diff --git a/CVE-2021/CVE-2021-475xx/CVE-2021-47532.json b/CVE-2021/CVE-2021-475xx/CVE-2021-47532.json
index 3f41533fe37..3a4b29da0a7 100644
--- a/CVE-2021/CVE-2021-475xx/CVE-2021-47532.json
+++ b/CVE-2021/CVE-2021-475xx/CVE-2021-47532.json
@@ -2,8 +2,8 @@
"id": "CVE-2021-47532",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-24T15:15:16.567",
- "lastModified": "2024-11-21T06:36:28.290",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:57:15.960",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,104 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/msm/devfreq: corrige la fuga de referencia de OPP"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-401"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.15",
+ "versionEndExcluding": "5.15.7",
+ "matchCriteriaId": "E524C2AB-B061-43A9-8F32-C09C86BC2479"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "357AA433-37E8-4323-BFB2-3038D6E4B414"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "A73429BA-C2D9-4D0C-A75F-06A1CA8B3983"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "F621B5E3-E99D-49E7-90B9-EC3B77C95383"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/59ba1b2b4825342676300f66d785764be3fcb093",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a4eb55901df1dce8c6944438bbdf57caf08911e2",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/59ba1b2b4825342676300f66d785764be3fcb093",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a4eb55901df1dce8c6944438bbdf57caf08911e2",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-475xx/CVE-2021-47533.json b/CVE-2021/CVE-2021-475xx/CVE-2021-47533.json
index d3a68eb24f6..9b8b21d99e1 100644
--- a/CVE-2021/CVE-2021-475xx/CVE-2021-47533.json
+++ b/CVE-2021/CVE-2021-475xx/CVE-2021-47533.json
@@ -2,8 +2,8 @@
"id": "CVE-2021-47533",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-24T15:15:16.773",
- "lastModified": "2024-11-21T06:36:28.440",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:56:31.893",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,104 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/vc4: kms: borre el puntero de commit FIFO de HVS una vez realizado. El commit 9ec03d7f1ed3 (\"drm/vc4: kms: espere a los usuarios FIFO anteriores antes de una confirmaci\u00f3n\") introdujo una espera en el commit anterior realizada en un HVS FIFO determinado. Sin embargo, nunca borramos ese puntero una vez hecho. Dado que drm_crtc_commit_put puede liberar la estructura drm_crtc_commit directamente si fu\u00e9ramos el \u00faltimo usuario, esto significa que puede llevar a un use-after free si duplic\u00e1ramos el estado, y ese puntero obsoleto incluso se copiar\u00eda al nuevo estado. Establezca el puntero en NULL una vez que hayamos terminado con la espera para que no transfiramos un puntero a una estructura liberada."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-416"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.12",
+ "versionEndExcluding": "5.15.7",
+ "matchCriteriaId": "6FE5F0C4-AE43-4DD0-ADAB-1090889867A3"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "357AA433-37E8-4323-BFB2-3038D6E4B414"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "A73429BA-C2D9-4D0C-A75F-06A1CA8B3983"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "F621B5E3-E99D-49E7-90B9-EC3B77C95383"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/2931db9a5ed219546cf2ae0546698faf78281b89",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/d134c5ff71c7f2320fc7997f2fbbdedf0c76889a",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2931db9a5ed219546cf2ae0546698faf78281b89",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/d134c5ff71c7f2320fc7997f2fbbdedf0c76889a",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-475xx/CVE-2021-47536.json b/CVE-2021/CVE-2021-475xx/CVE-2021-47536.json
index 8bb0d6fc85a..0bb4a397138 100644
--- a/CVE-2021/CVE-2021-475xx/CVE-2021-47536.json
+++ b/CVE-2021/CVE-2021-475xx/CVE-2021-47536.json
@@ -2,8 +2,8 @@
"id": "CVE-2021-47536",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-24T15:15:17.317",
- "lastModified": "2024-11-21T06:36:29.030",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:56:00.647",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,125 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: net/smc: corrige list_del incorrecto en smc_lgr_cleanup_early smc_lgr_cleanup_early() pretend\u00eda eliminar el grupo de enlaces de la lista de grupos de enlaces, pero elimin\u00f3 el encabezado de la lista por error. Esto puede causar da\u00f1os en la memoria ya que no eliminamos el grupo de enlaces real de la lista y luego integramos la estructura del grupo de enlaces. Recibimos un p\u00e1nico de corrupci\u00f3n de lista al realizar la prueba: [ 231.277259] list_del corruption. prev->next should be ffff8881398a8000, but was 0000000000000000 [ 231.278222] ------------[ cut here ]------------ [ 231.278726] kernel BUG at lib/list_debug.c:53! [ 231.279326] invalid opcode: 0000 [#1] SMP NOPTI [ 231.279803] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.10.46+ #435 [ 231.280466] Hardware name: Alibaba Cloud ECS, BIOS 8c24b4c 04/01/2014 [ 231.281248] Workqueue: events smc_link_down_work [ 231.281732] RIP: 0010:__list_del_entry_valid+0x70/0x90 [ 231.282258] Code: 4c 60 82 e8 7d cc 6a 00 0f 0b 48 89 fe 48 c7 c7 88 4c 60 82 e8 6c cc 6a 00 0f 0b 48 89 fe 48 c7 c7 c0 4c 60 82 e8 5b cc 6a 00 <0f> 0b 48 89 fe 48 c7 c7 00 4d 60 82 e8 4a cc 6a 00 0f 0b cc cc cc [ 231.284146] RSP: 0018:ffffc90000033d58 EFLAGS: 00010292 [ 231.284685] RAX: 0000000000000054 RBX: ffff8881398a8000 RCX: 0000000000000000 [ 231.285415] RDX: 0000000000000001 RSI: ffff88813bc18040 RDI: ffff88813bc18040 [ 231.286141] RBP: ffffffff8305ad40 R08: 0000000000000003 R09: 0000000000000001 [ 231.286873] R10: ffffffff82803da0 R11: ffffc90000033b90 R12: 0000000000000001 [ 231.287606] R13: 0000000000000000 R14: ffff8881398a8000 R15: 0000000000000003 [ 231.288337] FS: 0000000000000000(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 231.289160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.289754] CR2: 0000000000e72058 CR3: 000000010fa96006 CR4: 00000000003706f0 [ 231.290485] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 231.291211] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 231.291940] Call Trace: [ 231.292211] smc_lgr_terminate_sched+0x53/0xa0 [ 231.292677] smc_switch_conns+0x75/0x6b0 [ 231.293085] ? update_load_avg+0x1a6/0x590 [ 231.293517] ? ttwu_do_wakeup+0x17/0x150 [ 231.293907] ? update_load_avg+0x1a6/0x590 [ 231.294317] ? newidle_balance+0xca/0x3d0 [ 231.294716] smcr_link_down+0x50/0x1a0 [ 231.295090] ? __wake_up_common_lock+0x77/0x90 [ 231.295534] smc_link_down_work+0x46/0x60 [ 231.295933] process_one_work+0x18b/0x350 "
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-787"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.5",
+ "versionEndExcluding": "5.10.84",
+ "matchCriteriaId": "AE5B4333-2C46-40C3-8B42-0168AD91DDE1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.11",
+ "versionEndExcluding": "5.15.7",
+ "matchCriteriaId": "A696A60B-2782-4119-83DD-1EFFBC903F02"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "357AA433-37E8-4323-BFB2-3038D6E4B414"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "A73429BA-C2D9-4D0C-A75F-06A1CA8B3983"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "F621B5E3-E99D-49E7-90B9-EC3B77C95383"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/77731fede297a23d26f2d169b4269466b2c82529",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/789b6cc2a5f9123b9c549b886fdc47c865cfe0ba",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/95518fe354d712dca6f431cf2a11b8f63bc9a66c",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/77731fede297a23d26f2d169b4269466b2c82529",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/789b6cc2a5f9123b9c549b886fdc47c865cfe0ba",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/95518fe354d712dca6f431cf2a11b8f63bc9a66c",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-475xx/CVE-2021-47538.json b/CVE-2021/CVE-2021-475xx/CVE-2021-47538.json
index 59f51e3d148..c4ef678bdeb 100644
--- a/CVE-2021/CVE-2021-475xx/CVE-2021-47538.json
+++ b/CVE-2021/CVE-2021-475xx/CVE-2021-47538.json
@@ -2,8 +2,8 @@
"id": "CVE-2021-47538",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-24T15:15:17.750",
- "lastModified": "2024-11-21T06:36:29.413",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:55:34.137",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,47 +15,204 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: rxrpc: corrigi\u00f3 la fuga de rxrpc_local en rxrpc_lookup_peer() Es necesario llamar a rxrpc_put_local() para el candidato par antes de kfree(), ya que contiene una referencia a rxrpc_local. [DH: v2: modificado para abstraer el c\u00f3digo de liberaci\u00f3n del par en una funci\u00f3n]"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-401"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "4.19.82",
+ "versionEndExcluding": "4.19.220",
+ "matchCriteriaId": "0B842566-205B-4AAE-9D95-67A8FD4CE9A2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.3.9",
+ "versionEndExcluding": "5.4",
+ "matchCriteriaId": "FB0DDBC6-6070-4A55-A6BA-776FA7AA9757"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.4.1",
+ "versionEndExcluding": "5.4.164",
+ "matchCriteriaId": "287BF9FA-2F41-4557-9449-EB290A0B40F8"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.5",
+ "versionEndExcluding": "5.10.84",
+ "matchCriteriaId": "AE5B4333-2C46-40C3-8B42-0168AD91DDE1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.11",
+ "versionEndExcluding": "5.15.7",
+ "matchCriteriaId": "A696A60B-2782-4119-83DD-1EFFBC903F02"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:-:*:*:*:*:*:*",
+ "matchCriteriaId": "4D70AB13-37BE-4BD3-A652-10191F1642E4"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "81C1EF68-9FF9-416E-AFED-59088978150A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "F0E28D41-AC78-413B-AA08-FB73CAFFC58C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "EEDE6F28-7530-476B-A838-83E5B2D2A2DD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:rc7:*:*:*:*:*:*",
+ "matchCriteriaId": "7BB18ED4-6619-467C-870F-7671261DBEF2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:rc8:*:*:*:*:*:*",
+ "matchCriteriaId": "D980DAA0-07F8-4C47-B178-0BDDDA234A06"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "357AA433-37E8-4323-BFB2-3038D6E4B414"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "A73429BA-C2D9-4D0C-A75F-06A1CA8B3983"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "F621B5E3-E99D-49E7-90B9-EC3B77C95383"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/3e70e3a72d80b16094faccbe438cd53761c3503a",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/60f0b9c42cb80833a03ca57c1c8b078d716e71d1",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/913c24af2d13a3fd304462916ee98e298d56bdce",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9469273e616ca8f1b6e3773c5019f21b4c8d828c",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/beacff50edbd6c9659a6f15fc7f6126909fade29",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/3e70e3a72d80b16094faccbe438cd53761c3503a",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/60f0b9c42cb80833a03ca57c1c8b078d716e71d1",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/913c24af2d13a3fd304462916ee98e298d56bdce",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9469273e616ca8f1b6e3773c5019f21b4c8d828c",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/beacff50edbd6c9659a6f15fc7f6126909fade29",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-475xx/CVE-2021-47539.json b/CVE-2021/CVE-2021-475xx/CVE-2021-47539.json
index a49c034c8ac..f79b1768c1d 100644
--- a/CVE-2021/CVE-2021-475xx/CVE-2021-47539.json
+++ b/CVE-2021/CVE-2021-475xx/CVE-2021-47539.json
@@ -2,8 +2,8 @@
"id": "CVE-2021-47539",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-24T15:15:17.963",
- "lastModified": "2024-11-21T06:36:29.597",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:55:24.377",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,125 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: rxrpc: corrige la fuga de rxrpc_peer en rxrpc_look_up_bundle() Es necesario llamar a rxrpc_put_peer() para el paquete candidato antes de kfree(), ya que contiene una referencia a rxrpc_peer. [DH: v2: modificado para abstraer el c\u00f3digo de liberaci\u00f3n del paquete en una funci\u00f3n]"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-401"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.10",
+ "versionEndExcluding": "5.10.84",
+ "matchCriteriaId": "42F0E2E0-B885-42B0-A1F3-355E53A937B2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.11",
+ "versionEndExcluding": "5.15.7",
+ "matchCriteriaId": "A696A60B-2782-4119-83DD-1EFFBC903F02"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "357AA433-37E8-4323-BFB2-3038D6E4B414"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "A73429BA-C2D9-4D0C-A75F-06A1CA8B3983"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "F621B5E3-E99D-49E7-90B9-EC3B77C95383"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/35b40f724c4ef0f683d94dab3af9ab38261d782b",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/bc97458620e38961af9505cc060ad4cf5c9e4af7",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ca77fba821351190777b236ce749d7c4d353102e",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/35b40f724c4ef0f683d94dab3af9ab38261d782b",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/bc97458620e38961af9505cc060ad4cf5c9e4af7",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ca77fba821351190777b236ce749d7c4d353102e",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-475xx/CVE-2021-47553.json b/CVE-2021/CVE-2021-475xx/CVE-2021-47553.json
index d3cdfdfa90b..e8d0caa5e65 100644
--- a/CVE-2021/CVE-2021-475xx/CVE-2021-47553.json
+++ b/CVE-2021/CVE-2021-475xx/CVE-2021-47553.json
@@ -2,8 +2,8 @@
"id": "CVE-2021-47553",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-24T15:15:20.080",
- "lastModified": "2024-11-21T06:36:32.240",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:11:36.080",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,127 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: sched/scs: restablecer el estado de la pila de tareas en Bringup_cpu() Para desconectar en caliente una CPU, la tarea inactiva en esa CPU llama a algunas capas de c\u00f3digo C antes de abandonar finalmente el kernel. Cuando KASAN est\u00e1 en uso, se deja una sombra envenenada para cada uno de los marcos de pila activos y cuando las pilas de llamadas de sombra est\u00e1n en uso. Cuando se utilizan pilas de llamadas ocultas (SCS), el SCS SP guardado de la tarea se deja apuntando a un punto arbitrario dentro de la pila de llamadas ocultas de la tarea. Cuando una CPU est\u00e1 desconectada y luego conectada nuevamente al kernel, este estado obsoleto puede afectar negativamente la ejecuci\u00f3n. La sombra de KASAN obsoleta puede generar alias en nuevos marcos de pila y generar advertencias de KASAN falsas. Un SCS SP obsoleto es efectivamente una p\u00e9rdida de memoria e impide que se utilice una parte de la pila de llamadas ocultas. Despu\u00e9s de varios ciclos de conexi\u00f3n en caliente, toda la pila de llamadas ocultas de la tarea inactiva puede quedar inutilizable. Anteriormente solucionamos el problema de KASAN en el commit: e1b77c92981a5222 (\"sched/kasan: eliminar el veneno de KASAN obsoleto despu\u00e9s de la conexi\u00f3n en caliente\")... eliminando cualquier veneno de pila de KASAN obsoleto inmediatamente antes de conectar una CPU. Posteriormente, en El commit: f1a0a376ca0c4ef1 (\"sched/core: Inicialice la tarea inactiva con la preferencia deshabilitada\")... la refactorizaci\u00f3n dej\u00f3 la limpieza de KASAN y SCS en un c\u00f3digo de inicializaci\u00f3n de subproceso inactivo de una sola vez en lugar de algo invocado antes de que cada CPU se conectara. rompiendo ambos como arriba. Arreglamos SCS (pero no KASAN) en El commit: 63acd42c0d4942f7 (\"sched/scs: restablecer la pila de sombra cuando idle_task_exit\")... pero como esto se ejecuta en el contexto de la tarea inactiva que est\u00e1 fuera de l\u00ednea, es potencialmente fr\u00e1gil. Para solucionar estos problemas de manera consistente y m\u00e1s s\u00f3lida, restablezca la sombra SCS SP y KASAN de la tarea inactiva de una CPU inmediatamente antes de conectar esa CPU en Bringup_cpu(). Esto garantiza que la tarea inactiva siempre tenga un estado consistente cuando se est\u00e1 ejecutando y elimina la necesidad de tenerlo al salir de una tarea inactiva. Siempre que se crea un subproceso, dup_task_struct() le dar\u00e1 a la tarea una pila que est\u00e1 libre de sombra KASAN e inicializar\u00e1 el SP SCS de la tarea, por lo que no hay necesidad de inicializar especialmente ninguno de los subprocesos inactivos dentro de init_idle(), ya que esto solo era necesario para manejar ciclos de conexi\u00f3n en caliente. Prob\u00e9 esto en arm64 con: * gcc 11.1.0, defconfig +KASAN_INLINE, KASAN_STACK * clang 12.0.0, defconfig +KASAN_INLINE, KASAN_STACK, SHADOW_CALL_STACK ... offlining and onlining CPUS with: | while true; do | for C in /sys/devices/system/cpu/cpu*/online; do | echo 0 > $C; | echo 1 > $C; | done | done "
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-908"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.10.50",
+ "versionEndExcluding": "5.10.83",
+ "matchCriteriaId": "80A098F8-A482-4F67-A2A7-D58B59F7CEAD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.12.17",
+ "versionEndExcluding": "5.13",
+ "matchCriteriaId": "CDB1D52E-21AB-4ECE-9119-6594F8FF3B3A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.13.2",
+ "versionEndExcluding": "5.15.6",
+ "matchCriteriaId": "D0C9520F-8A76-4ED6-8B0F-1798337CEA67"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "357AA433-37E8-4323-BFB2-3038D6E4B414"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "A73429BA-C2D9-4D0C-A75F-06A1CA8B3983"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/229c555260cb9c1ccdab861e16f0410f1718f302",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/dce1ca0525bfdc8a69a9343bc714fbc19a2f04b3",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/e6ee7abd6bfe559ad9989004b34c320fd638c526",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/229c555260cb9c1ccdab861e16f0410f1718f302",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/dce1ca0525bfdc8a69a9343bc714fbc19a2f04b3",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/e6ee7abd6bfe559ad9989004b34c320fd638c526",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-475xx/CVE-2021-47555.json b/CVE-2021/CVE-2021-475xx/CVE-2021-47555.json
index 4f7b0dea2d1..e4e40e6184c 100644
--- a/CVE-2021/CVE-2021-475xx/CVE-2021-47555.json
+++ b/CVE-2021/CVE-2021-475xx/CVE-2021-47555.json
@@ -2,8 +2,8 @@
"id": "CVE-2021-47555",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-24T15:15:20.237",
- "lastModified": "2024-11-21T06:36:32.577",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:28:53.540",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -17,6 +17,26 @@
],
"metrics": {
"cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ },
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
@@ -39,38 +59,124 @@
}
]
},
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-191"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.4.160",
+ "versionEndExcluding": "5.4.163",
+ "matchCriteriaId": "B23C9FD1-DA5D-41F5-8095-61EE3995E071"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.10.80",
+ "versionEndExcluding": "5.10.83",
+ "matchCriteriaId": "796E83A2-5253-4668-8475-92A87F819C3E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.14.19",
+ "versionEndExcluding": "5.15",
+ "matchCriteriaId": "CC24A46F-AAF0-46A3-9255-D235078D50BC"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.15.3",
+ "versionEndExcluding": "5.15.6",
+ "matchCriteriaId": "2DC4F41E-7E5C-409A-9B7B-E32D1F806715"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "357AA433-37E8-4323-BFB2-3038D6E4B414"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "A73429BA-C2D9-4D0C-A75F-06A1CA8B3983"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/01d9cc2dea3fde3bad6d27f464eff463496e2b00",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/5e44178864b38dd70b877985abd7d86fdb95f27d",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/6e800ee43218a56acc93676bbb3d93b74779e555",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f7fc72a508cf115c273a7a29350069def1041890",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/01d9cc2dea3fde3bad6d27f464eff463496e2b00",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/5e44178864b38dd70b877985abd7d86fdb95f27d",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/6e800ee43218a56acc93676bbb3d93b74779e555",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f7fc72a508cf115c273a7a29350069def1041890",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-475xx/CVE-2021-47558.json b/CVE-2021/CVE-2021-475xx/CVE-2021-47558.json
index a273959055b..6a6e6b1431a 100644
--- a/CVE-2021/CVE-2021-475xx/CVE-2021-47558.json
+++ b/CVE-2021/CVE-2021-475xx/CVE-2021-47558.json
@@ -2,8 +2,8 @@
"id": "CVE-2021-47558",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-24T15:15:20.467",
- "lastModified": "2024-11-21T06:36:33.157",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:37:52.970",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,99 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: net: stmmac: Deshabilitar las colas de Tx al reconfigurar la interfaz Las colas de Tx no se deshabilitaron en situaciones en las que el controlador necesitaba detener la interfaz para aplicar una nueva configuraci\u00f3n. Esto podr\u00eda provocar un p\u00e1nico en el kernel al realizar cualquiera de las 3 acciones siguientes: * reconfigurar el n\u00famero de colas (ethtool -L) * reconfigurar el tama\u00f1o de los b\u00faferes circulares (ethtool -G) * instalar/eliminar un programa XDP (ip l set dev ethX xdp) Evite el p\u00e1nico asegur\u00e1ndose de que se llame a netif_tx_disable al detener una interfaz. Sin este parche, se puede observar el siguiente p\u00e1nico del kernel al realizar cualquiera de las acciones anteriores: No se puede manejar la solicitud de paginaci\u00f3n del kernel en la direcci\u00f3n virtual ffff80001238d040 [....] Seguimiento de llamadas: dwmac4_set_addr+0x8/0x10 dev_hard_start_xmit+0xe4/0x1ac sch_direct_xmit+ 0xe8/0x39c __dev_queue_xmit+0x3ec/0xaf0 dev_queue_xmit+0x14/0x20 [...] [fin de seguimiento 0000000000000002]---"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.10",
+ "versionEndExcluding": "5.15.6",
+ "matchCriteriaId": "393871B9-F66E-47B3-BF15-59E6B2AE6313"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "357AA433-37E8-4323-BFB2-3038D6E4B414"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "A73429BA-C2D9-4D0C-A75F-06A1CA8B3983"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/a92f0eebb8dc008b9e8c51c6f7b8c93b27a29a43",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b270bfe697367776eca2e6759a71d700fb8d82a2",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a92f0eebb8dc008b9e8c51c6f7b8c93b27a29a43",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b270bfe697367776eca2e6759a71d700fb8d82a2",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-475xx/CVE-2021-47561.json b/CVE-2021/CVE-2021-475xx/CVE-2021-47561.json
index 2aa06572eba..41c2eab60bd 100644
--- a/CVE-2021/CVE-2021-475xx/CVE-2021-47561.json
+++ b/CVE-2021/CVE-2021-475xx/CVE-2021-47561.json
@@ -2,8 +2,8 @@
"id": "CVE-2021-47561",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-24T15:15:20.690",
- "lastModified": "2024-11-21T06:36:33.640",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:39:12.430",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,99 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: i2c: virtio: deshabilita el manejo del tiempo de espera Si se alcanza un tiempo de espera, puede resultar en datos incorrectos en el bus I2C y/o da\u00f1os en la memoria del invitado, ya que el dispositivo a\u00fan puede estar funcionando. en los buffers que se le dieron mientras el hu\u00e9sped los liber\u00f3. Aqu\u00ed est\u00e1, por ejemplo, el inicio de un splat slub_debug que se activ\u00f3 en la siguiente transferencia despu\u00e9s de que se oblig\u00f3 a que una transferencia expirara estableciendo un punto de interrupci\u00f3n en el backend (rust-vmm/vhost-device): ERROR kmalloc-1k (No contaminado ): Veneno sobrescrito Primer byte 0x1 en lugar de 0x6b Asignado en virtio_i2c_xfer+0x65/0x35c age=350 cpu=0 pid=29 __kmalloc+0xc2/0x1c9 virtio_i2c_xfer+0x65/0x35c __i2c_transfer+0x429/0x57d 0x115/0x134 i2cdev_ioctl_rdwr+0x16a/ 0x1de i2cdev_ioctl+0x247/0x2ed vfs_ioctl+0x21/0x30 sys_ioctl+0xb18/0xb41 Liberado en virtio_i2c_xfer+0x32e/0x35c edad=244 cpu=0 pid=29 kfree+0x1bd/0x1cc x32e/0x35c __i2c_transfer+0x429/0x57d i2c_transfer+0x115 /0x134 i2cdev_ioctl_rdwr+0x16a/0x1de i2cdev_ioctl+0x247/0x2ed vfs_ioctl+0x21/0x30 sys_ioctl+0xb18/0xb41 No existe una soluci\u00f3n sencilla para esto (el controlador siempre tendr\u00eda que crear b\u00faferes de rebote y conservarlos hasta que el dispositivo finalmente devuelva el b\u00faferes), as\u00ed que simplemente deshabilite el soporte de tiempo de espera por ahora."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-416"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.15",
+ "versionEndExcluding": "5.15.6",
+ "matchCriteriaId": "082C8F69-46F5-469A-A650-E0340F11BEF5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "357AA433-37E8-4323-BFB2-3038D6E4B414"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "A73429BA-C2D9-4D0C-A75F-06A1CA8B3983"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/84e1d0bf1d7121759622dabf8fbef4c99ad597c5",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/cc432b0727ce404cc13e8f6b5ce29f412c3f9f1f",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/84e1d0bf1d7121759622dabf8fbef4c99ad597c5",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/cc432b0727ce404cc13e8f6b5ce29f412c3f9f1f",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-475xx/CVE-2021-47565.json b/CVE-2021/CVE-2021-475xx/CVE-2021-47565.json
index f62accd6136..a7f1c2e5940 100644
--- a/CVE-2021/CVE-2021-475xx/CVE-2021-47565.json
+++ b/CVE-2021/CVE-2021-475xx/CVE-2021-47565.json
@@ -2,8 +2,8 @@
"id": "CVE-2021-47565",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-24T15:15:21.443",
- "lastModified": "2024-11-21T06:36:34.150",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:41:08.080",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,71 +15,229 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: scsi: mpt3sas: solucion\u00f3 el p\u00e1nico del kernel durante la prueba de ciclo de energ\u00eda de la unidad. Mientras se recorre la lista sdev de shost, es posible que una de las unidades se est\u00e9 eliminando y su objeto sas_target se libere pero su objeto sdev permanece intacta. En consecuencia, puede ocurrir un p\u00e1nico en el kernel mientras el controlador intenta acceder al campo sas_address del objeto sas_target sin verificar tambi\u00e9n si el objeto sas_target es NULL."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-416"
+ },
+ {
+ "lang": "en",
+ "value": "CWE-476"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "3.8",
+ "versionEndExcluding": "4.4.294",
+ "matchCriteriaId": "DC2B89C1-C8E2-49B3-8B71-C97BAABFE587"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "4.5",
+ "versionEndExcluding": "4.9.292",
+ "matchCriteriaId": "DB7F6C04-42D3-48A3-892D-2487383B9B6E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "4.10",
+ "versionEndExcluding": "4.14.257",
+ "matchCriteriaId": "7080D941-9847-42F5-BA50-0A03CFB61FD1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "4.15",
+ "versionEndExcluding": "4.19.219",
+ "matchCriteriaId": "B9EF0575-6BF6-4AD9-B9A0-5C8D7D71710C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "4.20",
+ "versionEndExcluding": "5.4.163",
+ "matchCriteriaId": "80E8F086-C9B9-4987-8B2E-B4A16D1DA7BA"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.5",
+ "versionEndExcluding": "5.10.83",
+ "matchCriteriaId": "D4843826-EA9A-472B-82EC-B9E4FD4149AD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.11",
+ "versionEndExcluding": "5.15.6",
+ "matchCriteriaId": "990C08FB-0121-4296-896F-556312F8FF3B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "357AA433-37E8-4323-BFB2-3038D6E4B414"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "A73429BA-C2D9-4D0C-A75F-06A1CA8B3983"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/0d4b29eaadc1f59cec0c7e85eae77d08fcca9824",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/0ee4ba13e09c9d9c1cb6abb59da8295d9952328b",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2bf9c5a5039c8f4b037236aed505e6a25c1d5f7b",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/58ef2c7a6de13721865d84b80eecf56d6cba0937",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/5d4d50b1f159a5ebab7617f47121b4370aa58afe",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7e324f734a914957b8cc3ff4b4c9f0409558adb5",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/8485649a7655e791a6e4e9f15b4d30fdae937184",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/dd035ca0e7a142870a970d46b1d19276cfe2bc8c",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/0d4b29eaadc1f59cec0c7e85eae77d08fcca9824",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/0ee4ba13e09c9d9c1cb6abb59da8295d9952328b",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2bf9c5a5039c8f4b037236aed505e6a25c1d5f7b",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/58ef2c7a6de13721865d84b80eecf56d6cba0937",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/5d4d50b1f159a5ebab7617f47121b4370aa58afe",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7e324f734a914957b8cc3ff4b4c9f0409558adb5",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/8485649a7655e791a6e4e9f15b4d30fdae937184",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/dd035ca0e7a142870a970d46b1d19276cfe2bc8c",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-475xx/CVE-2021-47566.json b/CVE-2021/CVE-2021-475xx/CVE-2021-47566.json
index 7ddfa4d331d..684739944f8 100644
--- a/CVE-2021/CVE-2021-475xx/CVE-2021-47566.json
+++ b/CVE-2021/CVE-2021-475xx/CVE-2021-47566.json
@@ -2,8 +2,8 @@
"id": "CVE-2021-47566",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-24T15:15:21.637",
- "lastModified": "2024-11-21T06:36:34.270",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:41:41.317",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,71 +15,220 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: proc/vmcore: corrige el borrado del b\u00fafer del usuario usando correctamente clear_user() Para borrar un b\u00fafer de usuario no podemos simplemente usar memset, tenemos que usar clear_user(). Con un dispositivo virtio-mem que registra un vmcore_cb y tiene algo de memoria l\u00f3gicamente desconectada dentro de un bloque de memoria de Linux agregado, puedo desencadenar f\u00e1cilmente un ERROR copiando el vmcore a trav\u00e9s de \"cp\": systemd[1]: Iniciando el servicio Kdump Vmcore Save. . kdump[420]: Kdump est\u00e1 utilizando el nivel de registro predeterminado (3). kdump[453]: guardar en /sysroot/var/crash/127.0.0.1-2021-11-11-14:59:22/ kdump[458]: guardar vmcore-dmesg.txt en /sysroot/var/crash/127.0 .0.1-2021-11-11-14:59:22/ kdump[465]: guardar vmcore-dmesg.txt completo kdump[467]: guardar vmcore ERROR: no se puede manejar el error de p\u00e1gina para la direcci\u00f3n: 00007f2374e01000 #PF: escritura del supervisor acceso en modo kernel #PF: error_code(0x0003) - violaci\u00f3n de permisos PGD 7a523067 P4D 7a523067 PUD 7a528067 PMD 7a525067 PTE 800000007048f867 Ups: 0003 [#1] PREEMPT SMP NOPTI CPU: 0 PID: 468 Comm: p No contaminado 5.15.0+ # 6 Nombre del hardware: PC est\u00e1ndar QEMU (Q35 + ICH9, 2009), BIOS rel-1.14.0-27-g64f37cc530f1-prebuilt.qemu.org 01/04/2014 RIP: 0010:read_from_oldmem.part.0.cold+0x1d/ 0x86 C\u00f3digo: ff ff ff e8 05 ff fe ff e9 b9 e9 7f ff 48 89 de 48 c7 c7 38 3b 60 82 e8 f1 fe fe ff 83 fd 08 72 3c 49 8d 7d 08 4c 89 e9 89 e8 <49> c7 45 00 00 00 00 00 49 C7 44 05 F8 00 00 00 00 48 83 E7 F81 RSP: 0018: FFFFFC9000073BE08 EFLAGS: 00010212 RAX: 00000000000000001000 RBX: 000000002FD000 RCX: 00007F2374E RSI: 000000000000FFFFDFFF RDI: 00007F2374E01008 RBP: 000000000000001000 R08: 0000000000000000 R09: ffffc9000073bc50 R10: ffffc9000073bc48 R11: ffffffff829461a8 R12: 000000000000f000 R13: 00007f2374e01000 R14: 0000000000000000 R15: 88807bd421e8 FS: 00007f2374e12140(0000) GS:ffff88807f000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2 : 00007f2374e01000 CR3: 000000007a4aa000 CR4: 0000000000350eb0 Seguimiento de llamadas: read_vmcore+0x236/0x2c0 proc_reg_read+0x55/0xa0 vfs_read+0x95/0x190 do_syscall_64+0x3b/0x90 Entry_SYSCALL_64_after_hwframe+0x44/0xae Algunas CPU x86-64 tienen una funci\u00f3n de CPU llamada \"Prevenci\u00f3n de acceso en modo supervisor (SMAP)\", que se utiliza para detectar accesos incorrectos desde el kernel a los b\u00faferes de usuario como este: SMAP desencadena una violaci\u00f3n de permisos en caso de acceso incorrecto. En la variante x86-64 de clear_user(), SMAP se maneja correctamente mediante clac()+stac(). Para solucionarlo, utilice correctamente clear_user() cuando estemos tratando con un b\u00fafer de usuario."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-787"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "3.0",
+ "versionEndExcluding": "4.4.294",
+ "matchCriteriaId": "B35C423A-CD8B-48D2-8C0F-200B888B53F3"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "4.5",
+ "versionEndExcluding": "4.9.292",
+ "matchCriteriaId": "DB7F6C04-42D3-48A3-892D-2487383B9B6E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "4.10",
+ "versionEndExcluding": "4.14.257",
+ "matchCriteriaId": "7080D941-9847-42F5-BA50-0A03CFB61FD1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "4.15",
+ "versionEndExcluding": "4.19.219",
+ "matchCriteriaId": "B9EF0575-6BF6-4AD9-B9A0-5C8D7D71710C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "4.20",
+ "versionEndExcluding": "5.4.163",
+ "matchCriteriaId": "80E8F086-C9B9-4987-8B2E-B4A16D1DA7BA"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.5",
+ "versionEndExcluding": "5.10.83",
+ "matchCriteriaId": "D4843826-EA9A-472B-82EC-B9E4FD4149AD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.11",
+ "versionEndExcluding": "5.15.6",
+ "matchCriteriaId": "990C08FB-0121-4296-896F-556312F8FF3B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "357AA433-37E8-4323-BFB2-3038D6E4B414"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/33a7d698f30fa0b99d50569e9909d3baa65d8f6a",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7b3a34f08d11e7f05cd00b8e09adaa15192f0ad1",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/99d348b82bcb36171f24411d3f1a15706a2a937a",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9ef384ed300d1bcfb23d0ab0b487d544444d4b52",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a8a917058faf4abaec9fb614bb6d5f8fe3529ec6",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a9e164bd160be8cbee1df70acb379129e3cd2e7c",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/c1e63117711977cc4295b2ce73de29dd17066c82",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/fd7974c547abfb03072a4ee706d3a6f182266f89",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/33a7d698f30fa0b99d50569e9909d3baa65d8f6a",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7b3a34f08d11e7f05cd00b8e09adaa15192f0ad1",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/99d348b82bcb36171f24411d3f1a15706a2a937a",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9ef384ed300d1bcfb23d0ab0b487d544444d4b52",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a8a917058faf4abaec9fb614bb6d5f8fe3529ec6",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a9e164bd160be8cbee1df70acb379129e3cd2e7c",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/c1e63117711977cc4295b2ce73de29dd17066c82",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/fd7974c547abfb03072a4ee706d3a6f182266f89",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-475xx/CVE-2021-47567.json b/CVE-2021/CVE-2021-475xx/CVE-2021-47567.json
index c3c4475685a..5a6911534a0 100644
--- a/CVE-2021/CVE-2021-475xx/CVE-2021-47567.json
+++ b/CVE-2021/CVE-2021-475xx/CVE-2021-47567.json
@@ -2,8 +2,8 @@
"id": "CVE-2021-47567",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-24T15:15:21.837",
- "lastModified": "2024-11-21T06:36:34.383",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:47:52.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,120 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: powerpc/32: corrige el bloqueo f\u00edsico en el desbordamiento de la pila de vmap Desde El commit c118c7303ad5 (\"powerpc/32: corrige la pila de vmap - No activar MMU antes de leer la estructura de la tarea\") un desbordamiento de la pila de vmap resulta en un bloqueo duro. Esto se debe a que Emergency_ctx todav\u00eda se aborda con su direcci\u00f3n virtual, aunque la MMU de datos ya no est\u00e9 activa en ese momento. Solucionarlo utilizando una direcci\u00f3n f\u00edsica en su lugar."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.9.5",
+ "versionEndExcluding": "5.10.83",
+ "matchCriteriaId": "ED6B7872-6413-4C9F-9079-2DA4A4AD0DD3"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.11",
+ "versionEndExcluding": "5.15.6",
+ "matchCriteriaId": "990C08FB-0121-4296-896F-556312F8FF3B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "357AA433-37E8-4323-BFB2-3038D6E4B414"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "A73429BA-C2D9-4D0C-A75F-06A1CA8B3983"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/5bb60ea611db1e04814426ed4bd1c95d1487678e",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/c4e3ff8b8b1d54f0c755670174c453b06e17114b",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/dfe906da9a1abebdebe8b15bb3e66a2578f6c4c7",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/5bb60ea611db1e04814426ed4bd1c95d1487678e",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/c4e3ff8b8b1d54f0c755670174c453b06e17114b",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/dfe906da9a1abebdebe8b15bb3e66a2578f6c4c7",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-486xx/CVE-2022-48640.json b/CVE-2022/CVE-2022-486xx/CVE-2022-48640.json
index 3315eac844a..1e22ab181e1 100644
--- a/CVE-2022/CVE-2022-486xx/CVE-2022-48640.json
+++ b/CVE-2022/CVE-2022-486xx/CVE-2022-48640.json
@@ -2,8 +2,8 @@
"id": "CVE-2022-48640",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-04-28T13:15:06.903",
- "lastModified": "2024-11-21T07:33:40.350",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:06:46.927",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,147 @@
"value": "En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: bonding: corrige la deref NULL en bond_rr_gen_slave_id Se corrige una desreferencia NULL del miembro struct bonding.rr_tx_counter porque si un enlace se crea inicialmente con un modo inicial != cero (Round Robin) la memoria requerido para el contador nunca se crea y cuando se cambia el modo nunca se intenta verificar que la memoria est\u00e9 asignada al cambiar de modo. Esto provoca los siguientes errores en una m\u00e1quina aarch64: [334.686773] No se puede manejar la solicitud de paginaci\u00f3n del kernel en la direcci\u00f3n virtual ffff2c91ac905000 [334.694703] Informaci\u00f3n de cancelaci\u00f3n de memoria: [334.697486] ESR = 0x0000000096000004 [334.701234] EC = 0x25: DABT (EL actual), IL = 32 bits [ 334.706536] SET = 0, FnV = 0 [ 334.709579] EA = 0, S1PTW = 0 [ 334.712719] FSC = 0x04: error de traducci\u00f3n de nivel 0 [ 334.717586] Informaci\u00f3n de cancelaci\u00f3n de datos: [ 334.720454] ISV = 0, ISS = 0x00000004 [334.724288] CM = 0, WnR = 0 [334.727244] tabla de intercambio: p\u00e1ginas 4k, VA de 48 bits, pgdp=000008044d662000 [334.733944] [ffff2c91ac905000] 0000000000000, p4d=00000000000000000 [334.740734] Error interno: Ups: 96000004 [#1] SMP [334.745602] M\u00f3dulos vinculados en: uni\u00f3n tls veth rfkill sunrpc arm_spe_pmu vfat fat acpi_ipmi ipmi_ssif ixgbe igb i40e mdio ipmi_devintf ipmi_msghandler arm_cmn arm_dsu_pmu cppc_cpufreq acpi_tad fuse crct10dif_ce ast ghash_ce sbsa_gwdt nvme drm_vram_helper drm_ttm_helper nvme_core ttm xgene_hwmon [334.772217] CPU: 7 PID: 2214 Comm: ping No contaminado 6.0.0-rc4-00133-g64ae13ed4784 #4 [334.779950] Nombre de hardware: GIGABYTE R272-P31-00/MP32-AR1-00, BIOS F18v (SCP: 1.08.20211002) 12/01 /2021 [ 334.789244] pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 334.796196] pc : bond_rr_gen_slave_id+0x40/0x124 [uni\u00f3n] [ 334.801691] lr : _slave_get+0x38/0xdc [ vinculaci\u00f3n] [ 334.807962] sp : ffff8000221733e0 [ 334.811265] x29: ffff8000221733e0 x28: ffffdbac8572d198 x27: ffff80002217357c [ 334.818392] x26: 00000000002a x25: ffffdbacb33ee000 x24: ffff07ff980fa000 [ 334.825519] x23: ffffdbacb2e398ba x22: ffff07ff98102000 x21: ffff07ff981029c0 [ 334.832646] x 20: 0000000000000001 x19: ffff07ff981029c0 x18: 0000000000000014 [ 334.839773] x17: 0000000000000000 x16: ffffdbacb1004364 x15: 0000aaaabe2f5a62 [ 334.846899] 14: ffff07ff8e55d968 x13: ffff07ff8e55db30 x12: 0000000000000000 [ 334.854026] x11: ffffdbacb21532e8 x10: 0000000000000001 x9 : ffffdbac857178ec [ 3 34.861153] x8: ffff07ff9f6e5a28 x7: 0000000000000000 x6: 000000007c2b3742 [334.868279] x5: ffff2c91ac905000 x4: ffff2c91ac905000 x3: ffff07ff9f554400 [334.875406] x2: 1ac905000 x1: 0000000000000001 x0: ffff07ff981029c0 [334.882532] Rastreo de llamadas: [334.884967] bond_rr_gen_slave_id+0x40/0x124 [vinculaci\u00f3n] [334.890109] _obtener+ 0x38/0xdc [v\u00ednculo] [ 334.896033] __bond_start_xmit+0x128/0x3a0 [v\u00ednculo] [ 334.901001] bond_start_xmit+0x54/0xb0 [v\u00ednculo] [ 334.905622] dev_hard_start_xmit+0xb4/0x220 [ 334 .909798] __dev_queue_xmit+0x1a0/0x720 [ 334.913799] arp_xmit+0x3c /0xbc [ 334.916932] arp_send_dst+0x98/0xd0 [ 334.920410] arp_solicit+0xe8/0x230 [ 334.923888] neigh_probe+0x60/0xb0 [ 334.927279] 0x470 [334.931453] neigh_resolve_output+0x70/0x90 [334.935626] ip_finish_output2+0x158/0x514 [ 334.939714] __ip_finish_output+0xac/0x1a4 [ 334.943800] ip_finish_output+0x40/0xfc [ 334.947626] ip_output+0xf8/0x1a4 [ 334.950931] 0 [ 334.954410] ip_push_pending_frames+0x3c/0x60 [ 334.958758] raw_sendmsg+0x458/0x6d0 [ 334.962325 ] inet_sendmsg+0x50/0x80 [ 334.965805] sock_sendmsg+0x60/0x6c [ 334.969286] __sys_sendto+0xc8/0x134 [ 334.972853] __arm64_sys_sendto+0x34/0x4c ncado---"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-476"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.14",
+ "versionEndExcluding": "5.15.71",
+ "matchCriteriaId": "F9FF6F50-CAD8-4EF3-B7B7-48AE426FA858"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.16",
+ "versionEndExcluding": "5.19.12",
+ "matchCriteriaId": "03B0F56B-C5CC-4E81-BB51-D07D569DE4CA"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.20",
+ "versionEndExcluding": "6.0",
+ "matchCriteriaId": "80A7D51A-198F-4E02-B3B0-3ADC3C223423"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "E8BD11A3-8643-49B6-BADE-5029A0117325"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "5F0AD220-F6A9-4012-8636-155F1B841FAD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "A46498B3-78E1-4623-AAE1-94D29A42BE4E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "F8446E87-F5F6-41CA-8201-BAE0F0CA6DD9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "8E5FB72F-67CE-43CC-83FE-541604D98182"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "3A0A7397-F5F8-4753-82DC-9A11288E696D"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/0e400d602f46360752e4b32ce842dba3808e15e6",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2c8e8ab53acfc78da0b4a65f30cb5d306e7d78f7",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ec3a6f4ffe556a28f6f5028bf7c4412557e7051b",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/0e400d602f46360752e4b32ce842dba3808e15e6",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2c8e8ab53acfc78da0b4a65f30cb5d306e7d78f7",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ec3a6f4ffe556a28f6f5028bf7c4412557e7051b",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-486xx/CVE-2022-48643.json b/CVE-2022/CVE-2022-486xx/CVE-2022-48643.json
index 11a2c3838dc..7f97478f8f9 100644
--- a/CVE-2022/CVE-2022-486xx/CVE-2022-48643.json
+++ b/CVE-2022/CVE-2022-486xx/CVE-2022-48643.json
@@ -2,8 +2,8 @@
"id": "CVE-2022-48643",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-04-28T13:15:07.040",
- "lastModified": "2024-11-21T07:33:40.710",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:06:18.913",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,151 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netfilter: nf_tables: corrige el desbordamiento de nft_counters_enabled en nf_tables_addchain() syzbot informa el desbordamiento del contador nft_counters_enabled en nf_tables_addchain() [1], para el commit 43eb8949cfdffa76 (\"netfilter: nf_tables: no salir estad\u00edsticas de cadena habilitadas en caso de error\") pas\u00f3 por alto que nf_tables_chain_destroy() despu\u00e9s de nft_basechain_init() en la ruta de error de nf_tables_addchain() disminuye el contador porque nft_basechain_init() hace que nft_is_base_chain() devuelva verdadero al configurar el indicador NFT_CHAIN_BASE. Incrementa el contador inmediatamente despu\u00e9s de regresar de nft_basechain_init()."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-191"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.10.140",
+ "versionEndExcluding": "5.10.146",
+ "matchCriteriaId": "46F3A060-702E-4018-94C5-4E7FC03AB0F5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.15.64",
+ "versionEndExcluding": "5.15.71",
+ "matchCriteriaId": "E9A066D2-5BB3-49A3-9666-5736C6889680"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.19.6",
+ "versionEndExcluding": "5.19.12",
+ "matchCriteriaId": "F7C38106-1200-4F0A-A144-7F7E34C1383D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "A46498B3-78E1-4623-AAE1-94D29A42BE4E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "F8446E87-F5F6-41CA-8201-BAE0F0CA6DD9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "8E5FB72F-67CE-43CC-83FE-541604D98182"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "3A0A7397-F5F8-4753-82DC-9A11288E696D"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/710e3f526bd23a0d33435dedc52c3144de284378",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/8bcad2a931313aeba076b76922d5813ef97d0a91",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/91aa52652f4b37089aff3cb53e83049d826fef6d",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/921ebde3c0d22c8cba74ce8eb3cc4626abff1ccd",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/710e3f526bd23a0d33435dedc52c3144de284378",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/8bcad2a931313aeba076b76922d5813ef97d0a91",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/91aa52652f4b37089aff3cb53e83049d826fef6d",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/921ebde3c0d22c8cba74ce8eb3cc4626abff1ccd",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-486xx/CVE-2022-48644.json b/CVE-2022/CVE-2022-486xx/CVE-2022-48644.json
index 167224ad4a6..847868d27a4 100644
--- a/CVE-2022/CVE-2022-486xx/CVE-2022-48644.json
+++ b/CVE-2022/CVE-2022-486xx/CVE-2022-48644.json
@@ -2,8 +2,8 @@
"id": "CVE-2022-48644",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-04-28T13:15:07.087",
- "lastModified": "2024-11-21T07:33:40.817",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:05:16.673",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,47 +15,189 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/sched: taprio: evita deshabilitar la descarga cuando nunca estuvo habilitada. En una decisi\u00f3n de dise\u00f1o de API incre\u00edblemente extra\u00f1a, se llama a qdisc->destroy() incluso si qdisc->init() nunca tuvo \u00e9xito, no exclusivamente desde el commit 87b60cfacf9f (\"net_sched: corregir recuperaci\u00f3n de error en la creaci\u00f3n de qdisc\"), sino aparentemente tambi\u00e9n antes (en el caso de qdisc_create_dflt()). La qdisc taprio no reconoce completamente esto cuando intenta una descarga completa, porque comienza con q->flags = TAPRIO_FLAGS_INVALID en taprio_init(), luego reemplaza q->flags con TCA_TAPRIO_ATTR_FLAGS analizado desde netlink (en taprio_change(), cola llamada de taprio_init()). Pero en taprio_destroy(), llamamos a taprio_disable_offload(), y esto determina qu\u00e9 hacer en funci\u00f3n de FULL_OFFLOAD_IS_ENABLED(q->flags). Pero al observar la implementaci\u00f3n de FULL_OFFLOAD_IS_ENABLED() (una verificaci\u00f3n bit a bit del bit 1 en q->flags), no es v\u00e1lido llamar a esta macro en q->flags cuando contiene TAPRIO_FLAGS_INVALID, porque est\u00e1 configurado en U32_MAX y, por lo tanto, FULL_OFFLOAD_IS_ENABLED () devolver\u00e1 verdadero en un conjunto de indicadores no v\u00e1lido. Como resultado, es posible bloquear el kernel si el espacio del usuario fuerza un error entre configurar q->flags = TAPRIO_FLAGS_INVALID y la llamada de taprio_enable_offload(). Esto se debe a que los conductores no esperan que se deshabilite la descarga cuando nunca estuvo habilitada. El error que forzamos aqu\u00ed es adjuntar taprio como una qdisc no ra\u00edz, sino como hija de una qdisc ra\u00edz mqprio: $ tc qdisc add dev swp0 root handle 1: \\ mqprio num_tc 8 map 0 1 2 3 4 5 6 7 \\ colas 1@0 1@1 1@2 1@3 1@4 1@5 1@6 1@7 hw 0 $ tc qdisc reemplazar dev swp0 padre 1:1 \\ taprio num_tc 8 map 0 1 2 3 4 5 6 7 \\ colas 1@0 1@1 1@2 1@3 1@4 1@5 1@6 1@7 tiempo base 0 \\ entrada programada S 0x7f 990000 entrada programada S 0x80 100000 \\ banderas 0x0 clockid CLOCK_TAI No se puede para manejar la solicitud de paginaci\u00f3n del kernel en la direcci\u00f3n virtual ffffffffffffffff8 [ffffffffffffffff8] pgd=0000000000000000, p4d=0000000000000000 Error interno: Vaya: 96000004 [#1] Seguimiento de llamada SMP PREEMPT: taprio_dump+0x27c/0x310 vsc9959_port _setup_tc+0x1f4/0x460 felix_port_setup_tc+0x24/0x3c dsa_slave_setup_tc +0x54/0x27c taprio_disable_offload.isra.0+0x58/0xe0 taprio_destroy+0x80/0x104 qdisc_create+0x240/0x470 tc_modify_qdisc+0x1fc/0x6b0 rtnetlink_rcv_msg+0x12c/0x390 x5c/0x130 rtnetlink_rcv+0x1c/0x2c Solucione este problema manteniendo un registro de operaciones que hicimos, y deshacer la descarga solo si realmente lo hicimos. Agregu\u00e9 \"bool descargado\" dentro de un hueco de 4 bytes entre \"int clockid\" y \"atomic64_t picos_per_byte\". Ahora la primera l\u00ednea de cach\u00e9 se ve as\u00ed: $ pahole -C taprio_sched net/sched/sch_taprio.o struct taprio_sched { struct Qdisc * * qdiscs; /* 0 8 */ struct Qdisc * ra\u00edz; /* 8 8 */ u32 banderas; /* 16 4 */ enum tk_offsets tk_offset; /* 20 4 */ int relojid; /* 24 4 */ bool descargado; /* 28 1 */ /* XXX agujero de 3 bytes, intenta empaquetar */ atomic64_t picos_per_byte; /* 32 0 */ /* XXX agujero de 8 bytes, intenta empaquetar */ spinlock_t current_entry_lock; /* 40 0 */ /* XXX agujero de 8 bytes, intenta empaquetar */ struct sched_entry * current_entry; /* 48 8 */ struct sched_gate_list * oper_sched; /* 56 8 */ /* --- l\u00edmite de l\u00ednea de cach\u00e9 1 (64 bytes) --- */"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-476"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.4",
+ "versionEndExcluding": "5.4.215",
+ "matchCriteriaId": "2E55C802-5C45-4F58-858E-BA6E376D2D4E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.5",
+ "versionEndExcluding": "5.10.146",
+ "matchCriteriaId": "A9C1CF48-9C3A-4236-8546-BD32D742BFB7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.11",
+ "versionEndExcluding": "5.15.71",
+ "matchCriteriaId": "080C1827-D257-4D5A-9071-779EF7F5EF0B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.16",
+ "versionEndExcluding": "5.19.12",
+ "matchCriteriaId": "03B0F56B-C5CC-4E81-BB51-D07D569DE4CA"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.20",
+ "versionEndExcluding": "6.0",
+ "matchCriteriaId": "80A7D51A-198F-4E02-B3B0-3ADC3C223423"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "E8BD11A3-8643-49B6-BADE-5029A0117325"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "5F0AD220-F6A9-4012-8636-155F1B841FAD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "A46498B3-78E1-4623-AAE1-94D29A42BE4E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "F8446E87-F5F6-41CA-8201-BAE0F0CA6DD9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "8E5FB72F-67CE-43CC-83FE-541604D98182"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "3A0A7397-F5F8-4753-82DC-9A11288E696D"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/586def6ebed195f3594a4884f7c5334d0e1ad1bb",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/c7c9c7eb305ab8b4e93e4e4e1b78d8cfcbc26323",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/d12a1eb07003e597077329767c6aa86a7e972c76",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/db46e3a88a09c5cf7e505664d01da7238cd56c92",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f58e43184226e5e9662088ccf1389e424a3a4cbd",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/586def6ebed195f3594a4884f7c5334d0e1ad1bb",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/c7c9c7eb305ab8b4e93e4e4e1b78d8cfcbc26323",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/d12a1eb07003e597077329767c6aa86a7e972c76",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/db46e3a88a09c5cf7e505664d01da7238cd56c92",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f58e43184226e5e9662088ccf1389e424a3a4cbd",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-486xx/CVE-2022-48645.json b/CVE-2022/CVE-2022-486xx/CVE-2022-48645.json
index 49be4ab2a22..8f0f58c9645 100644
--- a/CVE-2022/CVE-2022-486xx/CVE-2022-48645.json
+++ b/CVE-2022/CVE-2022-486xx/CVE-2022-48645.json
@@ -2,8 +2,8 @@
"id": "CVE-2022-48645",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-04-28T13:15:07.140",
- "lastModified": "2024-11-21T07:33:40.933",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:04:23.490",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,147 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: enetc: denegar la descarga de funciones TSN basadas en tc en interfaces VF Las funciones TSN en ENETC (taprio, cbs, gate, policial) se configuran mediante una combinaci\u00f3n de comandos BD ring mensajes y registros de puertos: enetc_port_rd(), enetc_port_wr(). Los registros de puerto son una regi\u00f3n del mapa de memoria ENETC a la que solo se puede acceder desde la funci\u00f3n f\u00edsica PCIe. No son accesibles desde las Funciones Virtuales. Adem\u00e1s, al intentar acceder a estos registros se bloquea el kernel: $ echo 1 > /sys/bus/pci/devices/0000\\:00\\:00.0/sriov_numvfs pci 0000:00:01.0: [1957:ef00] type 00 class 0x020001 fsl_enetc_vf 0000:00:01.0: Agregar al grupo iommu 15 fsl_enetc_vf 0000:00:01.0: habilitar el dispositivo (0000 -> 0002) fsl_enetc_vf 0000:00:01.0 eno0vf0: renombrado de eth0 $ tc qdisc reemplazar dev eno0vf0 root taprio num_tc 8 mapa 0 1 2 3 4 5 6 7 \\ colas 1@0 1@1 1@2 1@3 1@4 1@5 1@6 1@7 tiempo base 0 \\ entrada programada S 0x7f 900000 entrada programada S 0x80 100000 banderas 0x2 No se puede manejar la solicitud de paginaci\u00f3n del kernel en la direcci\u00f3n virtual ffff800009551a08 Error interno: Ups: 96000007 [#1] PC SMP PREEMPT: enetc_setup_tc_taprio+0x170/0x47c lr: enetc_setup_tc_taprio+0x16c/0x47c Rastreo de llamadas: enetc_setup_tc_taprio +0x170/0x47c enetc_setup_tc+0x38/0x2dc taprio_change+0x43c/0x970 taprio_init+0x188/0x1e0 qdisc_create+0x114/0x470 tc_modify_qdisc+0x1fc/0x6c0 rtnetlink_rcv_msg+0x12c/0x390 Divida enetc_setup_tc() en funciones separadas para los controladores PF y VF. Tambi\u00e9n elimine enetc_qos.o para que no se incluya en enetc-vf.ko, ya que no sirve para nada all\u00ed."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.5",
+ "versionEndExcluding": "5.15.71",
+ "matchCriteriaId": "94F68883-D8F3-46A2-AAE1-56C1AAA1E52E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.16",
+ "versionEndExcluding": "5.19.12",
+ "matchCriteriaId": "03B0F56B-C5CC-4E81-BB51-D07D569DE4CA"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.20",
+ "versionEndExcluding": "6.0",
+ "matchCriteriaId": "80A7D51A-198F-4E02-B3B0-3ADC3C223423"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "E8BD11A3-8643-49B6-BADE-5029A0117325"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "5F0AD220-F6A9-4012-8636-155F1B841FAD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "A46498B3-78E1-4623-AAE1-94D29A42BE4E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "F8446E87-F5F6-41CA-8201-BAE0F0CA6DD9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "8E5FB72F-67CE-43CC-83FE-541604D98182"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "3A0A7397-F5F8-4753-82DC-9A11288E696D"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/23022b74b1a23bed044f6bc96cf92f6ca5f3e75f",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/510e703e4ed0e011db860bc21228aff48fc9eea7",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/5641c751fe2f92d3d9e8a8e03c1263ac8caa0b42",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/23022b74b1a23bed044f6bc96cf92f6ca5f3e75f",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/510e703e4ed0e011db860bc21228aff48fc9eea7",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/5641c751fe2f92d3d9e8a8e03c1263ac8caa0b42",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-486xx/CVE-2022-48652.json b/CVE-2022/CVE-2022-486xx/CVE-2022-48652.json
index 9fda9d8816c..aaf2ad45c79 100644
--- a/CVE-2022/CVE-2022-486xx/CVE-2022-48652.json
+++ b/CVE-2022/CVE-2022-486xx/CVE-2022-48652.json
@@ -2,8 +2,8 @@
"id": "CVE-2022-48652",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-04-28T13:15:07.477",
- "lastModified": "2024-11-21T07:33:42.007",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:03:43.710",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,163 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ice: se corrige el fallo manteniendo cfg antiguo cuando se actualizan TC m\u00e1s que colas. Hay problemas si se asignan colas con menos clases de tr\u00e1fico. el commit a632b2a4c920 (\"ice: ethtool: Prohibir configuraci\u00f3n de canal incorrecta para DCB\") ya no permite configurar menos colas que los TC. Otro caso es si primero configuramos menos colas y luego actualizamos m\u00e1s configuraciones de TC debido a LLDP, ice_vsi_cfg_tc() fallar\u00e1 pero dejar\u00e1 num_txq/rxq y tc_cfg sucios en vsi, lo que provocar\u00e1 un acceso al puntero no v\u00e1lido. [ 95.968089] ice 0000:3b:00.1: M\u00e1s TC definidos que colas/anillos asignados. [ 95.968092] ice 0000:3b:00.1: \u00a1Intentando utilizar m\u00e1s colas de Rx (8) de las asignadas (1)! [ 95.968093] ice 0000:3b:00.1: Error al configurar TC para \u00edndice VSI: 0 [ 95.969621] falla de protecci\u00f3n general: 0000 [#1] SMP NOPTI [ 95.969705] CPU: 1 PID: 58405 Comm: lldpad Kdump: cargado Contaminado: GUWO --------- -t - 4.18.0 #1 [ 95.969867] Nombre de hardware: OEM/BC11SPSCB10, BIOS 8.23 30/12/2021 [ 95.969992] RIP: 0010:devm_kmalloc+0xa/0x60 [ 95.970052] C\u00f3digo: 5c ff ff ff 31 c0 5b 5d 41 5c c3 b8 f4 ff ff ff eb f4 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 89 d1 <8b> 97 0 02 00 00 48 8d 7e 18 48 39 f7 72 3f 55 89 ce 53 48 8b 4c [ 95.970344] RSP: 0018:ffffc9003f553888 EFLAGS: 00010206 [ 95.970425] RAX: muerto0000000 00200 RBX: ffffea003c425b00 RCX: 00000000006080c0 [ 95.970536] RDX: 00000000006080c0 RSI: 0000000000000200 RDI: muerto000000000200 [ 95.970648] RBP: muerto000000000200 R08: 00000000000463c0 R09: ffff888ffa900000 [ 95.970760] R10: 0000000000000000 R11: 00000000000002 R12: ffff888ff6b40100 [ 95.970870] R13: ffff888ff6a55018 R14: 0000000000000000 R15: ffff888ff6a55460 [ 95.970981] FS: 1b7d24700(0000) GS: ffff88903ee80000(0000) knlGS:00000000000000000 [ 95.971108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.971197] CR2: 10 CR3: 0000000f2c1de002 CR4: 00000000007606e0 [ 95.971309] DR0: 0000000000000000 DR1: 00000000000000000 DR2: 0000000000000000 [ 95.971419 ] DR3 : 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.971530] PKRU: 55555554 [ 95.971573] Seguimiento de llamadas: [ 95.971622] x110 [hielo] [ 95.971695] ice_vsi_setup_rx_rings+0x54/0x90 [hielo] [ 95.971774] ice_vsi_open+0x25/0x120 [hielo] [ 95.971843] ice_open_internal+0xb8/0x1f0 [hielo] [ 95.971919] ice_ena_vsi+0x4f/0xd0 [hielo] [ 95.971987] ice_dcb_ena_dis_vsi.constprop.5+0x29/0x90 [hielo] [ 95.972082] f_dcb_cfg+0x29a/0x380 [hielo ] [ 95.972154] ice_dcbnl_setets+0x174/0x1b0 [hielo] [ 95.972220] dcbnl_ieee_set+0x89/0x230 [ 95.972279] ? dcbnl_ieee_del+0x150/0x150 [ 95.972341] dcb_doit+0x124/0x1b0 [ 95.972392] rtnetlink_rcv_msg+0x243/0x2f0 [ 95.972457] ? dcb_doit+0x14d/0x1b0 [95.972510]? __kmalloc_node_track_caller+0x1d3/0x280 [95.972591]? rtnl_calcit.isra.31+0x100/0x100 [ 95.972661] netlink_rcv_skb+0xcf/0xf0 [ 95.972720] netlink_unicast+0x16d/0x220 [ 95.972781] netlink_sendmsg+0x2ba/0x3a0 [ 95.975 891] sock_sendmsg+0x4c/0x50 [ 95.979032] ___sys_sendmsg+0x2e4/0x300 [ 95.982147] ? kmem_cache_alloc+0x13e/0x190 [95.985242]? __wake_up_common_lock+0x79/0x90 [95.988338]? __check_object_size+0xac/0x1b0 [ 95.991440] ? _copiar_al_usuario+0x22/0x30 [ 95.994539] ? move_addr_to_user+0xbb/0xd0 [95.997619]? __sys_sendmsg+0x53/0x80 [ 96.000664] __sys_sendmsg+0x53/0x80 [ 96.003747] do_syscall_64+0x5b/0x1d0 [ 96.006862] Entry_SYSCALL_64_after_hwframe+0x65/0xca Solo actualizaci\u00f3n num_txq/rxq cuando se pasa la verificaci\u00f3n y restaura tc_cfg si falla el mapa de cola de configuraci\u00f3n."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-476"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.18.8",
+ "versionEndExcluding": "5.19",
+ "matchCriteriaId": "E06CA42F-27CC-4023-9E3C-6658682BFC33"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.19.1",
+ "versionEndExcluding": "5.19.12",
+ "matchCriteriaId": "05B0CF82-71BB-4D4F-88FB-949A5BA42F47"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.20",
+ "versionEndExcluding": "6.0",
+ "matchCriteriaId": "80A7D51A-198F-4E02-B3B0-3ADC3C223423"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:-:*:*:*:*:*:*",
+ "matchCriteriaId": "9D759CCF-9E1B-41B2-81AA-CB580C5F3EEC"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "2E9C0DB0-D349-489F-A3D6-B77214E93A8A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "1A0DE3B7-0FFB-45AA-9BD6-19870CA7C6FD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "00AE778B-BAEE-49EB-9F84-003B73D7862A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc7:*:*:*:*:*:*",
+ "matchCriteriaId": "C178431E-AD82-4B3D-B70F-A273A02ABD5D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc8:*:*:*:*:*:*",
+ "matchCriteriaId": "2CF5D19C-C418-4B57-B52D-7795547F4096"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "E8BD11A3-8643-49B6-BADE-5029A0117325"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "5F0AD220-F6A9-4012-8636-155F1B841FAD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "A46498B3-78E1-4623-AAE1-94D29A42BE4E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "F8446E87-F5F6-41CA-8201-BAE0F0CA6DD9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "8E5FB72F-67CE-43CC-83FE-541604D98182"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "3A0A7397-F5F8-4753-82DC-9A11288E696D"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/7c945e5b4787db47d728120b56c934ba05f99864",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a509702cac95a8b450228a037c8542f57e538e5b",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7c945e5b4787db47d728120b56c934ba05f99864",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a509702cac95a8b450228a037c8542f57e538e5b",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-486xx/CVE-2022-48653.json b/CVE-2022/CVE-2022-486xx/CVE-2022-48653.json
index 5c3482135c6..acd71db4df6 100644
--- a/CVE-2022/CVE-2022-486xx/CVE-2022-48653.json
+++ b/CVE-2022/CVE-2022-486xx/CVE-2022-48653.json
@@ -2,8 +2,8 @@
"id": "CVE-2022-48653",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-04-28T13:15:07.530",
