Auto-Update: 2025-11-12T17:00:11.477414+00:00

This commit is contained in:
cad-safe-bot committed 2025-11-12 17:04:02 +00:00
1 parent 7ffe4aeda3
commit cffef00a4e
827 files changed
+5947 -2630

No files matched your search

+6 -6
View File
@@ -2,7 +2,7 @@
"id": "CVE-2008-0655", "id": "CVE-2008-0655",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2008-02-07T21:00:00.000", "published": "2008-02-07T21:00:00.000",
"lastModified": "2025-10-22T01:15:33.090", "lastModified": "2025-11-12T15:15:34.093",
"vulnStatus": "Deferred", "vulnStatus": "Deferred",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
@@ -42,19 +42,19 @@
"type": "Secondary", "type": "Secondary",
"cvssData": { "cvssData": {
"version": "3.1", "version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 9.8, "baseScore": 8.8,
"baseSeverity": "CRITICAL", "baseSeverity": "HIGH",
"attackVector": "NETWORK", "attackVector": "NETWORK",
"attackComplexity": "LOW", "attackComplexity": "LOW",
"privilegesRequired": "NONE", "privilegesRequired": "NONE",
"userInteraction": "NONE", "userInteraction": "REQUIRED",
"scope": "UNCHANGED", "scope": "UNCHANGED",
"confidentialityImpact": "HIGH", "confidentialityImpact": "HIGH",
"integrityImpact": "HIGH", "integrityImpact": "HIGH",
"availabilityImpact": "HIGH" "availabilityImpact": "HIGH"
}, },
"exploitabilityScore": 3.9, "exploitabilityScore": 2.8,
"impactScore": 5.9 "impactScore": 5.9
} }
], ],
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2017-20210", "id": "CVE-2017-20210",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T10:15:35.400", "published": "2025-11-11T10:15:35.400",
"lastModified": "2025-11-11T10:15:35.400", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2018-25124", "id": "CVE-2018-25124",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-10T23:15:39.840", "published": "2025-11-10T23:15:39.840",
"lastModified": "2025-11-10T23:15:39.840", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2020-36870", "id": "CVE-2020-36870",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-07T22:15:38.587", "published": "2025-11-07T22:15:38.587",
"lastModified": "2025-11-07T22:15:38.587", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-4462", "id": "CVE-2021-4462",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-10T23:15:40.967", "published": "2025-11-10T23:15:40.967",
"lastModified": "2025-11-10T23:15:40.967", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2022-35155", "id": "CVE-2022-35155",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2022-09-30T19:15:15.407", "published": "2022-09-30T19:15:15.407",
"lastModified": "2025-05-05T17:18:16.170", "lastModified": "2025-11-12T15:15:35.073",
"vulnStatus": "Modified", "vulnStatus": "Modified",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
@@ -121,6 +121,10 @@
"Third Party Advisory" "Third Party Advisory"
] ]
}, },
{
"url": "https://packetstormsecurity.com/files/168555/Bus-Pass-Management-System-1.0-Cross-Site-Scripting.html",
"source": "[email protected]"
},
{ {
"url": "http://bus.com", "url": "http://bus.com",
"source": "af854a3a-2127-422b-91ae-364da2661108", "source": "af854a3a-2127-422b-91ae-364da2661108",
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2022-35156", "id": "CVE-2022-35156",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2022-09-30T19:15:15.510", "published": "2022-09-30T19:15:15.510",
"lastModified": "2025-05-20T16:15:21.433", "lastModified": "2025-11-12T15:15:35.267",
"vulnStatus": "Modified", "vulnStatus": "Modified",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
@@ -122,6 +122,10 @@
"VDB Entry" "VDB Entry"
] ]
}, },
{
"url": "https://www.exploit-db.com/exploits/50543",
"source": "[email protected]"
},
{ {
"url": "http://bus.com", "url": "http://bus.com",
"source": "af854a3a-2127-422b-91ae-364da2661108", "source": "af854a3a-2127-422b-91ae-364da2661108",
+146 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49912", "id": "CVE-2022-49912",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-05-01T15:16:16.363", "published": "2025-05-01T15:16:16.363",
"lastModified": "2025-05-02T13:52:51.693", "lastModified": "2025-11-12T15:36:11.507",
"vulnStatus": "Undergoing Analysis", "vulnStatus": "Analyzed",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
@@ -15,39 +15,174 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: se corrigen fugas de ulist en las rutas de error de las autopruebas de qgroup. En las autopruebas de qgroup test_no_shared_qgroup() y test_multiple_refs(), si no se a\u00f1ade la referencia del \u00e1rbol, se elimina el elemento de extensi\u00f3n o se elimina la referencia de extensi\u00f3n, se regresa de la funci\u00f3n de prueba sin liberar la ulist \"old_roots\" asignada por las llamadas anteriores a btrfs_find_all_roots(). Se puede solucionar llamando a ulist_free() antes de regresar." "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: se corrigen fugas de ulist en las rutas de error de las autopruebas de qgroup. En las autopruebas de qgroup test_no_shared_qgroup() y test_multiple_refs(), si no se a\u00f1ade la referencia del \u00e1rbol, se elimina el elemento de extensi\u00f3n o se elimina la referencia de extensi\u00f3n, se regresa de la funci\u00f3n de prueba sin liberar la ulist \"old_roots\" asignada por las llamadas anteriores a btrfs_find_all_roots(). Se puede solucionar llamando a ulist_free() antes de regresar."
} }
], ],
"metrics": {}, "metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.2",
"versionEndExcluding": "4.9.333",
"matchCriteriaId": "905F2B23-D86A-48BE-9EB8-4E05DF3FEB75"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.10",
"versionEndExcluding": "4.14.299",
"matchCriteriaId": "2FE9A829-20E8-4929-AE9B-02761322A926"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.265",
"matchCriteriaId": "ABED5D97-9B16-4CF6-86E3-D5F5C4358E35"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.224",
"matchCriteriaId": "1D67A077-EB45-4ADE-94CD-F9A76F6C319C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.154",
"matchCriteriaId": "475D097C-AB5A-4CF5-899F-413077854ABD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.78",
"matchCriteriaId": "AB8B27B9-B41B-42D5-AE67-0A89A8A8EEB1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.0.8",
"matchCriteriaId": "EC9A754E-625D-42F3-87A7-960D643E2867"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*",
"matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://git.kernel.org/stable/c/0a0dead4ad1a2e2a9bdf133ef45111d7c8daef84", "url": "https://git.kernel.org/stable/c/0a0dead4ad1a2e2a9bdf133ef45111d7c8daef84",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/203204798831c35d855ecc6417d98267d2d2184b", "url": "https://git.kernel.org/stable/c/203204798831c35d855ecc6417d98267d2d2184b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/3f58283d83a588ff5da62fc150de19e798ed2ec2", "url": "https://git.kernel.org/stable/c/3f58283d83a588ff5da62fc150de19e798ed2ec2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/5d1a47ebf84540e40b5b43fc21aef0d6c0f627d9", "url": "https://git.kernel.org/stable/c/5d1a47ebf84540e40b5b43fc21aef0d6c0f627d9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/d37de92b38932d40e4a251e876cc388f9aee5f42", "url": "https://git.kernel.org/stable/c/d37de92b38932d40e4a251e876cc388f9aee5f42",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/d81370396025cf63a7a1b5f8bb25a3479203b2ca", "url": "https://git.kernel.org/stable/c/d81370396025cf63a7a1b5f8bb25a3479203b2ca",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/da7003434bcab0ae9aba3f2c003e734cae093326", "url": "https://git.kernel.org/stable/c/da7003434bcab0ae9aba3f2c003e734cae093326",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/f46ea5fa3320dca4fe0c0926b49a5f14cb85de62", "url": "https://git.kernel.org/stable/c/f46ea5fa3320dca4fe0c0926b49a5f14cb85de62",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
} }
] ]
} }
+113 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49913", "id": "CVE-2022-49913",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-05-01T15:16:16.477", "published": "2025-05-01T15:16:16.477",
"lastModified": "2025-05-02T13:52:51.693", "lastModified": "2025-11-12T15:35:06.430",
"vulnStatus": "Undergoing Analysis", "vulnStatus": "Analyzed",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
@@ -15,27 +15,132 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: correcci\u00f3n de fuga de lista de inodos durante el recorrido de backref en find_parent_nodes() Durante el recorrido de backref, en find_parent_nodes(), si estamos tratando con una extensi\u00f3n de datos y obtenemos un error al resolver los backrefs indirectos, en resolve_indirect_refs(), o en el bucle while que itera sobre los refs en el rbtree de refs directos, terminamos filtrando las listas de inodos adjuntas a los refs directos que tenemos en el rbtree de refs directos que a\u00fan no se agregaron a la ulist de refs pasada como argumento a find_parent_nodes(). Dado que a\u00fan no se agregaron a la ulist de refs y prelim_release() no libera las listas, en caso de error, el llamador solo puede liberar las listas adjuntas a los refs que se agregaron a la ulist de refs, todas las referencias restantes obtienen sus listas de inodos nunca liberadas, por lo tanto, filtran su memoria. Para solucionar este problema, haga que prelim_release() siempre libere cualquier lista de inodos adjunta a cada referencia encontrada en el rbtree y que find_parent_nodes() establezca la lista de inodos de la referencia en NULL una vez que transfiera la propiedad de la lista de inodos a una referencia agregada a la lista de referencias pasada a find_parent_nodes()." "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: correcci\u00f3n de fuga de lista de inodos durante el recorrido de backref en find_parent_nodes() Durante el recorrido de backref, en find_parent_nodes(), si estamos tratando con una extensi\u00f3n de datos y obtenemos un error al resolver los backrefs indirectos, en resolve_indirect_refs(), o en el bucle while que itera sobre los refs en el rbtree de refs directos, terminamos filtrando las listas de inodos adjuntas a los refs directos que tenemos en el rbtree de refs directos que a\u00fan no se agregaron a la ulist de refs pasada como argumento a find_parent_nodes(). Dado que a\u00fan no se agregaron a la ulist de refs y prelim_release() no libera las listas, en caso de error, el llamador solo puede liberar las listas adjuntas a los refs que se agregaron a la ulist de refs, todas las referencias restantes obtienen sus listas de inodos nunca liberadas, por lo tanto, filtran su memoria. Para solucionar este problema, haga que prelim_release() siempre libere cualquier lista de inodos adjunta a cada referencia encontrada en el rbtree y que find_parent_nodes() establezca la lista de inodos de la referencia en NULL una vez que transfiera la propiedad de la lista de inodos a una referencia agregada a la lista de referencias pasada a find_parent_nodes()."
