Auto-Update: 2025-12-01T23:00:11.583634+00:00

This commit is contained in:
cad-safe-bot committed 2025-12-01 23:04:01 +00:00
1 parent a9995badc4
commit a5701f53c5
78 files changed
+5891 -476

No files matched your search

+65 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50339",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:32.647",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T22:00:43.643",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,75 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev()\n\nsyzbot is again reporting attempt to cancel uninitialized work\nat mgmt_index_removed() [1], for setting of HCI_MGMT flag from\nmgmt_init_hdev() from hci_mgmt_cmd() from hci_sock_sendmsg() can\nrace with testing of HCI_MGMT flag from mgmt_index_removed() from\nhci_sock_bind() due to lack of serialization via hci_dev_lock().\n\nSince mgmt_init_hdev() is called with mgmt_chan_list_lock held, we can\nsafely split hci_dev_test_and_set_flag() into hci_dev_test_flag() and\nhci_dev_set_flag(). Thus, in order to close this race, set HCI_MGMT flag\nafter INIT_DELAYED_WORK() completed.\n\nThis is a local fix based on mgmt_chan_list_lock. Lack of serialization\nvia hci_dev_lock() might be causing different race conditions somewhere\nelse. But a global fix based on hci_dev_lock() should deserve a future\npatch."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.0",
"versionEndExcluding": "6.0.3",
"matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/e53c6180db8dd09de94e0a3bdf4fef6f5f9dd6e6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f74ca25d6d6629ffd4fd80a1a73037253b57d06b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50340",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:33.533",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T22:00:51.300",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,27 +11,117 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: vimc: Fix wrong function called when vimc_init() fails\n\nIn vimc_init(), when platform_driver_register(&vimc_pdrv) fails,\nplatform_driver_unregister(&vimc_pdrv) is wrongly called rather than\nplatform_device_unregister(&vimc_pdev), which causes kernel warning:\n\n Unexpected driver unregister!\n WARNING: CPU: 1 PID: 14517 at drivers/base/driver.c:270 driver_unregister+0x8f/0xb0\n RIP: 0010:driver_unregister+0x8f/0xb0\n Call Trace:\n <TASK>\n vimc_init+0x7d/0x1000 [vimc]\n do_one_initcall+0xd0/0x4e0\n do_init_module+0x1cf/0x6b0\n load_module+0x65c2/0x7820"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-617"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.13",
"versionEndExcluding": "5.10.163",
"matchCriteriaId": "D9BBFB20-ADB7-4F79-B2A6-AFECAA4DC013"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.86",
"matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.0.16",
"matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1",
"versionEndExcluding": "6.1.2",
"matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/14d85b600bb1f6f8ef61fa8fc1907e2e623d8350",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/681ac2902039d9b497b3ae18fdc204314979e61e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9c9ff35d68691aaea85b2e93763772e23930b3a3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f38df8984ef1b45ba23888d0e232cc21a95bd04b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f74d3f326d1d5b8951ce263c59a121ecfa65e7c0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+108 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50341",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:33.660",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T22:03:08.070",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,31 +11,130 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix oops during encryption\n\nWhen running xfstests against Azure the following oops occurred on an\narm64 system\n\n Unable to handle kernel write to read-only memory at virtual address\n ffff0001221cf000\n Mem abort info:\n ESR = 0x9600004f\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x0f: level 3 permission fault\n Data abort info:\n ISV = 0, ISS = 0x0000004f\n CM = 0, WnR = 1\n swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000000294f3000\n [ffff0001221cf000] pgd=18000001ffff8003, p4d=18000001ffff8003,\n pud=18000001ff82e003, pmd=18000001ff71d003, pte=00600001221cf787\n Internal error: Oops: 9600004f [#1] PREEMPT SMP\n ...\n pstate: 80000005 (Nzcv daif -PAN -UAO -TCO BTYPE=--)\n pc : __memcpy+0x40/0x230\n lr : scatterwalk_copychunks+0xe0/0x200\n sp : ffff800014e92de0\n x29: ffff800014e92de0 x28: ffff000114f9de80 x27: 0000000000000008\n x26: 0000000000000008 x25: ffff800014e92e78 x24: 0000000000000008\n x23: 0000000000000001 x22: 0000040000000000 x21: ffff000000000000\n x20: 0000000000000001 x19: ffff0001037c4488 x18: 0000000000000014\n x17: 235e1c0d6efa9661 x16: a435f9576b6edd6c x15: 0000000000000058\n x14: 0000000000000001 x13: 0000000000000008 x12: ffff000114f2e590\n x11: ffffffffffffffff x10: 0000040000000000 x9 : ffff8000105c3580\n x8 : 2e9413b10000001a x7 : 534b4410fb86b005 x6 : 534b4410fb86b005\n x5 : ffff0001221cf008 x4 : ffff0001037c4490 x3 : 0000000000000001\n x2 : 0000000000000008 x1 : ffff0001037c4488 x0 : ffff0001221cf000\n Call trace:\n __memcpy+0x40/0x230\n scatterwalk_map_and_copy+0x98/0x100\n crypto_ccm_encrypt+0x150/0x180\n crypto_aead_encrypt+0x2c/0x40\n crypt_message+0x750/0x880\n smb3_init_transform_rq+0x298/0x340\n smb_send_rqst.part.11+0xd8/0x180\n smb_send_rqst+0x3c/0x100\n compound_send_recv+0x534/0xbc0\n smb2_query_info_compound+0x32c/0x440\n smb2_set_ea+0x438/0x4c0\n cifs_xattr_set+0x5d4/0x7c0\n\nThis is because in scatterwalk_copychunks(), we attempted to write to\na buffer (@sign) that was allocated in the stack (vmalloc area) by\ncrypt_message() and thus accessing its remaining 8 (x2) bytes ended up\ncrossing a page boundary.\n\nTo simply fix it, we could just pass @sign kmalloc'd from\ncrypt_message() and then we're done. Luckily, we don't seem to pass\nany other vmalloc'd buffers in smb_rqst::rq_iov...\n\nInstead, let's map the correct pages and offsets from vmalloc buffers\nas well in cifs_sg_set_buf() and then avoiding such oopses."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.4.229",
"matchCriteriaId": "35BD75DA-D55E-4B66-8E0E-4931F67E1163"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.163",
"matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.87",
"matchCriteriaId": "7B9E5B1C-CD46-4790-9500-615863850401"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.0.16",
"matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1",
"versionEndExcluding": "6.1.1",
"matchCriteriaId": "E2D7A7B1-A69F-4536-ADFF-72B77EB8B13D"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/a13e51760703f71c25d5fc1f4a62dfa4b0cc80e9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/bf0543b93740916ee91956f9a63da6fc0d79daaa",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e8d16a54842d609fd4a3ed2d81d4333d6329aa94",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e8e2861cc3258dbe407d01ea8c59bb5a53132301",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f7f291e14dde32a07b1f0aa06921d28f875a7b54",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fe6ea044c4f05706cb71040055b1c70c6c8275e0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+87 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50342",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:33.807",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T22:03:16.573",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,23 +11,103 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfloppy: Fix memory leak in do_floppy_init()\n\nA memory leak was reported when floppy_alloc_disk() failed in\ndo_floppy_init().\n\nunreferenced object 0xffff888115ed25a0 (size 8):\n comm \"modprobe\", pid 727, jiffies 4295051278 (age 25.529s)\n hex dump (first 8 bytes):\n 00 ac 67 5b 81 88 ff ff ..g[....\n backtrace:\n [<000000007f457abb>] __kmalloc_node+0x4c/0xc0\n [<00000000a87bfa9e>] blk_mq_realloc_tag_set_tags.part.0+0x6f/0x180\n [<000000006f02e8b1>] blk_mq_alloc_tag_set+0x573/0x1130\n [<0000000066007fd7>] 0xffffffffc06b8b08\n [<0000000081f5ac40>] do_one_initcall+0xd0/0x4f0\n [<00000000e26d04ee>] do_init_module+0x1a4/0x680\n [<000000001bb22407>] load_module+0x6249/0x7110\n [<00000000ad31ac4d>] __do_sys_finit_module+0x140/0x200\n [<000000007bddca46>] do_syscall_64+0x35/0x80\n [<00000000b5afec39>] entry_SYSCALL_64_after_hwframe+0x46/0xb0\nunreferenced object 0xffff88810fc30540 (size 32):\n comm \"modprobe\", pid 727, jiffies 4295051278 (age 25.529s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [<000000007f457abb>] __kmalloc_node+0x4c/0xc0\n [<000000006b91eab4>] blk_mq_alloc_tag_set+0x393/0x1130\n [<0000000066007fd7>] 0xffffffffc06b8b08\n [<0000000081f5ac40>] do_one_initcall+0xd0/0x4f0\n [<00000000e26d04ee>] do_init_module+0x1a4/0x680\n [<000000001bb22407>] load_module+0x6249/0x7110\n [<00000000ad31ac4d>] __do_sys_finit_module+0x140/0x200\n [<000000007bddca46>] do_syscall_64+0x35/0x80\n [<00000000b5afec39>] entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nIf the floppy_alloc_disk() failed, disks of current drive will not be set,\nthus the lastest allocated set->tag cannot be freed in the error handling\npath. A simple call graph shown as below:\n\n floppy_module_init()\n floppy_init()\n do_floppy_init()\n for (drive = 0; drive < N_DRIVE; drive++)\n blk_mq_alloc_tag_set()\n blk_mq_alloc_tag_set_tags()\n blk_mq_realloc_tag_set_tags() # set->tag allocated\n floppy_alloc_disk()\n blk_mq_alloc_disk() # error occurred, disks failed to allocated\n\n ->out_put_disk:\n for (drive = 0; drive < N_DRIVE; drive++)\n if (!disks[drive][0]) # the last disks is not set and loop break\n break;\n blk_mq_free_tag_set() # the latest allocated set->tag leaked\n\nFix this problem by free the set->tag of current drive before jump to\nerror handling path.\n\n[efremov: added stable list, changed title]"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.86",
"matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.0.16",
"matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1",
"versionEndExcluding": "6.1.2",
"matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/55b3c66a0d441cd37154ae95e44d0b82ccfd580e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/75d8c8851a4da0190c2480e84315b5fd3d0356c5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f36d8c8651506aea5f09899f5356ece5d1384f50",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f8ace2e304c5dd8a7328db9cd2b8a4b1b98d83ec",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+142 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50343",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:33.923",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T22:03:21.887",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,43 +11,173 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrapidio: fix possible name leaks when rio_add_device() fails\n\nPatch series \"rapidio: fix three possible memory leaks\".\n\nThis patchset fixes three name leaks in error handling.\n - patch #1 fixes two name leaks while rio_add_device() fails.\n - patch #2 fixes a name leak while rio_register_mport() fails.\n\n\nThis patch (of 2):\n\nIf rio_add_device() returns error, the name allocated by dev_set_name()\nneed be freed. It should use put_device() to give up the reference in the\nerror path, so that the name can be freed in kobject_cleanup(), and the\n'rdev' can be freed in rio_release_dev()."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.30",
"versionEndExcluding": "4.9.337",
"matchCriteriaId": "103515FB-333E-4369-A6A7-F22A5C600BD2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.10",
"versionEndExcluding": "4.14.303",
"matchCriteriaId": "1E7450AD-4739-46F0-B81B-C02E7B35A97B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.270",
"matchCriteriaId": "AE8904A3-99BE-4E49-9682-1F90A6373F4F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.229",
"matchCriteriaId": "A0C0D95E-414A-445E-941B-3EF6A4D3A093"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.163",
"matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.86",
"matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.0.16",
"matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1",
"versionEndExcluding": "6.1.2",
"matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/3b4676f274a6b5d001176f15d0542100bbf4b59a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/440afd7fd9b164fdde6fc9da8c47d3d7f20dcce8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/80fad2e53eaed2b3a2ff596575f65669e13ceda5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/85fbf58b15c09d3a6a03098c1e42ebfe9002f39d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/88fa351b20ca300693a206ccd3c4b0e0647944d8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c413f65011ff8caffabcde0e1c3ceede48a48d6f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c482cb0deb57924335103fe592c379a076d867f8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ec3f04f74f50d0b6bac04d795c93c2b852753a7a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f9574cd48679926e2a569e1957a5a1bcc8a719ac",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+141 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50344",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:34.070",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T22:03:27.743",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,43 +11,172 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix null-ptr-deref in ext4_write_info\n\nI caught a null-ptr-deref bug as follows:\n==================================================================\nKASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f]\nCPU: 1 PID: 1589 Comm: umount Not tainted 5.10.0-02219-dirty #339\nRIP: 0010:ext4_write_info+0x53/0x1b0\n[...]\nCall Trace:\n dquot_writeback_dquots+0x341/0x9a0\n ext4_sync_fs+0x19e/0x800\n __sync_filesystem+0x83/0x100\n sync_filesystem+0x89/0xf0\n generic_shutdown_super+0x79/0x3e0\n kill_block_super+0xa1/0x110\n deactivate_locked_super+0xac/0x130\n deactivate_super+0xb6/0xd0\n cleanup_mnt+0x289/0x400\n __cleanup_mnt+0x16/0x20\n task_work_run+0x11c/0x1c0\n exit_to_user_mode_prepare+0x203/0x210\n syscall_exit_to_user_mode+0x5b/0x3a0\n do_syscall_64+0x59/0x70\n entry_SYSCALL_64_after_hwframe+0x44/0xa9\n ==================================================================\n\nAbove issue may happen as follows:\n-------------------------------------\nexit_to_user_mode_prepare\n task_work_run\n __cleanup_mnt\n cleanup_mnt\n deactivate_super\n deactivate_locked_super\n kill_block_super\n generic_shutdown_super\n shrink_dcache_for_umount\n dentry = sb->s_root\n sb->s_root = NULL <--- Here set NULL\n sync_filesystem\n __sync_filesystem\n sb->s_op->sync_fs > ext4_sync_fs\n dquot_writeback_dquots\n sb->dq_op->write_info > ext4_write_info\n ext4_journal_start(d_inode(sb->s_root), EXT4_HT_QUOTA, 2)\n d_inode(sb->s_root)\n s_root->d_inode <--- Null pointer dereference\n\nTo solve this problem, we use ext4_journal_start_sb directly\nto avoid s_root being used."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.9.331",
"matchCriteriaId": "F5B7C986-E6CA-41ED-A833-EA73FCF421D4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.10",
"versionEndExcluding": "4.14.296",
"matchCriteriaId": "1927ABC6-E0D2-478F-B103-B982A42D1158"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.262",
"matchCriteriaId": "D6B62970-1FAD-4ED6-930A-23E26A8D2E08"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.220",
"matchCriteriaId": "125F7133-B3B7-4175-8CF3-FF0845483254"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.150",
"matchCriteriaId": "C495821C-2A71-4F09-BED8-6A6EB4C9BA27"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.75",
"matchCriteriaId": "6D945F46-F32F-4C09-8400-C3477E22A9FB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.19.17",
"matchCriteriaId": "19B4C3A4-E5C3-41DC-BB14-BE72858E7D35"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.0",
"versionEndExcluding": "6.0.3",
"matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/3638aa1c7d87c0ca0aef23cf58cae2c48e7daca4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4a657319cfabd6199fd0b7b65bbebf6ded7a11c1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/533c60a0b97cee5daab376933f486207e6680fb7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/947264e00c46de19a016fd81218118c708fed2f3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/bb420e8afc854d2a1caaa23a0c129839acfb7888",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/dc451578446afd03c0c21913993c08898a691435",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f34ab95162763cd7352f46df169296eec28b688d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f4b5ff0b794aa94afac7269c494550ca2f66511b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f9c1f248607d5546075d3f731e7607d5571f2b60",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+141 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50346",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:34.330",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:58:19.057",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,43 +11,172 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: init quota for 'old.inode' in 'ext4_rename'\n\nSyzbot found the following issue:\next4_parse_param: s_want_extra_isize=128\next4_inode_info_init: s_want_extra_isize=32\next4_rename: old.inode=ffff88823869a2c8 old.dir=ffff888238699828 new.inode=ffff88823869d7e8 new.dir=ffff888238699828\n__ext4_mark_inode_dirty: inode=ffff888238699828 ea_isize=32 want_ea_size=128\n__ext4_mark_inode_dirty: inode=ffff88823869a2c8 ea_isize=32 want_ea_size=128\next4_xattr_block_set: inode=ffff88823869a2c8\n------------[ cut here ]------------\nWARNING: CPU: 13 PID: 2234 at fs/ext4/xattr.c:2070 ext4_xattr_block_set.cold+0x22/0x980\nModules linked in:\nRIP: 0010:ext4_xattr_block_set.cold+0x22/0x980\nRSP: 0018:ffff888227d3f3b0 EFLAGS: 00010202\nRAX: 0000000000000001 RBX: ffff88823007a000 RCX: 0000000000000000\nRDX: 0000000000000a03 RSI: 0000000000000040 RDI: ffff888230078178\nRBP: 0000000000000000 R08: 000000000000002c R09: ffffed1075c7df8e\nR10: ffff8883ae3efc6b R11: ffffed1075c7df8d R12: 0000000000000000\nR13: ffff88823869a2c8 R14: ffff8881012e0460 R15: dffffc0000000000\nFS: 00007f350ac1f740(0000) GS:ffff8883ae200000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f350a6ed6a0 CR3: 0000000237456000 CR4: 00000000000006e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n <TASK>\n ? ext4_xattr_set_entry+0x3b7/0x2320\n ? ext4_xattr_block_set+0x0/0x2020\n ? ext4_xattr_set_entry+0x0/0x2320\n ? ext4_xattr_check_entries+0x77/0x310\n ? ext4_xattr_ibody_set+0x23b/0x340\n ext4_xattr_move_to_block+0x594/0x720\n ext4_expand_extra_isize_ea+0x59a/0x10f0\n __ext4_expand_extra_isize+0x278/0x3f0\n __ext4_mark_inode_dirty.cold+0x347/0x410\n ext4_rename+0xed3/0x174f\n vfs_rename+0x13a7/0x2510\n do_renameat2+0x55d/0x920\n __x64_sys_rename+0x7d/0xb0\n do_syscall_64+0x3b/0xa0\n entry_SYSCALL_64_after_hwframe+0x72/0xdc\n\nAs 'ext4_rename' will modify 'old.inode' ctime and mark inode dirty,\nwhich may trigger expand 'extra_isize' and allocate block. If inode\ndidn't init quota will lead to warning. To solve above issue, init\n'old.inode' firstly in 'ext4_rename'."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-908"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.9.337",
"matchCriteriaId": "9FFBA9B5-26DC-4802-9A86-F7B886954E4A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.10",
"versionEndExcluding": "4.14.303",
"matchCriteriaId": "1E7450AD-4739-46F0-B81B-C02E7B35A97B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.270",
"matchCriteriaId": "AE8904A3-99BE-4E49-9682-1F90A6373F4F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.229",
"matchCriteriaId": "A0C0D95E-414A-445E-941B-3EF6A4D3A093"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.163",
"matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.87",
"matchCriteriaId": "7B9E5B1C-CD46-4790-9500-615863850401"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.0.18",
"matchCriteriaId": "08D38C5F-9644-4549-BBA6-F0860F024D14"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1",
"versionEndExcluding": "6.1.4",
"matchCriteriaId": "BC4189D9-5478-4E88-A78D-9C1DE29B217C"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/13271fbbe85d73a7c47058f56a52f2a7f00d6e39",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/135ba9146f4d38abed48a540ef8a8770ff0bd34f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/33fd7031d634f3b46e59f61adfbb0ea9fe514fef",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/67f6d5a4043f3db0c6bb0e14a0d97a7be8bfb8b5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7dfb8259f66faafa68d23a261b284d2c2c67649b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/84a2f2ed49d6a4d92b354219077434c57d334620",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/def7a39091e60e1c4a2f623629082a00092602be",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f263e349bacc2f303526dcfa61c4bc50132418b1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fae381a3d79bb94aa2eb752170d47458d778b797",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+142 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50347",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:34.470",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:58:23.473",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,43 +11,173 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()\n\nmmc_add_host() may return error, if we ignore its return value, the memory\nthat allocated in mmc_alloc_host() will be leaked and it will lead a kernel\ncrash because of deleting not added device in the remove path.\n\nSo fix this by checking the return value and calling mmc_free_host() in the\nerror path, besides, led_classdev_unregister() and pm_runtime_disable() also\nneed be called."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.16",
"versionEndExcluding": "4.9.337",
"matchCriteriaId": "5522724B-B972-4CDA-9782-6ACEC2A639E4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.10",
"versionEndExcluding": "4.14.303",
"matchCriteriaId": "1E7450AD-4739-46F0-B81B-C02E7B35A97B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.270",
"matchCriteriaId": "AE8904A3-99BE-4E49-9682-1F90A6373F4F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.229",
"matchCriteriaId": "A0C0D95E-414A-445E-941B-3EF6A4D3A093"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.163",
"matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.86",
"matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.0.16",
"matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1",
"versionEndExcluding": "6.1.2",
"matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/1491667d5450778a265eddddd294219acfd648cb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7fa922c7a3dd623fd59f1af50e8896fd9ca7f654",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/89303ddbb502c3bc8edbf864f9f85500c8fe07e9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/937112e991ed25d1727d878734adcbef3b900274",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a522e26a20a43dcfbef9ee9f71ed803290e852b0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d7ad7278be401b09c9f9a9f522cf4c449c7fd489",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/df683201c7ffbd21a806a7cad657b661c5ebfb6f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e598c9683fe1cf97c2b11b800cc3cee072108220",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fc38a5a10e9e5a75eb9189854abeb8405b214cc9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+109 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50348",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:34.590",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:58:30.987",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,31 +11,131 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: Fix a memory leak in an error handling path\n\nIf this memdup_user() call fails, the memory allocated in a previous call\na few lines above should be freed. Otherwise it leaks."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.4",
"versionEndExcluding": "5.4.220",
"matchCriteriaId": "C86E91CD-1AC4-4C91-8097-B6DD58212EE2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.150",
"matchCriteriaId": "C495821C-2A71-4F09-BED8-6A6EB4C9BA27"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.75",
"matchCriteriaId": "6D945F46-F32F-4C09-8400-C3477E22A9FB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.19.17",
"matchCriteriaId": "19B4C3A4-E5C3-41DC-BB14-BE72858E7D35"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.0",
"versionEndExcluding": "6.0.3",
"matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/733dd17158f96aaa25408dc39bbb2738fda9300e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/acc393aecda05bf64ed13b732931462e07a1bf08",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/aed8816305575b38dcc77feb6f1bc1d0ed32f5b8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cc3bca2110ac85cd964da997ef83d84cab0d49fb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e060c4b9f33c1fca74df26d57a98e784295327e6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fd1ef88049de09bc70d60b549992524cfc0e66ff",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+142 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50349",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:34.703",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:58:36.913",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,43 +11,173 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: tifm: fix possible memory leak in tifm_7xx1_switch_media()\n\nIf device_register() returns error in tifm_7xx1_switch_media(),\nname of kobject which is allocated in dev_set_name() called in device_add()\nis leaked.\n\nNever directly free @dev after calling device_register(), even\nif it returned an error! Always use put_device() to give up the\nreference initialized."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.22",
"versionEndExcluding": "4.9.337",
"matchCriteriaId": "50B4031E-0292-4576-9B48-9EDFB1CBDF88"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.10",
"versionEndExcluding": "4.14.303",
"matchCriteriaId": "1E7450AD-4739-46F0-B81B-C02E7B35A97B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.270",
"matchCriteriaId": "AE8904A3-99BE-4E49-9682-1F90A6373F4F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.229",
"matchCriteriaId": "A0C0D95E-414A-445E-941B-3EF6A4D3A093"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.163",
"matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.86",
"matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.0.16",
"matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1",
"versionEndExcluding": "6.1.2",
"matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/1695b1adcc3a7d985cd22fa3b55761edf3fab50d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2bbb222a54ff501f77ce593d21b76b79c905045e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/35abbc8406cc39e72d3ce85f6e869555afe50d54",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/57c857353d5020bdec8284d9c0fee447484fe5e0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/848c45964ded537107e010aaf353aa30a0855387",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d861b7d41b17942b337d4b87a70de7cd1dc44d4e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ee2715faf7e7153f5142ed09aacfa89a64d45dcb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ef843ee20576039126d34d6eb5f45d14c3e6ce18",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fd2c930cf6a5b9176382c15f9acb1996e76e25ad",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+76 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50350",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:34.833",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:58:43.630",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,89 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Fix a race condition between login_work and the login thread\n\nIn case a malicious initiator sends some random data immediately after a\nlogin PDU; the iscsi_target_sk_data_ready() callback will schedule the\nlogin_work and, at the same time, the negotiation may end without clearing\nthe LOGIN_FLAGS_INITIAL_PDU flag (because no additional PDU exchanges are\nrequired to complete the login).\n\nThe login has been completed but the login_work function will find the\nLOGIN_FLAGS_INITIAL_PDU flag set and will never stop from rescheduling\nitself; at this point, if the initiator drops the connection, the\niscsit_conn structure will be freed, login_work will dereference a released\nsocket structure and the kernel crashes.\n\nBUG: kernel NULL pointer dereference, address: 0000000000000230\nPF: supervisor write access in kernel mode\nPF: error_code(0x0002) - not-present page\nWorkqueue: events iscsi_target_do_login_rx [iscsi_target_mod]\nRIP: 0010:_raw_read_lock_bh+0x15/0x30\nCall trace:\n iscsi_target_do_login_rx+0x75/0x3f0 [iscsi_target_mod]\n process_one_work+0x1e8/0x3c0\n\nFix this bug by forcing login_work to stop after the login has been\ncompleted and the socket callbacks have been restored.\n\nAdd a comment to clearify the return values of iscsi_target_do_login()"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.12",
"versionEndExcluding": "6.0.16",
"matchCriteriaId": "85836EA7-7E00-413E-838E-F4D67567E7F9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1",
"versionEndExcluding": "6.1.2",
"matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/1533b8b3058db618409f41554ebe768c2e3acfae",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3ecdca49ca49d4770639d81503c873b6d25887c4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fec1b2fa62c162d03f5dcd7b03e3c89d3116d49f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+81 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50351",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:34.980",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:58:48.517",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,94 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: Fix xid leak in cifs_create()\n\nIf the cifs already shutdown, we should free the xid before return,\notherwise, the xid will be leaked."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.13",
"versionEndExcluding": "5.15.76",
"matchCriteriaId": "59270B6F-5680-4DA5-BC00-6D8E42EFFEFC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.0.6",
"matchCriteriaId": "98F5FA4A-A33F-4FAD-894E-FDC9D295742A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/593d877c39aa9f3fe1a4b5b022492886d7d700ec",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/92aa09c86ef297976a3c27c6574c0839418dc2c4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fee0fb1f15054bb6a0ede452acb42da5bef4d587",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+136 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50352",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:35.080",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:58:54.167",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,39 +11,164 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns: fix possible memory leak in hnae_ae_register()\n\nInject fault while probing module, if device_register() fails,\nbut the refcount of kobject is not decreased to 0, the name\nallocated in dev_set_name() is leaked. Fix this by calling\nput_device(), so that name can be freed in callback function\nkobject_cleanup().\n\nunreferenced object 0xffff00c01aba2100 (size 128):\n comm \"systemd-udevd\", pid 1259, jiffies 4294903284 (age 294.152s)\n hex dump (first 32 bytes):\n 68 6e 61 65 30 00 00 00 18 21 ba 1a c0 00 ff ff hnae0....!......\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [<0000000034783f26>] slab_post_alloc_hook+0xa0/0x3e0\n [<00000000748188f2>] __kmem_cache_alloc_node+0x164/0x2b0\n [<00000000ab0743e8>] __kmalloc_node_track_caller+0x6c/0x390\n [<000000006c0ffb13>] kvasprintf+0x8c/0x118\n [<00000000fa27bfe1>] kvasprintf_const+0x60/0xc8\n [<0000000083e10ed7>] kobject_set_name_vargs+0x3c/0xc0\n [<000000000b87affc>] dev_set_name+0x7c/0xa0\n [<000000003fd8fe26>] hnae_ae_register+0xcc/0x190 [hnae]\n [<00000000fe97edc9>] hns_dsaf_ae_init+0x9c/0x108 [hns_dsaf]\n [<00000000c36ff1eb>] hns_dsaf_probe+0x548/0x748 [hns_dsaf]"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.4",
"versionEndExcluding": "4.9.332",
"matchCriteriaId": "1B134647-F377-440F-AF99-883E53BFB15E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.10",
"versionEndExcluding": "4.14.298",
"matchCriteriaId": "7140B9A2-EB63-497C-96B1-68A96CD99051"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.264",
"matchCriteriaId": "8AE23A9F-BF98-4055-AA49-02118B96226D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.221",
"matchCriteriaId": "DF527781-6E98-4DBF-B668-377AA673CDCF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.152",
"matchCriteriaId": "AFE2A429-A1A8-4B68-8F1D-A1595AB6A4F7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.76",
"matchCriteriaId": "918A4953-6F82-40F5-B7A9-9836905139C1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.0.6",
