admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-30 02:40:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-10-21T14:00:15.754164+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-10-21 14:04:02 +00:00
1 parent ef799189c0
commit 36279ab4ce
80 files changed
+6509 -603
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2022/CVE-2022-485xx/CVE-2022-48503.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-48503",
"sourceIdentifier": "[email protected]",
"published": "2023-08-14T23:15:10.490",
"lastModified": "2025-10-21T01:00:01.900",
"vulnStatus": "Modified",
"lastModified": "2025-10-21T12:45:30.383",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
CVE-2022/CVE-2022-493xx/CVE-2022-49308.json
+130 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49308",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:07.607",
"lastModified": "2025-02-26T07:01:07.607",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:19:21.033",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,158 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: extcon: Modificar el dispositivo extcon para que se cree despu\u00e9s de que se configuren los datos del controlador. Actualmente, alguien puede invocar el sysfs como state_show() de forma intermitente antes de que se realice dev_set_drvdata(). Y puede ser una causa de errores del kernel debido a que edev es Null en ese momento. Por lo tanto, se modific\u00f3 el registro del controlador despu\u00e9s de configurar los datos del controlador. - Ups, el backtrace. Rastreo inverso: [] (mostrar estado) desde [] (mostrar atributo de desarrollo) [] (mostrar atributo de desarrollo) desde [] (mostrar secuencia de sysfs_kf_seq) [] (mostrar secuencia de sysfs_kf_seq) desde [] (mostrar secuencia de kernfs) [] (mostrar secuencia de kernfs) desde [] (leer secuencia) [] (leer secuencia) desde [] (leer secuencia de kernfs_fop) [] (kernfs_fop_read) desde [] (__vfs_read) [] (__vfs_read) desde [] (vfs_read) [] (vfs_read) desde [] (ksys_read) [] (ksys_read) desde [] (sys_read) [] (sys_read) desde [] (__sys_trace_return)"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.14.283",
"matchCriteriaId": "42074657-A7B6-4740-88B7-67B440018C1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.247",
"matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.122",
"matchCriteriaId": "1B42AA01-44D8-4572-95E6-FF8E374CF9C5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.47",
"matchCriteriaId": "FC042EE3-4864-4325-BE0B-4BCDBF11AA61"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.15",
"matchCriteriaId": "53E7AA2E-2FB4-45CA-A22B-08B4EDBB51AD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.4",
"matchCriteriaId": "FA6D643C-6D6A-4821-8A8D-B5776B8F0103"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/033ec4e7e59ae5e1ef1e8c10bc6552926044ed1c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/35ff1ac55d301efb3f467cf5426faaeb3452994b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/368e68ad6da4317fc4170e8d92b51c13d1bfe7a7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5dcc2afe716d69f5112ce035cb14f007461ff189",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/6e721f3ad0535b24f19a62420f4da95212cf069c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/abf3b222614f49f98e606fccdd269161c0d70204",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cb81ea998c461868d1168411a867d8ffee12f23f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d472c78cc82999d07bd09193a6718016ce9cd386",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49333.json
+113 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49333",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:10.090",
"lastModified": "2025-02-26T07:01:10.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:19:07.810",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,19 +15,126 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/mlx5: E-Switch, emparejar solo dispositivos compatibles con OFFLOADS El emparejamiento con devcom solo es posible en dispositivos que admiten LAG. Filtrar en funci\u00f3n de las capacidades de retraso. Esto soluciona un problema en el que se llamaba a mlx5_get_next_phys_dev() sin mantener el bloqueo de la interfaz. Este problema se encontr\u00f3 cuando el commit bc4c2f2e0179 (\"net/mlx5: Lag, filtrar dispositivos no compatibles\") agreg\u00f3 una afirmaci\u00f3n que verifica que se mantenga el bloqueo de la interfaz. ADVERTENCIA: CPU: 9 PID: 1706 en drivers/net/ethernet/mellanox/mlx5/core/dev.c:642 mlx5_get_next_phys_dev+0xd2/0x100 [mlx5_core] M\u00f3dulos vinculados en: mlx5_vdpa vringh vhost_iotlb vdpa mlx5_ib mlx5_core xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink xt_addrtype iptable_nat nf_nat br_netfilter rpcrdma rdma_ucm ib_iser libiscsi scsi_transport_iscsi rdma_cm iw_cm ib_umad ib_ipoib ib_cm ib_uverbs ib_core overlay fuse [\u00faltima descarga: mlx5_core] CPU: 9 PID: 1706 Comm: devlink No contaminado 5.18.0-rc7+ #11 Nombre del hardware: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 01/04/2014 RIP: 0010:mlx5_get_next_phys_dev+0xd2/0x100 [mlx5_core] C\u00f3digo: 02 00 75 48 48 8b 85 80 04 00 00 5d c3 31 c0 5d c3 be ff ff ff ff 48 c7 c7 08 41 5b a0 e8 36 87 28 e3 85 c0 0f 85 6f ff ff ff <0f> 0b e9 68 ff ff ff 48 c7 c7 0c 91 cc 84 e8 cb 36 6f e1 e9 4d ff RSP: 0018:ffff88811bf47458 EFLAGS: 00010246 RAX: 000000000000000 RBX: ffff88811b398000 RCX: 000000000000001 RDX: 0000000080000000 RSI: ffffffffa05b4108 RDI: ffff88812daaaa78 RBP: ffff88812d050380 R08: 0000000000000001 R09: ffff88811d6b3437 R10: 0000000000000001 R11: 00000000fddd3581 R12: ffff88815238c000 R13: ffff88812d050380 R14: ffff8881018aa7e0 R15: ffff88811d6b3428 FS: 00007fc82e18ae80(0000) GS:ffff88842e080000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9630d1b421 CR3: 0000000149802004 CR4: 0000000000370ea0 DR0: 00000000000000000 DR1: 00000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Seguimiento de llamadas: mlx5_esw_offloads_devcom_event+0x99/0x3b0 [mlx5_core] mlx5_devcom_send_event+0x167/0x1d0 mlx5_esw_try_lock+0x1b/0xb0 [mlx5_core] mlx5_devcom_send_event+0x167/0x1d0 [mlx5_core] esw_offloads_enable+0x1153/0x1500 [mlx5_core] ? mlx5_esw_offloads_controller_valid+0x170/0x170 [mlx5_core] ? wait_for_completion_io_timeout+0x20/0x20 ? mlx5_rescan_drivers_locked+0x318/0x810 [mlx5_core] mlx5_eswitch_enable_locked+0x586/0xc50 [mlx5_core] ? mlx5_eswitch_disable_pf_vf_vports+0x1d0/0x1d0 [mlx5_core] ? mlx5_esw_try_lock+0x1b/0xb0 [mlx5_core] ? mlx5_eswitch_enable+0x270/0x270 [mlx5_core] ? __debugfs_create_file+0x260/0x3e0 mlx5_devlink_eswitch_mode_set+0x27e/0x870 [mlx5_core] ? mutex_lock_io_nested+0x12c0/0x12c0 ? esw_offloads_disable+0x250/0x250 [mlx5_core] ? devlink_nl_cmd_trap_get_dumpit+0x470/0x470 ? rcu_read_lock_sched_held+0x3f/0x70 devlink_nl_cmd_eswitch_set_doit+0x217/0x620"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.13.8",
"versionEndExcluding": "5.14",
"matchCriteriaId": "36EE71C6-4B88-4A86-A5C2-2ED3CE3D73C1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.14.1",
"versionEndExcluding": "5.17.15",
"matchCriteriaId": "0E29D14F-E802-4CBC-AD96-D38DCEF3B160"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.4",
"matchCriteriaId": "FA6D643C-6D6A-4821-8A8D-B5776B8F0103"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.14:-:*:*:*:*:*:*",
"matchCriteriaId": "6A05198E-F8FA-4517-8D0E-8C95066AED38"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.14:rc4:*:*:*:*:*:*",
"matchCriteriaId": "D1DA0AF6-02F4-47C7-A318-8C006ED0C665"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.14:rc5:*:*:*:*:*:*",
"matchCriteriaId": "49DD30B1-8C99-4C38-A66B-CAB3827BEE8A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.14:rc6:*:*:*:*:*:*",
"matchCriteriaId": "15013998-4AF0-4CDC-AB13-829ECD8A8E66"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.14:rc7:*:*:*:*:*:*",
"matchCriteriaId": "376A25CF-C05B-48F1-99B1-8FB0314A8E06"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*",
"matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0cef0b7eb044bb8cfdaff4c1db55a8fd442f6bc9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3008e6a0049361e731b803c60fe8f3ab44e1d73f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cdbcdddb8076a09aa6ddaf20fd911fc787dca0e5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49336.json
+109 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49336",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:10.370",
"lastModified": "2025-02-26T07:01:10.370",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:18:57.027",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,131 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/etnaviv: comprobar mapeo cosechado en etnaviv_iommu_unmap_gem Cuando el mapeo ya fue cosechado, anular el mapeo debe ser una operaci\u00f3n nula, ya que de lo contrario intentar\u00edamos eliminar el mapeo dos veces, corrompiendo las estructuras de datos involucradas."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.5",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "0FBD3258-24F4-4576-BF8D-CC6649E04DE3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/03bd455a79f69d97fee3e3b212ab754442f10e5c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/19323b3671a85788569d15685c8f83a05ec48cbb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/436cff507f2a41230baacc3e2ef1d3b2d2653f40",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/461c0fdf9434188875da9f10cfc86065866bb797",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/64f4edec081cb7c97c5e928529d0e1b0dbbffb83",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e168c25526cd0368af098095c2ded4a008007e1b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49338.json
+70 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49338",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:10.560",
"lastModified": "2025-02-26T07:01:10.560",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:18:49.723",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,80 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/mlx5e: CT: Se corrige la limpieza de CT antes de la limpieza de las reglas ct de TC La limpieza de CT supone que todas las reglas tc se eliminaron primero y, por lo tanto, es libre de eliminar los recursos compartidos de CT (por ejemplo, dr_action fwd_action que se comparte para todas las tuplas). Pero actualmente para el enlace ascendente, esto sucede a la inversa, lo que provoca el siguiente rastro. La limpieza de CT se llama desde: mlx5e_cleanup_rep_tx()->mlx5e_cleanup_uplink_rep_tx()-> mlx5e_rep_tc_cleanup()->mlx5e_tc_esw_cleanup()-> mlx5_tc_ct_clean() Solo despu\u00e9s, se llama a la limpieza de tc desde: mlx5e_cleanup_rep_tx()->mlx5e_tc_ht_cleanup() que habr\u00eda eliminado todas las reglas de tc ct y, por lo tanto, eliminar\u00eda todas las tuplas descargadas. Corrija esto invirtiendo el orden de init y on cleanup, lo que dar\u00e1 como resultado tc cleanup y luego ct cleanup. [ 9443.593347] ADVERTENCIA: CPU: 2 PID: 206774 en drivers/net/ethernet/mellanox/mlx5/core/steering/dr_action.c:1882 mlx5dr_action_destroy+0x188/0x1a0 [mlx5_core] [ 9443.593349] M\u00f3dulos vinculados en: act_ct nf_flow_table rdma_ucm(O) rdma_cm(O) iw_cm(O) ib_ipoib(O) ib_cm(O) ib_umad(O) mlx5_core(O-) mlxfw(O) mlxdevm(O) auxiliar(O) ib_uverbs(O) psample ib_core(O) mlx_compat(O) ip_gre gre ip_tunnel act_vlan enlace geneve esp6_offload esp6 esp4_offload esp4 act_tunnel_key vxlan ip6_udp_tunnel udp_tunnel act_mirred act_skbedit act_gact cls_flower sch_ingress nfnetlink_cttimeout nfnetlink xfrm_user xfrm_algo 8021q garp stp ipmi_devintf mrp ipmi_msghandler llc openvswitch nsh nf_conncount nf_nat mst_pciconf(O) dm_multipath sbsa_gwdt uio_pdrv_genirq uio mlxbf_pmc mlxbf_pka mlx_trio mlx_bootctl(O) bluefield_edac sch_fq_codel tablas ip ipv6 crc_ccitt btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor xor_neon raid6_pq raid1 raid0 crct10dif_ce i2c_mlxbf gpio_mlxbf2 mlxbf_gige aes_neon_bs aes_neon_blk [\u00faltima descarga: mlx5_ib] [ 9443.593419] CPU: 2 PID: 206774 Comm: modprobe Contaminado: GO 5.4.0-1023.24.gc14613d-bluefield #1 [ 9443.593422] Nombre del hardware: https://www.mellanox.com SoC BlueField/SoC BlueField, BIOS BlueField:143ebaf 11 de enero de 2022 [ 9443.593424] estado de la p\u00e1gina: 20000005 (nzCv daif -PAN -UAO) [ 9443.593489] computadora personal: mlx5dr_action_destroy+0x188/0x1a0 [n\u00facleo mlx5] [ 9443.593545] estado de la l\u00ednea: mlx5_ct_fs_smfs_destroy+0x24/0x30 [n\u00facleo mlx5] [ 9443.593546] servidor de correo: ffff8000135dbab0 [ 9443.593548] x29: ffff8000135dbab0 x28: ffff0003a6ab8e80 [ 9443.593550] x27: 0000000000000000 x26: ffff0003e07d7000 [ 9443.593552] x25: ffff800009609de0 x24: ffff000397fb2120 [ 9443.593554] x23: ffff0003975c0000 x22: 0000000000000000 [ 9443.593556] x21: ffff0003975f08c0 x20: ffff800009609de0 [ 9443.593558] x19: ffff0003c8a13380 x18: 0000000000000014 [ 9443.593560] x17: 0000000067f5f125 x16: 000000006529c620 [ 9443.593561] x15: 000000000000000b x14: 0000000000000000 [ 9443.593563] x13: 0000000000000002 x12: 0000000000000001 [ 9443.593565] x11: ffff800011108868 x10: 0000000000000000 [ 9443.593567] x9 : 0000000000000000 x8 : ffff8000117fb270 [ 9443.593569] x7 : ffff0003ebc01288 x6 : 0000000000000000 [ 9443.593571] x5 : ffff800009591ab8 x4 : fffffe000f6d9a20 [ 9443.593572] x3 : 0000000080040001 x2 : fffffe000f6d9a20 [ 9443.593574] x1 : ffff8000095901d8 x0 : 0000000000000025 [ 9443.593577] Rastreo de llamadas: [ 9443.593634] mlx5dr_action_destroy+0x188/0x1a0 [mlx5_core] [ 9443.593688] mlx5_ct_fs_smfs_destroy+0x24/0x30 [mlx5_core] [ 9443.593743] mlx5_tc_ct_clean+0x34/0xa8 [mlx5_core] [ 9443.593797] mlx5e_tc_esw_cleanup+0x58/0x88 [mlx5_core] [ 9443.593851] mlx5e_rep_tc_cleanup+0x24/0x30 [mlx5_core] [ 9443.593905] mlx5e_cleanup_rep_tx+0x6c/0x78 [mlx5_core] [ 9443.593959] mlx5e_detach_netdev+0x74/0x98 [mlx5_core] [ 9443.594013] mlx5e_netdev_change_profile+0x70/0x180 [mlx5_core] [ 9443.594067] mlx5e_netdev_attach_nic_profile+0x34/0x40 [mlx5_core] [ 9443.594122] mlx5e_vport_rep_unload+0x15c/0x1a8 [mlx5_co ---truncado"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.4",
"matchCriteriaId": "FA6D643C-6D6A-4821-8A8D-B5776B8F0103"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*",
"matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/11bcc79f4bcd244145e6a2c04d5dc755303492a8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/15ef9efa855cf405fadd78272e1e5d04e09a1cf3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49340.json
+125 -10
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49340",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:10.753",
"lastModified": "2025-02-26T07:01:10.753",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:18:28.640",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,35 +15,150 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ip_gre: prueba csum_start en lugar del encabezado de transporte GRE con TUNNEL_CSUM aplicar\u00e1 la descarga de suma de comprobaci\u00f3n local en los paquetes CHECKSUM_PARTIAL. ipgre_xmit debe validar csum_start despu\u00e9s de un skb_pull opcional, de lo contrario lco_csum puede provocar un desbordamiento. La comprobaci\u00f3n original era if (csum && skb_checksum_start(skb) < skb->data) return -EINVAL; Esto ten\u00eda falsos positivos cuando skb_checksum_start no est\u00e1 definido: cuando ip_summed no es CHECKSUM_PARTIAL. Una mejora discutida fue sencilla if (csum && skb->ip_summed == CHECKSUM_PARTIAL && skb_checksum_start(skb) < skb->data) return -EINVAL; Pero finalmente se revis\u00f3 m\u00e1s a fondo: - restringir la verificaci\u00f3n a la \u00fanica rama donde sea necesario, en una ruta GRE poco com\u00fan que usa header_ops y llama a skb_pull. - probar skb_transport_header, que se establece junto con csum_start en skb_partial_csum_set en la ruta de datos header_ops normal. Resulta que skbs puede llegar a esta rama sin el encabezado de transporte establecido, por ejemplo, a trav\u00e9s de la redirecci\u00f3n BPF. Revise la verificaci\u00f3n nuevamente para verificar csum_start directamente, y solo si CHECKSUM_PARTIAL. Deje la verificaci\u00f3n en la ubicaci\u00f3n actualizada. Verifique el campo independientemente de si TUNNEL_CSUM est\u00e1 configurado."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.19.207",
"versionEndExcluding": "4.19.247",
"matchCriteriaId": "D758AE59-1429-4455-9E8F-244E41414654"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.4.148",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "778C5851-261F-4070-AE38-F056B612B584"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.10.68",
"versionEndExcluding": "5.10.122",
"matchCriteriaId": "3D30A79A-020A-4BA5-BA90-E965C6B06CBC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.14.7",
"versionEndExcluding": "5.15.47",
"matchCriteriaId": "31C62BC3-6423-42BD-BD63-22A637FAA2A9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.15",
"matchCriteriaId": "53E7AA2E-2FB4-45CA-A22B-08B4EDBB51AD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.4",
"matchCriteriaId": "FA6D643C-6D6A-4821-8A8D-B5776B8F0103"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*",
"matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0c92d813c7c9ca2212ecd879232e7d87362fce98",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/0ffa268724656633af5f37a38c212326d98ebe8c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3d08bc3a5d9b2106f5c8bcf1adb73147824aa006",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7596bd7920985f7fc8579a92e48bc53ce4475b21",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8d21e9963bec1aad2280cdd034c8993033ef2948",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e6b6f98fc7605c06c0a3baa70f62c534d7b4ce58",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fbeb8dfa8b87ef259eef0c89e39b53962a3cf604",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49341.json
+125 -10
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49341",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:10.857",
"lastModified": "2025-02-26T07:01:10.857",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:18:14.827",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,35 +15,150 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bpf, arm64: Borrar prog->jited_len junto con prog->jited syzbot inform\u00f3 un intento ilegal de copy_to_user() desde bpf_prog_get_info_by_fd() [1] Todav\u00eda no hubo reproducci\u00f3n de este error, pero creo que el commit 0aef499f3172 (\"mm/usercopy: Detectar desbordamientos de vmalloc\") est\u00e1 exponiendo un error anterior en bpf arm64. bpf_prog_get_info_by_fd() analiza prog->jited_len para determinar si la imagen JIT se puede copiar al espacio de usuario. Mi teor\u00eda es que syzbot logr\u00f3 obtener un programa donde prog->jited_len se ha establecido en 43, mientras que prog->bpf_func se ha borrado. No est\u00e1 claro por qu\u00e9 copy_to_user(uinsns, NULL, ulen) est\u00e1 activando esta advertencia en particular. Pens\u00e9 que find_vma_area(NULL) no encontrar\u00eda un vm_struct. Como no tenemos el bloqueo de giro vmap_area_lock, es posible que el vm_struct encontrado fuera basura. [1] usercopy: \u00a1Se detect\u00f3 un intento de exposici\u00f3n de memoria del kernel desde vmalloc (desplazamiento 792633534417210172, tama\u00f1o 43)! \u00a1ERROR del kernel en mm/usercopy.c:101! Error interno: Oops - BUG: 0 [#1] PREEMPT M\u00f3dulos SMP vinculados en: CPU: 0 PID: 25002 Comm: syz-executor.1 No contaminado 5.18.0-syzkaller-10139-g8291eaafed36 #0 Nombre del hardware: linux,dummy-virt (DT) pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usercopy_abort+0x90/0x94 mm/usercopy.c:101 lr : usercopy_abort+0x90/0x94 mm/usercopy.c:89 sp : ffff80000b773a20 x29: ffff80000b773a30 x28: faff80000b745000 x27: ffff80000b773b48 x26: 0000000000000000 x25: 000000000000002b x24: 00000000000000000 x23: 00000000000000e0 x22: ffff80000b75db67 x21: 0000000000000001 x20: 000000000000002b x19: ffff80000b75db3c x18: 00000000fffffffd x17: 2820636f6c6c616d x16: 76206d6f72662064 x15: 6574636574656420 x14: 74706d6574746120 x13: 2129333420657a69 x12: 73202c3237313031 x11: 3237313434333533 x10: 3336323937207465 x9: 657275736f707865 x8: ffff80000a30c550 x7: ffff80000b773830 x6: ffff80000b773830 x5: 0000000000000000 x4 : ffff00007fbbaa10 x3 : 0000000000000000 x2 : 0000000000000000 x1 : f7ff000028fc0000 x0 : 00000000000000064 Rastreo de llamadas: usercopy_abort+0x90/0x94 mm/usercopy.c:89 check_heap_object mm/usercopy.c:186 [en l\u00ednea] __check_object_size mm/usercopy.c:252 [en l\u00ednea] __check_object_size+0x198/0x36c mm/usercopy.c:214 check_object_size include/linux/thread_info.h:199 [en l\u00ednea] check_copy_size include/linux/thread_info.h:235 [en l\u00ednea] copia_al_usuario include/linux/uaccess.h:159 [en l\u00ednea] bpf_prog_get_info_by_fd.isra.0+0xf14/0xfdc kernel/bpf/syscall.c:3993 bpf_obj_get_info_by_fd+0x12c/0x510 kernel/bpf/syscall.c:4253 __sys_bpf+0x900/0x2150 kernel/bpf/syscall.c:4956 __do_sys_bpf kernel/bpf/syscall.c:5021 [en l\u00ednea] __se_sys_bpf kernel/bpf/syscall.c:5019 [en l\u00ednea] __arm64_sys_bpf+0x28/0x40 kernel/bpf/syscall.c:5019 __invoke_syscall arch/arm64/kernel/syscall.c:38 [en l\u00ednea] invocar_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0x44/0xec arch/arm64/kernel/syscall.c:142 do_el0_svc+0xa0/0xc0 arch/arm64/kernel/syscall.c:206 el0_svc+0x44/0xb0 arch/arm64/kernel/entry-common.c:624 el0t_64_sync_handler+0x1ac/0x1b0 arch/arm64/kernel/entry-common.c:642 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:581 C\u00f3digo: aa0003e3 d00038c0 91248000 97fff65f (d4210000)"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.16",
"versionEndExcluding": "4.19.247",
"matchCriteriaId": "669C3AF7-C77C-4A01-ABBF-9771B5BC5F88"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.122",
"matchCriteriaId": "1B42AA01-44D8-4572-95E6-FF8E374CF9C5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.47",
"matchCriteriaId": "FC042EE3-4864-4325-BE0B-4BCDBF11AA61"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.15",
"matchCriteriaId": "53E7AA2E-2FB4-45CA-A22B-08B4EDBB51AD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.4",
"matchCriteriaId": "FA6D643C-6D6A-4821-8A8D-B5776B8F0103"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*",
"matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0cf7aaff290cdc4d7cee683d4a18138b0dacac48",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/10f3b29c65bb2fe0d47c2945cd0b4087be1c5218",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3f4d5e727aeaa610688d46c9f101f78b7f712583",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/41f7c4f85d402043687e863627a1a84fa867c62d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5c25a3040bc0486c41a7b63a1fb0de7cdb846ad7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/aaf61a312af63e1cfe2264c4c5b8cd4ea3626025",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e412b3d178ea4bf746f6b8ee086761613704c6be",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49343.json
+130 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49343",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:11.040",
"lastModified": "2025-02-26T07:01:11.040",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:18:01.940",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,158 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ext4: evitar ciclos en el directorio h-tree Un sistema de archivos da\u00f1ado maliciosamente puede contener ciclos en el h-tree almacenados dentro de un directorio. Eso puede hacer que el kernel corrompa f\u00e1cilmente los nodos del \u00e1rbol que ya se hab\u00edan verificado bajo su control mientras realizaba una divisi\u00f3n de nodos y, en consecuencia, accediera a memoria no asignada. Solucione el problema verificando que los n\u00fameros de bloque recorridos sean \u00fanicos."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.14.283",
"matchCriteriaId": "42074657-A7B6-4740-88B7-67B440018C1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.247",
"matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/24b8206fec1db21d7e82f21f0b2ff5e5672cf5b3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3a3ce941645407cd0b0b7f01ad9e2ea3770f46cc",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3ba733f879c2a88910744647e41edeefbc0d92b2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/6084240bfc44bf265ab6ae7d96980469b05be0f1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b3ad9ff6f06c1dc6abf7437691c88ca3d6da3ac0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d5a16a6df2c16eaf4de04948553ef0089dee463f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e157c8f87e8fac112d6c955e69a60cdb9bc80a60",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ff4cafa51762da3824881a9000ca421d4b78b138",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49348.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49348",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:11.533",
"lastModified": "2025-02-26T07:01:11.533",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:17:52.447",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,117 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ext4: filtrar EXT4_FC_REPLAY del campo s_state del superbloque en disco El bit EXT4_FC_REPLAY en sbi->s_mount_state se usa para indicar que estamos en medio de la reproducci\u00f3n del diario de confirmaci\u00f3n r\u00e1pida. En realidad, esto fue un error, ya que sbi->s_mount_info se inicializa desde es->s_state. Podr\u00eda decirse que s_mount_state tiene un nombre enga\u00f1oso, pero el nombre es hist\u00f3rico --- s_mount_state y s_state se remontan a ext2. Lo que se deber\u00eda haber usado son las funciones en l\u00ednea ext4_{set,clear,test}_mount_flag(), que establecen los bits EXT4_MF_* en sbi->s_mount_flags. El problema con el uso de EXT4_FC_REPLAY es que un superbloque da\u00f1ado maliciosamente podr\u00eda provocar que EXT4_FC_REPLAY se establezca en s_mount_state. Esto evita algunas comprobaciones de cordura y puede desencadenar un error en ext4_es_cache_extent(). Como soluci\u00f3n f\u00e1cil de implementar, filtre el bit EXT4_FC_REPLAY por ahora. Deber\u00edamos dejar de usar EXT4_FC_REPLAY para pasar a algo como EXT4_MF_REPLAY."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.10",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "DB0B2C71-35B4-4946-8040-56348E759B48"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/55b4dbb29054a05d839562f6d635ce05669b016d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/af2f1932743fb52ebcb008ad7ac500d9df0aa796",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b99fd73418350dea360da8311e87a6a7b0e15a4c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c878bea3c9d724ddfa05a813f30de3d25a0ba83f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cc5b09cb6dacd4b32640537929ab4ee8fb2b9e04",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49352.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49352",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:11.920",
"lastModified": "2025-06-19T13:15:23.173",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:17:44.107",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,117 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ext4: advertencia de correcci\u00f3n en ext4_handle_inode_extension Tenemos el siguiente problema: Error EXT4-fs (device loop0) en ext4_reserve_inode_write:5741: Sin memoria Error EXT4-fs (device loop0): ext4_setattr:5462: inodo n.\u00ba 13: comm syz-executor.0: error mark_inode_dirty Error EXT4-fs (device loop0) en ext4_setattr:5519: Sin memoria Error EXT4-fs (device loop0): ext4_ind_map_blocks:595: inodo n.\u00ba 13: comm syz-executor.0: No se pueden asignar bloques para inodos no asignados a extensi\u00f3n con bigalloc ------------[ cortar aqu\u00ed ]------------ ADVERTENCIA: CPU: 1 PID: 4361 en fs/ext4/file.c:301 ext4_file_write_iter+0x11c9/0x1220 M\u00f3dulos vinculados: CPU: 1 PID: 4361 Comm: syz-executor.0 No contaminado 5.10.0+ #1 RIP: 0010:ext4_file_write_iter+0x11c9/0x1220 RSP: 0018:ffff924d80b27c00 EFLAGS: 00010282 RAX: ffffffff815a3379 RBX: 000000000000000 RCX: 000000003b000000 RDX: ffff924d81601000 RSI: 000000000000009cc RDI: 00000000000009cd RBP: 000000000000000d R08: ffffffffbc5a2c6b R09: 0000902e0e52a96f R10: ffff902e2b7c1b40 R11: ffff902e2b7c1b40 R12: 00000000000000a R13: 000000000000001 R14: ffff902e0e52aa10 R15: ffffffffffffff8b FS: 00007f81a7f65700(0000) GS:ffff902e3bc80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 000000012db88001 CR4: 00000000003706e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Seguimiento de llamadas: do_iter_readv_writev+0x2e5/0x360 do_iter_write+0x112/0x4c0 do_pwritev+0x1e5/0x390 __x64_sys_pwritev2+0x7e/0xa0 do_syscall_64+0x37/0x50 entry_SYSCALL_64_after_hwframe+0x44/0xa9 El problema anterior puede ocurrir de la siguiente manera: Suponga que inode.i_size=4096 EXT4_I(inodo)->i_disksize=4096 paso 1: establezca inode->i_isize = 8192 ext4_setattr if (attr->ia_size != inode->i_size) EXT4_I(inodo)->i_disksize = attr->ia_size; rc = ext4_mark_inode_dirty ext4_reserve_inode_write ext4_get_inode_loc __ext4_get_inode_loc sb_getblk devolver -->ENOMEM ... si (!error) ->no se actualizar\u00e1 i_size i_size_write(inodo, attr->ia_size); Ahora: inode.i_size=4096 EXT4_I(inode)->i_disksize=8192 paso 2: Escritura directa de 4096 bytes ext4_file_write_iter ext4_dio_write_iter iomap_dio_rw ->devuelve error if (extend) ext4_handle_inode_extension WARN_ON_ONCE(i_size_read(inode) < EXT4_I(inode)->i_disksize); ->Entonces activa la advertencia. Para resolver el problema anterior, si la marca de inodo sucio fall\u00f3 en ext4_setattr simplemente configure 'EXT4_I(inode)->i_disksize' con el valor anterior."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/1bcce88da60eccc946c0f4ed942b0f08cd565778",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/adf490083ca52ebfb0b2fe64ff1ead00c0452dd7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b81d2ff6885e38fc745eeaf9565775055778fc0b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e383c2aa5f02ab571530dc5c5696479672478c25",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f4534c9fc94d22383f187b9409abb3f9df2e3db3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49356.json
+92 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49356",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:12.300",
"lastModified": "2025-02-26T07:01:12.300",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:17:26.027",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,108 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: SUNRPC: Trampa desbordamientos de segmentos RDMA Impide que svc_rdma_build_writes() se aleje del final de la matriz de segmentos de un fragmento de escritura. Detectado con KASAN. La prueba que esta correcci\u00f3n reemplaza no es v\u00e1lida y podr\u00eda haber quedado de un prototipo anterior del trabajo de PCL."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.47",
"matchCriteriaId": "FC042EE3-4864-4325-BE0B-4BCDBF11AA61"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.15",
"matchCriteriaId": "53E7AA2E-2FB4-45CA-A22B-08B4EDBB51AD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.4",
"matchCriteriaId": "FA6D643C-6D6A-4821-8A8D-B5776B8F0103"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*",
"matchCriteriaId": "A8C30C2D-F82D-4D37-AB48-D76ABFBD5377"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/659f7568e09593945c221bf20217a82ebdfe1328",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/812c13521d4a72469c78ce06d8cdc8dc5b5557b5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ea26bf5eca1459b5a7824997d7823409ce38214e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f012e95b377c73c0283f009823c633104dedb337",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49357.json
+109 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49357",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:12.390",
"lastModified": "2025-02-26T07:01:12.390",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:17:13.093",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,131 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: efi: No importar certificados desde UEFI Secure Boot para Mac T2 En Mac T2 de Apple, cuando Linux intenta leer las variables efi db y dbx en el arranque temprano para cargar certificados UEFI Secure Boot, se produce un error de p\u00e1gina en el c\u00f3digo de firmware de Apple y los servicios de tiempo de ejecuci\u00f3n de EFI se desactivan con los siguientes registros: [Error de firmware]: Error de p\u00e1gina causado por el firmware en PA: 0xffffb1edc0068000 ADVERTENCIA: CPU: 3 PID: 104 at arch/x86/platform/efi/quirks.c:735 efi_crash_gracefully_on_page_fault+0x50/0xf0 (Removed some logs from here) Call Trace: page_fault_oops+0x4f/0x2c0 ? search_bpf_extables+0x6b/0x80 ? search_module_extables+0x50/0x80 ? search_exception_tables+0x5b/0x60 kernelmode_fixup_or_oops+0x9e/0x110 __bad_area_nosemaphore+0x155/0x190 bad_area_nosemaphore+0x16/0x20 do_kern_addr_fault+0x8c/0xa0 exc_page_fault+0xd8/0x180 asm_exc_page_fault+0x1e/0x30 (Removed some logs from here) ? __efi_call+0x28/0x30 ? switch_mm+0x20/0x30 ? efi_call_rts+0x19a/0x8e0 ? process_one_work+0x222/0x3f0 ? worker_thread+0x4a/0x3d0 ? kthread+0x17a/0x1a0 ? process_one_work+0x3f0/0x3f0 ? set_kthread_struct+0x40/0x40 ? ret_from_fork+0x22/0x30 ---[ end trace 1f82023595a5927f ]--- efi: Froze efi_rts_wq and disabled EFI Runtime Services integrity: Couldn't get size: 0x8000000000000015 integrity: MODSIGN: Couldn't get UEFI db list efi: EFI Runtime Services are disabled! integrity: Couldn't get size: 0x8000000000000015 integrity: Couldn't get UEFI dbx list integrity: Couldn't get size: 0x8000000000000015 integrity: Couldn't get mokx list integrity: Couldn't get size: 0x80000000 De esta forma evitamos leer estas variables UEFI y, por lo tanto, evitamos el bloqueo."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.0",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "C500B370-6861-44D6-9722-480EA886E40B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/155ca952c7ca19aa32ecfb7373a32bbc2e1ec6eb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/1f7264f0510f519b4e4f575a8f0579ea65e7592e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/65237307f88f5200782ae7f243bdd385e37cde5d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b1cda6dd2c44771f042d65f0d17bec322ef99a0a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b34786b25d75f9c119696e6bdf3827f54ae3601b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c072cab98bac11f6ef9db640fb51834d9552e2e6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49360.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49360",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:12.677",
