From 6f74eb043e5a53dd0f34cc5817c5a51e51fa80f8 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Fri, 28 Nov 2025 15:04:04 +0000 Subject: [PATCH] Auto-Update: 2025-11-28T15:00:11.883436+00:00 --- CVE-2022/CVE-2022-501xx/CVE-2022-50170.json | 89 ++++++++++++- CVE-2022/CVE-2022-501xx/CVE-2022-50171.json | 106 +++++++++++++-- CVE-2022/CVE-2022-501xx/CVE-2022-50172.json | 106 +++++++++++++-- CVE-2022/CVE-2022-501xx/CVE-2022-50173.json | 137 ++++++++++++++++++-- CVE-2022/CVE-2022-501xx/CVE-2022-50174.json | 106 +++++++++++++-- CVE-2022/CVE-2022-501xx/CVE-2022-50175.json | 106 +++++++++++++-- CVE-2022/CVE-2022-501xx/CVE-2022-50177.json | 94 +++++++++++++- CVE-2022/CVE-2022-501xx/CVE-2022-50178.json | 82 +++++++++++- CVE-2025/CVE-2025-385xx/CVE-2025-38557.json | 94 +++++++++++++- CVE-2025/CVE-2025-385xx/CVE-2025-38558.json | 82 +++++++++++- CVE-2025/CVE-2025-385xx/CVE-2025-38559.json | 94 +++++++++++++- CVE-2025/CVE-2025-385xx/CVE-2025-38564.json | 82 +++++++++++- CVE-2025/CVE-2025-49xx/CVE-2025-4953.json | 10 +- README.md | 24 +++- _state.csv | 32 ++--- 15 files changed, 1133 insertions(+), 111 deletions(-) diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50170.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50170.json index f61d05fae49..1209289174f 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50170.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50170.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50170", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:47.340", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-28T14:46:10.813", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,96 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: kunit: executor: Se corrige una fuga de memoria en caso de fallo en kunit_filter_tests. Es posible que la asignaci\u00f3n de memoria para \"filtered\" falle, pero que la copia de la suite se realice correctamente. En este caso, la copia podr\u00eda sufrir una fuga. Libere correctamente \"copy\" en caso de error en caso de fallo en la asignaci\u00f3n de \"filtered\". Tenga en cuenta que tambi\u00e9n podr\u00eda haber existido un problema similar en kunit_filter_subsuites, antes de que se eliminara en \"kunit: flatten kunit_suite*** to kunit_suite** in .kunit_test_suites\". Esto fue informado por clang-analyzer a trav\u00e9s del robot de pruebas del kernel, aqu\u00ed: https://lore.kernel.org/all/c8073b8e-7b9e-0830-4177-87c12f16349c@intel.com/ Y por smatch a trav\u00e9s de Dan Carpenter y el robot de pruebas del kernel: https://lore.kernel.org/all/202207101328.ASjx88yj-lkp@intel.com/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.17.14", + "versionEndExcluding": "5.18", + "matchCriteriaId": "53441672-E856-4C9B-92DD-20B8133BE921" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18.3", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "7A271EA6-471F-4DDD-955D-AA1DB01A48A5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/7d69764fa3442c7615a75c6b5c02eaa1f274bccf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/94681e289bf5d10c9db9db143d1a22d8717205c5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a8a7e3ced362b88b659ab54239990196ff975982", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50171.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50171.json index 2828e07753c..ccc716f1922 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50171.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50171.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50171", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:47.443", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-28T14:46:44.930", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: crypto: hisilicon/sec - no dormir cuando est\u00e1 en softirq Cuando se utiliza el controlador de cifrado kunpeng920 para descifrar y descifrar paquetes durante softirq, no se permite utilizar el bloqueo mutex. El n\u00facleo informar\u00e1 del siguiente error: ERROR: programaci\u00f3n mientras es at\u00f3mico: swapper/57/0/0x00000300 Rastreo de llamadas: dump_backtrace+0x0/0x1e4 show_stack+0x20/0x2c dump_stack+0xd8/0x140 __schedule_bug+0x68/0x80 __schedule+0x728/0x840 schedule+0x50/0xe0 schedule_preempt_disabled+0x18/0x24 __mutex_lock.constprop.0+0x594/0x5dc __mutex_lock_slowpath+0x1c/0x30 mutex_lock+0x50/0x60 sec_request_init+0x8c/0x1a0 [hisi_sec2] sec_process+0x28/0x1ac [hisi_sec2] sec_skcipher_crypto+0xf4/0x1d4 [hisi_sec2] sec_skcipher_encrypt+0x1c/0x30 [hisi_sec2] crypto_skcipher_encrypt+0x2c/0x40 crypto_authenc_encrypt+0xc8/0xfc [authenc] crypto_aead_encrypt+0x2c/0x40 echainiv_encrypt+0x144/0x1a0 [echainiv] crypto_aead_encrypt+0x2c/0x40 esp_output_tail+0x348/0x5c0 [esp4] esp_output+0x120/0x19c [esp4] xfrm_output_one+0x25c/0x4d4 xfrm_output_resume+0x6c/0x1fc xfrm_output+0xac/0x3c0 xfrm4_output+0x64/0x130 ip_build_and_send_pkt+0x158/0x20c tcp_v4_send_synack+0xdc/0x1f0 tcp_conn_request+0x7d0/0x994 tcp_v4_conn_request+0x58/0x6c tcp_v6_conn_request+0xf0/0x100 tcp_rcv_state_process+0x1cc/0xd60 tcp_v4_do_rcv+0x10c/0x250 tcp_v4_rcv+0xfc4/0x10a4 ip_protocol_deliver_rcu+0xf4/0x200 ip_local_deliver_finish+0x58/0x70 ip_local_deliver+0x68/0x120 ip_sublist_rcv_finish+0x70/0x94 ip_list_rcv_finish.constprop.0+0x17c/0x1d0 ip_sublist_rcv+0x40/0xb0 ip_list_rcv+0x140/0x1dc __netif_receive_skb_list_core+0x154/0x28c __netif_receive_skb_list+0x120/0x1a0 netif_receive_skb_list_internal+0xe4/0x1f0 napi_complete_done+0x70/0x1f0 gro_cell_poll+0x9c/0xb0 napi_poll+0xcc/0x264 net_rx_action+0xd4/0x21c __do_softirq+0x130/0x358 irq_exit+0x11c/0x13c __handle_domain_irq+0x88/0xf0 gic_handle_irq+0x78/0x2c0 el1_irq+0xb8/0x140 arch_cpu_idle+0x18/0x40 default_idle_call+0x5c/0x1c0 cpuidle_idle_call+0x174/0x1b0 do_idle+0xc8/0x160 cpu_startup_entry+0x30/0x11c secondary_start_kernel+0x158/0x1e4 softirq: huh, entered softirq 3 NET_RX 0000000093774ee4 with preempt_count 00000100, exited with fffffe00? " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "C2BF720F-C5EE-4DE2-9BDF-CE4CFBC767F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/02884a4f12de11f54d4ca67a07dd1f111d96fdbd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/16e18a8ac7c9748cf35a8d2f0ba2c6e8850e7568", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4a461ba5b9753352f438824fdd915cba675b1733", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aa495dfe71229b9034b59d8072ff0b2325ddd5ee", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c9be45e4c69fde36522274f04d1aa0d097ae3958", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50172.