"matchCriteriaId": "98F5FA4A-A33F-4FAD-894E-FDC9D295742A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/02dc0db19d944b4a90941db505ecf1aaec714be4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2974f3b330ef25f5d34a4948d04290c2cd7802cf",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3b78453cca046d3b03853f0d077ad3ad130db886",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7ae1345f6ad715acbcdc9e1ac28153684fd498bb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/91f8f5342bee726ed5692583d58f69e7cc9ae60e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a3c148955c22fe1d94d7a2096005679c1f22eddf",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/dfc0337c6dceb6449403b33ecb141f4a1458a1e9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ff2f5ec5d009844ec28f171123f9e58750cef4bf",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+141 -10
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53304",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:35.240",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:58:59.480",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,35 +11,166 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_set_rbtree: fix overlap expiration walk\n\nThe lazy gc on insert that should remove timed-out entries fails to release\nthe other half of the interval, if any.\n\nCan be reproduced with tests/shell/testcases/sets/0044interval_overlap_0\nin nftables.git and kmemleak enabled kernel.\n\nSecond bug is the use of rbe_prev vs. prev pointer.\nIf rbe_prev() returns NULL after at least one iteration, rbe_prev points\nto element that is not an end interval, hence it should not be removed.\n\nLastly, check the genmask of the end interval if this is active in the\ncurrent generation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.10.166",
"versionEndExcluding": "5.10.190",
"matchCriteriaId": "D120E24C-92C4-42C2-BDBC-2DA33FB84683"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.15.91",
"versionEndExcluding": "5.15.124",
"matchCriteriaId": "7C579EE5-29AE-450E-A284-D7401ABCD1D3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1.9",
"versionEndExcluding": "6.1.43",
"matchCriteriaId": "BBB03740-07A5-4A80-A087-A4A2B6127646"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2.1",
"versionEndExcluding": "6.4.8",
"matchCriteriaId": "ED5C51C1-C86A-404D-A81F-10761E602032"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.2:-:*:*:*:*:*:*",
"matchCriteriaId": "3ADCCCEE-143A-4B48-9B2A-0CB97BD385DE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*",
"matchCriteriaId": "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc7:*:*:*:*:*:*",
"matchCriteriaId": "C64BDD9D-C663-4E75-AE06-356EDC392B82"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc8:*:*:*:*:*:*",
"matchCriteriaId": "26544390-88E4-41CA-98BF-7BB1E9D4E243"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*",
"matchCriteriaId": "F5608371-157A-4318-8A2E-4104C3467EA1"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/50cbb9d195c197af671869c8cadce3bd483735a0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8284a79136c384059e85e278da2210b809730287",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/893cb3c3513cf661a0ff45fe0cfa83fe27131f76",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/89a4d1a89751a0fbd520e64091873e19cc0979e8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/acaee227cf79c45a5d2d49c3e9a66333a462802c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cd66733932399475fe933cb3ec03e687ed401462",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f718863aca469a109895cb855e6b81fff4827d71",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+130 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53305",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:36.260",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:59:05.670",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,39 +11,158 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix use-after-free\n\nFix potential use-after-free in l2cap_le_command_rej."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.14.324",
"matchCriteriaId": "64C8E5B5-CD94-4DA3-9D05-3554581C99AD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.293",
"matchCriteriaId": "39603052-E341-4096-8535-38D44A60E845"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.255",
"matchCriteriaId": "1379E40A-2AC3-484E-929A-7F46B6C3B521"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.192",
"matchCriteriaId": "9396FFDC-6A0D-44B7-9368-21B456F6D4AE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.128",
"matchCriteriaId": "1415629F-F97B-4880-BA1E-AF3DBB8EF305"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.47",
"matchCriteriaId": "2EEA01B0-0151-4E0F-B140-1A441EEDD717"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.4.12",
"matchCriteriaId": "CF8ECF64-40AE-49AB-8315-4D83F9F56ECF"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/149daab45922ab1ac7f0cbeacab7251a46bf5e63",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/1a40c56e8bff3e424724d78a9a6b3272dd8a371d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/255be68150291440657b2cdb09420b69441af3d8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2958cf9f805b9f0bdc4a761bf6ea281eb8d44f8e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/548a6b64b3c0688f01119a6fcccceb41f8c984e4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e76bab1b7afa580cd76362540fc37551ada4359b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f752a0b334bb95fe9b42ecb511e0864e2768046f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fe49aa73cca6608714477b74bfc6874b9db979df",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+90 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53306",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:36.370",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:46:08.330",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,100 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfsdax: force clear dirty mark if CoW\n\nXFS allows CoW on non-shared extents to combat fragmentation[1]. The old\nnon-shared extent could be mwrited before, its dax entry is marked dirty. \n\nThis results in a WARNing:\n\n[ 28.512349] ------------[ cut here ]------------\n[ 28.512622] WARNING: CPU: 2 PID: 5255 at fs/dax.c:390 dax_insert_entry+0x342/0x390\n[ 28.513050] Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace fscache netfs nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables\n[ 28.515462] CPU: 2 PID: 5255 Comm: fsstress Kdump: loaded Not tainted 6.3.0-rc1-00001-g85e1481e19c1-dirty #117\n[ 28.515902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS Arch Linux 1.16.1-1-1 04/01/2014\n[ 28.516307] RIP: 0010:dax_insert_entry+0x342/0x390\n[ 28.516536] Code: 30 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 8b 45 20 48 83 c0 01 e9 e2 fe ff ff 48 8b 45 20 48 83 c0 01 e9 cd fe ff ff <0f> 0b e9 53 ff ff ff 48 8b 7c 24 08 31 f6 e8 1b 61 a1 00 eb 8c 48\n[ 28.517417] RSP: 0000:ffffc9000845fb18 EFLAGS: 00010086\n[ 28.517721] RAX: 0000000000000053 RBX: 0000000000000155 RCX: 000000000018824b\n[ 28.518113] RDX: 0000000000000000 RSI: ffffffff827525a6 RDI: 00000000ffffffff\n[ 28.518515] RBP: ffffea00062092c0 R08: 0000000000000000 R09: ffffc9000845f9c8\n[ 28.518905] R10: 0000000000000003 R11: ffffffff82ddb7e8 R12: 0000000000000155\n[ 28.519301] R13: 0000000000000000 R14: 000000000018824b R15: ffff88810cfa76b8\n[ 28.519703] FS: 00007f14a0c94740(0000) GS:ffff88817bd00000(0000) knlGS:0000000000000000\n[ 28.520148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 28.520472] CR2: 00007f14a0c8d000 CR3: 000000010321c004 CR4: 0000000000770ee0\n[ 28.520863] PKRU: 55555554\n[ 28.521043] Call Trace:\n[ 28.521219] <TASK>\n[ 28.521368] dax_fault_iter+0x196/0x390\n[ 28.521595] dax_iomap_pte_fault+0x19b/0x3d0\n[ 28.521852] __xfs_filemap_fault+0x234/0x2b0\n[ 28.522116] __do_fault+0x30/0x130\n[ 28.522334] do_fault+0x193/0x340\n[ 28.522586] __handle_mm_fault+0x2d3/0x690\n[ 28.522975] handle_mm_fault+0xe6/0x2c0\n[ 28.523259] do_user_addr_fault+0x1bc/0x6f0\n[ 28.523521] exc_page_fault+0x60/0x140\n[ 28.523763] asm_exc_page_fault+0x22/0x30\n[ 28.524001] RIP: 0033:0x7f14a0b589ca\n[ 28.524225] Code: c5 fe 7f 07 c5 fe 7f 47 20 c5 fe 7f 47 40 c5 fe 7f 47 60 c5 f8 77 c3 66 0f 1f 84 00 00 00 00 00 40 0f b6 c6 48 89 d1 48 89 fa <f3> aa 48 89 d0 c5 f8 77 c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90\n[ 28.525198] RSP: 002b:00007fff1dea1c98 EFLAGS: 00010202\n[ 28.525505] RAX: 000000000000001e RBX: 000000000014a000 RCX: 0000000000006046\n[ 28.525895] RDX: 00007f14a0c82000 RSI: 000000000000001e RDI: 00007f14a0c8d000\n[ 28.526290] RBP: 000000000000006f R08: 0000000000000004 R09: 000000000014a000\n[ 28.526681] R10: 0000000000000008 R11: 0000000000000246 R12: 028f5c28f5c28f5c\n[ 28.527067] R13: 8f5c28f5c28f5c29 R14: 0000000000011046 R15: 00007f14a0c946c0\n[ 28.527449] </TASK>\n[ 28.527600] ---[ end trace 0000000000000000 ]---\n\n\nTo be able to delete this entry, clear its dirty mark before\ninvalidate_inode_pages2_range().\n\n[1] https://lore.kernel.org/linux-xfs/20230321151339.GA11376@frogsfrogsfrogs/"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.2.11",
"matchCriteriaId": "93C03C9A-798F-4CD5-912F-A436BFA0CC7E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
"matchCriteriaId": "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
"matchCriteriaId": "A47F0FC3-CE52-4BA1-BA51-22F783938431"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*",
"matchCriteriaId": "3583026A-27EC-4A4C-850A-83F2AF970673"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc4:*:*:*:*:*:*",
"matchCriteriaId": "DC271202-7570-4505-89A4-D602D47BFD00"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc5:*:*:*:*:*:*",
"matchCriteriaId": "D413BB6D-4F74-4C7D-9163-47786619EF53"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/f76b3a32879de215ced3f8c754c4077b0c2f79e3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fac05f800abb63dc4d7cc48fe7edf16e0520dc1f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+131 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53307",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:36.477",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:46:18.413",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,39 +11,159 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails\n\nIf getting an ID or setting up a work queue in rbd_dev_create() fails,\nuse-after-free on rbd_dev->rbd_client, rbd_dev->spec and rbd_dev->opts\nis triggered in do_rbd_add(). The root cause is that the ownership of\nthese structures is transfered to rbd_dev prematurely and they all end\nup getting freed when rbd_dev_create() calls rbd_dev_free() prior to\nreturning to do_rbd_add().\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE, an\nincomplete patch submitted by Natalia Petrova <[email protected]>."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.9",
"versionEndExcluding": "4.14.308",
"matchCriteriaId": "7292C460-000B-4120-B05D-5672751A14E4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.276",
"matchCriteriaId": "C902FC54-DDBD-4DA6-BFEF-26889A267464"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.235",
"matchCriteriaId": "13DD5E68-8CB4-46EE-9A8F-C7F6C1A84430"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.173",
"matchCriteriaId": "4D810CFB-B7C5-493C-B98A-0D5F0D8A47B6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.99",
"matchCriteriaId": "5B8B2AC9-2F31-4A0F-96F5-7E26B50B27BB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.16",
"matchCriteriaId": "0FD95FDA-6525-4B13-B3FB-49D9995FD8ED"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.2.3",
"matchCriteriaId": "88C67289-22AD-4CA9-B202-5F5A80E5BA4B"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/71da2a151ed1adb0aea4252b16d81b53012e7afd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9787b328c42c13c4f31e7d5042c4e877e9344068",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a73783e4e0c4d1507794da211eeca75498544dff",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ae16346078b1189aee934afd872d9f3d0a682c33",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cc8c0dd2984503ed09efa37bcafcef3d3da104e8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e3cbb4d60764295992c95344f2d779439e8b34ce",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f7c4d9b133c7a04ca619355574e96b6abf209fba",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/faa7b683e436664fff5648426950718277831348",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+160 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53308",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:36.597",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:46:25.467",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,39 +11,188 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fec: Better handle pm_runtime_get() failing in .remove()\n\nIn the (unlikely) event that pm_runtime_get() (disguised as\npm_runtime_resume_and_get()) fails, the remove callback returned an\nerror early. The problem with this is that the driver core ignores the\nerror value and continues removing the device. This results in a\nresource leak. Worse the devm allocated resources are freed and so if a\ncallback of the driver is called later the register mapping is already\ngone which probably results in a crash."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-415"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.9.206",
"versionEndExcluding": "4.10",
"matchCriteriaId": "CB0798B1-CA64-4529-A5AC-7146F59643A2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.14.158",
"versionEndExcluding": "4.14.316",
"matchCriteriaId": "5BCD50CB-C2BD-4613-A0B3-BE4E8A70606B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.19.88",
"versionEndExcluding": "4.19.284",
"matchCriteriaId": "878D0CAD-F0B9-48E6-AC29-67336F3607A4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.3.15",
"versionEndExcluding": "5.4",
"matchCriteriaId": "DEDD31E3-90F8-4A45-89A5-9B27A3B5FC07"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.4.1",
"versionEndExcluding": "5.4.244",
"matchCriteriaId": "0AFC823D-6913-4035-B927-27DB60AEE8F0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.181",
"matchCriteriaId": "F5B1726B-45AA-47F2-9261-6DC963E92248"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.113",
"matchCriteriaId": "F3D5E1B5-AB9D-4ECC-8F11-F3E1BF761E27"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.30",
"matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.3.4",
"matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.4:-:*:*:*:*:*:*",
"matchCriteriaId": "4D70AB13-37BE-4BD3-A652-10191F1642E4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*",
"matchCriteriaId": "38BC6744-7D25-4C02-9966-B224CD071D30"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc2:*:*:*:*:*:*",
"matchCriteriaId": "76061B41-CAE9-4467-BEDE-0FFC7956F2A1"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/83996d317b1deddc85006376082e8886f55aa709",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/9407454a9b18bbeff216e8ecde87ffb2171e9ccf",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b22b514209ff8c4287abb853399890ab97e1b5ca",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/be85912c36ddca3e8b2eef1b5392cd8db6bdb730",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c1bc2870f14e526a01897e14c747a0a0ca125231",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d52a0cca591e899d4e5c8ab19e067b4c6b7d104f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e02d8d5b1602689b98d9b91550a11b9b57baedbe",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f816b9829b19394d318e01953aa3b2721bca040d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+130 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53309",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:36.720",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:46:35.660",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,39 +11,158 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: Fix integer overflow in radeon_cs_parser_init\n\nThe type of size is unsigned, if size is 0x40000000, there will be an\ninteger overflow, size will be zero after size *= sizeof(uint32_t),\nwill cause uninitialized memory to be referenced later"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-190"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.14.324",
"matchCriteriaId": "64C8E5B5-CD94-4DA3-9D05-3554581C99AD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.293",
"matchCriteriaId": "39603052-E341-4096-8535-38D44A60E845"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.255",
"matchCriteriaId": "1379E40A-2AC3-484E-929A-7F46B6C3B521"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.192",
"matchCriteriaId": "9396FFDC-6A0D-44B7-9368-21B456F6D4AE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.123",
"matchCriteriaId": "372C0BAA-44F5-4829-A7B0-E4924B682DA4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.42",
"matchCriteriaId": "6E769E6A-7EEF-4FA8-BF41-6CA1CE537361"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.4.7",
"matchCriteriaId": "60A1A1ED-EA6C-42F6-80D3-3316DC7608C7"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/25e634d7f44eb13113139040e5366bebe48c882f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2e1be420b86980c25a75325e90dfc3fc73126f61",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b8fab6aebdf2115ec2d7bd2f3498d5b911ff351e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c0d7dbc6b7a61a56028118c00af2c8319d44a682",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/cfa9148bafb2d3292b65de1bac79dcca65be2643",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d05ba46134d07e889de7d23cf8503574a22ede09",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e6825b30d37fe89ceb87f926d33d4fad321a331e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f828b681d0cd566f86351c0b913e6cb6ed8c7b9c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+91 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53310",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:36.847",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:46:56.757",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,104 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: axp288_fuel_gauge: Fix external_power_changed race\n\nfuel_gauge_external_power_changed() dereferences info->bat,\nwhich gets sets in axp288_fuel_gauge_probe() like this:\n\n info->bat = devm_power_supply_register(dev, &fuel_gauge_desc, &psy_cfg);\n\nAs soon as devm_power_supply_register() has called device_add()\nthe external_power_changed callback can get called. So there is a window\nwhere fuel_gauge_external_power_changed() may get called while\ninfo->bat has not been set yet leading to a NULL pointer dereference.\n\nFixing this is easy. The external_power_changed callback gets passed\nthe power_supply which will eventually get stored in info->bat,\nso fuel_gauge_external_power_changed() can simply directly use\nthe passed in psy argument which is always valid."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "6.1.31",
"matchCriteriaId": "96ED2287-2842-4A17-B79A-9F1F111B827C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.3.5",
"matchCriteriaId": "34DD94CA-4DA1-41C3-9A9B-92ACD7F4E240"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*",
"matchCriteriaId": "38BC6744-7D25-4C02-9966-B224CD071D30"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc2:*:*:*:*:*:*",
"matchCriteriaId": "76061B41-CAE9-4467-BEDE-0FFC7956F2A1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc3:*:*:*:*:*:*",
"matchCriteriaId": "A717BA5B-D535-46A0-A329-A25FE5CEC588"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0456b912121e45b3ef54abe3135e5dcb541f956c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a636c6ba9ce898207f283271cb28511206ab739b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f8319774d6f1567d6e7d03653174ab0c82c5c66d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+156 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53311",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:36.967",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:47:05.500",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,39 +11,184 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput\n\nDuring unmount process of nilfs2, nothing holds nilfs_root structure after\nnilfs2 detaches its writer in nilfs_detach_log_writer(). Previously,\nnilfs_evict_inode() could cause use-after-free read for nilfs_root if\ninodes are left in \"garbage_list\" and released by nilfs_dispose_list at\nthe end of nilfs_detach_log_writer(), and this bug was fixed by commit\n9b5a04ac3ad9 (\"nilfs2: fix use-after-free bug of nilfs_root in\nnilfs_evict_inode()\").\n\nHowever, it turned out that there is another possibility of UAF in the\ncall path where mark_inode_dirty_sync() is called from iput():\n\nnilfs_detach_log_writer()\n nilfs_dispose_list()\n iput()\n mark_inode_dirty_sync()\n __mark_inode_dirty()\n nilfs_dirty_inode()\n __nilfs_mark_inode_dirty()\n nilfs_load_inode_block() --> causes UAF of nilfs_root struct\n\nThis can happen after commit 0ae45f63d4ef (\"vfs: add support for a\nlazytime mount option\"), which changed iput() to call\nmark_inode_dirty_sync() on its final reference if i_state has I_DIRTY_TIME\nflag and i_nlink is non-zero.\n\nThis issue appears after commit 28a65b49eb53 (\"nilfs2: do not write dirty\ndata after degenerating to read-only\") when using the syzbot reproducer,\nbut the issue has potentially existed before.\n\nFix this issue by adding a \"purging flag\" to the nilfs structure, setting\nthat flag while disposing the \"garbage_list\" and checking it in\n__nilfs_mark_inode_dirty().\n\nUnlike commit 9b5a04ac3ad9 (\"nilfs2: fix use-after-free bug of nilfs_root\nin nilfs_evict_inode()\"), this patch does not rely on ns_writer to\ndetermine whether to skip operations, so as not to break recovery on\nmount. The nilfs_salvage_orphan_logs routine dirties the buffer of\nsalvaged data before attaching the log writer, so changing\n__nilfs_mark_inode_dirty() to skip the operation when ns_writer is NULL\nwill cause recovery write to fail. The purpose of using the cleanup-only\nflag is to allow for narrowing of such conditions."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.0",
"versionEndExcluding": "4.14.323",
"matchCriteriaId": "52A09F09-8B97-4E2D-B5B9-E3E7EB2F0241"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.292",
"matchCriteriaId": "684F195A-516D-43E8-B1F2-9C808AD362DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.254",
"matchCriteriaId": "25D01197-E40D-49C5-AA15-4955E10B7AE6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.191",
"matchCriteriaId": "A7631AF2-4758-4770-9B7D-A68CACF660D0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.127",
"matchCriteriaId": "945AF8F7-5328-4A14-B072-A5740192C9E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.46",
"matchCriteriaId": "D8B8CC90-9492-465C-81D4-10DA3B712286"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.4.11",
"matchCriteriaId": "C36FD9E6-B6D7-4887-8F08-C1F64E139D5C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*",
"matchCriteriaId": "F5608371-157A-4318-8A2E-4104C3467EA1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*",
"matchCriteriaId": "2226A776-DF8C-49E0-A030-0A7853BB018A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*",
"matchCriteriaId": "6F15C659-DF06-455A-9765-0E6DE920F29A"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/11afd67f1b3c28eb216e50a3ca8dbcb69bb71793",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3645510cf926e6af2f4d44899370d7e5331c93bd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/37207240872456fbab44a110bde6640445233963",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5828d5f5dc877dcfdd7b23102e978e2ecfd86d82",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7532ff6edbf5242376b24a95a2fefb59bb653e5a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a3c3b4cbf9b8554120fb230e6516e980c6277487",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d2c539c216cce74837a9cf5804eb205939b82227",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f8654743a0e6909dc634cbfad6db6816f10f3399",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+76 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53312",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:37.117",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:47:12.323",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,89 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix net_dev_start_xmit trace event vs skb_transport_offset()\n\nAfter blamed commit, we must be more careful about using\nskb_transport_offset(), as reminded us by syzbot:\n\nWARNING: CPU: 0 PID: 10 at include/linux/skbuff.h:2868 skb_transport_offset include/linux/skbuff.h:2977 [inline]\nWARNING: CPU: 0 PID: 10 at include/linux/skbuff.h:2868 perf_trace_net_dev_start_xmit+0x89a/0xce0 include/trace/events/net.h:14\nModules linked in:\nCPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted 6.1.30-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023\nWorkqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet\nRIP: 0010:skb_transport_header include/linux/skbuff.h:2868 [inline]\nRIP: 0010:skb_transport_offset include/linux/skbuff.h:2977 [inline]\nRIP: 0010:perf_trace_net_dev_start_xmit+0x89a/0xce0 include/trace/events/net.h:14\nCode: 8b 04 25 28 00 00 00 48 3b 84 24 c0 00 00 00 0f 85 4e 04 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc e8 56 22 01 fd <0f> 0b e9 f6 fc ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 86 f9 ff\nRSP: 0018:ffffc900002bf700 EFLAGS: 00010293\nRAX: ffffffff8485d8ca RBX: 000000000000ffff RCX: ffff888100914280\nRDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff\nRBP: ffffc900002bf818 R08: ffffffff8485d5b6 R09: fffffbfff0f8fb5e\nR10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110217d8f67\nR13: ffff88810bec7b3a R14: dffffc0000000000 R15: dffffc0000000000\nFS: 0000000000000000(0000) GS:ffff8881f6a00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f96cf6d52f0 CR3: 000000012224c000 CR4: 0000000000350ef0\nCall Trace:\n<TASK>\n[<ffffffff84715e35>] trace_net_dev_start_xmit include/trace/events/net.h:14 [inline]\n[<ffffffff84715e35>] xmit_one net/core/dev.c:3643 [inline]\n[<ffffffff84715e35>] dev_hard_start_xmit+0x705/0x980 net/core/dev.c:3660\n[<ffffffff8471a232>] __dev_queue_xmit+0x16b2/0x3370 net/core/dev.c:4324\n[<ffffffff85416493>] dev_queue_xmit include/linux/netdevice.h:3030 [inline]\n[<ffffffff85416493>] batadv_send_skb_packet+0x3f3/0x680 net/batman-adv/send.c:108\n[<ffffffff85416744>] batadv_send_broadcast_skb+0x24/0x30 net/batman-adv/send.c:127\n[<ffffffff853bc52a>] batadv_iv_ogm_send_to_if net/batman-adv/bat_iv_ogm.c:393 [inline]\n[<ffffffff853bc52a>] batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:421 [inline]\n[<ffffffff853bc52a>] batadv_iv_send_outstanding_bat_ogm_packet+0x69a/0x840 net/batman-adv/bat_iv_ogm.c:1701\n[<ffffffff8151023c>] process_one_work+0x8ac/0x1170 kernel/workqueue.c:2289\n[<ffffffff81511938>] worker_thread+0xaa8/0x12d0 kernel/workqueue.c:2436"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "6.1.39",
"matchCriteriaId": "84700E9E-E09F-4B40-8370-141BD7FF69FB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.4.4",
"matchCriteriaId": "A91BC267-63EE-413E-A6EF-6B96C2A278D1"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/58f9e88eb247263c74383b4ee8858abac15cdbe0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ced61418f46993d571385812bafed3a7d4ab6918",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f88fcb1d7d961b4b402d675109726f94db87571c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+142 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53313",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:37.233",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:47:30.267",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,43 +11,173 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid10: fix wrong setting of max_corr_read_errors\n\nThere is no input check when echo md/max_read_errors and overflow might\noccur. Add check of input number."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.33",
"versionEndExcluding": "4.14.322",
"matchCriteriaId": "5ED9B08F-CA6D-4544-B95A-2B1CA26C9D8D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.291",
"matchCriteriaId": "D2D2CA9F-4CC4-4AF5-8C6D-E58415AB782E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.251",
"matchCriteriaId": "7FA663C4-CA72-4B5A-8592-7354D978F58E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.188",
"matchCriteriaId": "43CAE50A-4A6C-488E-813C-F8DB77C13C8B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.121",
"matchCriteriaId": "EC77775B-EC31-4966-966C-1286C02B2A85"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.39",
"matchCriteriaId": "9BD1D4A1-304D-4187-8178-6D7C0050B1AF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.3.13",
"matchCriteriaId": "95CB4836-7F5D-4C20-B025-8E046EC87B78"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.4",
"versionEndExcluding": "6.4.4",
"matchCriteriaId": "6AB81046-CB69-4115-924C-963B37C41385"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/025fde32fb957a5c271711bc66841f817ff5f299",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/05d10428e8dffed0bac2502f34151729fc189cd3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/31c805a44b7569ca1017a4714385182d98bba212",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3c76920e547d4b931bed758bad83fd658dd88b4e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/74050a3fdd4aecfd2cbf74d3c145812ab2744375",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/aef6e98eb772594edd4399625e4e1bbe45971fa1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b1d8f38310bce3282374983b229d94edbaf1e570",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e83cb411aa1c6c9617db9329897f4506ba9e9b9d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f8b20a405428803bd9881881d8242c9d72c6b2b2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+131 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53314",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:37.360",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:24:11.990",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,39 +11,159 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev/ep93xx-fb: Do not assign to struct fb_info.dev\n\nDo not assing the Linux device to struct fb_info.dev. The call to\nregister_framebuffer() initializes the field to the fbdev device.\nDrivers should not override its value.\n\nFixes a bug where the driver incorrectly decreases the hardware\ndevice's reference counter and leaks the fbdev device.\n\nv2:\n\t* add Fixes tag (Dan)"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.32",
"versionEndExcluding": "4.14.326",
"matchCriteriaId": "8CCD729D-2240-4059-B0B9-CD3195C6094C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.295",
"matchCriteriaId": "D419C7D6-F33D-4EF8-8950-1CB5DDF6A55D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.257",
"matchCriteriaId": "834BD148-28EC-43A4-A4F5-458124A1E39F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.195",
"matchCriteriaId": "C385B650-53DB-4BFB-83D1-1D8FADF653EF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.132",
"matchCriteriaId": "5913891D-409A-4EEC-9231-F2EF5A493BC7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.54",
"matchCriteriaId": "7353B9B4-AFFC-45DE-840E-1A7D2B00E7AD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.5.4",
"matchCriteriaId": "CA8C8B88-AF36-445D-A228-AD78F3615373"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0517fc5a71333b315164736bbd32608894fbb872",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/1c6ff2a7c593db851f23e31ace2baf557ea9d0ff",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/309c27162afea79b3c7f8747bb650faf6923b639",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4aade6c9100a3537788b6a9c7ac481037d19efdf",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8ffa40ff64aa43a9a28fcf209b48d86a3e0f4972",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f83c1b13f8154e0284448912756d0a351a1a602a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f90a0e5265b60cdd3c77990e8105f79aa2fac994",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ffdf2b020db717853167391a3a8d912e13428fa6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+98 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53315",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:37.480",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:23:45.870",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,27 +11,117 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: Fix SKB corruption in REO destination ring\n\nWhile running traffics for a long time, randomly an RX descriptor\nfilled with value \"0\" from REO destination ring is received.\nThis descriptor which is invalid causes the wrong SKB (SKB stored in\nthe IDR lookup with buffer id \"0\") to be fetched which in turn\ncauses SKB memory corruption issue and the same leads to crash\nafter some time.\n\nChanged the start id for idr allocation to \"1\" and the buffer id \"0\"\nis reserved for error validation. Introduced Sanity check to validate\nthe descriptor, before processing the SKB.\n\nCrash Signature :\n\nUnable to handle kernel paging request at virtual address 3f004900\nPC points to \"b15_dma_inv_range+0x30/0x50\"\nLR points to \"dma_cache_maint_page+0x8c/0x128\".\nThe Backtrace obtained is as follows:\n[<8031716c>] (b15_dma_inv_range) from [<80313a4c>] (dma_cache_maint_page+0x8c/0x128)\n[<80313a4c>] (dma_cache_maint_page) from [<80313b90>] (__dma_page_dev_to_cpu+0x28/0xcc)\n[<80313b90>] (__dma_page_dev_to_cpu) from [<7fb5dd68>] (ath11k_dp_process_rx+0x1e8/0x4a4 [ath11k])\n[<7fb5dd68>] (ath11k_dp_process_rx [ath11k]) from [<7fb53c20>] (ath11k_dp_service_srng+0xb0/0x2ac [ath11k])\n[<7fb53c20>] (ath11k_dp_service_srng [ath11k]) from [<7f67bba4>] (ath11k_pci_ext_grp_napi_poll+0x1c/0x78 [ath11k_pci])\n[<7f67bba4>] (ath11k_pci_ext_grp_napi_poll [ath11k_pci]) from [<807d5cf4>] (__napi_poll+0x28/0xb8)\n[<807d5cf4>] (__napi_poll) from [<807d5f28>] (net_rx_action+0xf0/0x280)\n[<807d5f28>] (net_rx_action) from [<80302148>] (__do_softirq+0xd0/0x280)\n[<80302148>] (__do_softirq) from [<80320408>] (irq_exit+0x74/0xd4)\n[<80320408>] (irq_exit) from [<803638a4>] (__handle_domain_irq+0x90/0xb4)\n[<803638a4>] (__handle_domain_irq) from [<805bedec>] (gic_handle_irq+0x58/0x90)\n[<805bedec>] (gic_handle_irq) from [<80301a78>] (__irq_svc+0x58/0x8c)\n\nTested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.6",
