admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-24 17:04:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-12-02T03:00:11.576578+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-12-02 03:04:02 +00:00
1 parent 4a7cf4929b
commit 584c1b3d18
63 files changed
+4617 -317
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2023/CVE-2023-531xx/CVE-2023-53171.json
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53171",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:38.940",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:58:59.253",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,27 +11,117 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvfio/type1: prevent underflow of locked_vm via exec()\n\nWhen a vfio container is preserved across exec, the task does not change,\nbut it gets a new mm with locked_vm=0, and loses the count from existing\ndma mappings. If the user later unmaps a dma mapping, locked_vm underflows\nto a large unsigned value, and a subsequent dma map request fails with\nENOMEM in __account_locked_vm.\n\nTo avoid underflow, grab and save the mm at the time a dma is mapped.\nUse that mm when adjusting locked_vm, rather than re-acquiring the saved\ntask's mm, which may have changed. If the saved mm is dead, do nothing.\n\nlocked_vm is incremented for existing mappings in a subsequent patch."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.6",
"versionEndExcluding": "5.10.173",
"matchCriteriaId": "B3D65565-A7D5-494E-BE36-DE258E7C929A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.99",
"matchCriteriaId": "5B8B2AC9-2F31-4A0F-96F5-7E26B50B27BB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.16",
"matchCriteriaId": "0FD95FDA-6525-4B13-B3FB-49D9995FD8ED"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.2.3",
"matchCriteriaId": "88C67289-22AD-4CA9-B202-5F5A80E5BA4B"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/046eca5018f8a5dd1dc2cedf87fb5843b9ea3026",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5a271242716846cc016736fb76be2b40ee49b0c3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a6b2aabe664098d5cf877ae0fd96459464a30e17",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b0790dff0760b7734cf0961f497ad64628ca550b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/eafb81c50da899dd80b340c841277acc4a1945b7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53173.json
+86 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53173",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:39.170",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:58:40.677",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,23 +11,102 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: pcn_uart: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.100",
"matchCriteriaId": "1C6BE26E-964F-4E1A-BE85-38E953B81393"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.18",
"matchCriteriaId": "C8D24FD5-5A98-4042-9419-39DCFCBEFFF5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.2.5",
"matchCriteriaId": "0575B33B-A320-4E51-84CA-10C937341E02"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/04a189c720aa2b6091442113ce9b9bc93552dff8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/139769c4bd8273b5e3f85ea474aa37018fe7e436",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4459d1e7bd0421b3b6fcd745773d8823f71615ef",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cf042964c2fa72950bbbf25b2cdd732b873e89db",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53174.json
+156 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53174",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:39.283",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:58:29.733",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,39 +11,184 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: core: Fix possible memory leak if device_add() fails\n\nIf device_add() returns error, the name allocated by dev_set_name() needs\nbe freed. As the comment of device_add() says, put_device() should be used\nto decrease the reference count in the error path. So fix this by calling\nput_device(), then the name can be freed in kobject_cleanp()."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.26",
"versionEndExcluding": "4.14.323",
"matchCriteriaId": "A9498465-219D-4C7D-AFC9-4DCF841063A6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.292",
"matchCriteriaId": "684F195A-516D-43E8-B1F2-9C808AD362DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.254",
"matchCriteriaId": "25D01197-E40D-49C5-AA15-4955E10B7AE6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.191",
"matchCriteriaId": "A7631AF2-4758-4770-9B7D-A68CACF660D0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.127",
"matchCriteriaId": "945AF8F7-5328-4A14-B072-A5740192C9E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.46",
"matchCriteriaId": "D8B8CC90-9492-465C-81D4-10DA3B712286"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.4.11",
"matchCriteriaId": "C36FD9E6-B6D7-4887-8F08-C1F64E139D5C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*",
"matchCriteriaId": "F5608371-157A-4318-8A2E-4104C3467EA1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*",
"matchCriteriaId": "2226A776-DF8C-49E0-A030-0A7853BB018A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*",
"matchCriteriaId": "6F15C659-DF06-455A-9765-0E6DE920F29A"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/04b5b5cb0136ce970333a9c6cec7e46adba1ea3a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/06c5340858011aa1195aec43a776e3185fbf7f56",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/43c0e16d0c5ec59398b405f4c4aa5a076e656c3f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/63956ad27a6882f01fea7c69e17823090f4c7b3f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/6bc7f4c8c27d526f968788b8a985896755b1df35",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/aa9a76d5ffdecd3b52ac333eb89361b0c9fe04e8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b191ff1f075c4875f11271cbf0093e6e044a12aa",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e12fac07f61caac9c5b186d827658b3470787619",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53175.json
+87 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53175",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:39.410",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:58:09.733",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,23 +11,103 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation\n\nWhen a Linux VM with an assigned PCI device runs on Hyper-V, if the PCI\ndevice driver is not loaded yet (i.e. MSI-X/MSI is not enabled on the\ndevice yet), doing a VM hibernation triggers a panic in\nhv_pci_restore_msi_msg() -> msi_lock_descs(&pdev->dev), because\npdev->dev.msi.data is still NULL.\n\nAvoid the panic by checking if MSI-X/MSI is enabled."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.17",
"versionEndExcluding": "6.1.53",
"matchCriteriaId": "63373196-1DDF-4F52-965E-D05089EAECC2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.4.16",
"matchCriteriaId": "C3039EA3-F6CA-43EF-9F17-81A7EC6841EF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.5",
"versionEndExcluding": "6.5.3",
"matchCriteriaId": "880C803A-BEAE-4DA0-8A59-AC023F7B4EE3"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/04bbe863241a9be7d57fb4cf217ee4a72f480e70",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/223fc5352054900f70b8b5e10cfc2f297e70c512",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d0687755407b21d252b98dca6be459153a60c62a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e32fc2168aa6b477290392ddbb73d95f012b050c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53176.json
+130 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53176",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:39.527",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:58:00.767",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,39 +11,158 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: 8250: Reinit port->pm on port specific driver unbind\n\nWhen we unbind a serial port hardware specific 8250 driver, the generic\nserial8250 driver takes over the port. After that we see an oops about 10\nseconds later. This can produce the following at least on some TI SoCs:\n\nUnhandled fault: imprecise external abort (0x1406)\nInternal error: : 1406 [#1] SMP ARM\n\nTurns out that we may still have the serial port hardware specific driver\nport->pm in use, and serial8250_pm() tries to call it after the port\nspecific driver is gone:\n\nserial8250_pm [8250_base] from uart_change_pm+0x54/0x8c [serial_base]\nuart_change_pm [serial_base] from uart_hangup+0x154/0x198 [serial_base]\nuart_hangup [serial_base] from __tty_hangup.part.0+0x328/0x37c\n__tty_hangup.part.0 from disassociate_ctty+0x154/0x20c\ndisassociate_ctty from do_exit+0x744/0xaac\ndo_exit from do_group_exit+0x40/0x8c\ndo_group_exit from __wake_up_parent+0x0/0x1c\n\nLet's fix the issue by calling serial8250_set_defaults() in\nserial8250_unregister_port(). This will set the port back to using\nthe serial8250 default functions, and sets the port->pm to point to\nserial8250_pm."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.14.316",
"matchCriteriaId": "A0661905-1FBF-4C8F-8C8F-9573FB6BF8B8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.284",
"matchCriteriaId": "9112EE64-11F4-46DB-A041-95118F20F81B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.244",
"matchCriteriaId": "79F47095-8BA3-495A-AED3-2CCA5F2838E6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.181",
"matchCriteriaId": "F5B1726B-45AA-47F2-9261-6DC963E92248"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.113",
"matchCriteriaId": "F3D5E1B5-AB9D-4ECC-8F11-F3E1BF761E27"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.30",
"matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.3.4",
"matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/04e82793f068d2f0ffe62fcea03d007a8cdc16a7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/1ba5594739d858e524ff0f398ee1ebfe0a8b9d41",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2c86a1305c1406f45ea780d06953c484ea1d9e6e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/490bf37eaabb0a857ed1ae8e75d8854e41662f1c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8e596aed5f2f98cf3e6e98d6fe1d689f4a319308",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/af4d6dbb1a92ea424ad1ba1d0c88c7fa2345d872",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c9e080c3005fd183c56ff8f4d75edb5da0765d2c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d5cd2928d31042a7c0a01464f9a8d95be736421d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53177.json
+76 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53177",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:39.670",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:58:19.630",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,89 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: hi846: fix usage of pm_runtime_get_if_in_use()\n\npm_runtime_get_if_in_use() does not only return nonzero values when\nthe device is in use, it can return a negative errno too.\n\nAnd especially during resuming from system suspend, when runtime pm\nis not yet up again, -EAGAIN is being returned, so the subsequent\npm_runtime_put() call results in a refcount underflow.\n\nFix system-resume by handling -EAGAIN of pm_runtime_get_if_in_use()."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.39",
"matchCriteriaId": "9BD1D4A1-304D-4187-8178-6D7C0050B1AF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.4.4",
"matchCriteriaId": "A91BC267-63EE-413E-A6EF-6B96C2A278D1"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/04fc06f6dc1592ed5d675311ac50d8fba5db62ab",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/42ec6269f98edd915ee37da3c6456bb6243ea56a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c5dcd7a19f1ed8fe98384f3a9444c7c53befd74e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53178.json
+86 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53178",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:39.803",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:57:41.047",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,99 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: fix zswap writeback race condition\n\nThe zswap writeback mechanism can cause a race condition resulting in\nmemory corruption, where a swapped out page gets swapped in with data that\nwas written to a different page.\n\nThe race unfolds like this:\n1. a page with data A and swap offset X is stored in zswap\n2. page A is removed off the LRU by zpool driver for writeback in\n zswap-shrink work, data for A is mapped by zpool driver\n3. user space program faults and invalidates page entry A, offset X is\n considered free\n4. kswapd stores page B at offset X in zswap (zswap could also be\n full, if so, page B would then be IOed to X, then skip step 5.)\n5. entry A is replaced by B in tree->rbroot, this doesn't affect the\n local reference held by zswap-shrink work\n6. zswap-shrink work writes back A at X, and frees zswap entry A\n7. swapin of slot X brings A in memory instead of B\n\nThe fix:\nOnce the swap page cache has been allocated (case ZSWAP_SWAPCACHE_NEW),\nzswap-shrink work just checks that the local zswap_entry reference is\nstill the same as the one in the tree. If it's not the same it means that\nit's either been invalidated or replaced, in both cases the writeback is\naborted because the local entry contains stale data.\n\nReproducer:\nI originally found this by running `stress` overnight to validate my work\non the zswap writeback mechanism, it manifested after hours on my test\nmachine. The key to make it happen is having zswap writebacks, so\nwhatever setup pumps /sys/kernel/debug/zswap/written_back_pages should do\nthe trick.\n\nIn order to reproduce this faster on a vm, I setup a system with ~100M of\navailable memory and a 500M swap file, then running `stress --vm 1\n--vm-bytes 300000000 --vm-stride 4000` makes it happen in matter of tens\nof minutes. One can speed things up even more by swinging\n/sys/module/zswap/parameters/max_pool_percent up and down between, say, 20\nand 1; this makes it reproduce in tens of seconds. It's crucial to set\n`--vm-stride` to something other than 4096 otherwise `stress` won't\nrealize that memory has been corrupted because all pages would have the\nsame data."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.11",
"versionEndExcluding": "6.1.30",
"matchCriteriaId": "C6DE89D5-1124-43A1-92F8-7F391638AE90"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.3.4",
"matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*",
"matchCriteriaId": "38BC6744-7D25-4C02-9966-B224CD071D30"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc2:*:*:*:*:*:*",
"matchCriteriaId": "76061B41-CAE9-4467-BEDE-0FFC7956F2A1"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/04fc7816089c5a32c29a04ec94b998e219dfb946",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2cab13f500a6333bd2b853783ac76be9e4956f8a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ba700ea13bf0105a4773c654f7d3bef8adb64ab2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53179.json
+191 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53179",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:39.920",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:57:31.997",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,43 +11,222 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c\n\nThe missing IP_SET_HASH_WITH_NET0 macro in ip_set_hash_netportnet can\nlead to the use of wrong `CIDR_POS(c)` for calculating array offsets,\nwhich can lead to integer underflow. As a result, it leads to slab\nout-of-bound access.\nThis patch adds back the IP_SET_HASH_WITH_NET0 macro to\nip_set_hash_netportnet to address the issue."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.4.165",
"versionEndExcluding": "4.5",
"matchCriteriaId": "AD01C7C9-D368-4064-AD19-3ED7956BA008"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.9.141",
"versionEndExcluding": "4.10",
"matchCriteriaId": "6110755E-5539-445C-883D-9E86287AFEEE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.14.84",
"versionEndExcluding": "4.14.326",
"matchCriteriaId": "EE00D323-A07A-4CF1-A179-86163EBDB5A5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.19.5",
"versionEndExcluding": "4.19.295",
"matchCriteriaId": "CDC0A505-82EB-4D3B-9209-93E3A0300F29"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20.1",
"versionEndExcluding": "5.4.257",
"matchCriteriaId": "53E75E7B-0EFC-452E-8A14-C44C5F193CB0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.195",
"matchCriteriaId": "C385B650-53DB-4BFB-83D1-1D8FADF653EF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.132",
"matchCriteriaId": "5913891D-409A-4EEC-9231-F2EF5A493BC7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.53",
"matchCriteriaId": "B20754AF-3B8C-4574-A70D-EC24933810E5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.4.16",
"matchCriteriaId": "C3039EA3-F6CA-43EF-9F17-81A7EC6841EF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.5",
"versionEndExcluding": "6.5.3",
"matchCriteriaId": "880C803A-BEAE-4DA0-8A59-AC023F7B4EE3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:4.20:-:*:*:*:*:*:*",
"matchCriteriaId": "1072305B-94A8-4D68-9419-B786885AA310"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:4.20:rc2:*:*:*:*:*:*",
"matchCriteriaId": "80BF0376-7A24-47F5-8CB1-42567422DEBD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:4.20:rc3:*:*:*:*:*:*",
"matchCriteriaId": "78302933-7144-4E9A-A4DC-B8EB431CC249"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:4.20:rc4:*:*:*:*:*:*",
