admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 06:40:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-11-18T03:00:12.959030+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-11-18 03:04:01 +00:00
1 parent 63d2b52c96
commit 2fbd896ab8
33 files changed
+2473 -266
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2022/CVE-2022-500xx/CVE-2022-50080.json
+125 -10
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50080",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:36.980",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:39:52.973",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,35 +15,150 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tee: agregar verificaci\u00f3n de desbordamiento en register_shm_helper(). Con longitudes especiales suministradas por el espacio de usuario, register_shm_helper() tiene un desbordamiento de entero al calcular la cantidad de p\u00e1ginas cubiertas por una regi\u00f3n de memoria del espacio de usuario suministrada. Esto hace que internal_get_user_pages_fast(), una funci\u00f3n auxiliar de pin_user_pages_fast(), realice una desreferencia de puntero NULL: No se puede manejar la desreferencia de puntero NULL del n\u00facleo en la direcci\u00f3n virtual 0000000000000010 M\u00f3dulos vinculados: CPU: 1 PID: 173 Comm: optee_example_a No contaminado 5.19.0 #11 Nombre del hardware: QEMU QEMU Virtual Machine, BIOS 0.0.0 02/06/2015 pc : internal_get_user_pages_fast+0x474/0xa80 Rastreo de llamadas: internal_get_user_pages_fast+0x474/0xa80 pin_user_pages_fast+0x24/0x4c register_shm_helper+0x194/0x330 tee_shm_register_user_buf+0x78/0x120 tee_ioctl+0xd0/0x11a0 __arm64_sys_ioctl+0xa8/0xec invoke_syscall+0x48/0x114 Solucione esto agregando una llamada expl\u00edcita a access_ok() en tee_shm_register_user_buf() para detectar de manera temprana una direcci\u00f3n de espacio de usuario no v\u00e1lida."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.16",
"versionEndExcluding": "4.19.256",
"matchCriteriaId": "41E19BC1-64E0-4467-927D-8ABB2C0624CB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.211",
"matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.62",
"matchCriteriaId": "BA1D807C-6E4B-4302-A127-1A11ECCB740E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.19",
"matchCriteriaId": "3C960AE6-B596-45FD-A1B9-5B999738CA4B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.3",
"matchCriteriaId": "9FCF4A30-8824-4CC9-BC36-AB236B41DE93"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "E8BD11A3-8643-49B6-BADE-5029A0117325"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/2f8e79a1a6128214cb9b205a9869341af5dfb16b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/573ae4f13f630d6660008f1974c0a8a29c30e18a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/578c349570d2a912401963783b36e0ec7a25c053",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/58c008d4d398f792ca67f35650610864725518fd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/965333345fe952cc7eebc8e3a565ffc709441af2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b37e0f17653c00b586cdbcdf0dbca475358ecffd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c12f0e6126ad223806a365084e86370511654bf1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-500xx/CVE-2022-50082.json
+97 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50082",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:37.223",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:38:31.403",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,116 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ext4: se corrige la advertencia en ext4_iomap_begin como ejecuci\u00f3n entre bmap y escritura Tenemos el problema siguiente: ------------[ cortar aqu\u00ed ]------------ ADVERTENCIA: CPU: 3 PID: 9310 en fs/ext4/inode.c:3441 ext4_iomap_begin+0x182/0x5d0 RIP: 0010:ext4_iomap_begin+0x182/0x5d0 RSP: 0018:ffff88812460fa08 EFLAGS: 00010293 RAX: ffff88811f168000 RBX: 0000000000000000 RCX: ffffffff97793c12 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: ffff88812c669160 R08: ffff88811f168000 R09: ffffed10258cd20f R10: ffff88812c669077 R11: ffffed10258cd20e R12: 000000000000001 R13: 00000000000000a4 R14: 000000000000000c R15: ffff88812c6691ee FS: 00007fd0d6ff3740(0000) GS:ffff8883af180000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd0d6dda290 CR3: 0000000104a62000 CR4: 00000000000006e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Rastreo de llamadas: iomap_apply+0x119/0x570 iomap_bmap+0x124/0x150 ext4_bmap+0x14f/0x250 bmap+0x55/0x80 do_vfs_ioctl+0x952/0xbd0 __x64_sys_ioctl+0xc6/0x170 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Above issue may happen as follows: bmap write bmap ext4_bmap iomap_bmap ext4_iomap_begin ext4_file_write_iter ext4_buffered_write_iter generic_perform_write ext4_da_write_begin ext4_da_write_inline_data_begin ext4_prepare_inline_data ext4_create_inline_data ext4_set_inode_flag(inode, EXT4_INODE_INLINE_DATA); if (WARN_ON_ONCE(ext4_has_inline_data(inode))) ->trigger bug_on Para resolver el problema anterior, mantenga el bloqueo del inodo en ext4_bamp."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "FE689A89-6D93-47A0-90ED-93726F905DAD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/30dfb75e1f8645404a536c74d468d498adcd4e74",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/51ae846cff568c8c29921b1b28eb2dfbcd4ac12d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a9fe6d1e3d343d7309f501b1f48020ce7127221f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e1682c7171a6c0ff576fe8116b8cba5b8f538b94",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fa6482f374fda29a71ad44d76d35b4842d43cda4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-500xx/CVE-2022-50084.json
+141 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50084",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:37.460",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:33:04.573",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,43 +15,172 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dm raid: correcci\u00f3n de la advertencia del depurador de direcciones en raid_status Existe esta advertencia cuando se usa un kernel con el depurador de direcciones y se ejecuta este conjunto de pruebas: https://gitlab.com/cki-project/kernel-tests/-/tree/main/storage/swraid/scsi_raid ====================================================================== ERROR: KASAN: slab-out-of-bounds en raid_status+0x1747/0x2820 [dm_raid] Lectura de tama\u00f1o 4 en la direcci\u00f3n ffff888079d2c7e8 por la tarea lvcreate/13319 CPU: 0 PID: 13319 Comm: lvcreate No contaminado 5.18.0-0.rc3. #1 Nombre del hardware: Red Hat KVM, BIOS 0.5.1 01/01/2011 Seguimiento de llamadas: dump_stack_lvl+0x6a/0x9c print_address_description.constprop.0+0x1f/0x1e0 print_report.cold+0x55/0x244 kasan_report+0xc9/0x100 raid_status+0x1747/0x2820 [dm_raid] dm_ima_measure_on_table_load+0x4b8/0xca0 [dm_mod] table_load+0x35c/0x630 [dm_mod] ctl_ioctl+0x411/0x630 [dm_mod] dm_ctl_ioctl+0xa/0x10 [dm_mod] __x64_sys_ioctl+0x12a/0x1a0 do_syscall_64+0x5b/0x80La advertencia se debe a la lectura de `conf->max_nr_stripes` en `raid_status`. El c\u00f3digo en `raid_status` lee `mddev->private`, lo convierte a `struct r5conf` y lee la entrada `max_nr_stripes`. Sin embargo, si el tipo de raid es diferente al 4/5/6, `mddev->private` no apunta a `struct r5conf`; puede apuntar a `struct r0conf`, `struct r1conf`, `struct r10conf` o `struct mpconf`. Si convertimos un puntero a una de estas estructuras en struct r5conf, leeremos memoria no v\u00e1lida y KASAN emitir\u00e1 una advertencia. Corrija este error leyendo struct r5conf solo si el tipo de RAID es 4, 5 o 6."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.9.326",
"matchCriteriaId": "5B4EA906-CFF9-4D4A-AFD7-43AC02C77E48"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.10",
"versionEndExcluding": "4.14.291",
"matchCriteriaId": "3BBC7E43-6161-4F21-977C-5BB7792C6C94"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.256",
"matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.211",
"matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/1ae0ebfb576b72c2ef400917a5484ebe7892d80b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/1fbeea217d8f297fe0e0956a1516d14ba97d0396",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/49dba30638e091120256a9e89125340795f034dc",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4c233811a49578634d10a5e70a9dfa569d451e94",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/90b006da40dd42285b24dd3c940d2c32aca9a70b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b4c6c07c92b6cba2bf3cb2dfa722debeaf8a8abe",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b856ce5f4b55f752144baf17e9d5c415072652c5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cb583ca6125ac64c98e9d65128e95ebb5be7d322",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d8971b595d7adac3421c21f59918241f1574061e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-500xx/CVE-2022-50085.json
+131 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50085",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:37.577",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:32:24.627",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,159 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dm raid: correcci\u00f3n de la advertencia del depuraci\u00f3n de direcciones en raid_resume. Se produce una advertencia de KASAN en raid_resume al ejecutar la prueba lvm lvconvert-raid.sh. La advertencia se debe a que mddev->raid_disks es mayor que rs->raid_disks, por lo que el bucle toca una entrada m\u00e1s all\u00e1 de la longitud asignada."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.8",
"versionEndExcluding": "4.14.291",
"matchCriteriaId": "381CD809-3659-46C5-BC70-3AD16FD6A80E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.256",
"matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.211",
"matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/2a9faa704d83ff0b04387e385efd8ae21cd95af6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3bfdc95466f5be4d8d95db5a5b470d61641a7c24",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/50235d9a1f1f742619ed9963cb9f240e5b821d46",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/71f601c779b3cc1baf497796f5b922c3fe5d2a1e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/74af83732a39ab7d3bc9b49219a535853e25679f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7dad24db59d2d2803576f2e3645728866a056dab",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c2d47bef93fb74aa97d90f9a40ca657b8f376083",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c2f075e729636a44e98d9722e3852c2fa6fa49b6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-500xx/CVE-2022-50086.json
+86 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50086",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:37.690",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:26:30.307",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,102 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bloque: no permitir que el mismo tipo rq_qos se agregue m\u00e1s de una vez En nuestra prueba de iocost, encontramos algunas corrupciones de lista add/del de la lista inner_walk en ioc_timer_fn. La raz\u00f3n puede describirse de la siguiente manera: cpu 0 cpu 1 ioc_qos_write ioc_qos_write ioc = q_to_ioc(queue); if (!ioc) { ioc = kzalloc(); ioc = q_to_ioc(queue); if (!ioc) { ioc = kzalloc(); ... rq_qos_add(q, rqos); } ... rq_qos_add(q, rqos); ... } Cuando dos CPU escriben el archivo io.cost.qos simult\u00e1neamente, es posible que se agregue rq_qos a un disco dos veces. En ese caso, habr\u00e1 dos ioc habilitados y ejecut\u00e1ndose en un disco. Poseen diferentes iocgs en su lista activa. En la funci\u00f3n ioc_timer_fn, dado que los iocgs de dos iocs tienen el mismo iocg ra\u00edz, la lista walk_list de cada iocg ra\u00edz puede sobrescribirse entre s\u00ed, lo que provoca errores al agregar o eliminar listas al crear o destruir la lista inner_walk. Hasta ahora, el framework blk-rq-qos funciona con una instancia de un tipo rq_qos por cola por defecto. Este parche lo aclara y corrige el fallo mencionado."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "9C842B96-7AD0-4A37-884E-3AE85DD759DC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/08ef66e800a85afc6b54cb95841f6502627eee2e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/0b7f5d7a4d2a72ad9de04ab8ccba2a31904aa638",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/0c9bb1acd1d103a3070b2126870eb52761d606ce",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/14a6e2eb7df5c7897c15b109cba29ab0c4a791b6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-500xx/CVE-2022-50087.json
+120 -10