"versionEndExcluding": "5.10.181",
"matchCriteriaId": "F1F238F8-F08D-489D-9C86-1B74CBB71CFE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.113",
"matchCriteriaId": "F3D5E1B5-AB9D-4ECC-8F11-F3E1BF761E27"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.30",
"matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.3.4",
"matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/068fd06148fbf0af95bb08dc77cff34ee679fdbc",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3d3f8fe01a01d94a17fe1ae0d2e894049a972717",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/67459491f78146bcf7d93596e5b709d063dff5d8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/866921dc06b94df91acfcf9359b57da943ed99b3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f9fff67d2d7ca6fa8066132003a3deef654c55b1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+109 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53316",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:37.600",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:23:37.097",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,31 +11,131 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/dp: Free resources after unregistering them\n\nThe DP component's unbind operation walks through the submodules to\nunregister and clean things up. But if the unbind happens because the DP\ncontroller itself is being removed, all the memory for those submodules\nhas just been freed.\n\nChange the order of these operations to avoid the many use-after-free\nthat otherwise happens in this code path.\n\nPatchwork: https://patchwork.freedesktop.org/patch/542166/"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.10",
"versionEndExcluding": "5.10.188",
"matchCriteriaId": "2D01EB1B-F702-46D9-8474-32673E5A1006"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.121",
"matchCriteriaId": "EC77775B-EC31-4966-966C-1286C02B2A85"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.39",
"matchCriteriaId": "9BD1D4A1-304D-4187-8178-6D7C0050B1AF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.3.13",
"matchCriteriaId": "95CB4836-7F5D-4C20-B025-8E046EC87B78"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.4",
"versionEndExcluding": "6.4.4",
"matchCriteriaId": "6AB81046-CB69-4115-924C-963B37C41385"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/3c3f3d35f5e05c468b048eb42a4f8c62c6655692",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4e9f1a2367aea7d61f6781213e25313cd983b0d7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5c3278db06e332fdc14f3f297499fb88ded264d2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c67a55f7cc8d767d624235bf1bcd0947e56abe0f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ca47d0dc00968358c136a1847cfed550cedfd1b5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fa0048a4b1fa7a50c8b0e514f5b428abdf69a6f8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+135 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53317",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:37.713",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:23:28.940",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,39 +11,163 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix WARNING in mb_find_extent\n\nSyzbot found the following issue:\n\nEXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!\nEXT4-fs (loop0): orphan cleanup on readonly fs\n------------[ cut here ]------------\nWARNING: CPU: 1 PID: 5067 at fs/ext4/mballoc.c:1869 mb_find_extent+0x8a1/0xe30\nModules linked in:\nCPU: 1 PID: 5067 Comm: syz-executor307 Not tainted 6.2.0-rc1-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022\nRIP: 0010:mb_find_extent+0x8a1/0xe30 fs/ext4/mballoc.c:1869\nRSP: 0018:ffffc90003c9e098 EFLAGS: 00010293\nRAX: ffffffff82405731 RBX: 0000000000000041 RCX: ffff8880783457c0\nRDX: 0000000000000000 RSI: 0000000000000041 RDI: 0000000000000040\nRBP: 0000000000000040 R08: ffffffff82405723 R09: ffffed10053c9402\nR10: ffffed10053c9402 R11: 1ffff110053c9401 R12: 0000000000000000\nR13: ffffc90003c9e538 R14: dffffc0000000000 R15: ffffc90003c9e2cc\nFS: 0000555556665300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000056312f6796f8 CR3: 0000000022437000 CR4: 00000000003506e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n <TASK>\n ext4_mb_complex_scan_group+0x353/0x1100 fs/ext4/mballoc.c:2307\n ext4_mb_regular_allocator+0x1533/0x3860 fs/ext4/mballoc.c:2735\n ext4_mb_new_blocks+0xddf/0x3db0 fs/ext4/mballoc.c:5605\n ext4_ext_map_blocks+0x1868/0x6880 fs/ext4/extents.c:4286\n ext4_map_blocks+0xa49/0x1cc0 fs/ext4/inode.c:651\n ext4_getblk+0x1b9/0x770 fs/ext4/inode.c:864\n ext4_bread+0x2a/0x170 fs/ext4/inode.c:920\n ext4_quota_write+0x225/0x570 fs/ext4/super.c:7105\n write_blk fs/quota/quota_tree.c:64 [inline]\n get_free_dqblk+0x34a/0x6d0 fs/quota/quota_tree.c:130\n do_insert_tree+0x26b/0x1aa0 fs/quota/quota_tree.c:340\n do_insert_tree+0x722/0x1aa0 fs/quota/quota_tree.c:375\n do_insert_tree+0x722/0x1aa0 fs/quota/quota_tree.c:375\n do_insert_tree+0x722/0x1aa0 fs/quota/quota_tree.c:375\n dq_insert_tree fs/quota/quota_tree.c:401 [inline]\n qtree_write_dquot+0x3b6/0x530 fs/quota/quota_tree.c:420\n v2_write_dquot+0x11b/0x190 fs/quota/quota_v2.c:358\n dquot_acquire+0x348/0x670 fs/quota/dquot.c:444\n ext4_acquire_dquot+0x2dc/0x400 fs/ext4/super.c:6740\n dqget+0x999/0xdc0 fs/quota/dquot.c:914\n __dquot_initialize+0x3d0/0xcf0 fs/quota/dquot.c:1492\n ext4_process_orphan+0x57/0x2d0 fs/ext4/orphan.c:329\n ext4_orphan_cleanup+0xb60/0x1340 fs/ext4/orphan.c:474\n __ext4_fill_super fs/ext4/super.c:5516 [inline]\n ext4_fill_super+0x81cd/0x8700 fs/ext4/super.c:5644\n get_tree_bdev+0x400/0x620 fs/super.c:1282\n vfs_get_tree+0x88/0x270 fs/super.c:1489\n do_new_mount+0x289/0xad0 fs/namespace.c:3145\n do_mount fs/namespace.c:3488 [inline]\n __do_sys_mount fs/namespace.c:3697 [inline]\n __se_sys_mount+0x2d3/0x3c0 fs/namespace.c:3674\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nAdd some debug information:\nmb_find_extent: mb_find_extent block=41, order=0 needed=64 next=0 ex=0/41/1@3735929054 64 64 7\nblock_bitmap: ff 3f 0c 00 fc 01 00 00 d2 3d 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n\nAcctually, blocks per group is 64, but block bitmap indicate at least has\n128 blocks. Now, ext4_validate_block_bitmap() didn't check invalid block's\nbitmap if set.\nTo resolve above issue, add check like fsck \"Padding at end of block bitmap is\nnot set\"."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.19.283",
"matchCriteriaId": "4CD72EDE-728E-485C-B222-F269B229C33E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.243",
"matchCriteriaId": "E54ACEF5-C8C1-4266-85FC-7D513FFD1DEC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.180",
"matchCriteriaId": "78422AC3-CC89-479E-B4BC-62381D8F3564"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.112",
"matchCriteriaId": "8612AB29-948C-4D53-84D9-6CA2E4A8B015"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.29",
"matchCriteriaId": "D48F00B5-5471-4D1B-BE47-1DAB8122F35A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.2.16",
"matchCriteriaId": "F92F7C8E-A977-4255-B1B6-D1908D8B408F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.3",
"versionEndExcluding": "6.3.3",
"matchCriteriaId": "6D96A7FC-D812-4458-AEA8-3FF4023E6B75"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*",
"matchCriteriaId": "38BC6744-7D25-4C02-9966-B224CD071D30"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/1b90fbc7590124c57a2e590de7fd07eba26606f1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5d356d902e9d5b1aaaaf2326d365340fa8a90c1b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/775b00ba23f6f916fe2ac60c5ff7fd0fe4f28d0d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d55e76e11592a1d18a179c7fd34ca1b52632beb3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/dba62fa84a8eac44a53a2862de8a40e5bdfa0ae3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/dd45e536f47a82e0a405f9a4b6c7ceb367171ee9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e4d503c956a744cb59e509ca5f134cfad423c7a3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fa08a7b61dff8a4df11ff1e84abfc214b487caf7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+130 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53318",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:37.833",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:22:40.880",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,39 +11,158 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrecordmcount: Fix memory leaks in the uwrite function\n\nCommon realloc mistake: 'file_append' nulled but not freed upon failure"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.14.316",
"matchCriteriaId": "A0661905-1FBF-4C8F-8C8F-9573FB6BF8B8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.284",
"matchCriteriaId": "9112EE64-11F4-46DB-A041-95118F20F81B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.244",
"matchCriteriaId": "79F47095-8BA3-495A-AED3-2CCA5F2838E6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.181",
"matchCriteriaId": "F5B1726B-45AA-47F2-9261-6DC963E92248"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.113",
"matchCriteriaId": "F3D5E1B5-AB9D-4ECC-8F11-F3E1BF761E27"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.30",
"matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.3.4",
"matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/25c9b185f121812cbc215fdaa1192c6b9025b428",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/2d9ca5f62f2ba160ff9c9be4adf401c46c04edef",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3ed95a6f6c646e8bb15c354536e0ab10e8f39c08",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/444ec005404cead222ebce2561a9451c9ee5ad89",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/895130e63c93926f07caf5db286b97bd27b81de9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/bd39f68a309a947670379bf9a39b16c584f86ddb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fa359d068574d29e7d2f0fdd0ebe4c6a12b5cfb9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ff70ad9159fbb566b2c15724f44207e8deccd527",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+75 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53319",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:37.947",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:22:28.760",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,85 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Handle kvm_arm_init failure correctly in finalize_pkvm\n\nCurrently there is no synchronisation between finalize_pkvm() and\nkvm_arm_init() initcalls. The finalize_pkvm() proceeds happily even if\nkvm_arm_init() fails resulting in the following warning on all the CPUs\nand eventually a HYP panic:\n\n | kvm [1]: IPA Size Limit: 48 bits\n | kvm [1]: Failed to init hyp memory protection\n | kvm [1]: error initializing Hyp mode: -22\n |\n | <snip>\n |\n | WARNING: CPU: 0 PID: 0 at arch/arm64/kvm/pkvm.c:226 _kvm_host_prot_finalize+0x30/0x50\n | Modules linked in:\n | CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.4.0 #237\n | Hardware name: FVP Base RevC (DT)\n | pstate: 634020c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)\n | pc : _kvm_host_prot_finalize+0x30/0x50\n | lr : __flush_smp_call_function_queue+0xd8/0x230\n |\n | Call trace:\n | _kvm_host_prot_finalize+0x3c/0x50\n | on_each_cpu_cond_mask+0x3c/0x6c\n | pkvm_drop_host_privileges+0x4c/0x78\n | finalize_pkvm+0x3c/0x5c\n | do_one_initcall+0xcc/0x240\n | do_initcall_level+0x8c/0xac\n | do_initcalls+0x54/0x94\n | do_basic_setup+0x1c/0x28\n | kernel_init_freeable+0x100/0x16c\n | kernel_init+0x20/0x1a0\n | ret_from_fork+0x10/0x20\n | Failed to finalize Hyp protection: -22\n | dtb=fvp-base-revc.dtb\n | kvm [95]: nVHE hyp BUG at: arch/arm64/kvm/hyp/nvhe/mem_protect.c:540!\n | kvm [95]: nVHE call trace:\n | kvm [95]: [<ffff800081052984>] __kvm_nvhe_hyp_panic+0xac/0xf8\n | kvm [95]: [<ffff800081059644>] __kvm_nvhe_handle_host_mem_abort+0x1a0/0x2ac\n | kvm [95]: [<ffff80008105511c>] __kvm_nvhe_handle_trap+0x4c/0x160\n | kvm [95]: [<ffff8000810540fc>] __kvm_nvhe___skip_pauth_save+0x4/0x4\n | kvm [95]: ---[ end nVHE call trace ]---\n | kvm [95]: Hyp Offset: 0xfffe8db00ffa0000\n | Kernel panic - not syncing: HYP panic:\n | PS:a34023c9 PC:0000f250710b973c ESR:00000000f2000800\n | FAR:ffff000800cb00d0 HPFAR:000000000880cb00 PAR:0000000000000000\n | VCPU:0000000000000000\n | CPU: 3 PID: 95 Comm: kworker/u16:2 Tainted: G W 6.4.0 #237\n | Hardware name: FVP Base RevC (DT)\n | Workqueue: rpciod rpc_async_schedule\n | Call trace:\n | dump_backtrace+0xec/0x108\n | show_stack+0x18/0x2c\n | dump_stack_lvl+0x50/0x68\n | dump_stack+0x18/0x24\n | panic+0x138/0x33c\n | nvhe_hyp_panic_handler+0x100/0x184\n | new_slab+0x23c/0x54c\n | ___slab_alloc+0x3e4/0x770\n | kmem_cache_alloc_node+0x1f0/0x278\n | __alloc_skb+0xdc/0x294\n | tcp_stream_alloc_skb+0x2c/0xf0\n | tcp_sendmsg_locked+0x3d0/0xda4\n | tcp_sendmsg+0x38/0x5c\n | inet_sendmsg+0x44/0x60\n | sock_sendmsg+0x1c/0x34\n | xprt_sock_sendmsg+0xdc/0x274\n | xs_tcp_send_request+0x1ac/0x28c\n | xprt_transmit+0xcc/0x300\n | call_transmit+0x78/0x90\n | __rpc_execute+0x114/0x3d8\n | rpc_async_schedule+0x28/0x48\n | process_one_work+0x1d8/0x314\n | worker_thread+0x248/0x474\n | kthread+0xfc/0x184\n | ret_from_fork+0x10/0x20\n | SMP: stopping secondary CPUs\n | Kernel Offset: 0x57c5cb460000 from 0xffff800080000000\n | PHYS_OFFSET: 0x80000000\n | CPU features: 0x00000000,1035b7a3,ccfe773f\n | Memory Limit: none\n | ---[ end Kernel panic - not syncing: HYP panic:\n | PS:a34023c9 PC:0000f250710b973c ESR:00000000f2000800\n | FAR:ffff000800cb00d0 HPFAR:000000000880cb00 PAR:0000000000000000\n | VCPU:0000000000000000 ]---\n\nFix it by checking for the successfull initialisation of kvm_arm_init()\nin finalize_pkvm() before proceeding any futher."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.4",
"versionEndExcluding": "6.4.8",
"matchCriteriaId": "645579C2-235B-4FCC-A399-CECF5423170F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*",
"matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/91450dec0445f4d12f960ba68d8d05c3cb2ab5b8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fa729bc7c9c8c17a2481358c841ef8ca920485d3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+76 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53320",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T17:15:38.050",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:15:46.453",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,89 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info()\n\nThe function mpi3mr_get_all_tgt_info() has four issues:\n\n1) It calculates valid entry length in alltgt_info assuming the header part\n of the struct mpi3mr_device_map_info would equal to sizeof(u32). The\n correct size is sizeof(u64).\n\n2) When it calculates the valid entry length kern_entrylen, it excludes one\n entry by subtracting 1 from num_devices.\n\n3) It copies num_device by calling memcpy(). Substitution is enough.\n\n4) It does not specify the calculated length to sg_copy_from_buffer().\n Instead, it specifies the payload length which is larger than the\n alltgt_info size. It causes \"BUG: KASAN: slab-out-of-bounds\".\n\nFix the issues by using the correct header size, removing the subtraction\nfrom num_devices, replacing the memcpy() with substitution and specifying\nthe correct length to sg_copy_from_buffer()."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.19",
"versionEndExcluding": "6.1.16",
"matchCriteriaId": "A9E5492C-0786-4BD9-A043-DBAA6E28BFE6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.2.3",
"matchCriteriaId": "88C67289-22AD-4CA9-B202-5F5A80E5BA4B"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/2f3d3fa5b8ed7d3b147478f42b00b468eeb1ecd2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8ba997b22f2cd5d29aad8c39f6201f7608ed0c04",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/fb428a2005fc1260d18b989cc5199f281617f44d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
@@ -0,0 +1,90 @@
{
"id": "CVE-2024-51999",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T21:15:49.100",
"lastModified": "2025-12-01T21:15:49.100",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Express.js minimalist web framework for node. Prior to 5.2.0 and 4.22.0, when using the extended query parser in express ('query parser': 'extended'), the request.query object inherits all object prototype properties, but these properties can be overwritten by query string parameter keys that match the property names. This vulnerability is fixed in 5.2.0 and 4.22.0."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 2.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "UNREPORTED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-915"
}
]
}
],
"references": [
{
"url": "https://github.com/expressjs/express/commit/2f64f68c37c64ae333e41ff38032d21860f22255",
"source": "[email protected]"
},
{
"url": "https://github.com/expressjs/express/releases/tag/4.22.0",
"source": "[email protected]"
},
{
"url": "https://github.com/expressjs/express/releases/tag/v5.2.0",
"source": "[email protected]"
},
{
"url": "https://github.com/expressjs/express/security/advisories/GHSA-pj86-cfqh-vqx6",
"source": "[email protected]"
}
]
}
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-11561",
"sourceIdentifier": "[email protected]",
"published": "2025-10-09T14:15:54.447",
"lastModified": "2025-11-27T12:15:46.180",
"lastModified": "2025-12-01T22:15:47.440",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -108,6 +108,10 @@
"url": "https://access.redhat.com/errata/RHSA-2025:21795",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:22529",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2025-11561",
"source": "[email protected]"
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-12183",
"sourceIdentifier": "103e4ec9-0a87-450b-af77-479448ddef11",
"published": "2025-11-28T16:15:51.823",
"lastModified": "2025-12-01T15:39:33.110",
"lastModified": "2025-12-01T21:15:49.800",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -77,6 +77,10 @@
{
"url": "https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-12183",
"source": "103e4ec9-0a87-450b-af77-479448ddef11"
},
{
"url": "http://www.openwall.com/lists/oss-security/2025/12/01/5",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
]
}
+11 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-13786",
"sourceIdentifier": "[email protected]",
"published": "2025-11-30T09:15:45.480",
"lastModified": "2025-12-01T15:39:33.110",
"lastModified": "2025-12-01T21:15:49.950",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,14 @@
{
"url": "https://vuldb.com/?submit.689523",
"source": "[email protected]"
},
{
"url": "https://github.com/TiKi-r/CVE-Report/blob/main/WtcmsRCE.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
},
{
"url": "https://github.com/TiKi-r/CVE-Report/blob/main/WtcmsRCE.md#3-proof-of-concept-poc",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-32988",
"sourceIdentifier": "[email protected]",
"published": "2025-07-10T08:15:24.223",
"lastModified": "2025-11-06T23:15:36.797",
"lastModified": "2025-12-01T22:15:47.790",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -158,6 +158,10 @@
"url": "https://access.redhat.com/errata/RHSA-2025:19088",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:22529",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2025-32988",
"source": "[email protected]",
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-32989",
"sourceIdentifier": "[email protected]",
"published": "2025-07-10T08:15:24.430",
"lastModified": "2025-11-06T23:15:36.993",
"lastModified": "2025-12-01T22:15:48.027",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -133,6 +133,10 @@
"url": "https://access.redhat.com/errata/RHSA-2025:19088",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:22529",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2025-32989",
"source": "[email protected]",
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-32990",
"sourceIdentifier": "[email protected]",
"published": "2025-07-10T10:15:33.060",
"lastModified": "2025-11-06T23:15:37.137",
"lastModified": "2025-12-01T22:15:48.200",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -157,6 +157,10 @@
"url": "https://access.redhat.com/errata/RHSA-2025:19088",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:22529",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2025-32990",
"source": "[email protected]",
+80 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-39834",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T14:15:51.717",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T22:03:46.933",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,15 +11,90 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow\n\nWhen an invalid stc_type is provided, the function allocates memory for\nshared_stc but jumps to unlock_and_out without freeing it, causing a\nmemory leak.\n\nFix by jumping to free_shared_stc label instead to ensure proper cleanup."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.12",
"versionEndExcluding": "6.16.5",
"matchCriteriaId": "37954284-5844-43A0-988C-A8928FBC9ADF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*",
"matchCriteriaId": "327D22EF-390B-454C-BD31-2ED23C998A1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*",
"matchCriteriaId": "C730CD9A-D969-4A8E-9522-162AAF7C0EE9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*",
"matchCriteriaId": "39982C4B-716E-4B2F-8196-FA301F47807D"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/051fd8576a2e4e95d5870c5c9f8679c5b16882e4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a630f83592cdad1253523a1b760cfe78fef6cd9c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+91 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-39836",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-09-16T14:15:51.983",
"lastModified": "2025-09-17T14:18:55.093",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T21:59:35.697",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -11,19 +11,104 @@
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi: stmm: Fix incorrect buffer allocation method\n\nThe communication buffer allocated by setup_mm_hdr() is later on passed\nto tee_shm_register_kernel_buf(). The latter expects those buffers to be\ncontiguous pages, but setup_mm_hdr() just uses kmalloc(). That can cause\nvarious corruptions or BUGs, specifically since commit 9aec2fb0fd5e\n(\"slab: allocate frozen pages\"), though it was broken before as well.\n\nFix this by using alloc_pages_exact() instead of kmalloc()."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.8",
"versionEndExcluding": "6.12.45",
"matchCriteriaId": "B2466775-B7E8-4219-A095-F4111F872F29"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.13",
"versionEndExcluding": "6.16.5",
"matchCriteriaId": "EB781080-7001-4FA1-B388-517FFEFBC73E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*",
"matchCriteriaId": "327D22EF-390B-454C-BD31-2ED23C998A1C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*",
"matchCriteriaId": "C730CD9A-D969-4A8E-9522-162AAF7C0EE9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*",
"matchCriteriaId": "39982C4B-716E-4B2F-8196-FA301F47807D"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/630c0e6064daf84f17aad1a7d9ca76b562e3fe47",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/77ff27ff0e4529a003c8a1c2492c111968c378d3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c5e81e672699e0c5557b2b755cc8f7a69aa92bff",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}
+54 -10
View File
@@ -1,14 +1,14 @@
{
"id": "CVE-2025-48709",
"sourceIdentifier": "[email protected]",
"sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725",
"published": "2025-08-07T20:15:28.117",
"lastModified": "2025-10-27T16:15:40.490",
"lastModified": "2025-12-01T22:15:48.363",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in BMC Control-M 9.0.21.300. When Control-M Server has a database connection, it runs DBUStatus.exe frequently, which then calls dbu_connection_details.vbs with the username, password, database hostname, and port written in cleartext, which can be seen in event and process logs in two separate locations."
"value": "BMC Control-M/Server 9.0.21.300 displays cleartext database credentials in process lists and logs. An authenticated attacker with shell access could observe these credentials and use them to log in to the database server. For example, when Control-M/Server on Windows has a database connection on, it runs 'DBUStatus.exe' frequently, which then calls 'dbu_connection_details.vbs' with the username, password, database hostname, and port written in cleartext, which can be seen in event and process logs in two separate locations. Fixed in PACTV.9.0.21.307."
},
{
"lang": "es",
@@ -16,9 +16,53 @@
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "9119a7d8-5eab-497f-8521-727c672e3725",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"source": "9119a7d8-5eab-497f-8521-727c672e3725",
"type": "Secondary",
"cvssData": {
"version": "3.1",
@@ -41,9 +85,13 @@
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"source": "9119a7d8-5eab-497f-8521-727c672e3725",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-214"
},
{
"lang": "en",
"value": "CWE-532"
@@ -52,13 +100,9 @@
}
],
"references": [
{
"url": "https://bmc.com",
"source": "[email protected]"
},
{
"url": "https://docs.bmc.com/xwiki/bin/view/Control-M-Orchestration/Control-M/ctm9021/Patches/Control-M-Server-PACTV-9-0-21-307/",
"source": "[email protected]"
"source": "9119a7d8-5eab-497f-8521-727c672e3725"
}
]
}
+13 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-48980",
"sourceIdentifier": "[email protected]",
"published": "2025-10-31T00:15:36.327",
"lastModified": "2025-11-04T15:41:56.843",
"lastModified": "2025-12-01T21:15:50.250",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -35,6 +35,18 @@
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-565"
}
]
}
],
"references": [
{
"url": "https://hackerone.com/reports/3253725",
+12 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48982",
"sourceIdentifier": "[email protected]",
"published": "2025-10-31T00:15:36.437",
"lastModified": "2025-11-13T14:47:08.707",
"vulnStatus": "Analyzed",
"lastModified": "2025-12-01T21:15:50.380",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -67,6 +67,16 @@
"value": "NVD-CWE-noinfo"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-269"
}
]
}
],
"configurations": [
+12 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48983",
"sourceIdentifier": "[email protected]",
"published": "2025-10-31T00:15:36.553",
"lastModified": "2025-11-11T02:07:03.383",
"vulnStatus": "Analyzed",
"lastModified": "2025-12-01T21:15:50.527",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -45,6 +45,16 @@
"value": "NVD-CWE-noinfo"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"configurations": [
+13 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-48985",
"sourceIdentifier": "[email protected]",
"published": "2025-11-07T01:15:36.567",
"lastModified": "2025-11-12T16:20:22.257",
"lastModified": "2025-12-01T21:15:50.673",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -35,6 +35,18 @@
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"references": [
{
"url": "https://github.com/vercel/ai/commit/930399bb9839a8baf3d349614106d78268775eed",
+13 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-50736",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T14:15:43.393",
"lastModified": "2025-11-04T16:16:00.453",
"lastModified": "2025-12-01T21:15:50.820",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -35,6 +35,18 @@
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-601"
}
]
}
],
"references": [
{
"url": "https://github.com/fai1424/Vulnerability-Research/tree/main/CVE-2025-50736",
+13 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-52662",
"sourceIdentifier": "[email protected]",
"published": "2025-11-07T01:15:36.803",
"lastModified": "2025-11-12T16:20:22.257",
"lastModified": "2025-12-01T21:15:51.000",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -35,6 +35,18 @@
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/nuxt/devtools/commit/7cadbbe9",
+13 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-52667",
"sourceIdentifier": "[email protected]",
"published": "2025-11-20T20:16:22.830",
"lastModified": "2025-11-21T15:13:13.800",
"lastModified": "2025-12-01T21:15:51.130",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -35,6 +35,18 @@
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://hackerone.com/reports/3399809",
@@ -0,0 +1,94 @@
{
"id": "CVE-2025-55749",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T21:15:51.617",
"lastModified": "2025-12-01T21:15:51.617",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "XWiki is an open-source wiki software platform. From 16.7.0 to 16.10.11, 17.4.4, or 17.7.0, in an instance which is using the XWiki Jetty package (XJetty), a context is exposed to statically access any file located in the webapp/ folder. It allows accessing files which might contains credentials. Fixed in 16.10.11, 17.4.4, and 17.7.0."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"references": [
{
"url": "https://github.com/xwiki/xwiki-platform/commit/42fb063749dd88cc78196f72d7318b7179285ebd",
"source": "[email protected]"
},
{
"url": "https://github.com/xwiki/xwiki-platform/commit/99a04a0e2143583f5154a43e02174155da7e8e10",
"source": "[email protected]"
},
{
"url": "https://github.com/xwiki/xwiki-platform/compare/8b68d8a70b43f25391b3ee48477d7eb71b95cf4b...99a04a0e2143583f5154a43e02174155da7e8e10",
"source": "[email protected]"
},
{
"url": "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-53gx-j3p6-2rw9",
"source": "[email protected]"
},
{
"url": "https://jira.xwiki.org/browse/XWIKI-23438",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-58044",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T21:15:51.807",
"lastModified": "2025-12-01T21:15:51.807",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. This vulnerability is fixed in v3.10.19 and v4.10.5."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "LOW",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-601"
}
]
}
],
"references": [
{
"url": "https://github.com/jumpserver/jumpserver/commit/36ae076cb021f16d2053a63651bc16d15a3ed53b",
"source": "[email protected]"
},
{
"url": "https://github.com/jumpserver/jumpserver/security/advisories/GHSA-h762-mj7p-jwjq",
"source": "[email protected]"
}
]
}
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-63523",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T15:15:50.973",
"lastModified": "2025-12-01T15:39:33.110",
"lastModified": "2025-12-01T21:15:51.980",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as \"read-only.\" An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"references": [
{
"url": "https://github.com/kiwi865/CVEs/blob/main/CVE-2025-63523.md",
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-6395",
"sourceIdentifier": "[email protected]",
"published": "2025-07-10T16:15:25.110",
"lastModified": "2025-11-07T00:15:55.290",
"lastModified": "2025-12-01T22:15:51.513",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -80,6 +80,10 @@
"url": "https://access.redhat.com/errata/RHSA-2025:19088",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:22529",
"source": "[email protected]"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2025-6395",
"source": "[email protected]"
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-65621",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T21:15:52.193",
"lastModified": "2025-12-01T21:15:52.193",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Snipe-IT before 8.3.4 allows stored XSS, allowing a low-privileged authenticated user to inject JavaScript that executes in an administrator's session, enabling privilege escalation."
}
],
"metrics": {},
"references": [
{
"url": "http://snipeitapp.com",
"source": "[email protected]"
},
{
"url": "https://github.com/firef0x00/vulnerability-research/tree/main/CVE-2025-65621",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-65622",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:48.697",
"lastModified": "2025-12-01T22:15:48.697",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Snipe-IT before 8.3.4 allows stored XSS via the Locations \"Country\" field, enabling a low-privileged authenticated user to inject JavaScript that executes in another user's session."