"matchCriteriaId": "0758DE8E-2550-4676-A7D0-9D19FD935993"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:4.20:rc5:*:*:*:*:*:*",
"matchCriteriaId": "BB4884D1-AA0E-4A94-93A3-BF058D3DFEF7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:4.20:rc6:*:*:*:*:*:*",
"matchCriteriaId": "1741C485-D309-4821-A7F9-6F31A8FEB5CF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:4.20:rc7:*:*:*:*:*:*",
"matchCriteriaId": "82240F8A-B5DF-45CC-8031-CDE3E191D24C"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/050d91c03b28ca479df13dfb02bcd2c60dd6a878",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/109e830585e89a03d554bf8ad0e668630d0a6260",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7935b636dd693dfe4483cfef4a1e91366c8103fa",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7ca0706c68adadf86a36b60dca090f5e9481e808",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/83091f8ac03f118086596f17c9a52d31d6ca94b3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a9e6142e5f8f6ac7d1bca45c1b2b13b084ea9e14",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d59b6fc405549f7caf31f6aa5da1d6bef746b166",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d95c8420efe684b964e3aa28108e9a354bcd7225",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e632d09dffc68b9602d6893a99bfe3001d36cefc",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53180.json
+65 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53180",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:40.057",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:57:51.230",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,75 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: Avoid NULL pointer access during management transmit cleanup\n\nCurrently 'ar' reference is not added in skb_cb.\nThough this is generally not used during transmit completion\ncallbacks, on interface removal the remaining idr cleanup callback\nuses the ar pointer from skb_cb from management txmgmt_idr. Hence fill them\nduring transmit call for proper usage to avoid NULL pointer dereference.\n\nTested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPL_SILICONZ-1"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.3",
"versionEndExcluding": "6.4.7",
"matchCriteriaId": "512FD1BB-DF87-4F28-88A8-F2025245BF1B"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/054b5580a36e435692c203c19abdcb9f7734320e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7382d02160ef93c806fe1c1d4ef1fec445266747",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53181.json
+86 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53181",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:40.173",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:57:23.177",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,99 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndma-buf/dma-resv: Stop leaking on krealloc() failure\n\nCurrently dma_resv_get_fences() will leak the previously\nallocated array if the fence iteration got restarted and\nthe krealloc_array() fails.\n\nFree the old array by hand, and make sure we still clear\nthe returned *fences so the caller won't end up accessing\nfreed memory. Some (but not all) of the callers of\ndma_resv_get_fences() seem to still trawl through the\narray even when dma_resv_get_fences() failed. And let's\nzero out *num_fences as well for good measure."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.42",
"matchCriteriaId": "6E769E6A-7EEF-4FA8-BF41-6CA1CE537361"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.4.7",
"matchCriteriaId": "60A1A1ED-EA6C-42F6-80D3-3316DC7608C7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/05abb3be91d8788328231ee02973ab3d47f5e3d2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/19e7b9f1f7e1cb92a4cc53b4c064f7fb4b1f1983",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/819656cc03dec7f7f7800274dfbc8eb49f888e9f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53182.json
+130 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53182",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:40.287",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:57:13.687",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,39 +11,158 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPICA: Avoid undefined behavior: applying zero offset to null pointer\n\nACPICA commit 770653e3ba67c30a629ca7d12e352d83c2541b1e\n\nBefore this change we see the following UBSAN stack trace in Fuchsia:\n\n #0 0x000021e4213b3302 in acpi_ds_init_aml_walk(struct acpi_walk_state*, union acpi_parse_object*, struct acpi_namespace_node*, u8*, u32, struct acpi_evaluate_info*, u8) ../../third_party/acpica/source/components/dispatcher/dswstate.c:682 <platform-bus-x86.so>+0x233302\n #1.2 0x000020d0f660777f in ubsan_get_stack_trace() compiler-rt/lib/ubsan/ubsan_diag.cpp:41 <libclang_rt.asan.so>+0x3d77f\n #1.1 0x000020d0f660777f in maybe_print_stack_trace() compiler-rt/lib/ubsan/ubsan_diag.cpp:51 <libclang_rt.asan.so>+0x3d77f\n #1 0x000020d0f660777f in ~scoped_report() compiler-rt/lib/ubsan/ubsan_diag.cpp:387 <libclang_rt.asan.so>+0x3d77f\n #2 0x000020d0f660b96d in handlepointer_overflow_impl() compiler-rt/lib/ubsan/ubsan_handlers.cpp:809 <libclang_rt.asan.so>+0x4196d\n #3 0x000020d0f660b50d in compiler-rt/lib/ubsan/ubsan_handlers.cpp:815 <libclang_rt.asan.so>+0x4150d\n #4 0x000021e4213b3302 in acpi_ds_init_aml_walk(struct acpi_walk_state*, union acpi_parse_object*, struct acpi_namespace_node*, u8*, u32, struct acpi_evaluate_info*, u8) ../../third_party/acpica/source/components/dispatcher/dswstate.c:682 <platform-bus-x86.so>+0x233302\n #5 0x000021e4213e2369 in acpi_ds_call_control_method(struct acpi_thread_state*, struct acpi_walk_state*, union acpi_parse_object*) ../../third_party/acpica/source/components/dispatcher/dsmethod.c:605 <platform-bus-x86.so>+0x262369\n #6 0x000021e421437fac in acpi_ps_parse_aml(struct acpi_walk_state*) ../../third_party/acpica/source/components/parser/psparse.c:550 <platform-bus-x86.so>+0x2b7fac\n #7 0x000021e4214464d2 in acpi_ps_execute_method(struct acpi_evaluate_info*) ../../third_party/acpica/source/components/parser/psxface.c:244 <platform-bus-x86.so>+0x2c64d2\n #8 0x000021e4213aa052 in acpi_ns_evaluate(struct acpi_evaluate_info*) ../../third_party/acpica/source/components/namespace/nseval.c:250 <platform-bus-x86.so>+0x22a052\n #9 0x000021e421413dd8 in acpi_ns_init_one_device(acpi_handle, u32, void*, void**) ../../third_party/acpica/source/components/namespace/nsinit.c:735 <platform-bus-x86.so>+0x293dd8\n #10 0x000021e421429e98 in acpi_ns_walk_namespace(acpi_object_type, acpi_handle, u32, u32, acpi_walk_callback, acpi_walk_callback, void*, void**) ../../third_party/acpica/source/components/namespace/nswalk.c:298 <platform-bus-x86.so>+0x2a9e98\n #11 0x000021e4214131ac in acpi_ns_initialize_devices(u32) ../../third_party/acpica/source/components/namespace/nsinit.c:268 <platform-bus-x86.so>+0x2931ac\n #12 0x000021e42147c40d in acpi_initialize_objects(u32) ../../third_party/acpica/source/components/utilities/utxfinit.c:304 <platform-bus-x86.so>+0x2fc40d\n #13 0x000021e42126d603 in acpi::acpi_impl::initialize_acpi(acpi::acpi_impl*) ../../src/devices/board/lib/acpi/acpi-impl.cc:224 <platform-bus-x86.so>+0xed603\n\nAdd a simple check that avoids incrementing a pointer by zero, but\notherwise behaves as before. Note that our findings are against ACPICA\n20221020, but the same code exists on master."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.14.316",
"matchCriteriaId": "A0661905-1FBF-4C8F-8C8F-9573FB6BF8B8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.284",
"matchCriteriaId": "9112EE64-11F4-46DB-A041-95118F20F81B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.244",
"matchCriteriaId": "79F47095-8BA3-495A-AED3-2CCA5F2838E6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.181",
"matchCriteriaId": "F5B1726B-45AA-47F2-9261-6DC963E92248"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.113",
"matchCriteriaId": "F3D5E1B5-AB9D-4ECC-8F11-F3E1BF761E27"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.30",
"matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.3.4",
"matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/05bb0167c80b8f93c6a4e0451b7da9b96db990c2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/16359bc02c093b0862e31739c07673340a2106a6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3048c6b84a51e4ba4a89385ed218d19a670edd47",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/35465c7a91c6b46e7c14d0c01d0084349a38ce51",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3a7a4aa3958ce0c4938a443d65001debe9a9af9c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5a2d0dcb47b16f84880a59571eab8a004e3236d7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/710e09fd116e2fa53e319a416ad4e4f8027682b6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8c4a7163b7f1495e3cc58bec7a4100de6612cde9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53183.json
+111 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53183",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:40.420",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:56:50.870",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,23 +11,127 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: exit gracefully if reloc roots don't match\n\n[BUG]\nSyzbot reported a crash that an ASSERT() got triggered inside\nprepare_to_merge().\n\n[CAUSE]\nThe root cause of the triggered ASSERT() is we can have a race between\nquota tree creation and relocation.\n\nThis leads us to create a duplicated quota tree in the\nbtrfs_read_fs_root() path, and since it's treated as fs tree, it would\nhave ROOT_SHAREABLE flag, causing us to create a reloc tree for it.\n\nThe bug itself is fixed by a dedicated patch for it, but this already\ntaught us the ASSERT() is not something straightforward for\ndevelopers.\n\n[ENHANCEMENT]\nInstead of using an ASSERT(), let's handle it gracefully and output\nextra info about the mismatch reloc roots to help debug.\n\nAlso with the above ASSERT() removed, we can trigger ASSERT(0)s inside\nmerge_reloc_roots() later.\nAlso replace those ASSERT(0)s with WARN_ON()s."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-617"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.127",
"matchCriteriaId": "51971425-9507-42FE-BE84-68F631C190CD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.46",
"matchCriteriaId": "D8B8CC90-9492-465C-81D4-10DA3B712286"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.4.11",
"matchCriteriaId": "C36FD9E6-B6D7-4887-8F08-C1F64E139D5C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*",
"matchCriteriaId": "F5608371-157A-4318-8A2E-4104C3467EA1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*",
"matchCriteriaId": "2226A776-DF8C-49E0-A030-0A7853BB018A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*",
"matchCriteriaId": "6F15C659-DF06-455A-9765-0E6DE920F29A"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/05d7ce504545f7874529701664c90814ca645c5d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/69dd147de419b04d1d8d2ca67ef424cddd5b8fd5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9d04716e36654275aea00fb93fc9b30b850925e7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a96b6519ac71583835cb46d74bc450de5a13877f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53185.json
+142 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53185",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:40.657",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:56:18.970",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,43 +11,173 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: don't allow to overwrite ENDPOINT0 attributes\n\nA bad USB device is able to construct a service connection response\nmessage with target endpoint being ENDPOINT0 which is reserved for\nHTC_CTRL_RSVD_SVC and should not be modified to be used for any other\nservices.\n\nReject such service connection responses.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.35",
"versionEndExcluding": "4.14.322",
"matchCriteriaId": "0B0A4ED3-F29C-491F-AD11-6A9E8E165B65"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.291",
"matchCriteriaId": "D2D2CA9F-4CC4-4AF5-8C6D-E58415AB782E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.251",
"matchCriteriaId": "7FA663C4-CA72-4B5A-8592-7354D978F58E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.188",
"matchCriteriaId": "43CAE50A-4A6C-488E-813C-F8DB77C13C8B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.121",
"matchCriteriaId": "EC77775B-EC31-4966-966C-1286C02B2A85"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.39",
"matchCriteriaId": "9BD1D4A1-304D-4187-8178-6D7C0050B1AF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.3.13",
"matchCriteriaId": "95CB4836-7F5D-4C20-B025-8E046EC87B78"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.4",
"versionEndExcluding": "6.4.4",
"matchCriteriaId": "6AB81046-CB69-4115-924C-963B37C41385"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/061b0cb9327b80d7a0f63a33e7c3e2a91a71f142",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/09740fa9827cfbaf23ecd041e602a426f99be888",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/1044187e7249073f719ebbf9e5ffb4f16f99e555",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4dc3560561a08842b4a4c07ccc5a90e5067dbb5b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/6a444dffb75238c47d2d852f12cf53f12ad2cba8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/95b4b940f0fb2873dcedad81699e869eb7581c85",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9e3031eea2d45918dc44cbfc6a6029e82882916f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/be2a546c30fe8d72efa032bee612363bb75314bd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/db8df00cd6d801b3abdb145201c2bdd1c665f585",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53186.json
+117 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53186",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:40.783",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:56:07.880",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,23 +11,133 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nskbuff: Fix a race between coalescing and releasing SKBs\n\nCommit 1effe8ca4e34 (\"skbuff: fix coalescing for page_pool fragment\nrecycling\") allowed coalescing to proceed with non page pool page and page\npool page when @from is cloned, i.e.\n\nto->pp_recycle --> false\nfrom->pp_recycle --> true\nskb_cloned(from) --> true\n\nHowever, it actually requires skb_cloned(@from) to hold true until\ncoalescing finishes in this situation. If the other cloned SKB is\nreleased while the merging is in process, from_shinfo->nr_frags will be\nset to 0 toward the end of the function, causing the increment of frag\npage _refcount to be unexpectedly skipped resulting in inconsistent\nreference counts. Later when SKB(@to) is released, it frees the page\ndirectly even though the page pool page is still in use, leading to\nuse-after-free or double-free errors. So it should be prohibited.\n\nThe double-free error message below prompted us to investigate:\nBUG: Bad page state in process swapper/1 pfn:0e0d1\npage:00000000c6548b28 refcount:-1 mapcount:0 mapping:0000000000000000\nindex:0x2 pfn:0xe0d1\nflags: 0xfffffc0000000(node=0|zone=1|lastcpupid=0x1fffff)\nraw: 000fffffc0000000 0000000000000000 ffffffff00000101 0000000000000000\nraw: 0000000000000002 0000000000000000 ffffffffffffffff 0000000000000000\npage dumped because: nonzero _refcount\n\nCPU: 1 PID: 0 Comm: swapper/1 Tainted: G E 6.2.0+\nCall Trace:\n <IRQ>\ndump_stack_lvl+0x32/0x50\nbad_page+0x69/0xf0\nfree_pcp_prepare+0x260/0x2f0\nfree_unref_page+0x20/0x1c0\nskb_release_data+0x10b/0x1a0\nnapi_consume_skb+0x56/0x150\nnet_rx_action+0xf0/0x350\n? __napi_schedule+0x79/0x90\n__do_softirq+0xc8/0x2b1\n__irq_exit_rcu+0xb9/0xf0\ncommon_interrupt+0x82/0xa0\n</IRQ>\n<TASK>\nasm_common_interrupt+0x22/0x40\nRIP: 0010:default_idle+0xb/0x20"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.15",
"versionEndExcluding": "5.15.108",
"matchCriteriaId": "206E3FF7-093D-4CBB-93BC-8405F25B3CB7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.25",
"matchCriteriaId": "A6E5D96B-E06F-4EB1-B0AA-BB8F5E9187E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.2.12",
"matchCriteriaId": "4AA01E0B-227C-4686-AC91-BA30BCC48E6D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
"matchCriteriaId": "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
"matchCriteriaId": "A47F0FC3-CE52-4BA1-BA51-22F783938431"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*",
"matchCriteriaId": "3583026A-27EC-4A4C-850A-83F2AF970673"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc4:*:*:*:*:*:*",
"matchCriteriaId": "DC271202-7570-4505-89A4-D602D47BFD00"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc5:*:*:*:*:*:*",
"matchCriteriaId": "D413BB6D-4F74-4C7D-9163-47786619EF53"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc6:*:*:*:*:*:*",
"matchCriteriaId": "F4D613FB-9976-4989-8C4A-567773373CEA"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0646dc31ca886693274df5749cd0c8c1eaaeb5ca",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5f692c992a3bb9a8018e3488098b401a4229e7ec",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/71850b5af92da21b4862a9bc55bda61091247d00",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/906a6689bb0191ad2a44131a3377006aa098af59",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53187.json
