From 2fbd896ab84b2edf64267c7bca249b40ebe1a59e Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Tue, 18 Nov 2025 03:04:01 +0000 Subject: [PATCH] Auto-Update: 2025-11-18T03:00:12.959030+00:00 --- CVE-2022/CVE-2022-500xx/CVE-2022-50080.json | 135 +++++++++++++++-- CVE-2022/CVE-2022-500xx/CVE-2022-50082.json | 105 ++++++++++++- CVE-2022/CVE-2022-500xx/CVE-2022-50084.json | 153 +++++++++++++++++-- CVE-2022/CVE-2022-500xx/CVE-2022-50085.json | 142 ++++++++++++++++-- CVE-2022/CVE-2022-500xx/CVE-2022-50086.json | 93 +++++++++++- CVE-2022/CVE-2022-500xx/CVE-2022-50087.json | 130 +++++++++++++++-- CVE-2022/CVE-2022-500xx/CVE-2022-50088.json | 82 ++++++++++- CVE-2022/CVE-2022-500xx/CVE-2022-50089.json | 94 +++++++++++- CVE-2022/CVE-2022-500xx/CVE-2022-50090.json | 94 +++++++++++- CVE-2022/CVE-2022-500xx/CVE-2022-50091.json | 94 +++++++++++- CVE-2022/CVE-2022-500xx/CVE-2022-50092.json | 118 +++++++++++++-- CVE-2022/CVE-2022-500xx/CVE-2022-50093.json | 118 +++++++++++++-- CVE-2022/CVE-2022-500xx/CVE-2022-50094.json | 154 ++++++++++++++++++-- CVE-2022/CVE-2022-500xx/CVE-2022-50095.json | 106 +++++++++++++- CVE-2022/CVE-2022-501xx/CVE-2022-50138.json | 106 +++++++++++++- CVE-2022/CVE-2022-501xx/CVE-2022-50139.json | 106 +++++++++++++- CVE-2022/CVE-2022-501xx/CVE-2022-50140.json | 142 ++++++++++++++++-- CVE-2022/CVE-2022-501xx/CVE-2022-50141.json | 142 ++++++++++++++++-- CVE-2025/CVE-2025-127xx/CVE-2025-12792.json | 56 +++++++ CVE-2025/CVE-2025-132xx/CVE-2025-13223.json | 29 +++- CVE-2025/CVE-2025-132xx/CVE-2025-13224.json | 29 +++- CVE-2025/CVE-2025-132xx/CVE-2025-13226.json | 29 +++- CVE-2025/CVE-2025-132xx/CVE-2025-13227.json | 29 +++- CVE-2025/CVE-2025-132xx/CVE-2025-13228.json | 29 +++- CVE-2025/CVE-2025-132xx/CVE-2025-13229.json | 29 +++- CVE-2025/CVE-2025-132xx/CVE-2025-13230.json | 29 +++- CVE-2025/CVE-2025-542xx/CVE-2025-54236.json | 2 +- CVE-2025/CVE-2025-606xx/CVE-2025-60699.json | 49 ++++++- CVE-2025/CVE-2025-607xx/CVE-2025-60702.json | 49 ++++++- CVE-2025/CVE-2025-65xx/CVE-2025-6599.json | 56 +++++++ CVE-2025/CVE-2025-86xx/CVE-2025-8693.json | 56 +++++++ README.md | 63 ++++---- _state.csv | 91 ++++++------ 33 files changed, 2473 insertions(+), 266 deletions(-) create mode 100644 CVE-2025/CVE-2025-127xx/CVE-2025-12792.json create mode 100644 CVE-2025/CVE-2025-65xx/CVE-2025-6599.json create mode 100644 CVE-2025/CVE-2025-86xx/CVE-2025-8693.json diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50080.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50080.json index b2a493aded6..3d9b17986f6 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50080.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50080.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50080", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:36.980", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:39:52.973", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,150 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tee: agregar verificaci\u00f3n de desbordamiento en register_shm_helper(). Con longitudes especiales suministradas por el espacio de usuario, register_shm_helper() tiene un desbordamiento de entero al calcular la cantidad de p\u00e1ginas cubiertas por una regi\u00f3n de memoria del espacio de usuario suministrada. Esto hace que internal_get_user_pages_fast(), una funci\u00f3n auxiliar de pin_user_pages_fast(), realice una desreferencia de puntero NULL: No se puede manejar la desreferencia de puntero NULL del n\u00facleo en la direcci\u00f3n virtual 0000000000000010 M\u00f3dulos vinculados: CPU: 1 PID: 173 Comm: optee_example_a No contaminado 5.19.0 #11 Nombre del hardware: QEMU QEMU Virtual Machine, BIOS 0.0.0 02/06/2015 pc : internal_get_user_pages_fast+0x474/0xa80 Rastreo de llamadas: internal_get_user_pages_fast+0x474/0xa80 pin_user_pages_fast+0x24/0x4c register_shm_helper+0x194/0x330 tee_shm_register_user_buf+0x78/0x120 tee_ioctl+0xd0/0x11a0 __arm64_sys_ioctl+0xa8/0xec invoke_syscall+0x48/0x114 Solucione esto agregando una llamada expl\u00edcita a access_ok() en tee_shm_register_user_buf() para detectar de manera temprana una direcci\u00f3n de espacio de usuario no v\u00e1lida." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.16", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "41E19BC1-64E0-4467-927D-8ABB2C0624CB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.62", + "matchCriteriaId": "BA1D807C-6E4B-4302-A127-1A11ECCB740E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.19", + "matchCriteriaId": "3C960AE6-B596-45FD-A1B9-5B999738CA4B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.3", + "matchCriteriaId": "9FCF4A30-8824-4CC9-BC36-AB236B41DE93" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E8BD11A3-8643-49B6-BADE-5029A0117325" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2f8e79a1a6128214cb9b205a9869341af5dfb16b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/573ae4f13f630d6660008f1974c0a8a29c30e18a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/578c349570d2a912401963783b36e0ec7a25c053", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/58c008d4d398f792ca67f35650610864725518fd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/965333345fe952cc7eebc8e3a565ffc709441af2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b37e0f17653c00b586cdbcdf0dbca475358ecffd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c12f0e6126ad223806a365084e86370511654bf1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50082.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50082.json index e6f06df75e0..951aa59a307 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50082.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50082.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50082", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:37.223", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:38:31.403", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,116 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ext4: se corrige la advertencia en ext4_iomap_begin como ejecuci\u00f3n entre bmap y escritura Tenemos el problema siguiente: ------------[ cortar aqu\u00ed ]------------ ADVERTENCIA: CPU: 3 PID: 9310 en fs/ext4/inode.c:3441 ext4_iomap_begin+0x182/0x5d0 RIP: 0010:ext4_iomap_begin+0x182/0x5d0 RSP: 0018:ffff88812460fa08 EFLAGS: 00010293 RAX: ffff88811f168000 RBX: 0000000000000000 RCX: ffffffff97793c12 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: ffff88812c669160 R08: ffff88811f168000 R09: ffffed10258cd20f R10: ffff88812c669077 R11: ffffed10258cd20e R12: 000000000000001 R13: 00000000000000a4 R14: 000000000000000c R15: ffff88812c6691ee FS: 00007fd0d6ff3740(0000) GS:ffff8883af180000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd0d6dda290 CR3: 0000000104a62000 CR4: 00000000000006e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Rastreo de llamadas: iomap_apply+0x119/0x570 iomap_bmap+0x124/0x150 ext4_bmap+0x14f/0x250 bmap+0x55/0x80 do_vfs_ioctl+0x952/0xbd0 __x64_sys_ioctl+0xc6/0x170 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xa9 Above issue may happen as follows: bmap write bmap ext4_bmap iomap_bmap ext4_iomap_begin ext4_file_write_iter ext4_buffered_write_iter generic_perform_write ext4_da_write_begin ext4_da_write_inline_data_begin ext4_prepare_inline_data ext4_create_inline_data ext4_set_inode_flag(inode, EXT4_INODE_INLINE_DATA); if (WARN_ON_ONCE(ext4_has_inline_data(inode))) ->trigger bug_on Para resolver el problema anterior, mantenga el bloqueo del inodo en ext4_bamp." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "FE689A89-6D93-47A0-90ED-93726F905DAD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/30dfb75e1f8645404a536c74d468d498adcd4e74", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/51ae846cff568c8c29921b1b28eb2dfbcd4ac12d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a9fe6d1e3d343d7309f501b1f48020ce7127221f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e1682c7171a6c0ff576fe8116b8cba5b8f538b94", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fa6482f374fda29a71ad44d76d35b4842d43cda4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50084.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50084.json index 7be65b542e5..8e69dc24156 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50084.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50084.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50084", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:37.460", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:33:04.573", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,172 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dm raid: correcci\u00f3n de la advertencia del depurador de direcciones en raid_status Existe esta advertencia cuando se usa un kernel con el depurador de direcciones y se ejecuta este conjunto de pruebas: https://gitlab.com/cki-project/kernel-tests/-/tree/main/storage/swraid/scsi_raid ====================================================================== ERROR: KASAN: slab-out-of-bounds en raid_status+0x1747/0x2820 [dm_raid] Lectura de tama\u00f1o 4 en la direcci\u00f3n ffff888079d2c7e8 por la tarea lvcreate/13319 CPU: 0 PID: 13319 Comm: lvcreate No contaminado 5.18.0-0.rc3. #1 Nombre del hardware: Red Hat KVM, BIOS 0.5.1 01/01/2011 Seguimiento de llamadas: dump_stack_lvl+0x6a/0x9c print_address_description.constprop.0+0x1f/0x1e0 print_report.cold+0x55/0x244 kasan_report+0xc9/0x100 raid_status+0x1747/0x2820 [dm_raid] dm_ima_measure_on_table_load+0x4b8/0xca0 [dm_mod] table_load+0x35c/0x630 [dm_mod] ctl_ioctl+0x411/0x630 [dm_mod] dm_ctl_ioctl+0xa/0x10 [dm_mod] __x64_sys_ioctl+0x12a/0x1a0 do_syscall_64+0x5b/0x80La advertencia se debe a la lectura de `conf->max_nr_stripes` en `raid_status`. El c\u00f3digo en `raid_status` lee `mddev->private`, lo convierte a `struct r5conf` y lee la entrada `max_nr_stripes`. Sin embargo, si el tipo de raid es diferente al 4/5/6, `mddev->private` no apunta a `struct r5conf`; puede apuntar a `struct r0conf`, `struct r1conf`, `struct r10conf` o `struct mpconf`. Si convertimos un puntero a una de estas estructuras en struct r5conf, leeremos memoria no v\u00e1lida y KASAN emitir\u00e1 una advertencia. Corrija este error leyendo struct r5conf solo si el tipo de RAID es 4, 5 o 6." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.9.326", + "matchCriteriaId": "5B4EA906-CFF9-4D4A-AFD7-43AC02C77E48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.291", + "matchCriteriaId": "3BBC7E43-6161-4F21-977C-5BB7792C6C94" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1ae0ebfb576b72c2ef400917a5484ebe7892d80b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1fbeea217d8f297fe0e0956a1516d14ba97d0396", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/49dba30638e091120256a9e89125340795f034dc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4c233811a49578634d10a5e70a9dfa569d451e94", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/90b006da40dd42285b24dd3c940d2c32aca9a70b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b4c6c07c92b6cba2bf3cb2dfa722debeaf8a8abe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b856ce5f4b55f752144baf17e9d5c415072652c5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cb583ca6125ac64c98e9d65128e95ebb5be7d322", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d8971b595d7adac3421c21f59918241f1574061e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50085.