diff --git a/advisories/unreviewed/2023/02/GHSA-35p8-rgfh-rpw2/GHSA-35p8-rgfh-rpw2.json b/advisories/unreviewed/2023/02/GHSA-35p8-rgfh-rpw2/GHSA-35p8-rgfh-rpw2.json
index cb9495f2d16..3e6f338d984 100644
--- a/advisories/unreviewed/2023/02/GHSA-35p8-rgfh-rpw2/GHSA-35p8-rgfh-rpw2.json
+++ b/advisories/unreviewed/2023/02/GHSA-35p8-rgfh-rpw2/GHSA-35p8-rgfh-rpw2.json
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-35p8-rgfh-rpw2",
- "modified": "2023-03-02T21:30:29Z",
+ "modified": "2025-03-13T21:30:57Z",
"published": "2023-02-22T06:30:16Z",
"aliases": [
"CVE-2023-24107"
@@ -33,7 +33,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-94"
+ ],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2023/02/GHSA-jmvj-m3cp-jpmf/GHSA-jmvj-m3cp-jpmf.json b/advisories/unreviewed/2023/02/GHSA-jmvj-m3cp-jpmf/GHSA-jmvj-m3cp-jpmf.json
index 63626600f8d..10d8a8ad616 100644
--- a/advisories/unreviewed/2023/02/GHSA-jmvj-m3cp-jpmf/GHSA-jmvj-m3cp-jpmf.json
+++ b/advisories/unreviewed/2023/02/GHSA-jmvj-m3cp-jpmf/GHSA-jmvj-m3cp-jpmf.json
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jmvj-m3cp-jpmf",
- "modified": "2023-03-02T21:30:29Z",
+ "modified": "2025-03-13T21:30:57Z",
"published": "2023-02-22T06:30:16Z",
"aliases": [
"CVE-2023-24108"
@@ -33,7 +33,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-912"
+ ],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/02/GHSA-c7q4-q2c5-57q3/GHSA-c7q4-q2c5-57q3.json b/advisories/unreviewed/2024/02/GHSA-c7q4-q2c5-57q3/GHSA-c7q4-q2c5-57q3.json
index 05fbfb5acd3..7394a988683 100644
--- a/advisories/unreviewed/2024/02/GHSA-c7q4-q2c5-57q3/GHSA-c7q4-q2c5-57q3.json
+++ b/advisories/unreviewed/2024/02/GHSA-c7q4-q2c5-57q3/GHSA-c7q4-q2c5-57q3.json
@@ -25,7 +25,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-284"
+ ],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/02/GHSA-qxvg-pp92-xq57/GHSA-qxvg-pp92-xq57.json b/advisories/unreviewed/2024/02/GHSA-qxvg-pp92-xq57/GHSA-qxvg-pp92-xq57.json
index f7247da2034..8c5aa1348a4 100644
--- a/advisories/unreviewed/2024/02/GHSA-qxvg-pp92-xq57/GHSA-qxvg-pp92-xq57.json
+++ b/advisories/unreviewed/2024/02/GHSA-qxvg-pp92-xq57/GHSA-qxvg-pp92-xq57.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qxvg-pp92-xq57",
- "modified": "2024-02-21T00:31:31Z",
+ "modified": "2025-03-13T21:30:58Z",
"published": "2024-02-21T00:31:31Z",
"aliases": [
"CVE-2024-25428"
],
"details": "SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
+ }
+ ],
"affected": [],
"references": [
{
@@ -23,7 +28,7 @@
"cwe_ids": [
"CWE-89"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-20T22:15:08Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-48qq-74v6-m9rv/GHSA-48qq-74v6-m9rv.json b/advisories/unreviewed/2024/03/GHSA-48qq-74v6-m9rv/GHSA-48qq-74v6-m9rv.json
index d37e85cae0d..10e6abd8819 100644
--- a/advisories/unreviewed/2024/03/GHSA-48qq-74v6-m9rv/GHSA-48qq-74v6-m9rv.json
+++ b/advisories/unreviewed/2024/03/GHSA-48qq-74v6-m9rv/GHSA-48qq-74v6-m9rv.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-48qq-74v6-m9rv",
- "modified": "2024-03-15T21:30:44Z",
+ "modified": "2025-03-13T21:31:00Z",
"published": "2024-03-15T21:30:44Z",
"aliases": [
"CVE-2021-47132"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: fix sk_forward_memory corruption on retransmission\n\nMPTCP sk_forward_memory handling is a bit special, as such field\nis protected by the msk socket spin_lock, instead of the plain\nsocket lock.\n\nCurrently we have a code path updating such field without handling\nthe relevant lock:\n\n__mptcp_retrans() -> __mptcp_clean_una_wakeup()\n\nSeveral helpers in __mptcp_clean_una_wakeup() will update\nsk_forward_alloc, possibly causing such field corruption, as reported\nby Matthieu.\n\nAddress the issue providing and using a new variant of blamed function\nwhich explicitly acquires the msk spin lock.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-787"
+ ],
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-15T21:15:07Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-5c7w-v73j-6cr4/GHSA-5c7w-v73j-6cr4.json b/advisories/unreviewed/2024/03/GHSA-5c7w-v73j-6cr4/GHSA-5c7w-v73j-6cr4.json
index ec7a72ddb1d..876c5bb046e 100644
--- a/advisories/unreviewed/2024/03/GHSA-5c7w-v73j-6cr4/GHSA-5c7w-v73j-6cr4.json
+++ b/advisories/unreviewed/2024/03/GHSA-5c7w-v73j-6cr4/GHSA-5c7w-v73j-6cr4.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5c7w-v73j-6cr4",
- "modified": "2024-03-25T12:30:51Z",
+ "modified": "2025-03-13T21:31:01Z",
"published": "2024-03-25T12:30:51Z",
"aliases": [
"CVE-2021-47159"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: fix a crash if ->get_sset_count() fails\n\nIf ds->ops->get_sset_count() fails then it \"count\" is a negative error\ncode such as -EOPNOTSUPP. Because \"i\" is an unsigned int, the negative\nerror code is type promoted to a very high value and the loop will\ncorrupt memory until the system crashes.\n\nFix this by checking for error codes and changing the type of \"i\" to\njust int.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -36,8 +41,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-835"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T10:15:08Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-63cm-3458-95cr/GHSA-63cm-3458-95cr.json b/advisories/unreviewed/2024/03/GHSA-63cm-3458-95cr/GHSA-63cm-3458-95cr.json
index bfbd8567f1a..5d397d5349e 100644
--- a/advisories/unreviewed/2024/03/GHSA-63cm-3458-95cr/GHSA-63cm-3458-95cr.json
+++ b/advisories/unreviewed/2024/03/GHSA-63cm-3458-95cr/GHSA-63cm-3458-95cr.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-63cm-3458-95cr",
- "modified": "2024-03-25T12:30:51Z",
+ "modified": "2025-03-13T21:31:02Z",
"published": "2024-03-25T12:30:51Z",
"aliases": [
"CVE-2021-47163"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: wait and exit until all work queues are done\n\nOn some host, a crash could be triggered simply by repeating these\ncommands several times:\n\n # modprobe tipc\n # tipc bearer enable media udp name UDP1 localip 127.0.0.1\n # rmmod tipc\n\n [] BUG: unable to handle kernel paging request at ffffffffc096bb00\n [] Workqueue: events 0xffffffffc096bb00\n [] Call Trace:\n [] ? process_one_work+0x1a7/0x360\n [] ? worker_thread+0x30/0x390\n [] ? create_worker+0x1a0/0x1a0\n [] ? kthread+0x116/0x130\n [] ? kthread_flush_work_fn+0x10/0x10\n [] ? ret_from_fork+0x35/0x40\n\nWhen removing the TIPC module, the UDP tunnel sock will be delayed to\nrelease in a work queue as sock_release() can't be done in rtnl_lock().\nIf the work queue is schedule to run after the TIPC module is removed,\nkernel will crash as the work queue function cleanup_beareri() code no\nlonger exists when trying to invoke it.\n\nTo fix it, this patch introduce a member wq_count in tipc_net to track\nthe numbers of work queues in schedule, and wait and exit until all\nwork queues are done in tipc_exit_net().",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -32,8 +37,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-667"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T10:15:08Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-6cwm-qhmw-g438/GHSA-6cwm-qhmw-g438.json b/advisories/unreviewed/2024/03/GHSA-6cwm-qhmw-g438/GHSA-6cwm-qhmw-g438.json
index 885c6b65089..00241db9a41 100644
--- a/advisories/unreviewed/2024/03/GHSA-6cwm-qhmw-g438/GHSA-6cwm-qhmw-g438.json
+++ b/advisories/unreviewed/2024/03/GHSA-6cwm-qhmw-g438/GHSA-6cwm-qhmw-g438.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6cwm-qhmw-g438",
- "modified": "2024-03-25T09:32:35Z",
+ "modified": "2025-03-13T21:31:01Z",
"published": "2024-03-25T09:32:35Z",
"aliases": [
"CVE-2021-47139"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: put off calling register_netdev() until client initialize complete\n\nCurrently, the netdevice is registered before client initializing\ncomplete. So there is a timewindow between netdevice available\nand usable. In this case, if user try to change the channel number\nor ring param, it may cause the hns3_set_rx_cpu_rmap() being called\ntwice, and report bug.\n\n[47199.416502] hns3 0000:35:00.0 eth1: set channels: tqp_num=1, rxfh=0\n[47199.430340] hns3 0000:35:00.0 eth1: already uninitialized\n[47199.438554] hns3 0000:35:00.0: rss changes from 4 to 1\n[47199.511854] hns3 0000:35:00.0: Channels changed, rss_size from 4 to 1, tqps from 4 to 1\n[47200.163524] ------------[ cut here ]------------\n[47200.171674] kernel BUG at lib/cpu_rmap.c:142!\n[47200.177847] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP\n[47200.185259] Modules linked in: hclge(+) hns3(-) hns3_cae(O) hns_roce_hw_v2 hnae3 vfio_iommu_type1 vfio_pci vfio_virqfd vfio pv680_mii(O) [last unloaded: hclge]\n[47200.205912] CPU: 1 PID: 8260 Comm: ethtool Tainted: G O 5.11.0-rc3+ #1\n[47200.215601] Hardware name: , xxxxxx 02/04/2021\n[47200.223052] pstate: 60400009 (nZCv daif +PAN -UAO -TCO BTYPE=--)\n[47200.230188] pc : cpu_rmap_add+0x38/0x40\n[47200.237472] lr : irq_cpu_rmap_add+0x84/0x140\n[47200.243291] sp : ffff800010e93a30\n[47200.247295] x29: ffff800010e93a30 x28: ffff082100584880\n[47200.254155] x27: 0000000000000000 x26: 0000000000000000\n[47200.260712] x25: 0000000000000000 x24: 0000000000000004\n[47200.267241] x23: ffff08209ba03000 x22: ffff08209ba038c0\n[47200.273789] x21: 000000000000003f x20: ffff0820e2bc1680\n[47200.280400] x19: ffff0820c970ec80 x18: 00000000000000c0\n[47200.286944] x17: 0000000000000000 x16: ffffb43debe4a0d0\n[47200.293456] x15: fffffc2082990600 x14: dead000000000122\n[47200.300059] x13: ffffffffffffffff x12: 000000000000003e\n[47200.306606] x11: ffff0820815b8080 x10: ffff53e411988000\n[47200.313171] x9 : 0000000000000000 x8 : ffff0820e2bc1700\n[47200.319682] x7 : 0000000000000000 x6 : 000000000000003f\n[47200.326170] x5 : 0000000000000040 x4 : ffff800010e93a20\n[47200.332656] x3 : 0000000000000004 x2 : ffff0820c970ec80\n[47200.339168] x1 : ffff0820e2bc1680 x0 : 0000000000000004\n[47200.346058] Call trace:\n[47200.349324] cpu_rmap_add+0x38/0x40\n[47200.354300] hns3_set_rx_cpu_rmap+0x6c/0xe0 [hns3]\n[47200.362294] hns3_reset_notify_init_enet+0x1cc/0x340 [hns3]\n[47200.370049] hns3_change_channels+0x40/0xb0 [hns3]\n[47200.376770] hns3_set_channels+0x12c/0x2a0 [hns3]\n[47200.383353] ethtool_set_channels+0x140/0x250\n[47200.389772] dev_ethtool+0x714/0x23d0\n[47200.394440] dev_ioctl+0x4cc/0x640\n[47200.399277] sock_do_ioctl+0x100/0x2a0\n[47200.404574] sock_ioctl+0x28c/0x470\n[47200.409079] __arm64_sys_ioctl+0xb4/0x100\n[47200.415217] el0_svc_common.constprop.0+0x84/0x210\n[47200.422088] do_el0_svc+0x28/0x34\n[47200.426387] el0_svc+0x28/0x70\n[47200.431308] el0_sync_handler+0x1a4/0x1b0\n[47200.436477] el0_sync+0x174/0x180\n[47200.441562] Code: 11000405 79000c45 f8247861 d65f03c0 (d4210000)\n[47200.448869] ---[ end trace a01efe4ce42e5f34 ]---\n\nThe process is like below:\nexcuting hns3_client_init\n|\nregister_netdev()\n| hns3_set_channels()\n| |\nhns3_set_rx_cpu_rmap() hns3_reset_notify_uninit_enet()\n| |\n| quit without calling function\n| hns3_free_rx_cpu_rmap for flag\n| HNS3_NIC_STATE_INITED is unset.\n| |\n| hns3_reset_notify_init_enet()\n| |\nset HNS3_NIC_STATE_INITED call hns3_set_rx_cpu_rmap()-- crash\n\nFix it by calling register_netdev() at the end of function\nhns3_client_init().",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -28,8 +33,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-908"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T09:15:08Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-78f3-c7qw-mjg4/GHSA-78f3-c7qw-mjg4.json b/advisories/unreviewed/2024/03/GHSA-78f3-c7qw-mjg4/GHSA-78f3-c7qw-mjg4.json
index 1ea8073c510..651bc862e9e 100644
--- a/advisories/unreviewed/2024/03/GHSA-78f3-c7qw-mjg4/GHSA-78f3-c7qw-mjg4.json
+++ b/advisories/unreviewed/2024/03/GHSA-78f3-c7qw-mjg4/GHSA-78f3-c7qw-mjg4.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-78f3-c7qw-mjg4",
- "modified": "2024-03-29T15:30:30Z",
+ "modified": "2025-03-13T21:31:03Z",
"published": "2024-03-29T15:30:30Z",
"aliases": [
"CVE-2024-30628"
],
"details": "Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from fromAddressNat function.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -23,7 +28,7 @@
"cwe_ids": [
"CWE-120"
],
- "severity": null,
+ "severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-29T13:15:16Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-79wp-fmwh-x929/GHSA-79wp-fmwh-x929.json b/advisories/unreviewed/2024/03/GHSA-79wp-fmwh-x929/GHSA-79wp-fmwh-x929.json
index 87934916ace..5c613a77b5c 100644
--- a/advisories/unreviewed/2024/03/GHSA-79wp-fmwh-x929/GHSA-79wp-fmwh-x929.json
+++ b/advisories/unreviewed/2024/03/GHSA-79wp-fmwh-x929/GHSA-79wp-fmwh-x929.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-79wp-fmwh-x929",
- "modified": "2024-06-27T12:30:44Z",