"lastModified": "2025-02-26T07:01:12.677",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:17:01.810",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,117 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: f2fs: correcci\u00f3n para realizar una comprobaci\u00f3n de cordura en total_data_blocks Como inform\u00f3 Yanming en Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=215916 El mensaje del kernel se muestra a continuaci\u00f3n: \u00a1ERROR del kernel en fs/f2fs/segment.c:2560! Call Trace: allocate_segment_by_default+0x228/0x440 f2fs_allocate_data_block+0x13d1/0x31f0 do_write_page+0x18d/0x710 f2fs_outplace_write_data+0x151/0x250 f2fs_do_write_data_page+0xef9/0x1980 move_data_page+0x6af/0xbc0 do_garbage_collect+0x312f/0x46f0 f2fs_gc+0x6b0/0x3bc0 f2fs_balance_fs+0x921/0x2260 f2fs_write_single_data_page+0x16be/0x2370 f2fs_write_cache_pages+0x428/0xd00 f2fs_write_data_pages+0x96e/0xd50 do_writepages+0x168/0x550 __writeback_single_inode+0x9f/0x870 writeback_sb_inodes+0x47d/0xb20 __writeback_inodes_wb+0xb2/0x200 wb_writeback+0x4bd/0x660 wb_workfn+0x5f3/0xab0 process_one_work+0x79f/0x13e0 worker_thread+0x89/0xf60 kthread+0x26a/0x300 ret_from_fork+0x22/0x30 RIP: 0010:new_curseg+0xe8d/0x15f0 La causa ra\u00edz es: ckpt.valid_block_count es inconsistente con la tabla SIT, la informaci\u00f3n estad\u00edstica indica que el sistema de archivos tiene bloques libres, pero la tabla SIT indica que el sistema de archivos no tiene segmentos libres. Por lo tanto, durante la recolecci\u00f3n de basura, se genera un p\u00e1nico cuando el asignador LFS no encuentra un segmento libre. Este parche intenta solucionar este problema al verificar la coherencia entre ckpt.valid_block_count y el bloque contabilizado desde SIT."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.8",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "DD91DA8C-87FE-47CE-A7BA-0480866181FA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/071b1269a3b3ad9cec16ed76a48015bfffd9aee8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/6b8beca0edd32075a769bfe4178ca00c0dcd22a9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c9e4cd5b0ccd7168801d6a811919171b185c5cf8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cc8c9df19971e59ebbe669ce710080e347dfec32",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ef221b738b26d8c9f7e7967f4586db2dd3bd5288",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49361.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49361",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:12.770",
"lastModified": "2025-02-26T07:01:12.770",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:16:53.300",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,117 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: f2fs: correcci\u00f3n para realizar una comprobaci\u00f3n de cordura para el inodo en l\u00ednea Yanming inform\u00f3 de un error del kernel en el kernel de Bugzilla [1], que se puede reproducir. El mensaje del error es: El mensaje del kernel se muestra a continuaci\u00f3n: kernel BUG at fs/inode.c:611! Call Trace: evict+0x282/0x4e0 __dentry_kill+0x2b2/0x4d0 dput+0x2dd/0x720 do_renameat2+0x596/0x970 __x64_sys_rename+0x78/0x90 do_syscall_64+0x3b/0x90 [1] https://bugzilla.kernel.org/show_bug.cgi?id=215895 El error se debe a que el inodo fuzzed tiene indicadores inline_data y cifrados. Durante f2fs_evict_inode(), como el inodo fue eliminado por rename(), esto provocar\u00e1 una conversi\u00f3n de datos en l\u00ednea debido a indicadores conflictivos. La cach\u00e9 de la p\u00e1gina se contaminar\u00e1 y se activar\u00e1 el p\u00e1nico en clear_inode(). Intente corregir el error realizando m\u00e1s comprobaciones de integridad para el inodo de datos en l\u00ednea en sanity_check_inode()."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.8",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "DD91DA8C-87FE-47CE-A7BA-0480866181FA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/11c1cd032df85df3c096a57a7f27d57819956e4a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/198fd9faa271dd54dca6fc8eb6873f42dfd3b4d8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/677a82b44ebf263d4f9a0cfbd576a6ade797a07b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7cfe2d43becaf76e562b9617d2c2d9b445f86761",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/efdefbe8b7564602ab446474788225a1f2a323b5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49363.json
+109 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49363",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:12.953",
"lastModified": "2025-02-26T07:01:12.953",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:16:43.710",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,131 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: f2fs: correcci\u00f3n para realizar una comprobaci\u00f3n de cordura en la direcci\u00f3n de bloque en f2fs_do_zero_range() Como inform\u00f3 Yanming en bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=215894 He encontrado un error en el sistema de archivos F2FS en el kernel v5.17. He subido la secuencia de llamada del sistema como case.c, y se puede encontrar una imagen difusa en google net disk El kernel debe habilitar CONFIG_KASAN=y y CONFIG_KASAN_INLINE=y. Puede reproducir el error ejecutando los siguientes comandos: kernel BUG at fs/f2fs/segment.c:2291! Rastreo de llamadas: f2fs_invalidate_blocks+0x193/0x2d0 f2fs_fallocate+0x2593/0x4a70 vfs_fallocate+0x2a5/0xac0 ksys_fallocate+0x35/0x70 __x64_sys_fallocate+0x8e/0xf0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae La causa ra\u00edz es que, despu\u00e9s de que se realiz\u00f3 el an\u00e1lisis difuso de la imagen, la informaci\u00f3n de mapeo de bloques en el inodo ser\u00e1 inconsistente con la tabla SIT, por lo que en f2fs_fallocate(), causar\u00e1 p\u00e1nico al actualizar SIT con blkaddr no v\u00e1lido. Solucionemos el problema agregando una verificaci\u00f3n de cordura en la direcci\u00f3n del bloque antes de actualizar la tabla SIT con ella."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.8",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "F5FBE99B-FD10-47FC-B085-61E208BD06D6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/25f8236213a91efdf708b9d77e9e51b6fc3e141c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/470493be19a5730ed432e3ac0f29a2ee7fc6c557",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7361c9f2bd6a8f0cbb41cdea9aff04765ff23f67",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/805b48b234a2803cb7daec7f158af12f0fbaefac",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a34d7b49894b0533222188a52e2958750f830efd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f2e1c38b5ac64eb1a16a89c52fb419409d12c25b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49364.json
+109 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49364",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:13.043",
"lastModified": "2025-02-26T07:01:13.043",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:16:27.903",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,131 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: f2fs: correcci\u00f3n para borrar el inodo sucio en f2fs_evict_inode() Como inform\u00f3 Yanming en Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=215904 El mensaje del kernel se muestra a continuaci\u00f3n: \u00a1ERROR del kernel en fs/f2fs/inode.c:825! Call Trace: evict+0x282/0x4e0 __dentry_kill+0x2b2/0x4d0 shrink_dentry_list+0x17c/0x4f0 shrink_dcache_parent+0x143/0x1e0 do_one_tree+0x9/0x30 shrink_dcache_for_umount+0x51/0x120 generic_shutdown_super+0x5c/0x3a0 kill_block_super+0x90/0xd0 kill_f2fs_super+0x225/0x310 deactivate_locked_super+0x78/0xc0 cleanup_mnt+0x2b7/0x480 task_work_run+0xc8/0x150 exit_to_user_mode_prepare+0x14a/0x150 syscall_exit_to_user_mode+0x1d/0x40 do_syscall_64+0x48/0x90 The root cause is: inode node and dnode node share the same nid, so during f2fs_evict_inode(), dnode node truncation will invalidate its NAT entry, so when truncating inode node, it fails due to invalid NAT entry, result in inode is still marked as dirty, fix this issue by clearing dirty for inode and setting SBI_NEED_FSCK flag in filesystem. output from dump.f2fs: [print_node_info: 354] Node ID [0xf:15] is inode i_nid[0] [0x f : 15] "
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.8",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "F5FBE99B-FD10-47FC-B085-61E208BD06D6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/03c9373b15fa1c245ec99b2b5e7ba209eae4ef42",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/54c116615c99e22aa08aa950757ed726e2f60821",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c469953917b319d415fd621b9e5d0ea5203565cd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c9196d21359be8c7ee231029d13682273925fd00",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ccd58045beb997544b94558a9156be4742628491",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f2db71053dc0409fae785096ad19cce4c8a95af7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49372.json
+142 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49372",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:13.870",
"lastModified": "2025-02-26T07:01:13.870",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:16:14.243",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,43 +15,173 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tcp: tcp_rtx_synack() puede ser llamado desde el contexto del proceso Laurent report\u00f3 el informe adjunto [1] Este error se activa con las siguientes condiciones: 0) Kernel construido con CONFIG_DEBUG_PREEMPT=y 1) Se crea un nuevo socket TCP FastOpen pasivo. Este socket FO espera un ACK proveniente del cliente para ser un ACK ESTABLISHED completo. 2) Una operaci\u00f3n de socket en este socket pasa por el baile lock_sock() release_sock(). 3) Mientras el socket es propiedad del usuario en el paso 2), se recibe una retransmisi\u00f3n del SYN y se almacena en el backlog del socket. 4) En el momento release_sock(), el backlog del socket se procesa mientras est\u00e1 en el contexto del proceso. 5) Se cocina un paquete SYNACK en respuesta a la retransmisi\u00f3n de SYN. 6) -> tcp_rtx_synack() se llama en el contexto del proceso. Antes de el commit con culpa, tcp_rtx_synack() siempre se llamaba desde el controlador BH, desde un controlador de temporizador. Corrija esto usando TCP_INC_STATS() y NET_INC_STATS() que no asumen que el llamador est\u00e1 en un contexto no preemptible. [1] BUG: using __this_cpu_add() in preemptible [00000000] code: epollpep/2180 caller is tcp_rtx_synack.part.0+0x36/0xc0 CPU: 10 PID: 2180 Comm: epollpep Tainted: G OE 5.16.0-0.bpo.4-amd64 #1 Debian 5.16.12-1~bpo11+1 Hardware name: Supermicro SYS-5039MC-H8TRF/X11SCD-F, BIOS 1.7 11/23/2021 Call Trace: dump_stack_lvl+0x48/0x5e check_preemption_disabled+0xde/0xe0 tcp_rtx_synack.part.0+0x36/0xc0 tcp_rtx_synack+0x8d/0xa0 ? kmem_cache_alloc+0x2e0/0x3e0 ? apparmor_file_alloc_security+0x3b/0x1f0 inet_rtx_syn_ack+0x16/0x30 tcp_check_req+0x367/0x610 tcp_rcv_state_process+0x91/0xf60 ? get_nohz_timer_target+0x18/0x1a0 ? lock_timer_base+0x61/0x80 ? preempt_count_add+0x68/0xa0 tcp_v4_do_rcv+0xbd/0x270 __release_sock+0x6d/0xb0 release_sock+0x2b/0x90 sock_setsockopt+0x138/0x1140 ? __sys_getsockname+0x7e/0xc0 ? aa_sk_perm+0x3e/0x1a0 __sys_setsockopt+0x198/0x1e0 __x64_sys_setsockopt+0x21/0x30 do_syscall_64+0x38/0xc0 entry_SYSCALL_64_after_hwframe+0x44/0xae "
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.7",
"versionEndExcluding": "4.9.318",
"matchCriteriaId": "4A2A9B69-3889-420C-8241-A21143513C14"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.10",
"versionEndExcluding": "4.14.283",
"matchCriteriaId": "D6823775-2653-4644-A0D4-4E6E68F10C65"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.247",
"matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.122",
"matchCriteriaId": "1B42AA01-44D8-4572-95E6-FF8E374CF9C5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.47",
"matchCriteriaId": "FC042EE3-4864-4325-BE0B-4BCDBF11AA61"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.15",
"matchCriteriaId": "53E7AA2E-2FB4-45CA-A22B-08B4EDBB51AD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.4",
"matchCriteriaId": "FA6D643C-6D6A-4821-8A8D-B5776B8F0103"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0a0f7f84148445c9f02f226928803a870139d820",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/0a375c822497ed6ad6b5da0792a12a6f1af10c0b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3db889f883e65bbd3b1401279bfc1e9ed255c481",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/58bd38cbc961fd799842b7be8c5222310f04b908",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/88cd232146207ff1d41dededed5e77c0d4438113",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/bdc28a8fb43cc476e33b11519235adb816ce00e8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c348b0f8d035fc4bdc040796889beec7218bd1b8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d05c2fdf8e10528bb6751bd95243e862d5402a9b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d8e1bc6029acac796293310aacef7b7336f35b6a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49378.json
+128 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49378",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:14.450",
"lastModified": "2025-02-26T07:01:14.450",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:16:01.680",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,147 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: sfc: correcci\u00f3n considerando que todos los canales tienen colas TX Normalmente, todos los canales tienen colas RX y TX, pero esto no es cierto si se usa el modparam efx_separate_tx_channels=1. En esos casos, algunos canales solo tienen colas RX y otros solo colas TX (o m\u00e1s precisamente, las tienen asignadas, pero no inicializadas). Arregla efx_channel_has_tx_queues para que devuelva el valor correcto para este caso tambi\u00e9n. Mensajes mostrados en el momento de la prueba antes de la correcci\u00f3n: sfc 0000:03:00.0 ens6f0np0: Fall\u00f3 el comando MC 0x82 inlen 544 rc=-22 (raw=0) arg=0 ------------[ cortar aqu\u00ed ]------------ netdevice: ens6f0np0: failed to initialise TXQ -1 WARNING: CPU: 1 PID: 626 at drivers/net/ethernet/sfc/ef10.c:2393 efx_ef10_tx_init+0x201/0x300 [sfc] [...] stripped RIP: 0010:efx_ef10_tx_init+0x201/0x300 [sfc] [...] stripped Call Trace: efx_init_tx_queue+0xaa/0xf0 [sfc] efx_start_channels+0x49/0x120 [sfc] efx_start_all+0x1f8/0x430 [sfc] efx_net_open+0x5a/0xe0 [sfc] __dev_open+0xd0/0x190 __dev_change_flags+0x1b3/0x220 dev_change_flags+0x21/0x60 [...] stripped Messages shown at remove time before the fix: sfc 0000:03:00.0 ens6f0np0: failed to flush 10 queues sfc 0000:03:00.0 ens6f0np0: failed to flush queues "
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5.1",
"versionEndExcluding": "5.10.122",
"matchCriteriaId": "3480DF40-B812-4E11-98FB-3F3CBC57F994"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.47",
"matchCriteriaId": "FC042EE3-4864-4325-BE0B-4BCDBF11AA61"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.15",
"matchCriteriaId": "53E7AA2E-2FB4-45CA-A22B-08B4EDBB51AD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.4",
"matchCriteriaId": "FA6D643C-6D6A-4821-8A8D-B5776B8F0103"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.5:-:*:*:*:*:*:*",
"matchCriteriaId": "EE98F46A-F7D9-4609-B6A0-882E7F0D378C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.5:rc3:*:*:*:*:*:*",
"matchCriteriaId": "8C58602A-1D3D-4A07-AB88-AB5B403D3E8C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.5:rc4:*:*:*:*:*:*",
"matchCriteriaId": "54191273-DBF7-4AF6-8039-36DFDEBF4529"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.5:rc5:*:*:*:*:*:*",
"matchCriteriaId": "7A986E40-065E-4807-B171-802B9460E47E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.5:rc6:*:*:*:*:*:*",
"matchCriteriaId": "911090B3-B2FF-4DD4-A4A4-1BEA41209886"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.5:rc7:*:*:*:*:*:*",
"matchCriteriaId": "3444D854-CE07-4D25-827A-ECF7BB58EA2D"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/2e102b53f8a778f872dc137f4c7ac548705817aa",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5567d69b95b9c07e1c56f15cf0301251d12e5f97",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8f81a4113e1e574d2cbde4f2cd599380a9189c0f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/913d45f02d346ce41c4aad057eaf53a8ed449dc3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e7e8d5e25dc762b70f9c88ec6b7d451d0816eead",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49380.json
+109 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49380",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:14.633",
"lastModified": "2025-02-26T07:01:14.633",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:15:50.240",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,131 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: f2fs: correcci\u00f3n para evitar f2fs_bug_on() en dec_valid_node_count() Como inform\u00f3 Yanming en bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=215897 He encontrado un error en el sistema de archivos F2FS en el kernel v5.17. El kernel deber\u00eda habilitar CONFIG_KASAN=y y CONFIG_KASAN_INLINE=y. Puede reproducir el error ejecutando los siguientes comandos: El mensaje del kernel se muestra a continuaci\u00f3n: kernel BUG at fs/f2fs/f2fs.h:2511! Call Trace: f2fs_remove_inode_page+0x2a2/0x830 f2fs_evict_inode+0x9b7/0x1510 evict+0x282/0x4e0 do_unlinkat+0x33a/0x540 __x64_sys_unlinkat+0x8e/0xd0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae The root cause is: .total_valid_block_count or .total_valid_node_count could fuzzed to zero, then once dec_valid_node_count() was called, it will cause BUG_ON(), este parche corrige la impresi\u00f3n de informaci\u00f3n de advertencia y la configuraci\u00f3n de SBI_NEED_FSCK en CP en lugar de p\u00e1nico."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.8",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "F5FBE99B-FD10-47FC-B085-61E208BD06D6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/2766ddaf45b69252bb8fe526b5b6e56904a9ae7a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4d17e6fe9293d57081ffdc11e1cf313e25e8fd9e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/89d9a48d0cd30429463ea4e37ca83be6773ed5eb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/bce859358d3d5940aa858e40ceee70ee6e76130e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ccffa99ae6a1f44797b57444c6a80382a42928fe",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f8b3c3fcf33105bc1ee7788e3b51b0a1ae42ae53",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49383.json
+76 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49383",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:14.917",
"lastModified": "2025-02-26T07:01:14.917",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:15:39.350",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,19 +15,89 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: watchdog: rzg2l_wdt: Fix 'BUG: Invalid wait context' Este parche corrige el problema 'BUG: Invalid wait context' durante la devoluci\u00f3n de llamada restart() al usar clk_prepare_enable() en lugar de pm_runtime_get_sync() para encender los relojes durante el reinicio. Este problema se detecta al realizar pruebas con renesas_defconfig. [ 42.213802] reiniciar: Reiniciando el sistema [ 42.217860] [ 42.219364] ============================== [ 42.223368] [ BUG: Invalid wait context ] [ 42.227372] 5.17.0-rc5-arm64-renesas-00002-g10393723e35e #522 Not tainted [ 42.234153] ----------------------------- [ 42.238155] systemd-shutdow/1 is trying to lock: [ 42.242766] ffff00000a650828 (&genpd->mlock){+.+.}-{3:3}, at: genpd_lock_mtx+0x14/0x20 [ 42.250709] other info that might help us debug this: [ 42.255753] context-{4:4} [ 42.258368] 2 locks held by systemd-shutdow/1: [ 42.262806] #0: ffff80000944e1c8 (system_transition_mutex#2){+.+.}-{3:3}, at: __do_sys_reboot+0xd0/0x250 [ 42.272388] #1: ffff8000094c4e40 (rcu_read_lock){....}-{1:2}, at: atomic_notifier_call_chain+0x0/0x150 [ 42.281795] stack backtrace: [ 42.284672] CPU: 0 PID: 1 Comm: systemd-shutdow Not tainted 5.17.0-rc5-arm64-renesas-00002-g10393723e35e #522 [ 42.294577] Hardware name: Renesas SMARC EVK based on r9a07g044c2 (DT) [ 42.301096] Call trace: [ 42.303538] dump_backtrace+0xcc/0xd8 [ 42.307203] show_stack+0x14/0x30 [ 42.310517] dump_stack_lvl+0x88/0xb0 [ 42.314180] dump_stack+0x14/0x2c [ 42.317492] __lock_acquire+0x1b24/0x1b50 [ 42.321502] lock_acquire+0x120/0x3a8 [ 42.325162] __mutex_lock+0x84/0x8f8 [ 42.328737] mutex_lock_nested+0x30/0x58 [ 42.332658] genpd_lock_mtx+0x14/0x20 [ 42.336319] genpd_runtime_resume+0xc4/0x228 [ 42.340587] __rpm_callback+0x44/0x170 [ 42.344337] rpm_callback+0x64/0x70 [ 42.347824] rpm_resume+0x4e0/0x6b8 [ 42.351310] __pm_runtime_resume+0x50/0x78 [ 42.355404] rzg2l_wdt_restart+0x28/0x68 [ 42.359329] watchdog_restart_notifier+0x1c/0x30 [ 42.363943] atomic_notifier_call_chain+0x94/0x150 [ 42.368732] do_kernel_restart+0x24/0x30 [ 42.372652] machine_restart+0x44/0x70 [ 42.376399] kernel_restart+0x3c/0x60 [ 42.380058] __do_sys_reboot+0x228/0x250 [ 42.383977] __arm64_sys_reboot+0x20/0x28 [ 42.387983] invoke_syscall+0x40/0xf8 "
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.17",
"versionEndExcluding": "5.17.15",
"matchCriteriaId": "A5433C40-FA2E-4DDC-BBD9-8C7F577788FC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.4",
"matchCriteriaId": "FA6D643C-6D6A-4821-8A8D-B5776B8F0103"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0a635239cd5484d8f2e702713ccc49ec82aa7594",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/6505541e5298cea2b79da68ee626f583f8e18784",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e4cf89596c1f1e33309556699f910ced4abbaf44",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49394.json
+147 -10
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49394",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:15.983",
"lastModified": "2025-02-26T07:01:15.983",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:15:22.700",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,35 +15,172 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: blk-iolatency: corrige los desequilibrios de recuento en vuelo y los bloqueos de IO en modo sin conexi\u00f3n iolatency necesita rastrear la cantidad de IO en vuelo por cgroup. Como este seguimiento puede ser costoso, se deshabilita cuando ning\u00fan cgroup tiene iolatency configurado para el dispositivo. Para garantizar que los contadores en vuelo se mantengan equilibrados, iolatency_set_limit() congela la request_queue mientras manipula el contador habilitado, lo que garantiza que no haya IO en vuelo y, por lo tanto, todos los contadores sean cero. Desafortunadamente, iolatency_set_limit() no es el \u00fanico lugar donde se manipula el contador habilitado. iolatency_pd_offline() tambi\u00e9n puede dec el contador y activar la desactivaci\u00f3n. Como esta desactivaci\u00f3n ocurre sin congelar el q, esto puede suceder f\u00e1cilmente mientras algunas IO est\u00e1n en vuelo y, por lo tanto, filtrar los recuentos. Esto se puede demostrar f\u00e1cilmente activando iolatency en un cgroup vac\u00edo mientras los IO est\u00e1n en tr\u00e1nsito en otros cgroups y luego eliminando el cgroup. Tenga en cuenta que iolatency no deber\u00eda haberse habilitado en ninguna otra parte del sistema para garantizar que la eliminaci\u00f3n del cgroup deshabilite iolatency para todo el dispositivo. Lo siguiente sigue activando y desactivando iolatency on sda: echo +io > /sys/fs/cgroup/cgroup.subtree_control while true; do mkdir -p /sys/fs/cgroup/test echo '8:0 target=100000' > /sys/fs/cgroup/test/io.latency sleep 1 rmdir /sys/fs/cgroup/test sleep 1 done and there's concurrent fio generating direct rand reads: fio --name test --filename=/dev/sda --direct=1 --rw=randread \\ --runtime=600 --time_based --iodepth=256 --numjobs=4 --bs=4k while monitoring with the following drgn script: while True: for css in css_for_each_descendant_pre(prog['blkcg_root'].css.address_of_()): for pos in hlist_for_each(container_of(css, 'struct blkcg', 'css').blkg_list): blkg = container_of(pos, 'struct blkcg_gq', 'blkcg_node') pd = blkg.pd[prog['blkcg_policy_iolatency'].plid] if pd.value_() == 0: continue iolat = container_of(pd, 'struct iolatency_grp', 'pd') inflight = iolat.rq_wait.inflight.counter.value_() if inflight: print(f'inflight={inflight} {disk_name(blkg.q.disk).decode(\"utf-8\")} ' f'{cgroup_path(css.cgroup).decode(\"utf-8\")}') time.sleep(1) The monitoring output looks like the following: inflight=1 sda /user.slice inflight=1 sda /user.slice ... inflight=14 sda /user.slice inflight=13 sda /user.slice inflight=17 sda /user.slice inflight=15 sda /user.slice inflight=18 sda /user.slice inflight=17 sda /user.slice inflight=20 sda /user.slice inflight=19 sda /user.slice <- fio stopped, inflight stuck at 19 inflight=19 sda /user.slice inflight=19 sda /user.slice Si un cgroup con inflight atascado termina siendo limitado, las IO limitadas nunca se emitir\u00e1n ya que no hay un evento de finalizaci\u00f3n para despertarlo, lo que genera un bloqueo indefinido. Este parche corrige el error al unificar la gesti\u00f3n de habilitaci\u00f3n en un elemento de trabajo que se inicia autom\u00e1ticamente desde iolatency_set_min_lat_nsec(), que se llama desde las rutas iolatency_set_limit() y iolatency_pd_offline(). Es necesario apuntar a un elemento de trabajo ya que iolatency_pd_offline() se llama bajo bloqueos de giro, mientras que congelar una cola de solicitudes requiere un contexto que se pueda suspender. Esto tambi\u00e9n simplifica el c\u00f3digo, lo que reduce el LOC sin los comentarios y evita los bloqueos innecesarios que ocurr\u00edan cada vez que se configuraba o borraba el objetivo de latencia de un cgroup."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.19.29",
"versionEndExcluding": "4.19.247",
"matchCriteriaId": "DFA8B487-29DE-4C81-A53B-E5D42B089FBE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20.16",
"versionEndExcluding": "5.0",
"matchCriteriaId": "12C840D2-F209-4022-AB9F-C7842E688685"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.0.1",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "3E13ABFB-BE15-48AD-B097-91F42FAB3C25"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.0:-:*:*:*:*:*:*",
"matchCriteriaId": "1D0FE595-0CFE-4491-808B-CEF691CE7B0A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc6:*:*:*:*:*:*",
"matchCriteriaId": "FDF49B77-4688-4908-9239-89B729456D22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc7:*:*:*:*:*:*",
"matchCriteriaId": "77F342FB-3D7B-4EAE-BF8B-57B7B860BAFD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc8:*:*:*:*:*:*",
"matchCriteriaId": "47D61679-6515-4E18-83C7-A71982CCD83C"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/515d077ee3085ae343b6bea7fd031f9906645f38",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5b0ff3ebbef791341695b718f8d2870869cf1d01",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/77692c02e1517c54f2fd0535f41aa4286ac9f140",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8a177a36da6c54c98b8685d4f914cb3637d53c0d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/968f7a239c590454ffba79c126fbe0e963a0ba78",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a30acbb5dfb7bcc813ad6a18ca31011ac44e5547",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d19fa8f252000d141f9199ca32959c50314e1f05",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49398.json
+94 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49398",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:16.377",
"lastModified": "2025-02-26T07:01:16.377",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:15:09.393",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,110 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: dwc3: gadget: Reemplazar list_for_each_entry_safe() si se usa giveback La macro list_for_each_entry_safe() guarda el elemento actual (n) y el elemento posterior (n+1), de modo que n se pueda eliminar de forma segura sin da\u00f1ar la lista. Sin embargo, al recorrer la lista y eliminar elementos usando gadget giveback, el bloqueo DWC3 se libera brevemente, lo que permite que se ejecuten otras rutinas. Existe una situaci\u00f3n en la que, mientras se eliminan elementos de la lista cancelada usando dwc3_gadget_ep_cleanup_cancelled_requests(), la rutina de desactivaci\u00f3n de pullup se ejecuta en paralelo (debido a la desvinculaci\u00f3n de UDC). A medida que la rutina de limpieza elimina n, y la desactivaci\u00f3n de pullup elimina n+1, una vez que la limpieza retoma el bloqueo DWC3, hace referencia a una solicitud que ya fue eliminada/gestionada. Con la depuraci\u00f3n de lista habilitada, esto genera un p\u00e1nico. Aseg\u00farese de que todas las instancias de la macro se reemplacen donde se use la devoluci\u00f3n de gadgets. Ejemplo de pila de llamadas: Thread#1: __dwc3_gadget_ep_set_halt() - CLEAR HALT -> dwc3_gadget_ep_cleanup_cancelled_requests() ->list_for_each_entry_safe() ->dwc3_gadget_giveback(n) ->dwc3_gadget_del_and_unmap_request()- n deleted[cancelled_list] ->spin_unlock ->Thread#2 executes ... ->dwc3_gadget_giveback(n+1) ->Already removed! Thread#2: dwc3_gadget_pullup() ->waiting for dwc3 spin_lock ... ->Thread#1 released lock ->dwc3_stop_active_transfers() ->dwc3_remove_requests() ->fetches n+1 item from cancelled_list (n removed by Thread#1) ->dwc3_gadget_giveback() ->dwc3_gadget_del_and_unmap_request()- n+1 deleted[cancelled_list] ->spin_unlock "
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.19.57",
"versionEndExcluding": "4.20",
"matchCriteriaId": "736CAD7C-FDCA-4435-A31E-A705615CF44F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.0",
"versionEndExcluding": "5.15.47",
"matchCriteriaId": "BFE19B19-67CE-4279-8E7C-FC2144344195"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.15",
"matchCriteriaId": "53E7AA2E-2FB4-45CA-A22B-08B4EDBB51AD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.4",
"matchCriteriaId": "FA6D643C-6D6A-4821-8A8D-B5776B8F0103"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/1c6e5dc3b639c96e6839a8d1b8e951923fdfd34a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2424307cdf421ac72075a1384eae4e4199ab6457",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/26a7e6832afe9d9a991cfd9015177f083cf959cc",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/bf594d1d0c1d7b895954018043536ffd327844f9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-493xx/CVE-2022-49399.json
+131 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49399",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:16.470",
"lastModified": "2025-02-26T07:01:16.470",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:14:53.110",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,159 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tty: goldfish: Use tty_port_destroy() para destruir el puerto En goldfish_tty_probe(), el puerto inicializado a trav\u00e9s de tty_port_init() debe destruirse en las rutas de error. En goldfish_tty_remove(), qtty->port tambi\u00e9n debe destruirse o, de lo contrario, podr\u00eda perder recursos. Corrija lo anterior llamando a tty_port_destroy()."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.9",
"versionEndExcluding": "4.14.283",
"matchCriteriaId": "5E4BABF8-65B1-4166-A7DA-C0F82362CD54"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.247",
"matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.122",
"matchCriteriaId": "1B42AA01-44D8-4572-95E6-FF8E374CF9C5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.47",
"matchCriteriaId": "FC042EE3-4864-4325-BE0B-4BCDBF11AA61"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.15",
"matchCriteriaId": "53E7AA2E-2FB4-45CA-A22B-08B4EDBB51AD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.4",
"matchCriteriaId": "FA6D643C-6D6A-4821-8A8D-B5776B8F0103"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/241fcb79dd1df276d80b19f5f6acc9eaaaa63309",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/326192b99c903a2193d820c30ed936cc2402382c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/45f6ce70abfb7ccf9d787781cbc4c03294a775a1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4639d1b992de8f37d66f698056875c274efcd45f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/507b05063d1b7a1fcb9f7d7c47586fc4f3508f98",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9ae3d073f7db5578ae1907544f0c15947e9678e6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/da64f419d7f78272bfe40dde1262602d4ff6b32c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ee6c33b29e624f515202a31bf6ef0437f26a1867",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-494xx/CVE-2022-49402.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49402",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:16.750",
"lastModified": "2025-02-26T07:01:16.750",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:14:34.683",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,117 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ftrace: Limpiar hash direct_functions en caso de fallos de registro Vemos el siguiente GPF cuando falla register_ftrace_direct: [ ] fallo de protecci\u00f3n general, probablemente para direcci\u00f3n no can\u00f3nica \\ 0x200000000000010: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC PTI [...] [ ] RIP: 0010:ftrace_find_rec_direct+0x53/0x70 [ ] Code: 48 c1 e0 03 48 03 42 08 48 8b 10 31 c0 48 85 d2 74 [...] [ ] RSP: 0018:ffffc9000138bc10 EFLAGS: 00010206 [ ] RAX: 0000000000000000 RBX: ffffffff813e0df0 RCX: 000000000000003b [ ] RDX: 0200000000000000 RSI: 000000000000000c RDI: ffffffff813e0df0 [ ] RBP: ffffffffa00a3000 R08: ffffffff81180ce0 R09: 0000000000000001 [ ] R10: ffffc9000138bc18 R11: 0000000000000001 R12: ffffffff813e0df0 [ ] R13: ffffffff813e0df0 R14: ffff888171b56400 R15: 0000000000000000 [ ] FS: 00007fa9420c7780(0000) GS:ffff888ff6a00000(0000) knlGS:000000000 [ ] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ ] CR2: 000000000770d000 CR3: 0000000107d50003 CR4: 0000000000370ee0 [ ] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ ] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ ] Call Trace: [ ] [ ] register_ftrace_direct+0x54/0x290 [ ] ? render_sigset_t+0xa0/0xa0 [ ] bpf_trampoline_update+0x3f5/0x4a0 [ ] ? 0xffffffffa00a3000 [ ] bpf_trampoline_link_prog+0xa9/0x140 [ ] bpf_tracing_prog_attach+0x1dc/0x450 [ ] bpf_raw_tracepoint_open+0x9a/0x1e0 [ ] ? find_held_lock+0x2d/0x90 [ ] ? lock_release+0x150/0x430 [ ] __sys_bpf+0xbd6/0x2700 [ ] ? lock_is_held_type+0xd8/0x130 [ ] __x64_sys_bpf+0x1c/0x20 [ ] do_syscall_64+0x3a/0x80 [ ] entry_SYSCALL_64_after_hwframe+0x44/0xae [ ] RIP: 0033:0x7fa9421defa9 [ ] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 9 f8 [...] [ ] RSP: 002b:00007ffed743bd78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ ] RAX: ffffffffffffffda RBX: 00000000069d2480 RCX: 00007fa9421defa9 [ ] RDX: 0000000000000078 RSI: 00007ffed743bd80 RDI: 0000000000000011 [ ] RBP: 00007ffed743be00 R08: 0000000000bb7270 R09: 0000000000000000 [ ] R10: 00000000069da210 R11: 0000000000000246 R12: 0000000000000001 [ ] R13: 00007ffed743c4b0 R14: 00000000069d2480 R15: 0000000000000001 [ ] [ ] Modules linked in: klp_vm(OK) [ ] ---[ end trace 0000000000000000 ]--- One way to trigger this is: 1. load a livepatch that patches kernel function xxx; 2. run bpftrace -e 'kfunc:xxx {}', esto fallar\u00e1 (esperado por ahora); 3. repetir #2 => gpf. Esto se debe a que la entrada se agrega a direct_functions, pero no se elimina. Solucione esto eliminando la entrada de direct_functions cuando register_ftrace_direct falle. Tambi\u00e9n elimine el \u00faltimo espacio final de ftrace.c, para que ya no tengamos que preocuparnos por eso."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/7d54c15cb89a29a5f59e5ffc9ee62e6591769ef1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/805e87af946d8d2954171361e64d143ff37a441b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/82c888e51c2176a06f8b4541cf748ee81aac6e7e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a0392833a178cf109a57c2a9d4d531bdfc6cd98f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cae2978d6907ef2c08b9b15f704e783f7c284713",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-494xx/CVE-2022-49405.json