- "lastModified": "2024-11-21T07:33:42.113",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:02:56.217",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,147 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: ice: no desconectar dos veces el auxiliar en el reinicio iniciado por el par. En la devoluci\u00f3n de llamada de IDC a la que se accede cuando los controladores auxiliares solicitan un reinicio, se llama a la funci\u00f3n para desconectar los dispositivos auxiliares. Esta funci\u00f3n tambi\u00e9n se llama en la funci\u00f3n ice_prepare_for_reset. Esta doble llamada est\u00e1 provocando un ERROR de \"programaci\u00f3n at\u00f3mica\". [662.676430] ice 0000:4c:00.0 rocep76s0: cqp opcode = 0x1 maj_err_code = 0xffff min_err_code = 0x8003 [662.676609] ice 0000:4c:00.0 rocep76s0: [Modificar error de comando QP][op_code=8] =-29 esperando=1 complete_err=1 maj=0xffff min=0x8003 [662.815006] ice 0000:4c:00.0 rocep76s0: Notificaci\u00f3n de evento ICE OICR: oicr = 0x10000003 [662.815014] ice 0000:4c:00.0 rocep76s0: Error PE cr\u00edtico, GLPE_CRITERR= 0x00011424 [662.815017] hielo 0000:4c:00.0 rocep76s0: Solicitando un reinicio [662.815475] ERROR: programaci\u00f3n mientras at\u00f3mico: swapper/37/0/0x00010002 [662.815475] ERROR: programaci\u00f3n mientras at\u00f3mico: swapper/37/0/0x00010002 [ 662.815477] M\u00f3dulos vinculados en: rpcsec_gss_krb5 aut\u00e9ntico x86_pkg_temp_thermal intel_powerclamp coretemp target_core_mod snd_hda_intel ib_iser snd_intel_dspcfg libiscsi snd_intel_sdw_acpi scsi_transport_iscsi kvm_intel iTCO_wdt rdma_cm snd_hda_codec kvm iw_cm ipmi_ssif iTCO_vendor_support s nd_hda_core irqbypass crct10dif_pclmul crc32_pclmul ghash_clmulni_intel snd_hwdep snd_seq snd_seq_device rapl snd_pcm snd_timer isst_if_mbox_pci pcspkr isst_if_mmio irdma intel_uncore idxd acpi_ipmi joydev isst_if_common snd mei_me idxd_bus ipmi_si soundcore i2c_i801 mei i2c_smbus i2c_ismt ipmi_msghandler acpi_power_meter acpi_pad rv(OE) ib_uverbs ib_cm ib_core xfs libcrc32c ast i2c_algo_bit drm_vram_helper drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops drm_ttm_helpe r ttm [ 662.815546 ] nvme nvme_core ice drm crc32c_intel i40e t10_pi wmi pinctrl_emmitsburg dm_mirror dm_region_hash dm_log dm_mod fuse [ 662.815557] Preferencia deshabilitada en: [ 662.815558] [<0000000000000000>] 0x0 [ 6 62.815563] CPU: 37 PID: 0 Comunicaciones: intercambiador/37 Kdump: cargado Contaminado: GS OE 5.17.1 #2 [ 662.815566] Nombre del hardware: Intel Corporation D50DNP/D50DNP, BIOS SE5C6301.86B.6624.D18.2111021741 02/11/2021 [ 662.815568] Seguimiento de llamadas: [ 662.815572] [ 662 .815574] dump_stack_lvl +0x33/0x42 [ 662.815581] __schedule_bug.cold.147+0x7d/0x8a [ 662.815588] __schedule+0x798/0x990 [ 662.815595] horario+0x44/0xc0 [ 662.815597] +0x14/0x20 [ 662.815600] __mutex_lock.isra.11+0x46c /0x490 [662.815603] ? __ibdev_printk+0x76/0xc0 [ib_core] [ 662.815633] dispositivo_del+0x37/0x3d0 [ 662.815639] ice_unplug_aux_dev+0x1a/0x40 [ice] [ 662.815674] ice_schedule_reset+0x3c/0xd0 [ice] [ 2.815693] irdma_iidc_event_handler.cold.7+0xb6/0xd3 [irdma] [662.815712] ? bitmap_find_next_zero_area_off+0x45/0xa0 [ 662.815719] ice_send_event_to_aux+0x54/0x70 [ice] [ 662.815741] ice_misc_intr+0x21d/0x2d0 [ice] [ 662.815756] pu+0x4c/0x180 [ 662.815762] handle_irq_event_percpu+0xf/0x40 [ 662.815764] handle_irq_event+0x34/ 0x60 [ 662.815766] handle_edge_irq+0x9a/0x1c0 [ 662.815770] __common_interrupt+0x62/0x100 [ 662.815774] common_interrupt+0xb4/0xd0 [ 662.815779] [ 662.81578 0] [ 662.815780] asm_common_interrupt+0x1e/0x40 [ 662.815785] RIP : 0010:cpuidle_enter_state+0xd6/0x380 [ 662.815789] C\u00f3digo: 49 89 c4 0f 1f 44 00 00 31 ff e8 65 d7 95 ff 45 84 ff 74 12 9c 58 f6 c4 02 0f 85 64 02 00 31 ff e8 ae c5 9c ff fb 45 85 f6 <0f> 88 12 01 00 00 49 63 d6 4c 2b 24 24 48 8d 04 52 48 8d 04 82 49 [ 662.815791] RSP: 0018:ff2c2c4f18edbe80 EFLAGS: 0202 [662.815793] RAX: ff280805df140000 RBX: 0000000000000002 RCX : 000000000000001f [ 662.815795] RDX: 0000009a52da2d08 R ---truncado---"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.14",
+ "versionEndExcluding": "5.15.71",
+ "matchCriteriaId": "F9FF6F50-CAD8-4EF3-B7B7-48AE426FA858"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.16",
+ "versionEndExcluding": "5.19.12",
+ "matchCriteriaId": "03B0F56B-C5CC-4E81-BB51-D07D569DE4CA"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.20",
+ "versionEndExcluding": "6.0",
+ "matchCriteriaId": "80A7D51A-198F-4E02-B3B0-3ADC3C223423"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "E8BD11A3-8643-49B6-BADE-5029A0117325"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "5F0AD220-F6A9-4012-8636-155F1B841FAD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "A46498B3-78E1-4623-AAE1-94D29A42BE4E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "F8446E87-F5F6-41CA-8201-BAE0F0CA6DD9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "8E5FB72F-67CE-43CC-83FE-541604D98182"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "3A0A7397-F5F8-4753-82DC-9A11288E696D"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/149979e87eb7a365d3d0b259bed79d84ff585a93",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/23c619190318376769ad7b61504c2ea0703fb783",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/34447d64b8d28e4d6a73d73f07c879959d68fbfe",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/149979e87eb7a365d3d0b259bed79d84ff585a93",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/23c619190318376769ad7b61504c2ea0703fb783",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/34447d64b8d28e4d6a73d73f07c879959d68fbfe",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-486xx/CVE-2022-48665.json b/CVE-2022/CVE-2022-486xx/CVE-2022-48665.json
index b419787da38..e4d272409cf 100644
--- a/CVE-2022/CVE-2022-486xx/CVE-2022-48665.json
+++ b/CVE-2022/CVE-2022-486xx/CVE-2022-48665.json
@@ -2,8 +2,8 @@
"id": "CVE-2022-48665",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-04-28T13:15:08.073",
- "lastModified": "2024-11-21T07:33:43.953",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:01:29.897",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,126 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: exfat: corrige el desbordamiento de una partici\u00f3n de gran capacidad. Al usar el tipo int para el \u00edndice del sector, habr\u00e1 un desbordamiento en una partici\u00f3n de gran capacidad. Por ejemplo, si el almacenamiento con un tama\u00f1o de sector de 512 bytes y una capacidad de partici\u00f3n es superior a 2 TB, se producir\u00e1 un desbordamiento."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-191"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.19",
+ "versionEndExcluding": "5.19.12",
+ "matchCriteriaId": "2805DC7D-5EBA-4306-BF65-309CDBF3B0F2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.20",
+ "versionEndExcluding": "6.0",
+ "matchCriteriaId": "80A7D51A-198F-4E02-B3B0-3ADC3C223423"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "E8BD11A3-8643-49B6-BADE-5029A0117325"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "5F0AD220-F6A9-4012-8636-155F1B841FAD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "A46498B3-78E1-4623-AAE1-94D29A42BE4E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "F8446E87-F5F6-41CA-8201-BAE0F0CA6DD9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "8E5FB72F-67CE-43CC-83FE-541604D98182"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "3A0A7397-F5F8-4753-82DC-9A11288E696D"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/17244f71765dfec39e84493993993e896c376d09",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2e9ceb6728f1dc2fa4b5d08f37d88cbc49a20a62",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/17244f71765dfec39e84493993993e896c376d09",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2e9ceb6728f1dc2fa4b5d08f37d88cbc49a20a62",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-486xx/CVE-2022-48667.json b/CVE-2022/CVE-2022-486xx/CVE-2022-48667.json
index 23caf7e99da..7ca56db77fc 100644
--- a/CVE-2022/CVE-2022-486xx/CVE-2022-48667.json
+++ b/CVE-2022/CVE-2022-486xx/CVE-2022-48667.json
@@ -2,8 +2,8 @@
"id": "CVE-2022-48667",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-04-28T13:15:08.157",
- "lastModified": "2024-11-21T07:33:44.240",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:00:11.350",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,111 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: smb3: corrige la corrupci\u00f3n de datos temporales en el rango de inserci\u00f3n. El rango de inserci\u00f3n no descarta la regi\u00f3n en cach\u00e9 afectada, por lo que puede correr el riesgo de da\u00f1ar temporalmente los datos del archivo. Tambi\u00e9n incluye una limpieza menor (evitando volver a leer el tama\u00f1o del inodo repetidamente innecesariamente) para hacerlo m\u00e1s claro."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
+ "baseScore": 3.3,
+ "baseSeverity": "LOW",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 1.4
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.13",
+ "versionEndExcluding": "5.19.12",
+ "matchCriteriaId": "B43EFD11-EBB4-4644-BD8C-DA94E125A946"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.20",
+ "versionEndExcluding": "6.0",
+ "matchCriteriaId": "80A7D51A-198F-4E02-B3B0-3ADC3C223423"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "E8BD11A3-8643-49B6-BADE-5029A0117325"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "5F0AD220-F6A9-4012-8636-155F1B841FAD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "A46498B3-78E1-4623-AAE1-94D29A42BE4E"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/0cdde8460c304283d4ebe3f767a70215d1ab9d4e",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9c8b7a293f50253e694f19161c045817a938e551",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/0cdde8460c304283d4ebe3f767a70215d1ab9d4e",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9c8b7a293f50253e694f19161c045817a938e551",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-486xx/CVE-2022-48668.json b/CVE-2022/CVE-2022-486xx/CVE-2022-48668.json
index 911ecd677ee..bfc36f977b4 100644
--- a/CVE-2022/CVE-2022-486xx/CVE-2022-48668.json
+++ b/CVE-2022/CVE-2022-486xx/CVE-2022-48668.json
@@ -2,8 +2,8 @@
"id": "CVE-2022-48668",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-04-28T13:15:08.203",
- "lastModified": "2024-11-21T07:33:44.343",
- "vulnStatus": "Undergoing Analysis",
+ "lastModified": "2025-09-18T13:59:55.400",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,111 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: smb3: corrige la corrupci\u00f3n temporal de datos en el rango de contracci\u00f3n el rango de contracci\u00f3n no descarta la regi\u00f3n en cach\u00e9 afectada, por lo que puede correr el riesgo de corromper temporalmente los datos del archivo. Esto corrige xfstest generic/031. Tambi\u00e9n decid\u00ed fusionar una limpieza menor en el mismo parche (evitando volver a leer el tama\u00f1o del inodo repetidamente innecesariamente) para que quede m\u00e1s claro."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
+ "baseScore": 3.3,
+ "baseSeverity": "LOW",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 1.4
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.13",
+ "versionEndExcluding": "5.19.12",
+ "matchCriteriaId": "B43EFD11-EBB4-4644-BD8C-DA94E125A946"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.20",
+ "versionEndExcluding": "6.0",
+ "matchCriteriaId": "80A7D51A-198F-4E02-B3B0-3ADC3C223423"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "E8BD11A3-8643-49B6-BADE-5029A0117325"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "5F0AD220-F6A9-4012-8636-155F1B841FAD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "A46498B3-78E1-4623-AAE1-94D29A42BE4E"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/49523a4732204bdacbf3941a016503ddb4ddb3b9",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/fa30a81f255a56cccd89552cd6ce7ea6e8d8acc4",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/49523a4732204bdacbf3941a016503ddb4ddb3b9",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/fa30a81f255a56cccd89552cd6ce7ea6e8d8acc4",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50375.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50375.json
new file mode 100644
index 00000000000..59332fba038
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50375.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-50375",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:36.110",
+ "lastModified": "2025-09-18T14:15:36.110",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown\n\nlpuart_dma_shutdown tears down lpuart dma, but lpuart_flush_buffer can\nstill occur which in turn tries to access dma apis if lpuart_dma_tx_use\nflag is true. At this point since dma is torn down, these dma apis can\nabort. Set lpuart_dma_tx_use and the corresponding rx flag\nlpuart_dma_rx_use to false in lpuart_dma_shutdown so that dmas are not\naccessed after they are relinquished.\n\nOtherwise, when try to kill btattach, kernel may panic. This patch may\nfix this issue.\nroot@imx8ulpevk:~# btattach -B /dev/ttyLP2 -S 115200\n^C[ 90.182296] Internal error: synchronous external abort: 96000210 [#1] PREEMPT SMP\n[ 90.189806] Modules linked in: moal(O) mlan(O)\n[ 90.194258] CPU: 0 PID: 503 Comm: btattach Tainted: G O 5.15.32-06136-g34eecdf2f9e4 #37\n[ 90.203554] Hardware name: NXP i.MX8ULP 9X9 EVK (DT)\n[ 90.208513] pstate: 600000c5 (nZCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 90.215470] pc : fsl_edma3_disable_request+0x8/0x60\n[ 90.220358] lr : fsl_edma3_terminate_all+0x34/0x20c\n[ 90.225237] sp : ffff800013f0bac0\n[ 90.228548] x29: ffff800013f0bac0 x28: 0000000000000001 x27: ffff000008404800\n[ 90.235681] x26: ffff000008404960 x25: ffff000008404a08 x24: ffff000008404a00\n[ 90.242813] x23: ffff000008404a60 x22: 0000000000000002 x21: 0000000000000000\n[ 90.249946] x20: ffff800013f0baf8 x19: ffff00000559c800 x18: 0000000000000000\n[ 90.257078] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\n[ 90.264211] x14: 0000000000000003 x13: 0000000000000000 x12: 0000000000000040\n[ 90.271344] x11: ffff00000600c248 x10: ffff800013f0bb10 x9 : ffff000057bcb090\n[ 90.278477] x8 : fffffc0000241a08 x7 : ffff00000534ee00 x6 : ffff000008404804\n[ 90.285609] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff0000055b3480\n[ 90.292742] x2 : ffff8000135c0000 x1 : ffff00000534ee00 x0 : ffff00000559c800\n[ 90.299876] Call trace:\n[ 90.302321] fsl_edma3_disable_request+0x8/0x60\n[ 90.306851] lpuart_flush_buffer+0x40/0x160\n[ 90.311037] uart_flush_buffer+0x88/0x120\n[ 90.315050] tty_driver_flush_buffer+0x20/0x30\n[ 90.319496] hci_uart_flush+0x44/0x90\n[ 90.323162] +0x34/0x12c\n[ 90.327253] tty_ldisc_close+0x38/0x70\n[ 90.331005] tty_ldisc_release+0xa8/0x190\n[ 90.335018] tty_release_struct+0x24/0x8c\n[ 90.339022] tty_release+0x3ec/0x4c0\n[ 90.342593] __fput+0x70/0x234\n[ 90.345652] ____fput+0x14/0x20\n[ 90.348790] task_work_run+0x84/0x17c\n[ 90.352455] do_exit+0x310/0x96c\n[ 90.355688] do_group_exit+0x3c/0xa0\n[ 90.359259] __arm64_sys_exit_group+0x1c/0x20\n[ 90.363609] invoke_syscall+0x48/0x114\n[ 90.367362] el0_svc_common.constprop.0+0xd4/0xfc\n[ 90.372068] do_el0_svc+0x2c/0x94\n[ 90.375379] el0_svc+0x28/0x80\n[ 90.378438] el0t_64_sync_handler+0xa8/0x130\n[ 90.382711] el0t_64_sync+0x1a0/0x1a4\n[ 90.386376] Code: 17ffffda d503201f d503233f f9409802 (b9400041)\n[ 90.392467] ---[ end trace 2f60524b4a43f1f6 ]---\n[ 90.397073] note: btattach[503] exited with preempt_count 1\n[ 90.402636] Fixing recursive fault but reboot is needed!"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/29b897ac7b990882c74bd08605692214e7e58b83",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/316ae95c175a7d770d1bfe4c011192712f57aa4a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3953e7f261e2f4d9c35f0c025df9f166f46aa626",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9a56ade124d4891a31ab1300c57665f07f5b24d5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c4293def8860fd587a84400ccba5b49cec56e2c3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d554c14eb73ee91d76fc9aece4616f0b687c295d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50376.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50376.json
new file mode 100644
index 00000000000..b3e7f25e137
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50376.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-50376",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:36.277",
+ "lastModified": "2025-09-18T14:15:36.277",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\norangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()\n\nWhen insert and remove the orangefs module, there are memory leaked\nas below:\n\nunreferenced object 0xffff88816b0cc000 (size 2048):\n comm \"insmod\", pid 783, jiffies 4294813439 (age 65.512s)\n hex dump (first 32 bytes):\n 6e 6f 6e 65 0a 00 00 00 00 00 00 00 00 00 00 00 none............\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [<0000000031ab7788>] kmalloc_trace+0x27/0xa0\n [<000000005b405fee>] orangefs_debugfs_init.cold+0xaf/0x17f\n [<00000000e5a0085b>] 0xffffffffa02780f9\n [<000000004232d9f7>] do_one_initcall+0x87/0x2a0\n [<0000000054f22384>] do_init_module+0xdf/0x320\n [<000000003263bdea>] load_module+0x2f98/0x3330\n [<0000000052cd4153>] __do_sys_finit_module+0x113/0x1b0\n [<00000000250ae02b>] do_syscall_64+0x35/0x80\n [<00000000f11c03c7>] entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nUse the golbal variable as the buffer rather than dynamic allocate to\nslove the problem."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0cd303aad220fafa595e0ed593e99aa51b90412b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/31720a2b109b3080eb77e97b8f6f50a27b4ae599",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/786e5296f9e3b045d5ff9098514ce7b8ba1d890d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a076490b0211990ec6764328c22cb744dd782bd9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bdc2d33fa2324b1f5ab5b701cda45ee0b2384409",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c8853267289c55b1acbe4dc3641374887584834d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50377.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50377.json
new file mode 100644
index 00000000000..717a54799da
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50377.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-50377",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:36.397",
+ "lastModified": "2025-09-18T14:15:36.397",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: check and assert if marking an no_delete evicting inode dirty\n\nIn ext4_evict_inode(), if we evicting an inode in the 'no_delete' path,\nit cannot be raced by another mark_inode_dirty(). If it happens,\nsomeone else may accidentally dirty it without holding inode refcount\nand probably cause use-after-free issues in the writeback procedure.\nIt's indiscoverable and hard to debug, so add an WARN_ON_ONCE() to\ncheck and detect this issue in advance."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0c026f975d24701766cf4ac63995ead9f6d57a59",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/318cdc822c63b6e2befcfdc2088378ae6fa18def",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9020f56a3cad1c97b81c7dab2aa67027b59c8f73",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/91009e361e8cb2cbd1dc9496cb5fb4f8de3f4b11",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f1ec687ebd1bf146333955b7e209d21508c3ba9f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50378.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50378.json
new file mode 100644
index 00000000000..919fdcdd49f
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50378.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-50378",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:36.513",
+ "lastModified": "2025-09-18T14:15:36.513",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/meson: reorder driver deinit sequence to fix use-after-free bug\n\nUnloading the driver triggers the following KASAN warning:\n\n[ +0.006275] =============================================================\n[ +0.000029] BUG: KASAN: use-after-free in __list_del_entry_valid+0xe0/0x1a0\n[ +0.000026] Read of size 8 at addr ffff000020c395e0 by task rmmod/2695\n\n[ +0.000019] CPU: 5 PID: 2695 Comm: rmmod Tainted: G C O 5.19.0-rc6-lrmbkasan+ #1\n[ +0.000013] Hardware name: Hardkernel ODROID-N2Plus (DT)\n[ +0.000008] Call trace:\n[ +0.000007] dump_backtrace+0x1ec/0x280\n[ +0.000013] show_stack+0x24/0x80\n[ +0.000008] dump_stack_lvl+0x98/0xd4\n[ +0.000011] print_address_description.constprop.0+0x80/0x520\n[ +0.000011] print_report+0x128/0x260\n[ +0.000007] kasan_report+0xb8/0xfc\n[ +0.000008] __asan_report_load8_noabort+0x3c/0x50\n[ +0.000010] __list_del_entry_valid+0xe0/0x1a0\n[ +0.000009] drm_atomic_private_obj_fini+0x30/0x200 [drm]\n[ +0.000172] drm_bridge_detach+0x94/0x260 [drm]\n[ +0.000145] drm_encoder_cleanup+0xa4/0x290 [drm]\n[ +0.000144] drm_mode_config_cleanup+0x118/0x740 [drm]\n[ +0.000143] drm_mode_config_init_release+0x1c/0x2c [drm]\n[ +0.000144] drm_managed_release+0x170/0x414 [drm]\n[ +0.000142] drm_dev_put.part.0+0xc0/0x124 [drm]\n[ +0.000143] drm_dev_put+0x20/0x30 [drm]\n[ +0.000142] meson_drv_unbind+0x1d8/0x2ac [meson_drm]\n[ +0.000028] take_down_aggregate_device+0xb0/0x160\n[ +0.000016] component_del+0x18c/0x360\n[ +0.000009] meson_dw_hdmi_remove+0x28/0x40 [meson_dw_hdmi]\n[ +0.000015] platform_remove+0x64/0xb0\n[ +0.000009] device_remove+0xb8/0x154\n[ +0.000009] device_release_driver_internal+0x398/0x5b0\n[ +0.000009] driver_detach+0xac/0x1b0\n[ +0.000009] bus_remove_driver+0x158/0x29c\n[ +0.000009] driver_unregister+0x70/0xb0\n[ +0.000008] platform_driver_unregister+0x20/0x2c\n[ +0.000008] meson_dw_hdmi_platform_driver_exit+0x1c/0x30 [meson_dw_hdmi]\n[ +0.000012] __do_sys_delete_module+0x288/0x400\n[ +0.000011] __arm64_sys_delete_module+0x5c/0x80\n[ +0.000009] invoke_syscall+0x74/0x260\n[ +0.000009] el0_svc_common.constprop.0+0xcc/0x260\n[ +0.000009] do_el0_svc+0x50/0x70\n[ +0.000007] el0_svc+0x68/0x1a0\n[ +0.000012] el0t_64_sync_handler+0x11c/0x150\n[ +0.000008] el0t_64_sync+0x18c/0x190\n\n[ +0.000018] Allocated by task 0:\n[ +0.000007] (stack is not available)\n\n[ +0.000011] Freed by task 2695:\n[ +0.000008] kasan_save_stack+0x2c/0x5c\n[ +0.000011] kasan_set_track+0x2c/0x40\n[ +0.000008] kasan_set_free_info+0x28/0x50\n[ +0.000009] ____kasan_slab_free+0x128/0x1d4\n[ +0.000008] __kasan_slab_free+0x18/0x24\n[ +0.000007] slab_free_freelist_hook+0x108/0x230\n[ +0.000011] kfree+0x110/0x35c\n[ +0.000008] release_nodes+0xf0/0x16c\n[ +0.000009] devres_release_group+0x180/0x270\n[ +0.000008] component_unbind+0x128/0x1e0\n[ +0.000010] component_unbind_all+0x1b8/0x264\n[ +0.000009] meson_drv_unbind+0x1a0/0x2ac [meson_drm]\n[ +0.000025] take_down_aggregate_device+0xb0/0x160\n[ +0.000009] component_del+0x18c/0x360\n[ +0.000009] meson_dw_hdmi_remove+0x28/0x40 [meson_dw_hdmi]\n[ +0.000012] platform_remove+0x64/0xb0\n[ +0.000008] device_remove+0xb8/0x154\n[ +0.000009] device_release_driver_internal+0x398/0x5b0\n[ +0.000009] driver_detach+0xac/0x1b0\n[ +0.000009] bus_remove_driver+0x158/0x29c\n[ +0.000008] driver_unregister+0x70/0xb0\n[ +0.000008] platform_driver_unregister+0x20/0x2c\n[ +0.000008] meson_dw_hdmi_platform_driver_exit+0x1c/0x30 [meson_dw_hdmi]\n[ +0.000011] __do_sys_delete_module+0x288/0x400\n[ +0.000010] __arm64_sys_delete_module+0x5c/0x80\n[ +0.000008] invoke_syscall+0x74/0x260\n[ +0.000008] el0_svc_common.constprop.0+0xcc/0x260\n[ +0.000008] do_el0_svc+0x50/0x70\n[ +0.000007] el0_svc+0x68/0x1a0\n[ +0.000009] el0t_64_sync_handler+0x11c/0x150\n[ +0.000009] el0t_64_sync+0x18c/0x190\n\n[ +0.000014] The buggy address belongs to the object at ffff000020c39000\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/31c519981eb141c7ec39bfd5be25d35f02edb868",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9190d287f7a6b02b50b510045b0edf448ed68e88",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9d33348513c36337f91f1991da23f41514d4de39",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d76ff04a72f90767455059c8239b06042cd0ed23",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50379.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50379.json
new file mode 100644
index 00000000000..7e187e78b4b
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50379.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-50379",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:36.630",
+ "lastModified": "2025-09-18T14:15:36.630",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix race between quota enable and quota rescan ioctl\n\nWhen enabling quotas, at btrfs_quota_enable(), after committing the\ntransaction, we change fs_info->quota_root to point to the quota root we\ncreated and set BTRFS_FS_QUOTA_ENABLED at fs_info->flags. Then we try\nto start the qgroup rescan worker, first by initializing it with a call\nto qgroup_rescan_init() - however if that fails we end up freeing the\nquota root but we leave fs_info->quota_root still pointing to it, this\ncan later result in a use-after-free somewhere else.\n\nWe have previously set the flags BTRFS_FS_QUOTA_ENABLED and\nBTRFS_QGROUP_STATUS_FLAG_ON, so we can only fail with -EINPROGRESS at\nbtrfs_quota_enable(), which is possible if someone already called the\nquota rescan ioctl, and therefore started the rescan worker.\n\nSo fix this by ignoring an -EINPROGRESS and asserting we can't get any\nother error."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0efd9dfc00d677a1d0929319a6103cb2dfc41c22",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/26b7c0ac49a3eea15559c9d84863736a6d1164b4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/331cd9461412e103d07595a10289de90004ac890",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/47b5ffe86332af95f0f52be0a63d4da7c2b37b55",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4b996a3014ef014af8f97b60c35f5289210a4720",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6c22f86dd221eba0c7af645b1af73dcbc04ee27b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c97f6d528c3f1c83a6b792a8a7928c236c80b8fe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50380.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50380.json
new file mode 100644
index 00000000000..41620c47d39
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50380.json
@@ -0,0 +1,21 @@
+{
+ "id": "CVE-2022-50380",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:36.767",
+ "lastModified": "2025-09-18T14:15:36.767",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: /proc/pid/smaps_rollup: fix no vma's null-deref\n\nCommit 258f669e7e88 (\"mm: /proc/pid/smaps_rollup: convert to single value\nseq_file\") introduced a null-deref if there are no vma's in the task in\nshow_smaps_rollup."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/33fc9e26b7cb39f0d4219c875a2451802249c225",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50381.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50381.json
new file mode 100644
index 00000000000..4db202d181f
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50381.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-50381",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:36.873",
+ "lastModified": "2025-09-18T14:15:36.873",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd: fix a crash in mempool_free\n\nThere's a crash in mempool_free when running the lvm test\nshell/lvchange-rebuild-raid.sh.\n\nThe reason for the crash is this:\n* super_written calls atomic_dec_and_test(&mddev->pending_writes) and\n wake_up(&mddev->sb_wait). Then it calls rdev_dec_pending(rdev, mddev)\n and bio_put(bio).\n* so, the process that waited on sb_wait and that is woken up is racing\n with bio_put(bio).\n* if the process wins the race, it calls bioset_exit before bio_put(bio)\n is executed.\n* bio_put(bio) attempts to free a bio into a destroyed bio set - causing\n a crash in mempool_free.\n\nWe fix this bug by moving bio_put before atomic_dec_and_test.\n\nWe also move rdev_dec_pending before atomic_dec_and_test as suggested by\nNeil Brown.\n\nThe function md_end_flush has a similar bug - we must call bio_put before\nwe decrement the number of in-progress bios.\n\n BUG: kernel NULL pointer dereference, address: 0000000000000000\n #PF: supervisor write access in kernel mode\n #PF: error_code(0x0002) - not-present page\n PGD 11557f0067 P4D 11557f0067 PUD 0\n Oops: 0002 [#1] PREEMPT SMP\n CPU: 0 PID: 73 Comm: kworker/0:1 Not tainted 6.1.0-rc3 #5\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-2 04/01/2014\n Workqueue: kdelayd flush_expired_bios [dm_delay]\n RIP: 0010:mempool_free+0x47/0x80\n Code: 48 89 ef 5b 5d ff e0 f3 c3 48 89 f7 e8 32 45 3f 00 48 63 53 08 48 89 c6 3b 53 04 7d 2d 48 8b 43 10 8d 4a 01 48 89 df 89 4b 08 <48> 89 2c d0 e8 b0 45 3f 00 48 8d 7b 30 5b 5d 31 c9 ba 01 00 00 00\n RSP: 0018:ffff88910036bda8 EFLAGS: 00010093\n RAX: 0000000000000000 RBX: ffff8891037b65d8 RCX: 0000000000000001\n RDX: 0000000000000000 RSI: 0000000000000202 RDI: ffff8891037b65d8\n RBP: ffff8891447ba240 R08: 0000000000012908 R09: 00000000003d0900\n R10: 0000000000000000 R11: 0000000000173544 R12: ffff889101a14000\n R13: ffff8891562ac300 R14: ffff889102b41440 R15: ffffe8ffffa00d05\n FS: 0000000000000000(0000) GS:ffff88942fa00000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000000000000 CR3: 0000001102e99000 CR4: 00000000000006b0\n Call Trace:\n \n clone_endio+0xf4/0x1c0 [dm_mod]\n clone_endio+0xf4/0x1c0 [dm_mod]\n __submit_bio+0x76/0x120\n submit_bio_noacct_nocheck+0xb6/0x2a0\n flush_expired_bios+0x28/0x2f [dm_delay]\n process_one_work+0x1b4/0x300\n worker_thread+0x45/0x3e0\n ? rescuer_thread+0x380/0x380\n kthread+0xc2/0x100\n ? kthread_complete_and_exit+0x20/0x20\n ret_from_fork+0x1f/0x30\n \n Modules linked in: brd dm_delay dm_raid dm_mod af_packet uvesafb cfbfillrect cfbimgblt cn cfbcopyarea fb font fbdev tun autofs4 binfmt_misc configfs ipv6 virtio_rng virtio_balloon rng_core virtio_net pcspkr net_failover failover qemu_fw_cfg button mousedev raid10 raid456 libcrc32c async_raid6_recov async_memcpy async_pq raid6_pq async_xor xor async_tx raid1 raid0 md_mod sd_mod t10_pi crc64_rocksoft crc64 virtio_scsi scsi_mod evdev psmouse bsg scsi_common [last unloaded: brd]\n CR2: 0000000000000000\n ---[ end trace 0000000000000000 ]---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/341097ee53573e06ab9fc675d96a052385b851fa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/384ef33d37cefb2ac539d44597d03f06c9b8975c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/732cd66ec19a17f2b9183d7d5b7bdb9c39b0776e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/842f222fc42a9239831e15b1fd49a51c546902cb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/91bd504128a51776472445070e11a3b0f9348c90",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/97ce99984be12b9acb49ddce0f5d8ebb037adbb6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ae7793027766491c5f8635b12d15a5940d3b8698",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b5be563b4356b3089b3245d024cae3f248ba7090",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cf06b162f5b6337b688072a1a47941280b8f7110",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50382.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50382.json
new file mode 100644
index 00000000000..f3535414c8e
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50382.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-50382",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:36.993",
+ "lastModified": "2025-09-18T14:15:36.993",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npadata: Always leave BHs disabled when running ->parallel()\n\nA deadlock can happen when an overloaded system runs ->parallel() in the\ncontext of the current task:\n\n padata_do_parallel\n ->parallel()\n pcrypt_aead_enc/dec\n padata_do_serial\n spin_lock(&reorder->lock) // BHs still enabled\n \n ...\n __do_softirq\n ...\n padata_do_serial\n spin_lock(&reorder->lock)\n\nIt's a bug for BHs to be on in _do_serial as Steffen points out, so\nensure they're off in the \"current task\" case like they are in\npadata_parallel_worker to avoid this situation."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/17afa98bccec4f52203508b3f49b5f948c6fd6ac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/34c3a47d20ae55b3600fed733bf96eafe9c500d5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6cfa9e60c0f88fdec6368e081ab968411cc706b1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7337adb20fcc0aebb50eaff2bc5a8dd9a7c6743d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8e0681dd4eee029eb1d533d06993f7cb091efb73",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50383.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50383.json
new file mode 100644
index 00000000000..7a32bd75906
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50383.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-50383",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:37.113",
+ "lastModified": "2025-09-18T14:15:37.113",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mediatek: vcodec: Can't set dst buffer to done when lat decode error\n\nCore thread will call v4l2_m2m_buf_done to set dst buffer done for\nlat architecture. If lat call v4l2_m2m_buf_done_and_job_finish to\nfree dst buffer when lat decode error, core thread will access kernel\nNULL pointer dereference, then crash."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3568ecd3f3a6d133ab7feffbba34955c8c79bbc4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/66d26ed30056e7d2da3e9c14125ffe6049a4f907",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eeb090420f3477eb5011586709409fc655c2b16c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50384.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50384.json
new file mode 100644
index 00000000000..7d2808440a9
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50384.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-50384",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:37.230",
+ "lastModified": "2025-09-18T14:15:37.230",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: vme_user: Fix possible UAF in tsi148_dma_list_add\n\nSmatch report warning as follows:\n\ndrivers/staging/vme_user/vme_tsi148.c:1757 tsi148_dma_list_add() warn:\n '&entry->list' not removed from list\n\nIn tsi148_dma_list_add(), the error path \"goto err_dma\" will not\nremove entry->list from list->entries, but entry will be freed,\nthen list traversal may cause UAF.\n\nFix by removeing it from list->entries before free()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1f5661388f43df3ac106ce93e67d8d22b16a78ff",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/357057ee55d3c99a5de5abe8150f7bca04f8e53b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/51c0ad3b7c5b01f9314758335a13f157b05fa56d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5cc4eea715a3fcf4e516662f736dfee63979465f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5d2b286eb034af114f67d9967fc3fbc1829bb712",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/85db68fc901da52314ded80aace99f8b684c7815",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a45ba33d398a821147d7e5f16ead7eb125e331e2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cf138759a7e92c75cfc1b7ba705e4108fe330edf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e6b0adff99edf246ba1f8d464530a0438cb1cbda",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50385.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50385.json
new file mode 100644
index 00000000000..8ba4354e171
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50385.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-50385",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:37.353",
+ "lastModified": "2025-09-18T14:15:37.353",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFS: Fix an Oops in nfs_d_automount()\n\nWhen mounting from a NFSv4 referral, path->dentry can end up being a\nnegative dentry, so derive the struct nfs_server from the dentry\nitself instead."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/35e3b6ae84935d0d7ff76cbdaa83411b0ad5e471",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5458bc0f9df639d83471ca384152cc62dbee0aeb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6f3d56783fbed861e483736a7001bdafd0dddd53",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b6fd25d64b0de27991d6bd677f0adf69ad6ff07a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f12377abac15fb4e8698225ac386894f8ae63598",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50386.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50386.json
new file mode 100644
index 00000000000..31d3366ce21
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50386.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-50386",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:37.480",
+ "lastModified": "2025-09-18T14:15:37.480",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix user-after-free\n\nThis uses l2cap_chan_hold_unless_zero() after calling\n__l2cap_get_chan_blah() to prevent the following trace:\n\nBluetooth: l2cap_core.c:static void l2cap_chan_destroy(struct kref\n*kref)\nBluetooth: chan 0000000023c4974d\nBluetooth: parent 00000000ae861c08\n==================================================================\nBUG: KASAN: use-after-free in __mutex_waiter_is_first\nkernel/locking/mutex.c:191 [inline]\nBUG: KASAN: use-after-free in __mutex_lock_common\nkernel/locking/mutex.c:671 [inline]\nBUG: KASAN: use-after-free in __mutex_lock+0x278/0x400\nkernel/locking/mutex.c:729\nRead of size 8 at addr ffff888006a49b08 by task kworker/u3:2/389"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0c108cf3ad386e0084277093b55a351c49e0be27",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/11e40d6c0823f699d8ad501e48d1c3ae4be386cd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/15fc21695eb606bdc5d483b92118ee42610a952d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/35fcbc4243aad7e7d020b7c1dfb14bb888b20a4f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6ffde6e03085874ae22263ff4cef4869f797e84f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7d6f9cb24d2b2f6b6370eac074e2e6b1bafdad45",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/843fc4e386dd84b806a7f07fb062d8c3a44e5364",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d1e894f950ad48897d1a7cb05909ea29d8c3810e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d91fc2836562f299f34e361e089e9fe154da4f73",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50387.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50387.json
new file mode 100644
index 00000000000..908e7721e82
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50387.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-50387",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:37.610",
+ "lastModified": "2025-09-18T14:15:37.610",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hinic: fix the issue of CMDQ memory leaks\n\nWhen hinic_set_cmdq_depth() fails in hinic_init_cmdqs(), the cmdq memory is\nnot released correctly. Fix it."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/363cc87767f6ddcfb9158ad2e2afa2f8d5c4b94e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6016d96a6adf66d61655d85da02e1a4c1deccbd6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6603843c80b16957f5d7d14d897faf13cef2b8b9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9145d512ddff76df88832b29575488199df544a1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50388.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50388.json
new file mode 100644
index 00000000000..c5b1b2da4bd
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50388.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-50388",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:37.723",
+ "lastModified": "2025-09-18T14:15:37.723",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: fix multipath crash caused by flush request when blktrace is enabled\n\nThe flush request initialized by blk_kick_flush has NULL bio,\nand it may be dealt with nvme_end_req during io completion.\nWhen blktrace is enabled, nvme_trace_bio_complete with multipath\nactivated trying to access NULL pointer bio from flush request\nresults in the following crash:\n\n[ 2517.831677] BUG: kernel NULL pointer dereference, address: 000000000000001a\n[ 2517.835213] #PF: supervisor read access in kernel mode\n[ 2517.838724] #PF: error_code(0x0000) - not-present page\n[ 2517.842222] PGD 7b2d51067 P4D 0\n[ 2517.845684] Oops: 0000 [#1] SMP NOPTI\n[ 2517.849125] CPU: 2 PID: 732 Comm: kworker/2:1H Kdump: loaded Tainted: G S 5.15.67-0.cl9.x86_64 #1\n[ 2517.852723] Hardware name: XFUSION 2288H V6/BC13MBSBC, BIOS 1.13 07/27/2022\n[ 2517.856358] Workqueue: nvme_tcp_wq nvme_tcp_io_work [nvme_tcp]\n[ 2517.859993] RIP: 0010:blk_add_trace_bio_complete+0x6/0x30\n[ 2517.863628] Code: 1f 44 00 00 48 8b 46 08 31 c9 ba 04 00 10 00 48 8b 80 50 03 00 00 48 8b 78 50 e9 e5 fe ff ff 0f 1f 44 00 00 41 54 49 89 f4 55 <0f> b6 7a 1a 48 89 d5 e8 3e 1c 2b 00 48 89 ee 4c 89 e7 5d 89 c1 ba\n[ 2517.871269] RSP: 0018:ff7f6a008d9dbcd0 EFLAGS: 00010286\n[ 2517.875081] RAX: ff3d5b4be00b1d50 RBX: 0000000002040002 RCX: ff3d5b0a270f2000\n[ 2517.878966] RDX: 0000000000000000 RSI: ff3d5b0b021fb9f8 RDI: 0000000000000000\n[ 2517.882849] RBP: ff3d5b0b96a6fa00 R08: 0000000000000001 R09: 0000000000000000\n[ 2517.886718] R10: 000000000000000c R11: 000000000000000c R12: ff3d5b0b021fb9f8\n[ 2517.890575] R13: 0000000002000000 R14: ff3d5b0b021fb1b0 R15: 0000000000000018\n[ 2517.894434] FS: 0000000000000000(0000) GS:ff3d5b42bfc80000(0000) knlGS:0000000000000000\n[ 2517.898299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 2517.902157] CR2: 000000000000001a CR3: 00000004f023e005 CR4: 0000000000771ee0\n[ 2517.906053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 2517.909930] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 2517.913761] PKRU: 55555554\n[ 2517.917558] Call Trace:\n[ 2517.921294] \n[ 2517.924982] nvme_complete_rq+0x1c3/0x1e0 [nvme_core]\n[ 2517.928715] nvme_tcp_recv_pdu+0x4d7/0x540 [nvme_tcp]\n[ 2517.932442] nvme_tcp_recv_skb+0x4f/0x240 [nvme_tcp]\n[ 2517.936137] ? nvme_tcp_recv_pdu+0x540/0x540 [nvme_tcp]\n[ 2517.939830] tcp_read_sock+0x9c/0x260\n[ 2517.943486] nvme_tcp_try_recv+0x65/0xa0 [nvme_tcp]\n[ 2517.947173] nvme_tcp_io_work+0x64/0x90 [nvme_tcp]\n[ 2517.950834] process_one_work+0x1e8/0x390\n[ 2517.954473] worker_thread+0x53/0x3c0\n[ 2517.958069] ? process_one_work+0x390/0x390\n[ 2517.961655] kthread+0x10c/0x130\n[ 2517.965211] ? set_kthread_struct+0x40/0x40\n[ 2517.968760] ret_from_fork+0x1f/0x30\n[ 2517.972285] \n\nTo avoid this situation, add a NULL check for req->bio before\ncalling trace_block_bio_complete."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/183c2aaef40a91acbaae45c3824d6cde7bb62b10",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3659fb5ac29a5e6102bebe494ac789fd47fb78f4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4df413d46960f11c8c105238cfc3f5ff4c95c003",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f13301a69ababa6c2236fb4f0393b7e914e7e1e0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fcd2d199486033223e9b2a6a7f9a01dd0327eac3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50389.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50389.json
new file mode 100644
index 00000000000..8fb48800990
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50389.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-50389",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:37.853",
+ "lastModified": "2025-09-18T14:15:37.853",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak\n\nIn crb_acpi_add(), we get the TPM2 table to retrieve information\nlike start method, and then assign them to the priv data, so the\nTPM2 table is not used after the init, should be freed, call\nacpi_put_table() to fix the memory leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/08fd965521d0e172d540cf945517810895fcb199",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0bd9b4be721c776f77adcaf34105dfca3007ddb9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1af2232b13837ce0f3a082b9f43735b09aafc367",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2fcd3dc8b97a14f1672729c86b7041a1a89b052a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/37e90c374dd11cf4919c51e847c6d6ced0abc555",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/927860dfa161ae8392a264197257dbdc52b26b0f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/986cd9a9b95423e35a2cbb8e9105aec0e0d7f337",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b0785edaf649e5f04dc7f75533e810f4c00e4106",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50390.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50390.json
new file mode 100644
index 00000000000..60c533018ea
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50390.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-50390",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:37.997",
+ "lastModified": "2025-09-18T14:15:37.997",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED\n\nShifting signed 32-bit value by 31 bits is undefined, so changing\nsignificant bit to unsigned. The UBSAN warning calltrace like below:\n\nUBSAN: shift-out-of-bounds in ./include/drm/ttm/ttm_tt.h:122:26\nleft shift of 1 by 31 places cannot be represented in type 'int'\nCall Trace:\n \n dump_stack_lvl+0x7d/0xa5\n dump_stack+0x15/0x1b\n ubsan_epilogue+0xe/0x4e\n __ubsan_handle_shift_out_of_bounds+0x1e7/0x20c\n ttm_bo_move_memcpy+0x3b4/0x460 [ttm]\n bo_driver_move+0x32/0x40 [drm_vram_helper]\n ttm_bo_handle_move_mem+0x118/0x200 [ttm]\n ttm_bo_validate+0xfa/0x220 [ttm]\n drm_gem_vram_pin_locked+0x70/0x1b0 [drm_vram_helper]\n drm_gem_vram_pin+0x48/0xb0 [drm_vram_helper]\n drm_gem_vram_plane_helper_prepare_fb+0x53/0xe0 [drm_vram_helper]\n drm_gem_vram_simple_display_pipe_prepare_fb+0x26/0x30 [drm_vram_helper]\n drm_simple_kms_plane_prepare_fb+0x4d/0xe0 [drm_kms_helper]\n drm_atomic_helper_prepare_planes+0xda/0x210 [drm_kms_helper]\n drm_atomic_helper_commit+0xc3/0x1e0 [drm_kms_helper]\n drm_atomic_commit+0x9c/0x160 [drm]\n drm_client_modeset_commit_atomic+0x33a/0x380 [drm]\n drm_client_modeset_commit_locked+0x77/0x220 [drm]\n drm_client_modeset_commit+0x31/0x60 [drm]\n __drm_fb_helper_restore_fbdev_mode_unlocked+0xa7/0x170 [drm_kms_helper]\n drm_fb_helper_set_par+0x51/0x90 [drm_kms_helper]\n fbcon_init+0x316/0x790\n visual_init+0x113/0x1d0\n do_bind_con_driver+0x2a3/0x5c0\n do_take_over_console+0xa9/0x270\n do_fbcon_takeover+0xa1/0x170\n do_fb_registered+0x2a8/0x340\n fbcon_fb_registered+0x47/0xe0\n register_framebuffer+0x294/0x4a0\n __drm_fb_helper_initial_config_and_unlock+0x43c/0x880 [drm_kms_helper]\n drm_fb_helper_initial_config+0x52/0x80 [drm_kms_helper]\n drm_fbdev_client_hotplug+0x156/0x1b0 [drm_kms_helper]\n drm_fbdev_generic_setup+0xfc/0x290 [drm_kms_helper]\n bochs_pci_probe+0x6ca/0x772 [bochs]\n local_pci_probe+0x4d/0xb0\n pci_device_probe+0x119/0x320\n really_probe+0x181/0x550\n __driver_probe_device+0xc6/0x220\n driver_probe_device+0x32/0x100\n __driver_attach+0x195/0x200\n bus_for_each_dev+0xbb/0x120\n driver_attach+0x27/0x30\n bus_add_driver+0x22e/0x2f0\n driver_register+0xa9/0x190\n __pci_register_driver+0x90/0xa0\n bochs_pci_driver_init+0x52/0x1000 [bochs]\n do_one_initcall+0x76/0x430\n do_init_module+0x61/0x28a\n load_module+0x1f82/0x2e50\n __do_sys_finit_module+0xf8/0x190\n __x64_sys_finit_module+0x23/0x30\n do_syscall_64+0x58/0x80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n "
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2ff0309b73d86e8591881ac035af06e01c112e89",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/387659939c00156f8d6bab0fbc55b4eaf2b6bc5b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6528971fdce0dfc0a28fec42c151a1eccdabadf5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50391.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50391.json
new file mode 100644
index 00000000000..1f4efba71c1
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50391.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-50391",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:38.127",
+ "lastModified": "2025-09-18T14:15:38.127",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mempolicy: fix memory leak in set_mempolicy_home_node system call\n\nWhen encountering any vma in the range with policy other than MPOL_BIND or\nMPOL_PREFERRED_MANY, an error is returned without issuing a mpol_put on\nthe policy just allocated with mpol_dup().\n\nThis allows arbitrary users to leak kernel memory."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0ce4cc6d269ddc448a825955b495f662f5d9e153",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/38ce7c9bdfc228c14d7621ba36d3eebedd9d4f76",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4ca0eb6b2f3add8c5daefb726ce57dc95d103d33",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50392.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50392.json
new file mode 100644
index 00000000000..e1010325595
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50392.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-50392",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:38.250",
+ "lastModified": "2025-09-18T14:15:38.250",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe()\n\nThe node returned by of_parse_phandle() with refcount incremented,\nof_node_put() needs be called when finish using it. So add it in the\nerror path in mt8183_mt6358_ts3a227_max98357_dev_probe()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/156b0c19c1a44153e34cfdfa5937546a93dcb288",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/38eef3be38ab895959c442702864212cc3beb96c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/574bd4d14a9297a1c69ad41001caf00fdd17d305",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/82f7c814edda353b4781f356d3ab90e943d5eac4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50393.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50393.json
new file mode 100644
index 00000000000..b735e81b758
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50393.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-50393",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:38.380",
+ "lastModified": "2025-09-18T14:15:38.380",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: SDMA update use unlocked iterator\n\nSDMA update page table may be called from unlocked context, this\ngenerate below warning. Use unlocked iterator to handle this case.\n\nWARNING: CPU: 0 PID: 1475 at\ndrivers/dma-buf/dma-resv.c:483 dma_resv_iter_next\nCall Trace:\n dma_resv_iter_first+0x43/0xa0\n amdgpu_vm_sdma_update+0x69/0x2d0 [amdgpu]\n amdgpu_vm_ptes_update+0x29c/0x870 [amdgpu]\n amdgpu_vm_update_range+0x2f6/0x6c0 [amdgpu]\n svm_range_unmap_from_gpus+0x115/0x300 [amdgpu]\n svm_range_cpu_invalidate_pagetables+0x510/0x5e0 [amdgpu]\n __mmu_notifier_invalidate_range_start+0x1d3/0x230\n unmap_vmas+0x140/0x150\n unmap_region+0xa8/0x110"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3913f0179ba366f7d7d160c506ce00de1602bbc4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4ff3d517cebe8a29b9f3c302b5292bb1ce291e00",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b892c57a3a04c8de247ab9ee08a0a8cf53290e19",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50394.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50394.json
new file mode 100644
index 00000000000..5568a8a6201
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50394.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-50394",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:38.490",
+ "lastModified": "2025-09-18T14:15:38.490",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: ismt: Fix an out-of-bounds bug in ismt_access()\n\nWhen the driver does not check the data from the user, the variable\n'data->block[0]' may be very large to cause an out-of-bounds bug.\n\nThe following log can reveal it:\n\n[ 33.995542] i2c i2c-1: ioctl, cmd=0x720, arg=0x7ffcb3dc3a20\n[ 33.995978] ismt_smbus 0000:00:05.0: I2C_SMBUS_BLOCK_DATA: WRITE\n[ 33.996475] ==================================================================\n[ 33.996995] BUG: KASAN: out-of-bounds in ismt_access.cold+0x374/0x214b\n[ 33.997473] Read of size 18446744073709551615 at addr ffff88810efcfdb1 by task ismt_poc/485\n[ 33.999450] Call Trace:\n[ 34.001849] memcpy+0x20/0x60\n[ 34.002077] ismt_access.cold+0x374/0x214b\n[ 34.003382] __i2c_smbus_xfer+0x44f/0xfb0\n[ 34.004007] i2c_smbus_xfer+0x10a/0x390\n[ 34.004291] i2cdev_ioctl_smbus+0x2c8/0x710\n[ 34.005196] i2cdev_ioctl+0x5ec/0x74c\n\nFix this bug by checking the size of 'data->block[0]' first."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/03b7ef7a6c5ca1ff553470166b4919db88b810f6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/233348a04becf133283f0076e20b317302de21d9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/39244cc754829bf707dccd12e2ce37510f5b1f8d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4a7bb1d93addb2f67e36fed00a53cb7f270d7b7a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/96c12fd0ec74641295e1c3c34dea3dce1b6c3422",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9ac541a0898e8ec187a3fa7024b9701cffae6bf2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a642469d464b2780a25a49b51ae56623c65eac34",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bfe41d966c860a8ad4c735639d616da270c92735",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cdcbae2c5003747ddfd14e29db9c1d5d7e7c44dd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50395.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50395.json
new file mode 100644
index 00000000000..f0a3a70bcec
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50395.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-50395",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:38.620",
+ "lastModified": "2025-09-18T14:15:38.620",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nintegrity: Fix memory leakage in keyring allocation error path\n\nKey restriction is allocated in integrity_init_keyring(). However, if\nkeyring allocation failed, it is not freed, causing memory leaks."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/29d6c69ba4b96a1de0376e44e5f8b38b13ec8803",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/39419ef7af0916cc3620ecf1ed42d29659109bf3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3bd737289c26be3cee4b9afaf61ef784a2af9d6e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/57e49ad12f8f5df0c48e1710c54b147a05a10c32",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9b7c44885a07c5ee7f9bf3aa3c9c72fb110c8d22",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c591c48842f08d30ec6b8416757831985ed9a315",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50396.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50396.json
new file mode 100644
index 00000000000..727eaa37890
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50396.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-50396",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:38.737",
+ "lastModified": "2025-09-18T14:15:38.737",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: fix memory leak in tcindex_set_parms\n\nSyzkaller reports a memory leak as follows:\n====================================\nBUG: memory leak\nunreferenced object 0xffff88810c287f00 (size 256):\n comm \"syz-executor105\", pid 3600, jiffies 4294943292 (age 12.990s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [] kmalloc_trace+0x20/0x90 mm/slab_common.c:1046\n [] kmalloc include/linux/slab.h:576 [inline]\n [] kmalloc_array include/linux/slab.h:627 [inline]\n [] kcalloc include/linux/slab.h:659 [inline]\n [] tcf_exts_init include/net/pkt_cls.h:250 [inline]\n [] tcindex_set_parms+0xa7/0xbe0 net/sched/cls_tcindex.c:342\n [] tcindex_change+0xdf/0x120 net/sched/cls_tcindex.c:553\n [] tc_new_tfilter+0x4f2/0x1100 net/sched/cls_api.c:2147\n [] rtnetlink_rcv_msg+0x4dc/0x5d0 net/core/rtnetlink.c:6082\n [] netlink_rcv_skb+0x87/0x1d0 net/netlink/af_netlink.c:2540\n [] netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]\n [] netlink_unicast+0x397/0x4c0 net/netlink/af_netlink.c:1345\n [] netlink_sendmsg+0x396/0x710 net/netlink/af_netlink.c:1921\n [] sock_sendmsg_nosec net/socket.c:714 [inline]\n [] sock_sendmsg+0x56/0x80 net/socket.c:734\n [] ____sys_sendmsg+0x178/0x410 net/socket.c:2482\n [] ___sys_sendmsg+0xa8/0x110 net/socket.c:2536\n [] __sys_sendmmsg+0x105/0x330 net/socket.c:2622\n [] __do_sys_sendmmsg net/socket.c:2651 [inline]\n [] __se_sys_sendmmsg net/socket.c:2648 [inline]\n [] __x64_sys_sendmmsg+0x24/0x30 net/socket.c:2648\n [] do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n [] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n [] entry_SYSCALL_64_after_hwframe+0x63/0xcd\n====================================\n\nKernel uses tcindex_change() to change an existing\nfilter properties.\n\nYet the problem is that, during the process of changing,\nif `old_r` is retrieved from `p->perfect`, then\nkernel uses tcindex_alloc_perfect_hash() to newly\nallocate filter results, uses tcindex_filter_result_init()\nto clear the old filter result, without destroying\nits tcf_exts structure, which triggers the above memory leak.\n\nTo be more specific, there are only two source for the `old_r`,\naccording to the tcindex_lookup(). `old_r` is retrieved from\n`p->perfect`, or `old_r` is retrieved from `p->h`.\n\n * If `old_r` is retrieved from `p->perfect`, kernel uses\ntcindex_alloc_perfect_hash() to newly allocate the\nfilter results. Then `r` is assigned with `cp->perfect + handle`,\nwhich is newly allocated. So condition `old_r && old_r != r` is\ntrue in this situation, and kernel uses tcindex_filter_result_init()\nto clear the old filter result, without destroying\nits tcf_exts structure\n\n * If `old_r` is retrieved from `p->h`, then `p->perfect` is NULL\naccording to the tcindex_lookup(). Considering that `cp->h`\nis directly copied from `p->h` and `p->perfect` is NULL,\n`r` is assigned with `tcindex_lookup(cp, handle)`, whose value\nshould be the same as `old_r`, so condition `old_r && old_r != r`\nis false in this situation, kernel ignores using\ntcindex_filter_result_init() to clear the old filter result.\n\nSo only when `old_r` is retrieved from `p->perfect` does kernel use\ntcindex_filter_result_init() to clear the old filter result, which\ntriggers the above memory leak.\n\nConsidering that there already exists a tc_filter_wq workqueue\nto destroy the old tcindex_d\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/399ab7fe0fa0d846881685fd4e57e9a8ef7559f7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/55ac68b53f1cea1926ee2313afc5d66b91daad71",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6c55953e232ea668731091d111066521f3b7719b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b314f6c3512108d7a656c5caf07c82d1bbbdc0f1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c4de6057e7c6654983acb63d939d26ac0d7bbf39",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/facc4405e8b7407e03216207b1d1d640127de0c8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50397.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50397.json
new file mode 100644
index 00000000000..79d714b0bbc
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50397.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-50397",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:38.867",
+ "lastModified": "2025-09-18T14:15:38.867",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/ieee802154: reject zero-sized raw_sendmsg()\n\nsyzbot is hitting skb_assert_len() warning at raw_sendmsg() for ieee802154\nsocket. What commit dc633700f00f726e (\"net/af_packet: check len when\nmin_header_len equals to 0\") does also applies to ieee802154 socket."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/03ac583eefc9bc980213c53a79abc32a5539756e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3a4d061c699bd3eedc80dc97a4b2a2e1af83c6f5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/51d4260585cf36106d29dcefeafa09d9cd5972cf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/55043e109f435472b0663fa2a4df1cc308a978ad",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/67cb80a9d2c83edac0e42aaa91ed4dd527cec284",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/77bfd26cbb61a9f49ecb83729f0fd1352c17ddd8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50398.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50398.json
new file mode 100644
index 00000000000..9e0846540cd
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50398.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-50398",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:39.000",
+ "lastModified": "2025-09-18T14:15:39.000",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/dp: add atomic_check to bridge ops\n\nDRM commit_tails() will disable downstream crtc/encoder/bridge if\nboth disable crtc is required and crtc->active is set before pushing\na new frame downstream.\n\nThere is a rare case that user space display manager issue an extra\nscreen update immediately followed by close DRM device while down\nstream display interface is disabled. This extra screen update will\ntimeout due to the downstream interface is disabled but will cause\ncrtc->active be set. Hence the followed commit_tails() called by\ndrm_release() will pass the disable downstream crtc/encoder/bridge\nconditions checking even downstream interface is disabled.\nThis cause the crash to happen at dp_bridge_disable() due to it trying\nto access the main link register to push the idle pattern out while main\nlink clocks is disabled.\n\nThis patch adds atomic_check to prevent the extra frame will not\nbe pushed down if display interface is down so that crtc->active\nwill not be set neither. This will fail the conditions checking\nof disabling down stream crtc/encoder/bridge which prevent\ndrm_release() from calling dp_bridge_disable() so that crash\nat dp_bridge_disable() prevented.\n\nThere is no protection in the DRM framework to check if the display\npipeline has been already disabled before trying again. The only\ncheck is the crtc_state->active but this is controlled by usermode\nusing UAPI. Hence if the usermode sets this and then crashes, the\ndriver needs to protect against double disable.\n\nSError Interrupt on CPU7, code 0x00000000be000411 -- SError\nCPU: 7 PID: 3878 Comm: Xorg Not tainted 5.19.0-stb-cbq #19\nHardware name: Google Lazor (rev3 - 8) (DT)\npstate: a04000c9 (NzCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : __cmpxchg_case_acq_32+0x14/0x2c\nlr : do_raw_spin_lock+0xa4/0xdc\nsp : ffffffc01092b6a0\nx29: ffffffc01092b6a0 x28: 0000000000000028 x27: 0000000000000038\nx26: 0000000000000004 x25: ffffffd2973dce48 x24: 0000000000000000\nx23: 00000000ffffffff x22: 00000000ffffffff x21: ffffffd2978d0008\nx20: ffffffd2978d0008 x19: ffffff80ff759fc0 x18: 0000000000000000\nx17: 004800a501260460 x16: 0441043b04600438 x15: 04380000089807d0\nx14: 07b0089807800780 x13: 0000000000000000 x12: 0000000000000000\nx11: 0000000000000438 x10: 00000000000007d0 x9 : ffffffd2973e09e4\nx8 : ffffff8092d53300 x7 : ffffff808902e8b8 x6 : 0000000000000001\nx5 : ffffff808902e880 x4 : 0000000000000000 x3 : ffffff80ff759fc0\nx2 : 0000000000000001 x1 : 0000000000000000 x0 : ffffff80ff759fc0\nKernel panic - not syncing: Asynchronous SError Interrupt\nCPU: 7 PID: 3878 Comm: Xorg Not tainted 5.19.0-stb-cbq #19\nHardware name: Google Lazor (rev3 - 8) (DT)\nCall trace:\n dump_backtrace.part.0+0xbc/0xe4\n show_stack+0x24/0x70\n dump_stack_lvl+0x68/0x84\n dump_stack+0x18/0x34\n panic+0x14c/0x32c\n nmi_panic+0x58/0x7c\n arm64_serror_panic+0x78/0x84\n do_serror+0x40/0x64\n el1h_64_error_handler+0x30/0x48\n el1h_64_error+0x68/0x6c\n __cmpxchg_case_acq_32+0x14/0x2c\n _raw_spin_lock_irqsave+0x38/0x4c\n lock_timer_base+0x40/0x78\n __mod_timer+0xf4/0x25c\n schedule_timeout+0xd4/0xfc\n __wait_for_common+0xac/0x140\n wait_for_completion_timeout+0x2c/0x54\n dp_ctrl_push_idle+0x40/0x88\n dp_bridge_disable+0x24/0x30\n drm_atomic_bridge_chain_disable+0x90/0xbc\n drm_atomic_helper_commit_modeset_disables+0x198/0x444\n msm_atomic_commit_tail+0x1d0/0x374\n commit_tail+0x80/0x108\n drm_atomic_helper_commit+0x118/0x11c\n drm_atomic_commit+0xb4/0xe0\n drm_client_modeset_commit_atomic+0x184/0x224\n drm_client_modeset_commit_locked+0x58/0x160\n drm_client_modeset_commit+0x3c/0x64\n __drm_fb_helper_restore_fbdev_mode_unlocked+0x98/0xac\n drm_fb_helper_set_par+0x74/0x80\n drm_fb_helper_hotplug_event+0xdc/0xe0\n __drm_fb_helper_restore_fbdev_mode_unlocked+0x7c/0xac\n drm_fb_helper_restore_fbdev_mode_unlocked+0x20/0x2c\n drm_fb_helper_lastclose+0x20/0x2c\n drm_lastclose+0x44/0x6c\n drm_release+0x88/0xd4\n __fput+0x104/0x220\n ____fput+0x1c/0x28\n task_work_run+0x8c/0x100\n d\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3a661247967a6f3c99a95a8ba4c8073c5846ea4b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d106b866439c63a618d020477bfbe7b46c759657",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50399.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50399.json