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50172.json index c9c2b3bdb99..6cc0409c7d7 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50172.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50172.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50172", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:47.550", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-28T14:50:18.173", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mt76: mt76x02u: corrige una posible p\u00e9rdida de memoria en __mt76x02u_mcu_send_msg Libera el skb si mt76u_bulk_msg falla en la rutina __mt76x02u_mcu_send_msg." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "99AC8CF0-DC39-4142-8E90-E35EC791D83F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2f53ba46d8c97aca681adbe5098e1f84580c446d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3ad958bc488e3ecb0207d31621c00efb86f17482", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cffd93411575afd987788e2ec3cb8eaff70f0215", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/da1ab462b96c5d47a0755aec957bae3d685538c5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f1609c4f4a21777e081b36596224802b85052ad9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50173.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50173.json index 8d3ef70caf6..d9065f206b2 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50173.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50173.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50173", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:47.660", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-28T14:50:25.870", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,152 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/msm/mdp5: Se corrige el retroceso del bloqueo del estado global. Necesitamos tomar el bloqueo despu\u00e9s del retorno anticipado para el caso de !hwpipe. De lo contrario, podr\u00edamos haber llegado a una contenci\u00f3n y a\u00fan as\u00ed haber devuelto 0. Corrige un problema que el nuevo material CONFIG_DRM_DEBUG_MODESET_LOCK marc\u00f3 en CI: ADVERTENCIA: CPU: 0 PID: 282 en drivers/gpu/drm/drm_modeset_lock.c:296 drm_modeset_lock+0xf8/0x154 M\u00f3dulos vinculados en: CPU: 0 PID: 282 Comm: kms_cursor_lega Tainted: GW 5.19.0-rc2-15930-g875cc8bc536a #1 Nombre del hardware: Qualcomm Technologies, Inc. DB820c (DT) pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : drm_modeset_lock+0xf8/0x154 lr : drm_atomic_get_private_obj_state+0x84/0x170 sp : ffff80000cfab6a0 x29: ffff80000cfab6a0 x28: 0000000000000000 x27: ffff000083bc4d00 x26: 0000000000000038 x25: 0000000000000000 x24: ffff80000957ca58 x23: 0000000000000000 x22: ffff000081ace080 x21: 0000000000000001 x20: ffff000081acec18 x19: ffff80000cfabb80 x18: 0000000000000038 x17: 0000000000000000 x16: 0000000000000000 x15: fffffffffffea0d0 x14: 0000000000000000 x13: 284e4f5f4e524157 x12: 5f534b434f4c5f47 x11: ffff80000a386aa8 x10: 0000000000000029 x9: ffff80000cfab610 x8: 0000000000000029 x7: 00000000000000014 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff8000081ad904 x3 : 0000000000000029 x2 : ffff0000801db4c0 x1 : ffff80000cfabb80 x0 : ffff000081aceb58 Rastreo de llamadas: drm_modeset_lock+0xf8/0x154 drm_atomic_get_private_obj_state+0x84/0x170 mdp5_get_global_state+0x54/0x6c mdp5_pipe_release+0x2c/0xd4 mdp5_plane_atomic_check+0x2ec/0x414 drm_atomic_helper_check_planes+0xd8/0x210 drm_atomic_helper_check+0x54/0xb0 ... ---[ fin del seguimiento 0000000000000000 ]--- drm_modeset_lock intenta bloquear un bloqueo disputado sin retroceso: drm_modeset_lock+0x148/0x154 mdp5_get_global_state+0x30/0x6c mdp5_pipe_release+0x2c/0xd4 mdp5_plane_atomic_check+0x290/0x414 drm_atomic_helper_check_planes+0xd8/0x210 drm_atomic_helper_check+0x54/0xb0 drm_atomic_check_only+0x4b0/0x8f4 drm_atomic_commit+0x68/0xe0 Patchwork: https://patchwork.freedesktop.org/patch/492701/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19.247", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "A9D0E403-93CD-4ABF-8718-D5DAC1A93751" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.198", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "4C0BEDE1-12B6-4D8B-8C46-E1E2B8DAD97D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.121", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "786254E8-34A8-4616-B97E-78A6514A8929" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.46", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "F6F58692-D848-451C-BFAF-08F36BD6AD13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.17.14", + "versionEndExcluding": "5.18", + "matchCriteriaId": "53441672-E856-4C9B-92DD-20B8133BE921" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18.3", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "7A271EA6-471F-4DDD-955D-AA1DB01A48A5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0b07f28c23ff50a7fa5dbc3f6b3b6bd53ac9fc70", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/247f2934324f9a18d18df24ea4bfcc7d4631d0ef", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2e34d6c8180a398de6448a93df25068bf3062042", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2fdf5a54ef9376ff69149a48c5616f1141008c9f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/92ef86ab513593c6329d04146e61f9a670e72fc5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bf386c955f35a0a01bef482b6035d40ff2f6cc75", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f4e3a8c7e890049e7ba2b49ad0315dae841dfa55", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50174.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50174.json index 5557b657b4f..9186fe794f7 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50174.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50174.