+87 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49405",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:17.037",
"lastModified": "2025-02-26T07:01:17.037",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:14:13.727",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,103 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: staging: r8188eu: prevenir ->Ssid overflow en rtw_wx_set_scan() Este c\u00f3digo tiene una verificaci\u00f3n para prevenir el desbordamiento de lectura, pero necesita otra verificaci\u00f3n para prevenir la escritura m\u00e1s all\u00e1 del final de la matriz ->Ssid[]."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.15",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "FA8369C7-8B08-4709-9CE6-2131C7668313"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/476bfda0be0f9669add92bff604ca78226cf53d1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ac2eab7de458f5e1210ce1237afab40a307075c8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/bc10916e890948d8927a5c8c40fb5dc44be5e1b8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c4bd6b72df4f01aa866ceb298466d6d07a6bd525",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-494xx/CVE-2022-49420.json
+64 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49420",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:18.440",
"lastModified": "2025-02-26T07:01:18.440",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:13:56.750",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,74 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: annotate races around sk->sk_bound_dev_if UDP sendmsg() is lockless, and reads sk->sk_bound_dev_if while this field can be changed by another thread. A\u00f1ade anotaciones m\u00ednimas para evitar splats de KCSAN para UDP. Los siguientes parches a\u00f1adir\u00e1n m\u00e1s anotaciones a posibles lectores sin bloqueo. ERROR: KCSAN: data-race in __ip6_datagram_connect / udpv6_sendmsg write to 0xffff888136d47a94 of 4 bytes by task 7681 on cpu 0: __ip6_datagram_connect+0x6e2/0x930 net/ipv6/datagram.c:221 ip6_datagram_connect+0x2a/0x40 net/ipv6/datagram.c:272 inet_dgram_connect+0x107/0x190 net/ipv4/af_inet.c:576 __sys_connect_file net/socket.c:1900 [inline] __sys_connect+0x197/0x1b0 net/socket.c:1917 __do_sys_connect net/socket.c:1927 [inline] __se_sys_connect net/socket.c:1924 [inline] __x64_sys_connect+0x3d/0x50 net/socket.c:1924 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x50 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae read to 0xffff888136d47a94 of 4 bytes by task 7670 on cpu 1: udpv6_sendmsg+0xc60/0x16e0 net/ipv6/udp.c:1436 inet6_sendmsg+0x5f/0x80 net/ipv6/af_inet6.c:652 sock_sendmsg_nosec net/socket.c:705 [inline] sock_sendmsg net/socket.c:725 [inline] ____sys_sendmsg+0x39a/0x510 net/socket.c:2413 ___sys_sendmsg net/socket.c:2467 [inline] __sys_sendmmsg+0x267/0x4c0 net/socket.c:2553 __do_sys_sendmmsg net/socket.c:2582 [inline] __se_sys_sendmmsg net/socket.c:2579 [inline] __x64_sys_sendmmsg+0x53/0x60 net/socket.c:2579 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x50 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae value changed: 0x00000000 -> 0xffffff9b Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 7670 Comm: syz-executor.3 Tainted: G W 5.18.0-rc1-syzkaller-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Eleg\u00ed no agregar la etiqueta Correcciones: porque la ejecuci\u00f3n tiene consecuencias menores y los equipos estables est\u00e1n suficientemente ocupados."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "3108C4DF-1578-4A9A-ADC7-1128DE921D69"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/20b2f61797873a2b18b5ff1a304ad2674fa1e0a5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4c971d2f3548e4f11b1460ac048f5307e4b39fdb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49503.json
+142 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49503",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:26.447",
"lastModified": "2025-02-26T07:01:26.447",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:09:38.743",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,43 +15,173 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ath9k_htc: se corrige el posible acceso fuera de los l\u00edmites con rxstatus->rs_keyix no v\u00e1lido. \"rxstatus->rs_keyix\" finalmente se pasa a test_bit(), por lo que debemos asegurarnos de que est\u00e9 dentro del mapa de bits. drivers/net/wireless/ath/ath9k/common.c:46 Error ath9k_cmn_rx_accept(): se pasan datos no confiables 'rx_stats->rs_keyix' a 'test_bit()'"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.15",
"versionEndExcluding": "4.9.318",
"matchCriteriaId": "AF11B50A-98D1-4E4E-83EA-AAD2562751B4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.10",
"versionEndExcluding": "4.14.283",
"matchCriteriaId": "D6823775-2653-4644-A0D4-4E6E68F10C65"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.247",
"matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0bcb528402cd5e1a6e1833e956fd58a12d509e8e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2326d398ccd41ba6d93b8346532dfa432ab00fee",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2dc509305cf956381532792cb8dceef2b1504765",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3dad3fed5672828c7fb0465cb66a3d9a70952fa6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/461e4c1f199076275f16bf6f3d3e42c6b6c79f33",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4bdcf32c965c27f55ccc4ee71c1927131115b0bb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7f6defe0fabc79f29603c6fa3c80e4fe0456a3e9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a048e0c3caa852397b7b50d4c82a0415c05f7ac3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/eda518db7db16c360bc84379d90675650daa3048",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49504.json
+64 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49504",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:26.543",
"lastModified": "2025-02-26T07:01:26.543",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:09:27.027",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,74 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: lpfc: Inhibit aborta si se inserta un enchufe de loopback externo Despu\u00e9s de ejecutar una prueba de loopback externa corta, cuando se quita el loopback externo y se inserta un cable normal que est\u00e1 conectado directamente a un dispositivo de destino, el sistema falla en la rutina llpfc_set_rrq_active(). Cuando se insert\u00f3 el loopback, se transmiti\u00f3 un FLOGI. Mientras estamos en loopback, recibimos la solicitud FLOGI. El FLOGI se ABTS ya que reconocemos el mismo wppn, por lo que entendemos que es un loopback. Sin embargo, como el ABTS env\u00eda informaci\u00f3n de direcci\u00f3n, el puerto no est\u00e1 configurado en (fffffe), el ABTS se descarta en el cable. Se ejecuta una prueba de loopback corta de 1 trama y se completa antes de que el ABTS se agote. El looback se desconecta y el nuevo cable se enchufa, y se produce un FLOGI al nuevo dispositivo y se completa. Debido a una confusi\u00f3n en el recuento de referencias, la finalizaci\u00f3n del nuevo FLOGI libera el ndlp de la estructura. Luego, el ABTS original se completa y hace referencia al ndlp liberado, lo que genera el error. Se corrige no operando el ABTS cuando est\u00e1 en modo de bucle invertido (se descartar\u00e1 de todos modos). Se agreg\u00f3 una bandera para rastrear el modo para reconocer cu\u00e1ndo se debe no operar."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "3108C4DF-1578-4A9A-ADC7-1128DE921D69"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/a1516930cb605caee3bc7b4f3b7994b88c0b8505",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ead76d4c09b89f4c8d632648026a476a5a34fde8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49506.json
+87 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49506",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:26.737",
"lastModified": "2025-02-26T07:01:26.737",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:09:15.500",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,103 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/mediatek: Agregar funciones de devoluci\u00f3n de llamada de registro/cancelaci\u00f3n de vblank Encontramos un problema de p\u00e1nico del kernel que indicaba que los datos de devoluci\u00f3n de llamada ser\u00edan NULL cuando se usaban en el controlador de irq de ovl. Hay un problema de sincronizaci\u00f3n entre mtk_disp_ovl_irq_handler() y mtk_ovl_disable_vblank(). Para resolver este problema, usamos el flujo para registrar/cancelar el cb de vblank: - Registrar la funci\u00f3n de devoluci\u00f3n de llamada y los datos de devoluci\u00f3n de llamada cuando se crea crtc. - Cancelar la funci\u00f3n de devoluci\u00f3n de llamada y los datos de devoluci\u00f3n de llamada cuando se destruye crtc. Con esta soluci\u00f3n, podemos asegurar que los datos de devoluci\u00f3n de llamada no ser\u00edan NULL cuando se deshabilita vblank."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.12",
"versionEndExcluding": "5.15.54",
"matchCriteriaId": "FA8346B0-71FD-40BD-9BBC-1173FD7AF6C0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/3a4027b5971fe2a94e32754f007d9d3c12c68ad1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8a265d9838bc3c63579002d55c2b2c655c4f8f26",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8a2dbdeccef6de47565638abdf3c25f41cdffc37",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b74d921b900b6ce38c6247c0a1c86be9f3746493",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49511.json
+69 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49511",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:27.193",
"lastModified": "2025-02-26T07:01:27.193",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:09:00.510",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,19 +15,82 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: fbdev: defio: corrige la corrupci\u00f3n de la lista de p\u00e1ginas. F\u00e1cilmente se llega a la siguiente corrupci\u00f3n de lista: == list_add corruption. prev->next should be next (ffffffffc0ceb090), but was ffffec604507edc8. (prev=ffffec604507edc8). WARNING: CPU: 65 PID: 3959 at lib/list_debug.c:26 __list_add_valid+0x53/0x80 CPU: 65 PID: 3959 Comm: fbdev Tainted: G U RIP: 0010:__list_add_valid+0x53/0x80 Call Trace: fb_deferred_io_mkwrite+0xea/0x150 do_page_mkwrite+0x57/0xc0 do_wp_page+0x278/0x2f0 __handle_mm_fault+0xdc2/0x1590 handle_mm_fault+0xdd/0x2c0 do_user_addr_fault+0x1d3/0x650 exc_page_fault+0x77/0x180 ? asm_exc_page_fault+0x8/0x30 asm_exc_page_fault+0x1e/0x30 RIP: 0033:0x7fd98fc8fad1 == Averig\u00fce que la ejecuci\u00f3n ocurre cuando un proceso agrega &page->lru a la cola de la lista de p\u00e1ginas en fb_deferred_io_mkwrite(), otro proceso est\u00e1 reinicializando la misma &page->lru en fb_deferred_io_fault(), que no est\u00e1 protegida por el bloqueo. Esta soluci\u00f3n consiste en inicializar todas las listas de p\u00e1ginas una vez durante la inicializaci\u00f3n, no solo corrige la corrupci\u00f3n de la lista, sino que tambi\u00e9n evita que INIT_LIST_HEAD() se ejecute de manera redundante. V2: cambie \"int i\" por \"unsigned int i\" (Geert Uytterhoeven)"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/6a9ae2fe887042f76fd3d334349e64e8ab3c55a2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/856082f021a28221db2c32bd0531614a8382be67",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e79b2b2aadeffe1db54a6b569b9b621575c3eb07",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49512.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49512",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:27.287",
"lastModified": "2025-02-26T07:01:27.287",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:08:40.850",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,117 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mtd: rawnand: denali: Usar recursos de dispositivo administrados Todos los recursos utilizados por este controlador tienen interfaces administradas, as\u00ed que \u00faselas. De lo contrario, obtendremos el siguiente splat: [ 4.472703] denali-nand-pci 0000:00:05.0: timeout while waiting for irq 0x1000 [ 4.474071] denali-nand-pci: probe of 0000:00:05.0 failed with error -5 [ 4.473538] nand: No NAND device found [ 4.474068] BUG: unable to handle page fault for address: ffffc90005000410 [ 4.475169] #PF: supervisor write access in kernel mode [ 4.475579] #PF: error_code(0x0002) - not-present page [ 4.478362] RIP: 0010:iowrite32+0x9/0x50 [ 4.486068] Call Trace: [ 4.486269] [ 4.486443] denali_isr+0x15b/0x300 [denali] [ 4.486788] ? denali_direct_write+0x50/0x50 [denali] [ 4.487189] __handle_irq_event_percpu+0x161/0x3b0 [ 4.487571] handle_irq_event+0x7d/0x1b0 [ 4.487884] handle_fasteoi_irq+0x2b0/0x770 [ 4.488219] __common_interrupt+0xc8/0x1b0 [ 4.488549] common_interrupt+0x9a/0xc0 "
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.17",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "8B25AC16-CAFE-41ED-8A68-7D0C8173FCFE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/3830dbdfb9a4aec680e43ed80b9f23db7a88eac9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3a745b51cddafade99aaea1b93aad31e9614e230",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3c68daf4a368cd9e63ae5a2145c9e4a6f838c166",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/87149cf9186201a63f0e0b93d9fa93d480bcb771",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/efea1dd176edd17c8252051b7de6957f06efc394",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49513.json
+76 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49513",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:27.380",
"lastModified": "2025-02-26T07:01:27.380",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:08:28.433",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,19 +15,89 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: cpufreq: governor: Use el m\u00e9todo kobject release() para liberar dbs_data La estructura dbs_data incorpora una estructura gov_attr_set y la estructura gov_attr_set incorpora un kobject. Dado que cada kobject debe tener un m\u00e9todo release() y no podemos usar kfree() para liberarlo directamente, introduzca cpufreq_dbs_data_release() para liberar dbs_data a trav\u00e9s del m\u00e9todo kobject::release(). Esto corrige el seguimiento de llamadas como se muestra a continuaci\u00f3n: ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x34 WARNING: CPU: 12 PID: 810 at lib/debugobjects.c:505 debug_print_object+0xb8/0x100 Modules linked in: CPU: 12 PID: 810 Comm: sh Not tainted 5.16.0-next-20220120-yocto-standard+ #536 Hardware name: Marvell OcteonTX CN96XX board (DT) pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : debug_print_object+0xb8/0x100 lr : debug_print_object+0xb8/0x100 sp : ffff80001dfcf9a0 x29: ffff80001dfcf9a0 x28: 0000000000000001 x27: ffff0001464f0000 x26: 0000000000000000 x25: ffff8000090e3f00 x24: ffff80000af60210 x23: ffff8000094dfb78 x22: ffff8000090e3f00 x21: ffff0001080b7118 x20: ffff80000aeb2430 x19: ffff800009e8f5e0 x18: 0000000000000000 x17: 0000000000000002 x16: 00004d62e58be040 x15: 013590470523aff8 x14: ffff8000090e1828 x13: 0000000001359047 x12: 00000000f5257d14 x11: 0000000000040591 x10: 0000000066c1ffea x9 : ffff8000080d15e0 x8 : ffff80000a1765a8 x7 : 0000000000000000 x6 : 0000000000000001 x5 : ffff800009e8c000 x4 : ffff800009e8c760 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0001474ed040 Call trace: debug_print_object+0xb8/0x100 __debug_check_no_obj_freed+0x1d0/0x25c debug_check_no_obj_freed+0x24/0xa0 kfree+0x11c/0x440 cpufreq_dbs_governor_exit+0xa8/0xac cpufreq_exit_governor+0x44/0x90 cpufreq_set_policy+0x29c/0x570 store_scaling_governor+0x110/0x154 store+0xb0/0xe0 sysfs_kf_write+0x58/0x84 kernfs_fop_write_iter+0x12c/0x1c0 new_sync_write+0xf0/0x18c vfs_write+0x1cc/0x220 ksys_write+0x74/0x100 __arm64_sys_write+0x28/0x3c invoke_syscall.constprop.0+0x58/0xf0 do_el0_svc+0x70/0x170 el0_svc+0x54/0x190 el0t_64_sync_handler+0xa4/0x130 el0t_64_sync+0x1a0/0x1a4 irq event stamp: 189006 hardirqs last enabled at (189005): [] finish_task_switch.isra.0+0xe0/0x2c0 hardirqs last disabled at (189006): [] el1_dbg+0x24/0xa0 softirqs last enabled at (188966): [] __do_softirq+0x4b0/0x6a0 softirqs last disabled at (188957): [] __irq_exit_rcu+0x108/0x1a4 [ rjw: Because can be freed by the gov_attr_set_put() in cpufreq_dbs_governor_exit() now, it is also necessary to put the invocation of the governor ->exit() callback into the new cpufreq_dbs_data_release() function. ] "
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.6",
"versionEndExcluding": "5.15.91",
"matchCriteriaId": "E971D8DD-B809-44DF-A31F-1A124020CE28"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "98CD047E-3CA9-4A90-93B0-040784FAD016"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/1e32083f327184b6226ce320ef30085ce785ea4e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a1964688582d26af1328e19b658933659fb54337",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a85ee6401a47ae3fc64ba506cacb3e7873823c65",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49515.json
+76 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49515",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:27.567",
"lastModified": "2025-02-26T07:01:27.567",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:08:07.233",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,19 +15,89 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: cs35l41: Se corrige un acceso fuera de los l\u00edmites en otp_packed_element_t. CS35L41_NUM_OTP_ELEM es 100, pero solo se definen 99 entradas en la matriz otp_map_1/2[CS35L41_NUM_OTP_ELEM], esto har\u00e1 que UBSAN informe una advertencia de cambio fuera de los l\u00edmites en cs35l41_otp_unpack() ya que la \u00faltima entrada en la matriz dar\u00e1 como resultado GENMASK(-1, 0). UBSAN informa este problema: UBSAN: cambio fuera de los l\u00edmites en /home/hwang4/build/jammy/jammy/sound/soc/codecs/cs35l41-lib.c:836:8 El exponente de cambio 64 es demasiado grande para el tipo de 64 bits 'long unsigned int' CPU: 10 PID: 595 Comm: systemd-udevd No contaminado 5.15.0-23-generic #23 Nombre del hardware: LENOVO \\x02MFG_IN_GO/\\x02MFG_IN_GO, BIOS N3GET19W (1.00) 03/11/2022 Seguimiento de llamadas: show_stack+0x52/0x58 dump_stack_lvl+0x4a/0x5f dump_stack+0x10/0x12 cs35l41_hda_i2c_probe+0x65/0x90 [snd_hda_scodec_cs35l41_i2c] ? cs35l41_hda_i2c_remove+0x20/0x20 [snd_hda_scodec_cs35l41_i2c] sonda de dispositivo i2c+0x252/0x2b0"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/9f342904216f378e88008bb0ce1ae200a4b99fe8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a59b9958416096dd21dc4f62b0c5be525d459ca8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/dbc35268e14d5d89c7a9db72009ad4dcd9ede646",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49518.json
+65 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49518",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:27.837",
"lastModified": "2025-02-26T07:01:27.837",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:07:55.643",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,75 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: SOF: ipc3-topology: get_control_data correcto para payload que no sea de bytes Es posible crear una topolog\u00eda donde sof_get_control_data() har\u00eda acceso fuera de los l\u00edmites porque espera que solo se llame cuando el payload sea de tipo bytes. Confusamente tambi\u00e9n maneja otros tipos de controles, pero la implementaci\u00f3n del an\u00e1lisis del payload solo es v\u00e1lida para bytes. Corrija el c\u00f3digo para contar los controles que no sean de bytes y en lugar de almacenar un puntero a sof_abi_hdr en sof_widget_data (que solo es v\u00e1lido para bytes), almacene el puntero a los datos en s\u00ed y agregue un nuevo miembro para guardar el tama\u00f1o de los datos. En el caso de controles que no sean de bytes, almacenamos el puntero al chanv en s\u00ed, que es solo una matriz de valores al final. En el caso del control de bytes, elimine la comprobaci\u00f3n incorrecta cdata->data (wdata[i].pdata) contra NULL ya que es incorrecta e inv\u00e1lida en este contexto. Los datos apuntan al final de la estructura cdata, por lo que nunca deben ser nulos."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/896b03bb7c7010042786cfae2115083d4c241dd3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a962890a5a3cce903ff7c7a19fadee63ed9efdc7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49519.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49519",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:27.923",
"lastModified": "2025-02-26T07:01:27.923",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:07:44.900",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,117 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ath10k: omitir ath10k_halt durante la suspensi\u00f3n para el estado del controlador REINICIO Se observa un doble bloqueo libre cuando la recuperaci\u00f3n de FW (causada por el tiempo de espera/bloqueo de wmi) es seguida por un evento de suspensi\u00f3n inmediata. La recuperaci\u00f3n de FW es activada por ath10k_core_restart() que llama a la limpieza del controlador a trav\u00e9s de ath10k_halt(). Cuando el evento de suspensi\u00f3n ocurre entre la recuperaci\u00f3n de FW, el hilo de trabajo de reinicio se pone en estado congelado hasta que se completa la suspensi\u00f3n. El evento de suspensi\u00f3n activa ath10k_stop() que nuevamente activa ath10k_halt() La doble invocaci\u00f3n de ath10k_halt() hace que ath10k_htt_rx_free() se llame dos veces (Nota: ath10k_htt_rx_alloc no fue llamado por el hilo de trabajo de reinicio debido a su estado congelado), lo que causa el bloqueo. Para solucionar esto, durante el flujo de suspensi\u00f3n, omite la llamada a ath10k_halt() en ath10k_stop() cuando el estado actual del controlador sea ATH10K_STATE_RESTARTING. Adem\u00e1s, para el estado del controlador ATH10K_STATE_RESTARTING, llama a ath10k_wait_for_suspend() en ath10k_stop(). Esto se debe a que la llamada a ath10k_wait_for_suspend() se omite m\u00e1s adelante en [ath10k_halt() > ath10k_core_stop()] para el estado del controlador ATH10K_STATE_RESTARTING. El hilo de trabajo de reinicio congelado se cancelar\u00e1 durante la reanudaci\u00f3n cuando el dispositivo salga de la suspensi\u00f3n. A continuaci\u00f3n se muestra la pila de fallas como referencia: [ 428.469167] ------------[ cortar aqu\u00ed ]------------ [ 428.469180] kernel BUG at mm/slub.c:4150! [ 428.469193] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [ 428.469219] Workqueue: events_unbound async_run_entry_fn [ 428.469230] RIP: 0010:kfree+0x319/0x31b [ 428.469241] RSP: 0018:ffffa1fac015fc30 EFLAGS: 00010246 [ 428.469247] RAX: ffffedb10419d108 RBX: ffff8c05262b0000 [ 428.469252] RDX: ffff8c04a8c07000 RSI: 0000000000000000 [ 428.469256] RBP: ffffa1fac015fc78 R08: 0000000000000000 [ 428.469276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.469285] Call Trace: [ 428.469295] ? dma_free_attrs+0x5f/0x7d [ 428.469320] ath10k_core_stop+0x5b/0x6f [ 428.469336] ath10k_halt+0x126/0x177 [ 428.469352] ath10k_stop+0x41/0x7e [ 428.469387] drv_stop+0x88/0x10e [ 428.469410] __ieee80211_suspend+0x297/0x411 [ 428.469441] rdev_suspend+0x6e/0xd0 [ 428.469462] wiphy_suspend+0xb1/0x105 [ 428.469483] ? name_show+0x2d/0x2d [ 428.469490] dpm_run_callback+0x8c/0x126 [ 428.469511] ? name_show+0x2d/0x2d [ 428.469517] __device_suspend+0x2e7/0x41b [ 428.469523] async_suspend+0x1f/0x93 [ 428.469529] async_run_entry_fn+0x3d/0xd1 [ 428.469535] process_one_work+0x1b1/0x329 [ 428.469541] worker_thread+0x213/0x372 [ 428.469547] kthread+0x150/0x15f [ 428.469552] ? pr_cont_work+0x58/0x58 [ 428.469558] ? kthread_blkcg+0x31/0x31 Tested-on: QCA6174 hw3.2 PCI WLAN.RM.4.4.1-00288-QCARMSWPZ-1 "
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-415"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.11",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "190B569F-73B6-4123-9D35-C8058C1539B9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/5321e5211b5dc873e2e3d0deb749e69ecf4dbfe5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7eb14cb604f49e58b7cf6faa87961a865a3c8649",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8aa3750986ffcf73e0692db3b40dd3a8e8c0c575",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b72a4aff947ba807177bdabb43debaf2c66bee05",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c2272428090d0d215a3f017cbbbad731c07eee53",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49520.json
+108 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49520",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:28.017",
"lastModified": "2025-02-26T07:01:28.017",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:07:21.410",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,130 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: arm64: compat: No trate el n\u00famero de llamada al sistema como ESR_ELx para una llamada al sistema incorrecta Si un proceso compat intenta ejecutar una llamada al sistema desconocida por encima del n\u00famero __ARM_NR_COMPAT_END, el kernel env\u00eda una se\u00f1al SIGILL al proceso infractor. La informaci\u00f3n sobre el error se imprime en dmesg en compat_arm_syscall() -> arm64_notify_die() -> arm64_force_sig_fault() -> arm64_show_signal(). arm64_show_signal() interpreta un valor distinto de cero para current->thread.fault_code como un s\u00edndrome de excepci\u00f3n y muestra el mensaje asociado con el campo ESR_ELx.EC (bits 31:26). current->thread.fault_code se configura en compat_arm_syscall() -> arm64_notify_die() con el n\u00famero de llamada al sistema incorrecto en lugar de un valor ESR_ELx v\u00e1lido. Esto significa que el campo ESR_ELx.EC tiene el valor que el usuario configur\u00f3 para el n\u00famero de llamada al sistema y el n\u00facleo puede terminar imprimiendo mensajes de excepci\u00f3n falsos*. Por ejemplo, para el n\u00famero de llamada al sistema 0x68000000, que eval\u00faa al valor ESR_ELx.EC 0x1A (ESR_ELx_EC_FPAC), el n\u00facleo imprime este error: [ 18.349161] syscall[300]: excepci\u00f3n no controlada: ERET/ERETAA/ERETAB, ESR 0x68000000, Oops - mala compatibilidad syscall(2) en syscall[10000+50000] [ 18.350639] CPU: 2 PID: 300 Comm: syscall No contaminado 5.18.0-rc1 #79 [ 18.351249] Nombre del hardware: Pine64 RockPro64 v2.0 (DT) [..] lo cual es enga\u00f1oso, ya que la llamada al sistema de compatibilidad incorrecta no tiene nada que ver con la autenticaci\u00f3n de puntero. Evite que arm64_show_signal() imprima informaci\u00f3n sobre el s\u00edndrome de excepci\u00f3n haciendo que compat_arm_syscall() establezca el valor ESR_ELx en 0, ya que no tiene significado para un n\u00famero de llamada de sistema no v\u00e1lido. El ejemplo anterior ahora se convierte en: [ 19.935275] syscall[301]: excepci\u00f3n no controlada: Oops - bad compat syscall(2) in syscall[10000+50000] [ 19.936124] CPU: 1 PID: 301 Comm: syscall Not tainted 5.18.0-rc1-00005-g7e08006d4102 #80 [ 19.936894] Nombre del hardware: Pine64 RockPro64 v2.0 (DT) [..] que aunque muestra menos informaci\u00f3n porque falta el n\u00famero de syscall, anunciado err\u00f3neamente como el valor ESR, es mejor que mostrar informaci\u00f3n claramente err\u00f3nea. El n\u00famero de syscall se puede obtener f\u00e1cilmente con strace. *Un valor de 32 bits mayor o igual a 0x8000_0000 se interpreta como un entero negativo en compat_arm_syscal() y la condici\u00f3n scno < __ARM_NR_COMPAT_END se eval\u00faa como verdadera; la llamada al sistema saldr\u00e1 al espacio de usuario en este caso con el c\u00f3digo de error ENOSYS en lugar de llamar a arm64_notify_die()."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "C1C86ABC-337F-46B3-BCD8-22DC5A66E45A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/095e975f8150ccd7f852eb578c1cdbdd2f517c7a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3910ae71cb963fa2b68e684489d4fc3d105afda0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3fed9e551417b84038b15117732ea4505eee386b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/621916afe8cd4f322eb12759b64a2f938d4e551d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ad97425d23af3c3b8d4f6a2bb666cb485087c007",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/efd183d988b416fcdf6f7c298a17ced4859ca77d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49521.json
+97 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49521",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:28.113",
"lastModified": "2025-02-26T07:01:28.113",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:07:04.053",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,116 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: lpfc: Se corrige la p\u00e9rdida de recursos en lpfc_sli4_send_seq_to_ulp() Si no se encuentra ning\u00fan controlador en lpfc_complete_unsol_iocb() que coincida con el rctl de una trama recibida, la trama se descarta y se pierden recursos. Se soluciona devolviendo recursos al descartar un tipo de trama no controlada. Se actualiza la gesti\u00f3n de lpfc_fc_frame_check() del servicio de enlace b\u00e1sico NOP."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "814C88C6-C31D-462A-BBBE-BC83E102E84C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/08709769ff2fb6c5ffedcda3742700d8ea1618a8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/40cf4ea4d2d497f7732c87d350ba5c3f5e8a43a1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/646db1a560f44236b7278b822ca99a1d3b6ea72c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7860d8f8082605b57596aa82d3d438c1fdad9a9e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fa1b509d41c5433672f72c0615cf4aefa0611c99",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49522.json
+108 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49522",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:28.210",
"lastModified": "2025-02-26T07:01:28.210",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:06:50.253",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,130 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mmc: jz4740: Aplicar l\u00edmites del motor DMA al tama\u00f1o m\u00e1ximo de segmento. Haga lo que se hace en otros controladores de host MMC habilitados para DMA (cf. host/mmci.c) y limite el tama\u00f1o m\u00e1ximo de segmento en funci\u00f3n de las capacidades del motor DMA. Esto es necesario para evitar advertencias como la siguiente con CONFIG_DMA_API_DEBUG=y. ------------[ cut here ]------------ WARNING: CPU: 0 PID: 21 at kernel/dma/debug.c:1162 debug_dma_map_sg+0x2f4/0x39c DMA-API: jz4780-dma 13420000.dma-controller: mapping sg segment longer than device claims to support [len=98304] [max=65536] CPU: 0 PID: 21 Comm: kworker/0:1H Not tainted 5.18.0-rc1 #19 Workqueue: kblockd blk_mq_run_work_fn Stack : 81575aec 00000004 80620000 80620000 80620000 805e7358 00000009 801537ac 814c832c 806276e3 806e34b4 80620000 81575aec 00000001 81575ab8 09291444 00000000 00000000 805e7358 81575958 ffffffea 8157596c 00000000 636f6c62 6220646b 80387a70 0000000f 6d5f6b6c 80620000 00000000 81575ba4 00000009 805e170c 80896640 00000001 00010000 00000000 00000000 00006098 806e0000 ... Call Trace: [<80107670>] show_stack+0x84/0x120 [<80528cd8>] __warn+0xb8/0xec [<80528d78>] warn_slowpath_fmt+0x6c/0xb8 [<8016f1d4>] debug_dma_map_sg+0x2f4/0x39c [<80169d4c>] __dma_map_sg_attrs+0xf0/0x118 [<8016a27c>] dma_map_sg_attrs+0x14/0x28 [<804f66b4>] jz4740_mmc_prepare_dma_data+0x74/0xa4 [<804f6714>] jz4740_mmc_pre_request+0x30/0x54 [<804f4ff4>] mmc_blk_mq_issue_rq+0x6e0/0x7bc [<804f5590>] mmc_mq_queue_rq+0x220/0x2d4 [<8038b2c0>] blk_mq_dispatch_rq_list+0x480/0x664 [<80391040>] blk_mq_do_dispatch_sched+0x2dc/0x370 [<80391468>] __blk_mq_sched_dispatch_requests+0xec/0x164 [<80391540>] blk_mq_sched_dispatch_requests+0x44/0x94 [<80387900>] __blk_mq_run_hw_queue+0xb0/0xcc [<80134c14>] process_one_work+0x1b8/0x264 [<80134ff8>] worker_thread+0x2ec/0x3b8 [<8013b13c>] kthread+0x104/0x10c [<80101dcc>] ret_from_kernel_thread+0x14/0x1c ---[ end trace 0000000000000000 ]--- "
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "C1C86ABC-337F-46B3-BCD8-22DC5A66E45A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/353298cadbd4c7d8e8a16d6000066414694933c3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7923f95997a79cef2ad161a2facae64c25a0bca0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/807f90f1960a59dc557542b818c484a8db9ac978",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/90281cadf5077f2d2bec8b08c2ead1f8cd12660e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a828920b9ec0d89d3011198d482b7fe224d2de19",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/afadb04f1d6e74b18a253403f5274cde5e3fd7bd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49525.json
+141 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49525",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:28.500",
"lastModified": "2025-02-26T07:01:28.500",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:06:25.187",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,43 +15,172 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: cx25821: Arreglar la advertencia al eliminar el m\u00f3dulo Al eliminar el m\u00f3dulo, obtendremos la siguiente advertencia: [ 14.746697] remove_proc_entry: removing non-empty directory 'irq/21', leaking at least 'cx25821[1]' [ 14.747449] WARNING: CPU: 4 PID: 368 at fs/proc/generic.c:717 remove_proc_entry+0x389/0x3f0 [ 14.751611] RIP: 0010:remove_proc_entry+0x389/0x3f0 [ 14.759589] Call Trace: [ 14.759792] [ 14.759975] unregister_irq_proc+0x14c/0x170 [ 14.760340] irq_free_descs+0x94/0xe0 [ 14.760640] mp_unmap_irq+0xb6/0x100 [ 14.760937] acpi_unregister_gsi_ioapic+0x27/0x40 [ 14.761334] acpi_pci_irq_disable+0x1d3/0x320 [ 14.761688] pci_disable_device+0x1ad/0x380 [ 14.762027] ? _raw_spin_unlock_irqrestore+0x2d/0x60 [ 14.762442] ? cx25821_shutdown+0x20/0x9f0 [cx25821] [ 14.762848] cx25821_finidev+0x48/0xc0 [cx25821] [ 14.763242] pci_device_remove+0x92/0x240 Solucione esto liberando el irq antes de llamar a pci_disable_device()."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.9.318",
"matchCriteriaId": "0D4D4067-974D-4560-8320-22FDA399E3F9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.10",
"versionEndExcluding": "4.14.283",
"matchCriteriaId": "D6823775-2653-4644-A0D4-4E6E68F10C65"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.247",
"matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/005fd553f5f10fe8618d92f94ad10f9051eac331",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/1f0fc1dfb5fdd456657519a97fab83691b96c6a0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2203436a4d24302871617373a7eb21bc17e38762",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/222292930c8ecc3516e03ec1f9fa8448be7ff496",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/258639bc55a586ee6df92d89786ccf1c71546d70",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3f94169affa33c9db4a439d88f09cb2ed3a33332",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4d6295b6d986476232332fffd08575b185f90d81",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5beb85ff7d005ddb7bf604a4f2dc76f01b84b318",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9d92291698e5cc35a2b8a1106a01ddd7d60ade2d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49526.json
+119 -10
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49526",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:28.593",
"lastModified": "2025-02-26T07:01:28.593",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:05:58.860",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,35 +15,144 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: md/bitmap: no establezca valores sb si no puede pasar la comprobaci\u00f3n de cordura. Si el \u00e1rea de mapa de bits contiene datos no v\u00e1lidos, el kernel se bloquear\u00e1 y mdadm activar\u00e1 \"Error de segmentaci\u00f3n\". Este es un error especial de cluster-md. En un entorno no agrupado, mdadm gestionar\u00e1 el caso de metadatos da\u00f1ados. En una matriz agrupada, solo el espacio del kernel getiona la informaci\u00f3n de la ranura de mapa de bits. Pero incluso este error solo ocurri\u00f3 en un entorno agrupado, la comprobaci\u00f3n de cordura actual es incorrecta, el c\u00f3digo debe cambiarse. C\u00f3mo activar: (inyecci\u00f3n defectuosa) dd if=/dev/zero bs=1M count=1 oflag=direct of=/dev/sda dd if=/dev/zero bs=1M count=1 oflag=direct of=/dev/sdb mdadm -C /dev/md0 -b clustered -e 1.2 -n 2 -l mirror /dev/sda /dev/sdb mdadm -Ss echo aaa > magic.txt == below modifying slot 2 bitmap data == dd if=magic.txt of=/dev/sda seek=16384 bs=1 count=3 <== destroy magic dd if=/dev/zero of=/dev/sda seek=16436 bs=1 count=4 <== ZERO chunksize mdadm -A /dev/md0 /dev/sda /dev/sdb == kernel crashes. mdadm outputs \"Segmentation fault\" == Reason of kernel crash: In md_bitmap_read_sb (called by md_bitmap_create), bad bitmap magic didn't block chunksize assignment, and zero value made DIV_ROUND_UP_SECTOR_T() trigger \"divide error\". Crash log: kernel: md: md0 stopped. kernel: md/raid1:md0: not clean -- starting background reconstruction kernel: md/raid1:md0: active with 2 out of 2 mirrors kernel: dlm: ... ... kernel: md-cluster: Joined cluster 44810aba-38bb-e6b8-daca-bc97a0b254aa slot 1 kernel: md0: invalid bitmap file superblock: bad magic kernel: md_bitmap_copy_from_slot can't get bitmap from slot 2 kernel: md-cluster: Could not gather bitmaps from slot 2 kernel: divide error: 0000 [#1] SMP NOPTI kernel: CPU: 0 PID: 1603 Comm: mdadm Not tainted 5.14.6-1-default kernel: Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) kernel: RIP: 0010:md_bitmap_create+0x1d1/0x850 [md_mod] kernel: RSP: 0018:ffffc22ac0843ba0 EFLAGS: 00010246 kernel: ... ... kernel: Call Trace: kernel: ? dlm_lock_sync+0xd0/0xd0 [md_cluster 77fe..7a0] kernel: md_bitmap_copy_from_slot+0x2c/0x290 [md_mod 24ea..d3a] kernel: load_bitmaps+0xec/0x210 [md_cluster 77fe..7a0] kernel: md_bitmap_load+0x81/0x1e0 [md_mod 24ea..d3a] kernel: do_md_run+0x30/0x100 [md_mod 24ea..d3a] kernel: md_ioctl+0x1290/0x15a0 [md_mod 24ea....d3a] kernel: ? mddev_unlock+0xaa/0x130 [md_mod 24ea..d3a] kernel: ? blkdev_ioctl+0xb1/0x2b0 kernel: block_ioctl+0x3b/0x40 kernel: __x64_sys_ioctl+0x7f/0xb0 kernel: do_syscall_64+0x59/0x80 kernel: ? exit_to_user_mode_prepare+0x1ab/0x230 kernel: ? syscall_exit_to_user_mode+0x18/0x40 kernel: ? do_syscall_64+0x69/0x80 kernel: entry_SYSCALL_64_after_hwframe+0x44/0xae kernel: RIP: 0033:0x7f4a15fa722b kernel: ... ... kernel: ---[ end trace 8afa7612f559c868 ]--- kernel: RIP: 0010:md_bitmap_create+0x1d1/0x850 [md_mod] "
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.19.247",
"matchCriteriaId": "D050F8AE-EE13-436A-B863-56AD3787ECFB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.198",
"matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "34ACD872-E5BC-401C-93D5-B357A62426E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0959aa00f9765bd8c654b1365012e41b51c733cc",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/27f672af28a8e9b783ff7f0eaf7ef2fbd5a2f4ba",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/422e8f7ba1e08c8e0e88d375bcb550bc2bbfe96d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cf9392282a2cf5a8d83dd1c5aa1a097e12f172bc",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d8f1558e1daf54f53a90b4c5700ae3e3a4b13412",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e68cb83a57a458b01c9739e2ad9cb70b04d1e6d2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e69e93120f6219b9cc4fba3b515b6ababd8548aa",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49528.json
+65 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49528",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:28.780",
"lastModified": "2025-02-26T07:01:28.780",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:05:31.203",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,75 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: i2c: dw9714: Deshabilitar el regulador cuando el controlador no realiza la prueba Cuando el controlador no realiza la prueba, obtendremos el siguiente splat: [ 59.305988] ------------[ cut here ]------------ [ 59.306417] WARNING: CPU: 2 PID: 395 at drivers/regulator/core.c:2257 _regulator_put+0x3ec/0x4e0 [ 59.310345] RIP: 0010:_regulator_put+0x3ec/0x4e0 [ 59.318362] Call Trace: [ 59.318582] [ 59.318765] regulator_put+0x1f/0x30 [ 59.319058] devres_release_group+0x319/0x3d0 [ 59.319420] i2c_device_probe+0x766/0x940 Solucione esto deshabilitando el regulador en la gesti\u00f3n de errores."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.13",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "9F69CCB9-5F35-4E74-A533-B50FD5B16802"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/02276e18defa2fccf16413b44440277d98c2b1ea",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fa83ea1de5b3efd87fe01408d5db1fd2ff4767fa",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49533.json
+76 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49533",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:29.293",
"lastModified": "2025-02-26T07:01:29.293",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:05:17.793",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,19 +15,89 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ath11k: Cambiar el n\u00famero m\u00e1ximo de SSID y BSSID de sonda activa a capacidad fw El n\u00famero m\u00e1ximo de SSID en un para solicitudes de sonda activas se informa actualmente como 16 (WLAN_SCAN_PARAMS_MAX_SSID) al registrar el controlador. La estructura scan_req_params solo tiene la capacidad de contener 10 SSID. Esto conduce a un desbordamiento de b\u00fafer que puede activarse desde wpa_supplicant en el espacio de usuario. Al copiar los SSID en la estructura scan_req_params en la ruta ath11k_mac_op_hw_scan, puede sobrescribir el puntero extraie. El firmware admite 16 ssid * 4 bssid, para cada ssid se enviar\u00e1n 4 solicitudes de sonda combinadas bssid, por lo que se admiten 64 solicitudes de sonda en total. Por lo tanto, configure tanto el ssid m\u00e1ximo como el bssid en 16 y 4 respectivamente. Elimine las macros redundantes de ssid y bssid. Probado en: IPQ8074 hw2.0 AHB WLAN.HK.2.7.0.1-01300-QCAHKSWPL_SILICONZ-1"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.6",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "019AEBB8-39FD-460E-B6DE-86065EDC7F7F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/210505788f1d243232e21ef660efcd4838890ce8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/50dc9ce9f80554a88e33b73c30851acf2be36ed3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ec5dfa1d66f2f71a48dab027d26a9fa78eb0f58f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49537.json
+86 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49537",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:29.667",
"lastModified": "2025-02-26T07:01:29.667",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:05:07.657",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,102 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: lpfc: Se ha corregido el seguimiento de llamadas observado durante la E/S con CMF habilitado Se observ\u00f3 lo siguiente con CMF habilitado: ERROR: using smp_processor_id() in preemptible code: systemd-udevd/31711 kernel: caller is lpfc_update_cmf_cmd+0x214/0x420 [lpfc] kernel: CPU: 12 PID: 31711 Comm: systemd-udevd kernel: Call Trace: kernel: kernel: dump_stack_lvl+0x44/0x57 kernel: check_preemption_disabled+0xbf/0xe0 kernel: lpfc_update_cmf_cmd+0x214/0x420 [lpfc] kernel: lpfc_nvme_fcp_io_submit+0x23b4/0x4df0 [lpfc] this_cpu_ptr() calls smp_processor_id() in a preemptible context. Fix by using per_cpu_ptr() with raw_smp_processor_id() instead. "
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "40E62665-0BA6-440F-83E8-6F8EC2D3C9DF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/517e0835cfb2007713ff16c4fb8479f08b16aec7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ae373d66c427812754db5292eb1481b181daf9ce",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cd7f899de4b1b829125d72ee6fbfd878b637b815",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d6d45f67a11136cb88a70a29ab22ea6db8ae6bd5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49539.json
+65 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49539",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:29.857",
"lastModified": "2025-02-26T07:01:29.857",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:04:50.363",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,75 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: rtw89: ser: corrige las fugas de CAM que ocurren en el reinicio de L2 El CAM, es decir, la direcci\u00f3n CAM y el bssid CAM aqu\u00ed, tendr\u00e1n fugas durante el proceso de reinicio de L2 de SER (recuperaci\u00f3n de error del sistema) y ieee80211_restart_hw() que es llamado por el proceso de reinicio de L2 eventualmente. El flujo normal ser\u00eda como -> agregar interfaz (adquirir 1) -> ingresar ips (liberar 1) -> dejar ips (adquirir 1) -> conexi\u00f3n (ocupar 1) <(A) 1 fuga despu\u00e9s del reinicio de L2 si la conexi\u00f3n no es segura> El flujo ieee80211_restart_hw() (bajo conexi\u00f3n) -> ieee80211 reconfig -> agregar interfaz (adquirir 1) -> dejar ips (adquirir 1) -> conexi\u00f3n (ocupar (A) + 2) <(B) 1 fuga m\u00e1s> Originalmente, CAM se libera antes del reinicio de HW solo si la conexi\u00f3n est\u00e1 bajo seguridad. Ahora, libere la CAM de cualquier conexi\u00f3n para reparar la fuga en (A). Por otra parte, verifique si la CAM ya es v\u00e1lida para evitar realizar m\u00faltiples adquisiciones para reparar (B). Adem\u00e1s, si est\u00e1 en modo AP, libere la direcci\u00f3n CAM de todas las estaciones antes de reiniciar el hardware."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "98CD047E-3CA9-4A90-93B0-040784FAD016"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/b169f877f001a474fb89939842c390518160bcc5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f6aff772c9978844529618d86aafb53e5d3ae161",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-495xx/CVE-2022-49540.json
+97 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49540",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-02-26T07:01:29.947",
"lastModified": "2025-02-26T07:01:29.947",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:04:17.460",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,27 +15,116 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: rcu-tasks: corrige la ejecuci\u00f3n en el trabajo de programaci\u00f3n y vaciado. Al iniciar las CPU secundarias, cpus_read_[lock/unlock] no mantiene estable la m\u00e1scara de CPU en l\u00ednea. La m\u00e1scara en l\u00ednea transitoria da como resultado el siguiente seguimiento de llamadas. [ 0.324121] CPU1: Procesador secundario iniciado 0x0000000001 [0x410fd083] [ 0.346652] Cach\u00e9 PIPT I detectado en CPU2 [ 0.347212] CPU2: Procesador secundario iniciado 0x0000000002 [0x410fd083] [ 0.377255] Cach\u00e9 PIPT I detectado en CPU3 [ 0.377823] CPU3: Procesador secundario iniciado 0x0000000003 [0x410fd083] [ 0.379040] ------------[ cortar aqu\u00ed ]------------ [ 0.383662] WARNING: CPU: 0 PID: 10 at kernel/workqueue.c:3084 __flush_work+0x12c/0x138 [ 0.384850] Modules linked in: [ 0.385403] CPU: 0 PID: 10 Comm: rcu_tasks_rude_ Not tainted 5.17.0-rc3-v8+ #13 [ 0.386473] Hardware name: Raspberry Pi 4 Model B Rev 1.4 (DT) [ 0.387289] pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 0.388308] pc : __flush_work+0x12c/0x138 [ 0.388970] lr : __flush_work+0x80/0x138 [ 0.389620] sp : ffffffc00aaf3c60 [ 0.390139] x29: ffffffc00aaf3d20 x28: ffffffc009c16af0 x27: ffffff80f761df48 [ 0.391316] x26: 0000000000000004 x25: 0000000000000003 x24: 0000000000000100 [ 0.392493] x23: ffffffffffffffff x22: ffffffc009c16b10 x21: ffffffc009c16b28 [ 0.393668] x20: ffffffc009e53861 x19: ffffff80f77fbf40 x18: 00000000d744fcc9 [ 0.394842] x17: 000000000000000b x16: 00000000000001c2 x15: ffffffc009e57550 [ 0.396016] x14: 0000000000000000 x13: ffffffffffffffff x12: 0000000100000000 [ 0.397190] x11: 0000000000000462 x10: ffffff8040258008 x9 : 0000000100000000 [ 0.398364] x8 : 0000000000000000 x7 : ffffffc0093c8bf4 x6 : 0000000000000000 [ 0.399538] x5 : 0000000000000000 x4 : ffffffc00a976e40 x3 : ffffffc00810444c [ 0.400711] x2 : 0000000000000004 x1 : 0000000000000000 x0 : 0000000000000000 [ 0.401886] Call trace: [ 0.402309] __flush_work+0x12c/0x138 [ 0.402941] schedule_on_each_cpu+0x228/0x278 [ 0.403693] rcu_tasks_rude_wait_gp+0x130/0x144 [ 0.404502] rcu_tasks_kthread+0x220/0x254 [ 0.405264] kthread+0x174/0x1ac [ 0.405837] ret_from_fork+0x10/0x20 [ 0.406456] irq event stamp: 102 [ 0.406966] hardirqs last enabled at (101): [] _raw_spin_unlock_irq+0x78/0xb4 [ 0.408304] hardirqs last disabled at (102): [] el1_dbg+0x24/0x5c [ 0.409410] softirqs last enabled at (54): [] local_bh_enable+0xc/0x2c [ 0.410645] softirqs last disabled at (50): [] local_bh_disable+0xc/0x2c [ 0.411890] ---[ end trace 0000000000000000 ]--- [ 0.413000] smp: Brought up 1 node, 4 CPUs [ 0.413762] SMP: Total of 4 processors activated. [ 0.414566] CPU features: detected: 32-bit EL0 Support [ 0.415414] CPU features: detected: 32-bit EL1 Support [ 0.416278] CPU features: detected: CRC32 instructions [ 0.447021] Callback from call_rcu_tasks_rude() invoked. [ 0.506693] Callback from call_rcu_tasks() invoked. Por lo tanto, esta confirmaci\u00f3n corrige este problema al aplicar una optimizaci\u00f3n de CPU \u00fanica al proceso de per\u00edodo de gracia de RCU Tasks Rude. El punto clave aqu\u00ed es que el prop\u00f3sito de esta variante de RCU es forzar una programaci\u00f3n en cada CPU en l\u00ednea desde alg\u00fan evento pasado. Pero la funci\u00f3n rcu_tasks_rude_wait_gp() se ejecuta en el contexto del kthread del per\u00edodo de gracia de RCU Tasks Rude, por lo que ya debe haber habido un cambio de contexto en la CPU actual desde la llamada asynchronous_rcu_tasks_rude() o call_rcu_tasks_rude(). Por lo tanto, si solo hay una CPU en l\u00ednea, el kthread del per\u00edodo de gracia de RCU Tasks Rude no necesita hacer nada en absoluto. Resulta que la llamada de la funci\u00f3n rcu_tasks_rude_wait_gp() a schedule_on_each_cpu() causa problemas durante el arranque temprano. Durante ese tiempo, solo hay una CPU en l\u00ednea, es decir, la CPU de arranque. Por lo tanto, la aplicaci\u00f3n de esta optimizaci\u00f3n de CPU \u00fanica corrige las instancias de arranque temprano de este problema."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.121",
"matchCriteriaId": "814C88C6-C31D-462A-BBBE-BC83E102E84C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.46",
"matchCriteriaId": "20D41697-0E8B-4B7D-8842-F17BF2AA21E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.17.14",
"matchCriteriaId": "15E2DD33-2255-4B76-9C15-04FF8CBAB252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "5.18.3",
"matchCriteriaId": "8E122216-2E9E-4B3E-B7B8-D575A45BA3C2"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/1c6c3f2336642fb3074593911f5176565f47ec41",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/230bf5878af6038dfb63d9184272a58475236580",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8f49a8758b5cd541bd7aa9a0d0d11c7426141c0e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ba722d061bc4b54802d701fc63fc2fd988934603",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f75fd4b9221d93177c50dcfde671b2e907f53e86",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2025/CVE-2025-02xx/CVE-2025-0276.json
+50 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-0276",
"sourceIdentifier": "[email protected]",
"published": "2025-10-16T09:15:31.690",
"lastModified": "2025-10-16T15:28:59.610",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T13:03:12.140",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 2.5
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
@@ -55,10 +75,37 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:hcltech:bigfix_mobile:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.3",
"matchCriteriaId": "97CEC651-375F-4FE8-B947-0A3D89FF0267"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:hcltech:bigfix_modern_client_management:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.4",
"matchCriteriaId": "251EA75C-E4D9-4A13-B13D-02DFF9E6161D"
}
]
}
]
}
],
"references": [
{
"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124513",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-100xx/CVE-2025-10020.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-10020",
"sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02",
"published": "2025-10-21T13:15:35.487",
"lastModified": "2025-10-21T13:15:35.487",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script component."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "0fc0942c-577d-436f-ae8e-945763c79b02",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.1,
"impactScore": 6.0
}
]
},
"weaknesses": [
{
"source": "0fc0942c-577d-436f-ae8e-945763c79b02",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"references": [
{
"url": "https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2025-10020.html",
"source": "0fc0942c-577d-436f-ae8e-945763c79b02"
}
]
}
CVE-2025/CVE-2025-106xx/CVE-2025-10639.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-10639",
"sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf",
"published": "2025-10-21T12:15:34.770",
"lastModified": "2025-10-21T12:15:34.770",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The WorkExaminer Professional server installation comes with an FTP server that is used to receive the client logs on TCP port 12304.\u00a0An attacker with network access to this port\u00a0can use weak hardcoded credentials to login to the FTP server and modify or read data, log files and gain remote code execution as NT Authority\\SYSTEM on the server by exchanging accessible service binaries\u00a0in the WorkExaminer installation directory (e.g. \"C:\\Program File (x86)\\Work Examiner Professional Server\")."
}
],
"metrics": {},
"weaknesses": [
{
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-798"
}
]
}
],
"references": [
{
"url": "https://r.sec-consult.com/workexaminer",
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf"
}
]
}
CVE-2025/CVE-2025-106xx/CVE-2025-10640.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-10640",
"sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf",
"published": "2025-10-21T12:15:35.420",
"lastModified": "2025-10-21T12:15:35.420",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit missing server-side authentication checks to bypass the login prompt in the WorkExaminer Professional console to gain administrative access to the WorkExaminer server and therefore all sensitive monitoring data. This includes monitored screenshots and keystrokes of all users.\n\nThe WorkExaminer Professional console is used for administrative access to the server. Before access to the console is granted administrators must login. Internally, a custom protocol is used to call a respective stored procedure on the MSSQL database. The return value of the call is not validated on the server-side. Instead it is only validated client-side which allows to bypass authentication."
}
],
"metrics": {},
"weaknesses": [
{
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-602"
}
]
}
],
"references": [
{
"url": "https://r.sec-consult.com/workexaminer",
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf"
}
]
}
CVE-2025/CVE-2025-106xx/CVE-2025-10641.json
+33
View File
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-10641",
"sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf",
"published": "2025-10-21T12:15:35.543",
"lastModified": "2025-10-21T12:15:35.543",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit their data to the server using the unencrypted FTP. Clients connect to the FTP server on port 12304 and transmit the data unencrypted. In addition, all traffic between the console client and the server at port 12306 is unencrypted."
}
],
"metrics": {},
"weaknesses": [
{
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-319"
}
]
}
],
"references": [
{
"url": "https://r.sec-consult.com/workexaminer",
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf"
}
]
}
CVE-2025/CVE-2025-311xx/CVE-2025-31138.json
+49 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-31138",
"sourceIdentifier": "[email protected]",
"published": "2025-04-07T15:15:44.047",
"lastModified": "2025-04-08T18:14:17.307",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T13:55:56.330",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
@@ -51,14 +71,39 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:amauri:tarteaucitronjs:*:*:*:*:*:node.js:*:*",
"versionEndExcluding": "1.20.1",
"matchCriteriaId": "ECAC1B54-E872-41FB-841F-E8590B2A9512"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/AmauriC/tarteaucitron.js/commit/25fcf828aaa55306ddc09cfbac9a6f8f126e2d07",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/AmauriC/tarteaucitron.js/security/advisories/GHSA-7524-3396-fqv3",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory",
"Patch"
]
}
]
}
CVE-2025/CVE-2025-314xx/CVE-2025-31475.json
+48 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-31475",
"sourceIdentifier": "[email protected]",
"published": "2025-04-07T15:15:44.220",
"lastModified": "2025-04-08T18:14:17.307",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T13:57:10.537",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
@@ -51,14 +71,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:amauri:tarteaucitronjs:*:*:*:*:*:node.js:*:*",
"versionEndExcluding": "1.20.1",
"matchCriteriaId": "ECAC1B54-E872-41FB-841F-E8590B2A9512"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/AmauriC/tarteaucitron.js/commit/74c354c413ee3f82dff97a15a0a43942887c2b5b",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/AmauriC/tarteaucitron.js/security/advisories/GHSA-4hwx-xcc5-2hfc",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-330xx/CVE-2025-33073.json
+11 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-33073",
"sourceIdentifier": "[email protected]",
"published": "2025-06-10T17:23:02.967",
"lastModified": "2025-10-21T01:00:01.900",
"vulnStatus": "Modified",
"lastModified": "2025-10-21T12:45:50.347",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -198,11 +198,18 @@
},
{
"url": "https://www.vicarius.io/vsociety/posts/cve-2025-33073-detection-script-improper-access-control-in-windows-smb-affects-microsoft-products",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.vicarius.io/vsociety/posts/cve-2025-33073-mitigation-script-improper-access-control-in-windows-smb-affects-microsoft-products",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mitigation",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-410xx/CVE-2025-41018.json
+45 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-41018",
"sourceIdentifier": "[email protected]",
"published": "2025-10-16T08:15:34.820",
"lastModified": "2025-10-16T15:28:59.610",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T13:12:27.793",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
@@ -69,10 +91,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sergestec:exito:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6A19865C-ECE1-4603-B70C-1DE47F6EA41D"
}
]
}
]
}
],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sergestec-products",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-410xx/CVE-2025-41020.json
+45 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-41020",
"sourceIdentifier": "[email protected]",
"published": "2025-10-16T08:15:35.610",
"lastModified": "2025-10-16T15:28:59.610",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T13:12:13.663",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
@@ -69,10 +91,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sergestec:exito:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6A19865C-ECE1-4603-B70C-1DE47F6EA41D"
}
]
}
]
}
],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sergestec-products",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-410xx/CVE-2025-41021.json
+45 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-41021",
"sourceIdentifier": "[email protected]",
"published": "2025-10-16T08:15:35.760",
"lastModified": "2025-10-16T15:28:59.610",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T13:11:39.663",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
@@ -69,10 +91,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sergestec:exito:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6A19865C-ECE1-4603-B70C-1DE47F6EA41D"
}
]
}
]
}
],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sergestec-products",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-414xx/CVE-2025-41443.json
+32 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-41443",
"sourceIdentifier": "[email protected]",
"published": "2025-10-16T08:15:35.917",
"lastModified": "2025-10-16T15:28:59.610",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T13:07:13.683",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,39 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.5.0",
"versionEndExcluding": "10.5.11",
"matchCriteriaId": "9A7F5FBF-4910-4376-96DF-0549BA5259AE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.11.0",
"versionEndExcluding": "10.11.3",
"matchCriteriaId": "D4B91178-97CA-4799-A853-685F04C33F9E"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-459xx/CVE-2025-45968.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-45968",
"sourceIdentifier": "[email protected]",
"published": "2025-08-25T14:15:31.210",
"lastModified": "2025-08-25T20:24:45.327",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-21T13:51:24.520",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:system_pdv_project:system_pdv:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "42839336-C589-4EEC-848A-A9C468E57805"
}
]
}
]
}
],
"references": [
{
"url": "https://medium.com/@r3dd1t/pedindo-um-lanche-e-possivelemnte-descobrindo-uma-cve-9930b0114e3f",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-489xx/CVE-2025-48939.json
+30 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48939",
"sourceIdentifier": "[email protected]",
"published": "2025-07-03T17:15:39.300",
"lastModified": "2025-07-08T16:19:11.700",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T13:56:42.543",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,40 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:amauri:tarteaucitronjs:*:*:*:*:*:node.js:*:*",
"versionEndExcluding": "1.22.0",
"matchCriteriaId": "44D78DB7-3E10-445C-AC63-0E6839989F36"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/AmauriC/tarteaucitron.js/commit/230a3b69d363837acfa895823d841e0608826ba3",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/AmauriC/tarteaucitron.js/security/advisories/GHSA-q43x-79jr-cq98",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Vendor Advisory",
"Patch"
]
}
]
}
CVE-2025/CVE-2025-538xx/CVE-2025-53860.json
+77 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53860",
"sourceIdentifier": "[email protected]",
"published": "2025-10-15T16:15:34.513",
"lastModified": "2025-10-16T15:28:59.610",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-21T12:01:49.797",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,6 +59,26 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.5,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
@@ -89,12 +109,66 @@
"value": "CWE-214"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:f5:f5os-a:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.5.1",
"versionEndExcluding": "1.5.3",
"matchCriteriaId": "4899125F-A896-487F-A2AC-803FFCF0C4FF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:f5:f5os-a:1.8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "01B43BE0-F112-4580-A188-3FE0DD140D07"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:f5:r10920-df:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3760D609-BAB2-4F63-B822-30ECEF3F05C8"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:f5:r5920-df:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9301923A-EE14-42F5-8C8B-0758BD09723B"
}
]
}
]
}
],
"references": [
{
"url": "https://my.f5.com/manage/s/article/K000148625",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-556xx/CVE-2025-55634.json
+44 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55634",
"sourceIdentifier": "[email protected]",
"published": "2025-08-22T17:15:35.163",
"lastModified": "2025-08-22T18:15:37.963",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-21T13:57:31.043",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,18 +51,57 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:reolink:smart_2k\\+_plug-in_wi-fi_video_doorbell_with_chime_firmware:3.0.0.4662_2503122283:*:*:*:*:*:*:*",
"matchCriteriaId": "1D426B4B-7913-43E6-A29F-B05F2ADC793A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:reolink:smart_2k\\+_plug-in_wi-fi_video_doorbell_with_chime:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0D24D10B-3480-4109-97D6-687A6092A659"
}
]
}
]
}
],
"references": [
{
"url": "https://cwe.mitre.org/data/definitions/306.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Technical Description"
]
},
{
"url": "https://cwe.mitre.org/data/definitions/400.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Technical Description"
]
},
{
"url": "https://relieved-knuckle-264.notion.site/RTMP-Injection-DoS-through-Unauthenticated-Stream-Publish-23c437003642800297c8c128b6117885?pvs=74",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-556xx/CVE-2025-55637.json
+60 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55637",
"sourceIdentifier": "[email protected]",
"published": "2025-08-22T17:15:35.303",
"lastModified": "2025-08-22T18:15:38.167",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-21T13:55:30.820",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -17,6 +17,26 @@
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
@@ -51,14 +71,50 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:reolink:smart_2k\\+_plug-in_wi-fi_video_doorbell_with_chime_firmware:3.0.0.4662_2503122283:*:*:*:*:*:*:*",
"matchCriteriaId": "1D426B4B-7913-43E6-A29F-B05F2ADC793A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:reolink:smart_2k\\+_plug-in_wi-fi_video_doorbell_with_chime:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0D24D10B-3480-4109-97D6-687A6092A659"
}
]
}
]
}
],
"references": [
{
"url": "https://cwe.mitre.org/data/definitions/78.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Technical Description"
]
},
{
"url": "https://relieved-knuckle-264.notion.site/Reolink-camera-command-injection-Ddns-username-23f437003642800f83aef6b07f914212?pvs=74",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-608xx/CVE-2025-60855.json
+10 -3
View File
@@ -2,13 +2,20 @@
"id": "CVE-2025-60855",
"sourceIdentifier": "[email protected]",
"published": "2025-10-16T19:15:33.367",
"lastModified": "2025-10-16T20:15:34.473",
"lastModified": "2025-10-21T13:15:36.187",
"vulnStatus": "Received",
"cveTags": [],
"cveTags": [
{
"sourceIdentifier": "[email protected]",
"tags": [
"disputed"
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Reolink Video Doorbell WiFi DB_566128M5MP_W performs insufficient validation of firmware update signatures. This allows attackers to load malicious firmware images, resulting in arbitrary code execution with root privileges."
"value": "Reolink Video Doorbell WiFi DB_566128M5MP_W performs insufficient validation of firmware update signatures. This allows attackers to load malicious firmware images, resulting in arbitrary code execution with root privileges. NOTE: this is disputed by the Supplier because the integrity of updates is instead assured via a \"private encryption algorithm\" and other \"tamper-proof verification.\""
}
],
"metrics": {
CVE-2025/CVE-2025-608xx/CVE-2025-60856.json
+10 -3
View File
@@ -2,13 +2,20 @@
"id": "CVE-2025-60856",
"sourceIdentifier": "[email protected]",
"published": "2025-10-20T16:15:39.380",
"lastModified": "2025-10-20T17:15:38.210",
"lastModified": "2025-10-21T13:15:36.567",
"vulnStatus": "Received",
"cveTags": [],
"cveTags": [
{
"sourceIdentifier": "[email protected]",
"tags": [
"disputed"
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Reolink Video Doorbell WiFi DB_566128M5MP_W allows root shell access through an unsecured UART/serial console. An attacker with physical access can connect to the exposed interface and execute arbitrary commands with root privileges."
"value": "Reolink Video Doorbell WiFi DB_566128M5MP_W allows root shell access through an unsecured UART/serial console. An attacker with physical access can connect to the exposed interface and execute arbitrary commands with root privileges. NOTE: this is disputed by the Supplier because of \"certain restrictions on users privately connecting serial port cables\" and because \"the root user has a password and it meets the requirements of password security complexity.\""
}
],
"metrics": {
CVE-2025/CVE-2025-60xx/CVE-2025-6026.json
+3 -3
View File
@@ -2,13 +2,13 @@
"id": "CVE-2025-6026",
"sourceIdentifier": "[email protected]",
"published": "2025-10-15T15:16:06.710",
"lastModified": "2025-10-16T15:28:59.610",
"lastModified": "2025-10-21T13:15:36.800",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow a user capable of intercepting network traffic to obtain encrypted application metadata, including device information, geolocation, and telemetry data."
"value": "An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow a user capable of intercepting network traffic to obtain application metadata, including device information, geolocation, and telemetry data."