+79 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53187",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:40.907",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:55:45.260",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,92 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix use-after-free of new block group that became unused\n\nIf a task creates a new block group and that block group becomes unused\nbefore we finish its creation, at btrfs_create_pending_block_groups(),\nthen when btrfs_mark_bg_unused() is called against the block group, we\nassume that the block group is currently in the list of block groups to\nreclaim, and we move it out of the list of new block groups and into the\nlist of unused block groups. This has two consequences:\n\n1) We move it out of the list of new block groups associated to the\n current transaction. So the block group creation is not finished and\n if we attempt to delete the bg because it's unused, we will not find\n the block group item in the extent tree (or the new block group tree),\n its device extent items in the device tree etc, resulting in the\n deletion to fail due to the missing items;\n\n2) We don't increment the reference count on the block group when we\n move it to the list of unused block groups, because we assumed the\n block group was on the list of block groups to reclaim, and in that\n case it already has the correct reference count. However the block\n group was on the list of new block groups, in which case no extra\n reference was taken because it's local to the current task. This\n later results in doing an extra reference count decrement when\n removing the block group from the unused list, eventually leading the\n reference count to 0.\n\nThis second case was caught when running generic/297 from fstests, which\nproduced the following assertion failure and stack trace:\n\n [589.559] assertion failed: refcount_read(&block_group->refs) == 1, in fs/btrfs/block-group.c:4299\n [589.559] ------------[ cut here ]------------\n [589.559] kernel BUG at fs/btrfs/block-group.c:4299!\n [589.560] invalid opcode: 0000 [#1] PREEMPT SMP PTI\n [589.560] CPU: 8 PID: 2819134 Comm: umount Tainted: G W 6.4.0-rc6-btrfs-next-134+ #1\n [589.560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.2-0-gea1b7a073390-prebuilt.qemu.org 04/01/2014\n [589.560] RIP: 0010:btrfs_free_block_groups+0x449/0x4a0 [btrfs]\n [589.561] Code: 68 62 da c0 (...)\n [589.561] RSP: 0018:ffffa55a8c3b3d98 EFLAGS: 00010246\n [589.561] RAX: 0000000000000058 RBX: ffff8f030d7f2000 RCX: 0000000000000000\n [589.562] RDX: 0000000000000000 RSI: ffffffff953f0878 RDI: 00000000ffffffff\n [589.562] RBP: ffff8f030d7f2088 R08: 0000000000000000 R09: ffffa55a8c3b3c50\n [589.562] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8f05850b4c00\n [589.562] R13: ffff8f030d7f2090 R14: ffff8f05850b4cd8 R15: dead000000000100\n [589.563] FS: 00007f497fd2e840(0000) GS:ffff8f09dfc00000(0000) knlGS:0000000000000000\n [589.563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n [589.563] CR2: 00007f497ff8ec10 CR3: 0000000271472006 CR4: 0000000000370ee0\n [589.563] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n [589.564] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n [589.564] Call Trace:\n [589.564] <TASK>\n [589.565] ? __die_body+0x1b/0x60\n [589.565] ? die+0x39/0x60\n [589.565] ? do_trap+0xeb/0x110\n [589.565] ? btrfs_free_block_groups+0x449/0x4a0 [btrfs]\n [589.566] ? do_error_trap+0x6a/0x90\n [589.566] ? btrfs_free_block_groups+0x449/0x4a0 [btrfs]\n [589.566] ? exc_invalid_op+0x4e/0x70\n [589.566] ? btrfs_free_block_groups+0x449/0x4a0 [btrfs]\n [589.567] ? asm_exc_invalid_op+0x16/0x20\n [589.567] ? btrfs_free_block_groups+0x449/0x4a0 [btrfs]\n [589.567] ? btrfs_free_block_groups+0x449/0x4a0 [btrfs]\n [589.567] close_ctree+0x35d/0x560 [btrfs]\n [589.568] ? fsnotify_sb_delete+0x13e/0x1d0\n [589.568] ? dispose_list+0x3a/0x50\n [589.568] ? evict_inodes+0x151/0x1a0\n [589.568] generic_shutdown_super+0x73/0x1a0\n [589.569] kill_anon_super+0x14/0x30\n [589.569] btrfs_kill_super+0x12/0x20 [btrfs]\n [589.569] deactivate_locked\n---truncated---"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.15.128",
"versionEndExcluding": "5.16",
"matchCriteriaId": "F22B9A69-E286-47B2-9428-20C5AB28617F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0657b20c5a76c938612f8409735a8830d257866e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/6297644db23f77c02ae7961cc542d162629ae2c4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7569c4294ba6ff9f194635b14876198f8a687c4a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53188.json
+139 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53188",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:41.023",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:55:34.407",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,31 +11,161 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: fix race on port output\n\nassume the following setup on a single machine:\n1. An openvswitch instance with one bridge and default flows\n2. two network namespaces \"server\" and \"client\"\n3. two ovs interfaces \"server\" and \"client\" on the bridge\n4. for each ovs interface a veth pair with a matching name and 32 rx and\n tx queues\n5. move the ends of the veth pairs to the respective network namespaces\n6. assign ip addresses to each of the veth ends in the namespaces (needs\n to be the same subnet)\n7. start some http server on the server network namespace\n8. test if a client in the client namespace can reach the http server\n\nwhen following the actions below the host has a chance of getting a cpu\nstuck in a infinite loop:\n1. send a large amount of parallel requests to the http server (around\n 3000 curls should work)\n2. in parallel delete the network namespace (do not delete interfaces or\n stop the server, just kill the namespace)\n\nthere is a low chance that this will cause the below kernel cpu stuck\nmessage. If this does not happen just retry.\nBelow there is also the output of bpftrace for the functions mentioned\nin the output.\n\nThe series of events happening here is:\n1. the network namespace is deleted calling\n `unregister_netdevice_many_notify` somewhere in the process\n2. this sets first `NETREG_UNREGISTERING` on both ends of the veth and\n then runs `synchronize_net`\n3. it then calls `call_netdevice_notifiers` with `NETDEV_UNREGISTER`\n4. this is then handled by `dp_device_event` which calls\n `ovs_netdev_detach_dev` (if a vport is found, which is the case for\n the veth interface attached to ovs)\n5. this removes the rx_handlers of the device but does not prevent\n packages to be sent to the device\n6. `dp_device_event` then queues the vport deletion to work in\n background as a ovs_lock is needed that we do not hold in the\n unregistration path\n7. `unregister_netdevice_many_notify` continues to call\n `netdev_unregister_kobject` which sets `real_num_tx_queues` to 0\n8. port deletion continues (but details are not relevant for this issue)\n9. at some future point the background task deletes the vport\n\nIf after 7. but before 9. a packet is send to the ovs vport (which is\nnot deleted at this point in time) which forwards it to the\n`dev_queue_xmit` flow even though the device is unregistering.\nIn `skb_tx_hash` (which is called in the `dev_queue_xmit`) path there is\na while loop (if the packet has a rx_queue recorded) that is infinite if\n`dev->real_num_tx_queues` is zero.\n\nTo prevent this from happening we update `do_output` to handle devices\nwithout carrier the same as if the device is not found (which would\nbe the code path after 9. is done).\n\nAdditionally we now produce a warning in `skb_tx_hash` if we will hit\nthe infinite loop.\n\nbpftrace (first word is function name):\n\n__dev_queue_xmit server: real_num_tx_queues: 1, cpu: 2, pid: 28024, tid: 28024, skb_addr: 0xffff9edb6f207000, reg_state: 1\nnetdev_core_pick_tx server: addr: 0xffff9f0a46d4a000 real_num_tx_queues: 1, cpu: 2, pid: 28024, tid: 28024, skb_addr: 0xffff9edb6f207000, reg_state: 1\ndp_device_event server: real_num_tx_queues: 1 cpu 9, pid: 21024, tid: 21024, event 2, reg_state: 1\nsynchronize_rcu_expedited: cpu 9, pid: 21024, tid: 21024\nsynchronize_rcu_expedited: cpu 9, pid: 21024, tid: 21024\nsynchronize_rcu_expedited: cpu 9, pid: 21024, tid: 21024\nsynchronize_rcu_expedited: cpu 9, pid: 21024, tid: 21024\ndp_device_event server: real_num_tx_queues: 1 cpu 9, pid: 21024, tid: 21024, event 6, reg_state: 2\novs_netdev_detach_dev server: real_num_tx_queues: 1 cpu 9, pid: 21024, tid: 21024, reg_state: 2\nnetdev_rx_handler_unregister server: real_num_tx_queues: 1, cpu: 9, pid: 21024, tid: 21024, reg_state: 2\nsynchronize_rcu_expedited: cpu 9, pid: 21024, tid: 21024\nnetdev_rx_handler_unregister ret server: real_num_tx_queues: 1, cpu: 9, pid: 21024, tid: 21024, reg_state: 2\ndp_\n---truncated---"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.3",
"versionEndExcluding": "5.4.293",
"matchCriteriaId": "0AE999BF-B730-4BC4-9926-FD4AB940E41E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.237",
"matchCriteriaId": "0710B81E-E2FA-4E15-8F68-D297EBB4D50D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.181",
"matchCriteriaId": "12331C9E-F601-4EFC-899E-369F98DCC70B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.25",
"matchCriteriaId": "A6E5D96B-E06F-4EB1-B0AA-BB8F5E9187E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.2.12",
"matchCriteriaId": "4AA01E0B-227C-4686-AC91-BA30BCC48E6D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
"matchCriteriaId": "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
"matchCriteriaId": "A47F0FC3-CE52-4BA1-BA51-22F783938431"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*",
"matchCriteriaId": "3583026A-27EC-4A4C-850A-83F2AF970673"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc4:*:*:*:*:*:*",
"matchCriteriaId": "DC271202-7570-4505-89A4-D602D47BFD00"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc5:*:*:*:*:*:*",
"matchCriteriaId": "D413BB6D-4F74-4C7D-9163-47786619EF53"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc6:*:*:*:*:*:*",
"matchCriteriaId": "F4D613FB-9976-4989-8C4A-567773373CEA"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/066b86787fa3d97b7aefb5ac0a99a22dad2d15f8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/284be5db6c8d06d247ed056cfc448c4f79bbb16c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/56252da41426f3d01957456f13caf46ce670ea29",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5efcb301523baacd98a47553d4996e924923114d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/644b3051b06ba465bc7401bfae9b14963cbc8c1c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9b0dd09c1ceb35950d2884848099fccc9ec9a123",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53189.json
+136 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53189",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:41.150",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:55:18.420",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,39 +11,164 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6/addrconf: fix a potential refcount underflow for idev\n\nNow in addrconf_mod_rs_timer(), reference idev depends on whether\nrs_timer is not pending. Then modify rs_timer timeout.\n\nThere is a time gap in [1], during which if the pending rs_timer\nbecomes not pending. It will miss to hold idev, but the rs_timer\nis activated. Thus rs_timer callback function addrconf_rs_timer()\nwill be executed and put idev later without holding idev. A refcount\nunderflow issue for idev can be caused by this.\n\n\tif (!timer_pending(&idev->rs_timer))\n\t\tin6_dev_hold(idev);\n\t\t <--------------[1]\n\tmod_timer(&idev->rs_timer, jiffies + when);\n\nTo fix the issue, hold idev if mod_timer() return 0."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-191"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.10.105",
"versionEndExcluding": "4.14.322",
"matchCriteriaId": "2834C78B-D3CD-4979-B569-A95F5FB8D3E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.291",
"matchCriteriaId": "D2D2CA9F-4CC4-4AF5-8C6D-E58415AB782E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.251",
"matchCriteriaId": "7FA663C4-CA72-4B5A-8592-7354D978F58E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.188",
"matchCriteriaId": "43CAE50A-4A6C-488E-813C-F8DB77C13C8B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.121",
"matchCriteriaId": "EC77775B-EC31-4966-966C-1286C02B2A85"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.40",
"matchCriteriaId": "69315BCC-36D2-45CD-84F8-381EDF8E38F3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.4.5",
"matchCriteriaId": "923F6AEA-C2EF-4B08-B038-69A18F3D41F8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/06a0716949c22e2aefb648526580671197151acc",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/1f656e483eb4733d62f18dfb206a49b78f60f495",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2ad31ce40e8182860b631e37209e93e543790b7c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/436b7cc7eae7851c184b671ed7a4a64c750b86f7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/82abd1c37d3bf2a2658b34772c17a25a6f9cca42",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c6395e32935d35e6f935e7caf1c2dac5a95943b4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c7eeba47058532f6077d6a658e38b6698f6ae71a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/df62fdcd004afa72ecbed0e862ebb983acd3aa57",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53190.json
+86 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53190",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:41.277",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:42:50.530",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,99 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: Fix memory leaks in error path\n\nThe memory allocated by vxlan_vnigroup_init() is not freed in the error\npath, leading to memory leaks [1]. Fix by calling\nvxlan_vnigroup_uninit() in the error path.\n\nThe leaks can be reproduced by annotating gro_cells_init() with\nALLOW_ERROR_INJECTION() and then running:\n\n # echo \"100\" > /sys/kernel/debug/fail_function/probability\n # echo \"1\" > /sys/kernel/debug/fail_function/times\n # echo \"gro_cells_init\" > /sys/kernel/debug/fail_function/inject\n # printf %#x -12 > /sys/kernel/debug/fail_function/gro_cells_init/retval\n # ip link add name vxlan0 type vxlan dstport 4789 external vnifilter\n RTNETLINK answers: Cannot allocate memory\n\n[1]\nunreferenced object 0xffff88810db84a00 (size 512):\n comm \"ip\", pid 330, jiffies 4295010045 (age 66.016s)\n hex dump (first 32 bytes):\n f8 d5 76 0e 81 88 ff ff 01 00 00 00 00 00 00 02 ..v.............\n 03 00 04 00 48 00 00 00 00 00 00 01 04 00 01 00 ....H...........\n backtrace:\n [<ffffffff81a3097a>] kmalloc_trace+0x2a/0x60\n [<ffffffff82f049fc>] vxlan_vnigroup_init+0x4c/0x160\n [<ffffffff82ecd69e>] vxlan_init+0x1ae/0x280\n [<ffffffff836858ca>] register_netdevice+0x57a/0x16d0\n [<ffffffff82ef67b7>] __vxlan_dev_create+0x7c7/0xa50\n [<ffffffff82ef6ce6>] vxlan_newlink+0xd6/0x130\n [<ffffffff836d02ab>] __rtnl_newlink+0x112b/0x18a0\n [<ffffffff836d0a8c>] rtnl_newlink+0x6c/0xa0\n [<ffffffff836c0ddf>] rtnetlink_rcv_msg+0x43f/0xd40\n [<ffffffff83908ce0>] netlink_rcv_skb+0x170/0x440\n [<ffffffff839066af>] netlink_unicast+0x53f/0x810\n [<ffffffff839072d8>] netlink_sendmsg+0x958/0xe70\n [<ffffffff835c319f>] ____sys_sendmsg+0x78f/0xa90\n [<ffffffff835cd6da>] ___sys_sendmsg+0x13a/0x1e0\n [<ffffffff835cd94c>] __sys_sendmsg+0x11c/0x1f0\n [<ffffffff8424da78>] do_syscall_64+0x38/0x80\nunreferenced object 0xffff88810e76d5f8 (size 192):\n comm \"ip\", pid 330, jiffies 4295010045 (age 66.016s)\n hex dump (first 32 bytes):\n 04 00 00 00 00 00 00 00 db e1 4f e7 00 00 00 00 ..........O.....\n 08 d6 76 0e 81 88 ff ff 08 d6 76 0e 81 88 ff ff ..v.......v.....\n backtrace:\n [<ffffffff81a3162e>] __kmalloc_node+0x4e/0x90\n [<ffffffff81a0e166>] kvmalloc_node+0xa6/0x1f0\n [<ffffffff8276e1a3>] bucket_table_alloc.isra.0+0x83/0x460\n [<ffffffff8276f18b>] rhashtable_init+0x43b/0x7c0\n [<ffffffff82f04a1c>] vxlan_vnigroup_init+0x6c/0x160\n [<ffffffff82ecd69e>] vxlan_init+0x1ae/0x280\n [<ffffffff836858ca>] register_netdevice+0x57a/0x16d0\n [<ffffffff82ef67b7>] __vxlan_dev_create+0x7c7/0xa50\n [<ffffffff82ef6ce6>] vxlan_newlink+0xd6/0x130\n [<ffffffff836d02ab>] __rtnl_newlink+0x112b/0x18a0\n [<ffffffff836d0a8c>] rtnl_newlink+0x6c/0xa0\n [<ffffffff836c0ddf>] rtnetlink_rcv_msg+0x43f/0xd40\n [<ffffffff83908ce0>] netlink_rcv_skb+0x170/0x440\n [<ffffffff839066af>] netlink_unicast+0x53f/0x810\n [<ffffffff839072d8>] netlink_sendmsg+0x958/0xe70\n [<ffffffff835c319f>] ____sys_sendmsg+0x78f/0xa90"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "6.0.19",
"matchCriteriaId": "DED16365-2AE7-4932-8E1F-E3AF25424531"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1",
"versionEndExcluding": "6.1.5",
"matchCriteriaId": "8C1E7766-4310-43F9-BAC4-3763A36C043A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "FF501633-2F44-4913-A8EE-B021929F49F6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*",
"matchCriteriaId": "2BDA597B-CAC1-4DF0-86F0-42E142C654E9"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/06bf62944144a92d83dd14fd1378d2a288259561",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5896f55810680391a32652ca2b91245a05c11e22",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/75c1ab900f7cf0485f0be1607c79c55f51faaa90",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53191.json
+131 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53191",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:41.400",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:42:36.110",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,39 +11,159 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains\n\nof_irq_find_parent() returns a node pointer with refcount incremented,\nWe should use of_node_put() on it when not needed anymore.\nAdd missing of_node_put() to avoid refcount leak."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.6",
"versionEndExcluding": "4.14.308",