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50085.json index 9099438ebe7..653f62ac46c 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50085.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50085.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50085", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:37.577", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:32:24.627", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,159 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dm raid: correcci\u00f3n de la advertencia del depuraci\u00f3n de direcciones en raid_resume. Se produce una advertencia de KASAN en raid_resume al ejecutar la prueba lvm lvconvert-raid.sh. La advertencia se debe a que mddev->raid_disks es mayor que rs->raid_disks, por lo que el bucle toca una entrada m\u00e1s all\u00e1 de la longitud asignada." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.8", + "versionEndExcluding": "4.14.291", + "matchCriteriaId": "381CD809-3659-46C5-BC70-3AD16FD6A80E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2a9faa704d83ff0b04387e385efd8ae21cd95af6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3bfdc95466f5be4d8d95db5a5b470d61641a7c24", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/50235d9a1f1f742619ed9963cb9f240e5b821d46", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/71f601c779b3cc1baf497796f5b922c3fe5d2a1e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/74af83732a39ab7d3bc9b49219a535853e25679f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7dad24db59d2d2803576f2e3645728866a056dab", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c2d47bef93fb74aa97d90f9a40ca657b8f376083", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c2f075e729636a44e98d9722e3852c2fa6fa49b6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50086.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50086.json index bb4c65e6858..bcb9d71449a 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50086.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50086.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50086", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:37.690", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:26:30.307", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,102 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bloque: no permitir que el mismo tipo rq_qos se agregue m\u00e1s de una vez En nuestra prueba de iocost, encontramos algunas corrupciones de lista add/del de la lista inner_walk en ioc_timer_fn. La raz\u00f3n puede describirse de la siguiente manera: cpu 0 cpu 1 ioc_qos_write ioc_qos_write ioc = q_to_ioc(queue); if (!ioc) { ioc = kzalloc(); ioc = q_to_ioc(queue); if (!ioc) { ioc = kzalloc(); ... rq_qos_add(q, rqos); } ... rq_qos_add(q, rqos); ... } Cuando dos CPU escriben el archivo io.cost.qos simult\u00e1neamente, es posible que se agregue rq_qos a un disco dos veces. En ese caso, habr\u00e1 dos ioc habilitados y ejecut\u00e1ndose en un disco. Poseen diferentes iocgs en su lista activa. En la funci\u00f3n ioc_timer_fn, dado que los iocgs de dos iocs tienen el mismo iocg ra\u00edz, la lista walk_list de cada iocg ra\u00edz puede sobrescribirse entre s\u00ed, lo que provoca errores al agregar o eliminar listas al crear o destruir la lista inner_walk. Hasta ahora, el framework blk-rq-qos funciona con una instancia de un tipo rq_qos por cola por defecto. Este parche lo aclara y corrige el fallo mencionado." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "9C842B96-7AD0-4A37-884E-3AE85DD759DC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/08ef66e800a85afc6b54cb95841f6502627eee2e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0b7f5d7a4d2a72ad9de04ab8ccba2a31904aa638", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0c9bb1acd1d103a3070b2126870eb52761d606ce", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/14a6e2eb7df5c7897c15b109cba29ab0c4a791b6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50087.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50087.json index 148f3e2e095..f52a473fe00 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50087.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50087.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50087", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:37.803", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:21:38.713", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,145 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: firmware: arm_scpi: Asegurarse de que scpi_info no se asigne si la sonda falla. Cuando la sonda scpi falla, en cualquier momento, debemos asegurarnos de que scpi_info no est\u00e9 configurado y permanezca nulo hasta que la sonda tenga \u00e9xito. Si no se soluciona, podr\u00eda producirse un error de Use-After-Free, ya que el valor se exporta mediante get_scpi_ops() y podr\u00eda hacer referencia a una memoria asignada mediante devm_kzalloc(), pero liberada cuando la sonda falla." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.4", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "3AC63550-1EF5-434E-B47C-A070C0D52954" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/08272646cd7c310642c39b7f54348fddd7987643", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0c29e149b6bb498778ed8a1c9597b51acfba7856", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/18048cba444a7c41dbf42c180d6b46606fc24c51", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4f2d7b46d6b53c07f44a4f8f8f4438888f0e9e87", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5aa558232edc30468d1f35108826dd5b3ffe978f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/689640efc0a2c4e07e6f88affe6d42cd40cc3f85", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/87c4896d5dd7fd9927c814cf3c6289f41de3b562", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50088.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50088.json index 810e378142c..10af08b63b3 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50088.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50088.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50088", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:37.917", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:19:06.667", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm/damon/reclaim: se corrige una posible fuga de memoria en damon_reclaim_init(). damon_reclaim_init() asigna un fragmento de memoria para ctx con damon_new_ctx(). Cuando damon_select_ops() falla, ctx no se libera, lo que provoca una fuga de memoria. Deber\u00edamos liberar ctx con damon_destroy_ctx() cuando damon_select_ops() no solucione la fuga de memoria." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "28A3BD94-A9B1-461A-9325-1B7EF7D364B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/188043c7f4f2bd662f2a55957d684fffa543e600", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/700aa4e11a3c4d2a44d06758db431a013d9e1b61", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9d3e9e1e0856f4c905bbb870f16f42ae72477071", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50089.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50089.json index bcdbc6a2455..32a4bb07d2b 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50089.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50089.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50089", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:38.023", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:18:06.127", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: garantizar que las p\u00e1ginas se desbloqueen en caso de fallo de cow_file_range() Hay un informe de hung_task en btrfs zonificados como el que se muestra a continuaci\u00f3n. https://github.com/naota/linux/issues/59 [726.328648] INFORMACI\u00d3N: la tarea rocksdb:high0:11085 se bloque\u00f3 durante m\u00e1s de 241 segundos. [726.329839] No contaminado 5.16.0-rc1+ #1 [726.330484] \"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" deshabilita este mensaje. [726.331603] tarea:rocksdb:high0 estado:D pila: 0 pid:11085 ppid: 11082 indicadores:0x00000000 [726.331608] Seguimiento de llamadas: [726.331611] [726.331614] __schedule+0x2e5/0x9d0 [726.331622] schedule+0x58/0xd0 [726.331626] io_schedule+0x3f/0x70 [726.331629] __folio_lock+0x125/0x200 [726.331634] ? find_get_entries+0x1bc/0x240 [726.331638] ? filemap_invalidate_unlock_two+0x40/0x40 [726.331642] truncate_inode_pages_range+0x5b2/0x770 [726.331649] truncate_inode_pages_final+0x44/0x50 [726.331653] btrfs_evict_inode+0x67/0x480 [726.331658] evict+0xd0/0x180 [726.331661] iput+0x13f/0x200 [726.331664] do_unlinkat+0x1c0/0x2b0 [726.331668] __x64_sys_unlink+0x23/0x30 [726.331670] do_syscall_64+0x3b/0xc0 [726.331674] entry_SYSCALL_64_after_hwframe+0x44/0xae [726.331677] RIP: 0033:0x7fb9490a171b [726.331681] RSP: 002b:00007fb943ffac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [726.331684] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb9490a171b [726.331686] RDX: 00007fb943ffb040 RSI: 000055a6bbe6ec20 RDI: 00007fb94400d300 [726.331687] RBP: 00007fb943ffad00 R08: 0000000000000000 R09: 0000000000000000 [726.331688] R10: 0000000000000031 R11: 0000000000000246 R12: 00007fb943ffb000 [726.331690] R13: 00007fb943ffb040 R14: 0000000000000000 R15: 00007fb943ffd260 [726.331693] Mientras depur\u00e1bamos el problema, encontramos que ejecutar fstests generic/551 en un dispositivo null_blk sin zona de 5 GB en el modo de zona emulada tambi\u00e9n ten\u00eda un problema de bloqueo similar. Adem\u00e1s, podemos reproducir el mismo s\u00edntoma con un error inyectado en la configuraci\u00f3n de cow_file_range(). El bloqueo ocurre cuando cow_file_range() falla en medio de la asignaci\u00f3n. cow_file_range() llamado desde do_allocation_zoned() puede dividir la regi\u00f3n dada ([inicio, fin]) para la asignaci\u00f3n dependiendo de los usos actuales del grupo de bloques. Cuando btrfs puede asignar bytes para una parte de las regiones divididas pero falla para la otra regi\u00f3n (por ejemplo, debido a -ENOSPC), devolvemos el error dejando bloqueadas las p\u00e1ginas en las regiones exitosas. T\u00e9cnicamente, esto solo ocurre cuando @unlock == 0. De lo contrario, desbloqueamos las p\u00e1ginas en una regi\u00f3n asignada tras crear una extensi\u00f3n ordenada. Dado que quienes llaman a cow_file_range(unlock=0) no escribir\u00e1n las p\u00e1ginas, podemos desbloquearlas al salir de cow_file_range() en caso de error. Por lo tanto, podemos asegurar que todas las p\u00e1ginas, excepto @locked_page, se desbloqueen en caso de error. En resumen, cow_file_range ahora se comporta as\u00ed: - page_started == 1 (valor de retorno): todas las p\u00e1ginas est\u00e1n desbloqueadas. Se inicia la E/S. - unlock == 1: todas las p\u00e1ginas, excepto @locked_page, se desbloquean en cualquier caso. - unlock == 0: en caso de \u00e9xito, todas las p\u00e1ginas est\u00e1n bloqueadas para su escritura. - en caso de error, todas las p\u00e1ginas, excepto @locked_page, se desbloquean." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.12", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "23E86361-3C85-4727-87EC-1E6ACE028490" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/9535ec371d741fa037e37eddc0a5b25ba82d0027", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9ce7466f372d83054c7494f6b3e4b9abaf3f0355", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b367f125c80fa838eae49e3b138dc67dfc9f46ef", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e160aa87c87a9c4e0c8d1430235f715a3a91e2cd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50090.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50090.json index e0609ce7f30..6b4af9efcf8 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50090.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50090.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50090", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:38.153", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:17:16.440", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: reemplazar BTRFS_MAX_EXTENT_SIZE con fs_info->max_extent_size En el sistema de archivos zonificado, la escritura de datos est\u00e1 limitada por max_zone_append_size, y una extensi\u00f3n ordenada grande se divide seg\u00fan el tama\u00f1o de un bio. OTOH, el n\u00famero de extensiones que se escribir\u00e1n se calcula utilizando BTRFS_MAX_EXTENT_SIZE, y ese n\u00famero estimado se utiliza para reservar los bytes de metadatos para actualizar y/o crear los elementos de metadatos. La reserva de metadatos se realiza en, por ejemplo, btrfs_buffered_write() y luego se libera de acuerdo con los cambios de estimaci\u00f3n. Por lo tanto, si el n\u00famero de extensiones aumenta masivamente, los metadatos reservados pueden agotarse. El aumento del n\u00famero de extensiones ocurre f\u00e1cilmente en el sistema de archivos zonificado si BTRFS_MAX_EXTENT_SIZE > max_zone_append_size. Y causa la siguiente advertencia en un entorno de RAM peque\u00f1o con la deshabilitaci\u00f3n de la sobreasignaci\u00f3n de metadatos (en el siguiente parche). [75721.498492] ------------[ cortar aqu\u00ed ]------------ [75721.505624] BTRFS: el bloque rsv 1 devolvi\u00f3 -28 [75721.512230] ADVERTENCIA: CPU: 24 PID: 2327559 en fs/btrfs/block-rsv.c:537 btrfs_use_block_rsv+0x560/0x760 [btrfs] [75721.581854] CPU: 24 PID: 2327559 Comm: kworker/u64:10 Kdump: cargado Tainted: GW 5.18.0-rc2-BTRFS-ZNS+ #109 [75721.597200] Nombre del hardware: Supermicro Super Server/H12SSL-NT, BIOS 2.0 22/02/2021 [75721.607310] Cola de trabajo: btrfs-endio-write btrfs_work_helper [btrfs] [75721.616209] RIP: 0010:btrfs_use_block_rsv+0x560/0x760 [btrfs] [75721.646649] RSP: 0018:ffffc9000fbdf3e0 EFLAGS: 00010286 [75721.654126] RAX: 00000000000000000 RBX: 0000000000004000 RCX: 0000000000000000 [75721.663524] RDX: 0000000000000004 RSI: 0000000000000008 RDI: fffff52001f7be6e [75721.672921] RBP: ffffc9000fbdf420 R08: 0000000000000001 R09: ffff889f8d1fc6c7 [75721.682493] R10: ffffed13f1a3f8d8 R11: 000000000000001 R12: ffff88980a3c0e28 [75721.692284] R13: ffff889b66590000 R14: ffff88980a3c0e40 R15: ffff88980a3c0e8a [75721.701878] FS: 0000000000000000(0000) GS:ffff889f8d000000(0000) knlGS:0000000000000000 [75721.712601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [75721.720726] CR2: 000055d12e05c018 CR3: 0000800193594000 CR4: 0000000000350ee0 [75721.730499] Rastreo de llamadas: [75721.735166] [75721.739886] btrfs_alloc_tree_block+0x1e1/0x1100 [btrfs] [75721.747545] ? btrfs_alloc_logged_file_extent+0x550/0x550 [btrfs] [75721.756145] ? btrfs_get_32+0xea/0x2d0 [btrfs] [75721.762852] ? btrfs_get_32+0xea/0x2d0 [btrfs] [75721.769520] ? push_leaf_left+0x420/0x620 [btrfs] [75721.776431] ? memcpy+0x4e/0x60 [75721.781931] split_leaf+0x433/0x12d0 [btrfs] [75721.788392] ? btrfs_get_token_32+0x580/0x580 [btrfs] [75721.795636] ? push_for_double_split.isra.0+0x420/0x420 [btrfs] [75721.803759] ? leaf_space_used+0x15d/0x1a0 [btrfs] [75721.811156] btrfs_search_slot+0x1bc3/0x2790 [btrfs] [75721.818300] ? lock_downgrade+0x7c0/0x7c0 [75721.824411] ? free_extent_buffer.part.0+0x107/0x200 [btrfs] [75721.832456] ? split_leaf+0x12d0/0x12d0 [btrfs] [75721.839149] ? free_extent_buffer.part.0+0x14f/0x200 [btrfs] [75721.846945] ? free_extent_buffer+0x13/0x20 [btrfs] [75721.853960] ? btrfs_release_path+0x4b/0x190 [btrfs] [75721.861429] btrfs_csum_file_blocks+0x85c/0x1500 [btrfs] [75721.869313] ? rcu_read_lock_sched_held+0x16/0x80 [75721.876085] ? lock_release+0x552/0xf80 [75721.881957] ? btrfs_del_csums+0x8c0/0x8c0 [btrfs] [75721.888886] ? __kasan_check_write+0x14/0x20 [75721.895152] ? do_raw_read_unlock+0x44/0x80 [75721.901323] ? _raw_write_lock_irq+0x60/0x80 [75721.907983] ? btrfs_global_root+0xb9/0xe0 [btrfs] [75721.915166] ? btrfs_csum_root+0x12b/0x180 [btrfs] [75721.921918] ? btrfs_get_global_root+0x820/0x820 [btrfs] [75721.929166] ? _raw_write_unlock+0x23/0x40 [75721.935116] ? unpin_extent_cache+0x1e3/0x390 [btrfs] [75721.942041] btrfs_finish_ordered_io.isra.0+0xa0c/0x1dc0 [btrfs] [75721.949906] ? try_to_wake_up+0x30/0x14a0 [75721.955700] ? btrfs_unlink_subvol+0xda---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.12", + "versionEndExcluding": "5.15.64", + "matchCriteriaId": "92EA4525-905D-42E6-9B6F-2A7B3C6DD68A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/096e8eb9639b342bc35f9b741cf05e26d0106e92", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1aa262c1d056551dd1246115af8b7e351184deae", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6cb4b96df97082a54634ba02196516919cda228c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f7b12a62f008a3041f42f2426983e59a6a0a3c59", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50091.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50091.json index 959ea1cc009..617b2f75882 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50091.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50091.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50091", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:38.277", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:11:04.667", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: locking/csd_lock: Cambiar csdlock_debug de early_param a __setup El par\u00e1metro csdlock_debug kernel-boot es analizado por la funci\u00f3n early_param() csdlock_debug(). Si se establece, csdlock_debug() invoca static_branch_enable() para habilitar la funci\u00f3n csd_lock_wait, que desencadena un p\u00e1nico en arm64 para kernels compilados con CONFIG_SPARSEMEM=y y CONFIG_SPARSEMEM_VMEMMAP=n. Con CONFIG_SPARSEMEM_VMEMMAP=n, se llama a __nr_to_section en static_key_enable() y devuelve NULL, lo que resulta en una desreferencia NULL porque mem_section se inicializa solo m\u00e1s tarde en sparse_init(). Esto tambi\u00e9n representa un problema para PowerPC, ya que las funciones early_param() se invocan antes que jump_label_init(), lo que tambi\u00e9n provoca fallos en static_key_enable(). Estos fallos generan la advertencia \"Clave est\u00e1tica 'xxx' usada antes de la llamada a jump_label_init()\". Por lo tanto, early_param es demasiado pronto para que csd_lock_wait ejecute static_branch_enable(), por lo que se cambia a __setup para solucionarlos." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.13", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "508EFB53-3AD2-405D-9368-107BD8BEA339" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/05de9e2e33b1625c71aee69e353fe906dd2be88a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9c9b26b0df270d4f9246e483a44686fca951a29c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b480d1e9a8c11ecc1c99dc01814b28e3103bd0a0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d2cbdbe22b5f190055d2d0ae92e7454479343a30", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50092.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50092.json index 443e42a4805..c5cccec4098 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50092.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50092.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50092", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:38.383", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:50:03.477", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,131 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dm thin: correcci\u00f3n del fallo de uso tras liberaci\u00f3n en dm_sm_register_threshold_callback Se informa de un fallo por inyecci\u00f3n en el dispositivo de metadatos del grupo: ERROR: KASAN: uso tras liberaci\u00f3n en dm_pool_register_metadata_threshold+0x40/0x80 Lectura de tama\u00f1o 8 en la direcci\u00f3n ffff8881b9d50068 por la tarea dmsetup/950 CPU: 7 PID: 950 Comm: dmsetup Contaminado: GW 5.19.0-rc6 #1 Nombre del hardware: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-1.fc33 01/04/2014 Rastreo de llamadas: dump_stack_lvl+0x34/0x44 print_address_description.constprop.0.cold+0xeb/0x3f4 kasan_report.cold+0xe6/0x147 dm_pool_register_metadata_threshold+0x40/0x80 pool_ctr+0xa0a/0x1150 dm_table_add_target+0x2c8/0x640 table_load+0x1fd/0x430 ctl_ioctl+0x2c4/0x5a0 dm_ctl_ioctl+0xa/0x10 __x64_sys_ioctl+0xb3/0xd0 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 Esto se puede reproducir f\u00e1cilmente usando: echo offline > /sys/block/sda/device/state dd if=/dev/zero of=/dev/mapper/thin bs=4k count=10 dmsetup load pool --table \"0 20971520 thin-pool /dev/sda /dev/sdb 128 0 0\" Si falla una confirmaci\u00f3n de metadatos, la transacci\u00f3n se cancelar\u00e1 y los mapas de espacio de metadatos se destruir\u00e1n. Si se recarga la tabla DM para este thin-pool fallido, se ejecutar\u00e1 un \"use after-free\" en dm_sm_register_threshold_callback (llamado desde dm_pool_register_metadata_threshold). Solucione esto en dm_pool_register_metadata_threshold() devolviendo el error -EINVAL si el thin-pool est\u00e1 en modo de fallo. Tambi\u00e9n se produce un error en pool_ctr() con un nuevo mensaje de error: \"Error al registrar el umbral de metadatos\"." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.10", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "A7F6121D-9871-4870-B5CF-93C2A1147348" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/05cef0999b3208b5a6ede1bfac855139e4de55ef", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1a199fa9217d28511ff88529238fd9980ea64cf3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3534e5a5ed2997ca1b00f44a0378a075bd05e8a3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5e2cf705155a1514be3c96ea664a9cd356998ee7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e4dbe24f4bfd8377e7ba79fdcdb7c4d6eb1c6790", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f83131a3071a0b61a4d7dca70f95adb3ffad920e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50093.