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50087",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:37.803",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:21:38.713",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,35 +15,145 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: firmware: arm_scpi: Asegurarse de que scpi_info no se asigne si la sonda falla. Cuando la sonda scpi falla, en cualquier momento, debemos asegurarnos de que scpi_info no est\u00e9 configurado y permanezca nulo hasta que la sonda tenga \u00e9xito. Si no se soluciona, podr\u00eda producirse un error de Use-After-Free, ya que el valor se exporta mediante get_scpi_ops() y podr\u00eda hacer referencia a una memoria asignada mediante devm_kzalloc(), pero liberada cuando la sonda falla."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.4",
"versionEndExcluding": "4.19.256",
"matchCriteriaId": "3AC63550-1EF5-434E-B47C-A070C0D52954"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.211",
"matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/08272646cd7c310642c39b7f54348fddd7987643",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/0c29e149b6bb498778ed8a1c9597b51acfba7856",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/18048cba444a7c41dbf42c180d6b46606fc24c51",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4f2d7b46d6b53c07f44a4f8f8f4438888f0e9e87",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5aa558232edc30468d1f35108826dd5b3ffe978f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/689640efc0a2c4e07e6f88affe6d42cd40cc3f85",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/87c4896d5dd7fd9927c814cf3c6289f41de3b562",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-500xx/CVE-2022-50088.json
+76 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50088",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:37.917",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:19:06.667",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,19 +15,89 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm/damon/reclaim: se corrige una posible fuga de memoria en damon_reclaim_init(). damon_reclaim_init() asigna un fragmento de memoria para ctx con damon_new_ctx(). Cuando damon_select_ops() falla, ctx no se libera, lo que provoca una fuga de memoria. Deber\u00edamos liberar ctx con damon_destroy_ctx() cuando damon_select_ops() no solucione la fuga de memoria."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "28A3BD94-A9B1-461A-9325-1B7EF7D364B6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/188043c7f4f2bd662f2a55957d684fffa543e600",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/700aa4e11a3c4d2a44d06758db431a013d9e1b61",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9d3e9e1e0856f4c905bbb870f16f42ae72477071",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-500xx/CVE-2022-50089.json
+87 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50089",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:38.023",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:18:06.127",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,103 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: garantizar que las p\u00e1ginas se desbloqueen en caso de fallo de cow_file_range() Hay un informe de hung_task en btrfs zonificados como el que se muestra a continuaci\u00f3n. https://github.com/naota/linux/issues/59 [726.328648] INFORMACI\u00d3N: la tarea rocksdb:high0:11085 se bloque\u00f3 durante m\u00e1s de 241 segundos. [726.329839] No contaminado 5.16.0-rc1+ #1 [726.330484] \"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" deshabilita este mensaje. [726.331603] tarea:rocksdb:high0 estado:D pila: 0 pid:11085 ppid: 11082 indicadores:0x00000000 [726.331608] Seguimiento de llamadas: [726.331611] [726.331614] __schedule+0x2e5/0x9d0 [726.331622] schedule+0x58/0xd0 [726.331626] io_schedule+0x3f/0x70 [726.331629] __folio_lock+0x125/0x200 [726.331634] ? find_get_entries+0x1bc/0x240 [726.331638] ? filemap_invalidate_unlock_two+0x40/0x40 [726.331642] truncate_inode_pages_range+0x5b2/0x770 [726.331649] truncate_inode_pages_final+0x44/0x50 [726.331653] btrfs_evict_inode+0x67/0x480 [726.331658] evict+0xd0/0x180 [726.331661] iput+0x13f/0x200 [726.331664] do_unlinkat+0x1c0/0x2b0 [726.331668] __x64_sys_unlink+0x23/0x30 [726.331670] do_syscall_64+0x3b/0xc0 [726.331674] entry_SYSCALL_64_after_hwframe+0x44/0xae [726.331677] RIP: 0033:0x7fb9490a171b [726.331681] RSP: 002b:00007fb943ffac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [726.331684] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb9490a171b [726.331686] RDX: 00007fb943ffb040 RSI: 000055a6bbe6ec20 RDI: 00007fb94400d300 [726.331687] RBP: 00007fb943ffad00 R08: 0000000000000000 R09: 0000000000000000 [726.331688] R10: 0000000000000031 R11: 0000000000000246 R12: 00007fb943ffb000 [726.331690] R13: 00007fb943ffb040 R14: 0000000000000000 R15: 00007fb943ffd260 [726.331693] Mientras depur\u00e1bamos el problema, encontramos que ejecutar fstests generic/551 en un dispositivo null_blk sin zona de 5 GB en el modo de zona emulada tambi\u00e9n ten\u00eda un problema de bloqueo similar. Adem\u00e1s, podemos reproducir el mismo s\u00edntoma con un error inyectado en la configuraci\u00f3n de cow_file_range(). El bloqueo ocurre cuando cow_file_range() falla en medio de la asignaci\u00f3n. cow_file_range() llamado desde do_allocation_zoned() puede dividir la regi\u00f3n dada ([inicio, fin]) para la asignaci\u00f3n dependiendo de los usos actuales del grupo de bloques. Cuando btrfs puede asignar bytes para una parte de las regiones divididas pero falla para la otra regi\u00f3n (por ejemplo, debido a -ENOSPC), devolvemos el error dejando bloqueadas las p\u00e1ginas en las regiones exitosas. T\u00e9cnicamente, esto solo ocurre cuando @unlock == 0. De lo contrario, desbloqueamos las p\u00e1ginas en una regi\u00f3n asignada tras crear una extensi\u00f3n ordenada. Dado que quienes llaman a cow_file_range(unlock=0) no escribir\u00e1n las p\u00e1ginas, podemos desbloquearlas al salir de cow_file_range() en caso de error. Por lo tanto, podemos asegurar que todas las p\u00e1ginas, excepto @locked_page, se desbloqueen en caso de error. En resumen, cow_file_range ahora se comporta as\u00ed: - page_started == 1 (valor de retorno): todas las p\u00e1ginas est\u00e1n desbloqueadas. Se inicia la E/S. - unlock == 1: todas las p\u00e1ginas, excepto @locked_page, se desbloquean en cualquier caso. - unlock == 0: en caso de \u00e9xito, todas las p\u00e1ginas est\u00e1n bloqueadas para su escritura. - en caso de error, todas las p\u00e1ginas, excepto @locked_page, se desbloquean."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.12",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "23E86361-3C85-4727-87EC-1E6ACE028490"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/9535ec371d741fa037e37eddc0a5b25ba82d0027",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9ce7466f372d83054c7494f6b3e4b9abaf3f0355",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b367f125c80fa838eae49e3b138dc67dfc9f46ef",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e160aa87c87a9c4e0c8d1430235f715a3a91e2cd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-500xx/CVE-2022-50090.json
+87 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50090",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:38.153",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:17:16.440",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,103 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: reemplazar BTRFS_MAX_EXTENT_SIZE con fs_info->max_extent_size En el sistema de archivos zonificado, la escritura de datos est\u00e1 limitada por max_zone_append_size, y una extensi\u00f3n ordenada grande se divide seg\u00fan el tama\u00f1o de un bio. OTOH, el n\u00famero de extensiones que se escribir\u00e1n se calcula utilizando BTRFS_MAX_EXTENT_SIZE, y ese n\u00famero estimado se utiliza para reservar los bytes de metadatos para actualizar y/o crear los elementos de metadatos. La reserva de metadatos se realiza en, por ejemplo, btrfs_buffered_write() y luego se libera de acuerdo con los cambios de estimaci\u00f3n. Por lo tanto, si el n\u00famero de extensiones aumenta masivamente, los metadatos reservados pueden agotarse. El aumento del n\u00famero de extensiones ocurre f\u00e1cilmente en el sistema de archivos zonificado si BTRFS_MAX_EXTENT_SIZE > max_zone_append_size. Y causa la siguiente advertencia en un entorno de RAM peque\u00f1o con la deshabilitaci\u00f3n de la sobreasignaci\u00f3n de metadatos (en el siguiente parche). [75721.498492] ------------[ cortar aqu\u00ed ]------------ [75721.505624] BTRFS: el bloque rsv 1 devolvi\u00f3 -28 [75721.512230] ADVERTENCIA: CPU: 24 PID: 2327559 en fs/btrfs/block-rsv.c:537 btrfs_use_block_rsv+0x560/0x760 [btrfs] [75721.581854] CPU: 24 PID: 2327559 Comm: kworker/u64:10 Kdump: cargado Tainted: GW 5.18.0-rc2-BTRFS-ZNS+ #109 [75721.597200] Nombre del hardware: Supermicro Super Server/H12SSL-NT, BIOS 2.0 22/02/2021 [75721.607310] Cola de trabajo: btrfs-endio-write btrfs_work_helper [btrfs] [75721.616209] RIP: 0010:btrfs_use_block_rsv+0x560/0x760 [btrfs] [75721.646649] RSP: 0018:ffffc9000fbdf3e0 EFLAGS: 00010286 [75721.654126] RAX: 00000000000000000 RBX: 0000000000004000 RCX: 0000000000000000 [75721.663524] RDX: 0000000000000004 RSI: 0000000000000008 RDI: fffff52001f7be6e [75721.672921] RBP: ffffc9000fbdf420 R08: 0000000000000001 R09: ffff889f8d1fc6c7 [75721.682493] R10: ffffed13f1a3f8d8 R11: 000000000000001 R12: ffff88980a3c0e28 [75721.692284] R13: ffff889b66590000 R14: ffff88980a3c0e40 R15: ffff88980a3c0e8a [75721.701878] FS: 0000000000000000(0000) GS:ffff889f8d000000(0000) knlGS:0000000000000000 [75721.712601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [75721.720726] CR2: 000055d12e05c018 CR3: 0000800193594000 CR4: 0000000000350ee0 [75721.730499] Rastreo de llamadas: [75721.735166] [75721.739886] btrfs_alloc_tree_block+0x1e1/0x1100 [btrfs] [75721.747545] ? btrfs_alloc_logged_file_extent+0x550/0x550 [btrfs] [75721.756145] ? btrfs_get_32+0xea/0x2d0 [btrfs] [75721.762852] ? btrfs_get_32+0xea/0x2d0 [btrfs] [75721.769520] ? push_leaf_left+0x420/0x620 [btrfs] [75721.776431] ? memcpy+0x4e/0x60 [75721.781931] split_leaf+0x433/0x12d0 [btrfs] [75721.788392] ? btrfs_get_token_32+0x580/0x580 [btrfs] [75721.795636] ? push_for_double_split.isra.0+0x420/0x420 [btrfs] [75721.803759] ? leaf_space_used+0x15d/0x1a0 [btrfs] [75721.811156] btrfs_search_slot+0x1bc3/0x2790 [btrfs] [75721.818300] ? lock_downgrade+0x7c0/0x7c0 [75721.824411] ? free_extent_buffer.part.0+0x107/0x200 [btrfs] [75721.832456] ? split_leaf+0x12d0/0x12d0 [btrfs] [75721.839149] ? free_extent_buffer.part.0+0x14f/0x200 [btrfs] [75721.846945] ? free_extent_buffer+0x13/0x20 [btrfs] [75721.853960] ? btrfs_release_path+0x4b/0x190 [btrfs] [75721.861429] btrfs_csum_file_blocks+0x85c/0x1500 [btrfs] [75721.869313] ? rcu_read_lock_sched_held+0x16/0x80 [75721.876085] ? lock_release+0x552/0xf80 [75721.881957] ? btrfs_del_csums+0x8c0/0x8c0 [btrfs] [75721.888886] ? __kasan_check_write+0x14/0x20 [75721.895152] ? do_raw_read_unlock+0x44/0x80 [75721.901323] ? _raw_write_lock_irq+0x60/0x80 [75721.907983] ? btrfs_global_root+0xb9/0xe0 [btrfs] [75721.915166] ? btrfs_csum_root+0x12b/0x180 [btrfs] [75721.921918] ? btrfs_get_global_root+0x820/0x820 [btrfs] [75721.929166] ? _raw_write_unlock+0x23/0x40 [75721.935116] ? unpin_extent_cache+0x1e3/0x390 [btrfs] [75721.942041] btrfs_finish_ordered_io.isra.0+0xa0c/0x1dc0 [btrfs] [75721.949906] ? try_to_wake_up+0x30/0x14a0 [75721.955700] ? btrfs_unlink_subvol+0xda---truncado---"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.12",
"versionEndExcluding": "5.15.64",
"matchCriteriaId": "92EA4525-905D-42E6-9B6F-2A7B3C6DD68A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/096e8eb9639b342bc35f9b741cf05e26d0106e92",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/1aa262c1d056551dd1246115af8b7e351184deae",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/6cb4b96df97082a54634ba02196516919cda228c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f7b12a62f008a3041f42f2426983e59a6a0a3c59",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-500xx/CVE-2022-50091.json
+87 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50091",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:38.277",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:11:04.667",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,103 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: locking/csd_lock: Cambiar csdlock_debug de early_param a __setup El par\u00e1metro csdlock_debug kernel-boot es analizado por la funci\u00f3n early_param() csdlock_debug(). Si se establece, csdlock_debug() invoca static_branch_enable() para habilitar la funci\u00f3n csd_lock_wait, que desencadena un p\u00e1nico en arm64 para kernels compilados con CONFIG_SPARSEMEM=y y CONFIG_SPARSEMEM_VMEMMAP=n. Con CONFIG_SPARSEMEM_VMEMMAP=n, se llama a __nr_to_section en static_key_enable() y devuelve NULL, lo que resulta en una desreferencia NULL porque mem_section se inicializa solo m\u00e1s tarde en sparse_init(). Esto tambi\u00e9n representa un problema para PowerPC, ya que las funciones early_param() se invocan antes que jump_label_init(), lo que tambi\u00e9n provoca fallos en static_key_enable(). Estos fallos generan la advertencia \"Clave est\u00e1tica 'xxx' usada antes de la llamada a jump_label_init()\". Por lo tanto, early_param es demasiado pronto para que csd_lock_wait ejecute static_branch_enable(), por lo que se cambia a __setup para solucionarlos."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.13",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "508EFB53-3AD2-405D-9368-107BD8BEA339"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/05de9e2e33b1625c71aee69e353fe906dd2be88a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9c9b26b0df270d4f9246e483a44686fca951a29c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b480d1e9a8c11ecc1c99dc01814b28e3103bd0a0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d2cbdbe22b5f190055d2d0ae92e7454479343a30",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-500xx/CVE-2022-50092.json