}
],
"metrics": {
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
CVE-2025/CVE-2025-615xx/CVE-2025-61539.json
+27 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-61539",
"sourceIdentifier": "[email protected]",
"published": "2025-10-16T15:15:34.457",
"lastModified": "2025-10-16T20:15:35.183",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:12:05.600",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,37 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:myupb:ultimate_php_board:2.2.7:*:*:*:*:*:*:*",
"matchCriteriaId": "C075409F-21FB-40B9-A36A-632E8F66ABD5"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/PHP-Outburst/myUPB?tab=readme-ov-file",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/bugdotexe/Vulnerability-Research/tree/main/CVE-2025-61539",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-615xx/CVE-2025-61540.json
+27 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-61540",
"sourceIdentifier": "[email protected]",
"published": "2025-10-16T15:15:34.583",
"lastModified": "2025-10-16T16:15:39.103",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:12:14.517",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,37 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:myupb:ultimate_php_board:2.2.7:*:*:*:*:*:*:*",
"matchCriteriaId": "C075409F-21FB-40B9-A36A-632E8F66ABD5"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/PHP-Outburst/myUPB?tab=readme-ov-file",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/bugdotexe/Vulnerability-Research/tree/main/CVE-2025-61540",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-618xx/CVE-2025-61884.json
+34 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-61884",
"sourceIdentifier": "[email protected]",
"published": "2025-10-12T03:15:34.720",
"lastModified": "2025-10-21T01:00:01.900",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T12:44:55.387",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -71,18 +71,47 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:configurator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.2.3",
"versionEndIncluding": "12.2.14",
"matchCriteriaId": "5CC0EA09-3974-4A14-8724-27020AECB5A8"
}
]
}
]
}
],
"references": [
{
"url": "https://www.oracle.com/security-alerts/alert-cve-2025-61884.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://blogs.oracle.com/security/post/apply-july-2025-cpu",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://labs.watchtowr.com/well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882/",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Press/Media Coverage"
]
}
]
}
CVE-2025/CVE-2025-619xx/CVE-2025-61933.json
+46 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-61933",
"sourceIdentifier": "[email protected]",
"published": "2025-10-15T16:15:35.583",
"lastModified": "2025-10-16T15:28:59.610",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-21T12:12:54.180",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -91,10 +91,53 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "A7A0C1CA-EDEF-463F-B7C8-8B9E67239FC1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "6494E2A7-1473-46C0-97F8-90827D9466AA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "96D35435-27A7-4A88-9432-1F5AB0112B8C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "252ED1A4-5F29-4440-B1BA-9621E6791812"
}
]
}
]
}
],
"references": [
{
"url": "https://my.f5.com/manage/s/article/K000156596",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-619xx/CVE-2025-61935.json
+56 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-61935",
"sourceIdentifier": "[email protected]",
"published": "2025-10-15T16:15:35.763",
"lastModified": "2025-10-16T15:28:59.610",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-21T12:12:43.303",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -91,10 +91,63 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "8CDAF78A-6C2B-4640-93DD-524A0D9D80CE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "0B24E3BE-8A62-4819-B63C-01EE10E6160F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:17.5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "03D43E1A-B542-4C95-ABEF-1DFE82D55513"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "2450DC77-B46C-4886-AC9A-CF78B1EC4F06"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "BF0F0A9D-1B7E-4271-B309-64399AC7DD89"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:17.5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "3F78E5C4-6687-4C78-88FA-0F6BD878859E"
}
]
}
]
}
],
"references": [
{
"url": "https://my.f5.com/manage/s/article/K000154664",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-619xx/CVE-2025-61990.json
+671 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-61990",
"sourceIdentifier": "[email protected]",
"published": "2025-10-15T16:15:35.993",
"lastModified": "2025-10-16T15:28:59.610",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-21T12:12:24.840",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -91,10 +91,678 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "A7A0C1CA-EDEF-463F-B7C8-8B9E67239FC1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "6538FBFE-AE3F-41DC-BE48-8A2444DE1F39"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "8CDAF78A-6C2B-4640-93DD-524A0D9D80CE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "4BEC05AA-EB63-4A34-94E8-81606329BA75"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "F3007970-0661-4CAC-91A6-363396ED3B41"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "2450DC77-B46C-4886-AC9A-CF78B1EC4F06"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "D8BC9B56-DC91-4312-9A37-0892E1DCC97D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "B5C25C2C-608A-432F-B49C-CED71150801C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "96D77245-3641-49B9-BC32-472D460E5C1F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "37AF1DFD-AE86-4F64-9941-75FAA0186ED8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "87D1615C-6A97-4530-8E3A-92141B6EECD8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "787649F6-17ED-4EFE-9C48-8318FEB941E7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "268F789C-AC21-4CE9-9000-8E8B5CB38D2F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "A04C923A-BBBC-4C4A-A653-B14C2CCEF3D9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "E1DE6647-EC65-46DB-BE41-826C0BE3CBF4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "CC47EDCD-06E7-4A5C-BD95-E10CC151494E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "2A5E3508-3BD2-4275-A654-B379EB95A5C2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "DB854FAF-E3B8-4D94-8346-57B73D5B95FE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "40B87228-F144-41C7-ACD8-1168CC5C57F3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "FAC86368-6FD4-4232-9E33-8B14B783C6C9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.1.0",
"versionEndExcluding": "15.1.10.8",
"matchCriteriaId": "96451762-2663-4773-BA48-CD437150C827"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "6494E2A7-1473-46C0-97F8-90827D9466AA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "56128695-2B01-4B7D-AC5F-DCDFCFE28BD6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "025BE711-822D-4840-920C-E8636DA97738"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "3F28A7BB-AC00-4AB0-94CE-798890A6EA01"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "E36153D6-A0AF-41DA-B99F-ACD3333D5092"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "5A23DB2A-FB60-4DA3-A7CD-D714BE1BDFBD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "4D9F00EE-50B8-4B4F-BACB-F0599EBEE946"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "00A47522-6E92-4441-9B88-223863F06061"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "67C3778D-1F87-40AD-9163-883CEC3C1712"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "3D17FD44-D4DB-40FC-8A0D-018EE6650975"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "92891C8E-D1E2-4128-9C3E-95DD922760F2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "1381CA01-0A3D-4027-8B2D-DA773F0F2447"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "EFBC3076-EA5C-4D18-943A-E5574FEEAE05"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "72789BAC-8984-4364-857C-E6050F35DACD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "A63DAF65-3864-4979-8AB5-A415DEE43527"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "17A49B38-5E69-4288-8D3B-468C7B32EC4B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "5C4CCE82-6E33-4448-899E-3938E9F26364"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "FE263046-0C37-4DEC-A2BD-9056534F497D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "7829108D-71A4-4F91-81F6-804E9EB1AE9D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "FE79228D-BD43-4ADF-A36F-88DA748D83A2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
"versionStartIncluding": "16.1.0",
"versionEndExcluding": "16.1.6.1",
"matchCriteriaId": "AE6EAF28-5EEF-4333-A911-37DB84419B75"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "96D35435-27A7-4A88-9432-1F5AB0112B8C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "252ED1A4-5F29-4440-B1BA-9621E6791812"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "19F0ED03-65CE-461B-97CE-ECBE2D290A5C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "50DDBAA4-71D2-4BE4-A5B6-56E9533D97F0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "0B24E3BE-8A62-4819-B63C-01EE10E6160F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "6DC6C7E3-7437-4E51-8FB7-7371CF963060"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "5560B775-1D1A-4B91-BF73-8214C54E0136"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "AB4035E6-4434-4B8B-A148-70C5518FC8BA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "E79DDBA8-2BAA-45CF-ADDB-E0CD29EFCD69"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "E2B2B30C-B33B-4721-9082-772704073DFF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "BF0F0A9D-1B7E-4271-B309-64399AC7DD89"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "6725ED7F-068C-49E2-AA9D-EDC1C053460D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "C4C71682-BEF8-4916-AEA3-C6B73229BC7D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "559D8BC5-F14F-41B4-A977-F910E85964B6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "D1A5E22E-BC34-428B-8230-7950FEA1F426"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "223441F5-6F88-4487-827F-C5C1C1AD260D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "9F6EB345-1978-44BA-9FFD-B1F0F98E8424"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "4A4D9F4C-C145-4B5C-A17F-1CB593008DC9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "4503795E-1956-40E5-A4AA-096D5CE35197"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "4C606B0A-D0C7-4C9F-8019-1807BB41F471"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "6B1DA3DB-754B-4CB1-9970-8FE24F8904D7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "467694DD-551C-4779-B951-050DD4B1F6EF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "60F7DB59-2F2B-4AC7-B058-2DB7C9C4DE87"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "0910A222-915F-4FE0-8561-17443F9D5B96"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "20E70B13-F29C-45AA-87CD-96AF990A524C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "5C558857-7BFB-4896-93E0-1146FBE0FADE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "A4685C82-B428-406D-917A-9A7D6167C848"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "B6EA8C47-5A54-4D95-833C-66A53AA9E9AE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "3428C746-89F5-499B-99E3-E7F9A04AA6E5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "767BB8A1-5B85-4A19-89A7-D19D63D3FDF9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "827B18BF-818E-42DB-A8F5-B3DA845EB658"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "B87FD17B-BE62-4134-8F31-6A89B360799D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "E2F5003F-A341-4C95-B402-1C0AF5530039"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "F7AFEEB1-9236-49A2-80F1-FF9446D3DE44"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "022E0278-5754-4C93-9B54-1BAB3948A534"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "AA68A21E-0172-49B1-9E70-A397C8C77280"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "581B1484-C457-4C11-B43A-DCF49EBC07DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "9DEA4BE6-226A-410E-879C-07F2C11AAE5D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "A52583A0-7F8A-4B20-9C92-677FD176FFE4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "9607BEF0-EA1B-49B6-B62B-E579B1A76038"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.1.0",
"versionEndExcluding": "17.1.3",
"matchCriteriaId": "CBB901CA-EF5B-437C-BDE0-65117E086B8E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
"versionStartIncluding": "17.5.0",
"versionEndExcluding": "17.5.1.3",
"matchCriteriaId": "67B602F3-DD03-424E-881C-84A885D97831"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_next_cloud-native_network_functions:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.1.0",
"versionEndIncluding": "1.4.0",
"matchCriteriaId": "4EB93DF6-780A-46E1-9C64-984DEDB2DAB9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_next_cloud-native_network_functions:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.0.0",
"versionEndIncluding": "2.1.0",
"matchCriteriaId": "E4F961AE-8DF9-402F-A927-11744BBD6B2C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_next_for_kubernetes:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.0.0",
"versionEndIncluding": "2.1.0",
"matchCriteriaId": "5D27384E-90A7-406F-83B6-184744CD8DC5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_next_service_proxy_for_kubernetes:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.7.0",
"versionEndIncluding": "1.9.2",
"matchCriteriaId": "4C7328B4-B7E0-460E-8270-116FE813FB23"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_next_service_proxy_for_kubernetes:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.0.0",
"versionEndIncluding": "2.0.2",
"matchCriteriaId": "DF803740-BAB5-43F9-8D69-A5E9081F8077"
}
]
}
]
}
],
"references": [
{
"url": "https://my.f5.com/manage/s/article/K000156912",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-625xx/CVE-2025-62583.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-62583",
"sourceIdentifier": "[email protected]",
"published": "2025-10-16T07:15:33.683",
"lastModified": "2025-10-16T15:28:59.610",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T13:26:06.710",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:navercorp:whale:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.33.325.17",
"matchCriteriaId": "58B46536-56DC-45CD-9F7C-4A0FC1875500"
}
]
}
]
}
],
"references": [
{
"url": "https://cve.naver.com/detail/cve-2025-62583.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-625xx/CVE-2025-62584.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-62584",
"sourceIdentifier": "[email protected]",
"published": "2025-10-16T07:15:33.833",
"lastModified": "2025-10-16T15:28:59.610",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T13:24:55.783",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:navercorp:whale:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.33.325.17",
"matchCriteriaId": "58B46536-56DC-45CD-9F7C-4A0FC1875500"
}
]
}
]
}
],
"references": [
{
"url": "https://cve.naver.com/detail/cve-2025-62584.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-625xx/CVE-2025-62585.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-62585",
"sourceIdentifier": "[email protected]",
"published": "2025-10-16T07:15:33.963",
"lastModified": "2025-10-16T15:28:59.610",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T13:13:19.683",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:navercorp:whale:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.33.325.17",
"matchCriteriaId": "58B46536-56DC-45CD-9F7C-4A0FC1875500"
}
]
}
]
}
],
"references": [
{
"url": "https://cve.naver.com/detail/cve-2025-62585.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-62xx/CVE-2025-6239.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-6239",
"sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02",
"published": "2025-10-21T13:15:36.950",
"lastModified": "2025-10-21T13:15:36.950",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Zohocorp ManageEngine Applications Manager versions 176800 and below are vulnerable to information disclosure in File/Directory monitor."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "0fc0942c-577d-436f-ae8e-945763c79b02",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "0fc0942c-577d-436f-ae8e-945763c79b02",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"references": [
{
"url": "https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2025-6239.html",
"source": "0fc0942c-577d-436f-ae8e-945763c79b02"
}
]
}
CVE-2025/CVE-2025-66xx/CVE-2025-6638.json
+50 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-6638",
"sourceIdentifier": "[email protected]",
"published": "2025-09-12T11:15:31.770",
"lastModified": "2025-09-15T15:21:42.937",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T13:33:08.580",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -12,6 +12,28 @@
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
],
"cvssMetricV30": [
{
"source": "[email protected]",
@@ -47,14 +69,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:huggingface:transformers:4.52.4:*:*:*:*:*:*:*",
"matchCriteriaId": "BA362206-8A09-4249-A522-427C8793D241"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/huggingface/transformers/commit/47c34fba5c303576560cb29767efb452ff12b8be",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://huntr.com/bounties/6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-94xx/CVE-2025-9428.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-9428",
"sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02",
"published": "2025-10-21T12:15:35.673",
"lastModified": "2025-10-21T12:15:35.673",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Zohocorp ManageEngine Analytics Plus versions\u00a06171 and prior are vulnerable to authenticated SQL Injection via the key update api."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "0fc0942c-577d-436f-ae8e-945763c79b02",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 5.5
}
]
},
"weaknesses": [
{
"source": "0fc0942c-577d-436f-ae8e-945763c79b02",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://www.manageengine.com/analytics-plus/CVE-2025-9428.html",
"source": "0fc0942c-577d-436f-ae8e-945763c79b02"
}
]
}
CVE-2025/CVE-2025-98xx/CVE-2025-9806.json
+89 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-9806",
"sourceIdentifier": "[email protected]",
"published": "2025-09-02T01:15:30.957",
"lastModified": "2025-09-02T15:55:25.420",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-21T13:42:28.893",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 0.5,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.5,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,30 +140,90 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:tenda:fh1202_firmware:1.2.0.9:*:*:*:*:*:*:*",
"matchCriteriaId": "9DA584AC-7E1F-4FF7-91EA-F82AC2D2D3CC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:tenda:fh1202_firmware:1.2.0.14:*:*:*:*:*:*:*",
"matchCriteriaId": "5999713B-57FE-4237-9E8D-E97F45EF81C3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:tenda:fh1202_firmware:1.2.0.20:*:*:*:*:*:*:*",
"matchCriteriaId": "AA340E03-2484-47C1-B9B4-9A5BBC615639"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:tenda:f1202:-:*:*:*:*:*:*:*",
"matchCriteriaId": "37DF507C-5EDA-46A0-851E-ED8BC0B54F88"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e9.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Broken Link"
]
},
{
"url": "https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e9.md#steps-to-reproduce",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Broken Link"
]
},
{
"url": "https://vuldb.com/?ctiid.322130",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.322130",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.640980",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.tenda.com.cn/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
README.md
+36 -32
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-10-21T12:00:13.670455+00:00
2025-10-21T14:00:15.754164+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-10-21T11:57:59.593000+00:00
2025-10-21T13:57:31.043000+00:00
```
### Last Data Feed Release
@@ -33,46 +33,50 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
314791
314797
```
### CVEs added in the last Commit
Recently added CVEs: `2`
Recently added CVEs: `6`
- [CVE-2025-5496](CVE-2025/CVE-2025-54xx/CVE-2025-5496.json) (`2025-10-21T10:15:34.733`)
- [CVE-2025-7473](CVE-2025/CVE-2025-74xx/CVE-2025-7473.json) (`2025-10-21T11:15:34.240`)
- [CVE-2025-10020](CVE-2025/CVE-2025-100xx/CVE-2025-10020.json) (`2025-10-21T13:15:35.487`)
- [CVE-2025-10639](CVE-2025/CVE-2025-106xx/CVE-2025-10639.json) (`2025-10-21T12:15:34.770`)
- [CVE-2025-10640](CVE-2025/CVE-2025-106xx/CVE-2025-10640.json) (`2025-10-21T12:15:35.420`)
- [CVE-2025-10641](CVE-2025/CVE-2025-106xx/CVE-2025-10641.json) (`2025-10-21T12:15:35.543`)
- [CVE-2025-6239](CVE-2025/CVE-2025-62xx/CVE-2025-6239.json) (`2025-10-21T13:15:36.950`)
- [CVE-2025-9428](CVE-2025/CVE-2025-94xx/CVE-2025-9428.json) (`2025-10-21T12:15:35.673`)
### CVEs modified in the last Commit
Recently modified CVEs: `43`
Recently modified CVEs: `72`
- [CVE-2022-49266](CVE-2022/CVE-2022-492xx/CVE-2022-49266.json) (`2025-10-21T11:50:13.180`)
- [CVE-2022-49267](CVE-2022/CVE-2022-492xx/CVE-2022-49267.json) (`2025-10-21T11:49:20.597`)
- [CVE-2022-49269](CVE-2022/CVE-2022-492xx/CVE-2022-49269.json) (`2025-10-21T11:46:33.073`)
- [CVE-2022-49281](CVE-2022/CVE-2022-492xx/CVE-2022-49281.json) (`2025-10-21T11:46:12.897`)
- [CVE-2022-49293](CVE-2022/CVE-2022-492xx/CVE-2022-49293.json) (`2025-10-21T11:46:00.520`)
- [CVE-2022-49297](CVE-2022/CVE-2022-492xx/CVE-2022-49297.json) (`2025-10-21T11:45:48.950`)
- [CVE-2022-49306](CVE-2022/CVE-2022-493xx/CVE-2022-49306.json) (`2025-10-21T11:45:22.003`)
- [CVE-2024-25560](CVE-2024/CVE-2024-255xx/CVE-2024-25560.json) (`2025-10-21T11:40:17.640`)
- [CVE-2024-25724](CVE-2024/CVE-2024-257xx/CVE-2024-25724.json) (`2025-10-21T11:34:59.940`)
- [CVE-2024-31156](CVE-2024/CVE-2024-311xx/CVE-2024-31156.json) (`2025-10-21T11:39:36.993`)
- [CVE-2024-32761](CVE-2024/CVE-2024-327xx/CVE-2024-32761.json) (`2025-10-21T11:38:58.723`)
- [CVE-2024-33604](CVE-2024/CVE-2024-336xx/CVE-2024-33604.json) (`2025-10-21T11:38:35.883`)
- [CVE-2024-33608](CVE-2024/CVE-2024-336xx/CVE-2024-33608.json) (`2025-10-21T11:38:00.290`)
- [CVE-2024-4181](CVE-2024/CVE-2024-41xx/CVE-2024-4181.json) (`2025-10-21T11:36:16.007`)
- [CVE-2024-45844](CVE-2024/CVE-2024-458xx/CVE-2024-45844.json) (`2025-10-21T11:43:40.243`)
- [CVE-2024-57888](CVE-2024/CVE-2024-578xx/CVE-2024-57888.json) (`2025-10-21T11:41:58.687`)
- [CVE-2024-57897](CVE-2024/CVE-2024-578xx/CVE-2024-57897.json) (`2025-10-21T11:41:44.657`)
- [CVE-2025-0401](CVE-2025/CVE-2025-04xx/CVE-2025-0401.json) (`2025-10-21T11:43:22.537`)
- [CVE-2025-0402](CVE-2025/CVE-2025-04xx/CVE-2025-0402.json) (`2025-10-21T11:43:03.437`)
- [CVE-2025-0403](CVE-2025/CVE-2025-04xx/CVE-2025-0403.json) (`2025-10-21T11:42:44.407`)
- [CVE-2025-20029](CVE-2025/CVE-2025-200xx/CVE-2025-20029.json) (`2025-10-21T11:41:21.793`)
- [CVE-2025-20045](CVE-2025/CVE-2025-200xx/CVE-2025-20045.json) (`2025-10-21T11:41:11.530`)
- [CVE-2025-20058](CVE-2025/CVE-2025-200xx/CVE-2025-20058.json) (`2025-10-21T11:40:49.670`)
- [CVE-2025-21087](CVE-2025/CVE-2025-210xx/CVE-2025-21087.json) (`2025-10-21T11:40:40.293`)
- [CVE-2025-21091](CVE-2025/CVE-2025-210xx/CVE-2025-21091.json) (`2025-10-21T11:40:28.907`)
- [CVE-2025-31475](CVE-2025/CVE-2025-314xx/CVE-2025-31475.json) (`2025-10-21T13:57:10.537`)
- [CVE-2025-33073](CVE-2025/CVE-2025-330xx/CVE-2025-33073.json) (`2025-10-21T12:45:50.347`)
- [CVE-2025-41018](CVE-2025/CVE-2025-410xx/CVE-2025-41018.json) (`2025-10-21T13:12:27.793`)
- [CVE-2025-41020](CVE-2025/CVE-2025-410xx/CVE-2025-41020.json) (`2025-10-21T13:12:13.663`)
- [CVE-2025-41021](CVE-2025/CVE-2025-410xx/CVE-2025-41021.json) (`2025-10-21T13:11:39.663`)
- [CVE-2025-41443](CVE-2025/CVE-2025-414xx/CVE-2025-41443.json) (`2025-10-21T13:07:13.683`)
- [CVE-2025-45968](CVE-2025/CVE-2025-459xx/CVE-2025-45968.json) (`2025-10-21T13:51:24.520`)
- [CVE-2025-48939](CVE-2025/CVE-2025-489xx/CVE-2025-48939.json) (`2025-10-21T13:56:42.543`)
- [CVE-2025-53860](CVE-2025/CVE-2025-538xx/CVE-2025-53860.json) (`2025-10-21T12:01:49.797`)
- [CVE-2025-55634](CVE-2025/CVE-2025-556xx/CVE-2025-55634.json) (`2025-10-21T13:57:31.043`)
- [CVE-2025-55637](CVE-2025/CVE-2025-556xx/CVE-2025-55637.json) (`2025-10-21T13:55:30.820`)
- [CVE-2025-6026](CVE-2025/CVE-2025-60xx/CVE-2025-6026.json) (`2025-10-21T13:15:36.800`)
- [CVE-2025-60855](CVE-2025/CVE-2025-608xx/CVE-2025-60855.json) (`2025-10-21T13:15:36.187`)
- [CVE-2025-60856](CVE-2025/CVE-2025-608xx/CVE-2025-60856.json) (`2025-10-21T13:15:36.567`)
- [CVE-2025-61539](CVE-2025/CVE-2025-615xx/CVE-2025-61539.json) (`2025-10-21T12:12:05.600`)
- [CVE-2025-61540](CVE-2025/CVE-2025-615xx/CVE-2025-61540.json) (`2025-10-21T12:12:14.517`)
- [CVE-2025-61884](CVE-2025/CVE-2025-618xx/CVE-2025-61884.json) (`2025-10-21T12:44:55.387`)
- [CVE-2025-61933](CVE-2025/CVE-2025-619xx/CVE-2025-61933.json) (`2025-10-21T12:12:54.180`)
- [CVE-2025-61935](CVE-2025/CVE-2025-619xx/CVE-2025-61935.json) (`2025-10-21T12:12:43.303`)
- [CVE-2025-61990](CVE-2025/CVE-2025-619xx/CVE-2025-61990.json) (`2025-10-21T12:12:24.840`)
- [CVE-2025-62583](CVE-2025/CVE-2025-625xx/CVE-2025-62583.json) (`2025-10-21T13:26:06.710`)
- [CVE-2025-62584](CVE-2025/CVE-2025-625xx/CVE-2025-62584.json) (`2025-10-21T13:24:55.783`)
- [CVE-2025-62585](CVE-2025/CVE-2025-625xx/CVE-2025-62585.json) (`2025-10-21T13:13:19.683`)
- [CVE-2025-6638](CVE-2025/CVE-2025-66xx/CVE-2025-6638.json) (`2025-10-21T13:33:08.580`)
- [CVE-2025-9806](CVE-2025/CVE-2025-98xx/CVE-2025-9806.json) (`2025-10-21T13:42:28.893`)
## Download and Usage
_state.csv
+123 -117
View File
@@ -213246,7 +213246,7 @@ CVE-2022-4850,0,0,c9b22dfbe69ddcd775fe8bf5e46305e8356db636b4274a9d88aae562f5f3cb