}
],
"metrics": {},
"references": [
{
"url": "http://snipeitapp.com",
"source": "[email protected]"
},
{
"url": "https://github.com/firef0x00/vulnerability-research/tree/main/CVE-2025-65622",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-65840",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T21:15:52.320",
"lastModified": "2025-12-01T21:15:52.320",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery (CSRF) in the CkEditorAdminController."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/Hyperkopite/PublicCMS_Vulns/blob/main/CSRF_1.md",
"source": "[email protected]"
},
{
"url": "https://github.com/sanluan/PublicCMS/issues/102",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-66205",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T21:15:52.443",
"lastModified": "2025-12-01T21:15:52.443",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Frappe is a full-stack web application framework. Prior to 15.86.0 and 14.99.2, a certain endpoint was vulnerable to error-based SQL injection due to lack of validation of parameters. Some information like version could be retrieved. This vulnerability is fixed in 15.86.0 and 14.99.2."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 4.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/frappe/frappe/commit/984c641bff9539b6126a01146096f133db6a955b",
"source": "[email protected]"
},
{
"url": "https://github.com/frappe/frappe/security/advisories/GHSA-mp93-8vxr-hqq9",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-66206",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T21:15:52.623",
"lastModified": "2025-12-01T21:15:52.623",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Frappe is a full-stack web application framework. Prior to 15.86.0 and 14.99.2, certain requests were vulnerable to path traversal attacks, wherein some files from the server could be retrieved if the full path was known. Sites hosted on Frappe Cloud, and even other setups that are behind a reverse proxy like NGINX are unaffected. This would mainly affect someone directly using werkzeug/gunicorn. In those cases, either an upgrade or changing the setup to use a reverse proxy is recommended. This vulnerability is fixed in 15.86.0 and 14.99.2."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.2,
"impactScore": 4.0
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"references": [
{
"url": "https://github.com/frappe/frappe/security/advisories/GHSA-v4wg-gqfr-rpjm",
"source": "[email protected]"
}
]
}
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-66252",
"sourceIdentifier": "b7efe717-a805-47cf-8e9a-921fca0ce0ce",
"published": "2025-11-26T01:16:08.273",
"lastModified": "2025-11-28T23:11:55.537",
"lastModified": "2025-12-01T22:15:48.860",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -73,6 +73,10 @@
{
"url": "https://www.abdulmhsblog.com/posts/webfmvulns/",
"source": "b7efe717-a805-47cf-8e9a-921fca0ce0ce"
},
{
"url": "https://www.abdulmhsblog.com/posts/webfmvulns/",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
@@ -0,0 +1,86 @@
{
"id": "CVE-2025-66294",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T21:15:52.843",
"lastModified": "2025-12-01T21:15:52.843",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Server-Side Template Injection (SSTI) vulnerability exists in Grav that allows authenticated attackers with editor permissions to execute arbitrary commands on the server and, under certain conditions, may also be exploited by unauthenticated attackers. This vulnerability stems from weak regex validation in the cleanDangerousTwig method. This vulnerability is fixed in 1.8.0-beta.27."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-94"
},
{
"lang": "en",
"value": "CWE-1336"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-662m-56v4-3r8f",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-66295",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T21:15:53.000",
"lastModified": "2025-12-01T21:15:53.000",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, when a user with privilege of user creation creates a new user through the Admin UI and supplies a username containing path traversal sequences (for example ..\\Nijat or ../Nijat), Grav writes the account YAML file to an unintended path outside user/accounts/. The written YAML can contain account fields such as email, fullname, twofa_secret, and hashed_password. This vulnerability is fixed in 1.8.0-beta.27."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav/commit/3462d94d575064601689b236508c316242e15741",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-h756-wh59-hhjv",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-66296",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T21:15:53.157",
"lastModified": "2025-12-01T21:15:53.157",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a privilege escalation vulnerability exists in Grav\u2019s Admin plugin due to the absence of username uniqueness validation when creating users. A user with the create user permission can create a new account using the same username as an existing administrator account, set a new password/email, and then log in as that administrator. This effectively allows privilege escalation from limited user-manager permissions to full administrator access. This vulnerability is fixed in 1.8.0-beta.27."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-266"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav/commit/3462d94d575064601689b236508c316242e15741",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-cjcp-qxvg-4rjm",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-66297",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T21:15:53.327",
"lastModified": "2025-12-01T21:15:53.327",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a user with admin panel access and permissions to create or edit pages in Grav CMS can enable Twig processing in the page frontmatter. By injecting malicious Twig expressions, the user can escalate their privileges to admin or execute arbitrary system commands via the scheduler API. This results in both Privilege Escalation (PE) and Remote Code Execution (RCE) vulnerabilities. This vulnerability is fixed in 1.8.0-beta.27."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-1336"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-858q-77wx-hhx6",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-66298",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:49.103",
"lastModified": "2025-12-01T22:15:49.103",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, having a simple form on site can reveal the whole Grav configuration details (including plugin configuration details) by using the correct POST payload to exploit a Server-Side Template (SST) vulnerability. Sensitive information may be contained in the configuration details. This vulnerability is fixed in 1.8.0-beta.27."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-1336"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-8535-hvm8-2hmv",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-66299",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:49.290",
"lastModified": "2025-12-01T22:15:49.290",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, Grav CMS is vulnerable to a Server-Side Template Injection (SSTI) that allows any authenticated user with editor permissions to execute arbitrary code on the remote server, bypassing the existing security sandbox. Since the security sandbox does not fully protect the Twig object, it is possible to interact with it (e.g., call methods, read/write attributes) through maliciously crafted Twig template directives injected into a web page. This allows an authenticated editor to add arbitrary functions to the Twig attribute system.twig.safe_filters, effectively bypassing the Grav CMS sandbox. This vulnerability is fixed in 1.8.0-beta.27."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-94"
},
{
"lang": "en",
"value": "CWE-1336"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-gjc5-8cfh-653x",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-66300",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:49.447",
"lastModified": "2025-12-01T22:15:49.447",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A low privilege user account with page editing privilege can read any server files using \"Frontmatter\" form. This includes Grav user account files (/grav/user/accounts/*.yaml), which store hashed user password, 2FA secret, and the password reset token. This can allow an adversary to compromise any registered account by resetting a password for a user to get access to the password reset token from the file or by cracking the hashed password. This vulnerability is fixed in 1.8.0-beta.27."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.1,
"impactScore": 4.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav/commit/ed640a13143c4177af013cf001969ed2c5e197ee",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-p4ww-mcp9-j6f2",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,78 @@
{
"id": "CVE-2025-66301",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:49.607",
"lastModified": "2025-12-01T22:15:49.607",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, due to improper authorization checks when modifying critical fields on a POST request to /admin/pages/{page_name}, an editor with only permissions to change basic content on the form is now able to change the functioning of the form through modifying the content of the data[_json][header][form] which is the YAML frontmatter which includes the process section which dictates what happens after a user submits the form which include some important actions that could lead to further vulnerabilities. This vulnerability is fixed in 1.8.0-beta.27."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-285"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-v8x2-fjv7-8hjh",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-66302",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:49.750",
"lastModified": "2025-12-01T22:15:49.750",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A path traversal vulnerability has been identified in Grav CMS, allowing authenticated attackers with administrative privileges to read arbitrary files on the underlying server filesystem. This vulnerability arises due to insufficient input sanitization in the backup tool, where user-supplied paths are not properly restricted, enabling access to files outside the intended webroot directory. The impact of this vulnerability depends on the privileges of the user account running the application. This vulnerability is fixed in 1.8.0-beta.27."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 4.0
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav/commit/ed640a13143c4177af013cf001969ed2c5e197ee",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-j422-qmxp-hv94",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-66303",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:49.913",
"lastModified": "2025-12-01T22:15:49.913",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A Denial of Service (DoS) vulnerability has been identified in Grav related to the handling of scheduled_at parameters. Specifically, the application fails to properly sanitize input for cron expressions. By manipulating the scheduled_at parameter with a malicious input, such as a single quote, the application admin panel becomes non-functional, causing significant disruptions to administrative operations. The only way to recover from this issue is to manually access the host server and modify the backup.yaml file to correct the corrupted cron expression. This vulnerability is fixed in 1.8.0-beta.27."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav/commit/9d11094e4133f059688fad1e00dbe96fb6e3ead7",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-x62q-p736-3997",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-66304",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:50.080",
"lastModified": "2025-12-01T22:15:50.080",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, users with read access on the user account management section of the admin panel can view the password hashes of all users, including the admin user. This exposure can potentially lead to privilege escalation if an attacker can crack these password hashes. This vulnerability is fixed in 1.8.0-beta.27."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 0.7,
"impactScore": 5.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-200"
},
{
"lang": "en",
"value": "CWE-201"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav/commit/9d11094e4133f059688fad1e00dbe96fb6e3ead7",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-gq3g-666w-7h85",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-66305",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:50.250",
"lastModified": "2025-12-01T22:15:50.250",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Denial of Service (DoS) vulnerability was identified in the \"Languages\" submenu of the Grav admin configuration panel (/admin/config/system). Specifically, the Supported parameter fails to properly validate user input. If a malformed value is inserted\u2014such as a single forward slash (/) or an XSS test string\u2014it causes a fatal regular expression parsing error on the server. This leads to application-wide failure due to the use of the preg_match() function with an improperly constructed regular expression, resulting in an error. Once triggered, the site becomes completely unavailable to all users. This vulnerability is fixed in 1.8.0-beta.27."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-248"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav/commit/ed640a13143c4177af013cf001969ed2c5e197ee",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-m8vh-v6r6-w7p6",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-66306",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:50.413",
"lastModified": "2025-12-01T22:15:50.413",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Grav is a file-based Web platform. Prior to 1.8.0-beta.27, there is an IDOR (Insecure Direct Object Reference) vulnerability in the Grav CMS Admin Panel which allows low-privilege users to access sensitive information from other accounts. Although direct account takeover is not possible, admin email addresses and other metadata can be exposed, increasing the risk of phishing, credential stuffing, and social engineering. This vulnerability is fixed in 1.8.0-beta.27."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-639"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav/commit/b7e1958a6e807ac14919447b60e5204a2ea77f62",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-4cwq-j7jv-qmwg",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-66307",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:50.570",
"lastModified": "2025-12-01T22:15:50.570",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a user enumeration and email disclosure vulnerability exists in Grav. The \"Forgot Password\" functionality at /admin/forgot leaks information about valid usernames and their associated email addresses through distinct server responses. This allows an attacker to enumerate users and disclose sensitive email addresses, which can be leveraged for targeted attacks such as password spraying, phishing, or social engineering. This vulnerability is fixed in 1.11.0-beta.1."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-204"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-q3qx-cp62-f6m7",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-66308",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:50.743",
"lastModified": "2025-12-01T22:15:50.743",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the /admin/config/site endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[taxonomies] parameter. The injected payload is stored on the server and automatically executed in the browser of any user who accesses the affected site configuration, resulting in a persistent attack vector. This vulnerability is fixed in 1.11.0-beta.1."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"privilegesRequired": "HIGH",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-gqxx-248x-g29f",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-66309",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:50.910",
"lastModified": "2025-12-01T22:15:50.910",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Reflected Cross-Site Scripting (XSS) vulnerability was identified in the /admin/pages/[page] endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[header][content][items] parameter. This vulnerability is fixed in 1.11.0-beta.1."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-65mj-f7p4-wggq",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-66310",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:51.067",
"lastModified": "2025-12-01T22:15:51.067",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the /admin/pages/[page] endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[header][template] parameter. The script is saved within the page's frontmatter and executed automatically whenever the affected content is rendered in the administrative interface or frontend view. This vulnerability is fixed in 1.11.0-beta.1."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-7g78-5g5g-mvfj",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-66311",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:51.217",
"lastModified": "2025-12-01T22:15:51.217",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the /admin/pages/[page] endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[header][metadata], data[header][taxonomy][category], and data[header][taxonomy][tag] parameters. These scripts are stored in the page frontmatter and executed automatically whenever the affected page is accessed or rendered in the administrative interface. This vulnerability is fixed in 1.11.0-beta.1."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-mpjj-4688-3fxg",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-66312",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T22:15:51.367",
"lastModified": "2025-12-01T22:15:51.367",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the /admin/accounts/groups/Grupo endpoint of the Grav application. This vulnerability allows attackers to inject malicious scripts into the data[readableName] parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability is fixed in 1.11.0-beta.1."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/getgrav/grav-plugin-admin/commit/99f653296504f1d6408510dd2f6f20a45a26f9b0",
"source": "[email protected]"
},
{
"url": "https://github.com/getgrav/grav/security/advisories/GHSA-rmw5-f87r-w988",
"source": "[email protected]"
}
]
}
+55 -40
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-12-01T21:00:11.814072+00:00
2025-12-01T23:00:11.583634+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-12-01T20:15:57.370000+00:00
2025-12-01T22:15:51.513000+00:00
```
### Last Data Feed Release
@@ -33,54 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
319745
319772
```
### CVEs added in the last Commit
Recently added CVEs: `10`
Recently added CVEs: `27`
- [CVE-2025-11772](CVE-2025/CVE-2025-117xx/CVE-2025-11772.json) (`2025-12-01T19:15:49.130`)
- [CVE-2025-12756](CVE-2025/CVE-2025-127xx/CVE-2025-12756.json) (`2025-12-01T20:15:49.147`)
- [CVE-2025-34297](CVE-2025/CVE-2025-342xx/CVE-2025-34297.json) (`2025-12-01T19:15:50.420`)
- [CVE-2025-51682](CVE-2025/CVE-2025-516xx/CVE-2025-51682.json) (`2025-12-01T20:15:51.660`)
- [CVE-2025-51683](CVE-2025/CVE-2025-516xx/CVE-2025-51683.json) (`2025-12-01T20:15:51.783`)
- [CVE-2025-63317](CVE-2025/CVE-2025-633xx/CVE-2025-63317.json) (`2025-12-01T20:15:52.907`)
- [CVE-2025-63365](CVE-2025/CVE-2025-633xx/CVE-2025-63365.json) (`2025-12-01T19:15:51.373`)
- [CVE-2025-65407](CVE-2025/CVE-2025-654xx/CVE-2025-65407.json) (`2025-12-01T19:15:52.417`)
- [CVE-2025-65836](CVE-2025/CVE-2025-658xx/CVE-2025-65836.json) (`2025-12-01T20:15:57.103`)
- [CVE-2025-65838](CVE-2025/CVE-2025-658xx/CVE-2025-65838.json) (`2025-12-01T20:15:57.240`)
- [CVE-2025-58044](CVE-2025/CVE-2025-580xx/CVE-2025-58044.json) (`2025-12-01T21:15:51.807`)
- [CVE-2025-65621](CVE-2025/CVE-2025-656xx/CVE-2025-65621.json) (`2025-12-01T21:15:52.193`)
- [CVE-2025-65622](CVE-2025/CVE-2025-656xx/CVE-2025-65622.json) (`2025-12-01T22:15:48.697`)
- [CVE-2025-65840](CVE-2025/CVE-2025-658xx/CVE-2025-65840.json) (`2025-12-01T21:15:52.320`)
- [CVE-2025-66205](CVE-2025/CVE-2025-662xx/CVE-2025-66205.json) (`2025-12-01T21:15:52.443`)
- [CVE-2025-66206](CVE-2025/CVE-2025-662xx/CVE-2025-66206.json) (`2025-12-01T21:15:52.623`)
- [CVE-2025-66294](CVE-2025/CVE-2025-662xx/CVE-2025-66294.json) (`2025-12-01T21:15:52.843`)
- [CVE-2025-66295](CVE-2025/CVE-2025-662xx/CVE-2025-66295.json) (`2025-12-01T21:15:53.000`)