+109 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50092",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:38.383",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:50:03.477",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,131 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dm thin: correcci\u00f3n del fallo de uso tras liberaci\u00f3n en dm_sm_register_threshold_callback Se informa de un fallo por inyecci\u00f3n en el dispositivo de metadatos del grupo: ERROR: KASAN: uso tras liberaci\u00f3n en dm_pool_register_metadata_threshold+0x40/0x80 Lectura de tama\u00f1o 8 en la direcci\u00f3n ffff8881b9d50068 por la tarea dmsetup/950 CPU: 7 PID: 950 Comm: dmsetup Contaminado: GW 5.19.0-rc6 #1 Nombre del hardware: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-1.fc33 01/04/2014 Rastreo de llamadas: dump_stack_lvl+0x34/0x44 print_address_description.constprop.0.cold+0xeb/0x3f4 kasan_report.cold+0xe6/0x147 dm_pool_register_metadata_threshold+0x40/0x80 pool_ctr+0xa0a/0x1150 dm_table_add_target+0x2c8/0x640 table_load+0x1fd/0x430 ctl_ioctl+0x2c4/0x5a0 dm_ctl_ioctl+0xa/0x10 __x64_sys_ioctl+0xb3/0xd0 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 Esto se puede reproducir f\u00e1cilmente usando: echo offline > /sys/block/sda/device/state dd if=/dev/zero of=/dev/mapper/thin bs=4k count=10 dmsetup load pool --table \"0 20971520 thin-pool /dev/sda /dev/sdb 128 0 0\" Si falla una confirmaci\u00f3n de metadatos, la transacci\u00f3n se cancelar\u00e1 y los mapas de espacio de metadatos se destruir\u00e1n. Si se recarga la tabla DM para este thin-pool fallido, se ejecutar\u00e1 un \"use after-free\" en dm_sm_register_threshold_callback (llamado desde dm_pool_register_metadata_threshold). Solucione esto en dm_pool_register_metadata_threshold() devolviendo el error -EINVAL si el thin-pool est\u00e1 en modo de fallo. Tambi\u00e9n se produce un error en pool_ctr() con un nuevo mensaje de error: \"Error al registrar el umbral de metadatos\"."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.10",
"versionEndExcluding": "5.4.211",
"matchCriteriaId": "A7F6121D-9871-4870-B5CF-93C2A1147348"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/05cef0999b3208b5a6ede1bfac855139e4de55ef",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/1a199fa9217d28511ff88529238fd9980ea64cf3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3534e5a5ed2997ca1b00f44a0378a075bd05e8a3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5e2cf705155a1514be3c96ea664a9cd356998ee7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e4dbe24f4bfd8377e7ba79fdcdb7c4d6eb1c6790",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f83131a3071a0b61a4d7dca70f95adb3ffad920e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-500xx/CVE-2022-50093.json
+109 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50093",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:38.497",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:44:34.470",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,131 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: iommu/vt-d: evitar acceso no v\u00e1lido a memoria mediante node_online(NUMA_NO_NODE) KASAN informa: [ 4.668325][ T0] ERROR: KASAN: acceso a memoria salvaje en dmar_parse_one_rhsa (arch/x86/include/asm/bitops.h:214 arch/x86/include/asm/bitops.h:226 include/asm-generic/bitops/instrumented-non-atomic.h:142 include/linux/nodemask.h:415 drivers/iommu/intel/dmar.c:497) [ 4.676149][ T0] Lectura de tama\u00f1o 8 en la direcci\u00f3n 1fffffff85115558 por el intercambiador de tareas/0/0 [ 4.683454][ T0] [ 4.685638][ T0] CPU: 0 PID: 0 Comm: swapper/0 No contaminado 5.19.0-rc3-00004-g0e862838f290 #1 [ 4.694331][ T0] Nombre del hardware: Supermicro SYS-5018D-FN4T/X10SDV-8C-TLN4F, BIOS 1.1 02/03/2016 [ 4.703196][ T0] Rastreo de llamadas: [ 4.706334][ T0] [ 4.709133][ T0] ? dmar_parse_one_rhsa (arch/x86/include/asm/bitops.h:214 arch/x86/include/asm/bitops.h:226 include/asm-generic/bitops/instrumented-non-atomic.h:142 include/linux/nodemask.h:415 drivers/iommu/intel/dmar.c:497) despu\u00e9s de convertir el tipo del primer argumento (@nr, n\u00famero de bit) de arch_test_bit() de `long` a `unsigned long`[0]. Bajo ciertas condiciones (por ejemplo, cuando ACPI NUMA est\u00e1 deshabilitado a trav\u00e9s de la l\u00ednea de comandos), pxm_to_node() puede devolver %NUMA_NO_NODE (-1). Es un n\u00famero 'm\u00e1gico' v\u00e1lido de nodo NUMA, pero no un n\u00famero de bit v\u00e1lido para usar en bitops. node_online() finalmente desciende a test_bit() sin verificar la entrada, asumiendo que est\u00e1 del lado del llamador (lo cual podr\u00eda ser \u00fatil para tareas cr\u00edticas para el rendimiento). All\u00ed, -1 se convierte en %ULONG_MAX, lo que genera un \u00edndice de matriz desproporcionado al calcular la posici\u00f3n del bit en memoria. Por ahora, agregue una verificaci\u00f3n expl\u00edcita de que @node no sea %NUMA_NO_NODE antes de llamar a test_bit(). La l\u00f3gica real no cambi\u00f3 en absoluto. [0] https://github.com/norov/linux/commit/0e862838f290147ea9c16db852d8d494b552d38d"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.33",
"versionEndExcluding": "5.4.211",
"matchCriteriaId": "52DD05C0-6039-4C3B-AA9B-4FC12B72BCEB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0b4c0003aeda32a600f95df53b2848da8a5aa3fa",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5659efdadf04b56707d58c1b758df16d2e0eff2c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/73ce2046e04ad488cecc66757c36cbe1bdf089d4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b0b0b77ea611e3088e9523e60860f4f41b62b235",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b12304984654d8e58a2b22ff94c4410906d6267f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c2304c50f4d94f56c2e326f25c9dc8cf2ba6f5fa",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-500xx/CVE-2022-50094.json
+142 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50094",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:38.620",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:45:05.577",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,43 +15,173 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: spmi: trace: se corrige el acceso fuera de los l\u00edmites de la pila en las funciones de seguimiento de SPMI. Las funciones trace_spmi_write_begin() y trace_spmi_read_end() llaman a memcpy() con una longitud de \"len + 1\". Esto provoca la lectura de un byte adicional m\u00e1s all\u00e1 del final del b\u00fafer especificado. Corrija este acceso fuera de los l\u00edmites de la pila utilizando una longitud de \"len\". Aqu\u00ed hay un registro de KASAN que muestra el problema: ERROR: KASAN: pila fuera de los l\u00edmites en trace_event_raw_event_spmi_read_end+0x1d0/0x234 Lectura de tama\u00f1o 2 en la direcci\u00f3n ffffffc0265b7540 por la tarea [email protected]/1314 ... Seguimiento de llamadas: dump_backtrace+0x0/0x3e8 show_stack+0x2c/0x3c dump_stack_lvl+0xdc/0x11c print_address_description+0x74/0x384 kasan_report+0x188/0x268 kasan_check_range+0x270/0x2b0 memcpy+0x90/0xe8 trace_event_raw_event_spmi_read_end+0x1d0/0x234 spmi_read_cmd+0x294/0x3ac spmi_ext_register_readl+0x84/0x9c regmap_spmi_ext_read+0x144/0x1b0 [regmap_spmi] _regmap_raw_read+0x40c/0x754 regmap_raw_read+0x3a0/0x514 regmap_bulk_read+0x418/0x494 adc5_gen3_poll_wait_hs+0xe8/0x1e0 [qcom_spmi_adc5_gen3] ... __arm64_sys_read+0x4c/0x60 invoke_syscall+0x80/0x218 el0_svc_common+0xec/0x1c8 ... la direcci\u00f3n ffffffc0265b7540 se encuentra en la pila de tareas [email protected]/1314 en el desplazamiento 32 en el marco: adc5_gen3_poll_wait_hs+0x0/0x1e0 [qcom_spmi_adc5_gen3] este marco tiene 1 objeto: [32, 33) 'status' Estado de la memoria alrededor de la direcci\u00f3n con errores: ffffffc0265b7400: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 fffffc0265b7480: 04 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 >fffffc0265b7500: 00 00 00 00 f1 f1 f1 f1 01 f3 f3 f3 00 00 00 00 ^ ffffffc0265b7580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffffffc0265b7600: f1 f1 f1 f1 01 f2 07 f2 f2 f2 01 f3 00 00 00 00 ===================================================================="
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.3",
"versionEndExcluding": "4.9.326",
"matchCriteriaId": "CA31F53B-AA1E-486E-8FFA-876484D8D2D9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.10",
"versionEndExcluding": "4.14.291",
"matchCriteriaId": "3BBC7E43-6161-4F21-977C-5BB7792C6C94"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.256",
"matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.211",
"matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/1e0ca3d809c36ad3d1f542917718fc22ec6316e7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2af28b241eea816e6f7668d1954f15894b45d7e3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/37690cb8662cec672cacda19e6e4fd2ca7b13f0b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/504090815c1ad3fd3fa34618b54d706727f8911c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/80f7c93e573ea9f524924bb529c2af8cb28b1c43",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ac730c72bddc889f5610d51d8a7abf425e08da1a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/bcc1b6b1ed3f42ed25858c1f1eb24a2f741db93f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/dc6033a7761254e5a5ba7df36b64db787a53313c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/dd02510fb43168310abfd0b9ccf49993a722fb91",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-500xx/CVE-2022-50095.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50095",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:38.740",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:45:38.987",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,117 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: posix-cpu-timers: Limpiar los temporizadores de CPU antes de liberarlos durante la ejecuci\u00f3n. el commit 55e8c8eb2c7b (\"posix-cpu-timers: Almacenar una referencia a un PID, no a una tarea\") comenz\u00f3 a buscar tareas por PID al eliminar un temporizador de CPU. Cuando un subproceso no l\u00edder llama a execve, intercambia los PID con el proceso l\u00edder. Luego, al llamar a exit_itimers, posix_cpu_timer_del no puede encontrar la tarea porque el temporizador a\u00fan apunta al PID anterior. Esto significa que los temporizadores armados no se desarmar\u00e1n; es decir, no se eliminar\u00e1n de timerqueue_list. exit_itimers liberar\u00e1 su memoria y, cuando esa lista se procese posteriormente, se generar\u00e1 un Use-After-Free. Limpie los temporizadores de la tarea desprovista de subprocesos antes de liberarlos. Esto evita un Use-After-Free reportado."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.7",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "674AABE4-BC3E-4530-9717-5DFE7AB70A3F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/541840859ace9c2ccebc32fa9e376c7bd3def490",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9e255ed238fc67058df87b0388ad6d4b2ef3a2bd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b2fc1723eb65abb83e00d5f011de670296af0b28",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e362359ace6f87c201531872486ff295df306d13",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e8cb6e8fd9890780f1bfcf5592889e1b879e779c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-501xx/CVE-2022-50138.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50138",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:43.733",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:59:18.993",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,117 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/qedr: Se corrige una posible fuga de memoria en __qedr_alloc_mr(). __qedr_alloc_mr() asigna un fragmento de memoria para \"mr->info.pbl_table\" con init_mr_info(). Cuando fallan rdma_alloc_tid() y rdma_register_tid(), se libera \"mr\" mientras que \"mr->info.pbl_table\" no, lo que provoca una fuga de memoria. Deber\u00edamos liberar \"mr->info.pbl_table\" con qedr_free_pbl() cuando se produzca el error para corregir la fuga de memoria."