+ "modified": "2025-03-13T21:31:00Z",
"published": "2024-03-21T12:31:56Z",
"aliases": [
"CVE-2024-26642"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: disallow anonymous set with timeout flag\n\nAnonymous sets are never used with timeout from userspace, reject this.\nException to this rule is NFT_SET_EVAL to ensure legacy meters still work.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -57,7 +62,7 @@
],
"database_specific": {
"cwe_ids": [],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T11:15:28Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-7cg4-mp48-cggr/GHSA-7cg4-mp48-cggr.json b/advisories/unreviewed/2024/03/GHSA-7cg4-mp48-cggr/GHSA-7cg4-mp48-cggr.json
index 8dfba0e07b5..193c3fe8043 100644
--- a/advisories/unreviewed/2024/03/GHSA-7cg4-mp48-cggr/GHSA-7cg4-mp48-cggr.json
+++ b/advisories/unreviewed/2024/03/GHSA-7cg4-mp48-cggr/GHSA-7cg4-mp48-cggr.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7cg4-mp48-cggr",
- "modified": "2024-03-25T09:32:35Z",
+ "modified": "2025-03-13T21:31:01Z",
"published": "2024-03-25T09:32:35Z",
"aliases": [
"CVE-2021-47136"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: zero-initialize tc skb extension on allocation\n\nFunction skb_ext_add() doesn't initialize created skb extension with any\nvalue and leaves it up to the user. However, since extension of type\nTC_SKB_EXT originally contained only single value tc_skb_ext->chain its\nusers used to just assign the chain value without setting whole extension\nmemory to zero first. This assumption changed when TC_SKB_EXT extension was\nextended with additional fields but not all users were updated to\ninitialize the new fields which leads to use of uninitialized memory\nafterwards. UBSAN log:\n\n[ 778.299821] UBSAN: invalid-load in net/openvswitch/flow.c:899:28\n[ 778.301495] load of value 107 is not a valid value for type '_Bool'\n[ 778.303215] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.12.0-rc7+ #2\n[ 778.304933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\n[ 778.307901] Call Trace:\n[ 778.308680] \n[ 778.309358] dump_stack+0xbb/0x107\n[ 778.310307] ubsan_epilogue+0x5/0x40\n[ 778.311167] __ubsan_handle_load_invalid_value.cold+0x43/0x48\n[ 778.312454] ? memset+0x20/0x40\n[ 778.313230] ovs_flow_key_extract.cold+0xf/0x14 [openvswitch]\n[ 778.314532] ovs_vport_receive+0x19e/0x2e0 [openvswitch]\n[ 778.315749] ? ovs_vport_find_upcall_portid+0x330/0x330 [openvswitch]\n[ 778.317188] ? create_prof_cpu_mask+0x20/0x20\n[ 778.318220] ? arch_stack_walk+0x82/0xf0\n[ 778.319153] ? secondary_startup_64_no_verify+0xb0/0xbb\n[ 778.320399] ? stack_trace_save+0x91/0xc0\n[ 778.321362] ? stack_trace_consume_entry+0x160/0x160\n[ 778.322517] ? lock_release+0x52e/0x760\n[ 778.323444] netdev_frame_hook+0x323/0x610 [openvswitch]\n[ 778.324668] ? ovs_netdev_get_vport+0xe0/0xe0 [openvswitch]\n[ 778.325950] __netif_receive_skb_core+0x771/0x2db0\n[ 778.327067] ? lock_downgrade+0x6e0/0x6f0\n[ 778.328021] ? lock_acquire+0x565/0x720\n[ 778.328940] ? generic_xdp_tx+0x4f0/0x4f0\n[ 778.329902] ? inet_gro_receive+0x2a7/0x10a0\n[ 778.330914] ? lock_downgrade+0x6f0/0x6f0\n[ 778.331867] ? udp4_gro_receive+0x4c4/0x13e0\n[ 778.332876] ? lock_release+0x52e/0x760\n[ 778.333808] ? dev_gro_receive+0xcc8/0x2380\n[ 778.334810] ? lock_downgrade+0x6f0/0x6f0\n[ 778.335769] __netif_receive_skb_list_core+0x295/0x820\n[ 778.336955] ? process_backlog+0x780/0x780\n[ 778.337941] ? mlx5e_rep_tc_netdevice_event_unregister+0x20/0x20 [mlx5_core]\n[ 778.339613] ? seqcount_lockdep_reader_access.constprop.0+0xa7/0xc0\n[ 778.341033] ? kvm_clock_get_cycles+0x14/0x20\n[ 778.342072] netif_receive_skb_list_internal+0x5f5/0xcb0\n[ 778.343288] ? __kasan_kmalloc+0x7a/0x90\n[ 778.344234] ? mlx5e_handle_rx_cqe_mpwrq+0x9e0/0x9e0 [mlx5_core]\n[ 778.345676] ? mlx5e_xmit_xdp_frame_mpwqe+0x14d0/0x14d0 [mlx5_core]\n[ 778.347140] ? __netif_receive_skb_list_core+0x820/0x820\n[ 778.348351] ? mlx5e_post_rx_mpwqes+0xa6/0x25d0 [mlx5_core]\n[ 778.349688] ? napi_gro_flush+0x26c/0x3c0\n[ 778.350641] napi_complete_done+0x188/0x6b0\n[ 778.351627] mlx5e_napi_poll+0x373/0x1b80 [mlx5_core]\n[ 778.352853] __napi_poll+0x9f/0x510\n[ 778.353704] ? mlx5_flow_namespace_set_mode+0x260/0x260 [mlx5_core]\n[ 778.355158] net_rx_action+0x34c/0xa40\n[ 778.356060] ? napi_threaded_poll+0x3d0/0x3d0\n[ 778.357083] ? sched_clock_cpu+0x18/0x190\n[ 778.358041] ? __common_interrupt+0x8e/0x1a0\n[ 778.359045] __do_softirq+0x1ce/0x984\n[ 778.359938] __irq_exit_rcu+0x137/0x1d0\n[ 778.360865] irq_exit_rcu+0xa/0x20\n[ 778.361708] common_interrupt+0x80/0xa0\n[ 778.362640] \n[ 778.363212] asm_common_interrupt+0x1e/0x40\n[ 778.364204] RIP: 0010:native_safe_halt+0xe/0x10\n[ 778.365273] Code: 4f ff ff ff 4c 89 e7 e8 50 3f 40 fe e9 dc fe ff ff 48 89 df e8 43 3f 40 fe eb 90 cc e9 07 00 00 00 0f 00 2d 74 05 62 00 fb f4 90 e9 07 00 00 00 0f 00 2d 64 05 62 00 f4 c3 cc cc 0f 1f 44 00\n[ 778.369355] RSP: 0018:ffffffff84407e48 EFLAGS: 00000246\n[ 778.370570] RAX\n---truncated---",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -28,8 +33,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-908"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T09:15:07Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-86fr-x2qv-cxp5/GHSA-86fr-x2qv-cxp5.json b/advisories/unreviewed/2024/03/GHSA-86fr-x2qv-cxp5/GHSA-86fr-x2qv-cxp5.json
index fda5a3e51d0..fc5f024b881 100644
--- a/advisories/unreviewed/2024/03/GHSA-86fr-x2qv-cxp5/GHSA-86fr-x2qv-cxp5.json
+++ b/advisories/unreviewed/2024/03/GHSA-86fr-x2qv-cxp5/GHSA-86fr-x2qv-cxp5.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-86fr-x2qv-cxp5",
- "modified": "2024-03-25T12:30:51Z",
+ "modified": "2025-03-13T21:31:02Z",
"published": "2024-03-25T12:30:51Z",
"aliases": [
"CVE-2021-47162"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: skb_linearize the head skb when reassembling msgs\n\nIt's not a good idea to append the frag skb to a skb's frag_list if\nthe frag_list already has skbs from elsewhere, such as this skb was\ncreated by pskb_copy() where the frag_list was cloned (all the skbs\nin it were skb_get'ed) and shared by multiple skbs.\n\nHowever, the new appended frag skb should have been only seen by the\ncurrent skb. Otherwise, it will cause use after free crashes as this\nappended frag skb are seen by multiple skbs but it only got skb_get\ncalled once.\n\nThe same thing happens with a skb updated by pskb_may_pull() with a\nskb_cloned skb. Li Shuang has reported quite a few crashes caused\nby this when doing testing over macvlan devices:\n\n [] kernel BUG at net/core/skbuff.c:1970!\n [] Call Trace:\n [] skb_clone+0x4d/0xb0\n [] macvlan_broadcast+0xd8/0x160 [macvlan]\n [] macvlan_process_broadcast+0x148/0x150 [macvlan]\n [] process_one_work+0x1a7/0x360\n [] worker_thread+0x30/0x390\n\n [] kernel BUG at mm/usercopy.c:102!\n [] Call Trace:\n [] __check_heap_object+0xd3/0x100\n [] __check_object_size+0xff/0x16b\n [] simple_copy_to_iter+0x1c/0x30\n [] __skb_datagram_iter+0x7d/0x310\n [] __skb_datagram_iter+0x2a5/0x310\n [] skb_copy_datagram_iter+0x3b/0x90\n [] tipc_recvmsg+0x14a/0x3a0 [tipc]\n [] ____sys_recvmsg+0x91/0x150\n [] ___sys_recvmsg+0x7b/0xc0\n\n [] kernel BUG at mm/slub.c:305!\n [] Call Trace:\n [] \n [] kmem_cache_free+0x3ff/0x400\n [] __netif_receive_skb_core+0x12c/0xc40\n [] ? kmem_cache_alloc+0x12e/0x270\n [] netif_receive_skb_internal+0x3d/0xb0\n [] ? get_rx_page_info+0x8e/0xa0 [be2net]\n [] be_poll+0x6ef/0xd00 [be2net]\n [] ? irq_exit+0x4f/0x100\n [] net_rx_action+0x149/0x3b0\n\n ...\n\nThis patch is to fix it by linearizing the head skb if it has frag_list\nset in tipc_buf_append(). Note that we choose to do this before calling\nskb_unshare(), as __skb_linearize() will avoid skb_copy(). Also, we can\nnot just drop the frag_list either as the early time.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -48,8 +53,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-416"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T10:15:08Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-8h7v-x635-x447/GHSA-8h7v-x635-x447.json b/advisories/unreviewed/2024/03/GHSA-8h7v-x635-x447/GHSA-8h7v-x635-x447.json
index 6ee5fa85254..25de6cf203b 100644
--- a/advisories/unreviewed/2024/03/GHSA-8h7v-x635-x447/GHSA-8h7v-x635-x447.json
+++ b/advisories/unreviewed/2024/03/GHSA-8h7v-x635-x447/GHSA-8h7v-x635-x447.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8h7v-x635-x447",
- "modified": "2024-03-13T18:31:34Z",
+ "modified": "2025-03-13T21:30:59Z",
"published": "2024-03-13T18:31:34Z",
"aliases": [
"CVE-2024-26630"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: cachestat: fix folio read-after-free in cache walk\n\nIn cachestat, we access the folio from the page cache's xarray to compute\nits page offset, and check for its dirty and writeback flags. However, we\ndo not hold a reference to the folio before performing these actions,\nwhich means the folio can concurrently be released and reused as another\nfolio/page/slab.\n\nGet around this altogether by just using xarray's existing machinery for\nthe folio page offsets and dirty/writeback states.\n\nThis changes behavior for tmpfs files to now always report zeroes in their\ndirty and writeback counters. This is okay as tmpfs doesn't follow\nconventional writeback cache behavior: its pages get \"cleaned\" during\nswapout, after which they're no longer resident etc.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -28,8 +33,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-416"
+ ],
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-13T16:15:30Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-9r37-jj74-qvw9/GHSA-9r37-jj74-qvw9.json b/advisories/unreviewed/2024/03/GHSA-9r37-jj74-qvw9/GHSA-9r37-jj74-qvw9.json
index d2294716b65..9a849e1b41e 100644
--- a/advisories/unreviewed/2024/03/GHSA-9r37-jj74-qvw9/GHSA-9r37-jj74-qvw9.json
+++ b/advisories/unreviewed/2024/03/GHSA-9r37-jj74-qvw9/GHSA-9r37-jj74-qvw9.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9r37-jj74-qvw9",
- "modified": "2024-03-25T12:30:51Z",
+ "modified": "2025-03-13T21:31:02Z",
"published": "2024-03-25T12:30:51Z",
"aliases": [
"CVE-2021-47160"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: mt7530: fix VLAN traffic leaks\n\nPCR_MATRIX field was set to all 1's when VLAN filtering is enabled, but\nwas not reset when it is disabled, which may cause traffic leaks:\n\n\tip link add br0 type bridge vlan_filtering 1\n\tip link add br1 type bridge vlan_filtering 1\n\tip link set swp0 master br0\n\tip link set swp1 master br1\n\tip link set br0 type bridge vlan_filtering 0\n\tip link set br1 type bridge vlan_filtering 0\n\t# traffic in br0 and br1 will start leaking to each other\n\nAs port_bridge_{add,del} have set up PCR_MATRIX properly, remove the\nPCR_MATRIX write from mt7530_port_set_vlan_aware.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -37,7 +42,7 @@
],
"database_specific": {
"cwe_ids": [],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T10:15:08Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-9r82-f7g4-qf37/GHSA-9r82-f7g4-qf37.json b/advisories/unreviewed/2024/03/GHSA-9r82-f7g4-qf37/GHSA-9r82-f7g4-qf37.json
index 9adda49a23e..c64915b74cc 100644
--- a/advisories/unreviewed/2024/03/GHSA-9r82-f7g4-qf37/GHSA-9r82-f7g4-qf37.json
+++ b/advisories/unreviewed/2024/03/GHSA-9r82-f7g4-qf37/GHSA-9r82-f7g4-qf37.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9r82-f7g4-qf37",
- "modified": "2024-03-15T21:30:44Z",
+ "modified": "2025-03-13T21:31:00Z",
"published": "2024-03-15T21:30:44Z",
"aliases": [
"CVE-2021-47124"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: fix link timeout refs\n\nWARNING: CPU: 0 PID: 10242 at lib/refcount.c:28 refcount_warn_saturate+0x15b/0x1a0 lib/refcount.c:28\nRIP: 0010:refcount_warn_saturate+0x15b/0x1a0 lib/refcount.c:28\nCall Trace:\n __refcount_sub_and_test include/linux/refcount.h:283 [inline]\n __refcount_dec_and_test include/linux/refcount.h:315 [inline]\n refcount_dec_and_test include/linux/refcount.h:333 [inline]\n io_put_req fs/io_uring.c:2140 [inline]\n io_queue_linked_timeout fs/io_uring.c:6300 [inline]\n __io_queue_sqe+0xbef/0xec0 fs/io_uring.c:6354\n io_submit_sqe fs/io_uring.c:6534 [inline]\n io_submit_sqes+0x2bbd/0x7c50 fs/io_uring.c:6660\n __do_sys_io_uring_enter fs/io_uring.c:9240 [inline]\n __se_sys_io_uring_enter+0x256/0x1d60 fs/io_uring.c:9182\n\nio_link_timeout_fn() should put only one reference of the linked timeout\nrequest, however in case of racing with the master request's completion\nfirst io_req_complete() puts one and then io_put_req_deferred() is\ncalled.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -37,7 +42,7 @@
],
"database_specific": {