- [CVE-2025-66296](CVE-2025/CVE-2025-662xx/CVE-2025-66296.json) (`2025-12-01T21:15:53.157`)
- [CVE-2025-66297](CVE-2025/CVE-2025-662xx/CVE-2025-66297.json) (`2025-12-01T21:15:53.327`)
- [CVE-2025-66298](CVE-2025/CVE-2025-662xx/CVE-2025-66298.json) (`2025-12-01T22:15:49.103`)
- [CVE-2025-66299](CVE-2025/CVE-2025-662xx/CVE-2025-66299.json) (`2025-12-01T22:15:49.290`)
- [CVE-2025-66300](CVE-2025/CVE-2025-663xx/CVE-2025-66300.json) (`2025-12-01T22:15:49.447`)
- [CVE-2025-66301](CVE-2025/CVE-2025-663xx/CVE-2025-66301.json) (`2025-12-01T22:15:49.607`)
- [CVE-2025-66302](CVE-2025/CVE-2025-663xx/CVE-2025-66302.json) (`2025-12-01T22:15:49.750`)
- [CVE-2025-66303](CVE-2025/CVE-2025-663xx/CVE-2025-66303.json) (`2025-12-01T22:15:49.913`)
- [CVE-2025-66304](CVE-2025/CVE-2025-663xx/CVE-2025-66304.json) (`2025-12-01T22:15:50.080`)
- [CVE-2025-66305](CVE-2025/CVE-2025-663xx/CVE-2025-66305.json) (`2025-12-01T22:15:50.250`)
- [CVE-2025-66306](CVE-2025/CVE-2025-663xx/CVE-2025-66306.json) (`2025-12-01T22:15:50.413`)
- [CVE-2025-66307](CVE-2025/CVE-2025-663xx/CVE-2025-66307.json) (`2025-12-01T22:15:50.570`)
- [CVE-2025-66308](CVE-2025/CVE-2025-663xx/CVE-2025-66308.json) (`2025-12-01T22:15:50.743`)
- [CVE-2025-66309](CVE-2025/CVE-2025-663xx/CVE-2025-66309.json) (`2025-12-01T22:15:50.910`)
- [CVE-2025-66310](CVE-2025/CVE-2025-663xx/CVE-2025-66310.json) (`2025-12-01T22:15:51.067`)
- [CVE-2025-66311](CVE-2025/CVE-2025-663xx/CVE-2025-66311.json) (`2025-12-01T22:15:51.217`)
- [CVE-2025-66312](CVE-2025/CVE-2025-663xx/CVE-2025-66312.json) (`2025-12-01T22:15:51.367`)
### CVEs modified in the last Commit
Recently modified CVEs: `59`
Recently modified CVEs: `49`
- [CVE-2025-62231](CVE-2025/CVE-2025-622xx/CVE-2025-62231.json) (`2025-12-01T19:15:51.010`)
- [CVE-2025-62728](CVE-2025/CVE-2025-627xx/CVE-2025-62728.json) (`2025-12-01T19:15:51.180`)
- [CVE-2025-63095](CVE-2025/CVE-2025-630xx/CVE-2025-63095.json) (`2025-12-01T20:15:52.757`)
- [CVE-2025-63520](CVE-2025/CVE-2025-635xx/CVE-2025-63520.json) (`2025-12-01T20:15:53.247`)
- [CVE-2025-63522](CVE-2025/CVE-2025-635xx/CVE-2025-63522.json) (`2025-12-01T20:15:53.417`)
- [CVE-2025-63526](CVE-2025/CVE-2025-635xx/CVE-2025-63526.json) (`2025-12-01T20:15:53.647`)
- [CVE-2025-63527](CVE-2025/CVE-2025-635xx/CVE-2025-63527.json) (`2025-12-01T20:15:53.873`)
- [CVE-2025-63528](CVE-2025/CVE-2025-635xx/CVE-2025-63528.json) (`2025-12-01T20:15:54.057`)
- [CVE-2025-63529](CVE-2025/CVE-2025-635xx/CVE-2025-63529.json) (`2025-12-01T19:15:51.520`)
- [CVE-2025-63531](CVE-2025/CVE-2025-635xx/CVE-2025-63531.json) (`2025-12-01T19:15:51.730`)
- [CVE-2025-63532](CVE-2025/CVE-2025-635xx/CVE-2025-63532.json) (`2025-12-01T19:15:51.927`)
- [CVE-2025-63533](CVE-2025/CVE-2025-635xx/CVE-2025-63533.json) (`2025-12-01T19:15:52.080`)
- [CVE-2025-63709](CVE-2025/CVE-2025-637xx/CVE-2025-63709.json) (`2025-12-01T20:15:54.240`)
- [CVE-2025-63834](CVE-2025/CVE-2025-638xx/CVE-2025-63834.json) (`2025-12-01T20:15:54.430`)
- [CVE-2025-64030](CVE-2025/CVE-2025-640xx/CVE-2025-64030.json) (`2025-12-01T20:15:54.607`)
- [CVE-2025-64775](CVE-2025/CVE-2025-647xx/CVE-2025-64775.json) (`2025-12-01T19:15:52.240`)
- [CVE-2025-65112](CVE-2025/CVE-2025-651xx/CVE-2025-65112.json) (`2025-12-01T20:15:54.823`)
- [CVE-2025-65113](CVE-2025/CVE-2025-651xx/CVE-2025-65113.json) (`2025-12-01T20:15:54.943`)
- [CVE-2025-65276](CVE-2025/CVE-2025-652xx/CVE-2025-65276.json) (`2025-12-01T20:15:55.097`)
- [CVE-2025-65403](CVE-2025/CVE-2025-654xx/CVE-2025-65403.json) (`2025-12-01T20:15:55.257`)
- [CVE-2025-65404](CVE-2025/CVE-2025-654xx/CVE-2025-65404.json) (`2025-12-01T20:15:55.403`)
- [CVE-2025-65405](CVE-2025/CVE-2025-654xx/CVE-2025-65405.json) (`2025-12-01T20:15:55.560`)
- [CVE-2025-65406](CVE-2025/CVE-2025-654xx/CVE-2025-65406.json) (`2025-12-01T20:15:56.120`)
- [CVE-2025-65408](CVE-2025/CVE-2025-654xx/CVE-2025-65408.json) (`2025-12-01T20:15:56.923`)
- [CVE-2025-66219](CVE-2025/CVE-2025-662xx/CVE-2025-66219.json) (`2025-12-01T20:15:57.370`)
- [CVE-2023-53315](CVE-2023/CVE-2023-533xx/CVE-2023-53315.json) (`2025-12-01T21:23:45.870`)
- [CVE-2023-53316](CVE-2023/CVE-2023-533xx/CVE-2023-53316.json) (`2025-12-01T21:23:37.097`)
- [CVE-2023-53317](CVE-2023/CVE-2023-533xx/CVE-2023-53317.json) (`2025-12-01T21:23:28.940`)
- [CVE-2023-53318](CVE-2023/CVE-2023-533xx/CVE-2023-53318.json) (`2025-12-01T21:22:40.880`)
- [CVE-2023-53319](CVE-2023/CVE-2023-533xx/CVE-2023-53319.json) (`2025-12-01T21:22:28.760`)
- [CVE-2023-53320](CVE-2023/CVE-2023-533xx/CVE-2023-53320.json) (`2025-12-01T21:15:46.453`)
- [CVE-2025-11561](CVE-2025/CVE-2025-115xx/CVE-2025-11561.json) (`2025-12-01T22:15:47.440`)
- [CVE-2025-12183](CVE-2025/CVE-2025-121xx/CVE-2025-12183.json) (`2025-12-01T21:15:49.800`)
- [CVE-2025-13786](CVE-2025/CVE-2025-137xx/CVE-2025-13786.json) (`2025-12-01T21:15:49.950`)
- [CVE-2025-32988](CVE-2025/CVE-2025-329xx/CVE-2025-32988.json) (`2025-12-01T22:15:47.790`)
- [CVE-2025-32989](CVE-2025/CVE-2025-329xx/CVE-2025-32989.json) (`2025-12-01T22:15:48.027`)
- [CVE-2025-32990](CVE-2025/CVE-2025-329xx/CVE-2025-32990.json) (`2025-12-01T22:15:48.200`)
- [CVE-2025-39834](CVE-2025/CVE-2025-398xx/CVE-2025-39834.json) (`2025-12-01T22:03:46.933`)
- [CVE-2025-39836](CVE-2025/CVE-2025-398xx/CVE-2025-39836.json) (`2025-12-01T21:59:35.697`)
- [CVE-2025-48709](CVE-2025/CVE-2025-487xx/CVE-2025-48709.json) (`2025-12-01T22:15:48.363`)
- [CVE-2025-48980](CVE-2025/CVE-2025-489xx/CVE-2025-48980.json) (`2025-12-01T21:15:50.250`)
- [CVE-2025-48982](CVE-2025/CVE-2025-489xx/CVE-2025-48982.json) (`2025-12-01T21:15:50.380`)
- [CVE-2025-48983](CVE-2025/CVE-2025-489xx/CVE-2025-48983.json) (`2025-12-01T21:15:50.527`)
- [CVE-2025-48985](CVE-2025/CVE-2025-489xx/CVE-2025-48985.json) (`2025-12-01T21:15:50.673`)
- [CVE-2025-50736](CVE-2025/CVE-2025-507xx/CVE-2025-50736.json) (`2025-12-01T21:15:50.820`)
- [CVE-2025-52662](CVE-2025/CVE-2025-526xx/CVE-2025-52662.json) (`2025-12-01T21:15:51.000`)
- [CVE-2025-52667](CVE-2025/CVE-2025-526xx/CVE-2025-52667.json) (`2025-12-01T21:15:51.130`)
- [CVE-2025-63523](CVE-2025/CVE-2025-635xx/CVE-2025-63523.json) (`2025-12-01T21:15:51.980`)
- [CVE-2025-6395](CVE-2025/CVE-2025-63xx/CVE-2025-6395.json) (`2025-12-01T22:15:51.513`)
- [CVE-2025-66252](CVE-2025/CVE-2025-662xx/CVE-2025-66252.json) (`2025-12-01T22:15:48.860`)
## Download and Usage
+145 -118
View File
@@ -215236,20 +215236,20 @@ CVE-2022-50335,0,0,7c93b926e8abd725d637622e669c4f4b960de3c5b87fed27f17bebc35deb9
CVE-2022-50336,0,0,ecd64ec35bc878139a797e0a70ed1612d8dfb99a41aecf4139d7fcd1ed0c1ef9,2025-09-15T15:22:27.090000
CVE-2022-50337,0,0,4d06b41d978b782ae1870a874c9ce6f1f9789fd8e0463d494a0e26b1b287d2af,2025-09-15T15:22:27.090000
CVE-2022-50338,0,0,445462c037bc90df3ff937184349fb37c7b519129fdf9573724de5b16bc6189b,2025-10-10T16:15:49.533000
CVE-2022-50339,0,0,c7dc847160fad7f6ce85fe8eb3787a5b02e337738c012f6aaf9738e3e71bea52,2025-09-17T14:18:55.093000
CVE-2022-50340,0,0,8ff83f59089284e1887030036df22c7f81f2b7ac6006ccce2cf4791eebf42415,2025-09-17T14:18:55.093000
CVE-2022-50341,0,0,d8ad500dc1120e7e17085587b9186f25cc6f2b24c0dd8d4933349f52382ed006,2025-09-17T14:18:55.093000
CVE-2022-50342,0,0,85e306716788bc396f6461362a84b846220aef2aae247263cf169687ae989aa8,2025-09-17T14:18:55.093000
CVE-2022-50343,0,0,248c1bdc199314914c40f01f673b62a03d1c47134281c921bfe1104f4ab76225,2025-09-17T14:18:55.093000
CVE-2022-50344,0,0,d3db5df67c4a9d9ebde3cb50b010de77af698085507fd81293d207e084e450d7,2025-09-17T14:18:55.093000
CVE-2022-50339,0,1,a2644a5d60c1dbaf7087cd967ecfa675511828fedf7822068ec286c0d63e3cca,2025-12-01T22:00:43.643000
CVE-2022-50340,0,1,f85bec820f37f0a107f965afa676f6f133d03760bebd5bcd1d9264bbf95b0195,2025-12-01T22:00:51.300000
CVE-2022-50341,0,1,ef522f59b8bbc981d8cf2eecf39f86174326678ba3fa0d7c164d322cdad522d5,2025-12-01T22:03:08.070000
CVE-2022-50342,0,1,0f218bd263990cda437c4ec97f85d66111f03c3557c63120e625a82a88a5ad35,2025-12-01T22:03:16.573000
CVE-2022-50343,0,1,3c965efbaa8316620d25b1d9ff334dca9451e7ebb5b786dd4887623725423248,2025-12-01T22:03:21.887000
CVE-2022-50344,0,1,e3e8f9c70647e71cbfdbba6379b0913d1fd94ac6da7d64bafb11d2fcc948c218,2025-12-01T22:03:27.743000
CVE-2022-50345,0,0,0ca9090c34f70eac057c159170f0601c5e6bcf48713aa4c61050decf361eba6c,2025-09-29T19:15:33.190000
CVE-2022-50346,0,0,9a08ad54266f2a78367275124e8e8c4067a6194e6dbcf6a17f59b3c3baad364b,2025-09-17T14:18:55.093000
CVE-2022-50347,0,0,e75c2e75380341e26ec559a9f7ab461cdf9f892b94eaad1d04c41d4696849298,2025-09-17T14:18:55.093000
CVE-2022-50348,0,0,004e295db9a4dccfdb947f142c7f6ebc7e519cb5184fc4c9f870d01ced0fa067,2025-09-17T14:18:55.093000
CVE-2022-50349,0,0,f3cde7d47dca61af4fa513e0e5f7a368a2f965d422b3a00a9e22957d95ecfee8,2025-09-17T14:18:55.093000
CVE-2022-50350,0,0,5ae75be1a49d597eee5ee5749c61abee732091a45afa5c84bdbea6891e14b1b9,2025-09-17T14:18:55.093000
CVE-2022-50351,0,0,967590694013b19226a246c0cc4afb8bf579d0f89e93dd0cf340eaa158b353e2,2025-09-17T14:18:55.093000
CVE-2022-50352,0,0,c91dfd4973c7cd17b9925ffb02013b76f046dff86cc07c10155441f5444df222,2025-09-17T14:18:55.093000
CVE-2022-50346,0,1,5425c3c711fa3985834c7194e60194036227a746bd30fd45a0a8d4130d8561e4,2025-12-01T21:58:19.057000
CVE-2022-50347,0,1,1efafde0b61c5d3393d06682f8f9b19ba569c12e03af5f5e04f445f6dea05465,2025-12-01T21:58:23.473000
CVE-2022-50348,0,1,8a898727589af12d3c6c38f1244efac818b737e65038600ceb1774726c820435,2025-12-01T21:58:30.987000
CVE-2022-50349,0,1,e79ff0ea995b071167fd89b1cdf2ef1fcaddc5ee68c0b51f718c2b798c825971,2025-12-01T21:58:36.913000
CVE-2022-50350,0,1,464b748636a1f2e13c759dc611dec97750b07cce2acc110068d20e60a929026c,2025-12-01T21:58:43.630000
CVE-2022-50351,0,1,6c4a0fe85ff51690562937168c7c496e5cd072a0553891a18190340f6a7db13a,2025-12-01T21:58:48.517000
CVE-2022-50352,0,1,4ed5e4dd9d0853e9e49bd95022c40965c5354735735f0352e23b4135c4a3e4e4,2025-12-01T21:58:54.167000
CVE-2022-50353,0,0,b0be5a7a87611fe9f6d51b40991a36d8ca88e6bacfde7da32d8c0ae1d4c8735b,2025-09-18T13:43:34.310000
CVE-2022-50354,0,0,5d3f93135d0b04ec34898ea157559c407dd649f66622f09f533c5c7e94ce45fb,2025-09-18T13:43:34.310000
CVE-2022-50355,0,0,b95e7ed4dc25273534a27aef29cc7dff14a0b22de369f5addca104e333599813,2025-09-18T13:43:34.310000
@@ -243708,25 +243708,25 @@ CVE-2023-53300,0,0,e2a694a166f78952b7a68e9f6e5bc4df999f24a074b44db96e24f0f10210c
CVE-2023-53301,0,0,6412b42d2cf5147ea19ede7c3574f21a64cb04a59b54f6fb9d76cec87066477e,2025-09-16T12:49:16.060000
CVE-2023-53302,0,0,0ecc00caa6675fd71964ab2a19dbef727cfe7bd2594464107857639f7d8c9720,2025-09-16T12:49:16.060000
CVE-2023-53303,0,0,3c90ead4e94ede791a0f521c7772300756df88f0ca45be172ab26d59a11feb29,2025-09-16T12:49:16.060000
CVE-2023-53304,0,0,8e7564a93b89e9a51acff2c81e8fb45ce501e0f626e1cf3803b1fa1e23515618,2025-09-17T14:18:55.093000
CVE-2023-53305,0,0,6562068eeb5e67e371d23fc049f80279a92d18e5652d5cb922c4a74aa1bf5ce5,2025-09-17T14:18:55.093000
CVE-2023-53306,0,0,6cbf44c20d9528014c5253219893a066d699a4a3a0c2c96c1cf1554e539a7bdc,2025-09-17T14:18:55.093000
CVE-2023-53307,0,0,633006832246437c151030cee1c2131a6310d8f43adab7ebc6ee3b36f3816af4,2025-09-17T14:18:55.093000
CVE-2023-53308,0,0,ef46bede7d6274208b5dad2f71c3fc4bbc4965ba220aa57e4ef7c8c25b2610f2,2025-09-17T14:18:55.093000
CVE-2023-53309,0,0,647272e3bebaee42d5a2bc7a44d1dc2d03e0ec9e0e814c3ae8e0b264e036f87e,2025-09-17T14:18:55.093000
CVE-2023-53304,0,1,a1d182138e6135fcd324f17c0fe0aee619791f654e56f0d4d8cbd6c8a46800c6,2025-12-01T21:58:59.480000
CVE-2023-53305,0,1,437e89b0f2d300803336fd44db413c226a743b08a311555d6b79a6c1c6865ab3,2025-12-01T21:59:05.670000
CVE-2023-53306,0,1,21823df9d4fa2740ea0ae7a62393125835d406cc6ae387d886c2f7803f8322be,2025-12-01T21:46:08.330000
CVE-2023-53307,0,1,6f074118809139bc8b7bd6d76ac9d30ba11db559c9280a93ab0525e30a7388a9,2025-12-01T21:46:18.413000
CVE-2023-53308,0,1,ee0a259fe8a2c741bcf535e212ac83d9a10a956ccdacef064138f4322ef076aa,2025-12-01T21:46:25.467000
CVE-2023-53309,0,1,0b63a775e687daa547e837c16223f09d325b9fd62d78e7da2ecbf487f4f0acef,2025-12-01T21:46:35.660000
CVE-2023-5331,0,0,905019108665e93472a16e8702e015b2c86b26e5c458a698c25f3fb5c42b8549,2024-11-21T08:41:32.870000
CVE-2023-53310,0,0,8d69fe39516a159afee9d452133b374f690f7ff4b2f1b63774df7131cfa2c277,2025-09-17T14:18:55.093000
CVE-2023-53311,0,0,66761025ecb7eeb23d7cf7e375c59f39096c51b277b3cba53cfd78f116b94856,2025-09-17T14:18:55.093000
CVE-2023-53312,0,0,06ed656b4905f358efa308b8c0bdfb4d5c50668d773b1fd63e018fab0266bc22,2025-09-17T14:18:55.093000
CVE-2023-53313,0,0,b10b120ad221b0e9b101f21b23379590620506ee01de41b1d81e7a0584e22d25,2025-09-17T14:18:55.093000
CVE-2023-53314,0,0,01ac44531a0b97f27873037382b61b3797a9e221728f05dcbff5f12df9a62a35,2025-09-17T14:18:55.093000
CVE-2023-53315,0,0,86f532aaa2e287c8d232f7d48bead74e8085f2126ae4f01c7feb373e188b59b3,2025-09-17T14:18:55.093000
CVE-2023-53316,0,0,6134bbb075a1dada51ef11ca52c28323b828cc3f64bb9efec7dc6ac0713163fb,2025-09-17T14:18:55.093000
CVE-2023-53317,0,0,89156330e4aaaf33210f1a71025bcc10572f6d3ea19363dd1f944e411d99e5ef,2025-09-17T14:18:55.093000
CVE-2023-53318,0,0,fe937fcb1fc3b16184e0abf3133b14c6697350ba98ea28c6441cf86bf1efa6be,2025-09-17T14:18:55.093000
CVE-2023-53319,0,0,599716eac069a0d756b74365acde70f195d0a03cde9facd910bc1ce7a3d2cfb9,2025-09-17T14:18:55.093000
CVE-2023-53310,0,1,1ad0757d223ff1d7de4f89655c9ff573662434bd598bcf81d6f62b58c5708e1f,2025-12-01T21:46:56.757000
CVE-2023-53311,0,1,371977f7d818fb174ce96b9b99b78b9bbfb5134cf00e96ec51a58db5dc7c2fc0,2025-12-01T21:47:05.500000
CVE-2023-53312,0,1,4c9c1ed18ff591954c22e1a0e34121b21aa493fc82c6473b8a8c4506693717a3,2025-12-01T21:47:12.323000
CVE-2023-53313,0,1,c4cf2c8a08a5767fcfb555b7b4cad513fb6b19d20d2fad87b359eb4706769014,2025-12-01T21:47:30.267000
CVE-2023-53314,0,1,6785f7126e99b99b0ba2f7619db9e1541bdef20ae2a464e9261a336f7a4bfdb7,2025-12-01T21:24:11.990000
CVE-2023-53315,0,1,990308e62458c432f909956dd1463774e479f57316da00d7aeb8b0d1d04dd502,2025-12-01T21:23:45.870000
CVE-2023-53316,0,1,157ac496c9f9079cd2ec1148334e33737c7a7bf2440fc08ed6c4ba378380d53e,2025-12-01T21:23:37.097000
CVE-2023-53317,0,1,bfcf81605924a842e73425f8d10ae49e7d623de7e87c498799146f108c428d08,2025-12-01T21:23:28.940000
CVE-2023-53318,0,1,1c5b90ba7281163681b079da139ad432503bc03eecb43b702402abac32a62b76,2025-12-01T21:22:40.880000
CVE-2023-53319,0,1,209c3b3176737762e6367e042a2ad4894c39c4719d3a38aec30b91afb68dbd5b,2025-12-01T21:22:28.760000
CVE-2023-5332,0,0,5c0ddb4e9eeb8ba2013bd50dc9e8f6942b77c70e3f31e48601ef79977b1c561d,2024-11-21T08:41:33.020000
CVE-2023-53320,0,0,31184b23cb6c3671ac147a30b2eb3133d7cc29e10f7296c7e2bd44087efef87d,2025-09-17T14:18:55.093000
CVE-2023-53320,0,1,0d097682c4a8d0a66d950991ffad3b6d744431e87f6758832fc6978d7278bff7,2025-12-01T21:15:46.453000
CVE-2023-53321,0,0,88dc66cd45552e0ad6e07172438f384040eab24887dc557b8904e7dd1816939c,2025-09-17T14:18:55.093000
CVE-2023-53322,0,0,b556a52fef16501cd098ed8f84481908f87f02840f9d89731b785b079af638bd,2025-09-17T14:18:55.093000
CVE-2023-53323,0,0,93b9d7a29bdbec5155aa79f3bd84cfa33e3d6c63228b6c7e570fa6afcb221d79,2025-09-17T14:18:55.093000
@@ -266819,7 +266819,7 @@ CVE-2024-39133,0,0,80d57ff929af4443c9967278b5200d0e137c9d36fd0907d09dedd0a00c0e7
CVE-2024-39134,0,0,77b1670887f7f19fde2ebfef4910df3e6a5a10efb3081ca8aebf39e2a9942443,2025-07-10T12:56:12.247000
CVE-2024-3914,0,0,e1df0e281df16096f76c00858b773615a6f934260a9ac46ec96e612528588ee7,2024-12-19T19:03:05.733000
CVE-2024-39143,0,0,b9815aa22eaa7fbb94073c69cc26c5c96a5ad996cff75f08c127a4567140623e,2024-11-21T09:27:14.440000
CVE-2024-39148,0,1,92298dc2b4c0c98c20056ec449e5df946d9af7350d35c0004946cda126947967,2025-12-01T20:15:48.617000
CVE-2024-39148,0,0,92298dc2b4c0c98c20056ec449e5df946d9af7350d35c0004946cda126947967,2025-12-01T20:15:48.617000
CVE-2024-3915,0,0,f35436eabf78a67ac47670681f7c3fdac78cbdff20f4e8e4ee8d2aaf0fec6148,2024-11-21T09:30:41.487000
CVE-2024-39150,0,0,e546bf0ffe6f1310ec7c20b4e93e68865b230c0c3d923fa3a8c0422bc63c6b5d,2025-08-20T17:49:31.033000
CVE-2024-39152,0,0,0fd1d13d45fa07b57e918fb6ab1233243318239aba2106a0e70a3a44b557aeb7,2024-07-18T19:15:12.330000
@@ -276715,6 +276715,7 @@ CVE-2024-51995,0,0,1992d2322fc226b33a5684039bb4ec2b0294491b1347d873cbbc207dd7559
CVE-2024-51996,0,0,ff85801f2278caabbb88a673f5522aa23a97c2f9d7260bda4506e22cbaf33529,2024-11-15T14:00:09.720000
CVE-2024-51997,0,0,acce3d20366994a4b626635e9d1a5180796478ce8a1652c0c783857ab39acd0f,2024-11-12T13:56:54.483000
CVE-2024-51998,0,0,9839aa62f76a80c9973f2fb8d41eecba253f6b3142e87cdc34afb99ddaff8394,2024-11-08T19:01:03.880000
CVE-2024-51999,1,1,bfeb2109a7d15d3a7d16c3d91b842f5c763e163e32b16aac0e151d96f8ce1323,2025-12-01T21:15:49.100000
CVE-2024-5200,0,0,52d40bdd237dbce394715b45d86724ac3deda79d4cdca7fd89942bea3f08b0a3,2025-11-13T21:15:48.233000
CVE-2024-52000,0,0,164c382f8c88982eb63ce07c2be596e0b502f12f5ca998748920dbcc2ce078fc,2025-01-07T16:52:48.723000
CVE-2024-52001,0,0,78f4b3f4ac098d84e7755b87917d54c89f68966e660cd2cf99fbfaea2ecc818e,2025-01-07T16:48:41.057000
@@ -277088,7 +277089,7 @@ CVE-2024-52535,0,0,bef515410181a811c26fc680524553d9ad7877ab91586d8a4ff019d636628
CVE-2024-52537,0,0,452ae911f4de5122c99d1e9bb0a1a51cc02727fc3434d173d3a4156ab777cd38,2025-02-04T16:13:09.543000
CVE-2024-52538,0,0,295d2e6b8a4aaa886e973854e976112e349de1c4d0c46424ea3efe146793220b,2025-08-04T19:15:30.007000
CVE-2024-5254,0,0,b08a56d01443c9abf44ee33ecfae9cdfa73a8d20318044fcd2f5caa1e9d31f2e,2024-11-21T09:47:17.063000
CVE-2024-52541,0,1,83799cf88174ce734e072a5b53338de339b88711f9178f7928e95d08d4666f15,2025-12-01T19:22:48.750000
CVE-2024-52541,0,0,83799cf88174ce734e072a5b53338de339b88711f9178f7928e95d08d4666f15,2025-12-01T19:22:48.750000
CVE-2024-52542,0,0,782d30ca63c890d96ad6bbe11bf7f4bbe0aeaf8efe12cef1c1148c420124d676,2025-02-04T15:56:24.143000
CVE-2024-52543,0,0,33519c6ddd0702e3ff651d02a1fcc974b38a1e8f86180d3c4f24bb697efb92b1,2025-01-29T20:26:09.100000
CVE-2024-52544,0,0,e71974852ab984c425352f8b8a135c763e1277389245cadadd85675938665e03,2025-09-05T09:15:31.400000
@@ -279317,7 +279318,7 @@ CVE-2024-56084,0,0,a773f0b27f606f7036d51b2acf244cec3d09f5e4101745dbe67bbc00feb59
CVE-2024-56085,0,0,bba9421fdb624ebe6b89b9f8300d02af17bc144bbd18788adbf415afd6d7bc33,2025-04-17T01:48:50.467000
CVE-2024-56086,0,0,338e8681b6da73ef2d425d533755238a5249dbff92eca4292b7b051dba69ffce,2025-04-17T01:50:13.210000
CVE-2024-56087,0,0,fa5b9d49e58cddd34d89b133d1ade77948d2396510c529bc1409ece170210a91,2025-04-17T01:50:51.800000
CVE-2024-56089,0,1,31cb50c28c8c624ca87992a5108e2f584526101ffe36af278e463076dfedc338,2025-12-01T20:15:48.963000
CVE-2024-56089,0,0,31cb50c28c8c624ca87992a5108e2f584526101ffe36af278e463076dfedc338,2025-12-01T20:15:48.963000
CVE-2024-5609,0,0,4c03a855f07c8ea18d8e7a70e1e2d3467f32254daea5abf62f130fb919fa93d1,2024-06-06T19:16:09.920000
CVE-2024-5610,0,0,c876fccd541dbbe5edac90b3257f7d2b3efde4d5bff83326921f06d03b7a383e,2025-01-08T23:15:09.653000
CVE-2024-5611,0,0,52c51c7a288f3c0ab122ffc809ef2624c3045fff37cac024f8608d70739aac41,2024-11-21T09:48:00.920000
@@ -286649,7 +286650,7 @@ CVE-2025-11128,0,0,bcfebada1a666cbf69243dcde7af147b2dc34fb1a812138c60550ed8740ab
CVE-2025-11129,0,0,3fd77e483a6bbabc9c1af5b1ceea836e641a8aa08d8d0131bebc0c12f62e8eae,2025-11-12T16:19:59.103000
CVE-2025-1113,0,0,e5f8c788cf368398c9beeca18f9ddf681684f5123ecd1fcada0a1cd88526889e,2025-08-21T20:29:15.170000
CVE-2025-11130,0,0,e4fb16b8132c378b40de8c68972d189abf355a56419494e7964e70955aa3840f,2025-09-29T19:34:10.030000
CVE-2025-11131,0,1,2eeaf5437ab67fece979e05befab544659b7e0d7acac344238d9617b4027d43a,2025-12-01T19:30:05.970000
CVE-2025-11131,0,0,2eeaf5437ab67fece979e05befab544659b7e0d7acac344238d9617b4027d43a,2025-12-01T19:30:05.970000
CVE-2025-11132,0,0,24d069a308eafc30cafe0485a92b69f6672adefcd180657bfc8abebba88f675a,2025-12-01T15:39:33.110000
CVE-2025-11133,0,0,5009cd8f1ad05d46949329c493a9c59793603777409d7b812e319ea4d41eb31a,2025-12-01T15:39:33.110000
CVE-2025-11134,0,0,2029f9216d643e10ceb0c2c08f1276fcc04d82872d6d19b3d6748aa627636d9e,2025-09-29T19:34:10.030000
@@ -287035,7 +287036,7 @@ CVE-2025-11557,0,0,53d54ae12237f8976cfb04aeb6b71143bd4775fa6e16fecac3139570eda22
CVE-2025-11558,0,0,f1030d51bfec19909e57fed6c600472aacb2f4b58c8ca5c7c9c9ba63318bd4f3,2025-10-23T20:06:00.793000
CVE-2025-1156,0,0,b9d7f43a66be70b99a0c5a29d90bee603b5f0498d98b3e0e919a25713e636c40,2025-02-10T21:15:22.133000
CVE-2025-11560,0,0,41320c7bca653724aeefb1698dfcf2aadec5bc08db4bbad174499d8896fbeb69,2025-11-13T18:15:49.173000
CVE-2025-11561,0,0,60be4025a817fdf295949cd46cbe7334878326d8a89518cf775bba6ae6ddd2ce,2025-11-27T12:15:46.180000
CVE-2025-11561,0,1,1aeacd26bedd128f28a1d8d9c97023ecc5d91732a938846875d64824ea78c9da,2025-12-01T22:15:47.440000
CVE-2025-11564,0,0,5518bd3a217203a635aeaf04dce294a44df774e2b26e248955e3cd3847147920,2025-10-27T13:20:15.637000
CVE-2025-11565,0,0,44c855fafbee39febbaa989ebf207f4b697c93f30d053c844bb7f314672b7f75,2025-11-12T19:15:35.053000
CVE-2025-11566,0,0,167a7ef1a80923294a00731c1f5a2e1258720e60656847b02b5e635b35a75974,2025-11-12T16:19:12.850000
@@ -287168,7 +287169,7 @@ CVE-2025-11692,0,0,d983eb93c5a3af1433b7b6f50c46f599d27f0f147bdef67465a5cae53f7e1
CVE-2025-11695,0,0,5b6d3c74b1fa4c70dccd540be10208be8c9e6eaf68857025b2a174a57e96c370,2025-10-14T19:36:29.240000
CVE-2025-11696,0,0,36550cf0ada55c8e38e560820cce1add2d8ce8c1aea2284620eff9d4225b433a,2025-11-12T16:19:34.210000