new file mode 100644
index 00000000000..79629634f2f
--- /dev/null
+++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50399.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-50399",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:39.120",
+ "lastModified": "2025-09-18T14:15:39.120",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: atomisp: prevent integer overflow in sh_css_set_black_frame()\n\nThe \"height\" and \"width\" values come from the user so the \"height * width\"\nmultiplication can overflow."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3ad290194bb06979367622e47357462836c1d3b4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a549517e4b761f3940011db30320cb8c9badde54",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a560aeac2f2d284903b5900774765d7fc61547bc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-504xx/CVE-2022-50400.json b/CVE-2022/CVE-2022-504xx/CVE-2022-50400.json
new file mode 100644
index 00000000000..630dd75e9bd
--- /dev/null
+++ b/CVE-2022/CVE-2022-504xx/CVE-2022-50400.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-50400",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:39.240",
+ "lastModified": "2025-09-18T14:15:39.240",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: greybus: audio_helper: remove unused and wrong debugfs usage\n\nIn the greybus audio_helper code, the debugfs file for the dapm has the\npotential to be removed and memory will be leaked. There is also the\nvery real potential for this code to remove ALL debugfs entries from the\nsystem, and it seems like this is what will really happen if this code\never runs. This all is very wrong as the greybus audio driver did not\ncreate this debugfs file, the sound core did and controls the lifespan\nof it.\n\nSo remove all of the debugfs logic from the audio_helper code as there's\nno way it could be correct. If this really is needed, it can come back\nwith a fixup for the incorrect usage of the debugfs_lookup() call which\nis what caused this to be noticed at all."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4dab0d27a4211a27135a6899d6c737e6e0759a11",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5699afbff1fa2972722e863906c0320d55dd4d58",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d0febad83e29d85bb66e4f5cac0115b022403338",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d517cdeb904ddc0cbebcc959d43596426cac40b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d835fa49d9589a780ff0d001bb7e6323238a4afb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-526xx/CVE-2023-52648.json b/CVE-2023/CVE-2023-526xx/CVE-2023-52648.json
index 6251bbcbf73..e80f0e50bf8 100644
--- a/CVE-2023/CVE-2023-526xx/CVE-2023-52648.json
+++ b/CVE-2023/CVE-2023-526xx/CVE-2023-52648.json
@@ -2,8 +2,8 @@
"id": "CVE-2023-52648",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:07.217",
- "lastModified": "2024-11-21T08:40:16.977",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:19:47.870",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,131 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: drm/vmwgfx: desasignar la superficie antes de restablecerla en un estado plano. Cambiar a un nuevo estado plano requiere eliminar la referencia de todas las superficies retenidas. En el trabajo requerido para los cursores de mob, las superficies mapeadas comenzaron a almacenarse en cach\u00e9, pero la variable que indica si la superficie est\u00e1 actualmente mapeada no se restableci\u00f3. Esto provoca fallos ya que el estado duplicado, incorrectamente, indica que esa superficie est\u00e1 mapeada incluso cuando no hay ninguna superficie presente. Esto se debe a que despu\u00e9s de eliminar la referencia a la superficie, es perfectamente posible que el avi\u00f3n est\u00e9 respaldado por un bo en lugar de una superficie. Restablezca el indicador de superficie asignada al eliminar la referencia a la superficie del estado del plano para corregir las desreferencias nulas en la limpieza. Soluciona fallas en KDE KWin 6.0 en Wayland: Ups: 0000 [#1] PREEMPT SMP PTI CPU: 4 PID: 2533 Comm: kwin_wayland Not tainted 6.7.0-rc3-vmwgfx #2 Nombre del hardware: VMware, Inc. VMware Virtual Platform/ Plataforma de referencia de escritorio 440BX, BIOS 6.00 12/11/2020 RIP: 0010:vmw_du_cursor_plane_cleanup_fb+0x124/0x140 [vmwgfx] C\u00f3digo: 00 00 00 75 3a 48 83 c4 10 5b 5d c3 cc cc cc 48 8b b 3a8 00 00 00 48 c7 c7 99 90 43 c0 e8 93 c5 db ca 48 8b 83 a8 00 00 00 <48> 8b 78 28 e8 e3 f> RSP: 0018:ffffb6b98216fa80 EFLAGS: 00010246 RAX: 0000000000000000 : ffff969d84cdcb00 RCX: 00000000000000027 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff969e75f21600 RBP: ffff969d4143dc50 R08: 0000000000000000 R09: ffffb6b98216f920 R10: 0000000000000003 R11: 9e7feb3b10 R12: 0000000000000000 R13: 0000000000000000 R14: 000000000000027b R15: ffff969d49c9fc00 FS: 00007f1e8f1b4180(0000) e75f00000(0000) knlGS:0000000000000000 CS: 0010 DS : 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000028 CR3: 0000000104006004 CR4: 00000000003706f0 Seguimiento de llamadas: ? __morir+0x23/0x70 ? page_fault_oops+0x171/0x4e0? exc_page_fault+0x7f/0x180? asm_exc_page_fault+0x26/0x30? vmw_du_cursor_plane_cleanup_fb+0x124/0x140 [vmwgfx] drm_atomic_helper_cleanup_planes+0x9b/0xc0 commit_tail+0xd1/0x130 drm_atomic_helper_commit+0x11a/0x140 drm_atomic_commit+0x97/0xd0 ? __pfx___drm_printfn_info+0x10/0x10 drm_atomic_helper_update_plane+0xf5/0x160 drm_mode_cursor_universal+0x10e/0x270 drm_mode_cursor_common+0x102/0x230 ? __pfx_drm_mode_cursor2_ioctl+0x10/0x10 drm_ioctl_kernel+0xb2/0x110 drm_ioctl+0x26d/0x4b0 ? __pfx_drm_mode_cursor2_ioctl+0x10/0x10 ? __pfx_drm_ioctl+0x10/0x10 vmw_generic_ioctl+0xa4/0x110 [vmwgfx] __x64_sys_ioctl+0x94/0xd0 do_syscall_64+0x61/0xe0 ? __x64_sys_ioctl+0xaf/0xd0 ? syscall_exit_to_user_mode+0x2b/0x40? do_syscall_64+0x70/0xe0? __x64_sys_ioctl+0xaf/0xd0 ? syscall_exit_to_user_mode+0x2b/0x40? do_syscall_64+0x70/0xe0? exc_page_fault+0x7f/0x180 Entry_SYSCALL_64_after_hwframe+0x6e/0x76 RIP: 0033:0x7f1e93f279ed C\u00f3digo: 04 25 28 00 00 00 48 89 45 c8 31 c0 48 8d 45 10 c7 45 b0 10 00 00 00 48 89 45 b8 48 8d 45 d0 48 89 45 c0 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff f> RSP: 002b:00007ffca0faf600 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 55db876ed2c0 RCX: 00007f1e93f279ed RDX: 00007ffca0faf6c0 RSI: 00000000c02464bb RDI: 0000000000000015 RBP: 00007ffca0faf650 R08: 000055db87184010 R09: 0000000000000007 R10: 000055db886471a0 R11: 0000000000000246 R12: 00007ffca0faf6c0 R13: 0000c02464bb R14: 0000000000000015 R15: 00007ffca0faf790 M\u00f3dulos vinculados en: snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 fib_ipv6 nft_fib nft_reject_ine> CR2: 0000000000000028 ---[ seguimiento final 0000000000000000 ]--- RIP: 0010:vmw_du_cursor_plane_cleanup_fb+0x124/0x140 [vmwgfx] C\u00f3digo: 00 00 00 75 3a 48 83 c4 10 5b 5d c3 cc cc cc 48 8b b3 00 00 00 48 c7 c7 99 90 43 c0 e8 93 c5 db ca 48 8b 83 a8 00 00 00 <48> 8b 78 28 e8 e3 f> RSP: 0018:ffffb6b98216fa80 ---truncado---"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-476"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.19",
+ "versionEndExcluding": "6.6.24",
+ "matchCriteriaId": "C3E0CEE0-1C0E-4054-ACD3-3842DA29EED9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.12",
+ "matchCriteriaId": "6BE9771A-BAFD-4624-95F9-58D536540C53"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.3",
+ "matchCriteriaId": "4C59BBC3-6495-4A77-9C82-55EC7CDF5E02"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/0a23f95af7f28dae7c0f7c82578ca5e1a239d461",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/105f72cc48c4c93f4578fcc61e06276471858e92",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/27571c64f1855881753e6f33c3186573afbab7ba",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/75baad63c033b3b900d822bffbc96c9d3649bc75",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/0a23f95af7f28dae7c0f7c82578ca5e1a239d461",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/105f72cc48c4c93f4578fcc61e06276471858e92",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/27571c64f1855881753e6f33c3186573afbab7ba",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/75baad63c033b3b900d822bffbc96c9d3649bc75",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-526xx/CVE-2023-52652.json b/CVE-2023/CVE-2023-526xx/CVE-2023-52652.json
index f4c909b78b5..b7fb7bf183a 100644
--- a/CVE-2023/CVE-2023-526xx/CVE-2023-52652.json
+++ b/CVE-2023/CVE-2023-526xx/CVE-2023-52652.json
@@ -2,8 +2,8 @@
"id": "CVE-2023-52652",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T13:15:48.427",
- "lastModified": "2024-11-21T08:40:17.397",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:42:06.183",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,55 +15,173 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: NTB: corrige una posible fuga de nombre en ntb_register_device() Si device_register() falla en ntb_register_device(), se debe liberar el nombre del dispositivo asignado por dev_set_name(). Seg\u00fan el comentario en device_register(), las personas que llaman deben usar put_device() para abandonar la referencia en la ruta de error. As\u00ed que solucione este problema llamando a put_device() en la ruta del error para que el nombre pueda liberarse en kobject_cleanup(). Como resultado de esto, put_device() en la ruta de error de ntb_register_device() se elimina y se devuelve el error real. [mani: mensaje de confirmaci\u00f3n reformulado]"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "4.2",
+ "versionEndExcluding": "5.15.153",
+ "matchCriteriaId": "0EDE9C4B-B0A1-4A04-AC1B-6113A40C3868"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.16",
+ "versionEndExcluding": "6.1.83",
+ "matchCriteriaId": "121A07F6-F505-4C47-86BF-9BB6CC7B6C19"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.23",
+ "matchCriteriaId": "E00814DC-0BA7-431A-9926-80FEB4A96C68"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.11",
+ "matchCriteriaId": "9B95D3A6-E162-47D5-ABFC-F3FA74FA7CFD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.2",
+ "matchCriteriaId": "543A75FF-25B8-4046-A514-1EA8EDD87AB1"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/6632a54ac8057cc0b0d789c6f73883e871bcd25c",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/913421f9f7fd8324dcc41753d0f28b52e177ef04",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a039690d323221eb5865f1f31db3ec264e7a14b6",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a62b9f3d7bbfac874cc0c638bc1776dcf1f8ec06",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/aebfdfe39b9327a3077d0df8db3beb3160c9bdd0",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/e8025439ef8e16029dc313d78a351ef192469b7b",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/6632a54ac8057cc0b0d789c6f73883e871bcd25c",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/913421f9f7fd8324dcc41753d0f28b52e177ef04",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a039690d323221eb5865f1f31db3ec264e7a14b6",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a62b9f3d7bbfac874cc0c638bc1776dcf1f8ec06",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/aebfdfe39b9327a3077d0df8db3beb3160c9bdd0",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/e8025439ef8e16029dc313d78a351ef192469b7b",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53369.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53369.json
new file mode 100644
index 00000000000..0e5b5bdeba7
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53369.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2023-53369",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:39.373",
+ "lastModified": "2025-09-18T14:15:39.373",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dcb: choose correct policy to parse DCB_ATTR_BCN\n\nThe dcbnl_bcn_setcfg uses erroneous policy to parse tb[DCB_ATTR_BCN],\nwhich is introduced in commit 859ee3c43812 (\"DCB: Add support for DCB\nBCN\"). Please see the comment in below code\n\nstatic int dcbnl_bcn_setcfg(...)\n{\n ...\n ret = nla_parse_nested_deprecated(..., dcbnl_pfc_up_nest, .. )\n // !!! dcbnl_pfc_up_nest for attributes\n // DCB_PFC_UP_ATTR_0 to DCB_PFC_UP_ATTR_ALL in enum dcbnl_pfc_up_attrs\n ...\n for (i = DCB_BCN_ATTR_RP_0; i <= DCB_BCN_ATTR_RP_7; i++) {\n // !!! DCB_BCN_ATTR_RP_0 to DCB_BCN_ATTR_RP_7 in enum dcbnl_bcn_attrs\n ...\n value_byte = nla_get_u8(data[i]);\n ...\n }\n ...\n for (i = DCB_BCN_ATTR_BCNA_0; i <= DCB_BCN_ATTR_RI; i++) {\n // !!! DCB_BCN_ATTR_BCNA_0 to DCB_BCN_ATTR_RI in enum dcbnl_bcn_attrs\n ...\n value_int = nla_get_u32(data[i]);\n ...\n }\n ...\n}\n\nThat is, the nla_parse_nested_deprecated uses dcbnl_pfc_up_nest\nattributes to parse nlattr defined in dcbnl_pfc_up_attrs. But the\nfollowing access code fetch each nlattr as dcbnl_bcn_attrs attributes.\nBy looking up the associated nla_policy for dcbnl_bcn_attrs. We can find\nthe beginning part of these two policies are \"same\".\n\nstatic const struct nla_policy dcbnl_pfc_up_nest[...] = {\n [DCB_PFC_UP_ATTR_0] = {.type = NLA_U8},\n [DCB_PFC_UP_ATTR_1] = {.type = NLA_U8},\n [DCB_PFC_UP_ATTR_2] = {.type = NLA_U8},\n [DCB_PFC_UP_ATTR_3] = {.type = NLA_U8},\n [DCB_PFC_UP_ATTR_4] = {.type = NLA_U8},\n [DCB_PFC_UP_ATTR_5] = {.type = NLA_U8},\n [DCB_PFC_UP_ATTR_6] = {.type = NLA_U8},\n [DCB_PFC_UP_ATTR_7] = {.type = NLA_U8},\n [DCB_PFC_UP_ATTR_ALL] = {.type = NLA_FLAG},\n};\n\nstatic const struct nla_policy dcbnl_bcn_nest[...] = {\n [DCB_BCN_ATTR_RP_0] = {.type = NLA_U8},\n [DCB_BCN_ATTR_RP_1] = {.type = NLA_U8},\n [DCB_BCN_ATTR_RP_2] = {.type = NLA_U8},\n [DCB_BCN_ATTR_RP_3] = {.type = NLA_U8},\n [DCB_BCN_ATTR_RP_4] = {.type = NLA_U8},\n [DCB_BCN_ATTR_RP_5] = {.type = NLA_U8},\n [DCB_BCN_ATTR_RP_6] = {.type = NLA_U8},\n [DCB_BCN_ATTR_RP_7] = {.type = NLA_U8},\n [DCB_BCN_ATTR_RP_ALL] = {.type = NLA_FLAG},\n // from here is somewhat different\n [DCB_BCN_ATTR_BCNA_0] = {.type = NLA_U32},\n ...\n [DCB_BCN_ATTR_ALL] = {.type = NLA_FLAG},\n};\n\nTherefore, the current code is buggy and this\nnla_parse_nested_deprecated could overflow the dcbnl_pfc_up_nest and use\nthe adjacent nla_policy to parse attributes from DCB_BCN_ATTR_BCNA_0.\n\nHence use the correct policy dcbnl_bcn_nest to parse the nested\ntb[DCB_ATTR_BCN] TLV."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/199fde04bd875d28b3a5ca525eaaa004eec6e947",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/31d49ba033095f6e8158c60f69714a500922e0c3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5b3dbedb8d4a0f9f7ce904d76b885438af2a21f9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8e309f43d0ca4051d20736c06a6f84bbddd881da",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a0da2684db18dead3bcee12fb185e596e3d63c2b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ecff20e193207b44fdbfe64d7de89890f0a7fe6c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53370.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53370.json
new file mode 100644
index 00000000000..e7b5e683dc3
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53370.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2023-53370",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:39.510",
+ "lastModified": "2025-09-18T14:15:39.510",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix memory leak in mes self test\n\nThe fences associated with mes queue have to be freed\nup during amdgpu_ring_fini."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/31d7c3a4fc3d312a0646990767647925d5bde540",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8d8c96efcec95736622381b2afc0fe9e317f88aa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ce3288d8d654b252ba832626e7de481c195ef20a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53371.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53371.json
new file mode 100644
index 00000000000..48491907e0f
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53371.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2023-53371",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:39.637",
+ "lastModified": "2025-09-18T14:15:39.637",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create\n\nThe memory pointed to by the fs->any pointer is not freed in the error\npath of mlx5e_fs_tt_redirect_any_create, which can lead to a memory leak.\nFix by freeing the memory in the error path, thereby making the error path\nidentical to mlx5e_fs_tt_redirect_any_destroy()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3250affdc658557a41df9c5fb567723e421f8bf2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/75df2fe6d160e16be880aacacd521b135d7177c9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8a75a6f169c3df3a94802314aa61282772ac75b8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53372.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53372.json
new file mode 100644
index 00000000000..32dcd80f14e
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53372.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2023-53372",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:39.750",
+ "lastModified": "2025-09-18T14:15:39.750",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix a potential overflow in sctp_ifwdtsn_skip\n\nCurrently, when traversing ifwdtsn skips with _sctp_walk_ifwdtsn, it only\nchecks the pos against the end of the chunk. However, the data left for\nthe last pos may be < sizeof(struct sctp_ifwdtsn_skip), and dereference\nit as struct sctp_ifwdtsn_skip may cause coverflow.\n\nThis patch fixes it by checking the pos against \"the end of the chunk -\nsizeof(struct sctp_ifwdtsn_skip)\" in sctp_ifwdtsn_skip, similar to\nsctp_fwdtsn_skip."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/32832a2caf82663870126c5186cf8f86c8b2a649",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4fbd094d4131a10d06a45d64158567052a35b3f4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5c9367ac5a22d71841bcd00130f9146c9b227d57",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6109f5b13ce3e3e537db6f18976ec0e9118d1c6f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/79b28f42214a3d0d6a8c514db3602260bd5d6cb5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ad831a7079c99c01e801764b53bc9997c2e9c0f7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ad988e9b5ff04607e624a459209e8c2d0c15fc73",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53373.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53373.json
new file mode 100644
index 00000000000..3db4de42320
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53373.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2023-53373",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:39.880",
+ "lastModified": "2025-09-18T14:15:39.880",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: seqiv - Handle EBUSY correctly\n\nAs it is seqiv only handles the special return value of EINPROGERSS,\nwhich means that in all other cases it will free data related to the\nrequest.\n\nHowever, as the caller of seqiv may specify MAY_BACKLOG, we also need\nto expect EBUSY and treat it in the same way. Otherwise backlogged\nrequests will trigger a use-after-free."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1effbddaff60eeef8017c6dea1ee0ed970164d14",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/32e62025e5e52fbe4812ef044759de7010b15dbc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/36ec108b7bd7e280edb22de028467bd09d644620",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4d497e8b200a175094e0ac252ed878add39b8771",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/63551e4b7cbcd9914258827699eb2cb6ed6e4a16",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9477db935eb690f697d9bcc4f608927841bc8b36",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ae849d2f48019ff9c104e32bf588ccbfb200e971",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc4d0d4251748a8a68026938f4055d2ac47c5719",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53374.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53374.json
new file mode 100644
index 00000000000..aa2bbe1c72a
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53374.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2023-53374",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:40.037",
+ "lastModified": "2025-09-18T14:15:40.037",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early\n\nNot calling hci_(dis)connect_cfm before deleting conn referred to by a\nsocket generally results to use-after-free.\n\nWhen cleaning up SCO connections when the parent ACL is deleted too\nearly, use hci_conn_failed to do the connection cleanup properly.\n\nWe also need to clean up ISO connections in a similar situation when\nconnecting has started but LE Create CIS is not yet sent, so do it too\nhere."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3344d318337d9dca928fd448e966557ec5063f85",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/397d58007532644b35fad746da48c41161f32a57",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e94b898463a62b72a2a8b75dea8936bf4db78e00",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53375.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53375.json
new file mode 100644
index 00000000000..83d276c284a
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53375.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2023-53375",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:40.183",
+ "lastModified": "2025-09-18T14:15:40.183",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Free error logs of tracing instances\n\nWhen a tracing instance is removed, the error messages that hold errors\nthat occurred in the instance needs to be freed. The following reports a\nmemory leak:\n\n # cd /sys/kernel/tracing\n # mkdir instances/foo\n # echo 'hist:keys=x' > instances/foo/events/sched/sched_switch/trigger\n # cat instances/foo/error_log\n [ 117.404795] hist:sched:sched_switch: error: Couldn't find field\n Command: hist:keys=x\n ^\n # rmdir instances/foo\n\nThen check for memory leaks:\n\n # echo scan > /sys/kernel/debug/kmemleak\n # cat /sys/kernel/debug/kmemleak\nunreferenced object 0xffff88810d8ec700 (size 192):\n comm \"bash\", pid 869, jiffies 4294950577 (age 215.752s)\n hex dump (first 32 bytes):\n 60 dd 68 61 81 88 ff ff 60 dd 68 61 81 88 ff ff `.ha....`.ha....\n a0 30 8c 83 ff ff ff ff 26 00 0a 00 00 00 00 00 .0......&.......\n backtrace:\n [<00000000dae26536>] kmalloc_trace+0x2a/0xa0\n [<00000000b2938940>] tracing_log_err+0x277/0x2e0\n [<000000004a0e1b07>] parse_atom+0x966/0xb40\n [<0000000023b24337>] parse_expr+0x5f3/0xdb0\n [<00000000594ad074>] event_hist_trigger_parse+0x27f8/0x3560\n [<00000000293a9645>] trigger_process_regex+0x135/0x1a0\n [<000000005c22b4f2>] event_trigger_write+0x87/0xf0\n [<000000002cadc509>] vfs_write+0x162/0x670\n [<0000000059c3b9be>] ksys_write+0xca/0x170\n [<00000000f1cddc00>] do_syscall_64+0x3e/0xc0\n [<00000000868ac68c>] entry_SYSCALL_64_after_hwframe+0x72/0xdc\nunreferenced object 0xffff888170c35a00 (size 32):\n comm \"bash\", pid 869, jiffies 4294950577 (age 215.752s)\n hex dump (first 32 bytes):\n 0a 20 20 43 6f 6d 6d 61 6e 64 3a 20 68 69 73 74 . Command: hist\n 3a 6b 65 79 73 3d 78 0a 00 00 00 00 00 00 00 00 :keys=x.........\n backtrace:\n [<000000006a747de5>] __kmalloc+0x4d/0x160\n [<000000000039df5f>] tracing_log_err+0x29b/0x2e0\n [<000000004a0e1b07>] parse_atom+0x966/0xb40\n [<0000000023b24337>] parse_expr+0x5f3/0xdb0\n [<00000000594ad074>] event_hist_trigger_parse+0x27f8/0x3560\n [<00000000293a9645>] trigger_process_regex+0x135/0x1a0\n [<000000005c22b4f2>] event_trigger_write+0x87/0xf0\n [<000000002cadc509>] vfs_write+0x162/0x670\n [<0000000059c3b9be>] ksys_write+0xca/0x170\n [<00000000f1cddc00>] do_syscall_64+0x3e/0xc0\n [<00000000868ac68c>] entry_SYSCALL_64_after_hwframe+0x72/0xdc\n\nThe problem is that the error log needs to be freed when the instance is\nremoved."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3357c6e429643231e60447b52ffbb7ac895aca22",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/33d5d4e67a0e13c3ca6257fa67bf6503bc000878",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/46771c34d6721abfd9e7903eaed2201051eebec6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6e36373aa5ffa8e00fe7c71b3209f6f17081e552",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/987f599fc556a4e64c405d8dde32c70311e8c278",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c0cf0f55be043ef67c38f492aa37ed1986d2f6b6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53376.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53376.json
new file mode 100644
index 00000000000..cb46fc27bcc
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53376.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2023-53376",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:40.473",
+ "lastModified": "2025-09-18T14:15:40.473",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpi3mr: Use number of bits to manage bitmap sizes\n\nTo allocate bitmaps, the mpi3mr driver calculates sizes of bitmaps using\nbyte as unit. However, bitmap helper functions assume that bitmaps are\nallocated using unsigned long as unit. This gap causes memory access beyond\nthe bitmap sizes and results in \"BUG: KASAN: slab-out-of-bounds\". The BUG\nwas observed at firmware download to eHBA-9600. Call trace indicated that\nthe out-of-bounds access happened in find_first_zero_bit() called from\nmpi3mr_send_event_ack() for miroc->evtack_cmds_bitmap.\n\nTo fix the BUG, do not use bytes to manage bitmap sizes. Instead, use\nnumber of bits, and call bitmap helper functions which take number of bits\nas arguments. For memory allocation, call bitmap_zalloc() instead of\nkzalloc() and krealloc(). For memory free, call bitmap_free() instead of\nkfree(). For zero clear, call bitmap_clear() instead of memset().\n\nRemove three fields for bitmap byte sizes in struct scmd_priv which are no\nlonger required. Replace the field dev_handle_bitmap_sz with\ndev_handle_bitmap_bits to keep number of bits of removepend_bitmap across\nresize."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/339e61565f81a6534afdc18fd854b2e2628bf5db",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6a675a6d57d31da43d8da576465c1cd5d5b0bd3d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8ac713d2e9845e9234bb12ae5903040685d5aff9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53377.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53377.json
new file mode 100644
index 00000000000..a7ffae11425
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53377.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53377",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:40.590",
+ "lastModified": "2025-09-18T14:15:40.590",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: prevent use-after-free by freeing the cfile later\n\nIn smb2_compound_op we have a possible use-after-free\nwhich can cause hard to debug problems later on.\n\nThis was revealed during stress testing with KASAN enabled\nkernel. Fixing it by moving the cfile free call to\na few lines below, after the usage."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/33f736187d08f6bc822117629f263b97d3df4165",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4fe07d55a5461e66a55fbefb57f85ff0facea32b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b6353518ef8180816e863aa23b06456f395404d6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d017880782cf71f8820ee4a2002843893176501d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53378.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53378.json
new file mode 100644
index 00000000000..deb0d4ec931
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53378.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2023-53378",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:40.710",
+ "lastModified": "2025-09-18T14:15:40.710",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/dpt: Treat the DPT BO as a framebuffer\n\nCurrently i915_gem_object_is_framebuffer() doesn't treat the\nBO containing the framebuffer's DPT as a framebuffer itself.\nThis means eg. that the shrinker can evict the DPT BO while\nleaving the actual FB BO bound, when the DPT is allocated\nfrom regular shmem.\n\nThat causes an immediate oops during hibernate as we\ntry to rewrite the PTEs inside the already evicted\nDPT obj.\n\nTODO: presumably this might also be the reason for the\nDPT related display faults under heavy memory pressure,\nbut I'm still not sure how that would happen as the object\nshould be pinned by intel_dpt_pin() while in active use by\nthe display engine...\n\n(cherry picked from commit 779cb5ba64ec7df80675a956c9022929514f517a)"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3413881e1ecc3cba722a2e87ec099692eed5be28",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5390a02b4508416b9bee96674f141c68f89bafbc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c781c107731fc09ce4330c8c636b8446d0f72aa4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53379.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53379.json
new file mode 100644
index 00000000000..1857b95d138
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53379.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2023-53379",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:40.830",
+ "lastModified": "2025-09-18T14:15:40.830",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()\n\nSmatch reports:\ndrivers/usb/phy/phy-tahvo.c: tahvo_usb_probe()\nwarn: missing unwind goto?\n\nAfter geting irq, if ret < 0, it will return without error handling to\nfree memory.\nJust add error handling to fix this problem."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/342161c11403ea00e9febc16baab1d883d589d04",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/38dbd6f72bfbeba009efe0e9ec1f3ff09f9e23fa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3e5a7bebf832b1482efe27bcc15a88c5b28a30d0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4da9edeccf77d7b4c6dbcb34d5908acdaa5bd7e3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/56901de563359de20513e16a9ae008ae2c22e9a9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dd9b7c89a80428cc5f4ae0d2e1311fdedb2a1aac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ecf26d6e1b5450620c214feea537bb6ce05c6741",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fe9cdc19861950582f077f254a12026e169eaee5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53380.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53380.json
new file mode 100644
index 00000000000..9124157d7ea
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53380.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2023-53380",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:40.953",
+ "lastModified": "2025-09-18T14:15:40.953",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid10: fix null-ptr-deref of mreplace in raid10_sync_request\n\nThere are two check of 'mreplace' in raid10_sync_request(). In the first\ncheck, 'need_replace' will be set and 'mreplace' will be used later if\nno-Faulty 'mreplace' exists, In the second check, 'mreplace' will be\nset to NULL if it is Faulty, but 'need_replace' will not be changed\naccordingly. null-ptr-deref occurs if Faulty is set between two check.\n\nFix it by merging two checks into one. And replace 'need_replace' with\n'mreplace' because their values are always the same."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/144c7fd008e0072b0b565f1157eec618de54ca8a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/222cc459d59857ee28a5366dc225ab42b22f9272",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2990e2ece18dd4cca71b3109c80517ad94adb065",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/34817a2441747b48e444cb0e05d84e14bc9443da",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/45fa023b3334a7ae6f6c4eb977295804222dfa28",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b5015b97adda6a24dd3e713c63e521ecbeff25c6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f4368a462b1f9a8ecc2fdb09a28c3d4cad302a4f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53381.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53381.json
new file mode 100644
index 00000000000..0c850aa9acd
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53381.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2023-53381",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:41.077",
+ "lastModified": "2025-09-18T14:15:41.077",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: fix leaked reference count of nfsd4_ssc_umount_item\n\nThe reference count of nfsd4_ssc_umount_item is not decremented\non error conditions. This prevents the laundromat from unmounting\nthe vfsmount of the source file.\n\nThis patch decrements the reference count of nfsd4_ssc_umount_item\non error."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2da50149981d05955e51c28e982e9ac29bd73417",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/34e8f9ec4c9ac235f917747b23a200a5e0ec857b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6c3c05402547aaca3edb23327b50f01a881831b9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/80a15dc4a0214b55ca42675bb0bb2a8d857eb1d0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9f0df37520a27ad99eaacf38418b3d2bb5023105",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53382.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53382.json
new file mode 100644
index 00000000000..1f9b0e3b889
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53382.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2023-53382",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:41.180",
+ "lastModified": "2025-09-18T14:15:41.180",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: Reset connection when trying to use SMCRv2 fails.\n\nWe found a crash when using SMCRv2 with 2 Mellanox ConnectX-4. It\ncan be reproduced by:\n\n- smc_run nginx\n- smc_run wrk -t 32 -c 500 -d 30 http://:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000014\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 8000000108713067 P4D 8000000108713067 PUD 151127067 PMD 0\n Oops: 0000 [#1] PREEMPT SMP PTI\n CPU: 4 PID: 2441 Comm: kworker/4:249 Kdump: loaded Tainted: G W E 6.4.0-rc1+ #42\n Workqueue: smc_hs_wq smc_listen_work [smc]\n RIP: 0010:smc_clc_send_confirm_accept+0x284/0x580 [smc]\n RSP: 0018:ffffb8294b2d7c78 EFLAGS: 00010a06\n RAX: ffff8f1873238880 RBX: ffffb8294b2d7dc8 RCX: 0000000000000000\n RDX: 00000000000000b4 RSI: 0000000000000001 RDI: 0000000000b40c00\n RBP: ffffb8294b2d7db8 R08: ffff8f1815c5860c R09: 0000000000000000\n R10: 0000000000000400 R11: 0000000000000000 R12: ffff8f1846f56180\n R13: ffff8f1815c5860c R14: 0000000000000001 R15: 0000000000000001\n FS: 0000000000000000(0000) GS:ffff8f1aefd00000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000000000014 CR3: 00000001027a0001 CR4: 00000000003706e0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n \n ? mlx5_ib_map_mr_sg+0xa1/0xd0 [mlx5_ib]\n ? smcr_buf_map_link+0x24b/0x290 [smc]\n ? __smc_buf_create+0x4ee/0x9b0 [smc]\n smc_clc_send_accept+0x4c/0xb0 [smc]\n smc_listen_work+0x346/0x650 [smc]\n ? __schedule+0x279/0x820\n process_one_work+0x1e5/0x3f0\n worker_thread+0x4d/0x2f0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0xe5/0x120\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x2c/0x50\n \n\nDuring the CLC handshake, server sequentially tries available SMCRv2\nand SMCRv1 devices in smc_listen_work().\n\nIf an SMCRv2 device is found. SMCv2 based link group and link will be\nassigned to the connection. Then assumed that some buffer assignment\nerrors happen later in the CLC handshake, such as RMB registration\nfailure, server will give up SMCRv2 and try SMCRv1 device instead. But\nthe resources assigned to the connection won't be reset.\n\nWhen server tries SMCRv1 device, the connection creation process will\nbe executed again. Since conn->lnk has been assigned when trying SMCRv2,\nit will not be set to the correct SMCRv1 link in\nsmcr_lgr_conn_assign_link(). So in such situation, conn->lgr points to\ncorrect SMCRv1 link group but conn->lnk points to the SMCRv2 link\nmistakenly.\n\nThen in smc_clc_send_confirm_accept(), conn->rmb_desc->mr[link->link_idx]\nwill be accessed. Since the link->link_idx is not correct, the related\nMR may not have been initialized, so crash happens.\n\n | Try SMCRv2 device first\n | |-> conn->lgr:\tassign existed SMCRv2 link group;\n | |-> conn->link:\tassign existed SMCRv2 link (link_idx may be 1 in SMC_LGR_SYMMETRIC);\n | |-> sndbuf & RMB creation fails, quit;\n |\n | Try SMCRv1 device then\n | |-> conn->lgr:\tcreate SMCRv1 link group and assign;\n | |-> conn->link:\tkeep SMCRv2 link mistakenly;\n | |-> sndbuf & RMB creation succeed, only RMB->mr[link_idx = 0]\n | initialized.\n |\n | Then smc_clc_send_confirm_accept() accesses\n | conn->rmb_desc->mr[conn->link->link_idx, which is 1], then crash.\n v\n\nThis patch tries to fix this by cleaning conn->lnk before assigning\nlink. In addition, it is better to reset the connection and clean the\nresources assigned if trying SMCRv2 failed in buffer creation or\nregistration."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/35112271672ae98f45df7875244a4e33aa215e31",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9540765d1882d15497d880096de99fafabcfa08c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d33be18917ffe69865dfed18b0a67b0dee0b47d7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53383.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53383.json
new file mode 100644
index 00000000000..d3714281527
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53383.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2023-53383",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:41.310",
+ "lastModified": "2025-09-18T14:15:41.310",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4\n\nThe T241 platform suffers from the T241-FABRIC-4 erratum which causes\nunexpected behavior in the GIC when multiple transactions are received\nsimultaneously from different sources. This hardware issue impacts\nNVIDIA server platforms that use more than two T241 chips\ninterconnected. Each chip has support for 320 {E}SPIs.\n\nThis issue occurs when multiple packets from different GICs are\nincorrectly interleaved at the target chip. The erratum text below\nspecifies exactly what can cause multiple transfer packets susceptible\nto interleaving and GIC state corruption. GIC state corruption can\nlead to a range of problems, including kernel panics, and unexpected\nbehavior.\n\n>From the erratum text:\n \"In some cases, inter-socket AXI4 Stream packets with multiple\n transfers, may be interleaved by the fabric when presented to ARM\n Generic Interrupt Controller. GIC expects all transfers of a packet\n to be delivered without any interleaving.\n\n The following GICv3 commands may result in multiple transfer packets\n over inter-socket AXI4 Stream interface:\n - Register reads from GICD_I* and GICD_N*\n - Register writes to 64-bit GICD registers other than GICD_IROUTERn*\n - ITS command MOVALL\n\n Multiple commands in GICv4+ utilize multiple transfer packets,\n including VMOVP, VMOVI, VMAPP, and 64-bit register accesses.\"\n\n This issue impacts system configurations with more than 2 sockets,\n that require multi-transfer packets to be sent over inter-socket\n AXI4 Stream interface between GIC instances on different sockets.\n GICv4 cannot be supported. GICv3 SW model can only be supported\n with the workaround. Single and Dual socket configurations are not\n impacted by this issue and support GICv3 and GICv4.\"\n\n\nWriting to the chip alias region of the GICD_In{E} registers except\nGICD_ICENABLERn has an equivalent effect as writing to the global\ndistributor. The SPI interrupt deactivate path is not impacted by\nthe erratum.\n\nTo fix this problem, implement a workaround that ensures read accesses\nto the GICD_In{E} registers are directed to the chip that owns the\nSPI, and disable GICv4.x features. To simplify code changes, the\ngic_configure_irq() function uses the same alias region for both read\nand write operations to GICD_ICFGR."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/35727af2b15d98a2dd2811d631d3a3886111312e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/867a4f6cf1a8f511c06e131477988b3b3e7a0633",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/86ba4f7b9f949e4c4bcb425f2a1ce490fea30df0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53384.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53384.json
new file mode 100644
index 00000000000..97bdd3995bf
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53384.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2023-53384",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:41.433",
+ "lastModified": "2025-09-18T14:15:41.433",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: avoid possible NULL skb pointer dereference\n\nIn 'mwifiex_handle_uap_rx_forward()', always check the value\nreturned by 'skb_copy()' to avoid potential NULL pointer\ndereference in 'mwifiex_uap_queue_bridged_pkt()', and drop\noriginal skb in case of copying failure.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0c57f9ad2c3ed43abb764b0247d610ff7fdb7a00",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/139d285e7695279f030dbb172e2d0245425c86c6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/231086e6a36316b823654f4535653f22d6344420",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/35a7a1ce7c7d61664ee54f5239a1f120ab95a87e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7e7197e4d6a1bc72a774590d8765909f898be1dc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bef85d58f7709896ed8426560ad117a73a37762f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c2509f7c37355e1f0bd5b7087815b845fd383723",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d155c5f64cefacdc6a9a26d40be53ee2903c28ff",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d7fd24b8d1bb54c5bcf583139e11a5e651e0263c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53385.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53385.json
new file mode 100644
index 00000000000..cfcfa09fc57
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53385.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2023-53385",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:41.553",
+ "lastModified": "2025-09-18T14:15:41.553",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mdp3: Fix resource leaks in of_find_device_by_node\n\nUse put_device to release the object get through of_find_device_by_node,\navoiding resource leaks."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/35ca8ce495366909b4c2e701d1356570dd40c4e2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8ba9d91c8f21f070af2049f114c206a8f2d5c71e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fa481125bc4ca8edc1a4c62fe53486ac9a817593",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53386.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53386.json
new file mode 100644
index 00000000000..7149d537f64
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53386.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2023-53386",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:41.660",
+ "lastModified": "2025-09-18T14:15:41.660",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Fix potential use-after-free when clear keys\n\nSimilar to commit c5d2b6fa26b5 (\"Bluetooth: Fix use-after-free in\nhci_remove_ltk/hci_remove_irk\"). We can not access k after kfree_rcu()\ncall."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/35cc42f04bc49f0656f6840cb7451b3df6049649",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3673952cf0c6cf81b06c66a0b788abeeb02ff3ae",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/942d8cefb022f384d5424f8b90c7878f3f93726f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/94617b736c25091b60e514e2e7aeafcbbee6b700",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/da19f35868dfbecfff4f81166c054d2656cb1be4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53387.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53387.json
new file mode 100644
index 00000000000..876e5d94fd1
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53387.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2023-53387",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:41.767",
+ "lastModified": "2025-09-18T14:15:41.767",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: core: Fix device management cmd timeout flow\n\nIn the UFS error handling flow, the host will send a device management cmd\n(NOP OUT) to the device for link recovery. If this cmd times out and\nclearing the doorbell fails, ufshcd_wait_for_dev_cmd() will do nothing and\nreturn. hba->dev_cmd.complete struct is not set to NULL.\n\nWhen this happens, if cmd has been completed by device, then we will call\ncomplete() in __ufshcd_transfer_req_compl(). Because the complete struct is\nallocated on the stack, the following crash will occur:\n\n ipanic_die+0x24/0x38 [mrdump]\n die+0x344/0x748\n arm64_notify_die+0x44/0x104\n do_debug_exception+0x104/0x1e0\n el1_dbg+0x38/0x54\n el1_sync_handler+0x40/0x88\n el1_sync+0x8c/0x140\n queued_spin_lock_slowpath+0x2e4/0x3c0\n __ufshcd_transfer_req_compl+0x3b0/0x1164\n ufshcd_trc_handler+0x15c/0x308\n ufshcd_host_reset_and_restore+0x54/0x260\n ufshcd_reset_and_restore+0x28c/0x57c\n ufshcd_err_handler+0xeb8/0x1b6c\n process_one_work+0x288/0x964\n worker_thread+0x4bc/0xc7c\n kthread+0x15c/0x264\n ret_from_fork+0x10/0x30"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/36822124f9de200cedc2f42516301b50d386a6cd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3ffd2cd644e0f1eea01339831bac4b1054e8817c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cf45493432704786a0f8294c7723ad4eeb5fff24",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53388.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53388.json
new file mode 100644
index 00000000000..41a4e235624
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53388.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2023-53388",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:41.880",
+ "lastModified": "2025-09-18T14:15:41.880",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Clean dangling pointer on bind error path\n\nmtk_drm_bind() can fail, in which case drm_dev_put() is called,\ndestroying the drm_device object. However a pointer to it was still\nbeing held in the private object, and that pointer would be passed along\nto DRM in mtk_drm_sys_prepare() if a suspend were triggered at that\npoint, resulting in a panic. Clean the pointer when destroying the\nobject in the error path to prevent this from happening."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/36aa8c61af55675ed967900fbe5deb32d776f051",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/49cf87919daeeeeeb9e924c39bdd9203af434461",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6a89ddee1686a8872384aaa9f0bcfa6b675acd86",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7b551a501fa714890e55bae73efede1185728d72",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9a48f99aa7bea15e0b1d8b0040c46b4792eddf3b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a161f1d92aabb3b8463f752bdc3474dc3a5ec0e5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f3887c771576c5d740c5c5b8bf654a8ab8020b7d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53389.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53389.json
new file mode 100644
index 00000000000..021b30e0754
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53389.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53389",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:42.003",
+ "lastModified": "2025-09-18T14:15:42.003",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: dp: Only trigger DRM HPD events if bridge is attached\n\nThe MediaTek DisplayPort interface bridge driver starts its interrupts\nas soon as its probed. However when the interrupts trigger the bridge\nmight not have been attached to a DRM device. As drm_helper_hpd_irq_event()\ndoes not check whether the passed in drm_device is valid or not, a NULL\npointer passed in results in a kernel NULL pointer dereference in it.\n\nCheck whether the bridge is attached and only trigger an HPD event if\nit is."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3551789d0635dfb2df8ab8e7fdbf0647e9c1724c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/36b617f7e4ae663fcadd202ea061ca695ca75539",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6524d3d58797975cc40b85be1e9b89721b4e8d0b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d1c04e338016ae2517c641806a831b1f3eee2bed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53390.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53390.json
new file mode 100644
index 00000000000..e868f9f0d36
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53390.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53390",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:42.117",
+ "lastModified": "2025-09-18T14:15:42.117",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: base: dd: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/36c893d3a759ae7c91ee7d4871ebfc7504f08c40",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5a7a9efdb193d3c8a35821548a8e99612c358828",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7f1e53f88e8babf293ec052b70aa9d2a3554360c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8e47e2bf78812adbd73c45c941d3c51add30b58d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53391.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53391.json
new file mode 100644
index 00000000000..35b85fd6320
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53391.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2023-53391",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:42.237",
+ "lastModified": "2025-09-18T14:15:42.237",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nshmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs\n\nAs the ramfs-based tmpfs uses ramfs_init_fs_context() for the\ninit_fs_context method, which allocates fc->s_fs_info, use ramfs_kill_sb()\nto free it and avoid a memory leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1f34bf8b442c6d720e7fa6f15e8702427e48aea9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/36ce9d76b0a93bae799e27e4f5ac35478c676592",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/487f229efea80c00dd7397547ec4f25fb8999d99",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5fada375113767b3b57f1b04f7a4fe64ffaa626f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ebe07db840992a3886694ac3d303b06f4b70ce00",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53392.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53392.json
new file mode 100644
index 00000000000..769778d7d6f
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53392.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2023-53392",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:42.350",
+ "lastModified": "2025-09-18T14:15:42.350",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: intel-ish-hid: Fix kernel panic during warm reset\n\nDuring warm reset device->fw_client is set to NULL. If a bus driver is\nregistered after this NULL setting and before new firmware clients are\nenumerated by ISHTP, kernel panic will result in the function\nishtp_cl_bus_match(). This is because of reference to\ndevice->fw_client->props.protocol_name.\n\nISH firmware after getting successfully loaded, sends a warm reset\nnotification to remove all clients from the bus and sets\ndevice->fw_client to NULL. Until kernel v5.15, all enabled ISHTP kernel\nmodule drivers were loaded right after any of the first ISHTP device was\nregistered, regardless of whether it was a matched or an unmatched\ndevice. This resulted in all drivers getting registered much before the\nwarm reset notification from ISH.\n\nStarting kernel v5.16, this issue got exposed after the change was\nintroduced to load only bus drivers for the respective matching devices.\nIn this scenario, cros_ec_ishtp device and cros_ec_ishtp driver are\nregistered after the warm reset device fw_client NULL setting.\ncros_ec_ishtp driver_register() triggers the callback to\nishtp_cl_bus_match() to match ISHTP driver to the device and causes kernel\npanic in guid_equal() when dereferencing fw_client NULL pointer to get\nprotocol_name."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/38518593ec55e897abda4b4be77b2ec8ec4447d1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/45b9055a3a3ff6e8c08faad82ea36a8644a81587",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6c8cc40c588f8080a164d88336b1490279e0f1da",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53393.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53393.json
new file mode 100644
index 00000000000..2f61f090645
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53393.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53393",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:42.463",
+ "lastModified": "2025-09-18T14:15:42.463",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device\n\nCurrently, when mlx5_ib_get_hw_stats() is used for device (port_num = 0),\nthere is a special handling in order to use the correct counters, but,\nport_num is being passed down the stack without any change. Also, some\nfunctions assume that port_num >=1. As a result, the following oops can\noccur.\n\n BUG: unable to handle page fault for address: ffff89510294f1a8\n #PF: supervisor write access in kernel mode\n #PF: error_code(0x0002) - not-present page\n PGD 0 P4D 0\n Oops: 0002 [#1] SMP\n CPU: 8 PID: 1382 Comm: devlink Tainted: G W 6.1.0-rc4_for_upstream_base_2022_11_10_16_12 #1\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\n RIP: 0010:_raw_spin_lock+0xc/0x20\n Call Trace:\n \n mlx5_ib_get_native_port_mdev+0x73/0xe0 [mlx5_ib]\n do_get_hw_stats.constprop.0+0x109/0x160 [mlx5_ib]\n mlx5_ib_get_hw_stats+0xad/0x180 [mlx5_ib]\n ib_setup_device_attrs+0xf0/0x290 [ib_core]\n ib_register_device+0x3bb/0x510 [ib_core]\n ? atomic_notifier_chain_register+0x67/0x80\n __mlx5_ib_add+0x2b/0x80 [mlx5_ib]\n mlx5r_probe+0xb8/0x150 [mlx5_ib]\n ? auxiliary_match_id+0x6a/0x90\n auxiliary_bus_probe+0x3c/0x70\n ? driver_sysfs_add+0x6b/0x90\n really_probe+0xcd/0x380\n __driver_probe_device+0x80/0x170\n driver_probe_device+0x1e/0x90\n __device_attach_driver+0x7d/0x100\n ? driver_allows_async_probing+0x60/0x60\n ? driver_allows_async_probing+0x60/0x60\n bus_for_each_drv+0x7b/0xc0\n __device_attach+0xbc/0x200\n bus_probe_device+0x87/0xa0\n device_add+0x404/0x940\n ? dev_set_name+0x53/0x70\n __auxiliary_device_add+0x43/0x60\n add_adev+0x99/0xe0 [mlx5_core]\n mlx5_attach_device+0xc8/0x120 [mlx5_core]\n mlx5_load_one_devl_locked+0xb2/0xe0 [mlx5_core]\n devlink_reload+0x133/0x250\n devlink_nl_cmd_reload+0x480/0x570\n ? devlink_nl_pre_doit+0x44/0x2b0\n genl_family_rcv_msg_doit.isra.0+0xc2/0x110\n genl_rcv_msg+0x180/0x2b0\n ? devlink_nl_cmd_region_read_dumpit+0x540/0x540\n ? devlink_reload+0x250/0x250\n ? devlink_put+0x50/0x50\n ? genl_family_rcv_msg_doit.isra.0+0x110/0x110\n netlink_rcv_skb+0x54/0x100\n genl_rcv+0x24/0x40\n netlink_unicast+0x1f6/0x2c0\n netlink_sendmsg+0x237/0x490\n sock_sendmsg+0x33/0x40\n __sys_sendto+0x103/0x160\n ? handle_mm_fault+0x10e/0x290\n ? do_user_addr_fault+0x1c0/0x5f0\n __x64_sys_sendto+0x25/0x30\n do_syscall_64+0x3d/0x90\n entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nFix it by setting port_num to 1 in order to get device status and remove\nunused variable."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/38b50aa44495d5eb4218f0b82fc2da76505cec53",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8d89870d63758363b07ace5c2df82d6bf865f78b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9a97da4674b890b4c28f5f12beba8c33a9cd2f49",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e597b003c736217b0c99ccf1b240c25009105238",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53394.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53394.json
new file mode 100644
index 00000000000..0dbac468ebd
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53394.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2023-53394",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:42.580",
+ "lastModified": "2025-09-18T14:15:42.580",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: xsk: Fix crash on regular rq reactivation\n\nWhen the regular rq is reactivated after the XSK socket is closed\nit could be reading stale cqes which eventually corrupts the rq.\nThis leads to no more traffic being received on the regular rq and a\ncrash on the next close or deactivation of the rq.\n\nKal Cuttler Conely reported this issue as a crash on the release\npath when the xdpsock sample program is stopped (killed) and restarted\nin sequence while traffic is running.\n\nThis patch flushes all cqes when during the rq flush. The cqe flushing\nis done in the reset state of the rq. mlx5e_rq_to_ready code is moved\ninto the flush function to allow for this."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/02a84eb2af6bea7871cd34264fb27f141f005fd9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/39646d9bcd1a65d2396328026626859a1dab59d7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53395.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53395.json
new file mode 100644
index 00000000000..46e7419be3c
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53395.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2023-53395",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:42.697",
+ "lastModified": "2025-09-18T14:15:42.697",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer\n\nACPICA commit 90310989a0790032f5a0140741ff09b545af4bc5\n\nAccording to the ACPI specification 19.6.134, no argument is required to be passed for ASL Timer instruction. For taking care of no argument, AML_NO_OPERAND_RESOLVE flag is added to ASL Timer instruction opcode.\n\nWhen ASL timer instruction interpreted by ACPI interpreter, getting error. After adding AML_NO_OPERAND_RESOLVE flag to ASL Timer instruction opcode, issue is not observed.\n\n=============================================================\nUBSAN: array-index-out-of-bounds in acpica/dswexec.c:401:12 index -1 is out of range for type 'union acpi_operand_object *[9]'\nCPU: 37 PID: 1678 Comm: cat Not tainted\n6.0.0-dev-th500-6.0.y-1+bcf8c46459e407-generic-64k\nHW name: NVIDIA BIOS v1.1.1-d7acbfc-dirty 12/19/2022 Call trace:\n dump_backtrace+0xe0/0x130\n show_stack+0x20/0x60\n dump_stack_lvl+0x68/0x84\n dump_stack+0x18/0x34\n ubsan_epilogue+0x10/0x50\n __ubsan_handle_out_of_bounds+0x80/0x90\n acpi_ds_exec_end_op+0x1bc/0x6d8\n acpi_ps_parse_loop+0x57c/0x618\n acpi_ps_parse_aml+0x1e0/0x4b4\n acpi_ps_execute_method+0x24c/0x2b8\n acpi_ns_evaluate+0x3a8/0x4bc\n acpi_evaluate_object+0x15c/0x37c\n acpi_evaluate_integer+0x54/0x15c\n show_power+0x8c/0x12c [acpi_power_meter]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/23c67fa615c52712bfa02a6dfadbd4656c87c066",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2f2a5905303ae230b5159fcd8cdcd5b3e7ad5e2d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3a21ffdbc825e0919db9da0e27ee5ff2cc8a863e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3bf4463e40a17a23f2f261dfd7fe23129bdd04a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/430787056dd3c591eb553d5c3b2717efcf307d4e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/625c12dc04a607b79f180ef3ee5a12bf2e3324c0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b102113469487b460e9e77fe9e00d49c50fe8c86",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e1f686930ee4b059c7baa3c3904b2401829f2589",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53396.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53396.json
new file mode 100644
index 00000000000..4f91abfa2fc
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53396.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2023-53396",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:42.817",
+ "lastModified": "2025-09-18T14:15:42.817",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: Fix memory leak in do_rename\n\nIf renaming a file in an encrypted directory, function\nfscrypt_setup_filename allocates memory for a file name. This name is\nnever used, and before returning to the caller the memory for it is not\nfreed.\n\nWhen running kmemleak on it we see that it is registered as a leak. The\nreport below is triggered by a simple program 'rename' that renames a\nfile in an encrypted directory:\n\n unreferenced object 0xffff888101502840 (size 32):\n comm \"rename\", pid 9404, jiffies 4302582475 (age 435.735s)\n backtrace:\n __kmem_cache_alloc_node\n __kmalloc\n fscrypt_setup_filename\n do_rename\n ubifs_rename\n vfs_rename\n do_renameat2\n\nTo fix this we can remove the call to fscrypt_setup_filename as it's not\nneeded."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3a36d20e012903f45714df2731261fdefac900cb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/43b2f7d690697182beed6f71aa57b7249d3cfc9c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/517ddc0259d7a7231486bdafde8035c478bc4088",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7e264f67b7d6580eff5c2696961039fd05c69258",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9f565752b328fe53c9e42b7d4e4d89a1da63d738",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53397.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53397.json
new file mode 100644
index 00000000000..57e8fd452ff
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53397.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2023-53397",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:42.937",
+ "lastModified": "2025-09-18T14:15:42.937",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmodpost: fix off by one in is_executable_section()\n\nThe > comparison should be >= to prevent an out of bounds array\naccess."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/02dc8e8bdbe4412cfcf17ee3873e63fa5a55b957",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3a3f1e573a105328a2cca45a7cfbebabbf5e3192",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5e0424cd8a44b5f480feb06753cdf4e1f248d148",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7ee557590bac154d324de446d1cd0444988bd511",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8b2e77050b91199453bf19d0517b047b7339a9e3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cade370efe2f9e2a79ea8587506ffe2b51ac6d2b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cb0cdca5c979bc34c27602e2039562932c2591a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dd872d5576cc94528f427c7264c2c438928cc6d2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53398.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53398.json
new file mode 100644
index 00000000000..cc32f71afbc
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53398.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2023-53398",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:43.050",
+ "lastModified": "2025-09-18T14:15:43.050",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmlx5: fix possible ptp queue fifo use-after-free\n\nFifo indexes are not checked during pop operations and it leads to\npotential use-after-free when poping from empty queue. Such case was\npossible during re-sync action. WARN_ON_ONCE covers future cases.\n\nThere were out-of-order cqe spotted which lead to drain of the queue and\nuse-after-free because of lack of fifo pointers check. Special check and\ncounter are added to avoid resync operation if SKB could not exist in the\nfifo because of OOO cqe (skb_id must be between consumer and producer\nindex)."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3a50cf1e8e5157b82268eee7e330dbe5736a0948",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/52e6e7a0bc04c85012a9251c7cf2d444a77eb966",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6afdedc4e66e3846ce497744f01b95c34bf39d21",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-533xx/CVE-2023-53399.json b/CVE-2023/CVE-2023-533xx/CVE-2023-53399.json