CVE-2022-48500,0,0,6310235f960528754f08d70ed3f4267ddf7cea72255caec824bcdc5aef7298b8,2024-12-26T19:15:07.023000
CVE-2022-48501,0,0,8a0b77d4bf434c94f5c2fe749e48bd0f0aadcff848b8775a58207b270e9c05ee,2024-12-26T19:15:07.243000
CVE-2022-48502,0,0,2adfaa33b4930a948be53d3289ccf59a8e279ba01a027a20fdd402eac46f646a,2024-11-21T07:33:27.053000
CVE-2022-48503,0,0,c603535a3131e2748adcc50a1e9287be039db1f569fef2f195b0b1dec7f2192e,2025-10-21T01:00:01.900000
CVE-2022-48503,0,1,c0df52948d01456ede2881527cd42d7847cc97a2ceab97c6215032dfd65fa23f,2025-10-21T12:45:30.383000
CVE-2022-48504,0,0,ef7281940e721cfe98e3e05c36cd8858038c8ea30b4619c0474b159210623cba,2025-06-03T15:15:24.477000
CVE-2022-48505,0,0,5f3cb211c9bfbabf92ef9a5f9f86fda7c50566ffef0a43661562171697633f57,2024-11-27T15:15:21.747000
CVE-2022-48506,0,0,430454da0ceacca6d82951d494cd6855f4189162831ae96e829e65c1abbdf6c0,2025-01-02T21:15:08.130000
@@ -213945,24 +213945,24 @@ CVE-2022-49185,0,0,8decf17dc7194f58aba208a0c1446b2ac47d420e091eccd4098d420dc942d
CVE-2022-49186,0,0,d9e5653d4714b0386751a8553d2c557af45424b2ff686d2495df52f8b98d7392,2025-10-01T20:15:53.900000
CVE-2022-49187,0,0,d3ebff78b2a1817ebb5ae582ac6f38b84d5e881fec12eff27f86ee3ad0b8410a,2025-10-01T20:15:54.180000
CVE-2022-49188,0,0,6cf93826810230288369fa6e9f536e4e2b82eee5165c300cae45689d6b8b030b,2025-09-23T13:43:59.843000
CVE-2022-49189,0,1,2bd6f7fdcb662c571721269ddf48abada151b92147ee848edfd8c12c85ba2ac7,2025-10-21T11:57:59.593000
CVE-2022-49189,0,0,2bd6f7fdcb662c571721269ddf48abada151b92147ee848edfd8c12c85ba2ac7,2025-10-21T11:57:59.593000
CVE-2022-4919,0,0,98cb93515b7aa4f8c3b1d5996b5569b16bc03402364c91cf633e9a3eefb9bd48,2024-11-21T07:36:14.903000
CVE-2022-49190,0,0,e636d6b7e1300e65ae480b87f8efd641dd51cb5af22b988f3e9ea3d29b4969a0,2025-05-02T07:15:49.450000
CVE-2022-49191,0,0,f5470d643e0c51744be64f5a23b3e1481e4c2ce256d874bd036682402609dadc,2025-09-23T13:44:12.120000
CVE-2022-49192,0,1,0bbd4f599a6498ec308b3254b106a8a23062d5b9343e0f36c54aa337eb7b400c,2025-10-21T11:56:44.643000
CVE-2022-49193,0,1,623d92dfcdad5f816df60bf1e1ccbee48d8c2efe1cc1868e9b9849be26cfcc43,2025-10-21T11:56:25.580000
CVE-2022-49194,0,1,70feaa797232d0de4811b802d1cf4616a74e3389b91e7377a4153cb23453d868,2025-10-21T11:56:00.703000
CVE-2022-49192,0,0,0bbd4f599a6498ec308b3254b106a8a23062d5b9343e0f36c54aa337eb7b400c,2025-10-21T11:56:44.643000
CVE-2022-49193,0,0,623d92dfcdad5f816df60bf1e1ccbee48d8c2efe1cc1868e9b9849be26cfcc43,2025-10-21T11:56:25.580000
CVE-2022-49194,0,0,70feaa797232d0de4811b802d1cf4616a74e3389b91e7377a4153cb23453d868,2025-10-21T11:56:00.703000
CVE-2022-49195,0,0,b68e5018bd8e6e85e9e258924aac727edf90f28f842d6737304ec1b23591314a,2025-09-23T13:44:29.413000
CVE-2022-49196,0,0,b43f9a5db51e6e8fc4e0221d2d8421a5a51b8961f5f85e793b87fe453bfe4bb9,2025-03-25T15:07:33.423000
CVE-2022-49197,0,0,930b7f3f00b34d1bfab59501a5eded1484b494795347e2017a5b9e5fb7d41801,2025-09-23T13:46:39.267000
CVE-2022-49198,0,0,30ca2a921797efeb5e7f637039accd490501338e9cffd15739bcae7ff121cefb,2025-09-23T13:50:52.883000
CVE-2022-49199,0,1,37f8e9dd88864161322fef3aab4bb596235ca456367ff27e9a63411dce4cf4b2,2025-10-21T11:55:37.253000
CVE-2022-49199,0,0,37f8e9dd88864161322fef3aab4bb596235ca456367ff27e9a63411dce4cf4b2,2025-10-21T11:55:37.253000
CVE-2022-4920,0,0,6d91084fa28049e94d0212ded35971c929fba3ddd5aefbde0fa3ce59a47f5d1c,2024-11-21T07:36:15.140000
CVE-2022-49200,0,0,5214a925331d11b108006f39ccc6cbf63a6d234efb4105cca22826860647df38,2025-09-23T13:52:13.543000
CVE-2022-49201,0,0,8de9acef9ba5e14888d205e8c5c1384e86bf9b84948a8b0b2e01760df5483256,2025-10-01T20:15:54.577000
CVE-2022-49202,0,0,40ed4769e1d9a3c644eec6bf1d0576dd84e9b5c2ca32da6f359dd751fb7c77bc,2025-09-22T20:58:09.390000
CVE-2022-49203,0,0,d9d33f1856839ae358e8c112f7a2c0c7edc2c7000fa850896499060f7d436bf5,2025-10-01T20:15:55.040000
CVE-2022-49204,0,1,04f66211fe69cfa301afdaecb3496294b4bf7d42656c454c18ae45becbadd660,2025-10-21T11:54:37.610000
CVE-2022-49204,0,0,04f66211fe69cfa301afdaecb3496294b4bf7d42656c454c18ae45becbadd660,2025-10-21T11:54:37.610000
CVE-2022-49205,0,0,3d919b59ae72a3413e27abfc6e23e6739cb95342c24b2fe88b8c06be38edf6ab,2025-09-22T20:59:16.993000
CVE-2022-49206,0,0,db140ad6a79b277cb5aa796414c32867383aa1b2a1d2d0e416069054e04927d1,2025-10-01T20:15:55.350000
CVE-2022-49207,0,0,275e8ea5376194ca44007c2664a2e29a6c172dce4a1b048091c887b0914bca40,2025-10-01T20:15:55.557000
@@ -213976,20 +213976,20 @@ CVE-2022-49213,0,0,626cb697be0631e473597472437b59bc864c7a3be17fbca5098a5be6d503a
CVE-2022-49214,0,0,83720aaac108b093e0f3ac79c39b2ac7e5d9acbca4bfb3d13239b241338f1707,2025-09-22T20:59:54.547000
CVE-2022-49215,0,0,25201f61693f1b3cf177ccfef954042f79da2de2bf5f076ce3d07e0764e7cdfd,2025-10-01T20:15:56.840000
CVE-2022-49216,0,0,a04b3e5acd170b37e831548349326d3d3d40878b9da18b3fb308c6721b85374d,2025-10-01T20:15:57.050000
CVE-2022-49217,0,1,795a1639860ab2472d1bee326c2a67ac97d9555377df0b29e28a515b3fe25af8,2025-10-21T11:54:10.390000
CVE-2022-49217,0,0,795a1639860ab2472d1bee326c2a67ac97d9555377df0b29e28a515b3fe25af8,2025-10-21T11:54:10.390000
CVE-2022-49218,0,0,650c765164148998cee6ff4bd06cc14707f07bbc42abe9317d3b0c8d1bff9440,2025-10-01T20:15:57.240000
CVE-2022-49219,0,0,c39905ad6054034a0db4abb89ad6fb3bfd2877c56c31ef9496a7b8ab1a2af224,2025-05-02T07:15:49.570000
CVE-2022-4922,0,0,845ac042dcd4b5ec74159a973e2efc3ff642abc4a48ec290dcd8ade6154e85ef,2024-11-21T07:36:15.513000
CVE-2022-49220,0,1,a55c408618208317d46fd5f0b85aae707e48dfd22796924a70acc16c35bb9ed5,2025-10-21T11:52:10.660000
CVE-2022-49220,0,0,a55c408618208317d46fd5f0b85aae707e48dfd22796924a70acc16c35bb9ed5,2025-10-21T11:52:10.660000
CVE-2022-49221,0,0,751ed13e1c2c93277a7f00b673467ef28509789acbf607d0bef0547ccd16397d,2025-10-01T20:15:57.453000
CVE-2022-49222,0,0,9bc95e7ca9cca2f6ecd7ea513a57ff05de8563c5f369c31eadc8e96768cd5bb7,2025-09-22T21:01:57.970000
CVE-2022-49223,0,0,1da38f2e313992dfe4bb0f6b9b9770f9230604011be400d7427f2bb60164ad25,2025-03-25T15:07:53.967000
CVE-2022-49224,0,0,6ab2a8c063333f9c9729f3832ba8ed004647d967d447bdb2bbaf87c25340c0f7,2025-10-01T20:15:57.640000
CVE-2022-49225,0,0,d7ffe48f20a8d9125e95c0e0a01ec5e4a4a9a30acef144ce391db106bbda1da0,2025-10-01T20:15:57.830000
CVE-2022-49226,0,1,0da911d736aa2b2876e437aca708bf323e54c7af4f72165138e0276c125d7e96,2025-10-21T11:52:18.433000
CVE-2022-49227,0,1,abfe0b52eb3364bf0cf9a06bac221365be8a90882c49950a32978cfa94831aad,2025-10-21T11:52:30.137000
CVE-2022-49226,0,0,0da911d736aa2b2876e437aca708bf323e54c7af4f72165138e0276c125d7e96,2025-10-21T11:52:18.433000
CVE-2022-49227,0,0,abfe0b52eb3364bf0cf9a06bac221365be8a90882c49950a32978cfa94831aad,2025-10-21T11:52:30.137000
CVE-2022-49228,0,0,b15c86895e2112da85eb57c7d77a29afb77337020868fb02930642161d5e0464,2025-09-22T21:02:30.603000
CVE-2022-49229,0,1,76202caefdbe9a58747e38aa73c34371db015f523822fcb3a45077d29ce3f624,2025-10-21T11:52:00.523000
CVE-2022-49229,0,0,76202caefdbe9a58747e38aa73c34371db015f523822fcb3a45077d29ce3f624,2025-10-21T11:52:00.523000
CVE-2022-4923,0,0,41664ac8b2df2573b9f33a9b7990a9913a2c441bb6eccf7450f8a6f553a54573,2024-11-21T07:36:15.623000
CVE-2022-49230,0,0,953a0bdbf0416b6a901ef053fd9747121cafc32ba60f1b7aa297bb0ad3996a89,2025-10-01T20:15:58.007000
CVE-2022-49231,0,0,00cda7d9cbb153cd3c2f12bb2a605c897197a2101258366bb4564811dfd3c859,2025-10-01T20:15:58.180000
@@ -214005,11 +214005,11 @@ CVE-2022-4924,0,0,478cd65cc39d1a4a12365dd984816c2000e169260e72489e81fdf56aab2bfb
CVE-2022-49240,0,0,9c3820931c61b6b1b089cf8be0fcbcf983f091143be9264fde771b3774e72b65,2025-10-01T20:15:59.360000
CVE-2022-49241,0,0,62fa2a708c52cc041d80828cfaa85f94aac62bbd3fb2c4481ec3f8a5a4e02b76,2025-10-01T20:15:59.543000
CVE-2022-49242,0,0,6b52e55bf85919c28772c25e73f0d3216cb0af8fb9cb018e2274cefcf526f19d,2025-10-01T20:15:59.740000
CVE-2022-49243,0,1,3ad85c2785f3900dc1e5c4c164a132a95e0ec3da44c29f2b76a93a7cb3f1781a,2025-10-21T11:51:52.600000
CVE-2022-49243,0,0,3ad85c2785f3900dc1e5c4c164a132a95e0ec3da44c29f2b76a93a7cb3f1781a,2025-10-21T11:51:52.600000
CVE-2022-49244,0,0,c8aa92a29ce1524426c9ef672ddb39b99484960d11cb9d3a4c15977d15725d0b,2025-09-22T21:17:32.307000
CVE-2022-49245,0,0,91d0337456514727786419856f46e2de39614c5cbeb3b255b28edbf2afb410ce,2025-09-22T21:17:51.690000
CVE-2022-49246,0,0,4a9b9a6ab821fbf1cda7d9aca8015accb15b923e81960dd2b744f8eab23d74e5,2025-09-22T21:18:00.680000
CVE-2022-49247,0,1,7a68395638b77b4baee7059dcb2ed276849467b3cb5bfb3019cf9226482ada74,2025-10-21T11:51:41.837000
CVE-2022-49247,0,0,7a68395638b77b4baee7059dcb2ed276849467b3cb5bfb3019cf9226482ada74,2025-10-21T11:51:41.837000
CVE-2022-49248,0,0,e2d8c7d33af50504618269332968c99360eec7f12c7d561e5d155ce35ec74863,2025-09-22T21:19:14.473000
CVE-2022-49249,0,0,c7a8e275edb0c365afbc3b420ee25e24a8607f30b0bdaa75c721de905457c151,2025-09-22T20:53:39.607000
CVE-2022-4925,0,0,883abcc543d22f24dfb5afedfff08048c863049c7000143c7e9a88ee1850b7f3,2024-11-21T07:36:15.857000
@@ -214018,22 +214018,22 @@ CVE-2022-49251,0,0,8bc91a9ce6f9ecfa2078af306b81a20a4ebd0dacf31f4dd281f7ecb8e15e3
CVE-2022-49252,0,0,8cdf9c53762702022f60f60f1d1658e6c3e598348e78c06a3f35c23dbacb1231,2025-09-22T20:55:22.080000
CVE-2022-49253,0,0,2cebd762873820d3ba33bee151f77e900148eac32b9c6a1d1017aa442ee396d4,2025-09-22T20:55:33.827000
CVE-2022-49254,0,0,372e0d8d7a1169f66c3c9df8092ca6675db28679537f5e073a5b20170b82c032,2025-09-22T20:55:41.347000
CVE-2022-49255,0,1,7bd4bc1671cacd75be72fdd8ba12466cf6f9365d7159870b1f91ea3cb577f84e,2025-10-21T11:51:18.873000
CVE-2022-49255,0,0,7bd4bc1671cacd75be72fdd8ba12466cf6f9365d7159870b1f91ea3cb577f84e,2025-10-21T11:51:18.873000
CVE-2022-49256,0,0,030f13467f645753786daa6f6dd55be9c7eff8561a1daab768f75d0fae903aaa,2025-09-22T20:55:58.940000
CVE-2022-49257,0,0,76eed717650d01097573a02c5b68b30747beefe66a07b2f080c545de1ff75e4c,2025-09-22T20:56:14.770000
CVE-2022-49258,0,0,d8543e79c7f390c86910a6d86acf1566c410bf5a0dc24de4e1096978bcafe46d,2025-03-25T15:23:07.917000
CVE-2022-49259,0,1,06db12c0960ecd01e3f71c7d827a8ab09918a24ab83a9c0bd84fc5c8d7b11458,2025-10-21T11:51:28.850000
CVE-2022-49259,0,0,06db12c0960ecd01e3f71c7d827a8ab09918a24ab83a9c0bd84fc5c8d7b11458,2025-10-21T11:51:28.850000
CVE-2022-4926,0,0,97f811d640cb5b71af561412ae9269e091dd51730c3d06da7203d649f9e5797b,2024-11-21T07:36:15.960000
CVE-2022-49260,0,1,9a2c8da68c89d8838371958b7d0fa6a2921fed29e69fbf4899f952044a30bce5,2025-10-21T11:51:02.133000
CVE-2022-49260,0,0,9a2c8da68c89d8838371958b7d0fa6a2921fed29e69fbf4899f952044a30bce5,2025-10-21T11:51:02.133000
CVE-2022-49261,0,0,b60850fcb2a06621e1b118c4edea476d2c633946e1517378de3c9ddd15f136c5,2025-09-22T20:57:13.287000
CVE-2022-49262,0,0,a4c5e2284ec13136783f323f46de9eba5799a6cee52c028028af0a589727b5b9,2025-09-22T20:57:24.633000
CVE-2022-49263,0,0,04ed3de48838f13ffd19287a78e7a0170c3ee7200e7a199eb9394b870c3f9c49,2025-09-22T20:31:24.020000
CVE-2022-49264,0,1,1c1a0bf2996b0f2528192128e798162fb4e7aa9c25f2f3e49e0d7f2a4c196122,2025-10-21T11:50:45.753000
CVE-2022-49265,0,1,658e933ff2c3df95692e1f7ca087800b89eef405c003555a72aaf07d28ba979c,2025-10-21T11:50:26.747000
CVE-2022-49266,0,1,f43556dda220cf3d09877d95f3210a2cb7aee6f4a9cda4115845e279b6bb520c,2025-10-21T11:50:13.180000
CVE-2022-49267,0,1,d38dfae17fd506b4c4213ad8cabe6215f5e0aea06d8673efab1d2c7d668c408e,2025-10-21T11:49:20.597000
CVE-2022-49264,0,0,1c1a0bf2996b0f2528192128e798162fb4e7aa9c25f2f3e49e0d7f2a4c196122,2025-10-21T11:50:45.753000
CVE-2022-49265,0,0,658e933ff2c3df95692e1f7ca087800b89eef405c003555a72aaf07d28ba979c,2025-10-21T11:50:26.747000
CVE-2022-49266,0,0,f43556dda220cf3d09877d95f3210a2cb7aee6f4a9cda4115845e279b6bb520c,2025-10-21T11:50:13.180000
CVE-2022-49267,0,0,d38dfae17fd506b4c4213ad8cabe6215f5e0aea06d8673efab1d2c7d668c408e,2025-10-21T11:49:20.597000
CVE-2022-49268,0,0,d0d260cd06643fe5a8566b693f98f582b20d2c5450c616fc1851d1110a195812,2025-09-22T20:31:32.890000
CVE-2022-49269,0,1,d8eb3769d6542da269df0e3bbd20b18719275a22b044bf535fbe4c1127b784db,2025-10-21T11:46:33.073000
CVE-2022-49269,0,0,d8eb3769d6542da269df0e3bbd20b18719275a22b044bf535fbe4c1127b784db,2025-10-21T11:46:33.073000
CVE-2022-4927,0,0,38cabefc86faa21ef7a71fd3b17ce17fef5bf62f0a9bf16de2aec372df1e9418,2024-11-21T07:36:16.143000
CVE-2022-49270,0,0,a79ceaafa94facf74ac9d810625f0ab321a34474550bb47a969662c072a7274e,2025-03-25T15:23:34.137000
CVE-2022-49271,0,0,2b445e779444432a07578168adc5f15b546e35509523f0f51d205600b9f8fc9a,2025-09-22T20:32:26.453000
@@ -214047,7 +214047,7 @@ CVE-2022-49278,0,0,7bd654b59643221a4b501f31484ff00ec95675daf8bebfcb3b494bab102e8
CVE-2022-49279,0,0,d9162934aa176360c5f3dfdbdf2fd6bfd5071bec1fff429492beeb585c5f5979,2025-10-01T20:16:00.770000
CVE-2022-4928,0,0,55113902c03503fa1ab1a487ca9bd5c82e2b7a386b6bdc538a9776f2c4eb50bb,2024-11-21T07:36:16.280000
CVE-2022-49280,0,0,812e8248014e550bf44eb29245ef073c24ac3cd354627bf3f6b082955b75aaf7,2025-10-01T20:16:01.007000
CVE-2022-49281,0,1,d4499607da7d96c9d58f775a141c18d1652b4ba11ccca8094c5e12d74ab88360,2025-10-21T11:46:12.897000
CVE-2022-49281,0,0,d4499607da7d96c9d58f775a141c18d1652b4ba11ccca8094c5e12d74ab88360,2025-10-21T11:46:12.897000
CVE-2022-49282,0,0,3920f6e38cdc1300097d4008fdbc99a7e2626a4902edcaabe6f8fd2edd31c064,2025-10-01T20:16:01.313000
CVE-2022-49283,0,0,ac6401a395128eae762cfb1b5cba93fe9e1813303b25f11bdde911c31ed56361,2025-09-22T20:44:44.873000
CVE-2022-49284,0,0,49ff3f2991516cd7a4b4f6156d0e3d4b8fe66b0a68b9d2225faf64197aa2910e,2025-10-01T20:16:01.530000
@@ -214060,11 +214060,11 @@ CVE-2022-4929,0,0,44429f972431c9add0abbd71f7b863649b7649f353d704d77271ec361956d7
CVE-2022-49290,0,0,14ec2e7e926a3ad65530085af9185a1d617c34ae8715927206d35def62ba93e4,2025-10-01T20:16:01.767000
CVE-2022-49291,0,0,cd4050a930fa0529befc40f3869b9635a8a0bbfce0d443cc82308b05156cce4f,2025-03-25T14:49:23.147000
CVE-2022-49292,0,0,969c6743144e1c81555a032aefa37c0bb269ce016409ef82a4634e5696e6507f,2025-09-22T19:44:21.193000
CVE-2022-49293,0,1,3246eff1f1c052425b92c9c20b180a5053b41e813929c27918b02873aa1b4012,2025-10-21T11:46:00.520000
CVE-2022-49293,0,0,3246eff1f1c052425b92c9c20b180a5053b41e813929c27918b02873aa1b4012,2025-10-21T11:46:00.520000
CVE-2022-49294,0,0,cd3dbbb6235858a43e014ae6603171098066616caa7051d8ef69017efb3f96b8,2025-10-01T20:16:02.007000
CVE-2022-49295,0,0,d5a3a6ae5c468c9c5e4422b9f50b5a26b0871f62fea8c3bfc3ff9d74936298aa,2025-10-01T20:16:02.203000
CVE-2022-49296,0,0,83c1090bcc40ebdaefe7247bcab05688f8e426e169503b82055a2fac7914359c,2025-10-01T20:16:02.430000
CVE-2022-49297,0,1,41cb445111b566578963cf6558ce8a16be48036a39396d65230362217e115bec,2025-10-21T11:45:48.950000
CVE-2022-49297,0,0,41cb445111b566578963cf6558ce8a16be48036a39396d65230362217e115bec,2025-10-21T11:45:48.950000
CVE-2022-49298,0,0,0282d63332a656167897c1649cae9078f2550e5d49e959f7f8d12d138562952c,2025-10-01T20:16:02.637000
CVE-2022-49299,0,0,858e440c602b388e1110e4a6eed2edf8cf9a1182fd6623384ad6f3ad00234ba0,2025-06-19T14:15:34.170000
CVE-2022-4930,0,0,7e21b5888ba08ac9f714e1d7cc949231011fc7edea53dba39ac9bb8b71344e77,2024-11-21T07:36:16.550000
@@ -214074,9 +214074,9 @@ CVE-2022-49302,0,0,713270f991fdb2404590626f8c89788882fab6bc863eb3803a9dfab206b10
CVE-2022-49303,0,0,e615145fb3dfd80f01804cd866917f1d8ca669c797fd9bea805149c9713e769a,2025-10-01T20:16:03.543000
CVE-2022-49304,0,0,824da836fc63f7823755d6959923d317cf47e18cea3fec7edfc93ca701aa8b83,2025-10-01T20:16:03.737000
CVE-2022-49305,0,0,bce1cbb4da9575868210608477511a8c93928324c8a3261e036f62b5bb3375ee,2025-10-01T20:16:03.950000
CVE-2022-49306,0,1,d9c580d08c48bab8a348b6d20163a5689161f5910d1172e0f07555ed162a7f83,2025-10-21T11:45:22.003000
CVE-2022-49306,0,0,d9c580d08c48bab8a348b6d20163a5689161f5910d1172e0f07555ed162a7f83,2025-10-21T11:45:22.003000
CVE-2022-49307,0,0,60bef0c82f0b2af2121e749d3a7b8125a70d233181336a08a9e224197f5c9be2,2025-10-01T20:16:04.173000
CVE-2022-49308,0,0,dc3d076ffa84dcbfa2890e99ae0f259f2be16c54a8b6e9a226cb82df100ad443,2025-02-26T07:01:07.607000
CVE-2022-49308,0,1,26e085a324c0a26b52ad348da0ae6d56cc0160c0b2006a36d07b1594a529b839,2025-10-21T12:19:21.033000
CVE-2022-49309,0,0,bd0a7708329f579b533d8d812d36ad826fb646dae9d253723956b69ad9e7bdd4,2025-05-02T07:15:49.683000
CVE-2022-4931,0,0,a532fe15470676bd43e3e554e3755fa6ea4f32eaed39a0989b1e4aa5acb9c67c,2024-11-21T07:36:16.680000
CVE-2022-49310,0,0,caaf709e7de8182e2a26fe48f0741f8873f232916df20f461e00640db3ccd858,2025-10-01T20:16:04.583000
@@ -214104,41 +214104,41 @@ CVE-2022-4933,0,0,d122e5bd0202c57480b45e5b80ba8ba9aee30fe0686b6e4b51d4527b501848
CVE-2022-49330,0,0,83d3425c4b099650ada5de41f4a19dcf673264689a165b2d395c7654b12cd2c9,2025-09-22T20:03:28.833000
CVE-2022-49331,0,0,0441d4ce193384f78d2a399649ffc6da964a430053258977ab3ab770aff4da40,2025-10-01T20:16:09.883000
CVE-2022-49332,0,0,6871dab4f8a6058b277bf43e20e3eabad16eb4fba207cc72d00aeab5866ca152,2025-10-01T20:16:10.153000
CVE-2022-49333,0,0,87078385d39973b4120d5cafc6bb25568a078495fed65c66be34d5555b7d7dd7,2025-02-26T07:01:10.090000
CVE-2022-49333,0,1,2959dba1a72c28c19e2c880b33649b1d14c696ca39e9436fa7fe1f8e299f8118,2025-10-21T12:19:07.810000
CVE-2022-49334,0,0,15ce5093a54c335ed5638838435dfee1355cdb214d708de17c0ffb88c26f00a2,2025-10-01T20:16:10.380000
CVE-2022-49335,0,0,3de6fcdb14e3b3636e2d65f5a55b25181d568a47bfec383a40d68557d1de5984,2025-10-01T20:16:10.593000
CVE-2022-49336,0,0,95cf031653d3e23c756400663e97a36923c3d638e4a33b8a654d956b85447123,2025-02-26T07:01:10.370000
CVE-2022-49336,0,1,254ebde0c150954e83a30cc870b252fb03da87db7ef27376f18d2b9d8d69608c,2025-10-21T12:18:57.027000
CVE-2022-49337,0,0,757521cd9e28167fb2be4213a1d10af55ac7b0df6f166b9084f77a642153031a,2025-09-22T20:03:53.470000
CVE-2022-49338,0,0,0f78030b666a1e9a926686fa1e522fa918ed1098a80989e00b881db0f537a919,2025-02-26T07:01:10.560000
CVE-2022-49338,0,1,c004a4d7e2cf21cb258a4f9fd83bfa0cc9bd2cf5c16790c906b645f6a1f0ce48,2025-10-21T12:18:49.723000
CVE-2022-49339,0,0,0fc6293ebf5149f8d57a085147ad4cb84f05e01347c11a9be8953b57d5805fa5,2025-09-22T20:26:28.693000
CVE-2022-4934,0,0,56ce5ce2e2af34c46b4bc4a41f82652c91d66b92f181e703a04356d294695edf,2025-02-11T15:15:15.590000
CVE-2022-49340,0,0,c90db6d99a01210831cbc231978736b2166eda4e759d06bb192fd6e777487a40,2025-02-26T07:01:10.753000
CVE-2022-49341,0,0,67f1564f60af02b44a20481bcbbf84409aff294b24daab3aa48cc08e1d336c1b,2025-02-26T07:01:10.857000
CVE-2022-49340,0,1,1507698bbbc53d3995b94bf76e2cfc7684e7d7fbcf3d9cc7afaa0029b2a1d462,2025-10-21T12:18:28.640000
CVE-2022-49341,0,1,48641af9ceff3e9a1634a6581cb2b33f03414ee6f5e74cabb10246efd1eceb09,2025-10-21T12:18:14.827000
CVE-2022-49342,0,0,10b524d0af783cfb7a7dadd07034edad3672441cee1bbad65c29ce0ba9e476ad,2025-10-01T20:16:10.800000
CVE-2022-49343,0,0,5c70fbee4a7bf8c0c50f24633a1fba9535b73a0a4d51f84461a387cb2825f514,2025-02-26T07:01:11.040000
CVE-2022-49343,0,1,b3bb1da5574bea912923f177dd583b42c0a33d18da6623fdb4ddcdc7725061c8,2025-10-21T12:18:01.940000
CVE-2022-49344,0,0,fc162fbbcc9fdcc72b8e6b7ca262802c4f0ef62acfa5e595d27fd55058b690f5,2025-10-01T20:16:11.017000
CVE-2022-49345,0,0,38d92082ca5839ece4b8e9c35dbe83bc0e84dbad1344ec2a60ccb9d5d4c65e20,2025-09-22T20:27:33.800000
CVE-2022-49346,0,0,ea481d6472f68222bc26e9ebdf06c2a22ed0d6c79d8a5237828502d0b389c412,2025-10-01T20:16:11.273000
CVE-2022-49347,0,0,050e817f7454d6117469de83a23c5667b8af1b80b0875c9863371c4605ba4396,2025-09-22T20:28:12.087000
CVE-2022-49348,0,0,6c2cb9b9c185d7e6582ef01658d9e891cd3a6d7fa7a7ce81fa9f0fda7b37d7dc,2025-02-26T07:01:11.533000
CVE-2022-49348,0,1,91b4bf1bb6332c666bda931e987ebcb2003d2d240fdfb349e92c81c06355e7b6,2025-10-21T12:17:52.447000
CVE-2022-49349,0,0,1aa0d1d0eb3b79e2c845a874dc5fe1db90a2fe64fbb452307be608b1f11cea9e,2025-03-25T14:51:05.100000
CVE-2022-4935,0,0,c31e88e6073fd3a29bae4107f25ae33694ff5130dac188737279f3976c97e421,2024-11-21T07:36:17.127000
CVE-2022-49350,0,0,c29a9dac4e17c2a4f897adb4e6c5d4fa3e1f6c0350abd2bc141ae2daff0b545a,2025-09-22T20:29:16.223000
CVE-2022-49351,0,0,ffcdb96357163ac92bb09ff32e815283ab12f0146f21077a100de4ed9f3f9e4a,2025-10-01T20:16:11.547000
CVE-2022-49352,0,0,823244c735e96d1908eee00f54805dc289c4857d5af5fb9bda42577bca86b134,2025-06-19T13:15:23.173000
CVE-2022-49352,0,1,7a9a1815934c1c1eef81e34a91e01b3c00c143f821782d09b0688dc5483b4043,2025-10-21T12:17:44.107000
CVE-2022-49353,0,0,a4122dca03bc31158973e24c671f7ec370858571cf881a34f8b3e3e35899dd95,2025-10-01T20:16:11.783000
CVE-2022-49354,0,0,ed9c2d5fd91afb554802098e7a54382d620c1bbeceb97d0490e52a2d1b3adcf7,2025-10-01T20:16:11.993000
CVE-2022-49355,0,0,80fa4fd5e635de4f91692140e2c86158eee6f65edf7fc01373d8d1f58728fae1,2025-02-26T13:15:34.157000
CVE-2022-49356,0,0,69a79f3405e3fcc6bbe03cb0dc1ec5148dce71753a0254d1854098f2f95da1aa,2025-02-26T07:01:12.300000
CVE-2022-49357,0,0,4c05a89d1fb039be9907925130b399696bea0bfb8e04a1ad5943d062299034dc,2025-02-26T07:01:12.390000
CVE-2022-49356,0,1,a5b616d35887b454c233832e94098323430fa7aa4a12f5ff4bea7de5ef2427b4,2025-10-21T12:17:26.027000
CVE-2022-49357,0,1,bb6d157a8526c4531f51643df2e27cbf4f3abd826fe8f06493edb62d716899b5,2025-10-21T12:17:13.093000
CVE-2022-49358,0,0,53b02b2242f94cd20a9b345c98f6f471372a515e7b92b042d78131ffed76d258,2025-10-01T20:16:12.230000
CVE-2022-49359,0,0,04430deef42b56e25489bf53e5d3b3ee6d132eb035d8bb0c1c1ef4039fdfd9b6,2025-03-25T14:51:30.127000
CVE-2022-4936,0,0,65f80b05cad36259fef0938d250fce71f92bdab50ccfcffc0c93e77961d09f04,2024-11-21T07:36:17.243000
CVE-2022-49360,0,0,58f3ba0214b9f1a09e065f063c4fa146ef93da07e466a19b24783e6e58458bc1,2025-02-26T07:01:12.677000
CVE-2022-49361,0,0,6de22060ff6180a654b5816dec787b12181feaacec850414380b3679a1d56061,2025-02-26T07:01:12.770000
CVE-2022-49360,0,1,76223256d45b5c74e54f6fa0d394a8b2b79c2ad65db9373a3af6d8da4e5fbf73,2025-10-21T12:17:01.810000
CVE-2022-49361,0,1,d69684fd73dc1de282f39837c0b4fed9eae5d7b2d8aa038cef509455c24e59c8,2025-10-21T12:16:53.300000
CVE-2022-49362,0,0,b1021a8d9aea557c300f83c9e637ecbc137f5a3deb611d0609bb06b40c7f6e26,2025-03-25T14:51:55.130000
CVE-2022-49363,0,0,6e8694933c5611870046e45012eae7390bb9b1b83cdcdd51716ace57dc279e0c,2025-02-26T07:01:12.953000
CVE-2022-49364,0,0,2f69d299a1a99a96a5ca8c2029234e8effb0c54e7032f7150bbcbf55f1987595,2025-02-26T07:01:13.043000
CVE-2022-49363,0,1,1f0ff122156ce52b8bbcc6b618e67957f8eef41bd96aa228942bf27891e9dbb6,2025-10-21T12:16:43.710000
CVE-2022-49364,0,1,c5c7e213b3df925a02052a7b4306b06936102eb09b0ea4823d6cdbd9c41b6634,2025-10-21T12:16:27.903000
CVE-2022-49365,0,0,6bf7f99f395444fbf2b7f9dbc9181055b0f16debf7539833a0734e21b8d3d4f0,2025-10-01T20:16:12.457000
CVE-2022-49366,0,0,03711e3b6b82c78d6b9c4053ae77e1b287d432a7f0cfc2f63479093abda9453c,2025-10-01T20:16:12.680000
CVE-2022-49367,0,0,d336cc13010487f1e396902ddce0fdbdfb2752b2dfaed130dcf46b10d5a24c4b,2025-10-01T20:16:12.887000
@@ -214147,19 +214147,19 @@ CVE-2022-49369,0,0,74552c2bcbdb2dd56abded4088536e0c51f75b24ac2f2cd926901942a1d6d
CVE-2022-4937,0,0,07302c80f5a7c2979805d71a80cb3053942460da65e6d67dc85b7bf9334a2383,2024-11-21T07:36:17.353000
CVE-2022-49370,0,0,64a5dd9585b1946c6e88d5021d3d16125fd09314276c848909f274e9c52c0e8f,2025-10-01T20:16:13.750000
CVE-2022-49371,0,0,3fc49ce2d525a6db00eb7bb89d817fc8d470e14b98cdb5c3fc31886e03e30447,2025-10-01T20:16:14.087000
CVE-2022-49372,0,0,7da91234c72ad69adb7f1c55eb45ddcbd51ed0bde4ed89f4f202f5fbefef0946,2025-02-26T07:01:13.870000
CVE-2022-49372,0,1,b5c57dfc5fda9e9873b5f8b63660ee2668aec6285bba93b383eed83568d00cef,2025-10-21T12:16:14.243000
CVE-2022-49373,0,0,02e54736a88ba77157e3dfc5a7d6213c0f5d8fd55c87d23f507315dde82641cd,2025-10-01T20:16:14.300000
CVE-2022-49374,0,0,6c77976c36de1d172585afa5991b345766e80db64c5f277b3815874acb6702a0,2025-10-01T20:16:14.503000
CVE-2022-49375,0,0,286e5bae4e08853c4e3bd51f585865719231661bdc4335206ee351189b678ab7,2025-10-01T20:16:14.740000
CVE-2022-49376,0,0,0bbd74d05cced06436e975d9b64f69225cdc488f717f17fb9e3909bab2a782ac,2025-10-01T20:16:14.967000
CVE-2022-49377,0,0,0ed88dc2c619cbd9f18d11bd22b149981299ef188e23199aa4249d54447b5351,2025-03-25T14:58:01.213000
CVE-2022-49378,0,0,1aa04c73a795153edcbb7db52c7df062b7a4f83333b34714dfe5271a1684cdef,2025-02-26T07:01:14.450000
CVE-2022-49378,0,1,4a25ada76a14b5ea1e6588f35b214481c2f776712484ae3849725cd21b7fb971,2025-10-21T12:16:01.680000
CVE-2022-49379,0,0,c4d06aaefde73d0acc9c9eba122f046f6592de390d055b122c4df9896046ca38,2025-09-22T20:29:59.653000
CVE-2022-4938,0,0,2332c28f2266da2838561d3fa8517b8e02799844e68fbf6d1d4046cef0e62add,2024-11-21T07:36:17.473000
CVE-2022-49380,0,0,414f725861f611f40d4ac99f30415ebe25a770f59b11307213e96a8b0537670c,2025-02-26T07:01:14.633000
CVE-2022-49380,0,1,4a062da4397d7b28bc45d4001e4bf886127ee53eff3684f83d44348737eb05b8,2025-10-21T12:15:50.240000
CVE-2022-49381,0,0,6f89264806cb714bb2f1c69ca5878008d0f3faaf7360115c345b0f7f683da435,2025-10-01T20:16:15.183000
CVE-2022-49382,0,0,78ba803aca320e80b89c085cffc5ccea471f41ecfcbf36dd61ce2993306e67d1,2025-10-01T20:16:15.407000
CVE-2022-49383,0,0,9335dc06cf7cc2f7be35120f1a7cd7fd49bad8b59bd4f8fb43c8dc15aebc4d00,2025-02-26T07:01:14.917000
CVE-2022-49383,0,1,feea22070f3e135839e07b2bb7f02bd86e79a4c4bacb5b51d2f244564a803590,2025-10-21T12:15:39.350000
CVE-2022-49384,0,0,da5322e62e18702dc7dcf04e226f030e71920e69304ec1472ccbaa805e213e95,2025-10-01T20:16:15.643000
CVE-2022-49385,0,0,b8261720d54d6033da7d4dc736962925ebe246a5a8a53b6f12745b5484843ded,2025-03-25T14:58:25.690000
CVE-2022-49386,0,0,c64fc33e01b7f5466026a242d5ac852a8268be9225703444a18358b4a078d5b5,2025-10-01T20:16:15.883000
@@ -214171,19 +214171,19 @@ CVE-2022-49390,0,0,ea18d7315e22ebc6a3fe1a12f7ebb21ef5baf8856277bb5e7695b6f7f1426
CVE-2022-49391,0,0,2a568b982d891d8e652dff02fb19178c5386dc858dd92f41a94e23f8d0657181,2025-10-01T20:16:16.557000
CVE-2022-49392,0,0,501771e9e25ed687f860eff0e70951ab038841d2071d9b56c62d251fdd78bcce,2025-10-01T20:16:16.777000
CVE-2022-49393,0,0,c7f47c33b1ebb28ad552dcc976f21a1b44029dde52739db908f9880e2a49510a,2025-09-22T19:46:54.023000
CVE-2022-49394,0,0,ebef65bddf1b012d9967c07974373fa1f5f452d45e504aa0c9f54a2392c30c91,2025-02-26T07:01:15.983000
CVE-2022-49394,0,1,02918f0e0912f15ec220c06759e6eac5e4025a27ac5e99bccb55e0881e2723c7,2025-10-21T12:15:22.700000
CVE-2022-49395,0,0,729faa1fa99e088c6b6acffab32c58a9f7ba6f32f730a9ad243678af760f8891,2025-10-01T20:16:16.973000
CVE-2022-49396,0,0,086deb51d569abaef3d81dd10dda2f8649d5fa531c2a9ab02d4377ca62003d87,2025-09-22T19:47:55.287000
CVE-2022-49397,0,0,8978a8d00cd3245a5e4c2c4d300b17d2cfd29b27093d4ee29d5a6b428aa45c65,2025-09-22T19:57:30.027000
CVE-2022-49398,0,0,69b98cd2de26aec87261bdf9bb20f354f83ba2d90a2dec42c415e922006854bc,2025-02-26T07:01:16.377000
CVE-2022-49399,0,0,e676d1099cdf826e353bf92ce76e5b799f8f7150af0d6742ceb1dddc397d6568,2025-02-26T07:01:16.470000