CVE-2025-11697,0,0,0ba8beba7725c00d0cf8084297945c43976b6d47fbb61f496e24fded8ef5a1b3,2025-11-12T16:19:34.210000
CVE-2025-11699,0,1,5bd2a8f74c59e0b3fe30506e2b7a35840d702c750d0d6397393b61813fc30b37,2025-12-01T19:15:48.087000
CVE-2025-11699,0,0,5bd2a8f74c59e0b3fe30506e2b7a35840d702c750d0d6397393b61813fc30b37,2025-12-01T19:15:48.087000
CVE-2025-1170,0,0,f7c4bc09181f11b6c73f7828607020c9f0e484c622ceb324f78d52675a120ce6,2025-03-03T16:37:36.117000
CVE-2025-11700,0,0,19cc4ede8773653a6ec2c7ea7d83729c71fb8d6f1a8589c5a9a5db2d85469151,2025-11-14T19:30:44.700000
CVE-2025-11701,0,0,7ad5d4304ec1eb74222638c60337f5c4ebd0e056bdc09bf379e5bc0bd73ddcdc,2025-10-16T15:28:59.610000
@@ -287229,7 +287230,7 @@ CVE-2025-11769,0,0,a679a256d9f80cbb1389cd7c7600b2160d12933c942b2e5b5a41181c02ae9
CVE-2025-1177,0,0,a9031c02ad15cd3b79dae0a4c247f1d863fa16483cc0621210d54f890eaefbe0,2025-02-20T15:58:50.097000
CVE-2025-11770,0,0,3eb022a62c0324ba035382005ef2e3a6e3e2f9459455a7e14932f4532ae6829c,2025-11-21T15:13:13.800000
CVE-2025-11771,0,0,3dbc58f384013a34fcc31cb3e81c99ff270de2e8526548045481512aee9182e9,2025-11-21T15:13:13.800000
CVE-2025-11772,1,1,77174ce007443118df4fa59f2128ad21b9eb65ef77bcb292b3de114cf61b977b,2025-12-01T19:15:49.130000
CVE-2025-11772,0,0,77174ce007443118df4fa59f2128ad21b9eb65ef77bcb292b3de114cf61b977b,2025-12-01T19:15:49.130000
CVE-2025-11773,0,0,1145bcd73afded945a94d06020411a77c28c6f0c6da628619fb6eec609ff33df,2025-11-21T15:13:13.800000
CVE-2025-11776,0,0,c77e09493779ca2a8622c03c44c090476ff7fedf67760c77c46b8df3053a8e48,2025-11-17T17:52:51.513000
CVE-2025-11777,0,0,17e530f57587bcf36b60effe46a9fe7c96547db6e1c99688ca684cfa0bc37ff8,2025-11-17T18:05:07.173000
@@ -287503,7 +287504,7 @@ CVE-2025-12101,0,0,694a033c3edc5cf7c26bb82a899caea6ef6671dfa0c3e2011384b598caf56
CVE-2025-12103,0,0,9cb868e56a5f8415fe29fac8a54f349f47a6c5ee1ab2822035f6eaf091069ed7,2025-11-12T17:15:36.007000
CVE-2025-12104,0,0,421627973ed8ce426d2efa1b9643012161e382c32a17d6a29addbb6be7235fb5,2025-11-07T20:05:44.410000
CVE-2025-12105,0,0,dc7d0fd951528726918a837ee4537454016ca91429ec1333d1b5957a78a953df,2025-10-27T13:20:33.350000
CVE-2025-12106,0,1,a4ae72bf6ea182ca08464e6c759c235a6af76bf6d0d1385da3d498cbbad3ad36,2025-12-01T19:15:49.303000
CVE-2025-12106,0,0,a4ae72bf6ea182ca08464e6c759c235a6af76bf6d0d1385da3d498cbbad3ad36,2025-12-01T19:15:49.303000
CVE-2025-12108,0,0,f5c2126824c6919c5e4a095dc59930bda7062d9a1da7be2ad896ac80f3a178e7,2025-11-06T19:45:30.990000
CVE-2025-1211,0,0,ed333afb6325a084c131f00ee087aa14b3435cac8d955152c6875f0fc0fc0275,2025-03-16T13:15:36.813000
CVE-2025-12110,0,0,8f17bdbc8d8059197a3ad63e1dfa5913bc635f41dbcdb27b22f83cc64212d9ee,2025-11-28T04:15:59.740000
@@ -287556,7 +287557,7 @@ CVE-2025-12176,0,0,51600658b76b8abed7d6a398e4c4cb5526eda72706d4808694322523753d8
CVE-2025-12177,0,0,a516ceb62e2212e2658270c753c65a8528d1292d4adb5d88e6ed3c1f6752e688,2025-11-12T16:19:59.103000
CVE-2025-12180,0,0,706ded67723279ae679ea8a333580d98de93133f559c2ae245f3cd4a4afbff28,2025-11-04T15:41:31.450000
CVE-2025-12182,0,0,04714423c38cafa185523dc6e162118ee4841c3fbc17fa16f369cb4b3a84e7f3,2025-11-18T14:06:55.963000
CVE-2025-12183,0,0,be7bb0fa1b9d7505292810fe463fe3a03e0f9256ce91524bb0c7c20d9f977811,2025-12-01T15:39:33.110000
CVE-2025-12183,0,1,367e2afa8a2b7673afc1cfdd5f058820877baae401c6ea6b4bb5d351370b35ee,2025-12-01T21:15:49.800000
CVE-2025-12184,0,0,be752abd2f1d114dc84a062fb352b4536431571405a4ab3177e8747475735a18,2025-11-04T15:40:45.533000
CVE-2025-12185,0,0,0c1f0a26d080e334a74a6c6b8deee641f8133460696c8d1238e911b5e7c6218b,2025-12-01T15:39:33.110000
CVE-2025-12187,0,0,3056c3ab8d89d2755db634d4cb95d2e7cae150f33cecf32d33886a5af85e72bb,2025-11-14T19:15:56.707000
@@ -288011,14 +288012,14 @@ CVE-2025-12751,0,0,9e6dedcefca617264af74e3f8b9f1202acfa2416645e6d3c2c6524757430d
CVE-2025-12752,0,0,bc1fe114ab5ed09c761d7c5a92b6db91aca05986efdcc1e82cfce45392b31a48,2025-11-25T22:16:42.557000
CVE-2025-12753,0,0,dce5488b6a7e1342b5f0ee5bf5522a34d7f724ae148d764c7afd4a1dd45f1372,2025-11-12T16:19:34.210000
CVE-2025-12754,0,0,c80a4804ba616568e0704a3735004746ab5b310abd5ad2c2e74aaf0f477e6450,2025-11-12T16:19:34.210000
CVE-2025-12756,1,1,5b9fdf948bd348d28365569b09b02a861d09bcbb7d13b514ddc3da26b9ad0ca6,2025-12-01T20:15:49.147000
CVE-2025-12756,0,0,5b9fdf948bd348d28365569b09b02a861d09bcbb7d13b514ddc3da26b9ad0ca6,2025-12-01T20:15:49.147000
CVE-2025-12758,0,0,b025435981121766904eddf5fd85a5d25e7cee730f8ffdab23f44d04f0ab6520,2025-12-01T15:39:33.110000
CVE-2025-12759,0,0,1e4b0d0f56ea4176048a6d84d99ce33c188aac4441308cd04ac71d6e3535f776,2025-11-23T23:15:45.843000
CVE-2025-1276,0,0,9ace6df18ea9c238bdc49945f9f1b6bd59ebc30733c8496bd06ca73e7765640f,2025-08-19T13:15:39.800000
CVE-2025-12760,0,0,a666c297bccf6721f0333387866caf56ff4a0772e51ff22a1223020f78ef1d77,2025-11-19T19:14:59.327000
CVE-2025-12761,0,0,c2d0e2f6b80f07425e45247ebb3e7c4a065a174d5542efad80c9ce6302fa38be,2025-11-19T19:14:59.327000
CVE-2025-12762,0,1,c601b054c988f5d552eef53a2e2deb1b3171f8935c97202de20565cf019193a5,2025-12-01T20:15:49.347000
CVE-2025-12763,0,1,f5fe8c30f824e47723d6ba9c608caaf5f1dda00e652c187c9e79e43624cf4f30,2025-12-01T20:15:49.517000
CVE-2025-12762,0,0,c601b054c988f5d552eef53a2e2deb1b3171f8935c97202de20565cf019193a5,2025-12-01T20:15:49.347000
CVE-2025-12763,0,0,f5fe8c30f824e47723d6ba9c608caaf5f1dda00e652c187c9e79e43624cf4f30,2025-12-01T20:15:49.517000
CVE-2025-12764,0,0,6d986726ffd81d1c808da0d6c07a6f5bf3345f639a5f139e01434f3732f41cfa,2025-11-19T21:19:33.810000
CVE-2025-12765,0,0,babbaf007153935150e7ca0b0f22c092fcddbb8a7b9735345ab84b334998a41f,2025-11-19T21:18:09.750000
CVE-2025-12766,0,0,1c2df7dd550d41dc4d18eccb534b3f0f66da11227cba6410f47d415ef6b8dcc3,2025-12-01T17:22:03.653000
@@ -288304,7 +288305,7 @@ CVE-2025-13210,0,0,4962badd6a94f63b55db5dd69152518462def29d748f4154f688f397b2a96
CVE-2025-13216,0,0,013f75cc228fc0eaf4c6f7b46eff467f105d446f1b41e284e77858c655332eab,2025-11-17T19:16:17.270000
CVE-2025-1322,0,0,44942778a32b04e3546dd86fb81e0e8dd33a2d074585a18f158028a80293af84,2025-03-13T13:01:31.400000
CVE-2025-13221,0,0,f11e0d2569a48d2fcac26bc250b2c712a99ed195f472f50be6a93a8ffd553a97,2025-11-18T14:06:55.963000
CVE-2025-13223,0,1,9961811d6895808327ae4882b7576baf025db1b92f6a1a38ca5faafc6ab86829,2025-12-01T20:15:49.667000
CVE-2025-13223,0,0,9961811d6895808327ae4882b7576baf025db1b92f6a1a38ca5faafc6ab86829,2025-12-01T20:15:49.667000
CVE-2025-13224,0,0,199be984c14458a980f221bda566b7c7977627dc2f72a4bc3c1a17760645dcec,2025-11-19T13:04:59.100000
CVE-2025-13225,0,0,45f62704526647b3500fb7084f4632a07186faae4900a87cffbdb5f4cd017c9a,2025-11-19T19:15:47.533000
CVE-2025-13226,0,0,568acad095c31f51f3a19f2821f40a46e0e960fe78399e405e65236cde6691ea,2025-11-19T13:04:51.433000
@@ -288430,7 +288431,7 @@ CVE-2025-13389,0,0,9cad26e55a5d23485fef4c2d9e093c0daa8542c618c2db32da617b45c6bf0
CVE-2025-1339,0,0,6860f8f36032bcedc9f18d921cb05e31dc82859a782caff2668b67d0b58904a7,2025-03-10T17:11:37.343000
CVE-2025-13395,0,0,8a83c10db023db91e3918ecab17835650f1b29de2171d664ec4aa75545f788f4,2025-11-19T19:14:59.327000
CVE-2025-13396,0,0,cdbb29c720acc849dc4a055fe6fe98de320a6c825d75c1c3145c6e8f97621cd1,2025-11-20T16:23:57.650000
CVE-2025-13397,0,1,6aae58b7089ec68ceab115b463fbd90797893dbf11c4682b9abfaab596b895d5,2025-12-01T19:58:58.790000
CVE-2025-13397,0,0,6aae58b7089ec68ceab115b463fbd90797893dbf11c4682b9abfaab596b895d5,2025-12-01T19:58:58.790000
CVE-2025-1340,0,0,b9875780a16a13744dbcd5d844e8ca36a7e2aa268ada35546ad50497001d4e5b,2025-03-10T17:14:20.723000
CVE-2025-13400,0,0,fe6813d8f32cb93e656589cf22f4b883ba80630fab349d971cbfffe4e3cd3b64,2025-11-20T17:08:03.573000
CVE-2025-13404,0,0,3106ac07f0d9c7689dda9e740a980c99530f0c00b6681d1537dd06bf02a80ba3,2025-11-25T22:16:16.690000
@@ -288571,11 +288572,11 @@ CVE-2025-13735,0,0,fbdc12440d4b645fa4a328734a96f5915261a0822b6db338ddfbfc4e9d1d2
CVE-2025-13737,0,0,06ed0d0bcaf1dec57d0679e220b48e09b47dfbd27d83fc23363e60a384c4e6d3,2025-12-01T15:39:33.110000
CVE-2025-1374,0,0,c63cfcac4cc7e61dba55405a222ef271dee63812916e3abadacbbeed1056c0bb,2025-10-23T20:06:00.793000
CVE-2025-13742,0,0,651e9c656e7488b9eb0b1b5c825c8da1ef1fcda990eddf39cbb4856d4b71250d,2025-12-01T15:39:33.110000
CVE-2025-13757,0,1,cb477f07e4d784fb13dd728d3d554954fb320d31474a17e6c54b25c756f40146,2025-12-01T20:15:49.867000
CVE-2025-13758,0,1,37f78683568035a2b1238dcb293cb9d2ac05af70c66f5876a7890c56ba1cf8da,2025-12-01T20:15:50.103000
CVE-2025-13757,0,0,cb477f07e4d784fb13dd728d3d554954fb320d31474a17e6c54b25c756f40146,2025-12-01T20:15:49.867000
CVE-2025-13758,0,0,37f78683568035a2b1238dcb293cb9d2ac05af70c66f5876a7890c56ba1cf8da,2025-12-01T20:15:50.103000
CVE-2025-1376,0,0,de4237f06ae76bb371bb37755604dd21a28e325c264f69c8440e79b38d9646a3,2025-11-04T20:21:18.260000
CVE-2025-13762,0,0,e4a9613b67d1e2508956ecb01c28f9782277d78d11fe449e34337920a125d445,2025-12-01T15:39:33.110000
CVE-2025-13765,0,1,eb8824c4c4571bfc913a85a09c8c1e014fdcf0e4523038cf1ba395eda37d14da,2025-12-01T20:15:50.343000
CVE-2025-13765,0,0,eb8824c4c4571bfc913a85a09c8c1e014fdcf0e4523038cf1ba395eda37d14da,2025-12-01T20:15:50.343000
CVE-2025-13768,0,0,a163ea22657ba17715998855bb30ef9bfa0d5adac1c1af6ac0293213577b77bd,2025-12-01T14:39:31.940000
CVE-2025-13769,0,0,297bea2dc34ad119dc2980daa6e5f81e5dd2c38cb285e425b7f8693c8edfd54d,2025-12-01T13:13:51.040000
CVE-2025-1377,0,0,cdf3c00849797fee9786ea08188d37668b21a456809fa64aaace8c05203cfaf9,2025-11-04T20:26:20.043000
@@ -288586,14 +288587,14 @@ CVE-2025-13782,0,0,633143ed5b774c88beabc099d543e2124efd2f569a0381fdff0ee06d6230d
CVE-2025-13783,0,0,9e3fa079ee37ab52fc60bd87d5e1e1a80b89c5fa1ce7efec325fdcaccf7b074f,2025-12-01T15:39:33.110000
CVE-2025-13784,0,0,400b5424778aa984892876e01cb91cb42eb2668e77edbcee3b75ef4bfb76ca69,2025-12-01T15:39:33.110000
CVE-2025-13785,0,0,8f91a4cfde425cf28727747e3a8324f58919a55662a74d3e021a6fb4dfe16095,2025-12-01T15:39:33.110000
CVE-2025-13786,0,0,7bc988f078e9b09747fa85e6529d9798348ebea2411115bc41aa708f8a1fadf9,2025-12-01T15:39:33.110000
CVE-2025-13786,0,1,faefec8f82eace823af3eadfdd9e401c1532825e4b65225972b717f2138f6bdc,2025-12-01T21:15:49.950000
CVE-2025-13787,0,0,21b6a867d86792c53769e6eac82f07d87e652d15e541875aa9a8b91e33b02c2b,2025-12-01T15:39:33.110000
CVE-2025-13788,0,0,80c51aa429c3a336348e7489daccb9a7098889688d2bb77a8664aa3696634111,2025-12-01T15:39:33.110000
CVE-2025-13789,0,0,aa68242411fe5000c2ea58eea6dbb1eb40df4049de97ac6bf98e8da118da9faa,2025-12-01T15:39:33.110000
CVE-2025-1379,0,0,5dcb3165f40d5545ed4ce19a6009cd3b7b7246346d15ef8a292528f915f8199d,2025-04-02T18:44:42.610000
CVE-2025-13790,0,0,420efa5394e93c667c667dedd7b9563b492b63833c60c220c04de86852e3a2dd,2025-12-01T15:39:33.110000
CVE-2025-13791,0,0,e08c12980bc607bebba43166171191e321a125cbeedd99efdbbd2f6af7f05e5d,2025-12-01T15:39:33.110000
CVE-2025-13792,0,1,ea99684ebbebb3650d7402e6851deea9dc9af15d6cf4c047d4fa66ca06867095,2025-12-01T19:15:49.523000
CVE-2025-13792,0,0,ea99684ebbebb3650d7402e6851deea9dc9af15d6cf4c047d4fa66ca06867095,2025-12-01T19:15:49.523000
CVE-2025-13793,0,0,cee72f8cf2011358fcb17c0da768201ddc2b1d608827f8b279ec4e127b5e3ff0,2025-12-01T15:39:33.110000
CVE-2025-13795,0,0,997af5e0bec0000a9aa80bb7fa15a961c6515812519d9cb784cb425b0c07ab10,2025-12-01T15:39:33.110000
CVE-2025-13796,0,0,851a06944e44367a53781cedd5bb574eea06934997eb7084a4bc11f8c553d3e1,2025-12-01T15:39:33.110000
@@ -288622,8 +288623,8 @@ CVE-2025-1382,0,0,87b39febd022dc5be9950aee3332d7f65d611ba2ccabe27600ad34ce4d1074
CVE-2025-13829,0,0,4f64fcd3ef610c312085803267e8f9cf95c0674c501918a12f46a5a7e6cbf0cb,2025-12-01T17:15:48.807000
CVE-2025-1383,0,0,c9fb1a308be655ba73427b329ae1663f0ab56dcb4706e7cabab9a87230c6ae97,2025-03-19T20:47:28.020000
CVE-2025-13835,0,0,639c6007deb0cac63cbe44fa6bb52543cff1e013603be33d3a41554407e3a5b9,2025-12-01T18:16:04
CVE-2025-13836,0,1,e3b37db33f167a3f3ea74318bbb44918ec0139ff71d48c0bc1133c22055e6490,2025-12-01T19:15:49.770000
CVE-2025-13837,0,1,ddd077cc4935f27e823316fda768c6e2017dfacd065a0efe72ae974f7a86b0f0,2025-12-01T19:15:49.920000
CVE-2025-13836,0,0,e3b37db33f167a3f3ea74318bbb44918ec0139ff71d48c0bc1133c22055e6490,2025-12-01T19:15:49.770000
CVE-2025-13837,0,0,ddd077cc4935f27e823316fda768c6e2017dfacd065a0efe72ae974f7a86b0f0,2025-12-01T19:15:49.920000
CVE-2025-1384,0,0,59bca0f320dfac1819c25ed5547684a8bde0292ecdbc52eb5c51c8189c4ff6a8,2025-07-15T13:14:24.053000
CVE-2025-1385,0,0,cd0488ff01f383d9bed7e9dfcd438a68752b6f1d05d46ab0fe46ec06da7cead8,2025-03-20T08:15:11.723000
CVE-2025-1386,0,0,1e2bc83eeb339828b23f6854fed3e26712eaf84d02859537da20d28063a18e14,2025-04-11T16:15:19.490000
@@ -295424,7 +295425,7 @@ CVE-2025-27204,0,0,915ee58270bed657aa3414a33920c2828a16919cebf1c439beba158fba489
CVE-2025-27205,0,0,f966fa29a96c9fd50b3bf62dee097dccb11f1346c8935ce19a945be5d4c76047,2025-08-05T15:59:53.160000
CVE-2025-27206,0,0,d294d50f3906c6fb3fe785cd1596aadcf69ed2db2162953cfc8dc1288ebf1c78,2025-06-23T19:25:38.097000
CVE-2025-27207,0,0,1c7dcef4ac4e484392f18d8488dffbf14e7319161e3db5ca63f06641870014a6,2025-07-11T16:42:26.887000
CVE-2025-27208,0,1,26ba751216abd92aba229dd8f55bf62eaf999e159acf4011d7c5165b6efdfa7a,2025-12-01T20:15:50.553000
CVE-2025-27208,0,0,26ba751216abd92aba229dd8f55bf62eaf999e159acf4011d7c5165b6efdfa7a,2025-12-01T20:15:50.553000
CVE-2025-27209,0,0,2ed4734330db6198f7eeccdcf43602bc5989a3c88bc5f2f9d0e33392e557679c,2025-11-04T22:16:08.007000
CVE-2025-2721,0,0,aa8959d6414ccd78b185fee276132fe2183524f73060666b030d6ef296f0e6b0,2025-04-22T13:15:42.990000
CVE-2025-27210,0,0,c435f52bee6497699eb0de44c88f27cb60e7ed7642a107b37268e6389ac4bc6b,2025-11-04T22:16:08.123000
@@ -296270,7 +296271,7 @@ CVE-2025-2875,0,0,0fc58b1873d97c82b44352a6a2dfe32000dd19d00f391df82ed79458e6e0bb
CVE-2025-2876,0,0,34c79ebfe20c2fc13294537c33b0ff61b155c827ab3c12d5f8ab0c5b0bc4cade,2025-07-17T18:15:22.720000
CVE-2025-2877,0,0,84ec84d2bfb12624c83348efbdfe58ac8be43428be65066c732bbd9fdb6142cb,2025-04-07T16:15:25.720000
CVE-2025-2878,0,0,91ed70612b37527f5a64720333f3ec88a66eb4235ee494c58d3cdb31eafddc33,2025-03-28T18:11:40.180000
CVE-2025-2879,0,1,57d0c3527e6791ccbf7178ca7c4de6e40e6b3a6f90c4da90188600c09407ab0b,2025-12-01T19:15:50.240000
CVE-2025-2879,0,0,57d0c3527e6791ccbf7178ca7c4de6e40e6b3a6f90c4da90188600c09407ab0b,2025-12-01T19:15:50.240000
CVE-2025-2880,0,0,e389725818c992645d02e6070b5c39fb3800bf8237a4c9078a3291c23ae5430a,2025-05-02T13:52:51.693000
CVE-2025-2881,0,0,fdb559a0489fd102237eb30f41f019d2f5c2b3faa82f877e9abc8e7c02b82b2c,2025-04-15T18:39:43.697000
CVE-2025-2882,0,0,c97b3f3ea8d4bf1b525408e9c0aeb5839e6b1dab2a43ddecf7ef1915f34a41ad,2025-04-08T18:13:53.347000
@@ -299764,10 +299765,10 @@ CVE-2025-32984,0,0,8105d87a07c5c95a1a426ae174deda99d5a554c19d681b58930899a19e6a0
CVE-2025-32985,0,0,15098eb35dd96554c37930bd6550d414995a3f61b8322bd641d2b24b0e89c7ce,2025-05-27T16:57:03.517000
CVE-2025-32986,0,0,2131eb0c109893f204ec917def61d06bfff3cfebc0c3882e871b74792f8d9430,2025-05-27T16:56:44.530000
CVE-2025-32987,0,0,22fee82644638daf52e45d25879682a7b8e6315d4283004fcb29ee09fc3f6bc1,2025-04-15T18:39:27.967000
CVE-2025-32988,0,0,c4b94285c0c011b479cd87db54225b654eb1f239d7da2a775ef1e13290e388f0,2025-11-06T23:15:36.797000
CVE-2025-32989,0,0,44fc94eb8d69ea61abd434c881a29195641b5871999a534c7fa067af1465acc2,2025-11-06T23:15:36.993000
CVE-2025-32988,0,1,7d280d4a9c155d9ba35794717309cc47a3972860e2c86caa2627c419ea605ee7,2025-12-01T22:15:47.790000
CVE-2025-32989,0,1,a783d4fbd6243b0cb1c288ac63944ffb14a445bae60d8756875dabd681cea579,2025-12-01T22:15:48.027000
CVE-2025-3299,0,0,4bb68d1a77531b6cf0d60c8ebf8a47f27b8c946ab637bd433e4b42368b67a253,2025-04-08T16:48:45.137000
CVE-2025-32990,0,0,6645099b34d1408a143681639c241a61a2f1ad0178e960a96432bd602227a2cd,2025-11-06T23:15:37.137000
CVE-2025-32990,0,1,1ff121c2edc4a308ae27fd27459b92f6363cfbb4ea8c06bb4048a82e6422006c,2025-12-01T22:15:48.200000
CVE-2025-32992,0,0,e5bec7e3fca95a91fdf085a1367f7fe05ffcb743c4da97df3b58e4c770ff8cd0,2025-08-18T21:15:30.130000
CVE-2025-32993,0,0,efe10e43b700d805bab5f9cbf4da0d85804a68c5ec719e614ee799809a295233,2025-04-15T18:39:27.967000
CVE-2025-32996,0,0,44b03681b27714100d4188a860d77e764119a0a8b23389da352345dd35fd80ad,2025-10-21T14:43:20.087000
@@ -300252,7 +300253,7 @@ CVE-2025-3429,0,0,e111017acbfc3ad488b5577926e388fe8cea296485a5a387e88a0046c384d1
CVE-2025-34292,0,0,3f361b5a4f6bc0cfd7abe2b332d5aa343eab9382aa0b054f8136dcaa1ca5bf46,2025-10-30T15:05:50.613000
CVE-2025-34293,0,0,4fc900fd6217442a213ce5cdfa3d3646768f35c35d6fedd37bbd4b03720a4453,2025-10-27T13:20:15.637000
CVE-2025-34294,0,0,dfa0f81a66a7dba230cfc3d9417171e889ba13690a242d8eccede1a9e8e02e96,2025-10-30T15:05:32.197000
CVE-2025-34297,1,1,20b762afdf39e50f68f8ddb3dd4190975cafed4e161b949b8076c29d115c7734,2025-12-01T19:15:50.420000
CVE-2025-34297,0,0,20b762afdf39e50f68f8ddb3dd4190975cafed4e161b949b8076c29d115c7734,2025-12-01T19:15:50.420000
CVE-2025-34298,0,0,7794cda8b7a546bc2c75cad122bc0c18f88ef91ff907c81fd0fd1d02cb6d7468,2025-11-06T16:27:12.660000
CVE-2025-34299,0,0,e64967b428dd7916224ed796e4958560e643eef2969604f0a4d6f96dd463a5cc,2025-11-12T16:20:22.257000
CVE-2025-3430,0,0,a8dd209d2f3ffc999e493da170fd38f29e4ca6c65941e704b12a73f04051bb5e,2025-07-10T14:18:52.400000
@@ -301972,7 +301973,7 @@ CVE-2025-3864,0,0,444a554174f3a166bd8cf43652805e71b133026b842d6829548d5a78647f68
CVE-2025-38640,0,0,72ae58957a2e676235a4b1f4bc27057e142ddbe22b0ed6b29ffe395ea06d730a,2025-11-26T16:36:32.227000
CVE-2025-38641,0,0,d2d32dfdbdd1ea9942126c1d29c744e9fa9d35d6e818336c24f86145a68587bc,2025-11-26T16:37:03.980000
CVE-2025-38642,0,0,6458672a68fdffc56fdc614a317fb2b1d8ddd1bfc6fdcbc3395a523dd441038c,2025-11-26T16:38:47.103000
CVE-2025-38643,0,1,f9b037542d54001e44d5fc5ae44c850519ae245f6933b4d64c0bdbea76c3ded1,2025-12-01T19:14:29.583000
CVE-2025-38643,0,0,f9b037542d54001e44d5fc5ae44c850519ae245f6933b4d64c0bdbea76c3ded1,2025-12-01T19:14:29.583000
CVE-2025-38644,0,0,88f783f716df7ecacc61cd82108df8a73fea0e7a98e73d1ea802714ca1172b1d,2025-11-03T18:16:32.873000
CVE-2025-38645,0,0,5938c94c945ec43e2003923042d3937b680d8755a9da0a3f581ade96f6ac6ba8,2025-11-03T18:16:32.980000
CVE-2025-38646,0,0,ddf2369894f5ff9ef8f7d69b65bfa8d47476f90b0d18fb557e12a010319400b0,2025-11-26T16:42:46.323000
@@ -302611,9 +302612,9 @@ CVE-2025-39830,0,0,ffe943b0dbec618488d4717374a731b5ca359e082d0f7089f86c088675da3
CVE-2025-39831,0,0,8b82e557885e9f7a0e39f4f87a070d6aa09b026c43c9de5a54aaf8a55351093d,2025-09-17T14:18:55.093000
CVE-2025-39832,0,0,91373722795e1e8ae7aea4c639be3e4823e0b516b2b5228335a2333eb689154f,2025-09-17T14:18:55.093000
CVE-2025-39833,0,0,feac8baa878b5b4d83ac1abb10596ddc370b18b14a36547354d01212ae27e7eb,2025-09-17T14:18:55.093000
CVE-2025-39834,0,0,455f9fe51780559d00358fafc49bf85e2c8fa49d5eb572db6140b9c77c927f97,2025-09-17T14:18:55.093000
CVE-2025-39834,0,1,0f910e59f5ee47a7f87c358fe434001982550b40ddffb25f611f1bc1fe9526ba,2025-12-01T22:03:46.933000
CVE-2025-39835,0,0,63c0d3d47fda581dc11d378ea0bc5c43d45c6e4526251ff60a729ae99de73c4d,2025-11-03T18:16:49.293000
CVE-2025-39836,0,0,ead37077839b6d4d8c6159a3f6cabc1da50384b75704cf01dee941f6956efc2e,2025-09-17T14:18:55.093000
CVE-2025-39836,0,1,6cda1d39f84e3d5d01bd3183a9da8e603b7e2d62e46854a48d5183b752de4016,2025-12-01T21:59:35.697000
CVE-2025-39837,0,0,2f4bf1765df1fbfc8999adc3a1ae3b1021ff31d4f7efc38bd56982f7e4504dfc,2025-09-22T21:23:01.543000
CVE-2025-39838,0,0,538492d17fe0c78654b609bbafa513cd9c18323e0e46e40e054ae3b82bd46c20,2025-11-03T18:16:49.403000
CVE-2025-39839,0,0,0d2e0366a692fec697b67dc9bc2395bd52bade71b715f3d0fde3615a93b5b3f0,2025-11-03T18:16:49.507000
@@ -304155,7 +304156,7 @@ CVE-2025-43357,0,0,e7df40bad97e198cd8962fff4f23f3c4670d400a0cc9f4ae35d9331a66cdd
CVE-2025-43358,0,0,23bd418b07c5c11fc29130251971d113c77668911900289fe6894037b710f0e8,2025-11-04T02:15:43.223000
CVE-2025-43359,0,0,1e38c08b23fe717bf38119c51640122068e421ebc9c1483d84e2d8163bd572de,2025-11-04T02:15:43.390000
CVE-2025-4336,0,0,e90be9fd0f0e50081b5081697499ebf47068955b362669f42164ef244e890187,2025-07-11T19:32:44.473000
CVE-2025-43360,0,1,c40dc5dca18046175fe443d3e724b792fece06bb2feac95294082d216b328b2b,2025-12-01T20:15:50.750000
CVE-2025-43360,0,0,c40dc5dca18046175fe443d3e724b792fece06bb2feac95294082d216b328b2b,2025-12-01T20:15:50.750000
CVE-2025-43361,0,0,42389cf848830a2b854dd7b4dab3f7852a072781ad3970a779cd9914a5a77c7b,2025-11-04T16:30:17.110000
CVE-2025-43362,0,0,c8bcb764c761d46222ba8fe72ac4eb95b638c759745bf614c6c9f6753a5b8319,2025-11-04T02:15:43.783000
CVE-2025-43364,0,0,5a05b555ffb156bc3012a304d9426844f63b73bb25b65426d4f78e2a9ef73b66,2025-11-04T18:48:00.353000
@@ -304211,8 +304212,8 @@ CVE-2025-43419,0,0,62e6863f342f6f96056dcdd65d320feeb44ecaac5cdbad231e125f387cccb
CVE-2025-4342,0,0,910cb2a3ed27ed3fa67d71bb9bcb8375be73922349e890c48c75ddf2575d2d05,2025-05-13T20:25:14.167000
CVE-2025-43420,0,0,ff05007d34a6abd0c7f03da3dbdc2a549574d0458ce904d330040fd36275f278,2025-11-05T14:50:00.137000
CVE-2025-43421,0,0,531e0f88749117edd8e61f800e1564aa6b553596af41e87b523b10b17e22a0ed,2025-11-05T15:00:05.023000
CVE-2025-43422,0,1,83b73041278778f0f126c06f4427f1ee66c9c2bc5c1e2682a371fea8aeeb6f0b,2025-12-01T20:15:50.953000
CVE-2025-43423,0,1,1d8ff791d8407af77f55e71b4c1cc5c79f4cfc0cad4b54d0372a8db5d2aad12d,2025-12-01T20:15:51.147000
CVE-2025-43422,0,0,83b73041278778f0f126c06f4427f1ee66c9c2bc5c1e2682a371fea8aeeb6f0b,2025-12-01T20:15:50.953000