"cwe_ids": [],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-15T21:15:07Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-cr4c-ww97-fphq/GHSA-cr4c-ww97-fphq.json b/advisories/unreviewed/2024/03/GHSA-cr4c-ww97-fphq/GHSA-cr4c-ww97-fphq.json
index ec40bdc8df0..2276d77edd7 100644
--- a/advisories/unreviewed/2024/03/GHSA-cr4c-ww97-fphq/GHSA-cr4c-ww97-fphq.json
+++ b/advisories/unreviewed/2024/03/GHSA-cr4c-ww97-fphq/GHSA-cr4c-ww97-fphq.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cr4c-ww97-fphq",
- "modified": "2024-03-15T21:30:44Z",
+ "modified": "2025-03-13T21:31:00Z",
"published": "2024-03-15T21:30:44Z",
"aliases": [
"CVE-2021-47128"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, lockdown, audit: Fix buggy SELinux lockdown permission checks\n\nCommit 59438b46471a (\"security,lockdown,selinux: implement SELinux lockdown\")\nadded an implementation of the locked_down LSM hook to SELinux, with the aim\nto restrict which domains are allowed to perform operations that would breach\nlockdown. This is indirectly also getting audit subsystem involved to report\nevents. The latter is problematic, as reported by Ondrej and Serhei, since it\ncan bring down the whole system via audit:\n\n 1) The audit events that are triggered due to calls to security_locked_down()\n can OOM kill a machine, see below details [0].\n\n 2) It also seems to be causing a deadlock via avc_has_perm()/slow_avc_audit()\n when trying to wake up kauditd, for example, when using trace_sched_switch()\n tracepoint, see details in [1]. Triggering this was not via some hypothetical\n corner case, but with existing tools like runqlat & runqslower from bcc, for\n example, which make use of this tracepoint. Rough call sequence goes like:\n\n rq_lock(rq) -> -------------------------+\n trace_sched_switch() -> |\n bpf_prog_xyz() -> +-> deadlock\n selinux_lockdown() -> |\n audit_log_end() -> |\n wake_up_interruptible() -> |\n try_to_wake_up() -> |\n rq_lock(rq) --------------+\n\nWhat's worse is that the intention of 59438b46471a to further restrict lockdown\nsettings for specific applications in respect to the global lockdown policy is\ncompletely broken for BPF. The SELinux policy rule for the current lockdown check\nlooks something like this:\n\n allow : lockdown { };\n\nHowever, this doesn't match with the 'current' task where the security_locked_down()\nis executed, example: httpd does a syscall. There is a tracing program attached\nto the syscall which triggers a BPF program to run, which ends up doing a\nbpf_probe_read_kernel{,_str}() helper call. The selinux_lockdown() hook does\nthe permission check against 'current', that is, httpd in this example. httpd\nhas literally zero relation to this tracing program, and it would be nonsensical\nhaving to write an SELinux policy rule against httpd to let the tracing helper\npass. The policy in this case needs to be against the entity that is installing\nthe BPF program. For example, if bpftrace would generate a histogram of syscall\ncounts by user space application:\n\n bpftrace -e 'tracepoint:raw_syscalls:sys_enter { @[comm] = count(); }'\n\nbpftrace would then go and generate a BPF program from this internally. One way\nof doing it [for the sake of the example] could be to call bpf_get_current_task()\nhelper and then access current->comm via one of bpf_probe_read_kernel{,_str}()\nhelpers. So the program itself has nothing to do with httpd or any other random\napp doing a syscall here. The BPF program _explicitly initiated_ the lockdown\ncheck. The allow/deny policy belongs in the context of bpftrace: meaning, you\nwant to grant bpftrace access to use these helpers, but other tracers on the\nsystem like my_random_tracer _not_.\n\nTherefore fix all three issues at the same time by taking a completely different\napproach for the security_locked_down() hook, that is, move the check into the\nprogram verification phase where we actually retrieve the BPF func proto. This\nalso reliably gets the task (current) that is trying to install the BPF tracing\nprogram, e.g. bpftrace/bcc/perf/systemtap/etc, and it also fixes the OOM since\nwe're moving this out of the BPF helper's fast-path which can be called several\nmillions of times per second.\n\nThe check is then also in line with other security_locked_down() hooks in the\nsystem where the enforcement is performed at open/load time, for example,\nopen_kcore() for /proc/kcore access or module_sig_check() for module signatures\njust to pick f\n---truncated---",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -28,8 +33,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-667"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-15T21:15:07Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-ffg6-3wfr-47xc/GHSA-ffg6-3wfr-47xc.json b/advisories/unreviewed/2024/03/GHSA-ffg6-3wfr-47xc/GHSA-ffg6-3wfr-47xc.json
index 212f999ccc5..41322ea7c96 100644
--- a/advisories/unreviewed/2024/03/GHSA-ffg6-3wfr-47xc/GHSA-ffg6-3wfr-47xc.json
+++ b/advisories/unreviewed/2024/03/GHSA-ffg6-3wfr-47xc/GHSA-ffg6-3wfr-47xc.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ffg6-3wfr-47xc",
- "modified": "2024-03-25T09:32:35Z",
+ "modified": "2025-03-13T21:31:01Z",
"published": "2024-03-25T09:32:35Z",
"aliases": [
"CVE-2021-47152"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: fix data stream corruption\n\nMaxim reported several issues when forcing a TCP transparent proxy\nto use the MPTCP protocol for the inbound connections. He also\nprovided a clean reproducer.\n\nThe problem boils down to 'mptcp_frag_can_collapse_to()' assuming\nthat only MPTCP will use the given page_frag.\n\nIf others - e.g. the plain TCP protocol - allocate page fragments,\nwe can end-up re-using already allocated memory for mptcp_data_frag.\n\nFix the issue ensuring that the to-be-expanded data fragment is\nlocated at the current page frag end.\n\nv1 -> v2:\n - added missing fixes tag (Mat)",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -28,8 +33,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-787"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T09:15:09Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-fq4q-x842-fmrh/GHSA-fq4q-x842-fmrh.json b/advisories/unreviewed/2024/03/GHSA-fq4q-x842-fmrh/GHSA-fq4q-x842-fmrh.json
index 6435822b27d..d8574c04f13 100644
--- a/advisories/unreviewed/2024/03/GHSA-fq4q-x842-fmrh/GHSA-fq4q-x842-fmrh.json
+++ b/advisories/unreviewed/2024/03/GHSA-fq4q-x842-fmrh/GHSA-fq4q-x842-fmrh.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fq4q-x842-fmrh",
- "modified": "2024-03-15T21:30:43Z",
+ "modified": "2025-03-13T21:31:00Z",
"published": "2024-03-15T21:30:43Z",
"aliases": [
"CVE-2021-47112"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kvm: Teardown PV features on boot CPU as well\n\nVarious PV features (Async PF, PV EOI, steal time) work through memory\nshared with hypervisor and when we restore from hibernation we must\nproperly teardown all these features to make sure hypervisor doesn't\nwrite to stale locations after we jump to the previously hibernated kernel\n(which can try to place anything there). For secondary CPUs the job is\nalready done by kvm_cpu_down_prepare(), register syscore ops to do\nthe same for boot CPU.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -33,7 +38,7 @@
],
"database_specific": {
"cwe_ids": [],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-15T21:15:06Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-fxx6-99pg-x743/GHSA-fxx6-99pg-x743.json b/advisories/unreviewed/2024/03/GHSA-fxx6-99pg-x743/GHSA-fxx6-99pg-x743.json
index 5aecbfe4c65..b31f015c344 100644
--- a/advisories/unreviewed/2024/03/GHSA-fxx6-99pg-x743/GHSA-fxx6-99pg-x743.json
+++ b/advisories/unreviewed/2024/03/GHSA-fxx6-99pg-x743/GHSA-fxx6-99pg-x743.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fxx6-99pg-x743",
- "modified": "2024-03-25T09:32:35Z",
+ "modified": "2025-03-13T21:31:01Z",
"published": "2024-03-25T09:32:35Z",
"aliases": [
"CVE-2021-47143"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: remove device from smcd_dev_list after failed device_add()\n\nIf the device_add() for a smcd_dev fails, there's no cleanup step that\nrolls back the earlier list_add(). The device subsequently gets freed,\nand we end up with a corrupted list.\n\nAdd some error handling that removes the device from the list.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -28,8 +33,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-459"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T09:15:08Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-g4rp-89x9-87mq/GHSA-g4rp-89x9-87mq.json b/advisories/unreviewed/2024/03/GHSA-g4rp-89x9-87mq/GHSA-g4rp-89x9-87mq.json
index cefe81f3fa8..136773a628b 100644
--- a/advisories/unreviewed/2024/03/GHSA-g4rp-89x9-87mq/GHSA-g4rp-89x9-87mq.json
+++ b/advisories/unreviewed/2024/03/GHSA-g4rp-89x9-87mq/GHSA-g4rp-89x9-87mq.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g4rp-89x9-87mq",
- "modified": "2024-03-15T21:30:43Z",
+ "modified": "2025-03-13T21:31:00Z",
"published": "2024-03-15T21:30:43Z",
"aliases": [
"CVE-2021-47113"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: abort in rename_exchange if we fail to insert the second ref\n\nError injection stress uncovered a problem where we'd leave a dangling\ninode ref if we failed during a rename_exchange. This happens because\nwe insert the inode ref for one side of the rename, and then for the\nother side. If this second inode ref insert fails we'll leave the first\none dangling and leave a corrupt file system behind. Fix this by\naborting if we did the insert for the first inode ref.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -28,8 +33,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-416"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-15T21:15:06Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-hx76-chvw-qr8x/GHSA-hx76-chvw-qr8x.json b/advisories/unreviewed/2024/03/GHSA-hx76-chvw-qr8x/GHSA-hx76-chvw-qr8x.json
index 467127b2eb1..d8dea00ad9b 100644
--- a/advisories/unreviewed/2024/03/GHSA-hx76-chvw-qr8x/GHSA-hx76-chvw-qr8x.json
+++ b/advisories/unreviewed/2024/03/GHSA-hx76-chvw-qr8x/GHSA-hx76-chvw-qr8x.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hx76-chvw-qr8x",
- "modified": "2024-03-15T21:30:43Z",
+ "modified": "2025-03-13T21:30:59Z",
"published": "2024-03-15T21:30:43Z",
"aliases": [
"CVE-2021-47110"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kvm: Disable kvmclock on all CPUs on shutdown\n\nCurrenly, we disable kvmclock from machine_shutdown() hook and this\nonly happens for boot CPU. We need to disable it for all CPUs to\nguard against memory corruption e.g. on restore from hibernate.\n\nNote, writing '0' to kvmclock MSR doesn't clear memory location, it\njust prevents hypervisor from updating the location so for the short\nwhile after write and while CPU is still alive, the clock remains usable\nand correct so we don't need to switch to some other clocksource.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -32,8 +37,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-459"
+ ],
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-15T21:15:06Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-jg48-xvhq-mrmw/GHSA-jg48-xvhq-mrmw.json b/advisories/unreviewed/2024/03/GHSA-jg48-xvhq-mrmw/GHSA-jg48-xvhq-mrmw.json
index be046f10880..95c799e5def 100644
--- a/advisories/unreviewed/2024/03/GHSA-jg48-xvhq-mrmw/GHSA-jg48-xvhq-mrmw.json
+++ b/advisories/unreviewed/2024/03/GHSA-jg48-xvhq-mrmw/GHSA-jg48-xvhq-mrmw.json
@@ -45,7 +45,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-200"
+ ],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/03/GHSA-ph5r-c8gc-xg6f/GHSA-ph5r-c8gc-xg6f.json b/advisories/unreviewed/2024/03/GHSA-ph5r-c8gc-xg6f/GHSA-ph5r-c8gc-xg6f.json
index b7ed3931d66..f529b250306 100644
--- a/advisories/unreviewed/2024/03/GHSA-ph5r-c8gc-xg6f/GHSA-ph5r-c8gc-xg6f.json
+++ b/advisories/unreviewed/2024/03/GHSA-ph5r-c8gc-xg6f/GHSA-ph5r-c8gc-xg6f.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ph5r-c8gc-xg6f",
- "modified": "2024-06-26T00:31:35Z",
+ "modified": "2025-03-13T21:31:01Z",
"published": "2024-03-21T12:31:56Z",
"aliases": [
"CVE-2024-26643"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout\n\nWhile the rhashtable set gc runs asynchronously, a race allows it to\ncollect elements from anonymous sets with timeouts while it is being\nreleased from the commit path.\n\nMingi Cho originally reported this issue in a different path in 6.1.x\nwith a pipapo set with low timeouts which is not possible upstream since\n7395dfacfff6 (\"netfilter: nf_tables: use timestamp to check for set\nelement timeout\").\n\nFix this by setting on the dead flag for anonymous sets to skip async gc\nin this case.\n\nAccording to 08e4c8c5919f (\"netfilter: nf_tables: mark newset as dead on\ntransaction abort\"), Florian plans to accelerate abort path by releasing\nobjects via workqueue, therefore, this sets on the dead flag for abort\npath too.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -52,8 +57,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-667"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T11:15:28Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-qjmm-w6cw-3hf3/GHSA-qjmm-w6cw-3hf3.json b/advisories/unreviewed/2024/03/GHSA-qjmm-w6cw-3hf3/GHSA-qjmm-w6cw-3hf3.json