CVE-2022-49398,0,1,ba9b429f21ae9bf5e8100ae627785ed8fa7c32e8dd3e2270a49912d4579236d4,2025-10-21T12:15:09.393000
CVE-2022-49399,0,1,ed4759072657b08b54c326075493d83043b8e1d93977796e7e86656c6ee24c95,2025-10-21T12:14:53.110000
CVE-2022-4940,0,0,71a9143220b531c495a5a6c3a808eef2946ae15ed7f044ebeeb7369c9a995c72,2024-11-21T07:36:17.693000
CVE-2022-49400,0,0,2942284fded3aed55a98a8bc53e692c410a56901cf17d32cac3f7928aaba4e94,2025-10-01T20:16:17.187000
CVE-2022-49401,0,0,6801f4f8f421faa05ad8861784a99da7ef0e1920aa4fb6d68848ed1ea6bf4591,2025-09-22T19:57:51.840000
CVE-2022-49402,0,0,9d66ca9d35aa9290ffd2cd4a36836caaad46b251367fa35d2e6980e013e3d3e7,2025-02-26T07:01:16.750000
CVE-2022-49402,0,1,9edab6c2bc7719cbd253c4faf2d043a6490a0780738862a00ad6d83d90a081d9,2025-10-21T12:14:34.683000
CVE-2022-49403,0,0,8959e97fe070f5708418f085cb3a12f545f2420ccc3be003407f674348107654,2025-10-01T20:16:17.410000
CVE-2022-49404,0,0,dab086b4c14c293917fe4896149503139437fa5342d5a2ce832a43239775d33a,2025-10-01T20:16:17.620000
CVE-2022-49405,0,0,410d11954523755568994a0a4df1f9c09793debc62a80f1fd2a60e7696c31431,2025-02-26T07:01:17.037000
CVE-2022-49405,0,1,e37ffa1b71214cb62a59ea023347919124a4a705904dbef2892f8c6051e242f2,2025-10-21T12:14:13.727000
CVE-2022-49406,0,0,c186758e69747e85811f8f76e27a4b9561a649a7f5821c667f7abfbeecccdd63,2025-10-01T20:16:17.807000
CVE-2022-49407,0,0,c803ebfe9c0f65e9963d775be9c328de3925253f4f0aea47e7d69cfa1aefa46d,2025-09-22T19:58:29.997000
CVE-2022-49408,0,0,15aff4d19efa1400eee3ebfa9c4cfadda15d88a4be5c7b79d9a1eac9f10c52fa,2025-10-01T21:15:40.930000
@@ -214200,7 +214200,7 @@ CVE-2022-49417,0,0,02577c77b43f51d3178ddd41ab839da22a53279ef6609315d411b9b840b95
CVE-2022-49418,0,0,ace48c46e148350dcaf31fc922559a156358ed8fa8513aeb13f0d24c935b6441,2025-09-22T20:01:56.010000
CVE-2022-49419,0,0,5e829714eda436088a7d4e2a3f319dbfd17b45b8ecc959b900f607e63f922a81,2025-03-24T19:57:48.187000
CVE-2022-4942,0,0,4bfd31c9d3683237fc0f66ee6838a8e9abe03973c1dc054d19973ecd2181f17a,2024-11-21T07:36:17.917000
CVE-2022-49420,0,0,b46138299cef30db3771e236c2dee66f2ab59bca5d670ea9e8d5a786215d1752,2025-02-26T07:01:18.440000
CVE-2022-49420,0,1,85f11f4b20c108f2256c7a141ba8e9456398c2f5519dea057034f0278f94ac78,2025-10-21T12:13:56.750000
CVE-2022-49421,0,0,93a931b51d9c2f25a87bfbaeb8ce2ce2bdfcca2585afd97e01603c17ae838157,2025-09-22T20:02:14.963000
CVE-2022-49422,0,0,086ded63719211b39acaa88e5a4d1d2e11d89f1d8b1d2896ecf52f700c493b4e,2025-02-26T07:01:18.657000
CVE-2022-49423,0,0,6c3f2eedb20a1800c80a7cd5308999b6f8d58b9188bd0a493b16386dff013c3f,2025-02-26T07:01:18.783000
@@ -214290,47 +214290,47 @@ CVE-2022-4950,0,0,553f8616c590a48d9a934a6dc8477b16541d05a5e26a41275fd32eff9d48e9
CVE-2022-49500,0,0,22aae1b54b346463da818c1f05eb7a354584f5e50ae3e9ebefa32dd67a8f4fee,2025-02-26T07:01:26.163000
CVE-2022-49501,0,0,c87ec5b1a9ab593799d0f5d9d0495db0a43e7d74052dbd5afabea0feaef9c46d,2025-03-24T19:43:13.750000
CVE-2022-49502,0,0,8a8defa9bbb91f39f4830bc491344c38dd70630eb38504f8269cf4e16c4fc1c5,2025-10-01T20:16:31.663000
CVE-2022-49503,0,0,1b221d569cd7bd716071aad4a4aed8f1bd7d8bc5c4cb56eb1ca65fabf22247a9,2025-02-26T07:01:26.447000
CVE-2022-49504,0,0,dfc48315117767033b964df565f4dfe03374233694b8757abf6de9bfa239a000,2025-02-26T07:01:26.543000
CVE-2022-49503,0,1,e98dc844808d8d9e7980fcf47f5a97069190bd1f0db31c7186c0327039c1baa5,2025-10-21T12:09:38.743000
CVE-2022-49504,0,1,8dcc4d9575acbe2f1381d3b0f35636844f1a6d6366ff840523a0758b77881b99,2025-10-21T12:09:27.027000
CVE-2022-49505,0,0,0a2eb243d375a633209a4e057688c62f9cf1cb2921638edff01db7d8b2b2694a,2025-03-24T19:43:27.950000
CVE-2022-49506,0,0,acd402e73d7abe7379b4837433d1bef2274c7587d7334939fc108b29de65c13c,2025-02-26T07:01:26.737000
CVE-2022-49506,0,1,774583b1aa0273eaa2be510cf516ec5880ea2eb21c630429fbca379dea785c4e,2025-10-21T12:09:15.500000
CVE-2022-49507,0,0,2a13f11232a2c68122810500a397edad96f2d8b0008398e40d84286c08d46744,2025-10-01T20:16:32.263000
CVE-2022-49508,0,0,c361b7412bc8a03893bcb2399df873e11014ddc22c18cba3a5c223bd0b56250b,2025-10-01T20:16:34.217000
CVE-2022-49509,0,0,c42a19e06a551c87f16075cae083c8b6b30f2b4b4943ca0d85cf0b934e347240,2025-02-26T07:01:27.017000
CVE-2022-49510,0,0,a8f586dcd4110554e32556be3db1b86d0151eadaca43286adedc10272b02c9c1,2025-10-01T20:16:34.557000
CVE-2022-49511,0,0,ac27032366a0f2bdc38f6b440db773845c9a1133ab4ffabe062a6277a39fa4d2,2025-02-26T07:01:27.193000
CVE-2022-49512,0,0,afb1bdc8c2d7d19899150691424c0820237aa728525d470207b9d1aa2dd3b215,2025-02-26T07:01:27.287000
CVE-2022-49513,0,0,ee2f15eae9aeb0dd25a03d8f2840529cb9b7dee0ba0101e1f301a18af3fad89e,2025-02-26T07:01:27.380000
CVE-2022-49511,0,1,ac0ddad5a6c7a47f380bacb0d55753434bfd3df063731f906caa4f97c9ab1ca3,2025-10-21T12:09:00.510000
CVE-2022-49512,0,1,11d43f3e21da07a9338851b16a70190ea9a546234b5660d97d3cbf05e0b750d3,2025-10-21T12:08:40.850000
CVE-2022-49513,0,1,529c713c8b55c5e93f1b180a7f0b96b5e36bf000cecd02a985f29bfbfa289dfa,2025-10-21T12:08:28.433000
CVE-2022-49514,0,0,7f0c1c5cf73e025c214480db43a847e98077ad1d7d594d99db2ebfc0093b466c,2025-10-01T20:16:34.877000
CVE-2022-49515,0,0,11f590a0390050966175d7feb25650014e735075d9da87d4d35d4eaf0315d8da,2025-02-26T07:01:27.567000
CVE-2022-49515,0,1,4487baca7549cf8857d8f23140f7b26ba736a62cb321b9588a28586750aa6922,2025-10-21T12:08:07.233000
CVE-2022-49516,0,0,b6b1f42b4a11cf7425ea5152acd8fbed7e5590fa8d8bc9830e7b5dca0de5a697,2025-10-01T20:16:35.180000
CVE-2022-49517,0,0,b600003ab5deb77965e3e545a81af62ccce7dd1d7f159617412f306774aaf239,2025-10-01T20:16:35.490000
CVE-2022-49518,0,0,e2be9645f3105b2d0a168cc97ab53e860dedbbe3e7dbc3867b799d6d0c941f15,2025-02-26T07:01:27.837000
CVE-2022-49519,0,0,be3203cb79b2a17318b2c43dea6a6e5d8c5384c0354db6652cd09686cbf3bef7,2025-02-26T07:01:27.923000
CVE-2022-49518,0,1,eafb4e15f263e7b5073b1f4395caba38fd7302e1ae89960f0ef892ab9eb66c69,2025-10-21T12:07:55.643000
CVE-2022-49519,0,1,e11370a0ee74db99d0cbf624cc16282d63244426a51b94276b662c94f28a4f58,2025-10-21T12:07:44.900000
CVE-2022-4952,0,0,7415f2ca4d823196175a3ec862b711ce8ea62fc540125d8d988ae7bb2051f370,2024-11-21T07:36:18.930000
CVE-2022-49520,0,0,e5307f9b37880054f4da04ed4cd0256419aa2046ad8ef496d6a57ef085a0a319,2025-02-26T07:01:28.017000
CVE-2022-49521,0,0,e644a8814ea918f85e8c1694b44f101304bc35ce01d7c832f690b4567f5df3bb,2025-02-26T07:01:28.113000
CVE-2022-49522,0,0,9488e6ed21b227ba47a49df0934ac9256cfe804214100f332cfe4ec56ad49861,2025-02-26T07:01:28.210000
CVE-2022-49520,0,1,657edc51eeb2dfac355ea13f6d4a13d1a118334ddf23cb6ab5c9827582632713,2025-10-21T12:07:21.410000
CVE-2022-49521,0,1,cabf7ef304a387eacce352b99933e62e2ad19c738920f587d41b08b3209876c3,2025-10-21T12:07:04.053000
CVE-2022-49522,0,1,3a3b8045792210be1847b0b99002682e8ce3d751e70b022768852abb6ddbbc75,2025-10-21T12:06:50.253000
CVE-2022-49523,0,0,e237a88e60223aa0e7cee1bce395ae2ae2aecb2ec543280e593af9fffd02b53f,2025-10-01T20:16:35.870000
CVE-2022-49524,0,0,23c31bd580c70142bf1ddec50641f8dbdb3859b62b610d1c1bc6c570b2cec908,2025-03-24T19:43:42.333000
CVE-2022-49525,0,0,981facbe77820bc63be37056597f6bd0c13283c2aefe388263621a35ac5e726c,2025-02-26T07:01:28.500000
CVE-2022-49526,0,0,5339b66753ad80fb9a756eb170f85cfe6377c30292ade6b3738883eee6d81737,2025-02-26T07:01:28.593000
CVE-2022-49525,0,1,42f298f159e54cb287b0c8e2615af31dd1083ecc2a18601464afac71dd64cd4b,2025-10-21T12:06:25.187000
CVE-2022-49526,0,1,ad8b94b28dabeb6c4fa52c85c6e0ec349a5f3ac170615925222d321569f43360,2025-10-21T12:05:58.860000
CVE-2022-49527,0,0,35d2eadf853d18fab15c6f9948b44a3b0eebdf6fbce2dc274608f6fa78510eb2,2025-10-01T20:16:36.217000
CVE-2022-49528,0,0,67606282969aaa2b31505ca97d9477cc42eb7b22bad60f6f77b8d75889efc840,2025-02-26T07:01:28.780000
CVE-2022-49528,0,1,844e349fae1df332b2a2999e0e5edf6c8bd195173d9f5e571f5be37a5d2a8c09,2025-10-21T12:05:31.203000
CVE-2022-49529,0,0,17e79c8eaf4b3f159e0cbf60b029264a7a92515613acea28ab7eee82bc8671f9,2025-10-01T20:16:36.583000
CVE-2022-4953,0,0,e04a15b779bfbe898a916a95d05683f7f5f4c144cc0c5cedf2ea84fbc775f5f1,2024-11-21T07:36:19.067000
CVE-2022-49530,0,0,a74e349020795c66fac6376e29cdee8270caf3b153c31a4810b28ca9b513292e,2025-10-01T20:16:36.963000
CVE-2022-49531,0,0,19cba9f622b0790713b1b99e24524e6970302f2ba108292f76d15d384e6ee52d,2025-10-01T20:16:37.313000
CVE-2022-49532,0,0,8433141355d95dd74afe1bbbcea2bd26ad730121e2b3f3b8d3ecd6bffade5e29,2025-10-01T20:16:37.633000
CVE-2022-49533,0,0,e80337bcb9c0881aa9f0a3bd03f41eefd6c9615b38b434713fc87e091747fa6f,2025-02-26T07:01:29.293000
CVE-2022-49533,0,1,86a11282ed7937e8ecc4138bedd75cb2825e68cf9e96d9f0f95d822a09e56d52,2025-10-21T12:05:17.793000
CVE-2022-49534,0,0,3c45e03663be26aeb067f3f1aaaaa3643bda17683a3f9dc925c27e71f3035982,2025-10-01T20:16:37.977000
CVE-2022-49535,0,0,2c8fdcbf77b5fbaa6645f7b138b6bed7cf733d6cea2ed991641861a52294fe6d,2025-05-02T07:15:49.813000
CVE-2022-49536,0,0,0aa6d8e64d53d03ad8d71a5eb7e2b72684bb1d13ba4268ccaaa801f9d8f752b4,2025-10-01T20:16:38.327000
CVE-2022-49537,0,0,89955c5c15297ddc3d4a900be6d2d64c3ca5d393c27e7504de7e55af92e676ab,2025-02-26T07:01:29.667000
CVE-2022-49537,0,1,8e7bea91572b5ae7a97c27ad893b8027f872fc1041c2e4c61e9e6d54942467e6,2025-10-21T12:05:07.657000
CVE-2022-49538,0,0,ff069d5db9312383b86467c1f593d594dc7b792b71d25e20a54e460f33e7e0c6,2025-10-01T20:16:38.660000
CVE-2022-49539,0,0,9abf8fdb7a0343623ef24e9040650b02834e07ba8ddb3e6cf863ee05e9cdaa66,2025-02-26T07:01:29.857000
CVE-2022-49539,0,1,ca0ae477f0ec9a91c68ca073eb1efcbad4d10607abe02ca724759f45f51a0a27,2025-10-21T12:04:50.363000
CVE-2022-4954,0,0,3d35faeb50ff70fc83ed96ba4420fbc0348e83af9bccccd35fe117bc65a97504,2024-11-21T07:36:19.187000
CVE-2022-49540,0,0,f5f5eb0e41a09add2ea5b919e3860861f03bbedd77dcfde124c746425104115e,2025-02-26T07:01:29.947000
CVE-2022-49540,0,1,e2f9a25372188a69f9a7bf47563a3b3632a6994aeb86e1281020836642e416d1,2025-10-21T12:04:17.460000
CVE-2022-49541,0,0,01ee688cdbc2b3c4a754fea241caa0bc3df3d545392432274bb74520a5c39d1f,2025-10-01T20:16:38.990000
CVE-2022-49542,0,0,606996641aeb595bdc0e7691014f1e24cfd86757cf15068c680a8ee6f018cc04,2025-10-01T20:16:39.350000
CVE-2022-49543,0,0,a2ff81fe4ecfd6d2c99f742689972c0459a5cc013925198ed509c20be2719fe3,2025-02-26T07:01:30.220000
@@ -255804,7 +255804,7 @@ CVE-2024-25553,0,0,d425d147501fa8006dbadf60a3ee6d0e30ea870822653a9e9b85ebafb1bf2
CVE-2024-25554,0,0,5ebde31c21d4e190368d0ea561a226f998eab9ab1a3ffbf4889f3384c5f1c9da,2024-03-01T08:15:38.107000
CVE-2024-25559,0,0,791cdb4bf56ca50dc241d3e8235efa45f3d9b025d0ecc58780d4c038713ae06c,2025-05-13T15:12:52.413000
CVE-2024-2556,0,0,6b2d7b430e2a6337681e135e3e171366d80bfa61df5fe5cd30d19ce06e1bf84c,2025-02-18T16:50:19.370000
CVE-2024-25560,0,1,f1c2775863324b7668931019bf3a4136d1ac5ddab7ed88145dbbe4908760724c,2025-10-21T11:40:17.640000
CVE-2024-25560,0,0,f1c2775863324b7668931019bf3a4136d1ac5ddab7ed88145dbbe4908760724c,2025-10-21T11:40:17.640000
CVE-2024-25561,0,0,847d360c301dca3a19aca19b96ceaaa198f2e6a14aa35ce345dc2a097a0967f2,2025-02-25T19:32:00.993000
CVE-2024-25562,0,0,0cd8347ef31816a27d17a655a8ea40247bec5c1983c2d2279b173c46f2864b77,2024-08-31T03:40:47.857000
CVE-2024-25563,0,0,e3876050aae6d54795d6f3fac29a2aa5d7404a9468e052d8596133632a804f79,2025-09-29T14:45:36.223000
@@ -255950,7 +255950,7 @@ CVE-2024-25718,0,0,bf6058051f29852df9a6b0e96ff2d0b68fcb7f243846d3b198a96ffbdccf9
CVE-2024-2572,0,0,a89892e71d5663d0eaa1183a2bd60e2ee78de7ebb0a5ff4dd4f83a37a757609e,2025-02-20T18:13:22.020000
CVE-2024-25722,0,0,6e0b9d3a7df1c68087702c365f13e572379778db733f68ce62e9fa53ef39f58f,2025-06-11T21:15:23.697000
CVE-2024-25723,0,0,8163436c075fc7f2e179a28aac48276f2b4cf47c37d4b8bc1730a5e951f69638,2025-05-12T13:29:53.770000
CVE-2024-25724,0,1,154fa8204b1a12f746ddfa16f5e9970b14e54b08329e2b917f9b985ffdb3b988,2025-10-21T11:34:59.940000
CVE-2024-25724,0,0,154fa8204b1a12f746ddfa16f5e9970b14e54b08329e2b917f9b985ffdb3b988,2025-10-21T11:34:59.940000
CVE-2024-25728,0,0,249547664dee94486de7d24f91565612df1fd7ba5870da82cfb8177b2a0fcb61,2024-11-21T09:01:17.043000
CVE-2024-25729,0,0,3db67ab23a258a05979984a126775ad307c38690f174be37fd98d41efab8557a,2024-11-21T09:01:17.263000
CVE-2024-2573,0,0,57a27569f00533bee9ef2825ed2d131f63222e4eecb59af9eff21758bbe1c7f6,2025-02-20T18:12:59.823000
@@ -260180,7 +260180,7 @@ CVE-2024-31152,0,0,cc4117e6b18b0ecba71b54acacc4e5dadac3f57360de9df64e46f495cb1e4
CVE-2024-31153,0,0,e1c05b63623dd762a3b593c1a4615fa0bf8dbe8d331a616f35295c149e7463af,2025-02-12T22:15:32.900000
CVE-2024-31154,0,0,3a58a4daeca80390ff58915d8f186628b8154cf2e8bb49e18a1ff3721bf0ed69,2024-11-15T14:00:09.720000
CVE-2024-31155,0,0,6f02fac451ef814478538c640e0eadf31b3c1540129e3f41f191259c6d18b566,2025-02-12T22:15:33.050000
CVE-2024-31156,0,1,75eb81cf033b744ec32bc01246a9735ef63cb2b0f861a5a9fe08312e086d5bc5,2025-10-21T11:39:36.993000
CVE-2024-31156,0,0,75eb81cf033b744ec32bc01246a9735ef63cb2b0f861a5a9fe08312e086d5bc5,2025-10-21T11:39:36.993000
CVE-2024-31157,0,0,f6cdcc8f436113d457dba94e9affaae623f9f0a5ca006ec1e9593b807a5a5a48,2025-02-12T22:15:33.197000
CVE-2024-31158,0,0,23231ffa5f94012fdd934d48ba8f000ea26a69d8fc6b9fa07237a8071fbc996f,2024-11-15T14:00:09.720000
CVE-2024-31159,0,0,03c6968dc84b6c9c621449721b8162808e91282b21ae57f781c1a323ad26b62c,2024-11-21T09:12:56.343000
@@ -261437,7 +261437,7 @@ CVE-2024-32758,0,0,5ab64cc180f6fd71a1578c0291c35d808cb43f987172613207bba1f6bdd6d
CVE-2024-32759,0,0,278065b6b9d957842e3f4456f771efe7402000d9b9472ce4568f373e5ea33527,2024-11-21T09:15:40.380000
CVE-2024-3276,0,0,231307f572bf201867b6e192771acf6a099f0f7f8523272307912246a8f3de31,2024-11-21T09:29:18.153000
CVE-2024-32760,0,0,82505ca8c02cbf457bf78fabc824ccbae8b38186bf945e09d78ea0ddc383e5aa,2025-01-24T16:21:55.993000
CVE-2024-32761,0,1,dd25bcc175e0bcd72a04c828eeb2b4287ffb443c00a626841cf912a0f75baa0d,2025-10-21T11:38:58.723000
CVE-2024-32761,0,0,dd25bcc175e0bcd72a04c828eeb2b4287ffb443c00a626841cf912a0f75baa0d,2025-10-21T11:38:58.723000
CVE-2024-32762,0,0,e2e8b9ba690b7f1e2af2675ee1c4b7f2fa71ca55130e86054a01c63799cb3895,2024-09-13T21:10:30.137000
CVE-2024-32763,0,0,63261faac0102aa18d15ab1da7f0a928935e54078a840282d20e7368287aa3a3,2024-09-20T16:49:08.883000
CVE-2024-32764,0,0,93a7962d634c6ab3eed1c41f69f2ef3245ccdab5df0e6c96185df55b6b0a253c,2024-11-21T09:15:40.967000
@@ -262066,11 +262066,11 @@ CVE-2024-33600,0,0,0e7535d60c664be994e6f3bbc64704164ef88f0525a691c4a9cbf2d1cd41d
CVE-2024-33601,0,0,9e48021840c766daef708e40e3cfaed4e053e024e0d88aad9b22506cb2c44f05,2025-08-01T01:56:26.467000
CVE-2024-33602,0,0,146d3baf9bbe0f85321ce17ace8973a29f56e5ef1dbb704bf98f5c509e2c3909,2025-06-18T14:40:48.823000
CVE-2024-33603,0,0,aab47ae0f47b94871d557c2edba07334d57457a2f8cbeb3e6bc397cd050c8cc5,2024-11-21T09:17:14.493000
CVE-2024-33604,0,1,d23e0a88661d6abaaf9af886a300078bc601bf4f1a8271d41a3fc7afc8372974,2025-10-21T11:38:35.883000
CVE-2024-33604,0,0,d23e0a88661d6abaaf9af886a300078bc601bf4f1a8271d41a3fc7afc8372974,2025-10-21T11:38:35.883000
CVE-2024-33605,0,0,a9cb4d5208af41cc5de9c408ee33e9c45cb9579d6429771105b2c468d7015554,2024-11-26T11:21:59.607000
CVE-2024-33606,0,0,c4c0679bde74c1e6475d9d8411da3e5437385c90633d8f41c8fe6824cafea7d0,2025-04-23T18:43:00.560000
CVE-2024-33607,0,0,f738971d036b79d069373381e8a524dfe5e06f23d5c6de316ebbcdbcb84d1e1f,2025-09-02T13:56:23
CVE-2024-33608,0,1,97cf02223385edb85a63c1c651f61098f4a8123b20a47915749344f73e60aff3,2025-10-21T11:38:00.290000
CVE-2024-33608,0,0,97cf02223385edb85a63c1c651f61098f4a8123b20a47915749344f73e60aff3,2025-10-21T11:38:00.290000
CVE-2024-3361,0,0,f0716051b88e5ec4728f1214cfcf6fc3ac1bcb7d16766937d6b97327197172f3,2025-02-10T23:11:50.223000
CVE-2024-33610,0,0,5a8808e53471836315884489f33eaa590183ccaf3dae486e6a38fb23c856783d,2024-11-26T08:15:05.810000
CVE-2024-33611,0,0,0e77942a20cec543bcc7eeaeb5a52cd1f1d5d15285096ef33838413928a20de6,2024-11-15T14:00:09.720000
@@ -268497,7 +268497,7 @@ CVE-2024-41806,0,0,c12abdf02a570596a826613869bd72e78d40e2bde986e2e2d59e52c219b1a
CVE-2024-41807,0,0,e86c4e0879be0f622b0de12c8fba430b974ce92b24702bd4e14aaf255cc07969,2024-07-26T16:15:03.593000
CVE-2024-41808,0,0,e0cb57271108a22b23303fdd72f084f0616a9fc6c46f4b2b2337403400a62802,2024-11-21T09:33:06.860000
CVE-2024-41809,0,0,6c2d2199a9c9c672f8e9707662b406fb6e9de63a6064f0bfb14a636f7c3d9f3b,2024-11-21T09:33:07.010000
CVE-2024-4181,0,1,d04f4c2294d4cdd42be56013203f8bb590e47d2a61f9a60deec02cfbef8c30e9,2025-10-21T11:36:16.007000
CVE-2024-4181,0,0,d04f4c2294d4cdd42be56013203f8bb590e47d2a61f9a60deec02cfbef8c30e9,2025-10-21T11:36:16.007000
CVE-2024-41810,0,0,064cb04a63e2ba0fc9b9925918b6034028c52283b5ba46fb0cf41b43ca8fc023,2024-11-21T09:33:07.197000
CVE-2024-41811,0,0,d3cbedfaec05ac3e7a26f4f5806c493f67529d5c98626085a59e4252fdfc77c5,2024-08-06T16:30:24.547000
CVE-2024-41812,0,0,3535027c50f25dc911fabb21506f35d3cadc534d51d2a4d98f1aca3c500601a0,2024-11-21T09:33:07.407000
@@ -271805,7 +271805,7 @@ CVE-2024-4584,0,0,1ad5097f1978af8a47ff8eeaae0f077f12ce12a177fedcae9814bc99c220b8
CVE-2024-45841,0,0,a54765b2b05dedb0da2394312df15c3bc95af7035c29806b2a61ab06fa43132c,2024-12-18T07:15:07.563000
CVE-2024-45842,0,0,e10b594125a8393c90936fb7e3b5c7f01df15874713b068538ba604e5a2dde1a,2024-11-05T19:37:13.447000
CVE-2024-45843,0,0,008998abcb6673c784d70b5a7979702d82d52431a25ec961d3754b5b22ce4c38,2024-09-26T18:42:26.697000
CVE-2024-45844,0,1,16f51f017276089042be7f39bad29fb3577a70e87085dd97477731d8771c86c0,2025-10-21T11:43:40.243000
CVE-2024-45844,0,0,16f51f017276089042be7f39bad29fb3577a70e87085dd97477731d8771c86c0,2025-10-21T11:43:40.243000
CVE-2024-45845,0,0,b549a9e321160df47bcb67d5d4737d4567fe304513c57d25b052b060dcd0ae25,2024-09-12T20:15:05.273000
CVE-2024-45846,0,0,2dc52e631da6305e69c4ec41a31065295e97fb440738cb4ab8cf441230ccb9b6,2024-09-16T17:30:06.747000
CVE-2024-45847,0,0,3830d7080eb13e308a8ddd546f067a19eb804f0838ec8f8f29a74dda734ad0a9,2024-09-16T17:31:04.850000
@@ -280214,7 +280214,7 @@ CVE-2024-57884,0,0,8a12a98528c45d025ecf655f52d2aa5d86d620b490812ef972929f5dc5568
CVE-2024-57885,0,0,8a311e495a828bca1a9b51a73d34f300723a0684b07465932b9c2dc4d537f194,2025-09-26T20:01:05.850000
CVE-2024-57886,0,0,a83271d5d8ed6df6439fdd1e0ae1c3f7d0669db0f69c325230774434807c26e4,2025-09-26T20:01:21.090000
CVE-2024-57887,0,0,ec4ee11daaa34618a145ed6f38d9c8731fc3d00f94b409ba83ddaa0df3599463,2025-02-11T16:15:48.863000
CVE-2024-57888,0,1,a77f84827fa4b81225a69257488e4f2ceb245a67ead76babce94f271307a7086,2025-10-21T11:41:58.687000
CVE-2024-57888,0,0,a77f84827fa4b81225a69257488e4f2ceb245a67ead76babce94f271307a7086,2025-10-21T11:41:58.687000
CVE-2024-57889,0,0,09e37a8258f0e0417bea982465edd0c97bff1217f5e4534889aca391787583da,2025-09-26T20:02:03.203000
CVE-2024-5789,0,0,9dcfcd4111ea0e9e739e91d8fd580d0fefd90ab28ec12c3acba80730fef979ee,2024-09-26T20:28:29.237000
CVE-2024-57890,0,0,285fbfc0b9643189c0b50057e91743651e9bac7c4c308ded0c0cd74211b25cab,2025-10-01T20:18:00.277000
@@ -280224,7 +280224,7 @@ CVE-2024-57893,0,0,04b16b0e811b5e9b6f1e8c1b88d0285ce19b18e27c82f7fe1c0179613ef62
CVE-2024-57894,0,0,024b8193ba03ea5fa8d1c61a7de60c721e41ed0015e59fea3e48a68d54e30550,2025-03-28T07:15:38.510000
CVE-2024-57895,0,0,06d3f78d7ad5920b0e393281443e41c5424ae8fd7c0266b7a37beb85b09ed634,2025-10-01T20:18:00.540000
CVE-2024-57896,0,0,b4cf92b31099574638c678d1da9fe631de93ee5f7ca16ae4933efbe750b33d2f,2025-02-11T16:15:49.050000
CVE-2024-57897,0,1,8257d5f5adbefc533f99c31c96e6e135ee8af4592c0f85f8460f4d2fa89e4bcd,2025-10-21T11:41:44.657000
CVE-2024-57897,0,0,8257d5f5adbefc533f99c31c96e6e135ee8af4592c0f85f8460f4d2fa89e4bcd,2025-10-21T11:41:44.657000
CVE-2024-57898,0,0,44737bfa7cd6fb911618703a3be327d57da4aee034df8cfc17e81abed22d0d62,2025-10-17T16:11:24.317000
CVE-2024-57899,0,0,23f90a00d04bf70d9ac9e77e1eda38d96198994b3f5f04e2962dd0250992511f,2025-10-17T16:09:44.617000
CVE-2024-5790,0,0,eec668ee9d3641cb0f3de89f3c2f9fc313b8158d0b4258bc8dbb969f253eecba,2024-11-21T09:48:20.323000
@@ -284681,7 +284681,7 @@ CVE-2025-0272,0,0,36136e2b4130154f0f080b93b2e615fc734b50e7760f0c247ac9f10a9faf26
CVE-2025-0273,0,0,a4f4e73f593dcd255ad27819fa041e5ee69d86d4e589023f37e2e63d660ebe9d,2025-04-11T16:19:26.103000
CVE-2025-0274,0,0,8a4fd397170766ab1f9d9f4c154b3ecddd42ea482d950d56be66d368d2a5e5b3,2025-10-16T15:28:59.610000
CVE-2025-0275,0,0,38ef0af6b4e1e911e4c1e65d10a638a4f895a9a28da552db7eb3b4f06d3ea9eb,2025-10-16T15:28:59.610000
CVE-2025-0276,0,0,5d297fb3385eb44319841b51f27f0dd73583ece53721cc2f9b19e2d033a295d2,2025-10-16T15:28:59.610000
CVE-2025-0276,0,1,ac9058c0d40a245a4dd4a5985c7d47480a8ba79a7eb7b9e36d530a47c31962fa,2025-10-21T13:03:12.140000
CVE-2025-0277,0,0,ada75391ade9a229d255bffcbb72d88bd154518e00bb225b88b1f02017b1fa2e,2025-10-16T15:28:59.610000
CVE-2025-0278,0,0,190e8532c279569e2dd41a9e8244f6b412f012f90b9afdf06ae928ebe1e0f807,2025-10-10T16:47:30.307000
CVE-2025-0279,0,0,851dcefe367c0321289feba648562134ffe54ae1c64c35f8e178e72698ade224,2025-10-10T16:47:02.997000
@@ -284784,9 +284784,9 @@ CVE-2025-0397,0,0,fc2836035f8f0734fbc89dbf3d5d6ca5a6d8f9324d4d87855a3361cc69455d
CVE-2025-0398,0,0,7635a06cfc090a7002e0ac0d2d6a644dce64169ca946e1fb581e4d24bb6a960c,2025-01-12T14:15:08.993000
CVE-2025-0399,0,0,8317c0d87b4e3deaddb713c9c08c52ede8c6440a961975099bc732fd1f3ddce6,2025-10-10T19:14:34.300000
CVE-2025-0400,0,0,211fc4b6142deca402cf5dd45a2b0371cafe7ba8f29bf7e50b5bd3621e96098a,2025-10-10T19:14:24.790000
CVE-2025-0401,0,1,dba4af90420078f52c79b69ae9ba3e1cf9b55cbc77c2ebcf5606068c9a56a8f8,2025-10-21T11:43:22.537000
CVE-2025-0402,0,1,360c0f0f3cc497ef33dafaddd6b9c9ceede64bc553d097260601c27eb114112d,2025-10-21T11:43:03.437000
CVE-2025-0403,0,1,1b9228f7fbfe4aa3c4effa2e2505470bc3721c04a1513416ebd8a03d739e80a2,2025-10-21T11:42:44.407000
CVE-2025-0401,0,0,dba4af90420078f52c79b69ae9ba3e1cf9b55cbc77c2ebcf5606068c9a56a8f8,2025-10-21T11:43:22.537000
CVE-2025-0402,0,0,360c0f0f3cc497ef33dafaddd6b9c9ceede64bc553d097260601c27eb114112d,2025-10-21T11:43:03.437000
CVE-2025-0403,0,0,1b9228f7fbfe4aa3c4effa2e2505470bc3721c04a1513416ebd8a03d739e80a2,2025-10-21T11:42:44.407000
CVE-2025-0404,0,0,cd15ccea7eff00f81e4e6e95a1480a2cf284dff640ba86ceb409f1e0bcb7de9b,2025-01-13T01:15:07.227000
CVE-2025-0405,0,0,00e26834a3f53d00a5276590641a2e5a3803478a5fcdbc24fd986b91387d8e4c,2025-05-05T15:20:47.620000
CVE-2025-0406,0,0,9170e24fdbeb604b6a516fb9fd67cf4ebfac93be4958b43f48ae41c2867e0a73,2025-05-05T15:20:54.380000
@@ -285320,6 +285320,7 @@ CVE-2025-10014,0,0,dee4ff7dabde8c388280df2f71dc0bc013f4bff7efec4ea21c57289d41de3
CVE-2025-10015,0,0,392c4a844597a79d1b5604f77185eab5e96fc6af578c17ec9526926fa3ef514f,2025-09-16T12:49:16.060000
CVE-2025-10016,0,0,3332d29c8e415a6d909cc672ac752c15c8cb6ea094e446d57313cb0cd3f784dd,2025-09-16T12:49:16.060000
CVE-2025-1002,0,0,8a0ce274a6014852624cd98f4510a2359e65674ca94a8883697c40c60509bb23,2025-03-03T17:24:28.480000
CVE-2025-10020,1,1,0b7946b737d54862802d2f759e179d8fe92491409d8a51b1fa8a87a630607d9a,2025-10-21T13:15:35.487000
CVE-2025-10025,0,0,6f59950a251f3f2fd3713c5c6a613a4253b09d251a1b358c7e9be9415ed721db,2025-09-10T16:47:06.400000
CVE-2025-10026,0,0,b40fe94db183bd28dd8a2466bced22dc7b61ab098543b73973dc12dab6e07145,2025-09-10T16:45:15.147000
CVE-2025-10027,0,0,720938cc85bbeb5a1e8751ea30a6bd677cebaeb1d6e16d0a7f6b1b0e1f5059a2,2025-09-10T15:56:17.327000
@@ -285839,7 +285840,10 @@ CVE-2025-10631,0,0,7f418d87708acf21c4ea17cbb260810798ff7d49e768feca36bb88e3586b2
CVE-2025-10632,0,0,0a4e42db18cd195df25c7af8e2749c19c0fe3d0fc8f33fc3627346ffdd4428fc,2025-09-20T02:36:46.670000
CVE-2025-10634,0,0,920f296ddcbd18ff1fa7895d32d287d7a7acd90eeb6af8444d5f77e7f0144200,2025-09-24T18:42:57.803000
CVE-2025-10635,0,0,5b99805a0c0616875f9c0373dc5835e6132c218f49e90b1187e371909742d96b,2025-10-08T19:38:09.863000
CVE-2025-10639,1,1,b957b4843f691f3d1681b3eac91f4b9dee85e31d836f5bbd94f70d5e946644aa,2025-10-21T12:15:34.770000
CVE-2025-1064,0,0,7b7164b210697e056675206baf5cc1f85c1aa8eb0b02774ad30b163694ee3ea3,2025-02-25T20:41:01.500000
CVE-2025-10640,1,1,3814a7ac635a83c3e2104ce93137c44e56d93c9783caa83c5f0178c127b6668a,2025-10-21T12:15:35.420000
CVE-2025-10641,1,1,6820988aee7ae13295c70b1fbae7d25d3e26f1b15a92477549cc60923d724ff2,2025-10-21T12:15:35.543000
CVE-2025-10642,0,0,fdd36cebcbe7f0ff3cb967e5101fefdf6ccaa189e48d009de317da47818b7f1a,2025-09-18T13:43:34.310000
CVE-2025-10643,0,0,4f9ee45b2e3ed7dab7198ae9a3a4713a5e6397bdfeda99c5dc2aefceaf34b53a,2025-09-19T12:59:05.550000
CVE-2025-10644,0,0,b43b5b93d8750137648b7710ac6cf745436ce8b1145fafc2d4028649ad77c30f,2025-09-19T12:58:57.850000
@@ -287466,7 +287470,7 @@ CVE-2025-20023,0,0,23a2c779f750b54b1996fc340fc4cb4334d34a6b6eadcf64cb56c7ddcd5c9
CVE-2025-20024,0,0,1421aed3b28d8aa108abc69a83b80de8afd5f6f8b68be3b64553a4ed5e3780c6,2025-03-04T19:12:22.553000
CVE-2025-20025,0,0,03fe5d69e89b02713e04231d34f3b7a4b0761d78f2a37db236312c8112dbaa58,2025-08-13T17:34:12.350000
CVE-2025-20026,0,0,b167260078cbdfcf1875f255f715ece86338b973c4c3d9169c10a43489e74ec0,2025-09-10T14:00:42.290000
CVE-2025-20029,0,1,26823362533fafaa6739b37d0446684bcf80a63953625cb34fe39b9ab2b69809,2025-10-21T11:41:21.793000
CVE-2025-20029,0,0,26823362533fafaa6739b37d0446684bcf80a63953625cb34fe39b9ab2b69809,2025-10-21T11:41:21.793000
CVE-2025-2003,0,0,1ff74da9902681eb388838cb7011652f9b1b0fb32f468944cb3ae220136a25e3,2025-03-28T16:22:53.547000
CVE-2025-20030,0,0,7ab4560333607688a26a1d2f34a0e184088a479569bbfead6e0d1e16749528b9,2025-05-16T14:43:56.797000
CVE-2025-20031,0,0,fc009f119aecba2b630949bc15c1e900b0d49fd32052b69fe67cda9c92c39f25,2025-05-16T14:43:56.797000
@@ -287481,7 +287485,7 @@ CVE-2025-20041,0,0,d8e7bcd1cd43e43f5c6ea91a1027f3a7d9555da8579230aa624ea5605598b
CVE-2025-20042,0,0,7331f9a32fa8f7edda7e90ecfb8214172e30817ece2cf7e097fe968d19847586,2025-03-04T19:11:26.743000
CVE-2025-20043,0,0,e385949596c7b70554b16ea94f52cfae2ca554cb4420b5dbdb73fdd2419c9081,2025-05-16T14:43:56.797000
CVE-2025-20044,0,0,118c77a24b20201e56862c0f0357c6e7cbd84f9879fcf34a162694d243cacb9f,2025-08-13T17:34:12.350000
CVE-2025-20045,0,1,ac73f4e07cba5e18ec719d41f8b1cc3284fe7b5ac912aa8210cd8d7bf8dbe24a,2025-10-21T11:41:11.530000
CVE-2025-20045,0,0,ac73f4e07cba5e18ec719d41f8b1cc3284fe7b5ac912aa8210cd8d7bf8dbe24a,2025-10-21T11:41:11.530000
CVE-2025-20046,0,0,29df9aa9888431dd7af4826646f88a40cb5a1f4774005a359786e470b9270f6d,2025-09-10T14:00:00.233000
CVE-2025-20047,0,0,9cf96a4f41a68b4b8f246809087cbfb2aa19dd53dc67f8aa17d28256eaeecfae,2025-05-16T14:43:56.797000
CVE-2025-20048,0,0,160a2d402f9cf5ef7580ed88e4c241b967764bcb2b81cdbe684222b174e78780,2025-08-13T17:34:12.350000
@@ -287493,7 +287497,7 @@ CVE-2025-20053,0,0,f925f2866e234ba9440be623c0376d5b755de0de5fa89bfc9ce422ad9541e
CVE-2025-20054,0,0,a3e891adfba80ffd46a1da1c58e48642a37a1ec6cb3b1ad29ea8cec46711a633,2025-05-16T14:43:56.797000