} }
], ],
"metrics": {}, "metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.14",
"versionEndExcluding": "5.4.224",
"matchCriteriaId": "036AC258-A96A-4A80-9C66-533E2F7A537B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.154",
"matchCriteriaId": "475D097C-AB5A-4CF5-899F-413077854ABD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.78",
"matchCriteriaId": "AB8B27B9-B41B-42D5-AE67-0A89A8A8EEB1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.0.8",
"matchCriteriaId": "EC9A754E-625D-42F3-87A7-960D643E2867"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*",
"matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://git.kernel.org/stable/c/222a3d533027b9492d5b7f5ecdc01a90f57bb5a9", "url": "https://git.kernel.org/stable/c/222a3d533027b9492d5b7f5ecdc01a90f57bb5a9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/61e06128113711df0534c404fb6bb528eb7d2332", "url": "https://git.kernel.org/stable/c/61e06128113711df0534c404fb6bb528eb7d2332",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/6a6731a0df8c47ecc703bd7bb73459df767051e0", "url": "https://git.kernel.org/stable/c/6a6731a0df8c47ecc703bd7bb73459df767051e0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/83ea8c5b54d452a5769e605e3c5c687e8ca06d89", "url": "https://git.kernel.org/stable/c/83ea8c5b54d452a5769e605e3c5c687e8ca06d89",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/92876eec382a0f19f33d09d2c939e9ca49038ae5", "url": "https://git.kernel.org/stable/c/92876eec382a0f19f33d09d2c939e9ca49038ae5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
} }
] ]
} }
+135 -10
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49914", "id": "CVE-2022-49914",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-05-01T15:16:16.593", "published": "2025-05-01T15:16:16.593",
"lastModified": "2025-05-02T13:52:51.693", "lastModified": "2025-11-12T16:06:57.320",
"vulnStatus": "Undergoing Analysis", "vulnStatus": "Analyzed",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
@@ -15,35 +15,160 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: correcci\u00f3n de fuga de lista de inodos durante el recorrido de backref en resolve_indirect_refs() Durante el recorrido de backref, en resolve_indirect_refs(), si obtenemos un error saltamos a la etiqueta 'out' y llamamos a ulist_free() en la ulist 'parents', que libera todos los elementos en la ulist - sin embargo, eso no libera ninguna lista de inodos que pueda estar adjunta a elementos, a trav\u00e9s del campo 'aux' de un nodo ulist, por lo que terminamos filtrando listas si tenemos alguna adjunta a los unodes. Arregle esto llamando a free_leaf_list() en lugar de ulist_free() cuando salimos de resolve_indirect_refs(). La funci\u00f3n est\u00e1tica free_leaf_list() se mueve hacia arriba para que esto sea posible y se simplifica ligeramente eliminando c\u00f3digo innecesario." "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: correcci\u00f3n de fuga de lista de inodos durante el recorrido de backref en resolve_indirect_refs() Durante el recorrido de backref, en resolve_indirect_refs(), si obtenemos un error saltamos a la etiqueta 'out' y llamamos a ulist_free() en la ulist 'parents', que libera todos los elementos en la ulist - sin embargo, eso no libera ninguna lista de inodos que pueda estar adjunta a elementos, a trav\u00e9s del campo 'aux' de un nodo ulist, por lo que terminamos filtrando listas si tenemos alguna adjunta a los unodes. Arregle esto llamando a free_leaf_list() en lugar de ulist_free() cuando salimos de resolve_indirect_refs(). La funci\u00f3n est\u00e1tica free_leaf_list() se mueve hacia arriba para que esto sea posible y se simplifica ligeramente eliminando c\u00f3digo innecesario."
} }
], ],
"metrics": {}, "metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.5",
"versionEndExcluding": "4.14.299",
"matchCriteriaId": "050E0517-4ED0-4122-9D26-1744A2674706"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.265",
"matchCriteriaId": "ABED5D97-9B16-4CF6-86E3-D5F5C4358E35"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.224",
"matchCriteriaId": "1D67A077-EB45-4ADE-94CD-F9A76F6C319C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.154",
"matchCriteriaId": "475D097C-AB5A-4CF5-899F-413077854ABD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.78",
"matchCriteriaId": "AB8B27B9-B41B-42D5-AE67-0A89A8A8EEB1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.0.8",
"matchCriteriaId": "EC9A754E-625D-42F3-87A7-960D643E2867"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*",
"matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://git.kernel.org/stable/c/2c0329406bb28109c07c6e23e5e3e0fa618a95d7", "url": "https://git.kernel.org/stable/c/2c0329406bb28109c07c6e23e5e3e0fa618a95d7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/396515db923ad5cbeb179d6b88927870b4cbebb7", "url": "https://git.kernel.org/stable/c/396515db923ad5cbeb179d6b88927870b4cbebb7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/5614dc3a47e3310fbc77ea3b67eaadd1c6417bf1", "url": "https://git.kernel.org/stable/c/5614dc3a47e3310fbc77ea3b67eaadd1c6417bf1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/6ba3479f9e96b9ad460c7e77abc26dd16e5dec4f", "url": "https://git.kernel.org/stable/c/6ba3479f9e96b9ad460c7e77abc26dd16e5dec4f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/a52e24c7fcc3c5ce3588a14e3663c00868d36623", "url": "https://git.kernel.org/stable/c/a52e24c7fcc3c5ce3588a14e3663c00868d36623",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/b1dc9019bb5f89abae85645de1a2dd4830c1f8e9", "url": "https://git.kernel.org/stable/c/b1dc9019bb5f89abae85645de1a2dd4830c1f8e9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/cded2c89774b99b67c98147ae103ea878c92a206", "url": "https://git.kernel.org/stable/c/cded2c89774b99b67c98147ae103ea878c92a206",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
} }
] ]
} }
+124 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49917", "id": "CVE-2022-49917",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-05-01T15:16:16.927", "published": "2025-05-01T15:16:16.927",
"lastModified": "2025-05-02T13:52:51.693", "lastModified": "2025-11-12T16:06:20.440",
"vulnStatus": "Undergoing Analysis", "vulnStatus": "Analyzed",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
@@ -15,31 +15,146 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ipvs: correcci\u00f3n de una advertencia en ip_vs_app_net_cleanup(). Durante la inicializaci\u00f3n de ip_vs_app_net_init(), si no se crea el archivo ip_vs_app, la inicializaci\u00f3n se realiza correctamente por defecto. Por lo tanto, el archivo ip_vs_app no se encuentra durante la eliminaci\u00f3n en ip_vs_app_net_cleanup(). Esto provocar\u00e1 un error WRNING. La siguiente es la informaci\u00f3n de la pila: nombre 'ip_vs_app' ADVERTENCIA: CPU: 1 PID: 9 en fs/proc/generic.c:712 remove_proc_entry+0x389/0x460 M\u00f3dulos vinculados en: Cola de trabajo: netns cleanup_net RIP: 0010:remove_proc_entry+0x389/0x460 Seguimiento de llamadas: ops_exit_list+0x125/0x170 cleanup_net+0x4ea/0xb00 process_one_work+0x9bf/0x1710 worker_thread+0x665/0x1080 kthread+0x2e4/0x3a0 ret_from_fork+0x1f/0x30 " "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ipvs: correcci\u00f3n de una advertencia en ip_vs_app_net_cleanup(). Durante la inicializaci\u00f3n de ip_vs_app_net_init(), si no se crea el archivo ip_vs_app, la inicializaci\u00f3n se realiza correctamente por defecto. Por lo tanto, el archivo ip_vs_app no se encuentra durante la eliminaci\u00f3n en ip_vs_app_net_cleanup(). Esto provocar\u00e1 un error WRNING. La siguiente es la informaci\u00f3n de la pila: nombre 'ip_vs_app' ADVERTENCIA: CPU: 1 PID: 9 en fs/proc/generic.c:712 remove_proc_entry+0x389/0x460 M\u00f3dulos vinculados en: Cola de trabajo: netns cleanup_net RIP: 0010:remove_proc_entry+0x389/0x460 Seguimiento de llamadas: ops_exit_list+0x125/0x170 cleanup_net+0x4ea/0xb00 process_one_work+0x9bf/0x1710 worker_thread+0x665/0x1080 kthread+0x2e4/0x3a0 ret_from_fork+0x1f/0x30 "
} }
], ],
"metrics": {}, "metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.24",
