb9f7f"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/7b737e47b87589031f0d4657f6d7b0b770474925"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/8d2b1a1ec9f559d30b724877da4ce592edc41fdc"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T04:15:17Z"
+  }
+}
@@ -0,0 +1,63 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-38qw-v9q4-hm9j",
+  "modified": "2024-08-22T06:30:29Z",
+  "published": "2024-08-22T06:30:29Z",
+  "aliases": [
+    "CVE-2022-48931"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nconfigfs: fix a race in configfs_{,un}register_subsystem()\n\nWhen configfs_register_subsystem() or configfs_unregister_subsystem()\nis executing link_group() or unlink_group(),\nit is possible that two processes add or delete list concurrently.\nSome unfortunate interleavings of them can cause kernel panic.\n\nOne of cases is:\nA --> B --> C --> D\nA <-- B <-- C <-- D\n\n     delete list_head *B        |      delete list_head *C\n--------------------------------|-----------------------------------\nconfigfs_unregister_subsystem   |   configfs_unregister_subsystem\n  unlink_group                  |     unlink_group\n    unlink_obj                  |       unlink_obj\n      list_del_init             |         list_del_init\n        __list_del_entry        |           __list_del_entry\n          __list_del            |             __list_del\n            // next == C        |\n            next->prev = prev   |\n                                |               next->prev = prev\n            prev->next = next   |\n                                |                 // prev == B\n                                |                 prev->next = next\n\nFix this by adding mutex when calling link_group() or unlink_group(),\nbut parent configfs_subsystem is NULL when config_item is root.\nSo I create a mutex configfs_subsystem_mutex.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48931"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/3aadfd46858b1f64d4d6a0654b863e21aabff975"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/40805099af11f68c5ca7dbcfacf455da8f99f622"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/84ec758fb2daa236026506868c8796b0500c047d"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/a37024f7757c25550accdebf49e497ad6ae239fe"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/a7ab53d3c27dfe83bb594456b9f38a37796ec39b"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/b7e2b91fcb5c78c414e33dc8d50642e307ca0c5a"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/d1654de19d42f513b6cfe955cc77e7f427e05a77"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/e7a66dd2687758718eddd79b542a95cf3aa488cc"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T04:15:16Z"
+  }
+}
@@ -0,0 +1,51 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-482h-w5qp-gfxw",
+  "modified": "2024-08-22T06:30:29Z",
+  "published": "2024-08-22T06:30:29Z",
+  "aliases": [
+    "CVE-2024-45166"
+  ],
+  "details": "An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution. There is an access violation and EIP overwrite after five logins.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45166"
+    },
+    {
+      "type": "WEB",
+      "url": "https://uci.de/download/idol2-client.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://uci.de/products/index.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.syss.de/en/responsible-disclosure-policy"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-050.txt"
+    },
+    {
+      "type": "WEB",
+      "url": "http://download.uci.de/idol2/idol2Client_2_12.exe"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T04:15:24Z"
+  }
+}
@@ -0,0 +1,43 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5752-wxxv-m9xh",
+  "modified": "2024-08-22T06:30:29Z",
+  "published": "2024-08-22T06:30:29Z",
+  "aliases": [
+    "CVE-2022-48929"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix crash due to out of bounds access into reg2btf_ids.\n\nWhen commit e6ac2450d6de (\"bpf: Support bpf program calling kernel function\") added\nkfunc support, it defined reg2btf_ids as a cheap way to translate the verifier\nreg type to the appropriate btf_vmlinux BTF ID, however\ncommit c25b2ae13603 (\"bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL\")\nmoved the __BPF_REG_TYPE_MAX from the last member of bpf_reg_type enum to after\nthe base register types, and defined other variants using type flag\ncomposition. However, now, the direct usage of reg->type to index into\nreg2btf_ids may no longer fall into __BPF_REG_TYPE_MAX range, and hence lead to\nout of bounds access and kernel crash on dereference of bad pointer.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48929"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/45ce4b4f9009102cd9f581196d480a59208690c1"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/8c39925e98d498b9531343066ef82ae39e41adae"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/f0ce1bc9e0235dd7412240be493d7ea65ed9eadc"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T04:15:15Z"