new file mode 100644
index 00000000000..56a22f84e46
--- /dev/null
+++ b/CVE-2023/CVE-2023-533xx/CVE-2023-53399.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2023-53399",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:43.177",
+ "lastModified": "2025-09-18T14:15:43.177",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()\n\nIf share is , share->path is NULL and it cause NULL pointer\ndereference issue."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1636e09779f83e10e6ed57d91ef94abcefdd206b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/227eb2689b44d0d60da3839b146983e73435924c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3ac00a2ab69b34189942afa9e862d5170cdcb018",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a70751dd7b60eab025e97e19b6b2477c6eaf2bbb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b35f6c031b87d9e51f141ff6de0ea59756a8e313",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53400.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53400.json
new file mode 100644
index 00000000000..9b3e23703a0
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53400.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2023-53400",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:43.293",
+ "lastModified": "2025-09-18T14:15:43.293",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: hda: Fix Oops by 9.1 surround channel names\n\nget_line_out_pfx() may trigger an Oops by overflowing the static array\nwith more than 8 channels. This was reported for MacBookPro 12,1 with\nCirrus codec.\n\nAs a workaround, extend for the 9.1 channels and also fix the\npotential Oops by unifying the code paths accessing the same array\nwith the proper size check."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/082dcd51667b29097500c824c37f24da997a6a8a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3b44ec8c5c44790a82f07e90db45643c762878c6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4ef155ddf9578bf035964d58739fdcd7dd44b4a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/546b1f5f45a355ae0d3a8041cdaca597dfcac825",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b5694aae4c2d9a288bafce7d38f122769e0428e6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dc8c569d59f17b17d7bca4f68c36bd571659921e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e8c7d7c43d5edd20e518fe1dfb2371d1fe6e8bb8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fcf637461019e9a5a0c12fc5c42a9db1779b0634",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53401.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53401.json
new file mode 100644
index 00000000000..e92767d50fb
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53401.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2023-53401",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:43.417",
+ "lastModified": "2025-09-18T14:15:43.417",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()\n\nKCSAN found an issue in obj_stock_flush_required():\nstock->cached_objcg can be reset between the check and dereference:\n\n==================================================================\nBUG: KCSAN: data-race in drain_all_stock / drain_obj_stock\n\nwrite to 0xffff888237c2a2f8 of 8 bytes by task 19625 on cpu 0:\n drain_obj_stock+0x408/0x4e0 mm/memcontrol.c:3306\n refill_obj_stock+0x9c/0x1e0 mm/memcontrol.c:3340\n obj_cgroup_uncharge+0xe/0x10 mm/memcontrol.c:3408\n memcg_slab_free_hook mm/slab.h:587 [inline]\n __cache_free mm/slab.c:3373 [inline]\n __do_kmem_cache_free mm/slab.c:3577 [inline]\n kmem_cache_free+0x105/0x280 mm/slab.c:3602\n __d_free fs/dcache.c:298 [inline]\n dentry_free fs/dcache.c:375 [inline]\n __dentry_kill+0x422/0x4a0 fs/dcache.c:621\n dentry_kill+0x8d/0x1e0\n dput+0x118/0x1f0 fs/dcache.c:913\n __fput+0x3bf/0x570 fs/file_table.c:329\n ____fput+0x15/0x20 fs/file_table.c:349\n task_work_run+0x123/0x160 kernel/task_work.c:179\n resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]\n exit_to_user_mode_loop+0xcf/0xe0 kernel/entry/common.c:171\n exit_to_user_mode_prepare+0x6a/0xa0 kernel/entry/common.c:203\n __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]\n syscall_exit_to_user_mode+0x26/0x140 kernel/entry/common.c:296\n do_syscall_64+0x4d/0xc0 arch/x86/entry/common.c:86\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nread to 0xffff888237c2a2f8 of 8 bytes by task 19632 on cpu 1:\n obj_stock_flush_required mm/memcontrol.c:3319 [inline]\n drain_all_stock+0x174/0x2a0 mm/memcontrol.c:2361\n try_charge_memcg+0x6d0/0xd10 mm/memcontrol.c:2703\n try_charge mm/memcontrol.c:2837 [inline]\n mem_cgroup_charge_skmem+0x51/0x140 mm/memcontrol.c:7290\n sock_reserve_memory+0xb1/0x390 net/core/sock.c:1025\n sk_setsockopt+0x800/0x1e70 net/core/sock.c:1525\n udp_lib_setsockopt+0x99/0x6c0 net/ipv4/udp.c:2692\n udp_setsockopt+0x73/0xa0 net/ipv4/udp.c:2817\n sock_common_setsockopt+0x61/0x70 net/core/sock.c:3668\n __sys_setsockopt+0x1c3/0x230 net/socket.c:2271\n __do_sys_setsockopt net/socket.c:2282 [inline]\n __se_sys_setsockopt net/socket.c:2279 [inline]\n __x64_sys_setsockopt+0x66/0x80 net/socket.c:2279\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nvalue changed: 0xffff8881382d52c0 -> 0xffff888138893740\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 1 PID: 19632 Comm: syz-executor.0 Not tainted 6.3.0-rc2-syzkaller-00387-g534293368afa #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023\n\nFix it by using READ_ONCE()/WRITE_ONCE() for all accesses to\nstock->cached_objcg."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/33391c7e1a2ad612bf3922cc168cb09a46bbe236",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/33d9490b27e5d8da4444aefd714a4f50189db978",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3b8abb3239530c423c0b97e42af7f7e856e1ee96",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53402.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53402.json
new file mode 100644
index 00000000000..b260db4d83f
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53402.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53402",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:43.527",
+ "lastModified": "2025-09-18T14:15:43.527",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nkernel/printk/index.c: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/13969236b6900b5a3625ad2193569588e978f1cc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2e07fa2e30d48d24a791483774a3d4b76769e0cf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/55bf243c514553e907efcf2bda92ba090eca8c64",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c578a68ffcdc2e8c72556bebdaae2b7500398e81",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53403.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53403.json
new file mode 100644
index 00000000000..9a4adc2abc4
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53403.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53403",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:43.643",
+ "lastModified": "2025-09-18T14:15:43.643",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntime/debug: Fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic at\nonce."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/15cffd01ed80e3506e29ba9f441e2358413b7317",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5b268d8abaec6cbd4bd70d062e769098d96670aa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b588b42d077ce93c98704b41003bcec6a564b738",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dc39fbd865a9819db4b622f610ba17b2ebc294f4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53404.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53404.json
new file mode 100644
index 00000000000..d5733719d9f
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53404.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53404",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:43.760",
+ "lastModified": "2025-09-18T14:15:43.760",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: fotg210: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4a71b15744b8f286718722f80b663c06ed909d8a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/55c2ffc534928f4732199617e3b746d79a57898f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6b4040f452037a7e95472577891d57c6b18c89c5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7d2d3bef6d700eb4261fb6761de2c95a9e3c0ac8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53405.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53405.json
new file mode 100644
index 00000000000..d54d4ed83bd
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53405.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53405",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:43.900",
+ "lastModified": "2025-09-18T14:15:43.900",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: gadget: gr_udc: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0933eca15f5223b5c2412080c8c3de8758465c78",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/30f9ba2396a1130eef7f2d3ee7ee8037b7c25be9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/73f4451368663ad28daa67980c6dd11d83b303eb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/be21a66e17ee0ab5f3513b6c86659e60cec5e981",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53406.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53406.json
new file mode 100644
index 00000000000..06a5ee758a1
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53406.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53406",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:44.040",
+ "lastModified": "2025-09-18T14:15:44.040",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/6236a6d2cdfb710bd8a82c4b179d0a034d0d99cb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/78d9586d8e728be1e360d3d0da7170c791d1d55e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7a038a681b7df78362d9fc7013e5395a694a9d3a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8d48a7887dbca22e064c20caf20ae7949019fe9b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53407.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53407.json
new file mode 100644
index 00000000000..b51899faa70
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53407.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53407",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:44.150",
+ "lastModified": "2025-09-18T14:15:44.150",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/67c931a3f2f061bf457995fd21fff114325e0c30",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7a6952fa0366d4408eb8695af1a0578c39ec718a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8da78a60f3323ce7aac589d49fb82f71a04bc835",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b14d188d0d0b86e2180525aefd570dbb6ebd6aa9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53408.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53408.json
new file mode 100644
index 00000000000..d076dc507ef
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53408.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53408",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:44.253",
+ "lastModified": "2025-09-18T14:15:44.253",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntrace/blktrace: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3036f5f5ae5210797d95446795df01c1249af9ad",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5286b72fb425291af5f4ca7285d73c16a08d8691",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/83e8864fee26f63a7435e941b7c36a20fd6fe93e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a2e4b48d6f9b39aa19bafe223f9dd436a692fc80",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53409.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53409.json
new file mode 100644
index 00000000000..b5b184f6430
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53409.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53409",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:44.387",
+ "lastModified": "2025-09-18T14:15:44.387",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: base: component: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/09709a49283f79184c998d6dafcc01590e4d654d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/79ac2b01e033181e21cc84216ace1f4160eb8950",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8deb87b1e810dd558371e88ffd44339fbef27870",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bf0fd01c7cc1061fb2cfda3e2044371642108e6c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53410.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53410.json
new file mode 100644
index 00000000000..1126df10878
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53410.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2023-53410",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:44.503",
+ "lastModified": "2025-09-18T14:15:44.503",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: ULPI: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2b8aa879e28df11e45855b04788050c61fb6b02a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8f4d25eba599c4bd4b5ea8ae8752cda480a9d563",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dcbe69f4f743a938344b32e60531ea55355e0c08",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53411.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53411.json
new file mode 100644
index 00000000000..37cf600d32f
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53411.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2023-53411",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:44.617",
+ "lastModified": "2025-09-18T14:15:44.617",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPM: EM: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/30fee10192e1239478a0987bc7ee445d5e980d46",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5100c4efc30636aa48ac517dece3c3b7f84fe367",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/84e4d4885d0ae011860fb599d50d01b8fdca2b87",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a0e8c13ccd6a9a636d27353da62c2410c4eca337",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e974e8f1e37d22c0de07374f8ddc84073fef2f1d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53412.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53412.json
new file mode 100644
index 00000000000..ed4c95826f1
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53412.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53412",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:44.727",
+ "lastModified": "2025-09-18T14:15:44.727",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/31de0b70ae5661a407e9d578bbc41de2d83ac25d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a91c99b1fe5c6f7e52fb932ad9e57ec7cfe913ec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b0a2663ecbe8f65cd3bab2b34dd90156ceb0dbb8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f30c7046dfa2748520a8045bb43ed2fbca0373b5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53413.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53413.json
new file mode 100644
index 00000000000..c05be8e6dd8
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53413.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53413",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:44.837",
+ "lastModified": "2025-09-18T14:15:44.837",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: isp116x: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/542a99cd6eadfb543bf190431c3fb520f3da0bbc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6f12097467ea1ef57f29dd29c1d082e4752cef37",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a60b4902a626dda08a31d9cf89ccce11bef8dd33",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a95f62d5813facbec20ec087472eb313ee5fa8af",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53414.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53414.json
new file mode 100644
index 00000000000..03eb5630d7d
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53414.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53414",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:44.943",
+ "lastModified": "2025-09-18T14:15:44.943",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: snic: Fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic at\nonce."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3dec769caf337c55814fbf79ec8c91a3cce23bf3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5a46d8bdaf03e8a4bb83f0c363326d9aa66cc122",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/995424f59ab52fb432b26ccb3abced63745ea041",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ad0e4e2fab928477f74d742e6e77d79245d3d3e7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53415.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53415.json
new file mode 100644
index 00000000000..0d5ae0a6ab7
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53415.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53415",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:45.070",
+ "lastModified": "2025-09-18T14:15:45.070",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: dwc3: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once.\n\nNote, the root dentry for the debugfs directory for the device needs to\nbe saved so we don't have to keep looking it up, which required a bit\nmore refactoring to properly create and remove it when needed."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/bab872b638130a18fd54d9adfad7db77ed6457be",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/be308d68785b205e483b3a0c61ba3a82da468f2c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ce234af49d103d95e3fdca59b25e0d0242f41bb4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cf52c320cf74245ce1c12b0bd48f77b87d77fbc9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53416.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53416.json
new file mode 100644
index 00000000000..ec5abdc65b1
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53416.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53416",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:45.190",
+ "lastModified": "2025-09-18T14:15:45.190",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: isp1362: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/9d537c35e48feba9d450acca0ff14a55ce1ec450",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b0a8195a84a725ca7936c213b5e056d2a3ab2a94",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c26e682afc14caa87d44beed271eec8991e93c65",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fb284bee1e213c94be9131d1aca7c16bd6ba259d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53417.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53417.json
new file mode 100644
index 00000000000..4ee7af34bf8
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53417.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53417",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:45.310",
+ "lastModified": "2025-09-18T14:15:45.310",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: sl811: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/04fdfec7b0286972cb5457ef958c92585447a39f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/54166af8941d0cf46b65cfa2fbce76e38d82fadf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bb4d5eefb67095d7c3b70b08498b23b7f2895f76",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e1523c4dbc54e164638ff8729d511cf91e27be04",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-534xx/CVE-2023-53418.json b/CVE-2023/CVE-2023-534xx/CVE-2023-53418.json
new file mode 100644
index 00000000000..2599d3cd6e7
--- /dev/null
+++ b/CVE-2023/CVE-2023-534xx/CVE-2023-53418.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2023-53418",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-09-18T14:15:45.423",
+ "lastModified": "2025-09-18T14:15:45.423",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. To make things simpler, just\ncall debugfs_lookup_and_remove() instead which handles all of the logic\nat once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/036ada6ca9eea926abc0b0ef550b10488d66d4d8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/72c25eb9ae4993ccac4821354ff34eb1f32e4781",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7a5fdd8660174a8056de57d1fdce3a7e9f77f60e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e3965acaf3739fde9d74ad82979b46d37c6c208f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-269xx/CVE-2024-26936.json b/CVE-2024/CVE-2024-269xx/CVE-2024-26936.json
index e6351daf809..82e3dcc3ee7 100644
--- a/CVE-2024/CVE-2024-269xx/CVE-2024-26936.json
+++ b/CVE-2024/CVE-2024-269xx/CVE-2024-26936.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-26936",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:08.833",
- "lastModified": "2024-11-21T09:03:25.637",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:19:00.480",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,47 +15,177 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: validar el tama\u00f1o del b\u00fafer de solicitud en smb2_allocate_rsp_buf() El b\u00fafer de respuesta debe asignarse en smb2_allocate_rsp_buf antes de validar la solicitud. Pero los campos en el payload y el encabezado smb2 se usan en smb2_allocate_rsp_buf(). Este parche agrega una validaci\u00f3n simple del tama\u00f1o del b\u00fafer para evitar posibles l\u00edmites en el b\u00fafer de solicitud."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-120"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.15",
+ "versionEndExcluding": "5.15.159",
+ "matchCriteriaId": "EB1D9107-3ACB-45AC-ABE5-DB4A71661453"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.16",
+ "versionEndExcluding": "6.1.88",
+ "matchCriteriaId": "B665F958-644E-434D-A78D-CCD1628D1774"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.29",
+ "matchCriteriaId": "0999E154-1E68-41FA-8DE3-9A735E382224"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.8.8",
+ "matchCriteriaId": "673B3328-389D-41A4-9617-669298635262"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "F850DCEC-E08B-4317-A33B-D2DCF39F601B"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/17cf0c2794bdb6f39671265aa18aea5c22ee8c4a",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/21ff9d7d223c5c19cb4334009e4c0c83a2f4d674",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2c27a64a2bc47d9bfc7c3cf8be14be53b1ee7cb6",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/5c20b242d4fed73a93591e48bfd9772e2322fb11",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/8f3d0bf1d0c62b539d54c5b9108a845cff619b99",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/17cf0c2794bdb6f39671265aa18aea5c22ee8c4a",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/21ff9d7d223c5c19cb4334009e4c0c83a2f4d674",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2c27a64a2bc47d9bfc7c3cf8be14be53b1ee7cb6",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/5c20b242d4fed73a93591e48bfd9772e2322fb11",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/8f3d0bf1d0c62b539d54c5b9108a845cff619b99",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-269xx/CVE-2024-26938.json b/CVE-2024/CVE-2024-269xx/CVE-2024-26938.json
index 6e98f828289..21e7d1e22ac 100644
--- a/CVE-2024/CVE-2024-269xx/CVE-2024-26938.json
+++ b/CVE-2024/CVE-2024-269xx/CVE-2024-26938.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-26938",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:09.077",
- "lastModified": "2024-11-21T09:03:25.890",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:15:37.710",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,47 +15,156 @@
"value": "En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() Si no tenemos VBT, o el VBT no declar\u00f3 el codificador en cuesti\u00f3n, no tendremos los 'devdata' para el codificador. En lugar de huir, simplemente sal de la c\u00e1rcel antes de tiempo. No podremos saber si el puerto es DP++ o no, pero que as\u00ed sea. (cereza escogida del compromiso 26410896206342c8a80d2b027923e9ee7d33b733)"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "6.1.84",
+ "matchCriteriaId": "247198E8-0497-4DB2-A365-EEEC6A2C8D19"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.24",
+ "matchCriteriaId": "8018C1D0-0A5F-48D0-BC72-A2B33FDDA693"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.12",
+ "matchCriteriaId": "6BE9771A-BAFD-4624-95F9-58D536540C53"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.3",
+ "matchCriteriaId": "4C59BBC3-6495-4A77-9C82-55EC7CDF5E02"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/32e39bab59934bfd3f37097d4dd85ac5eb0fd549",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/72e4d3fb72e9f0f016946158a7d95304832768e6",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/94cf2fb6feccd625e5b4e23e1b70f39a206f82ac",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a891add409e3bc381f4f68c2ce9d953f1865cb1f",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f4bbac954d8f9ab214ea1d4f385de4fa6bd92dd0",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/32e39bab59934bfd3f37097d4dd85ac5eb0fd549",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/72e4d3fb72e9f0f016946158a7d95304832768e6",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/94cf2fb6feccd625e5b4e23e1b70f39a206f82ac",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a891add409e3bc381f4f68c2ce9d953f1865cb1f",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f4bbac954d8f9ab214ea1d4f385de4fa6bd92dd0",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-269xx/CVE-2024-26946.json b/CVE-2024/CVE-2024-269xx/CVE-2024-26946.json
index 3c9bf95e49e..09b4ca5940d 100644
--- a/CVE-2024/CVE-2024-269xx/CVE-2024-26946.json
+++ b/CVE-2024/CVE-2024-269xx/CVE-2024-26946.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-26946",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:10.480",
- "lastModified": "2024-11-21T09:03:27.650",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:14:52.610",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,47 +15,152 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: kprobes/x86: use copy_from_kernel_nofault() para leer desde una direcci\u00f3n no segura Lea desde una direcci\u00f3n no segura con copy_from_kernel_nofault() en arch_adjust_kprobe_addr() porque esta funci\u00f3n se usa antes de verificar que la direcci\u00f3n est\u00e9 en texto O no. El bot Syzcaller encontr\u00f3 un error e inform\u00f3 el caso si el usuario especifica un \u00e1rea de datos inaccesible, arch_adjust_kprobe_addr() provocar\u00e1 un p\u00e1nico en el kernel. [ mingo: Aclar\u00f3 el comentario. ]"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-617"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.18",
+ "versionEndExcluding": "6.1.84",
+ "matchCriteriaId": "CE167D76-7275-482B-ABF1-1BF9AB18A64F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.24",
+ "matchCriteriaId": "8018C1D0-0A5F-48D0-BC72-A2B33FDDA693"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.12",
+ "matchCriteriaId": "6BE9771A-BAFD-4624-95F9-58D536540C53"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.3",
+ "matchCriteriaId": "4C59BBC3-6495-4A77-9C82-55EC7CDF5E02"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/20fdb21eabaeb8f78f8f701f56d14ea0836ec861",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/4e51653d5d871f40f1bd5cf95cc7f2d8b33d063b",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/6417684315087904fffe8966d27ca74398c57dd6",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b69f577308f1070004cafac106dd1a44099e5483",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f13edd1871d4fb4ab829aff629d47914e251bae3",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/20fdb21eabaeb8f78f8f701f56d14ea0836ec861",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/4e51653d5d871f40f1bd5cf95cc7f2d8b33d063b",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/6417684315087904fffe8966d27ca74398c57dd6",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b69f577308f1070004cafac106dd1a44099e5483",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f13edd1871d4fb4ab829aff629d47914e251bae3",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-269xx/CVE-2024-26947.json b/CVE-2024/CVE-2024-269xx/CVE-2024-26947.json
index 5d2cf268526..d48dc0a2f0b 100644
--- a/CVE-2024/CVE-2024-269xx/CVE-2024-26947.json
+++ b/CVE-2024/CVE-2024-269xx/CVE-2024-26947.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-26947",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:10.607",
- "lastModified": "2024-11-21T09:03:27.780",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:13:26.613",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,145 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: ARM: 9359/1: descarga: verifique si la publicaci\u00f3n est\u00e1 reservada para direcciones sin asignaci\u00f3n. Desde el commit a4d5613c4dc6 (\"arm: extienda pfn_valid para tener en cuenta la alineaci\u00f3n del mapa de memoria liberada\") cambia la sem\u00e1ntica de pfn_valid() para verificar la presencia del mapa de memoria para un PFN. A valid page for an address which is reserved but not mapped by the kernel[1], the system crashed during some uio test with the following memory layout: node 0: [mem 0x00000000c0a00000-0x00000000cc8fffff] node 0: [mem 0x00000000d0000000-0x00000000da1fffff] el dise\u00f1o de uio es? 0xc0900000, 0x100000 el seguimiento del fallo es como: No se puede manejar la solicitud de paginaci\u00f3n del kernel en la direcci\u00f3n virtual bff00000 [...] CPU: 1 PID: 465 Comm: startapp.bin Contaminado: GO 5.10.0 #1 Nombre del hardware: La PC del sistema basado en DT gen\u00e9rico est\u00e1 en b15_flush_kern_dcache_area+0x24/0x3c LR est\u00e1 en __sync_icache_dcache+0x6c/0x98 [...] (b15_flush_kern_dcache_area) de (__sync_icache_dcache+0x6c/0x98) (__sync_icache_dcache) de (set_pte_at+0x2 8/0x54) (set_pte_at) desde (remap_pfn_range+0x1a0/0x274) (remap_pfn_range) desde (uio_mmap+0x184/0x1b8 [uio]) (uio_mmap [uio]) desde (__mmap_region+0x264/0x5f4) (__mmap_region) desde (__do_mmap_mm+0x3ec/0x440) mil\u00edmetros) de (do_mmap+0x50/0x58) (do_mmap) de (vm_mmap_pgoff+0xfc/0x188) (vm_mmap_pgoff) de (ksys_mmap_pgoff+0xac/0xc4) (ksys_mmap_pgoff) de (ret_fast_syscall+0x0/0x5c) C\u00f3digo: e0801001 423001 e1c00003 f57ff04f (ee070f3e) ---[ end trace 09cf0734c3805d52 ]--- P\u00e1nico del kernel - no se sincroniza: excepci\u00f3n fatal. As\u00ed que verifique si PG_reserved estaba configurado para resolver este problema. [1]: https://lore.kernel.org/lkml/Zbtdue57RO0QScJM@linux.ibm.com/"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.4.167",
+ "versionEndExcluding": "5.5",
+ "matchCriteriaId": "B18EC31D-225D-498C-A031-31D354DD8801"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.10.87",
+ "versionEndExcluding": "5.11",
+ "matchCriteriaId": "5EF5E1BB-40DB-4980-BC84-3FB52D7B2E30"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.14",
+ "versionEndExcluding": "6.6.24",
+ "matchCriteriaId": "756F1E77-6E83-4610-9310-8DF006943A8E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.12",
+ "matchCriteriaId": "6BE9771A-BAFD-4624-95F9-58D536540C53"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.3",
+ "matchCriteriaId": "4C59BBC3-6495-4A77-9C82-55EC7CDF5E02"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/0c027c2bad7f5111c51a358b5d392e1a695dabff",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/0c66c6f4e21cb22220cbd8821c5c73fc157d20dc",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9f7ddc222cae8254e93d5c169a8ae11a49d912a7",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/fb3a122a978626b33de3367ee1762da934c0f512",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/0c027c2bad7f5111c51a358b5d392e1a695dabff",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/0c66c6f4e21cb22220cbd8821c5c73fc157d20dc",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9f7ddc222cae8254e93d5c169a8ae11a49d912a7",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/fb3a122a978626b33de3367ee1762da934c0f512",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-269xx/CVE-2024-26948.json b/CVE-2024/CVE-2024-269xx/CVE-2024-26948.json
index 7b7a08befcd..62eb89b4501 100644
--- a/CVE-2024/CVE-2024-269xx/CVE-2024-26948.json
+++ b/CVE-2024/CVE-2024-269xx/CVE-2024-26948.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-26948",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:10.757",
- "lastModified": "2024-11-21T09:03:27.907",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:12:33.380",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,89 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: agregue una verificaci\u00f3n dc_state NULL en dc_state_release [C\u00f3mo] Verifique si el estado es NULL antes de liberarlo."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-476"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "4.15",
+ "versionEndExcluding": "6.8.3",
+ "matchCriteriaId": "4FFB6769-10C5-4ED7-8A58-D64A9AD244B5"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/334b56cea5d9df5989be6cf1a5898114fa70ad98",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/d37a08f840485995e3fb91dad95e441b9d28a269",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/334b56cea5d9df5989be6cf1a5898114fa70ad98",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/d37a08f840485995e3fb91dad95e441b9d28a269",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-269xx/CVE-2024-26953.json b/CVE-2024/CVE-2024-269xx/CVE-2024-26953.json
index 6dc9d31846c..5c53236f28b 100644
--- a/CVE-2024/CVE-2024-269xx/CVE-2024-26953.json
+++ b/CVE-2024/CVE-2024-269xx/CVE-2024-26953.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-26953",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:11.457",
- "lastModified": "2024-11-21T09:03:28.677",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:12:16.610",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,131 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: esp: corrige el mal manejo de las p\u00e1ginas desde page_pool Cuando el skb se reorganiza durante esp_output (!esp->inline), se supone que las p\u00e1ginas provenientes de los fragmentos del skb original son devuelto al sistema a trav\u00e9s de put_page. Pero si las p\u00e1ginas del fragmento skb se originan en un page_pool, llamar a put_page en ellas desencadenar\u00e1 una fuga de page_pool que eventualmente resultar\u00e1 en un bloqueo. Esta fuga se puede observar f\u00e1cilmente cuando se usa CONFIG_DEBUG_VM y se realiza el reenv\u00edo ipsec + gre (no descargado): ERROR: Estado de p\u00e1gina incorrecto en el proceso ksoftirqd/16 pfn:1451b6 p\u00e1gina:00000000de2b8d32 refcount:0 mapcount:0 mapeo:0000000000000000 \u00edndice:0x1451b6000 pfn: 0x1451b6 banderas: 0x200000000000000(nodo=0|zona=2) tipo de p\u00e1gina: 0xffffffff() sin formato: 0200000000000000 muerto000000000040 ffff88810d23c000 0000000000000000 sin formato: 0001451b6000 0000000000000001 00000000ffffffff 0000000000000000 p\u00e1gina volcada porque: fuga de page_pool M\u00f3dulos vinculados en: ip_gre gre mlx5_ib mlx5_core xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink iptable_nat nf_nat xt_addrtype br_netfilter rpcrdma rdma_ucm ib_iser libiscsi scsi_transport_iscsi ib_umad rdma_cm ib_ipoib iw_cm ib_cm ib_uverbs ib_core overlay zram zsmalloc fuse [\u00faltima descarga: mlx5_core] CPU: 16 PID: 96 Comm: ksoftirqd/16 No contaminado 6 .8.0-rc4+ #22 Nombre del hardware: PC est\u00e1ndar QEMU (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 01/04/2014 Seguimiento de llamadas: dump_stack_lvl+0x36/0x50 bad_page+0x70/0xf0 free_unref_page_prepare+0x27a/0x460 free_unref_page+0x38/0x120 esp_ssg_unref.isra.0+0x15f/0x200 esp_output_tail+0x66d/0x780 esp_xmit+0x2c5/0x360 validar_xmit_xfrm+0x313/0x370 ? validar_xmit_skb+0x1d/0x330 validar_xmit_skb_list+0x4c/0x70 sch_direct_xmit+0x23e/0x350 __dev_queue_xmit+0x337/0xba0 ? nf_hook_slow+0x3f/0xd0 ip_finish_output2+0x25e/0x580 iptunnel_xmit+0x19b/0x240 ip_tunnel_xmit+0x5fb/0xb60 ipgre_xmit+0x14d/0x280 [ip_gre] dev_hard_start_xmit+0xc3/0x1c0 __dev_queue_xmit+0x208/0xba0? nf_hook_slow+0x3f/0xd0 ip_finish_output2+0x1ca/0x580 ip_sublist_rcv_finish+0x32/0x40 ip_sublist_rcv+0x1b2/0x1f0 ? ip_rcv_finish_core.constprop.0+0x460/0x460 ip_list_rcv+0x103/0x130 __netif_receive_skb_list_core+0x181/0x1e0 netif_receive_skb_list_internal+0x1b3/0x2c0 napi_gro_receive+0xc8/0x200 encuesta+0x52/0x90 __napi_poll+0x25/0x1a0 net_rx_action+0x28e/0x300 __do_softirq+0xc3/0x276 ? sort_range+0x20/0x20 run_ksoftirqd+0x1e/0x30 smpboot_thread_fn+0xa6/0x130 kthread+0xcd/0x100 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x31/0x50 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork_asm+0x11/0x20 La soluci\u00f3n sugerida es introducir un nuevo contenedor (skb_page_unref) que cubra tambi\u00e9n el recuento de p\u00e1ginas para las p\u00e1ginas page_pool."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.14",
+ "versionEndExcluding": "6.6.24",
+ "matchCriteriaId": "756F1E77-6E83-4610-9310-8DF006943A8E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.12",
+ "matchCriteriaId": "6BE9771A-BAFD-4624-95F9-58D536540C53"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.3",
+ "matchCriteriaId": "4C59BBC3-6495-4A77-9C82-55EC7CDF5E02"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/1abb20a5f4b02fb3020f88456fc1e6069b3cdc45",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/8291b4eac429c480386669444c6377573f5d8664",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/c3198822c6cb9fb588e446540485669cc81c5d34",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f278ff9db67264715d0d50e3e75044f8b78990f4",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/1abb20a5f4b02fb3020f88456fc1e6069b3cdc45",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/8291b4eac429c480386669444c6377573f5d8664",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/c3198822c6cb9fb588e446540485669cc81c5d34",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f278ff9db67264715d0d50e3e75044f8b78990f4",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-269xx/CVE-2024-26959.json b/CVE-2024/CVE-2024-269xx/CVE-2024-26959.json
index bdc4af36c8b..156f4299d82 100644
--- a/CVE-2024/CVE-2024-269xx/CVE-2024-26959.json
+++ b/CVE-2024/CVE-2024-269xx/CVE-2024-26959.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-26959",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:12.207",
- "lastModified": "2024-11-21T09:03:29.533",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:09:48.797",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,131 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: Bluetooth: btnxpuart: Reparar btnxpuart_close Reparar la programaci\u00f3n mientras el ERROR at\u00f3mico en btnxpuart_close(), purgar adecuadamente la cola de transmisi\u00f3n y liberar el skb de recepci\u00f3n. [10.973809] ERROR: programaci\u00f3n mientras es at\u00f3mico: kworker/u9:0/80/0x00000002... [10.980740] CPU: 3 PID: 80 Comm: kworker/u9:0 No contaminado 6.8.0-rc7-0.0.0-devel -00005-g61fdfceacf09 #1 [10.980751] Nombre de hardware: Toradex Verdin AM62 WB en Dahlia Board (DT) [10.980760] Cola de trabajo: hci0 hci_power_off [bluetooth] [10.981169] Seguimiento de llamadas: ... [10.981363] 8/0x78 [ 10.981373] uart_dtr_rts+0x104/0x114 [ 10.981381] tty_port_shutdown+0xd4/0xdc [ 10.981396] tty_port_close+0x40/0xbc [ 10.981407] uart_close+0x34/0x9c [ 10.9814 14] ttyport_close+0x50/0x94 [ 10.981430] serdev_device_close+0x40/0x50 [ 10.981442] btnxpuart_close+0x24/0x98 [btnxpuart] [ 10.981469] hci_dev_close_sync+0x2d8/0x718 [bluetooth] [ 10.981728] hci_dev_do_close+0x2c/0x70 [bluetooth] [ 10.981862] x64 [bluetooth]"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.4",
+ "versionEndExcluding": "6.6.24",
+ "matchCriteriaId": "744ADCF7-131A-4B69-8956-60677EBA568C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.12",
+ "matchCriteriaId": "6BE9771A-BAFD-4624-95F9-58D536540C53"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.3",
+ "matchCriteriaId": "4C59BBC3-6495-4A77-9C82-55EC7CDF5E02"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/586e099c93fe26b7bd40593979532f507ed9f6a4",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/664130c0b0309b360bc5bdd40a30604a9387bde8",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/74bcf708775c405f7fb6ed776ccd3e1957f38a52",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/d4e2365b07f1ae1f811a915b514caef5b2d6581e",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/586e099c93fe26b7bd40593979532f507ed9f6a4",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/664130c0b0309b360bc5bdd40a30604a9387bde8",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/74bcf708775c405f7fb6ed776ccd3e1957f38a52",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/d4e2365b07f1ae1f811a915b514caef5b2d6581e",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-269xx/CVE-2024-26963.json b/CVE-2024/CVE-2024-269xx/CVE-2024-26963.json
index 3bb9c5c3626..71e18ff4ed8 100644
--- a/CVE-2024/CVE-2024-269xx/CVE-2024-26963.json
+++ b/CVE-2024/CVE-2024-269xx/CVE-2024-26963.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-26963",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:12.610",
- "lastModified": "2024-11-21T09:03:30.133",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:09:17.943",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,47 +15,152 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: dwc3-am62: corrige el comportamiento de descarga/recarga del m\u00f3dulo. Como el PM en tiempo de ejecuci\u00f3n est\u00e1 habilitado, el tiempo de ejecuci\u00f3n del m\u00f3dulo se puede suspender cuando se llama a .remove(). Realice pm_runtime_get_sync() para asegurarse de que el m\u00f3dulo est\u00e9 activo antes de realizar cualquier operaci\u00f3n de registro. Hacer pm_runtime_put_sync() deber\u00eda deshabilitar refclk, por lo que no es necesario deshabilitarlo nuevamente. Corrige la siguiente advertencia al eliminar el m\u00f3dulo. [39.705310] ------------[ cortar aqu\u00ed ]------------ [ 39.710004] clk:162:3 ya deshabilitado [ 39.713941] ADVERTENCIA: CPU: 0 PID : 921 en drivers/clk/clk.c:1090 clk_core_disable+0xb0/0xb8 Llamamos a of_platform_populate() en .probe(), as\u00ed que llame a la funci\u00f3n de limpieza of_platform_depopulate() en .remove(). Desh\u00e1gase del ahora innecesario dwc3_ti_remove_core(). Sin esto, la recarga del m\u00f3dulo no funciona correctamente."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.19",
+ "versionEndExcluding": "6.1.84",
+ "matchCriteriaId": "8A5995DF-C743-49C4-8A7A-3FACE6B17F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.24",
+ "matchCriteriaId": "8018C1D0-0A5F-48D0-BC72-A2B33FDDA693"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.12",
+ "matchCriteriaId": "6BE9771A-BAFD-4624-95F9-58D536540C53"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.3",
+ "matchCriteriaId": "4C59BBC3-6495-4A77-9C82-55EC7CDF5E02"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/3895780fabd120d0fbd54354014e85207b25687c",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/629b534c42d04f0797980f2d1ed105fdb8906975",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/6661befe41009c210efa2c1bcd16a5cc4cff8a06",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/6c6a45645a2e6a272dfde14eddbb6706de63c25d",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7dfed9855397d0df4c6f748d1f66547ab3bad766",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/3895780fabd120d0fbd54354014e85207b25687c",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/629b534c42d04f0797980f2d1ed105fdb8906975",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/6661befe41009c210efa2c1bcd16a5cc4cff8a06",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/6c6a45645a2e6a272dfde14eddbb6706de63c25d",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7dfed9855397d0df4c6f748d1f66547ab3bad766",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-269xx/CVE-2024-26977.json b/CVE-2024/CVE-2024-269xx/CVE-2024-26977.json
index 743aea695b9..c16de097c4d 100644
--- a/CVE-2024/CVE-2024-269xx/CVE-2024-26977.json
+++ b/CVE-2024/CVE-2024-269xx/CVE-2024-26977.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-26977",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:14.860",
- "lastModified": "2024-11-21T09:03:32.193",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:36:44.537",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -17,6 +17,26 @@
],
"metrics": {
"cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ },
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
@@ -39,54 +59,184 @@
}
]
},
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.15.1",
+ "versionEndExcluding": "5.15.154",
+ "matchCriteriaId": "79004700-FD9D-47CD-B613-855D4AF7BB03"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.16",
+ "versionEndExcluding": "6.1.84",
+ "matchCriteriaId": "834D9BD5-42A6-4D74-979E-4D6D93F630FD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.24",
+ "matchCriteriaId": "8018C1D0-0A5F-48D0-BC72-A2B33FDDA693"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.12",
+ "matchCriteriaId": "6BE9771A-BAFD-4624-95F9-58D536540C53"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.3",
+ "matchCriteriaId": "4C59BBC3-6495-4A77-9C82-55EC7CDF5E02"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:-:*:*:*:*:*:*",
+ "matchCriteriaId": "40D9C0D1-0F32-4A2B-9840-1072F5497540"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "0460DA88-8FE1-46A2-9DDA-1F1ABA552E71"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "AF55383D-4DF2-45DC-93F7-571F4F978EAB"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "9E9481B2-8AA6-4CBD-B5D3-C10F51FF6D01"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "EBD45831-4B79-42BC-ABC0-86870F0DEA89"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc7:*:*:*:*:*:*",
+ "matchCriteriaId": "948A6B8D-1B72-4945-8680-354E53BE1C80"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/5e4b23e7a7b33a1e56bfa3e5598138a2234d55b6",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/6d21d0356aa44157a62e39c0d1a13d4c69a8d0c8",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7626913652cc786c238e2dd7d8740b17d41b2637",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/af280e137e273935f2e09f4d73169998298792ed",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b5d40f02e7222da032c2042aebcf2a07de9b342f",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f3749345a9b7295dd071d0ed589634cb46364f77",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/5e4b23e7a7b33a1e56bfa3e5598138a2234d55b6",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/6d21d0356aa44157a62e39c0d1a13d4c69a8d0c8",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7626913652cc786c238e2dd7d8740b17d41b2637",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/af280e137e273935f2e09f4d73169998298792ed",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b5d40f02e7222da032c2042aebcf2a07de9b342f",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f3749345a9b7295dd071d0ed589634cb46364f77",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-269xx/CVE-2024-26985.json b/CVE-2024/CVE-2024-269xx/CVE-2024-26985.json
index d2adc69ff85..6d5eb16eae9 100644
--- a/CVE-2024/CVE-2024-269xx/CVE-2024-26985.json
+++ b/CVE-2024/CVE-2024-269xx/CVE-2024-26985.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-26985",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:16.063",
- "lastModified": "2024-11-21T09:03:33.427",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:35:30.707",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,109 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: drm/xe: corrija la fuga de bo en intel_fb_bo_framebuffer_init. Agregue un bo sin referencia en la ruta del error, para evitar que se filtre una referencia de bo. Devuelve 0 en caso de \u00e9xito para aclarar la ruta del \u00e9xito. (cereza escogida del compromiso a2f3d731be3893e730417ae3190760fcaffdf549)"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-401"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.8",
+ "matchCriteriaId": "A6B3F478-AAC3-4675-897F-870080589B51"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/652ead9b746a63e4e79d7ad66d3edf0a8a5b0c2f",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7d8ac0942c312abda43b407eff72d31747a7b472",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/652ead9b746a63e4e79d7ad66d3edf0a8a5b0c2f",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7d8ac0942c312abda43b407eff72d31747a7b472",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-269xx/CVE-2024-26990.json b/CVE-2024/CVE-2024-269xx/CVE-2024-26990.json
index e76d0bd644b..ecf7a9e1823 100644
--- a/CVE-2024/CVE-2024-269xx/CVE-2024-26990.json
+++ b/CVE-2024/CVE-2024-269xx/CVE-2024-26990.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-26990",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:16.673",
- "lastModified": "2024-11-21T09:03:34.077",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:33:49.583",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,130 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: KVM: x86/mmu: Proteger contra escritura los SPTE L2 en la MMU TDP al borrar el estado sucio. Verifique kvm_mmu_page_ad_need_write_protect() cuando decida si desea proteger contra escritura o borrar los bits D en los SPTE de la MMU TDP. , de modo que la MMU TDP tenga en cuenta cualquier motivo espec\u00edfico de la funci\u00f3n para deshabilitar el registro sucio de bits D. Espec\u00edficamente, los SPTE de TDP MMU deben estar protegidos contra escritura cuando la TDP MMU se utiliza para ejecutar un L2 (es decir, L1 tiene EPT deshabilitado) y PML est\u00e1 habilitado. KVM siempre desactiva PML cuando se ejecuta L2, incluso cuando los GPA L1 y L2 est\u00e1n en alg\u00fan dominio, por lo que si no se protegen contra escritura los SPTE TDP MMU, las escrituras realizadas por L2 no se reflejar\u00e1n en el registro sucio. [sean: masajear el registro corto y el registro de cambios, modificar el formato de operaci\u00f3n ternario]"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.4",
+ "versionEndExcluding": "6.6.29",
+ "matchCriteriaId": "EA36A678-0133-4EFB-B4BE-29C569825E2D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.8.8",
+ "matchCriteriaId": "673B3328-389D-41A4-9617-669298635262"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/2673dfb591a359c75080dd5af3da484b89320d22",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/cdf811a937471af2d1facdf8ae80e5e68096f1ed",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/e20bff0f1b2de9cfe303dd35ff46470104a87404",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2673dfb591a359c75080dd5af3da484b89320d22",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/cdf811a937471af2d1facdf8ae80e5e68096f1ed",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/e20bff0f1b2de9cfe303dd35ff46470104a87404",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-269xx/CVE-2024-26992.json b/CVE-2024/CVE-2024-269xx/CVE-2024-26992.json
index ed3d764f5fe..67217a56539 100644
--- a/CVE-2024/CVE-2024-269xx/CVE-2024-26992.json
+++ b/CVE-2024/CVE-2024-269xx/CVE-2024-26992.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-26992",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:16.957",
- "lastModified": "2024-11-21T09:03:34.383",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:31:07.960",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,151 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: KVM: x86/pmu: deshabilitar el soporte para PEBS adaptativos. Eliminar el soporte para virtualizar PEBS adaptativos, ya que la implementaci\u00f3n de KVM tiene una arquitectura rota sin un camino obvio/f\u00e1cil a seguir, y porque exponer PEBS adaptativos puede filtrar los LBR del host al hu\u00e9sped, es decir, puede filtrar las direcciones del kernel del host al hu\u00e9sped. El error n\u00famero 1 es que KVM no tiene en cuenta los 32 bits superiores de IA32_FIXED_CTR_CTRL cuando (re)programa contadores fijos, por ejemplo, fix_ctrl_field() elimina los bits superiores, reprogram_fixed_counters() almacena variables locales como u8 y tambi\u00e9n trunca los bits superiores, etc. El error n\u00famero 2 es que, debido a que KVM _siempre_ establece precision_ip en un valor distinto de cero para eventos PEBS, perf _siempre_ generar\u00e1 un registro adaptativo, incluso si el invitado solicit\u00f3 un registro b\u00e1sico. Tenga en cuenta que KVM tambi\u00e9n habilitar\u00e1 PEBS adaptativo en *contador* individual, incluso si PEBS adaptativo no est\u00e1 expuesto al invitado, pero esto es benigno ya que se garantiza que MSR_PEBS_DATA_CFG ser\u00e1 cero, es decir, el invitado solo ver\u00e1 registros b\u00e1sicos. El error n\u00famero 3 est\u00e1 en rendimiento. intel_pmu_disable_fixed() tampoco borra los bits superiores, es decir, deja ICL_FIXED_0_ADAPTIVE configurado, e intel_pmu_enable_fixed() efectivamente tampoco borra ICL_FIXED_0_ADAPTIVE. Es decir, perf _siempre_ habilita contadores ADAPTIVOS, independientemente de lo que solicite KVM. El error n\u00famero 4 es que los PEBS adaptables *podr\u00edan* omitir efectivamente los filtros de eventos establecidos por el host, ya que el \"Grupo de informaci\u00f3n de acceso a memoria actualizado\" registra informaci\u00f3n que podr\u00eda no estar permitida por el espacio de usuario a trav\u00e9s de KVM_SET_PMU_EVENT_FILTER. El error n\u00famero 5 es que KVM no garantiza que los MSR LBR mantengan valores de invitado (o al menos ceros) al ingresar a una vCPU con PEBS adaptable, lo que permite al invitado leer los LBR del host, es decir, los RIP/direcciones del host, al habilitar las \"Entradas LBR\". registros. Deshabilite el soporte PEBS adaptable como soluci\u00f3n inmediata debido a la gravedad de la fuga de LBR en particular, y porque corregir todos los errores no ser\u00e1 trivial, por ejemplo, no es adecuado para realizar backporting a n\u00facleos estables. \u00a1Nota! Esto interrumpir\u00e1 la migraci\u00f3n en vivo, pero tratar de hacer que KVM funcione bien con la migraci\u00f3n en vivo ser\u00eda bastante complicado, no se garantizar\u00eda que funcione (es decir, KVM a\u00fan podr\u00eda matar/confundir al invitado) y no est\u00e1 claro si hay alguno disponible p\u00fablicamente. Los VMM que admiten PEBS adaptables, y mucho menos migran en vivo las m\u00e1quinas virtuales que admiten PEBS adaptables; por ejemplo, QEMU no admite PEBS de ninguna manera."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
+ "baseScore": 3.3,
+ "baseSeverity": "LOW",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 1.4
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.0",
+ "versionEndExcluding": "6.1.88",
+ "matchCriteriaId": "903B5D08-7DD7-4CA7-9837-2EE6A8A24927"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.29",
+ "matchCriteriaId": "0999E154-1E68-41FA-8DE3-9A735E382224"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.8.8",
+ "matchCriteriaId": "673B3328-389D-41A4-9617-669298635262"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/037e48ceccf163899374b601afb6ae8d0bf1d2ac",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/0fb74c00d140a66128afc0003785dcc57e69d312",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7a7650b3ac23e5fc8c990f00e94f787dc84e3175",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9e985cbf2942a1bb8fcef9adc2a17d90fd7ca8ee",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/037e48ceccf163899374b601afb6ae8d0bf1d2ac",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/0fb74c00d140a66128afc0003785dcc57e69d312",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7a7650b3ac23e5fc8c990f00e94f787dc84e3175",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9e985cbf2942a1bb8fcef9adc2a17d90fd7ca8ee",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-270xx/CVE-2024-27006.json b/CVE-2024/CVE-2024-270xx/CVE-2024-27006.json
index 2f7e865b225..0ccc0cdc780 100644
--- a/CVE-2024/CVE-2024-270xx/CVE-2024-27006.json
+++ b/CVE-2024/CVE-2024-270xx/CVE-2024-27006.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27006",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:19.053",
- "lastModified": "2024-11-21T09:03:36.310",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:24:00.397",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,109 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: Thermal/debugfs: agregue el incremento de conteo faltante a Thermal_debug_tz_trip_up() El campo de conteo en la estructura trip_stats, que representa la cantidad de veces que la temperatura de la zona estuvo por encima del punto de disparo, debe incrementarse en Thermal_debug_tz_trip_up(), por dos razones. Primero, si se cruza un punto de viaje en el camino hacia arriba por primera vez, Thermal_debug_update_temp() llamado desde update_temperature() no lo ve porque a\u00fan no se ha agregado a la matriz trips_crossed[] en el objeto struct tz_debugfs de la zona t\u00e9rmica. Por lo tanto, cuando se llama a Thermal_debug_tz_trip_up() despu\u00e9s de eso, el valor de conteo del punto de disparo es 0, y el intento de dividirlo durante el c\u00e1lculo de la temperatura promedio conduce a un error de divisi\u00f3n que provoca que el kernel falle. Establecer el conteo en 1 antes de la divisi\u00f3n increment\u00e1ndolo soluciona este problema. En segundo lugar, si se cruza un punto de viaje en el camino hacia arriba, pero ya se ha cruzado en el camino hacia arriba, es necesario incrementar su valor de conteo para registrar el hecho de que la temperatura de la zona est\u00e1 por encima del viaje en este momento. Sin hacer eso, si las mitigaciones aplicadas despu\u00e9s de cruzar el viaje hacen que la temperatura de la zona caiga por debajo de su umbral, el conteo no se actualizar\u00e1 para este episodio en absoluto y la temperatura promedio en el registro de estad\u00edsticas del viaje ser\u00e1 algo mayor de lo que deber\u00eda ser. . CC :6.8+ # 6.8+"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.8",
+ "matchCriteriaId": "A6B3F478-AAC3-4675-897F-870080589B51"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/9c8215d32e730b597c809a9d2090bf8ec1b79fcf",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b552f63cd43735048bbe9bfbb7a9dcfce166fbdd",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9c8215d32e730b597c809a9d2090bf8ec1b79fcf",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b552f63cd43735048bbe9bfbb7a9dcfce166fbdd",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-270xx/CVE-2024-27007.json b/CVE-2024/CVE-2024-270xx/CVE-2024-27007.json
index e2a864670d5..af6c6b021ba 100644
--- a/CVE-2024/CVE-2024-270xx/CVE-2024-27007.json
+++ b/CVE-2024/CVE-2024-270xx/CVE-2024-27007.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27007",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:19.180",
- "lastModified": "2024-11-21T09:03:36.437",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:22:27.887",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,109 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: userfaultfd: cambie src_folio despu\u00e9s de asegurarse de que no est\u00e9 fijado en UFFDIO_MOVE Commit d7a08838ab74 (\"mm: userfaultfd: corrija el cambio inesperado en src_folio cuando UFFDIO_MOVE falla\") movi\u00f3 src_folio->{mapping, index} cambiando a despu\u00e9s de borrar la tabla de p\u00e1ginas y asegurarse de que no est\u00e9 fijada. Esto evita fallos en el intercambio+migraci\u00f3n y posiblemente da\u00f1os en la memoria. Sin embargo, la confirmaci\u00f3n no solucion\u00f3 el problema en el caso de la p\u00e1gina enorme."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.8",
+ "matchCriteriaId": "A6B3F478-AAC3-4675-897F-870080589B51"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/c0205eaf3af9f5db14d4b5ee4abacf4a583c3c50",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/df5f6e683e7f21a15d8be6e7a0c7a46436963ebe",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/c0205eaf3af9f5db14d4b5ee4abacf4a583c3c50",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/df5f6e683e7f21a15d8be6e7a0c7a46436963ebe",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-270xx/CVE-2024-27009.json b/CVE-2024/CVE-2024-270xx/CVE-2024-27009.json
index 77f06511c4c..fddf76ebc68 100644
--- a/CVE-2024/CVE-2024-270xx/CVE-2024-27009.json
+++ b/CVE-2024/CVE-2024-270xx/CVE-2024-27009.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27009",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T06:15:19.360",
- "lastModified": "2024-11-21T09:03:36.687",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:20:42.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,47 +15,172 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: s390/cio: corrige la condici\u00f3n de ejecuci\u00f3n durante el procesamiento en l\u00ednea Existe una condici\u00f3n de ejecuci\u00f3n en ccw_device_set_online() que puede causar que el proceso en l\u00ednea falle, dejando el dispositivo afectado en un estado inconsistente. Como resultado, los intentos posteriores de configurar ese dispositivo en l\u00ednea fallan con el c\u00f3digo de retorno ENODEV. El problema se produce cuando llega una solicitud de verificaci\u00f3n de ruta despu\u00e9s de que se complete la espera hasta que se complete el estado final del dispositivo, pero antes de que se eval\u00fae el estado del resultado. Solucione este problema asegur\u00e1ndose de que el bloqueo del dispositivo CCW se mantenga entre la determinaci\u00f3n del estado final y la verificaci\u00f3n del estado del resultado. Tenga en cuenta que desde: commit 2297791c92d0 (\"s390/cio: no cancelar el registro del subcanal de los controladores secundarios\") es mucho m\u00e1s probable que se produzcan solicitudes de verificaci\u00f3n de ruta durante el arranque, lo que aumenta las posibilidades de que se produzca esta condici\u00f3n de ejecuci\u00f3n."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 4.7,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "HIGH",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.0,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-362"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.15",
+ "versionEndExcluding": "5.15.157",
+ "matchCriteriaId": "182116A5-ED53-4B3F-BB25-662CBF1602D6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.16",
+ "versionEndExcluding": "6.1.88",
+ "matchCriteriaId": "B665F958-644E-434D-A78D-CCD1628D1774"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.29",
+ "matchCriteriaId": "0999E154-1E68-41FA-8DE3-9A735E382224"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.8.8",
+ "matchCriteriaId": "673B3328-389D-41A4-9617-669298635262"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/2d8527f2f911fab84aec04df4788c0c23af3df48",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2df56f4ea769ff81e51bbb05699989603bde9c49",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/3076b3c38a704e10df5e143c213653309d532538",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/559f3a6333397ab6cd4a696edd65a70b6be62c6e",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a4234decd0fe429832ca81c4637be7248b88b49e",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2d8527f2f911fab84aec04df4788c0c23af3df48",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2df56f4ea769ff81e51bbb05699989603bde9c49",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/3076b3c38a704e10df5e143c213653309d532538",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/559f3a6333397ab6cd4a696edd65a70b6be62c6e",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a4234decd0fe429832ca81c4637be7248b88b49e",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-270xx/CVE-2024-27023.json b/CVE-2024/CVE-2024-270xx/CVE-2024-27023.json
index 694cbee01ae..a69788f8136 100644
--- a/CVE-2024/CVE-2024-270xx/CVE-2024-27023.json
+++ b/CVE-2024/CVE-2024-270xx/CVE-2024-27023.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27023",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T13:15:48.797",