"versionEndExcluding": "4.19.265",
"matchCriteriaId": "5587D9AA-35A0-4C8A-81C6-54B024B25907"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.224",
"matchCriteriaId": "1D67A077-EB45-4ADE-94CD-F9A76F6C319C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.154",
"matchCriteriaId": "475D097C-AB5A-4CF5-899F-413077854ABD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.78",
"matchCriteriaId": "AB8B27B9-B41B-42D5-AE67-0A89A8A8EEB1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.0.8",
"matchCriteriaId": "EC9A754E-625D-42F3-87A7-960D643E2867"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*",
"matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://git.kernel.org/stable/c/06d7596d18725f1a93cf817662d36050e5afb989", "url": "https://git.kernel.org/stable/c/06d7596d18725f1a93cf817662d36050e5afb989",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/2c8d81bdb2684d53d6cedad7410ba4cf9090e343", "url": "https://git.kernel.org/stable/c/2c8d81bdb2684d53d6cedad7410ba4cf9090e343",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/5663ed63adb9619c98ab7479aa4606fa9b7a548c", "url": "https://git.kernel.org/stable/c/5663ed63adb9619c98ab7479aa4606fa9b7a548c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/8457a00c981fe1a799ce34123908856b0f5973b8", "url": "https://git.kernel.org/stable/c/8457a00c981fe1a799ce34123908856b0f5973b8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/97f872b00937f2689bff2dab4ad9ed259482840f", "url": "https://git.kernel.org/stable/c/97f872b00937f2689bff2dab4ad9ed259482840f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/adc76740ccd52e4a1d910767cd1223e134a7078b", "url": "https://git.kernel.org/stable/c/adc76740ccd52e4a1d910767cd1223e134a7078b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
} }
] ]
} }
+124 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49918", "id": "CVE-2022-49918",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-05-01T15:16:17.060", "published": "2025-05-01T15:16:17.060",
"lastModified": "2025-05-02T13:52:51.693", "lastModified": "2025-11-12T15:59:39.363",
"vulnStatus": "Undergoing Analysis", "vulnStatus": "Analyzed",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
@@ -15,31 +15,146 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ipvs: correcci\u00f3n de una ADVERTENCIA en __ip_vs_cleanup_batch(). Durante la inicializaci\u00f3n de ip_vs_conn_net_init(), si no se crea el archivo ip_vs_conn o ip_vs_conn_sync, la inicializaci\u00f3n se realiza correctamente por defecto. Por lo tanto, no se encuentra el archivo ip_vs_conn o ip_vs_conn_sync durante la eliminaci\u00f3n. La siguiente es la informaci\u00f3n de la pila: nombre 'ip_vs_conn_sync' ADVERTENCIA: CPU: 3 PID: 9 en fs/proc/generic.c:712 remove_proc_entry+0x389/0x460 M\u00f3dulos vinculados en: Cola de trabajo: netns cleanup_net RIP: 0010:remove_proc_entry+0x389/0x460 Seguimiento de llamadas: __ip_vs_cleanup_batch+0x7d/0x120 ops_exit_list+0x125/0x170 cleanup_net+0x4ea/0xb00 process_one_work+0x9bf/0x1710 worker_thread+0x665/0x1080 kthread+0x2e4/0x3a0 ret_from_fork+0x1f/0x30 " "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ipvs: correcci\u00f3n de una ADVERTENCIA en __ip_vs_cleanup_batch(). Durante la inicializaci\u00f3n de ip_vs_conn_net_init(), si no se crea el archivo ip_vs_conn o ip_vs_conn_sync, la inicializaci\u00f3n se realiza correctamente por defecto. Por lo tanto, no se encuentra el archivo ip_vs_conn o ip_vs_conn_sync durante la eliminaci\u00f3n. La siguiente es la informaci\u00f3n de la pila: nombre 'ip_vs_conn_sync' ADVERTENCIA: CPU: 3 PID: 9 en fs/proc/generic.c:712 remove_proc_entry+0x389/0x460 M\u00f3dulos vinculados en: Cola de trabajo: netns cleanup_net RIP: 0010:remove_proc_entry+0x389/0x460 Seguimiento de llamadas: __ip_vs_cleanup_batch+0x7d/0x120 ops_exit_list+0x125/0x170 cleanup_net+0x4ea/0xb00 process_one_work+0x9bf/0x1710 worker_thread+0x665/0x1080 kthread+0x2e4/0x3a0 ret_from_fork+0x1f/0x30 "
} }
], ],
"metrics": {}, "metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2.6.39",
"versionEndExcluding": "4.19.265",
"matchCriteriaId": "60E81263-C518-451B-B61D-A5F2C0FED7F9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.224",
"matchCriteriaId": "1D67A077-EB45-4ADE-94CD-F9A76F6C319C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.154",
"matchCriteriaId": "475D097C-AB5A-4CF5-899F-413077854ABD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.78",
"matchCriteriaId": "AB8B27B9-B41B-42D5-AE67-0A89A8A8EEB1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.0.8",
"matchCriteriaId": "EC9A754E-625D-42F3-87A7-960D643E2867"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*",
"matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://git.kernel.org/stable/c/3d00c6a0da8ddcf75213e004765e4a42acc71d5d", "url": "https://git.kernel.org/stable/c/3d00c6a0da8ddcf75213e004765e4a42acc71d5d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/5ee2d6b726b0ce339e36569e5849692f4cf4595e", "url": "https://git.kernel.org/stable/c/5ee2d6b726b0ce339e36569e5849692f4cf4595e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/7effc4ce3d1434ce6ff286866585a6e905fdbfc1", "url": "https://git.kernel.org/stable/c/7effc4ce3d1434ce6ff286866585a6e905fdbfc1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/931f56d59c854263b32075bfac56fdb3b1598d1b", "url": "https://git.kernel.org/stable/c/931f56d59c854263b32075bfac56fdb3b1598d1b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/e724220b826e008764309d2a1f55a9434a4e1530", "url": "https://git.kernel.org/stable/c/e724220b826e008764309d2a1f55a9434a4e1530",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/f08ee2aa24c076f81d84e26e213d8c6f4efd9f50", "url": "https://git.kernel.org/stable/c/f08ee2aa24c076f81d84e26e213d8c6f4efd9f50",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
} }
] ]
} }
+80 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49929", "id": "CVE-2022-49929",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-05-01T15:16:18.887", "published": "2025-05-01T15:16:18.887",
"lastModified": "2025-05-02T13:52:51.693", "lastModified": "2025-11-12T15:57:34.297",
"vulnStatus": "Undergoing Analysis", "vulnStatus": "Analyzed",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
@@ -15,15 +15,90 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/rxe: Reparar fuga de mr en RESPST_ERR_RNR rxe_recheck_mr() aumentar\u00e1 el ref_cnt de mr, por lo que debemos llamar a rxe_put(mr) para eliminar el ref_cnt de mr en RESPST_ERR_RNR para evitar la siguiente advertencia: ADVERTENCIA: CPU: 0 PID: 4156 en drivers/infiniband/sw/rxe/rxe_pool.c:259 __rxe_cleanup+0x1df/0x240 [rdma_rxe] ... Rastreo de llamadas: rxe_dereg_mr+0x4c/0x60 [rdma_rxe] ib_dereg_mr_user+0xa8/0x200 [ib_core] ib_mr_pool_destroy+0x77/0xb0 [ib_core] nvme_rdma_destroy_queue_ib+0x89/0x240 [nvme_rdma] nvme_rdma_free_queue+0x40/0x50 [nvme_rdma] nvme_rdma_teardown_io_queues.part.0+0xc3/0x120 [nvme_rdma] nvme_rdma_error_recovery_work+0x4d/0xf0 [nvme_rdma] process_one_work+0x582/0xa40 ? pwq_dec_nr_in_flight+0x100/0x100 ? rwlock_bug.part.0+0x60/0x60 worker_thread+0x2a9/0x700 ? process_one_work+0xa40/0xa40 kthread+0x168/0x1a0 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x22/0x30 " "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/rxe: Reparar fuga de mr en RESPST_ERR_RNR rxe_recheck_mr() aumentar\u00e1 el ref_cnt de mr, por lo que debemos llamar a rxe_put(mr) para eliminar el ref_cnt de mr en RESPST_ERR_RNR para evitar la siguiente advertencia: ADVERTENCIA: CPU: 0 PID: 4156 en drivers/infiniband/sw/rxe/rxe_pool.c:259 __rxe_cleanup+0x1df/0x240 [rdma_rxe] ... Rastreo de llamadas: rxe_dereg_mr+0x4c/0x60 [rdma_rxe] ib_dereg_mr_user+0xa8/0x200 [ib_core] ib_mr_pool_destroy+0x77/0xb0 [ib_core] nvme_rdma_destroy_queue_ib+0x89/0x240 [nvme_rdma] nvme_rdma_free_queue+0x40/0x50 [nvme_rdma] nvme_rdma_teardown_io_queues.part.0+0xc3/0x120 [nvme_rdma] nvme_rdma_error_recovery_work+0x4d/0xf0 [nvme_rdma] process_one_work+0x582/0xa40 ? pwq_dec_nr_in_flight+0x100/0x100 ? rwlock_bug.part.0+0x60/0x60 worker_thread+0x2a9/0x700 ? process_one_work+0xa40/0xa40 kthread+0x168/0x1a0 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x22/0x30 "