index 7b882f72e44..64cc8e1085b 100644
--- a/advisories/unreviewed/2024/03/GHSA-qjmm-w6cw-3hf3/GHSA-qjmm-w6cw-3hf3.json
+++ b/advisories/unreviewed/2024/03/GHSA-qjmm-w6cw-3hf3/GHSA-qjmm-w6cw-3hf3.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qjmm-w6cw-3hf3",
- "modified": "2024-03-25T09:32:35Z",
+ "modified": "2025-03-13T21:31:01Z",
"published": "2024-03-25T09:32:35Z",
"aliases": [
"CVE-2021-47138"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncxgb4: avoid accessing registers when clearing filters\n\nHardware register having the server TID base can contain\ninvalid values when adapter is in bad state (for example,\ndue to AER fatal error). Reading these invalid values in the\nregister can lead to out-of-bound memory access. So, fix\nby using the saved server TID base when clearing filters.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -32,8 +37,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-787"
+ ],
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T09:15:08Z"
diff --git a/advisories/unreviewed/2024/03/GHSA-qpg5-fc22-gh5w/GHSA-qpg5-fc22-gh5w.json b/advisories/unreviewed/2024/03/GHSA-qpg5-fc22-gh5w/GHSA-qpg5-fc22-gh5w.json
index 98bfe3f229d..aa545034bb2 100644
--- a/advisories/unreviewed/2024/03/GHSA-qpg5-fc22-gh5w/GHSA-qpg5-fc22-gh5w.json
+++ b/advisories/unreviewed/2024/03/GHSA-qpg5-fc22-gh5w/GHSA-qpg5-fc22-gh5w.json
@@ -25,7 +25,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-284"
+ ],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/03/GHSA-qw3x-hp2h-3hcq/GHSA-qw3x-hp2h-3hcq.json b/advisories/unreviewed/2024/03/GHSA-qw3x-hp2h-3hcq/GHSA-qw3x-hp2h-3hcq.json
index f7c55e7421a..71ade22cf16 100644
--- a/advisories/unreviewed/2024/03/GHSA-qw3x-hp2h-3hcq/GHSA-qw3x-hp2h-3hcq.json
+++ b/advisories/unreviewed/2024/03/GHSA-qw3x-hp2h-3hcq/GHSA-qw3x-hp2h-3hcq.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qw3x-hp2h-3hcq",
- "modified": "2024-03-21T18:32:03Z",
+ "modified": "2025-03-13T21:31:01Z",
"published": "2024-03-21T18:32:03Z",
"aliases": [
"CVE-2023-49837"
],
- "details": "Uncontrolled Resource Consumption vulnerability in David Artiss Code Embed.This issue affects Code Embed: from n/a through 2.3.6.\n\n",
- "severity": [],
+ "details": "Uncontrolled Resource Consumption vulnerability in David Artiss Code Embed.This issue affects Code Embed: from n/a through 2.3.6.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -23,7 +28,7 @@
"cwe_ids": [
"CWE-400"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T17:15:07Z"
diff --git a/advisories/unreviewed/2024/04/GHSA-7jxc-j2vf-9mcr/GHSA-7jxc-j2vf-9mcr.json b/advisories/unreviewed/2024/04/GHSA-7jxc-j2vf-9mcr/GHSA-7jxc-j2vf-9mcr.json
index cb3d4251d5d..98c37a1510b 100644
--- a/advisories/unreviewed/2024/04/GHSA-7jxc-j2vf-9mcr/GHSA-7jxc-j2vf-9mcr.json
+++ b/advisories/unreviewed/2024/04/GHSA-7jxc-j2vf-9mcr/GHSA-7jxc-j2vf-9mcr.json
@@ -30,7 +30,8 @@
],
"database_specific": {
"cwe_ids": [
- "CWE-269"
+ "CWE-269",
+ "CWE-276"
],
"severity": "HIGH",
"github_reviewed": false,
diff --git a/advisories/unreviewed/2024/04/GHSA-8rm5-h6c9-v86r/GHSA-8rm5-h6c9-v86r.json b/advisories/unreviewed/2024/04/GHSA-8rm5-h6c9-v86r/GHSA-8rm5-h6c9-v86r.json
index 8ec22d7b637..574fa1d5a57 100644
--- a/advisories/unreviewed/2024/04/GHSA-8rm5-h6c9-v86r/GHSA-8rm5-h6c9-v86r.json
+++ b/advisories/unreviewed/2024/04/GHSA-8rm5-h6c9-v86r/GHSA-8rm5-h6c9-v86r.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8rm5-h6c9-v86r",
- "modified": "2024-04-01T03:30:39Z",
+ "modified": "2025-03-13T21:31:04Z",
"published": "2024-04-01T03:30:39Z",
"aliases": [
"CVE-2024-20040"
],
"details": "In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 (for MT6XXX chipsets) / WCNCR00363530 (for MT79XX chipsets); Issue ID: MSV-979.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-787"
+ ],
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-01T03:15:07Z"
diff --git a/advisories/unreviewed/2024/05/GHSA-33xc-pj2q-h2rm/GHSA-33xc-pj2q-h2rm.json b/advisories/unreviewed/2024/05/GHSA-33xc-pj2q-h2rm/GHSA-33xc-pj2q-h2rm.json
index ee9ddd84ab5..7d6ee422fa1 100644
--- a/advisories/unreviewed/2024/05/GHSA-33xc-pj2q-h2rm/GHSA-33xc-pj2q-h2rm.json
+++ b/advisories/unreviewed/2024/05/GHSA-33xc-pj2q-h2rm/GHSA-33xc-pj2q-h2rm.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-33xc-pj2q-h2rm",
- "modified": "2024-05-14T18:30:55Z",
+ "modified": "2025-03-13T21:31:06Z",
"published": "2024-05-14T18:30:55Z",
"aliases": [
"CVE-2024-4424"
],
- "details": "The access control in CemiPark software does not properly validate user-entered data, which allows the stored cross-site scripting (XSS) attack. The parameters used to enter data into the system do not have appropriate validation, which makes possible to smuggle in HTML/JavaScript code. This code will be executed in the user's browser space.This issue affects CemiPark software: 4.5, 4.7, 5.03 and potentially others. The vendor refused to provide the specific range of affected products.\n\n",
- "severity": [],
+ "details": "The access control in CemiPark software does not properly validate user-entered data, which allows the stored cross-site scripting (XSS) attack. The parameters used to enter data into the system do not have appropriate validation, which makes possible to smuggle in HTML/JavaScript code. This code will be executed in the user's browser space.This issue affects CemiPark software: 4.5, 4.7, 5.03 and potentially others. The vendor refused to provide the specific range of affected products.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+ }
+ ],
"affected": [],
"references": [
{
@@ -31,7 +36,7 @@
"cwe_ids": [
"CWE-79"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T15:43:41Z"
diff --git a/advisories/unreviewed/2024/05/GHSA-48vc-2479-rfvr/GHSA-48vc-2479-rfvr.json b/advisories/unreviewed/2024/05/GHSA-48vc-2479-rfvr/GHSA-48vc-2479-rfvr.json
index 91e761d7f5f..7a963f831ea 100644
--- a/advisories/unreviewed/2024/05/GHSA-48vc-2479-rfvr/GHSA-48vc-2479-rfvr.json
+++ b/advisories/unreviewed/2024/05/GHSA-48vc-2479-rfvr/GHSA-48vc-2479-rfvr.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-48vc-2479-rfvr",
- "modified": "2024-05-08T18:30:49Z",
+ "modified": "2025-03-13T21:31:06Z",
"published": "2024-05-08T18:30:49Z",
"aliases": [
"CVE-2024-25527"
],
"details": "RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklog_template_show.aspx.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L"
+ }
+ ],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-89"
+ ],
+ "severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-08T16:15:08Z"
diff --git a/advisories/unreviewed/2024/05/GHSA-6hjh-qhhq-4q76/GHSA-6hjh-qhhq-4q76.json b/advisories/unreviewed/2024/05/GHSA-6hjh-qhhq-4q76/GHSA-6hjh-qhhq-4q76.json
index a78c28bbbd5..65352d663ef 100644
--- a/advisories/unreviewed/2024/05/GHSA-6hjh-qhhq-4q76/GHSA-6hjh-qhhq-4q76.json
+++ b/advisories/unreviewed/2024/05/GHSA-6hjh-qhhq-4q76/GHSA-6hjh-qhhq-4q76.json
@@ -25,7 +25,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-20"
+ ],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/05/GHSA-qwgv-36mc-mpx9/GHSA-qwgv-36mc-mpx9.json b/advisories/unreviewed/2024/05/GHSA-qwgv-36mc-mpx9/GHSA-qwgv-36mc-mpx9.json
index 89ed0cf1688..992881c371c 100644
--- a/advisories/unreviewed/2024/05/GHSA-qwgv-36mc-mpx9/GHSA-qwgv-36mc-mpx9.json
+++ b/advisories/unreviewed/2024/05/GHSA-qwgv-36mc-mpx9/GHSA-qwgv-36mc-mpx9.json
@@ -25,7 +25,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-89"
+ ],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/06/GHSA-8qj9-f5hw-7wqq/GHSA-8qj9-f5hw-7wqq.json b/advisories/unreviewed/2024/06/GHSA-8qj9-f5hw-7wqq/GHSA-8qj9-f5hw-7wqq.json
index e477e1b0070..b53d75ce542 100644
--- a/advisories/unreviewed/2024/06/GHSA-8qj9-f5hw-7wqq/GHSA-8qj9-f5hw-7wqq.json
+++ b/advisories/unreviewed/2024/06/GHSA-8qj9-f5hw-7wqq/GHSA-8qj9-f5hw-7wqq.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8qj9-f5hw-7wqq",
- "modified": "2024-06-27T06:32:47Z",
+ "modified": "2025-03-13T21:31:08Z",
"published": "2024-06-27T06:32:47Z",
"aliases": [
"CVE-2024-1330"
],
"details": "The kadence-blocks-pro WordPress plugin before 2.3.8 does not prevent users with at least the contributor role using some of its shortcode's functionalities to leak arbitrary options from the database.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
+ }
+ ],
"affected": [],
"references": [
{
@@ -21,7 +26,7 @@
],
"database_specific": {
"cwe_ids": [],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-27T06:15:09Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-8wpj-v5qv-3wf4/GHSA-8wpj-v5qv-3wf4.json b/advisories/unreviewed/2024/06/GHSA-8wpj-v5qv-3wf4/GHSA-8wpj-v5qv-3wf4.json
index f1dcf46e33d..66b59dc0adf 100644
--- a/advisories/unreviewed/2024/06/GHSA-8wpj-v5qv-3wf4/GHSA-8wpj-v5qv-3wf4.json
+++ b/advisories/unreviewed/2024/06/GHSA-8wpj-v5qv-3wf4/GHSA-8wpj-v5qv-3wf4.json
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8wpj-v5qv-3wf4",
- "modified": "2024-08-27T18:31:35Z",
+ "modified": "2025-03-13T21:31:08Z",
"published": "2024-06-29T06:31:40Z",
"aliases": [
"CVE-2024-37371"
@@ -23,13 +23,19 @@
"type": "WEB",
"url": "https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef"
},
+ {
+ "type": "WEB",
+ "url": "https://security.netapp.com/advisory/ntap-20241108-0009"
+ },
{
"type": "WEB",
"url": "https://web.mit.edu/kerberos/www/advisories"
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-125"
+ ],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/06/GHSA-gw84-qf63-55gw/GHSA-gw84-qf63-55gw.json b/advisories/unreviewed/2024/06/GHSA-gw84-qf63-55gw/GHSA-gw84-qf63-55gw.json
index 2e8bae5d19f..26339857dbe 100644
--- a/advisories/unreviewed/2024/06/GHSA-gw84-qf63-55gw/GHSA-gw84-qf63-55gw.json
+++ b/advisories/unreviewed/2024/06/GHSA-gw84-qf63-55gw/GHSA-gw84-qf63-55gw.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gw84-qf63-55gw",
- "modified": "2024-06-26T18:30:28Z",
+ "modified": "2025-03-13T21:31:08Z",
"published": "2024-06-26T18:30:28Z",
"aliases": [
"CVE-2024-6354"
],
"details": "Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -23,7 +28,7 @@
"cwe_ids": [
"CWE-1262"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-26T17:15:27Z"
diff --git a/advisories/unreviewed/2024/06/GHSA-wvrw-2fv8-cjvx/GHSA-wvrw-2fv8-cjvx.json b/advisories/unreviewed/2024/06/GHSA-wvrw-2fv8-cjvx/GHSA-wvrw-2fv8-cjvx.json
index 3d2acb11bbc..043e5df5434 100644
--- a/advisories/unreviewed/2024/06/GHSA-wvrw-2fv8-cjvx/GHSA-wvrw-2fv8-cjvx.json
+++ b/advisories/unreviewed/2024/06/GHSA-wvrw-2fv8-cjvx/GHSA-wvrw-2fv8-cjvx.json
@@ -33,7 +33,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-345"
+ ],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/07/GHSA-22g4-7m96-g7pp/GHSA-22g4-7m96-g7pp.json b/advisories/unreviewed/2024/07/GHSA-22g4-7m96-g7pp/GHSA-22g4-7m96-g7pp.json
index b8a745a5ccf..ea692020cb8 100644
--- a/advisories/unreviewed/2024/07/GHSA-22g4-7m96-g7pp/GHSA-22g4-7m96-g7pp.json
+++ b/advisories/unreviewed/2024/07/GHSA-22g4-7m96-g7pp/GHSA-22g4-7m96-g7pp.json
@@ -42,6 +42,7 @@
],
"database_specific": {
"cwe_ids": [
+ "CWE-122",
"CWE-787"
],
"severity": "MODERATE",
diff --git a/advisories/unreviewed/2024/07/GHSA-6cj7-cwrr-q8fr/GHSA-6cj7-cwrr-q8fr.json b/advisories/unreviewed/2024/07/GHSA-6cj7-cwrr-q8fr/GHSA-6cj7-cwrr-q8fr.json
index 7206a1f647e..c807893eb2a 100644
--- a/advisories/unreviewed/2024/07/GHSA-6cj7-cwrr-q8fr/GHSA-6cj7-cwrr-q8fr.json
+++ b/advisories/unreviewed/2024/07/GHSA-6cj7-cwrr-q8fr/GHSA-6cj7-cwrr-q8fr.json
@@ -33,7 +33,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-269"
+ ],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/07/GHSA-8754-873p-mcq7/GHSA-8754-873p-mcq7.json b/advisories/unreviewed/2024/07/GHSA-8754-873p-mcq7/GHSA-8754-873p-mcq7.json
index 67508acf5a1..b975db8640f 100644
--- a/advisories/unreviewed/2024/07/GHSA-8754-873p-mcq7/GHSA-8754-873p-mcq7.json
+++ b/advisories/unreviewed/2024/07/GHSA-8754-873p-mcq7/GHSA-8754-873p-mcq7.json
@@ -25,7 +25,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-79"
+ ],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/07/GHSA-ch9g-7w68-jqjr/GHSA-ch9g-7w68-jqjr.json b/advisories/unreviewed/2024/07/GHSA-ch9g-7w68-jqjr/GHSA-ch9g-7w68-jqjr.json
index 09121194b2b..0474f5b6e8e 100644