CVE-2025-43423,0,0,1d8ff791d8407af77f55e71b4c1cc5c79f4cfc0cad4b54d0372a8db5d2aad12d,2025-12-01T20:15:51.147000
CVE-2025-43424,0,0,b5141f9dd0e3527803ccb9b819c2d322d105eab122061b902f235482e88a9265,2025-11-05T15:15:36.513000
CVE-2025-43425,0,0,a4cf2045567ec74c3c9c84c2e49963bfed9ee9bcefce0b3d073ca938cc1de1c4,2025-11-05T14:50:22.293000
CVE-2025-43426,0,0,3d86a21e38696c1651d4ff3ffe30b173663e245f74678d21e2b3cdafe8466d8b,2025-11-05T15:00:13.510000
@@ -304220,9 +304221,9 @@ CVE-2025-43427,0,0,662601c48be5eeb5425fa272580250220eebd7cc20a68b4f34d034bc0bc34
CVE-2025-43429,0,0,0d9e25d8945dcc2dc9a43fd71bbc676a58a318cb4383b9bea7252b3c4572f4a4,2025-11-05T19:15:54.043000
CVE-2025-4343,0,0,923c0cef6ae5fa92856bfede6a2cee07988d425e984f25a366a7d1c75ef5d05f,2025-05-13T20:25:07.850000
CVE-2025-43430,0,0,5c9e69a500ca2b0da322efce72994b7855dbd14c4331cf906f4e81ff6d375555,2025-11-05T14:50:34.663000
CVE-2025-43431,0,1,6f33d7edc1a765509a8a056d957d63bf3138f889b5b777a0718c7e4884f2a35b,2025-12-01T20:15:51.327000
CVE-2025-43431,0,0,6f33d7edc1a765509a8a056d957d63bf3138f889b5b777a0718c7e4884f2a35b,2025-12-01T20:15:51.327000
CVE-2025-43432,0,0,cf40603c89fe31e5e8b64be015ae61c9f2522f5c9e69bdb802636055942f4872,2025-11-05T14:38:49.690000
CVE-2025-43433,0,1,147b0bcd4bf85cc0bd108a0e74ba1d92ce0d2dd7b71e9a174abc2d10266dc648,2025-12-01T20:15:51.500000
CVE-2025-43433,0,0,147b0bcd4bf85cc0bd108a0e74ba1d92ce0d2dd7b71e9a174abc2d10266dc648,2025-12-01T20:15:51.500000
CVE-2025-43434,0,0,aa8666695543e273d4d465469006e85b841e32969487dd60abcbef52b9695109,2025-11-05T19:15:54.893000
CVE-2025-43435,0,0,be14637997d04872d042c502f924fd1eab83a9a94b75a6e6fde725353eb851ae,2025-11-05T19:15:55.100000
CVE-2025-43436,0,0,8f9e4a39a8390087760746d3a4ca6f87a6e43958e23227fb98718057f10a693b,2025-11-04T19:05:45.737000
@@ -307248,7 +307249,7 @@ CVE-2025-48705,0,0,3b069502956cb6d5483858210e4d04c3f8625df0adda679c58e63091bbf50
CVE-2025-48706,0,0,3349ef920a170cd95999b04241686d934123b5e89f5df0438e336ebcc42ff437,2025-07-08T14:32:12.930000
CVE-2025-48707,0,0,e781fd2453735517746189035ba4bad9690e5b7c4978e63eb1bf36a42fe0f588,2025-10-14T19:43:56.150000
CVE-2025-48708,0,0,2f2ee7f6835a24101b8f2fad92720fa7e2d2cfee9343296271ef3f76df75e315,2025-06-20T17:13:54.913000
CVE-2025-48709,0,0,3066088dfd43f5e6cba5fbc6373ee61a340815e1e67f3822b974dd271797c0c5,2025-10-27T16:15:40.490000
CVE-2025-48709,0,1,44aa87f4fce2043c2e04f4e8b18e4d0ec7f4b2e601885427b5fca799fdcc9f6f,2025-12-01T22:15:48.363000
CVE-2025-4871,0,0,d9183a6ea5a2afa28642be53d20b661c6aa8059e9e6e695046b3eafadb08ebe3,2025-06-12T16:27:46.547000
CVE-2025-48710,0,0,f0402bb1ed6d8f6e40d35a516c63ba6d11524553c0fc1bb2ee868d959afc0447,2025-06-04T14:54:33.783000
CVE-2025-4872,0,0,4b7ea139f9585caeb8a40fd0035b9b3fc93b672209c7308e8ad73688646ffdc6,2025-06-12T16:27:20.143000
@@ -307458,12 +307459,12 @@ CVE-2025-48976,0,0,4d8a1819d637e6166101b801eaa25e6266b92f68bd80a362cedf1a2bb8c1c
CVE-2025-48978,0,0,c8dca1a164c5a771ff8fc86700581a0a831318bcb504f858c82c2b7f2669bd4d,2025-08-22T18:09:17.710000
CVE-2025-48979,0,0,8cc67cff8b6a26bac1e3c9e584deb394783a7b871462ef6cae5df7254fdda330,2025-08-29T16:24:29.730000
CVE-2025-4898,0,0,088de021e18707e0dc4ec8499500601b39900fc456f0a7d4c0f7a0b50fbac254,2025-05-21T19:37:41.533000
CVE-2025-48980,0,0,cfc9c82df391460a5b0dfba93742cbfd08021cba3a24443990e74a4bc5570477,2025-11-04T15:41:56.843000
CVE-2025-48980,0,1,ca5fbc21c29e02d5fac8009d58def82ad46ef27ec2dc37014217cfd33fd0b4b6,2025-12-01T21:15:50.250000
CVE-2025-48981,0,0,5be2fc13748260c76be76145001536ae61607b4d9787a12735902d8a8de2cb0f,2025-10-08T19:38:09.863000
CVE-2025-48982,0,0,fecc905a116bc4cd6e6bdd2bebd95539516075ea56b025b6bcf0607514fb78c1,2025-11-13T14:47:08.707000
CVE-2025-48983,0,0,e4f0c6261174e13900bbc1426d176dffe4cf6ef240dea0e9994f5d8e002ed08c,2025-11-11T02:07:03.383000
CVE-2025-48982,0,1,31be25a9f02f1bfb195a817124a290d608990a69e91b7d6460a94a52806fffc9,2025-12-01T21:15:50.380000
CVE-2025-48983,0,1,7eb5f674887decf12aa11bdc66e3ca961d9a6749ac34af258ea8cc101ced68f7,2025-12-01T21:15:50.527000
CVE-2025-48984,0,0,4615a534e05deec6f9a4718b4ebf1f6c8be52138f0367c85fd6e7a4ec7a89c8a,2025-11-11T02:08:57.443000
CVE-2025-48985,0,0,7537e95b5fa5cca849f052e15aa0ac61b2bfa7c42fe0f34ae0cdef3459dbd5fd,2025-11-12T16:20:22.257000
CVE-2025-48985,0,1,d84a841f9d92c52c21bbeeabd9172b255bf65c06f0ba3ea32ec9dfd7b0ebed79,2025-12-01T21:15:50.673000
CVE-2025-48986,0,0,dfc979c17576cbd9d9c7402ae09116c1299ecd60b08063c41fe09a5a49f44d93,2025-11-25T18:57:29.873000
CVE-2025-48987,0,0,239192091f36c33ec6a9bdcdf307e7164d53d25495609a09c45da828cdbe71d9,2025-11-25T18:56:45.073000
CVE-2025-48988,0,0,b950ad497f92ccff1815f5da970ae7efbac48cca58a8625908e10e1ae29d920d,2025-11-03T20:19:07.890000
@@ -308645,7 +308646,7 @@ CVE-2025-50722,0,0,d6bcacbb1740597c0a941f7288bab7406d5aefb809a20248779e32451bce0
CVE-2025-5073,0,0,a1230535d583b5f466b5fe2615cca31afcba55333f600b324f190ec047a41d18,2025-06-05T20:13:49.707000
CVE-2025-50733,0,0,f821bb94d1001de4039d24c263726e694130cc538192f5709a6a9774af20b795,2025-08-26T14:15:38.110000
CVE-2025-50735,0,0,d68f8132adfe6e9a9f3af16cf39cfede1775cb165df543545c4baf2167c82619,2025-11-05T18:53:52.923000
CVE-2025-50736,0,0,f84f002547ae1698344f6114a466c251719903765ce394da235f1ccad1df3e70,2025-11-04T16:16:00.453000
CVE-2025-50736,0,1,0d37c8562487acb3e78617ed8b7f846c003076686ca19fe6c3eda738e7b3c518,2025-12-01T21:15:50.820000
CVE-2025-50738,0,0,bed0e0606dea2d270a63639d5c97b46375266cf3e08cc405aa6406622cbea9e7,2025-08-22T16:15:43.973000
CVE-2025-50739,0,0,e219787f244b3cf9059dc22a5ad144c42307e11d20456f395bad824de53e31ea,2025-11-04T16:16:00.617000
CVE-2025-5074,0,0,b32e6a163eb96eec8f69e51ca7a85c7da766b8b9d224e7b4f2f300a52a5b9bc3,2025-06-05T20:14:07.020000
@@ -308889,8 +308890,8 @@ CVE-2025-5167,0,0,d0507ecf0b5b21e24f107649f2515c6afbb660790e07751f18cd594dd93f34
CVE-2025-51671,0,0,e799dcb5c7f4e2c72e975ca6f751fefdaf18628907cc07caa283e469a95a7814,2025-07-01T15:53:21.097000
CVE-2025-51672,0,0,e9ac7fb0b8689d514c7731fd7b55a9a807b757912d941a99aaf4ad5aedffa427,2025-07-01T18:03:27.253000
CVE-2025-5168,0,0,74f02a822faaa8b5a46a78e41282b22e771403dfc5a44608e54bea89178ff6fe,2025-06-03T15:40:48.337000
CVE-2025-51682,1,1,671ef76bc7e7f384bd1211142a693d733e0dd5932a7c4ea2ed80d63b803dc24b,2025-12-01T20:15:51.660000
CVE-2025-51683,1,1,56bbea0218739e6357a804daa25786838058c466e8150da3b683838139393c88,2025-12-01T20:15:51.783000
CVE-2025-51682,0,0,671ef76bc7e7f384bd1211142a693d733e0dd5932a7c4ea2ed80d63b803dc24b,2025-12-01T20:15:51.660000
CVE-2025-51683,0,0,56bbea0218739e6357a804daa25786838058c466e8150da3b683838139393c88,2025-12-01T20:15:51.783000
CVE-2025-5169,0,0,478bfc131e88e29d02dd1ccd61a9e6c142c0208ac4743abe27cdac119eac9f7b,2025-06-03T15:41:01.973000
CVE-2025-51691,0,0,2a24a3eaa651e3e5b601a1abd027fcb755c20898339314610b9553186583b0fb,2025-08-13T20:15:30.700000
CVE-2025-5170,0,0,2d3c44ad97f24506915e1ae8aa2894c6137b30f378f725193e8dabaa89f599c6,2025-06-03T15:41:52.177000
@@ -309250,16 +309251,16 @@ CVE-2025-52655,0,0,0a3417f10e99f455113a8c82ee0982dedd7254527f8e71c9ef53b86c316b2
CVE-2025-52656,0,0,7d2866edd15a19d6e55dd9373522bdab479736e1c8528c549dcea246be31b833,2025-10-08T16:50:39.200000
CVE-2025-52658,0,0,e73966b0bc7bf6d5305b4e87e39250d15ac770e39ee0ad5c04eca6d4f64d1a7b,2025-10-10T15:16:04.233000
CVE-2025-5266,0,0,8a2ca669598a03f46dff8bb37dd9a638cdabbb10fe085013cc63a920d1c1f994,2025-11-03T20:19:16.240000
CVE-2025-52662,0,0,13bcc4552f7de60d6cf943f71c382b8a38c9b40d4e3d3982f658bd2c622fba71,2025-11-12T16:20:22.257000
CVE-2025-52662,0,1,a6665977862cc329ebffd8b6983bc46f6641a469c1cf01ccc16cb03a422b13c7,2025-12-01T21:15:51
CVE-2025-52663,0,0,89c70b1f284d5a929e459e22e646e0ae54f066a21de9f1960adeb90f3b16154c,2025-11-04T15:41:56.843000
CVE-2025-52664,0,1,5fb889438407b29f37256341bca1b4cc9265d241333be9812959f0a5809c5c81,2025-12-01T20:15:51.900000
CVE-2025-52664,0,0,5fb889438407b29f37256341bca1b4cc9265d241333be9812959f0a5809c5c81,2025-12-01T20:15:51.900000
CVE-2025-52665,0,0,a5b22c967c7804f42540105aa948eeadd5ad62886fc137a68b2d02413d7d18d3,2025-11-12T14:51:21.057000
CVE-2025-52666,0,0,7ab4726d0697eb34940e0b135269d8034c4df7ab4fa0f58868a7f44be70775b4,2025-11-21T15:13:13.800000
CVE-2025-52667,0,0,398f6fd405e62f481c8b603b65b280c886c7bafa2f737d59e1ea823b6102d325,2025-11-21T15:13:13.800000
CVE-2025-52667,0,1,7244e5dc4ececa3b5b47c916fa1c6000ee8b4319e581d01da0bbaca848e3e0e4,2025-12-01T21:15:51.130000
CVE-2025-52668,0,0,32b1d8def53b9bd7381fddab9a9c311fac16df6e6f67f17b06bfd4a8b5565ca9,2025-11-21T15:13:13.800000
CVE-2025-52669,0,0,928791c25a69858760e9cbeb8bcc71caf24fa8666dbd453ed5175528350d1c0d,2025-11-21T15:13:13.800000
CVE-2025-5267,0,0,e23087e179cf44134836de7a812203898ef64aba608e835a2c99df1f209d68b6,2025-11-03T20:19:16.420000
CVE-2025-52670,0,1,f4e56ea29c3597dee10f0f2040dcc07a822eccfc63cdbf18def296ce58d3cc09,2025-12-01T20:15:52.047000
CVE-2025-52670,0,0,f4e56ea29c3597dee10f0f2040dcc07a822eccfc63cdbf18def296ce58d3cc09,2025-12-01T20:15:52.047000
CVE-2025-52671,0,0,61e9d542ce061f46eade221aa20a05cded05024d037223bc36a0d7576e84dfbf,2025-11-21T15:13:13.800000
CVE-2025-5268,0,0,4fb0b611433478e9ed53bf2511f1d56960e851188c13f16758c88f8de9dc4515,2025-11-03T20:19:16.580000
CVE-2025-52687,0,0,557ddea57b56a7b1244ed82f9fa376bd958c5c08f84a9a0459f2b831b26b0483,2025-07-16T14:58:59.837000
@@ -310920,7 +310921,7 @@ CVE-2025-5452,0,0,0e03c28eb8c141e82fe45d8129b4ad74d2c08674693ab9035a9b621d688d6c
CVE-2025-54520,0,0,edd9ee2cd20dd7e399aca89dd0be968134d588f4cd10885e1f75e0e2db03c0c9,2025-09-26T14:32:53.583000
CVE-2025-54525,0,0,a1ada4667a5f6ed06c64267db33ab9564a4d52ea9dd896e46bfad9899dfdb5e8,2025-09-24T00:37:15.620000
CVE-2025-54526,0,0,cf531368e951714c311568bc1673d34e619a1cd6d941cc3d86f20ff91f179d4a,2025-11-12T17:15:43.807000
CVE-2025-54527,0,1,5997bc0793104ee8c1cdfb9d77f572bc6f4308b17c49f15af4b9bb1793e3fec3,2025-12-01T19:23:32.123000
CVE-2025-54527,0,0,5997bc0793104ee8c1cdfb9d77f572bc6f4308b17c49f15af4b9bb1793e3fec3,2025-12-01T19:23:32.123000
CVE-2025-54528,0,0,374eec28724541b7dcd69d2e1fb24b23f752d8027f792298e528690c4e9ece28,2025-07-31T19:50:48.957000
CVE-2025-54529,0,0,b12713fd7fa3d2e47374229689fe67a388c255c104d141a1a48e6e16ba8af27f,2025-07-31T19:50:40.900000
CVE-2025-54530,0,0,ccaa0ece89b4752bb65ce8d5ac5caecd14370b0d2ae9a36ad37355b827e4efb6,2025-07-31T19:33:52.173000
@@ -311466,9 +311467,9 @@ CVE-2025-55118,0,0,d3987d912a153465efd246ba29c9f50656a16966d7ec3578e232bfafca418
CVE-2025-5512,0,0,e298909e7d933eb5f783304ac70fd519fe6ced2380a8d0fd8cc914efcaaadd53,2025-10-03T01:14:16.500000
CVE-2025-55123,0,0,4984fb9150d448c08ba530fb65dc11c3731eedda0fb2848df325f4fdbdb0e97c,2025-11-21T15:13:13.800000
CVE-2025-55124,0,0,7abedd197a13cf5472452b0432f0949cf33c3886d077efccf60690b1d9d204ba,2025-11-26T16:56:10.200000
CVE-2025-55126,0,1,7bab6e35ccb3a1dd25647feae7fcbdeb9bc8dcaec8cd6936bafaa5d1991e4dd9,2025-12-01T20:15:52.217000
CVE-2025-55126,0,0,7bab6e35ccb3a1dd25647feae7fcbdeb9bc8dcaec8cd6936bafaa5d1991e4dd9,2025-12-01T20:15:52.217000
CVE-2025-55127,0,0,1b3e4227e0185aad2d93e5338145a40571fe8b2c3950ae640038a03e7612558c,2025-11-21T15:13:13.800000
CVE-2025-55128,0,1,03563cc7f9416a7520bc3aec353ad9c2874ca203a86cc17157f5c3e976283f58,2025-12-01T20:15:52.330000
CVE-2025-55128,0,0,03563cc7f9416a7520bc3aec353ad9c2874ca203a86cc17157f5c3e976283f58,2025-12-01T20:15:52.330000
CVE-2025-5513,0,0,73771ba20cfee0c40c1496aa44396e3afa7175dc109281db4a561029cb427bbb,2025-10-03T01:07:07.983000
CVE-2025-55133,0,0,eacb6f4789096b3454e4c7e6e687577f23025cd668c2a7937009a052d5ce8112,2025-08-08T13:15:29.933000
CVE-2025-55134,0,0,b2c2e6641a08a1f90a382e7c16f9cbf1a484104a3e1d2676e21bb24dcd6efc00,2025-08-08T13:15:30.060000
@@ -311826,6 +311827,7 @@ CVE-2025-55745,0,0,77e8e7deb1f9ac7d7645c86bc9ea08d03deb7b1db642cac6e47a5ee5c536d
CVE-2025-55746,0,0,822ae1c572f9c6cc338687fed05b8cfae84cc556af252bb06e5182d575d85dab,2025-08-22T18:09:17.710000
CVE-2025-55747,0,0,4af9e156321c6eb4a98f102326b9f1c173fba5fd125ab6b68182086c9591b0cc,2025-09-10T17:47:28.840000
CVE-2025-55748,0,0,70ed25c38b854033b335629a41cd8379fd34a23b732a303413cfcee8fb0c5492,2025-09-10T17:24:13.273000
CVE-2025-55749,1,1,9b963a1a40af40a3c987ecfe84ba8c7fbeb29c6ec560c9cd70f6ef69a4ba1384,2025-12-01T21:15:51.617000
CVE-2025-5575,0,0,81a126dfb6ccad488366b77c36606cd2156f744efbd821f36b71a3dcd92de139,2025-06-05T14:07:21.913000
CVE-2025-55750,0,0,c7f71132a361ef7a2f532acf5ac74140aa021bcd0394f2b25fa15eb64da50a99,2025-08-29T16:24:29.730000
CVE-2025-55751,0,0,ef0af972860c9f59fb78952103082e0a696acedc5d99a1c6eea16c8506f9fef4,2025-08-22T18:09:17.710000
@@ -312278,7 +312280,7 @@ CVE-2025-5746,0,0,056ea6c0a98547dc03e9ea5b7d2db7b23a8dcd4896e6644f25db46e7fea0be
CVE-2025-5747,0,0,9410a6fcc6f1e9cd8c246cf721bbe4bfba0a8b250e3ca3f56d775e4424b1302f,2025-08-14T15:38:22.347000
CVE-2025-5748,0,0,39caf40af2aacd2cfc2b42317035d749c59ae8998a36cf4447a3f1abeb4e337b,2025-08-14T15:38:09.270000
CVE-2025-57483,0,0,b1b9293bcf50896d7eefc9714143360bd18454866634eb4bb773bdd81159ce86,2025-09-29T19:34:10.030000
CVE-2025-57489,0,1,5553cef50ed6d5b83768d0200129fd229bfcea697e2edca6476329c78f915290,2025-12-01T20:15:52.450000
CVE-2025-57489,0,0,5553cef50ed6d5b83768d0200129fd229bfcea697e2edca6476329c78f915290,2025-12-01T20:15:52.450000
CVE-2025-5749,0,0,ec22dd262f8a415309c73a825e4820b4defb47a318a5d22ea127c3b49428b748,2025-08-14T15:37:47.553000
CVE-2025-5750,0,0,0522ae88229fa48e68298579539df2b624bebd2c022f860b5e3cd27b08cb071c,2025-08-14T15:25:38.723000
CVE-2025-5751,0,0,037bc71659035a991d898ba010a2da50f33841cec08f07740be35c7942ac3e72,2025-08-14T15:25:26.630000
@@ -312656,6 +312658,7 @@ CVE-2025-58040,0,0,a5dc67134c1b6c5c10f2668a5001f560d4a3f0f3a957460bf9473dcdf0e36
CVE-2025-58041,0,0,14f68ff57ab594895e8fadd59e0a7af6ba0e23268320f84dc1b078e97c7b18f1,2025-08-23T03:15:30.933000
CVE-2025-58042,0,0,afde999db2d6b13c0256ffacc3380d6dbac99243a0ef4f2cb69b8eb003ec053e,2025-08-23T03:15:31.010000
CVE-2025-58043,0,0,a72df0c240a9f75a24b5de63b2dcee140d8b5cdc570d6d7bab79e3a25360ef98,2025-08-23T03:15:31.090000
CVE-2025-58044,1,1,850cd835ad4ab2401c0d32c8e294d087ff0e87f9d8b487f3d2186b4917c60d10,2025-12-01T21:15:51.807000
CVE-2025-58045,0,0,3ff2ebe42e7cfd7fd65d050503d1fb2114ff54ed41384e7bfd8911a991969ca5,2025-09-19T19:34:04.427000
CVE-2025-58046,0,0,8fe752c9e7f895d5deaf23ef1d25845f80e2a09bba18a5f148d144c822508408,2025-09-19T19:31:40.467000
CVE-2025-58047,0,0,717169482b04e15936de61dddc435e056119f8da63739e30bc5ef88872066d17,2025-11-04T22:16:32.057000
@@ -314481,7 +314484,7 @@ CVE-2025-60738,0,0,a2ac202c21e7d66bfb815d4ce97afa6915c1b03e8efaba35f9f2d4210272a
CVE-2025-60739,0,0,27768e75d821653786d2f5d07f85d9171eac92618566d8c47e90b3027c5714f6,2025-11-25T22:16:16.690000
CVE-2025-6074,0,0,4e606a83df0a0b396f77e3189dbc96d079ead52f274d9bbf667a51c66e418ac5,2025-07-08T16:19:11.700000
CVE-2025-60749,0,0,cb6eff06b3c969716cbd50b62ca268ccadd09b2dc6ddbd4cbc884dd540525813,2025-11-04T15:41:31.450000
CVE-2025-6075,0,1,f980527d2580f4f948ed5c1b9550905a37efc7489e7d4955b277d17c2f6d8117,2025-12-01T19:15:52.550000
CVE-2025-6075,0,0,f980527d2580f4f948ed5c1b9550905a37efc7489e7d4955b277d17c2f6d8117,2025-12-01T19:15:52.550000
CVE-2025-60751,0,0,f5eaa48c625fdb0205a85b237f3c799027abfdf3ab10e1cb659e5821d12da741,2025-11-04T01:15:33.430000
CVE-2025-60753,0,0,15450117be9a1be5a41b632e18f78a54dbfc2477e1f5ae295ca657381ab0fd3d,2025-11-06T19:45:30.990000
CVE-2025-6076,0,0,635acddb1df949ec971c9f45189c86260de1f34e97e8435edd6c8e987048cb8b,2025-11-03T20:19:17.897000
@@ -314639,7 +314642,7 @@ CVE-2025-6121,0,0,ac34c215559700b52c27e4eb85187c0f90e04bada26cf85e1da5d5a006994f
CVE-2025-6122,0,0,9512210d31f0e4aa9c3be187ffaab640323dcef8bc9e333d46732643321b9cbc,2025-06-24T20:14:31.217000
CVE-2025-61220,0,0,85e201a1d86d971cabbf95d7eb484d100fcd65a7addd6b92a92a6aca0a93dff5,2025-10-21T21:15:40.113000
CVE-2025-61224,0,0,af46fdc0b40d4101f480cce3253e4578300e39fa7a9e658db5f22eed46dba090,2025-10-08T19:38:32.610000
CVE-2025-61228,0,1,3f0c467895536545dd6837b9a42eed4d0c0d380b827e630c220dc50de5f33630,2025-12-01T20:15:52.600000
CVE-2025-61228,0,0,3f0c467895536545dd6837b9a42eed4d0c0d380b827e630c220dc50de5f33630,2025-12-01T20:15:52.600000
CVE-2025-61229,0,0,49b89dbe293bc5253fe1cb57bf73ded4ecfc9caf5bd1fdca76582d30ad0d4b82,2025-12-01T16:15:55.167000
CVE-2025-6123,0,0,01a17e91f4fa042185aa8c895b59d44590ceba8c7d0bf881122c15a612d738ad,2025-07-07T18:49:25.137000
CVE-2025-61234,0,0,a98fb6606bd295d125a356304af437f1a11a9292e2b607c522893d2fc923f777,2025-10-30T21:15:36.677000
@@ -315136,9 +315139,9 @@ CVE-2025-62220,0,0,13db24cb242ebeed0c1f4737a706504c9ba1a5992e04dbd74728bd9c8ea2a
CVE-2025-62222,0,0,b32955abddda902773d9d62b850849311cb72f231f33ab235a1d71b83f6486a6,2025-11-14T15:47:58.830000
CVE-2025-62225,0,0,5e5e30dce2450e8af243865130c21e5e1681c40fd91622536f84becd571ed600,2025-11-06T19:45:30.990000
CVE-2025-62228,0,0,1a490ac65040f8d755fd150fc0c76449bb433560cae986c3b003ae901c9f36fc,2025-11-04T22:16:37.680000
CVE-2025-62229,0,1,d37d830c40ad693541b2e53bb87d544be50ed982e533175f252509fff2ce6624,2025-12-01T19:15:50.623000
CVE-2025-62230,0,1,75997be8964d59d079d3c6066b38dcb0fa18a3b422ecf78dffd89beb41340a48,2025-12-01T19:15:50.833000
CVE-2025-62231,0,1,80b36e7b63dad9af4f4ef46edf8c8a78db99029e5ad0baf4c3384f4ebb3bbbec,2025-12-01T19:15:51.010000
CVE-2025-62229,0,0,d37d830c40ad693541b2e53bb87d544be50ed982e533175f252509fff2ce6624,2025-12-01T19:15:50.623000
CVE-2025-62230,0,0,75997be8964d59d079d3c6066b38dcb0fa18a3b422ecf78dffd89beb41340a48,2025-12-01T19:15:50.833000
CVE-2025-62231,0,0,80b36e7b63dad9af4f4ef46edf8c8a78db99029e5ad0baf4c3384f4ebb3bbbec,2025-12-01T19:15:51.010000
CVE-2025-62232,0,0,7bbe8ad5bb9f8c5afbfe7cd16ff850ade62800436ec5824e91f788252db0e3dd,2025-11-05T14:44:13.057000
CVE-2025-62236,0,0,15a5caffd14cf9ee2af6ac6cf3031f9d0466adcdd94376f42fd22604d4f0e595,2025-10-27T13:20:15.637000
CVE-2025-62237,0,0,50afe9cde633923a8104d90291ee98bd713fe21b8178eff2dd59e01bb75e841c,2025-10-14T19:36:59.730000
@@ -315473,7 +315476,7 @@ CVE-2025-62724,0,0,3da1fb4b0371355a092d683658ad02b19097fc2138e3f2ada56b9842cf245
CVE-2025-62725,0,0,20ee35d109619b84e168a6ca94288ade1ffd79591c081462c3c919f854ce0283,2025-10-30T15:05:32.197000
CVE-2025-62726,0,0,46f9cb2b8e1946c29cd401e65c80606f5a7ef4fcd1a045f5bc576b237579244c,2025-11-04T15:41:56.843000
CVE-2025-62727,0,0,ee45c642db070ed29854f756bb902966037f607edbf636d4de7e5ef2bb4cbd54,2025-11-04T18:16:45.480000
CVE-2025-62728,0,1,cbf454c124b13e3977c838814936ea86467d4287c16463afce23eead4e6f4e2b,2025-12-01T19:15:51.180000
CVE-2025-62728,0,0,cbf454c124b13e3977c838814936ea86467d4287c16463afce23eead4e6f4e2b,2025-12-01T19:15:51.180000
CVE-2025-62729,0,0,b98bf878b65b862912754cc82d841d7c5113366584f8f3cd74af60ba98a4dbbb,2025-11-24T13:52:24.263000
CVE-2025-6273,0,0,7fbd43be0636c447274ca5dd224661b382933a1bb0936c93b976e34f99babf3b,2025-06-23T20:16:40.143000
CVE-2025-62730,0,0,c04bc08ffabb612ddf969d9689e1768016be4417a08056e1f52b595505ec6395,2025-11-24T13:53:07.567000
@@ -315671,7 +315674,7 @@ CVE-2025-6306,0,0,bead9ba68260c847671d090490ab869cefdc3095014bf5c641fccc2374f7f9
CVE-2025-6307,0,0,cdfa642aabb8c4cdf66783b40415b41a741bc33c428a1594c0a2ee18b9dbde7e,2025-06-26T21:18:41.737000
CVE-2025-6308,0,0,6d0dabc6e15511e6982b3f870c32ad733481d3f0e5cab616caf841904feb7a8d,2025-06-26T21:18:27.487000
CVE-2025-6309,0,0,61dd5cd93b2ec6200afa5c38e7a47ac97ababf226b518b0b020ae4f8c5d368ba,2025-06-26T21:18:20.710000
CVE-2025-63095,0,1,99f0360a5fa2e935af26f7e43c47f58028bfef7e6554393698bf51cf6343c448,2025-12-01T20:15:52.757000
CVE-2025-63095,0,0,99f0360a5fa2e935af26f7e43c47f58028bfef7e6554393698bf51cf6343c448,2025-12-01T20:15:52.757000
CVE-2025-6310,0,0,09efea7aa8eb7ea0695ad0b081248d9d4e4101041c7c67a88e7c220d9a16d6e2,2025-06-26T21:18:04.723000
CVE-2025-6311,0,0,d703684ef43822db1202b94cc4f4496d3a28c9f2331c88e141c20883b9317300,2025-07-11T15:50:37.860000
CVE-2025-6312,0,0,210e77acd00f4d5c5ac264d4527c00270ea33d075866358ed7d260dcf54d1b2b,2025-07-11T15:50:52.350000
@@ -315733,7 +315736,7 @@ CVE-2025-63298,0,0,7caee551158887b024101f903267b75bffd383426fe96ed3e2d66a6886bb1
CVE-2025-6330,0,0,533f8688fa05d700cc76636e59e86bc0eb723f7b595a46351852e77368267ff9,2025-06-26T18:48:43.913000
CVE-2025-63307,0,0,6c44c08904d782d4a70a5a7cb02de5fd71e2dcd2328f94f8308ce378d4706690,2025-11-06T20:15:50.693000
CVE-2025-6331,0,0,0a8994ea3249d7eae52872533d96e734a825872bdbb388afb306ca44b9867b0d,2025-06-26T18:46:13.133000
CVE-2025-63317,1,1,e744e74e78211be90a28a706a44254a9e117307d279ffd836903c2bdeeb44196,2025-12-01T20:15:52.907000
CVE-2025-63317,0,0,e744e74e78211be90a28a706a44254a9e117307d279ffd836903c2bdeeb44196,2025-12-01T20:15:52.907000
CVE-2025-6332,0,0,2135c39d96f5f5f51610426459e1766e7e77a827bb39a5d88eeb3366dd1bf430,2025-06-26T18:39:05.587000
CVE-2025-6333,0,0,26527bc36673d9e039362729b4406f5a98df04c44c68d06dd05f36e7caa8b426,2025-06-26T18:35:06.553000
CVE-2025-63334,0,0,b637f3ac0afd16683422fad3dcd9e95e62c39110ecf9a6395a24b8447b6421d6,2025-11-06T19:45:09.883000
@@ -315741,7 +315744,7 @@ CVE-2025-6334,0,0,2a215e04e3be6c866c04768dbe135e466fe601c1c77251573fae1bf844a3e7
CVE-2025-6335,0,0,5b8214517b4e2328705628c07c57cad7dcf339f56383ed25d7611a220d052c4c,2025-07-18T12:25:17.053000
CVE-2025-63353,0,0,10beafb26269421ec3662bcbd226b87b7850e4eb01d0d80e2226539e3aaba7e3,2025-11-13T16:15:53.553000