} }
], ],
"metrics": {}, "metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.18",
"versionEndExcluding": "6.0.8",
"matchCriteriaId": "1A7CC21A-D6B9-425E-AEBB-BD23DFDC85EA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*",
"matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://git.kernel.org/stable/c/50b35ad2864a9d66f802f9ce193d99bbef64e219", "url": "https://git.kernel.org/stable/c/50b35ad2864a9d66f802f9ce193d99bbef64e219",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/b5f9a01fae42684648c2ee3cd9985f80c67ab9f7", "url": "https://git.kernel.org/stable/c/b5f9a01fae42684648c2ee3cd9985f80c67ab9f7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
} }
] ]
} }
+75 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-49932", "id": "CVE-2022-49932",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-05-02T16:15:22.070", "published": "2025-05-02T16:15:22.070",
"lastModified": "2025-05-05T20:54:45.973", "lastModified": "2025-11-12T15:56:49.603",
"vulnStatus": "Undergoing Analysis", "vulnStatus": "Analyzed",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
@@ -15,19 +15,88 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: KVM: VMX: Inicializa _toda_ la instancia antes de exponer /dev/kvm al espacio de usuario. Llama a kvm_init() solo despu\u00e9s de que se complete la configuraci\u00f3n _toda_, ya que kvm_init() expone /dev/kvm al espacio de usuario y, por lo tanto, permite que este cree m\u00e1quinas virtuales (y llame a otras ioctl). Por ejemplo, KVM encontrar\u00e1 un puntero nulo al intentar agregar una vCPU a la lista por CPU load_vmcss_on_cpu si el espacio de usuario puede crear una m\u00e1quina virtual antes de que vmx_init() configure dicha lista. ERROR: desreferencia de puntero NULL del kernel, direcci\u00f3n: 0000000000000008 #PF: acceso de escritura del supervisor en modo kernel #PF: error_code(0x0002) - p\u00e1gina no presente PGD 0 P4D 0 Oops: 0002 [#1] CPU SMP: 6 PID: 1143 Comm: estable No contaminado 6.0.0-rc7+ #988 Nombre del hardware: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 RIP: 0010:vmx_vcpu_load_vmcs+0x68/0x230 [kvm_intel] vmx_vcpu_load+0x16/0x60 [kvm_intel] kvm_arch_vcpu_load+0x32/0x1f0 [kvm] vcpu_load+0x2f/0x40 [kvm] kvm_arch_vcpu_create+0x231/0x310 [kvm] kvm_vm_ioctl+0x79f/0xe10 [kvm] ? handle_mm_fault+0xb1/0x220 __x64_sys_ioctl+0x80/0xb0 do_syscall_64+0x2b/0x50 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7f5a6b05743b M\u00f3dulos vinculados en: vhost_net vhost vhost_iotlb tap kvm_intel(+) kvm irqbypass" "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: KVM: VMX: Inicializa _toda_ la instancia antes de exponer /dev/kvm al espacio de usuario. Llama a kvm_init() solo despu\u00e9s de que se complete la configuraci\u00f3n _toda_, ya que kvm_init() expone /dev/kvm al espacio de usuario y, por lo tanto, permite que este cree m\u00e1quinas virtuales (y llame a otras ioctl). Por ejemplo, KVM encontrar\u00e1 un puntero nulo al intentar agregar una vCPU a la lista por CPU load_vmcss_on_cpu si el espacio de usuario puede crear una m\u00e1quina virtual antes de que vmx_init() configure dicha lista. ERROR: desreferencia de puntero NULL del kernel, direcci\u00f3n: 0000000000000008 #PF: acceso de escritura del supervisor en modo kernel #PF: error_code(0x0002) - p\u00e1gina no presente PGD 0 P4D 0 Oops: 0002 [#1] CPU SMP: 6 PID: 1143 Comm: estable No contaminado 6.0.0-rc7+ #988 Nombre del hardware: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 RIP: 0010:vmx_vcpu_load_vmcs+0x68/0x230 [kvm_intel] vmx_vcpu_load+0x16/0x60 [kvm_intel] kvm_arch_vcpu_load+0x32/0x1f0 [kvm] vcpu_load+0x2f/0x40 [kvm] kvm_arch_vcpu_create+0x231/0x310 [kvm] kvm_vm_ioctl+0x79f/0xe10 [kvm] ? handle_mm_fault+0xb1/0x220 __x64_sys_ioctl+0x80/0xb0 do_syscall_64+0x2b/0x50 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7f5a6b05743b M\u00f3dulos vinculados en: vhost_net vhost vhost_iotlb tap kvm_intel(+) kvm irqbypass"
} }
], ],
"metrics": {}, "metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.1.20",
"matchCriteriaId": "2B06CA9A-19CF-4C9A-AC5F-E30660581E22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.2.7",
"matchCriteriaId": "EFEDDF17-189C-4901-BD6B-41752E80AAA4"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://git.kernel.org/stable/c/e136e969d268b9b89329c816c002e53f60e82985", "url": "https://git.kernel.org/stable/c/e136e969d268b9b89329c816c002e53f60e82985",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/e28533c08023c4b319b7f2cd77f3f7c9204eb517", "url": "https://git.kernel.org/stable/c/e28533c08023c4b319b7f2cd77f3f7c9204eb517",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/e32b120071ea114efc0b4ddd439547750b85f618", "url": "https://git.kernel.org/stable/c/e32b120071ea114efc0b4ddd439547750b85f618",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
} }
] ]
} }
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50589", "id": "CVE-2022-50589",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:36.787", "published": "2025-11-06T20:15:36.787",
"lastModified": "2025-11-06T20:15:36.787", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50590", "id": "CVE-2022-50590",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:36.990", "published": "2025-11-06T20:15:36.990",
"lastModified": "2025-11-06T20:15:36.990", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50591", "id": "CVE-2022-50591",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:37.173", "published": "2025-11-06T20:15:37.173",
"lastModified": "2025-11-06T20:15:37.173", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50592", "id": "CVE-2022-50592",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:37.373", "published": "2025-11-06T20:15:37.373",
"lastModified": "2025-11-06T20:15:37.373", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50593", "id": "CVE-2022-50593",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:37.557", "published": "2025-11-06T20:15:37.557",
"lastModified": "2025-11-06T20:15:37.557", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50594", "id": "CVE-2022-50594",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:37.773", "published": "2025-11-06T20:15:37.773",
"lastModified": "2025-11-06T20:15:37.773", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50595", "id": "CVE-2022-50595",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:38.070", "published": "2025-11-06T20:15:38.070",
"lastModified": "2025-11-06T20:15:38.070", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-50596", "id": "CVE-2022-50596",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:40.450", "published": "2025-11-06T20:15:40.450",
"lastModified": "2025-11-06T20:15:40.450", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+146 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53044", "id": "CVE-2023-53044",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-05-02T16:15:23.490", "published": "2025-05-02T16:15:23.490",
"lastModified": "2025-05-05T20:54:45.973", "lastModified": "2025-11-12T16:46:33.133",
"vulnStatus": "Undergoing Analysis", "vulnStatus": "Analyzed",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
@@ -15,39 +15,174 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dm stats: comprobar y propagar el fallo de alloc_percpu. Comprueba el valor de retorno de alloc_precpu() y devuelve un error de dm_stats_init() si falla. Actualice alloc_dev() para que falle si dm_stats_init() falla. De lo contrario, se producir\u00e1 una desreferencia de puntero nulo en dm_stats_cleanup(), incluso si dm-stats no se est\u00e1 utilizando activamente." "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dm stats: comprobar y propagar el fallo de alloc_percpu. Comprueba el valor de retorno de alloc_precpu() y devuelve un error de dm_stats_init() si falla. Actualice alloc_dev() para que falle si dm_stats_init() falla. De lo contrario, se producir\u00e1 una desreferencia de puntero nulo en dm_stats_cleanup(), incluso si dm-stats no se est\u00e1 utilizando activamente."