+  }
+}
@@ -0,0 +1,55 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-72q5-rjgc-hrvj",
+  "modified": "2024-08-22T06:30:29Z",
+  "published": "2024-08-22T06:30:29Z",
+  "aliases": [
+    "CVE-2024-45167"
+  ],
+  "details": "An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution. A certain XmlMessage document causes 100% CPU consumption.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45167"
+    },
+    {
+      "type": "WEB",
+      "url": "https://uci.de/download/idol2-client.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://uci.de/products/index.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.syss.de/en/responsible-disclosure-policy"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-050.txt"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-051.txt"
+    },
+    {
+      "type": "WEB",
+      "url": "http://download.uci.de/idol2/idol2Client_2_12.exe"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T04:15:25Z"
+  }
+}
@@ -0,0 +1,51 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-92cr-jqq3-99x4",
+  "modified": "2024-08-22T06:30:29Z",
+  "published": "2024-08-22T06:30:29Z",
+  "aliases": [
+    "CVE-2022-48933"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: fix memory leak during stateful obj update\n\nstateful objects can be updated from the control plane.\nThe transaction logic allocates a temporary object for this purpose.\n\nThe ->init function was called for this object, so plain kfree() leaks\nresources. We must call ->destroy function of the object.\n\nnft_obj_destroy does this, but it also decrements the module refcount,\nbut the update path doesn't increment it.\n\nTo avoid special-casing the update object release, do module_get for\nthe update case too and release it via nft_obj_destroy().",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48933"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/34bb90e407e3288f610558beaae54ecaa32b11c4"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/53026346a94c43f35c32b18804041bc483271d87"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/7e9880e81d3fd6a43c202f205717485290432826"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/dad3bdeef45f81a6e90204bcc85360bb76eccec7"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/e96e204ee6fa46702f6c94c3c69a09e69e0eac52"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T04:15:16Z"
+  }
+}
@@ -0,0 +1,63 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-95mr-34pq-hc3c",
+  "modified": "2024-08-22T06:30:29Z",
+  "published": "2024-08-22T06:30:29Z",
+  "aliases": [
+    "CVE-2022-48930"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/ib_srp: Fix a deadlock\n\nRemove the flush_workqueue(system_long_wq) call since flushing\nsystem_long_wq is deadlock-prone and since that call is redundant with a\npreceding cancel_work_sync()",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48930"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/081bdc9fe05bb23248f5effb6f811da3da4b8252"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/4752fafb461821f8c8581090c923ababba68c5bd"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/8cc342508f9e7fdccd2e9758ae9d52aff72dab7f"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/901206f71e6ad2b2e7accefc5199a438d173c25f"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/98d056603ce55ceb90631b3927151c190dfb1b27"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/99eb8d694174c777558dc902d575d1997d5ca650"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/c8b56e51aa91b8e7df3a98388dce3fdabd15c1d4"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/d7997d19dfa7001ca41e971cd9efd091bb195b51"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T04:15:15Z"
+  }
+}
@@ -0,0 +1,43 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cm9m-hp76-grcq",
+  "modified": "2024-08-22T06:30:29Z",
+  "published": "2024-08-22T06:30:29Z",
+  "aliases": [
+    "CVE-2024-45163"
+  ],
+  "details": "The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC (command and control) server. Unauthenticated sessions remain open, causing resource consumption. For example, an attacker can send a recognized username (such as root), or can send arbitrary data.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45163"