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.9",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "F3E419A0-9181-43F0-96F3-F0ACC786F80A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/07ba048df306dc93fc4d2ef670b9e24644a2069f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/79ce50dddaf28b5c57911ecc80a2be17a0b17f83",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7e647a8d5fc0a2c8e0f36f585a6388286a25bb15",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b3236a64ddd125a455ef5b5316c1b9051b732974",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b4c9f7db9f0148423557539af0fdf513338efe08",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-501xx/CVE-2022-50139.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50139",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:43.840",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:57:43.417",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,117 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: aspeed-vhub: se corrige el error de p\u00e9rdida de recuento de referencias en ast_vhub_init_desc() Deber\u00edamos llamar a of_node_put() para la referencia devuelta por of_get_child_by_name() que ha aumentado el recuento de referencias."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.8",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "7F0BB136-1853-4980-83C3-1A437B8ADF3B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0e0a40c803643f4edc30f0660f2f3bea4d57a99a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/220fafb4ed04187e9c17be4152da5a7f2ffbdd8c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3503305225ca24c3229414c769323fb8bf39b4bf",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4070f3c83cd28267f469a59751480ad39435f26a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e6db5780c2bf6e23be7b315809ef349b4b4f2213",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-501xx/CVE-2022-50140.json
+131 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50140",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:43.953",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:56:32.010",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,159 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: memstick/ms_block: Se corrige una fuga de memoria: la variable 'erased_blocks_bitmap' nunca se libera. Dado que se asigna al mismo tiempo que 'used_blocks_bitmap', es probable que deba liberarse tambi\u00e9n simult\u00e1neamente. Agregue el bitmap_free() correspondiente en msb_data_clear()."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.12",
"versionEndExcluding": "4.14.291",
"matchCriteriaId": "F6BB493B-6F4D-4080-95E2-CE277937CD80"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.256",
"matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.211",
"matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/16e07966638717416abf45393d6a80a5a1034429",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/37958980eb4cd71ae594ace093c11b6a91e165e8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/39be95d1ff7b44c1e969af72ba9da7332dfcc1da",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/54eb7a55be6779c4d0c25eaf5056498a28595049",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9260a154b3b5e387dbceec7c0ac441470646bc6f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/961d7d12080fe70847f944d656e36cd0dd0214ba",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9d8b911fe3c3ed788c66edba7c90e32a4a7a5f53",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/efd675246aec045507b9425c67b548cc2d782d8f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-501xx/CVE-2022-50141.json
+131 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50141",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-06-18T11:15:44.070",
"lastModified": "2025-06-18T13:47:40.833",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-18T02:55:48.250",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,159 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mmc: sdhci-of-esdhc: Se corrige la fuga de recuento de referencias en esdhc_signal_voltage_switch. of_find_matching_node() devuelve un puntero de nodo con el recuento de referencias incrementado. Debemos usar of_node_put() cuando ya no sea necesario. Se ha a\u00f1adido la funci\u00f3n of_node_put() que falta para evitar la fuga de recuento de referencias. of_node_put() comprueba el puntero nulo."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.12",
"versionEndExcluding": "4.14.291",
"matchCriteriaId": "69ECE5FE-8E66-477B-BFF3-96913B44F446"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.256",
"matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.211",
"matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.137",
"matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.61",
"matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.18",
"matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "5.19.2",
"matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/352377cf74710bc3368dddf78f17210dfe456933",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4c472a2c9ed6ea9d272268d7f484d4303c549f1a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/547db1dd98d1815574ebea7358015a17199a93bc",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8b902840f6a3584f702bcb59834691b30f3d7c5a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a63d5d01e83b984b1b9c7ae8fc9c8c93697a3820",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b074f1e8060836baeb0ee91181f4194b9a0ee16a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b305475df756256a186623f0991d05a816de881a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b5899a3e2f783a27b268e38d37f9b24c71bddf45",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2025/CVE-2025-127xx/CVE-2025-12792.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-12792",
"sourceIdentifier": "4ac701fe-44e9-4bcd-9585-dd6449257611",
"published": "2025-11-18T01:15:44.287",
"lastModified": "2025-11-18T01:15:44.287",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC (Transparency, Consent, and Control) permissions assigned to Canva."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "4ac701fe-44e9-4bcd-9585-dd6449257611",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N",
"baseScore": 3.2,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.5,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "4ac701fe-44e9-4bcd-9585-dd6449257611",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-276"
}
]
}
],
"references": [
{
"url": "https://trust.canva.com/?tcuUid=1e77a34b-f586-450b-b30d-b6e17d15b443",
"source": "4ac701fe-44e9-4bcd-9585-dd6449257611"
}
]
}
CVE-2025/CVE-2025-132xx/CVE-2025-13223.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-13223",
"sourceIdentifier": "[email protected]",
"published": "2025-11-17T23:15:45.140",
"lastModified": "2025-11-17T23:15:45.140",
"lastModified": "2025-11-18T02:15:43.070",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-132xx/CVE-2025-13224.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-13224",
"sourceIdentifier": "[email protected]",
"published": "2025-11-17T23:15:47.920",
"lastModified": "2025-11-17T23:15:47.920",
"lastModified": "2025-11-18T02:15:44.147",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-132xx/CVE-2025-13226.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-13226",
"sourceIdentifier": "[email protected]",
"published": "2025-11-18T00:15:47.593",
"lastModified": "2025-11-18T00:15:47.593",
"lastModified": "2025-11-18T02:15:44.323",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-132xx/CVE-2025-13227.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-13227",
"sourceIdentifier": "[email protected]",
"published": "2025-11-18T00:15:47.770",
"lastModified": "2025-11-18T00:15:47.770",
"lastModified": "2025-11-18T02:15:44.500",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-132xx/CVE-2025-13228.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-13228",
"sourceIdentifier": "[email protected]",
"published": "2025-11-18T00:15:47.913",
"lastModified": "2025-11-18T00:15:47.913",
"lastModified": "2025-11-18T02:15:44.680",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-132xx/CVE-2025-13229.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-13229",
"sourceIdentifier": "[email protected]",
"published": "2025-11-18T00:15:48.063",
"lastModified": "2025-11-18T00:15:48.063",
"lastModified": "2025-11-18T02:15:44.853",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-132xx/CVE-2025-13230.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-13230",
"sourceIdentifier": "[email protected]",
"published": "2025-11-18T00:15:48.230",
"lastModified": "2025-11-18T00:15:48.230",
"lastModified": "2025-11-18T02:15:45.030",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-542xx/CVE-2025-54236.json
+1 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-54236",
"sourceIdentifier": "[email protected]",
"published": "2025-09-09T14:15:46.563",
"lastModified": "2025-11-17T02:00:02.217",
"lastModified": "2025-11-18T02:00:01.897",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
CVE-2025/CVE-2025-606xx/CVE-2025-60699.json
+44 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-60699",
"sourceIdentifier": "[email protected]",
"published": "2025-11-13T20:15:52.773",
"lastModified": "2025-11-14T17:16:09.640",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-18T01:51:46.930",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,18 +47,57 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:totolink:a950rg_firmware:5.9c.4592_b20191022:*:*:*:*:*:*:*",
"matchCriteriaId": "70C0D0B7-21D0-4369-866E-0D0C3B9DE481"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:totolink:a950rg:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2F20C691-11F3-4882-89C7-500C097C0938"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A950RG/2.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Broken Link"
]
},
{
"url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A950RG/CVE-2025-60699.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.totolink.net/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-607xx/CVE-2025-60702.json
+44 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-60702",
"sourceIdentifier": "[email protected]",
"published": "2025-11-13T20:15:52.923",
"lastModified": "2025-11-14T17:16:14.210",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-18T01:49:21.647",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,18 +47,57 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:totolink:a950rg_firmware:5.9c.4592_b20191022:*:*:*:*:*:*:*",
"matchCriteriaId": "70C0D0B7-21D0-4369-866E-0D0C3B9DE481"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:totolink:a950rg:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2F20C691-11F3-4882-89C7-500C097C0938"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A950RG/1.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Broken Link"
]
},
{
"url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A950RG/CVE-2025-60702.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.totolink.net/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-65xx/CVE-2025-6599.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-6599",
"sourceIdentifier": "[email protected]",
"published": "2025-11-18T02:15:45.210",
"lastModified": "2025-11-18T02:15:45.210",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform Slowloris\u2011style denial\u2011of\u2011service (DoS) attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt access to the web management interface, while other networking services remain unaffected."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
],
"references": [
{
"url": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-uncontrolled-resource-consumption-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-11-18-2025",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-86xx/CVE-2025-8693.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-8693",
"sourceIdentifier": "[email protected]",
"published": "2025-11-18T02:15:45.410",
"lastModified": "2025-11-18T02:15:45.410",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A post-authentication command injection vulnerability in the \"priv\" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) commands on an affected device."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"references": [
{
"url": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-uncontrolled-resource-consumption-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-11-18-2025",
"source": "[email protected]"
}
]
}
README.md
+34 -29
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-11-18T00:55:11.686607+00:00
2025-11-18T03:00:12.959030+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-11-18T00:15:48.823000+00:00
2025-11-18T02:59:18.993000+00:00
```
### Last Data Feed Release
@@ -27,48 +27,53 @@ Repository synchronizes with the NVD every 2 hours.
Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest)
```plain
2025-11-17T01:00:02.140710+00:00
2025-11-18T01:00:02.134661+00:00
```
### Total Number of included CVEs
```plain
318517
318520
```
### CVEs added in the last Commit
Recently added CVEs: `21`
Recently added CVEs: `3`
- [CVE-2025-13223](CVE-2025/CVE-2025-132xx/CVE-2025-13223.json) (`2025-11-17T23:15:45.140`)
- [CVE-2025-13224](CVE-2025/CVE-2025-132xx/CVE-2025-13224.json) (`2025-11-17T23:15:47.920`)
- [CVE-2025-13226](CVE-2025/CVE-2025-132xx/CVE-2025-13226.json) (`2025-11-18T00:15:47.593`)
- [CVE-2025-13227](CVE-2025/CVE-2025-132xx/CVE-2025-13227.json) (`2025-11-18T00:15:47.770`)
- [CVE-2025-13228](CVE-2025/CVE-2025-132xx/CVE-2025-13228.json) (`2025-11-18T00:15:47.913`)
- [CVE-2025-13229](CVE-2025/CVE-2025-132xx/CVE-2025-13229.json) (`2025-11-18T00:15:48.063`)
- [CVE-2025-13230](CVE-2025/CVE-2025-132xx/CVE-2025-13230.json) (`2025-11-18T00:15:48.230`)
- [CVE-2025-13304](CVE-2025/CVE-2025-133xx/CVE-2025-13304.json) (`2025-11-17T23:15:48.357`)
- [CVE-2025-13305](CVE-2025/CVE-2025-133xx/CVE-2025-13305.json) (`2025-11-17T23:15:49.183`)
- [CVE-2025-13306](CVE-2025/CVE-2025-133xx/CVE-2025-13306.json) (`2025-11-18T00:15:48.380`)
- [CVE-2025-13323](CVE-2025/CVE-2025-133xx/CVE-2025-13323.json) (`2025-11-18T00:15:48.603`)
- [CVE-2025-13325](CVE-2025/CVE-2025-133xx/CVE-2025-13325.json) (`2025-11-18T00:15:48.823`)
- [CVE-2025-31361](CVE-2025/CVE-2025-313xx/CVE-2025-31361.json) (`2025-11-17T23:15:49.643`)
- [CVE-2025-31649](CVE-2025/CVE-2025-316xx/CVE-2025-31649.json) (`2025-11-17T23:15:51.267`)
- [CVE-2025-32089](CVE-2025/CVE-2025-320xx/CVE-2025-32089.json) (`2025-11-17T23:15:51.943`)
- [CVE-2025-36460](CVE-2025/CVE-2025-364xx/CVE-2025-36460.json) (`2025-11-17T23:15:52.497`)
- [CVE-2025-36461](CVE-2025/CVE-2025-364xx/CVE-2025-36461.json) (`2025-11-17T23:15:52.763`)
- [CVE-2025-36462](CVE-2025/CVE-2025-364xx/CVE-2025-36462.json) (`2025-11-17T23:15:53.337`)
- [CVE-2025-36463](CVE-2025/CVE-2025-364xx/CVE-2025-36463.json) (`2025-11-17T23:15:53.687`)
- [CVE-2025-36553](CVE-2025/CVE-2025-365xx/CVE-2025-36553.json) (`2025-11-17T23:15:54.353`)
- [CVE-2025-7711](CVE-2025/CVE-2025-77xx/CVE-2025-7711.json) (`2025-11-17T23:15:56.713`)
- [CVE-2025-12792](CVE-2025/CVE-2025-127xx/CVE-2025-12792.json) (`2025-11-18T01:15:44.287`)
- [CVE-2025-6599](CVE-2025/CVE-2025-65xx/CVE-2025-6599.json) (`2025-11-18T02:15:45.210`)
- [CVE-2025-8693](CVE-2025/CVE-2025-86xx/CVE-2025-8693.json) (`2025-11-18T02:15:45.410`)
### CVEs modified in the last Commit
Recently modified CVEs: `2`
Recently modified CVEs: `28`
- [CVE-2025-34034](CVE-2025/CVE-2025-340xx/CVE-2025-34034.json) (`2025-11-17T23:15:52.240`)
- [CVE-2025-65073](CVE-2025/CVE-2025-650xx/CVE-2025-65073.json) (`2025-11-17T23:15:55.277`)
- [CVE-2022-50085](CVE-2022/CVE-2022-500xx/CVE-2022-50085.json) (`2025-11-18T02:32:24.627`)
- [CVE-2022-50086](CVE-2022/CVE-2022-500xx/CVE-2022-50086.json) (`2025-11-18T02:26:30.307`)
- [CVE-2022-50087](CVE-2022/CVE-2022-500xx/CVE-2022-50087.json) (`2025-11-18T02:21:38.713`)
- [CVE-2022-50088](CVE-2022/CVE-2022-500xx/CVE-2022-50088.json) (`2025-11-18T02:19:06.667`)
- [CVE-2022-50089](CVE-2022/CVE-2022-500xx/CVE-2022-50089.json) (`2025-11-18T02:18:06.127`)
- [CVE-2022-50090](CVE-2022/CVE-2022-500xx/CVE-2022-50090.json) (`2025-11-18T02:17:16.440`)
- [CVE-2022-50091](CVE-2022/CVE-2022-500xx/CVE-2022-50091.json) (`2025-11-18T02:11:04.667`)
- [CVE-2022-50092](CVE-2022/CVE-2022-500xx/CVE-2022-50092.json) (`2025-11-18T02:50:03.477`)
- [CVE-2022-50093](CVE-2022/CVE-2022-500xx/CVE-2022-50093.json) (`2025-11-18T02:44:34.470`)
- [CVE-2022-50094](CVE-2022/CVE-2022-500xx/CVE-2022-50094.json) (`2025-11-18T02:45:05.577`)
- [CVE-2022-50095](CVE-2022/CVE-2022-500xx/CVE-2022-50095.json) (`2025-11-18T02:45:38.987`)
- [CVE-2022-50138](CVE-2022/CVE-2022-501xx/CVE-2022-50138.json) (`2025-11-18T02:59:18.993`)
- [CVE-2022-50139](CVE-2022/CVE-2022-501xx/CVE-2022-50139.json) (`2025-11-18T02:57:43.417`)
- [CVE-2022-50140](CVE-2022/CVE-2022-501xx/CVE-2022-50140.json) (`2025-11-18T02:56:32.010`)
- [CVE-2022-50141](CVE-2022/CVE-2022-501xx/CVE-2022-50141.json) (`2025-11-18T02:55:48.250`)
- [CVE-2025-13223](CVE-2025/CVE-2025-132xx/CVE-2025-13223.json) (`2025-11-18T02:15:43.070`)
- [CVE-2025-13224](CVE-2025/CVE-2025-132xx/CVE-2025-13224.json) (`2025-11-18T02:15:44.147`)
- [CVE-2025-13226](CVE-2025/CVE-2025-132xx/CVE-2025-13226.json) (`2025-11-18T02:15:44.323`)
- [CVE-2025-13227](CVE-2025/CVE-2025-132xx/CVE-2025-13227.json) (`2025-11-18T02:15:44.500`)
- [CVE-2025-13228](CVE-2025/CVE-2025-132xx/CVE-2025-13228.json) (`2025-11-18T02:15:44.680`)
- [CVE-2025-13229](CVE-2025/CVE-2025-132xx/CVE-2025-13229.json) (`2025-11-18T02:15:44.853`)
- [CVE-2025-13230](CVE-2025/CVE-2025-132xx/CVE-2025-13230.json) (`2025-11-18T02:15:45.030`)
- [CVE-2025-54236](CVE-2025/CVE-2025-542xx/CVE-2025-54236.json) (`2025-11-18T02:00:01.897`)
- [CVE-2025-60699](CVE-2025/CVE-2025-606xx/CVE-2025-60699.json) (`2025-11-18T01:51:46.930`)
- [CVE-2025-60702](CVE-2025/CVE-2025-607xx/CVE-2025-60702.json) (`2025-11-18T01:49:21.647`)
## Download and Usage
_state.csv
+47 -44
View File
@@ -214969,22 +214969,22 @@ CVE-2022-50076,0,0,a73b160056ed5ba414abf124246c1b77be57c5ee30cac536afefc6cd2715f
CVE-2022-50077,0,0,1a287fa95924b4a15f11ee07f8f4ca60ee37aebf92072d72ab4c094f8ce2d784,2025-11-17T19:27:18.587000
CVE-2022-50078,0,0,b06a5a41341879264898a21ca23f9ca9f2f0dfc0b0f9a1bf8d64cb1cce9ddc8c,2025-11-17T19:24:43.193000
CVE-2022-50079,0,0,898eebecbdc548f5e7e8181dc05bd484c0e68b5ada209574317131a862349900,2025-11-17T19:22:59.370000
CVE-2022-50080,0,0,846f44a054cc3b1a24a7382500c0d56a3def40b1f49685c593e9a1c8cf0ea84c,2025-06-18T13:47:40.833000
CVE-2022-50080,0,1,8ff601586a7a5d69e9a8b74480497b2b7327647a9bbc2bc565a11b2bef580b73,2025-11-18T02:39:52.973000
CVE-2022-50081,0,0,abd54f82f2e8b6566b2b23df8e651a6c00a0c78caea0523ad39bc5269501f7a6,2025-06-18T14:15:24.150000
CVE-2022-50082,0,0,8331090a0c9d8b33d60107fa58f1a681eccf2d4620a31ab3e91d455b5db43e1f,2025-06-18T13:47:40.833000
CVE-2022-50082,0,1,23819cf5a1d014e7f4ada0528f199a534d22bdfab0302614a12850727eca0249,2025-11-18T02:38:31.403000
CVE-2022-50083,0,0,81ab5eb517f562b688f73e4deb91d741c06d918fb18535762b46423ac227e4fa,2025-08-20T15:15:31.010000
CVE-2022-50084,0,0,630de0453ec83af6fb97b7004e93c6be625d8b0f4eb0a3d4133bd3ce32bff378,2025-06-18T13:47:40.833000
CVE-2022-50085,0,0,606f638b717440ef8f40d2b52e8f1f67f01f0b3ac399d8d5b59b9e4f118cb0f5,2025-06-18T13:47:40.833000
CVE-2022-50086,0,0,cbfac06d12306ed5ecf4596380d814e7d91013c836b5a248f86fe416f9c060d0,2025-06-18T13:47:40.833000
CVE-2022-50087,0,0,62b43aeaff26f894ed9e54d6d2dda287f547fe70d4a6497f0b44d9f35cdbec16,2025-06-18T13:47:40.833000
CVE-2022-50088,0,0,2180ccfe5eb784f1089fe111badb7c31325d1412e3663bd66f86049575e73b39,2025-06-18T13:47:40.833000
CVE-2022-50089,0,0,eb16a79a0a91ab93da3d7ecb5ba14f910023510b4f276434312da269cb3190a2,2025-06-18T13:47:40.833000
CVE-2022-50090,0,0,0b6b716018f19363353747b74875031fa74bf81b54351efde8f17f1040835df0,2025-06-18T13:47:40.833000
CVE-2022-50091,0,0,3098a775c2d7137611419e7d3731fa01c1f97e17b56bf360d8b32e43fd6d3892,2025-06-18T13:47:40.833000
CVE-2022-50092,0,0,ac58adb64ad48169a314470f118265b2d65542e6d3608f5c10854abcb47b6d90,2025-06-18T13:47:40.833000
CVE-2022-50093,0,0,a9b49630125d28eab3a0eb383257114b51ad546876a90353dd8c920fa4d649ef,2025-06-18T13:47:40.833000