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50093.json index bbaefa8bbc7..5aa7762a1ae 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50093.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50093.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50093", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:38.497", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:44:34.470", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,131 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: iommu/vt-d: evitar acceso no v\u00e1lido a memoria mediante node_online(NUMA_NO_NODE) KASAN informa: [ 4.668325][ T0] ERROR: KASAN: acceso a memoria salvaje en dmar_parse_one_rhsa (arch/x86/include/asm/bitops.h:214 arch/x86/include/asm/bitops.h:226 include/asm-generic/bitops/instrumented-non-atomic.h:142 include/linux/nodemask.h:415 drivers/iommu/intel/dmar.c:497) [ 4.676149][ T0] Lectura de tama\u00f1o 8 en la direcci\u00f3n 1fffffff85115558 por el intercambiador de tareas/0/0 [ 4.683454][ T0] [ 4.685638][ T0] CPU: 0 PID: 0 Comm: swapper/0 No contaminado 5.19.0-rc3-00004-g0e862838f290 #1 [ 4.694331][ T0] Nombre del hardware: Supermicro SYS-5018D-FN4T/X10SDV-8C-TLN4F, BIOS 1.1 02/03/2016 [ 4.703196][ T0] Rastreo de llamadas: [ 4.706334][ T0] [ 4.709133][ T0] ? dmar_parse_one_rhsa (arch/x86/include/asm/bitops.h:214 arch/x86/include/asm/bitops.h:226 include/asm-generic/bitops/instrumented-non-atomic.h:142 include/linux/nodemask.h:415 drivers/iommu/intel/dmar.c:497) despu\u00e9s de convertir el tipo del primer argumento (@nr, n\u00famero de bit) de arch_test_bit() de `long` a `unsigned long`[0]. Bajo ciertas condiciones (por ejemplo, cuando ACPI NUMA est\u00e1 deshabilitado a trav\u00e9s de la l\u00ednea de comandos), pxm_to_node() puede devolver %NUMA_NO_NODE (-1). Es un n\u00famero 'm\u00e1gico' v\u00e1lido de nodo NUMA, pero no un n\u00famero de bit v\u00e1lido para usar en bitops. node_online() finalmente desciende a test_bit() sin verificar la entrada, asumiendo que est\u00e1 del lado del llamador (lo cual podr\u00eda ser \u00fatil para tareas cr\u00edticas para el rendimiento). All\u00ed, -1 se convierte en %ULONG_MAX, lo que genera un \u00edndice de matriz desproporcionado al calcular la posici\u00f3n del bit en memoria. Por ahora, agregue una verificaci\u00f3n expl\u00edcita de que @node no sea %NUMA_NO_NODE antes de llamar a test_bit(). La l\u00f3gica real no cambi\u00f3 en absoluto. [0] https://github.com/norov/linux/commit/0e862838f290147ea9c16db852d8d494b552d38d" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.33", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "52DD05C0-6039-4C3B-AA9B-4FC12B72BCEB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0b4c0003aeda32a600f95df53b2848da8a5aa3fa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5659efdadf04b56707d58c1b758df16d2e0eff2c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/73ce2046e04ad488cecc66757c36cbe1bdf089d4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b0b0b77ea611e3088e9523e60860f4f41b62b235", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b12304984654d8e58a2b22ff94c4410906d6267f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c2304c50f4d94f56c2e326f25c9dc8cf2ba6f5fa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50094.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50094.json index 1e13db8e803..57306fcdb28 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50094.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50094.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50094", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:38.620", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:45:05.577", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,173 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: spmi: trace: se corrige el acceso fuera de los l\u00edmites de la pila en las funciones de seguimiento de SPMI. Las funciones trace_spmi_write_begin() y trace_spmi_read_end() llaman a memcpy() con una longitud de \"len + 1\". Esto provoca la lectura de un byte adicional m\u00e1s all\u00e1 del final del b\u00fafer especificado. Corrija este acceso fuera de los l\u00edmites de la pila utilizando una longitud de \"len\". Aqu\u00ed hay un registro de KASAN que muestra el problema: ERROR: KASAN: pila fuera de los l\u00edmites en trace_event_raw_event_spmi_read_end+0x1d0/0x234 Lectura de tama\u00f1o 2 en la direcci\u00f3n ffffffc0265b7540 por la tarea thermal@2.0-ser/1314 ... Seguimiento de llamadas: dump_backtrace+0x0/0x3e8 show_stack+0x2c/0x3c dump_stack_lvl+0xdc/0x11c print_address_description+0x74/0x384 kasan_report+0x188/0x268 kasan_check_range+0x270/0x2b0 memcpy+0x90/0xe8 trace_event_raw_event_spmi_read_end+0x1d0/0x234 spmi_read_cmd+0x294/0x3ac spmi_ext_register_readl+0x84/0x9c regmap_spmi_ext_read+0x144/0x1b0 [regmap_spmi] _regmap_raw_read+0x40c/0x754 regmap_raw_read+0x3a0/0x514 regmap_bulk_read+0x418/0x494 adc5_gen3_poll_wait_hs+0xe8/0x1e0 [qcom_spmi_adc5_gen3] ... __arm64_sys_read+0x4c/0x60 invoke_syscall+0x80/0x218 el0_svc_common+0xec/0x1c8 ... la direcci\u00f3n ffffffc0265b7540 se encuentra en la pila de tareas thermal@2.0-ser/1314 en el desplazamiento 32 en el marco: adc5_gen3_poll_wait_hs+0x0/0x1e0 [qcom_spmi_adc5_gen3] este marco tiene 1 objeto: [32, 33) 'status' Estado de la memoria alrededor de la direcci\u00f3n con errores: ffffffc0265b7400: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 fffffc0265b7480: 04 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 >fffffc0265b7500: 00 00 00 00 f1 f1 f1 f1 01 f3 f3 f3 00 00 00 00 ^ ffffffc0265b7580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffffffc0265b7600: f1 f1 f1 f1 01 f2 07 f2 f2 f2 01 f3 00 00 00 00 ====================================================================" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.3", + "versionEndExcluding": "4.9.326", + "matchCriteriaId": "CA31F53B-AA1E-486E-8FFA-876484D8D2D9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.291", + "matchCriteriaId": "3BBC7E43-6161-4F21-977C-5BB7792C6C94" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1e0ca3d809c36ad3d1f542917718fc22ec6316e7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2af28b241eea816e6f7668d1954f15894b45d7e3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/37690cb8662cec672cacda19e6e4fd2ca7b13f0b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/504090815c1ad3fd3fa34618b54d706727f8911c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/80f7c93e573ea9f524924bb529c2af8cb28b1c43", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ac730c72bddc889f5610d51d8a7abf425e08da1a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bcc1b6b1ed3f42ed25858c1f1eb24a2f741db93f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dc6033a7761254e5a5ba7df36b64db787a53313c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dd02510fb43168310abfd0b9ccf49993a722fb91", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50095.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50095.json index 58f206facb4..3417bd0f092 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50095.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50095.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50095", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:38.740", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:45:38.987", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: posix-cpu-timers: Limpiar los temporizadores de CPU antes de liberarlos durante la ejecuci\u00f3n. el commit 55e8c8eb2c7b (\"posix-cpu-timers: Almacenar una referencia a un PID, no a una tarea\") comenz\u00f3 a buscar tareas por PID al eliminar un temporizador de CPU. Cuando un subproceso no l\u00edder llama a execve, intercambia los PID con el proceso l\u00edder. Luego, al llamar a exit_itimers, posix_cpu_timer_del no puede encontrar la tarea porque el temporizador a\u00fan apunta al PID anterior. Esto significa que los temporizadores armados no se desarmar\u00e1n; es decir, no se eliminar\u00e1n de timerqueue_list. exit_itimers liberar\u00e1 su memoria y, cuando esa lista se procese posteriormente, se generar\u00e1 un Use-After-Free. Limpie los temporizadores de la tarea desprovista de subprocesos antes de liberarlos. Esto evita un Use-After-Free reportado." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.7", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "674AABE4-BC3E-4530-9717-5DFE7AB70A3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/541840859ace9c2ccebc32fa9e376c7bd3def490", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9e255ed238fc67058df87b0388ad6d4b2ef3a2bd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b2fc1723eb65abb83e00d5f011de670296af0b28", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e362359ace6f87c201531872486ff295df306d13", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e8cb6e8fd9890780f1bfcf5592889e1b879e779c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50138.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50138.json index f270115bb6f..59871d1309c 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50138.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50138.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50138", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:43.733", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:59:18.993", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/qedr: Se corrige una posible fuga de memoria en __qedr_alloc_mr(). __qedr_alloc_mr() asigna un fragmento de memoria para \"mr->info.pbl_table\" con init_mr_info(). Cuando fallan rdma_alloc_tid() y rdma_register_tid(), se libera \"mr\" mientras que \"mr->info.pbl_table\" no, lo que provoca una fuga de memoria. Deber\u00edamos liberar \"mr->info.pbl_table\" con qedr_free_pbl() cuando se produzca el error para corregir la fuga de memoria." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.9", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "F3E419A0-9181-43F0-96F3-F0ACC786F80A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/07ba048df306dc93fc4d2ef670b9e24644a2069f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/79ce50dddaf28b5c57911ecc80a2be17a0b17f83", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7e647a8d5fc0a2c8e0f36f585a6388286a25bb15", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b3236a64ddd125a455ef5b5316c1b9051b732974", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b4c9f7db9f0148423557539af0fdf513338efe08", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50139.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50139.json index fbe7822eaaf..066624a51a9 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50139.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50139.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50139", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:43.840", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:57:43.417", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: aspeed-vhub: se corrige el error de p\u00e9rdida de recuento de referencias en ast_vhub_init_desc() Deber\u00edamos llamar a of_node_put() para la referencia devuelta por of_get_child_by_name() que ha aumentado el recuento de referencias." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.8", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "7F0BB136-1853-4980-83C3-1A437B8ADF3B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0e0a40c803643f4edc30f0660f2f3bea4d57a99a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/220fafb4ed04187e9c17be4152da5a7f2ffbdd8c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3503305225ca24c3229414c769323fb8bf39b4bf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4070f3c83cd28267f469a59751480ad39435f26a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e6db5780c2bf6e23be7b315809ef349b4b4f2213", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50140.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50140.json index 7071bd1fece..412fc8d8ff8 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50140.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50140.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50140", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:43.953", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:56:32.010", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,159 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: memstick/ms_block: Se corrige una fuga de memoria: la variable 'erased_blocks_bitmap' nunca se libera. Dado que se asigna al mismo tiempo que 'used_blocks_bitmap', es probable que deba liberarse tambi\u00e9n simult\u00e1neamente. Agregue el bitmap_free() correspondiente en msb_data_clear()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.12", + "versionEndExcluding": "4.14.291", + "matchCriteriaId": "F6BB493B-6F4D-4080-95E2-CE277937CD80" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/16e07966638717416abf45393d6a80a5a1034429", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/37958980eb4cd71ae594ace093c11b6a91e165e8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/39be95d1ff7b44c1e969af72ba9da7332dfcc1da", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/54eb7a55be6779c4d0c25eaf5056498a28595049", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9260a154b3b5e387dbceec7c0ac441470646bc6f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/961d7d12080fe70847f944d656e36cd0dd0214ba", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9d8b911fe3c3ed788c66edba7c90e32a4a7a5f53", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/efd675246aec045507b9425c67b548cc2d782d8f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50141.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50141.json index 3476eadc714..011d72eeb60 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50141.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50141.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50141", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:44.070", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-18T02:55:48.250", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,159 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mmc: sdhci-of-esdhc: Se corrige la fuga de recuento de referencias en esdhc_signal_voltage_switch. of_find_matching_node() devuelve un puntero de nodo con el recuento de referencias incrementado. Debemos usar of_node_put() cuando ya no sea necesario. Se ha a\u00f1adido la funci\u00f3n of_node_put() que falta para evitar la fuga de recuento de referencias. of_node_put() comprueba el puntero nulo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.12", + "versionEndExcluding": "4.14.291", + "matchCriteriaId": "69ECE5FE-8E66-477B-BFF3-96913B44F446" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "6C47CDE3-B039-4AE5-B8E4-1DC820E473FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "B1C63D19-C08C-4308-A848-B2523C9275BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/352377cf74710bc3368dddf78f17210dfe456933", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4c472a2c9ed6ea9d272268d7f484d4303c549f1a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/547db1dd98d1815574ebea7358015a17199a93bc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8b902840f6a3584f702bcb59834691b30f3d7c5a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a63d5d01e83b984b1b9c7ae8fc9c8c93697a3820", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b074f1e8060836baeb0ee91181f4194b9a0ee16a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b305475df756256a186623f0991d05a816de881a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b5899a3e2f783a27b268e38d37f9b24c71bddf45", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-127xx/CVE-2025-12792.json b/CVE-2025/CVE-2025-127xx/CVE-2025-12792.json new file mode 100644 index 00000000000..1f4d9cfcef1 --- /dev/null +++ b/CVE-2025/CVE-2025-127xx/CVE-2025-12792.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-12792", + "sourceIdentifier": "4ac701fe-44e9-4bcd-9585-dd6449257611", + "published": "2025-11-18T01:15:44.287", + "lastModified": "2025-11-18T01:15:44.287", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC (Transparency, Consent, and Control) permissions assigned to Canva." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "4ac701fe-44e9-4bcd-9585-dd6449257611", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N", + "baseScore": 3.2, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.5, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "4ac701fe-44e9-4bcd-9585-dd6449257611", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-276" + } + ] + } + ], + "references": [ + { + "url": "https://trust.canva.com/?tcuUid=1e77a34b-f586-450b-b30d-b6e17d15b443", + "source": "4ac701fe-44e9-4bcd-9585-dd6449257611" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13223.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13223.json index 7c0b52df781..4983a915110 100644 --- a/CVE-2025/CVE-2025-132xx/CVE-2025-13223.json +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13223.json @@ -2,7 +2,7 @@ "id": "CVE-2025-13223", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-17T23:15:45.140", - "lastModified": "2025-11-17T23:15:45.140", + "lastModified": "2025-11-18T02:15:43.070", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13224.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13224.json index b15e14ed132..6f2d0c4c3a5 100644 --- a/CVE-2025/CVE-2025-132xx/CVE-2025-13224.json +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13224.json @@ -2,7 +2,7 @@ "id": "CVE-2025-13224", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-17T23:15:47.920", - "lastModified": "2025-11-17T23:15:47.920", + "lastModified": "2025-11-18T02:15:44.147", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13226.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13226.json index 9c01985f4b7..64e47ddac43 100644 --- a/CVE-2025/CVE-2025-132xx/CVE-2025-13226.json +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13226.json @@ -2,7 +2,7 @@ "id": "CVE-2025-13226", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-18T00:15:47.593", - "lastModified": "2025-11-18T00:15:47.593", + "lastModified": "2025-11-18T02:15:44.323", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13227.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13227.json index f22b1131752..2cd207ea6cc 100644 --- a/CVE-2025/CVE-2025-132xx/CVE-2025-13227.json +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13227.json @@ -2,7 +2,7 @@ "id": "CVE-2025-13227", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-18T00:15:47.770", - "lastModified": "2025-11-18T00:15:47.770", + "lastModified": "2025-11-18T02:15:44.500", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13228.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13228.json index 742277722fe..564aba4cf71 100644 --- a/CVE-2025/CVE-2025-132xx/CVE-2025-13228.json +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13228.json @@ -2,7 +2,7 @@ "id": "CVE-2025-13228", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-18T00:15:47.913", - "lastModified": "2025-11-18T00:15:47.913", + "lastModified": "2025-11-18T02:15:44.680", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13229.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13229.json index cf66c47cb5a..c6224da2cf4 100644 --- a/CVE-2025/CVE-2025-132xx/CVE-2025-13229.json +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13229.json @@ -2,7 +2,7 @@ "id": "CVE-2025-13229", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-18T00:15:48.063", - "lastModified": "2025-11-18T00:15:48.063", + "lastModified": "2025-11-18T02:15:44.853", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13230.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13230.json index 0a51ae8b738..a8430c798a3 100644 --- a/CVE-2025/CVE-2025-132xx/CVE-2025-13230.json +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13230.json @@ -2,7 +2,7 @@ "id": "CVE-2025-13230", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-18T00:15:48.230", - "lastModified": "2025-11-18T00:15:48.230", + "lastModified": "2025-11-18T02:15:45.030", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-542xx/CVE-2025-54236.json b/CVE-2025/CVE-2025-542xx/CVE-2025-54236.json index 12a8df4cca7..e2a6468a73e 100644 --- a/CVE-2025/CVE-2025-542xx/CVE-2025-54236.json +++ b/CVE-2025/CVE-2025-542xx/CVE-2025-54236.json @@ -2,7 +2,7 @@ "id": "CVE-2025-54236", "sourceIdentifier": "psirt@adobe.com", "published": "2025-09-09T14:15:46.563", - "lastModified": "2025-11-17T02:00:02.217", + "lastModified": "2025-11-18T02:00:01.897", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ diff --git a/CVE-2025/CVE-2025-606xx/CVE-2025-60699.json b/CVE-2025/CVE-2025-606xx/CVE-2025-60699.json index f84140befdb..b22728ba359 100644 --- a/CVE-2025/CVE-2025-606xx/CVE-2025-60699.json +++ b/CVE-2025/CVE-2025-606xx/CVE-2025-60699.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60699", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-13T20:15:52.773", - "lastModified": "2025-11-14T17:16:09.640", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-18T01:51:46.930", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,18 +47,57 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:totolink:a950rg_firmware:5.9c.4592_b20191022:*:*:*:*:*:*:*", + "matchCriteriaId": "70C0D0B7-21D0-4369-866E-0D0C3B9DE481" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:totolink:a950rg:-:*:*:*:*:*:*:*", + "matchCriteriaId": "2F20C691-11F3-4882-89C7-500C097C0938" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A950RG/2.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Broken Link" + ] }, { "url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A950RG/CVE-2025-60699.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.totolink.net/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60702.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60702.json index abf02b74927..50e17b00714 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60702.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60702.