- "lastModified": "2024-11-21T09:03:41.150",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:38:05.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,156 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: md: Se corrigi\u00f3 la versi\u00f3n faltante de 'active_io' para descarga submit_flushes atomic_set(&mddev->flush_pending, 1); rdev_for_each_rcu(rdev, mddev) atomic_inc(&mddev->flush_pending); bi->bi_end_io = md_end_flush submit_bio(bi); /* purgar io se realiza primero */ md_end_flush if (atomic_dec_and_test(&mddev->flush_pending)) percpu_ref_put(&mddev->active_io) -> active_io no se publica si (atomic_dec_and_test(&mddev->flush_pending)) -> falta la versi\u00f3n de active_io para Como consecuencia, mddev_suspend() esperar\u00e1 a que 'active_io' sea cero para siempre. Solucione este problema liberando 'active_io' en submit_flushes() si 'flush_pending' se reduce a cero."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.1.75",
+ "versionEndExcluding": "6.1.80",
+ "matchCriteriaId": "BF3730AD-A763-4E22-887C-337E656A6C6F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.6.14",
+ "versionEndExcluding": "6.6.19",
+ "matchCriteriaId": "78DBB0FA-813E-4DE0-A507-618276F53D3A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7.2",
+ "versionEndExcluding": "6.7.7",
+ "matchCriteriaId": "0390B1DD-C022-49C7-9FEF-4EECBEEA18C1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/02dad157ba11064d073f5499dc33552b227d5d3a",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/11f81438927f84edfaaeb5d5f10856c3a1c1fc82",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/6b2ff10390b19a2364af622b6666b690443f9f3f",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/855678ed8534518e2b428bcbcec695de9ba248e8",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/02dad157ba11064d073f5499dc33552b227d5d3a",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/11f81438927f84edfaaeb5d5f10856c3a1c1fc82",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/6b2ff10390b19a2364af622b6666b690443f9f3f",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/855678ed8534518e2b428bcbcec695de9ba248e8",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-270xx/CVE-2024-27027.json b/CVE-2024/CVE-2024-270xx/CVE-2024-27027.json
index 8d4cf3f543e..354753af318 100644
--- a/CVE-2024/CVE-2024-270xx/CVE-2024-27027.json
+++ b/CVE-2024/CVE-2024-270xx/CVE-2024-27027.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27027",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T13:15:48.987",
- "lastModified": "2024-11-21T09:03:41.650",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:43:15.933",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,110 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dpll: corrige dpll_xa_ref_*_del() para m\u00faltiples registros Actualmente, si hay m\u00faltiples registros del mismo pin en el mismo dispositivo dpll, se observan las siguientes advertencias: ADVERTENCIA: CPU: 5 PID: 2212 en drivers/dpll/dpll_core.c:143 dpll_xa_ref_pin_del.isra.0+0x21e/0x230 ADVERTENCIA: CPU: 5 PID: 2212 en drivers/dpll/dpll_core.c:223 __dpll_pin_unregister+0x2b3/0x2c0 El problema es que Tanto en dpll_xa_ref_dpll_del() como en dpll_xa_ref_pin_del() el registro solo se elimina de la lista en caso de que el recuento de referencias caiga a cero. Eso est\u00e1 mal, siempre hay que eliminar el registro. Para solucionar este problema, elimine el registro de la lista y lib\u00e9relo incondicionalmente, en lugar de hacerlo s\u00f3lo cuando el contador de referencia de referencia llegue a cero."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.11",
+ "matchCriteriaId": "9B95D3A6-E162-47D5-ABFC-F3FA74FA7CFD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.2",
+ "matchCriteriaId": "543A75FF-25B8-4046-A514-1EA8EDD87AB1"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/769324eb35143462542cdb15483cdaf4877bf661",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b27e32e9367dac024cd6f61f22655714f483fd67",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b446631f355ece73b13c311dd712c47381a23172",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/769324eb35143462542cdb15483cdaf4877bf661",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b27e32e9367dac024cd6f61f22655714f483fd67",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b446631f355ece73b13c311dd712c47381a23172",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-270xx/CVE-2024-27034.json b/CVE-2024/CVE-2024-270xx/CVE-2024-27034.json
index 5685ed8e63e..f3a6f5270f4 100644
--- a/CVE-2024/CVE-2024-270xx/CVE-2024-27034.json
+++ b/CVE-2024/CVE-2024-270xx/CVE-2024-27034.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27034",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T13:15:49.317",
- "lastModified": "2024-11-21T09:03:42.663",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:44:23.990",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,55 +15,173 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: f2fs: compress: correcci\u00f3n para cubrir la escritura normal del cl\u00faster con cp_rwsem Cuando sobrescribimos el cl\u00faster comprimido con el cl\u00faster normal, no debemos desbloquear cp_rwsem durante f2fs_write_raw_pages(); de lo contrario, los datos se da\u00f1ar\u00e1n si Los bloques parciales persistieron antes de CP y SPOR, debido a que los metadatos del cl\u00faster no se actualizaron at\u00f3micamente."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.6",
+ "versionEndExcluding": "5.15.153",
+ "matchCriteriaId": "5DF12F4F-0479-46F6-AF7F-50D1E1170B91"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.16",
+ "versionEndExcluding": "6.1.83",
+ "matchCriteriaId": "121A07F6-F505-4C47-86BF-9BB6CC7B6C19"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.23",
+ "matchCriteriaId": "E00814DC-0BA7-431A-9926-80FEB4A96C68"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.11",
+ "matchCriteriaId": "9B95D3A6-E162-47D5-ABFC-F3FA74FA7CFD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.2",
+ "matchCriteriaId": "543A75FF-25B8-4046-A514-1EA8EDD87AB1"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/2b1b14d9fc94b8feae20808684c8af28ec80f45b",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/52982edfcefd475cc34af663d5c47c0cddaa5739",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/542c8b3c774a480bfd0804291a12f6f2391b0cd1",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/75abfd61392b1db391bde6d738a30d685b843286",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7d420eaaa18ec8e2bb4eeab8c65c00492ef6f416",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/fd244524c2cf07b5f4c3fe8abd6a99225c76544b",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2b1b14d9fc94b8feae20808684c8af28ec80f45b",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/52982edfcefd475cc34af663d5c47c0cddaa5739",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/542c8b3c774a480bfd0804291a12f6f2391b0cd1",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/75abfd61392b1db391bde6d738a30d685b843286",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7d420eaaa18ec8e2bb4eeab8c65c00492ef6f416",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/fd244524c2cf07b5f4c3fe8abd6a99225c76544b",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-270xx/CVE-2024-27035.json b/CVE-2024/CVE-2024-270xx/CVE-2024-27035.json
index a92010b6bf2..69cb2efed2a 100644
--- a/CVE-2024/CVE-2024-270xx/CVE-2024-27035.json
+++ b/CVE-2024/CVE-2024-270xx/CVE-2024-27035.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27035",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T13:15:49.360",
- "lastModified": "2024-11-21T09:03:42.797",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:45:10.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,47 +15,152 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: f2fs: compress: correcci\u00f3n para garantizar la persistencia de los bloques comprimidos por CP. Si el bloque de datos en el cl\u00faster comprimido no persiste con los metadatos durante el punto de control, despu\u00e9s de SPOR, los datos pueden estar da\u00f1ados, garanticemos que escribir p\u00e1gina comprimida por punto de control."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.6",
+ "versionEndExcluding": "6.1.83",
+ "matchCriteriaId": "A1384EE6-520A-4583-A8DE-36A2B9FDABDC"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.23",
+ "matchCriteriaId": "E00814DC-0BA7-431A-9926-80FEB4A96C68"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.11",
+ "matchCriteriaId": "9B95D3A6-E162-47D5-ABFC-F3FA74FA7CFD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.2",
+ "matchCriteriaId": "543A75FF-25B8-4046-A514-1EA8EDD87AB1"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-270xx/CVE-2024-27039.json b/CVE-2024/CVE-2024-270xx/CVE-2024-27039.json
index e1dbbb5097c..f113f61d553 100644
--- a/CVE-2024/CVE-2024-270xx/CVE-2024-27039.json
+++ b/CVE-2024/CVE-2024-270xx/CVE-2024-27039.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27039",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T13:15:49.557",
- "lastModified": "2024-11-21T09:03:43.410",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:48:40.777",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,55 +15,173 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: clk: hisilicon: hi3559a: corrige un devm_kfree() err\u00f3neo 'p_clk' es una matriz asignada justo antes del bucle for para todos los clk que deben registrarse. Se incrementa en cada iteraci\u00f3n del bucle. Si falla una llamada a clk_register(), 'p_clk' puede se\u00f1alar algo diferente de lo que deber\u00eda liberarse. Lo mejor que podemos hacer es evitar esta liberaci\u00f3n incorrecta de memoria."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.14",
+ "versionEndExcluding": "5.15.153",
+ "matchCriteriaId": "D811A71A-BD96-4E48-ABE1-315AD51DCB5C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.16",
+ "versionEndExcluding": "6.1.83",
+ "matchCriteriaId": "121A07F6-F505-4C47-86BF-9BB6CC7B6C19"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.23",
+ "matchCriteriaId": "E00814DC-0BA7-431A-9926-80FEB4A96C68"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.11",
+ "matchCriteriaId": "9B95D3A6-E162-47D5-ABFC-F3FA74FA7CFD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.2",
+ "matchCriteriaId": "543A75FF-25B8-4046-A514-1EA8EDD87AB1"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/2cc572e0085ebd4b662b74a0f43222bc00df9a00",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/3f8445f1c746fda180a7f75372ed06b24e9cefe2",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/64c6a38136b74a2f18c42199830975edd9fbc379",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/95d1f1228c1bb54803ae57525b76db60e99b37e4",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/d575765b1b62e8bdb00af11caa1aabeb01763d9f",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/e0b0d1c46a2ce1e46b79d004a7270fdef872e097",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2cc572e0085ebd4b662b74a0f43222bc00df9a00",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/3f8445f1c746fda180a7f75372ed06b24e9cefe2",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/64c6a38136b74a2f18c42199830975edd9fbc379",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/95d1f1228c1bb54803ae57525b76db60e99b37e4",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/d575765b1b62e8bdb00af11caa1aabeb01763d9f",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/e0b0d1c46a2ce1e46b79d004a7270fdef872e097",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-270xx/CVE-2024-27056.json b/CVE-2024/CVE-2024-270xx/CVE-2024-27056.json
index d7fa8c268ef..6f0334c2860 100644
--- a/CVE-2024/CVE-2024-270xx/CVE-2024-27056.json
+++ b/CVE-2024/CVE-2024-270xx/CVE-2024-27056.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27056",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T13:15:50.360",
- "lastModified": "2025-03-28T22:15:16.373",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:28:12.780",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,146 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: iwlwifi: mvm: aseg\u00farese de que exista la cola de descarga TID La ruta del c\u00f3digo de reanudaci\u00f3n supone que se ha configurado la cola de TX para la descarga de TID. En el momento de la reanudaci\u00f3n, intenta sincronizar el puntero de escritura, ya que es posible que el firmware lo haya actualizado. En el caso inusual de que no se hayan enviado paquetes en el TID 0, la cola no se habr\u00e1 asignado y esto provocar\u00e1 una falla. Solucione este problema asegur\u00e1ndose de que la cola exista en el momento de la suspensi\u00f3n."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "6.1.132",
+ "matchCriteriaId": "5F37CFA2-5A70-4204-9A20-1847146496C7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.85",
+ "matchCriteriaId": "BCB56F36-C998-496A-A2E4-D9E0BB3A5BFC"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.11",
+ "matchCriteriaId": "9B95D3A6-E162-47D5-ABFC-F3FA74FA7CFD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "A780F817-2A77-4130-A9B7-5C25606314E3"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "AEB9199B-AB8F-4877-8964-E2BA95B5F15C"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/35afffaddbe8d310dc61659da0b1a337b0d0addc",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/4903303f25f48b5a1e34e6324c7fae9ccd6b959a",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/78f65fbf421a61894c14a1b91fe2fb4437b3fe5f",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ed35a509390ef4011ea2226da5dd6f62b73873b5",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/78f65fbf421a61894c14a1b91fe2fb4437b3fe5f",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ed35a509390ef4011ea2226da5dd6f62b73873b5",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-270xx/CVE-2024-27057.json b/CVE-2024/CVE-2024-270xx/CVE-2024-27057.json
index ad21e1baaae..8c3fb08b211 100644
--- a/CVE-2024/CVE-2024-270xx/CVE-2024-27057.json
+++ b/CVE-2024/CVE-2024-270xx/CVE-2024-27057.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27057",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T13:15:50.400",
- "lastModified": "2024-11-21T09:03:46.097",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:17:53.173",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,130 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: ASoC: SOF: ipc4-pcm: workaround para firmware bloqueado en suspensi\u00f3n del sistema Cuando el sistema se suspende mientras el audio est\u00e1 activo, se invoca sof_ipc4_pcm_hw_free() para restablecer las canalizaciones desde durante la suspensi\u00f3n el DSP est\u00e1 apagado, las transmisiones se reiniciar\u00e1n despu\u00e9s de reanudarse. Si el firmware falla mientras se ejecuta el audio (o cuando reiniciamos la transmisi\u00f3n antes de suspenderla), entonces sof_ipc4_set_multi_pipeline_state() fallar\u00e1 con un error de IPC y se interrumpir\u00e1 el cambio de estado. Esto provocar\u00e1 una desalineaci\u00f3n entre el estado del kernel y del firmware en el siguiente arranque del DSP, lo que provocar\u00e1 errores devueltos por el firmware para los mensajes IPC, lo que eventualmente provocar\u00e1 un error en la reanudaci\u00f3n del audio. Al cerrar la transmisi\u00f3n, los errores se ignoran, por lo que el estado del kernel se corregir\u00e1 en el siguiente inicio del DSP, es decir, en el segundo inicio despu\u00e9s del p\u00e1nico del DSP. Si se llama a sof_ipc4_trigger_pipelines() desde sof_ipc4_pcm_hw_free() entonces el par\u00e1metro de estado es SOF_IPC4_PIPE_RESET y solo en este caso. Trate un reinicio forzado de canalizaci\u00f3n de manera similar a como tratamos un pcm_free ignorando el error en el env\u00edo del estado para permitir que el estado del kernel sea consistente con el estado que tendr\u00e1 el firmware despu\u00e9s del siguiente arranque."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.19",
+ "versionEndExcluding": "6.6.23",
+ "matchCriteriaId": "4F143171-EF3B-487F-85D7-8B0A8733F239"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.11",
+ "matchCriteriaId": "9B95D3A6-E162-47D5-ABFC-F3FA74FA7CFD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "B9F4EA73-0894-400F-A490-3A397AB7A517"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "056BD938-0A27-4569-B391-30578B309EE3"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "F02056A5-B362-4370-9FF8-6F0BD384D520"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "62075ACE-B2A0-4B16-829D-B3DA5AE5CC41"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/3cac6eebea9b4bc5f041e157e45c76e212ad6759",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/c40aad7c81e5fba34b70123ed7ce3397fa62a4d2",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/d153e8b154f9746ac969c85a4e6474760453647c",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/3cac6eebea9b4bc5f041e157e45c76e212ad6759",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/c40aad7c81e5fba34b70123ed7ce3397fa62a4d2",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/d153e8b154f9746ac969c85a4e6474760453647c",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-270xx/CVE-2024-27063.json b/CVE-2024/CVE-2024-270xx/CVE-2024-27063.json
index 29db374faaf..6b2a109ffeb 100644
--- a/CVE-2024/CVE-2024-270xx/CVE-2024-27063.json
+++ b/CVE-2024/CVE-2024-270xx/CVE-2024-27063.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27063",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-01T13:15:50.707",
- "lastModified": "2024-11-21T09:03:46.987",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:48:53.580",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,131 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: leds: trigger: netdev: corrige el p\u00e1nico del kernel al cambiar el nombre de la interfaz, notifica el trigono. Commit d5e01266e7f5 (\"leds: trigger: netdev: agrega un modo de velocidad de enlace espec\u00edfico adicional\") en los diversos cambios, reelaborados la forma de configurar el modo LINKUP en el commit cee4bd16c319 (\"leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename\") y lo mov\u00ed a una funci\u00f3n gen\u00e9rica. Esto cambi\u00f3 la l\u00f3gica donde, en la implementaci\u00f3n anterior, se usaba el desarrollo del evento desencadenante para verificar si el operador estaba bien, pero en la nueva implementaci\u00f3n con la funci\u00f3n gen\u00e9rica, se usa el desarrollo en trigger_data. Esto es problem\u00e1tico y causa un posible p\u00e1nico en el kernel debido al hecho de que el desarrollador en trigger_data a\u00fan hace referencia al anterior, ya que el nuevo (pasado desde el evento desencadenante) a\u00fan debe retenerse y guardarse en la estructura trigger_data (hecho en el caso NETDEV_REGISTER). Al llamar a get_device_state(), se utiliza un net_dev no v\u00e1lido y esto provoca un p\u00e1nico en el kernel. Para manejar esto correctamente, mueva la llamada a get_device_state() despu\u00e9s de que el nuevo net_dev est\u00e9 configurado correctamente en trigger_data (en el caso NETDEV_REGISTER) y analice correctamente el nuevo dev."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.5",
+ "versionEndExcluding": "6.6.24",
+ "matchCriteriaId": "A2469D58-C2A6-4C9E-9A71-83830808C4FD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.7.12",
+ "matchCriteriaId": "6BE9771A-BAFD-4624-95F9-58D536540C53"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.3",
+ "matchCriteriaId": "4C59BBC3-6495-4A77-9C82-55EC7CDF5E02"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/10f2af1af8ab8a7064f193446abd5579d3def7e3",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/3f360227cb46edb2cd2494128e1e06ed5768a62e",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/415798bc07dd1c1ae3a656aa026580816e0b9fe8",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/acd025c7a7d151261533016a6ca2d38f2de04e87",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/10f2af1af8ab8a7064f193446abd5579d3def7e3",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/3f360227cb46edb2cd2494128e1e06ed5768a62e",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/415798bc07dd1c1ae3a656aa026580816e0b9fe8",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/acd025c7a7d151261533016a6ca2d38f2de04e87",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-281xx/CVE-2024-28157.json b/CVE-2024/CVE-2024-281xx/CVE-2024-28157.json
index 25f6efbbe7d..5adde949e63 100644
--- a/CVE-2024/CVE-2024-281xx/CVE-2024-28157.json
+++ b/CVE-2024/CVE-2024-281xx/CVE-2024-28157.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-28157",
"sourceIdentifier": "jenkinsci-cert@googlegroups.com",
"published": "2024-03-06T17:15:10.890",
- "lastModified": "2024-11-21T09:05:55.187",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:51:48.367",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,54 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:jenkins:gitbucket:*:*:*:*:*:jenkins:*:*",
+ "versionEndIncluding": "0.8",
+ "matchCriteriaId": "03B2BD20-FE2B-47A8-B184-06C0C393C290"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2024/03/06/3",
- "source": "jenkinsci-cert@googlegroups.com"
+ "source": "jenkinsci-cert@googlegroups.com",
+ "tags": [
+ "Mailing List",
+ "Third Party Advisory"
+ ]
},
{
"url": "https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3249",
- "source": "jenkinsci-cert@googlegroups.com"
+ "source": "jenkinsci-cert@googlegroups.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "http://www.openwall.com/lists/oss-security/2024/03/06/3",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Mailing List",
+ "Third Party Advisory"
+ ]
},
{
"url": "https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3249",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-360xx/CVE-2024-36015.json b/CVE-2024/CVE-2024-360xx/CVE-2024-36015.json
index 70ea26b36a4..972f58aa71c 100644
--- a/CVE-2024/CVE-2024-360xx/CVE-2024-36015.json
+++ b/CVE-2024/CVE-2024-360xx/CVE-2024-36015.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-36015",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-29T08:15:33.880",
- "lastModified": "2024-11-21T09:21:26.373",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:50:37.110",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,71 +15,259 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ppdev: agregue una verificaci\u00f3n de errores en Register_device. En Register_device, el valor de retorno de ida_simple_get no est\u00e1 marcado, por lo que ida_simple_get usar\u00e1 un valor de \u00edndice no v\u00e1lido. Para solucionar este problema, se debe verificar el \u00edndice despu\u00e9s de ida_simple_get. Cuando el valor del \u00edndice es anormal, se debe imprimir un mensaje de advertencia, se debe descartar el puerto y se debe registrar el valor."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-129"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "4.9.22",
+ "versionEndExcluding": "4.10",
+ "matchCriteriaId": "C3B7FF9A-7C53-4993-8BB9-9024BFBCEC48"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "4.10.7",
+ "versionEndExcluding": "4.11",
+ "matchCriteriaId": "002AFF57-621F-4DFC-BA33-323006B9E2CB"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "4.11.1",
+ "versionEndExcluding": "4.19.316",
+ "matchCriteriaId": "E8C7D906-0A7A-42B1-B654-E2613834E498"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "4.20",
+ "versionEndExcluding": "5.4.278",
+ "matchCriteriaId": "7FDBF235-DA18-49A1-8690-6C7272FD0701"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.5",
+ "versionEndExcluding": "5.10.219",
+ "matchCriteriaId": "E9063AF3-D593-43B7-810D-58B87F82F9F9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.11",
+ "versionEndExcluding": "5.15.161",
+ "matchCriteriaId": "31130639-53FE-4726-8986-434EE2528CB2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.16",
+ "versionEndExcluding": "6.1.93",
+ "matchCriteriaId": "EEFB78EE-F990-4197-BF1C-156760A55667"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.33",
+ "matchCriteriaId": "FCE796DF-3B50-4DC6-BAE5-95271068FC9E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.9.4",
+ "matchCriteriaId": "991B9791-966A-4D18-9E8D-A8AB128E5627"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:4.11:-:*:*:*:*:*:*",
+ "matchCriteriaId": "623D643F-123E-4D3E-8CBF-16BF845D734B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:4.11:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A659506C-868E-4E87-B0D8-E901BC2E9BDC"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:4.11:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "ACE2C8C3-F2AA-4A39-9D81-B0F8BB82B834"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:4.11:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "D67BFFD0-1A52-4F5D-98DB-D94B58FD8D30"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:4.11:rc7:*:*:*:*:*:*",
+ "matchCriteriaId": "7D996F38-22AC-4059-84FC-F7D69CE0CB9B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:4.11:rc8:*:*:*:*:*:*",
+ "matchCriteriaId": "97EFF4F7-E5F9-4FAA-AD58-94A24501AD59"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/5d5b24edad1107a2ffa99058f20f6aeeafeb5d39",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/65cd017d43f4319a56747d38308b0a24cf57299e",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b65d0410b879af0295d22438a4a32012786d152a",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b8c6b83cc3adff3ddf403c8c7063fe6d08b2b9d9",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/d32caf51379a4d71db03d3d4d7c22d27cdf7f68b",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/df9329247dbbf00f6057e002139ab3fa529ad828",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ec3468221efec6660ff656e9ebe51ced3520fc57",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/fbf740aeb86a4fe82ad158d26d711f2f3be79b3e",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/5d5b24edad1107a2ffa99058f20f6aeeafeb5d39",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/65cd017d43f4319a56747d38308b0a24cf57299e",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b65d0410b879af0295d22438a4a32012786d152a",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/b8c6b83cc3adff3ddf403c8c7063fe6d08b2b9d9",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/d32caf51379a4d71db03d3d4d7c22d27cdf7f68b",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/df9329247dbbf00f6057e002139ab3fa529ad828",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ec3468221efec6660ff656e9ebe51ced3520fc57",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/fbf740aeb86a4fe82ad158d26d711f2f3be79b3e",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-360xx/CVE-2024-36019.json b/CVE-2024/CVE-2024-360xx/CVE-2024-36019.json
index 7f8ef12b627..99aa2304e2d 100644
--- a/CVE-2024/CVE-2024-360xx/CVE-2024-36019.json
+++ b/CVE-2024/CVE-2024-360xx/CVE-2024-36019.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-36019",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-30T15:15:49.027",
- "lastModified": "2024-11-21T09:21:26.973",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:54:11.810",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,120 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: regmap: maple: corrige la corrupci\u00f3n de la cach\u00e9 en regcache_maple_drop() Cuando se mantiene el extremo superior de una entrada de bloque de cach\u00e9, la matriz de entrada[] debe indexarse seg\u00fan el desplazamiento del registro base de el bloque, es decir, max - mas.index. El c\u00f3digo indexaba la entrada [] solo por la direcci\u00f3n de registro, lo que generaba un acceso fuera de los l\u00edmites que copiaba parte de la memoria del kernel sobre el contenido de la cach\u00e9. Este error no fue detectado por la prueba regmap KUnit porque solo prueba con un bloque de registros que comienza en 0, por lo que mas.index == 0."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
+ "baseScore": 7.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.2
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-125"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.4",
+ "versionEndExcluding": "6.6.26",
+ "matchCriteriaId": "C9C9F649-5E73-4413-8AB4-A1022F98B8DA"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.8.5",
+ "matchCriteriaId": "DBD6C99E-4250-4DFE-8447-FF2075939D10"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/00bb549d7d63a21532e76e4a334d7807a54d9f31",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/3af6c5ac72dc5b721058132a0a1d7779e443175e",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/51c4440b9d3fd7c8234e6de9170a487c03506e53",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/00bb549d7d63a21532e76e4a334d7807a54d9f31",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/3af6c5ac72dc5b721058132a0a1d7779e443175e",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/51c4440b9d3fd7c8234e6de9170a487c03506e53",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-360xx/CVE-2024-36025.json b/CVE-2024/CVE-2024-360xx/CVE-2024-36025.json
index 82685912548..fcc83fe4c3d 100644
--- a/CVE-2024/CVE-2024-360xx/CVE-2024-36025.json
+++ b/CVE-2024/CVE-2024-360xx/CVE-2024-36025.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-36025",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-30T15:15:49.500",
- "lastModified": "2024-11-21T09:21:27.783",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:07:22.437",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,47 +15,167 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: scsi: qla2xxx: arreglada por uno en qla_edif_app_getstats() La matriz app_reply->elem[] se asign\u00f3 anteriormente en esta funci\u00f3n y tiene elementos app_req.num_ports. Por lo tanto, esta > comparaci\u00f3n necesita ser >= para evitar la corrupci\u00f3n de la memoria."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-193"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.15",
+ "versionEndExcluding": "5.15.156",
+ "matchCriteriaId": "0A40A9D8-C388-43D1-AA37-C61111EB1774"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.16",
+ "versionEndExcluding": "6.1.87",
+ "matchCriteriaId": "BDA59296-EDB8-44CD-98E4-C08C051569E6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.28",
+ "matchCriteriaId": "8D6315B0-B3BA-406C-B0DB-51D9A63753F0"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.8.7",
+ "matchCriteriaId": "531BDFB5-EF6A-4707-902E-146368303499"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/4406e4176f47177f5e51b4cc7e6a7a2ff3dbfbbd",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/60b87b5ecbe07d70897d35947b0bb3e76ccd1b3a",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/8c820f7c8e9b46238d277c575392fe9930207aab",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9fc74e367be4247a5ac39bb8ec41eaa73fade510",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ea8ac95c22c93acecb710209a7fd10b851afe817",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/4406e4176f47177f5e51b4cc7e6a7a2ff3dbfbbd",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/60b87b5ecbe07d70897d35947b0bb3e76ccd1b3a",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/8c820f7c8e9b46238d277c575392fe9930207aab",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9fc74e367be4247a5ac39bb8ec41eaa73fade510",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ea8ac95c22c93acecb710209a7fd10b851afe817",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-360xx/CVE-2024-36027.json b/CVE-2024/CVE-2024-360xx/CVE-2024-36027.json
index 6f6ef9f199a..8caae92895d 100644
--- a/CVE-2024/CVE-2024-360xx/CVE-2024-36027.json
+++ b/CVE-2024/CVE-2024-360xx/CVE-2024-36027.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-36027",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-30T16:15:11.070",
- "lastModified": "2024-11-21T09:21:28.023",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:18:21.993",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,109 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: btrfs: zonado: no marcar ZEROOUT en el b\u00fafer de extensi\u00f3n no sucio Btrfs borra el contenido de un b\u00fafer de extensi\u00f3n marcado como EXTENT_BUFFER_ZONED_ZEROOUT antes del env\u00edo de la biograf\u00eda. Este mecanismo se introduce para evitar un agujero de escritura en un b\u00fafer de extensi\u00f3n, que una vez asignado, se marca como sucio, pero resulta innecesario y se limpia dentro de una operaci\u00f3n de transacci\u00f3n. Actualmente, btrfs_clear_buffer_dirty() marca el b\u00fafer de extensi\u00f3n como EXTENT_BUFFER_ZONED_ZEROOUT y omite la funci\u00f3n de entrada. Si esta llamada ocurre mientras el b\u00fafer est\u00e1 bajo IO (con el indicador WRITEBACK configurado, sin el indicador DIRTY), podemos agregar el indicador ZEROOUT y borrar el contenido del b\u00fafer justo antes de enviar una biograf\u00eda. Como resultado: 1) puede provocar que se agregue un elemento de referencia retrasado defectuoso, lo que provoca un error de FS da\u00f1ado (EUCLEAN), y 2) escribe el nodo del \u00e1rbol borrado en el disco. El primer problema se analiz\u00f3 anteriormente en [1]. La corrupci\u00f3n ocurre cuando ejecuta una actualizaci\u00f3n de referencia retrasada. Por lo tanto, los datos en el disco est\u00e1n seguros. [1] https://lore.kernel.org/linux-btrfs/3f4f2a0ff1a6c818050434288925bdcf3cd719e5.1709124777.git.naohiro.aota@wdc.com/ Este \u00faltimo puede acceder a datos en disco. Pero, como ese nodo ya est\u00e1 procesado por btrfs_clear_buffer_dirty(), de todos modos se invalidar\u00e1 en la pr\u00f3xima confirmaci\u00f3n de transacci\u00f3n. Por lo tanto, la posibilidad de combatir la corrupci\u00f3n es relativamente peque\u00f1a. De todos modos, debemos omitir marcar ZEROOUT en un b\u00fafer de extensi\u00f3n que no sea DIRTY, para mantener intacto el contenido bajo IO."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
+ "baseScore": 7.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.2
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.8",
+ "matchCriteriaId": "A6B3F478-AAC3-4675-897F-870080589B51"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/68879386180c0efd5a11e800b0525a01068c9457",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f4b994fccbb6f294c4b31a6ca0114b09f7245043",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/68879386180c0efd5a11e800b0525a01068c9457",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f4b994fccbb6f294c4b31a6ca0114b09f7245043",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-360xx/CVE-2024-36028.json b/CVE-2024/CVE-2024-360xx/CVE-2024-36028.json
index 3ab1d769115..f62596bed08 100644
--- a/CVE-2024/CVE-2024-360xx/CVE-2024-36028.json
+++ b/CVE-2024/CVE-2024-360xx/CVE-2024-36028.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-36028",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-30T16:15:11.153",
- "lastModified": "2024-11-21T09:21:28.140",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:20:15.520",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,178 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: mm/hugetlb: corrija DEBUG_LOCKS_WARN_ON(1) cuando dissolve_free_hugetlb_folio() Cuando hice pruebas de falla de memoria recientemente, aparece la siguiente advertencia: DEBUG_LOCKS_WARN_ON(1) ADVERTENCIA: CPU: 8 PID: 1011 en kernel/locking/lockdep.c:232 __lock_acquire+0xccb/0x1ca0 M\u00f3dulos vinculados en: mce_inject hwpoison_inject CPU: 8 PID: 1011 Comm: bash Kdump: cargado No contaminado 6.9.0-rc3-next-20240410-00012-gdb69f219f4be #3 Hardware nombre: PC est\u00e1ndar QEMU (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 01/04/2014 RIP: 0010:__lock_acquire+0xccb/0x1ca0 RSP: 0018:ffffa7a1c7fe3bd0 EFLAGS: 00000082 RAX: 0000000000000000 RBX: eb851eb853975fcf RCX: ffffa1ce5fc1c9c8 RDX: 00000000ffffffd8 RSI: 0000000000000027 RDI: ffffa1ce5fc1c9c0 RBP: 1c6865d3280 R08: fffffffb0f570a8 R09: 0000000000009ffb R10: 0000000000000286 R11: fffffffb0f2ad50 R12: ffffa1c6865d3d10 R13: ffffa1c6865d3c70 : 0000000000000000 R15: 0000000000000004 FS: 00007ff9f32aa740( 0000) GS:ffffa1ce5fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff9f3134ba0 CR3: 00000008484e 4000 CR4: 00000000000006f0 Seguimiento de llamadas: lock_acquire+0xbe/0x2d0 _raw_spin_lock_irqsave+0x3a/0x60 hugepage_subpool_put_pages. part.0+0xe/0xc0 free_huge_folio+0x253/0x3f0 dissolve_free_huge_page+0x147/0x210 __page_handle_poison+0x9/0x70 Memory_failure+0x4e6/0x8c0 hard_offline_page_store+0x55/0xa0 kernfs_fop_write_iter+0x12c/ 0x1d0 vfs_write+0x380/0x540 ksys_write+0x64/0xe0 do_syscall_64+0xbc /0x1d0 Entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff9f3114887 RSP: 002b:00007ffecbacb458 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007ff9f3114887 RDX: 000000000000000c RSI: 0000564494164e10 RDI: 0000000000000001 RBP: 0000564494164e10 00007ff9f31d1460 R09: 000000007fffffff R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c R13: 00007ff9f321b780 R14: 00007ff9f3217600 R15: 00007ff9f3216a00 P\u00e1nico del kernel: no se sincroniza: kernel: p\u00e1nico_on_warn configurado... CPU: 8 PID: 1011 Comm: bash Kdump: cargado No contaminado 6.9 .0-rc3-next-20240410-00012-gdb69f219f4be #3 Nombre del hardware: PC est\u00e1ndar QEMU (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 01/04/2014 Llamada Seguimiento: p\u00e1nico+0x326/0x350 check_panic_on_warn+0x4f/0x50 __warn+0x98/0x190 report_bug+0x18e/0x1a0 handle_bug+0x3d/0x70 exc_invalid_op+0x18/0x70 asm_exc_invalid_op+0x1a/0x20 RIP: 0010:__lock_adquirir+0xccb/0x1ca0 RSP : 0018:ffffa7a1c7fe3bd0 EFLAGS: 00000082 RAX: 0000000000000000 RBX: eb851eb853975fcf RCX: ffffa1ce5fc1c9c8 RDX: 00000000ffffffd8 RSI: 027 RDI: ffffa1ce5fc1c9c0 RBP: ffffa1c6865d3280 R08: fffffffb0f570a8 R09: 0000000000009ffb R10: 00000000000000286 R11: fffffffb0f2ad50 R12: ffffa1c6865d 3d10 R13: ffffa1c6865d3c70 R14: 0000000000000000 R15 : 0000000000000004 lock_acquire+0xbe/0x2d0 _raw_spin_lock_irqsave+0x3a/0x60 hugepage_subpool_put_pages.part.0+0xe/0xc0 free_huge_folio+0x253/0x3f0 dissolve_free_huge_page+0x147/0x210 __page_handle_ veneno+0x9/0x70 error_de_memoria+0x4e6/0x8c0 hard_offline_page_store+0x55/0xa0 kernfs_fop_write_iter+0x12c/ 0x1d0 vfs_write+0x380/0x540 ksys_write+0x64/0xe0 do_syscall_64+0xbc/0x1d0 Entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff9f3114887 RSP: 002b:00007ffecbacb4 58 EFLAGS: 00000246 ORIG_RAX: 00000000000000001 RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007ff9f3114887 RDX: 000000000000000c RSI : 0000564494164e10 RDI: 0000000000000001 RBP: 0000564494164e10 R08: 00007ff9f31d1460 R09: 000000007ffffff R10: 0000000000000000 R11: 000000000000246 R12: 000000000000000c R13: 00007ff9f321b780 R14: 00007ff9f3217600 R15: 00007ff9f3216a00 Despu\u00e9s de que git divida e indague en el c\u00f3digo, creo que la causa ra\u00edz es que el campo _deferred_list del folio est\u00e1 unido con el campo _hugetlb_subpool. En __update_and_free_hugetlb_folio(), folio->_deferred_ ---truncado---"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 4.7,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "HIGH",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.0,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-362"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.1.47",
+ "versionEndExcluding": "6.1.91",
+ "matchCriteriaId": "DFEEC5BA-10BC-4DAA-9A67-D344B34F252C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.4.11",
+ "versionEndExcluding": "6.5",
+ "matchCriteriaId": "677478F5-EA5F-4891-AAEE-09DCD9CBF77F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.5.1",
+ "versionEndExcluding": "6.6.31",
+ "matchCriteriaId": "88481740-C5F3-4448-8069-4962A0D3DA44"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.8.9",
+ "matchCriteriaId": "5F9041E5-8358-4EF7-8F98-B812EDE49612"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:-:*:*:*:*:*:*",
+ "matchCriteriaId": "A2D9420A-9BF4-4C16-B6DA-8A1D279F7384"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "5B1C14ED-ABC4-41D3-8D9C-D38C6A65B4DE"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc7:*:*:*:*:*:*",
+ "matchCriteriaId": "F187F8CD-249A-4AF1-877B-08E8C24A1A10"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "F850DCEC-E08B-4317-A33B-D2DCF39F601B"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/2effe407f7563add41750fd7e03da4ea44b98099",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/52ccdde16b6540abe43b6f8d8e1e1ec90b0983af",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7e0a322877416e8c648819a8e441cf8c790b2cce",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9c9b32d46afab2d911897914181c488954012300",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/2effe407f7563add41750fd7e03da4ea44b98099",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/52ccdde16b6540abe43b6f8d8e1e1ec90b0983af",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7e0a322877416e8c648819a8e441cf8c790b2cce",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9c9b32d46afab2d911897914181c488954012300",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-360xx/CVE-2024-36032.json b/CVE-2024/CVE-2024-360xx/CVE-2024-36032.json
index b54700c2a28..72bce1d0112 100644
--- a/CVE-2024/CVE-2024-360xx/CVE-2024-36032.json
+++ b/CVE-2024/CVE-2024-360xx/CVE-2024-36032.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-36032",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-30T16:15:11.490",
- "lastModified": "2024-11-21T09:21:28.780",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:20:55.040",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -17,6 +17,26 @@
],
"metrics": {
"cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
+ "baseScore": 7.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.2
+ },
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
@@ -39,46 +59,163 @@
}
]
},
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-668"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.12",
+ "versionEndExcluding": "5.15.162",
+ "matchCriteriaId": "BD852924-11EF-4EBB-B88D-50A6300754D3"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.16",
+ "versionEndExcluding": "6.1.91",
+ "matchCriteriaId": "4F8C886C-75AA-469B-A6A9-12BF1A29C0D5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.31",
+ "matchCriteriaId": "CDDB1F69-36AC-41C1-9192-E7CCEF5FFC00"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.8.10",
+ "matchCriteriaId": "6A6B920C-8D8F-4130-86B4-AD334F4CF2E3"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "F850DCEC-E08B-4317-A33B-D2DCF39F601B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "91326417-E981-482E-A5A3-28BC1327521B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:*",
+ "matchCriteriaId": "DAECDCD8-F556-4606-8D7B-5C6D47A501F2"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/57062aa13e87b1a78a4a8f6cb5fab6ba24f5f488",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/62d5550ab62042dcceaf18844d0feadbb962cffe",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/6b63e0ef4d3ce0080395e5091fba2023f246c45a",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a571044cc0a0c944e7c12237b6768aeedd7480e1",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/cda0d6a198e2a7ec6f176c36173a57bdd8af7af2",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/57062aa13e87b1a78a4a8f6cb5fab6ba24f5f488",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/62d5550ab62042dcceaf18844d0feadbb962cffe",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/6b63e0ef4d3ce0080395e5091fba2023f246c45a",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a571044cc0a0c944e7c12237b6768aeedd7480e1",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/cda0d6a198e2a7ec6f176c36173a57bdd8af7af2",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-360xx/CVE-2024-36033.json b/CVE-2024/CVE-2024-360xx/CVE-2024-36033.json
index aa895e5d189..4c58f1f5ebd 100644
--- a/CVE-2024/CVE-2024-360xx/CVE-2024-36033.json
+++ b/CVE-2024/CVE-2024-360xx/CVE-2024-36033.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-36033",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-30T16:15:11.567",
- "lastModified": "2024-11-21T09:21:28.980",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:36:14.127",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,47 +15,166 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: Bluetooth: qca: corrige la fuga de informaci\u00f3n al obtener la identificaci\u00f3n de la placa. Agregue la verificaci\u00f3n de cordura que falta al recuperar la identificaci\u00f3n de la placa para evitar fugas de datos de losa cuando luego solicite el firmware."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
+ "baseScore": 7.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.2
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-668"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.8.10",
+ "matchCriteriaId": "6A6B920C-8D8F-4130-86B4-AD334F4CF2E3"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "F850DCEC-E08B-4317-A33B-D2DCF39F601B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "91326417-E981-482E-A5A3-28BC1327521B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:*",
+ "matchCriteriaId": "DAECDCD8-F556-4606-8D7B-5C6D47A501F2"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/0adcf6be1445ed50bfd4a451a7a782568f270197",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a3dff121a7f5104c4c2d47edaa2351837ef645dd",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ba307abed5e09759845c735ba036f8c12f55b209",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/bcccdc947d2ca5972b1e92d0dea10803ddc08ceb",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f30c37cb4549baf8377434892d520fe7769bdba7",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/0adcf6be1445ed50bfd4a451a7a782568f270197",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a3dff121a7f5104c4c2d47edaa2351837ef645dd",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ba307abed5e09759845c735ba036f8c12f55b209",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/bcccdc947d2ca5972b1e92d0dea10803ddc08ceb",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f30c37cb4549baf8377434892d520fe7769bdba7",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-368xx/CVE-2024-36887.json b/CVE-2024/CVE-2024-368xx/CVE-2024-36887.json
index e248a35e4e5..005363cc569 100644
--- a/CVE-2024/CVE-2024-368xx/CVE-2024-36887.json
+++ b/CVE-2024/CVE-2024-368xx/CVE-2024-36887.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-36887",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-30T16:15:12.243",
- "lastModified": "2024-11-21T09:22:44.220",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:37:53.773",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,130 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: e1000e: cambie usleep_range a udelay en el acceso mdic de PHY. Esta es una reversi\u00f3n parcial de el commit 6dbdd4de0362 (\"e1000e: soluci\u00f3n alternativa para errores MDI espor\u00e1dicos en sistemas Meteor Lake\"). El commit a la que se hace referencia us\u00f3 usleep_range dentro de las rutinas de acceso PHY, que a veces se llaman desde un contexto at\u00f3mico. Esto puede provocar un p\u00e1nico en el kernel en algunos escenarios, como la desconexi\u00f3n y reconexi\u00f3n de cables en sistemas vPro. Resuelva esto volviendo a cambiar las llamadas usleep_range a udelay."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.6.26",
+ "versionEndExcluding": "6.6.31",
+ "matchCriteriaId": "88912E6F-CE7E-4A50-950B-56CD7F6C74E5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8.5",
+ "versionEndExcluding": "6.8.10",
+ "matchCriteriaId": "96717D5F-E607-4DF2-86EA-476413A237E6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "F850DCEC-E08B-4317-A33B-D2DCF39F601B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "91326417-E981-482E-A5A3-28BC1327521B"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/387f295cb2150ed164905b648d76dfcbd3621778",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/950d5226cd6bb83ba720961a8d4d5cf79e6afd57",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f8a139656c95db893a543159873c57a470d7376d",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/387f295cb2150ed164905b648d76dfcbd3621778",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/950d5226cd6bb83ba720961a8d4d5cf79e6afd57",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/f8a139656c95db893a543159873c57a470d7376d",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-368xx/CVE-2024-36890.json b/CVE-2024/CVE-2024-368xx/CVE-2024-36890.json
index 592374db455..5819f70e07e 100644
--- a/CVE-2024/CVE-2024-368xx/CVE-2024-36890.json
+++ b/CVE-2024/CVE-2024-368xx/CVE-2024-36890.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-36890",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-30T16:15:12.493",
- "lastModified": "2024-11-21T09:22:44.687",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:41:38.203",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,166 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm/slab: make __free(kfree) acepta punteros de error Actualmente, si una asignaci\u00f3n liberada autom\u00e1ticamente es un puntero de error que provocar\u00e1 un bloqueo. Un ejemplo de esto est\u00e1 en wm831x_gpio_dbg_show(). 171 caracteres *etiqueta __free(kfree) = gpiochip_dup_line_label(chip, i); 172 if (IS_ERR(etiqueta)) { 173 dev_err(wm831x->dev, \"Error al duplicar la etiqueta\\n\"); 174 contin\u00faan; 175 } La funci\u00f3n de limpieza autom\u00e1tica tambi\u00e9n deber\u00eda comprobar si hay indicadores de error; de lo contrario, seguiremos teniendo problemas como este."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-763"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.1.79",
+ "versionEndExcluding": "6.1.91",
+ "matchCriteriaId": "C3AC03E4-5FB1-4289-ADD7-C4D83F763978"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.5",
+ "versionEndExcluding": "6.6.31",
+ "matchCriteriaId": "9CB26EA3-7B5D-4DF3-9158-7496BD09926F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.8.10",
+ "matchCriteriaId": "6A6B920C-8D8F-4130-86B4-AD334F4CF2E3"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "F850DCEC-E08B-4317-A33B-D2DCF39F601B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "91326417-E981-482E-A5A3-28BC1327521B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:*",
+ "matchCriteriaId": "DAECDCD8-F556-4606-8D7B-5C6D47A501F2"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/79cbe0be6c0317b215ddd8bd3e32f0afdac48543",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9f6eb0ab4f95240589ee85fd9886a944cd3645b2",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ac6cf3ce9b7d12acb7b528248df5f87caa25fcdc",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/cd7eb8f83fcf258f71e293f7fc52a70be8ed0128",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/79cbe0be6c0317b215ddd8bd3e32f0afdac48543",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/9f6eb0ab4f95240589ee85fd9886a944cd3645b2",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ac6cf3ce9b7d12acb7b528248df5f87caa25fcdc",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/cd7eb8f83fcf258f71e293f7fc52a70be8ed0128",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-368xx/CVE-2024-36892.json b/CVE-2024/CVE-2024-368xx/CVE-2024-36892.json
index 38344cfc78b..612002269a2 100644
--- a/CVE-2024/CVE-2024-368xx/CVE-2024-36892.json
+++ b/CVE-2024/CVE-2024-368xx/CVE-2024-36892.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-36892",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-30T16:15:12.680",
- "lastModified": "2024-11-21T09:22:44.947",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:46:34.400",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,124 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm/slub: evita poner a cero el puntero libre de objetos externos para un solo commit libre 284f17ac13fe (\"mm/slub: maneja la liberaci\u00f3n masiva y de objetos individuales por separado\") divide la liberaci\u00f3n de objetos \u00fanicos y masivos en dos funciones slab_free() y slab_free_bulk() lo que lleva a slab_free() a llamar a slab_free_hook() directamente en lugar de slab_free_freelist_hook(). Si se establece `init_on_free`, slab_free_hook() pone a cero el objeto. Luego, si se configuran `slub_debug=F` y `CONFIG_SLAB_FREELIST_HARDENED`, la ruta lenta do_slab_free() ejecuta comprobaciones de coherencia de la lista libre e intenta decodificar un freepointer puesto a cero, lo que conduce a una detecci\u00f3n de \"Freepointer corrupto\" en check_object(). Durante la liberaci\u00f3n masiva, slab_free_freelist_hook() no se ve afectado ya que siempre establece el puntero libre de sus objetos usando set_freepointer() para mantener su lista libre reconstruida despu\u00e9s de `init_on_free`. Para un solo libre, el puntero libre del objeto debe evitarse cuando se almacena fuera del objeto si est\u00e1 configurado \"init_on_free\". El puntero libre se deja como est\u00e1, check_object() puede detectar m\u00e1s adelante un valor de puntero no v\u00e1lido debido a un desbordamiento de objetos. Para reproducir, configure `slub_debug=FU init_on_free=1 log_level=7` en la l\u00ednea de comando de una compilaci\u00f3n del kernel con `CONFIG_SLAB_FREELIST_HARDENED=y`. Registro de muestra de dmesg: [10.708715] ============================================ ================================== [10.710323] ERROR kmalloc-rnd-05-32 (Contaminado: GBT) : Freepointer corrupto [10.712695] -------------------------------------------- --------------------------------- [ 10.712695] [ 10.712695] Losa 0xffffd8bdc400d580 objetos=32 usados=4 fp=0xffff9d9a80356f80 flags=0x200000000000a00(workingset|slab|node=0|zone=2) [ 10.716698] Objeto 0xffff9d9a80356600 @offset=1536 fp=0x7ee4f480ce0ecd7c [ 10.716698] [ 10.716698] Bytes b4 9d9a803565f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 10.720703] Objeto ffff9d9a80356600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [ 10.720703] Objeto ffff9d9a80356610: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 10.724696] Relleno ffff9d9a8035666c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 10.724696] Relleno ffff9d9a8035667c: 00 00 00 00 .... [ 10.724696 ] FIX kmalloc-rnd-05-32: Objeto en 0xffff9d9a80356600 no liberado"
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-476"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.8",
+ "versionEndExcluding": "6.8.10",
+ "matchCriteriaId": "B0D3E543-9D44-48EC-AEFE-B1F1DE163D83"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "F850DCEC-E08B-4317-A33B-D2DCF39F601B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "91326417-E981-482E-A5A3-28BC1327521B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:*",
+ "matchCriteriaId": "DAECDCD8-F556-4606-8D7B-5C6D47A501F2"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/56900355485f6e82114b18c812edd57fd7970dcb",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/8f828aa48812ced28aa39cb3cfe55ef2444d03dd",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/56900355485f6e82114b18c812edd57fd7970dcb",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/8f828aa48812ced28aa39cb3cfe55ef2444d03dd",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-368xx/CVE-2024-36895.json b/CVE-2024/CVE-2024-368xx/CVE-2024-36895.json
index 999660b5404..ef5663d0f5b 100644
--- a/CVE-2024/CVE-2024-368xx/CVE-2024-36895.json
+++ b/CVE-2024/CVE-2024-368xx/CVE-2024-36895.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-36895",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-30T16:15:12.937",
- "lastModified": "2024-11-21T09:22:45.450",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:47:19.510",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,140 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: usb: gadget: uvc: use el tama\u00f1o de b\u00fafer correcto al analizar listas de configfs. Este commit corrige la compatibilidad con gadgets uvc en plataformas de 32 bits. El commit 0df28607c5cb (\"usb: gadget: uvc: Generalizar funciones auxiliares para su reutilizaci\u00f3n\") introdujo una funci\u00f3n auxiliar __uvcg_iter_item_entries() para ayudar con el an\u00e1lisis de listas de elementos en las tiendas de atributos de configfs. Esta funci\u00f3n es una generalizaci\u00f3n de otra funci\u00f3n muy similar, que utilizaba un b\u00fafer temporal de tama\u00f1o fijo asignado por la pila para cada elemento de la lista y utilizaba el operador sizeof() para comprobar posibles desbordamientos del b\u00fafer. La nueva funci\u00f3n se cambi\u00f3 para asignar el b\u00fafer temporal ahora de tama\u00f1o variable en el mont\u00f3n, pero no se actualiz\u00f3 correctamente para verificar tambi\u00e9n el tama\u00f1o m\u00e1ximo del b\u00fafer usando el tama\u00f1o calculado en lugar del operador sizeof(). Como resultado, el tama\u00f1o m\u00e1ximo de elemento fue 7 (m\u00e1s terminador nulo) en plataformas de 64 bits y 3 en plataformas de 32 bits. Si bien 7 accidentalmente es apenas suficiente, 3 es definitivamente demasiado peque\u00f1o para algunos de los atributos de configuraci\u00f3n de UVC. Por ejemplo, dwFrameInteval, especificado en unidades de 100 ns, normalmente tiene valores de elementos de 6 d\u00edgitos, por ejemplo, 166666 para 60 fps."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-787"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.3",
+ "versionEndExcluding": "6.6.31",
+ "matchCriteriaId": "046F896B-D6B2-4242-BCCA-D0A522DCFDD8"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.8.10",
+ "matchCriteriaId": "6A6B920C-8D8F-4130-86B4-AD334F4CF2E3"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "F850DCEC-E08B-4317-A33B-D2DCF39F601B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "91326417-E981-482E-A5A3-28BC1327521B"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/650ae71c80749fc7cb8858c8049f532eaec64410",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7a54e5052bde582fd0e7677334fe7a5be92e242c",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a422089ce42ced73713e5032aad29a9a7cbe9528",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/650ae71c80749fc7cb8858c8049f532eaec64410",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/7a54e5052bde582fd0e7677334fe7a5be92e242c",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/a422089ce42ced73713e5032aad29a9a7cbe9528",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-368xx/CVE-2024-36898.json b/CVE-2024/CVE-2024-368xx/CVE-2024-36898.json
index c2cac1ed35f..410ce66d89e 100644
--- a/CVE-2024/CVE-2024-368xx/CVE-2024-36898.json
+++ b/CVE-2024/CVE-2024-368xx/CVE-2024-36898.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-36898",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-30T16:15:13.423",
- "lastModified": "2024-11-21T09:22:45.997",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:48:06.587",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,166 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: gpiolib: cdev: corrige kfifo no inicializado Si se solicita una l\u00ednea con antirrebote, y eso resulta en un antirrebote en el software, y la l\u00ednea se reconfigura posteriormente para habilitar la detecci\u00f3n de bordes, entonces se realiza la asignaci\u00f3n del Se pasa por alto kfifo para contener eventos de borde. Esto da como resultado que los eventos se escriban y lean desde un kfifo no inicializado. Los eventos le\u00eddos se devuelven al espacio de usuario. Inicialice el kfifo en el caso de que el software antirrebote ya est\u00e9 activo."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-908"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.10",
+ "versionEndExcluding": "6.1.91",
+ "matchCriteriaId": "6AC854DD-5887-449F-80A9-55C41D59EF1E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.2",
+ "versionEndExcluding": "6.6.31",
+ "matchCriteriaId": "CDDB1F69-36AC-41C1-9192-E7CCEF5FFC00"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "6.7",
+ "versionEndExcluding": "6.8.10",
+ "matchCriteriaId": "6A6B920C-8D8F-4130-86B4-AD334F4CF2E3"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*",
+ "matchCriteriaId": "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*",
+ "matchCriteriaId": "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*",
+ "matchCriteriaId": "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*",
+ "matchCriteriaId": "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*",
+ "matchCriteriaId": "F850DCEC-E08B-4317-A33B-D2DCF39F601B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*",
+ "matchCriteriaId": "91326417-E981-482E-A5A3-28BC1327521B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:*",
+ "matchCriteriaId": "DAECDCD8-F556-4606-8D7B-5C6D47A501F2"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://git.kernel.org/stable/c/1a51e24404d77bb3307c1e39eee0d8e86febb1a5",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/883e4bbf06eb5fb7482679e4edb201093e9f55a2",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/bd7139a70ee8d8ea872b223e043730cf6f5e2b0e",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ee0166b637a5e376118e9659e5b4148080f1d27e",
- "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/1a51e24404d77bb3307c1e39eee0d8e86febb1a5",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/883e4bbf06eb5fb7482679e4edb201093e9f55a2",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/bd7139a70ee8d8ea872b223e043730cf6f5e2b0e",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://git.kernel.org/stable/c/ee0166b637a5e376118e9659e5b4148080f1d27e",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-483xx/CVE-2024-48341.json b/CVE-2024/CVE-2024-483xx/CVE-2024-48341.json
index cbce7951323..ed8fd601ec8 100644
--- a/CVE-2024/CVE-2024-483xx/CVE-2024-48341.json
+++ b/CVE-2024/CVE-2024-483xx/CVE-2024-48341.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-48341",
"sourceIdentifier": "cve@mitre.org",
"published": "2025-09-08T19:15:33.423",
- "lastModified": "2025-09-09T16:28:43.660",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:42:05.877",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,30 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:geeeeeeeek:dingfanzu:1.0:*:*:*:*:*:*:*",
+ "matchCriteriaId": "50770A09-EC01-4049-943E-8384557E1E30"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/Jiingh/cms/tree/main/6/readme.md",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Exploit"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-100xx/CVE-2025-10079.json b/CVE-2025/CVE-2025-100xx/CVE-2025-10079.json
index 67c10921e79..f899de95ea1 100644
--- a/CVE-2025/CVE-2025-100xx/CVE-2025-10079.json
+++ b/CVE-2025/CVE-2025-100xx/CVE-2025-10079.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-10079",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-08T03:15:38.547",
- "lastModified": "2025-09-08T16:25:38.810",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:54:38.660",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -118,28 +138,74 @@
"value": "CWE-89"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:phpgurukul:small_crm:4.0:*:*:*:*:*:*:*",
+ "matchCriteriaId": "7CDC9015-ED29-4EA2-8087-3CC4B2C3E9C3"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://github.com/f000x0/cve/issues/2",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Exploit",
+ "Issue Tracking"
+ ]
},
{
"url": "https://phpgurukul.com/",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Product"
+ ]
},
{
"url": "https://vuldb.com/?ctiid.323027",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Permissions Required",
+ "VDB Entry"
+ ]
},
{
"url": "https://vuldb.com/?id.323027",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Third Party Advisory",
+ "VDB Entry"
+ ]
},
{
"url": "https://vuldb.com/?submit.644626",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Third Party Advisory",
+ "VDB Entry"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-101xx/CVE-2025-10127.json b/CVE-2025/CVE-2025-101xx/CVE-2025-10127.json
index e729e321094..200fad926fb 100644
--- a/CVE-2025/CVE-2025-101xx/CVE-2025-10127.json
+++ b/CVE-2025/CVE-2025-101xx/CVE-2025-10127.json
@@ -2,13 +2,13 @@
"id": "CVE-2025-10127",
"sourceIdentifier": "ics-cert@hq.dhs.gov",
"published": "2025-09-11T20:15:33.667",
- "lastModified": "2025-09-15T15:22:38.297",
+ "lastModified": "2025-09-18T14:15:45.777",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
- "value": "Daikin Security Gateway is vulnerable to an authorization bypass through\n a user-controlled key vulnerability that could allow an attacker to \nbypass authentication. An unauthorized attacker could access the system \nwithout prior credentials."
+ "value": "Daikin Europe N.V\n\nSecurity Gateway is vulnerable to an authorization bypass through\n a user-controlled key vulnerability that could allow an attacker to \nbypass authentication. An unauthorized attacker could access the system \nwithout prior credentials."