} }
], ],
"metrics": {}, "metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.12",
"versionEndExcluding": "4.14.312",
"matchCriteriaId": "5E8FB415-5DCF-496D-B00F-0E223DC7FAD4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.280",
"matchCriteriaId": "B8449DA5-0637-406C-99C3-84AF4CB5F3EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.240",
"matchCriteriaId": "2C5F51A3-AEBF-4E51-AA58-D8C8B4554A86"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.177",
"matchCriteriaId": "9FED8369-E7A1-48C6-9700-6ADEDEC371F7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.105",
"matchCriteriaId": "0888AE70-CB0A-45C0-B9BD-A5371244C8DB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.22",
"matchCriteriaId": "642B6F99-95C6-47F5-A9B1-5C45FE08CAD0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.2.9",
"matchCriteriaId": "914F22DD-1E6F-4B0A-A14D-3A9F068F6761"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
"matchCriteriaId": "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
"matchCriteriaId": "A47F0FC3-CE52-4BA1-BA51-22F783938431"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*",
"matchCriteriaId": "3583026A-27EC-4A4C-850A-83F2AF970673"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://git.kernel.org/stable/c/0d96bd507ed7e7d565b6d53ebd3874686f123b2e", "url": "https://git.kernel.org/stable/c/0d96bd507ed7e7d565b6d53ebd3874686f123b2e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/2287d7b721471a3d58bcd829250336e3cdf1635e", "url": "https://git.kernel.org/stable/c/2287d7b721471a3d58bcd829250336e3cdf1635e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/443c9d522397511a4328dc2ec3c9c63c73049756", "url": "https://git.kernel.org/stable/c/443c9d522397511a4328dc2ec3c9c63c73049756",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/4a32a9a818a895671bd43e0c40351e60e4e9140b", "url": "https://git.kernel.org/stable/c/4a32a9a818a895671bd43e0c40351e60e4e9140b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/5b66e36a3efd24041b7374432bfa4dec2ff01e95", "url": "https://git.kernel.org/stable/c/5b66e36a3efd24041b7374432bfa4dec2ff01e95",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/a42180dd361584816bfe15c137b665699b994d90", "url": "https://git.kernel.org/stable/c/a42180dd361584816bfe15c137b665699b994d90",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/c68f08cc745675a17894e1b4a5b5b9700ace6da4", "url": "https://git.kernel.org/stable/c/c68f08cc745675a17894e1b4a5b5b9700ace6da4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/d3aa3e060c4a80827eb801fc448debc9daa7c46b", "url": "https://git.kernel.org/stable/c/d3aa3e060c4a80827eb801fc448debc9daa7c46b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
} }
] ]
} }
+146 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53045", "id": "CVE-2023-53045",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-05-02T16:15:23.590", "published": "2025-05-02T16:15:23.590",
"lastModified": "2025-05-05T20:54:45.973", "lastModified": "2025-11-12T16:46:37.757",
"vulnStatus": "Undergoing Analysis", "vulnStatus": "Analyzed",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
@@ -15,39 +15,174 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: gadget: u_audio: no permitir que el espacio de usuario bloquee la desvinculaci\u00f3n del controlador. En la llamada de desvinculaci\u00f3n para f_uac1 y f_uac2, una llamada a snd_card_free() mediante g_audio_cleanup() desconectar\u00e1 la tarjeta y esperar\u00e1 a que se liberen todos los recursos, lo que ocurre cuando el recuento de referencias llega a cero. Dado que el espacio de usuario puede mantener el recuento de referencias incrementado al no cerrar el descriptor de archivo correspondiente, la llamada a desvinculaci\u00f3n podr\u00eda bloquearse indefinidamente. Esto puede causar un bloqueo durante el reinicio, como lo demuestra la siguiente tarea bloqueada observada en mi m\u00e1quina: task:reboot state:D stack:0 pid:2827 ppid:569 flags:0x0000000c Rastreo de llamadas: __switch_to+0xc8/0x140 __schedule+0x2f0/0x7c0 schedule+0x60/0xd0 schedule_timeout+0x180/0x1d4 wait_for_completion+0x78/0x180 snd_card_free+0x90/0xa0 g_audio_cleanup+0x2c/0x64 afunc_unbind+0x28/0x60 ... kernel_restart+0x4c/0xac __do_sys_reboot+0xcc/0x1ec __arm64_sys_reboot+0x28/0x30 invoke_syscall+0x4c/0x110 ... El problema tambi\u00e9n se puede observar al abrir la tarjeta con arecord y luego detener el proceso a trav\u00e9s del shell antes de desvincular: # arecord -D hw:UAC2Gadget -f S32_LE -c 2 -r 48000 /dev/null Recording WAVE '/dev/null' : Signed 32 bit Little Endian, Rate 48000 Hz, Stereo ^Z[1]+ Stopped arecord -D hw:UAC2Gadget -f S32_LE -c 2 -r 48000 /dev/null # echo gadget.0 > /sys/bus/gadget/drivers/configfs-gadget/unbind (observe que el comando de desvinculaci\u00f3n nunca finaliza) Corrija el problema usando snd_card_free_when_closed() en su lugar, que a\u00fan desconectar\u00e1 la tarjeta como se desea, pero pospondr\u00e1 la tarea de liberar los recursos al n\u00facleo una vez que el espacio de usuario cierre su descriptor de archivo." "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: gadget: u_audio: no permitir que el espacio de usuario bloquee la desvinculaci\u00f3n del controlador. En la llamada de desvinculaci\u00f3n para f_uac1 y f_uac2, una llamada a snd_card_free() mediante g_audio_cleanup() desconectar\u00e1 la tarjeta y esperar\u00e1 a que se liberen todos los recursos, lo que ocurre cuando el recuento de referencias llega a cero. Dado que el espacio de usuario puede mantener el recuento de referencias incrementado al no cerrar el descriptor de archivo correspondiente, la llamada a desvinculaci\u00f3n podr\u00eda bloquearse indefinidamente. Esto puede causar un bloqueo durante el reinicio, como lo demuestra la siguiente tarea bloqueada observada en mi m\u00e1quina: task:reboot state:D stack:0 pid:2827 ppid:569 flags:0x0000000c Rastreo de llamadas: __switch_to+0xc8/0x140 __schedule+0x2f0/0x7c0 schedule+0x60/0xd0 schedule_timeout+0x180/0x1d4 wait_for_completion+0x78/0x180 snd_card_free+0x90/0xa0 g_audio_cleanup+0x2c/0x64 afunc_unbind+0x28/0x60 ... kernel_restart+0x4c/0xac __do_sys_reboot+0xcc/0x1ec __arm64_sys_reboot+0x28/0x30 invoke_syscall+0x4c/0x110 ... El problema tambi\u00e9n se puede observar al abrir la tarjeta con arecord y luego detener el proceso a trav\u00e9s del shell antes de desvincular: # arecord -D hw:UAC2Gadget -f S32_LE -c 2 -r 48000 /dev/null Recording WAVE '/dev/null' : Signed 32 bit Little Endian, Rate 48000 Hz, Stereo ^Z[1]+ Stopped arecord -D hw:UAC2Gadget -f S32_LE -c 2 -r 48000 /dev/null # echo gadget.0 > /sys/bus/gadget/drivers/configfs-gadget/unbind (observe que el comando de desvinculaci\u00f3n nunca finaliza) Corrija el problema usando snd_card_free_when_closed() en su lugar, que a\u00fan desconectar\u00e1 la tarjeta como se desea, pero pospondr\u00e1 la tarea de liberar los recursos al n\u00facleo una vez que el espacio de usuario cierre su descriptor de archivo."
} }
], ],
"metrics": {}, "metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-667"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.4",
"versionEndExcluding": "4.14.312",
"matchCriteriaId": "C5C26577-EB56-4C1D-BF4B-02F8F85242DB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.15",
"versionEndExcluding": "4.19.280",
"matchCriteriaId": "B8449DA5-0637-406C-99C3-84AF4CB5F3EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20",
"versionEndExcluding": "5.4.240",
"matchCriteriaId": "2C5F51A3-AEBF-4E51-AA58-D8C8B4554A86"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.177",
"matchCriteriaId": "9FED8369-E7A1-48C6-9700-6ADEDEC371F7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.105",
"matchCriteriaId": "0888AE70-CB0A-45C0-B9BD-A5371244C8DB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.22",
"matchCriteriaId": "642B6F99-95C6-47F5-A9B1-5C45FE08CAD0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.2.9",
"matchCriteriaId": "914F22DD-1E6F-4B0A-A14D-3A9F068F6761"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
"matchCriteriaId": "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
"matchCriteriaId": "A47F0FC3-CE52-4BA1-BA51-22F783938431"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*",