CVE-2025-6336,0,0,c2ae3339f7f556d7f8479109d39981c789e75e2a76c15e57531c64e864f48049,2025-06-26T18:28:59.800000
CVE-2025-63365,1,1,b0eb2b3946b77efeaa946e60ebfdd4bed6a11f00722f1ae9aea8c1f12f8f15d5,2025-12-01T20:15:53.027000
CVE-2025-63365,0,0,b0eb2b3946b77efeaa946e60ebfdd4bed6a11f00722f1ae9aea8c1f12f8f15d5,2025-12-01T20:15:53.027000
CVE-2025-6337,0,0,20ffa5ad97e2fb5de859648c4c2bd5cf249ca44b435fa5f7c3de6344b086ac2d,2025-08-01T22:18:15.433000
CVE-2025-63371,0,0,f85274d81a0dde49fb05c2c1bf8892732ecfd0ec16b0e7409ce0f050acb4b824,2025-11-21T15:13:59.083000
CVE-2025-6338,0,0,d5c800ed34d59ce85516e9843ed463eb9c8b7acbef325ec9a754b0076681afc3,2025-10-16T15:28:59.610000
@@ -315807,18 +315810,18 @@ CVE-2025-63512,0,0,fb9b2e6f20fa24a31c3b324b6541fb73d5a9e82d5076e7bd845d1b7452be4
CVE-2025-63513,0,0,77f0379ed940c32021762ed219df800f46c0c479772ae7fe91e8d4d3d0319688,2025-11-20T21:57:49.427000
CVE-2025-63514,0,0,a48a4fe98cc0afdd6ca735b421e2951c674c2395b539204fb8d3a74ba18fbb6f,2025-11-20T21:54:40.943000
CVE-2025-6352,0,0,386724f883e4e58c9aefc012bbc8e083805462ca085c58d35031f82d8ece6939,2025-10-23T12:19:51.613000
CVE-2025-63520,0,1,09ea8cb7381556d92e1dc5c6efb80eda3e90f11f209cf4af5d66ce50fd91475d,2025-12-01T20:15:53.247000
CVE-2025-63522,0,1,105319b9f49c25cba713f2278092abe449dd1ee1aba7dcd3ef2641cd79ee5876,2025-12-01T20:15:53.417000
CVE-2025-63523,0,0,3167fb7ffb42abacf5b12f7a33f02b4edbca3b9a6ff93be4e08c620b311a4570,2025-12-01T15:39:33.110000
CVE-2025-63520,0,0,09ea8cb7381556d92e1dc5c6efb80eda3e90f11f209cf4af5d66ce50fd91475d,2025-12-01T20:15:53.247000
CVE-2025-63522,0,0,105319b9f49c25cba713f2278092abe449dd1ee1aba7dcd3ef2641cd79ee5876,2025-12-01T20:15:53.417000
CVE-2025-63523,0,1,4fd2b30e7855168929ec4ca95c9348cd5e3ee75333b34828342d661a4a99dc02,2025-12-01T21:15:51.980000
CVE-2025-63525,0,0,85fe0b3f8b392a9fa72a33e6259dd0cbce0091769080ee20fc238024536b9f7f,2025-12-01T15:39:33.110000
CVE-2025-63526,0,1,c2b127f9ac4be2a2a7cb0006fa05b091114c73c01810d4ca3672d6ef2d441128,2025-12-01T20:15:53.647000
CVE-2025-63527,0,1,457bae931212313a31dbc8f7ff4143842e72fbc3b90ef0ce6bfd921318b61b9c,2025-12-01T20:15:53.873000
CVE-2025-63528,0,1,d9e695bee210815b5cc68363ecb2d9c4ef21f3e899e675b615811d51ad5f766f,2025-12-01T20:15:54.057000
CVE-2025-63529,0,1,3f3b4736dc2e80d4cc77e44acec12c330b342b8429f3ca503a079e0e3ceb9f96,2025-12-01T19:15:51.520000
CVE-2025-63526,0,0,c2b127f9ac4be2a2a7cb0006fa05b091114c73c01810d4ca3672d6ef2d441128,2025-12-01T20:15:53.647000
CVE-2025-63527,0,0,457bae931212313a31dbc8f7ff4143842e72fbc3b90ef0ce6bfd921318b61b9c,2025-12-01T20:15:53.873000
CVE-2025-63528,0,0,d9e695bee210815b5cc68363ecb2d9c4ef21f3e899e675b615811d51ad5f766f,2025-12-01T20:15:54.057000
CVE-2025-63529,0,0,3f3b4736dc2e80d4cc77e44acec12c330b342b8429f3ca503a079e0e3ceb9f96,2025-12-01T19:15:51.520000
CVE-2025-6353,0,0,d3561510655278dc6edf6a4b73d30aaf2b9b22d58bfb6cee13f38a1a283602e7,2025-07-11T12:20:35.833000
CVE-2025-63531,0,1,882f128db78003d834d8b732a2dae6005943957f27900e992698959332ab217a,2025-12-01T19:15:51.730000
CVE-2025-63532,0,1,18d522d24c70c83a9104ae21a79c2f8753002461851b6deab177cbe6028fc33e,2025-12-01T19:15:51.927000
CVE-2025-63533,0,1,5fc94e3536fc1f40235b6e5f9e4a64c8ffacc43a7e82af9625ce3f452dca6d38,2025-12-01T19:15:52.080000
CVE-2025-63531,0,0,882f128db78003d834d8b732a2dae6005943957f27900e992698959332ab217a,2025-12-01T19:15:51.730000
CVE-2025-63532,0,0,18d522d24c70c83a9104ae21a79c2f8753002461851b6deab177cbe6028fc33e,2025-12-01T19:15:51.927000
CVE-2025-63533,0,0,5fc94e3536fc1f40235b6e5f9e4a64c8ffacc43a7e82af9625ce3f452dca6d38,2025-12-01T19:15:52.080000
CVE-2025-63534,0,0,b9e6b405345279846a1bacfaeeece97782f83b85bf77250c3f3c63b1ce8c5ca9,2025-12-01T17:15:49.777000
CVE-2025-63535,0,0,b06846b5385742bb282c662314f5e2cf23bf52417c0b1a4250ca45df579ed9e0,2025-12-01T17:15:49.927000
CVE-2025-6354,0,0,2e29c14f11a4c0713b5bb333b8bcc3f82a6e68c07f853a1752a2daff23ce8fab,2025-06-26T13:30:17.410000
@@ -315879,7 +315882,7 @@ CVE-2025-6370,0,0,d33774f702419cdd1457ea9fbd6caad660fbed644af794e26dd23c78ba75cc
CVE-2025-63700,0,0,942943563001999f3bd48d097dc4b86630407b7258fe8c9de50992f96fff6e00,2025-11-21T15:13:13.800000
CVE-2025-63701,0,0,662ea7849c27be5b80c25e2e58f382b31e98a3c765f38948a74aa0fa7306e223,2025-11-18T14:06:55.963000
CVE-2025-63708,0,0,daf3ebd701919b695e0a83c8005a392854f3a79d50268da940d9cac92eda2fe6,2025-11-20T20:27:23.200000
CVE-2025-63709,0,1,6321a1a931d41f2c52967a9a2a3257691a782ed63bcab04f24d0b3100591ccd1,2025-12-01T20:15:54.240000
CVE-2025-63709,0,0,6321a1a931d41f2c52967a9a2a3257691a782ed63bcab04f24d0b3100591ccd1,2025-12-01T20:15:54.240000
CVE-2025-6371,0,0,0a94c5b6f2c8de87b0afb6b9540898e3a2c0f16abf713b5d77d3a930178a3ee2,2025-06-25T20:09:48.163000
CVE-2025-63710,0,0,dfc7d90b2d530bde90ae81c5e4ff726084913ff81e9fbb0730777dd7846d41c7,2025-11-17T18:18:39.677000
CVE-2025-63711,0,0,a0fcdb7a0d12a966f99d72cee69441f70249d14a1c2676daf4cf74dc39d5f04c,2025-11-17T18:16:51.357000
@@ -315920,7 +315923,7 @@ CVE-2025-63828,0,0,9f83ae1fae3a05b08418a2eab46883448f1a6b2213a1bb4f96f6991bd6555
CVE-2025-63829,0,0,26a17fec77482163105fa59f15f451ab242482540116aae576873c25a54afaf4,2025-11-19T19:14:59.327000
CVE-2025-6383,0,0,d4983baed15d1793d27d210c93a94db5a7e163abe77193a900e62847d2cde376,2025-07-08T11:31:13.823000
CVE-2025-63830,0,0,64bb7b74542849e475a50c70d15ab1b2e1a45c8ce9737df66a6fb312752a7b07,2025-11-19T13:20:11.367000
CVE-2025-63834,0,1,308968dccdde28f14380413d9ed3fa0af1248ccdc456ae931b71fa23bb735349,2025-12-01T20:15:54.430000
CVE-2025-63834,0,0,308968dccdde28f14380413d9ed3fa0af1248ccdc456ae931b71fa23bb735349,2025-12-01T20:15:54.430000
CVE-2025-63835,0,0,1137446835ae921038cd75e6ade7d3d1796207b3e1bef7c2167d975169b2c7a3,2025-11-18T17:16:13.363000
CVE-2025-6384,0,0,97aa0c1b3518730f2ff1ac0c6e40e6df53f12abb019ae8c41f191d17b86f6691,2025-06-23T20:16:40.143000
CVE-2025-63848,0,0,98188db2a3a2c26fc6f5e46e615c2c2f02b2c1a0d5f2c9b13ed9a8ecacd8325b,2025-11-21T15:13:13.800000
@@ -315950,7 +315953,7 @@ CVE-2025-6393,0,0,1a35217c3b800b18b49bcd9013075f8fa6cac52b24da4da242fbe596d982b2
CVE-2025-63932,0,0,8f00ddb7b81c8111efe059edc3d54cee94e1cf82fe418142e977a7939bfc787b,2025-11-21T15:13:59.083000
CVE-2025-63938,0,0,f59205b1e696fea95ca28433f191c9b156cc3be0c29755b4fd0768e633af691d,2025-12-01T15:39:53.100000
CVE-2025-6394,0,0,89f814907edd3ebe4d5f59011c66ab7c6d332856a0844d277aa889bcfc935525,2025-10-23T20:06:00.793000
CVE-2025-6395,0,0,cb3c0c913443d3dc2f885a3f5cc382abf9dce52bfd5d3e81f83b6ebd90077743,2025-11-07T00:15:55.290000
CVE-2025-6395,0,1,22c67856941aa04443d5061f189f011e19ded8861180ba260f6fb7c5887851e2,2025-12-01T22:15:51.513000
CVE-2025-63952,0,0,572cf6fa40caa117e18fddead39ae0b9d246db6d186fd69c2d3d4fb03d656e98,2025-11-25T22:16:16.690000
CVE-2025-63953,0,0,553928eaef8a5fc5474ce6a4e50b82b764063e943c8b2c29c4dfbdf94c79a76d,2025-11-25T22:16:16.690000
CVE-2025-63955,0,0,beb4b32987ba24f1e28ffd3bae48cdcc4e19e80aa8fe2b86279445dbe3b813c6,2025-11-20T17:27:58.507000
@@ -315964,7 +315967,7 @@ CVE-2025-6401,0,0,5cf4034351d983ee04de416dd673b8a67d86755e6334b356b4bd42e3cd39ff
CVE-2025-6402,0,0,9fcf059d93a615de79cdd3b74519970d6c73c80b6f86a7557b01dae4c88ad665,2025-06-25T20:14:57.620000
CVE-2025-64027,0,0,470afad40ddbedb17a5b049e25f07fea4418f8c394859528eb668b671557531a,2025-11-26T16:15:50.103000
CVE-2025-6403,0,0,007861183f6687f9c9a79ed265c27e5792ce1d4050de9b4571cc349ce6d48442,2025-07-02T18:56:36.940000
CVE-2025-64030,0,1,c6b0610dac7850dfe68f3356850a29f07eb39529e57decf348c7d3e00c83832c,2025-12-01T20:15:54.607000
CVE-2025-64030,0,0,c6b0610dac7850dfe68f3356850a29f07eb39529e57decf348c7d3e00c83832c,2025-12-01T20:15:54.607000
CVE-2025-6404,0,0,f0c24c4f38cddef26208faf5fffbe2ab0f5998ff0d6d820bde73ac92320b2d1d,2025-06-24T19:33:00.033000
CVE-2025-64046,0,0,2473d61fcd444f7107420add86bfb5a479b28afca70336dc60642cd4e6e6ba2c,2025-11-19T13:11:59.527000
CVE-2025-64047,0,0,2cf7bb40ae06e9b5d65d709020e8f3083f47448e40a9b3db194b3dd46afdace1,2025-11-25T22:16:16.690000
@@ -316392,7 +316395,7 @@ CVE-2025-6477,0,0,718d8ccaacc87e1c57765c6643de1f27af3dbe6e78ffbb21600c3372331388
CVE-2025-64770,0,0,9f6d874024d46174136454b2b8784191b86d838279b0afddf1eb50435c5eceaf,2025-11-21T15:13:13.800000
CVE-2025-64772,0,0,14b5eb97d0aa66d077fbece2b7e27003f6618b775fb26192d8d1595810b97280,2025-12-01T15:39:33.110000
CVE-2025-64773,0,0,59049fa938a874236a592ec4986adf18874e19e9a9d1ab314c7036607af19763,2025-11-21T12:57:53.123000
CVE-2025-64775,0,1,9c459681cd454905fa37ee653a0690ea7c58fc4a3b218c31465c5e3b4c185cd2,2025-12-01T19:15:52.240000
CVE-2025-64775,0,0,9c459681cd454905fa37ee653a0690ea7c58fc4a3b218c31465c5e3b4c185cd2,2025-12-01T19:15:52.240000
CVE-2025-6478,0,0,31ec8a10802d4265d3843ba47157156e1cd48721db6d3f2b4bbfa8dcfc5414f1,2025-06-27T17:13:26.643000
CVE-2025-6479,0,0,2c5b2471154f56ce282446555e3678e22ea4cd2374f79e129a80d30240de1c44,2025-06-25T19:19:01.967000
CVE-2025-6480,0,0,93237f12d754008f7fd67ea5d034bb783649924c98eaa92f468d9844c78fedc5,2025-06-25T19:18:18.497000
@@ -316477,8 +316480,8 @@ CVE-2025-65108,0,0,8654395a049218b7bb70e1d0a3d7d6a2bfb0b8acfe9b255f9b034f0dbc08e
CVE-2025-65109,0,0,3e2b7c0e2bcc97290a2ee779e8f2869ba045adc7612d41c8f9fb4f6dc8f7daf0,2025-11-25T22:16:42.557000
CVE-2025-6511,0,0,4e71ec9b0caa2aa068c2cebf5a67cc985e3117883fc251602d7324ce1aa756ba,2025-07-16T17:00:57.170000
CVE-2025-65111,0,0,23a14c16207f851a4f2756b810c5b708df7743d12ffc02562da5fa7d2fc146d6,2025-11-25T22:16:42.557000
CVE-2025-65112,0,1,b5405051d9f13da3e4a3de1f17b25c33a93b3ce7f91cd46d6f906b42075df6ac,2025-12-01T20:15:54.823000
CVE-2025-65113,0,1,51b2e0e88df07f8173c2f299e34aa37df112aa0eb0e15016a8d8ca95aba6b008,2025-12-01T20:15:54.943000
CVE-2025-65112,0,0,b5405051d9f13da3e4a3de1f17b25c33a93b3ce7f91cd46d6f906b42075df6ac,2025-12-01T20:15:54.823000
CVE-2025-65113,0,0,51b2e0e88df07f8173c2f299e34aa37df112aa0eb0e15016a8d8ca95aba6b008,2025-12-01T20:15:54.943000
CVE-2025-6512,0,0,fafc14028fc8e6d0cf5d1c26ecddf3f178d4b119f094c564dc999ae28df07a2c,2025-06-23T20:16:21.633000
CVE-2025-6513,0,0,31aa7f858e5f0036c4b8df8555240c1143a48501c8ecdc51eff54ca1e5b97fde,2025-06-23T20:16:21.633000
CVE-2025-6514,0,0,2e857a137de569aae69fc5e8b5ee04b5a374d907c22caf5d111c51eef7f69cd9,2025-07-10T13:17:30.017000
@@ -316506,7 +316509,7 @@ CVE-2025-6524,0,0,a7275ea041ffa7e979afd064b5baf753a7b8d034996389a1d24dc2a4b9f0ab
CVE-2025-6525,0,0,f9a4484f271973188d980443d7c340a5c21c022439185d3e11e100f20a1e0b89,2025-06-26T18:58:14.280000
CVE-2025-6526,0,0,38fb1bd29c1b6ed21d1635ed073af71be9b9e2f0ee3829828e30d24a8dc48b04,2025-11-14T15:02:28.340000
CVE-2025-6527,0,0,3081b8f89105c5a4934c421a3bf407c898825f874c4ac4d7085b5d837b965611,2025-11-14T14:46:49.813000
CVE-2025-65276,0,1,0ba2a47801bfede125ecba6637069232542fae7c911ca8d78e7a8f19db726492,2025-12-01T20:15:55.097000
CVE-2025-65276,0,0,0ba2a47801bfede125ecba6637069232542fae7c911ca8d78e7a8f19db726492,2025-12-01T20:15:55.097000
CVE-2025-65278,0,0,872bb38eaab169ac716b659fd9467b89845d82a56a5ea96b6203b5dd4e0e15d3,2025-12-01T15:39:33.110000
CVE-2025-6528,0,0,a84b58003f0fbfdab073bd26e1b4c7edb3a9507243de4187c76be61f732c25e1,2025-11-14T14:33:46.660000
CVE-2025-6529,0,0,ad88146ae23ea3ea8f25684a5176b38f126d14015cf0853a92015c69b0e16bef,2025-11-14T14:12:50.063000
@@ -316521,12 +316524,12 @@ CVE-2025-6537,0,0,6cc047e68af8cc140a533baef81117cae1d7e838b2f26be233dae033dab14e
CVE-2025-6538,0,0,e09f0a97dfdb50a09d0300934010eb6d0f1d88eba5fa750c8cc98ba07c13c662,2025-07-07T18:33:37.610000
CVE-2025-6539,0,0,78ecc1fdd76d73ccd36c87a5455dc45373488fca38a0ae555e8c322dea869192,2025-07-25T15:29:19.837000
CVE-2025-6540,0,0,082438792186c440bf4ff42d97a1cb1ef2ee9a0b9d0da94f6ceb561b424c8589,2025-07-07T15:02:44.263000
CVE-2025-65403,0,1,25238e5db51603cd94970ea142dc0360e2d9ad1eeed0520e90c9f712b277d13e,2025-12-01T20:15:55.257000
CVE-2025-65404,0,1,bf68fa93fd836028e615aaf80189cbab12f99b59a9048f17b46258dbacb6d5ad,2025-12-01T20:15:55.403000
CVE-2025-65405,0,1,d199b2f4c5b84fb3ac139230d3210eaa916497e0c2f7e00ff3546f1eb5231db8,2025-12-01T20:15:55.560000
CVE-2025-65406,0,1,5f8e8650d640dda8e5e5083764ea4ac66f61f16aa8b902aab5c8c565ee75cdce,2025-12-01T20:15:56.120000
CVE-2025-65407,1,1,43b9a41d47db8b146a50b7c0f0a9eb01ce1e7457525ee5827845d6fe58a6fb0a,2025-12-01T20:15:56.623000
CVE-2025-65408,0,1,257ec8df04304e765de811bdf43247833afba9cfffb4b2513390ab7d1e589d40,2025-12-01T20:15:56.923000
CVE-2025-65403,0,0,25238e5db51603cd94970ea142dc0360e2d9ad1eeed0520e90c9f712b277d13e,2025-12-01T20:15:55.257000
CVE-2025-65404,0,0,bf68fa93fd836028e615aaf80189cbab12f99b59a9048f17b46258dbacb6d5ad,2025-12-01T20:15:55.403000
CVE-2025-65405,0,0,d199b2f4c5b84fb3ac139230d3210eaa916497e0c2f7e00ff3546f1eb5231db8,2025-12-01T20:15:55.560000
CVE-2025-65406,0,0,5f8e8650d640dda8e5e5083764ea4ac66f61f16aa8b902aab5c8c565ee75cdce,2025-12-01T20:15:56.120000
CVE-2025-65407,0,0,43b9a41d47db8b146a50b7c0f0a9eb01ce1e7457525ee5827845d6fe58a6fb0a,2025-12-01T20:15:56.623000
CVE-2025-65408,0,0,257ec8df04304e765de811bdf43247833afba9cfffb4b2513390ab7d1e589d40,2025-12-01T20:15:56.923000
CVE-2025-6541,0,0,8e813e74d5024d2c640fde6671e2bd22ecb1ab2a380d8bbd469e941f977ab580,2025-10-24T13:45:38.010000
CVE-2025-6542,0,0,855ea415849f7679b9c628fd68cbf55c441dac333e93193e039cd249d23ab7ae,2025-10-24T13:50:10.897000
CVE-2025-6543,0,0,7c17eb41d33e1ac44fdd08a7293ed23a397efa51eb2c1bfb61acf746a22684a8,2025-10-24T13:42:21.210000
@@ -316560,6 +316563,8 @@ CVE-2025-6559,0,0,9cb71ac3711fb3b86b569e9a51eb156c4586cc1e2e8b0bcfb406579e47f4c3
CVE-2025-6560,0,0,0fbeb242211a22ef947f1fcdbf6b0e2a9cc7c2add8384266780a00d3eb1ea522,2025-06-26T18:58:14.280000
CVE-2025-6561,0,0,7c1cc2e462ee3f4cfbfd909428f12d4b1c394ea55775d6a19975a5b62f69a18f,2025-06-26T18:57:43.670000
CVE-2025-6562,0,0,27f22edb2ae89e7e5ca0f08da1c6b89d3ea0e09ce8efc41223de0ab990d8069e,2025-06-26T18:57:43.670000
CVE-2025-65621,1,1,6f7a550fbbee7de80495c146766eb3c129d8b5b719e16fedf643c77538c0caec,2025-12-01T21:15:52.193000
CVE-2025-65622,1,1,975f8456d19f4d83caf345ee1d6e5ab3ff43494ed1e3958eb4da6011fc4d86ef,2025-12-01T22:15:48.697000
CVE-2025-6563,0,0,9898e80f0fc110857b3fce24e3b506c3d4f000fedbadc3dbe241b4411d081672,2025-07-03T15:13:53.147000
CVE-2025-65647,0,0,44aa01554dda7b1356446682f5e198619339fed49a7488d4025e8e43a6281ba3,2025-12-01T14:22:42.593000
CVE-2025-6565,0,0,edbd540d511b85519129c288260b1fc37f33ec2182d67f9f0be78d5a0f7f9423,2025-06-26T18:58:14.280000
@@ -316587,8 +316592,9 @@ CVE-2025-6580,0,0,14c9a21bff52d8562deb8a5ff102203adfe298df563381633ada51bbda9d23
CVE-2025-6581,0,0,9eb16713b89b10d47a3355e63f223e1d1babaf81dbe3bf267fcf583104bec561,2025-07-02T17:11:46.147000
CVE-2025-6582,0,0,06b49d50890d886846d052750b63a829a4a61d16f96e10b0780325588b187412,2025-07-02T17:04:36.247000
CVE-2025-6583,0,0,30d0558eb9467ec1d68b23c75a699e90fa70f2c3c0ad5646089f1aba65b21e55,2025-07-02T16:46:47.320000
CVE-2025-65836,1,1,8ec174f50a5fdf22cc962794b2990579b6c7976123eeda26ab7d60e7d89d13a2,2025-12-01T20:15:57.103000
CVE-2025-65838,1,1,ad6ba7467164c7b5c493b6f9b83b85e66f20daff7484b5f4182c5a5eb3f1cf45,2025-12-01T20:15:57.240000
CVE-2025-65836,0,0,8ec174f50a5fdf22cc962794b2990579b6c7976123eeda26ab7d60e7d89d13a2,2025-12-01T20:15:57.103000
CVE-2025-65838,0,0,ad6ba7467164c7b5c493b6f9b83b85e66f20daff7484b5f4182c5a5eb3f1cf45,2025-12-01T20:15:57.240000
CVE-2025-65840,1,1,448accf4e2c2619b3910de4537b34283af9d323c3d3bc8432e94c9f25b2c949c,2025-12-01T21:15:52.320000
CVE-2025-6585,0,0,adaeb58e3fc188fc0fb17f0bed47098a1fe39a13212ef121d20fafda41da95ad,2025-07-22T13:05:40.573000
CVE-2025-6586,0,0,a2a31cfde8036131bb5246db3ae2c6f244bcc91b479b47ff60159df89464e964,2025-07-09T17:50:13.847000
CVE-2025-6587,0,0,94e040daa08ba5c9e3932753930ce394b84353f61fda95c1801a18e9a0bd6347,2025-07-03T15:13:53.147000
@@ -316713,10 +316719,12 @@ CVE-2025-66187,0,0,952662b39938f1c4fd582d536c74a2e1beb8f6c48bce3128e45c0d7a53bcb
CVE-2025-6619,0,0,7d502e0f9c280ac237d264ea47e9d56f2c9f885e9391d98b4346ea7561f6a820,2025-06-27T18:19:19.447000
CVE-2025-6620,0,0,a58ab2b80e3779d32d4e3358d3d356ad6dfc021a674a6471533aa7b324e1ebbe,2025-06-27T18:11:26.180000
CVE-2025-66201,0,0,a8275dbdf292ebfbd1cde1dc9da04f81e4490594014f7399918003fe14c9a3f5,2025-12-01T15:39:33.110000
CVE-2025-66205,1,1,d859be4f80e10760e52a3b77e8a5e3a26f37f998aaf1a2aaa10da20429bf25ca,2025-12-01T21:15:52.443000
CVE-2025-66206,1,1,5e027b4e960fa535ee0e03fb0c2a4b1f0deb0ec18187fbd419f819871536c82b,2025-12-01T21:15:52.623000
CVE-2025-6621,0,0,31225189b3a0ed561d6ef4522df51388559053b3febb508a0b1393ddfa4112ad,2025-06-27T18:10:30.697000
CVE-2025-66216,0,0,10043334f406e37b8388a5bc981c4bcf96fce6ed5ad078ea3150c9a36e79060c,2025-12-01T15:39:33.110000
CVE-2025-66217,0,0,ae56e3dd192353327e26455db6f96f059511019cec01bb7242e26d03db58eb35,2025-12-01T15:39:33.110000
CVE-2025-66219,0,1,4e3dd30fd2df8f47703e28f10553d7e3a5cf217b0935eaeca1734d3741298238,2025-12-01T20:15:57.370000
CVE-2025-66219,0,0,4e3dd30fd2df8f47703e28f10553d7e3a5cf217b0935eaeca1734d3741298238,2025-12-01T20:15:57.370000
CVE-2025-66221,0,0,104e2e5ed755bd23c52091e4321c1eead6c1f9b604b09a0791716eee8369aa7f,2025-12-01T15:39:33.110000
CVE-2025-66223,0,0,342c34db92c35bd6bb381fb52f300468da2f0ba45182833f9a2354529c4da0f2,2025-12-01T15:39:33.110000
CVE-2025-66224,0,0,b69359b50a265bd901adcf2031b698abf62056c18d8a1e312f3d5ca9d4a48dfd,2025-12-01T15:39:33.110000
@@ -316733,7 +316741,7 @@ CVE-2025-6624,0,0,97dba7b444edfb1a26270ffbacc4a0765e856cfa4c9084bb10655088350330
CVE-2025-6625,0,0,6b5ce1ef015c31200b1841c65a67498f95b9314a4f4532397cc0be8fe969c50b,2025-08-18T20:16:28.750000
CVE-2025-66250,0,0,4641e8f45cb7750e5dd4870a8e9adbe3034be5afa8d32fff39f4a0b7573c878d,2025-11-28T23:11:55.537000
CVE-2025-66251,0,0,1e1d3127ebe85266a644a9ad6c37c08b62e4d6e878d1838a3dfd3048ec5200f0,2025-11-28T23:11:55.537000
CVE-2025-66252,0,0,b43c337bec8c16b7290abf0216abfadd15142dbfbd1730c852eb01b740a518c7,2025-11-28T23:11:55.537000
CVE-2025-66252,0,1,60b674f439e82b447297d397582246b382e561d19b7bb989d82881e549b40332,2025-12-01T22:15:48.860000
CVE-2025-66253,0,0,175a1c4228ae28196c32ba905ccb8910954f8e2f135d2f41bab2d88dac5080a5,2025-11-28T23:11:55.537000
CVE-2025-66254,0,0,b12368dae348e769f9ec032872915832fe719d345722b888f3b81389f173dfaf,2025-11-28T23:11:55.537000
CVE-2025-66255,0,0,e74e279c1bae06c83c290b4a5fe6620e5dd5517be3b684cca51aa662ca24d513,2025-11-28T23:11:55.537000
@@ -316754,7 +316762,26 @@ CVE-2025-6627,0,0,ac42708d70135c1e2f3d3c95b24cee76ad7c50967f5771ee2df2dd6c238666
CVE-2025-66289,0,0,6063359e463cb1b7b2b27669c30287ee26a9d8344b82e6f7afc2de770f57c0af,2025-12-01T15:39:33.110000
CVE-2025-66290,0,0,628f18d01710935f3d64e1c8fb933bfececc54c394f13b16d074c33ea36434ea,2025-12-01T15:39:33.110000
CVE-2025-66291,0,0,2d3c030f895c83ac65981544374b108a2eebc2c0310b1dbfbbb1a72dbfe14235,2025-12-01T15:39:33.110000
CVE-2025-66294,1,1,fde177b4760647ee3e485b764ff4464e0d24af41982f7fe4d7b2ec9e8ea7c58c,2025-12-01T21:15:52.843000
CVE-2025-66295,1,1,c128dcc9e5fdf392166b004c2b475ba2890b11cc8099833eeb62f8f93826ea18,2025-12-01T21:15:53
CVE-2025-66296,1,1,0c81ebc5426dfd0b30668b206d393c6f12c415db189efc009eee92f83d3d12b3,2025-12-01T21:15:53.157000
CVE-2025-66297,1,1,b91a67a09b947dd67fb4e1b93b457d2e00b5cadf6242e689d5816adab1fc5fc6,2025-12-01T21:15:53.327000
CVE-2025-66298,1,1,d06cd34f0809f060831c811618efcd232bd3c00c4f758ca3985a6372f91d35ec,2025-12-01T22:15:49.103000
CVE-2025-66299,1,1,8580646ed611a19aaf8ec6d3e0ce924b1961b3be8f3c48413b1b7c3d211a4fbd,2025-12-01T22:15:49.290000
CVE-2025-66300,1,1,20b9bd6535de398bcd527d34a27d860425b0c99f25cafd82e3a237ef43b87d06,2025-12-01T22:15:49.447000
CVE-2025-66301,1,1,93fb040835ef0abbab89b8d2001df5b0ea3b97e6db1af811cc6f56133120cac4,2025-12-01T22:15:49.607000
CVE-2025-66302,1,1,84ee6c3122ba8610d6db4b5bc416e0edc0793cbd154001ad7a30018a6c64f32e,2025-12-01T22:15:49.750000
CVE-2025-66303,1,1,40b0ce9aff7b1a576ea3904bf78b2b3c4fbb9fcfe5ecefdaead38f10ecf28ea4,2025-12-01T22:15:49.913000
CVE-2025-66304,1,1,41d777bd4cc79f211bed09bff7cfb38e70397f2cb5767d895dbc0e9362a4ccde,2025-12-01T22:15:50.080000
CVE-2025-66305,1,1,1f2f96d138069108b203792ee07ca3dcf57d2350afa0d4fbcd7d9d5029febecf,2025-12-01T22:15:50.250000
CVE-2025-66306,1,1,ae0b6b18be314916f1c54a31ec90e732647f52a348b3b8bfc59f92216a8c3003,2025-12-01T22:15:50.413000
CVE-2025-66307,1,1,76e825ea72125588b08f8b26d6634022f9921484003d4a8a49850026f74e0f0b,2025-12-01T22:15:50.570000
CVE-2025-66308,1,1,1924844c3b44066cf4435627b1aeef2ebdeb8304fec8fa11633c5c860f07e0e4,2025-12-01T22:15:50.743000
CVE-2025-66309,1,1,bf3885c97189b997573aab2ab599b5ca0c7f2722c9dfe4b9d49a939b50cd7ac0,2025-12-01T22:15:50.910000
CVE-2025-6631,0,0,86d2ee25bdf69ddf1aaf6049188589a2db446e1def446432dc1bb9a87223c0b5,2025-08-19T14:15:41.790000
CVE-2025-66310,1,1,2625faea8f66ab53ea5be4758257d2f4b02d19ea52b632dda380d6cce30eb641,2025-12-01T22:15:51.067000
CVE-2025-66311,1,1,0927a7afee5757093dc17c8c6edea050e702818126ed91cbffb400b0e9ccbb40,2025-12-01T22:15:51.217000
CVE-2025-66312,1,1,6da2ce4745a4736ea462c5e4805c5fd7c41405ebd0215b28f948eb6e20eac4ff,2025-12-01T22:15:51.367000
CVE-2025-66314,0,0,699e0894bd19536cc5e756dbd81eb3fe8a4a1f39b0a4127e4530f9cf67fe6c1f,2025-12-01T15:39:33.110000
CVE-2025-6632,0,0,cf1833c672776077eac82d60a035053b6b782e938aa8071d8feff5ffe959eeb7,2025-11-13T19:41:50.260000
CVE-2025-6633,0,0,117eeffdf2f8f6e2fed9dd7c3a57930753c8f6f12ea2d2e4f36e69d3e6dfc33d,2025-11-13T20:04:14.093000
Can't render this file because it is too large.