}
],
"metrics": {
@@ -62,27 +62,27 @@
"type": "Secondary",
"cvssData": {
"version": "3.1",
- "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
- "baseScore": 7.3,
- "baseSeverity": "HIGH",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
- "confidentialityImpact": "LOW",
- "integrityImpact": "LOW",
- "availabilityImpact": "LOW"
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
- "impactScore": 3.4
+ "impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "ics-cert@hq.dhs.gov",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10601.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10601.json
index f1c5cea312e..8acc0ee2700 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10601.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10601.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10601",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-17T17:15:42.527",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T15:15:35.827",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://www.sourcecodester.com/",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/qcycop0101-hash/CVE/issues/19",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10602.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10602.json
index 45f36709765..8522bf16cdb 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10602.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10602.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10602",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-17T17:15:42.717",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T15:15:36.450",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://www.sourcecodester.com/",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/qcycop0101-hash/CVE/issues/20",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10603.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10603.json
index 8bc7f6bda16..0f32cd65a14 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10603.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10603.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10603",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-17T17:15:42.907",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T15:15:36.607",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://vuldb.com/?submit.649867",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/maximdevere/cve/issues/1",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10618.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10618.json
index ab6e00db11f..32751b2c720 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10618.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10618.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10618",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-17T21:15:37.273",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T15:15:36.817",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://vuldb.com/?submit.650177",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/drew-byte/Online-Clinic-Management-System_TimeBasedSQLi_PoC/blob/main/README.md",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10619.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10619.json
index 37c10f4bc9e..5b206989f19 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10619.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10619.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10619",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-17T21:15:37.463",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T14:15:46.077",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://vuldb.com/?submit.650189",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://lavender-bicycle-a5a.notion.site/Sequa-MCP-RCE-26853a41781f807da1c0cd158f9e3e1a",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10620.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10620.json
index f33042ead8d..b06690a8ea2 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10620.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10620.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10620",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-17T22:15:35.810",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T14:15:46.223",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://vuldb.com/?submit.650193",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/drew-byte/OnlineClinicManagementSystem_TimeBasedSQLi_PoC/blob/main/README.md",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10621.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10621.json
index 8253fca24b1..0f1dd33bf64 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10621.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10621.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10621",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-17T22:15:36.877",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T14:15:46.370",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://www.sourcecodester.com/",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/aCas1o/cve_report/blob/main/report.md",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10623.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10623.json
index 637afa08029..43b64251b28 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10623.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10623.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10623",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-17T23:15:35.080",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T14:15:46.737",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://www.sourcecodester.com/",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/aCas1o/cve_report02/blob/main/report.md",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10624.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10624.json
index 2c503c8b219..0eff10d7dd7 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10624.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10624.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10624",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-17T23:15:36.113",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T14:15:46.887",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://vuldb.com/?submit.650222",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/CSentinel/CVE/issues/3",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10625.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10625.json
index a61c7b8e6c5..80f54bb16b7 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10625.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10625.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10625",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-17T23:15:36.310",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T15:15:36.977",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://www.sourcecodester.com/",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/qcycop0101-hash/CVE/issues/24",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10626.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10626.json
index a4c632ae60b..71091fdefdd 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10626.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10626.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10626",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-18T00:15:35.717",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T15:15:37.127",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://www.sourcecodester.com/",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/qcycop0101-hash/CVE/issues/25",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10627.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10627.json
index b92a1c0c833..047484a02a7 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10627.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10627.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10627",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-18T00:15:35.920",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T14:15:47.307",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://www.sourcecodester.com/",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/bdrfly/cve-/issues/1",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10628.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10628.json
index 365e30a371a..e2fbaf9e35f 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10628.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10628.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10628",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-18T01:15:35.000",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T14:15:47.457",
"vulnStatus": "Awaiting Analysis",
"cveTags": [
{
@@ -66,7 +66,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -114,7 +114,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -147,6 +147,10 @@
{
"url": "https://www.dlink.com/",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/i-Corner/cve/issues/31",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10629.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10629.json
index d9a191f5ce4..ac37ed9a625 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10629.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10629.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10629",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-18T01:15:36.000",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T14:15:47.710",
"vulnStatus": "Awaiting Analysis",
"cveTags": [
{
@@ -66,7 +66,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -114,7 +114,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -147,6 +147,10 @@
{
"url": "https://www.dlink.com/",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/i-Corner/cve/issues/30",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10631.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10631.json
index c37435e10e3..34d53499554 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10631.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10631.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10631",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-18T01:15:36.193",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T14:15:47.840",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://vuldb.com/?submit.650675",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/drew-byte/Online-Pet-Shop-Management-System-Stored-XSS-PoC/blob/main/README.md",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10632.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10632.json
index 37f4a628035..7763c545dd7 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10632.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10632.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10632",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-18T02:15:40.070",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T14:15:47.980",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://vuldb.com/?submit.650676",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/drew-byte/Online-Pet-Shop-Management-System_AdminDashboard_Stored-XSS-PoC/blob/main/README.md",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10634.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10634.json
index ad3dd89ce6d..b222d367828 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10634.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10634.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10634",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-18T02:15:40.273",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T14:15:48.127",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -144,6 +144,10 @@
{
"url": "https://www.dlink.com/",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/Cpppq43/D-Link/blob/main/DIink-DIR-823x.md",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10666.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10666.json
index 083c0ad1175..31ba198df68 100644
--- a/CVE-2025/CVE-2025-106xx/CVE-2025-10666.json
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10666.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-10666",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-09-18T13:15:33.977",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T15:15:37.280",
"vulnStatus": "Awaiting Analysis",
"cveTags": [
{
@@ -66,7 +66,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
@@ -114,7 +114,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -151,6 +151,14 @@
{
"url": "https://www.dlink.com/",
"source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/panda666-888/vuls/blob/main/d-link/dir-825/apply.cgi.md",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
+ },
+ {
+ "url": "https://github.com/panda666-888/vuls/blob/main/d-link/dir-825/apply.cgi.md#poc",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10668.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10668.json
new file mode 100644
index 00000000000..2fe2c4553ce
--- /dev/null
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10668.json
@@ -0,0 +1,145 @@
+{
+ "id": "CVE-2025-10668",
+ "sourceIdentifier": "cna@vuldb.com",
+ "published": "2025-09-18T14:15:48.683",
+ "lastModified": "2025-09-18T14:15:48.683",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/compose_msg_admin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV40": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "4.0",
+ "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
+ "baseScore": 6.9,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "attackRequirements": "NONE",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "vulnConfidentialityImpact": "LOW",
+ "vulnIntegrityImpact": "LOW",
+ "vulnAvailabilityImpact": "LOW",
+ "subConfidentialityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "subAvailabilityImpact": "NONE",
+ "exploitMaturity": "PROOF_OF_CONCEPT",
+ "confidentialityRequirement": "NOT_DEFINED",
+ "integrityRequirement": "NOT_DEFINED",
+ "availabilityRequirement": "NOT_DEFINED",
+ "modifiedAttackVector": "NOT_DEFINED",
+ "modifiedAttackComplexity": "NOT_DEFINED",
+ "modifiedAttackRequirements": "NOT_DEFINED",
+ "modifiedPrivilegesRequired": "NOT_DEFINED",
+ "modifiedUserInteraction": "NOT_DEFINED",
+ "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
+ "modifiedVulnIntegrityImpact": "NOT_DEFINED",
+ "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
+ "modifiedSubConfidentialityImpact": "NOT_DEFINED",
+ "modifiedSubIntegrityImpact": "NOT_DEFINED",
+ "modifiedSubAvailabilityImpact": "NOT_DEFINED",
+ "Safety": "NOT_DEFINED",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
+ "valueDensity": "NOT_DEFINED",
+ "vulnerabilityResponseEffort": "NOT_DEFINED",
+ "providerUrgency": "NOT_DEFINED"
+ }
+ }
+ ],
+ "cvssMetricV31": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+ "baseScore": 7.3,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.4
+ }
+ ],
+ "cvssMetricV2": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "2.0",
+ "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
+ "baseScore": 7.5,
+ "accessVector": "NETWORK",
+ "accessComplexity": "LOW",
+ "authentication": "NONE",
+ "confidentialityImpact": "PARTIAL",
+ "integrityImpact": "PARTIAL",
+ "availabilityImpact": "PARTIAL"
+ },
+ "baseSeverity": "HIGH",
+ "exploitabilityScore": 10.0,
+ "impactScore": 6.4,
+ "acInsufInfo": false,
+ "obtainAllPrivilege": false,
+ "obtainUserPrivilege": false,
+ "obtainOtherPrivilege": false,
+ "userInteractionRequired": false
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-74"
+ },
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/S77code/CVE1/issues/3",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://itsourcecode.com/",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?ctiid.324789",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?id.324789",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?submit.652176",
+ "source": "cna@vuldb.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10669.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10669.json
new file mode 100644
index 00000000000..a75bd625086
--- /dev/null
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10669.json
@@ -0,0 +1,141 @@
+{
+ "id": "CVE-2025-10669",
+ "sourceIdentifier": "cna@vuldb.com",
+ "published": "2025-09-18T14:15:48.890",
+ "lastModified": "2025-09-18T14:15:48.890",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A vulnerability was detected in Airsonic-Advanced up to 10.6.0. This vulnerability affects unknown code of the component Playlist Upload Handler. Performing manipulation results in unrestricted upload. It is possible to initiate the attack remotely. The exploit is now public and may be used."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV40": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "4.0",
+ "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
+ "baseScore": 5.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "attackRequirements": "NONE",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "vulnConfidentialityImpact": "LOW",
+ "vulnIntegrityImpact": "LOW",
+ "vulnAvailabilityImpact": "LOW",
+ "subConfidentialityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "subAvailabilityImpact": "NONE",
+ "exploitMaturity": "PROOF_OF_CONCEPT",
+ "confidentialityRequirement": "NOT_DEFINED",
+ "integrityRequirement": "NOT_DEFINED",
+ "availabilityRequirement": "NOT_DEFINED",
+ "modifiedAttackVector": "NOT_DEFINED",
+ "modifiedAttackComplexity": "NOT_DEFINED",
+ "modifiedAttackRequirements": "NOT_DEFINED",
+ "modifiedPrivilegesRequired": "NOT_DEFINED",
+ "modifiedUserInteraction": "NOT_DEFINED",
+ "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
+ "modifiedVulnIntegrityImpact": "NOT_DEFINED",
+ "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
+ "modifiedSubConfidentialityImpact": "NOT_DEFINED",
+ "modifiedSubIntegrityImpact": "NOT_DEFINED",
+ "modifiedSubAvailabilityImpact": "NOT_DEFINED",
+ "Safety": "NOT_DEFINED",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
+ "valueDensity": "NOT_DEFINED",
+ "vulnerabilityResponseEffort": "NOT_DEFINED",
+ "providerUrgency": "NOT_DEFINED"
+ }
+ }
+ ],
+ "cvssMetricV31": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
+ "baseScore": 6.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.4
+ }
+ ],
+ "cvssMetricV2": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "2.0",
+ "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
+ "baseScore": 6.5,
+ "accessVector": "NETWORK",
+ "accessComplexity": "LOW",
+ "authentication": "SINGLE",
+ "confidentialityImpact": "PARTIAL",
+ "integrityImpact": "PARTIAL",
+ "availabilityImpact": "PARTIAL"
+ },
+ "baseSeverity": "MEDIUM",
+ "exploitabilityScore": 8.0,
+ "impactScore": 6.4,
+ "acInsufInfo": false,
+ "obtainAllPrivilege": false,
+ "obtainUserPrivilege": false,
+ "obtainOtherPrivilege": false,
+ "userInteractionRequired": false
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-284"
+ },
+ {
+ "lang": "en",
+ "value": "CWE-434"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/mikecole-mg/security_findings/blob/main/airsonic-advanced/airsonic-rce.md",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?ctiid.324790",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?id.324790",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?submit.652356",
+ "source": "cna@vuldb.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10670.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10670.json
new file mode 100644
index 00000000000..0819239c5ae
--- /dev/null
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10670.json
@@ -0,0 +1,145 @@
+{
+ "id": "CVE-2025-10670",
+ "sourceIdentifier": "cna@vuldb.com",
+ "published": "2025-09-18T14:15:49.100",
+ "lastModified": "2025-09-18T14:15:49.100",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A flaw has been found in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /check_profile.php. Executing manipulation of the argument profile_id can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV40": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "4.0",
+ "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
+ "baseScore": 6.9,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "attackRequirements": "NONE",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "vulnConfidentialityImpact": "LOW",
+ "vulnIntegrityImpact": "LOW",
+ "vulnAvailabilityImpact": "LOW",
+ "subConfidentialityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "subAvailabilityImpact": "NONE",
+ "exploitMaturity": "PROOF_OF_CONCEPT",
+ "confidentialityRequirement": "NOT_DEFINED",
+ "integrityRequirement": "NOT_DEFINED",
+ "availabilityRequirement": "NOT_DEFINED",
+ "modifiedAttackVector": "NOT_DEFINED",
+ "modifiedAttackComplexity": "NOT_DEFINED",
+ "modifiedAttackRequirements": "NOT_DEFINED",
+ "modifiedPrivilegesRequired": "NOT_DEFINED",
+ "modifiedUserInteraction": "NOT_DEFINED",
+ "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
+ "modifiedVulnIntegrityImpact": "NOT_DEFINED",
+ "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
+ "modifiedSubConfidentialityImpact": "NOT_DEFINED",
+ "modifiedSubIntegrityImpact": "NOT_DEFINED",
+ "modifiedSubAvailabilityImpact": "NOT_DEFINED",
+ "Safety": "NOT_DEFINED",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
+ "valueDensity": "NOT_DEFINED",
+ "vulnerabilityResponseEffort": "NOT_DEFINED",
+ "providerUrgency": "NOT_DEFINED"
+ }
+ }
+ ],
+ "cvssMetricV31": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+ "baseScore": 7.3,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.4
+ }
+ ],
+ "cvssMetricV2": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "2.0",
+ "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
+ "baseScore": 7.5,
+ "accessVector": "NETWORK",
+ "accessComplexity": "LOW",
+ "authentication": "NONE",
+ "confidentialityImpact": "PARTIAL",
+ "integrityImpact": "PARTIAL",
+ "availabilityImpact": "PARTIAL"
+ },
+ "baseSeverity": "HIGH",
+ "exploitabilityScore": 10.0,
+ "impactScore": 6.4,
+ "acInsufInfo": false,
+ "obtainAllPrivilege": false,
+ "obtainUserPrivilege": false,
+ "obtainOtherPrivilege": false,
+ "userInteractionRequired": false
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-74"
+ },
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/yihaofuweng/cve/issues/25",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://itsourcecode.com/",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?ctiid.324791",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?id.324791",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?submit.652396",
+ "source": "cna@vuldb.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10671.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10671.json
new file mode 100644
index 00000000000..d21491a3f5f
--- /dev/null
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10671.json
@@ -0,0 +1,141 @@
+{
+ "id": "CVE-2025-10671",
+ "sourceIdentifier": "cna@vuldb.com",
+ "published": "2025-09-18T15:15:37.437",
+ "lastModified": "2025-09-18T15:15:37.437",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A vulnerability has been found in youth-is-as-pale-as-poetry e-learning 1.0. Impacted is the function encryptSecret of the file e-learning-master\\exam-api\\src\\main\\java\\com\\yf\\exam\\ability\\shiro\\jwt\\JwtUtils.java of the component JWT Token Handler. The manipulation leads to insufficiently random values. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV40": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "4.0",
+ "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
+ "baseScore": 6.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "HIGH",
+ "attackRequirements": "NONE",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "vulnConfidentialityImpact": "LOW",
+ "vulnIntegrityImpact": "NONE",
+ "vulnAvailabilityImpact": "NONE",
+ "subConfidentialityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "subAvailabilityImpact": "NONE",
+ "exploitMaturity": "PROOF_OF_CONCEPT",
+ "confidentialityRequirement": "NOT_DEFINED",
+ "integrityRequirement": "NOT_DEFINED",
+ "availabilityRequirement": "NOT_DEFINED",
+ "modifiedAttackVector": "NOT_DEFINED",
+ "modifiedAttackComplexity": "NOT_DEFINED",
+ "modifiedAttackRequirements": "NOT_DEFINED",
+ "modifiedPrivilegesRequired": "NOT_DEFINED",
+ "modifiedUserInteraction": "NOT_DEFINED",
+ "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
+ "modifiedVulnIntegrityImpact": "NOT_DEFINED",
+ "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
+ "modifiedSubConfidentialityImpact": "NOT_DEFINED",
+ "modifiedSubIntegrityImpact": "NOT_DEFINED",
+ "modifiedSubAvailabilityImpact": "NOT_DEFINED",
+ "Safety": "NOT_DEFINED",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
+ "valueDensity": "NOT_DEFINED",
+ "vulnerabilityResponseEffort": "NOT_DEFINED",
+ "providerUrgency": "NOT_DEFINED"
+ }
+ }
+ ],
+ "cvssMetricV31": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
+ "baseScore": 3.7,
+ "baseSeverity": "LOW",
+ "attackVector": "NETWORK",
+ "attackComplexity": "HIGH",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.2,
+ "impactScore": 1.4
+ }
+ ],
+ "cvssMetricV2": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "2.0",
+ "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
+ "baseScore": 2.6,
+ "accessVector": "NETWORK",
+ "accessComplexity": "HIGH",
+ "authentication": "NONE",
+ "confidentialityImpact": "PARTIAL",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "baseSeverity": "LOW",
+ "exploitabilityScore": 4.9,
+ "impactScore": 2.9,
+ "acInsufInfo": false,
+ "obtainAllPrivilege": false,
+ "obtainUserPrivilege": false,
+ "obtainOtherPrivilege": false,
+ "userInteractionRequired": false
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-310"
+ },
+ {
+ "lang": "en",
+ "value": "CWE-330"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/SuJing-cy/CVE/blob/main/yfhl.md",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?ctiid.324792",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?id.324792",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?submit.653029",
+ "source": "cna@vuldb.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10672.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10672.json
new file mode 100644
index 00000000000..23e09ae0c58
--- /dev/null
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10672.json
@@ -0,0 +1,145 @@
+{
+ "id": "CVE-2025-10672",
+ "sourceIdentifier": "cna@vuldb.com",
+ "published": "2025-09-18T15:15:37.653",
+ "lastModified": "2025-09-18T15:15:37.653",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A vulnerability was found in whuan132 AIBattery up to 1.0.9. The affected element is an unknown function of the file AIBatteryHelper/XPC/BatteryXPCService.swift of the component com.collweb.AIBatteryHelper. The manipulation results in missing authentication. The attack requires a local approach. The exploit has been made public and could be used."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV40": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "4.0",
+ "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
+ "baseScore": 8.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "attackRequirements": "NONE",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "vulnConfidentialityImpact": "HIGH",
+ "vulnIntegrityImpact": "HIGH",
+ "vulnAvailabilityImpact": "HIGH",
+ "subConfidentialityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "subAvailabilityImpact": "NONE",
+ "exploitMaturity": "PROOF_OF_CONCEPT",
+ "confidentialityRequirement": "NOT_DEFINED",
+ "integrityRequirement": "NOT_DEFINED",
+ "availabilityRequirement": "NOT_DEFINED",
+ "modifiedAttackVector": "NOT_DEFINED",
+ "modifiedAttackComplexity": "NOT_DEFINED",
+ "modifiedAttackRequirements": "NOT_DEFINED",
+ "modifiedPrivilegesRequired": "NOT_DEFINED",
+ "modifiedUserInteraction": "NOT_DEFINED",
+ "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
+ "modifiedVulnIntegrityImpact": "NOT_DEFINED",
+ "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
+ "modifiedSubConfidentialityImpact": "NOT_DEFINED",
+ "modifiedSubIntegrityImpact": "NOT_DEFINED",
+ "modifiedSubAvailabilityImpact": "NOT_DEFINED",
+ "Safety": "NOT_DEFINED",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
+ "valueDensity": "NOT_DEFINED",
+ "vulnerabilityResponseEffort": "NOT_DEFINED",
+ "providerUrgency": "NOT_DEFINED"
+ }
+ }
+ ],
+ "cvssMetricV31": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.9
+ }
+ ],
+ "cvssMetricV2": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "2.0",
+ "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
+ "baseScore": 6.8,
+ "accessVector": "LOCAL",
+ "accessComplexity": "LOW",
+ "authentication": "SINGLE",
+ "confidentialityImpact": "COMPLETE",
+ "integrityImpact": "COMPLETE",
+ "availabilityImpact": "COMPLETE"
+ },
+ "baseSeverity": "MEDIUM",
+ "exploitabilityScore": 3.1,
+ "impactScore": 10.0,
+ "acInsufInfo": false,
+ "obtainAllPrivilege": false,
+ "obtainUserPrivilege": false,
+ "obtainOtherPrivilege": false,
+ "userInteractionRequired": false
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-287"
+ },
+ {
+ "lang": "en",
+ "value": "CWE-306"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/SwayZGl1tZyyy/n-days/blob/main/AIBattery-Charge-Limiter/README.md",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/SwayZGl1tZyyy/n-days/blob/main/AIBattery-Charge-Limiter/README.md#proof-of-concept",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?ctiid.324793",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?id.324793",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?submit.653159",
+ "source": "cna@vuldb.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-106xx/CVE-2025-10673.json b/CVE-2025/CVE-2025-106xx/CVE-2025-10673.json
new file mode 100644
index 00000000000..c5ffa605b9c
--- /dev/null
+++ b/CVE-2025/CVE-2025-106xx/CVE-2025-10673.json
@@ -0,0 +1,145 @@
+{
+ "id": "CVE-2025-10673",
+ "sourceIdentifier": "cna@vuldb.com",
+ "published": "2025-09-18T15:15:37.863",
+ "lastModified": "2025-09-18T15:15:37.863",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A vulnerability was determined in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/class/index.php. This manipulation of the argument classId causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV40": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "4.0",
+ "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
+ "baseScore": 6.9,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "attackRequirements": "NONE",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "vulnConfidentialityImpact": "LOW",
+ "vulnIntegrityImpact": "LOW",
+ "vulnAvailabilityImpact": "LOW",
+ "subConfidentialityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "subAvailabilityImpact": "NONE",
+ "exploitMaturity": "PROOF_OF_CONCEPT",
+ "confidentialityRequirement": "NOT_DEFINED",
+ "integrityRequirement": "NOT_DEFINED",
+ "availabilityRequirement": "NOT_DEFINED",
+ "modifiedAttackVector": "NOT_DEFINED",
+ "modifiedAttackComplexity": "NOT_DEFINED",
+ "modifiedAttackRequirements": "NOT_DEFINED",
+ "modifiedPrivilegesRequired": "NOT_DEFINED",
+ "modifiedUserInteraction": "NOT_DEFINED",
+ "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
+ "modifiedVulnIntegrityImpact": "NOT_DEFINED",
+ "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
+ "modifiedSubConfidentialityImpact": "NOT_DEFINED",
+ "modifiedSubIntegrityImpact": "NOT_DEFINED",
+ "modifiedSubAvailabilityImpact": "NOT_DEFINED",
+ "Safety": "NOT_DEFINED",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
+ "valueDensity": "NOT_DEFINED",
+ "vulnerabilityResponseEffort": "NOT_DEFINED",
+ "providerUrgency": "NOT_DEFINED"
+ }
+ }
+ ],
+ "cvssMetricV31": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+ "baseScore": 7.3,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.4
+ }
+ ],
+ "cvssMetricV2": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "2.0",
+ "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
+ "baseScore": 7.5,
+ "accessVector": "NETWORK",
+ "accessComplexity": "LOW",
+ "authentication": "NONE",
+ "confidentialityImpact": "PARTIAL",
+ "integrityImpact": "PARTIAL",
+ "availabilityImpact": "PARTIAL"
+ },
+ "baseSeverity": "HIGH",
+ "exploitabilityScore": 10.0,
+ "impactScore": 6.4,
+ "acInsufInfo": false,
+ "obtainAllPrivilege": false,
+ "obtainUserPrivilege": false,
+ "obtainOtherPrivilege": false,
+ "userInteractionRequired": false
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-74"
+ },
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/windhxy/CVE-my/issues/1",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://itsourcecode.com/",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?ctiid.324794",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?id.324794",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?submit.653191",
+ "source": "cna@vuldb.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23252.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23252.json
index 5f37be299e7..a23110fc519 100644
--- a/CVE-2025/CVE-2025-232xx/CVE-2025-23252.json
+++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23252.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-23252",
"sourceIdentifier": "psirt@nvidia.com",
"published": "2025-06-18T01:15:28.320",
- "lastModified": "2025-06-18T13:46:52.973",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:02:51.250",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 0.9,
"impactScore": 3.6
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.6
}
]
},
@@ -51,10 +71,30 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:nvidia:nvdebug:1.6.0:*:*:*:*:*:*:*",
+ "matchCriteriaId": "C64887F5-42F1-4CBF-B77D-9C9AB57BA5A1"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5651",
- "source": "psirt@nvidia.com"
+ "source": "psirt@nvidia.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-233xx/CVE-2025-23312.json b/CVE-2025/CVE-2025-233xx/CVE-2025-23312.json
index d0a18adee0c..b92c28fe0bd 100644
--- a/CVE-2025/CVE-2025-233xx/CVE-2025-23312.json
+++ b/CVE-2025/CVE-2025-233xx/CVE-2025-23312.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-23312",
"sourceIdentifier": "psirt@nvidia.com",
"published": "2025-08-26T19:15:38.610",
- "lastModified": "2025-08-29T16:22:31.970",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:26:32.363",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,18 +51,45 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:nvidia:nemo:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "2.4.0",
+ "matchCriteriaId": "395B2CEF-62EC-4AF0-A433-C5D93FD43605"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23312",
- "source": "psirt@nvidia.com"
+ "source": "psirt@nvidia.com",
+ "tags": [
+ "US Government Resource"
+ ]
},
{
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5689",
- "source": "psirt@nvidia.com"
+ "source": "psirt@nvidia.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23312",
- "source": "psirt@nvidia.com"
+ "source": "psirt@nvidia.com",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-233xx/CVE-2025-23313.json b/CVE-2025/CVE-2025-233xx/CVE-2025-23313.json
index 84e845a4846..016287f0fea 100644
--- a/CVE-2025/CVE-2025-233xx/CVE-2025-23313.json
+++ b/CVE-2025/CVE-2025-233xx/CVE-2025-23313.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-23313",
"sourceIdentifier": "psirt@nvidia.com",
"published": "2025-08-26T19:15:38.810",
- "lastModified": "2025-08-29T16:22:31.970",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:02:22.247",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,18 +51,45 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:nvidia:nemo:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "2.4.0",
+ "matchCriteriaId": "395B2CEF-62EC-4AF0-A433-C5D93FD43605"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23313",
- "source": "psirt@nvidia.com"
+ "source": "psirt@nvidia.com",
+ "tags": [
+ "US Government Resource"
+ ]
},
{
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5689",
- "source": "psirt@nvidia.com"
+ "source": "psirt@nvidia.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23313",
- "source": "psirt@nvidia.com"
+ "source": "psirt@nvidia.com",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-233xx/CVE-2025-23314.json b/CVE-2025/CVE-2025-233xx/CVE-2025-23314.json
index b5b2edcd079..f1ab1249c95 100644
--- a/CVE-2025/CVE-2025-233xx/CVE-2025-23314.json
+++ b/CVE-2025/CVE-2025-233xx/CVE-2025-23314.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-23314",
"sourceIdentifier": "psirt@nvidia.com",
"published": "2025-08-26T19:15:38.990",
- "lastModified": "2025-08-29T16:22:31.970",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:00:48.740",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,18 +51,45 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:nvidia:nemo:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "2.4.0",
+ "matchCriteriaId": "395B2CEF-62EC-4AF0-A433-C5D93FD43605"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23314",
- "source": "psirt@nvidia.com"
+ "source": "psirt@nvidia.com",
+ "tags": [
+ "US Government Resource"
+ ]
},
{
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5689",
- "source": "psirt@nvidia.com"
+ "source": "psirt@nvidia.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23314",
- "source": "psirt@nvidia.com"
+ "source": "psirt@nvidia.com",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-233xx/CVE-2025-23315.json b/CVE-2025/CVE-2025-233xx/CVE-2025-23315.json
index 7d1cc21d3af..a9d9aa34333 100644
--- a/CVE-2025/CVE-2025-233xx/CVE-2025-23315.json
+++ b/CVE-2025/CVE-2025-233xx/CVE-2025-23315.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-23315",
"sourceIdentifier": "psirt@nvidia.com",
"published": "2025-08-26T19:15:39.190",
- "lastModified": "2025-08-29T16:22:31.970",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:52:54.613",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,18 +51,67 @@
]
}
],
+ "configurations": [
+ {
+ "operator": "AND",
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:nvidia:nemo:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "2.4.0",
+ "matchCriteriaId": "395B2CEF-62EC-4AF0-A433-C5D93FD43605"
+ }
+ ]
+ },
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": false,
+ "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
+ },
+ {
+ "vulnerable": false,
+ "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
+ },
+ {
+ "vulnerable": false,
+ "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23315",
- "source": "psirt@nvidia.com"
+ "source": "psirt@nvidia.com",
+ "tags": [
+ "US Government Resource"
+ ]
},
{
"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5689",
- "source": "psirt@nvidia.com"
+ "source": "psirt@nvidia.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23315",
- "source": "psirt@nvidia.com"
+ "source": "psirt@nvidia.com",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25733.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25733.json
index 9eb0f309aec..8b96b4937ba 100644
--- a/CVE-2025/CVE-2025-257xx/CVE-2025-25733.json
+++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25733.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-25733",
"sourceIdentifier": "cve@mitre.org",
"published": "2025-08-26T15:15:42.270",
- "lastModified": "2025-08-29T16:22:31.970",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:31:39.373",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,30 +51,125 @@
]
}
],
+ "configurations": [
+ {
+ "operator": "AND",
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:kapsch:ris-9160_firmware:3.2.0.829.23:*:*:*:*:*:*:*",
+ "matchCriteriaId": "1385F53F-B8B3-460B-AF40-3E6C0373E56F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:kapsch:ris-9160_firmware:3.8.0.1119.42:*:*:*:*:*:*:*",
+ "matchCriteriaId": "89FBCE38-F618-4885-9A19-4387C26B0648"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:kapsch:ris-9160_firmware:4.6.0.1211.28:*:*:*:*:*:*:*",
+ "matchCriteriaId": "C5A25078-2E54-4458-B2A1-12B22BFE5BC9"
+ }
+ ]
+ },
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": false,
+ "criteria": "cpe:2.3:h:kapsch:ris-9160:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "03950C43-60AC-46A7-8C69-BFFC24297EA9"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "operator": "AND",
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:kapsch:ris-9260_firmware:3.2.0.829.23:*:*:*:*:*:*:*",
+ "matchCriteriaId": "A962F165-2FB7-4CD7-A316-0696668B8CC2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:kapsch:ris-9260_firmware:3.8.0.1119.42:*:*:*:*:*:*:*",
+ "matchCriteriaId": "98025B93-400E-435F-B1C1-EBFA2777E013"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:kapsch:ris-9260_firmware:4.6.0.1211.28:*:*:*:*:*:*:*",
+ "matchCriteriaId": "221A418C-D55A-4A63-9711-CA8025C4C709"
+ }
+ ]
+ },
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": false,
+ "criteria": "cpe:2.3:h:kapsch:ris-9260:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "6AB37525-44FC-456A-ACE1-0661BC9D0CFD"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://cwe.mitre.org/data/definitions/1233.html",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Technical Description"
+ ]
},
{
"url": "https://phrack.org/issues/72/16_md",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Exploit",
+ "Third Party Advisory"
+ ]
},
{
"url": "https://www.kapsch.net/_Resources/Persistent/3d251a8445e0bf50093903ad70b3dbed34dec7e7/KTC-CVS_RIS-9260_DataSheet.pdf",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Broken Link"
+ ]
},
{
"url": "https://www.kapsch.net/_Resources/Persistent/55fb8d0fb279262809eac88d457894db1b3efcd5/Kapsch_RIS-9160_Datasheet_EN.pdf",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Product"
+ ]
},
{
"url": "https://www.kapsch.net/en",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Product"
+ ]
},
{
"url": "https://www.kapsch.net/en/press/releases/ktc-20200813-pr-en",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Product"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-298xx/CVE-2025-29874.json b/CVE-2025/CVE-2025-298xx/CVE-2025-29874.json
index 56ca9453c97..0a5f21fedf8 100644
--- a/CVE-2025/CVE-2025-298xx/CVE-2025-29874.json
+++ b/CVE-2025/CVE-2025-298xx/CVE-2025-29874.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-29874",
"sourceIdentifier": "security@qnapsecurity.com.tw",
"published": "2025-08-29T17:15:34.123",
- "lastModified": "2025-09-02T15:55:35.520",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:35:14.593",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
+ ],
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 6.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.6
+ }
]
},
"weaknesses": [
@@ -69,10 +91,32 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.5.6.4691",
+ "versionEndExcluding": "5.5.6.4907",
+ "matchCriteriaId": "890BCD8C-9F38-4084-B1D2-87469B76F370"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://www.qnap.com/en/security-advisory/qsa-25-19",
- "source": "security@qnapsecurity.com.tw"
+ "source": "security@qnapsecurity.com.tw",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-298xx/CVE-2025-29875.json b/CVE-2025/CVE-2025-298xx/CVE-2025-29875.json
index a3633a51a39..5b437ce2c9e 100644
--- a/CVE-2025/CVE-2025-298xx/CVE-2025-29875.json
+++ b/CVE-2025/CVE-2025-298xx/CVE-2025-29875.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-29875",
"sourceIdentifier": "security@qnapsecurity.com.tw",
"published": "2025-08-29T17:15:34.313",
- "lastModified": "2025-09-02T15:55:35.520",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:34:42.557",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
+ ],
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 6.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.6
+ }
]
},
"weaknesses": [
@@ -69,10 +91,32 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.5.6.4691",
+ "versionEndExcluding": "5.5.6.4907",
+ "matchCriteriaId": "890BCD8C-9F38-4084-B1D2-87469B76F370"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://www.qnap.com/en/security-advisory/qsa-25-19",
- "source": "security@qnapsecurity.com.tw"
+ "source": "security@qnapsecurity.com.tw",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-298xx/CVE-2025-29878.json b/CVE-2025/CVE-2025-298xx/CVE-2025-29878.json
index d370213e5b5..64f5d9eeb0a 100644
--- a/CVE-2025/CVE-2025-298xx/CVE-2025-29878.json
+++ b/CVE-2025/CVE-2025-298xx/CVE-2025-29878.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-29878",
"sourceIdentifier": "security@qnapsecurity.com.tw",
"published": "2025-08-29T17:15:34.543",
- "lastModified": "2025-09-02T15:55:35.520",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:28:46.180",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
+ ],
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 6.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.6
+ }
]
},
"weaknesses": [
@@ -69,10 +91,32 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.5.6.4691",
+ "versionEndExcluding": "5.5.6.4907",
+ "matchCriteriaId": "890BCD8C-9F38-4084-B1D2-87469B76F370"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://www.qnap.com/en/security-advisory/qsa-25-19",
- "source": "security@qnapsecurity.com.tw"
+ "source": "security@qnapsecurity.com.tw",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-298xx/CVE-2025-29879.json b/CVE-2025/CVE-2025-298xx/CVE-2025-29879.json
index 48550367e22..f0a607af7b6 100644
--- a/CVE-2025/CVE-2025-298xx/CVE-2025-29879.json
+++ b/CVE-2025/CVE-2025-298xx/CVE-2025-29879.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-29879",
"sourceIdentifier": "security@qnapsecurity.com.tw",
"published": "2025-08-29T17:15:34.757",
- "lastModified": "2025-09-02T15:55:35.520",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:27:05.597",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
+ ],
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 6.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.6
+ }
]
},
"weaknesses": [
@@ -69,10 +91,32 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.5.6.4691",
+ "versionEndExcluding": "5.5.6.4907",
+ "matchCriteriaId": "890BCD8C-9F38-4084-B1D2-87469B76F370"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://www.qnap.com/en/security-advisory/qsa-25-19",
- "source": "security@qnapsecurity.com.tw"
+ "source": "security@qnapsecurity.com.tw",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-298xx/CVE-2025-29886.json b/CVE-2025/CVE-2025-298xx/CVE-2025-29886.json
index 633542cd6d5..8e791b0a062 100644
--- a/CVE-2025/CVE-2025-298xx/CVE-2025-29886.json
+++ b/CVE-2025/CVE-2025-298xx/CVE-2025-29886.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-29886",
"sourceIdentifier": "security@qnapsecurity.com.tw",
"published": "2025-08-29T18:15:35.233",
- "lastModified": "2025-09-02T15:55:35.520",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:23:34.787",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
+ ],
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 6.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.6
+ }
]
},
"weaknesses": [
@@ -69,10 +91,32 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "5.5.6.4691",
+ "versionEndExcluding": "5.5.6.4907",
+ "matchCriteriaId": "890BCD8C-9F38-4084-B1D2-87469B76F370"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://www.qnap.com/en/security-advisory/qsa-25-19",
- "source": "security@qnapsecurity.com.tw"
+ "source": "security@qnapsecurity.com.tw",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-330xx/CVE-2025-33008.json b/CVE-2025/CVE-2025-330xx/CVE-2025-33008.json
index 87948366707..942e764e325 100644
--- a/CVE-2025/CVE-2025-330xx/CVE-2025-33008.json
+++ b/CVE-2025/CVE-2025-330xx/CVE-2025-33008.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-33008",
"sourceIdentifier": "psirt@us.ibm.com",
"published": "2025-08-19T19:15:35.030",
- "lastModified": "2025-08-20T14:40:17.713",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:34:07.980",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,35 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:ibm:sterling_b2b_integrator:6.2.1.0:*:*:*:*:*:*:*",
+ "matchCriteriaId": "5071FDDF-398F-4214-B8DD-93ED55F0808F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:ibm:sterling_file_gateway:6.2.1.0:*:*:*:*:*:*:*",
+ "matchCriteriaId": "F5074FA1-0FC6-486B-BCBE-A7BA6E9155D1"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7242392",
- "source": "psirt@us.ibm.com"
+ "source": "psirt@us.ibm.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-350xx/CVE-2025-35036.json b/CVE-2025/CVE-2025-350xx/CVE-2025-35036.json
index b5f1b76a464..67ed448beff 100644
--- a/CVE-2025/CVE-2025-350xx/CVE-2025-35036.json
+++ b/CVE-2025/CVE-2025-350xx/CVE-2025-35036.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-35036",
"sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725",
"published": "2025-06-03T20:15:21.993",
- "lastModified": "2025-06-04T14:54:33.783",
- "vulnStatus": "Undergoing Analysis",
+ "lastModified": "2025-09-18T14:19:46.060",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -95,58 +95,115 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:redhat:hibernate_validator:*:-:*:*:*:*:*:*",
+ "versionEndExcluding": "6.2.0",
+ "matchCriteriaId": "80FD9DDB-71F3-44F1-A033-68CD4ABE3689"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://docs.jboss.org/hibernate/stable/validator/reference/en-US/html_single/#section-hibernateconstraintvalidatorcontext",
- "source": "9119a7d8-5eab-497f-8521-727c672e3725"
+ "source": "9119a7d8-5eab-497f-8521-727c672e3725",
+ "tags": [
+ "Product"
+ ]
},
{
"url": "https://github.com/hibernate/hibernate-validator/commit/05f795bb7cf18856004f40e5042709e550ed0d6e",
- "source": "9119a7d8-5eab-497f-8521-727c672e3725"
+ "source": "9119a7d8-5eab-497f-8521-727c672e3725",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/hibernate/hibernate-validator/commit/254858d9dcc4e7cd775d1b0f47f482218077c5e1",
- "source": "9119a7d8-5eab-497f-8521-727c672e3725"
+ "source": "9119a7d8-5eab-497f-8521-727c672e3725",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/hibernate/hibernate-validator/commit/d2db40b9e7d22c7a0b44d7665242dfc7b4d14d78",
- "source": "9119a7d8-5eab-497f-8521-727c672e3725"
+ "source": "9119a7d8-5eab-497f-8521-727c672e3725",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/hibernate/hibernate-validator/commit/e076293b0ee1bfa97b6e67d05ad9eee1ad77e893",
- "source": "9119a7d8-5eab-497f-8521-727c672e3725"
+ "source": "9119a7d8-5eab-497f-8521-727c672e3725",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/hibernate/hibernate-validator/compare/6.1.7.Final...6.2.0.Final",
- "source": "9119a7d8-5eab-497f-8521-727c672e3725"
+ "source": "9119a7d8-5eab-497f-8521-727c672e3725",
+ "tags": [
+ "Release Notes"
+ ]
},
{
"url": "https://github.com/hibernate/hibernate-validator/pull/1138",
- "source": "9119a7d8-5eab-497f-8521-727c672e3725"
+ "source": "9119a7d8-5eab-497f-8521-727c672e3725",
+ "tags": [
+ "Issue Tracking"
+ ]
},
{
"url": "https://hibernate.atlassian.net/browse/HV-1816",
- "source": "9119a7d8-5eab-497f-8521-727c672e3725"
+ "source": "9119a7d8-5eab-497f-8521-727c672e3725",
+ "tags": [
+ "Issue Tracking"
+ ]
},
{
"url": "https://hibernate.org/validator/documentation/migration-guide/#6-2-0-cr1",
- "source": "9119a7d8-5eab-497f-8521-727c672e3725"
+ "source": "9119a7d8-5eab-497f-8521-727c672e3725",
+ "tags": [
+ "Release Notes"
+ ]
},
{
"url": "https://in.relation.to/2021/01/06/hibernate-validator-700-62-final-released/#expression-language",
- "source": "9119a7d8-5eab-497f-8521-727c672e3725"
+ "source": "9119a7d8-5eab-497f-8521-727c672e3725",
+ "tags": [
+ "Release Notes"
+ ]
},
{
"url": "https://labs.watchtowr.com/expression-payloads-meet-mayhem-cve-2025-4427-and-cve-2025-4428/",
- "source": "9119a7d8-5eab-497f-8521-727c672e3725"
+ "source": "9119a7d8-5eab-497f-8521-727c672e3725",
+ "tags": [
+ "Not Applicable"
+ ]
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2020-5245",
- "source": "9119a7d8-5eab-497f-8521-727c672e3725"
+ "source": "9119a7d8-5eab-497f-8521-727c672e3725",
+ "tags": [
+ "Not Applicable"
+ ]
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4428",
- "source": "9119a7d8-5eab-497f-8521-727c672e3725"
+ "source": "9119a7d8-5eab-497f-8521-727c672e3725",
+ "tags": [
+ "Not Applicable"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-44xx/CVE-2025-4444.json b/CVE-2025/CVE-2025-44xx/CVE-2025-4444.json
new file mode 100644
index 00000000000..e688bf08052
--- /dev/null
+++ b/CVE-2025/CVE-2025-44xx/CVE-2025-4444.json
@@ -0,0 +1,149 @@
+{
+ "id": "CVE-2025-4444",
+ "sourceIdentifier": "cna@vuldb.com",
+ "published": "2025-09-18T14:15:49.887",
+ "lastModified": "2025-09-18T14:15:49.887",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17. Impacted is an unknown function of the component Onion Service Descriptor Handler. Performing manipulation results in resource consumption. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered difficult. Upgrading to version 0.4.8.18 and 0.4.9.3-alpha is recommended to address this issue. It is recommended to upgrade the affected component."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV40": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "4.0",
+ "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
+ "baseScore": 6.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "HIGH",
+ "attackRequirements": "NONE",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "vulnConfidentialityImpact": "NONE",
+ "vulnIntegrityImpact": "NONE",
+ "vulnAvailabilityImpact": "LOW",
+ "subConfidentialityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "subAvailabilityImpact": "NONE",
+ "exploitMaturity": "NOT_DEFINED",
+ "confidentialityRequirement": "NOT_DEFINED",
+ "integrityRequirement": "NOT_DEFINED",
+ "availabilityRequirement": "NOT_DEFINED",
+ "modifiedAttackVector": "NOT_DEFINED",
+ "modifiedAttackComplexity": "NOT_DEFINED",
+ "modifiedAttackRequirements": "NOT_DEFINED",
+ "modifiedPrivilegesRequired": "NOT_DEFINED",
+ "modifiedUserInteraction": "NOT_DEFINED",
+ "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