+    },
+    {
+      "type": "WEB",
+      "url": "https://cypressthatkid.medium.com/remote-dos-exploit-found-in-mirai-botnet-source-code-27a1aad284f1"
+    },
+    {
+      "type": "WEB",
+      "url": "https://pastebin.com/6tqHnCva"
+    },
+    {
+      "type": "WEB",
+      "url": "https://youtu.be/aJkvSr85ML8"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T04:15:20Z"
+  }
+}
@@ -0,0 +1,43 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f8v3-3x87-4mpx",
+  "modified": "2024-08-22T06:30:28Z",
+  "published": "2024-08-22T06:30:28Z",
+  "aliases": [
+    "CVE-2022-48927"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: tsc2046: fix memory corruption by preventing array overflow\n\nOn one side we have indio_dev->num_channels includes all physical channels +\ntimestamp channel. On other side we have an array allocated only for\nphysical channels. So, fix memory corruption by ARRAY_SIZE() instead of\nnum_channels variable.\n\nNote the first case is a cleanup rather than a fix as the software\ntimestamp channel bit in active_scanmask is never set by the IIO core.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48927"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/082d2c047b0d305bb0b6e9f9d671a09470e2db2d"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/0cb9b2f73c182d242a640e512f4785c7c504512f"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/b7a78a8adaa8849c02f174d707aead0f85dca0da"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T04:15:15Z"
+  }
+}
@@ -0,0 +1,51 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g72g-w36f-8rf4",
+  "modified": "2024-08-22T06:30:29Z",
+  "published": "2024-08-22T06:30:29Z",
+  "aliases": [
+    "CVE-2022-48934"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()\n\nida_simple_get() returns an id between min (0) and max (NFP_MAX_MAC_INDEX)\ninclusive.\nSo NFP_MAX_MAC_INDEX (0xff) is a valid id.\n\nIn order for the error handling path to work correctly, the 'invalid'\nvalue for 'ida_idx' should not be in the 0..NFP_MAX_MAC_INDEX range,\ninclusive.\n\nSo set it to -1.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48934"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/3a14d0888eb4b0045884126acc69abfb7b87814d"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/4086d2433576baf85f0e538511df97c8101e0a10"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/5ad5886f85b6bd893e3ed19013765fb0c243c069"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/9d8097caa73200710d52b9f4d9f430548f46a900"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/af4bc921d39dffdb83076e0a7eed1321242b7d87"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T04:15:16Z"
+  }
+}
@@ -0,0 +1,63 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gc88-hrfw-f9hq",
+  "modified": "2024-08-22T06:30:28Z",
+  "published": "2024-08-22T06:30:28Z",
+  "aliases": [
+    "CVE-2022-48926"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: rndis: add spinlock for rndis response list\n\nThere's no lock for rndis response list. It could cause list corruption\nif there're two different list_add at the same time like below.\nIt's better to add in rndis_add_response / rndis_free_response\n/ rndis_get_next_response to prevent any race condition on response list.\n\n[  361.894299] [1:   irq/191-dwc3:16979] list_add corruption.\nnext->prev should be prev (ffffff80651764d0),\nbut was ffffff883dc36f80. (next=ffffff80651764d0).\n\n[  361.904380] [1:   irq/191-dwc3:16979] Call trace:\n[  361.904391] [1:   irq/191-dwc3:16979]  __list_add_valid+0x74/0x90\n[  361.904401] [1:   irq/191-dwc3:16979]  rndis_msg_parser+0x168/0x8c0\n[  361.904409] [1:   irq/191-dwc3:16979]  rndis_command_complete+0x24/0x84\n[  361.904417] [1:   irq/191-dwc3:16979]  usb_gadget_giveback_request+0x20/0xe4\n[  361.904426] [1:   irq/191-dwc3:16979]  dwc3_gadget_giveback+0x44/0x60\n[  361.904434] [1:   irq/191-dwc3:16979]  dwc3_ep0_complete_data+0x1e8/0x3a0\n[  361.904442] [1:   irq/191-dwc3:16979]  dwc3_ep0_interrupt+0x29c/0x3dc\n[  361.904450] [1:   irq/191-dwc3:16979]  dwc3_process_event_entry+0x78/0x6cc\n[  361.904457] [1:   irq/191-dwc3:16979]  dwc3_process_event_buf+0xa0/0x1ec\n[  361.904465] [1:   irq/191-dwc3:16979]  dwc3_thread_interrupt+0x34/0x5c",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48926"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/33222d1571d7ce8c1c75f6b488f38968fa93d2d9"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/4ce247af3f30078d5b97554f1ae6200a0222c15a"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/669c2b178956718407af5631ccbc61c24413f038"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/9ab652d41deab49848673c3dadb57ad338485376"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/9f5d8ba538ef81cd86ea587ca3f8c77e26bea405"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/9f688aadede6b862a0a898792b1a35421c93636f"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/aaaba1c86d04dac8e49bf508b492f81506257da3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/da514063440b53a27309a4528b726f92c3cfe56f"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T04:15:15Z"