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60702", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-13T20:15:52.923", - "lastModified": "2025-11-14T17:16:14.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-18T01:49:21.647", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,18 +47,57 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:totolink:a950rg_firmware:5.9c.4592_b20191022:*:*:*:*:*:*:*", + "matchCriteriaId": "70C0D0B7-21D0-4369-866E-0D0C3B9DE481" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:totolink:a950rg:-:*:*:*:*:*:*:*", + "matchCriteriaId": "2F20C691-11F3-4882-89C7-500C097C0938" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A950RG/1.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Broken Link" + ] }, { "url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A950RG/CVE-2025-60702.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.totolink.net/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-65xx/CVE-2025-6599.json b/CVE-2025/CVE-2025-65xx/CVE-2025-6599.json new file mode 100644 index 00000000000..99a821aad71 --- /dev/null +++ b/CVE-2025/CVE-2025-65xx/CVE-2025-6599.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-6599", + "sourceIdentifier": "security@zyxel.com.tw", + "published": "2025-11-18T02:15:45.210", + "lastModified": "2025-11-18T02:15:45.210", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an attacker to perform Slowloris\u2011style denial\u2011of\u2011service (DoS) attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt access to the web management interface, while other networking services remain unaffected." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@zyxel.com.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@zyxel.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + } + ] + } + ], + "references": [ + { + "url": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-uncontrolled-resource-consumption-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-11-18-2025", + "source": "security@zyxel.com.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-86xx/CVE-2025-8693.json b/CVE-2025/CVE-2025-86xx/CVE-2025-8693.json new file mode 100644 index 00000000000..d750012239c --- /dev/null +++ b/CVE-2025/CVE-2025-86xx/CVE-2025-8693.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-8693", + "sourceIdentifier": "security@zyxel.com.tw", + "published": "2025-11-18T02:15:45.410", + "lastModified": "2025-11-18T02:15:45.410", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A post-authentication command injection vulnerability in the \"priv\" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authenticated attacker to execute operating system (OS) commands on an affected device." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@zyxel.com.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security@zyxel.com.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-uncontrolled-resource-consumption-and-command-injection-vulnerabilities-in-certain-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-security-routers-and-wireless-extenders-11-18-2025", + "source": "security@zyxel.com.tw" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 132d10c04e2..6cedcdf5435 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-18T00:55:11.686607+00:00 +2025-11-18T03:00:12.959030+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-18T00:15:48.823000+00:00 +2025-11-18T02:59:18.993000+00:00 ``` ### Last Data Feed Release @@ -27,48 +27,53 @@ Repository synchronizes with the NVD every 2 hours. Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest) ```plain -2025-11-17T01:00:02.140710+00:00 +2025-11-18T01:00:02.134661+00:00 ``` ### Total Number of included CVEs ```plain -318517 +318520 ``` ### CVEs added in the last Commit -Recently added CVEs: `21` +Recently added CVEs: `3` -- [CVE-2025-13223](CVE-2025/CVE-2025-132xx/CVE-2025-13223.json) (`2025-11-17T23:15:45.140`) -- [CVE-2025-13224](CVE-2025/CVE-2025-132xx/CVE-2025-13224.json) (`2025-11-17T23:15:47.920`) -- [CVE-2025-13226](CVE-2025/CVE-2025-132xx/CVE-2025-13226.json) (`2025-11-18T00:15:47.593`) -- [CVE-2025-13227](CVE-2025/CVE-2025-132xx/CVE-2025-13227.json) (`2025-11-18T00:15:47.770`) -- [CVE-2025-13228](CVE-2025/CVE-2025-132xx/CVE-2025-13228.json) (`2025-11-18T00:15:47.913`) -- [CVE-2025-13229](CVE-2025/CVE-2025-132xx/CVE-2025-13229.json) (`2025-11-18T00:15:48.063`) -- [CVE-2025-13230](CVE-2025/CVE-2025-132xx/CVE-2025-13230.json) (`2025-11-18T00:15:48.230`) -- [CVE-2025-13304](CVE-2025/CVE-2025-133xx/CVE-2025-13304.json) (`2025-11-17T23:15:48.357`) -- [CVE-2025-13305](CVE-2025/CVE-2025-133xx/CVE-2025-13305.json) (`2025-11-17T23:15:49.183`) -- [CVE-2025-13306](CVE-2025/CVE-2025-133xx/CVE-2025-13306.json) (`2025-11-18T00:15:48.380`) -- [CVE-2025-13323](CVE-2025/CVE-2025-133xx/CVE-2025-13323.json) (`2025-11-18T00:15:48.603`) -- [CVE-2025-13325](CVE-2025/CVE-2025-133xx/CVE-2025-13325.json) (`2025-11-18T00:15:48.823`) -- [CVE-2025-31361](CVE-2025/CVE-2025-313xx/CVE-2025-31361.json) (`2025-11-17T23:15:49.643`) -- [CVE-2025-31649](CVE-2025/CVE-2025-316xx/CVE-2025-31649.json) (`2025-11-17T23:15:51.267`) -- [CVE-2025-32089](CVE-2025/CVE-2025-320xx/CVE-2025-32089.json) (`2025-11-17T23:15:51.943`) -- [CVE-2025-36460](CVE-2025/CVE-2025-364xx/CVE-2025-36460.json) (`2025-11-17T23:15:52.497`) -- [CVE-2025-36461](CVE-2025/CVE-2025-364xx/CVE-2025-36461.json) (`2025-11-17T23:15:52.763`) -- [CVE-2025-36462](CVE-2025/CVE-2025-364xx/CVE-2025-36462.json) (`2025-11-17T23:15:53.337`) -- [CVE-2025-36463](CVE-2025/CVE-2025-364xx/CVE-2025-36463.json) (`2025-11-17T23:15:53.687`) -- [CVE-2025-36553](CVE-2025/CVE-2025-365xx/CVE-2025-36553.json) (`2025-11-17T23:15:54.353`) -- [CVE-2025-7711](CVE-2025/CVE-2025-77xx/CVE-2025-7711.json) (`2025-11-17T23:15:56.713`) +- [CVE-2025-12792](CVE-2025/CVE-2025-127xx/CVE-2025-12792.json) (`2025-11-18T01:15:44.287`) +- [CVE-2025-6599](CVE-2025/CVE-2025-65xx/CVE-2025-6599.json) (`2025-11-18T02:15:45.210`) +- [CVE-2025-8693](CVE-2025/CVE-2025-86xx/CVE-2025-8693.json) (`2025-11-18T02:15:45.410`) ### CVEs modified in the last Commit -Recently modified CVEs: `2` +Recently modified CVEs: `28` -- [CVE-2025-34034](CVE-2025/CVE-2025-340xx/CVE-2025-34034.json) (`2025-11-17T23:15:52.240`) -- [CVE-2025-65073](CVE-2025/CVE-2025-650xx/CVE-2025-65073.json) (`2025-11-17T23:15:55.277`) +- [CVE-2022-50085](CVE-2022/CVE-2022-500xx/CVE-2022-50085.json) (`2025-11-18T02:32:24.627`) +- [CVE-2022-50086](CVE-2022/CVE-2022-500xx/CVE-2022-50086.json) (`2025-11-18T02:26:30.307`) +- [CVE-2022-50087](CVE-2022/CVE-2022-500xx/CVE-2022-50087.json) (`2025-11-18T02:21:38.713`) +- [CVE-2022-50088](CVE-2022/CVE-2022-500xx/CVE-2022-50088.json) (`2025-11-18T02:19:06.667`) +- [CVE-2022-50089](CVE-2022/CVE-2022-500xx/CVE-2022-50089.json) (`2025-11-18T02:18:06.127`) +- [CVE-2022-50090](CVE-2022/CVE-2022-500xx/CVE-2022-50090.json) (`2025-11-18T02:17:16.440`) +- [CVE-2022-50091](CVE-2022/CVE-2022-500xx/CVE-2022-50091.json) (`2025-11-18T02:11:04.667`) +- [CVE-2022-50092](CVE-2022/CVE-2022-500xx/CVE-2022-50092.json) (`2025-11-18T02:50:03.477`) +- [CVE-2022-50093](CVE-2022/CVE-2022-500xx/CVE-2022-50093.json) (`2025-11-18T02:44:34.470`) +- [CVE-2022-50094](CVE-2022/CVE-2022-500xx/CVE-2022-50094.json) (`2025-11-18T02:45:05.577`) +- [CVE-2022-50095](CVE-2022/CVE-2022-500xx/CVE-2022-50095.json) (`2025-11-18T02:45:38.987`) +- [CVE-2022-50138](CVE-2022/CVE-2022-501xx/CVE-2022-50138.json) (`2025-11-18T02:59:18.993`) +- [CVE-2022-50139](CVE-2022/CVE-2022-501xx/CVE-2022-50139.json) (`2025-11-18T02:57:43.417`) +- [CVE-2022-50140](CVE-2022/CVE-2022-501xx/CVE-2022-50140.json) (`2025-11-18T02:56:32.010`) +- [CVE-2022-50141](CVE-2022/CVE-2022-501xx/CVE-2022-50141.json) (`2025-11-18T02:55:48.250`) +- [CVE-2025-13223](CVE-2025/CVE-2025-132xx/CVE-2025-13223.json) (`2025-11-18T02:15:43.070`) +- [CVE-2025-13224](CVE-2025/CVE-2025-132xx/CVE-2025-13224.json) (`2025-11-18T02:15:44.147`) +- [CVE-2025-13226](CVE-2025/CVE-2025-132xx/CVE-2025-13226.json) (`2025-11-18T02:15:44.323`) +- [CVE-2025-13227](CVE-2025/CVE-2025-132xx/CVE-2025-13227.json) (`2025-11-18T02:15:44.500`) +- [CVE-2025-13228](CVE-2025/CVE-2025-132xx/CVE-2025-13228.json) (`2025-11-18T02:15:44.680`) +- [CVE-2025-13229](CVE-2025/CVE-2025-132xx/CVE-2025-13229.json) (`2025-11-18T02:15:44.853`) +- [CVE-2025-13230](CVE-2025/CVE-2025-132xx/CVE-2025-13230.json) (`2025-11-18T02:15:45.030`) +- [CVE-2025-54236](CVE-2025/CVE-2025-542xx/CVE-2025-54236.json) (`2025-11-18T02:00:01.897`) +- [CVE-2025-60699](CVE-2025/CVE-2025-606xx/CVE-2025-60699.json) (`2025-11-18T01:51:46.930`) +- [CVE-2025-60702](CVE-2025/CVE-2025-607xx/CVE-2025-60702.json) (`2025-11-18T01:49:21.647`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 73bf71afe49..68bf8f5a3d5 100644 --- a/_state.csv +++ b/_state.csv @@ -214969,22 +214969,22 @@ CVE-2022-50076,0,0,a73b160056ed5ba414abf124246c1b77be57c5ee30cac536afefc6cd2715f CVE-2022-50077,0,0,1a287fa95924b4a15f11ee07f8f4ca60ee37aebf92072d72ab4c094f8ce2d784,2025-11-17T19:27:18.587000 CVE-2022-50078,0,0,b06a5a41341879264898a21ca23f9ca9f2f0dfc0b0f9a1bf8d64cb1cce9ddc8c,2025-11-17T19:24:43.193000 CVE-2022-50079,0,0,898eebecbdc548f5e7e8181dc05bd484c0e68b5ada209574317131a862349900,2025-11-17T19:22:59.370000 -CVE-2022-50080,0,0,846f44a054cc3b1a24a7382500c0d56a3def40b1f49685c593e9a1c8cf0ea84c,2025-06-18T13:47:40.833000 +CVE-2022-50080,0,1,8ff601586a7a5d69e9a8b74480497b2b7327647a9bbc2bc565a11b2bef580b73,2025-11-18T02:39:52.973000 CVE-2022-50081,0,0,abd54f82f2e8b6566b2b23df8e651a6c00a0c78caea0523ad39bc5269501f7a6,2025-06-18T14:15:24.150000 -CVE-2022-50082,0,0,8331090a0c9d8b33d60107fa58f1a681eccf2d4620a31ab3e91d455b5db43e1f,2025-06-18T13:47:40.833000 +CVE-2022-50082,0,1,23819cf5a1d014e7f4ada0528f199a534d22bdfab0302614a12850727eca0249,2025-11-18T02:38:31.403000 CVE-2022-50083,0,0,81ab5eb517f562b688f73e4deb91d741c06d918fb18535762b46423ac227e4fa,2025-08-20T15:15:31.010000 -CVE-2022-50084,0,0,630de0453ec83af6fb97b7004e93c6be625d8b0f4eb0a3d4133bd3ce32bff378,2025-06-18T13:47:40.833000 -CVE-2022-50085,0,0,606f638b717440ef8f40d2b52e8f1f67f01f0b3ac399d8d5b59b9e4f118cb0f5,2025-06-18T13:47:40.833000 -CVE-2022-50086,0,0,cbfac06d12306ed5ecf4596380d814e7d91013c836b5a248f86fe416f9c060d0,2025-06-18T13:47:40.833000 -CVE-2022-50087,0,0,62b43aeaff26f894ed9e54d6d2dda287f547fe70d4a6497f0b44d9f35cdbec16,2025-06-18T13:47:40.833000 -CVE-2022-50088,0,0,2180ccfe5eb784f1089fe111badb7c31325d1412e3663bd66f86049575e73b39,2025-06-18T13:47:40.833000 -CVE-2022-50089,0,0,eb16a79a0a91ab93da3d7ecb5ba14f910023510b4f276434312da269cb3190a2,2025-06-18T13:47:40.833000 -CVE-2022-50090,0,0,0b6b716018f19363353747b74875031fa74bf81b54351efde8f17f1040835df0,2025-06-18T13:47:40.833000 -CVE-2022-50091,0,0,3098a775c2d7137611419e7d3731fa01c1f97e17b56bf360d8b32e43fd6d3892,2025-06-18T13:47:40.833000 -CVE-2022-50092,0,0,ac58adb64ad48169a314470f118265b2d65542e6d3608f5c10854abcb47b6d90,2025-06-18T13:47:40.833000 -CVE-2022-50093,0,0,a9b49630125d28eab3a0eb383257114b51ad546876a90353dd8c920fa4d649ef,2025-06-18T13:47:40.833000 -CVE-2022-50094,0,0,e83532e20088877cfdf51160b226ff472b0abceef50ddb5c3c90a4f40cd1e6f5,2025-06-18T13:47:40.833000 -CVE-2022-50095,0,0,b7fa20484719daba44192ecd005ac3f8e4fd08bbab244e893f55d7163ee49f48,2025-06-18T13:47:40.833000 +CVE-2022-50084,0,1,77b60762a9bb57914b0a3057e6d7a4caeee46973e6e5e0e7e5ea5e4596c284db,2025-11-18T02:33:04.573000 +CVE-2022-50085,0,1,37384f69ad2bf8ae2e0dd957774b923d2fb3c7e0f5244c2f5304e3bb15678fe5,2025-11-18T02:32:24.627000 +CVE-2022-50086,0,1,7276b9364a34e04c574c1c1939159e395ed33a5756e5d65cafac82b210f9918f,2025-11-18T02:26:30.307000 +CVE-2022-50087,0,1,02ca185fe4446fd1d38736d76716d9497c0ab9b9424ef7ace3ffad094102775a,2025-11-18T02:21:38.713000 +CVE-2022-50088,0,1,8cedf4b0a38f02005ebc59e23ed51a22641c7f2f8464faeaa4ce653480219292,2025-11-18T02:19:06.667000 +CVE-2022-50089,0,1,3b0b5587456d4e890b2499e9110fd01f23b409ecb8dbcabf3241e9165d047ebc,2025-11-18T02:18:06.127000 +CVE-2022-50090,0,1,a42f1c472bea2cd344b42d97f83bd30e8493a79fc261ca287d7110662307fa3a,2025-11-18T02:17:16.440000 +CVE-2022-50091,0,1,4a2a12dd6e06cf880b0dc3b774decae7e5c9acc05dfb485bcc5bacb95c7f2405,2025-11-18T02:11:04.667000 +CVE-2022-50092,0,1,880707d04b9c1dbed4f6e5e0b168ec78709a93b1e2e04e9c663627d323b25b2e,2025-11-18T02:50:03.477000 +CVE-2022-50093,0,1,760e26524d82c4dcb9b6e3ebe191946db07002ff32f48055bab2120a214132d6,2025-11-18T02:44:34.470000 +CVE-2022-50094,0,1,3150a8523a7263cff4f6c1bcdd1568089bf83a90a5f87ce87c148be36d73d36f,2025-11-18T02:45:05.577000 +CVE-2022-50095,0,1,4e8a7eca9b90b771eae65d7f4051c6fb217102b95820f69dddf7482dae996fdd,2025-11-18T02:45:38.987000 CVE-2022-50096,0,0,03fd62851375990f877b755f0cfe6ef7075e634a34a47a44b7ab8f0544c54166,2025-06-18T13:47:40.833000 CVE-2022-50097,0,0,f354d5aa664e47b6814a64f4003306f71b7e6326eae629d4ecf035f30c21a2aa,2025-06-18T13:47:40.833000 CVE-2022-50098,0,0,eab317d96b45ae6abaec0e3a58d9db9e356f241afc3827efc7261001e2e8f47f,2025-06-18T13:47:40.833000 @@ -215027,10 +215027,10 @@ CVE-2022-50134,0,0,323bf0738652e9429446d4f2d2fd79f46a94a4cae680746bc5660d6c7b900 CVE-2022-50135,0,0,b8f34d1e8dc0bda0d2f16d17c342105d26a094eeb50199f0ad1c175274f690bd,2025-06-18T13:47:40.833000 CVE-2022-50136,0,0,5dc64768ce44f7f978654094e9130548fe1b8654433b30d206ea8f4319bd97b2,2025-06-18T13:47:40.833000 CVE-2022-50137,0,0,a40be02f78d8a69ec6b697436a37ce4b1982e132be8f322009ca3702b582c0af,2025-06-18T13:47:40.833000 -CVE-2022-50138,0,0,43ba1fb7a4c43c89b9888e9dc07463d4afc0ad05417fc2b9a056e1c624863026,2025-06-18T13:47:40.833000 -CVE-2022-50139,0,0,bd80fd7dbe740082038cc7fe5af90fb65b736151e77879bda27119bc936826c2,2025-06-18T13:47:40.833000 -CVE-2022-50140,0,0,4c34008ec90a083d6ac3d9af19775ee6e4c3759bc71a9e7501731b153f68d24c,2025-06-18T13:47:40.833000 -CVE-2022-50141,0,0,c41cdb87e25e2e015cccb8b2cd6d508a627f10a24a80b024c1e84243cbafbc2c,2025-06-18T13:47:40.833000 +CVE-2022-50138,0,1,84cfc4e5beb8c6e04434ffb72d1fee9a57479f64e05fd418307932d03874fa62,2025-11-18T02:59:18.993000 +CVE-2022-50139,0,1,a60c55a217f872044b245a27b7baf431a53c9797f38653b15f1b5c3a0a17f3ad,2025-11-18T02:57:43.417000 +CVE-2022-50140,0,1,753f84a931ee447a2985d770a6e2e879901452999e9c4beac3bf908386d88142,2025-11-18T02:56:32.010000 +CVE-2022-50141,0,1,7033b5653b5cda1a6410fe0ed7ef971bc505737fb74fbe04cd9c8bb4d89ec985,2025-11-18T02:55:48.250000 CVE-2022-50142,0,0,f582eaade95021905ff239058be1d9fd4dfcd3aa15b247d9fbc3e98602ecd9e7,2025-06-18T13:47:40.833000 CVE-2022-50143,0,0,6ba1754cc8e280ee5ce745e57b3c367344f3b2ea623b304781d6a6849c9201ec,2025-06-18T13:47:40.833000 CVE-2022-50144,0,0,7f1cdb0f518d038ae2a470a6a4ee17365cf89878f5bf854200553fa8480a9da2,2025-06-18T13:47:40.833000 @@ -287821,6 +287821,7 @@ CVE-2025-12788,0,0,5897353fcb1a07ce7d85073be83648dd1b1f535b7c684be2011efe0aa0e79 CVE-2025-12789,0,0,7c47dde9ca502d8aca5e0157b580ee06d5affd1bc86ab6211dfea8f14e650749,2025-11-12T16:20:22.257000 CVE-2025-1279,0,0,81b425d3af391d6b47292396dd129cbf7aa0312666c7090cda5b04e25a332e30,2025-04-29T13:52:28.490000 CVE-2025-12790,0,0,32dae10fe8cbfc3f834324194dddc4ee4bcca04b572289398babdff4d245e46f,2025-11-12T16:20:22.257000 +CVE-2025-12792,1,1,0a17201813907e4e40bf1e1263f4ae97177ab7fe6824b145c5e9d82897c6a8e7,2025-11-18T01:15:44.287000 CVE-2025-12808,0,0,fe1796695c5d88205051329946a0c8077ea1490f01c73d7003b668ba6de325f9,2025-11-10T16:30:59.457000 CVE-2025-12813,0,0,9a2f3b66496ecc6aaf76d6e8054aee4f10e055a89f44476be425dd404cb7c212,2025-11-12T16:19:34.210000 CVE-2025-12815,0,0,f2a9fecaa52901be55f696803952d09bedd901fcfdb47f693ebcf6393f6d9fab,2025-11-06T19:45:09.883000 @@ -288026,14 +288027,14 @@ CVE-2025-13210,0,0,5f2f75ab801b7189926028f2948a8d26aaed1c32f1313d1f4639af57eb390 CVE-2025-13216,0,0,013f75cc228fc0eaf4c6f7b46eff467f105d446f1b41e284e77858c655332eab,2025-11-17T19:16:17.270000 CVE-2025-1322,0,0,44942778a32b04e3546dd86fb81e0e8dd33a2d074585a18f158028a80293af84,2025-03-13T13:01:31.400000 CVE-2025-13221,0,0,036cd262d699ee352d444bf40050e8b18de8921bd0c53f207271b2659540522e,2025-11-15T20:15:42.863000 -CVE-2025-13223,1,1,76cd697f9b09594b6abea1cfb44f083f9badf479f39684a82fd7573605bb2400,2025-11-17T23:15:45.140000 -CVE-2025-13224,1,1,a7bd56d22923ed082385a72abc2cce5df91a08d1bf767c8a14330d4f51c7533f,2025-11-17T23:15:47.920000 -CVE-2025-13226,1,1,b0124891b046b9ca23d28db439b7130baaa879212de57c88fbeb3c02ace47205,2025-11-18T00:15:47.593000 -CVE-2025-13227,1,1,e1b56b107e92921825a1f608f904af71d5cbb2a5266c8b549ff0a425682cb25d,2025-11-18T00:15:47.770000 -CVE-2025-13228,1,1,6707158a6a6e0d3c2b8812a7893b599712f8171e5472ea5157b575f7f267776a,2025-11-18T00:15:47.913000 -CVE-2025-13229,1,1,546d07fb5fbfa8d2a9f2eaf8ca00eefe6681e582d368aa6935f6c4bf6f192d19,2025-11-18T00:15:48.063000 +CVE-2025-13223,0,1,c94b5b467a6013dd9fc7f85bfd4fdd442d05bef6e07b0e202afb9e6a18f306b6,2025-11-18T02:15:43.070000 +CVE-2025-13224,0,1,430f6f22d66e2539ae51ac8aef13f4f03c05910d089edf5ad6edabcef7c18636,2025-11-18T02:15:44.147000 +CVE-2025-13226,0,1,9889cee0b5fa7cff7d6a93bac039670f535041e3fe20265698617d5891401be1,2025-11-18T02:15:44.323000 +CVE-2025-13227,0,1,577731ec8498f9d4c04f42372f1a4233ddc6f2715877bdffe6e6cbce2685b578,2025-11-18T02:15:44.500000 +CVE-2025-13228,0,1,4358a895919cda780148a4db01ded3604d529ed1494a8a9da99c2c58e6ff14cc,2025-11-18T02:15:44.680000 +CVE-2025-13229,0,1,6717b0e0fa754caa41f1766c0b65ba8df8c95f614664a17e4b35efbdf4e5980d,2025-11-18T02:15:44.853000 CVE-2025-1323,0,0,b0f3bc5e76c99481e26517f66c3e5ae3fc1e8b63a6b6098651bbb6d69ab76e54,2025-03-12T16:24:59.343000 -CVE-2025-13230,1,1,1873507cac1a5bccb44ddf2938f36fa03db8a92c6e1f15f528b86a3e87aa7274,2025-11-18T00:15:48.230000 +CVE-2025-13230,0,1,db636e57111ca518e7225bb011571d92c94650d4a7dbab9ab1e45f6b1a2e0838,2025-11-18T02:15:45.030000 CVE-2025-13232,0,0,60d36bfa00b32744e172ab0bf2834254bc4edd807c597c52fff9151a25a82a2a,2025-11-16T01:15:42.850000 CVE-2025-13233,0,0,e28605a30f533c6b0d782352e611500b3e2a1d63468c300047762d7e0b775f2e,2025-11-16T03:15:58.547000 CVE-2025-13234,0,0,ae3717b0745c0e0e89ab079a6f43fc9d1ce4b01efe0c5311586e29e406a89033,2025-11-16T03:15:59.907000 @@ -288107,15 +288108,15 @@ CVE-2025-13300,0,0,bfa0f0d96684800c3e9cbb6e5796eb1ebf55876d12237f4735c3d5df1432a CVE-2025-13301,0,0,c9c08459f3e71208a2c887e205410865350007f172bd19640ece9d7b5fd5b5f8,2025-11-17T21:15:56.290000 CVE-2025-13302,0,0,7b04f82f1d069ea87611b17c1b2173a029ad479a27c763df7870a0cd5c8adee6,2025-11-17T22:15:45 CVE-2025-13303,0,0,dd4097c5f2ae7f3e3051a542c987f15268f26c517f53da5d14ebe3abe96afdce,2025-11-17T22:15:45.220000 -CVE-2025-13304,1,1,d71939f458c8ce5692955d18df030da876f6658e241328df17a1d6b07d7f88bf,2025-11-17T23:15:48.357000 -CVE-2025-13305,1,1,10a526beee317fca08471579a8df9d407f2adfdb9bbe57c90d1ef66a7ae6fea8,2025-11-17T23:15:49.183000 -CVE-2025-13306,1,1,605af848c3edd6544f0fa8c393540e3a65ca4df1de93dbedb5337c41c442a07c,2025-11-18T00:15:48.380000 +CVE-2025-13304,0,0,d71939f458c8ce5692955d18df030da876f6658e241328df17a1d6b07d7f88bf,2025-11-17T23:15:48.357000 +CVE-2025-13305,0,0,10a526beee317fca08471579a8df9d407f2adfdb9bbe57c90d1ef66a7ae6fea8,2025-11-17T23:15:49.183000 +CVE-2025-13306,0,0,605af848c3edd6544f0fa8c393540e3a65ca4df1de93dbedb5337c41c442a07c,2025-11-18T00:15:48.380000 CVE-2025-1331,0,0,ac1f8f259ae4049d984db2b1f82b3fe42914e4f2655a2a9597856cd03f33bc72,2025-06-05T14:29:03.180000 CVE-2025-13310,0,0,65a222268c4e4a4c8f4726bea30425eea064a4fd28d4f8cf26987c7d9156d640,2025-11-17T15:15:49.020000 CVE-2025-13319,0,0,3320030300d2370c09743a52cb16c8301421cf37eb6af85440701b1a4313d072,2025-11-17T17:15:48.550000 CVE-2025-1332,0,0,651a32ff0ce1e4c178256e4e7fa7755a14b2351228c1c710a764ce12601a0c92,2025-03-04T17:17:39.640000 -CVE-2025-13323,1,1,1ab2ddf19de5ed7c6b6cd04bf547a14fcf094cb560de90ad606594363597b76c,2025-11-18T00:15:48.603000 -CVE-2025-13325,1,1,f63dfce8211c38b5bf1c4b37023fd3f8874de769aceba15985fafd9242e864f9,2025-11-18T00:15:48.823000 +CVE-2025-13323,0,0,1ab2ddf19de5ed7c6b6cd04bf547a14fcf094cb560de90ad606594363597b76c,2025-11-18T00:15:48.603000 +CVE-2025-13325,0,0,f63dfce8211c38b5bf1c4b37023fd3f8874de769aceba15985fafd9242e864f9,2025-11-18T00:15:48.823000 CVE-2025-1333,0,0,4ee465b51a4a069cb257fed9914f5e7ef1c93ab3d9ee351936b316e7a69cce78,2025-08-25T17:27:30.640000 CVE-2025-1334,0,0,68abe056ab92b6fe06d69183ba7a4c9642dbc3d5cbc6dfff5a401743920f909c,2025-08-12T20:06:55.380000 CVE-2025-1335,0,0,564364b2f61e7747ac590848e7f26fbef6a8ec644fa7858b0ae594d6c732e9b5,2025-02-28T19:56:39.220000 @@ -297720,7 +297721,7 @@ CVE-2025-31357,0,0,d5f696c99047c7628b400d67b1dfeddb779fa58a54a1c3189ec3c48396179 CVE-2025-31359,0,0,8df0d306911f994e130c68154d7fedae1054b74b4ebb7bf49486a388a5647ec4,2025-07-02T14:47:25.547000 CVE-2025-3136,0,0,7ff98ba975809b4188d01f2e115e9c45862abffa34dc2aa33ad7cd01529a1bca,2025-05-28T15:59:54.130000 CVE-2025-31360,0,0,60011c03a64da2bfbdf7fe41e953c6e3c0394a955c052c196eb9910f855b4492,2025-11-12T16:11:47.503000 -CVE-2025-31361,1,1,4c27c6c6d97a71c0b8ee4cf995632126d9ae7535463b75af641e234068c9edd9,2025-11-17T23:15:49.643000 +CVE-2025-31361,0,0,4c27c6c6d97a71c0b8ee4cf995632126d9ae7535463b75af641e234068c9edd9,2025-11-17T23:15:49.643000 CVE-2025-31362,0,0,29e714bdac918165d1f72d9b66a1fef39fc1fe95242e3501acdc160e75ffc0c8,2025-04-11T15:39:52.920000 CVE-2025-31363,0,0,8e4e376fc6137e5d7f7f6f9f4760801b17297d636edc77a5dbc364f4f5b5c082,2025-09-29T21:24:36.903000 CVE-2025-31365,0,0,30c72268fbd1be1af8e3fd7d6cd4631999d2dd849fb9b02faa75829402d02788,2025-10-15T17:30:38.220000 @@ -298020,7 +298021,7 @@ CVE-2025-31641,0,0,74f2d472c03da6f55fcc5070d5a61148872d3ce81a5c7f7f28e251768bfd7 CVE-2025-31644,0,0,1e9f90c58b18945ff531f3d4b8f92235ae5c92208756d1d32d2dace379dc5baf,2025-10-21T18:42:36.423000 CVE-2025-31645,0,0,199f0a1031a890a861e3038d3cf3ceb6e4762a9667d02d068c52ddcdb8a9b0d8,2025-11-12T16:19:34.210000 CVE-2025-31647,0,0,274bf6de9206d6a7d64c2957d24e5a6168f916634cbae5faf55b15ba7c6cc20f,2025-11-12T16:19:34.210000 -CVE-2025-31649,1,1,8fc2ca53a98d1e4f87f201c7324ac25b6946acb1d35b54a28dea47750b5759fd,2025-11-17T23:15:51.267000 +CVE-2025-31649,0,0,8fc2ca53a98d1e4f87f201c7324ac25b6946acb1d35b54a28dea47750b5759fd,2025-11-17T23:15:51.267000 CVE-2025-3165,0,0,2e02105ce99f3564dd878406ce8c0b7835d84010bc4a7c0c3ba88c3a6192f2c5,2025-04-07T14:18:34.453000 CVE-2025-31650,0,0,a1e4a84557da4c2397878c26c0531fec0aedc4af282e8e738a9d3ba124299d58,2025-11-03T20:18:25.740000 