+ "modifiedVulnIntegrityImpact": "NOT_DEFINED",
+ "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
+ "modifiedSubConfidentialityImpact": "NOT_DEFINED",
+ "modifiedSubIntegrityImpact": "NOT_DEFINED",
+ "modifiedSubAvailabilityImpact": "NOT_DEFINED",
+ "Safety": "NOT_DEFINED",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
+ "valueDensity": "NOT_DEFINED",
+ "vulnerabilityResponseEffort": "NOT_DEFINED",
+ "providerUrgency": "NOT_DEFINED"
+ }
+ }
+ ],
+ "cvssMetricV31": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
+ "baseScore": 3.7,
+ "baseSeverity": "LOW",
+ "attackVector": "NETWORK",
+ "attackComplexity": "HIGH",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 2.2,
+ "impactScore": 1.4
+ }
+ ],
+ "cvssMetricV2": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "2.0",
+ "vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
+ "baseScore": 2.6,
+ "accessVector": "NETWORK",
+ "accessComplexity": "HIGH",
+ "authentication": "NONE",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "PARTIAL"
+ },
+ "baseSeverity": "LOW",
+ "exploitabilityScore": 4.9,
+ "impactScore": 2.9,
+ "acInsufInfo": false,
+ "obtainAllPrivilege": false,
+ "obtainUserPrivilege": false,
+ "obtainOtherPrivilege": false,
+ "userInteractionRequired": false
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "cna@vuldb.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-400"
+ },
+ {
+ "lang": "en",
+ "value": "CWE-404"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://forum.torproject.org/t/alpha-and-stable-release-0-4-8-18-and-0-4-9-3-alpha/20578",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://github.com/chunmianwang/Tordos",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?ctiid.324814",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?id.324814",
+ "source": "cna@vuldb.com"
+ },
+ {
+ "url": "https://vuldb.com/?submit.640605",
+ "source": "cna@vuldb.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48493.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48493.json
index 392a88cd11f..4c269790895 100644
--- a/CVE-2025/CVE-2025-484xx/CVE-2025-48493.json
+++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48493.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-48493",
"sourceIdentifier": "security-advisories@github.com",
"published": "2025-06-05T17:15:29.377",
- "lastModified": "2025-06-05T20:12:23.777",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:08:53.603",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,6 +59,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
+ ],
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+ "baseScore": 6.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.6
+ }
]
},
"weaknesses": [
@@ -73,14 +95,38 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:yiiframework:yii2-redis:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "2.0.20",
+ "matchCriteriaId": "B9D304B1-D188-4595-8134-0E60C461F7E6"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/yiisoft/yii2-redis/commit/962252d2c57c187181e67bb66da3f27b4698358d",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/yiisoft/yii2-redis/security/advisories/GHSA-g3p6-82vc-43jh",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-552xx/CVE-2025-55241.json b/CVE-2025/CVE-2025-552xx/CVE-2025-55241.json
index 7aa565cb07a..21afa401d00 100644
--- a/CVE-2025/CVE-2025-552xx/CVE-2025-55241.json
+++ b/CVE-2025/CVE-2025-552xx/CVE-2025-55241.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-55241",
"sourceIdentifier": "secure@microsoft.com",
"published": "2025-09-04T23:15:32.960",
- "lastModified": "2025-09-05T17:47:10.303",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:15:50.110",
+ "vulnStatus": "Undergoing Analysis",
"cveTags": [
{
"sourceIdentifier": "secure@microsoft.com",
@@ -22,7 +22,7 @@
"cvssMetricV31": [
{
"source": "secure@microsoft.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
@@ -45,7 +45,7 @@
"weaknesses": [
{
"source": "secure@microsoft.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -58,6 +58,10 @@
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55241",
"source": "secure@microsoft.com"
+ },
+ {
+ "url": "https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-559xx/CVE-2025-55911.json b/CVE-2025/CVE-2025-559xx/CVE-2025-55911.json
new file mode 100644
index 00000000000..55c6ba82bb8
--- /dev/null
+++ b/CVE-2025/CVE-2025-559xx/CVE-2025-55911.json
@@ -0,0 +1,21 @@
+{
+ "id": "CVE-2025-55911",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-09-18T15:15:38.083",
+ "lastModified": "2025-09-18T15:15:38.083",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the file parameter"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://medium.com/@mukund.s1337/cve-2025-55911-clipbucket-5-5-2-build-90-ssrf-via-upload-actions-file-downloader-php-eb49dc02bd6f",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-574xx/CVE-2025-57452.json b/CVE-2025/CVE-2025-574xx/CVE-2025-57452.json
new file mode 100644
index 00000000000..766d38d26f1
--- /dev/null
+++ b/CVE-2025/CVE-2025-574xx/CVE-2025-57452.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2025-57452",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-09-18T15:15:38.220",
+ "lastModified": "2025-09-18T15:15:38.220",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In realme BackupRestore app v15.1.12_2810c08_250314, improper URI scheme handling in com.coloros.pc.PcToolMainActivity allows local attackers to cause a crash and potential XSS via crafted ADB intents."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://realme.com/",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://gist.github.com/Brucewebva/8a37010c5b1f05fd5e61591830bcbb37",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-584xx/CVE-2025-58446.json b/CVE-2025/CVE-2025-584xx/CVE-2025-58446.json
index c711b889049..ae6c221be50 100644
--- a/CVE-2025/CVE-2025-584xx/CVE-2025-58446.json
+++ b/CVE-2025/CVE-2025-584xx/CVE-2025-58446.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-58446",
"sourceIdentifier": "security-advisories@github.com",
"published": "2025-09-06T19:15:38.733",
- "lastModified": "2025-09-08T16:25:38.810",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:57:02.380",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,6 +55,28 @@
"providerUrgency": "NOT_DEFINED"
}
}
+ ],
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.6
+ }
]
},
"weaknesses": [
@@ -69,14 +91,38 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:mlc-ai:xgrammar:0.1.23:*:*:*:*:*:*:*",
+ "matchCriteriaId": "0F9934AC-C515-4013-8BA9-28088A2BD4A8"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/mlc-ai/xgrammar/commit/ced69c3ad2f8f61b516cc278a342e7c644383e27",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/mlc-ai/xgrammar/security/advisories/GHSA-9q5r-wfvf-rr7f",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Exploit",
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-587xx/CVE-2025-58782.json b/CVE-2025/CVE-2025-587xx/CVE-2025-58782.json
index ba70f18d937..7403df83df4 100644
--- a/CVE-2025/CVE-2025-587xx/CVE-2025-58782.json
+++ b/CVE-2025/CVE-2025-587xx/CVE-2025-58782.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-58782",
"sourceIdentifier": "security@apache.org",
"published": "2025-09-08T09:15:30.367",
- "lastModified": "2025-09-08T20:15:36.507",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T15:49:13.487",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,40 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:apache:jackrabbit:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "1.0.0",
+ "versionEndExcluding": "2.22.2",
+ "matchCriteriaId": "7AD40389-2C1F-4C5D-B443-0400AE863BC7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:apache:jackrabbit_jcr_commons:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "1.0.0",
+ "versionEndExcluding": "2.22.2",
+ "matchCriteriaId": "DDA3ED8F-81DA-4B7F-B034-97B674A6C543"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://lists.apache.org/thread/t4wdrost6dh17dh406g792j9wq6xmy6v",
- "source": "security@apache.org"
+ "source": "security@apache.org",
+ "tags": [
+ "Mailing List",
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-590xx/CVE-2025-59040.json b/CVE-2025/CVE-2025-590xx/CVE-2025-59040.json
new file mode 100644
index 00000000000..f283945e829
--- /dev/null
+++ b/CVE-2025/CVE-2025-590xx/CVE-2025-59040.json
@@ -0,0 +1,68 @@
+{
+ "id": "CVE-2025-59040",
+ "sourceIdentifier": "security-advisories@github.com",
+ "published": "2025-09-18T15:15:38.370",
+ "lastModified": "2025-09-18T15:15:38.370",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Tuleap is an Open Source Suite to improve management of software developments and collaboration. Backlog item representations do not verify the permissions of the child trackers. Users might see tracker names they should not have access to. This vulnerability is fixed in Tuleap Community Edition 16.11.99.1757427600 and Tuleap Enterprise Edition 16.11-6 and 16.10-8."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "security-advisories@github.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
+ "baseScore": 4.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 1.4
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "security-advisories@github.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-280"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/Enalean/tuleap/commit/92e4aa2d830a624a9183206c1c3558b90b8a5525",
+ "source": "security-advisories@github.com"
+ },
+ {
+ "url": "https://github.com/Enalean/tuleap/security/advisories/GHSA-67xc-39v9-pffg",
+ "source": "security-advisories@github.com"
+ },
+ {
+ "url": "https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=92e4aa2d830a624a9183206c1c3558b90b8a5525",
+ "source": "security-advisories@github.com"
+ },
+ {
+ "url": "https://tuleap.net/plugins/tracker/?aid=44489",
+ "source": "security-advisories@github.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-594xx/CVE-2025-59417.json b/CVE-2025/CVE-2025-594xx/CVE-2025-59417.json
new file mode 100644
index 00000000000..65c47202c87
--- /dev/null
+++ b/CVE-2025/CVE-2025-594xx/CVE-2025-59417.json
@@ -0,0 +1,82 @@
+{
+ "id": "CVE-2025-59417",
+ "sourceIdentifier": "security-advisories@github.com",
+ "published": "2025-09-18T15:15:38.557",
+ "lastModified": "2025-09-18T15:15:38.557",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.129.4, there is a a cross-site scripting (XSS) vulnerability when handling chat message in lobe-chat that can be escalated to remote code execution on the user\u2019s machine. In lobe-chat, when the response from the server is like , it will be rendered with the lobeArtifact node, instead of the plain text. However, when the type of the lobeArtifact is image/svg+xml , it will be rendered as the SVGRender component, which internally uses dangerouslySetInnerHTML to set the content of the svg, resulting in XSS attack. Any party capable of injecting content into chat messages, such as hosting a malicious page for prompt injection, operating a compromised MCP server, or leveraging tool integrations, can exploit this vulnerability. This vulnerability is fixed in 1.129.4."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV40": [
+ {
+ "source": "security-advisories@github.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "4.0",
+ "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
+ "baseScore": 6.8,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "HIGH",
+ "attackRequirements": "NONE",
+ "privilegesRequired": "NONE",
+ "userInteraction": "PASSIVE",
+ "vulnConfidentialityImpact": "HIGH",
+ "vulnIntegrityImpact": "HIGH",
+ "vulnAvailabilityImpact": "HIGH",
+ "subConfidentialityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "subAvailabilityImpact": "NONE",
+ "exploitMaturity": "PROOF_OF_CONCEPT",
+ "confidentialityRequirement": "NOT_DEFINED",
+ "integrityRequirement": "NOT_DEFINED",
+ "availabilityRequirement": "NOT_DEFINED",
+ "modifiedAttackVector": "NOT_DEFINED",
+ "modifiedAttackComplexity": "NOT_DEFINED",
+ "modifiedAttackRequirements": "NOT_DEFINED",
+ "modifiedPrivilegesRequired": "NOT_DEFINED",
+ "modifiedUserInteraction": "NOT_DEFINED",
+ "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
+ "modifiedVulnIntegrityImpact": "NOT_DEFINED",
+ "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
+ "modifiedSubConfidentialityImpact": "NOT_DEFINED",
+ "modifiedSubIntegrityImpact": "NOT_DEFINED",
+ "modifiedSubAvailabilityImpact": "NOT_DEFINED",
+ "Safety": "NOT_DEFINED",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
+ "valueDensity": "NOT_DEFINED",
+ "vulnerabilityResponseEffort": "NOT_DEFINED",
+ "providerUrgency": "NOT_DEFINED"
+ }
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "security-advisories@github.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/lobehub/lobe-chat/commit/9f044edd07ce102fe9f4b2fb47c62191c36da05c",
+ "source": "security-advisories@github.com"
+ },
+ {
+ "url": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-m79r-r765-5f9j",
+ "source": "security-advisories@github.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-594xx/CVE-2025-59421.json b/CVE-2025/CVE-2025-594xx/CVE-2025-59421.json
new file mode 100644
index 00000000000..7d2fb6fe36f
--- /dev/null
+++ b/CVE-2025/CVE-2025-594xx/CVE-2025-59421.json
@@ -0,0 +1,82 @@
+{
+ "id": "CVE-2025-59421",
+ "sourceIdentifier": "security-advisories@github.com",
+ "published": "2025-09-18T15:15:38.743",
+ "lastModified": "2025-09-18T15:15:38.743",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). A bad actor can flood the inbox of a user by repeatedly sending invites (duplicate). The issue is fixed in commit 83c3fc7676c5dbbe1fd5092d21d95a10c7b48615."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV40": [
+ {
+ "source": "security-advisories@github.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "4.0",
+ "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
+ "baseScore": 2.7,
+ "baseSeverity": "LOW",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "attackRequirements": "NONE",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "vulnConfidentialityImpact": "NONE",
+ "vulnIntegrityImpact": "NONE",
+ "vulnAvailabilityImpact": "LOW",
+ "subConfidentialityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "subAvailabilityImpact": "NONE",
+ "exploitMaturity": "UNREPORTED",
+ "confidentialityRequirement": "NOT_DEFINED",
+ "integrityRequirement": "NOT_DEFINED",
+ "availabilityRequirement": "NOT_DEFINED",
+ "modifiedAttackVector": "NOT_DEFINED",
+ "modifiedAttackComplexity": "NOT_DEFINED",
+ "modifiedAttackRequirements": "NOT_DEFINED",
+ "modifiedPrivilegesRequired": "NOT_DEFINED",
+ "modifiedUserInteraction": "NOT_DEFINED",
+ "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
+ "modifiedVulnIntegrityImpact": "NOT_DEFINED",
+ "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
+ "modifiedSubConfidentialityImpact": "NOT_DEFINED",
+ "modifiedSubIntegrityImpact": "NOT_DEFINED",
+ "modifiedSubAvailabilityImpact": "NOT_DEFINED",
+ "Safety": "NOT_DEFINED",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
+ "valueDensity": "NOT_DEFINED",
+ "vulnerabilityResponseEffort": "NOT_DEFINED",
+ "providerUrgency": "NOT_DEFINED"
+ }
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "security-advisories@github.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-770"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/frappe/press/commit/83c3fc7676c5dbbe1fd5092d21d95a10c7b48615",
+ "source": "security-advisories@github.com"
+ },
+ {
+ "url": "https://github.com/frappe/press/security/advisories/GHSA-68qm-vp8f-rpr3",
+ "source": "security-advisories@github.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-62xx/CVE-2025-6237.json b/CVE-2025/CVE-2025-62xx/CVE-2025-6237.json
index 898ec3b8f87..a19fe8fcdb0 100644
--- a/CVE-2025/CVE-2025-62xx/CVE-2025-6237.json
+++ b/CVE-2025/CVE-2025-62xx/CVE-2025-6237.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-6237",
"sourceIdentifier": "security@huntr.dev",
"published": "2025-09-18T09:15:35.557",
- "lastModified": "2025-09-18T13:43:34.310",
+ "lastModified": "2025-09-18T14:15:50.343",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -38,7 +38,7 @@
"weaknesses": [
{
"source": "security@huntr.dev",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -51,6 +51,10 @@
{
"url": "https://huntr.com/bounties/54ac9589-7c88-4fd4-8512-8b2f19fbaedf",
"source": "security@huntr.dev"
+ },
+ {
+ "url": "https://huntr.com/bounties/54ac9589-7c88-4fd4-8512-8b2f19fbaedf",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8067.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8067.json
index 3e1762b708b..7d408a8a0e0 100644
--- a/CVE-2025/CVE-2025-80xx/CVE-2025-8067.json
+++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8067.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-8067",
"sourceIdentifier": "secalert@redhat.com",
"published": "2025-08-28T15:16:03.600",
- "lastModified": "2025-09-18T04:15:58.183",
+ "lastModified": "2025-09-18T15:15:39.607",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -88,6 +88,10 @@
"url": "https://access.redhat.com/errata/RHSA-2025:16125",
"source": "secalert@redhat.com"
},
+ {
+ "url": "https://access.redhat.com/errata/RHSA-2025:16130",
+ "source": "secalert@redhat.com"
+ },
{
"url": "https://access.redhat.com/security/cve/CVE-2025-8067",
"source": "secalert@redhat.com"
diff --git a/CVE-2025/CVE-2025-96xx/CVE-2025-9656.json b/CVE-2025/CVE-2025-96xx/CVE-2025-9656.json
index eb1c882dab0..e44c9e77f6e 100644
--- a/CVE-2025/CVE-2025-96xx/CVE-2025-9656.json
+++ b/CVE-2025/CVE-2025-96xx/CVE-2025-9656.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-9656",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-08-29T16:15:37.900",
- "lastModified": "2025-08-29T16:24:29.730",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-09-18T14:39:00.430",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
}
],
"cvssMetricV2": [
@@ -118,28 +138,74 @@
"value": "CWE-94"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:phpgurukul:directory_management_system:2.0:*:*:*:*:*:*:*",
+ "matchCriteriaId": "74DDACAC-2E4D-47F4-B42B-929AC4C1D74E"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://github.com/xiguala123/myCVE/issues/10",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Exploit",
+ "Issue Tracking"
+ ]
},
{
"url": "https://phpgurukul.com/",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Product"
+ ]
},
{
"url": "https://vuldb.com/?ctiid.321864",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Permissions Required",
+ "VDB Entry"
+ ]
},
{
"url": "https://vuldb.com/?id.321864",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Third Party Advisory",
+ "VDB Entry"
+ ]
},
{
"url": "https://vuldb.com/?submit.637137",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Third Party Advisory",
+ "VDB Entry"
+ ]
}
]
}
\ No newline at end of file
diff --git a/README.md b/README.md
index 92e63227684..0479a05db1f 100644
--- a/README.md
+++ b/README.md
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
-2025-09-18T14:00:15.943798+00:00
+2025-09-18T16:00:11.821106+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
-2025-09-18T13:57:37.077000+00:00
+2025-09-18T15:57:15.960000+00:00
```
### Last Data Feed Release
@@ -33,54 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
-310458
+310546
```
### CVEs added in the last Commit
-Recently added CVEs: `10`
+Recently added CVEs: `88`
-- [CVE-2024-13151](CVE-2024/CVE-2024-131xx/CVE-2024-13151.json) (`2025-09-18T12:15:36.260`)
-- [CVE-2024-25011](CVE-2024/CVE-2024-250xx/CVE-2024-25011.json) (`2025-09-18T12:15:38.060`)
-- [CVE-2024-48851](CVE-2024/CVE-2024-488xx/CVE-2024-48851.json) (`2025-09-18T12:15:38.243`)
-- [CVE-2025-10207](CVE-2025/CVE-2025-102xx/CVE-2025-10207.json) (`2025-09-18T12:15:38.683`)
-- [CVE-2025-10664](CVE-2025/CVE-2025-106xx/CVE-2025-10664.json) (`2025-09-18T12:15:38.907`)
-- [CVE-2025-10665](CVE-2025/CVE-2025-106xx/CVE-2025-10665.json) (`2025-09-18T12:15:39.150`)
-- [CVE-2025-10666](CVE-2025/CVE-2025-106xx/CVE-2025-10666.json) (`2025-09-18T13:15:33.977`)
-- [CVE-2025-10667](CVE-2025/CVE-2025-106xx/CVE-2025-10667.json) (`2025-09-18T13:15:35.560`)
-- [CVE-2025-40677](CVE-2025/CVE-2025-406xx/CVE-2025-40677.json) (`2025-09-18T12:15:39.407`)
-- [CVE-2025-40678](CVE-2025/CVE-2025-406xx/CVE-2025-40678.json) (`2025-09-18T12:15:39.603`)
+- [CVE-2023-53406](CVE-2023/CVE-2023-534xx/CVE-2023-53406.json) (`2025-09-18T14:15:44.040`)
+- [CVE-2023-53407](CVE-2023/CVE-2023-534xx/CVE-2023-53407.json) (`2025-09-18T14:15:44.150`)
+- [CVE-2023-53408](CVE-2023/CVE-2023-534xx/CVE-2023-53408.json) (`2025-09-18T14:15:44.253`)
+- [CVE-2023-53409](CVE-2023/CVE-2023-534xx/CVE-2023-53409.json) (`2025-09-18T14:15:44.387`)
+- [CVE-2023-53410](CVE-2023/CVE-2023-534xx/CVE-2023-53410.json) (`2025-09-18T14:15:44.503`)
+- [CVE-2023-53411](CVE-2023/CVE-2023-534xx/CVE-2023-53411.json) (`2025-09-18T14:15:44.617`)
+- [CVE-2023-53412](CVE-2023/CVE-2023-534xx/CVE-2023-53412.json) (`2025-09-18T14:15:44.727`)
+- [CVE-2023-53413](CVE-2023/CVE-2023-534xx/CVE-2023-53413.json) (`2025-09-18T14:15:44.837`)
+- [CVE-2023-53414](CVE-2023/CVE-2023-534xx/CVE-2023-53414.json) (`2025-09-18T14:15:44.943`)
+- [CVE-2023-53415](CVE-2023/CVE-2023-534xx/CVE-2023-53415.json) (`2025-09-18T14:15:45.070`)
+- [CVE-2023-53416](CVE-2023/CVE-2023-534xx/CVE-2023-53416.json) (`2025-09-18T14:15:45.190`)
+- [CVE-2023-53417](CVE-2023/CVE-2023-534xx/CVE-2023-53417.json) (`2025-09-18T14:15:45.310`)
+- [CVE-2023-53418](CVE-2023/CVE-2023-534xx/CVE-2023-53418.json) (`2025-09-18T14:15:45.423`)
+- [CVE-2025-10668](CVE-2025/CVE-2025-106xx/CVE-2025-10668.json) (`2025-09-18T14:15:48.683`)
+- [CVE-2025-10669](CVE-2025/CVE-2025-106xx/CVE-2025-10669.json) (`2025-09-18T14:15:48.890`)
+- [CVE-2025-10670](CVE-2025/CVE-2025-106xx/CVE-2025-10670.json) (`2025-09-18T14:15:49.100`)
+- [CVE-2025-10671](CVE-2025/CVE-2025-106xx/CVE-2025-10671.json) (`2025-09-18T15:15:37.437`)
+- [CVE-2025-10672](CVE-2025/CVE-2025-106xx/CVE-2025-10672.json) (`2025-09-18T15:15:37.653`)
+- [CVE-2025-10673](CVE-2025/CVE-2025-106xx/CVE-2025-10673.json) (`2025-09-18T15:15:37.863`)
+- [CVE-2025-4444](CVE-2025/CVE-2025-44xx/CVE-2025-4444.json) (`2025-09-18T14:15:49.887`)
+- [CVE-2025-55911](CVE-2025/CVE-2025-559xx/CVE-2025-55911.json) (`2025-09-18T15:15:38.083`)
+- [CVE-2025-57452](CVE-2025/CVE-2025-574xx/CVE-2025-57452.json) (`2025-09-18T15:15:38.220`)
+- [CVE-2025-59040](CVE-2025/CVE-2025-590xx/CVE-2025-59040.json) (`2025-09-18T15:15:38.370`)
+- [CVE-2025-59417](CVE-2025/CVE-2025-594xx/CVE-2025-59417.json) (`2025-09-18T15:15:38.557`)
+- [CVE-2025-59421](CVE-2025/CVE-2025-594xx/CVE-2025-59421.json) (`2025-09-18T15:15:38.743`)
### CVEs modified in the last Commit
-Recently modified CVEs: `215`
+Recently modified CVEs: `100`
-- [CVE-2025-7987](CVE-2025/CVE-2025-79xx/CVE-2025-7987.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-7988](CVE-2025/CVE-2025-79xx/CVE-2025-7988.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-7989](CVE-2025/CVE-2025-79xx/CVE-2025-7989.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-7990](CVE-2025/CVE-2025-79xx/CVE-2025-7990.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-7991](CVE-2025/CVE-2025-79xx/CVE-2025-7991.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-7992](CVE-2025/CVE-2025-79xx/CVE-2025-7992.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-7993](CVE-2025/CVE-2025-79xx/CVE-2025-7993.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-7994](CVE-2025/CVE-2025-79xx/CVE-2025-7994.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-7995](CVE-2025/CVE-2025-79xx/CVE-2025-7995.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-7996](CVE-2025/CVE-2025-79xx/CVE-2025-7996.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-7997](CVE-2025/CVE-2025-79xx/CVE-2025-7997.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-7998](CVE-2025/CVE-2025-79xx/CVE-2025-7998.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-7999](CVE-2025/CVE-2025-79xx/CVE-2025-7999.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-8000](CVE-2025/CVE-2025-80xx/CVE-2025-8000.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-8001](CVE-2025/CVE-2025-80xx/CVE-2025-8001.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-8002](CVE-2025/CVE-2025-80xx/CVE-2025-8002.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-8003](CVE-2025/CVE-2025-80xx/CVE-2025-8003.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-8004](CVE-2025/CVE-2025-80xx/CVE-2025-8004.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-8005](CVE-2025/CVE-2025-80xx/CVE-2025-8005.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-8006](CVE-2025/CVE-2025-80xx/CVE-2025-8006.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-8565](CVE-2025/CVE-2025-85xx/CVE-2025-8565.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-8942](CVE-2025/CVE-2025-89xx/CVE-2025-8942.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-9083](CVE-2025/CVE-2025-90xx/CVE-2025-9083.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-9862](CVE-2025/CVE-2025-98xx/CVE-2025-9862.json) (`2025-09-18T13:43:34.310`)
-- [CVE-2025-9992](CVE-2025/CVE-2025-99xx/CVE-2025-9992.json) (`2025-09-18T13:43:34.310`)
+- [CVE-2025-10629](CVE-2025/CVE-2025-106xx/CVE-2025-10629.json) (`2025-09-18T14:15:47.710`)
+- [CVE-2025-10631](CVE-2025/CVE-2025-106xx/CVE-2025-10631.json) (`2025-09-18T14:15:47.840`)
+- [CVE-2025-10632](CVE-2025/CVE-2025-106xx/CVE-2025-10632.json) (`2025-09-18T14:15:47.980`)
+- [CVE-2025-10634](CVE-2025/CVE-2025-106xx/CVE-2025-10634.json) (`2025-09-18T14:15:48.127`)
+- [CVE-2025-10666](CVE-2025/CVE-2025-106xx/CVE-2025-10666.json) (`2025-09-18T15:15:37.280`)
+- [CVE-2025-23252](CVE-2025/CVE-2025-232xx/CVE-2025-23252.json) (`2025-09-18T14:02:51.250`)
+- [CVE-2025-23312](CVE-2025/CVE-2025-233xx/CVE-2025-23312.json) (`2025-09-18T15:26:32.363`)
+- [CVE-2025-23313](CVE-2025/CVE-2025-233xx/CVE-2025-23313.json) (`2025-09-18T15:02:22.247`)
+- [CVE-2025-23314](CVE-2025/CVE-2025-233xx/CVE-2025-23314.json) (`2025-09-18T15:00:48.740`)
+- [CVE-2025-23315](CVE-2025/CVE-2025-233xx/CVE-2025-23315.json) (`2025-09-18T14:52:54.613`)
+- [CVE-2025-25733](CVE-2025/CVE-2025-257xx/CVE-2025-25733.json) (`2025-09-18T15:31:39.373`)
+- [CVE-2025-29874](CVE-2025/CVE-2025-298xx/CVE-2025-29874.json) (`2025-09-18T14:35:14.593`)
+- [CVE-2025-29875](CVE-2025/CVE-2025-298xx/CVE-2025-29875.json) (`2025-09-18T14:34:42.557`)
+- [CVE-2025-29878](CVE-2025/CVE-2025-298xx/CVE-2025-29878.json) (`2025-09-18T14:28:46.180`)
+- [CVE-2025-29879](CVE-2025/CVE-2025-298xx/CVE-2025-29879.json) (`2025-09-18T14:27:05.597`)
+- [CVE-2025-29886](CVE-2025/CVE-2025-298xx/CVE-2025-29886.json) (`2025-09-18T14:23:34.787`)
+- [CVE-2025-33008](CVE-2025/CVE-2025-330xx/CVE-2025-33008.json) (`2025-09-18T15:34:07.980`)
+- [CVE-2025-35036](CVE-2025/CVE-2025-350xx/CVE-2025-35036.json) (`2025-09-18T14:19:46.060`)
+- [CVE-2025-48493](CVE-2025/CVE-2025-484xx/CVE-2025-48493.json) (`2025-09-18T14:08:53.603`)
+- [CVE-2025-55241](CVE-2025/CVE-2025-552xx/CVE-2025-55241.json) (`2025-09-18T14:15:50.110`)
+- [CVE-2025-58446](CVE-2025/CVE-2025-584xx/CVE-2025-58446.json) (`2025-09-18T15:57:02.380`)
+- [CVE-2025-58782](CVE-2025/CVE-2025-587xx/CVE-2025-58782.json) (`2025-09-18T15:49:13.487`)
+- [CVE-2025-6237](CVE-2025/CVE-2025-62xx/CVE-2025-6237.json) (`2025-09-18T14:15:50.343`)
+- [CVE-2025-8067](CVE-2025/CVE-2025-80xx/CVE-2025-8067.json) (`2025-09-18T15:15:39.607`)
+- [CVE-2025-9656](CVE-2025/CVE-2025-96xx/CVE-2025-9656.json) (`2025-09-18T14:39:00.430`)
## Download and Usage
diff --git a/_state.csv b/_state.csv
index d6678c9bac1..8c2906024a3 100644
--- a/_state.csv
+++ b/_state.csv
@@ -188151,14 +188151,14 @@ CVE-2021-47528,0,0,4462c550f6723a850d5ad89935f31f228dcf6d4257a8193eefb30e0c81304
CVE-2021-47529,0,0,23334edd1934a1834e8c5e1e55e5ba3731c529f281ae67e5ca9ba9cc1ad8412d,2024-11-21T06:36:27.793000
CVE-2021-47530,0,0,0d2743b3ae9058b10d8ef4b2e7e8454e81462333b504d2ee2b754240deadfba0,2024-11-21T06:36:27.970000
CVE-2021-47531,0,0,26b562b942dadc4ddc178596164272c99506482901b761bfe23f18af6185b946,2024-11-21T06:36:28.120000
-CVE-2021-47532,0,0,5900395c9af74e42894f121845fbaafde9870ef63e8461ecd8a92ac9f756d959,2024-11-21T06:36:28.290000
-CVE-2021-47533,0,0,be84d21a37cb4c54964b6103c1b2765215eccd83bb09b6105249391eb9699cb4,2024-11-21T06:36:28.440000
+CVE-2021-47532,0,1,e2e8a17de3d10b6c5876650f6c0f91a4233c089f85839f4166571d713ac84c59,2025-09-18T15:57:15.960000
+CVE-2021-47533,0,1,784e1e37b9bd58ad762a7e88162d2850aa88c9b567012e2d5e79627e5e81b401,2025-09-18T15:56:31.893000
CVE-2021-47534,0,0,d07040b4ff519dc1a084fb489c5959f4c2dbfa8bb65273e0472ea0780c1e272a,2025-04-01T18:41:04.503000
CVE-2021-47535,0,0,b3e6577a4623cb57bb1f7dd27ed776daf58947a01f82823261bd685877d31018,2025-04-01T18:41:14.890000
-CVE-2021-47536,0,0,534adbda5f96e66b1b1e17e14d82e8c935366ef7fba54b9bd3044bb113c33e29,2024-11-21T06:36:29.030000
+CVE-2021-47536,0,1,27a1c191cff6d252906c9f110b76247e387e809394fef6be212c1d1f94defe5c,2025-09-18T15:56:00.647000
CVE-2021-47537,0,0,23d49ed41c3c8dea2c705e0ebea9326147be0169be523ff2ab116a616489a112,2024-11-21T06:36:29.217000
-CVE-2021-47538,0,0,5657a939e3a66ff95600870cb3a0cd091374f56efb76dff96830e620bd9d212a,2024-11-21T06:36:29.413000
-CVE-2021-47539,0,0,a80ef8414bfdd5fdad99a25d8ecb99869ed095cee1f5cb24485cf8c70d5ff39d,2024-11-21T06:36:29.597000
+CVE-2021-47538,0,1,a72cf7e17b9e1f14ac5c8f684933f3787a9b65639034fe374c0fc697bfad7d88,2025-09-18T15:55:34.137000
+CVE-2021-47539,0,1,16b987814b607d8d87f2dfb0f38a8d7e9628485e992e95b225cd0f8684332fe5,2025-09-18T15:55:24.377000
CVE-2021-47540,0,0,e5a4b0736ef1b21122881713612aa549991a6e0d630ad53f62d9cb8c007759e6,2024-11-21T06:36:29.773000
CVE-2021-47541,0,0,fb93f1e7f5bdbad847b95ae6c28e232db5559aad4c2af1687c3762ac8fc40c19,2024-11-21T06:36:29.980000
CVE-2021-47542,0,0,e4a6d46b4a1723d4f9ab9e45f0a62d3d4fe7ed0942aca91a0e6a6f651c8199f4,2024-11-21T06:36:30.193000
@@ -188172,21 +188172,21 @@ CVE-2021-47549,0,0,d03a13419f24f5c877fa34cdea0784a48a2887d43194994f26b4000773afb
CVE-2021-47550,0,0,0a085fbccc238b3375d78c1e9815ef80cf5634271b69aaabbbb9581043db555c,2024-11-21T06:36:31.627000
CVE-2021-47551,0,0,32b881981f6875ea7653ef0f14e2d0a3575762c887940304d05646bb22ce1183,2025-04-01T18:42:20.947000
CVE-2021-47552,0,0,fdad00dfcc6599d689b7ad97e0127507adab9701ca3a33aa5bec92ba101023c1,2025-01-06T20:47:35.617000
-CVE-2021-47553,0,0,050163d63da6acf868e1f5c354f635c34ea9f5518a26160fbbca3529849dbac3,2024-11-21T06:36:32.240000
+CVE-2021-47553,0,1,0c0939defa564ccd4afb85175d79abf4b28c8037cb5a2ccc7012f2e8fe354a47,2025-09-18T15:11:36.080000
CVE-2021-47554,0,0,eb5b9fd9e574f1c4e10605ca3c1d61003f1272f0eabfaaf9d035ce3f83cb2247,2025-01-15T18:30:44.577000
-CVE-2021-47555,0,0,f7ea90ca544c804c7149ae6fd0b87b261b9d52eeb2d2f95ccb282734db81929f,2024-11-21T06:36:32.577000
+CVE-2021-47555,0,1,22674c8d5de3d89201d7f7e84a750760d2388e0e2f787730fb92306a30986658,2025-09-18T15:28:53.540000
CVE-2021-47556,0,0,264a54e109e09a5596e9feb350a456694794f9eb9db9c02a9da5ac2c3105a888,2024-11-21T06:36:32.810000
CVE-2021-47557,0,0,b3a911c46b8046b4a4113a9985d24e7518961b673274314b01aa024cdea9b1bf,2025-01-06T20:47:21.047000
-CVE-2021-47558,0,0,57bd0afa6abd4d57a626354b993abedd7614f6279e2b42c136d56d5d91eadf35,2024-11-21T06:36:33.157000
+CVE-2021-47558,0,1,2e73d2dbb654a78ad084cdde72924079ad0f61a434d3ce51574f4f3521510df3,2025-09-18T15:37:52.970000
CVE-2021-47559,0,0,3672606e1e850d9cdc5294821347ce1b493b34b3499402f1ab64fcf9e043953d,2024-11-21T06:36:33.313000
CVE-2021-47560,0,0,caf2f0c61994dbdc75c3a05ac648bf9cb15374ce085aa43a7e068eab7160a116,2025-01-06T20:47:01.860000
-CVE-2021-47561,0,0,e0235dec0b72d9d8580d576722125b6edac987b24eb40a8e85bf4ff0c9d3c777,2024-11-21T06:36:33.640000
+CVE-2021-47561,0,1,994efb3fd966b80778950cb11d8ceb5f2bfc59d6d42ce262f070a114861e6daa,2025-09-18T15:39:12.430000
CVE-2021-47562,0,0,0c5171ecf5794071cb59f4e4e1c95888185d46a5903347f271f9bf948e174483,2025-01-06T20:46:45.917000
CVE-2021-47563,0,0,3679bbb31fa654d01916ffbc0a88f80d7a221e1aa78edffd352a03852bcd659f,2025-04-01T18:32:52.067000
CVE-2021-47564,0,0,d83871b4c11ee6f83a15e0067160af38dd41998532a2a8fe7d769046496fda66,2025-01-06T20:52:59.593000
-CVE-2021-47565,0,0,3fb4ef0d81c3cbc7d8bcc91b70b96c158c1e6021ccb7444f0398ce2eb678197c,2024-11-21T06:36:34.150000
-CVE-2021-47566,0,0,5fb5ae86340c7d530830f008f216104183546fa5bbce6500ef91ec10a65fe738,2024-11-21T06:36:34.270000
-CVE-2021-47567,0,0,24eba83a36223df2f2488f5dc683cc91967b4af432a8c6995290f9fb34906de8,2024-11-21T06:36:34.383000
+CVE-2021-47565,0,1,4c211a9f9fe5ed0e681b40e9f905dcafefa6a60be85a93d0316cadf42ca39269,2025-09-18T15:41:08.080000
+CVE-2021-47566,0,1,dc6ff1f598063a91a70261c36ccfc1009b0368cd0d20433a24e8a4b9a1d3c4b8,2025-09-18T15:41:41.317000
+CVE-2021-47567,0,1,3e8648c966839a6cfcd9e2217a24e7c7637c76392e167778fef54c63242bc9f1,2025-09-18T15:47:52.753000
CVE-2021-47568,0,0,1992c9c5685d6227fd7c64ce908089429cf9b2127a9c782087601509077e23f3,2025-01-06T21:33:33.463000
CVE-2021-47569,0,0,56ef4091726cc28754a7b6b869c1910ac1f11c261b057bf1c0c3524d603ecb6b,2024-11-21T06:36:34.593000
CVE-2021-47570,0,0,4905f650fc0b0043c8dcb6d44988cb82abda75573974a82c76118d1b215e4605,2024-11-21T06:36:34.690000
@@ -213327,12 +213327,12 @@ CVE-2022-48637,0,0,ea55ee43998aa5c42e1cb7b86ac1354299d8578f299174d0b0f754bbea582
CVE-2022-48638,0,0,8dd4709efa929d812964c870894713380b0ff26c7d430ba5776499a757ed9d04,2025-03-21T18:13:37.967000
CVE-2022-48639,0,0,471cb299c2f79b95bf203e1bee3acaec19277c53307a0964cefbae99c7b46ef7,2025-01-13T19:58:08.060000
CVE-2022-4864,0,0,59b15f5eec2180ddfa7ce36526893d26fb614ed7bf416e8ac4ed3714bd6e2186,2024-11-21T07:36:05.780000
-CVE-2022-48640,0,0,5e756f70cbddf596ac5b8ae586dd2af870a1a48da17b6fd47eabf03f4ed205b8,2024-11-21T07:33:40.350000
+CVE-2022-48640,0,1,872bce2c5e81cbf01879a5dbaad83d4dfc230ffc1a6127ffbac6300eb5c5d29f,2025-09-18T14:06:46.927000
CVE-2022-48641,0,0,99cb3d858a92705b7faa733f64ea99edcf4ba5c00c38154dda248e15af991606,2025-01-07T16:57:26.363000
CVE-2022-48642,0,0,68582f54759adaad89e7572c48a2bb40facbf5e58029a83e5488b10b4265fdd3,2025-01-07T16:58:08.190000
-CVE-2022-48643,0,0,ab9b649f55ad96816c2493c31f5a05b2eb566c44703b1f0180a6a102d8ac6207,2024-11-21T07:33:40.710000
-CVE-2022-48644,0,0,c5039b46b0d136554ba427d83c4470091587ebeb56eef158e382b1a908e7e2d6,2024-11-21T07:33:40.817000
-CVE-2022-48645,0,0,4d8ec773eaf2c6a6981744ed20ef9fe75b117903e4fb588c647780c2e96ceca6,2024-11-21T07:33:40.933000
+CVE-2022-48643,0,1,3b7831022dbc33614cb7a6ebfe8ca1007c61d864b51180a951983eb7fd1ef467,2025-09-18T14:06:18.913000
+CVE-2022-48644,0,1,dcb3c140ad05d9a3439c865f99a8ea8aeca3161f25c883e2e7286559f00a399f,2025-09-18T14:05:16.673000
+CVE-2022-48645,0,1,c7ae1b03ad379f20196954dace8837fd72c174cb33edbb19900737e8fa4e18af,2025-09-18T14:04:23.490000
CVE-2022-48646,0,0,2bb2fdb29daa9dd60ebcd367490425ac9963ea4f2842936bd59923671c26e4ac,2025-03-20T21:29:44.733000
CVE-2022-48647,0,0,ffb8f8771c64f2f684d96641c400f541031333de4d79577a65f87630451d4864,2025-03-04T16:05:37.600000
CVE-2022-48648,0,0,9a846fbdbad309d97836e69fabd5197db1c3b2910cc6f57468045df41e3f2876,2025-01-14T14:52:07.293000
@@ -213340,8 +213340,8 @@ CVE-2022-48649,0,0,2ab33e79ca9b4194d6d75677c978f0f9883b10a83b196d871b3a9d72b7c8b
CVE-2022-4865,0,0,18e0a04c007aee1df9befeaf56e83e037df0050950a376d12b247ab05acba711,2024-11-21T07:36:05.920000
CVE-2022-48650,0,0,cdfd2f625d1513928437007bd8281035a0c1ca1a3718021c970492711364756a,2025-03-20T21:31:59.823000
CVE-2022-48651,0,0,b604f71e1156137f1acca9da8bd21545d5cd4ac1cea4911dba1f08d59ae71504,2025-03-20T21:33:27.507000
-CVE-2022-48652,0,0,e75f3e172b2a3fc6aabc6283ac989ed153078874bf3d6b7f96b640f6d88c3774,2024-11-21T07:33:42.007000
-CVE-2022-48653,0,0,e3991172af8173828d8cb1304b58736d4db6b82f3419a7d9f8e8bc851077644d,2024-11-21T07:33:42.113000
+CVE-2022-48652,0,1,2c0448b5085e960d817dcff8c95e4822d3e2c3672185efa83db6a855daa100eb,2025-09-18T14:03:43.710000
+CVE-2022-48653,0,1,81233aa851141dcaa91307e4e36adf2fee8fe11ca45b11a2e2cb7147cb593928,2025-09-18T14:02:56.217000
CVE-2022-48654,0,0,665350c27941a79aa1716c4f7d5b7f9e72c8d5ff762c82ac6f833f13bafbfa08,2024-11-21T07:33:42.243000
CVE-2022-48655,0,0,e1f33c474d322d0c3dc6c99da1957ebeaaee643365ebab78e329fe3b3e380f4b,2025-01-10T19:06:09.710000
CVE-2022-48656,0,0,8e4b184a40dd19672dc571a6ca12880f589ae0028b520f7be2944dc7980820d7,2024-11-21T07:33:42.660000
@@ -213354,10 +213354,10 @@ CVE-2022-48661,0,0,94c13e365643a5d9040a31d1e4eea8f613f702a030a6610cd26fd8caacb1f
CVE-2022-48662,0,0,75edba33f99be87a3ec236061e56838d7aed46dc4f6625d858676ad5d26dd960,2024-11-21T07:33:43.523000
CVE-2022-48663,0,0,8f56fbd2f2681c688d4bb0648692f2f15f38837513977faebd870611b3e66851,2025-01-14T14:53:12.910000
CVE-2022-48664,0,0,0296ec528f99a30bc8a1409f955b52981ac595ef8b55d8a9605d9b7a23656df6,2024-11-21T07:33:43.840000
-CVE-2022-48665,0,0,4cdb6b337ea1021d4626bec78d7a4fa0316ede88a6a1eb36b9a3e96f2bef5059,2024-11-21T07:33:43.953000
+CVE-2022-48665,0,1,a3292ff178bc3780853a8156659d3ca5b200845c47874fc76740bc3414dd60f7,2025-09-18T14:01:29.897000
CVE-2022-48666,0,0,d2995af1925e586f45fb6ef6ee8e14c7e952a94b45a1643abdb58b595b29b977,2025-03-20T21:34:01.143000
-CVE-2022-48667,0,0,c64b1c27111877288d13798a4436698338a58aaf3e6a7b29d6a274bfa75175ca,2024-11-21T07:33:44.240000
-CVE-2022-48668,0,1,9140d9cbe1be00bb2f23308104b4d898c9a5d7ef4ac518940da91249251439bf,2024-11-21T07:33:44.343000
+CVE-2022-48667,0,1,cc6f95274c3c36c34bd1b72b5c18217e1c11364c8b92d472a7a9a6cdd03780e7,2025-09-18T14:00:11.350000
+CVE-2022-48668,0,1,e21d59d292b3a186fcbc4a59d73dc3b0bda3f124484a5dea9ac66fa888df8e3d,2025-09-18T13:59:55.400000
CVE-2022-48669,0,0,4e8a75abdd48ea41ab64f291f408da91c8cbad8a28c7fc420c7f8d877e6a9f35,2025-04-08T18:42:41.247000
CVE-2022-4867,0,0,e1059ace6930fd217b60e0b9efbe0f76641eb09358e61ee9bf1e0af33bf374f6,2024-11-21T07:36:06.150000
CVE-2022-48670,0,0,92e6121f91564e9727331044c8f7987600e87da5de9b24a1f709b9fe1d140cd5,2025-01-10T19:07:21.170000
@@ -215140,28 +215140,54 @@ CVE-2022-50349,0,0,f3cde7d47dca61af4fa513e0e5f7a368a2f965d422b3a00a9e22957d95ecf
CVE-2022-50350,0,0,5ae75be1a49d597eee5ee5749c61abee732091a45afa5c84bdbea6891e14b1b9,2025-09-17T14:18:55.093000
CVE-2022-50351,0,0,967590694013b19226a246c0cc4afb8bf579d0f89e93dd0cf340eaa158b353e2,2025-09-17T14:18:55.093000
CVE-2022-50352,0,0,c91dfd4973c7cd17b9925ffb02013b76f046dff86cc07c10155441f5444df222,2025-09-17T14:18:55.093000
-CVE-2022-50353,0,1,b0be5a7a87611fe9f6d51b40991a36d8ca88e6bacfde7da32d8c0ae1d4c8735b,2025-09-18T13:43:34.310000
-CVE-2022-50354,0,1,5d3f93135d0b04ec34898ea157559c407dd649f66622f09f533c5c7e94ce45fb,2025-09-18T13:43:34.310000
-CVE-2022-50355,0,1,b95e7ed4dc25273534a27aef29cc7dff14a0b22de369f5addca104e333599813,2025-09-18T13:43:34.310000
-CVE-2022-50356,0,1,2befc7df88841a354458d389941fd3831cc7a20aee69f4ef8085b633e1918034,2025-09-18T13:43:34.310000
-CVE-2022-50357,0,1,87fa3a4ec0e8cf7c0f4be6c49f98ff3ed1dd2633b062c3e65d121c5d85301c2d,2025-09-18T13:43:34.310000
-CVE-2022-50358,0,1,50bac7efff9ae29c1aabf86e7157fd14f0776d2b559e36c9eb6d3bb0fc28270b,2025-09-18T13:43:34.310000
-CVE-2022-50359,0,1,9081ed0e36f08c34a6cca244fe16b4c7477e11c47f59c93017caa9966316a2bb,2025-09-18T13:43:34.310000
-CVE-2022-50360,0,1,7b3323cbf7dbc4dce2b7cb7947a1deef6ec3bd74062789d840e34d7ef216000b,2025-09-18T13:43:34.310000
-CVE-2022-50361,0,1,8e9b5667abb7aab525aba76ea17fda3806563647b6e2f34d01c60d519351ee5e,2025-09-18T13:43:34.310000
-CVE-2022-50362,0,1,a807c9397b9e3af45f373f5e51e0db9aca6ff8cdafa7aa15713f0d28b0519f42,2025-09-18T13:43:34.310000
-CVE-2022-50363,0,1,498757703ca66c055170b97d2a9e4bdd911ae5db879b2b0fed39c08bebbb7955,2025-09-18T13:43:34.310000
-CVE-2022-50364,0,1,26702de25630425c8b450bc95595617cc83569f284fd69e85cdaccc1b187f7cc,2025-09-18T13:43:34.310000
-CVE-2022-50365,0,1,cfc535caa91e211fc6ab862576d32907b73092685260305103367ead12800807,2025-09-18T13:43:34.310000
-CVE-2022-50366,0,1,c6d344c6198fa21425e98a19ac2de8f38ea98030002a3f4d655985cb8430a961,2025-09-18T13:43:34.310000
-CVE-2022-50367,0,1,be15194201d45f059b6634b5550e19fa6cc1324770b210355d5ec3b4db7c77eb,2025-09-18T13:43:34.310000
-CVE-2022-50368,0,1,27b63c3276c46bc52faaa5fd6a3248be1e0b37137bd8ffbb071fb7204948edc7,2025-09-18T13:43:34.310000
-CVE-2022-50369,0,1,929168a11a5bf90f87d7a24063a5b2217c7e5129cb54c66bd53cf356bd54220a,2025-09-18T13:43:34.310000
-CVE-2022-50370,0,1,2ca8f2bb073adcb49bf65650f5dcdf120ac4efa742faf6fc1b2cf1205ad19f2d,2025-09-18T13:43:34.310000
-CVE-2022-50371,0,1,110ed4815939319d302cdc01c955c272a59c861d2399135a3816f27a6489a860,2025-09-18T13:43:34.310000
-CVE-2022-50372,0,1,303ae01c871bc6aec67477a9cccf148d23f776ab5a692d63da1afdf8043b52c8,2025-09-18T13:43:34.310000
-CVE-2022-50373,0,1,e9413175ba34860a9f4b4c10c2153832ab95b55a86a3795a3aff50f87b136bd2,2025-09-18T13:43:34.310000
-CVE-2022-50374,0,1,8226ac4ba3e00df56f866dedd5b990abde337a7fee8c5e3b9f634907037826d1,2025-09-18T13:43:34.310000
+CVE-2022-50353,0,0,b0be5a7a87611fe9f6d51b40991a36d8ca88e6bacfde7da32d8c0ae1d4c8735b,2025-09-18T13:43:34.310000
+CVE-2022-50354,0,0,5d3f93135d0b04ec34898ea157559c407dd649f66622f09f533c5c7e94ce45fb,2025-09-18T13:43:34.310000
+CVE-2022-50355,0,0,b95e7ed4dc25273534a27aef29cc7dff14a0b22de369f5addca104e333599813,2025-09-18T13:43:34.310000
+CVE-2022-50356,0,0,2befc7df88841a354458d389941fd3831cc7a20aee69f4ef8085b633e1918034,2025-09-18T13:43:34.310000
+CVE-2022-50357,0,0,87fa3a4ec0e8cf7c0f4be6c49f98ff3ed1dd2633b062c3e65d121c5d85301c2d,2025-09-18T13:43:34.310000
+CVE-2022-50358,0,0,50bac7efff9ae29c1aabf86e7157fd14f0776d2b559e36c9eb6d3bb0fc28270b,2025-09-18T13:43:34.310000
+CVE-2022-50359,0,0,9081ed0e36f08c34a6cca244fe16b4c7477e11c47f59c93017caa9966316a2bb,2025-09-18T13:43:34.310000
+CVE-2022-50360,0,0,7b3323cbf7dbc4dce2b7cb7947a1deef6ec3bd74062789d840e34d7ef216000b,2025-09-18T13:43:34.310000
+CVE-2022-50361,0,0,8e9b5667abb7aab525aba76ea17fda3806563647b6e2f34d01c60d519351ee5e,2025-09-18T13:43:34.310000
+CVE-2022-50362,0,0,a807c9397b9e3af45f373f5e51e0db9aca6ff8cdafa7aa15713f0d28b0519f42,2025-09-18T13:43:34.310000
+CVE-2022-50363,0,0,498757703ca66c055170b97d2a9e4bdd911ae5db879b2b0fed39c08bebbb7955,2025-09-18T13:43:34.310000
+CVE-2022-50364,0,0,26702de25630425c8b450bc95595617cc83569f284fd69e85cdaccc1b187f7cc,2025-09-18T13:43:34.310000
+CVE-2022-50365,0,0,cfc535caa91e211fc6ab862576d32907b73092685260305103367ead12800807,2025-09-18T13:43:34.310000
+CVE-2022-50366,0,0,c6d344c6198fa21425e98a19ac2de8f38ea98030002a3f4d655985cb8430a961,2025-09-18T13:43:34.310000
+CVE-2022-50367,0,0,be15194201d45f059b6634b5550e19fa6cc1324770b210355d5ec3b4db7c77eb,2025-09-18T13:43:34.310000
+CVE-2022-50368,0,0,27b63c3276c46bc52faaa5fd6a3248be1e0b37137bd8ffbb071fb7204948edc7,2025-09-18T13:43:34.310000
+CVE-2022-50369,0,0,929168a11a5bf90f87d7a24063a5b2217c7e5129cb54c66bd53cf356bd54220a,2025-09-18T13:43:34.310000
+CVE-2022-50370,0,0,2ca8f2bb073adcb49bf65650f5dcdf120ac4efa742faf6fc1b2cf1205ad19f2d,2025-09-18T13:43:34.310000
+CVE-2022-50371,0,0,110ed4815939319d302cdc01c955c272a59c861d2399135a3816f27a6489a860,2025-09-18T13:43:34.310000
+CVE-2022-50372,0,0,303ae01c871bc6aec67477a9cccf148d23f776ab5a692d63da1afdf8043b52c8,2025-09-18T13:43:34.310000
+CVE-2022-50373,0,0,e9413175ba34860a9f4b4c10c2153832ab95b55a86a3795a3aff50f87b136bd2,2025-09-18T13:43:34.310000
+CVE-2022-50374,0,0,8226ac4ba3e00df56f866dedd5b990abde337a7fee8c5e3b9f634907037826d1,2025-09-18T13:43:34.310000
+CVE-2022-50375,1,1,8aa3cb62a6fa66fbd9c4e1f3378d5ae4634767eef7946123cbdaa0772f11e3f2,2025-09-18T14:15:36.110000
+CVE-2022-50376,1,1,895012457ce7b4bddfa05236a373e26e94d3a904d3268fac84222817befc90d9,2025-09-18T14:15:36.277000
+CVE-2022-50377,1,1,44949895cc6fc66511939503c735dbd317af76cf44206a44796de4e5fabb05b4,2025-09-18T14:15:36.397000
+CVE-2022-50378,1,1,fd517c2b47df326472b07ceb83ad556d3dca55a7c5e89d255023febcc1d0bf59,2025-09-18T14:15:36.513000
+CVE-2022-50379,1,1,3ef02fbc16d3c5721a170b2ebf10d6016bd7f7f6d487b48ae49893b18d998489,2025-09-18T14:15:36.630000
+CVE-2022-50380,1,1,847fcd4c343dea5751279deaedc1964ffabb8c0e8e299f91fc4a53408d658b2a,2025-09-18T14:15:36.767000
+CVE-2022-50381,1,1,52e902338892a8626cfff0006deca1192519d804ea36d39d4b46069adac965ff,2025-09-18T14:15:36.873000
+CVE-2022-50382,1,1,e762f164d5a473f72c3789b8d947c4061651ec08186b487aa8b47e8b1faf4fe6,2025-09-18T14:15:36.993000
+CVE-2022-50383,1,1,07285466252bc15fd25d321511e50cc1d164deb9ee4b6a4eeec5ccc879955db5,2025-09-18T14:15:37.113000
+CVE-2022-50384,1,1,5e8a48f925fde69a87178cd2f8b190684f2bf6221717ff2873e37055766302f4,2025-09-18T14:15:37.230000
+CVE-2022-50385,1,1,7817db47185359065d28e7a324ce6f7c2035983bb8e8734b1ac7929efa2b37f0,2025-09-18T14:15:37.353000
+CVE-2022-50386,1,1,321856755bf50561de7bfec92b79d3955af7669c7ccf7609e1d2b1f56a401c29,2025-09-18T14:15:37.480000
+CVE-2022-50387,1,1,afc365fc1c4dc5428fb7903ed46f9f2c45816e0c0e24da23e38007c9d57dfa18,2025-09-18T14:15:37.610000
+CVE-2022-50388,1,1,39e760beec86a4aa80776ecd6322b3c64f5d5de90f7b4a592a6642c59707b47f,2025-09-18T14:15:37.723000
+CVE-2022-50389,1,1,e9b54ddef06deac6b8e6015363d4758fb820e5652d9912a1915b44a88eae4dd8,2025-09-18T14:15:37.853000
+CVE-2022-50390,1,1,4de191c925a9326a7779bdfaa9af74498567743eaf06970949dab5a6b3d211f9,2025-09-18T14:15:37.997000
+CVE-2022-50391,1,1,bda3783cc7e79f4741bc475696e362a8db3cb36e1600eb08d47505564eb85900,2025-09-18T14:15:38.127000
+CVE-2022-50392,1,1,edf7c2301c73b84497d1e40b4f8c6663586b8f1e17e19b20e175f6d04eddcf0a,2025-09-18T14:15:38.250000
+CVE-2022-50393,1,1,18e0380d6524eccf0b74155a89b98f804f44a50ebaffa12ae76a6c0e430a6270,2025-09-18T14:15:38.380000
+CVE-2022-50394,1,1,d2f352374512f0617a3c30fb67272896edb06017491d77fc13f29a0a589ed01d,2025-09-18T14:15:38.490000
+CVE-2022-50395,1,1,c46077a923c2d29be0978260020c589656d793b1a314ef81ee1e8e821d6500c6,2025-09-18T14:15:38.620000
+CVE-2022-50396,1,1,4d9cd1b20e067d4078f02c5bd5c6cd97c674436bd9b72cdd9138b13b3fc66de8,2025-09-18T14:15:38.737000
+CVE-2022-50397,1,1,45886905971c580de00dc9232c5224b650d3ba6e440a5533356eb10426a58e13,2025-09-18T14:15:38.867000
+CVE-2022-50398,1,1,1b3af12e4e9c7bba00e23668abe71ddfb9620a36cffac0c6d6df4a40d803252d,2025-09-18T14:15:39
+CVE-2022-50399,1,1,ebf0b90d987c7effad874170a73e4c5d7b5b47d50b839bc847ebedc85ed5ca65,2025-09-18T14:15:39.120000
+CVE-2022-50400,1,1,5e7dd64c4d3946036bea084791fd191ae917a64cd73c422d6e37e0f0288e4a0d,2025-09-18T14:15:39.240000
CVE-2023-0001,0,0,2dfbf6dbe59b530ec18f5af443ba14cd4d2a5b201d3a1ffcc25574a8da444091,2024-11-21T07:36:22.050000
CVE-2023-0002,0,0,d4360529168fea353efb6226181fd2ab0e85944e3049df689718cf07491ef7ac,2024-11-21T07:36:22.187000
CVE-2023-0003,0,0,e9130921c34a8d1b2e06e89be0ccfee8f78c6c04b42ac1af0311d8e1a3808a43,2025-02-13T17:15:52.570000
@@ -240388,8 +240414,8 @@ CVE-2023-49558,0,0,1e5d8699900db0999c663b951b7c8210d75f6742b254d7583dcf1acb61638
CVE-2023-49559,0,0,c02603e188bc3a0923b448b626bdc5315d4d54d2e42179dbe4f4a8ce296ed722,2024-12-03T20:15:14.317000
CVE-2023-4956,0,0,0a6d3910e674100356604d3d8d3216b6f2df7e342de4b121b9643b7573049256,2024-11-21T08:36:20.217000
CVE-2023-49563,0,0,8f16b612c6db1a5649cc1fdbd0c2c7e839b657e1b128fa50df9443a38615eaf2,2024-11-21T08:33:33.980000
-CVE-2023-49564,0,1,84f81ae9dcb03756f6a34e2dc52ba59d2169ee61212fe8ef77b68e026d410b17,2025-09-18T13:43:34.310000
-CVE-2023-49565,0,1,7e0c4ebe0b2cf3864cd2af2a448f2d6d9bd9587503586ac75becebee711d461c,2025-09-18T13:43:34.310000
+CVE-2023-49564,0,0,84f81ae9dcb03756f6a34e2dc52ba59d2169ee61212fe8ef77b68e026d410b17,2025-09-18T13:43:34.310000
+CVE-2023-49565,0,0,7e0c4ebe0b2cf3864cd2af2a448f2d6d9bd9587503586ac75becebee711d461c,2025-09-18T13:43:34.310000
CVE-2023-49566,0,0,e7562d146ac541757cdf07d900dab8b8eca104f5549de901377a9e1303c5829d,2025-03-27T16:15:20.207000
CVE-2023-49567,0,0,a841f691761772e618fe543a488215d0e3485f5740b523088ede6d381dc6a020,2024-10-22T16:39:16.370000
CVE-2023-49568,0,0,ac97689f0ee3fdbcc2dd33fe136cfca6f31010f7eecffece93c383b28fe472a0,2024-11-21T08:33:34.447000
@@ -242652,13 +242678,13 @@ CVE-2023-52643,0,0,d50d31e5bb6a9cdf07b3e088fc3b5fda79f9ea816bd8b6d8c44559eebb408
CVE-2023-52644,0,0,e5ea9880a087e328b38fd7af3089b08006b61218b11fa0f11aa11c523d8e671d,2025-04-02T13:17:33.783000
CVE-2023-52645,0,0,b7243e0650448847f32080e14db91cf203d54c57d7b28acbe818fbd2b13c53f4,2024-11-21T08:40:16.490000
CVE-2023-52646,0,0,6ecde45ea86cb44e0829ef3156f414dfbbcea27ea88c5d6fcb6314e4210af497,2025-01-27T15:09:48.333000
-CVE-2023-52647,0,1,51364d9b6a250e79f1b70890359ae9a766baf057bb1c531e76bdbcdbdbb3f23d,2025-09-18T13:57:37.077000
-CVE-2023-52648,0,0,bf327e16fd314087311880b9907320568dc951df7031e7a2a98e2b4c960ed3dc,2024-11-21T08:40:16.977000
+CVE-2023-52647,0,0,51364d9b6a250e79f1b70890359ae9a766baf057bb1c531e76bdbcdbdbb3f23d,2025-09-18T13:57:37.077000
+CVE-2023-52648,0,1,5fd05785b030bff8b31611ba2aa0d6a7e30ba91def0be19918325d56e41982e0,2025-09-18T14:19:47.870000
CVE-2023-52649,0,0,a99e2d150671082fa4d3c37d35f0947b0eb528b79f37ab81343c41664ce0ad3a,2024-12-23T19:14:57.980000
CVE-2023-5265,0,0,3be8e5110f5a8eca568e8c9e8873089d4346ff1f83ab84fb39209889eeaf5856,2024-11-21T08:41:24.517000
CVE-2023-52650,0,0,82cd733f79a1f4052a9c2cc8405d0c98244becaa4151159d589fc3401cc1df1c,2024-12-23T14:09:30.523000
CVE-2023-52651,0,0,00131e194f6b58054657b0e79a88a7fa1f8e43248fe63e6633670aa65dcb2d7d,2024-05-02T10:15:07.500000
-CVE-2023-52652,0,0,ef1e9f279e94af2516aff4b86fb7557b56a3322c602be6d61196f38ed170f046,2024-11-21T08:40:17.397000
+CVE-2023-52652,0,1,24c9372c1449a443dd82041c3e7b51404c9f6532b5848958fa9e03d488d34a50,2025-09-18T14:42:06.183000
CVE-2023-52653,0,0,c4af0f2dfa924f154a5b63b87f1d10e5d009adbcfd121593aff5aaff206bc0bf,2025-04-08T18:42:28.773000
CVE-2023-52654,0,0,40b64d8df7f1095cc1aeaea203ad2b4c64f7ddffe42e4f417595ec90f73380c1,2024-11-21T08:40:17.703000
CVE-2023-52655,0,0,152954f723c448b886bee3d0ff25f0ab4449e6f0caf4b42d2ad37fc2a11c21cd,2024-11-21T08:40:17.820000
@@ -243393,48 +243419,98 @@ CVE-2023-53331,0,0,a329d7584a48086a06e8e57c04ba6a1ec23013f9542d1955fb20348847a9b
CVE-2023-53332,0,0,3a8292d6008c0889f8f9f2100382156211115c7a1e1e2c304cd04f6aaff9e11a,2025-09-17T14:18:55.093000
CVE-2023-53333,0,0,a15228dd3c5eda50c2146972043c75d338e56ca6afeac0022d30e60119e32789,2025-09-17T14:18:55.093000
CVE-2023-53334,0,0,cb6af9ff5e2d41e3d1b36894ca264ef126138ae9fc8a2b25978a797886fe9f6f,2025-09-17T14:18:55.093000
-CVE-2023-53335,0,1,1bda5228884118b1084b6e85ce148cf5cbee3408ff725783f172db3e70fa22bb,2025-09-18T13:43:34.310000
-CVE-2023-53336,0,1,ef4cd4c25d47850176067621e0670a6ab355b580e82a33799b6fe33ea99fd554,2025-09-18T13:43:34.310000
-CVE-2023-53337,0,1,fe6b93bd4dcdd3b2b1cfa3f33e29589be575cef792db78ae730aec434c5c9357,2025-09-18T13:43:34.310000
-CVE-2023-53338,0,1,ca6111525c8413851347dc622fc2fedcda6f86f59967ed2810879c008c32c6c7,2025-09-18T13:43:34.310000
-CVE-2023-53339,0,1,6c349da5b17f9453d0fe1027793d1cb5f2e7fb08e25947898255d17ffe296a75,2025-09-18T13:43:34.310000
+CVE-2023-53335,0,0,1bda5228884118b1084b6e85ce148cf5cbee3408ff725783f172db3e70fa22bb,2025-09-18T13:43:34.310000
+CVE-2023-53336,0,0,ef4cd4c25d47850176067621e0670a6ab355b580e82a33799b6fe33ea99fd554,2025-09-18T13:43:34.310000
+CVE-2023-53337,0,0,fe6b93bd4dcdd3b2b1cfa3f33e29589be575cef792db78ae730aec434c5c9357,2025-09-18T13:43:34.310000
+CVE-2023-53338,0,0,ca6111525c8413851347dc622fc2fedcda6f86f59967ed2810879c008c32c6c7,2025-09-18T13:43:34.310000
+CVE-2023-53339,0,0,6c349da5b17f9453d0fe1027793d1cb5f2e7fb08e25947898255d17ffe296a75,2025-09-18T13:43:34.310000
CVE-2023-5334,0,0,372c8af4b86ee2ab39ae533e2cbcc5c6f6b08fc9cb6e118a298c60be6ea4bbd4,2024-11-21T08:41:33.287000
-CVE-2023-53340,0,1,0bc918bc9853aef164e1f62489a1904ed6ac460572a138069a529e993a9e01e7,2025-09-18T13:43:34.310000
-CVE-2023-53341,0,1,fda8ca731865af292a0bc87facfc15a2e4dd7b20bfbfab4db14660e8bbcd12d4,2025-09-18T13:43:34.310000
-CVE-2023-53342,0,1,0e42df180e0c1b5264fa1d91c1d94677a56ccb88bd279b082337a58734a55a31,2025-09-18T13:43:34.310000
-CVE-2023-53343,0,1,9f2810483dd19212b5a7c7a063d6598172ed893f4fc18f4436607eeb0153d41b,2025-09-18T13:43:34.310000
-CVE-2023-53344,0,1,4b80115546f12201db21aac3cfc148ea76d3d1c7a838a5a9726dfe0060c82b0f,2025-09-18T13:43:34.310000
-CVE-2023-53345,0,1,f063051b456f3b0db132fa4ac5e49cc87abb4bb9274786489f213211c54b6add,2025-09-18T13:43:34.310000
-CVE-2023-53346,0,1,66a11a6e7db1c774a0d4a645d2a2d07da4b109518594cf5e46eb486970cc5d8b,2025-09-18T13:43:34.310000
-CVE-2023-53347,0,1,8b2da86f784fbe0cbae2c77a329fcb6aa474d2a9ed4ef033b2481ccfb54e65f4,2025-09-18T13:43:34.310000
-CVE-2023-53348,0,1,6b51fab3fece503c17b52652c76f87687a44ca29851b3b899490226b86cc6796,2025-09-18T13:43:34.310000
-CVE-2023-53349,0,1,b5fa12596565315865f35aae5d7169138c8dfb02025e23e2b48c3ce76945b388,2025-09-18T13:43:34.310000
+CVE-2023-53340,0,0,0bc918bc9853aef164e1f62489a1904ed6ac460572a138069a529e993a9e01e7,2025-09-18T13:43:34.310000
+CVE-2023-53341,0,0,fda8ca731865af292a0bc87facfc15a2e4dd7b20bfbfab4db14660e8bbcd12d4,2025-09-18T13:43:34.310000
+CVE-2023-53342,0,0,0e42df180e0c1b5264fa1d91c1d94677a56ccb88bd279b082337a58734a55a31,2025-09-18T13:43:34.310000
+CVE-2023-53343,0,0,9f2810483dd19212b5a7c7a063d6598172ed893f4fc18f4436607eeb0153d41b,2025-09-18T13:43:34.310000
+CVE-2023-53344,0,0,4b80115546f12201db21aac3cfc148ea76d3d1c7a838a5a9726dfe0060c82b0f,2025-09-18T13:43:34.310000
+CVE-2023-53345,0,0,f063051b456f3b0db132fa4ac5e49cc87abb4bb9274786489f213211c54b6add,2025-09-18T13:43:34.310000
+CVE-2023-53346,0,0,66a11a6e7db1c774a0d4a645d2a2d07da4b109518594cf5e46eb486970cc5d8b,2025-09-18T13:43:34.310000
+CVE-2023-53347,0,0,8b2da86f784fbe0cbae2c77a329fcb6aa474d2a9ed4ef033b2481ccfb54e65f4,2025-09-18T13:43:34.310000
+CVE-2023-53348,0,0,6b51fab3fece503c17b52652c76f87687a44ca29851b3b899490226b86cc6796,2025-09-18T13:43:34.310000
+CVE-2023-53349,0,0,b5fa12596565315865f35aae5d7169138c8dfb02025e23e2b48c3ce76945b388,2025-09-18T13:43:34.310000
CVE-2023-5335,0,0,6fb1a551d5e6e4b609881b9eca5c34e50e6cce2ea17bdb94c07cc798d47db20b,2024-11-21T08:41:33.433000
-CVE-2023-53350,0,1,224e045d0504357b7378c5c4e7de6e3df9528ff3dab0de1bdf7871b49dcfcd92,2025-09-18T13:43:34.310000
-CVE-2023-53351,0,1,aead11135f4271811888ff9ebf91ec9449d588d72ed229f9ff8e6c72fff8d224,2025-09-18T13:43:34.310000
-CVE-2023-53352,0,1,39a41b791a75ece7a3a740753c37ca337dbdb6ca90f442113885bf7fa1e0ed91,2025-09-18T13:43:34.310000
-CVE-2023-53353,0,1,ad05b370d1a921ec87f69b404e9f7f2956f1d50502ef58d724dfd536bb8f6c7f,2025-09-18T13:43:34.310000
-CVE-2023-53354,0,1,f7703f295ca2588d0860f917fa438e6e2dabb0a079eeb6a1dc4147d92025b9dd,2025-09-18T13:43:34.310000
-CVE-2023-53355,0,1,cac49bd73147371d30347eb169cf9678e67488231c50ed083413030a6b269efd,2025-09-18T13:43:34.310000