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50174", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:47.770", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-28T14:50:43.733", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: hinic: evitar que el kernel se cuelgue en hinic_get_stats64(). Al usar un dispositivo hinic como un dispositivo esclavo de enlace y leer las estad\u00edsticas del dispositivo de enlace maestro, el kernel puede colgarse. El seguimiento de llamadas de p\u00e1nico del kernel es el siguiente: P\u00e1nico del kernel - no sincroniza: softlockup: tareas colgadas Seguimiento de llamadas: native_queued_spin_lock_slowpath+0x1ec/0x31c dev_get_stats+0x60/0xcc dev_seq_printf_stats+0x40/0x120 dev_seq_show+0x1c/0x40 seq_read_iter+0x3c8/0x4dc seq_read+0xe0/0x130 proc_reg_read+0xa8/0xe0 vfs_read+0xb0/0x1d4 ksys_read+0x70/0xfc __arm64_sys_read+0x20/0x30 el0_svc_common+0x88/0x234 do_el0_svc+0x2c/0x90 el0_svc+0x1c/0x30 el0_sync_handler+0xa8/0xb0 el0_sync+0x148/0x180 Y el seguimiento de llamadas de la tarea que realmente caus\u00f3 los bloqueos del kernel de la siguiente manera: __switch_to+124 __schedule+548 schedule+72 schedule_timeout+348 __down_common+188 __down+24 down+104 hinic_get_stats64+44 [hinic] dev_get_stats+92 bond_get_stats+172 [bonding] dev_get_stats+92 dev_seq_printf_stats+60 dev_seq_show+24 seq_read_iter+964 seq_read+220 proc_reg_read+164 vfs_read+172 ksys_read+108 __arm64_sys_read+28 el0_svc_common+132 do_el0_svc+40 el0_svc+24 el0_sync_handler+164 el0_sync+324 Al obtener las estad\u00edsticas del dispositivo desde Bond, el kernel llama a bond_get_stats(). Primero mantiene el bloqueo de giro bond->stats_lock y luego llama a hinic_get_stats64() para recopilar las estad\u00edsticas del dispositivo Hinic. Sin embargo, hinic_get_stats64() llama a `down(&nic_dev->mgmt_lock)` para proteger su secci\u00f3n cr\u00edtica, que podr\u00eda programar la tarea actual. Si el sistema est\u00e1 bajo alta presi\u00f3n, la tarea no se puede reactivar inmediatamente, lo que eventualmente desencadena un p\u00e1nico de bloqueo del kernel. Dado que el parche anterior reemplaz\u00f3 hinic_dev.tx_stats/rx_stats con una variable local en hinic_get_stats64(), no es necesario proteger nada con bloqueo, por lo que simplemente eliminar down()/up() est\u00e1 bien." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.14", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "703E458C-FA96-4206-8FED-8712D76DF3A8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3ba59bbe4f306bb6ee15753db0a40564c0eb7909", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/693f31dc91568e61047fd2980a8235e856cd9ce8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/98f9fcdee35add80505b6c73f72de5f750d5c03c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e74f3097a9c713ce855cda07713393bcc23a005d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fced5bce712122654ec8a20356342698cce104d2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50175.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50175.json index 3aac28a8e67..36ca083d69d 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50175.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50175.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50175", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:47.883", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-28T14:50:51.693", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: tw686x: Se corrige la p\u00e9rdida de memoria en tw686x_video_init video_device_alloc() asigna memoria para vdev, cuando video_register_device() falla, no libera la memoria y provoca una p\u00e9rdida de memoria, llame a video_device_release() para solucionar esto." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.7", + "versionEndExcluding": "5.10.137", + "matchCriteriaId": "8730BA1C-A027-4111-B930-CAA87D221B13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "51861563-7F40-460F-82CD-2D3FBDAD6618" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0597bcf774896a002edcc7934a9cdbb932b66702", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/611f86965df013d6021e6cd0d155b1734ad2cf21", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8b412db51db24dfba22c96948580d4a12f831397", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c142a7531b90c6b0f946c82d3f504b3f36a207df", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e0b212ec9d8177d6f7c404315293f6a085d6ee42", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50177.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50177.json index c91238327f4..365212ef774 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50177.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50177.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50177", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:48.107", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-28T14:51:33.207", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: rcutorture: Correcci\u00f3n de la sincronizaci\u00f3n e iteraci\u00f3n del boosting de ksoftirqd. El boosting de prioridad de RCU puede fallar en dos situaciones: 1) Si (nr_cpus= > maxcpus=), lo que significa que el n\u00famero total de CPU es mayor que el de las que se conectaron al arranque, torture_onoff() puede reactivar posteriormente las CPU que no lo estaban. Dado que la inicializaci\u00f3n de rcutorture solo potencia los ksoftirqds de las CPU que se conectaron al arranque, las CPU que torture_onoff active posteriormente no se beneficiar\u00e1n del boosting, lo que provocar\u00e1 un fallo en el boosting de prioridad de RCU. 2) Los kthreads de ksoftirqd se impulsan tras la creaci\u00f3n de los kthreads rcu_torture_boost(), lo que abre una ventana lo suficientemente grande como para que estos kthreads rcu_torture_boost() esperen (a pesar de ejecutarse con prioridad FIFO) a los ksoftirqds que a\u00fan se ejecutan con prioridad SCHED_NORMAL. Los problemas pueden activarse, por ejemplo, con: ./kvm.sh --configs TREE01 --kconfig \"CONFIG_RCU_BOOST=y\" [ 34.968561] rcu-torture: !!! [ 34.968627] ------------[ cortar aqu\u00ed ]------------ [ 35.014054] ADVERTENCIA: CPU: 4 PID: 114 en kernel/rcu/rcutorture.c:1979 rcu_torture_stats_print+0x5ad/0x610 [ 35.052043] M\u00f3dulos vinculados en: [ 35.069138] CPU: 4 PID: 114 Comm: rcu_torture_sta No contaminado 5.18.0-rc1 #1 [ 35.096424] Nombre del hardware: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.14.0-0-g155821a-rebuilt.opensuse.org 04/01/2014 [ 35.154570] RIP: 0010:rcu_torture_stats_print+0x5ad/0x610 [ 35.198527] C\u00f3digo: 63 1b 02 00 74 02 0f 0b 48 83 3d 35 63 1b 02 00 74 02 0f 0b 48 83 3d 21 63 1b 02 00 74 02 0f 0b 48 83 3d 0d 63 1b 02 00 74 02 <0f> 0b 83 eb 01 0f 8e ba fc ff ff 0f 0b e9 b3 fc ff f82 [ 37.251049] RSP: 0000:ffffa92a0050bdf8 EFLAGS: 00010202 [ 37.277320] rcu: Descarga 8 [ 37.290367] RAX: 00000000000000000 RBX: 0000000000000001 RCX: 0000000000000001 [ 37.290387] RDX: 0000000000000000 RSI: 00000000ffffbfff RDI: 00000000ffffffff [ 37.290398] RBP: 000000000000007b R08: 0000000000000000 R09: c0000000ffffbfff [37.290407] R10: 000000000000002a R11: ffffa92a0050bc18 R12: ffffa92a0050be20 [37.290417] R13: ffffa92a0050be78 R14: 0000000000000000 R15: 000000000001bea0 [37.290427] FS: 000000000000000(0000) GS:ffff96045eb00000(0000) knlGS:0000000000000000 [37.290448] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.290460] CR2: 0000000000000000 CR3: 000000001dc0c000 CR4: 00000000000006e0 [ 37.290470] Rastreo de llamadas: [ 37.295049] [ 37.295065] ? preempt_count_add+0x63/0x90 [ 37.295095] ? _raw_spin_lock_irqsave+0x12/0x40 [ 37.295125] ? rcu_torture_stats_print+0x610/0x610 [ 37.295143] rcu_torture_stats+0x29/0x70 [ 37.295160] kthread+0xe3/0x110 [ 37.295176] ? kthread_complete_and_exit+0x20/0x20 [ 37.295193] ret_from_fork+0x22/0x30 [ 37.295218] Solucione esto potenciando los kthreads ksoftirqds desde la devoluci\u00f3n de llamada hotplug de potenciaci\u00f3n y antes de que se creen los kthreads de potenciaci\u00f3n." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.14", + "versionEndExcluding": "5.15.61", + "matchCriteriaId": "E529C2C2-B07B-4425-919F-8EC0AB91FA47" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3002153a91a9732a6d1d0bb95138593c7da15743", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/621595f771a6bd458ffbc40679e222ba5d0a7a1e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7e7472c62c6ded322afd9d5ac8bb20a08e7c5674", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8e84693621f53bf894af9905a6531e0530402145", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-501xx/CVE-2022-50178.json b/CVE-2022/CVE-2022-501xx/CVE-2022-50178.json index 3a9c52aaaaa..1a0d06c675f 100644 --- a/CVE-2022/CVE-2022-501xx/CVE-2022-50178.json +++ b/CVE-2022/CVE-2022-501xx/CVE-2022-50178.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50178", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:48.217", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-28T14:51:56.250", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: rtw89: 8852a: rfk: correcci\u00f3n de la excepci\u00f3n div 0. DPK es un tipo de calibraci\u00f3n de RF cuyo algoritmo ajusta los par\u00e1metros, calibra y comprueba el resultado. Si el resultado no es lo suficientemente bueno, podr\u00eda ajustar los par\u00e1metros e intentarlo de nuevo. Este problema se produce al leer y mostrar el resultado, pero podr\u00eda ser un resultado de calibraci\u00f3n negativo que cause un divisor 0 y un volcado de memoria. Por lo tanto, se debe solucionar con phy_div(), que realiza la divisi\u00f3n solo si el divisor no es cero; de lo contrario, se adopta el valor cero. error de divisi\u00f3n: 0000 [#1] PREEMPT SMP NOPTI CPU: 1 PID: 728 Comm: wpa_supplicant No contaminado 5.10.114-16019-g462a1661811a #1 RIP: 0010:rtw8852a_dpk+0x14ae/0x288f [rtw89_core] RSP: 0018:ffffa9bb412a7520 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 00000000000180fc RDI: ffffa141d01023c0 RBP: ffffa9bb412a76a0 R08: 0000000000001319 R09: 00000000ffffff92 R10: fffffffc0292de3 R11: fffffffc00d2f51 R12: 000000000000000 R13: ffffa141d01023c0 R14: fffffffc0290250 R15: ffffa141d0102638 FS: 00007fa99f5c2740(0000) GS:ffffa142e5e80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000013e8e010 CR3: 0000000110d2c000 CR4: 0000000000750ee0 PKRU: 55555554 Rastreo de llamadas: rtw89_core_sta_add+0x95/0x9c [rtw89_core ] rtw89_ops_sta_state+0x5d/0x108 [rtw89_core ] drv_sta_state+0x115/0x66f [mac80211 ] sta_info_insert_rcu+0x45c/0x713 [mac80211 ] sta_info_insert+0xf/0x1b [mac80211 ] ieee80211_prep_connection+0x9d6/0xb0c [mac80211 ] ieee80211_mgd_auth+0x2aa/0x352 [mac80211 ] cfg80211_mlme_auth+0x160/0x1f6 [cfg80211 ] nl80211_authenticate+0x2e5/0x306 [cfg80211 ] genl_rcv_msg+0x371/0x3a1 ? nl80211_stop_sched_scan+0xe5/0xe5 [cfg80211 ] ? genl_rcv+0x36/0x36 netlink_rcv_skb+0x8a/0xf9 genl_rcv+0x28/0x36 netlink_unicast+0x27b/0x3a0 netlink_sendmsg+0x2aa/0x469 sock_sendmsg_nosec+0x49/0x4d ____sys_sendmsg+0xe5/0x213 __sys_sendmsg+0xec/0x157 ? syscall_enter_from_user_mode+0xd7/0x116 do_syscall_64+0x43/0x55 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7fa99f6e689b " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-369" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.18.18", + "matchCriteriaId": "5B42E453-8837-49D0-A5EF-03F818A6DC11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "5.19.2", + "matchCriteriaId": "A1A2A5A5-4598-4D7E-BA07-4660398D6C8F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/065e83ac83c0c0e615b96947145c85c4bd76c09a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5abc81a138f873ab55223ec674afc3a3f945d60f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/683a4647a7a3044868cfdc14c117525091b9fa0c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38557.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38557.json index 39b259ebfe7..053c6dd504e 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38557.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38557.