CVE-2025-31651,0,0,7bdfc914af34d7857b2cfb5604ea704b72e3c18c8b56d3105a45985fc88bf0d2,2025-11-03T20:18:25.927000 @@ -298408,7 +298409,7 @@ CVE-2025-3208,0,0,467c67ee8369e3212684108818f80d158b2f4485a63647368e73220138caff CVE-2025-32080,0,0,476f6d5f06fbb960cd093fb065cf3625046fd24147d1c1820490adfc187e1786,2025-04-15T18:39:43.697000 CVE-2025-32086,0,0,d0bade7264b46f83fe2a5d139b1b3223b79fc5dc67e85adcf5c6764965b156cc,2025-11-03T18:15:54.380000 CVE-2025-32088,0,0,d90c13b1269767156711794e96eedbf6c56ea58a0144931bd1b1ac739e782ddb,2025-11-12T16:19:34.210000 -CVE-2025-32089,1,1,1df64f6a0714682c6b972ac1790259bafc5d86909868b3a7271b2eadf199b028,2025-11-17T23:15:51.943000 +CVE-2025-32089,0,0,1df64f6a0714682c6b972ac1790259bafc5d86909868b3a7271b2eadf199b028,2025-11-17T23:15:51.943000 CVE-2025-3209,0,0,67195a835acffe5135c80a3d8ad9cc228d886a4b156f30c4554a13ec4114273f,2025-05-28T16:07:37.803000 CVE-2025-32091,0,0,089f1c131091c2d8fe9bdf2d974b94e272c9c079878881afdf901d685535eb87,2025-11-12T16:19:34.210000 CVE-2025-32093,0,0,f931012036e0d0ab9d1dc10666dbf9a98ddcb4f48a184cc67ee48846c25ce091,2025-10-02T15:02:34.290000 @@ -299500,7 +299501,7 @@ CVE-2025-34030,0,0,f524795d494d41af1abb43d588204e0e445079de2112dc398bcbfb7219de5 CVE-2025-34031,0,0,6bf70afa9fd7e4883a3056085b529f16f53d66f074bfd547e5aff82763cd9a53,2025-07-09T19:09:45.097000 CVE-2025-34032,0,0,34eb0f034d68833c8252da458cb101629cb653d2827215b0f2de33387f43aad0,2025-07-09T19:09:33.977000 CVE-2025-34033,0,0,eb8c4dd348449421f7845abb5d3a2703f5d6f8e9fe6295b6cf7177e93e571ec3,2025-07-09T19:09:18.207000 -CVE-2025-34034,0,1,753e2c53abd55e9985cedb292796bab69c960c97aaf9c2138a9858c439254a6d,2025-11-17T23:15:52.240000 +CVE-2025-34034,0,0,753e2c53abd55e9985cedb292796bab69c960c97aaf9c2138a9858c439254a6d,2025-11-17T23:15:52.240000 CVE-2025-34035,0,0,c84fa2261eb1a1945780bbc971e24bd4d5340ea90d11d40a39e1aa7fdc35ba8a,2025-11-17T22:15:45.440000 CVE-2025-34036,0,0,a29ec8d5bd16777087bc89cecbfeb1a47d8e202f1e95b40adb5d53b8a1bef6d2,2025-11-17T22:15:45.647000 CVE-2025-34037,0,0,12f14a4e0d1d300b62fa41478afd10978c47584bdcd7b802d3ade9baed61771b,2025-11-17T22:15:45.833000 @@ -300167,10 +300168,10 @@ CVE-2025-3642,0,0,9a99db6ce3ab857c638481981796b8bb86466054494cfad599dfa17b31f25f CVE-2025-3643,0,0,db4a817d5595d43ba13b38bd7e11f9d6c80005bbf9fcf6a2ebaa0c56c29fb2d3,2025-06-24T15:59:06.960000 CVE-2025-3644,0,0,f1d3a2cc0630da2bfe6b911805add87f5ed88ebe821a21e42ba4157464e79869,2025-06-24T15:59:15.037000 CVE-2025-3645,0,0,48c3ac09b5fd5d28e3a4d280d7aad525ec8252d94ae15558d651ddc80792bc56,2025-06-24T15:59:22.560000 -CVE-2025-36460,1,1,76b19e6a57f02b0bf3c6730697eb1f2ba9b7ea3e6b8c6004086fbf443aa28a60,2025-11-17T23:15:52.497000 -CVE-2025-36461,1,1,5fd8dc67b6ce5124efc4797f98a71bff1b508aab5a3a1e3f22558ac0497d503f,2025-11-17T23:15:52.763000 -CVE-2025-36462,1,1,11abcdeb75d3c5d82e8f1bbb433a7c9388b853c7e2f774f366ac4273fcacd786,2025-11-17T23:15:53.337000 -CVE-2025-36463,1,1,273fa0cfe8a801e243e114f8067d20d2c001c1e1b370ada9bcd884ec373434de,2025-11-17T23:15:53.687000 +CVE-2025-36460,0,0,76b19e6a57f02b0bf3c6730697eb1f2ba9b7ea3e6b8c6004086fbf443aa28a60,2025-11-17T23:15:52.497000 +CVE-2025-36461,0,0,5fd8dc67b6ce5124efc4797f98a71bff1b508aab5a3a1e3f22558ac0497d503f,2025-11-17T23:15:52.763000 +CVE-2025-36462,0,0,11abcdeb75d3c5d82e8f1bbb433a7c9388b853c7e2f774f366ac4273fcacd786,2025-11-17T23:15:53.337000 +CVE-2025-36463,0,0,273fa0cfe8a801e243e114f8067d20d2c001c1e1b370ada9bcd884ec373434de,2025-11-17T23:15:53.687000 CVE-2025-3647,0,0,05feb832de88f59f5d87aaeea08b6a453322dc136553c900a8d76e92e9a2cdb7,2025-06-24T15:59:32.860000 CVE-2025-3648,0,0,99e2b4e2e6e24f1938f35e28fdb5248e17f5d0be6f8e25d2924aa6e1bbc880d2,2025-07-08T17:15:34.267000 CVE-2025-3649,0,0,df5be861cb9901de2ff346df6053edd181ced31f9d06ef10ebd9788e09b37197,2025-06-05T14:27:28.437000 @@ -300193,7 +300194,7 @@ CVE-2025-36537,0,0,fc5a08fdfa77d0aeb87f05a014617c8ee5a221c302cbc25a3d0850b6d16ca CVE-2025-36539,0,0,c0894e36c5a4bf5ae06107887e6e7bc4869da6fc581815f366cc900be9ce130c,2025-06-16T12:32:18.840000 CVE-2025-36546,0,0,60a222525c4f95fd07c9422c3fd292d0957b5f15d60d73ce1eeb2d51f2137892,2025-10-21T18:42:57.403000 CVE-2025-36548,0,0,e0ed5f1c73ff4b093ae92ca0ecec648f183aecf632c777a700933739b02fa9c4,2025-11-03T20:18:30.717000 -CVE-2025-36553,1,1,dfc666b642e1f482cab70fbb0e90b6894ae3f26b3113626b9eb4732f2a8bcdd8,2025-11-17T23:15:54.353000 +CVE-2025-36553,0,0,dfc666b642e1f482cab70fbb0e90b6894ae3f26b3113626b9eb4732f2a8bcdd8,2025-11-17T23:15:54.353000 CVE-2025-36557,0,0,c5a4e0d07fc4c1aa0caa3839109dd2084c7221b8fd6965740a267c6ec5263acd,2025-08-06T18:14:59.580000 CVE-2025-36558,0,0,f7ba1efb73da33ba35418104474d3de926b1549af2f93d6130fc139c04b0fc60,2025-05-02T13:52:51.693000 CVE-2025-36560,0,0,d6ca43d57a38d62b48def91cb2d07e30c58d6e35247e19fc255a6cf99bdc5f85,2025-09-30T19:14:19.060000 @@ -310014,7 +310015,7 @@ CVE-2025-54232,0,0,74738f8e59094d5441631bc47d8d83de85a54bd8947c605920a0f71b3a56a CVE-2025-54233,0,0,9b14013bc2511806dfc06793d5702178c0c1db7ab1a06628f77055eb730a98f2,2025-08-14T01:05:54.053000 CVE-2025-54234,0,0,15b722fe53a2a83df32f09430aa080a833a389e22b3cffdb61b9dcca09579de8,2025-11-06T22:23:13.170000 CVE-2025-54235,0,0,4c6e47535464eb5cac8c8712d883f6108cec41e891c1af59388fea6e2afee65a,2025-08-13T18:14:43.213000 -CVE-2025-54236,0,0,83b3187a13e92fbfb486508d07edcb49eec9e92e636d64e2be4213b909de1e53,2025-11-17T02:00:02.217000 +CVE-2025-54236,0,1,16c9f8aa3297ab8194699a40390c4b457799c50f8760a47cd6f7533be9e4cf97,2025-11-18T02:00:01.897000 CVE-2025-54237,0,0,f86cd71bb4266b1e9b06486eb24aa138c30d53f2219596e78679b21c5750c179,2025-09-18T13:38:39.070000 CVE-2025-54238,0,0,a36be64074d7d47b6190447bb92bfe557d52fcc438e1a77896e2e199d15e1917,2025-08-14T01:06:18.920000 CVE-2025-54239,0,0,9ad52d97af19a42000e5faa35316c0d255739384a3fc936923a9b36b4d0dd5ae,2025-09-12T14:29:06.223000 @@ -313697,11 +313698,11 @@ CVE-2025-60695,0,0,26ae8a0a4453f1440d4092336bf81ca6ca930fb176d9b27eb08580b2fa620 CVE-2025-60696,0,0,f2b5bd0d7edb11847bbc09e0adcf13a633109ad2ee90f36055235c7927eeb52b,2025-11-14T16:42:03.187000 CVE-2025-60697,0,0,6a47c4ac2334415a32290afbf5661522e68a78d239f3fe64b514cfa687deb4c3,2025-11-17T12:29:07.143000 CVE-2025-60698,0,0,ab622c3feaa7c8aba55acac5ea29b9d35940a8399e37fa6418dae193cce2f0f2,2025-11-17T12:28:54.113000 -CVE-2025-60699,0,0,a2c2323384d477c6902a617cbcf39b6253460fd369da3d695fd787699c5bcc84,2025-11-14T17:16:09.640000 +CVE-2025-60699,0,1,2d1fd09b7e7225c15b4120cbefd2b97deeba4e16519b0192e504d4dc255a8708,2025-11-18T01:51:46.930000 CVE-2025-6070,0,0,c5bf4414dfa4d281aa3a990feec25cc21fddd34f58ddd67c6eaf8ae460160cc5,2025-06-16T12:32:18.840000 CVE-2025-60700,0,0,d030ffffb84a5d859aef1574a896724df71a4a0cb6765c00237b65a300240c62,2025-11-17T12:28:40.547000 CVE-2025-60701,0,0,5e54480458675cc55df08f3c70c945cdf735ba24beb97dce3a8b070faf528b1d,2025-11-17T12:28:31.610000 -CVE-2025-60702,0,0,46cb06676e2a34501d98e8d8ec78412dda517902c49ade10fecc71146371e7a8,2025-11-14T17:16:14.210000 +CVE-2025-60702,0,1,19e1fe5f92cc812f11052935d949a1d6ad6a61e8aa79314c5c4912cd31e1d90e,2025-11-18T01:49:21.647000 CVE-2025-60703,0,0,098da10d1b1557c048aa4cf3651dab9620538711c29d986131df0ad5cab9d21d,2025-11-17T17:47:19.307000 CVE-2025-60704,0,0,653c1c4e9be2111f48c182b393ad3774e6cf4c844e2e032b2284471360ebf9a8,2025-11-17T17:47:15.507000 CVE-2025-60705,0,0,7b1656a748e2aa6963c50b3bd8f74b7b06e1f3b0fe2c996557a5e9ad11e89307,2025-11-17T17:47:11.453000 @@ -315469,7 +315470,7 @@ CVE-2025-6507,0,0,4879312405dc64d09260c91f5c46e6eeab37503e93b4914450ef9452b0fbe7 CVE-2025-65070,0,0,f448085f4de7ea0b353d6128a191ee6528137163bfc2caad243c69ba708c6e43,2025-11-15T04:15:57.483000 CVE-2025-65071,0,0,e56be4598f471d5cff2f43c3a018bbc199e9eeb1e2f0937667d83392f2f3ed36,2025-11-15T04:15:57.573000 CVE-2025-65072,0,0,ebf75e8acb0584e0175e0768ce68e5d3ee6116c357be488a4d6b449c8c0b140b,2025-11-15T04:15:57.667000 -CVE-2025-65073,0,1,396c5f6dd51b46f8f4c3e4bb25e40feaacf8715d9a7d6f3478f6b97d1a940aff,2025-11-17T23:15:55.277000 +CVE-2025-65073,0,0,396c5f6dd51b46f8f4c3e4bb25e40feaacf8715d9a7d6f3478f6b97d1a940aff,2025-11-17T23:15:55.277000 CVE-2025-65083,0,0,563a6efcc1e65157a4c4d10ac1d71e01b6e8ba8053d5223539f834ae51ab1666,2025-11-17T16:15:51.007000 CVE-2025-6509,0,0,0a77d8561ce4da22774ea5cb68ff62f299428ec7e8554fc3b65b6353cd49cdad,2025-06-23T20:16:21.633000 CVE-2025-6510,0,0,6ac07d683db7d6e624d6f059776301bd59aa18a2ba615c569f28edfcbd6187b8,2025-07-16T17:00:44.380000 @@ -315546,6 +315547,7 @@ CVE-2025-6585,0,0,adaeb58e3fc188fc0fb17f0bed47098a1fe39a13212ef121d20fafda41da95 CVE-2025-6586,0,0,a2a31cfde8036131bb5246db3ae2c6f244bcc91b479b47ff60159df89464e964,2025-07-09T17:50:13.847000 CVE-2025-6587,0,0,94e040daa08ba5c9e3932753930ce394b84353f61fda95c1801a18e9a0bd6347,2025-07-03T15:13:53.147000 CVE-2025-6588,0,0,7fc631224ca630583edbb28a4a53a4fc8fe52d2b2d0fedc02ad161b03f35330d,2025-07-25T15:29:19.837000 +CVE-2025-6599,1,1,4209e71fdbff1788af4333fe6b7f4bbb8df52bc7e253cb92b78ecf60c7da2bfb,2025-11-18T02:15:45.210000 CVE-2025-6600,0,0,52f2838d1bed1fd512519a975ef79c7715790a6dc012c106cd06473e42be0e88,2025-09-05T14:59:47.533000 CVE-2025-6601,0,0,974df0cb9a7237b45bbcc24d6cf0cde87cb7ba50e707b3b0bc3a93f5747be6dd,2025-10-28T13:38:59.890000 CVE-2025-6603,0,0,94e8918af653fece9803c6dda129968de5b58a553aefbcdcb849847b69658ab4,2025-06-26T18:57:43.670000 @@ -316534,7 +316536,7 @@ CVE-2025-7705,0,0,5b1fcc4532b39aa50dd0660d63fd3bd79c828edec1c70c3ca9d8f1d759cadf CVE-2025-7707,0,0,830917d4c225b26ee82741ee745632b24d30d329d37f5fc99200ef6fe93de581,2025-10-21T14:48:53.780000 CVE-2025-7709,0,0,8b247db6cbd1f1d53e950b2987b925252a4da7cd971db264081c7ca165875c1f,2025-11-04T22:16:44.200000 CVE-2025-7710,0,0,feb0a9b16e6a6ce31b82d2fbb852982eef5e61125a79efb137aa8b46a9169a39,2025-08-04T15:06:15.833000 -CVE-2025-7711,1,1,71336924dc4aa317ca8432c76985248816f7495ebb32e1d77fecb60d599747e3,2025-11-17T23:15:56.713000 +CVE-2025-7711,0,0,71336924dc4aa317ca8432c76985248816f7495ebb32e1d77fecb60d599747e3,2025-11-17T23:15:56.713000 CVE-2025-7712,0,0,7d0a595c3951498183ab506b98863a3cb2863bc0f369965ea5f27723867cfdeb,2025-07-17T21:15:50.197000 CVE-2025-7715,0,0,a1d9d0c2306e562d2e60e3370ffa79348e855599cf7ba6535e7d8a99fc9acb17,2025-08-26T20:50:11.553000 CVE-2025-7716,0,0,d5a736f2ea3703e113339439e4144a8fcc149405f259d7e3c063a69dec5a8baf,2025-08-26T20:49:57.420000 @@ -317398,6 +317400,7 @@ CVE-2025-8689,0,0,39b2a55821ceb287712996e7a9fa786d26fbed98b7809792fdf712375f9497 CVE-2025-8690,0,0,3db85430ee782133063375a266b4371c0d099476013469127d5375685e2b8915,2025-08-12T14:25:33.177000 CVE-2025-8691,0,0,21b1a621913aa0bdbdf380d892f205df2facd24acd3c02a6bcd82dbf92acb44a,2025-09-11T17:14:10.147000 CVE-2025-8692,0,0,9475139fbd8f780867d9b55d2e8645aa01c85945e4be99edec73592242ff2af2,2025-09-11T17:14:10.147000 +CVE-2025-8693,1,1,3176ea162eb22f692fb21589a442a6b81fa58fb1928fe9069298a4d5c160ce3b,2025-11-18T02:15:45.410000 CVE-2025-8695,0,0,b4411021665f636bf394599ff61d80f93fe79357376074b70d0f8909c81499ef,2025-09-05T17:47:10.303000 CVE-2025-8696,0,0,fc0014fc8b1c5044127398d8b1419b0c8f4fb49c03c8df1f765d1be6d5a7f76c,2025-11-04T22:16:45.083000 CVE-2025-8697,0,0,e11f8d7745953c13d4daebbe11a61f9e97b7f1f4e7d79fdc6d20c160e7bcc438,2025-08-07T21:26:37.453000