"matchCriteriaId": "3583026A-27EC-4A4C-850A-83F2AF970673"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://git.kernel.org/stable/c/0eda2004f38d95ef5715d62be884cd344260535b", "url": "https://git.kernel.org/stable/c/0eda2004f38d95ef5715d62be884cd344260535b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/3256e152b645fc1e788ba44c2d8ced690113e3e6", "url": "https://git.kernel.org/stable/c/3256e152b645fc1e788ba44c2d8ced690113e3e6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/33f341c1fc60e172a3515c51bdabee11e83d1ee9", "url": "https://git.kernel.org/stable/c/33f341c1fc60e172a3515c51bdabee11e83d1ee9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/3bc7324e4911351e39c54a62e6ca46321cb10faf", "url": "https://git.kernel.org/stable/c/3bc7324e4911351e39c54a62e6ca46321cb10faf",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/3e016ef2e72da93a2ea7afbb45de1b481b44d761", "url": "https://git.kernel.org/stable/c/3e016ef2e72da93a2ea7afbb45de1b481b44d761",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/43ca70753dfffd517d2af126da28690f8f615605", "url": "https://git.kernel.org/stable/c/43ca70753dfffd517d2af126da28690f8f615605",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/6c67ed9ad9b83e453e808f9b31a931a20a25629b", "url": "https://git.kernel.org/stable/c/6c67ed9ad9b83e453e808f9b31a931a20a25629b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/b131989797f7287d7fdadb2bababc05a15d44750", "url": "https://git.kernel.org/stable/c/b131989797f7287d7fdadb2bababc05a15d44750",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
} }
] ]
} }
+91 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53046", "id": "CVE-2023-53046",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-05-02T16:15:23.697", "published": "2025-05-02T16:15:23.697",
"lastModified": "2025-05-05T20:54:45.973", "lastModified": "2025-11-12T16:46:48.923",
"vulnStatus": "Undergoing Analysis", "vulnStatus": "Analyzed",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
@@ -15,19 +15,104 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Bluetooth: Corregir condici\u00f3n de ejecuci\u00f3n en hci_cmd_sync_clear Existe una posible condici\u00f3n de ejecuci\u00f3n en hci_cmd_sync_work y hci_cmd_sync_clear, y podr\u00eda provocar un use-after-free. Por ejemplo, hci_cmd_sync_work se a\u00f1ade a 'req_workqueue' despu\u00e9s de cancel_work_sync La entrada de 'cmd_sync_work_list' puede liberarse en hci_cmd_sync_clear y provocar un p\u00e1nico del kernel cuando se utiliza en 'hci_cmd_sync_work'. Aqu\u00ed est\u00e1 el seguimiento de la llamada: dump_stack_lvl+0x49/0x63 print_report.cold+0x5e/0x5d3 ? hci_cmd_sync_work+0x282/0x320 kasan_report+0xaa/0x120 ? hci_cmd_sync_work+0x282/0x320 __asan_report_load8_noabort+0x14/0x20 hci_cmd_sync_work+0x282/0x320 process_one_work+0x77b/0x11c0 ? _raw_spin_lock_irq+0x8e/0xf0 worker_thread+0x544/0x1180 ? poll_idle+0x1e0/0x1e0 kthread+0x285/0x320 ? process_one_work+0x11c0/0x11c0 ? kthread_complete_and_exit+0x30/0x30 ret_from_fork+0x22/0x30 Allocated by task 266: kasan_save_stack+0x26/0x50 __kasan_kmalloc+0xae/0xe0 kmem_cache_alloc_trace+0x191/0x350 hci_cmd_sync_queue+0x97/0x2b0 hci_update_passive_scan+0x176/0x1d0 le_conn_complete_evt+0x1b5/0x1a00 hci_le_conn_complete_evt+0x234/0x340 hci_le_meta_evt+0x231/0x4e0 hci_event_packet+0x4c5/0xf00 hci_rx_work+0x37d/0x880 process_one_work+0x77b/0x11c0 worker_thread+0x544/0x1180 kthread+0x285/0x320 ret_from_fork+0x22/0x30 Freed by task 269: kasan_save_stack+0x26/0x50 kasan_set_track+0x25/0x40 kasan_set_free_info+0x24/0x40 ____kasan_slab_free+0x176/0x1c0 __kasan_slab_free+0x12/0x20 slab_free_freelist_hook+0x95/0x1a0 kfree+0xba/0x2f0 hci_cmd_sync_clear+0x14c/0x210 hci_unregister_dev+0xff/0x440 vhci_release+0x7b/0xf0 __fput+0x1f3/0x970 ____fput+0xe/0x20 task_work_run+0xd4/0x160 do_exit+0x8b0/0x22a0 do_group_exit+0xba/0x2a0 get_signal+0x1e4a/0x25b0 arch_do_signal_or_restart+0x93/0x1f80 exit_to_user_mode_prepare+0xf5/0x1a0 syscall_exit_to_user_mode+0x26/0x50 ret_from_fork+0x15/0x30 " "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Bluetooth: Corregir condici\u00f3n de ejecuci\u00f3n en hci_cmd_sync_clear Existe una posible condici\u00f3n de ejecuci\u00f3n en hci_cmd_sync_work y hci_cmd_sync_clear, y podr\u00eda provocar un use-after-free. Por ejemplo, hci_cmd_sync_work se a\u00f1ade a 'req_workqueue' despu\u00e9s de cancel_work_sync La entrada de 'cmd_sync_work_list' puede liberarse en hci_cmd_sync_clear y provocar un p\u00e1nico del kernel cuando se utiliza en 'hci_cmd_sync_work'. Aqu\u00ed est\u00e1 el seguimiento de la llamada: dump_stack_lvl+0x49/0x63 print_report.cold+0x5e/0x5d3 ? hci_cmd_sync_work+0x282/0x320 kasan_report+0xaa/0x120 ? hci_cmd_sync_work+0x282/0x320 __asan_report_load8_noabort+0x14/0x20 hci_cmd_sync_work+0x282/0x320 process_one_work+0x77b/0x11c0 ? _raw_spin_lock_irq+0x8e/0xf0 worker_thread+0x544/0x1180 ? poll_idle+0x1e0/0x1e0 kthread+0x285/0x320 ? process_one_work+0x11c0/0x11c0 ? kthread_complete_and_exit+0x30/0x30 ret_from_fork+0x22/0x30 Allocated by task 266: kasan_save_stack+0x26/0x50 __kasan_kmalloc+0xae/0xe0 kmem_cache_alloc_trace+0x191/0x350 hci_cmd_sync_queue+0x97/0x2b0 hci_update_passive_scan+0x176/0x1d0 le_conn_complete_evt+0x1b5/0x1a00 hci_le_conn_complete_evt+0x234/0x340 hci_le_meta_evt+0x231/0x4e0 hci_event_packet+0x4c5/0xf00 hci_rx_work+0x37d/0x880 process_one_work+0x77b/0x11c0 worker_thread+0x544/0x1180 kthread+0x285/0x320 ret_from_fork+0x22/0x30 Freed by task 269: kasan_save_stack+0x26/0x50 kasan_set_track+0x25/0x40 kasan_set_free_info+0x24/0x40 ____kasan_slab_free+0x176/0x1c0 __kasan_slab_free+0x12/0x20 slab_free_freelist_hook+0x95/0x1a0 kfree+0xba/0x2f0 hci_cmd_sync_clear+0x14c/0x210 hci_unregister_dev+0xff/0x440 vhci_release+0x7b/0xf0 __fput+0x1f3/0x970 ____fput+0xe/0x20 task_work_run+0xd4/0x160 do_exit+0x8b0/0x22a0 do_group_exit+0xba/0x2a0 get_signal+0x1e4a/0x25b0 arch_do_signal_or_restart+0x93/0x1f80 exit_to_user_mode_prepare+0xf5/0x1a0 syscall_exit_to_user_mode+0x26/0x50 ret_from_fork+0x15/0x30 "
} }
], ],
"metrics": {}, "metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.17",
"versionEndExcluding": "6.1.22",
"matchCriteriaId": "0DF0D81D-0F33-4E0B-9879-A9401CFC0490"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.2.9",
"matchCriteriaId": "914F22DD-1E6F-4B0A-A14D-3A9F068F6761"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
"matchCriteriaId": "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
"matchCriteriaId": "A47F0FC3-CE52-4BA1-BA51-22F783938431"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*",
"matchCriteriaId": "3583026A-27EC-4A4C-850A-83F2AF970673"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://git.kernel.org/stable/c/1c66bee492a5fe00ae3fe890bb693bfc99f994c6", "url": "https://git.kernel.org/stable/c/1c66bee492a5fe00ae3fe890bb693bfc99f994c6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/608901a77c945ac15dea23f6098c9882ef19d9f0", "url": "https://git.kernel.org/stable/c/608901a77c945ac15dea23f6098c9882ef19d9f0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/be586211a3ab40a4f4ca60450e0d31606afc55ec", "url": "https://git.kernel.org/stable/c/be586211a3ab40a4f4ca60450e0d31606afc55ec",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
} }
] ]
} }
+113 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-53047", "id": "CVE-2023-53047",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-05-02T16:15:23.790", "published": "2025-05-02T16:15:23.790",
"lastModified": "2025-05-05T20:54:45.973", "lastModified": "2025-11-12T16:46:56.800",
"vulnStatus": "Undergoing Analysis", "vulnStatus": "Analyzed",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
@@ -15,27 +15,132 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tee: amdtee: correcci\u00f3n de la condici\u00f3n de ejecuci\u00f3n en amdtee_open_session. Existe una posible condici\u00f3n de ejecuci\u00f3n en amdtee_open_session que podr\u00eda provocar un use-after-free. Por ejemplo, en amdtee_open_session(), despu\u00e9s de configurar sess->sess_mask y antes de configurar: sess->session_info[i] = session_info; si amdtee_close_session() cierra esta misma sesi\u00f3n, se liberar\u00e1 la estructura de datos 'sess', lo que provocar\u00e1 un p\u00e1nico del kernel al acceder a 'sess' dentro de amdtee_open_session(). La soluci\u00f3n es configurar el bit sess->sess_mask como \u00faltimo paso en amdtee_open_session()." "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tee: amdtee: correcci\u00f3n de la condici\u00f3n de ejecuci\u00f3n en amdtee_open_session. Existe una posible condici\u00f3n de ejecuci\u00f3n en amdtee_open_session que podr\u00eda provocar un use-after-free. Por ejemplo, en amdtee_open_session(), despu\u00e9s de configurar sess->sess_mask y antes de configurar: sess->session_info[i] = session_info; si amdtee_close_session() cierra esta misma sesi\u00f3n, se liberar\u00e1 la estructura de datos 'sess', lo que provocar\u00e1 un p\u00e1nico del kernel al acceder a 'sess' dentro de amdtee_open_session(). La soluci\u00f3n es configurar el bit sess->sess_mask como \u00faltimo paso en amdtee_open_session()."