--- a/advisories/unreviewed/2024/07/GHSA-ch9g-7w68-jqjr/GHSA-ch9g-7w68-jqjr.json
+++ b/advisories/unreviewed/2024/07/GHSA-ch9g-7w68-jqjr/GHSA-ch9g-7w68-jqjr.json
@@ -53,7 +53,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-200"
+ ],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/07/GHSA-h9mr-jrr6-mjrf/GHSA-h9mr-jrr6-mjrf.json b/advisories/unreviewed/2024/07/GHSA-h9mr-jrr6-mjrf/GHSA-h9mr-jrr6-mjrf.json
index 5485be55bd0..bfd51dac75a 100644
--- a/advisories/unreviewed/2024/07/GHSA-h9mr-jrr6-mjrf/GHSA-h9mr-jrr6-mjrf.json
+++ b/advisories/unreviewed/2024/07/GHSA-h9mr-jrr6-mjrf/GHSA-h9mr-jrr6-mjrf.json
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
+ "CWE-277",
"CWE-284"
],
"severity": "CRITICAL",
diff --git a/advisories/unreviewed/2024/07/GHSA-mxhg-mc93-9g8m/GHSA-mxhg-mc93-9g8m.json b/advisories/unreviewed/2024/07/GHSA-mxhg-mc93-9g8m/GHSA-mxhg-mc93-9g8m.json
index eceb0539899..f014e041995 100644
--- a/advisories/unreviewed/2024/07/GHSA-mxhg-mc93-9g8m/GHSA-mxhg-mc93-9g8m.json
+++ b/advisories/unreviewed/2024/07/GHSA-mxhg-mc93-9g8m/GHSA-mxhg-mc93-9g8m.json
@@ -62,6 +62,7 @@
],
"database_specific": {
"cwe_ids": [
+ "CWE-352",
"CWE-362"
],
"severity": "HIGH",
diff --git a/advisories/unreviewed/2024/07/GHSA-rprh-6xcf-j66g/GHSA-rprh-6xcf-j66g.json b/advisories/unreviewed/2024/07/GHSA-rprh-6xcf-j66g/GHSA-rprh-6xcf-j66g.json
index 31f522eef2d..9b50da58c28 100644
--- a/advisories/unreviewed/2024/07/GHSA-rprh-6xcf-j66g/GHSA-rprh-6xcf-j66g.json
+++ b/advisories/unreviewed/2024/07/GHSA-rprh-6xcf-j66g/GHSA-rprh-6xcf-j66g.json
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
+ "CWE-277",
"CWE-284"
],
"severity": "HIGH",
diff --git a/advisories/unreviewed/2024/07/GHSA-x7rm-gp29-w8xw/GHSA-x7rm-gp29-w8xw.json b/advisories/unreviewed/2024/07/GHSA-x7rm-gp29-w8xw/GHSA-x7rm-gp29-w8xw.json
index 99928a00045..a36ab61627f 100644
--- a/advisories/unreviewed/2024/07/GHSA-x7rm-gp29-w8xw/GHSA-x7rm-gp29-w8xw.json
+++ b/advisories/unreviewed/2024/07/GHSA-x7rm-gp29-w8xw/GHSA-x7rm-gp29-w8xw.json
@@ -53,7 +53,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-200"
+ ],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/08/GHSA-9r2g-27gf-rm9w/GHSA-9r2g-27gf-rm9w.json b/advisories/unreviewed/2024/08/GHSA-9r2g-27gf-rm9w/GHSA-9r2g-27gf-rm9w.json
index 0438926c26e..bbf92c772aa 100644
--- a/advisories/unreviewed/2024/08/GHSA-9r2g-27gf-rm9w/GHSA-9r2g-27gf-rm9w.json
+++ b/advisories/unreviewed/2024/08/GHSA-9r2g-27gf-rm9w/GHSA-9r2g-27gf-rm9w.json
@@ -30,6 +30,7 @@
],
"database_specific": {
"cwe_ids": [
+ "CWE-256",
"CWE-312"
],
"severity": "MODERATE",
diff --git a/advisories/unreviewed/2024/08/GHSA-cchp-c7c7-jf58/GHSA-cchp-c7c7-jf58.json b/advisories/unreviewed/2024/08/GHSA-cchp-c7c7-jf58/GHSA-cchp-c7c7-jf58.json
index a106b7e3c3e..6af3d62a40a 100644
--- a/advisories/unreviewed/2024/08/GHSA-cchp-c7c7-jf58/GHSA-cchp-c7c7-jf58.json
+++ b/advisories/unreviewed/2024/08/GHSA-cchp-c7c7-jf58/GHSA-cchp-c7c7-jf58.json
@@ -25,7 +25,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-284"
+ ],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/08/GHSA-hg5m-x49p-g9h8/GHSA-hg5m-x49p-g9h8.json b/advisories/unreviewed/2024/08/GHSA-hg5m-x49p-g9h8/GHSA-hg5m-x49p-g9h8.json
index f74bc5445e0..1e7633d7ff6 100644
--- a/advisories/unreviewed/2024/08/GHSA-hg5m-x49p-g9h8/GHSA-hg5m-x49p-g9h8.json
+++ b/advisories/unreviewed/2024/08/GHSA-hg5m-x49p-g9h8/GHSA-hg5m-x49p-g9h8.json
@@ -29,7 +29,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-79"
+ ],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/09/GHSA-499r-h8wp-rfvm/GHSA-499r-h8wp-rfvm.json b/advisories/unreviewed/2024/09/GHSA-499r-h8wp-rfvm/GHSA-499r-h8wp-rfvm.json
index 625b88ccde4..c9620c82c3d 100644
--- a/advisories/unreviewed/2024/09/GHSA-499r-h8wp-rfvm/GHSA-499r-h8wp-rfvm.json
+++ b/advisories/unreviewed/2024/09/GHSA-499r-h8wp-rfvm/GHSA-499r-h8wp-rfvm.json
@@ -25,7 +25,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-939"
+ ],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/09/GHSA-x79g-r583-xj83/GHSA-x79g-r583-xj83.json b/advisories/unreviewed/2024/09/GHSA-x79g-r583-xj83/GHSA-x79g-r583-xj83.json
index d28e057922d..38fb390782b 100644
--- a/advisories/unreviewed/2024/09/GHSA-x79g-r583-xj83/GHSA-x79g-r583-xj83.json
+++ b/advisories/unreviewed/2024/09/GHSA-x79g-r583-xj83/GHSA-x79g-r583-xj83.json
@@ -25,7 +25,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-125"
+ ],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/10/GHSA-cvp2-5m4q-66qv/GHSA-cvp2-5m4q-66qv.json b/advisories/unreviewed/2024/10/GHSA-cvp2-5m4q-66qv/GHSA-cvp2-5m4q-66qv.json
index 79d6574caf3..fc2572702e2 100644
--- a/advisories/unreviewed/2024/10/GHSA-cvp2-5m4q-66qv/GHSA-cvp2-5m4q-66qv.json
+++ b/advisories/unreviewed/2024/10/GHSA-cvp2-5m4q-66qv/GHSA-cvp2-5m4q-66qv.json
@@ -29,7 +29,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-287"
+ ],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/10/GHSA-x834-53jc-rjr9/GHSA-x834-53jc-rjr9.json b/advisories/unreviewed/2024/10/GHSA-x834-53jc-rjr9/GHSA-x834-53jc-rjr9.json
index 67e48240044..c79dca0b82d 100644
--- a/advisories/unreviewed/2024/10/GHSA-x834-53jc-rjr9/GHSA-x834-53jc-rjr9.json
+++ b/advisories/unreviewed/2024/10/GHSA-x834-53jc-rjr9/GHSA-x834-53jc-rjr9.json
@@ -29,7 +29,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-284"
+ ],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/11/GHSA-46r6-92jg-22jg/GHSA-46r6-92jg-22jg.json b/advisories/unreviewed/2024/11/GHSA-46r6-92jg-22jg/GHSA-46r6-92jg-22jg.json
index f431a43691e..ca6f091d294 100644
--- a/advisories/unreviewed/2024/11/GHSA-46r6-92jg-22jg/GHSA-46r6-92jg-22jg.json
+++ b/advisories/unreviewed/2024/11/GHSA-46r6-92jg-22jg/GHSA-46r6-92jg-22jg.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-46r6-92jg-22jg",
- "modified": "2024-11-09T00:30:42Z",
+ "modified": "2025-03-13T21:31:13Z",
"published": "2024-11-09T00:30:42Z",
"aliases": [
"CVE-2024-27530"
],
"details": "wasm3 139076a contains a Use-After-Free in ForEachModule.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -27,7 +32,7 @@
"cwe_ids": [
"CWE-416"
],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-08T22:15:15Z"
diff --git a/advisories/unreviewed/2024/11/GHSA-78cp-pmx4-6cr5/GHSA-78cp-pmx4-6cr5.json b/advisories/unreviewed/2024/11/GHSA-78cp-pmx4-6cr5/GHSA-78cp-pmx4-6cr5.json
index 9f77d2e5317..a2e40fc4a1e 100644
--- a/advisories/unreviewed/2024/11/GHSA-78cp-pmx4-6cr5/GHSA-78cp-pmx4-6cr5.json
+++ b/advisories/unreviewed/2024/11/GHSA-78cp-pmx4-6cr5/GHSA-78cp-pmx4-6cr5.json
@@ -25,7 +25,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-770"
+ ],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/11/GHSA-mpxg-m884-58ff/GHSA-mpxg-m884-58ff.json b/advisories/unreviewed/2024/11/GHSA-mpxg-m884-58ff/GHSA-mpxg-m884-58ff.json
index 65a61c1d979..ff59c3f102c 100644
--- a/advisories/unreviewed/2024/11/GHSA-mpxg-m884-58ff/GHSA-mpxg-m884-58ff.json
+++ b/advisories/unreviewed/2024/11/GHSA-mpxg-m884-58ff/GHSA-mpxg-m884-58ff.json
@@ -29,7 +29,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-1021"
+ ],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/12/GHSA-3g63-2rpp-wc2m/GHSA-3g63-2rpp-wc2m.json b/advisories/unreviewed/2024/12/GHSA-3g63-2rpp-wc2m/GHSA-3g63-2rpp-wc2m.json
index 57fb50f5435..bb7cc45ff9a 100644
--- a/advisories/unreviewed/2024/12/GHSA-3g63-2rpp-wc2m/GHSA-3g63-2rpp-wc2m.json
+++ b/advisories/unreviewed/2024/12/GHSA-3g63-2rpp-wc2m/GHSA-3g63-2rpp-wc2m.json
@@ -25,7 +25,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-918"
+ ],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2025/01/GHSA-4h8j-v9x7-v3wj/GHSA-4h8j-v9x7-v3wj.json b/advisories/unreviewed/2025/01/GHSA-4h8j-v9x7-v3wj/GHSA-4h8j-v9x7-v3wj.json
index a952e7fdec4..fe4bd8c6b7a 100644
--- a/advisories/unreviewed/2025/01/GHSA-4h8j-v9x7-v3wj/GHSA-4h8j-v9x7-v3wj.json
+++ b/advisories/unreviewed/2025/01/GHSA-4h8j-v9x7-v3wj/GHSA-4h8j-v9x7-v3wj.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4h8j-v9x7-v3wj",
- "modified": "2025-01-14T21:31:47Z",
+ "modified": "2025-03-13T21:31:15Z",
"published": "2025-01-14T21:31:47Z",
"aliases": [
"CVE-2025-23072"
],
"details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - RefreshSpecial Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - RefreshSpecial Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"
+ }
+ ],
"affected": [],
"references": [
{
@@ -27,7 +32,7 @@
"cwe_ids": [
"CWE-79"
],
- "severity": null,
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-14T19:15:45Z"
diff --git a/advisories/unreviewed/2025/01/GHSA-748w-f5ch-qpr7/GHSA-748w-f5ch-qpr7.json b/advisories/unreviewed/2025/01/GHSA-748w-f5ch-qpr7/GHSA-748w-f5ch-qpr7.json
index a328caeaf65..56ebecc788a 100644
--- a/advisories/unreviewed/2025/01/GHSA-748w-f5ch-qpr7/GHSA-748w-f5ch-qpr7.json
+++ b/advisories/unreviewed/2025/01/GHSA-748w-f5ch-qpr7/GHSA-748w-f5ch-qpr7.json
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
+ "CWE-400",
"CWE-770"
],
"severity": "HIGH",
diff --git a/advisories/unreviewed/2025/01/GHSA-826g-p4h4-g7x3/GHSA-826g-p4h4-g7x3.json b/advisories/unreviewed/2025/01/GHSA-826g-p4h4-g7x3/GHSA-826g-p4h4-g7x3.json
index d5c519af5d1..2bba54699aa 100644
--- a/advisories/unreviewed/2025/01/GHSA-826g-p4h4-g7x3/GHSA-826g-p4h4-g7x3.json
+++ b/advisories/unreviewed/2025/01/GHSA-826g-p4h4-g7x3/GHSA-826g-p4h4-g7x3.json
@@ -33,7 +33,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-400"
+ ],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2025/01/GHSA-c5c5-3vp7-2qj2/GHSA-c5c5-3vp7-2qj2.json b/advisories/unreviewed/2025/01/GHSA-c5c5-3vp7-2qj2/GHSA-c5c5-3vp7-2qj2.json
index ba9a20c6841..9f5f0dda414 100644
--- a/advisories/unreviewed/2025/01/GHSA-c5c5-3vp7-2qj2/GHSA-c5c5-3vp7-2qj2.json
+++ b/advisories/unreviewed/2025/01/GHSA-c5c5-3vp7-2qj2/GHSA-c5c5-3vp7-2qj2.json
@@ -30,6 +30,7 @@
],
"database_specific": {
"cwe_ids": [
+ "CWE-200",
"CWE-863"
],
"severity": "MODERATE",
diff --git a/advisories/unreviewed/2025/01/GHSA-cqc8-8583-c382/GHSA-cqc8-8583-c382.json b/advisories/unreviewed/2025/01/GHSA-cqc8-8583-c382/GHSA-cqc8-8583-c382.json
index 3e2a113cda5..6385a9586c2 100644
--- a/advisories/unreviewed/2025/01/GHSA-cqc8-8583-c382/GHSA-cqc8-8583-c382.json
+++ b/advisories/unreviewed/2025/01/GHSA-cqc8-8583-c382/GHSA-cqc8-8583-c382.json
@@ -25,7 +25,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-863"
+ ],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2025/01/GHSA-fcgm-cf56-frhw/GHSA-fcgm-cf56-frhw.json b/advisories/unreviewed/2025/01/GHSA-fcgm-cf56-frhw/GHSA-fcgm-cf56-frhw.json
index 510a45c1a77..44c5c545511 100644
--- a/advisories/unreviewed/2025/01/GHSA-fcgm-cf56-frhw/GHSA-fcgm-cf56-frhw.json
+++ b/advisories/unreviewed/2025/01/GHSA-fcgm-cf56-frhw/GHSA-fcgm-cf56-frhw.json
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
+ "CWE-276",
"CWE-862"
],
"severity": "HIGH",
diff --git a/advisories/unreviewed/2025/01/GHSA-jh93-vvqf-mfqc/GHSA-jh93-vvqf-mfqc.json b/advisories/unreviewed/2025/01/GHSA-jh93-vvqf-mfqc/GHSA-jh93-vvqf-mfqc.json
index 7f895c7fbb5..62c8838c3c8 100644
--- a/advisories/unreviewed/2025/01/GHSA-jh93-vvqf-mfqc/GHSA-jh93-vvqf-mfqc.json
+++ b/advisories/unreviewed/2025/01/GHSA-jh93-vvqf-mfqc/GHSA-jh93-vvqf-mfqc.json
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
+ "CWE-400",
"CWE-770"
],
"severity": "HIGH",
diff --git a/advisories/unreviewed/2025/01/GHSA-jvqm-w56m-w3j7/GHSA-jvqm-w56m-w3j7.json b/advisories/unreviewed/2025/01/GHSA-jvqm-w56m-w3j7/GHSA-jvqm-w56m-w3j7.json
index 3369f7e4900..dcbd242dbf3 100644
--- a/advisories/unreviewed/2025/01/GHSA-jvqm-w56m-w3j7/GHSA-jvqm-w56m-w3j7.json
+++ b/advisories/unreviewed/2025/01/GHSA-jvqm-w56m-w3j7/GHSA-jvqm-w56m-w3j7.json
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
+ "CWE-200",
"CWE-611"
],
"severity": "MODERATE",
diff --git a/advisories/unreviewed/2025/01/GHSA-vv27-g57g-wgqp/GHSA-vv27-g57g-wgqp.json b/advisories/unreviewed/2025/01/GHSA-vv27-g57g-wgqp/GHSA-vv27-g57g-wgqp.json
index 74ce50e938f..0e4fd541981 100644
--- a/advisories/unreviewed/2025/01/GHSA-vv27-g57g-wgqp/GHSA-vv27-g57g-wgqp.json
+++ b/advisories/unreviewed/2025/01/GHSA-vv27-g57g-wgqp/GHSA-vv27-g57g-wgqp.json
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
+ "CWE-200",
"CWE-922"
],
"severity": "MODERATE",
diff --git a/advisories/unreviewed/2025/02/GHSA-53rp-33p8-4hm8/GHSA-53rp-33p8-4hm8.json b/advisories/unreviewed/2025/02/GHSA-53rp-33p8-4hm8/GHSA-53rp-33p8-4hm8.json
index cdb92bbb737..54c9f7b1396 100644
--- a/advisories/unreviewed/2025/02/GHSA-53rp-33p8-4hm8/GHSA-53rp-33p8-4hm8.json
+++ b/advisories/unreviewed/2025/02/GHSA-53rp-33p8-4hm8/GHSA-53rp-33p8-4hm8.json
@@ -26,7 +26,8 @@
],
"database_specific": {
"cwe_ids": [
- "CWE-1321"
+ "CWE-1321",
+ "CWE-400"
],
"severity": "HIGH",
"github_reviewed": false,
diff --git a/advisories/unreviewed/2025/02/GHSA-6j39-893g-q8cf/GHSA-6j39-893g-q8cf.json b/advisories/unreviewed/2025/02/GHSA-6j39-893g-q8cf/GHSA-6j39-893g-q8cf.json