CVE-2025-20055,0,0,2d78db23287090ae5d3190213b75b348c3d1d689e77c9b32372b6d83b934f84d,2025-01-14T10:15:07.710000
CVE-2025-20057,0,0,ca8fc5376954947269be2e6ebb2717110f4ce91e57a812f295c958aa4c906c5c,2025-05-16T14:43:56.797000
CVE-2025-20058,0,1,9ef1d6407b35a4ca394b163d06488ab758826f32afdebf1d6be0663fbf9126d8,2025-10-21T11:40:49.670000
CVE-2025-20058,0,0,9ef1d6407b35a4ca394b163d06488ab758826f32afdebf1d6be0663fbf9126d8,2025-10-21T11:40:49.670000
CVE-2025-20059,0,0,c1084330f3b962fb98956ad8984d49c0102f6bb9f804c9bde4130df15f4fe94b,2025-02-20T15:15:13.957000
CVE-2025-2006,0,0,d5d74f41fa3ae9bbd4fe95b11d94c32b823c104859d3441c59ab51ca4eb67b73,2025-04-07T19:15:56.100000
CVE-2025-20060,0,0,ef26af373b8c1500801575569870314eee69d6fc265fd3cd0ef2de4362a965d5,2025-02-28T17:15:16.440000
@@ -288175,12 +288179,12 @@ CVE-2025-21083,0,0,012dcd4567d712f40868af6860750e4a9a3751a84263be295edd2057183c0
CVE-2025-21084,0,0,af34ba3562290d89d6e1fadbcb1efbf04888823c3570480deec642a909378dd0,2025-03-04T17:42:20.943000
CVE-2025-21085,0,0,9e2dc56af658e9922251d086754ce6bc54b9411d5ec40bf4f30d6331aa66f291,2025-06-16T12:32:18.840000
CVE-2025-21086,0,0,ee7ef621756351a1d3445d82a3a3b95c93780f395c27fc3f29982a786a9da6cb,2025-08-13T17:34:12.350000
CVE-2025-21087,0,1,d91ed6b60dfe8af8d7f78f4df5335a0d8248ee954bb203b8668cd79efcaf49a6,2025-10-21T11:40:40.293000
CVE-2025-21087,0,0,d91ed6b60dfe8af8d7f78f4df5335a0d8248ee954bb203b8668cd79efcaf49a6,2025-10-21T11:40:40.293000
CVE-2025-21088,0,0,d7d6e809fd64ac2fb31c9a340e10a9b83332efc2174e7c85b507768411e01690,2025-09-30T15:52:59.580000
CVE-2025-21089,0,0,376a98b84b381726ba88c6087957cb55f869f110cd69de435e1dd837da0605d8,2025-03-06T18:07:19.917000
CVE-2025-2109,0,0,d539a473e7e352b28a24bc6aed12b2e7d5cf751050b0b54555ae9716d1a153b2,2025-08-11T18:03:48.423000
CVE-2025-21090,0,0,186bc5822f81e7a519c08db1fc912da2650b276c35d81cd30adf27176fcec227,2025-08-13T17:34:12.350000
CVE-2025-21091,0,1,047f06215ddd3315f4d6a3a895f568776b7a0a6b376c241d383ac1a5a56bcd34,2025-10-21T11:40:28.907000
CVE-2025-21091,0,0,047f06215ddd3315f4d6a3a895f568776b7a0a6b376c241d383ac1a5a56bcd34,2025-10-21T11:40:28.907000
CVE-2025-21092,0,0,03af17d12271d3564885d10071c53bea8826591d692686e1c0d8803603e1f7c8,2025-03-05T00:15:38.080000
CVE-2025-21093,0,0,7f4a898dff2018e063cb81f7456fb717456cf7e033afeb31bbfad8b29efbc4eb,2025-08-13T17:34:12.350000
CVE-2025-21094,0,0,b8a3a320130b5638d1983c1805a7beafcf577deb4a0c7efe32c80f3c3656ae31,2025-05-16T14:43:56.797000
@@ -296143,7 +296147,7 @@ CVE-2025-31134,0,0,2773f031652fd95c6b39926f090583c463eb26839cd44ae6b696340c16620
CVE-2025-31135,0,0,207e0c0576bd29325f457097be93c7a44eb5e24c5f685d26d2830ea953a650cb,2025-04-02T14:58:07.527000
CVE-2025-31136,0,0,e56123afe28cd38ca229df762d303518a4c89d3b460426dc3d13029c75ba90b2,2025-06-10T15:08:13.370000
CVE-2025-31137,0,0,68ee066855a1ed540acafdd46a9114f6082667580fb68d589f14ffae7073796c,2025-04-01T20:26:01.990000
CVE-2025-31138,0,0,082239a994f84f895f28ca91baa1d97931f8adb4927719990c0f96236ec2630c,2025-04-08T18:14:17.307000
CVE-2025-31138,0,1,3d41be5e7c084a945a19267c598f486484a7d1a69bbd51dd03ab062fdb4c82c5,2025-10-21T13:55:56.330000
CVE-2025-31139,0,0,4e1f766285d49f2c4e08f1555fb377b28da0878f00cfc1002dd12ef36cc0a8e6,2025-05-16T14:51:10.163000
CVE-2025-3114,0,0,418d9b2c4c39970a6b7c0e8549739605f4addaf83e877938cc0f3fc3ab0c1506,2025-04-15T21:16:04.847000
CVE-2025-31140,0,0,c54e1da821f15b88c77ec225baf5cec8c1c33acbd8f27c5c1ce9d21432ba5843,2025-05-16T14:51:08.523000
@@ -296428,7 +296432,7 @@ CVE-2025-31471,0,0,a33c2075cc76c85c876d3160d30c5477a8ff64232365b53d04ac3552d90e2
CVE-2025-31472,0,0,eb8be703d38d9a84cbf7017d2e0c76055ba68390df1b9386f55bf14cbf564e80,2025-03-28T18:11:40.180000
CVE-2025-31473,0,0,8edbaacc29861e0ed3a3ca51fb8d4293ab485bcd40b847b40ebd94e4effb92e9,2025-03-28T18:11:40.180000
CVE-2025-31474,0,0,5e7d6600ce1174be36633aec5902c9252df21c2f48f1552b8554d9d1218e307b,2025-03-28T18:11:40.180000
CVE-2025-31475,0,0,d054ab98458109d671d2e3362598fabc0f69079fd0804798837af9591fe8f8e4,2025-04-08T18:14:17.307000
CVE-2025-31475,0,1,59c12f824c79f5f4d5311bcb516c6299d5acf39bf306dd6934a402b94450cc54,2025-10-21T13:57:10.537000
CVE-2025-31476,0,0,38ce2ab6895cb0c1ef315a0276d61049a89c41a5831c7e181ab0bdab464edec1,2025-09-04T17:43:33.373000
CVE-2025-31477,0,0,0cce96e54e17ac2bc0decc21f6ecc7222c8de9a683fa4c99d259406d633603bf,2025-04-29T13:30:57.947000
CVE-2025-31478,0,0,956d20695abd172ac6cca0387e04a591ebc83fcfabf28e9ae3c639af0458a717,2025-09-27T00:10:58.550000
@@ -297903,7 +297907,7 @@ CVE-2025-3307,0,0,764533eb55c36b857743124d26869569dc2e30546eb2b26c9f7f85b2c9a577
CVE-2025-33070,0,0,df88accf87fb93a62a8dc2d35c886f87b39680027d7bba1f83befaa07ba191ca,2025-07-08T15:04:13.803000
CVE-2025-33071,0,0,b535c9c120e849ec2f4513ce17a5bbfd468e3d954fcf810aae6b1c919a026f55,2025-07-08T15:03:09.613000
CVE-2025-33072,0,0,da8dbb3f32bc92a4fea66cbf1913465f4b8680e98b695ceda185e1985ccda963,2025-05-21T14:52:32.977000
CVE-2025-33073,0,0,5dd85ce8fed188aa7a94b01ef69ec2ec98246c61c88020ff6daa7ed992de643d,2025-10-21T01:00:01.900000
CVE-2025-33073,0,1,b612d49a3f9620f64858261144c7f8acf8b2ae8abd20f1ebffcd68c324c9dc67,2025-10-21T12:45:50.347000
CVE-2025-33074,0,0,18fcd41dcb3c6273c73253eac7fa48f9c3a067330384af16f609b96399dd2bb1,2025-05-12T19:42:26.413000
CVE-2025-33075,0,0,1abac72358e5a5310ad3884d369405184c5b8dbdc0638a09bcb81b5c3cefb34c,2025-07-09T16:46:06.693000
CVE-2025-33076,0,0,82809fcf5295c9eadae81c922a15f472a9470f4e2b86392f85950299dbfb0aba,2025-08-07T14:41:12.913000
@@ -301018,11 +301022,11 @@ CVE-2025-4100,0,0,f77bad4e79dd995e69fb9df2c2feed5b3f15d25f3ec0714aaa9ab5523a5822
CVE-2025-41000,0,0,9e192a2cdab387d989a2ab959094b17d0397755d90aaffc51f0bffb2a1bb23f1,2025-09-04T15:36:56.447000
CVE-2025-4101,0,0,481e3ee81d9ced511d86706ddbf21e16ba7244b1e206df435d80c8013121d01e,2025-05-28T13:28:20.060000
CVE-2025-41010,0,0,617233dcf968c2ef59a005a34cc8e415cf24df10b488720ee50760a522f5edd3,2025-10-02T19:11:46.753000
CVE-2025-41018,0,0,fc6ad407c0329d31ee44fecf93b144b7fe62aaba829388b417219722c55b00c4,2025-10-16T15:28:59.610000
CVE-2025-41018,0,1,e277f6187140d81e2e7782170b2878afe433400632be6085649edc439f8b1e90,2025-10-21T13:12:27.793000
CVE-2025-41019,0,0,a244d05f86a0309b39150eef9f8aa73d03c4a550b8fc06475337ee9bfeae457a,2025-10-16T15:28:59.610000
CVE-2025-4102,0,0,a51f5553369d28cb1dc0282a0efd83c5ec25a5e5c8e67f7e0b9dda6cd0b7cf50,2025-07-11T12:39:11.507000
CVE-2025-41020,0,0,c6d2f22781c96aa590a7beb4a8d1050bb60103ce334d39414411c88e4fe3e578,2025-10-16T15:28:59.610000
CVE-2025-41021,0,0,0d76d11a72a2e400865db473e186a55ef9bfc9d1c6b8f91b6ab0c6158d88306b,2025-10-16T15:28:59.610000
CVE-2025-41020,0,1,a33a91cfc8568eaf61747f69840ad8ce22ac2a19ba7b4da53c75f695d21c6b95,2025-10-21T13:12:13.663000
CVE-2025-41021,0,1,ef7e9d904d020bbed4f06b5db7eb849042d9baa0c633dc89ba0df601717be2af,2025-10-21T13:11:39.663000
CVE-2025-41028,0,0,8f89ebb7f7210119b41e5979e1640357991353a172d9fa313c938d1f2020c51b,2025-10-20T09:15:32.033000
CVE-2025-4103,0,0,95ffd1bbbd8b91948da068554f13130bbdb49af71cd7a23c1f27918b987446dc,2025-06-02T17:32:17.397000
CVE-2025-41030,0,0,f3f08bdaf1517f55ed9cd90745fda6e60d67b8383851a48bc0fcbf9474a2e719,2025-09-02T15:55:25.420000
@@ -301199,7 +301203,7 @@ CVE-2025-41439,0,0,ec4f5bce645ac5c77efeb7d3dcb9e00136db17220a76430708d9edf21696d
CVE-2025-4144,0,0,ed44a24e80e1487d547bfe32499c8ba4450309e0e9d0acd2df7ebfcd519c74a9,2025-05-12T19:39:31.053000
CVE-2025-41441,0,0,3b51a802d5e876ef5e3db952c79744bda892bc6a2133cce8cddd52ad9c2cfab2,2025-06-03T15:42:40.710000
CVE-2025-41442,0,0,75992fff3e90ec166ea144cedbb2f28fcf7f60ce1fa8d0fb9c7afc44dcaae4a0,2025-07-23T19:20:42.243000
CVE-2025-41443,0,0,a0adfd85c27bc44d23d98d3f589b206b571ee89b53f837a1978fec425c2b1ccf,2025-10-16T15:28:59.610000
CVE-2025-41443,0,1,c96528b2c8383929499ac5c4f5dcb51a52ddd8cfb4429dfa1ff759ba290541e1,2025-10-21T13:07:13.683000
CVE-2025-41444,0,0,45adb8bb8356468f3459fd14d45ba03aaf4d37562fdb66c71b58ce7f5e0c7cd2,2025-06-16T15:14:06.487000
CVE-2025-4145,0,0,fa58d4933201d65cc9b44e9816af7313e719b690552f69a8a0e4a077c4fb877f,2025-05-12T19:39:15.540000
CVE-2025-41450,0,0,be33119acb525e2f9b796f5260308750e8ca72ef64aa0a04091a0e710bb236e0,2025-08-27T08:15:33.290000
@@ -302602,7 +302606,7 @@ CVE-2025-4595,0,0,b633bebf29fd7263830d6a88461b75ee36ce76da82f38ab627b05d152a8f57
CVE-2025-45953,0,0,4ae22ace1fa79622bebb714ee3a1b2bc44139600b15fc188f0269a639daf29ec,2025-04-30T18:03:25.497000
CVE-2025-45956,0,0,5c4c4370cebea5362e52ff80785ad75271a9ace1cfcc698a1fc7b6e2a3193f1f,2025-05-14T21:01:22.690000
CVE-2025-45960,0,0,8304c494a3dcbf740b567a7a131516c88b38a524797362a0070853fed43453be,2025-10-14T14:06:11.450000
CVE-2025-45968,0,0,e26aa72ea61fd33819e7a1de3413eca2e09d1858d909f8f73743adad333d7f05,2025-08-25T20:24:45.327000
CVE-2025-45968,0,1,46895355e97d9d4c4f13dca187fefc7c9c858cbc8d6e1318c83ff6609d80db3c,2025-10-21T13:51:24.520000
CVE-2025-4597,0,0,dcada8bd747b5d8fe51a3029b8ca767324f59d50104363211751e3771511674b,2025-05-30T16:31:03.107000
CVE-2025-4598,0,0,e53dac11913cca9185cef61ebaa897a672bce683807630078e62309ca1812aed,2025-08-27T17:16:21.220000
CVE-2025-45984,0,0,72e14692ff84372227c9d84fb6033ec95e9fd956ad2816e2dc5a760fcf66fac6,2025-07-10T12:15:37.927000
@@ -304766,7 +304770,7 @@ CVE-2025-48935,0,0,ec5adb238e8b174d884cb3b3a92e9f531a747bcf07c8f8e4c86751e080e4e
CVE-2025-48936,0,0,466cc85edbb9de09c6e53990c33f4edba165b1227854443bbecd0e6313d71310,2025-06-04T18:31:41.773000
CVE-2025-48937,0,0,28f58db3f8621445ae98b44d5f691c0045c9340b2c402374333dbd0a6e714594,2025-06-12T16:06:39.330000
CVE-2025-48938,0,0,8487e5f0c3128b09e833a51f9d429198bf523244b7b504847ffb00bf394fae23,2025-10-15T18:10:11.280000
CVE-2025-48939,0,0,64252264ddb38d9b3444226c3b4d10507b43578fd4572add5769da470f01a6c4,2025-07-08T16:19:11.700000
CVE-2025-48939,0,1,a924bd6382191cd39ff52c201213c3d0089995dc99ebb5376dd23cd7de31ed7c,2025-10-21T13:56:42.543000
CVE-2025-4894,0,0,e203d4bd91eb3e3cb92f624dec258fe2ede19a69c9e41059892032f4ff18f560,2025-06-05T19:39:01.520000
CVE-2025-48940,0,0,b3aaab1b84a9992f91f23a2bf064d896d79e6ee62c280444b9c35716c8f3326c,2025-07-02T15:18:47.520000
CVE-2025-48941,0,0,f132715b6cfbde41787254c74e6c0975c25685806e51525e3ec6973e4851bf2d,2025-07-02T15:14:30.267000
@@ -307408,7 +307412,7 @@ CVE-2025-53857,0,0,598629bd3fcd2a45c2f12900dad3ff51339fc7b5e2272fe88b4cced33bb2a
CVE-2025-53858,0,0,38a9af5ed093754bbcf46cc33f3edb610dfda7b9cca313d4cb5573bc850dfb16,2025-10-16T15:28:59.610000
CVE-2025-53859,0,0,76b9d5a78064d29b3b0297dc0861e07a3b9bdbe72d8e8c32b081b37f257ad28c,2025-08-13T17:33:46.673000
CVE-2025-5386,0,0,351da5ca804b0411e7fe4d7c581c8004602d874e8f07d461fa6bb46eab315280,2025-09-11T20:43:45.233000
CVE-2025-53860,0,0,994fae5a64519acf08a04a33b21fb667642e083d782cba0ff690ae205cdca2bf,2025-10-16T15:28:59.610000
CVE-2025-53860,0,1,f29b98a59200ddce56e429b809688fd54c01b09893e92228ec7bd7f6df674aac,2025-10-21T12:01:49.797000
CVE-2025-53861,0,0,c58c725cacd0ba4efca9f75dee75cc191b03b720ebf68c10543f0ab364c1ebd7,2025-08-11T19:21:12.100000
CVE-2025-53862,0,0,141d068723be1a3cb1b8974c1c12bb9580e456aa69fdcc5c1f42512628968dad,2025-08-11T19:20:55.880000
CVE-2025-53864,0,0,e2417edcb42bf170c84dfb8568afe931f3b859d195a16f4000c1faa41bbcaff1,2025-09-23T19:15:39.810000
@@ -308324,7 +308328,7 @@ CVE-2025-54956,0,0,653267e6116d71780f935491e6448610273e93fb17194ea28638b5b7bb5d2
CVE-2025-54957,0,0,5172a76d21c44162bc8341dcedf77588052d332a9c4e84acdb68a81dcd324f00,2025-10-20T18:15:38.870000
CVE-2025-54958,0,0,d754a1281c62e385a58f163c3e408a5c11d2f2bb60998a9e488b28a2302deba8,2025-08-08T20:30:18.180000
CVE-2025-54959,0,0,62b944cfc8a46cda88d3ec332238de4568c10b3433487d3ea67c01462d71c142,2025-08-08T20:30:18.180000
CVE-2025-5496,1,1,729926b3307dde36e2f0f7e582a41b9383d34a6439d0ee1f802c9e747e1f3495,2025-10-21T10:15:34.733000
CVE-2025-5496,0,0,729926b3307dde36e2f0f7e582a41b9383d34a6439d0ee1f802c9e747e1f3495,2025-10-21T10:15:34.733000
CVE-2025-54962,0,0,758fa9e1c05a0c58dd794f937b3086d72bae4cf9ae7f2a8e2f0a2425c9993c44,2025-08-04T15:06:15.833000
CVE-2025-5497,0,0,a5a489455de67fc5f2c75625a09d2f78af3fac1d986fa9288d403c700711930f,2025-08-20T09:15:28.213000
CVE-2025-54973,0,0,e51e8ed07b5c39c9642c7bb595b9893d69edf5f3128766bacbade29b087723d9,2025-10-14T19:36:29.240000
@@ -308703,8 +308707,8 @@ CVE-2025-55629,0,0,6c838b2070f85998d71a2c390efece65ba397c681e53f6b3402925217c905
CVE-2025-5563,0,0,abd05332a66da82c0a84bbcebb55ce866c616ee358de4033b1bc944eee92c5bd,2025-06-06T14:07:28.330000
CVE-2025-55630,0,0,add901c3407fe77c3e150be53f50a4d568fef9bb94e184b006fd020a8308ddc4,2025-08-22T18:15:37.467000
CVE-2025-55631,0,0,cf878dc18b4be3c176b7e91e453c1e2d2ae8aab53a4de8e1c5902bc1d45c020d,2025-09-11T16:15:33.677000
CVE-2025-55634,0,0,0f4337722deb4eceba97e71bc3ce28591976377a567bc8053ba6d44b099b50c6,2025-08-22T18:15:37.963000
CVE-2025-55637,0,0,931828b0d3098b02ac0a0839ea78ba09a2b4567053fec30da1c91a2ab4504331,2025-08-22T18:15:38.167000
CVE-2025-55634,0,1,aab23c942f6dc2fe322da5c83e9fec252b56241c8bf3d3119432f784f2b4061b,2025-10-21T13:57:31.043000
CVE-2025-55637,0,1,6e44efe20e2c17b82fd604084ba124542a01960d5a673e8bc86e6cbc75955ff3,2025-10-21T13:55:30.820000
CVE-2025-5564,0,0,7809e1fdf6de89ef637777fde783c5f5ed408a93fc9e8800ee881fa5f62b3fb1,2025-06-26T18:57:43.670000
CVE-2025-5565,0,0,69057d9fcda3a9d391a6fdd2d36028e43e46d962e75d2a96d0e0e06e8f6deb95,2025-06-06T14:07:28.330000
CVE-2025-5566,0,0,779c860a161eb64dc6f40dd7f0ca399f4546b6e4ee22bf38748c51ae144c439c,2025-06-10T15:10:27.370000
@@ -310940,7 +310944,7 @@ CVE-2025-60249,0,0,14a71f93e04f4060a1c993f7f7759d4ca3c7e0cc4f1fa622b44ba0572ae28
CVE-2025-6025,0,0,66cb58f91d813a392e92dc6e016b119cc95dbcd99bde4b3a8224ca58ef2f6b53,2025-08-15T13:12:51.217000
CVE-2025-60250,0,0,1d679c1e298d9c4d3a83bb125a8e4a79105dd7095ac76110e60c9c93612d6581,2025-09-26T14:32:19.853000
CVE-2025-60251,0,0,72703aac0b0b6702cc66a1161a3785923bf42b0b60968c372fe392044dbb084d,2025-09-26T14:32:19.853000
CVE-2025-6026,0,0,32b9b0afeddd67dce8c8d6853caaa57cac5adb85786a63b364c0dd62961945ae,2025-10-16T15:28:59.610000
CVE-2025-6026,0,1,9fa75380644a42d75556c7bbddaf2d9bbe50b00734ad1fe2bb5c1feb97581e22,2025-10-21T13:15:36.800000
CVE-2025-60265,0,0,a1c951f382247dfd0dc4ce77acc8fc85a5cec770354bb4b5908a63d296b6f889,2025-10-16T15:28:09.467000
CVE-2025-60266,0,0,b88b08c03101aa21e1a25e77cb0fe40fadd45fbb6dcac859a46b13f43078a6bb,2025-10-16T15:26:46.110000
CVE-2025-60267,0,0,bb597e64fb6df301c53344fad34e25f99955bbb97ea69029db1a83f872862299,2025-10-16T15:25:26.627000
@@ -311046,8 +311050,8 @@ CVE-2025-60833,0,0,0703b46a8cc62fd54a76a58f3ddfe3eea91f50329fcfa28fc60ac6cbaf1f0
CVE-2025-60834,0,0,80afdf7145390154b73c4b80feefc171583fdb3720f2f9c4f10cad7d96f423b9,2025-10-10T16:16:03.993000
CVE-2025-60838,0,0,04d9fdabb1c04c359f95ad5acdf1b0436bf8019c4b64fd10e1d34948e7329e10,2025-10-14T19:36:59.730000
CVE-2025-6085,0,0,eb2995c74572caedd9ef44b1d5b5318f084f938f661bb32c713b72127690df11,2025-09-04T15:35:29.497000
CVE-2025-60855,0,0,451fc04dac608da03e23c60d15b8198ac5c5298c820f40ddcec91357ea64af32,2025-10-16T20:15:34.473000
CVE-2025-60856,0,0,f7e6cb317592d282b49c6373e8380b8740313989713672bcb660056a8bedd79e,2025-10-20T17:15:38.210000
CVE-2025-60855,0,1,e6972e698ad1644f8c76d54f067b6a275ea0eb57af369f00a6b47a8405d08e08,2025-10-21T13:15:36.187000
CVE-2025-60856,0,1,ddfdacadd0972a913aee500f293a86e2863db88a03ac38977212da1a94733d64,2025-10-21T13:15:36.567000
CVE-2025-6086,0,0,5fe71f700a5db4748b73456874508af7453c8bbdad176612b1ae063647fd5c71,2025-06-18T13:46:52.973000
CVE-2025-60868,0,0,95c982ab8e0ca0ccdd9d37ac2822154aa0502eb90eeb5b85347e23681b37639d,2025-10-14T19:36:59.730000
CVE-2025-60869,0,0,6bb062dac2b21d6c5e284aac0762e9c8194360c08da47b11b998d9dfdd14651e,2025-10-14T19:36:59.730000
@@ -311157,9 +311161,9 @@ CVE-2025-61524,0,0,134db7ba97f72b191c7e45537cf81e320f87f962041d4d4fbb557486929b9
CVE-2025-6153,0,0,9cb391bc0c728a51d1642ebf8a165fb9af8fa2212048ca86e4445e0b055258b3,2025-06-24T15:53:37.673000
CVE-2025-61532,0,0,e7a290358756e9127a32ed9c8f50bba0d0ac288690c97b804555c1374cb0b0da,2025-10-14T19:37:28.107000
CVE-2025-61536,0,0,d0b5dd5782c85245f52aa62d79eb800aa67abdcfcb9c3092abe52ebe7ce6418b,2025-10-16T16:15:38.920000
CVE-2025-61539,0,0,68763a8f40224cc06bc4b22b2a71764ceaa15e7e81b320b0192c829780c9d37b,2025-10-16T20:15:35.183000
CVE-2025-61539,0,1,d43cdaba4e0b60b6a5e20dbe4220a50676bdb0bfd82d8aa25dbc60a303f28c6b,2025-10-21T12:12:05.600000
CVE-2025-6154,0,0,95060072831785f3ed57ae597e6cc6e6409b897d7a65ff870ebacbcf6fb1f450,2025-06-24T15:53:35.847000
CVE-2025-61540,0,0,117e6b407e6a87c50f788a4af50352cd56041e407347339cede119286b529359,2025-10-16T16:15:39.103000
CVE-2025-61540,0,1,bbcf269eaa8973b868380a3c440c9d933e447e514acd133d68499591f38789d6,2025-10-21T12:12:14.517000
CVE-2025-61541,0,0,36e8c0a8736d476405205231c1ffeff51dc90ff0a095de8e705ef6152dd52477,2025-10-16T19:15:33.633000
CVE-2025-61543,0,0,5d73bbe752ab0ad1268e95f5eddec843dfa72aceb75d827dcbd6cf11804bfb8d,2025-10-16T19:15:33.817000
CVE-2025-6155,0,0,3e8fc69cbf51a07d93c7df9f9e6e4b66e36cc96b90ecd10cbf6a0ab1b9592e90,2025-06-24T15:53:33.717000
@@ -311316,7 +311320,7 @@ CVE-2025-6187,0,0,cf085428843a2619f450ab289da427a297bc5faa0426a63aff864e32d5997d
CVE-2025-61871,0,0,9020835a7a208c086f2667e545a0cffedfe97a22157931a9050a6bbe4de407fe,2025-10-14T19:37:28.107000
CVE-2025-6188,0,0,e010acd503c07cc6828cd17cefe8ffc663ab49b7f0b66d4625b10e280ca4eaac,2025-08-27T15:15:40.633000
CVE-2025-61882,0,0,f933c09160d328fc91a5a89f4d23949652d12d5d2c9db9391028e16066c460b3,2025-10-17T12:37:01.870000
CVE-2025-61884,0,0,154cf1cbb48defe030ef3a32fbb66413ec9b3bf065b8ed1b8dbc663aaf8eaf6c,2025-10-21T01:00:01.900000
CVE-2025-61884,0,1,8178de9ebec148966fa6738bc46850f0a0826f5adc3fb7fb88fb5894cf9d4990,2025-10-21T12:44:55.387000
CVE-2025-61887,0,0,3dcddf1a3cbe3e4f5f57592fb576a62bd131a5d9bbe77f17c6722f882fa5b34c,2025-10-04T03:15:37.220000
CVE-2025-61888,0,0,069f3fe88b0c8123419013398d969a1f719d13e42ea67d624a1e517a32ebfd4a,2025-10-04T03:15:37.310000
CVE-2025-61889,0,0,92659284b31836e3b173c4606451b8f102fcd658647f387704e2cf012a40591c,2025-10-04T03:15:37.380000
@@ -311352,8 +311356,8 @@ CVE-2025-61929,0,0,02baa0d28ecf85c8803b673d17585466be4896854516bd678208e3f71d478
CVE-2025-6193,0,0,1b9eea71b477bf9c4e7b9bd5cc5d3e3853a840bafa78d229ba7a22652ff2fec9,2025-09-02T19:15:32.700000
CVE-2025-61930,0,0,d88736fd74733af41af39b7b9eed1514ed977c270ccd6edc17329e0e045a677d,2025-10-20T16:47:37.100000
CVE-2025-61932,0,0,4ac95916e70ed69806acd4edb6ac4f7cedb346acbfd8c307522cd63c0a836644,2025-10-20T08:15:33.303000
CVE-2025-61933,0,0,2e5b31f338ec87aa6d1e619794f1b2cf40cda7c18ca5433be1e86037b66b505d,2025-10-16T15:28:59.610000
CVE-2025-61935,0,0,c6d76cef3b02d1606f68eab42b6507991eb9d6203855854fc21eb07fc8d91b5d,2025-10-16T15:28:59.610000
CVE-2025-61933,0,1,ad093c23bf9a0cb48f5fef0190fdac07f283e0963345810a5f5390060dc8a428,2025-10-21T12:12:54.180000
CVE-2025-61935,0,1,46cc2664cf4839e8078efbccbe6e150b2a810cc2c5041b31a1da88e76f3aa1e1,2025-10-21T12:12:43.303000
CVE-2025-61938,0,0,e3bdad40cf57c13b22dc915a43840f065afcbb31ceba97a3cb3d9eb678889632,2025-10-16T15:28:59.610000
CVE-2025-61941,0,0,2f60f00016014c669da006c693df37f7d315d5d0708fafe5710431b67ab81d31,2025-10-16T15:28:59.610000
CVE-2025-61951,0,0,49151ecf9b59c92d9c57233cc0c5767cf0ea3112a9c1421bccd9a3915e8972e2,2025-10-16T15:28:59.610000
@@ -311368,7 +311372,7 @@ CVE-2025-6198,0,0,db1c039487e8b4d4c3b8081066603ccfd944901fc68c285d492da4db9add53
CVE-2025-61984,0,0,32606a434d4017e51a703e08f9871d7b230a8462667863fc47b9984b980e44ad,2025-10-08T19:38:32.610000
CVE-2025-61985,0,0,5d33b8575f3bc64b3690e1f198299acfcfc079d0f287f48c5bf85b48f5ae182f,2025-10-08T19:38:32.610000
CVE-2025-6199,0,0,4b699fc3d41c1cd5ec554598f0043d4faabf4d3adf3f9e852ac413108625db8b,2025-08-21T01:16:43.190000
CVE-2025-61990,0,0,cc6720cfbc3eba89bf115ee08c974d01bf79feb42d9d5c0ec18426456ea70198,2025-10-16T15:28:59.610000
CVE-2025-61990,0,1,dd9eccd2d841f704fc8e0d08ef104bf80ba9bce59d83daf1fb4df34f536813db,2025-10-21T12:12:24.840000
CVE-2025-61996,0,0,a70c2db1b74272cfaf716fa8098468d45c463f9cd6d6478941957ced756da43f,2025-10-08T19:38:09.863000
CVE-2025-61997,0,0,f1c58796b20ea4bfe913ed2dfa293f1e3e7c92dd0b8852d9b8977b7e9295c9f8,2025-10-08T19:38:09.863000
CVE-2025-61998,0,0,bcdd0f20d0cc1fed05427b7afce90c4dbb7c95c423a01a86c988cfbbd99f21a6,2025-10-08T19:38:09.863000
@@ -311467,6 +311471,7 @@ CVE-2025-62386,0,0,c89557797a39b2bbeb0503c06c47f1f3291c11f5d7d8b3ed47de18a412491
CVE-2025-62387,0,0,3ae51af5461470dc59cb4a03a91139852153e98801e8b1d6418fc82e5287704c,2025-10-15T19:01:00.530000
CVE-2025-62388,0,0,f6176e98306ff730c490b3afdfbf3e03649cb1645cefb9de46c15bb61d09aaf4,2025-10-15T19:00:52.207000
CVE-2025-62389,0,0,8b21fd2c13e8e0b7c141e71e318e2ef1d860c5eb3c9b215028e37e3789d8114d,2025-10-15T19:00:36.503000
CVE-2025-6239,1,1,3ea6a393e0284bd94cc9bd2635fc71faa283af59146463720dddb651bd4be196,2025-10-21T13:15:36.950000
CVE-2025-62390,0,0,d8a1cd97224cab44567f05a60e3ca88afc98fe64ff4a21d6f1efa0acbfd265e8,2025-10-15T19:00:26.790000
CVE-2025-62391,0,0,74add41f3be4632916fd19f5ea721fe44272a929d5564c60c5aeb3ed1c311701,2025-10-15T19:00:20.420000
CVE-2025-62392,0,0,b36e268985190637101b21f4278a252dc9f0932f31930beb282eafe591cc4b4c,2025-10-15T19:00:15.217000
@@ -311536,9 +311541,9 @@ CVE-2025-62577,0,0,d28fe4bd1ece6854a18b57dbe428602d03926b3ded0a4f38a377e80c1ca31
CVE-2025-62579,0,0,337290e7da7e432d6ce3f5ca40f0e8dc2eaad2f4c5600312959188feac547f68,2025-10-16T15:28:59.610000
CVE-2025-6258,0,0,a4b6be5935c4432c7a129304f469494da82c625050798afddedddfa563a7fe1e,2025-06-26T18:57:43.670000
CVE-2025-62580,0,0,4fef80bc59ba33c4bc2ee28dc8170907e560b31e8de7e574808b74b1863c2ed3,2025-10-16T15:28:59.610000
CVE-2025-62583,0,0,4e43f28a08f15f09f733cc834448b4d26cc2fd1647878a1a89f35123059760c1,2025-10-16T15:28:59.610000
CVE-2025-62584,0,0,6585a6ed47a7c97d6212add24c370f78502845af0c2cb83e784d9480487ae94c,2025-10-16T15:28:59.610000
CVE-2025-62585,0,0,b8638aca9b73ddbf88f474c92e224a4e433ab12970bd02ee8d33b9f02293019f,2025-10-16T15:28:59.610000
CVE-2025-62583,0,1,b7efc690f1961486c672d56b64acefee08c8372b8b7169056840e396ed1eb094,2025-10-21T13:26:06.710000
CVE-2025-62584,0,1,f1289df5bd814dadc33c33f050d0b892aa27627546c6ebea3f414c4dfed36c8d,2025-10-21T13:24:55.783000
CVE-2025-62585,0,1,49158c21ee03e6b2fe3dc18c996c1641a432069a5357478462ff722d49aefeb7,2025-10-21T13:13:19.683000
CVE-2025-62586,0,0,2e224e502c6438b6afc63e564b50a1c9ffcc44fdf693a19f08bac3dbbc01f241,2025-10-16T18:15:40.637000
CVE-2025-6259,0,0,d744e9e7d9739548d1aa01b93be40d8149be7b6157d90d79a79ca07cfece5609,2025-08-06T20:23:37.600000
CVE-2025-6260,0,0,31d8a8fe623c3eb38350582f7b8664017a796cede476db64c602981f5d92a0b2,2025-07-25T15:29:19.837000
@@ -311933,7 +311938,7 @@ CVE-2025-6634,0,0,ae66845787d8c42d1e56cb2ff7c57440e96fdb89705b9ad21c678ad6d4e80e
CVE-2025-6635,0,0,f366fa96759f6376391e9870168cb12b706be770a2e52913524a29ed4df7212b,2025-08-19T14:15:42.380000
CVE-2025-6636,0,0,39816d956bf54791c2eee53a1d1d6c81f3a514d7d1ff595f2855fbf5a5fe97cd,2025-08-19T14:15:42.533000
CVE-2025-6637,0,0,05438cb660d8aac893260bfc33f610909c7a9ff382b07300c5450bd50e8e1904,2025-08-19T14:15:42.677000
CVE-2025-6638,0,0,3b091f925706c79a5e5ab02b2c2207922abde58d84fa55b2c16df5509d9e5c70,2025-09-15T15:21:42.937000
CVE-2025-6638,0,1,7b290d2c6cf51b22ca25b2ccfda0df81519233d8f14ee89bd331c26187b40165,2025-10-21T13:33:08.580000
CVE-2025-6640,0,0,a4c992d898d320b9fbc41aeee35836398a20e38bcfa076af892973b98a231d0d,2025-07-01T19:31:36.373000
CVE-2025-6641,0,0,31699ed61befc504bc8c13dbb1ea193c366fe903345564eb35e59296c5939e55,2025-07-01T19:31:43.230000
CVE-2025-6642,0,0,37c2cb65a07d888f53f384c18bced3f2e5c4ade2246c2eac8aa013a7a21026bb,2025-07-01T19:31:50.170000
@@ -312658,7 +312663,7 @@ CVE-2025-7469,0,0,d96919dc5d7287e3820b066930add8d60da4036ad17bb2554e6c49bfbc3205
CVE-2025-7470,0,0,f531117af2b74796d068d36909916e2eb5ef7a2774c2e5a428d0a85c3e9f5e99,2025-07-15T15:27:27.680000
CVE-2025-7471,0,0,f159309e058d4d8d7a1a47b7f9e35c90d6da3b8ede3f6963f32dad39c13c3b2b,2025-07-15T14:32:06.107000
CVE-2025-7472,0,0,50c241cd1102df9bd31b89b2f3848f6ba93f82cc1b69ab444806433bd1b45208,2025-07-17T21:15:50.197000
CVE-2025-7473,1,1,c8fe702c3bb598d112af2883a7affa492dcf9ded6409ebc88d9f17480dc4c3ed,2025-10-21T11:15:34.240000
CVE-2025-7473,0,0,c8fe702c3bb598d112af2883a7affa492dcf9ded6409ebc88d9f17480dc4c3ed,2025-10-21T11:15:34.240000
CVE-2025-7474,0,0,17cee2b383065cd404657e5135efc28ee2e2db356ec29fef4c9c8bd5dd47f7c8,2025-07-15T18:08:34.633000
CVE-2025-7475,0,0,eca8ddd86f82111fd31341e98a3e7de57df4033b0ca28941213696f9ca37bbc8,2025-07-18T19:04:46.877000
CVE-2025-7476,0,0,d74da19eb884d0b376600f2d073a2c9b1faef6b0ab47e25aba6cab1eb97f8d92,2025-07-18T19:10:12.320000
@@ -314320,6 +314325,7 @@ CVE-2025-9423,0,0,a9f3e261ded217893caa455910764ce306853acf5605cabddd68fc213fd9a8
CVE-2025-9424,0,0,2e7916476a86821ba8bca41f13d2d1308eda3d553d17714870e7addb9f50a602,2025-09-12T20:31:48.240000
CVE-2025-9425,0,0,8d4f86be6f87c26a996d7d0a72950d443e3f0577996bf2358da075d94f95e46f,2025-09-02T18:12:57.737000
CVE-2025-9426,0,0,bead1210b8acf7693b1aad291f927bbecce62b8a869c0602c4d8064a0b12a1b0,2025-09-02T18:13:15.540000
CVE-2025-9428,1,1,44a518c76c302772b488db56a4116255c70b873f12c0f484f9f31840f6395ad5,2025-10-21T12:15:35.673000
CVE-2025-9429,0,0,212e45530ca29e1ffdd81edd49ffc2f8e30f90cb410491c8cf42efaa7c51fcad,2025-08-28T14:00:24.693000
CVE-2025-9430,0,0,bb23f4625867771ff7b4e461468b1a6328b27354679ee166d83f7d3186fbdf08,2025-08-28T14:02:18.183000
CVE-2025-9431,0,0,cc3d4cc6ec0e683009229537cb84b4ce5dd4dc7ce3617aabc0971d204bcb955a,2025-08-28T14:06:38.483000
@@ -314631,7 +314637,7 @@ CVE-2025-9801,0,0,7f5d41cf41a0eb39aad90f3f0b783f72305ba97a781e92ef8cd099c85d8922
CVE-2025-9802,0,0,f962ddf99a5470a3cfcdff2ad4042bd3d03270f61056fc182a3c21427955f44a,2025-09-02T15:55:25.420000
CVE-2025-9804,0,0,65c1b399bb87ef2d0a15429d93f082bb5a60735f5164eeb6e159b5ee46c8bdd5,2025-10-17T16:15:39.670000
CVE-2025-9805,0,0,3cebc54a634fd05d19d9db2655ecb3bb4611e430809973e4cbe4a88e857f22be,2025-09-02T15:55:25.420000
CVE-2025-9806,0,0,f2af1cd3fcc10bbc4f34fed39fa7711935ab52659a41e9cfb3118f6bd6d7282f,2025-09-02T15:55:25.420000
CVE-2025-9806,0,1,640cbf54654d9e001aac94f83615ca84e51b83280824bae6fedde6579498a95c,2025-10-21T13:42:28.893000
CVE-2025-9807,0,0,177bfe226b8cfd501cf3c3b5d524122016e3838ff9a73e25d1d073e9af9a075e,2025-09-15T15:22:38.297000
CVE-2025-9808,0,0,dc147a1fabaa4c534ab9a3f237f1da614a2e1416220d1f09131ff7d9f63e520e,2025-09-16T12:49:16.060000
CVE-2025-9809,0,0,edb4094588a89b5d4ddc6f8916056d1ee3cdededc48ca05154d46d1a76d526af,2025-09-02T15:55:25.420000
Can't render this file because it is too large.