} }
], ],
"metrics": {}, "metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.6",
"versionEndExcluding": "5.10.177",
"matchCriteriaId": "98341430-98CD-48EB-BD2E-D8C7105EDE74"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.105",
"matchCriteriaId": "0888AE70-CB0A-45C0-B9BD-A5371244C8DB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.22",
"matchCriteriaId": "642B6F99-95C6-47F5-A9B1-5C45FE08CAD0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.2.9",
"matchCriteriaId": "914F22DD-1E6F-4B0A-A14D-3A9F068F6761"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*",
"matchCriteriaId": "B8E3B0E8-FA27-4305-87BB-AF6C25B160CB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*",
"matchCriteriaId": "A47F0FC3-CE52-4BA1-BA51-22F783938431"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*",
"matchCriteriaId": "3583026A-27EC-4A4C-850A-83F2AF970673"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://git.kernel.org/stable/c/02b296978a2137d7128151c542e84dc96400bc00", "url": "https://git.kernel.org/stable/c/02b296978a2137d7128151c542e84dc96400bc00",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/a63cce9393e4e7dbc5af82dc87e68cb321cb1a78", "url": "https://git.kernel.org/stable/c/a63cce9393e4e7dbc5af82dc87e68cb321cb1a78",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/b3ef9e6fe09f1a132af28c623edcf4d4f39d9f35", "url": "https://git.kernel.org/stable/c/b3ef9e6fe09f1a132af28c623edcf4d4f39d9f35",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/f632a90f8e39db39b322107b9a8d438b826a7f4f", "url": "https://git.kernel.org/stable/c/f632a90f8e39db39b322107b9a8d438b826a7f4f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}, },
{ {
"url": "https://git.kernel.org/stable/c/f8502fba45bd30e1a6a354d9d898bc99d1a11e6d", "url": "https://git.kernel.org/stable/c/f8502fba45bd30e1a6a354d9d898bc99d1a11e6d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
} }
] ]
} }
+104 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-10905", "id": "CVE-2024-10905",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2024-12-02T15:15:10.240", "published": "2024-12-02T15:15:10.240",
"lastModified": "2024-12-06T18:15:22.207", "lastModified": "2025-11-12T15:49:07.857",
"vulnStatus": "Awaiting Analysis", "vulnStatus": "Analyzed",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
@@ -36,6 +36,26 @@
}, },
"exploitabilityScore": 3.9, "exploitabilityScore": 3.9,
"impactScore": 6.0 "impactScore": 6.0
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
} }
] ]
}, },
@@ -51,10 +71,91 @@
] ]
} }
], ],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sailpoint:identityiq:*:*:*:*:*:*:*:*",
"versionEndExcluding": "8.2",
"matchCriteriaId": "0A31EEA4-6703-4B64-AAD4-A9FCA993C156"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sailpoint:identityiq:8.2:-:*:*:*:*:*:*",
"matchCriteriaId": "224129BF-667F-4F6A-8E9A-15390F6FA3D5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sailpoint:identityiq:8.2:patch1:*:*:*:*:*:*",
"matchCriteriaId": "2A8C2668-C1F1-4A67-A2B3-99B5746C6A52"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sailpoint:identityiq:8.2:patch2:*:*:*:*:*:*",
"matchCriteriaId": "A9D91EB5-EC8E-4200-9245-13E37312343D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sailpoint:identityiq:8.2:patch4:*:*:*:*:*:*",
"matchCriteriaId": "63352C53-ADD8-49CD-B9E6-648183BDED68"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sailpoint:identityiq:8.2:patch5:*:*:*:*:*:*",
"matchCriteriaId": "DBDD484D-BF0D-4246-9701-0BF3DD2194E4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sailpoint:identityiq:8.2:patch7:*:*:*:*:*:*",
"matchCriteriaId": "6DC90C12-F7B6-4CF1-9B7D-A329E8BE79EC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sailpoint:identityiq:8.3:-:*:*:*:*:*:*",
"matchCriteriaId": "1173CC53-CBE5-450C-96BF-8583D1B3D185"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sailpoint:identityiq:8.3:patch1:*:*:*:*:*:*",
"matchCriteriaId": "2C0F5E55-5D33-425F-9DA7-49FE66CD84C4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sailpoint:identityiq:8.3:patch2:*:*:*:*:*:*",
"matchCriteriaId": "1A2FD228-E6DB-49E3-BE3E-1BF9B0434FC0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sailpoint:identityiq:8.3:patch4:*:*:*:*:*:*",
"matchCriteriaId": "0652D99D-DC1E-4E22-8E7D-AE080494C50B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sailpoint:identityiq:8.4:-:*:*:*:*:*:*",
"matchCriteriaId": "4BC4F08D-A3FB-41F6-8EFD-6F34FBC0F75F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sailpoint:identityiq:8.4:patch1:*:*:*:*:*:*",
"matchCriteriaId": "4ECFADA6-BB7B-4228-9434-B92B2FF21481"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://www.sailpoint.com/security-advisories/identityiq-improper-access-control-vulnerability-cve-2024-10905", "url": "https://www.sailpoint.com/security-advisories/identityiq-improper-access-control-vulnerability-cve-2024-10905",
"source": "[email protected]" "source": "[email protected]",
"tags": [
"Vendor Advisory"
]
} }
] ]
} }
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-12125", "id": "CVE-2024-12125",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T22:15:37.110", "published": "2025-11-06T22:15:37.110",
"lastModified": "2025-11-06T22:15:37.110", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-32008", "id": "CVE-2024-32008",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T21:15:35.110", "published": "2025-11-11T21:15:35.110",
"lastModified": "2025-11-11T21:15:35.110", "lastModified": "2025-11-12T16:19:12.850",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-32009", "id": "CVE-2024-32009",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T21:15:35.287", "published": "2025-11-11T21:15:35.287",
"lastModified": "2025-11-11T21:15:35.287", "lastModified": "2025-11-12T16:19:12.850",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-32010", "id": "CVE-2024-32010",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T21:15:35.450", "published": "2025-11-11T21:15:35.450",
"lastModified": "2025-11-11T21:15:35.450", "lastModified": "2025-11-12T16:19:12.850",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-32011", "id": "CVE-2024-32011",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T21:15:35.623", "published": "2025-11-11T21:15:35.623",
"lastModified": "2025-11-11T21:15:35.623", "lastModified": "2025-11-12T16:19:12.850",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-32014", "id": "CVE-2024-32014",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T21:15:35.797", "published": "2025-11-11T21:15:35.797",
"lastModified": "2025-11-11T21:15:35.797", "lastModified": "2025-11-12T16:19:12.850",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+25 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-42919", "id": "CVE-2024-42919",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2024-08-20T17:15:19.463", "published": "2024-08-20T17:15:19.463",
"lastModified": "2024-09-06T17:35:15.190", "lastModified": "2025-11-12T15:44:01.327",
"vulnStatus": "Undergoing Analysis", "vulnStatus": "Analyzed",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
@@ -51,10 +51,32 @@
] ]
} }
], ],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:escanav:escan_management_console:14.0.1400.2281:*:*:*:*:*:*:*",
"matchCriteriaId": "5C9D13C7-6948-4E3A-946C-B291CFBD4D70"
}
]
}
]
}
],
"references": [ "references": [
{ {
"url": "https://github.com/jeyabalaji711/CVE-2024-42919", "url": "https://github.com/jeyabalaji711/CVE-2024-42919",
"source": "[email protected]" "source": "[email protected]",
"tags": [
"Exploit",
"Mitigation",
"Third Party Advisory"
]
} }
] ]
} }
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-47118", "id": "CVE-2024-47118",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-07T19:15:45.413", "published": "2025-11-07T19:15:45.413",
"lastModified": "2025-11-07T19:15:45.413", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-57695", "id": "CVE-2024-57695",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T15:15:34.807", "published": "2025-11-11T15:15:34.807",
"lastModified": "2025-11-11T15:15:34.807", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10161", "id": "CVE-2025-10161",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T13:15:43.593", "published": "2025-11-11T13:15:43.593",
"lastModified": "2025-11-11T13:15:43.593", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10230", "id": "CVE-2025-10230",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-07T20:15:35.630", "published": "2025-11-07T20:15:35.630",
"lastModified": "2025-11-07T20:15:35.630", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10714", "id": "CVE-2025-10714",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T08:15:33.787", "published": "2025-11-11T08:15:33.787",
"lastModified": "2025-11-11T08:15:33.787", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10870", "id": "CVE-2025-10870",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-07T10:15:38.060", "published": "2025-11-07T10:15:38.060",
"lastModified": "2025-11-07T10:15:38.060", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10905", "id": "CVE-2025-10905",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T16:15:37.967", "published": "2025-11-11T16:15:37.967",
"lastModified": "2025-11-11T16:15:37.967", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10918", "id": "CVE-2025-10918",
"sourceIdentifier": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75", "sourceIdentifier": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
"published": "2025-11-11T16:15:38.113", "published": "2025-11-11T16:15:38.113",
"lastModified": "2025-11-11T16:15:38.113", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10966", "id": "CVE-2025-10966",
"sourceIdentifier": "2499f714-1537-4658-8207-48ae4bb9eae9", "sourceIdentifier": "2499f714-1537-4658-8207-48ae4bb9eae9",
"published": "2025-11-07T08:15:39.617", "published": "2025-11-07T08:15:39.617",
"lastModified": "2025-11-10T21:15:35.357", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10968", "id": "CVE-2025-10968",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-07T13:15:38.397", "published": "2025-11-07T13:15:38.397",
"lastModified": "2025-11-07T13:15:38.397", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11084", "id": "CVE-2025-11084",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T14:15:34.310", "published": "2025-11-11T14:15:34.310",
"lastModified": "2025-11-11T14:15:34.310", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11085", "id": "CVE-2025-11085",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T14:15:34.497", "published": "2025-11-11T14:15:34.497",
"lastModified": "2025-11-11T14:15:34.497", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11129", "id": "CVE-2025-11129",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:40.873", "published": "2025-11-11T04:15:40.873",
"lastModified": "2025-11-11T04:15:40.873", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11168", "id": "CVE-2025-11168",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:41.100", "published": "2025-11-11T04:15:41.100",
"lastModified": "2025-11-11T04:15:41.100", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11170", "id": "CVE-2025-11170",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:41.273", "published": "2025-11-11T04:15:41.273",
"lastModified": "2025-11-11T04:15:41.273", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11205", "id": "CVE-2025-11205",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T22:15:38.327", "published": "2025-11-06T22:15:38.327",
"lastModified": "2025-11-07T14:15:45.767", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11206", "id": "CVE-2025-11206",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T22:15:38.477", "published": "2025-11-06T22:15:38.477",
"lastModified": "2025-11-07T14:15:46.627", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11207", "id": "CVE-2025-11207",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T22:15:38.607", "published": "2025-11-06T22:15:38.607",
"lastModified": "2025-11-06T22:15:38.607", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11208", "id": "CVE-2025-11208",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T22:15:38.740", "published": "2025-11-06T22:15:38.740",
"lastModified": "2025-11-07T14:15:46.843", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11209", "id": "CVE-2025-11209",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T22:15:38.850", "published": "2025-11-06T22:15:38.850",
"lastModified": "2025-11-06T22:15:38.850", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11210", "id": "CVE-2025-11210",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T22:15:38.947", "published": "2025-11-06T22:15:38.947",