index fa1c28a7461..7d41cf60cbd 100644
--- a/advisories/unreviewed/2025/02/GHSA-6j39-893g-q8cf/GHSA-6j39-893g-q8cf.json
+++ b/advisories/unreviewed/2025/02/GHSA-6j39-893g-q8cf/GHSA-6j39-893g-q8cf.json
@@ -25,7 +25,9 @@
}
],
"database_specific": {
- "cwe_ids": [],
+ "cwe_ids": [
+ "CWE-295"
+ ],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
diff --git a/advisories/unreviewed/2025/02/GHSA-73qc-g3pc-j338/GHSA-73qc-g3pc-j338.json b/advisories/unreviewed/2025/02/GHSA-73qc-g3pc-j338/GHSA-73qc-g3pc-j338.json
index 9fd5b7e94af..ad7d891ae07 100644
--- a/advisories/unreviewed/2025/02/GHSA-73qc-g3pc-j338/GHSA-73qc-g3pc-j338.json
+++ b/advisories/unreviewed/2025/02/GHSA-73qc-g3pc-j338/GHSA-73qc-g3pc-j338.json
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
+ "CWE-400",
"CWE-476"
],
"severity": "HIGH",
diff --git a/advisories/unreviewed/2025/02/GHSA-9j5q-479x-43g2/GHSA-9j5q-479x-43g2.json b/advisories/unreviewed/2025/02/GHSA-9j5q-479x-43g2/GHSA-9j5q-479x-43g2.json
index bd743609b82..2e3712ccbc7 100644
--- a/advisories/unreviewed/2025/02/GHSA-9j5q-479x-43g2/GHSA-9j5q-479x-43g2.json
+++ b/advisories/unreviewed/2025/02/GHSA-9j5q-479x-43g2/GHSA-9j5q-479x-43g2.json
@@ -26,7 +26,8 @@
],
"database_specific": {
"cwe_ids": [
- "CWE-1321"
+ "CWE-1321",
+ "CWE-400"
],
"severity": "HIGH",
"github_reviewed": false,
diff --git a/advisories/unreviewed/2025/03/GHSA-345v-2g26-546w/GHSA-345v-2g26-546w.json b/advisories/unreviewed/2025/03/GHSA-345v-2g26-546w/GHSA-345v-2g26-546w.json
new file mode 100644
index 00000000000..39cc72e4216
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-345v-2g26-546w/GHSA-345v-2g26-546w.json
@@ -0,0 +1,33 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-345v-2g26-546w",
+ "modified": "2025-03-13T21:31:19Z",
+ "published": "2025-03-13T21:31:19Z",
+ "aliases": [
+ "CVE-2024-55060"
+ ],
+ "details": "A cross-site scripting (XSS) vulnerability in the component index.php of Rafed CMS Website v1.44 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.",
+ "severity": [],
+ "affected": [],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55060"
+ },
+ {
+ "type": "WEB",
+ "url": "https://github.com/bigzooooz/CVE-2024-55060"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.rafed-system.org"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [],
+ "severity": null,
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2025-03-13T21:15:42Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-4r9v-vhgw-qfm4/GHSA-4r9v-vhgw-qfm4.json b/advisories/unreviewed/2025/03/GHSA-4r9v-vhgw-qfm4/GHSA-4r9v-vhgw-qfm4.json
index 2a528d02c7d..705392e2e23 100644
--- a/advisories/unreviewed/2025/03/GHSA-4r9v-vhgw-qfm4/GHSA-4r9v-vhgw-qfm4.json
+++ b/advisories/unreviewed/2025/03/GHSA-4r9v-vhgw-qfm4/GHSA-4r9v-vhgw-qfm4.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4r9v-vhgw-qfm4",
- "modified": "2025-03-12T12:30:59Z",
+ "modified": "2025-03-13T21:31:18Z",
"published": "2025-03-12T12:30:59Z",
"aliases": [
"CVE-2025-21861"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()\n\nIf migration succeeded, we called\nfolio_migrate_flags()->mem_cgroup_migrate() to migrate the memcg from the\nold to the new folio. This will set memcg_data of the old folio to 0.\n\nSimilarly, if migration failed, memcg_data of the dst folio is left unset.\n\nIf we call folio_putback_lru() on such folios (memcg_data == 0), we will\nadd the folio to be freed to the LRU, making memcg code unhappy. Running\nthe hmm selftests:\n\n # ./hmm-tests\n ...\n # RUN hmm.hmm_device_private.migrate ...\n [ 102.078007][T14893] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7ff27d200 pfn:0x13cc00\n [ 102.079974][T14893] anon flags: 0x17ff00000020018(uptodate|dirty|swapbacked|node=0|zone=2|lastcpupid=0x7ff)\n [ 102.082037][T14893] raw: 017ff00000020018 dead000000000100 dead000000000122 ffff8881353896c9\n [ 102.083687][T14893] raw: 00000007ff27d200 0000000000000000 00000001ffffffff 0000000000000000\n [ 102.085331][T14893] page dumped because: VM_WARN_ON_ONCE_FOLIO(!memcg && !mem_cgroup_disabled())\n [ 102.087230][T14893] ------------[ cut here ]------------\n [ 102.088279][T14893] WARNING: CPU: 0 PID: 14893 at ./include/linux/memcontrol.h:726 folio_lruvec_lock_irqsave+0x10e/0x170\n [ 102.090478][T14893] Modules linked in:\n [ 102.091244][T14893] CPU: 0 UID: 0 PID: 14893 Comm: hmm-tests Not tainted 6.13.0-09623-g6c216bc522fd #151\n [ 102.093089][T14893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014\n [ 102.094848][T14893] RIP: 0010:folio_lruvec_lock_irqsave+0x10e/0x170\n [ 102.096104][T14893] Code: ...\n [ 102.099908][T14893] RSP: 0018:ffffc900236c37b0 EFLAGS: 00010293\n [ 102.101152][T14893] RAX: 0000000000000000 RBX: ffffea0004f30000 RCX: ffffffff8183f426\n [ 102.102684][T14893] RDX: ffff8881063cb880 RSI: ffffffff81b8117f RDI: ffff8881063cb880\n [ 102.104227][T14893] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000\n [ 102.105757][T14893] R10: 0000000000000001 R11: 0000000000000002 R12: ffffc900236c37d8\n [ 102.107296][T14893] R13: ffff888277a2bcb0 R14: 000000000000001f R15: 0000000000000000\n [ 102.108830][T14893] FS: 00007ff27dbdd740(0000) GS:ffff888277a00000(0000) knlGS:0000000000000000\n [ 102.110643][T14893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n [ 102.111924][T14893] CR2: 00007ff27d400000 CR3: 000000010866e000 CR4: 0000000000750ef0\n [ 102.113478][T14893] PKRU: 55555554\n [ 102.114172][T14893] Call Trace:\n [ 102.114805][T14893] \n [ 102.115397][T14893] ? folio_lruvec_lock_irqsave+0x10e/0x170\n [ 102.116547][T14893] ? __warn.cold+0x110/0x210\n [ 102.117461][T14893] ? folio_lruvec_lock_irqsave+0x10e/0x170\n [ 102.118667][T14893] ? report_bug+0x1b9/0x320\n [ 102.119571][T14893] ? handle_bug+0x54/0x90\n [ 102.120494][T14893] ? exc_invalid_op+0x17/0x50\n [ 102.121433][T14893] ? asm_exc_invalid_op+0x1a/0x20\n [ 102.122435][T14893] ? __wake_up_klogd.part.0+0x76/0xd0\n [ 102.123506][T14893] ? dump_page+0x4f/0x60\n [ 102.124352][T14893] ? folio_lruvec_lock_irqsave+0x10e/0x170\n [ 102.125500][T14893] folio_batch_move_lru+0xd4/0x200\n [ 102.126577][T14893] ? __pfx_lru_add+0x10/0x10\n [ 102.127505][T14893] __folio_batch_add_and_move+0x391/0x720\n [ 102.128633][T14893] ? __pfx_lru_add+0x10/0x10\n [ 102.129550][T14893] folio_putback_lru+0x16/0x80\n [ 102.130564][T14893] migrate_device_finalize+0x9b/0x530\n [ 102.131640][T14893] dmirror_migrate_to_device.constprop.0+0x7c5/0xad0\n [ 102.133047][T14893] dmirror_fops_unlocked_ioctl+0x89b/0xc80\n\nLikely, nothing else goes wrong: putting the last folio reference will\nremove the folio from the LRU again. So besides memcg complaining, adding\nthe folio to be freed to the LRU is just an unnecessary step.\n\nThe new flow resembles what we have in migrate_folio_move(): add the dst\nto the lru, rem\n---truncated---",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -28,8 +33,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-416"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-12T10:15:19Z"
diff --git a/advisories/unreviewed/2025/03/GHSA-55m7-vg72-9vx3/GHSA-55m7-vg72-9vx3.json b/advisories/unreviewed/2025/03/GHSA-55m7-vg72-9vx3/GHSA-55m7-vg72-9vx3.json
index 0e69352ab38..25427a9e65b 100644
--- a/advisories/unreviewed/2025/03/GHSA-55m7-vg72-9vx3/GHSA-55m7-vg72-9vx3.json
+++ b/advisories/unreviewed/2025/03/GHSA-55m7-vg72-9vx3/GHSA-55m7-vg72-9vx3.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-55m7-vg72-9vx3",
- "modified": "2025-03-13T15:32:57Z",
+ "modified": "2025-03-13T21:31:19Z",
"published": "2025-03-12T12:30:59Z",
"aliases": [
"CVE-2025-21865"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ngtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().\n\nBrad Spengler reported the list_del() corruption splat in\ngtp_net_exit_batch_rtnl(). [0]\n\nCommit eb28fd76c0a0 (\"gtp: Destroy device along with udp socket's netns\ndismantle.\") added the for_each_netdev() loop in gtp_net_exit_batch_rtnl()\nto destroy devices in each netns as done in geneve and ip tunnels.\n\nHowever, this could trigger ->dellink() twice for the same device during\n->exit_batch_rtnl().\n\nSay we have two netns A & B and gtp device B that resides in netns B but\nwhose UDP socket is in netns A.\n\n 1. cleanup_net() processes netns A and then B.\n\n 2. gtp_net_exit_batch_rtnl() finds the device B while iterating\n netns A's gn->gtp_dev_list and calls ->dellink().\n\n [ device B is not yet unlinked from netns B\n as unregister_netdevice_many() has not been called. ]\n\n 3. gtp_net_exit_batch_rtnl() finds the device B while iterating\n netns B's for_each_netdev() and calls ->dellink().\n\ngtp_dellink() cleans up the device's hash table, unlinks the dev from\ngn->gtp_dev_list, and calls unregister_netdevice_queue().\n\nBasically, calling gtp_dellink() multiple times is fine unless\nCONFIG_DEBUG_LIST is enabled.\n\nLet's remove for_each_netdev() in gtp_net_exit_batch_rtnl() and\ndelegate the destruction to default_device_exit_batch() as done\nin bareudp.\n\n[0]:\nlist_del corruption, ffff8880aaa62c00->next (autoslab_size_M_dev_P_net_core_dev_11127_8_1328_8_S_4096_A_64_n_139+0xc00/0x1000 [slab object]) is LIST_POISON1 (ffffffffffffff02) (prev is 0xffffffffffffff04)\nkernel BUG at lib/list_debug.c:58!\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN\nCPU: 1 UID: 0 PID: 1804 Comm: kworker/u8:7 Tainted: G T 6.12.13-grsec-full-20250211091339 #1\nTainted: [T]=RANDSTRUCT\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\nWorkqueue: netns cleanup_net\nRIP: 0010:[] __list_del_entry_valid_or_report+0x141/0x200 lib/list_debug.c:58\nCode: c2 76 91 31 c0 e8 9f b1 f7 fc 0f 0b 4d 89 f0 48 c7 c1 02 ff ff ff 48 89 ea 48 89 ee 48 c7 c7 e0 c2 76 91 31 c0 e8 7f b1 f7 fc <0f> 0b 4d 89 e8 48 c7 c1 04 ff ff ff 48 89 ea 48 89 ee 48 c7 c7 60\nRSP: 0018:fffffe8040b4fbd0 EFLAGS: 00010283\nRAX: 00000000000000cc RBX: dffffc0000000000 RCX: ffffffff818c4054\nRDX: ffffffff84947381 RSI: ffffffff818d1512 RDI: 0000000000000000\nRBP: ffff8880aaa62c00 R08: 0000000000000001 R09: fffffbd008169f32\nR10: fffffe8040b4f997 R11: 0000000000000001 R12: a1988d84f24943e4\nR13: ffffffffffffff02 R14: ffffffffffffff04 R15: ffff8880aaa62c08\nRBX: kasan shadow of 0x0\nRCX: __wake_up_klogd.part.0+0x74/0xe0 kernel/printk/printk.c:4554\nRDX: __list_del_entry_valid_or_report+0x141/0x200 lib/list_debug.c:58\nRSI: vprintk+0x72/0x100 kernel/printk/printk_safe.c:71\nRBP: autoslab_size_M_dev_P_net_core_dev_11127_8_1328_8_S_4096_A_64_n_139+0xc00/0x1000 [slab object]\nRSP: process kstack fffffe8040b4fbd0+0x7bd0/0x8000 [kworker/u8:7+netns 1804 ]\nR09: kasan shadow of process kstack fffffe8040b4f990+0x7990/0x8000 [kworker/u8:7+netns 1804 ]\nR10: process kstack fffffe8040b4f997+0x7997/0x8000 [kworker/u8:7+netns 1804 ]\nR15: autoslab_size_M_dev_P_net_core_dev_11127_8_1328_8_S_4096_A_64_n_139+0xc08/0x1000 [slab object]\nFS: 0000000000000000(0000) GS:ffff888116000000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000748f5372c000 CR3: 0000000015408000 CR4: 00000000003406f0 shadow CR4: 00000000003406f0\nStack:\n 0000000000000000 ffffffff8a0c35e7 ffffffff8a0c3603 ffff8880aaa62c00\n ffff8880aaa62c00 0000000000000004 ffff88811145311c 0000000000000005\n 0000000000000001 ffff8880aaa62000 fffffe8040b4fd40 ffffffff8a0c360d\nCall Trace:\n \n [] __list_del_entry_valid include/linux/list.h:131 [inline] fffffe8040b4fc28\n [] __list_del_entry include/linux/list.h:248 [inline] fffffe8040b4fc28\n [] list_del include/linux/list.h:262 [inl\n---truncated---",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -48,8 +53,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-787"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-12T10:15:19Z"
diff --git a/advisories/unreviewed/2025/03/GHSA-5jpx-997x-jhrp/GHSA-5jpx-997x-jhrp.json b/advisories/unreviewed/2025/03/GHSA-5jpx-997x-jhrp/GHSA-5jpx-997x-jhrp.json
index 0e8dc4563ab..7ba9dcef67f 100644
--- a/advisories/unreviewed/2025/03/GHSA-5jpx-997x-jhrp/GHSA-5jpx-997x-jhrp.json
+++ b/advisories/unreviewed/2025/03/GHSA-5jpx-997x-jhrp/GHSA-5jpx-997x-jhrp.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5jpx-997x-jhrp",
- "modified": "2025-03-12T12:30:59Z",
+ "modified": "2025-03-13T21:31:18Z",
"published": "2025-03-12T12:30:59Z",
"aliases": [