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38557", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-19T17:15:31.960", - "lastModified": "2025-08-20T14:40:17.713", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-28T14:41:59.877", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: HID: apple: validar el recuento de campos del informe de caracter\u00edsticas para evitar la desreferencia de puntero NULL. Un dispositivo HID malicioso con la peculiaridad APPLE_MAGIC_BACKLIGHT puede activar una desreferencia de puntero NULL mientras el informe de caracter\u00edsticas de potencia se conmuta y se env\u00eda al dispositivo en apple_magic_backlight_report_set(). Se espera que el informe de caracter\u00edsticas de potencia tenga dos campos de datos, pero si el descriptor declara un campo, entonces acceder a field[1] y desreferenciarlo en apple_magic_backlight_report_set() se vuelve inv\u00e1lido ya que field[1] ser\u00e1 NULL. Un ejemplo de un descriptor m\u00ednimo que puede causar el bloqueo es algo como lo siguiente, donde el informe con ID 3 (informe de potencia) solo hace referencia a un \u00fanico campo de 1 byte. Cuando el n\u00facleo hid analiza el descriptor, encontrar\u00e1 la etiqueta de caracter\u00edstica final, asignar\u00e1 un hid_report (todos los miembros de field[] se pondr\u00e1n a cero), crear\u00e1 una estructura de campo y la completar\u00e1, aumentando el maxfield a 1. El acceso y la desreferencia a field[1] posteriores provocan el bloqueo. P\u00e1gina de uso (definida por el proveedor 0xFF00) Uso (0x0F) Recopilaci\u00f3n (aplicaci\u00f3n) ID de informe (1) Uso (0x01) M\u00ednimo l\u00f3gico (0) M\u00e1ximo l\u00f3gico (255) Tama\u00f1o de informe (8) Cantidad de informes (1) Caracter\u00edstica (datos, variables, abs) Uso (0x02) M\u00e1ximo l\u00f3gico (32767) Tama\u00f1o de informe (16) Cantidad de informes (1) Caracter\u00edstica (datos, variables, abs) ID de informe (3) Uso (0x03) M\u00ednimo l\u00f3gico (0) M\u00e1ximo l\u00f3gico (1) Tama\u00f1o de informe (8) Cantidad de informes (1) Caracter\u00edstica (datos, variables, abs) Fin de recopilaci\u00f3n Aqu\u00ed vemos el splat de KASAN cuando el n\u00facleo desreferencia el puntero NULL y se bloquea: [ 15.164723] Ups: fallo de protecci\u00f3n general, probablemente para la direcci\u00f3n no can\u00f3nica 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 15.165691] KASAN: null-ptr-deref en el rango [0x0000000000000030-0x0000000000000037] [ 15.165691] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 No contaminado 6.15.0 #31 PREEMPT(voluntario) [ 15.165691] Nombre del hardware: PC est\u00e1ndar QEMU (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 01/04/2014 [ 15.165691] RIP: 0010:apple_magic_backlight_report_set+0xbf/0x210 [ 15.165691] Rastreo de llamadas: [ 15.165691] [ 15.165691] apple_probe+0x571/0xa20 [ 15.165691] hid_device_probe+0x2e2/0x6f0 [ 15.165691] really_probe+0x1ca/0x5c0 [ 15.165691] __driver_probe_device+0x24f/0x310 [ 15.165691] driver_probe_device+0x4a/0xd0 [ 15.165691] __device_attach_driver+0x169/0x220 [ 15.165691] bus_for_each_drv+0x118/0x1b0 [ 15.165691] __device_attach+0x1d5/0x380 [ 15.165691] device_initial_probe+0x12/0x20 [ 15.165691] bus_probe_device+0x13d/0x180 [ 15.165691] device_add+0xd87/0x1510 [...] Para solucionar este problema debemos validar el n\u00famero de campos que tienen los reportes de retroiluminaci\u00f3n y energ\u00eda y si no tienen el n\u00famero de campos requerido entonces abandonar." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11", + "versionEndExcluding": "6.12.42", + "matchCriteriaId": "F8763925-0DBB-4581-B7CC-71A26867D63E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.10", + "matchCriteriaId": "5890C690-B295-40C2-9121-FF5F987E5142" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.16", + "versionEndExcluding": "6.16.1", + "matchCriteriaId": "58182352-D7DF-4CC9-841E-03C1D852C3FB" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/00896c3f41cb6b74fec853386076115ba50baf0a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1bb3363da862e0464ec050eea2fb5472a36ad86b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7e15d1eaa88179c5185e57a38ab05fe852d0cb8d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ba08cc6801ec5fb98f2d02b5f0c614c931845325", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38558.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38558.json index aa52009740a..e51feabfcfd 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38558.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38558.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38558", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-19T17:15:32.100", - "lastModified": "2025-08-20T14:40:17.713", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-28T14:42:30.450", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: gadget: uvc: Inicializar descriptor de coincidencia de color de formato basado en frame. Se corrige el fallo del puntero nulo en uvcg_framebased_make debido a un descriptor de coincidencia de color no inicializado para el formato basado en frame, que se a\u00f1adi\u00f3 en el commit f5e7bdd34aca (\"usb: gadget: uvc: Permitir la creaci\u00f3n de nuevos descriptores de coincidencia de color\") que agreg\u00f3 el manejo para el formato sin comprimir y mjpeg. El fallo se observa cuando la configuraci\u00f3n del espacio de usuario (a trav\u00e9s de configfs) no define expl\u00edcitamente el descriptor de coincidencia de color. Si no se encuentra color_matching, config_group_find_item() devuelve NULL. El c\u00f3digo luego salta a out_put_cm, donde llama a config_item_put(color_matching);. Si color_matching es NULL, esto desreferenciar\u00e1 un puntero nulo, lo que provocar\u00e1 un fallo. [ 2.746440] No se puede manejar la desreferencia del puntero NULL del n\u00facleo en la direcci\u00f3n virtual 000000000000008c [ 2.756273] Informaci\u00f3n de aborto de memoria: [ 2.760080] ESR = 0x0000000096000005 [ 2.764872] EC = 0x25: DABT (current EL), IL = 32 bits [ 2.771068] SET = 0, FnV = 0 [ 2.771069] EA = 0, S1PTW = 0 [ 2.771070] FSC = 0x05: level 1 translation fault [ 2.771071] Data abort info: [ 2.771072] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 2.771073] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 2.771074] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 2.771075] user pgtable: 4k pages, 39-bit VAs, pgdp=00000000a3e59000 [ 2.771077] [000000000000008c] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000 [ 2.771081] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 2.771084] Dumping ftrace buffer: [ 2.771085] (ftrace buffer empty) [ 2.771138] CPU: 7 PID: 486 Comm: ln Tainted: G