CVE-2022-50094,0,0,e83532e20088877cfdf51160b226ff472b0abceef50ddb5c3c90a4f40cd1e6f5,2025-06-18T13:47:40.833000
CVE-2022-50095,0,0,b7fa20484719daba44192ecd005ac3f8e4fd08bbab244e893f55d7163ee49f48,2025-06-18T13:47:40.833000
CVE-2022-50084,0,1,77b60762a9bb57914b0a3057e6d7a4caeee46973e6e5e0e7e5ea5e4596c284db,2025-11-18T02:33:04.573000
CVE-2022-50085,0,1,37384f69ad2bf8ae2e0dd957774b923d2fb3c7e0f5244c2f5304e3bb15678fe5,2025-11-18T02:32:24.627000
CVE-2022-50086,0,1,7276b9364a34e04c574c1c1939159e395ed33a5756e5d65cafac82b210f9918f,2025-11-18T02:26:30.307000
CVE-2022-50087,0,1,02ca185fe4446fd1d38736d76716d9497c0ab9b9424ef7ace3ffad094102775a,2025-11-18T02:21:38.713000
CVE-2022-50088,0,1,8cedf4b0a38f02005ebc59e23ed51a22641c7f2f8464faeaa4ce653480219292,2025-11-18T02:19:06.667000
CVE-2022-50089,0,1,3b0b5587456d4e890b2499e9110fd01f23b409ecb8dbcabf3241e9165d047ebc,2025-11-18T02:18:06.127000
CVE-2022-50090,0,1,a42f1c472bea2cd344b42d97f83bd30e8493a79fc261ca287d7110662307fa3a,2025-11-18T02:17:16.440000
CVE-2022-50091,0,1,4a2a12dd6e06cf880b0dc3b774decae7e5c9acc05dfb485bcc5bacb95c7f2405,2025-11-18T02:11:04.667000
CVE-2022-50092,0,1,880707d04b9c1dbed4f6e5e0b168ec78709a93b1e2e04e9c663627d323b25b2e,2025-11-18T02:50:03.477000
CVE-2022-50093,0,1,760e26524d82c4dcb9b6e3ebe191946db07002ff32f48055bab2120a214132d6,2025-11-18T02:44:34.470000
CVE-2022-50094,0,1,3150a8523a7263cff4f6c1bcdd1568089bf83a90a5f87ce87c148be36d73d36f,2025-11-18T02:45:05.577000
CVE-2022-50095,0,1,4e8a7eca9b90b771eae65d7f4051c6fb217102b95820f69dddf7482dae996fdd,2025-11-18T02:45:38.987000
CVE-2022-50096,0,0,03fd62851375990f877b755f0cfe6ef7075e634a34a47a44b7ab8f0544c54166,2025-06-18T13:47:40.833000
CVE-2022-50097,0,0,f354d5aa664e47b6814a64f4003306f71b7e6326eae629d4ecf035f30c21a2aa,2025-06-18T13:47:40.833000
CVE-2022-50098,0,0,eab317d96b45ae6abaec0e3a58d9db9e356f241afc3827efc7261001e2e8f47f,2025-06-18T13:47:40.833000
@@ -215027,10 +215027,10 @@ CVE-2022-50134,0,0,323bf0738652e9429446d4f2d2fd79f46a94a4cae680746bc5660d6c7b900
CVE-2022-50135,0,0,b8f34d1e8dc0bda0d2f16d17c342105d26a094eeb50199f0ad1c175274f690bd,2025-06-18T13:47:40.833000
CVE-2022-50136,0,0,5dc64768ce44f7f978654094e9130548fe1b8654433b30d206ea8f4319bd97b2,2025-06-18T13:47:40.833000
CVE-2022-50137,0,0,a40be02f78d8a69ec6b697436a37ce4b1982e132be8f322009ca3702b582c0af,2025-06-18T13:47:40.833000
CVE-2022-50138,0,0,43ba1fb7a4c43c89b9888e9dc07463d4afc0ad05417fc2b9a056e1c624863026,2025-06-18T13:47:40.833000
CVE-2022-50139,0,0,bd80fd7dbe740082038cc7fe5af90fb65b736151e77879bda27119bc936826c2,2025-06-18T13:47:40.833000
CVE-2022-50140,0,0,4c34008ec90a083d6ac3d9af19775ee6e4c3759bc71a9e7501731b153f68d24c,2025-06-18T13:47:40.833000
CVE-2022-50141,0,0,c41cdb87e25e2e015cccb8b2cd6d508a627f10a24a80b024c1e84243cbafbc2c,2025-06-18T13:47:40.833000
CVE-2022-50138,0,1,84cfc4e5beb8c6e04434ffb72d1fee9a57479f64e05fd418307932d03874fa62,2025-11-18T02:59:18.993000
CVE-2022-50139,0,1,a60c55a217f872044b245a27b7baf431a53c9797f38653b15f1b5c3a0a17f3ad,2025-11-18T02:57:43.417000
CVE-2022-50140,0,1,753f84a931ee447a2985d770a6e2e879901452999e9c4beac3bf908386d88142,2025-11-18T02:56:32.010000
CVE-2022-50141,0,1,7033b5653b5cda1a6410fe0ed7ef971bc505737fb74fbe04cd9c8bb4d89ec985,2025-11-18T02:55:48.250000
CVE-2022-50142,0,0,f582eaade95021905ff239058be1d9fd4dfcd3aa15b247d9fbc3e98602ecd9e7,2025-06-18T13:47:40.833000
CVE-2022-50143,0,0,6ba1754cc8e280ee5ce745e57b3c367344f3b2ea623b304781d6a6849c9201ec,2025-06-18T13:47:40.833000
CVE-2022-50144,0,0,7f1cdb0f518d038ae2a470a6a4ee17365cf89878f5bf854200553fa8480a9da2,2025-06-18T13:47:40.833000
@@ -287821,6 +287821,7 @@ CVE-2025-12788,0,0,5897353fcb1a07ce7d85073be83648dd1b1f535b7c684be2011efe0aa0e79
CVE-2025-12789,0,0,7c47dde9ca502d8aca5e0157b580ee06d5affd1bc86ab6211dfea8f14e650749,2025-11-12T16:20:22.257000
CVE-2025-1279,0,0,81b425d3af391d6b47292396dd129cbf7aa0312666c7090cda5b04e25a332e30,2025-04-29T13:52:28.490000
CVE-2025-12790,0,0,32dae10fe8cbfc3f834324194dddc4ee4bcca04b572289398babdff4d245e46f,2025-11-12T16:20:22.257000
CVE-2025-12792,1,1,0a17201813907e4e40bf1e1263f4ae97177ab7fe6824b145c5e9d82897c6a8e7,2025-11-18T01:15:44.287000
CVE-2025-12808,0,0,fe1796695c5d88205051329946a0c8077ea1490f01c73d7003b668ba6de325f9,2025-11-10T16:30:59.457000
CVE-2025-12813,0,0,9a2f3b66496ecc6aaf76d6e8054aee4f10e055a89f44476be425dd404cb7c212,2025-11-12T16:19:34.210000
CVE-2025-12815,0,0,f2a9fecaa52901be55f696803952d09bedd901fcfdb47f693ebcf6393f6d9fab,2025-11-06T19:45:09.883000
@@ -288026,14 +288027,14 @@ CVE-2025-13210,0,0,5f2f75ab801b7189926028f2948a8d26aaed1c32f1313d1f4639af57eb390
CVE-2025-13216,0,0,013f75cc228fc0eaf4c6f7b46eff467f105d446f1b41e284e77858c655332eab,2025-11-17T19:16:17.270000
CVE-2025-1322,0,0,44942778a32b04e3546dd86fb81e0e8dd33a2d074585a18f158028a80293af84,2025-03-13T13:01:31.400000
CVE-2025-13221,0,0,036cd262d699ee352d444bf40050e8b18de8921bd0c53f207271b2659540522e,2025-11-15T20:15:42.863000
CVE-2025-13223,1,1,76cd697f9b09594b6abea1cfb44f083f9badf479f39684a82fd7573605bb2400,2025-11-17T23:15:45.140000
CVE-2025-13224,1,1,a7bd56d22923ed082385a72abc2cce5df91a08d1bf767c8a14330d4f51c7533f,2025-11-17T23:15:47.920000
CVE-2025-13226,1,1,b0124891b046b9ca23d28db439b7130baaa879212de57c88fbeb3c02ace47205,2025-11-18T00:15:47.593000
CVE-2025-13227,1,1,e1b56b107e92921825a1f608f904af71d5cbb2a5266c8b549ff0a425682cb25d,2025-11-18T00:15:47.770000
CVE-2025-13228,1,1,6707158a6a6e0d3c2b8812a7893b599712f8171e5472ea5157b575f7f267776a,2025-11-18T00:15:47.913000
CVE-2025-13229,1,1,546d07fb5fbfa8d2a9f2eaf8ca00eefe6681e582d368aa6935f6c4bf6f192d19,2025-11-18T00:15:48.063000
CVE-2025-13223,0,1,c94b5b467a6013dd9fc7f85bfd4fdd442d05bef6e07b0e202afb9e6a18f306b6,2025-11-18T02:15:43.070000
CVE-2025-13224,0,1,430f6f22d66e2539ae51ac8aef13f4f03c05910d089edf5ad6edabcef7c18636,2025-11-18T02:15:44.147000
CVE-2025-13226,0,1,9889cee0b5fa7cff7d6a93bac039670f535041e3fe20265698617d5891401be1,2025-11-18T02:15:44.323000
CVE-2025-13227,0,1,577731ec8498f9d4c04f42372f1a4233ddc6f2715877bdffe6e6cbce2685b578,2025-11-18T02:15:44.500000
CVE-2025-13228,0,1,4358a895919cda780148a4db01ded3604d529ed1494a8a9da99c2c58e6ff14cc,2025-11-18T02:15:44.680000
CVE-2025-13229,0,1,6717b0e0fa754caa41f1766c0b65ba8df8c95f614664a17e4b35efbdf4e5980d,2025-11-18T02:15:44.853000
CVE-2025-1323,0,0,b0f3bc5e76c99481e26517f66c3e5ae3fc1e8b63a6b6098651bbb6d69ab76e54,2025-03-12T16:24:59.343000
CVE-2025-13230,1,1,1873507cac1a5bccb44ddf2938f36fa03db8a92c6e1f15f528b86a3e87aa7274,2025-11-18T00:15:48.230000
CVE-2025-13230,0,1,db636e57111ca518e7225bb011571d92c94650d4a7dbab9ab1e45f6b1a2e0838,2025-11-18T02:15:45.030000
CVE-2025-13232,0,0,60d36bfa00b32744e172ab0bf2834254bc4edd807c597c52fff9151a25a82a2a,2025-11-16T01:15:42.850000
CVE-2025-13233,0,0,e28605a30f533c6b0d782352e611500b3e2a1d63468c300047762d7e0b775f2e,2025-11-16T03:15:58.547000
CVE-2025-13234,0,0,ae3717b0745c0e0e89ab079a6f43fc9d1ce4b01efe0c5311586e29e406a89033,2025-11-16T03:15:59.907000
@@ -288107,15 +288108,15 @@ CVE-2025-13300,0,0,bfa0f0d96684800c3e9cbb6e5796eb1ebf55876d12237f4735c3d5df1432a
CVE-2025-13301,0,0,c9c08459f3e71208a2c887e205410865350007f172bd19640ece9d7b5fd5b5f8,2025-11-17T21:15:56.290000
CVE-2025-13302,0,0,7b04f82f1d069ea87611b17c1b2173a029ad479a27c763df7870a0cd5c8adee6,2025-11-17T22:15:45
CVE-2025-13303,0,0,dd4097c5f2ae7f3e3051a542c987f15268f26c517f53da5d14ebe3abe96afdce,2025-11-17T22:15:45.220000
CVE-2025-13304,1,1,d71939f458c8ce5692955d18df030da876f6658e241328df17a1d6b07d7f88bf,2025-11-17T23:15:48.357000