"CVE-2025-21855"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nibmvnic: Don't reference skb after sending to VIOS\n\nPreviously, after successfully flushing the xmit buffer to VIOS,\nthe tx_bytes stat was incremented by the length of the skb.\n\nIt is invalid to access the skb memory after sending the buffer to\nthe VIOS because, at any point after sending, the VIOS can trigger\nan interrupt to free this memory. A race between reading skb->len\nand freeing the skb is possible (especially during LPM) and will\nresult in use-after-free:\n ==================================================================\n BUG: KASAN: slab-use-after-free in ibmvnic_xmit+0x75c/0x1808 [ibmvnic]\n Read of size 4 at addr c00000024eb48a70 by task hxecom/14495\n <...>\n Call Trace:\n [c000000118f66cf0] [c0000000018cba6c] dump_stack_lvl+0x84/0xe8 (unreliable)\n [c000000118f66d20] [c0000000006f0080] print_report+0x1a8/0x7f0\n [c000000118f66df0] [c0000000006f08f0] kasan_report+0x128/0x1f8\n [c000000118f66f00] [c0000000006f2868] __asan_load4+0xac/0xe0\n [c000000118f66f20] [c0080000046eac84] ibmvnic_xmit+0x75c/0x1808 [ibmvnic]\n [c000000118f67340] [c0000000014be168] dev_hard_start_xmit+0x150/0x358\n <...>\n Freed by task 0:\n kasan_save_stack+0x34/0x68\n kasan_save_track+0x2c/0x50\n kasan_save_free_info+0x64/0x108\n __kasan_mempool_poison_object+0x148/0x2d4\n napi_skb_cache_put+0x5c/0x194\n net_tx_action+0x154/0x5b8\n handle_softirqs+0x20c/0x60c\n do_softirq_own_stack+0x6c/0x88\n <...>\n The buggy address belongs to the object at c00000024eb48a00 which\n belongs to the cache skbuff_head_cache of size 224\n==================================================================",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -36,8 +41,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-416"
+ ],
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-12T10:15:18Z"
diff --git a/advisories/unreviewed/2025/03/GHSA-5mrq-42cr-23mg/GHSA-5mrq-42cr-23mg.json b/advisories/unreviewed/2025/03/GHSA-5mrq-42cr-23mg/GHSA-5mrq-42cr-23mg.json
index 4d24d922ed8..0fe49ec3d00 100644
--- a/advisories/unreviewed/2025/03/GHSA-5mrq-42cr-23mg/GHSA-5mrq-42cr-23mg.json
+++ b/advisories/unreviewed/2025/03/GHSA-5mrq-42cr-23mg/GHSA-5mrq-42cr-23mg.json
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5mrq-42cr-23mg",
- "modified": "2025-03-12T18:32:52Z",
+ "modified": "2025-03-13T21:31:19Z",
"published": "2025-03-12T18:32:52Z",
"aliases": [
"CVE-2025-1960"
diff --git a/advisories/unreviewed/2025/03/GHSA-6rpq-7wmg-7qjv/GHSA-6rpq-7wmg-7qjv.json b/advisories/unreviewed/2025/03/GHSA-6rpq-7wmg-7qjv/GHSA-6rpq-7wmg-7qjv.json
index 154fcfb2e7c..6e4392b1329 100644
--- a/advisories/unreviewed/2025/03/GHSA-6rpq-7wmg-7qjv/GHSA-6rpq-7wmg-7qjv.json
+++ b/advisories/unreviewed/2025/03/GHSA-6rpq-7wmg-7qjv/GHSA-6rpq-7wmg-7qjv.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6rpq-7wmg-7qjv",
- "modified": "2025-03-12T12:30:59Z",
+ "modified": "2025-03-13T21:31:18Z",
"published": "2025-03-12T12:30:59Z",
"aliases": [
"CVE-2025-21857"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: cls_api: fix error handling causing NULL dereference\n\ntcf_exts_miss_cookie_base_alloc() calls xa_alloc_cyclic() which can\nreturn 1 if the allocation succeeded after wrapping. This was treated as\nan error, with value 1 returned to caller tcf_exts_init_ex() which sets\nexts->actions to NULL and returns 1 to caller fl_change().\n\nfl_change() treats err == 1 as success, calling tcf_exts_validate_ex()\nwhich calls tcf_action_init() with exts->actions as argument, where it\nis dereferenced.\n\nExample trace:\n\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nCPU: 114 PID: 16151 Comm: handler114 Kdump: loaded Not tainted 5.14.0-503.16.1.el9_5.x86_64 #1\nRIP: 0010:tcf_action_init+0x1f8/0x2c0\nCall Trace:\n tcf_action_init+0x1f8/0x2c0\n tcf_exts_validate_ex+0x175/0x190\n fl_change+0x537/0x1120 [cls_flower]",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -32,8 +37,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-476"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-12T10:15:18Z"
diff --git a/advisories/unreviewed/2025/03/GHSA-fm6j-mfpf-prfq/GHSA-fm6j-mfpf-prfq.json b/advisories/unreviewed/2025/03/GHSA-fm6j-mfpf-prfq/GHSA-fm6j-mfpf-prfq.json
index 110d948a74c..4a8eb251bdf 100644
--- a/advisories/unreviewed/2025/03/GHSA-fm6j-mfpf-prfq/GHSA-fm6j-mfpf-prfq.json
+++ b/advisories/unreviewed/2025/03/GHSA-fm6j-mfpf-prfq/GHSA-fm6j-mfpf-prfq.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fm6j-mfpf-prfq",
- "modified": "2025-03-13T15:32:57Z",
+ "modified": "2025-03-13T21:31:18Z",
"published": "2025-03-12T12:30:59Z",
"aliases": [
"CVE-2025-21862"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrop_monitor: fix incorrect initialization order\n\nSyzkaller reports the following bug:\n\nBUG: spinlock bad magic on CPU#1, syz-executor.0/7995\n lock: 0xffff88805303f3e0, .magic: 00000000, .owner: /-1, .owner_cpu: 0\nCPU: 1 PID: 7995 Comm: syz-executor.0 Tainted: G E 5.10.209+ #1\nHardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020\nCall Trace:\n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack+0x119/0x179 lib/dump_stack.c:118\n debug_spin_lock_before kernel/locking/spinlock_debug.c:83 [inline]\n do_raw_spin_lock+0x1f6/0x270 kernel/locking/spinlock_debug.c:112\n __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:117 [inline]\n _raw_spin_lock_irqsave+0x50/0x70 kernel/locking/spinlock.c:159\n reset_per_cpu_data+0xe6/0x240 [drop_monitor]\n net_dm_cmd_trace+0x43d/0x17a0 [drop_monitor]\n genl_family_rcv_msg_doit+0x22f/0x330 net/netlink/genetlink.c:739\n genl_family_rcv_msg net/netlink/genetlink.c:783 [inline]\n genl_rcv_msg+0x341/0x5a0 net/netlink/genetlink.c:800\n netlink_rcv_skb+0x14d/0x440 net/netlink/af_netlink.c:2497\n genl_rcv+0x29/0x40 net/netlink/genetlink.c:811\n netlink_unicast_kernel net/netlink/af_netlink.c:1322 [inline]\n netlink_unicast+0x54b/0x800 net/netlink/af_netlink.c:1348\n netlink_sendmsg+0x914/0xe00 net/netlink/af_netlink.c:1916\n sock_sendmsg_nosec net/socket.c:651 [inline]\n __sock_sendmsg+0x157/0x190 net/socket.c:663\n ____sys_sendmsg+0x712/0x870 net/socket.c:2378\n ___sys_sendmsg+0xf8/0x170 net/socket.c:2432\n __sys_sendmsg+0xea/0x1b0 net/socket.c:2461\n do_syscall_64+0x30/0x40 arch/x86/entry/common.c:46\n entry_SYSCALL_64_after_hwframe+0x62/0xc7\nRIP: 0033:0x7f3f9815aee9\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f3f972bf0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\nRAX: ffffffffffffffda RBX: 00007f3f9826d050 RCX: 00007f3f9815aee9\nRDX: 0000000020000000 RSI: 0000000020001300 RDI: 0000000000000007\nRBP: 00007f3f981b63bd R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 000000000000006e R14: 00007f3f9826d050 R15: 00007ffe01ee6768\n\nIf drop_monitor is built as a kernel module, syzkaller may have time\nto send a netlink NET_DM_CMD_START message during the module loading.\nThis will call the net_dm_monitor_start() function that uses\na spinlock that has not yet been initialized.\n\nTo fix this, let's place resource initialization above the registration\nof a generic netlink family.\n\nFound by InfoTeCS on behalf of Linux Verification Center\n(linuxtesting.org) with Syzkaller.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -48,8 +53,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-908"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-12T10:15:19Z"
diff --git a/advisories/unreviewed/2025/03/GHSA-gp26-q8h6-xxgj/GHSA-gp26-q8h6-xxgj.json b/advisories/unreviewed/2025/03/GHSA-gp26-q8h6-xxgj/GHSA-gp26-q8h6-xxgj.json
index ac750bc531e..2e5abcc8e41 100644
--- a/advisories/unreviewed/2025/03/GHSA-gp26-q8h6-xxgj/GHSA-gp26-q8h6-xxgj.json
+++ b/advisories/unreviewed/2025/03/GHSA-gp26-q8h6-xxgj/GHSA-gp26-q8h6-xxgj.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gp26-q8h6-xxgj",
- "modified": "2025-03-12T12:30:59Z",
+ "modified": "2025-03-13T21:31:18Z",
"published": "2025-03-12T12:30:59Z",
"aliases": [
"CVE-2025-21860"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/zswap: fix inconsistency when zswap_store_page() fails\n\nCommit b7c0ccdfbafd (\"mm: zswap: support large folios in zswap_store()\")\nskips charging any zswap entries when it failed to zswap the entire folio.\n\nHowever, when some base pages are zswapped but it failed to zswap the\nentire folio, the zswap operation is rolled back. When freeing zswap\nentries for those pages, zswap_entry_free() uncharges the zswap entries\nthat were not previously charged, causing zswap charging to become\ninconsistent.\n\nThis inconsistency triggers two warnings with following steps:\n # On a machine with 64GiB of RAM and 36GiB of zswap\n $ stress-ng --bigheap 2 # wait until the OOM-killer kills stress-ng\n $ sudo reboot\n\n The two warnings are:\n in mm/memcontrol.c:163, function obj_cgroup_release():\n WARN_ON_ONCE(nr_bytes & (PAGE_SIZE - 1));\n\n in mm/page_counter.c:60, function page_counter_cancel():\n if (WARN_ONCE(new < 0, \"page_counter underflow: %ld nr_pages=%lu\\n\",\n\t new, nr_pages))\n\nzswap_stored_pages also becomes inconsistent in the same way.\n\nAs suggested by Kanchana, increment zswap_stored_pages and charge zswap\nentries within zswap_store_page() when it succeeds. This way,\nzswap_entry_free() will decrement the counter and uncharge the entries\nwhen it failed to zswap the entire folio.\n\nWhile this could potentially be optimized by batching objcg charging and\nincrementing the counter, let's focus on fixing the bug this time and\nleave the optimization for later after some evaluation.\n\nAfter resolving the inconsistency, the warnings disappear.\n\n[42.hyeyoo@gmail.com: refactor zswap_store_page()]\n Link: https://lkml.kernel.org/r/20250131082037.2426-1-42.hyeyoo@gmail.com",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
+ }
+ ],
"affected": [],
"references": [
{
@@ -25,7 +30,7 @@
],
"database_specific": {
"cwe_ids": [],
- "severity": null,
+ "severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-12T10:15:18Z"
diff --git a/advisories/unreviewed/2025/03/GHSA-hp67-rvgq-rwrp/GHSA-hp67-rvgq-rwrp.json b/advisories/unreviewed/2025/03/GHSA-hp67-rvgq-rwrp/GHSA-hp67-rvgq-rwrp.json
new file mode 100644
index 00000000000..377975aeeab
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-hp67-rvgq-rwrp/GHSA-hp67-rvgq-rwrp.json
@@ -0,0 +1,40 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-hp67-rvgq-rwrp",
+ "modified": "2025-03-13T21:31:18Z",
+ "published": "2025-03-13T21:31:18Z",
+ "aliases": [
+ "CVE-2022-49141"
+ ],
+ "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: felix: fix possible NULL pointer dereference\n\nAs the possible failure of the allocation, kzalloc() may return NULL\npointer.\nTherefore, it should be better to check the 'sgi' in order to prevent\nthe dereference of NULL pointer.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
+ "affected": [],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-49141"
+ },
+ {
+ "type": "WEB",
+ "url": "https://git.kernel.org/stable/c/866b7a278cdb51eb158cd8513bc7438fc857804a"
+ },
+ {
+ "type": "WEB",
+ "url": "https://git.kernel.org/stable/c/b7ff8b5e75d4e91ec8c62d621aac8dfb84c57aa9"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-476"
+ ],
+ "severity": "MODERATE",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2025-02-26T07:00:51Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-m4v2-r3w8-c73j/GHSA-m4v2-r3w8-c73j.json b/advisories/unreviewed/2025/03/GHSA-m4v2-r3w8-c73j/GHSA-m4v2-r3w8-c73j.json
new file mode 100644
index 00000000000..f77d2464737
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-m4v2-r3w8-c73j/GHSA-m4v2-r3w8-c73j.json
@@ -0,0 +1,44 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-m4v2-r3w8-c73j",
+ "modified": "2025-03-13T21:31:19Z",
+ "published": "2025-03-13T21:31:19Z",
+ "aliases": [
+ "CVE-2025-2230"
+ ],
+ "details": "A flaw exists in the Windows login flow where an AuthContext token can \nbe exploited for replay attacks and authentication bypass.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
+ },
+ {
+ "type": "CVSS_V4",
+ "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+ }
+ ],
+ "affected": [],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2230"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-072-01"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.philips.com/a-w/security/security-advisories.html"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-287"
+ ],
+ "severity": "HIGH",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2025-03-13T19:15:52Z"
+ }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/03/GHSA-m7rv-xwhq-qx85/GHSA-m7rv-xwhq-qx85.json b/advisories/unreviewed/2025/03/GHSA-m7rv-xwhq-qx85/GHSA-m7rv-xwhq-qx85.json
index 7e8c5fab889..28d2f36d2da 100644
--- a/advisories/unreviewed/2025/03/GHSA-m7rv-xwhq-qx85/GHSA-m7rv-xwhq-qx85.json
+++ b/advisories/unreviewed/2025/03/GHSA-m7rv-xwhq-qx85/GHSA-m7rv-xwhq-qx85.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m7rv-xwhq-qx85",
- "modified": "2025-03-12T12:30:59Z",
+ "modified": "2025-03-13T21:31:18Z",
"published": "2025-03-12T12:30:59Z",
"aliases": [