"matchCriteriaId": "C439EE5E-F958-40FA-B4AE-17EFC915BBF4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.276",
"matchCriteriaId": "C902FC54-DDBD-4DA6-BFEF-26889A267464"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.235",
"matchCriteriaId": "13DD5E68-8CB4-46EE-9A8F-C7F6C1A84430"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.173",
"matchCriteriaId": "4D810CFB-B7C5-493C-B98A-0D5F0D8A47B6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.99",
"matchCriteriaId": "5B8B2AC9-2F31-4A0F-96F5-7E26B50B27BB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.16",
"matchCriteriaId": "0FD95FDA-6525-4B13-B3FB-49D9995FD8ED"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.2.3",
"matchCriteriaId": "88C67289-22AD-4CA9-B202-5F5A80E5BA4B"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/071d068b89e95d1b078aa6bbcb9d0961b77d6aa1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5fbf2cc39b62a4afe44f3d42ee3dcf8f012c1926",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/65e30bd1310d90b794c377bf405394157854aa30",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9e79ac4f70fd51243e1c6108d4b0baf16cfde99c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c9aaf4efe1f02b2fef21a69fb3652f5ad12a5710",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d6c66c46889752fa4962c6388516f7ab66a8d6a1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/eef04516f0c317ce80502c1d6b0d06235a87cd8f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/eef09f786df4b34b97557929287c4e5a83bbf09b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53192.json
+118 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53192",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:41.523",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:42:17.983",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,27 +11,137 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: Fix nexthop hash size\n\nThe nexthop code expects a 31 bit hash, such as what is returned by\nfib_multipath_hash() and rt6_multipath_hash(). Passing the 32 bit hash\nreturned by skb_get_hash() can lead to problems related to the fact that\n'int hash' is a negative number when the MSB is set.\n\nIn the case of hash threshold nexthop groups, nexthop_select_path_hthr()\nwill disproportionately select the first nexthop group entry. In the case\nof resilient nexthop groups, nexthop_select_path_res() may do an out of\nbounds access in nh_buckets[], for example:\n hash = -912054133\n num_nh_buckets = 2\n bucket_index = 65535\n\nwhich leads to the following panic:\n\nBUG: unable to handle page fault for address: ffffc900025910c8\nPGD 100000067 P4D 100000067 PUD 10026b067 PMD 0\nOops: 0002 [#1] PREEMPT SMP KASAN NOPTI\nCPU: 4 PID: 856 Comm: kworker/4:3 Not tainted 6.5.0-rc2+ #34\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014\nWorkqueue: ipv6_addrconf addrconf_dad_work\nRIP: 0010:nexthop_select_path+0x197/0xbf0\nCode: c1 e4 05 be 08 00 00 00 4c 8b 35 a4 14 7e 01 4e 8d 6c 25 00 4a 8d 7c 25 08 48 01 dd e8 c2 25 15 ff 49 8d 7d 08 e8 39 13 15 ff <4d> 89 75 08 48 89 ef e8 7d 12 15 ff 48 8b 5d 00 e8 14 55 2f 00 85\nRSP: 0018:ffff88810c36f260 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: 00000000002000c0 RCX: ffffffffaf02dd77\nRDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffc900025910c8\nRBP: ffffc900025910c0 R08: 0000000000000001 R09: fffff520004b2219\nR10: ffffc900025910cf R11: 31392d2068736168 R12: 00000000002000c0\nR13: ffffc900025910c0 R14: 00000000fffef608 R15: ffff88811840e900\nFS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: ffffc900025910c8 CR3: 0000000129d00000 CR4: 0000000000750ee0\nPKRU: 55555554\nCall Trace:\n <TASK>\n ? __die+0x23/0x70\n ? page_fault_oops+0x1ee/0x5c0\n ? __pfx_is_prefetch.constprop.0+0x10/0x10\n ? __pfx_page_fault_oops+0x10/0x10\n ? search_bpf_extables+0xfe/0x1c0\n ? fixup_exception+0x3b/0x470\n ? exc_page_fault+0xf6/0x110\n ? asm_exc_page_fault+0x26/0x30\n ? nexthop_select_path+0x197/0xbf0\n ? nexthop_select_path+0x197/0xbf0\n ? lock_is_held_type+0xe7/0x140\n vxlan_xmit+0x5b2/0x2340\n ? __lock_acquire+0x92b/0x3370\n ? __pfx_vxlan_xmit+0x10/0x10\n ? __pfx___lock_acquire+0x10/0x10\n ? __pfx_register_lock_class+0x10/0x10\n ? skb_network_protocol+0xce/0x2d0\n ? dev_hard_start_xmit+0xca/0x350\n ? __pfx_vxlan_xmit+0x10/0x10\n dev_hard_start_xmit+0xca/0x350\n __dev_queue_xmit+0x513/0x1e20\n ? __pfx___dev_queue_xmit+0x10/0x10\n ? __pfx_lock_release+0x10/0x10\n ? mark_held_locks+0x44/0x90\n ? skb_push+0x4c/0x80\n ? eth_header+0x81/0xe0\n ? __pfx_eth_header+0x10/0x10\n ? neigh_resolve_output+0x215/0x310\n ? ip6_finish_output2+0x2ba/0xc90\n ip6_finish_output2+0x2ba/0xc90\n ? lock_release+0x236/0x3e0\n ? ip6_mtu+0xbb/0x240\n ? __pfx_ip6_finish_output2+0x10/0x10\n ? find_held_lock+0x83/0xa0\n ? lock_is_held_type+0xe7/0x140\n ip6_finish_output+0x1ee/0x780\n ip6_output+0x138/0x460\n ? __pfx_ip6_output+0x10/0x10\n ? __pfx___lock_acquire+0x10/0x10\n ? __pfx_ip6_finish_output+0x10/0x10\n NF_HOOK.constprop.0+0xc0/0x420\n ? __pfx_NF_HOOK.constprop.0+0x10/0x10\n ? ndisc_send_skb+0x2c0/0x960\n ? __pfx_lock_release+0x10/0x10\n ? __local_bh_enable_ip+0x93/0x110\n ? lock_is_held_type+0xe7/0x140\n ndisc_send_skb+0x4be/0x960\n ? __pfx_ndisc_send_skb+0x10/0x10\n ? mark_held_locks+0x65/0x90\n ? find_held_lock+0x83/0xa0\n ndisc_send_ns+0xb0/0x110\n ? __pfx_ndisc_send_ns+0x10/0x10\n addrconf_dad_work+0x631/0x8e0\n ? lock_acquire+0x180/0x3f0\n ? __pfx_addrconf_dad_work+0x10/0x10\n ? mark_held_locks+0x24/0x90\n process_one_work+0x582/0x9c0\n ? __pfx_process_one_work+0x10/0x10\n ? __pfx_do_raw_spin_lock+0x10/0x10\n ? mark_held_locks+0x24/0x90\n worker_thread+0x93/0x630\n ? __kthread_parkme+0xdc/0x100\n ? __pfx_worker_thread+0x10/0x10\n kthread+0x1a5/0x1e0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x34/0x60\n \n---truncated---"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-129"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.8",
"versionEndExcluding": "5.10.190",
"matchCriteriaId": "C473771A-D913-44FC-A8E1-725B5283D9D5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.126",
"matchCriteriaId": "C552AC9E-23B8-4D7D-AA26-57985BD93962"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.45",
"matchCriteriaId": "A0CA013D-55AF-4494-A931-AFC8EA64E875"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.4.10",
"matchCriteriaId": "7BB0D94C-4FCE-46F4-A8D4-062D6A84627A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*",
"matchCriteriaId": "F5608371-157A-4318-8A2E-4104C3467EA1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*",
"matchCriteriaId": "2226A776-DF8C-49E0-A030-0A7853BB018A"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0756384fb1bd38adb2ebcfd1307422f433a1d772",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/23c195ce6f4aec86e1c9e1ea1c800381c4b465c7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/32ef2c0c6cf11a076f0280a7866b9abc47821e19",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7b8717658dff8b471cbfc124bf9b5ca4229579ed",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c650597647ecb318d02372277bdfd866c6829f78",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53193.json
+92 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53193",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:41.643",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:41:55.950",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,23 +11,108 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini\n\nThe gmc.ecc_irq is enabled by firmware per IFWI setting,\nand the host driver is not privileged to enable/disable\nthe interrupt. So, it is meaningless to use the amdgpu_irq_put\nfunction in gmc_v10_0_hw_fini, which also leads to the call\ntrace.\n\n[ 82.340264] Call Trace:\n[ 82.340265] <TASK>\n[ 82.340269] gmc_v10_0_hw_fini+0x83/0xa0 [amdgpu]\n[ 82.340447] gmc_v10_0_suspend+0xe/0x20 [amdgpu]\n[ 82.340623] amdgpu_device_ip_suspend_phase2+0x127/0x1c0 [amdgpu]\n[ 82.340789] amdgpu_device_ip_suspend+0x3d/0x80 [amdgpu]\n[ 82.340955] amdgpu_device_pre_asic_reset+0xdd/0x2b0 [amdgpu]\n[ 82.341122] amdgpu_device_gpu_recover.cold+0x4dd/0xbb2 [amdgpu]\n[ 82.341359] amdgpu_debugfs_reset_work+0x4c/0x70 [amdgpu]\n[ 82.341529] process_one_work+0x21d/0x3f0\n[ 82.341535] worker_thread+0x1fa/0x3c0\n[ 82.341538] ? process_one_work+0x3f0/0x3f0\n[ 82.341540] kthread+0xff/0x130\n[ 82.341544] ? kthread_complete_and_exit+0x20/0x20\n[ 82.341547] ret_from_fork+0x22/0x30"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1.26",
"versionEndExcluding": "6.1.29",
"matchCriteriaId": "E194FA18-25A2-4D52-B9D4-0A9F06EB82E7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2.13",
"versionEndExcluding": "6.2.16",
"matchCriteriaId": "B0B55E7A-6035-43AF-BCB4-43AA7BFA8BD6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.3.1",
"versionEndExcluding": "6.3.3",
"matchCriteriaId": "C05BCEF5-7201-4DBA-8DC9-D78F17C46057"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:-:*:*:*:*:*:*",
"matchCriteriaId": "21D6F467-B848-453E-B1A4-BEF940E413A6"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/08c677cb0b436a96a836792bb35a8ec5de4999c2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/23febab57e345c0e66f8574c1018707e7eb6ea94",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/59e2439111ac2bd24ea0cecf5825cf06684b2c6c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a7e65a1ea871e99115add88ecbcfdbacc2415f07",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53194.json
+87 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53194",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:41.763",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:40:36.330",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,23 +11,103 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Add length check in indx_get_root\n\nThis adds a length check to guarantee the retrieved index root is legit.\n\n[ 162.459513] BUG: KASAN: use-after-free in hdr_find_e.isra.0+0x10c/0x320\n[ 162.460176] Read of size 2 at addr ffff8880037bca99 by task mount/243\n[ 162.460851]\n[ 162.461252] CPU: 0 PID: 243 Comm: mount Not tainted 6.0.0-rc7 #42\n[ 162.461744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014\n[ 162.462609] Call Trace:\n[ 162.462954] <TASK>\n[ 162.463276] dump_stack_lvl+0x49/0x63\n[ 162.463822] print_report.cold+0xf5/0x689\n[ 162.464608] ? unwind_get_return_address+0x3a/0x60\n[ 162.465766] ? hdr_find_e.isra.0+0x10c/0x320\n[ 162.466975] kasan_report+0xa7/0x130\n[ 162.467506] ? _raw_spin_lock_irq+0xc0/0xf0\n[ 162.467998] ? hdr_find_e.isra.0+0x10c/0x320\n[ 162.468536] __asan_load2+0x68/0x90\n[ 162.468923] hdr_find_e.isra.0+0x10c/0x320\n[ 162.469282] ? cmp_uints+0xe0/0xe0\n[ 162.469557] ? cmp_sdh+0x90/0x90\n[ 162.469864] ? ni_find_attr+0x214/0x300\n[ 162.470217] ? ni_load_mi+0x80/0x80\n[ 162.470479] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd\n[ 162.470931] ? ntfs_bread_run+0x190/0x190\n[ 162.471307] ? indx_get_root+0xe4/0x190\n[ 162.471556] ? indx_get_root+0x140/0x190\n[ 162.471833] ? indx_init+0x1e0/0x1e0\n[ 162.472069] ? fnd_clear+0x115/0x140\n[ 162.472363] ? _raw_spin_lock_irqsave+0x100/0x100\n[ 162.472731] indx_find+0x184/0x470\n[ 162.473461] ? sysvec_apic_timer_interrupt+0x57/0xc0\n[ 162.474429] ? indx_find_buffer+0x2d0/0x2d0\n[ 162.474704] ? do_syscall_64+0x3b/0x90\n[ 162.474962] dir_search_u+0x196/0x2f0\n[ 162.475381] ? ntfs_nls_to_utf16+0x450/0x450\n[ 162.475661] ? ntfs_security_init+0x3d6/0x440\n[ 162.475906] ? is_sd_valid+0x180/0x180\n[ 162.476191] ntfs_extend_init+0x13f/0x2c0\n[ 162.476496] ? ntfs_fix_post_read+0x130/0x130\n[ 162.476861] ? iput.part.0+0x286/0x320\n[ 162.477325] ntfs_fill_super+0x11e0/0x1b50\n[ 162.477709] ? put_ntfs+0x1d0/0x1d0\n[ 162.477970] ? vsprintf+0x20/0x20\n[ 162.478258] ? set_blocksize+0x95/0x150\n[ 162.478538] get_tree_bdev+0x232/0x370\n[ 162.478789] ? put_ntfs+0x1d0/0x1d0\n[ 162.479038] ntfs_fs_get_tree+0x15/0x20\n[ 162.479374] vfs_get_tree+0x4c/0x130\n[ 162.479729] path_mount+0x654/0xfe0\n[ 162.480124] ? putname+0x80/0xa0\n[ 162.480484] ? finish_automount+0x2e0/0x2e0\n[ 162.480894] ? putname+0x80/0xa0\n[ 162.481467] ? kmem_cache_free+0x1c4/0x440\n[ 162.482280] ? putname+0x80/0xa0\n[ 162.482714] do_mount+0xd6/0xf0\n[ 162.483264] ? path_mount+0xfe0/0xfe0\n[ 162.484782] ? __kasan_check_write+0x14/0x20\n[ 162.485593] __x64_sys_mount+0xca/0x110\n[ 162.486024] do_syscall_64+0x3b/0x90\n[ 162.486543] entry_SYSCALL_64_after_hwframe+0x63/0xcd\n[ 162.487141] RIP: 0033:0x7f9d374e948a\n[ 162.488324] Code: 48 8b 0d 11 fa 2a 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 008\n[ 162.489728] RSP: 002b:00007ffe30e73d18 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5\n[ 162.490971] RAX: ffffffffffffffda RBX: 0000561cdb43a060 RCX: 00007f9d374e948a\n[ 162.491669] RDX: 0000561cdb43a260 RSI: 0000561cdb43a2e0 RDI: 0000561cdb442af0\n[ 162.492050] RBP: 0000000000000000 R08: 0000561cdb43a280 R09: 0000000000000020\n[ 162.492459] R10: 00000000c0ed0000 R11: 0000000000000206 R12: 0000561cdb442af0\n[ 162.493183] R13: 0000561cdb43a260 R14: 0000000000000000 R15: 00000000ffffffff\n[ 162.493644] </TASK>\n[ 162.493908]\n[ 162.494214] The buggy address belongs to the physical page:\n[ 162.494761] page:000000003e38a3d5 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37bc\n[ 162.496064] flags: 0xfffffc0000000(node=0|zone=1|lastcpupid=0x1fffff)\n[ 162.497278] raw: 000fffffc0000000 ffffea00000df1c8 ffffea00000df008 0000000000000000\n[ 162.498928] raw: 0000000000000000 0000000000240000 00000000ffffffff 0000000000000000\n[ 162.500542] page dumped becau\n---truncated---"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.15",
"versionEndExcluding": "5.15.113",
"matchCriteriaId": "75B3BF61-F56C-4BD7-94AF-50E17A4AA732"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.81",
"matchCriteriaId": "EC825B0E-DFCA-4034-9B92-F111A4E2A732"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.3.4",
"matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/08e8cf5f2d9ec383a2e339a2711b62a54ff3fba0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/0d04e45c65f0785e558b93d2631d58680f263e10",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/85afd3007465f8bc74afffbf5b84ec29f5310b03",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/eb5b59931d20f3b02076fae49e85282310b12012",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-531xx/CVE-2023-53195.json
+76 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53195",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-15T14:15:41.877",
"lastModified": "2025-09-15T15:22:27.090",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-02T02:40:14.647",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,89 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmlxsw: minimal: fix potential memory leak in mlxsw_m_linecards_init\n\nThe line cards array is not freed in the error path of\nmlxsw_m_linecards_init(), which can lead to a memory leak. Fix by\nfreeing the array in the error path, thereby making the error path\nidentical to mlxsw_m_linecards_fini()."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1",
"versionEndExcluding": "6.1.39",
"matchCriteriaId": "6A44C0FA-44B6-4247-BEAC-9EEB18B02F3E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.4.4",
"matchCriteriaId": "A91BC267-63EE-413E-A6EF-6B96C2A278D1"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/08fc75735fda3be97194bfbf3c899c87abb3d0fe",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cd716022c968bc6748f23708b986f845b45791b7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d4f5b1dd816dccd4ee6bb60b2a81a3d4373636a9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
CVE-2025/CVE-2025-210xx/CVE-2025-21072.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-21072",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:46.110",
"lastModified": "2025-12-02T02:15:46.110",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.5,
"impactScore": 5.2
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-210xx/CVE-2025-21080.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-21080",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:46.703",
"lastModified": "2025-12-02T02:15:46.703",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper export of android application components in Dynamic Lockscreen prior to SMR Dec-2025 Release 1 allows local attackers to access files with Dynamic Lockscreen's privilege."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.5,
"impactScore": 3.6
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-542xx/CVE-2025-54236.json
+1 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-54236",
"sourceIdentifier": "[email protected]",
"published": "2025-09-09T14:15:46.563",
"lastModified": "2025-12-01T02:00:02.263",
"lastModified": "2025-12-02T02:00:02.347",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
CVE-2025/CVE-2025-551xx/CVE-2025-55128.json
+2 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2025-55128",
"sourceIdentifier": "[email protected]",
"published": "2025-11-20T19:16:19.137",
"lastModified": "2025-12-01T20:15:52.330",
"lastModified": "2025-12-02T02:15:46.843",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "HackerOne community member Dao Hoang Anh (yoyomiski) has reported an uncontrolled resource consumption vulnerability in the \u201cuserlog-index.php\u201d. An attacker with access to the admin interface could request an arbitrarily large number of items per page, potentially leading to a denial of service"
"value": "HackerOne community member Dang Hung Vi (vidang04) has reported an uncontrolled resource consumption vulnerability in the \u201cuserlog-index.php\u201d. An attacker with access to the admin interface could request an arbitrarily large number of items per page, potentially leading to a denial of service."
}
],
"metrics": {
CVE-2025/CVE-2025-551xx/CVE-2025-55129.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-55129",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:46.987",