+  }
+}
@@ -0,0 +1,47 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pmwj-r76w-m8f7",
+  "modified": "2024-08-22T06:30:29Z",
+  "published": "2024-08-22T06:30:29Z",
+  "aliases": [
+    "CVE-2022-48939"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Add schedule points in batch ops\n\nsyzbot reported various soft lockups caused by bpf batch operations.\n\n INFO: task kworker/1:1:27 blocked for more than 140 seconds.\n INFO: task hung in rcu_barrier\n\nNothing prevents batch ops to process huge amount of data,\nwe need to add schedule points in them.\n\nNote that maybe_wait_bpf_programs(map) calls from\ngeneric_map_delete_batch() can be factorized by moving\nthe call after the loop.\n\nThis will be done later in -next tree once we get this fix merged,\nunless there is strong opinion doing this optimization sooner.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48939"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/75134f16e7dd0007aa474b281935c5f42e79f2c8"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/7e8099967d0e3ff9d1ae043e80b27fbe46c08417"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/7ef94bfb08fb9e73defafbd5ddef6b5a0e2ee12b"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/8628f489b749a4f9767991631921dbe3fbcdc784"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T04:15:17Z"
+  }
+}
@@ -0,0 +1,51 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qr7p-mcrr-3xxp",
+  "modified": "2024-08-22T06:30:29Z",
+  "published": "2024-08-22T06:30:29Z",
+  "aliases": [
+    "CVE-2024-45165"
+  ],
+  "details": "An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is sent between client and server with encryption. However, the key is derived from the string \"(c)2007 UCI Software GmbH B.Boll\" (without quotes). The key is both static and hardcoded. With access to messages, this results in message decryption and encryption by an attacker. Thus, it enables passive and active man-in-the-middle attacks.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45165"
+    },
+    {
+      "type": "WEB",
+      "url": "https://uci.de/download/idol2-client.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://uci.de/products/index.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.syss.de/en/responsible-disclosure-policy"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-048.txt"
+    },
+    {
+      "type": "WEB",
+      "url": "http://download.uci.de/idol2/idol2Client_2_12.exe"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T04:15:22Z"
+  }
+}
@@ -0,0 +1,63 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rc6x-q5fh-8f53",
+  "modified": "2024-08-22T06:30:28Z",
+  "published": "2024-08-22T06:30:28Z",
+  "aliases": [
+    "CVE-2022-48928"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: men_z188_adc: Fix a resource leak in an error handling path\n\nIf iio_device_register() fails, a previous ioremap() is left unbalanced.\n\nUpdate the error handling path and add the missing iounmap() call, as\nalready done in the remove function.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48928"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/0f88722313645a903f4d420ba61ddc690ec2481d"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/1aa12ecfdcbafebc218910ec47acf6262e600cf5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/53d43a9c8dd224e66559fe86af1e473802c7130e"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/c5723b422f564af15f2e3bc0592fd6376a0a6c45"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/ce1076b33e299dc8d270e4450a420a18bfb3e190"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/d6ed5426a7fad36cf928c244483ba24e72359638"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/e0a2e37f303828d030a83f33ffe14b36cb88d563"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/fe73477802981bd0d0d70f2b22f109bcca801bdb"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T04:15:15Z"
+  }
+}
--- a/Show More
+++ b/Show More