CVE-2025-13305,1,1,10a526beee317fca08471579a8df9d407f2adfdb9bbe57c90d1ef66a7ae6fea8,2025-11-17T23:15:49.183000
CVE-2025-13306,1,1,605af848c3edd6544f0fa8c393540e3a65ca4df1de93dbedb5337c41c442a07c,2025-11-18T00:15:48.380000
CVE-2025-13304,0,0,d71939f458c8ce5692955d18df030da876f6658e241328df17a1d6b07d7f88bf,2025-11-17T23:15:48.357000
CVE-2025-13305,0,0,10a526beee317fca08471579a8df9d407f2adfdb9bbe57c90d1ef66a7ae6fea8,2025-11-17T23:15:49.183000
CVE-2025-13306,0,0,605af848c3edd6544f0fa8c393540e3a65ca4df1de93dbedb5337c41c442a07c,2025-11-18T00:15:48.380000
CVE-2025-1331,0,0,ac1f8f259ae4049d984db2b1f82b3fe42914e4f2655a2a9597856cd03f33bc72,2025-06-05T14:29:03.180000
CVE-2025-13310,0,0,65a222268c4e4a4c8f4726bea30425eea064a4fd28d4f8cf26987c7d9156d640,2025-11-17T15:15:49.020000
CVE-2025-13319,0,0,3320030300d2370c09743a52cb16c8301421cf37eb6af85440701b1a4313d072,2025-11-17T17:15:48.550000
CVE-2025-1332,0,0,651a32ff0ce1e4c178256e4e7fa7755a14b2351228c1c710a764ce12601a0c92,2025-03-04T17:17:39.640000
CVE-2025-13323,1,1,1ab2ddf19de5ed7c6b6cd04bf547a14fcf094cb560de90ad606594363597b76c,2025-11-18T00:15:48.603000
CVE-2025-13325,1,1,f63dfce8211c38b5bf1c4b37023fd3f8874de769aceba15985fafd9242e864f9,2025-11-18T00:15:48.823000
CVE-2025-13323,0,0,1ab2ddf19de5ed7c6b6cd04bf547a14fcf094cb560de90ad606594363597b76c,2025-11-18T00:15:48.603000
CVE-2025-13325,0,0,f63dfce8211c38b5bf1c4b37023fd3f8874de769aceba15985fafd9242e864f9,2025-11-18T00:15:48.823000
CVE-2025-1333,0,0,4ee465b51a4a069cb257fed9914f5e7ef1c93ab3d9ee351936b316e7a69cce78,2025-08-25T17:27:30.640000
CVE-2025-1334,0,0,68abe056ab92b6fe06d69183ba7a4c9642dbc3d5cbc6dfff5a401743920f909c,2025-08-12T20:06:55.380000
CVE-2025-1335,0,0,564364b2f61e7747ac590848e7f26fbef6a8ec644fa7858b0ae594d6c732e9b5,2025-02-28T19:56:39.220000
@@ -297720,7 +297721,7 @@ CVE-2025-31357,0,0,d5f696c99047c7628b400d67b1dfeddb779fa58a54a1c3189ec3c48396179
CVE-2025-31359,0,0,8df0d306911f994e130c68154d7fedae1054b74b4ebb7bf49486a388a5647ec4,2025-07-02T14:47:25.547000
CVE-2025-3136,0,0,7ff98ba975809b4188d01f2e115e9c45862abffa34dc2aa33ad7cd01529a1bca,2025-05-28T15:59:54.130000
CVE-2025-31360,0,0,60011c03a64da2bfbdf7fe41e953c6e3c0394a955c052c196eb9910f855b4492,2025-11-12T16:11:47.503000
CVE-2025-31361,1,1,4c27c6c6d97a71c0b8ee4cf995632126d9ae7535463b75af641e234068c9edd9,2025-11-17T23:15:49.643000
CVE-2025-31361,0,0,4c27c6c6d97a71c0b8ee4cf995632126d9ae7535463b75af641e234068c9edd9,2025-11-17T23:15:49.643000
CVE-2025-31362,0,0,29e714bdac918165d1f72d9b66a1fef39fc1fe95242e3501acdc160e75ffc0c8,2025-04-11T15:39:52.920000
CVE-2025-31363,0,0,8e4e376fc6137e5d7f7f6f9f4760801b17297d636edc77a5dbc364f4f5b5c082,2025-09-29T21:24:36.903000
CVE-2025-31365,0,0,30c72268fbd1be1af8e3fd7d6cd4631999d2dd849fb9b02faa75829402d02788,2025-10-15T17:30:38.220000
@@ -298020,7 +298021,7 @@ CVE-2025-31641,0,0,74f2d472c03da6f55fcc5070d5a61148872d3ce81a5c7f7f28e251768bfd7
CVE-2025-31644,0,0,1e9f90c58b18945ff531f3d4b8f92235ae5c92208756d1d32d2dace379dc5baf,2025-10-21T18:42:36.423000
CVE-2025-31645,0,0,199f0a1031a890a861e3038d3cf3ceb6e4762a9667d02d068c52ddcdb8a9b0d8,2025-11-12T16:19:34.210000
CVE-2025-31647,0,0,274bf6de9206d6a7d64c2957d24e5a6168f916634cbae5faf55b15ba7c6cc20f,2025-11-12T16:19:34.210000
CVE-2025-31649,1,1,8fc2ca53a98d1e4f87f201c7324ac25b6946acb1d35b54a28dea47750b5759fd,2025-11-17T23:15:51.267000
CVE-2025-31649,0,0,8fc2ca53a98d1e4f87f201c7324ac25b6946acb1d35b54a28dea47750b5759fd,2025-11-17T23:15:51.267000
CVE-2025-3165,0,0,2e02105ce99f3564dd878406ce8c0b7835d84010bc4a7c0c3ba88c3a6192f2c5,2025-04-07T14:18:34.453000
CVE-2025-31650,0,0,a1e4a84557da4c2397878c26c0531fec0aedc4af282e8e738a9d3ba124299d58,2025-11-03T20:18:25.740000
CVE-2025-31651,0,0,7bdfc914af34d7857b2cfb5604ea704b72e3c18c8b56d3105a45985fc88bf0d2,2025-11-03T20:18:25.927000
@@ -298408,7 +298409,7 @@ CVE-2025-3208,0,0,467c67ee8369e3212684108818f80d158b2f4485a63647368e73220138caff
CVE-2025-32080,0,0,476f6d5f06fbb960cd093fb065cf3625046fd24147d1c1820490adfc187e1786,2025-04-15T18:39:43.697000
CVE-2025-32086,0,0,d0bade7264b46f83fe2a5d139b1b3223b79fc5dc67e85adcf5c6764965b156cc,2025-11-03T18:15:54.380000
CVE-2025-32088,0,0,d90c13b1269767156711794e96eedbf6c56ea58a0144931bd1b1ac739e782ddb,2025-11-12T16:19:34.210000
CVE-2025-32089,1,1,1df64f6a0714682c6b972ac1790259bafc5d86909868b3a7271b2eadf199b028,2025-11-17T23:15:51.943000
CVE-2025-32089,0,0,1df64f6a0714682c6b972ac1790259bafc5d86909868b3a7271b2eadf199b028,2025-11-17T23:15:51.943000
CVE-2025-3209,0,0,67195a835acffe5135c80a3d8ad9cc228d886a4b156f30c4554a13ec4114273f,2025-05-28T16:07:37.803000
CVE-2025-32091,0,0,089f1c131091c2d8fe9bdf2d974b94e272c9c079878881afdf901d685535eb87,2025-11-12T16:19:34.210000
CVE-2025-32093,0,0,f931012036e0d0ab9d1dc10666dbf9a98ddcb4f48a184cc67ee48846c25ce091,2025-10-02T15:02:34.290000
@@ -299500,7 +299501,7 @@ CVE-2025-34030,0,0,f524795d494d41af1abb43d588204e0e445079de2112dc398bcbfb7219de5
CVE-2025-34031,0,0,6bf70afa9fd7e4883a3056085b529f16f53d66f074bfd547e5aff82763cd9a53,2025-07-09T19:09:45.097000
CVE-2025-34032,0,0,34eb0f034d68833c8252da458cb101629cb653d2827215b0f2de33387f43aad0,2025-07-09T19:09:33.977000
CVE-2025-34033,0,0,eb8c4dd348449421f7845abb5d3a2703f5d6f8e9fe6295b6cf7177e93e571ec3,2025-07-09T19:09:18.207000
CVE-2025-34034,0,1,753e2c53abd55e9985cedb292796bab69c960c97aaf9c2138a9858c439254a6d,2025-11-17T23:15:52.240000
CVE-2025-34034,0,0,753e2c53abd55e9985cedb292796bab69c960c97aaf9c2138a9858c439254a6d,2025-11-17T23:15:52.240000
CVE-2025-34035,0,0,c84fa2261eb1a1945780bbc971e24bd4d5340ea90d11d40a39e1aa7fdc35ba8a,2025-11-17T22:15:45.440000
CVE-2025-34036,0,0,a29ec8d5bd16777087bc89cecbfeb1a47d8e202f1e95b40adb5d53b8a1bef6d2,2025-11-17T22:15:45.647000
CVE-2025-34037,0,0,12f14a4e0d1d300b62fa41478afd10978c47584bdcd7b802d3ade9baed61771b,2025-11-17T22:15:45.833000
@@ -300167,10 +300168,10 @@ CVE-2025-3642,0,0,9a99db6ce3ab857c638481981796b8bb86466054494cfad599dfa17b31f25f
CVE-2025-3643,0,0,db4a817d5595d43ba13b38bd7e11f9d6c80005bbf9fcf6a2ebaa0c56c29fb2d3,2025-06-24T15:59:06.960000
CVE-2025-3644,0,0,f1d3a2cc0630da2bfe6b911805add87f5ed88ebe821a21e42ba4157464e79869,2025-06-24T15:59:15.037000
CVE-2025-3645,0,0,48c3ac09b5fd5d28e3a4d280d7aad525ec8252d94ae15558d651ddc80792bc56,2025-06-24T15:59:22.560000
CVE-2025-36460,1,1,76b19e6a57f02b0bf3c6730697eb1f2ba9b7ea3e6b8c6004086fbf443aa28a60,2025-11-17T23:15:52.497000
CVE-2025-36461,1,1,5fd8dc67b6ce5124efc4797f98a71bff1b508aab5a3a1e3f22558ac0497d503f,2025-11-17T23:15:52.763000
CVE-2025-36462,1,1,11abcdeb75d3c5d82e8f1bbb433a7c9388b853c7e2f774f366ac4273fcacd786,2025-11-17T23:15:53.337000
CVE-2025-36463,1,1,273fa0cfe8a801e243e114f8067d20d2c001c1e1b370ada9bcd884ec373434de,2025-11-17T23:15:53.687000
CVE-2025-36460,0,0,76b19e6a57f02b0bf3c6730697eb1f2ba9b7ea3e6b8c6004086fbf443aa28a60,2025-11-17T23:15:52.497000
CVE-2025-36461,0,0,5fd8dc67b6ce5124efc4797f98a71bff1b508aab5a3a1e3f22558ac0497d503f,2025-11-17T23:15:52.763000
CVE-2025-36462,0,0,11abcdeb75d3c5d82e8f1bbb433a7c9388b853c7e2f774f366ac4273fcacd786,2025-11-17T23:15:53.337000
CVE-2025-36463,0,0,273fa0cfe8a801e243e114f8067d20d2c001c1e1b370ada9bcd884ec373434de,2025-11-17T23:15:53.687000
CVE-2025-3647,0,0,05feb832de88f59f5d87aaeea08b6a453322dc136553c900a8d76e92e9a2cdb7,2025-06-24T15:59:32.860000
CVE-2025-3648,0,0,99e2b4e2e6e24f1938f35e28fdb5248e17f5d0be6f8e25d2924aa6e1bbc880d2,2025-07-08T17:15:34.267000
CVE-2025-3649,0,0,df5be861cb9901de2ff346df6053edd181ced31f9d06ef10ebd9788e09b37197,2025-06-05T14:27:28.437000