"lastModified": "2025-12-02T02:15:46.987",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "HackerOne community member Kassem S.(kassem_s94) has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-52672, via several alternate techniques. Homoglyphs based impersonation has been independently reported by other HackerOne users, such as itz_hari_ and khoof."
}
],
"metrics": {
"cvssMetricV30": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
}
]
},
"references": [
{
"url": "https://hackerone.com/reports/3434156",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-582xx/CVE-2025-58294.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58294",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T03:15:59.077",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:26:03.210",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,52 @@
"value": "CWE-264"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-583xx/CVE-2025-58302.json
+108 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58302",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T04:16:00.193",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:33:29.523",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,97 @@
"value": "CWE-264"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A974CA73-84E8-480B-BB4C-4A81D0C985B2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "353AEAF2-AF46-4835-93E1-4F942D5E2810"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:14.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "32FBF39A-164F-4F98-AB49-28C50A430C36"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:14.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "4AA76C33-8D23-490B-B620-C24EDCC86A56"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:15.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "888C5BD7-421B-4A85-8719-BFEE3C215527"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:2.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "20112231-B840-44D3-A061-B9B9F80EE378"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "CB3751C1-7729-41D3-AE50-80B5AF601135"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "4D81C4EF-7CAF-4E60-91A4-8CF7B95B2B54"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8198CDB2-4BC5-411A-8736-615A531FC545"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2401DE15-9DBF-4645-A261-8C24D57C6342"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "082BBC06-A0B2-481E-BF6F-56180E17ABEF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6EA69843-EC8D-42E2-900E-017D2B502E9E"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-583xx/CVE-2025-58303.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58303",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T03:15:59.267",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:26:52.710",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,52 @@
"value": "CWE-362"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-583xx/CVE-2025-58304.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58304",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T04:16:00.347",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:35:50.833",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 0.7,
"impactScore": 4.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,52 @@
"value": "CWE-199"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-583xx/CVE-2025-58305.json
+53 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58305",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T04:16:00.500",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:36:10.777",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,42 @@
"value": "CWE-200"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-583xx/CVE-2025-58307.json
+53 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58307",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T03:15:59.430",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:27:29.810",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 0.5,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -47,10 +67,40 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-583xx/CVE-2025-58308.json
+53 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58308",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T04:16:00.650",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:36:37.560",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 4.7
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 3.3,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.8,
"impactScore": 1.4
}
]
},
@@ -47,10 +67,40 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-583xx/CVE-2025-58309.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58309",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T03:15:59.590",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:27:55.810",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 4.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
@@ -45,12 +65,52 @@
"value": "CWE-264"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-583xx/CVE-2025-58310.json
+53 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58310",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T03:15:59.743",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:28:19.720",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 5.5
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -47,10 +67,40 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-583xx/CVE-2025-58311.json
+83 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58311",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T04:16:00.807",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:37:17.267",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 0.6,
"impactScore": 4.7
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
@@ -47,10 +67,70 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:14.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "32FBF39A-164F-4F98-AB49-28C50A430C36"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:14.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "4AA76C33-8D23-490B-B620-C24EDCC86A56"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:15.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "888C5BD7-421B-4A85-8719-BFEE3C215527"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8198CDB2-4BC5-411A-8736-615A531FC545"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2401DE15-9DBF-4645-A261-8C24D57C6342"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "082BBC06-A0B2-481E-BF6F-56180E17ABEF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6EA69843-EC8D-42E2-900E-017D2B502E9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-583xx/CVE-2025-58312.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58312",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T03:15:59.910",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:28:41.530",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.4,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,52 @@
"value": "CWE-264"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-583xx/CVE-2025-58314.json
+113 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58314",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T03:16:00.070",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:29:32.253",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 4.7
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
@@ -47,10 +67,100 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A974CA73-84E8-480B-BB4C-4A81D0C985B2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "353AEAF2-AF46-4835-93E1-4F942D5E2810"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:14.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "32FBF39A-164F-4F98-AB49-28C50A430C36"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:14.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "4AA76C33-8D23-490B-B620-C24EDCC86A56"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:15.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "888C5BD7-421B-4A85-8719-BFEE3C215527"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:2.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "20112231-B840-44D3-A061-B9B9F80EE378"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "CB3751C1-7729-41D3-AE50-80B5AF601135"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "4D81C4EF-7CAF-4E60-91A4-8CF7B95B2B54"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8198CDB2-4BC5-411A-8736-615A531FC545"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2401DE15-9DBF-4645-A261-8C24D57C6342"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "082BBC06-A0B2-481E-BF6F-56180E17ABEF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:4.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6EA69843-EC8D-42E2-900E-017D2B502E9E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-583xx/CVE-2025-58315.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58315",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T03:16:00.230",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:29:49.997",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,52 @@
"value": "CWE-264"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-583xx/CVE-2025-58316.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-58316",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T03:16:00.383",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:30:12.637",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 4.7
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,52 @@
"value": "CWE-362"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-584xx/CVE-2025-58475.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-58475",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:47.113",
"lastModified": "2025-12-02T02:15:47.113",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper input validation in libsec-ril.so prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 0.8,
"impactScore": 4.7
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-584xx/CVE-2025-58476.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-58476",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:47.253",
"lastModified": "2025-12-02T02:15:47.253",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Out-of-bounds read vulnerability in bootloader prior to SMR Dec-2025 Release 1 allows physical attackers to access out-of-bounds memory."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"attackVector": "PHYSICAL",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.5,
"impactScore": 3.6
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-584xx/CVE-2025-58477.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-58477",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:47.390",
"lastModified": "2025-12-02T02:15:47.390",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Out-of-bounds write in parsing IFD tag in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-584xx/CVE-2025-58478.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-58478",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:47.527",
"lastModified": "2025-12-02T02:15:47.527",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Out-of-bounds write in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-584xx/CVE-2025-58479.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-58479",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:47.660",
"lastModified": "2025-12-02T02:15:47.660",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-584xx/CVE-2025-58480.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-58480",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:47.803",
"lastModified": "2025-12-02T02:15:47.803",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-584xx/CVE-2025-58481.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-58481",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:47.940",
"lastModified": "2025-12-02T02:15:47.940",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper access control in MPRemoteService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.3,
"impactScore": 5.9
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-584xx/CVE-2025-58482.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-58482",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:48.080",
"lastModified": "2025-12-02T02:15:48.080",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper access control in MPLocalService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.3,
"impactScore": 5.9
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-584xx/CVE-2025-58483.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-58483",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:48.223",
"lastModified": "2025-12-02T02:15:48.223",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to install arbitrary application on Galaxy Store."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.5,
"impactScore": 3.4
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-584xx/CVE-2025-58484.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-58484",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:48.353",
"lastModified": "2025-12-02T02:15:48.353",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Incorrect default permissions in Samsung Cloud Assistant prior to version 8.0.03.8 allows local attacker to access partial data in sandbox."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.5,
"impactScore": 1.4
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-584xx/CVE-2025-58485.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-58485",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:48.490",
"lastModified": "2025-12-02T02:15:48.490",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-584xx/CVE-2025-58486.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-58486",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:48.627",
"lastModified": "2025-12-02T02:15:48.627",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.5,
"impactScore": 1.4
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-584xx/CVE-2025-58487.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-58487",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:48.767",
"lastModified": "2025-12-02T02:15:48.767",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.5,
"impactScore": 1.4
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-584xx/CVE-2025-58488.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "CVE-2025-58488",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T02:15:48.907",
"lastModified": "2025-12-02T02:15:48.907",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.9,
"impactScore": 3.6
}
]
},
"references": [
{
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=12",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-643xx/CVE-2025-64311.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-64311",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T03:16:00.543",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:30:48.677",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.4,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,52 @@
"value": "CWE-200"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-643xx/CVE-2025-64312.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-64312",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T04:16:00.963",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:37:47.483",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 0.7,
"impactScore": 4.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,52 @@
"value": "CWE-200"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-643xx/CVE-2025-64313.json
+63 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-64313",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T03:16:00.700",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:31:21.910",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,12 +65,52 @@
"value": "CWE-362"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "738D803A-C4CE-477B-BC89-CE47351C0A84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:6.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0EBE30DD-E146-4A6A-BE68-DEF9D4D0B2A8"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-643xx/CVE-2025-64314.json
+43 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-64314",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T03:16:00.867",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:32:29.050",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 6.0
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -47,10 +67,30 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/cn/support/bulletinlaptops/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-643xx/CVE-2025-64315.json
+53 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-64315",
"sourceIdentifier": "[email protected]",
"published": "2025-11-28T03:16:01.023",
"lastModified": "2025-11-28T23:11:55.537",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-12-02T02:32:49.340",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 2.5
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
@@ -45,12 +65,42 @@
"value": "CWE-264"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:harmonyos:5.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E39DE6A6-CBE6-4086-93CD-113D1B3BA730"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/cn/support/bulletinlaptops/2025/11/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
README.md
+48 -16
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-12-02T00:55:10.878823+00:00
2025-12-02T03:00:11.576578+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-12-01T23:15:54.213000+00:00
2025-12-02T02:58:59.253000+00:00
```
### Last Data Feed Release
@@ -27,35 +27,67 @@ Repository synchronizes with the NVD every 2 hours.
Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest)
```plain
2025-12-01T01:00:02.140606+00:00
2025-12-02T01:00:02.127195+00:00
```
### Total Number of included CVEs
```plain
319781
319798
```
### CVEs added in the last Commit
Recently added CVEs: `9`
Recently added CVEs: `17`
- [CVE-2025-66313](CVE-2025/CVE-2025-663xx/CVE-2025-66313.json) (`2025-12-01T23:15:52.897`)
- [CVE-2025-66400](CVE-2025/CVE-2025-664xx/CVE-2025-66400.json) (`2025-12-01T23:15:53.070`)
- [CVE-2025-66401](CVE-2025/CVE-2025-664xx/CVE-2025-66401.json) (`2025-12-01T23:15:53.227`)
- [CVE-2025-66403](CVE-2025/CVE-2025-664xx/CVE-2025-66403.json) (`2025-12-01T23:15:53.390`)
- [CVE-2025-66405](CVE-2025/CVE-2025-664xx/CVE-2025-66405.json) (`2025-12-01T23:15:53.567`)
- [CVE-2025-66410](CVE-2025/CVE-2025-664xx/CVE-2025-66410.json) (`2025-12-01T23:15:53.730`)
- [CVE-2025-66412](CVE-2025/CVE-2025-664xx/CVE-2025-66412.json) (`2025-12-01T23:15:53.890`)
- [CVE-2025-66415](CVE-2025/CVE-2025-664xx/CVE-2025-66415.json) (`2025-12-01T23:15:54.053`)
- [CVE-2025-66448](CVE-2025/CVE-2025-664xx/CVE-2025-66448.json) (`2025-12-01T23:15:54.213`)
- [CVE-2025-21072](CVE-2025/CVE-2025-210xx/CVE-2025-21072.json) (`2025-12-02T02:15:46.110`)
- [CVE-2025-21080](CVE-2025/CVE-2025-210xx/CVE-2025-21080.json) (`2025-12-02T02:15:46.703`)
- [CVE-2025-55129](CVE-2025/CVE-2025-551xx/CVE-2025-55129.json) (`2025-12-02T02:15:46.987`)
- [CVE-2025-58475](CVE-2025/CVE-2025-584xx/CVE-2025-58475.json) (`2025-12-02T02:15:47.113`)
- [CVE-2025-58476](CVE-2025/CVE-2025-584xx/CVE-2025-58476.json) (`2025-12-02T02:15:47.253`)
- [CVE-2025-58477](CVE-2025/CVE-2025-584xx/CVE-2025-58477.json) (`2025-12-02T02:15:47.390`)
- [CVE-2025-58478](CVE-2025/CVE-2025-584xx/CVE-2025-58478.json) (`2025-12-02T02:15:47.527`)
- [CVE-2025-58479](CVE-2025/CVE-2025-584xx/CVE-2025-58479.json) (`2025-12-02T02:15:47.660`)
- [CVE-2025-58480](CVE-2025/CVE-2025-584xx/CVE-2025-58480.json) (`2025-12-02T02:15:47.803`)
- [CVE-2025-58481](CVE-2025/CVE-2025-584xx/CVE-2025-58481.json) (`2025-12-02T02:15:47.940`)
- [CVE-2025-58482](CVE-2025/CVE-2025-584xx/CVE-2025-58482.json) (`2025-12-02T02:15:48.080`)
- [CVE-2025-58483](CVE-2025/CVE-2025-584xx/CVE-2025-58483.json) (`2025-12-02T02:15:48.223`)
- [CVE-2025-58484](CVE-2025/CVE-2025-584xx/CVE-2025-58484.json) (`2025-12-02T02:15:48.353`)
- [CVE-2025-58485](CVE-2025/CVE-2025-584xx/CVE-2025-58485.json) (`2025-12-02T02:15:48.490`)
- [CVE-2025-58486](CVE-2025/CVE-2025-584xx/CVE-2025-58486.json) (`2025-12-02T02:15:48.627`)
- [CVE-2025-58487](CVE-2025/CVE-2025-584xx/CVE-2025-58487.json) (`2025-12-02T02:15:48.767`)
- [CVE-2025-58488](CVE-2025/CVE-2025-584xx/CVE-2025-58488.json) (`2025-12-02T02:15:48.907`)
### CVEs modified in the last Commit
Recently modified CVEs: `1`
Recently modified CVEs: `44`
- [CVE-2025-59595](CVE-2025/CVE-2025-595xx/CVE-2025-59595.json) (`2025-12-01T23:15:52.327`)
- [CVE-2023-53192](CVE-2023/CVE-2023-531xx/CVE-2023-53192.json) (`2025-12-02T02:42:17.983`)
- [CVE-2023-53193](CVE-2023/CVE-2023-531xx/CVE-2023-53193.json) (`2025-12-02T02:41:55.950`)
- [CVE-2023-53194](CVE-2023/CVE-2023-531xx/CVE-2023-53194.json) (`2025-12-02T02:40:36.330`)
- [CVE-2023-53195](CVE-2023/CVE-2023-531xx/CVE-2023-53195.json) (`2025-12-02T02:40:14.647`)
- [CVE-2025-54236](CVE-2025/CVE-2025-542xx/CVE-2025-54236.json) (`2025-12-02T02:00:02.347`)
- [CVE-2025-55128](CVE-2025/CVE-2025-551xx/CVE-2025-55128.json) (`2025-12-02T02:15:46.843`)
- [CVE-2025-58294](CVE-2025/CVE-2025-582xx/CVE-2025-58294.json) (`2025-12-02T02:26:03.210`)
- [CVE-2025-58302](CVE-2025/CVE-2025-583xx/CVE-2025-58302.json) (`2025-12-02T02:33:29.523`)
- [CVE-2025-58303](CVE-2025/CVE-2025-583xx/CVE-2025-58303.json) (`2025-12-02T02:26:52.710`)
- [CVE-2025-58304](CVE-2025/CVE-2025-583xx/CVE-2025-58304.json) (`2025-12-02T02:35:50.833`)
- [CVE-2025-58305](CVE-2025/CVE-2025-583xx/CVE-2025-58305.json) (`2025-12-02T02:36:10.777`)
- [CVE-2025-58307](CVE-2025/CVE-2025-583xx/CVE-2025-58307.json) (`2025-12-02T02:27:29.810`)
- [CVE-2025-58308](CVE-2025/CVE-2025-583xx/CVE-2025-58308.json) (`2025-12-02T02:36:37.560`)
- [CVE-2025-58309](CVE-2025/CVE-2025-583xx/CVE-2025-58309.json) (`2025-12-02T02:27:55.810`)
- [CVE-2025-58310](CVE-2025/CVE-2025-583xx/CVE-2025-58310.json) (`2025-12-02T02:28:19.720`)
- [CVE-2025-58311](CVE-2025/CVE-2025-583xx/CVE-2025-58311.json) (`2025-12-02T02:37:17.267`)
- [CVE-2025-58312](CVE-2025/CVE-2025-583xx/CVE-2025-58312.json) (`2025-12-02T02:28:41.530`)
- [CVE-2025-58314](CVE-2025/CVE-2025-583xx/CVE-2025-58314.json) (`2025-12-02T02:29:32.253`)
- [CVE-2025-58315](CVE-2025/CVE-2025-583xx/CVE-2025-58315.json) (`2025-12-02T02:29:49.997`)
- [CVE-2025-58316](CVE-2025/CVE-2025-583xx/CVE-2025-58316.json) (`2025-12-02T02:30:12.637`)
- [CVE-2025-64311](CVE-2025/CVE-2025-643xx/CVE-2025-64311.json) (`2025-12-02T02:30:48.677`)
- [CVE-2025-64312](CVE-2025/CVE-2025-643xx/CVE-2025-64312.json) (`2025-12-02T02:37:47.483`)
- [CVE-2025-64313](CVE-2025/CVE-2025-643xx/CVE-2025-64313.json) (`2025-12-02T02:31:21.910`)
- [CVE-2025-64314](CVE-2025/CVE-2025-643xx/CVE-2025-64314.json) (`2025-12-02T02:32:29.050`)
- [CVE-2025-64315](CVE-2025/CVE-2025-643xx/CVE-2025-64315.json) (`2025-12-02T02:32:49.340`)
## Download and Usage
_state.csv
+71 -54
View File
@@ -243562,33 +243562,33 @@ CVE-2023-53168,0,0,e1f71d67ecd6370b74bbc958b1d6c4da5c1e262b446044678320aed1f3775
CVE-2023-53169,0,0,c373f0c5f7917dae04e735832dd28b55be0c0d14b06641e098f62e15a715b54e,2025-09-15T15:22:27.090000
CVE-2023-5317,0,0,e291501a2006b3e44a0722039d33ed0fbe57bd4fb10f3c022762a96ce3600f49,2024-11-21T08:41:30.997000
CVE-2023-53170,0,0,2e4bee9a5d4a1581bed6896d45b88639a927f994b2040b765354062d619c24ed,2025-09-15T15:22:27.090000
CVE-2023-53171,0,0,81dc30322bbd9e035f7cfba6b4434a42185bc0c2bb434090d2e2ed501f8f4a21,2025-09-15T15:22:27.090000
CVE-2023-53171,0,1,93edf00d208855e4a8964486a395112a986f9aee5718cb1619296de8478724f4,2025-12-02T02:58:59.253000
CVE-2023-53172,0,0,084f5683749e8d8921d8c1598d2a479048976ab8be7f8eb541f999c0f48c9243,2025-09-15T15:22:27.090000
CVE-2023-53173,0,0,36aa6755a56246a6c2dffb818f325d59e10ad6c44c58112e5a7ce5bef4cbfbab,2025-09-15T15:22:27.090000
CVE-2023-53174,0,0,a21b48e145bc233f656dd44bf29a28231d73e4f59e24471f60a6bbd745126593,2025-09-15T15:22:27.090000
CVE-2023-53175,0,0,d27ebf370ddf3e6faff37d5521bcaf2e8626b2078c9af2e2708b4c3098f984f6,2025-09-15T15:22:27.090000
CVE-2023-53176,0,0,94284bb19ff459815e129f6512ba61e95a68fd6fdd6719cb21471d89ee830bac,2025-09-15T15:22:27.090000
CVE-2023-53177,0,0,b4d9a323134139e1c96a2ab593d7ab97ed64be4436daa82a41b68cb0e83af3fa,2025-09-15T15:22:27.090000
CVE-2023-53178,0,0,a3dee54612d9d17ec81a9cf8f2e6a90aa467a49f51aece2fad1f7b7d0fecc4ee,2025-09-15T15:22:27.090000
CVE-2023-53179,0,0,593acb37c0f3d43a5ed73b725e75cd29d7d552af5d7f19ee04a9aa80fc973150,2025-09-15T15:22:27.090000
CVE-2023-53173,0,1,8570ef7525f3c138447ab20c1825d1f35d0d02655785f1831573181b3dd8f5cc,2025-12-02T02:58:40.677000
CVE-2023-53174,0,1,27cb39128e70440e5f6e26036b52a229caba72107c392f50495da40a8d57dd86,2025-12-02T02:58:29.733000
CVE-2023-53175,0,1,0f96dce18240912133a34efa86485bc50f60595d780c16e7fdf8c21abfa270de,2025-12-02T02:58:09.733000
CVE-2023-53176,0,1,5ea11e7aea9bf8968691eb294ffa99d2c0bc1b07afedccaf7875b294b961ea6f,2025-12-02T02:58:00.767000
CVE-2023-53177,0,1,62b6305759da7868ede546195b067d080320ed3a9f356baba8218936d4f65e47,2025-12-02T02:58:19.630000
CVE-2023-53178,0,1,456d5ffbfcc27cf3755b6b59960eb729a854f045284498645758967c35c85870,2025-12-02T02:57:41.047000
CVE-2023-53179,0,1,cf5cf45f56d5b21e21f0ddd57518c8938fb44515e0ddc59d6d4eef1efea11167,2025-12-02T02:57:31.997000
CVE-2023-5318,0,0,ee378fc6cf894f92c09d5b95cbf7a921be38449e22c1d7ebb0347e25f5b6243c,2024-11-21T08:41:31.120000
CVE-2023-53180,0,0,bfb6d06951c1b515f912a0f64e916c0ae96d6f3a91a771fc6de3497857478381,2025-09-15T15:22:27.090000
CVE-2023-53181,0,0,81604bf62fe3044f7805c8d75792f8f23199468e88288964339bfcd25daedb2b,2025-09-15T15:22:27.090000
CVE-2023-53182,0,0,e5d46d5da53ecfb3ff58e50b74ba131c4295f8ce3fee02584480019e5ed8a008,2025-09-15T15:22:27.090000
CVE-2023-53183,0,0,dd9e3bc75161528ecb9db9d31f29c0a0bbafd3bfcb545c83cd812857e50c22ff,2025-09-15T15:22:27.090000
CVE-2023-53180,0,1,3ca240006233b83bd6aac239d4f18476dad962c3e8d296fafd2fd1075b0706f5,2025-12-02T02:57:51.230000
CVE-2023-53181,0,1,6be62c8e90a913dafe072ba3718a663a400d9be2cf2550848caf5dcf1dd793d9,2025-12-02T02:57:23.177000
CVE-2023-53182,0,1,6285e63eee11a10df1293c04ff3ca9965ffefad29886564202d7395677e89942,2025-12-02T02:57:13.687000
CVE-2023-53183,0,1,6de70e95d0b3e1ebab0ea255561ddfbae4a0ca99a65eb2c96b7cdc45ed95b513,2025-12-02T02:56:50.870000
CVE-2023-53184,0,0,9b39db36ef5c37ce53037179f35b6a16cf06bcedef7cbcfd5e5fb8448b72aecc,2025-09-15T15:22:27.090000
CVE-2023-53185,0,0,330c832b00d819a55cf9209e9329d708285fee06122cb402d2aec01833466f27,2025-09-15T15:22:27.090000
CVE-2023-53186,0,0,12e91e82cdb08ec2644750f6c7b3e155912a59ec6e7753c78c26efff8a81deaf,2025-09-15T15:22:27.090000
CVE-2023-53187,0,0,33cfe92dfaca77417fcca873514d60e74b24ae01ee8fd6303e7525136fb54e51,2025-09-15T15:22:27.090000
CVE-2023-53188,0,0,3966a1a9bf35cb752a9f9db9f1fa47488319e5a94a9d1a711145937f48b1fb5b,2025-09-15T15:22:27.090000
CVE-2023-53189,0,0,06ff84734c2bdc0a66044db8a32dd7145ebb30249946793342406a1685ff7d63,2025-09-15T15:22:27.090000
CVE-2023-53185,0,1,aab686a5f1d7c2e73fcad95843b38ed9876bc81f952d7e5a1ad2e807e85bc732,2025-12-02T02:56:18.970000
CVE-2023-53186,0,1,0ca3cb144698b852878c93ef7057da4349d6d89014006b75b745a6ea8a54f1e1,2025-12-02T02:56:07.880000
CVE-2023-53187,0,1,5ba5919eee966ce96667494d75cf52a352944a453120929368a69ef80747fb40,2025-12-02T02:55:45.260000
CVE-2023-53188,0,1,37438bec014ac11da91561607001e370a10d56fccbfe1355d364464f937d2674,2025-12-02T02:55:34.407000
CVE-2023-53189,0,1,aea94c93c2ba0237735a7403c64df8d933548a724d22cf3845173913585a17e2,2025-12-02T02:55:18.420000
CVE-2023-5319,0,0,ea37b6aac92852e59ea448d8a244bdb731d816f2535ca83152d1674195f45c62,2024-11-21T08:41:31.243000
CVE-2023-53190,0,0,5ad73308e9badceb9d880562040188bed467dae907fa6637c0d8f579958e9b3a,2025-09-15T15:22:27.090000