W E 6.6.58-android15 [ 2.771139] Hardware name: Qualcomm Technologies, Inc. SunP QRD HDK (DT) [ 2.771140] pstate: 61400005 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 2.771141] pc : __uvcg_fill_strm+0x198/0x2cc [ 2.771145] lr : __uvcg_iter_strm_cls+0xc8/0x17c [ 2.771146] sp : ffffffc08140bbb0 [ 2.771146] x29: ffffffc08140bbb0 x28: ffffff803bc81380 x27: ffffff8023bbd250 [ 2.771147] x26: ffffff8023bbd250 x25: ffffff803c361348 x24: ffffff803d8e6768 [ 2.771148] x23: 0000000000000004 x22: 0000000000000003 x21: ffffffc08140bc48 [ 2.771149] x20: 0000000000000000 x19: ffffffc08140bc48 x18: ffffffe9f8cf4a00 [ 2.771150] x17: 000000001bf64ec3 x16: 000000001bf64ec3 x15: ffffff8023bbd250 [ 2.771151] x14: 000000000000000f x13: 004c4b40000f4240 x12: 000a2c2a00051615 [ 2.771152] x11: 000000000000004f x10: ffffffe9f76b40ec x9 : ffffffe9f7e389d0 [ 2.771153] x8 : ffffff803d0d31ce x7 : 000f4240000a2c2a x6 : 0005161500028b0a [ 2.771154] x5 : ffffff803d0d31ce x4 : 0000000000000003 x3 : 0000000000000000 [ 2.771155] x2 : ffffffc08140bc50 x1 : ffffffc08140bc48 x0 : 0000000000000000 [ 2.771156] Call trace: [ 2.771157] __uvcg_fill_strm+0x198/0x2cc [ 2.771157] __uvcg_iter_strm_cls+0xc8/0x17c [ 2.771158] uvcg_streaming_class_allow_link+0x240/0x290 [ 2.771159] configfs_symlink+0x1f8/0x630 [ 2.771161] vfs_symlink+0x114/0x1a0 [ 2.771163] do_symlinkat+0x94/0x28c [ 2.771164] __arm64_sys_symlinkat+0x54/0x70 [ 2.771164] invoke_syscall+0x58/0x114 [ 2.771166] el0_svc_common+0x80/0xe0 [ 2.771168] do_el0_svc+0x1c/0x28 [ 2.771169] el0_svc+0x3c/0x70 [ 2.771172] el0t_64_sync_handler+0x68/0xbc [ 2.771173] el0t_64_sync+0x1a8/0x1ac Inicializa el descriptor de coincidencia de color para el formato basado en frame para evitar el bloqueo del puntero NULL reflejando el manejo realizado para los formatos sin comprimir y mjpeg." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.10", + "matchCriteriaId": "5890C690-B295-40C2-9121-FF5F987E5142" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.16", + "versionEndExcluding": "6.16.1", + "matchCriteriaId": "58182352-D7DF-4CC9-841E-03C1D852C3FB" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/323a80a1a5ace319a722909c006d5bdb2a35d273", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6db61c1aa23075eeee90e083ca3f6567a5635da6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7f8576fc9d1a203d12474bf52710c7af68cae490", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38559.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38559.json index 8fa094c307e..fea5144649e 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38559.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38559.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38559", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-19T17:15:32.233", - "lastModified": "2025-08-20T14:40:17.713", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-28T14:42:44.980", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: platform/x86/intel/pmt: correcci\u00f3n de un acceso a puntero nulo en el registro de fallos. El uso de intel_pmt_read() para sistemas binarios sysfs requiere un pcidev. El uso actual del valor del endpoint solo es v\u00e1lido para el uso de endpoints de telemetr\u00eda. Sin el ep, el uso del registro de fallos provoca la siguiente excepci\u00f3n de puntero nulo: ERROR: desreferencia de puntero nulo del kernel, direcci\u00f3n: 0000000000000000 \u00a1Uy!: \u00a1Uy!: 0000 [#1] SMP NOPTI RIP: 0010:intel_pmt_read+0x3b/0x70 [pmt_class] C\u00f3digo: Seguimiento de llamadas: ? Aumente la estructura intel_pmt_entry con un puntero a pcidev para evitar la excepci\u00f3n del puntero NULL." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.12", + "versionEndExcluding": "6.12.42", + "matchCriteriaId": "1FC3F76F-C8CF-4B19-AC3D-AA1AE05558D7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.15.10", + "matchCriteriaId": "5890C690-B295-40C2-9121-FF5F987E5142" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.16", + "versionEndExcluding": "6.16.1", + "matchCriteriaId": "58182352-D7DF-4CC9-841E-03C1D852C3FB" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/089d05266b2caf020ac2ae2cd2be78f580268f5d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/18d53b543b5447478e259c96ca4688393f327c98", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/54d5cd4719c5e87f33d271c9ac2e393147d934f8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/860d93bd6a21f08883711196344c353bc3936a2b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-385xx/CVE-2025-38564.json b/CVE-2025/CVE-2025-385xx/CVE-2025-38564.json index d6e8cfde69a..dabfdd8040c 100644 --- a/CVE-2025/CVE-2025-385xx/CVE-2025-38564.json +++ b/CVE-2025/CVE-2025-385xx/CVE-2025-38564.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38564", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-08-19T17:15:32.933", - "lastModified": "2025-08-20T14:40:17.713", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-28T14:44:02.133", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: perf/core: Manejar el error de mapeo de b\u00fafer correctamente en perf_mmap() Despu\u00e9s de la asignaci\u00f3n exitosa de un b\u00fafer o una conexi\u00f3n exitosa a un b\u00fafer existente, perf_mmap() intenta mapear el b\u00fafer de solo lectura en la tabla de p\u00e1ginas. Si eso falla, las entradas de la tabla de p\u00e1ginas ya configuradas se eliminan, pero los otros efectos secundarios espec\u00edficos de perf de ese fallo no se manejan. El c\u00f3digo de llamada simplemente limpia el VMA y no invoca perf_mmap_close(). Esto filtra los recuentos de referencia, corrompe la contabilidad de usuario->vm y tambi\u00e9n resulta en una invocaci\u00f3n desequilibrada de event::event_mapped(). Solucione esto moviendo la invocaci\u00f3n de event::event_mapped() antes de la llamada a map_range() para que en el fallo de map_range() se pueda invocar perf_mmap_close() sin causar una llamada desequilibrada a event::event_unmapped(). perf_mmap_close() deshace los recuentos de referencia y eventualmente libera los b\u00faferes." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.15.10", + "matchCriteriaId": "70478C0C-058C-4CC8-99CB-6F578E74194C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.16", + "versionEndExcluding": "6.16.1", + "matchCriteriaId": "58182352-D7DF-4CC9-841E-03C1D852C3FB" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/831e1c90a5d72e6977a57c44f47c46b73a438695", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a9025f73c88d9d6e125743a43afc569da3ce5328", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f74b9f4ba63ffdf597aaaa6cad7e284cb8e04820", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-49xx/CVE-2025-4953.json b/CVE-2025/CVE-2025-49xx/CVE-2025-4953.json index 47bd8b71a77..c0df51a6b15 100644 --- a/CVE-2025/CVE-2025-49xx/CVE-2025-4953.json +++ b/CVE-2025/CVE-2025-49xx/CVE-2025-4953.json @@ -2,7 +2,7 @@ "id": "CVE-2025-4953", "sourceIdentifier": "secalert@redhat.com", "published": "2025-09-16T15:15:45.313", - "lastModified": "2025-11-21T07:15:52.797", + "lastModified": "2025-11-28T13:15:46.000", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -48,6 +48,10 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2024:8690", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2025:15904", "source": "secalert@redhat.com" @@ -64,6 +68,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:17669", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:2703", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-4953", "source": "secalert@redhat.com" diff --git a/README.md b/README.md index 4c21a0fd371..64f280408ca 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-28T13:00:11.556249+00:00 +2025-11-28T15:00:11.883436+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-28T12:16:03.350000+00:00 +2025-11-28T14:51:56.250000+00:00 ``` ### Last Data Feed Release @@ -38,17 +38,27 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### CVEs added in the last Commit -Recently added CVEs: `1` +Recently added CVEs: `0` -- [CVE-2025-12143](CVE-2025/CVE-2025-121xx/CVE-2025-12143.json) (`2025-11-28T12:16:03.350`) ### CVEs modified in the last Commit -Recently modified CVEs: `2` +Recently modified CVEs: `13` -- [CVE-2023-48796](CVE-2023/CVE-2023-487xx/CVE-2023-48796.json) (`2025-11-28T11:15:59.537`) -- [CVE-2025-27151](CVE-2025/CVE-2025-271xx/CVE-2025-27151.json) (`2025-11-28T11:32:52.877`) +- [CVE-2022-50170](CVE-2022/CVE-2022-501xx/CVE-2022-50170.json) (`2025-11-28T14:46:10.813`) +- [CVE-2022-50171](CVE-2022/CVE-2022-501xx/CVE-2022-50171.json) (`2025-11-28T14:46:44.930`) +- [CVE-2022-50172](CVE-2022/CVE-2022-501xx/CVE-2022-50172.json) (`2025-11-28T14:50:18.173`) +- [CVE-2022-50173](CVE-2022/CVE-2022-501xx/CVE-2022-50173.json) (`2025-11-28T14:50:25.870`) +- [CVE-2022-50174](CVE-2022/CVE-2022-501xx/CVE-2022-50174.json) (`2025-11-28T14:50:43.733`) +- [CVE-2022-50175](CVE-2022/CVE-2022-501xx/CVE-2022-50175.json) (`2025-11-28T14:50:51.693`) +- [CVE-2022-50177](CVE-2022/CVE-2022-501xx/CVE-2022-50177.json) (`2025-11-28T14:51:33.207`) +- [CVE-2022-50178](CVE-2022/CVE-2022-501xx/CVE-2022-50178.json) (`2025-11-28T14:51:56.250`) +- [CVE-2025-38557](CVE-2025/CVE-2025-385xx/CVE-2025-38557.json) (`2025-11-28T14:41:59.877`) +- [CVE-2025-38558](CVE-2025/CVE-2025-385xx/CVE-2025-38558.json) (`2025-11-28T14:42:30.450`) +- [CVE-2025-38559](CVE-2025/CVE-2025-385xx/CVE-2025-38559.json) (`2025-11-28T14:42:44.980`) +- [CVE-2025-38564](CVE-2025/CVE-2025-385xx/CVE-2025-38564.json) (`2025-11-28T14:44:02.133`) +- [CVE-2025-4953](CVE-2025/CVE-2025-49xx/CVE-2025-4953.json) (`2025-11-28T13:15:46.000`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 0f8bc295e7c..e0edad77f93 100644 --- a/_state.csv +++ b/_state.csv @@ -215067,15 +215067,15 @@ CVE-2022-50166,0,0,0357e57fa6bd7242060dcb299371281cca72b0ee2a02fc04e2ee9f12852a6 CVE-2022-50167,0,0,d685c1c8aa87eadd6e75176026fcfbc57935d57c444d3165c40b062e3f34d1a5,2025-11-17T19:48:41.020000 CVE-2022-50168,0,0,06cbdb402d2a6f77337f69915d8a2815b8590ba61085b83c4a6d0d7fc79d8f57,2025-06-18T13:47:40.833000 CVE-2022-50169,0,0,19ad8a9c3d29922339edb8bc8f67b1893f81fecaf1f53a6ec7cf05df67eac0d8,2025-06-18T13:47:40.833000 -CVE-2022-50170,0,0,0952e3f4a6a7ed4a9d33365548ffb3184495a435e4b22b49ce8bc160d1e81812,2025-06-18T13:47:40.833000 -CVE-2022-50171,0,0,b1c2d0f503017f670994f9e28e7b4dfe7182ce510a2c3e2ebcb04fda3fd21bac,2025-06-18T13:47:40.833000 -CVE-2022-50172,0,0,d8f3558861088a3e76e53ec286ffcb18dd225a7c8da2bfc05e247ee6f152f68d,2025-06-18T13:47:40.833000 -CVE-2022-50173,0,0,6c09d70669435aa18d828796ca2d42f3ebabc3190c68f770b768c6a91e7d9b53,2025-06-18T13:47:40.833000 -CVE-2022-50174,0,0,e1dc4e93ff7d2f1b93da9b4ff4d738f715f770849e782ffc82f5ae5d4b6a3d03,2025-06-18T13:47:40.833000 -CVE-2022-50175,0,0,fefc4ef306a1b66681c7cbf3f91e5f7d910053866a169cb12e5a37db8606b47f,2025-06-18T13:47:40.833000 +CVE-2022-50170,0,1,dcd151bcc5d3224351484da958703bebc9c3aeee8da57cd2f7b6e57a68486362,2025-11-28T14:46:10.813000 +CVE-2022-50171,0,1,42c450e8fdf7ab2d71d0705312c62452eb8a9cedbb53c89c3a111d6f32d41639,2025-11-28T14:46:44.930000 +CVE-2022-50172,0,1,bf35a062fbfdb0b1a6cab475787a5e4a68390100dc910653490c71ebc0d37af2,2025-11-28T14:50:18.173000 +CVE-2022-50173,0,1,169a0a0488403115102d1cc4bffacbe47906ce1b117b67ed7007c41212f42e7f,2025-11-28T14:50:25.870000 +CVE-2022-50174,0,1,c0007b903843236046eb1e7291509ba6c4157d1ada0d0f3624d0eebc432d9e77,2025-11-28T14:50:43.733000 +CVE-2022-50175,0,1,6c9d26700b8b0bf4d04b357613c938edc8f31b8ad045f295cb0c1cb4f70d2cc6,2025-11-28T14:50:51.693000 CVE-2022-50176,0,0,fd8780a6cc0571e1808e86658fa59709937802a887f122fd33d61eae3690538b,2025-11-25T20:22:31.863000 -CVE-2022-50177,0,0,935a99e0884541d507ebafdbc858d77228a4c117bd4c789946eeee70ac87d14c,2025-06-18T13:47:40.833000 -CVE-2022-50178,0,0,c64913e6a55b2f52a9e04b6a62ac7f8d870cfbcabcbeb69f527effef3e20ea7e,2025-06-18T13:47:40.833000 +CVE-2022-50177,0,1,26c33745229b34101effd6b77ee95f2d45a799ccf38a186173f7cb1463b5f8ec,2025-11-28T14:51:33.207000 +CVE-2022-50178,0,1,1f6ccccb2a6d96828dbed97299045e65dde08379d6c7a8c167bff4435040da41,2025-11-28T14:51:56.250000 CVE-2022-50179,0,0,e3e468e4606b747c0269a6ac7e4c9b4653bdc60d2cefe09f3770a09b88837a78,2025-11-20T22:02:06.180000 CVE-2022-50180,0,0,5911e07ce2458b7afa6996acfa5b5c49cee9423f63c84187063247cf93f71f5f,2025-06-18T14:15:24.327000 CVE-2022-50181,0,0,864cab8e3b917a11c49b3cc8952d6b4d06013b54f895124a8e39c7318b0f60c0,2025-11-20T22:05:33.677000 @@ -240218,7 +240218,7 @@ CVE-2023-48791,0,0,31c96e4e1869546f12717fd141d38efd00e2ed04c54f4d96999394432c372 CVE-2023-48792,0,0,33638a16be59b3c3f04ec2d2edfb09f5d97719cb7d6fc1abec0d274b80694bcb,2025-06-11T17:15:34.457000 CVE-2023-48793,0,0,e4ee439dad1d9f1bf654fa529593f91997d37297a6b500770f89a0a5be5a054b,2025-06-11T17:15:34.760000 CVE-2023-48795,0,0,d141b44e0378fc86fb9a777239caaee21ce39e9b10455a5df43546019ef22045,2025-11-04T22:15:55.110000 -CVE-2023-48796,0,1,d5a64cbd64ed0378c87a39a7e8ebc22c9c9adc7392de0a33b3a8fc4c15228c4c,2025-11-28T11:15:59.537000 +CVE-2023-48796,0,0,d5a64cbd64ed0378c87a39a7e8ebc22c9c9adc7392de0a33b3a8fc4c15228c4c,2025-11-28T11:15:59.537000 CVE-2023-48799,0,0,3366d8319742c0309ab654ef0cc53e45e278748d34ca982988839dd619d2d037,2024-11-21T08:32:27.993000 CVE-2023-48800,0,0,17e06be6dffafd740719d49b31b1019db69763093cb965efa845b4d818b5fbc6,2024-11-21T08:32:28.150000 CVE-2023-48801,0,0,a31cee78c37ef4b212059889b73df5629425acf8b3301c071d38645e584e899b,2024-11-21T08:32:28.310000 @@ -287513,7 +287513,7 @@ CVE-2025-12139,0,0,e63f0884149ad42d0872828f90ca0056e111fbe786c9a025eb19d6a900295 CVE-2025-1214,0,0,83319e6848e0d35529b73705b5faa8457da95445a9a7e676376a76f2db06307e,2025-10-17T15:18:02.913000 CVE-2025-12140,0,0,0a2fb1f09fe84a39d81f16bf2b2e9e1ecd7b1ce7bd00b1af8319fbbc65373c1c,2025-11-27T14:15:50.813000 CVE-2025-12142,0,0,5113c9770bd129f3f313d8af57f92292eeec384f8666192aef43b4c53dfdf175,2025-10-30T15:03:13.440000 -CVE-2025-12143,1,1,12f789077b09b7a08c2ad54b9dea6a2322fbaf63eb479342eef95fd6f83d63fc,2025-11-28T12:16:03.350000 +CVE-2025-12143,0,0,12f789077b09b7a08c2ad54b9dea6a2322fbaf63eb479342eef95fd6f83d63fc,2025-11-28T12:16:03.350000 CVE-2025-12147,0,0,4b650092d3b6e630c6eef4a3fd04a61cce7d21291bb149508189d09ae5b41543,2025-10-30T15:03:13.440000 CVE-2025-12148,0,0,15664fc1e11bd7cc7e754e848b7c78051d528efd7fb6991d874f53d675e75574,2025-10-30T15:03:13.440000 CVE-2025-12149,0,0,53a42d6fbb30f206a7535a87aa75c31aef52932ef0e390c43a76403ccad7624f,2025-11-14T17:15:59.060000 @@ -295297,7 +295297,7 @@ CVE-2025-27148,0,0,a02be6d0e91bf8eda3626965312087a36b8be8d291da209d00439f9926ccc CVE-2025-27149,0,0,d37dd60e9f4cbd6bf258f9e4281ccbeeea11611cacc6f6c7f578aee7a519d621,2025-09-27T00:15:56.530000 CVE-2025-2715,0,0,9b86d209899e100764be1390e15dd32c759d3c6ac90bee191f2f3abd07adc820,2025-03-27T16:45:46.410000 CVE-2025-27150,0,0,ed69fdfc840c58bb15950fe3ab99a4797846fbbb445dad305aecfb4847ed9dba,2025-08-22T15:53:42.620000 -CVE-2025-27151,0,1,45d6f93d7241c78d364346d306638821fc533cbdbdf847af227d70fd72902ca8,2025-11-28T11:32:52.877000 +CVE-2025-27151,0,0,45d6f93d7241c78d364346d306638821fc533cbdbdf847af227d70fd72902ca8,2025-11-28T11:32:52.877000 CVE-2025-27152,0,0,dd09dee37591f16389af8cf97e0b7fe61eddc8d2b998b403935ec96b886910fa,2025-11-25T17:58:17.213000 CVE-2025-27153,0,0,153cf8367ada5823ec25665e9d6c2fdf2d2f49b909a08cc18d9c03f87f5c3ef3,2025-07-03T15:14:12.767000 CVE-2025-27154,0,0,1e975d72bebdf47d7d7a2300b98253c7dc68fea542f552a8278b41ed85b5f742,2025-04-07T18:24:53.463000 @@ -301806,15 +301806,15 @@ CVE-2025-38553,0,0,2d6f39c2c7d776b188d9221c48b26ebc0f7c8fff0d4331bd8c19e5c795a04 CVE-2025-38554,0,0,1b6b157b7b1ad624571b786bcf255c53f44cdb4f1a10c6637f3737f397ba5ada,2025-11-18T17:59:40.800000 CVE-2025-38555,0,0,ce55c1384cdf7ed457f5762c53ff63f05b01c9f26ff4fd6a972cf040bc2d8875,2025-11-03T18:16:29 CVE-2025-38556,0,0,443b2c8ceae5016ad25ac497ad1cda9f4180123f84889ac9d202e3303eed3a1f,2025-11-18T17:59:48.710000 -CVE-2025-38557,0,0,1ca4412bf440568e879cc0a6a8b74ba9d3e66e13213dce559ba4a2d4f2ddaeb1,2025-08-20T14:40:17.713000 -CVE-2025-38558,0,0,702b2bba05f67460746c2e06da4e7886a2442df74d3a6eed76458dd1e3f4b433,2025-08-20T14:40:17.713000 -CVE-2025-38559,0,0,1dec387be68d626e634248f45bf1dd276c210058a067e3d69c298762bbdff010,2025-08-20T14:40:17.713000 +CVE-2025-38557,0,1,5c75827517975cf7716853fec4f7681ba4db9d18c4bb05fee09b48fa81d46865,2025-11-28T14:41:59.877000 +CVE-2025-38558,0,1,c45c72481f049f87eb3ed04ce832882eba161a3da3718c9dae7f12d83b285cd6,2025-11-28T14:42:30.450000 +CVE-2025-38559,0,1,a997828985df06fd026b4951c3a5e64d95835f1637c72dd7e3098dc335388f62,2025-11-28T14:42:44.980000 CVE-2025-3856,0,0,9c3d59c08091e1da68ea94b9405a06c796925b8f71ee3eaba680d320cdfafb01,2025-10-15T18:49:12.557000 CVE-2025-38560,0,0,72f17f1ee0921eb9bbaad08e65b6f097ae3e65b51f8fc04a44c509c491855f78,2025-11-03T18:16:29.120000 CVE-2025-38561,0,0,ec864e82f47a39f5074466375d59738a21a8605cc90a17c33321c7d8ef7069dc,2025-11-03T18:16:29.223000 CVE-2025-38562,0,0,91c2300dd0663c177c22682667da46a604cd69ba247e0d8c1277773f03ba3e9e,2025-11-03T18:16:29.377000 CVE-2025-38563,0,0,f630d0cb2ac120ad6f47e655735612b99d270d4cc075617f608f0a4f5c291c36,2025-11-03T18:16:29.483000 -CVE-2025-38564,0,0,69f206c527b7ea4a1886c5ab10e9fd29538395089344b5070fc7336986a09a59,2025-08-20T14:40:17.713000 +CVE-2025-38564,0,1,a2e12d8b1b64c890fb566160e543251e3a3de737b897e60d096a1264a1a2ebfc,2025-11-28T14:44:02.133000 CVE-2025-38565,0,0,36bf72e64474c88775ca47121d25ab2304d794d3485c1ec56f26b7b8f72e49a5,2025-11-03T18:16:29.600000 CVE-2025-38566,0,0,1f61085c654aee3a6ca3f843a0d479e4e64abb979db657c1999cdd4ebfb9416f,2025-11-26T18:15:05.167000 CVE-2025-38567,0,0,be82ccd9ce13eb3ef236303b11fe339a619f8d65d115dca311ff3b36a56a28b8,2025-11-26T20:05:59.707000 @@ -307827,7 +307827,7 @@ CVE-2025-49526,0,0,cb3e92f9a5186bf0edc437308d68d5816cfe08756626ea06ae8de84bd2b5c CVE-2025-49527,0,0,55754d12c0075fd8194634dc8323b83dfb44278b2522a6508b3a62a93ab12aac,2025-07-10T17:38:21.650000 CVE-2025-49528,0,0,7213ba3b6cc61f452d26024654faf0973e8491c7ccf616863445ebd734c95d92,2025-07-10T17:38:11.023000 CVE-2025-49529,0,0,1a48a968149067e4b3bf327b864ef50fcef597f378d51b40c87a5065cc2eb915,2025-07-10T17:38:01.050000 -CVE-2025-4953,0,0,45cd237057ef94874c4e2404bd0bb4922217293702e3c7c0e3e5338e37e1a709,2025-11-21T07:15:52.797000 +CVE-2025-4953,0,1,b50ec9d81f8dbaea00148fe3ec793f8bdef9ea044750a0b6bf86661d4018093d,2025-11-28T13:15:46 CVE-2025-49530,0,0,3a92f2037b8f17168102ba3c41776ba20f364461e6b5a91b6671eb65167f0b88,2025-07-10T17:37:50.727000 CVE-2025-49531,0,0,13d4c9d82e3f090fb92010adb14a3f91c18b56fd0aecbbb3e1ed111178cb599e,2025-07-10T17:31:14.520000 CVE-2025-49532,0,0,ebf6a6e2a5bc5be9a8816ea107b6ea0652fcbb804339788526c44347041ad8b2,2025-07-10T17:40:51.393000