"lastModified": "2025-11-07T14:15:47.060", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11211", "id": "CVE-2025-11211",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T22:15:39.083", "published": "2025-11-06T22:15:39.083",
"lastModified": "2025-11-06T22:15:39.083", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11212", "id": "CVE-2025-11212",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T22:15:39.210", "published": "2025-11-06T22:15:39.210",
"lastModified": "2025-11-07T15:15:37.940", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11213", "id": "CVE-2025-11213",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T22:15:39.317", "published": "2025-11-06T22:15:39.317",
"lastModified": "2025-11-07T15:15:39.213", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11215", "id": "CVE-2025-11215",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T22:15:39.420", "published": "2025-11-06T22:15:39.420",
"lastModified": "2025-11-07T15:15:39.410", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11216", "id": "CVE-2025-11216",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T22:15:39.557", "published": "2025-11-06T22:15:39.557",
"lastModified": "2025-11-07T14:15:47.317", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11219", "id": "CVE-2025-11219",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T22:15:39.657", "published": "2025-11-06T22:15:39.657",
"lastModified": "2025-11-07T14:15:47.543", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11237", "id": "CVE-2025-11237",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T06:15:34.690", "published": "2025-11-11T06:15:34.690",
"lastModified": "2025-11-11T06:15:34.690", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11307", "id": "CVE-2025-11307",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T06:15:34.890", "published": "2025-11-11T06:15:34.890",
"lastModified": "2025-11-11T06:15:34.890", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
@@ -0,0 +1,78 @@
{
"id": "CVE-2025-11366",
"sourceIdentifier": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b",
"published": "2025-11-12T16:15:35.197",
"lastModified": "2025-11-12T16:19:12.850",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "N-central < 2025.4 is vulnerable to authentication bypass via path traversal"
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"references": [
{
"url": "https://me.n-able.com/s/security-advisory/aArVy0000000rcDKAQ/cve202511366-ncentral-authentication-bypass-via-path-traversal",
"source": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b"
}
]
}
@@ -0,0 +1,78 @@
{
"id": "CVE-2025-11367",
"sourceIdentifier": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b",
"published": "2025-11-12T16:15:35.353",
"lastModified": "2025-11-12T16:19:12.850",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization"
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-502"
}
]
}
],
"references": [
{
"url": "https://me.n-able.com/s/security-advisory/aArVy0000000rfRKAQ/cve202511367-ncentral-windows-software-probe-remote-code-execution",
"source": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b"
}
]
}
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11448", "id": "CVE-2025-11448",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-08T10:15:40.377", "published": "2025-11-08T10:15:40.377",
"lastModified": "2025-11-08T10:15:40.377", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11451", "id": "CVE-2025-11451",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:41.433", "published": "2025-11-11T04:15:41.433",
"lastModified": "2025-11-11T04:15:41.433", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11452", "id": "CVE-2025-11452",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-08T03:15:36.117", "published": "2025-11-08T03:15:36.117",
"lastModified": "2025-11-08T03:15:36.117", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11454", "id": "CVE-2025-11454",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-12T11:15:38.463", "published": "2025-11-12T11:15:38.463",
"lastModified": "2025-11-12T11:15:38.463", "lastModified": "2025-11-12T16:19:12.850",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11457", "id": "CVE-2025-11457",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:41.627", "published": "2025-11-11T04:15:41.627",
"lastModified": "2025-11-11T04:15:41.627", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11458", "id": "CVE-2025-11458",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T23:15:35.200", "published": "2025-11-06T23:15:35.200",
"lastModified": "2025-11-07T14:15:47.777", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11460", "id": "CVE-2025-11460",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T23:15:35.347", "published": "2025-11-06T23:15:35.347",
"lastModified": "2025-11-06T23:15:35.347", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11521", "id": "CVE-2025-11521",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:41.797", "published": "2025-11-11T04:15:41.797",
"lastModified": "2025-11-11T04:15:41.797", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11532", "id": "CVE-2025-11532",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:41.953", "published": "2025-11-11T04:15:41.953",
"lastModified": "2025-11-11T04:15:41.953", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11546", "id": "CVE-2025-11546",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-07T02:15:34.180", "published": "2025-11-07T02:15:34.180",
"lastModified": "2025-11-07T04:15:46.500", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11560", "id": "CVE-2025-11560",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-12T06:15:33.553", "published": "2025-11-12T06:15:33.553",
"lastModified": "2025-11-12T06:15:33.553", "lastModified": "2025-11-12T16:19:12.850",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11565", "id": "CVE-2025-11565",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-12T14:15:45.467", "published": "2025-11-12T14:15:45.467",
"lastModified": "2025-11-12T14:15:45.467", "lastModified": "2025-11-12T16:19:12.850",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11566", "id": "CVE-2025-11566",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-12T14:15:46.567", "published": "2025-11-12T14:15:46.567",
"lastModified": "2025-11-12T14:15:46.567", "lastModified": "2025-11-12T16:19:12.850",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11567", "id": "CVE-2025-11567",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-12T14:15:46.733", "published": "2025-11-12T14:15:46.733",
"lastModified": "2025-11-12T14:15:46.733", "lastModified": "2025-11-12T16:19:12.850",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11578", "id": "CVE-2025-11578",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-10T23:15:41.193", "published": "2025-11-10T23:15:41.193",
"lastModified": "2025-11-10T23:15:41.193", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11696", "id": "CVE-2025-11696",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T14:15:34.640", "published": "2025-11-11T14:15:34.640",
"lastModified": "2025-11-11T14:15:34.640", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11697", "id": "CVE-2025-11697",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T14:15:34.787", "published": "2025-11-11T14:15:34.787",
"lastModified": "2025-11-11T14:15:34.787", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
@@ -0,0 +1,78 @@
{
"id": "CVE-2025-11700",
"sourceIdentifier": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b",
"published": "2025-11-12T16:15:35.487",
"lastModified": "2025-11-12T16:19:12.850",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "N-central versions < 2025.4 are vulnerable to an XML External Entities injection leading to information disclosure"
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "LOW",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-611"
}
]
}
],
"references": [
{
"url": "https://me.n-able.com/s/security-advisory/aArVy0000000rabKAA/cve202511700-ncentral-importservicefromfile-xxe-injection",
"source": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b"
}
]
}
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11748", "id": "CVE-2025-11748",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-08T04:15:43.383", "published": "2025-11-08T04:15:43.383",
"lastModified": "2025-11-11T15:15:35.427", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11756", "id": "CVE-2025-11756",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-06T23:15:35.470", "published": "2025-11-06T23:15:35.470",
"lastModified": "2025-11-07T14:15:48.060", "lastModified": "2025-11-12T16:20:22.257",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11805", "id": "CVE-2025-11805",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:42.110", "published": "2025-11-11T04:15:42.110",
"lastModified": "2025-11-11T04:15:42.110", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11821", "id": "CVE-2025-11821",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:42.280", "published": "2025-11-11T04:15:42.280",
"lastModified": "2025-11-11T04:15:42.280", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11822", "id": "CVE-2025-11822",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:42.440", "published": "2025-11-11T04:15:42.440",
"lastModified": "2025-11-11T04:15:42.440", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11828", "id": "CVE-2025-11828",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:42.603", "published": "2025-11-11T04:15:42.603",
"lastModified": "2025-11-11T04:15:42.603", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11829", "id": "CVE-2025-11829",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:42.770", "published": "2025-11-11T04:15:42.770",
"lastModified": "2025-11-11T04:15:42.770", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11855", "id": "CVE-2025-11855",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T06:15:35.000", "published": "2025-11-11T06:15:35.000",
"lastModified": "2025-11-11T06:15:35.000", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11856", "id": "CVE-2025-11856",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:42.937", "published": "2025-11-11T04:15:42.937",
"lastModified": "2025-11-11T04:15:42.937", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11859", "id": "CVE-2025-11859",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:43.103", "published": "2025-11-11T04:15:43.103",
"lastModified": "2025-11-11T04:15:43.103", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11860", "id": "CVE-2025-11860",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:43.270", "published": "2025-11-11T04:15:43.270",
"lastModified": "2025-11-11T04:15:43.270", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11862", "id": "CVE-2025-11862",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T14:15:34.933", "published": "2025-11-11T14:15:34.933",
"lastModified": "2025-11-11T14:15:34.933", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11863", "id": "CVE-2025-11863",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:43.433", "published": "2025-11-11T04:15:43.433",
"lastModified": "2025-11-11T04:15:43.433", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11869", "id": "CVE-2025-11869",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:43.600", "published": "2025-11-11T04:15:43.600",
"lastModified": "2025-11-11T04:15:43.600", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11873", "id": "CVE-2025-11873",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:43.767", "published": "2025-11-11T04:15:43.767",
"lastModified": "2025-11-11T04:15:43.767", "lastModified": "2025-11-12T16:19:59.103",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11874", "id": "CVE-2025-11874",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:43.927", "published": "2025-11-11T04:15:43.927",
"lastModified": "2025-11-11T04:15:43.927", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11882", "id": "CVE-2025-11882",
"sourceIdentifier": "[email protected]", "sourceIdentifier": "[email protected]",
"published": "2025-11-11T04:15:44.100", "published": "2025-11-11T04:15:44.100",
"lastModified": "2025-11-11T04:15:44.100", "lastModified": "2025-11-12T16:19:34.210",
"vulnStatus": "Received", "vulnStatus": "Awaiting Analysis",
"cveTags": [], "cveTags": [],
"descriptions": [ "descriptions": [
{ {
Loaded 100 of 827 files, more files were not shown because too many files have changed in this diff. Show more