CVE-2023-53191,0,0,7cac2331f2bf22a8e4ab1c58c9a83ed8986df671b9fd4997de860b5f5243bfbb,2025-09-15T15:22:27.090000
CVE-2023-53192,0,0,5e38c88817fec00e82ac37603ae9850df41e573675b3243185c504f28af3d622,2025-09-15T15:22:27.090000
CVE-2023-53193,0,0,20b0440f558ddacc60603b60d911f427f5327b95e9e5f70d3891abe25a08a71b,2025-09-15T15:22:27.090000
CVE-2023-53194,0,0,6d2528128d703a7726c3e23cc8374dbf3bbe755f482c3492a52374a4997e0250,2025-09-15T15:22:27.090000
CVE-2023-53195,0,0,69b9b8d5725f8eb6a185ede054c735cd822db0dc76d18921d30c7649984a7da4,2025-09-15T15:22:27.090000
CVE-2023-53190,0,1,e466eab06269d848087a978e2c1d30996b4b3cee43abcbdb3adcbae267d30491,2025-12-02T02:42:50.530000
CVE-2023-53191,0,1,d9d6b6418c96e8eb73dbc9e9c14442ca72cfa6429d1cb14db8b4e86b77398496,2025-12-02T02:42:36.110000
CVE-2023-53192,0,1,5b45d4b202f5409b9535a85f042ec18af3726d6d1d7d34cd7a9bc9f22eab9c83,2025-12-02T02:42:17.983000
CVE-2023-53193,0,1,e87a4ec05e2e98954287a02e94511c5e3978a3ff84683d8eced1d15483beac1a,2025-12-02T02:41:55.950000
CVE-2023-53194,0,1,53e9c525fcf1f358d28cd4f1039de650eb5e3ac40561050d26f9b8f89eb5a905,2025-12-02T02:40:36.330000
CVE-2023-53195,0,1,fa02f12c86ffede19471aa8481fce65dbdbe893425b9f899e9746cc954873497,2025-12-02T02:40:14.647000
CVE-2023-53196,0,0,832904ec2cf8117b3c10b8add2b1f6dd52d1a69852f807f7b215832ed7bf541e,2025-09-15T15:22:27.090000
CVE-2023-53197,0,0,a241d44df45a45fdb7564a69efc530acba2a6ff5d8af67793863ebd19be8f209,2025-09-15T15:22:27.090000
CVE-2023-53198,0,0,9814417b5383fa8033edde1bbd06614850be03f0afb98b1eaa05e18e42229d62,2025-09-15T15:22:27.090000
@@ -289945,6 +289945,7 @@ CVE-2025-21069,0,0,8f8cca3ae6c615e66526e393e451cfa778ad4fafacb20a28f78a6f7672429
CVE-2025-2107,0,0,135bf09ff50485dd2912025078b557b35b087079462172252b9881a30af6dc30,2025-03-13T02:15:13.250000
CVE-2025-21070,0,0,d21705d12e1a556fab2ca496f59f2f1783ec495bfa01d1e20e85edb201456101,2025-10-16T18:33:54.903000
CVE-2025-21071,0,0,9e132eb8bb584ba31f4ee7dfae78f9b19d405ccc8717a0ef4dbc14bd0a3095b1,2025-11-07T13:03:49.420000
CVE-2025-21072,1,1,cfe935d5a75ebd7dbbea63edc3638ca53592c8624cbfd117593de5567283af05,2025-12-02T02:15:46.110000
CVE-2025-21073,0,0,c674f285003182e28499e53f73fd2e165707f2297635a3a5ccbd45fac78d7675,2025-11-07T13:03:29.800000
CVE-2025-21074,0,0,634dec861db3295ff4700f52a8ba6ea0a91395ab195693ab2da80ddd53063e70,2025-11-07T13:03:03.920000
CVE-2025-21075,0,0,3d617d96990323bbf9de849dfe5ce33588cb90ec46ecb756c61e14f8a6cfbe20,2025-11-07T13:02:47.623000
@@ -289953,6 +289954,7 @@ CVE-2025-21077,0,0,3e9d73e43a3fd055e19df017b3d1e94a8ab6bac3cda93189a27e82ff5e7f9
CVE-2025-21078,0,0,c251cc073e044bd146ce4266bc88b45b6913592d44f458fd8f3dee4fb726b746,2025-11-07T15:46:38.130000
CVE-2025-21079,0,0,8bb04ed04a6edef3bfd3be71a80a3fe689a93898a07c71f843313b881fb2b221,2025-11-07T15:46:21.677000
CVE-2025-2108,0,0,60b4ae79e344e4658824ff2975004a181bb22f5bb0373a3558afeca319c66e13,2025-03-20T07:15:38.187000
CVE-2025-21080,1,1,7d974503471629446214b6fd7fc427b8fb908dd169e172f6fc4648be7e33cd6e,2025-12-02T02:15:46.703000
CVE-2025-21081,0,0,2001a89bc61e9590c36304579e4e9d48d5980697f9b552f01b260ec73e2e53cb,2025-05-16T14:43:56.797000
CVE-2025-21082,0,0,46ac35d658d44baf54d1ac8a8f790de5d79d2ee8dc02f7947502a40cb1fc420e,2025-06-09T19:07:20.283000
CVE-2025-21083,0,0,012dcd4567d712f40868af6860750e4a9a3751a84263be295edd2057183c000c,2025-09-25T19:14:15.380000
@@ -310659,7 +310661,7 @@ CVE-2025-54232,0,0,74738f8e59094d5441631bc47d8d83de85a54bd8947c605920a0f71b3a56a
CVE-2025-54233,0,0,9b14013bc2511806dfc06793d5702178c0c1db7ab1a06628f77055eb730a98f2,2025-08-14T01:05:54.053000
CVE-2025-54234,0,0,15b722fe53a2a83df32f09430aa080a833a389e22b3cffdb61b9dcca09579de8,2025-11-06T22:23:13.170000
CVE-2025-54235,0,0,4c6e47535464eb5cac8c8712d883f6108cec41e891c1af59388fea6e2afee65a,2025-08-13T18:14:43.213000
CVE-2025-54236,0,0,71293211003a65015f7bceb2faaee461c372d6b31f4aadeaab471c731e843494,2025-12-01T02:00:02.263000
CVE-2025-54236,0,1,675bf91d13afd49d1293884cc4edff0e5b2395cea476183c9b28ace8e73f4b24,2025-12-02T02:00:02.347000
CVE-2025-54237,0,0,f86cd71bb4266b1e9b06486eb24aa138c30d53f2219596e78679b21c5750c179,2025-09-18T13:38:39.070000
CVE-2025-54238,0,0,a36be64074d7d47b6190447bb92bfe557d52fcc438e1a77896e2e199d15e1917,2025-08-14T01:06:18.920000
CVE-2025-54239,0,0,9ad52d97af19a42000e5faa35316c0d255739384a3fc936923a9b36b4d0dd5ae,2025-09-12T14:29:06.223000
@@ -311469,7 +311471,8 @@ CVE-2025-55123,0,0,4984fb9150d448c08ba530fb65dc11c3731eedda0fb2848df325f4fdbdb0e
CVE-2025-55124,0,0,7abedd197a13cf5472452b0432f0949cf33c3886d077efccf60690b1d9d204ba,2025-11-26T16:56:10.200000
CVE-2025-55126,0,0,7bab6e35ccb3a1dd25647feae7fcbdeb9bc8dcaec8cd6936bafaa5d1991e4dd9,2025-12-01T20:15:52.217000
CVE-2025-55127,0,0,1b3e4227e0185aad2d93e5338145a40571fe8b2c3950ae640038a03e7612558c,2025-11-21T15:13:13.800000
CVE-2025-55128,0,0,03563cc7f9416a7520bc3aec353ad9c2874ca203a86cc17157f5c3e976283f58,2025-12-01T20:15:52.330000
CVE-2025-55128,0,1,5b1a49ace116f6a06b4801404f12ae4abd45a6a0e01e643ef014167b6504f871,2025-12-02T02:15:46.843000
CVE-2025-55129,1,1,bae6c99a90d9d0cdd49e77f66c9175b6d50c101a507d518fb0fa0d92887e1aa9,2025-12-02T02:15:46.987000
CVE-2025-5513,0,0,73771ba20cfee0c40c1496aa44396e3afa7175dc109281db4a561029cb427bbb,2025-10-03T01:07:07.983000
CVE-2025-55133,0,0,eacb6f4789096b3454e4c7e6e687577f23025cd668c2a7937009a052d5ce8112,2025-08-08T13:15:29.933000
CVE-2025-55134,0,0,b2c2e6641a08a1f90a382e7c16f9cbf1a484104a3e1d2676e21bb24dcd6efc00,2025-08-08T13:15:30.060000
@@ -312868,7 +312871,7 @@ CVE-2025-58290,0,0,a009ade2ecb2589432d7d4c061c8ab2f5160a2dce182dd2ed7fbdd358023d
CVE-2025-58291,0,0,fe50aeb8fba16e0afcdcb9afcd20a06bb0c8b385fb25b856ef4e014378aa9085,2025-10-16T15:23:41.020000
CVE-2025-58292,0,0,1527a1d12a5ae5d81a3c504f51ab591459f62d1874f64c2e03d547bc786874a3,2025-10-16T15:23:32.197000
CVE-2025-58293,0,0,10d868e773011f4c7c44817c8c0027780f07e26b73087916939e7439f6011adb,2025-10-16T15:22:55.597000
CVE-2025-58294,0,0,23b096f1e01169849a385e6f61f6497c0b9cc646bcb20ed590ff2f7ecd75f8c5,2025-11-28T23:11:55.537000
CVE-2025-58294,0,1,642d67dc4fb1508fbbcc7da43c04436e1010957ded8ef3c56af542d06ed49f13,2025-12-02T02:26:03.210000
CVE-2025-58295,0,0,d6c851aaf86a978626dc8be61702fa64c63e0a7eb9de60a65291b4d44077da05,2025-10-16T15:23:26.483000
CVE-2025-58296,0,0,1bc354bcd740b2953657aed97ea67ef2f594b2cb59ba9bdccadcfaa46c4156e1,2025-09-11T12:13:13.660000
CVE-2025-58297,0,0,e0425bb9172742aeafa9d8557d51a36e380e5d3d712394ee09a1acb0c93982d6,2025-10-16T15:23:18.707000
@@ -312877,21 +312880,21 @@ CVE-2025-58299,0,0,2a7239e3c71bb26b380c546524110841d94aa87f3a0eb93ff0572e82611bc
CVE-2025-5830,0,0,7f2132af7a348822aab423d05dc175a60fbb857b2c903b08583e12d754f364d8,2025-09-10T14:46:36.760000
CVE-2025-58300,0,0,043911e4e590f8e750020dfa036e9204f9dee66bdc127b6876c74d5a5cf16126,2025-10-16T15:22:48.190000
CVE-2025-58301,0,0,cc629aaed8becd457d7a6d8cca8a0adb1651e376a261624c3aa1ae7343229cad,2025-10-16T15:22:40.727000
CVE-2025-58302,0,0,4a22458f030347d2f6c6f086e23f2d0f5add739f7d30b1554d403f5df84bf1bc,2025-11-28T23:11:55.537000
CVE-2025-58303,0,0,7fe647cb3cff2db9e3dbe3a47a97b057426415de476172ed936056f22a474a63,2025-11-28T23:11:55.537000
CVE-2025-58304,0,0,695c7d8d24451303061c5ebb8ff5fc13681dc12083c5c743f838f6bdd4d9239b,2025-11-28T23:11:55.537000
CVE-2025-58305,0,0,2391b6bbf9ec8adb1719e621dc9f835cc175891310e89443e994a97dcfcbe5ed,2025-11-28T23:11:55.537000
CVE-2025-58307,0,0,689cf75e477fb95942775a1e7adedfe6bfdc3e9c3f9562f586124053ef4fda4d,2025-11-28T23:11:55.537000
CVE-2025-58308,0,0,6b0dc393b669cb8d2adf413952abe4a0f34452d5797340197f4b3b64d7d9f1b5,2025-11-28T23:11:55.537000
CVE-2025-58309,0,0,6150a959e83c84fa1a5d61275b782d726afb51689f9d7aa7a35f3eb18c262b63,2025-11-28T23:11:55.537000
CVE-2025-58302,0,1,f17da3cc7a0af2a5951ca9bce16136b5a6bd4a1c25e7f3cfda93cbbf7dbbcb97,2025-12-02T02:33:29.523000
CVE-2025-58303,0,1,4a7a673b4d9bac5bda9f9e3ec677af46a14b02bb76ff920950692c2810d930f3,2025-12-02T02:26:52.710000
CVE-2025-58304,0,1,e3a8defd56d772fd9ff1b2aa22f36f5095d700c40b0812b4b04fba7d22e368fc,2025-12-02T02:35:50.833000
CVE-2025-58305,0,1,453a0d45e2f2b1ec52e62cefb40fa3dd34c9adbfdd5caff191aa2718def05f3b,2025-12-02T02:36:10.777000
CVE-2025-58307,0,1,7c3856dd06cdc7c9c9ee5626505171121832f84637e2c75de800125f4571afa4,2025-12-02T02:27:29.810000
CVE-2025-58308,0,1,4a84ba188e955a265e3c0d3025ca29176e2847c3a547f717f188060a5352f210,2025-12-02T02:36:37.560000
CVE-2025-58309,0,1,46ac8cd0a604b0c0378584b7773a6ff9935f3a502d5270da312e4a5b5be904e7,2025-12-02T02:27:55.810000
CVE-2025-5831,0,0,0fb88884353fdaa96c487e11f582e0ea0048d1e4f239650f8934f7328001a126,2025-07-28T15:10:42.240000
CVE-2025-58310,0,0,43d3a13141cbc6504e7d03b3613ed87f6ef7328cce1e630e7fe163b0a4534238,2025-11-28T23:11:55.537000
CVE-2025-58311,0,0,f8db2817fb097f70705a44021009c45e31486a3b651e99795fffd03ba7695b23,2025-11-28T23:11:55.537000
CVE-2025-58312,0,0,f0856b8aa50616563f5d4f9821dfb1b33b78f4ecd1257cacbd189fd0974a80a9,2025-11-28T23:11:55.537000
CVE-2025-58310,0,1,7239eb2118b605f423982e1b36440b2bfd7f5e6535f2add21eb62a898dda3801,2025-12-02T02:28:19.720000
CVE-2025-58311,0,1,e5428522fe6cf4154bacc276729107af9a4b55a09ca4c765b489ec1964a01d1f,2025-12-02T02:37:17.267000
CVE-2025-58312,0,1,2f09ac26687231c32faeebe34dfb1919665b4f0c2e17c9b287f35867b3692090,2025-12-02T02:28:41.530000
CVE-2025-58313,0,0,eeb257c80d2eda4c4f5e430b0cd35dfae7418b39c032d2d187e6d143f60ea96e,2025-09-11T12:12:52.007000
CVE-2025-58314,0,0,288dd28e363b78455642a8c83cdff40ba6d20dcc84d1392a544916853b18cd0c,2025-11-28T23:11:55.537000
CVE-2025-58315,0,0,536a793b140afd27b1e5867014d2e8b94d3d2dced2f5bcbb5731ebdafba6b9d7,2025-11-28T23:11:55.537000
CVE-2025-58316,0,0,632ddb4083a540750b1ea0d9ad471e9319d9137d7a199f6178f4de178b2e7ded,2025-11-28T23:11:55.537000
CVE-2025-58314,0,1,4850bc541c75518b03013c986eae9f8cd4111caf584dd6898780fc1127d231b1,2025-12-02T02:29:32.253000
CVE-2025-58315,0,1,5d9a5e009815efe5f8fc01fdf724b0df7d2e79110941c975f02eb47c03a72f5e,2025-12-02T02:29:49.997000
CVE-2025-58316,0,1,6a663103da2906383046b7d15187997f59954c305bba9bffe5a08d283d70228e,2025-12-02T02:30:12.637000
CVE-2025-58317,0,0,6fcfe1307e5dab92578fdf80484429656b53400c23e300352ad81fac58f88064,2025-09-25T18:19:30.327000