"CVE-2025-21856"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/ism: add release function for struct device\n\nAccording to device_release() in /drivers/base/core.c,\na device without a release function is a broken device\nand must be fixed.\n\nThe current code directly frees the device after calling device_add()\nwithout waiting for other kernel parts to release their references.\nThus, a reference could still be held to a struct device,\ne.g., by sysfs, leading to potential use-after-free\nissues if a proper release function is not set.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -32,8 +37,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-416"
+ ],
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-12T10:15:18Z"
diff --git a/advisories/unreviewed/2025/03/GHSA-p4mq-5hwr-hc6r/GHSA-p4mq-5hwr-hc6r.json b/advisories/unreviewed/2025/03/GHSA-p4mq-5hwr-hc6r/GHSA-p4mq-5hwr-hc6r.json
index 78bbefd55d1..36eebc7d716 100644
--- a/advisories/unreviewed/2025/03/GHSA-p4mq-5hwr-hc6r/GHSA-p4mq-5hwr-hc6r.json
+++ b/advisories/unreviewed/2025/03/GHSA-p4mq-5hwr-hc6r/GHSA-p4mq-5hwr-hc6r.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p4mq-5hwr-hc6r",
- "modified": "2025-03-13T15:32:57Z",
+ "modified": "2025-03-13T21:31:19Z",
"published": "2025-03-12T12:30:59Z",
"aliases": [
"CVE-2025-21866"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC\n\nErhard reported the following KASAN hit while booting his PowerMac G4\nwith a KASAN-enabled kernel 6.13-rc6:\n\n BUG: KASAN: vmalloc-out-of-bounds in copy_to_kernel_nofault+0xd8/0x1c8\n Write of size 8 at addr f1000000 by task chronyd/1293\n\n CPU: 0 UID: 123 PID: 1293 Comm: chronyd Tainted: G W 6.13.0-rc6-PMacG4 #2\n Tainted: [W]=WARN\n Hardware name: PowerMac3,6 7455 0x80010303 PowerMac\n Call Trace:\n [c2437590] [c1631a84] dump_stack_lvl+0x70/0x8c (unreliable)\n [c24375b0] [c0504998] print_report+0xdc/0x504\n [c2437610] [c050475c] kasan_report+0xf8/0x108\n [c2437690] [c0505a3c] kasan_check_range+0x24/0x18c\n [c24376a0] [c03fb5e4] copy_to_kernel_nofault+0xd8/0x1c8\n [c24376c0] [c004c014] patch_instructions+0x15c/0x16c\n [c2437710] [c00731a8] bpf_arch_text_copy+0x60/0x7c\n [c2437730] [c0281168] bpf_jit_binary_pack_finalize+0x50/0xac\n [c2437750] [c0073cf4] bpf_int_jit_compile+0xb30/0xdec\n [c2437880] [c0280394] bpf_prog_select_runtime+0x15c/0x478\n [c24378d0] [c1263428] bpf_prepare_filter+0xbf8/0xc14\n [c2437990] [c12677ec] bpf_prog_create_from_user+0x258/0x2b4\n [c24379d0] [c027111c] do_seccomp+0x3dc/0x1890\n [c2437ac0] [c001d8e0] system_call_exception+0x2dc/0x420\n [c2437f30] [c00281ac] ret_from_syscall+0x0/0x2c\n --- interrupt: c00 at 0x5a1274\n NIP: 005a1274 LR: 006a3b3c CTR: 005296c8\n REGS: c2437f40 TRAP: 0c00 Tainted: G W (6.13.0-rc6-PMacG4)\n MSR: 0200f932 CR: 24004422 XER: 00000000\n\n GPR00: 00000166 af8f3fa0 a7ee3540 00000001 00000000 013b6500 005a5858 0200f932\n GPR08: 00000000 00001fe9 013d5fc8 005296c8 2822244c 00b2fcd8 00000000 af8f4b57\n GPR16: 00000000 00000001 00000000 00000000 00000000 00000001 00000000 00000002\n GPR24: 00afdbb0 00000000 00000000 00000000 006e0004 013ce060 006e7c1c 00000001\n NIP [005a1274] 0x5a1274\n LR [006a3b3c] 0x6a3b3c\n --- interrupt: c00\n\n The buggy address belongs to the virtual mapping at\n [f1000000, f1002000) created by:\n text_area_cpu_up+0x20/0x190\n\n The buggy address belongs to the physical page:\n page: refcount:1 mapcount:0 mapping:00000000 index:0x0 pfn:0x76e30\n flags: 0x80000000(zone=2)\n raw: 80000000 00000000 00000122 00000000 00000000 00000000 ffffffff 00000001\n raw: 00000000\n page dumped because: kasan: bad access detected\n\n Memory state around the buggy address:\n f0ffff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n f0ffff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n >f1000000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n ^\n f1000080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n f1000100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n ==================================================================\n\nf8 corresponds to KASAN_VMALLOC_INVALID which means the area is not\ninitialised hence not supposed to be used yet.\n\nPowerpc text patching infrastructure allocates a virtual memory area\nusing get_vm_area() and flags it as VM_ALLOC. But that flag is meant\nto be used for vmalloc() and vmalloc() allocated memory is not\nsupposed to be used before a call to __vmalloc_node_range() which is\nnever called for that area.\n\nThat went undetected until commit e4137f08816b (\"mm, kasan, kmsan:\ninstrument copy_from/to_kernel_nofault\")\n\nThe area allocated by text_area_cpu_up() is not vmalloc memory, it is\nmapped directly on demand when needed by map_kernel_page(). There is\nno VM flag corresponding to such usage, so just pass no flag. That way\nthe area will be unpoisonned and usable immediately.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -48,8 +53,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-770"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-12T10:15:19Z"
diff --git a/advisories/unreviewed/2025/03/GHSA-qj2f-x8m5-rrr3/GHSA-qj2f-x8m5-rrr3.json b/advisories/unreviewed/2025/03/GHSA-qj2f-x8m5-rrr3/GHSA-qj2f-x8m5-rrr3.json
index 3709abfea59..e640312ce24 100644
--- a/advisories/unreviewed/2025/03/GHSA-qj2f-x8m5-rrr3/GHSA-qj2f-x8m5-rrr3.json
+++ b/advisories/unreviewed/2025/03/GHSA-qj2f-x8m5-rrr3/GHSA-qj2f-x8m5-rrr3.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qj2f-x8m5-rrr3",
- "modified": "2025-03-12T12:30:59Z",
+ "modified": "2025-03-13T21:31:18Z",
"published": "2025-03-12T12:30:59Z",
"aliases": [
"CVE-2025-21863"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: prevent opcode speculation\n\nsqe->opcode is used for different tables, make sure we santitise it\nagainst speculations.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -33,7 +38,7 @@
],
"database_specific": {
"cwe_ids": [],
- "severity": null,
+ "severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-12T10:15:19Z"
diff --git a/advisories/unreviewed/2025/03/GHSA-qpwf-m697-v547/GHSA-qpwf-m697-v547.json b/advisories/unreviewed/2025/03/GHSA-qpwf-m697-v547/GHSA-qpwf-m697-v547.json
index f39854e6903..ec50cb90c9e 100644
--- a/advisories/unreviewed/2025/03/GHSA-qpwf-m697-v547/GHSA-qpwf-m697-v547.json
+++ b/advisories/unreviewed/2025/03/GHSA-qpwf-m697-v547/GHSA-qpwf-m697-v547.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qpwf-m697-v547",
- "modified": "2025-03-12T12:30:59Z",
+ "modified": "2025-03-13T21:31:18Z",
"published": "2025-03-12T12:30:59Z",
"aliases": [
"CVE-2025-21864"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: drop secpath at the same time as we currently drop dst\n\nXiumei reported hitting the WARN in xfrm6_tunnel_net_exit while\nrunning tests that boil down to:\n - create a pair of netns\n - run a basic TCP test over ipcomp6\n - delete the pair of netns\n\nThe xfrm_state found on spi_byaddr was not deleted at the time we\ndelete the netns, because we still have a reference on it. This\nlingering reference comes from a secpath (which holds a ref on the\nxfrm_state), which is still attached to an skb. This skb is not\nleaked, it ends up on sk_receive_queue and then gets defer-free'd by\nskb_attempt_defer_free.\n\nThe problem happens when we defer freeing an skb (push it on one CPU's\ndefer_list), and don't flush that list before the netns is deleted. In\nthat case, we still have a reference on the xfrm_state that we don't\nexpect at this point.\n\nWe already drop the skb's dst in the TCP receive path when it's no\nlonger needed, so let's also drop the secpath. At this point,\ntcp_filter has already called into the LSM hooks that may require the\nsecpath, so it should not be needed anymore. However, in some of those\nplaces, the MPTCP extension has just been attached to the skb, so we\ncannot simply drop all extensions.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -36,8 +41,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-476"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-12T10:15:19Z"
diff --git a/advisories/unreviewed/2025/03/GHSA-r5hj-8p6x-9rq8/GHSA-r5hj-8p6x-9rq8.json b/advisories/unreviewed/2025/03/GHSA-r5hj-8p6x-9rq8/GHSA-r5hj-8p6x-9rq8.json
index 2c09244a340..2dc81bfe4a7 100644
--- a/advisories/unreviewed/2025/03/GHSA-r5hj-8p6x-9rq8/GHSA-r5hj-8p6x-9rq8.json
+++ b/advisories/unreviewed/2025/03/GHSA-r5hj-8p6x-9rq8/GHSA-r5hj-8p6x-9rq8.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r5hj-8p6x-9rq8",
- "modified": "2025-03-13T15:32:57Z",
+ "modified": "2025-03-13T21:31:18Z",
"published": "2025-03-12T12:30:59Z",
"aliases": [
"CVE-2025-21859"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: gadget: f_midi: f_midi_complete to call queue_work\n\nWhen using USB MIDI, a lock is attempted to be acquired twice through a\nre-entrant call to f_midi_transmit, causing a deadlock.\n\nFix it by using queue_work() to schedule the inner f_midi_transmit() via\na high priority work queue from the completion handler.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -48,8 +53,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-667"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-12T10:15:18Z"
diff --git a/advisories/unreviewed/2025/03/GHSA-vwm2-mqfj-r5v5/GHSA-vwm2-mqfj-r5v5.json b/advisories/unreviewed/2025/03/GHSA-vwm2-mqfj-r5v5/GHSA-vwm2-mqfj-r5v5.json
index c0d6e00cac7..8150fc97dd8 100644
--- a/advisories/unreviewed/2025/03/GHSA-vwm2-mqfj-r5v5/GHSA-vwm2-mqfj-r5v5.json
+++ b/advisories/unreviewed/2025/03/GHSA-vwm2-mqfj-r5v5/GHSA-vwm2-mqfj-r5v5.json
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vwm2-mqfj-r5v5",
- "modified": "2025-03-12T12:30:58Z",
+ "modified": "2025-03-13T21:31:18Z",
"published": "2025-03-12T12:30:58Z",
"aliases": [
"CVE-2025-21854"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsockmap, vsock: For connectible sockets allow only connected\n\nsockmap expects all vsocks to have a transport assigned, which is expressed\nin vsock_proto::psock_update_sk_prot(). However, there is an edge case\nwhere an unconnected (connectible) socket may lose its previously assigned\ntransport. This is handled with a NULL check in the vsock/BPF recv path.\n\nAnother design detail is that listening vsocks are not supposed to have any\ntransport assigned at all. Which implies they are not supported by the\nsockmap. But this is complicated by the fact that a socket, before\nswitching to TCP_LISTEN, may have had some transport assigned during a\nfailed connect() attempt. Hence, we may end up with a listening vsock in a\nsockmap, which blows up quickly:\n\nKASAN: null-ptr-deref in range [0x0000000000000120-0x0000000000000127]\nCPU: 7 UID: 0 PID: 56 Comm: kworker/7:0 Not tainted 6.14.0-rc1+\nWorkqueue: vsock-loopback vsock_loopback_work\nRIP: 0010:vsock_read_skb+0x4b/0x90\nCall Trace:\n sk_psock_verdict_data_ready+0xa4/0x2e0\n virtio_transport_recv_pkt+0x1ca8/0x2acc\n vsock_loopback_work+0x27d/0x3f0\n process_one_work+0x846/0x1420\n worker_thread+0x5b3/0xf80\n kthread+0x35a/0x700\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n\nFor connectible sockets, instead of relying solely on the state of\nvsk->transport, tell sockmap to only allow those representing established\nconnections. This aligns with the behaviour for AF_INET and AF_UNIX.",
- "severity": [],
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+ }
+ ],
"affected": [],
"references": [
{
@@ -32,8 +37,10 @@
}
],
"database_specific": {
- "cwe_ids": [],
- "severity": null,
+ "cwe_ids": [
+ "CWE-476"
+ ],
+ "severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-12T10:15:18Z"
diff --git a/advisories/unreviewed/2025/03/GHSA-x7gm-m6fc-fx8q/GHSA-x7gm-m6fc-fx8q.json b/advisories/unreviewed/2025/03/GHSA-x7gm-m6fc-fx8q/GHSA-x7gm-m6fc-fx8q.json
new file mode 100644
index 00000000000..cd960f1b2d8
--- /dev/null
+++ b/advisories/unreviewed/2025/03/GHSA-x7gm-m6fc-fx8q/GHSA-x7gm-m6fc-fx8q.json
@@ -0,0 +1,44 @@
+{
+ "schema_version": "1.4.0",
+ "id": "GHSA-x7gm-m6fc-fx8q",
+ "modified": "2025-03-13T21:31:19Z",
+ "published": "2025-03-13T21:31:19Z",
+ "aliases": [
+ "CVE-2025-2229"
+ ],
+ "details": "A token is created using the username, current date/time, and a fixed \nAES-128 encryption key, which is the same across all installations.",
+ "severity": [
+ {
+ "type": "CVSS_V3",
+ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
+ },
+ {
+ "type": "CVSS_V4",
+ "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+ }
+ ],
+ "affected": [],
+ "references": [
+ {
+ "type": "ADVISORY",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2229"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-072-01"
+ },
+ {
+ "type": "WEB",
+ "url": "https://www.philips.com/a-w/security/security-advisories.html"
+ }
+ ],
+ "database_specific": {
+ "cwe_ids": [
+ "CWE-1391"
+ ],
+ "severity": "HIGH",
+ "github_reviewed": false,
+ "github_reviewed_at": null,
+ "nvd_published_at": "2025-03-13T19:15:52Z"
+ }
+}
\ No newline at end of file