@@ -300193,7 +300194,7 @@ CVE-2025-36537,0,0,fc5a08fdfa77d0aeb87f05a014617c8ee5a221c302cbc25a3d0850b6d16ca
CVE-2025-36539,0,0,c0894e36c5a4bf5ae06107887e6e7bc4869da6fc581815f366cc900be9ce130c,2025-06-16T12:32:18.840000
CVE-2025-36546,0,0,60a222525c4f95fd07c9422c3fd292d0957b5f15d60d73ce1eeb2d51f2137892,2025-10-21T18:42:57.403000
CVE-2025-36548,0,0,e0ed5f1c73ff4b093ae92ca0ecec648f183aecf632c777a700933739b02fa9c4,2025-11-03T20:18:30.717000
CVE-2025-36553,1,1,dfc666b642e1f482cab70fbb0e90b6894ae3f26b3113626b9eb4732f2a8bcdd8,2025-11-17T23:15:54.353000
CVE-2025-36553,0,0,dfc666b642e1f482cab70fbb0e90b6894ae3f26b3113626b9eb4732f2a8bcdd8,2025-11-17T23:15:54.353000
CVE-2025-36557,0,0,c5a4e0d07fc4c1aa0caa3839109dd2084c7221b8fd6965740a267c6ec5263acd,2025-08-06T18:14:59.580000
CVE-2025-36558,0,0,f7ba1efb73da33ba35418104474d3de926b1549af2f93d6130fc139c04b0fc60,2025-05-02T13:52:51.693000
CVE-2025-36560,0,0,d6ca43d57a38d62b48def91cb2d07e30c58d6e35247e19fc255a6cf99bdc5f85,2025-09-30T19:14:19.060000
@@ -310014,7 +310015,7 @@ CVE-2025-54232,0,0,74738f8e59094d5441631bc47d8d83de85a54bd8947c605920a0f71b3a56a
CVE-2025-54233,0,0,9b14013bc2511806dfc06793d5702178c0c1db7ab1a06628f77055eb730a98f2,2025-08-14T01:05:54.053000
CVE-2025-54234,0,0,15b722fe53a2a83df32f09430aa080a833a389e22b3cffdb61b9dcca09579de8,2025-11-06T22:23:13.170000
CVE-2025-54235,0,0,4c6e47535464eb5cac8c8712d883f6108cec41e891c1af59388fea6e2afee65a,2025-08-13T18:14:43.213000
CVE-2025-54236,0,0,83b3187a13e92fbfb486508d07edcb49eec9e92e636d64e2be4213b909de1e53,2025-11-17T02:00:02.217000
CVE-2025-54236,0,1,16c9f8aa3297ab8194699a40390c4b457799c50f8760a47cd6f7533be9e4cf97,2025-11-18T02:00:01.897000
CVE-2025-54237,0,0,f86cd71bb4266b1e9b06486eb24aa138c30d53f2219596e78679b21c5750c179,2025-09-18T13:38:39.070000
CVE-2025-54238,0,0,a36be64074d7d47b6190447bb92bfe557d52fcc438e1a77896e2e199d15e1917,2025-08-14T01:06:18.920000
CVE-2025-54239,0,0,9ad52d97af19a42000e5faa35316c0d255739384a3fc936923a9b36b4d0dd5ae,2025-09-12T14:29:06.223000
@@ -313697,11 +313698,11 @@ CVE-2025-60695,0,0,26ae8a0a4453f1440d4092336bf81ca6ca930fb176d9b27eb08580b2fa620
CVE-2025-60696,0,0,f2b5bd0d7edb11847bbc09e0adcf13a633109ad2ee90f36055235c7927eeb52b,2025-11-14T16:42:03.187000
CVE-2025-60697,0,0,6a47c4ac2334415a32290afbf5661522e68a78d239f3fe64b514cfa687deb4c3,2025-11-17T12:29:07.143000
CVE-2025-60698,0,0,ab622c3feaa7c8aba55acac5ea29b9d35940a8399e37fa6418dae193cce2f0f2,2025-11-17T12:28:54.113000
CVE-2025-60699,0,0,a2c2323384d477c6902a617cbcf39b6253460fd369da3d695fd787699c5bcc84,2025-11-14T17:16:09.640000
CVE-2025-60699,0,1,2d1fd09b7e7225c15b4120cbefd2b97deeba4e16519b0192e504d4dc255a8708,2025-11-18T01:51:46.930000
CVE-2025-6070,0,0,c5bf4414dfa4d281aa3a990feec25cc21fddd34f58ddd67c6eaf8ae460160cc5,2025-06-16T12:32:18.840000
CVE-2025-60700,0,0,d030ffffb84a5d859aef1574a896724df71a4a0cb6765c00237b65a300240c62,2025-11-17T12:28:40.547000
CVE-2025-60701,0,0,5e54480458675cc55df08f3c70c945cdf735ba24beb97dce3a8b070faf528b1d,2025-11-17T12:28:31.610000
CVE-2025-60702,0,0,46cb06676e2a34501d98e8d8ec78412dda517902c49ade10fecc71146371e7a8,2025-11-14T17:16:14.210000
CVE-2025-60702,0,1,19e1fe5f92cc812f11052935d949a1d6ad6a61e8aa79314c5c4912cd31e1d90e,2025-11-18T01:49:21.647000
CVE-2025-60703,0,0,098da10d1b1557c048aa4cf3651dab9620538711c29d986131df0ad5cab9d21d,2025-11-17T17:47:19.307000
CVE-2025-60704,0,0,653c1c4e9be2111f48c182b393ad3774e6cf4c844e2e032b2284471360ebf9a8,2025-11-17T17:47:15.507000
CVE-2025-60705,0,0,7b1656a748e2aa6963c50b3bd8f74b7b06e1f3b0fe2c996557a5e9ad11e89307,2025-11-17T17:47:11.453000
@@ -315469,7 +315470,7 @@ CVE-2025-6507,0,0,4879312405dc64d09260c91f5c46e6eeab37503e93b4914450ef9452b0fbe7
CVE-2025-65070,0,0,f448085f4de7ea0b353d6128a191ee6528137163bfc2caad243c69ba708c6e43,2025-11-15T04:15:57.483000
CVE-2025-65071,0,0,e56be4598f471d5cff2f43c3a018bbc199e9eeb1e2f0937667d83392f2f3ed36,2025-11-15T04:15:57.573000
CVE-2025-65072,0,0,ebf75e8acb0584e0175e0768ce68e5d3ee6116c357be488a4d6b449c8c0b140b,2025-11-15T04:15:57.667000
CVE-2025-65073,0,1,396c5f6dd51b46f8f4c3e4bb25e40feaacf8715d9a7d6f3478f6b97d1a940aff,2025-11-17T23:15:55.277000
CVE-2025-65073,0,0,396c5f6dd51b46f8f4c3e4bb25e40feaacf8715d9a7d6f3478f6b97d1a940aff,2025-11-17T23:15:55.277000
CVE-2025-65083,0,0,563a6efcc1e65157a4c4d10ac1d71e01b6e8ba8053d5223539f834ae51ab1666,2025-11-17T16:15:51.007000
CVE-2025-6509,0,0,0a77d8561ce4da22774ea5cb68ff62f299428ec7e8554fc3b65b6353cd49cdad,2025-06-23T20:16:21.633000
CVE-2025-6510,0,0,6ac07d683db7d6e624d6f059776301bd59aa18a2ba615c569f28edfcbd6187b8,2025-07-16T17:00:44.380000
@@ -315546,6 +315547,7 @@ CVE-2025-6585,0,0,adaeb58e3fc188fc0fb17f0bed47098a1fe39a13212ef121d20fafda41da95
CVE-2025-6586,0,0,a2a31cfde8036131bb5246db3ae2c6f244bcc91b479b47ff60159df89464e964,2025-07-09T17:50:13.847000
CVE-2025-6587,0,0,94e040daa08ba5c9e3932753930ce394b84353f61fda95c1801a18e9a0bd6347,2025-07-03T15:13:53.147000
CVE-2025-6588,0,0,7fc631224ca630583edbb28a4a53a4fc8fe52d2b2d0fedc02ad161b03f35330d,2025-07-25T15:29:19.837000
CVE-2025-6599,1,1,4209e71fdbff1788af4333fe6b7f4bbb8df52bc7e253cb92b78ecf60c7da2bfb,2025-11-18T02:15:45.210000
CVE-2025-6600,0,0,52f2838d1bed1fd512519a975ef79c7715790a6dc012c106cd06473e42be0e88,2025-09-05T14:59:47.533000
CVE-2025-6601,0,0,974df0cb9a7237b45bbcc24d6cf0cde87cb7ba50e707b3b0bc3a93f5747be6dd,2025-10-28T13:38:59.890000
CVE-2025-6603,0,0,94e8918af653fece9803c6dda129968de5b58a553aefbcdcb849847b69658ab4,2025-06-26T18:57:43.670000
@@ -316534,7 +316536,7 @@ CVE-2025-7705,0,0,5b1fcc4532b39aa50dd0660d63fd3bd79c828edec1c70c3ca9d8f1d759cadf
CVE-2025-7707,0,0,830917d4c225b26ee82741ee745632b24d30d329d37f5fc99200ef6fe93de581,2025-10-21T14:48:53.780000
CVE-2025-7709,0,0,8b247db6cbd1f1d53e950b2987b925252a4da7cd971db264081c7ca165875c1f,2025-11-04T22:16:44.200000
CVE-2025-7710,0,0,feb0a9b16e6a6ce31b82d2fbb852982eef5e61125a79efb137aa8b46a9169a39,2025-08-04T15:06:15.833000
CVE-2025-7711,1,1,71336924dc4aa317ca8432c76985248816f7495ebb32e1d77fecb60d599747e3,2025-11-17T23:15:56.713000
CVE-2025-7711,0,0,71336924dc4aa317ca8432c76985248816f7495ebb32e1d77fecb60d599747e3,2025-11-17T23:15:56.713000
CVE-2025-7712,0,0,7d0a595c3951498183ab506b98863a3cb2863bc0f369965ea5f27723867cfdeb,2025-07-17T21:15:50.197000
CVE-2025-7715,0,0,a1d9d0c2306e562d2e60e3370ffa79348e855599cf7ba6535e7d8a99fc9acb17,2025-08-26T20:50:11.553000
CVE-2025-7716,0,0,d5a736f2ea3703e113339439e4144a8fcc149405f259d7e3c063a69dec5a8baf,2025-08-26T20:49:57.420000
@@ -317398,6 +317400,7 @@ CVE-2025-8689,0,0,39b2a55821ceb287712996e7a9fa786d26fbed98b7809792fdf712375f9497
CVE-2025-8690,0,0,3db85430ee782133063375a266b4371c0d099476013469127d5375685e2b8915,2025-08-12T14:25:33.177000
CVE-2025-8691,0,0,21b1a621913aa0bdbdf380d892f205df2facd24acd3c02a6bcd82dbf92acb44a,2025-09-11T17:14:10.147000
CVE-2025-8692,0,0,9475139fbd8f780867d9b55d2e8645aa01c85945e4be99edec73592242ff2af2,2025-09-11T17:14:10.147000
CVE-2025-8693,1,1,3176ea162eb22f692fb21589a442a6b81fa58fb1928fe9069298a4d5c160ce3b,2025-11-18T02:15:45.410000
CVE-2025-8695,0,0,b4411021665f636bf394599ff61d80f93fe79357376074b70d0f8909c81499ef,2025-09-05T17:47:10.303000
CVE-2025-8696,0,0,fc0014fc8b1c5044127398d8b1419b0c8f4fb49c03c8df1f765d1be6d5a7f76c,2025-11-04T22:16:45.083000
CVE-2025-8697,0,0,e11f8d7745953c13d4daebbe11a61f9e97b7f1f4e7d79fdc6d20c160e7bcc438,2025-08-07T21:26:37.453000
Can't render this file because it is too large.