CVE-2025-58318,0,0,efdebae70a4422efb48935e5b76331235b762df5fcc19a350af9e9a5d6c24c6d,2025-09-02T15:55:25.420000
CVE-2025-58319,0,0,e8e54615cb605b13759acd181e9c55de65f996c805c1e9f76b6edc87879d4894,2025-09-25T18:19:38.530000
@@ -313009,7 +313012,21 @@ CVE-2025-58469,0,0,a096e0c0152ed42992115e4e23faf9fc6a9c9100fa2d2e678744af11282a5
CVE-2025-5847,0,0,72a670a977f930c072e82981d9be0647255328c3124df63dafd15061a72168a9,2025-06-09T19:04:55.580000
CVE-2025-58473,0,0,8874ccfeeb968a0c647d6089fd24a4be2d9416a34aef25f37e21077b5e3e1e57,2025-09-24T18:11:24.520000
CVE-2025-58474,0,0,ab47b1447773759bebc6f03408f90d0a82daf696a03f677773606fbdf687c453,2025-10-22T21:00:17.313000
CVE-2025-58475,1,1,c1d455700327cb5759ad695cece0f1201b6aaa8b9584f514e6dee04ac206fca2,2025-12-02T02:15:47.113000
CVE-2025-58476,1,1,6918df902fbf63b569d5b9a253a48219493703868cc5629a2e4e1d8bf6df696f,2025-12-02T02:15:47.253000
CVE-2025-58477,1,1,7ac3a18c8b8676f4affb5e2540bafb2016460e622aa8134a3cb4f2c24c20c6f9,2025-12-02T02:15:47.390000
CVE-2025-58478,1,1,0b2ca876aa5347fefdf7ba9fa01b1bc5f77b94fffd53af4bba011f3b94d1fcb5,2025-12-02T02:15:47.527000
CVE-2025-58479,1,1,e0007a3e3a91d894d14efe13eeeff373d00c8aa7263f2c5f6e2a59ae637e80fe,2025-12-02T02:15:47.660000
CVE-2025-5848,0,0,97a77699d44911bbc0f7dbb24d5b37ad7d0974431c5e2858413f0642987e5a7c,2025-06-09T19:04:50.113000
CVE-2025-58480,1,1,4f1dc07928404cf4858a6d5d46c38acad8ce0d38db4be1cb22986406efe8d8e3,2025-12-02T02:15:47.803000
CVE-2025-58481,1,1,eb543f2c4f1ecf3ff32082a8945b016a8d84a78477b07154c24eff4286b3852b,2025-12-02T02:15:47.940000
CVE-2025-58482,1,1,d028ea956ec2df53e60c92a2dc120a4db5f3d14a43cc67bcc084baa1e82dd4b0,2025-12-02T02:15:48.080000
CVE-2025-58483,1,1,d89ef06f3ee92ff35c6ea022926749ed224951c11f1595d557a5c6ce87bce055,2025-12-02T02:15:48.223000
CVE-2025-58484,1,1,f19d2ddcf78c07592d94283683d51ebbd9136ee685cf77a6a7760195dbc4e885,2025-12-02T02:15:48.353000
CVE-2025-58485,1,1,179e223f52ca2b039a42e331b091aff273f94797018774b07219bb930d55b0e5,2025-12-02T02:15:48.490000
CVE-2025-58486,1,1,b3e7268f0a925b02f237d1161fa8adcf9d094ac462e7108126cf8ada23cc3329,2025-12-02T02:15:48.627000
CVE-2025-58487,1,1,8b3921c01acb7664b8e33dc01936d2399532e584c2f584671d2a54da3146ec12,2025-12-02T02:15:48.767000
CVE-2025-58488,1,1,9be7b0f3f3847487777947eddfa3384d5c86e3a023bc35de7a711d965b4a3829,2025-12-02T02:15:48.907000
CVE-2025-5849,0,0,0056fe9cb36cc640911c965de99076fd3871906072eb39fce82181a9d0f80791,2025-06-09T19:04:44.777000
CVE-2025-5850,0,0,77faa88a939479eb1ff7a17f86e30907cb5cb519c6e8f93d0def24e3c3a47d67,2025-06-09T19:04:38.610000
CVE-2025-5851,0,0,fb8b00dd00eeeabeaaed5a797cc6fb911d4a616e41b8a2298f781e5933ad9fc7,2025-06-09T19:04:27.920000
@@ -313839,7 +313856,7 @@ CVE-2025-59590,0,0,2f274006ca2e4c4cb493ab9313749e0bacaf163141bf21fb55f8f0852a512
CVE-2025-59591,0,0,a36f5bd0309818aa528f544c1c0e0ec1e1284916cc11cd71c3cbbb904977298c,2025-09-22T21:22:16.313000
CVE-2025-59592,0,0,a25b2363e853d5922835c2ba8113f8605dd0269700ea9a6423f6dddebeb81316,2025-09-22T21:22:16.313000
CVE-2025-59593,0,0,fa90c400797f05758f1ae0e5a649051f8a2f5c791ae08e724e054925080566c9,2025-11-13T11:16:41.280000
CVE-2025-59595,0,1,8ec242b69a925fdef83e7963d17a4d9a1ffc4c19e1e6df1343e7b19eeae39c02,2025-12-01T23:15:52.327000
CVE-2025-59595,0,0,8ec242b69a925fdef83e7963d17a4d9a1ffc4c19e1e6df1343e7b19eeae39c02,2025-12-01T23:15:52.327000
CVE-2025-59596,0,0,0a348ddd930e1133dc13fb0fa85c62bd0e469e832712352cc824d97ad679004c,2025-11-06T19:45:30.990000
CVE-2025-5961,0,0,f29de724d19f35633b2aa8f913c0e600fe9f653e00ebdc99f8a8c31e3ccc7c51,2025-07-09T17:51:24.543000
CVE-2025-5962,0,0,8ee6dcfbe6d19cfdacd898b5906679a59645a08bdc2e69b23a0d08ed7caecdce,2025-09-22T21:22:33.590000
@@ -316140,11 +316157,11 @@ CVE-2025-64308,0,0,291e6fe2edc281ee83a89d54be1e005458991e60048663abfb05e1db93254
CVE-2025-64309,0,0,3cc211caabfacc56c4c933c4ee66e8c35a1c406bcdd8501ba154cf274d4c7c59,2025-11-18T14:06:55.963000
CVE-2025-6431,0,0,9fbd91eef457c6101f4b6e5ab20365107357b2af8b79cfe87424eeb47fb2a075,2025-07-03T16:04:21.163000
CVE-2025-64310,0,0,d03383581174fcac6527fd54d7c355c00e33556c9010e3e2b4c5a400bda541e1,2025-11-21T15:13:13.800000
CVE-2025-64311,0,0,1462a72eaa9d53434d993f22225d748455c35bf69eaf1efc7e0f42f321795d7a,2025-11-28T23:11:55.537000
CVE-2025-64312,0,0,0de4503afc0db791a9e4f6e81c7e0d89758b00a2e46e9a46ac7dfd1a38a4ef4d,2025-11-28T23:11:55.537000
CVE-2025-64313,0,0,258309549cb663e14beefe38d8416db1c2f0310461de33768716c87c9660fb73,2025-11-28T23:11:55.537000
CVE-2025-64314,0,0,9e366e6984cf1de75841320a7f34bc770b762ab3e801250e200c581c0b7f20d4,2025-11-28T23:11:55.537000
CVE-2025-64315,0,0,af190534d2dc3c5ae501cfc0ea2bb48a53c57a718707aff091f5c94382439c0f,2025-11-28T23:11:55.537000
CVE-2025-64311,0,1,d3e254c9cf83b87b7d7920b79fe32d9072f9c186926ca0ae27b5349cd2119474,2025-12-02T02:30:48.677000
CVE-2025-64312,0,1,504229b2e14d10521cfd2a957645b687307411c113fcdc760c7b2b97cd3f3676,2025-12-02T02:37:47.483000
CVE-2025-64313,0,1,cea4320e46bff2fd0230cb62de5b6a13d6259dc6352cb9e40c701eeb7e128238,2025-12-02T02:31:21.910000
CVE-2025-64314,0,1,e99d959280021a7149a3935dba7851920b682ce6f5df33c23e35c517adf9d516,2025-12-02T02:32:29.050000
CVE-2025-64315,0,1,c570e34b44885173ae7b428ec821fce115ffebc549159115ebbe63edd06250d7,2025-12-02T02:32:49.340000
CVE-2025-64318,0,0,da40b65268d801488d7f534d87c330432b9bc0b7b203c84ef40f2e4c56516822,2025-11-11T05:15:55.633000
CVE-2025-64319,0,0,efea06507fd62f36c3efd7f526322ca7d64ec3100bdea1d7af8554a6c155b127,2025-11-11T05:16:03.820000
CVE-2025-6432,0,0,6a7d96de333091855cab3a12d38aee975be2fddd880dbc49ad051bfc1504009f,2025-07-14T19:15:34.817000
@@ -316782,7 +316799,7 @@ CVE-2025-6631,0,0,86d2ee25bdf69ddf1aaf6049188589a2db446e1def446432dc1bb9a87223c0
CVE-2025-66310,0,0,2625faea8f66ab53ea5be4758257d2f4b02d19ea52b632dda380d6cce30eb641,2025-12-01T22:15:51.067000
CVE-2025-66311,0,0,0927a7afee5757093dc17c8c6edea050e702818126ed91cbffb400b0e9ccbb40,2025-12-01T22:15:51.217000
CVE-2025-66312,0,0,6da2ce4745a4736ea462c5e4805c5fd7c41405ebd0215b28f948eb6e20eac4ff,2025-12-01T22:15:51.367000
CVE-2025-66313,1,1,ce8e4756958af3a784c234c5caeaeac6291787ec57fcf6ce664a02ed81fca87b,2025-12-01T23:15:52.897000
CVE-2025-66313,0,0,ce8e4756958af3a784c234c5caeaeac6291787ec57fcf6ce664a02ed81fca87b,2025-12-01T23:15:52.897000
CVE-2025-66314,0,0,699e0894bd19536cc5e756dbd81eb3fe8a4a1f39b0a4127e4530f9cf67fe6c1f,2025-12-01T15:39:33.110000
CVE-2025-6632,0,0,cf1833c672776077eac82d60a035053b6b782e938aa8071d8feff5ffe959eeb7,2025-11-13T19:41:50.260000
CVE-2025-6633,0,0,117eeffdf2f8f6e2fed9dd7c3a57930753c8f6f12ea2d2e4f36e69d3e6dfc33d,2025-11-13T20:04:14.093000
@@ -316803,14 +316820,14 @@ CVE-2025-66385,0,0,f479b4465c5cbcd79c9d722c52df012d1d7fee6dffb6047a7dd79b5be8f22
CVE-2025-66386,0,0,0ce0008796922d1f2d4242c698d6cdab2cf5b1fe3ca21771d335cb8b6dce0807,2025-12-01T15:39:33.110000
CVE-2025-6639,0,0,48c7e125e98227249348579c9617d818291519570444fd944ba73c0b82bcfd78,2025-10-27T13:20:15.637000
CVE-2025-6640,0,0,a4c992d898d320b9fbc41aeee35836398a20e38bcfa076af892973b98a231d0d,2025-07-01T19:31:36.373000
CVE-2025-66400,1,1,534efe6c4afadfbc00cd4011d43b4cf7bba60268a2c40b34d2c8a70579e68b28,2025-12-01T23:15:53.070000
CVE-2025-66401,1,1,f565c7950b0067d4c7972d505f2b1e9a60af09cb14f3f42d637797213e9eb43c,2025-12-01T23:15:53.227000
CVE-2025-66403,1,1,ad0a40bb3b94b7d56908163d327ae9ee8c7e0c387b6ba84cf240ae796f35d6af,2025-12-01T23:15:53.390000
CVE-2025-66405,1,1,30e6433e8f877c1c1a28a1dd108a2725183373b6dccb1db4c668f60d57a9d0bf,2025-12-01T23:15:53.567000
CVE-2025-66400,0,0,534efe6c4afadfbc00cd4011d43b4cf7bba60268a2c40b34d2c8a70579e68b28,2025-12-01T23:15:53.070000
CVE-2025-66401,0,0,f565c7950b0067d4c7972d505f2b1e9a60af09cb14f3f42d637797213e9eb43c,2025-12-01T23:15:53.227000
CVE-2025-66403,0,0,ad0a40bb3b94b7d56908163d327ae9ee8c7e0c387b6ba84cf240ae796f35d6af,2025-12-01T23:15:53.390000
CVE-2025-66405,0,0,30e6433e8f877c1c1a28a1dd108a2725183373b6dccb1db4c668f60d57a9d0bf,2025-12-01T23:15:53.567000
CVE-2025-6641,0,0,31699ed61befc504bc8c13dbb1ea193c366fe903345564eb35e59296c5939e55,2025-07-01T19:31:43.230000
CVE-2025-66410,1,1,12e4fac51066f2916c8d13b094a1bbe00766c3128264489efcde3e30bc8e7562,2025-12-01T23:15:53.730000
CVE-2025-66412,1,1,fa5f44c9d8273b0ba0d83e1383d36a3423727851b09dd3c263a137e5c7f7eb07,2025-12-01T23:15:53.890000
CVE-2025-66415,1,1,55feb8cab9b484a66e09158c0711406afee55cc55fed6a65b2c7860f86d038cb,2025-12-01T23:15:54.053000
CVE-2025-66410,0,0,12e4fac51066f2916c8d13b094a1bbe00766c3128264489efcde3e30bc8e7562,2025-12-01T23:15:53.730000
CVE-2025-66412,0,0,fa5f44c9d8273b0ba0d83e1383d36a3423727851b09dd3c263a137e5c7f7eb07,2025-12-01T23:15:53.890000
CVE-2025-66415,0,0,55feb8cab9b484a66e09158c0711406afee55cc55fed6a65b2c7860f86d038cb,2025-12-01T23:15:54.053000
CVE-2025-6642,0,0,37c2cb65a07d888f53f384c18bced3f2e5c4ade2246c2eac8aa013a7a21026bb,2025-07-01T19:31:50.170000
CVE-2025-66420,0,0,ff6efced740dcee0dd407e2772f268e6fbbbef65a1dd6c19a5d5198ee0ec9051,2025-12-01T15:39:33.110000
CVE-2025-66421,0,0,d22603c2916cd27c9d4429e3c9c60ef9e53953c7f69fb09925171937dbc02153,2025-12-01T15:39:33.110000
@@ -316821,7 +316838,7 @@ CVE-2025-6643,0,0,27e89fc6b64098cb1e8fbcb1805e35e92b4979e917bb20db38f9199222858f
CVE-2025-66432,0,0,8b751ac4081119a1c08900cae102ddb583813dfd30e6595760ac387502643d8a,2025-12-01T15:39:33.110000
CVE-2025-66433,0,0,3812fe021837f2f3800c401f7ab954bca00b8531e548bfa188996e05334fa623,2025-12-01T15:39:33.110000
CVE-2025-6644,0,0,c471a335fd97c82b1f426bbdf3aa1cf255f80cce7ff6d918f43bddb5b99ec065,2025-07-01T19:32:05.463000
CVE-2025-66448,1,1,ad4c222cf11f027a11864554de253cc386e161984c45119c3b7e0a488d9e60c8,2025-12-01T23:15:54.213000
CVE-2025-66448,0,0,ad4c222cf11f027a11864554de253cc386e161984c45119c3b7e0a488d9e60c8,2025-12-01T23:15:54.213000
CVE-2025-6645,0,0,ca082f442db5c54984c1d57f67da022e24f84a3b108c23d783fcb717c7fa1cf3,2025-07-01T19:32:54.980000
CVE-2025-6646,0,0,043bcd07e29066e91f25f87d0bed630b3a061c426b55f13b94b29bef86f244f3,2025-07-01T19:32:59.540000
CVE-2025-6647,0,0,44f80f0bb380fa0bfb740ed8efd86e253390646a43a8c5558a26e93cd54579d8,2025-07-01T19:19:18.470000
Can't render this file because it is too large.