-CVE-2023-53356,0,1,7c95aa90e2560af2ac862d9ffada415a749ab457b16e555b44b702f884ed7025,2025-09-18T13:43:34.310000
-CVE-2023-53357,0,1,0057113cc07baf231bf913b6460d76e2b036607d6bed9bb6289343a5d959c514,2025-09-18T13:43:34.310000
-CVE-2023-53358,0,1,5ccb9cda82aa36d36262da65324688ed3392ace9d5e5944c44da594fef3088d8,2025-09-18T13:43:34.310000
-CVE-2023-53359,0,1,74008d9d91e38f75f9ce26c99d80cfbed03ae86a90df90817a3a4b7087185f88,2025-09-18T13:43:34.310000
+CVE-2023-53350,0,0,224e045d0504357b7378c5c4e7de6e3df9528ff3dab0de1bdf7871b49dcfcd92,2025-09-18T13:43:34.310000
+CVE-2023-53351,0,0,aead11135f4271811888ff9ebf91ec9449d588d72ed229f9ff8e6c72fff8d224,2025-09-18T13:43:34.310000
+CVE-2023-53352,0,0,39a41b791a75ece7a3a740753c37ca337dbdb6ca90f442113885bf7fa1e0ed91,2025-09-18T13:43:34.310000
+CVE-2023-53353,0,0,ad05b370d1a921ec87f69b404e9f7f2956f1d50502ef58d724dfd536bb8f6c7f,2025-09-18T13:43:34.310000
+CVE-2023-53354,0,0,f7703f295ca2588d0860f917fa438e6e2dabb0a079eeb6a1dc4147d92025b9dd,2025-09-18T13:43:34.310000
+CVE-2023-53355,0,0,cac49bd73147371d30347eb169cf9678e67488231c50ed083413030a6b269efd,2025-09-18T13:43:34.310000
+CVE-2023-53356,0,0,7c95aa90e2560af2ac862d9ffada415a749ab457b16e555b44b702f884ed7025,2025-09-18T13:43:34.310000
+CVE-2023-53357,0,0,0057113cc07baf231bf913b6460d76e2b036607d6bed9bb6289343a5d959c514,2025-09-18T13:43:34.310000
+CVE-2023-53358,0,0,5ccb9cda82aa36d36262da65324688ed3392ace9d5e5944c44da594fef3088d8,2025-09-18T13:43:34.310000
+CVE-2023-53359,0,0,74008d9d91e38f75f9ce26c99d80cfbed03ae86a90df90817a3a4b7087185f88,2025-09-18T13:43:34.310000
CVE-2023-5336,0,0,7ee959862956da5bfbb37ba7f992e20532fcd5ea0e361276d70a20a795a5020a,2024-11-21T08:41:33.557000
-CVE-2023-53360,0,1,c016fb8dad1edaca62416eb40ee864bd4934e0d7387455ebeee171b7b9c971f6,2025-09-18T13:43:34.310000
-CVE-2023-53361,0,1,be4aa00e69fe02a4cc9323aad534b0b9e90712de233fb6c9750a6af4b23d7be1,2025-09-18T13:43:34.310000
-CVE-2023-53362,0,1,367de823bf55099c54ca92fbc395d9aa5893c9eaefe4824a335f4dd31887d2ef,2025-09-18T13:43:34.310000
-CVE-2023-53363,0,1,26be3aed82950c6fe99bf0ba57fdddd3b8328e5fa999fae48e1946727a4d6fb6,2025-09-18T13:43:34.310000
-CVE-2023-53364,0,1,b6e406daf3144f4e7b492deed6d18225efd2e0356c6dc406124893bafe0c1101,2025-09-18T13:43:34.310000
-CVE-2023-53365,0,1,509ecf727d4d56553871421a040ba737c9aecda36ad4ba5dc1cc6946befaa290,2025-09-18T13:43:34.310000
-CVE-2023-53366,0,1,3a8db400524968c7e0ff7e67a85a58d0b243ee8f5695354d9945fda6538faa62,2025-09-18T13:43:34.310000
-CVE-2023-53367,0,1,4647d444a8ad4eb1d8a47e8bb72b43fc97ede38128971467bffb20b144c3328f,2025-09-18T13:43:34.310000
-CVE-2023-53368,0,1,7f91b6896b59a7849dba723ca19143548e291aba8ddc4269d12bb9756f007bd2,2025-09-18T13:43:34.310000
+CVE-2023-53360,0,0,c016fb8dad1edaca62416eb40ee864bd4934e0d7387455ebeee171b7b9c971f6,2025-09-18T13:43:34.310000
+CVE-2023-53361,0,0,be4aa00e69fe02a4cc9323aad534b0b9e90712de233fb6c9750a6af4b23d7be1,2025-09-18T13:43:34.310000
+CVE-2023-53362,0,0,367de823bf55099c54ca92fbc395d9aa5893c9eaefe4824a335f4dd31887d2ef,2025-09-18T13:43:34.310000
+CVE-2023-53363,0,0,26be3aed82950c6fe99bf0ba57fdddd3b8328e5fa999fae48e1946727a4d6fb6,2025-09-18T13:43:34.310000
+CVE-2023-53364,0,0,b6e406daf3144f4e7b492deed6d18225efd2e0356c6dc406124893bafe0c1101,2025-09-18T13:43:34.310000
+CVE-2023-53365,0,0,509ecf727d4d56553871421a040ba737c9aecda36ad4ba5dc1cc6946befaa290,2025-09-18T13:43:34.310000
+CVE-2023-53366,0,0,3a8db400524968c7e0ff7e67a85a58d0b243ee8f5695354d9945fda6538faa62,2025-09-18T13:43:34.310000
+CVE-2023-53367,0,0,4647d444a8ad4eb1d8a47e8bb72b43fc97ede38128971467bffb20b144c3328f,2025-09-18T13:43:34.310000
+CVE-2023-53368,0,0,7f91b6896b59a7849dba723ca19143548e291aba8ddc4269d12bb9756f007bd2,2025-09-18T13:43:34.310000
+CVE-2023-53369,1,1,c8fa4d36efaa6c0cfe015c44fa14cccff434734cfd11df0e9a76a3c7a0ad2ed4,2025-09-18T14:15:39.373000
CVE-2023-5337,0,0,7a1a37662c6f0556eca8b800a6d81eabd53ba68c58542b168d8e602b74bc5a77,2024-11-21T08:41:33.680000
+CVE-2023-53370,1,1,15c386d872e145957cc56633a0b9d57aa2cc045adeaec142400017987d98c20e,2025-09-18T14:15:39.510000
+CVE-2023-53371,1,1,eaf98da1fed01c761927e153357c3aeb16ededf7243141bc7ef0db7a05c0686c,2025-09-18T14:15:39.637000
+CVE-2023-53372,1,1,8784e63f3b88cfa11969298d855fc4345ba4054a730486ee95976cb24c1df981,2025-09-18T14:15:39.750000
+CVE-2023-53373,1,1,e0ae02bf1b0feacf7d47edd638c9c3c6fcdd99fe12eda6f35591b5c4ad26976b,2025-09-18T14:15:39.880000
+CVE-2023-53374,1,1,a0822fba77ed611f67fa40f13ea267b05a27e1cd22ea6b8c8f8c1389150b40f8,2025-09-18T14:15:40.037000
+CVE-2023-53375,1,1,3404d967d6b3318f96baef10c1ea81d3612cfaed46d8fe1ef2cdf64ba054d9d4,2025-09-18T14:15:40.183000
+CVE-2023-53376,1,1,e92e2fe668ed63bb04865b38d5d0eccc02225c0443d91c1e1194b2f1080d8f16,2025-09-18T14:15:40.473000
+CVE-2023-53377,1,1,3fccc543f7277d1036aaa4b8d2579109f2de5e9260f940ea238a885d0c65d9b3,2025-09-18T14:15:40.590000
+CVE-2023-53378,1,1,1b654c8417b8eaa7fe5eb270c308a10b3ed0869880de0df143fd5ccb3980763c,2025-09-18T14:15:40.710000
+CVE-2023-53379,1,1,28726d473343a5888b8f28032f3c5f3903f1be373c1bb23cf0325ac795e5cae6,2025-09-18T14:15:40.830000
CVE-2023-5338,0,0,7914931acbcec6209e98e1a21bf776358a7aa863d1fe673beb0bf0a10b300cad,2024-11-21T08:41:33.810000
+CVE-2023-53380,1,1,bac49105d1dab074e3630b9c98dfb1f14310dd8ce6b2797dbd1161f9e0b76d96,2025-09-18T14:15:40.953000
+CVE-2023-53381,1,1,00cf769ab67d35f54fb0ab1000bf7fecf03dc46e04300ff828c703cc901b5d9f,2025-09-18T14:15:41.077000
+CVE-2023-53382,1,1,158749d799ac77c97dc0734ea65cbdbb940b7a097397687beb687bfbda004e47,2025-09-18T14:15:41.180000
+CVE-2023-53383,1,1,100a17b90f486df6e6923bcedb8edadf301c6e7979bb36cf126dcfc18afc5e4c,2025-09-18T14:15:41.310000
+CVE-2023-53384,1,1,99ef1d8eb6d2c2a01f88870c554e98d71e93703bb20bb069a562b02ecdbc2d50,2025-09-18T14:15:41.433000
+CVE-2023-53385,1,1,6bbdfe7d22f462a549391babfe9db396bf8f1a2840658e821d6ea9088cddbdaa,2025-09-18T14:15:41.553000
+CVE-2023-53386,1,1,5d1d17d128665b3552487acb8c2484ace552665f3a64f87b38b4b24e45551a89,2025-09-18T14:15:41.660000
+CVE-2023-53387,1,1,eb846bb786350f1e9c3ae77518d5e9df164d16ca6bab62dfd3f20bd935c58d98,2025-09-18T14:15:41.767000
+CVE-2023-53388,1,1,0d24cf062d166a66e533a40203b46d1ed1172e0b92a1787f435e55fbc0511705,2025-09-18T14:15:41.880000
+CVE-2023-53389,1,1,529295e8017917a77f75445fb76e09095d470b7515e70938ed89a31a3e6f0793,2025-09-18T14:15:42.003000
CVE-2023-5339,0,0,e8f21ffa1397a24ed67a4e40e1641cc350952053a13cedb4cb2dddeb048ddbcb,2024-11-21T08:41:33.933000
+CVE-2023-53390,1,1,a2f1d660014509d551fec6c3bbacf0a2982b9de7c7e9b946751fbccfbbc693a4,2025-09-18T14:15:42.117000
+CVE-2023-53391,1,1,53852ab31fa88f6a3c3a9197a3e1a966ac4b22d5042f666d61b91a4039f80759,2025-09-18T14:15:42.237000
+CVE-2023-53392,1,1,9b86b5c92af1985b2d2bfaddbbc826b5e335ec3174a3d4c6cdf385aa4c4d9dd8,2025-09-18T14:15:42.350000
+CVE-2023-53393,1,1,5c698146ca0e3e11b59ae93ea19316a028b23fee7a2cbe1a80c84e4557374eb7,2025-09-18T14:15:42.463000
+CVE-2023-53394,1,1,bf786cb0e26bf92cfae4633c379a92edc7c88712f3c97001baa0bbe5c5c321ea,2025-09-18T14:15:42.580000
+CVE-2023-53395,1,1,5a01a99eec6eedd74d745a801d9bb2f8f3a5aedbcf83496a99ccd42ffb78858b,2025-09-18T14:15:42.697000
+CVE-2023-53396,1,1,096310f0809c7771fd4ffc876c44c68700836a40c4735b6514d86a79e1b414fd,2025-09-18T14:15:42.817000
+CVE-2023-53397,1,1,18a1bf62ead22cb9279c60261b7e2add0a3d5a82ea822eaed12a7c2f97b09847,2025-09-18T14:15:42.937000
+CVE-2023-53398,1,1,3b7b14593ca6152b055258e1939f18a9758a9adb3029bdf5e9301f70f8e9c926,2025-09-18T14:15:43.050000
+CVE-2023-53399,1,1,690b2d304c8c2e8b58dfc2e9b954ac5ee57ad4cbacde0bf2454c76bda43cfdb9,2025-09-18T14:15:43.177000
CVE-2023-5340,0,0,89fb0a50f8d37f1b5691323a5a712edfb4808ae024ecb378947ef4c4948bd919,2024-11-21T08:41:34.073000
+CVE-2023-53400,1,1,22c070c95938d029845f8017083d96a3f53b646b8ecd295298b3bbde2957c13e,2025-09-18T14:15:43.293000
+CVE-2023-53401,1,1,45e4a13c6231e0d78b86d1b7e7d80c7b18af7c56a5feda5274be6b5eb783049c,2025-09-18T14:15:43.417000
+CVE-2023-53402,1,1,e84a6fe00593c40ce422ff772cf284e645cbecf24549a69116f5433f33501f79,2025-09-18T14:15:43.527000
+CVE-2023-53403,1,1,c4d0fb00b2f9b6dd2f177a5d9f043e83b1c3a31d228461089f874956d82bf260,2025-09-18T14:15:43.643000
+CVE-2023-53404,1,1,a3f3736c13853e598eea20d895b4c8401d5c54efc7e61289a6be54a77f8b7b97,2025-09-18T14:15:43.760000
+CVE-2023-53405,1,1,5bf937ae1b35e605dec9c164164be3eeb1e95e92c451c97bc681512d4f434f29,2025-09-18T14:15:43.900000
+CVE-2023-53406,1,1,4ade5d05927791ee6a8f31761011a8acf78eda2bbddfef20ef4f1aa46458f1cd,2025-09-18T14:15:44.040000
+CVE-2023-53407,1,1,ba62fe6c5de0b1ecd8fc1082f0191972d684d7b9babadca40d3b5d5563a667e8,2025-09-18T14:15:44.150000
+CVE-2023-53408,1,1,06ed33037de1a82b4b9278f263a59fbd6c69c9568e06690b61e7ec7d8bba3b9a,2025-09-18T14:15:44.253000
+CVE-2023-53409,1,1,124c71edd5f778ac91599931856c7ce9816418c3e0acc068a8c6c773ad149914,2025-09-18T14:15:44.387000
CVE-2023-5341,0,0,04fcaa2a103ff4f1179f89eb801c614481572f75e6537324cbea1ce4040e4989,2025-02-07T03:15:10.433000
+CVE-2023-53410,1,1,c067184d42650005593e5797d18e81e846958b1118db2aa0f468b4359b417da5,2025-09-18T14:15:44.503000
+CVE-2023-53411,1,1,73b8b8698a47c546b37323f80fb91dd760557f38df3e3181e1769249f93ad658,2025-09-18T14:15:44.617000
+CVE-2023-53412,1,1,775a7adce80835d0300b0bfa9168ca2d40869bd609d0a9ae5daab2d4fe4b805b,2025-09-18T14:15:44.727000
+CVE-2023-53413,1,1,2553c82c956c139b10232817af0604ff1407cd25dd7945de6d1e037a7385b849,2025-09-18T14:15:44.837000
+CVE-2023-53414,1,1,246ef82b03846934e89b5d7fca532a2c234db17fc684948ce54b8a1a5915878a,2025-09-18T14:15:44.943000
+CVE-2023-53415,1,1,293d7d81b791c3f3e7fc087417300af5d987a40d17e12b48ff0e514182d02e91,2025-09-18T14:15:45.070000
+CVE-2023-53416,1,1,9dea46a2771a87c29c3daed2f59cdbc074bdecf5e2a435f06672f6674f41142f,2025-09-18T14:15:45.190000
+CVE-2023-53417,1,1,865470d36c2551e7da7a64c29f4a5f2d69ca499a8445468bffd2f60a612b858b,2025-09-18T14:15:45.310000
+CVE-2023-53418,1,1,7ddf9bdd1c3ce3c72f852388e0d025722c8ab713749bbaff9538038d02bdd840,2025-09-18T14:15:45.423000
CVE-2023-5342,0,0,c2053814bd217af3c0e9e1f21635db4931ce4558a914c8a34527a950a2a88fc3,2025-08-15T13:13:07.817000
CVE-2023-5343,0,0,1c2bd20ff5aaa557f20c3942b76bed9cbbf7ed075596e481a5fa4d6d4503ea3c,2024-11-21T08:41:34.357000
CVE-2023-5344,0,0,07698be75f57e5440d2ca84dedbd3873284ef02ca3dbf655895ad4dc3d36f155,2024-11-21T08:41:34.530000
@@ -249458,7 +249534,7 @@ CVE-2024-13147,0,0,c75b40b4345adce03fb8bdba16523dd104d83f5dd721e9f5e7ba72f4ce242
CVE-2024-13148,0,0,83056f9675481edb5161e9cf8f036e61c1b8657b91a7cf152621c7021de561ef,2025-02-27T15:15:38.583000
CVE-2024-13149,0,0,8418adb21512eadf5f44a1823b58c48c72983cb38b45143fd258b250259f830d,2025-09-17T14:18:55.093000
CVE-2024-1315,0,0,ae67b7f13a317bdc1be64b4fdf580a08492423f203ba37c909a5dc9e35687d4a,2025-01-17T17:30:38.363000
-CVE-2024-13151,1,1,66aab7bb8d4d77a09bde78e115251cace475030ac84608d4afaee173a7ae5388,2025-09-18T13:43:34.310000
+CVE-2024-13151,0,0,66aab7bb8d4d77a09bde78e115251cace475030ac84608d4afaee173a7ae5388,2025-09-18T13:43:34.310000
CVE-2024-13152,0,0,122264645183d9f888de428d629fb2ba29cf302edc1f968441a9e42307fca5f1,2025-02-14T13:15:42.170000
CVE-2024-13153,0,0,088bc8ebe38f92e638bd3871765dd0e2b3e17e5108269d1f2a720059d877095c,2025-03-03T18:50:58.933000
CVE-2024-13154,0,0,8b848cb4ffbbf3d5300b505058bccc136fae4b33341f37a24f40fb8ac9f235ba,2025-01-13T21:15:11.970000
@@ -254907,7 +254983,7 @@ CVE-2024-25008,0,0,c846a611f48d8b069ecbdefe50bdfdb0e28e800e2895bf3afe6c1424c9a09
CVE-2024-25009,0,0,237d0a61029cd4fdee1471e2810cfeca419a39232cf3f51032896c99c29b9c43,2024-08-20T15:44:20.567000
CVE-2024-2501,0,0,3565317a3a5971e68c0ef97d1ac6cfa43eb64bbff8ef4ebd5d773616e0ce14a0,2024-11-21T09:09:53.580000
CVE-2024-25010,0,0,5bd4abdb8229f70e020b70d68a80a53322ab22ee60c83d24edc688cd8466c49c,2025-05-23T15:55:02.040000
-CVE-2024-25011,1,1,672ec4209332a1a234b61852549fb8b1119667014325853f1b55b82675f13ff5,2025-09-18T13:43:34.310000
+CVE-2024-25011,0,0,672ec4209332a1a234b61852549fb8b1119667014325853f1b55b82675f13ff5,2025-09-18T13:43:34.310000
CVE-2024-25015,0,0,d563fdb61221ec5ed6cfd8bec3e4416da7e32dcc27fa56589acf52b75126ae48,2025-08-21T15:15:50.997000
CVE-2024-25016,0,0,6d3c79f962736f58f54beba695673496142c4b4201cc2c7c1f7978fcbfae38b9,2025-05-12T21:08:23.987000
CVE-2024-25019,0,0,a3c0de844d9557e324bc759825ea9728d85c168cca4d9e6a97490915d32203ba,2024-12-11T03:39:50.510000
@@ -256414,9 +256490,9 @@ CVE-2024-26932,0,0,c1aceded26af8e1a981f03fcd7dcda2e798d6370154c489900cfe35a14068
CVE-2024-26933,0,0,e30ba713b69b586b394f48d84ca76a39f221febf18a6d384dccc99b2149633bc,2025-03-07T20:29:52.187000
CVE-2024-26934,0,0,111813ca5533001333b02b7aff67718c94dbbcf3dee498229b6c065da945a88e,2024-11-21T09:03:25.347000
CVE-2024-26935,0,0,57b6f698c25c97ecde915494ca6f15e62c5e3a9e42413ec44564d14c288879c8,2024-11-21T09:03:25.507000
-CVE-2024-26936,0,0,144cdd371322134fa6d98993e0f4fd26022aa1c68b494cde3f81066b3fc31841,2024-11-21T09:03:25.637000
+CVE-2024-26936,0,1,6c66c3378b215829d721d60f830384d484595dc44dd1cf32ac0fb11e4f162eb6,2025-09-18T14:19:00.480000
CVE-2024-26937,0,0,84abd147e2de87068c8552502e9d5f3a03b4298ec190da68d4135b0c4ca63f2c,2024-11-21T09:03:25.757000
-CVE-2024-26938,0,0,0c70fb2feb140bdbececb331d09112c041df234a19fd4b8b218a2ac066b95c14,2024-11-21T09:03:25.890000
+CVE-2024-26938,0,1,99b8dc3d11cb4940e9c919d17160d652007582b573c9e8621291bcb92d970555,2025-09-18T14:15:37.710000
CVE-2024-26939,0,0,e5d1ed15734586d8c0721b0432ccfc640cca2195176ec9b6809d2489f2c8919b,2025-04-08T18:55:49.513000
CVE-2024-2694,0,0,4d728e1d04ebd874b9753d4251373dca1c8d4686a42dcbe990217886910977cf,2024-09-03T15:10:54.557000
CVE-2024-26940,0,0,34c47a54c4ec2b8de5152bd6afa4735b3aa9378b8030a82ab47dbd84486bcf18,2025-03-20T21:34:39.207000
@@ -256425,26 +256501,26 @@ CVE-2024-26942,0,0,39f881a4e4cb31695225028db7c03542160cc9b05d12914f25d1ff64ba466
CVE-2024-26943,0,0,502ff1ba88ca924e6335bf168bda2cac45c0ef55b87313c9a00ce43ecea9e95a,2025-03-04T16:02:02.363000
CVE-2024-26944,0,0,5173c263c20ff41500d77cd506c0a135055112f78a2020af9be2ee11c60b3759,2025-01-14T14:29:21.517000
CVE-2024-26945,0,0,baaa7648cf38530395d02d5314966ac95ad3dc4b28ddcefdc58c4d9dee03cba0,2025-03-20T21:26:07.280000
-CVE-2024-26946,0,0,42cd5cabd74c9173279dd3289adfb70a8262c89e7ffe80862a160dea1859eae9,2024-11-21T09:03:27.650000
-CVE-2024-26947,0,0,bf0732699f635e430480999388946ed3c52fc60cc1e2e21486bd1b152f39863a,2024-11-21T09:03:27.780000
-CVE-2024-26948,0,0,b8ae390dd7fe1236951a398588fc72703b5668c37d9563d8c60d447aeef75d03,2024-11-21T09:03:27.907000
+CVE-2024-26946,0,1,9c9d0b3d0817d216076f5a709aaa9bccbd5f3986465ee1075a2323eb50806284,2025-09-18T14:14:52.610000
+CVE-2024-26947,0,1,1e80416ce73546ef46cd31dcff26a6ce8dd3a849793697a2ad1cad845b0dcc33,2025-09-18T14:13:26.613000
+CVE-2024-26948,0,1,512223907c6bb54deb400242e75e9b2642acda4be4ae1feefca9448633fb4a86,2025-09-18T14:12:33.380000
CVE-2024-26949,0,0,055796761725abb2504d040763cfc7af2a0e47649baa6bf4a3ae721506086458,2024-11-21T09:03:28.023000
CVE-2024-2695,0,0,2e2e963e4ba411e440b9fa0a9ae92150cbbb1d82c182af9c816701e1bdbfa0cc,2025-05-09T15:03:45.387000
CVE-2024-26950,0,0,2941bdad25b517af68c74ee5e0842857fc19a9e2331bb35decdc981cef014e0b,2025-03-20T21:26:25.240000
CVE-2024-26951,0,0,a15c37b6d5bd54a202e9938ffb1789819a2cb3e9336b9ad3d9b6d8aa6ed8946a,2024-11-21T09:03:28.350000
CVE-2024-26952,0,0,449d9f746fb700bcf27fc32d0467921dcdfccb238161ac5830e1d6eca7973a29,2025-05-23T20:49:54.500000
-CVE-2024-26953,0,0,179c4f51f5d32640d42d1d8a2094db4cb129bb21640949e2a59d8ad9aa7d6249,2024-11-21T09:03:28.677000
+CVE-2024-26953,0,1,9d22fddd713cfa4cb879f0c5822c1ae77885ae9eb68f4e64388309f36e482630,2025-09-18T14:12:16.610000
CVE-2024-26954,0,0,f62f5cc9342e1661d12320795ad8d664367d7b32fbd1717a8a2106516442fbbf,2025-09-11T13:15:53.280000
CVE-2024-26955,0,0,76bca89ce82e5ae6c5b930181ea09e09a5aecc8071be56ab85e1544b92d9d183,2024-11-21T09:03:28.917000
CVE-2024-26956,0,0,adbc295fe7031fb20e7ac181bad0bd27d6ef9768db74f4b24283887b46cb7420,2024-11-21T09:03:29.057000
CVE-2024-26957,0,0,6a2a6338e6f9af12bd831df87711adb26214149a53f4687ea1078783640a634d,2025-03-20T21:27:17.443000
CVE-2024-26958,0,0,60a5ad8a395f58a80d750dc0aedcbfe9b307d76ce2b767f12e1bf657efc118fe,2025-08-28T15:15:41.310000
-CVE-2024-26959,0,0,899c7e02955c96a9aafeabffa0f02d00155af785d12c0cf717ae599d72ad8ea2,2024-11-21T09:03:29.533000
+CVE-2024-26959,0,1,b309f713f31bc4d89517a6e7c3bc26f356fb6ae94f57779504d119be1ea3f1a6,2025-09-18T14:09:48.797000
CVE-2024-2696,0,0,1f9855eea828c4daef3113426eae6af54a8aa42bc4671f74623e8865f5c90c95,2025-06-04T16:16:24.410000
CVE-2024-26960,0,0,8c4b76cdd584c1f0b2f489d218b0217b73782e2cc738906f76a05aef9f9d1420,2025-03-20T21:28:01.603000
CVE-2024-26961,0,0,e233087519ea241e6bbe387e9813a12623049bbd76997b1f9b9d52dc051e45b1,2024-12-23T13:37:44.197000
CVE-2024-26962,0,0,40697247e40f81e66a5b84f3045857f6a3736ddc973933e92666ba19d556d8ba,2024-12-23T13:39:33.543000
-CVE-2024-26963,0,0,7c2f95280f5f6baed92d5de5c494db20051e74b253633caddc8043bc541f70f6,2024-11-21T09:03:30.133000
+CVE-2024-26963,0,1,7cf6ff1a5bc1b79bac5d65434d66dc01acef813e4df322bc417f3a568f714d77,2025-09-18T14:09:17.943000
CVE-2024-26964,0,0,1ce53ca960c2efd5cc8cbe0d0be7513ab3114a6a3605e82ba61350fac30a50a1,2024-12-23T13:41:58.437000
CVE-2024-26965,0,0,f83b8b3a6b1685df1882e856824536e66f52a7e0d69c2474b6219acc4f48523a,2024-11-21T09:03:30.383000
CVE-2024-26966,0,0,50fc1fd7953986ffd5cfe8b3cfe359d8ffab1275d43f862af9453028e902e7d4,2024-12-23T13:50:21.860000
@@ -256459,7 +256535,7 @@ CVE-2024-26973,0,0,4df10dfd9771f9b1700e5bc913719c46a074f4f87428e57e132f0e2b87404
CVE-2024-26974,0,0,0e4a56366252557edbb2b1398208500709b44987bfad59520bf0a9bd4532569e,2024-12-23T14:00:33.587000
CVE-2024-26975,0,0,4961103f5afe82ab19bd2d5c28d95ec6a0e6e841685afff291147442422c4ce9,2024-12-23T14:02:46.103000
CVE-2024-26976,0,0,d3d0c459bb86585ae7c7fafb98ddbf8089df654945c999eb9b3959d366e1026e,2025-04-08T18:53:44.430000
-CVE-2024-26977,0,0,1f7a8de5cdeaf46fb8b3e7c1f9a003addb59f518218d0554d394033af057c58f,2024-11-21T09:03:32.193000
+CVE-2024-26977,0,1,f0e4536f1222178cc093206cd848f04c76e2a05102fd192ab093c7afb729447a,2025-09-18T14:36:44.537000
CVE-2024-26978,0,0,9f0afb61ebfd2a81c4c460b2c8d0cee7dd4d2cd6d33af2f1fce5b729035357bb,2024-11-21T09:03:32.417000
CVE-2024-26979,0,0,33d8a117099141e9ac17b778389695861dbfcb2a950ec3472e402d03bd709b88,2024-06-12T16:15:11.147000
CVE-2024-2698,0,0,ddc75df1e8e4473acd54d62614b3c1faeb5d1dc3d8872453650d31f774f1bc3d,2024-11-24T17:15:04.170000
@@ -256468,14 +256544,14 @@ CVE-2024-26981,0,0,e3d85d4378a3dedaa0ea4ee82c134e38e306ef680bd7e72d630d021926126
CVE-2024-26982,0,0,e2a8527443088901cc27e1d2d1cfd71130c7f4b1c930c10481b89db6b71c6c38,2025-04-16T19:15:51.070000
CVE-2024-26983,0,0,668befa1524b84eb804e032a2857d5c5316ec13983095bd9d2f5e231c1910c36,2024-12-23T14:53:02.043000
CVE-2024-26984,0,0,ce16cf4098b5ea714220075d54f7ce247c66aed28151370bcd4a5f15f56202c0,2025-04-08T18:45:02.520000
-CVE-2024-26985,0,0,828c1d0fb4c1394a0226e133cac1cf8633b8aef9bacbe1c0d4677aeab25a0507,2024-11-21T09:03:33.427000
+CVE-2024-26985,0,1,7f3d87fe8423eda38f9197d390cff37c78c3249f5423c513ebb0c8378e133fb7,2025-09-18T14:35:30.707000
CVE-2024-26986,0,0,2d5e90c27de03273df3c3a4dddba5f37390a47f124b9efbc14fb5a174055e902,2024-11-21T09:03:33.550000
CVE-2024-26987,0,0,d9201e7da7cc0d6b520adf309274caea80c709e3234541b4cecdf14de37f61bf,2024-11-21T09:03:33.697000
CVE-2024-26988,0,0,b72a6db8cb813c5d17d4c81d91c1ef7ed8f0b453c7d8a85ca9d54b25cb6c75f5,2024-11-21T09:03:33.830000
CVE-2024-26989,0,0,b184e6e01f90b2a80d2af168f35eaddccd2b3f1da296eb258e1d53040db364b6,2024-12-23T20:43:38.437000
-CVE-2024-26990,0,0,89cea06ef826df46e7704f1d21f5fb884d6cccd9351cbfac6cbcd01fe7d1300a,2024-11-21T09:03:34.077000
+CVE-2024-26990,0,1,ac54eb79caef1ff5d2c148ae7b172a235001f4d6af42872daf9e82782386d13b,2025-09-18T14:33:49.583000
CVE-2024-26991,0,0,7b42b7cf38efecca11c9cf33d815cc8cff45686c57f0363f55c8f2a67d250c49,2025-04-08T18:44:44.460000
-CVE-2024-26992,0,0,ad3ac1c7673016b954170907d87fe9446feb8c3d161c5585a2cb66416d0b91e0,2024-11-21T09:03:34.383000
+CVE-2024-26992,0,1,fc417e119e1f638f37ebe4a3dd9376286a3686fe612b2076163a711c1a5234f6,2025-09-18T14:31:07.960000
CVE-2024-26993,0,0,2ff36cb9b8e8612f133155256ff088e8fc6fadeac8bfe9bd768370696b2acb88,2024-12-23T20:43:56.733000
CVE-2024-26994,0,0,49a17eef060f9bf1ac9d1914c993c3487e3fb0420f3a94df3698d8f979c9294c,2024-11-21T09:03:34.623000
CVE-2024-26995,0,0,0b338507604cbb1e8de1a588aacac642604340925bf7ef4099cd8e3bdade3208,2024-12-23T19:49:22.590000
@@ -256490,10 +256566,10 @@ CVE-2024-27002,0,0,9cf0cf5fd72a2800002a56112a73db55f28b9b7dec4b320c79f00b5eed92c
CVE-2024-27003,0,0,c203f45c8f1d97bd302649094986ff5258c4f7bfeefce3cacd9ec66ba70661e7,2024-12-23T20:39:58.963000
CVE-2024-27004,0,0,f83d4726c9eaf02e20d27777484adeba44d10c3f8142914019d0b828afc6f9ee,2024-11-21T09:03:35.970000
CVE-2024-27005,0,0,b35369562f8d6e81058993f9c7f5ceaa7d666bdfe292f82cdb7ca679dedb5e68,2025-04-08T18:43:15.860000
-CVE-2024-27006,0,0,f99857766778f03ac72a3c7e775775eadee02d9df0193c5fca85f4242b8c61d6,2024-11-21T09:03:36.310000
-CVE-2024-27007,0,0,f2a05b178ac4106d9070d246425a81626e2e0a7f121bcd24031c8978d22c585c,2024-11-21T09:03:36.437000
+CVE-2024-27006,0,1,7afc6240856baa89f1b34f2e5a1931a36665138c3a382985a43fc2501d31a5fd,2025-09-18T14:24:00.397000
+CVE-2024-27007,0,1,877a168aa889b7f8af34b55b83b60c19b0bc88b94b005d5368b6c9ca65694dcd,2025-09-18T14:22:27.887000
CVE-2024-27008,0,0,02d164f7a1eb401baf43954721cb7d5fe2d144e34592f3d9e0e1abd1038a7cb1,2025-03-04T16:43:49.613000
-CVE-2024-27009,0,0,56a08cc283b225cf86d33c977cde7fe16d287c90a7e78b50fdcc1bf72160b491,2024-11-21T09:03:36.687000
+CVE-2024-27009,0,1,59e5eb8d5f8fdbef9c0a4b16312421192036ec8e093ec48885bdf2ce1a6dcf70,2025-09-18T14:20:42.753000
CVE-2024-27010,0,0,97960f90d5f8b3bf5d51908449345af17f673343664d872a4fe0c28390341888,2024-12-23T14:05:34.153000
CVE-2024-27011,0,0,f6c5ae5bd00c199fb1f8ce883fee32167577ef6bda898e38e50c46aa10dc2a5f,2024-12-23T14:06:38.180000
CVE-2024-27012,0,0,d50b3205e05b02917ee56662cb57978a39fbf26a3b7448115aee8e1b17b000e3,2024-12-27T13:15:18.897000
@@ -256508,11 +256584,11 @@ CVE-2024-2702,0,0,5af5ad50dba8247f108144d577887cce8bbd9d57cd35e10d3ea3b759e11070
CVE-2024-27020,0,0,d0573a58ce4f9e18709c724e71edef68802be0cf8cb8b98309fa06e708a79451,2024-11-21T09:03:40.660000
CVE-2024-27021,0,0,9883d71920346bcc78c175d4fa4a33fc9cadf8ed29ca97ea798bc9656135691e,2024-11-21T09:03:40.883000
CVE-2024-27022,0,0,dbd739de33657415c11414e3e66c989817b265db76abc8d2ca1d25c1fa75795d,2025-01-24T16:15:35.707000
-CVE-2024-27023,0,0,2aaf37192bcf19ff82447827ef1a65b2dac0157dd2feeef8bad9a358df7f5392,2024-11-21T09:03:41.150000
+CVE-2024-27023,0,1,244c26cf4089109eb0e42470af54614a479f6708244d3abe05befb87ad866be7,2025-09-18T14:38:05.753000
CVE-2024-27024,0,0,ebee5e148de6b3dde2fcaa8816a9f4f8ed64a771f098565be007ca61974f2619,2024-12-23T19:22:58.463000
CVE-2024-27025,0,0,5c3859f46c671ad7ffd95b4676d27d7a5d64666b3d74e9808cc4d7ce65e2e8ff,2024-12-23T19:24:12.370000
CVE-2024-27026,0,0,5ebc1045880e6fc58041de97f61a3db47a130144626c7a435accbf2f528f80bb,2025-03-05T15:18:05.380000
-CVE-2024-27027,0,0,ec024f008e45533c7aa91a2939bed64fbe577975d8b93228076417e0feb7b7fa,2024-11-21T09:03:41.650000
+CVE-2024-27027,0,1,205e9ee4b7b421552ae0d1b897379feb07404751da4327e0e413f91b7be5404f,2025-09-18T14:43:15.933000
CVE-2024-27028,0,0,0b533a85014d97bacea694b3c2ac18a295b5c7293a8a7cba3ef9f45538aa8025,2025-04-08T18:42:15.227000
CVE-2024-27029,0,0,1bc28b467b9b9b92bd81e2a843981108d7a2bcb3adede434c7103dc028886ab0,2024-12-23T19:33:28.437000
CVE-2024-2703,0,0,c9a68ebea086b1029008af78c4567f462cebcbd1c90bc610ff5a2636d7089ddc,2024-12-12T17:26:40.867000
@@ -256520,12 +256596,12 @@ CVE-2024-27030,0,0,81a42d017ff2a2374aefa7bff36a9e82fcf707ef94a2c0aee62e28c019405
CVE-2024-27031,0,0,3810e513d80101e5db5de2e8bfd860ea05053183ef045a88846dd8babb3a956e,2024-12-23T19:46:47.357000
CVE-2024-27032,0,0,e351a7dd4abdc1b5678c8024603823170eb2c7257a02466fdb8791080b4dba28,2025-04-08T18:41:55.580000
CVE-2024-27033,0,0,4bf66f03e6ba3137d8ecf573b1befe4641b1146e2898ed2cc6aceb52eb888a44,2024-12-23T19:12:40.210000
-CVE-2024-27034,0,0,9874c1db278dcfc3bd6c43a5a9c11e614e2bc1b6c5f73a3182eb8a7c8608ba84,2024-11-21T09:03:42.663000
-CVE-2024-27035,0,0,a3f223514d69e22d1cc0a4d7abe8b095509dba5ec3f4c12adcfd6c587d9748c4,2024-11-21T09:03:42.797000
+CVE-2024-27034,0,1,9d7f817e361685d495681578b24c748c3b3c3978e9dc8ade3c8290430ae83857,2025-09-18T14:44:23.990000
+CVE-2024-27035,0,1,0d374cd174215d5e655c2873809569992c399c96d3e5fa71fd483034ea449e79,2025-09-18T14:45:10.753000
CVE-2024-27036,0,0,dfea46e2522d2d18e0cc6a9be82afdac129cdfaeb38d9953b97399c588ca691e,2024-11-21T09:03:42.940000
CVE-2024-27037,0,0,78b49dd2f00765578d79792778791b4043abe2ed446987bfd465e16eb2dac836,2025-04-08T18:39:41.400000
CVE-2024-27038,0,0,0cd4520e6799c3f265e4fb485baf4b7f8b0b9699e5059dbd616173307c83dbe5,2024-12-23T14:11:28.137000
-CVE-2024-27039,0,0,b5208e7380b924d92f69017aea5f13f8418ceb2f3e9287ac96416ef79799f293,2024-11-21T09:03:43.410000
+CVE-2024-27039,0,1,5450d407df912f04f7c848082c4c950542cdb6f81de5279aba5c1e02791d6e87,2025-09-18T15:48:40.777000
CVE-2024-2704,0,0,08574c4c93b7eb8d39fe9ad19e5915cf67b4518a9ad69e3b003ae0373a536a61,2024-12-12T17:27:11.390000
CVE-2024-27040,0,0,14a1e734840ddb21b679cb4045f3e123187d67e0cbd2032b08d06d234a48ad21,2025-04-08T18:39:21.683000
CVE-2024-27041,0,0,b5578c4f511656e924f9a233fa390b13bf1c7afa46e4323735de365fe70fbb66,2025-04-08T18:38:51.473000
@@ -256544,15 +256620,15 @@ CVE-2024-27052,0,0,2390a1fc246ec2c992af7defe31751148173a78f776e7e22873249acd6908
CVE-2024-27053,0,0,1494a3178ba94485b321e16530cea9953829a930281e102af8a68822f6f8212c,2025-04-08T19:43:15.420000
CVE-2024-27054,0,0,4aa3947316c05d5d453462157a5eda0efc73d498ac42b3c35efc1437fd50b088,2025-05-02T07:15:52.860000
CVE-2024-27055,0,0,7b39e69c60cdf41f6248e9f85b771f9c297d2438c8a24fe3eda1cac546961d77,2025-03-10T08:15:10.287000
-CVE-2024-27056,0,0,35c027cbcff71c2fbb123d010c4d1c9a140deff20d039f8b0af167a2d8f43aeb,2025-03-28T22:15:16.373000
-CVE-2024-27057,0,0,59020acf3ab82c0eef52cab6667be5665e673c02ff7c385265b72e8eb5c4ebf2,2024-11-21T09:03:46.097000
+CVE-2024-27056,0,1,efcd8d21128118a28296b7cece64d64f87dc9a4206cfa82ef7ee4fd6df302437,2025-09-18T15:28:12.780000
+CVE-2024-27057,0,1,3c02f88382fd0a4a19b737fb0df5a63eba4e9ca15649b9bd4cc16d49b3d23e84,2025-09-18T15:17:53.173000
CVE-2024-27058,0,0,865694a7a9e07c31b00e33b9b8a7a107f1cb4ec87a25ef90620cb0990e18b4e4,2025-04-08T19:42:55.700000
CVE-2024-27059,0,0,b8d358dc987b94bc06e49be13c99ba48022e2070d952b9bca9d47418a24f172e,2025-01-14T14:36:42.747000
CVE-2024-2706,0,0,ec4b783f22cb2952cae8bff1153eed6be7a282f6f994a45b7c4840589cd8711c,2024-12-12T17:27:56.637000
CVE-2024-27060,0,0,22bda1115b48ba58b7256e3896819cc9078fb8284ee48e35606dd5d9241e5131,2024-12-23T14:22:29.173000
CVE-2024-27061,0,0,a9e969f403d38626127dc9e32246f4f40b458a758f1aa722eb0bf67a041dd05b,2025-03-05T15:17:55.297000
CVE-2024-27062,0,0,334bffe277d7f68dabdc05821a6a036d4f246a69a94960e8a874ae05b77a6782,2025-04-08T19:42:41.690000
-CVE-2024-27063,0,0,7ee22d524b1409264e7967210020859acead09ce5897f02f265765222a640dd8,2024-11-21T09:03:46.987000
+CVE-2024-27063,0,1,83b7593059761e0a7e0fc0137e4ed45137350cf08d377c185f23202e9c651ccd,2025-09-18T15:48:53.580000
CVE-2024-27064,0,0,51ddac2c3289f375846afce0848ba809f5baf86f50157e78463267321c7eeb6e,2024-12-23T14:17:03.783000
CVE-2024-27065,0,0,221827fd02ab4968130a505b9d4bdc94fe096149cd3724664a74f1ccf7bb1171,2024-11-21T09:03:47.243000
CVE-2024-27066,0,0,45489c5858449ba05c1b91abb6a297431fa1b15613b430141b6e4f24bb64a148,2024-11-21T09:03:47.367000
@@ -257480,7 +257556,7 @@ CVE-2024-28153,0,0,cf071cbf0912af28a81395f4800a1a23bf47157f0a209eafa2df2f31bced9
CVE-2024-28154,0,0,0da437b6dbbd70711d0d7bd03ec1bfd0d61417dcadc344e6f4bf264377b8bb81,2025-03-27T21:15:47.183000
CVE-2024-28155,0,0,7f2bd2c042c85fb7369fa691a282cabcb199116587fcf3a07df1dd5691f812b0,2025-03-29T00:15:20.293000
CVE-2024-28156,0,0,837d2db81064912cfc2c400457f8ee22982b902a029885f8d289013289e1472a,2025-03-27T21:15:47.350000
-CVE-2024-28157,0,0,e564045109b01f4899c4276b6dfc02ab7291e76081b37136bde916d7cb8ee9cd,2024-11-21T09:05:55.187000
+CVE-2024-28157,0,1,d2cfe6e21d762c40bbff6a6b1cc4b5250720aaa6ab3e06ba4d06557be79b07b2,2025-09-18T14:51:48.367000
CVE-2024-28158,0,0,307a91cfdedb39ecf842fa96787e16743b95b7a7fdefcfa0c69e6f69d084120e,2025-06-06T15:26:24.780000
CVE-2024-28159,0,0,f83c374cf29c8d9d3ca54738cba30d3752270ec80170461cbe4fd190c213f756,2025-06-06T15:28:51.160000
CVE-2024-2816,0,0,d0107bdf02ba8ef2a07782af9d91a557a9558e5843a34c3e164271fa013e7dfc,2024-11-21T09:10:35.613000
@@ -263425,27 +263501,27 @@ CVE-2024-36011,0,0,7cdba30b10dda010be6562055282434f6d47b2c317f82bf44d893d1cf3cac
CVE-2024-36012,0,0,c499fac5c5e6e3e127198634abe09f4f7453eac73dd1e517afdbfe25ec0847c9,2025-01-06T22:33:55.053000
CVE-2024-36013,0,0,734e143a3688f721eb27d4e928e2a0073a4eed82f44ba2ca93c7c4a9a52099eb,2025-04-01T18:40:46.887000
CVE-2024-36014,0,0,a5cc9b214a5258ff3cf6f383b0a8cad185baad8f5abcc5865fde2e8a00dad2cd,2025-01-06T21:41:07.133000
-CVE-2024-36015,0,0,1ea7f826691fa710e78da8aed528cba1a2451dc8cccf64d2ceb1f08ed1e5b26c,2024-11-21T09:21:26.373000
+CVE-2024-36015,0,1,8934bb472b3a79e230988fe31a8ab479d6cc97578d417e5fe1726486b801b974,2025-09-18T15:50:37.110000
CVE-2024-36016,0,0,46f41c2edab368c1707890f3a0ba0cbcff427e1323c2b0db5d41a9971e8db144,2025-04-01T18:33:42.860000
CVE-2024-36017,0,0,9b874bf48cff0437edd07bde2db648865f0d01d6ab1d0db2d9bc5bcb1e97e6a2,2024-11-21T09:21:26.720000
CVE-2024-36018,0,0,3e8da2fe8fcb4c769285526cd8514938e65414766d61fabd0f0f9809be45281c,2024-11-21T09:21:26.853000
-CVE-2024-36019,0,0,f02053cb973e1c96d485baf06035b62edccf042bea033f3776e823e91a178214,2024-11-21T09:21:26.973000
+CVE-2024-36019,0,1,0af1d3cc0196e91367ea305cd60cd5e05be9fe9996a6d2bbe50bff911d13bcd0,2025-09-18T15:54:11.810000
CVE-2024-3602,0,0,d3cbf668ee81c993c6c1a222abdc99fc263e0a164b77fb771b4ebab250b2fbc2,2024-11-21T09:29:57.953000
CVE-2024-36020,0,0,25e42c8a88f0ddc6971355bfaa1fe3e1077dd58b980e3b76b47fcef300a19108,2024-11-21T09:21:27.090000
CVE-2024-36021,0,0,e329f3d46bec53961296646b95182fcee51db869a5da34a000bb9ec4b09a82e5,2024-11-21T09:21:27.280000
CVE-2024-36022,0,0,51dac97c1f219f060ef0fddf94e1fe59968e0e0d8f6538dfb52154bc9e602f12,2025-06-19T14:15:45.160000
CVE-2024-36023,0,0,e5bd5a963b07073a291c96616b254515ad4a6774864c3c2874fadf0832668b50,2024-11-21T09:21:27.523000
CVE-2024-36024,0,0,e81683da475e946ecb026d2acbb1cb6964660d51a3ff9882d05006bff012115d,2024-11-21T09:21:27.663000
-CVE-2024-36025,0,0,33c56aef941738177fa17f1493b08e4d2d3a3e4eea32429e0a62f0a601334f80,2024-11-21T09:21:27.783000
+CVE-2024-36025,0,1,b1d94d991a3c6ae91ad3bbf99a84758932cfac6ee02022b18ae396b9394dc30c,2025-09-18T14:07:22.437000
CVE-2024-36026,0,0,81aed32cdfca7e085901558bcee377c3c6e3863164425d2da7db6f913ccee639,2024-11-21T09:21:27.903000
-CVE-2024-36027,0,0,60971fb15e41835ffad00069162e7628ae414d0e75f9847574caa5dc4130be8f,2024-11-21T09:21:28.023000
-CVE-2024-36028,0,0,ed70165c15c617bb2119d23e438eeba0799cc9bfe6d4cf7101d10945ee023025,2024-11-21T09:21:28.140000
+CVE-2024-36027,0,1,0cad61d9181e2957b9895f1b05d6d61ed5c31f42ffba185114ad8d92e358d095,2025-09-18T14:18:21.993000
+CVE-2024-36028,0,1,e9198cf29a0b42dff91af0710ffc773de5064f35f1d1c95de8807c4b1193fefb,2025-09-18T14:20:15.520000
CVE-2024-36029,0,0,c19488888bf397962b32a7511f75a19b212bfd5eafae44984eeedbd042e0cb69,2024-11-21T09:21:28.263000
CVE-2024-3603,0,0,c9822e7962225d4a9eae3fa7d13dddd24c3916297ece427ca888d21f53db07e9,2024-11-21T09:29:58.100000
CVE-2024-36030,0,0,1a4dec0f099de6770188fa0d6114b86dfcb8f09079596dcc7494aed128b001c7,2025-04-01T18:33:49.813000
CVE-2024-36031,0,0,e34adf451bd8d868cffbd222a6e0361ac04dbb47ad0ce1df67d1ccf85bea2384,2025-04-01T18:34:30.470000
-CVE-2024-36032,0,0,cd0acbd8e3fdd6628f2ad8d7302f2f68579bf30ed26a3c5a614d4b75f9a62341,2024-11-21T09:21:28.780000
-CVE-2024-36033,0,0,94303978be068888376d8e0d9ca54bbb1e0a5ac6616620e158de16ffa181b3e3,2024-11-21T09:21:28.980000
+CVE-2024-36032,0,1,85cd16cf1914faf2ff9c16cb00b0725bc0dedf5dbf05d27862d0795f9345918e,2025-09-18T14:20:55.040000
+CVE-2024-36033,0,1,f74a8d68f55210726de55c05c5e82daffa281051da4b9ebb780bd90a50c5d52b,2025-09-18T14:36:14.127000
CVE-2024-36034,0,0,91533543749aac84e085b27aba09498b62b206467f062014f430c181b0b8ad61,2024-08-16T20:21:06.120000
CVE-2024-36035,0,0,259298b0ce814a15f7a832fc1235f15f59cf5b66bed4b334d9379a09acb026ea,2024-08-16T20:23:29.943000
CVE-2024-36036,0,0,67e306aba1d60b236e11044fafa2bf326ab6f776a6406d3fec451d00fe31e9b3,2025-05-16T16:58:26.103000
@@ -264066,19 +264142,19 @@ CVE-2024-36883,0,0,7a8c98819cff9aad35478db9de8d5f7f50773b3af47bc48d336d6709ddf1e
CVE-2024-36884,0,0,687c65bbb2dd2f603c1ac47ebda44100b26697c1b7819311390c4f344eaf0a18,2024-11-21T09:22:43.727000
CVE-2024-36885,0,0,e42429ca105987b3123d1dd2686d7aa54f4c4825ae074f67ad5efea854c755f1,2024-12-19T12:15:06.657000
CVE-2024-36886,0,0,ee9fdfbec95f1abe836cd3b0b5d78a461d1302ed6631e8ff9dc750e6e886f601,2024-11-21T09:22:44.007000
-CVE-2024-36887,0,0,a762f623af0796d1d3914ff021dbfc976ffe8e125e31079b0b5e027d7ee1ebf1,2024-11-21T09:22:44.220000
+CVE-2024-36887,0,1,2aff39ee2aa69bd563889727f8ce3d5d2edaae38368e34512015b2ee5871cc43,2025-09-18T14:37:53.773000
CVE-2024-36888,0,0,b2a2ef7e7d0081a267e8be2b8bf366382b78e16bd1487a6be3d3160e588b0fd0,2025-04-01T18:34:43.207000
CVE-2024-36889,0,0,970e3fb97bec46d381b746d632d1bbb1971a953e2233f110977dd8a129ceb127,2024-11-21T09:22:44.553000
CVE-2024-3689,0,0,85f65ba80b80fcf18e74bed0560e1983f65529f85ca47fa1b875145b3dc58580,2024-11-21T09:30:11.053000
-CVE-2024-36890,0,0,6da191d4b05cf84919524ff0f4c479666c0284f8ba0afa640e37396db2286ab2,2024-11-21T09:22:44.687000
+CVE-2024-36890,0,1,214a17eab1ffef4527128ce03209518d4fc249c3d60f7928ca4ff69598edabcd,2025-09-18T14:41:38.203000
CVE-2024-36891,0,0,15f70b7929c7b508f4feee79d3db0c4b0de0994a6c9e7e6a42f91cdf8bcabb04,2024-11-21T09:22:44.800000
-CVE-2024-36892,0,0,18d062dac0eaa45d27a5778adb4d7cdc097704e0ee04421018ccb50b48a4a181,2024-11-21T09:22:44.947000
+CVE-2024-36892,0,1,8d513f9f4a86aea7d02472ed68b98021f80db757c3dc0c25bc18b9fb965b2875,2025-09-18T14:46:34.400000
CVE-2024-36893,0,0,26440e68f3958aaa28a765e1d0572fd3a9fe9553305fd4d58c1f3e406cec24ef,2024-11-21T09:22:45.080000
CVE-2024-36894,0,0,09f2f8ef01aa6befeab55a149243df844249ebf8834321f959b81b0459303e81,2025-04-01T18:34:56.940000
-CVE-2024-36895,0,0,684c00dde09907e927e44f9174b061ade7141ca3e354d57fc00b76215dcd902d,2024-11-21T09:22:45.450000
+CVE-2024-36895,0,1,a90400f4bf78a3574d7239c1cea430090017637248c543eab54fe8c14144a114,2025-09-18T14:47:19.510000
CVE-2024-36896,0,0,a41ba51dcf61e5fcc36a80ba61a488710f39a21f10eac95bc33a820a8f64d946,2025-04-01T18:35:04.027000
CVE-2024-36897,0,0,91b89a1040a68416e730b82430cfe95d2d9678b0b1f6ecd96a2d3737af7efedf,2024-11-21T09:22:45.770000
-CVE-2024-36898,0,0,5afbbf771ad045f799b4e01b09d8870e13c2f688743602e4f4080bfeece9a7d6,2024-11-21T09:22:45.997000
+CVE-2024-36898,0,1,d7fab9d42ecc5ceadc9edb59c02adf94534b518275e2739d9f9775dc55447ff6,2025-09-18T14:48:06.587000
CVE-2024-36899,0,0,a706efb7e20080b157d54c7c8c351af281a01f57d9330ded65f4a9fb34156855,2025-02-02T11:15:08.933000
CVE-2024-3690,0,0,fd9ebf48ea3c9ee62fc9747c1964f3d3eebe3a3d6cb236816c8320705fea9c84,2025-02-18T19:04:05.213000
CVE-2024-36900,0,0,adf1ad016d33174b396780c06eeb1024f0ba5c3a8fbf42972cb4c5bcb9045803,2024-11-21T09:22:46.227000
@@ -273035,7 +273111,7 @@ CVE-2024-48312,0,0,16be675ed6d7db1e9ea949b11ad7528da4ef74c3da828eaa8f911e1d7178e
CVE-2024-48322,0,0,453a8d1cb35ea3f4b3a13e3127e90b37ffabae51ef64174d60c5422cdab445d0,2024-11-12T17:35:10.953000
CVE-2024-48325,0,0,6579e70d6ea3ed48847ec5b95b72aed825a8faa868ddb722ace81eb3ae669cc7,2025-06-24T16:31:44.100000
CVE-2024-48336,0,0,5cb1b4f35926e19009664116e71be8fd3716294889352a8f25534443259aa5c5,2024-11-04T20:35:10.193000
-CVE-2024-48341,0,0,5969abd04cdba9a8af27b361ec0cb271baa3d5bd2c663bc059755924f7829877,2025-09-09T16:28:43.660000
+CVE-2024-48341,0,1,7f0f7c29947dcbd4b638d4123a84b015487076337fdc4fee99656db2d32f0694,2025-09-18T15:42:05.877000
CVE-2024-48342,0,0,cab27a7526b8debabab042631051135b3c12f9f8dc84e657f2f251a3750f9436,2024-11-04T07:15:11.437000
CVE-2024-48343,0,0,b8d206a3feae420b8945d775617e07082b2a6b8215bbf8ccfceedd960692e93f,2025-05-28T21:06:03.733000
CVE-2024-48346,0,0,137121b06c9d03025a14db47b13e30e3704002468bdea02ff387b29ce7f68d9a,2024-11-01T12:57:03.417000
@@ -273260,7 +273336,7 @@ CVE-2024-48839,0,0,85cfd42ca0fb637c8e6948222d803bf11f2eebe49f76a5935864ccf64af41
CVE-2024-4884,0,0,dba36cc78e853ec323d8e68576b6df88852c47e1b903865158b463995ab9ebbd,2024-11-21T09:43:47.303000
CVE-2024-48840,0,0,1883f0e1edff9cc02bae4626f9011739a072f676b5bd538b8b0ae7032f0513a6,2025-02-27T17:16:32.690000
CVE-2024-48841,0,0,284acf06b4ddc6eefd21aeb7fb838cf09f08704cba37af41f7efce6edba06fd0,2025-02-14T13:15:42.330000
-CVE-2024-48842,0,1,f7fb3a56e8799757701eb3f70514a3b35af0a9c617b6bb3dc316380b70689531,2025-09-18T13:43:34.310000
+CVE-2024-48842,0,0,f7fb3a56e8799757701eb3f70514a3b35af0a9c617b6bb3dc316380b70689531,2025-09-18T13:43:34.310000
CVE-2024-48843,0,0,2319579e18f7a0197228f0c8dda5af94c03b9c1ee5b76350f26362bf25c44657,2025-02-27T17:15:40.570000
CVE-2024-48844,0,0,53c09415c916ef4bc22a820a0ff2721a035ed622bc3dd486dc3b853f28804dd5,2025-02-27T17:14:28.807000
CVE-2024-48845,0,0,43c9fd381294c8c426f05d8302cdb53051aea4d75dbbb021924cf2f06418c2b8,2025-02-27T17:13:48.860000
@@ -273270,7 +273346,7 @@ CVE-2024-48848,0,0,5672ded70806b43164a02814ab500fe4fcc28e072803d5176c49c1e863e7f
CVE-2024-48849,0,0,fd3e8ed6978571ad86ae5ba997c11a31bbd23eae3890b14e5c287c90b96b0482,2025-01-29T19:15:18.547000
CVE-2024-4885,0,0,617d9649467aef323c74e37ff2643e1496c65f66e83bb5d23af661c7302f090c,2025-03-10T20:24:16.363000
CVE-2024-48850,0,0,8c482fff574843277e0b185e8531850082d1b3c949ffad986b1f3fc2577acd70,2025-05-23T15:55:02.040000
-CVE-2024-48851,1,1,32f84150f1ef3b8eb55d823c011466ae33917c039ba465442eed5c621393da57,2025-09-18T13:43:34.310000
+CVE-2024-48851,0,0,32f84150f1ef3b8eb55d823c011466ae33917c039ba465442eed5c621393da57,2025-09-18T13:43:34.310000
CVE-2024-48852,0,0,30427ab7c643976d46e60ad759beb23222df1040ecb326b48277a708fdeb234f,2025-01-29T19:15:18.720000
CVE-2024-48853,0,0,a37931d93953b6bca0bf02da0bc0962197ff9053011dbea12cd58113beb6711f,2025-05-23T15:55:02.040000
CVE-2024-48854,0,0,84036c75cd3838b5b292f21cf5425d491da03d6238f78579c542dad27dcd7589,2025-01-21T18:07:08.960000
@@ -284344,7 +284420,7 @@ CVE-2025-0542,0,0,6313331796a87cfd429c6887ebdeb1b0129ce5eba24c6840f8a5db7fe94154
CVE-2025-0543,0,0,eff0a1055b76d4ca2905d4fafa8d1e8eefdbdc8138e12e68c5bbcea714737ab9,2025-01-25T17:15:21.720000
CVE-2025-0545,0,0,63c3b9042492b87a07e49abf13646d4f678ce0fc03e014fc20736bc03bb30cd9,2025-02-24T14:15:10.910000
CVE-2025-0546,0,0,100185bafc8981fdecc8121b890a0a3b2a213953f13fd93498e9f18b099e5033,2025-09-17T14:18:55.093000
-CVE-2025-0547,0,1,9c4cf08a408d04d6bdc0ba8f65d8fde2495443c0fd94d63cc1d9f30339186905,2025-09-18T13:43:34.310000
+CVE-2025-0547,0,0,9c4cf08a408d04d6bdc0ba8f65d8fde2495443c0fd94d63cc1d9f30339186905,2025-09-18T13:43:34.310000
CVE-2025-0549,0,0,04e5c218b2326468bfd87b43a40edf9d5df62f5d9f4fd3efca1cdd4cc6dbdfcd,2025-08-08T16:54:26.433000
CVE-2025-0554,0,0,b9f97d18cd5694830c0392455ff8a7f24b64272156981af299edd549a4c44708,2025-03-19T19:53:31.407000
CVE-2025-0555,0,0,1a035c114015b9124bd390d55587956f10a732d5c9825d872183b2ec25413844,2025-03-07T21:43:32.720000
@@ -284769,7 +284845,7 @@ CVE-2025-10075,0,0,c745fe3905f757cc3e9e00e5a5cfcb61ad7d093da06319202b9836f4f6b4f
CVE-2025-10076,0,0,7ade06ec7999aa294def9ccf733d83ebd2183bc24b99f22e10800fc3fdbaba49,2025-09-09T15:52:43.040000
CVE-2025-10077,0,0,cd803f11b568e13c424d16177ef3cb67231e34e9f798cb0dcc8a5ca55dbf8604,2025-09-09T15:52:50.727000
CVE-2025-10078,0,0,97ee796be309b87aabca5caea2d4c41ed8786933bac5706988485385efe15e84,2025-09-09T16:51:49.687000
-CVE-2025-10079,0,0,a8bd0ebd0336a2459c5d9d67316b92b9001cb368fbbfdfb45ceef06195827919,2025-09-08T16:25:38.810000
+CVE-2025-10079,0,1,dd76cfbbb50cfa90a57ce14fad1efa4d032edfd9ad8f4dc96a309b7bc4228c01,2025-09-18T15:54:38.660000
CVE-2025-1008,0,0,7c3a977307f5e461c038f5cb23ee98c69be2267224ff5438dae2a0378b3cc7a8,2025-03-05T09:15:10.110000
CVE-2025-10080,0,0,f61a2910de1ccbcb0787fdba3d132d29682e1d936f070de3fd982b865e5ccf52,2025-09-08T16:25:38.810000
CVE-2025-10081,0,0,7c3af6d25ff423580e2e0235fef4549b10f51722dad1f4bb9b98ec1069496b93,2025-09-09T16:43:36.203000
@@ -284818,7 +284894,7 @@ CVE-2025-10122,0,0,2920fb23fd4cd07fd6a2cfc86f33340e62e7cf38a48c6fa9ab59f611e0729
CVE-2025-10123,0,0,938680920d6d843c6376a6826e54615b2bde077f30545a314c515b5364b42223,2025-09-09T16:28:43.660000
CVE-2025-10125,0,0,20ac2352852e3bd8d037a03159de9a9be09fffd1688bb51944ebbed05b30c6fb,2025-09-17T14:18:55.093000
CVE-2025-10126,0,0,1df6536f7c9ee19a10d45532ae691b5c5681a308528887ea4ae2ae706eb05c88,2025-09-11T17:14:10.147000
-CVE-2025-10127,0,0,e48dc25b774e77f1ef953531740204b5c1e72ade06a35844db37383af136b6ad,2025-09-15T15:22:38.297000
+CVE-2025-10127,0,1,9aba8a4287e671a37eed4e77a3c8cb58f450e18d7d4e097a5360868dacc7c02f,2025-09-18T14:15:45.777000
CVE-2025-1013,0,0,a694ebadfb836aa5cd945940b6983167477e640ab4f752d26f4c3011a4a51b06,2025-04-08T12:26:22.417000
CVE-2025-10134,0,0,2fdb67a62af3338ed5c3cfbadd3a1d3b49d337d4c408e2c0b87acf66590d1f9d,2025-09-09T16:28:43.660000
CVE-2025-1014,0,0,c6156421e09c044512d56480035ada4fc6ec0f71d0de078370b84abda2b3d73f,2025-02-06T21:15:22.397000
@@ -284853,8 +284929,8 @@ CVE-2025-10200,0,0,cff4dd1d3888e24e3aff618d94da1ae0dfa4ba70f57793586df51e3e34ffc
CVE-2025-10201,0,0,77be3bb860995f0f0aa5ae8116c568e6f8ee39c5552d71768925786bc86c3ff2,2025-09-11T17:14:10.147000
CVE-2025-10203,0,0,8a27ec84702dede3afd7dcdd2a629fd779060ba576648f1c62b62581e6042b70,2025-09-16T12:49:16.060000
CVE-2025-10204,0,0,84b4a487241cac64a721673a15a2134f7efe9779a13fc627f27f94754bd0415b,2025-09-15T15:21:42.937000
-CVE-2025-10205,0,1,12f001474fd36b0c9a67e9daf259d0dcdf10c7ece28f25c6ed065beaed1b5901,2025-09-18T13:43:34.310000
-CVE-2025-10207,1,1,b5a2e36d72d7caa36127a793f4245caa38934baebe98f3d50f6a0845d88a1bad,2025-09-18T13:43:34.310000
+CVE-2025-10205,0,0,12f001474fd36b0c9a67e9daf259d0dcdf10c7ece28f25c6ed065beaed1b5901,2025-09-18T13:43:34.310000
+CVE-2025-10207,0,0,b5a2e36d72d7caa36127a793f4245caa38934baebe98f3d50f6a0845d88a1bad,2025-09-18T13:43:34.310000
CVE-2025-10209,0,0,360b24c94266e5ed151e37014c373b770fbc88ac31ae64fe2c34fb0b1c7120a1,2025-09-11T17:14:10.147000
CVE-2025-1021,0,0,59481d71c4c5230974f04d08c3302f8e68c3c5dd79d8677e6295a28333cbe7f3,2025-04-23T14:08:13.383000
CVE-2025-10210,0,0,d89e0997d49122a94d57df906944a215cfb630c912de8db6ec97d95bde65910a,2025-09-15T14:53:19.130000
@@ -284910,7 +284986,7 @@ CVE-2025-10278,0,0,66074ccbe67a1e6cad268feb89744dd837451431669585dbcc5460968ada7
CVE-2025-1028,0,0,7d86a6dffcd03cc50ed664d1f7c2b2eb464439e0b7dbc2e8aafa1f3f61bb44bb,2025-02-05T04:15:06.543000
CVE-2025-10287,0,0,d9c794d2777047eaa40b089da8c983ceefba7b5971c5c0da209bb08322446d20,2025-09-15T15:21:42.937000
CVE-2025-10288,0,0,f866f29928b97c284ec02f1efb517525789a006ef1a2fc8ddb870d0879313da8,2025-09-15T15:21:42.937000
-CVE-2025-10290,0,1,85a4054ccee0069e923143af5cfa4831187b76a1b990396cd353dbd0a219ba46,2025-09-18T13:43:45.290000
+CVE-2025-10290,0,0,85a4054ccee0069e923143af5cfa4831187b76a1b990396cd353dbd0a219ba46,2025-09-18T13:43:45.290000
CVE-2025-10291,0,0,f3881b5f870eec00cde04454dfdbfecc75e560f4da708949cea2b9f319f3f243,2025-09-15T15:21:42.937000
CVE-2025-10298,0,0,52bad7a7973de2e2802beae02c68f20807ec9d4d0a7156dac9ecbc2c6832888d,2025-09-11T21:15:34.140000
CVE-2025-10316,0,0,168edb9ba90bd4b6785806a3008804dc555d76ed4607978bcd27c5c20cab6440,2025-09-16T12:49:16.060000
@@ -285033,24 +285109,24 @@ CVE-2025-10485,0,0,a30cd9f15156f619de28103a9b81317628880c8b3a968f8d184645e830d10
CVE-2025-1049,0,0,c4e063a30b46ec5e66ee5dc3c7238659c82de138cedc2b2a3a44c4e5ae0fddaa,2025-08-25T14:43:00.027000
CVE-2025-10491,0,0,951ea6bb0962c3dcb211fcbb4ed7b7b286208045d52fb26507f65445fd4519e8,2025-09-16T12:49:26.640000
CVE-2025-10492,0,0,555933980c63ddde447931013752af03609e5c783c21d690cb279540b5bafdb9,2025-09-17T14:18:55.093000
-CVE-2025-10493,0,1,932e8034dc702d0ce0eb1219ecdae380b75ef71b0f63f980cd1f992288ee8ec0,2025-09-18T13:43:34.310000
+CVE-2025-10493,0,0,932e8034dc702d0ce0eb1219ecdae380b75ef71b0f63f980cd1f992288ee8ec0,2025-09-18T13:43:34.310000
CVE-2025-1050,0,0,7d78b0a4b57c817f83eab2ed22497d07b9145c021386faab3682cb35dbe240fd,2025-08-25T14:43:50.460000
CVE-2025-1051,0,0,97f8684be10dfe28d0f98ada5524e2930b4ed1c647264457a2026bc5d2982cce,2025-08-15T16:28:32.310000
CVE-2025-1052,0,0,dd0f54ac7a99856d7d318fe87955632258ed518980dc0996f06ddf7223075097,2025-02-18T21:32:45.863000
-CVE-2025-10527,0,1,7a2ccf51181e7047e72823b1f9a1ad15c395de843a09b06d207d57f0c9bee737,2025-09-18T13:43:45.290000
-CVE-2025-10528,0,1,e4a5881c6ef017cb20b6b58234d621f358790715216c91da321af772fda9f267,2025-09-18T13:43:45.290000
-CVE-2025-10529,0,1,f01dd7b60a8a60484a70480d43c0c1d0f3d72ec3802c5dea99cb0808a1b1ef19,2025-09-18T13:43:45.290000
+CVE-2025-10527,0,0,7a2ccf51181e7047e72823b1f9a1ad15c395de843a09b06d207d57f0c9bee737,2025-09-18T13:43:45.290000
+CVE-2025-10528,0,0,e4a5881c6ef017cb20b6b58234d621f358790715216c91da321af772fda9f267,2025-09-18T13:43:45.290000
+CVE-2025-10529,0,0,f01dd7b60a8a60484a70480d43c0c1d0f3d72ec3802c5dea99cb0808a1b1ef19,2025-09-18T13:43:45.290000
CVE-2025-1053,0,0,220eb1e53c5d810b83a7a49f90ed6382278278327f7029fcd6982086a7d92ff0,2025-09-09T19:15:45.677000
-CVE-2025-10530,0,1,7507690618d802e7e30c01a0a7297be393ad95d459e5d5cd697ccdc3b0fc7cde,2025-09-18T13:43:45.290000
-CVE-2025-10531,0,1,347eea110964bd123d337d004c214716c955c8c45d6a8c66ceb94f70b316dd01,2025-09-18T13:43:45.290000
-CVE-2025-10532,0,1,de6a8aa6288be25531c08aed5cbf6f2cf7b1351272be5c1ab315db3bd14c01b2,2025-09-18T13:43:45.290000
-CVE-2025-10533,0,1,a55d83f49a9e29456c40945694c5e20c3bf5fdebb3066ad8a8257a31e04960d0,2025-09-18T13:43:45.290000
-CVE-2025-10534,0,1,8c560f3f9bc9b2c9906c865c4cc275b4d688aa5d7c64391b69bcf0524ff71fb0,2025-09-18T13:43:45.290000
-CVE-2025-10535,0,1,bb60f3e16aa1a2106f043630eb600f95764d7aea8d87afedb514afeac2fbdc2a,2025-09-18T13:43:45.290000
-CVE-2025-10536,0,1,a83d9b0d3306ee412f54e5ac4f07a50bca0f97357826161044caf8f6b03896a0,2025-09-18T13:43:45.290000
-CVE-2025-10537,0,1,ee4397fa0b84c63b5547b26fd47a65df05d02ca069e79115194ffed8e96b3103,2025-09-18T13:43:45.290000
+CVE-2025-10530,0,0,7507690618d802e7e30c01a0a7297be393ad95d459e5d5cd697ccdc3b0fc7cde,2025-09-18T13:43:45.290000
+CVE-2025-10531,0,0,347eea110964bd123d337d004c214716c955c8c45d6a8c66ceb94f70b316dd01,2025-09-18T13:43:45.290000
+CVE-2025-10532,0,0,de6a8aa6288be25531c08aed5cbf6f2cf7b1351272be5c1ab315db3bd14c01b2,2025-09-18T13:43:45.290000
+CVE-2025-10533,0,0,a55d83f49a9e29456c40945694c5e20c3bf5fdebb3066ad8a8257a31e04960d0,2025-09-18T13:43:45.290000
+CVE-2025-10534,0,0,8c560f3f9bc9b2c9906c865c4cc275b4d688aa5d7c64391b69bcf0524ff71fb0,2025-09-18T13:43:45.290000
+CVE-2025-10535,0,0,bb60f3e16aa1a2106f043630eb600f95764d7aea8d87afedb514afeac2fbdc2a,2025-09-18T13:43:45.290000
+CVE-2025-10536,0,0,a83d9b0d3306ee412f54e5ac4f07a50bca0f97357826161044caf8f6b03896a0,2025-09-18T13:43:45.290000
+CVE-2025-10537,0,0,ee4397fa0b84c63b5547b26fd47a65df05d02ca069e79115194ffed8e96b3103,2025-09-18T13:43:45.290000
CVE-2025-1054,0,0,430aa21bf72f645c6e6bfd34970aba7a2e39d4475b698feec899aa71c44032d7,2025-04-23T14:08:13.383000
-CVE-2025-10546,0,1,f088632bdd001248501a630f914db4c09f6b020f0ee730cb54e4ef4cbd137365,2025-09-18T13:43:45.290000
+CVE-2025-10546,0,0,f088632bdd001248501a630f914db4c09f6b020f0ee730cb54e4ef4cbd137365,2025-09-18T13:43:45.290000
CVE-2025-1055,0,0,6e774b509e3c76627691b837f2d8590aa97e26aef808a880682478160b3479de,2025-06-12T16:06:20.180000
CVE-2025-1056,0,0,f0a0c1e16eca5134af818e93c54bb258246f0a3a48d7c06c85b24c0fe69d07d4,2025-04-23T14:08:13.383000
CVE-2025-10562,0,0,d3b29d936905c0c2aabae0c1ec0d73bd9d11753b1553a61cc5bb33b7b851b98a,2025-09-17T14:18:55.093000
@@ -285069,56 +285145,62 @@ CVE-2025-10591,0,0,50017d00a57e25c7ba4b255b826cf5d692a499843e7b200c8a04a8d703037
CVE-2025-10592,0,0,5acf6c1e4fe2b5838e6fe1838a934b147ec522712598298315a105830e342f8e,2025-09-17T14:18:55.093000
CVE-2025-10593,0,0,64616dfd08568dc7ce9d910a47daa687ad2a2823027720e4df1ee0190b030a98,2025-09-17T14:18:55.093000
CVE-2025-10594,0,0,bbb0d028e6fc12f0e892c7894f6ed2cdd48843b5471341c9e71f226287abba9d,2025-09-17T15:15:42.187000
-CVE-2025-10595,0,1,f9045c3664aa6437cc204cc50d36389e2f28e3c09192d2dcca1d00ff83e5b9ad,2025-09-18T13:43:34.310000
-CVE-2025-10596,0,1,656e0f2992da5e8e5e57f3afde7a8768199d283763c5fcfbce83e80d679dd3c9,2025-09-18T13:43:34.310000
-CVE-2025-10597,0,1,3ebb6c3f4175cc4a5218efde5cfb7da1e3870eb722eff8669304a74c6249ae21,2025-09-18T13:43:34.310000
-CVE-2025-10598,0,1,fe6bf75e50e0bc6838442397528dae1001708c6c019d54dcee6ce13447c1c50a,2025-09-18T13:43:34.310000
-CVE-2025-10599,0,1,f9add4049155df12795ad0d46171f0a2d27f8a64e8a2bf5f2d1de16ebb548edc,2025-09-18T13:43:34.310000
+CVE-2025-10595,0,0,f9045c3664aa6437cc204cc50d36389e2f28e3c09192d2dcca1d00ff83e5b9ad,2025-09-18T13:43:34.310000
+CVE-2025-10596,0,0,656e0f2992da5e8e5e57f3afde7a8768199d283763c5fcfbce83e80d679dd3c9,2025-09-18T13:43:34.310000
+CVE-2025-10597,0,0,3ebb6c3f4175cc4a5218efde5cfb7da1e3870eb722eff8669304a74c6249ae21,2025-09-18T13:43:34.310000
+CVE-2025-10598,0,0,fe6bf75e50e0bc6838442397528dae1001708c6c019d54dcee6ce13447c1c50a,2025-09-18T13:43:34.310000
+CVE-2025-10599,0,0,f9add4049155df12795ad0d46171f0a2d27f8a64e8a2bf5f2d1de16ebb548edc,2025-09-18T13:43:34.310000
CVE-2025-1060,0,0,249a972722a8ea5c8c8703c094cf839a07a282f53cdfa1c21d84e389f952edae,2025-02-13T06:15:22.213000
-CVE-2025-10600,0,1,325ea836935aba355850c0d8dcfa1ed19c7e40a48c21da6f071a89402fade6ac,2025-09-18T13:43:34.310000
-CVE-2025-10601,0,1,1d23d421afd977c2aebe153ddd82361a4d93ad9af6fb09bf85dbdb7b88218ba0,2025-09-18T13:43:34.310000
-CVE-2025-10602,0,1,3d5c6b94a05f54545fae6e85a860a4db1b34d2c88b34f54c62358adb20e40228,2025-09-18T13:43:34.310000
-CVE-2025-10603,0,1,764de8ff24e752f7885059157e52c6510cb511d5f702454cc0888c7a6b06f813,2025-09-18T13:43:34.310000
-CVE-2025-10604,0,1,67c0b8afedcf4bf0012126d1dd3a137da610c78c42fca3d1fd08f71168840f88,2025-09-18T13:43:34.310000
-CVE-2025-10605,0,1,d93dbf94ffb82628c4676115446c9952cc64059ced533bf0b476815a266a375c,2025-09-18T13:43:34.310000
-CVE-2025-10606,0,1,fc36aa0daa0f42be6b15fb4aca9d7ca701140817d21100cb698964c89a8dc6a8,2025-09-18T13:43:34.310000
-CVE-2025-10607,0,1,703e2b40873b3bf57e403ed4a5c6e1038c96826c8dd013921fd70d18a9724e46,2025-09-18T13:43:34.310000
-CVE-2025-10608,0,1,ace2c7a9b8c4ad246076997982947e7fc1e276a0b4957be5239e65fba87c3406,2025-09-18T13:43:34.310000
+CVE-2025-10600,0,0,325ea836935aba355850c0d8dcfa1ed19c7e40a48c21da6f071a89402fade6ac,2025-09-18T13:43:34.310000
+CVE-2025-10601,0,1,4ae36009a2a616e6ad28400d3895c66e26264e49dc97d6b93874a1fe5b938f55,2025-09-18T15:15:35.827000
+CVE-2025-10602,0,1,eab31717003eadd7a6381eb7804aa3861b946b606913283ede8bfca38df59de0,2025-09-18T15:15:36.450000
+CVE-2025-10603,0,1,9abae71a8066f47231e153ac05564152c1b0c55bb72a9d7dba51a290eb6ea256,2025-09-18T15:15:36.607000
+CVE-2025-10604,0,0,67c0b8afedcf4bf0012126d1dd3a137da610c78c42fca3d1fd08f71168840f88,2025-09-18T13:43:34.310000
+CVE-2025-10605,0,0,d93dbf94ffb82628c4676115446c9952cc64059ced533bf0b476815a266a375c,2025-09-18T13:43:34.310000
+CVE-2025-10606,0,0,fc36aa0daa0f42be6b15fb4aca9d7ca701140817d21100cb698964c89a8dc6a8,2025-09-18T13:43:34.310000
+CVE-2025-10607,0,0,703e2b40873b3bf57e403ed4a5c6e1038c96826c8dd013921fd70d18a9724e46,2025-09-18T13:43:34.310000
+CVE-2025-10608,0,0,ace2c7a9b8c4ad246076997982947e7fc1e276a0b4957be5239e65fba87c3406,2025-09-18T13:43:34.310000
CVE-2025-1061,0,0,719d74f0f0646df1bcdf5186f15b6b006503d4de7dcd7fdf659e983ae5a27990,2025-02-07T02:15:29.587000
-CVE-2025-10613,0,1,3188c94c304c0c8703fb7f3cd6eca15690ae8cc9051d697c289524703acef201,2025-09-18T13:43:34.310000
-CVE-2025-10614,0,1,be5bcacf897176936f0d242fa6719acab50eede9bffbb55ce3a0d12e916e650f,2025-09-18T13:43:34.310000
-CVE-2025-10615,0,1,37ca23766a5adfa1bbce1811bf55883b4d968d51149525566cfbecd390330ee9,2025-09-18T13:43:34.310000
-CVE-2025-10616,0,1,ecef363d1e80ef9b89f7e9dfe6b31c89e4d1ab35a23654c4c2e0b614f8393365,2025-09-18T13:43:34.310000
-CVE-2025-10617,0,1,433471c9e894b549cdc8d034d30d17329859e50b499467300b74ea72a3f2b4e5,2025-09-18T13:43:34.310000
-CVE-2025-10618,0,1,9cd4b3cf524973aa8c358e4cc3dd7a221cb4eb7ed46a1928511f56790264ab2d,2025-09-18T13:43:34.310000
-CVE-2025-10619,0,1,52951a677a750846f971a728d5f6c46a3af85862db74ed5a2bf4fd5f6fe2dfc9,2025-09-18T13:43:34.310000
+CVE-2025-10613,0,0,3188c94c304c0c8703fb7f3cd6eca15690ae8cc9051d697c289524703acef201,2025-09-18T13:43:34.310000
+CVE-2025-10614,0,0,be5bcacf897176936f0d242fa6719acab50eede9bffbb55ce3a0d12e916e650f,2025-09-18T13:43:34.310000
+CVE-2025-10615,0,0,37ca23766a5adfa1bbce1811bf55883b4d968d51149525566cfbecd390330ee9,2025-09-18T13:43:34.310000
+CVE-2025-10616,0,0,ecef363d1e80ef9b89f7e9dfe6b31c89e4d1ab35a23654c4c2e0b614f8393365,2025-09-18T13:43:34.310000
+CVE-2025-10617,0,0,433471c9e894b549cdc8d034d30d17329859e50b499467300b74ea72a3f2b4e5,2025-09-18T13:43:34.310000
+CVE-2025-10618,0,1,45fadb45b2ab5f90a22e1edefd60bc5e28317c11f862ea088b653e926273e454,2025-09-18T15:15:36.817000
+CVE-2025-10619,0,1,db71f78b46b7a33231a7e914576342d5611331033cfbf6bbc6da23f57dac75d3,2025-09-18T14:15:46.077000
CVE-2025-1062,0,0,7c0cf9c21117ca1714e5223a23745f872db0f1f3c0df124b87c28b2d150da2ed,2025-04-08T13:20:11.020000
-CVE-2025-10620,0,1,d2cb3cd69e4283443d48584b0dfe928aecf69a7c88c56ff7af41be2b52d0b0c9,2025-09-18T13:43:34.310000
-CVE-2025-10621,0,1,8a991e7d6858d2d842f35a63b50b5125f82d3edcf9f5f1bf69b6072138fb6a61,2025-09-18T13:43:34.310000
-CVE-2025-10623,0,1,f1ac242afb06d56c6ccbad6001086c035fcab3e548dc52ae28a8240229edb3f2,2025-09-18T13:43:34.310000
-CVE-2025-10624,0,1,d7d42f9ba6586532b24e90f9c4a49f25e6aac388eefbbbb382b6bad4b36df555,2025-09-18T13:43:34.310000
-CVE-2025-10625,0,1,69286910a424838ea4e8fe9c20a4a205c44d306122ffe8aa8433f74e3e59a62f,2025-09-18T13:43:34.310000
-CVE-2025-10626,0,1,52f97fd87c61ed560da8cb94577a58cc43a16d9b5458837af4d8c8623f39c3fe,2025-09-18T13:43:34.310000
-CVE-2025-10627,0,1,f80e9e3958ac8e50df1c8d623387ff615192e3da23e427102e15e76ae9e8d3fd,2025-09-18T13:43:34.310000
-CVE-2025-10628,0,1,1bede4b8af40aaef452765c834ce296aa254dbec9d8d2a9e24cd660852d9ea56,2025-09-18T13:43:34.310000
-CVE-2025-10629,0,1,62c78302a4ddbc199caa185d1ebed93fd86c4b100c50377f171ed91b41909d73,2025-09-18T13:43:34.310000
+CVE-2025-10620,0,1,00b10f01ca5848ae31071c895fd6547d345e7b088a783c4b3a49535e02486dd6,2025-09-18T14:15:46.223000
+CVE-2025-10621,0,1,b76fba8ef3aedf0428b9657f07ec39ac43a00dfd9e9e85fc34b3a2294f97bcce,2025-09-18T14:15:46.370000
+CVE-2025-10623,0,1,0bc71a8b0fa26d9f39a5ebd8731bf3d6e6f021ecfaf6d1c3e276b300001d73ff,2025-09-18T14:15:46.737000
+CVE-2025-10624,0,1,debdaa9f6a1a52d73867f4d620d9ca48835cc463da60e037d10dba255ea645c8,2025-09-18T14:15:46.887000
+CVE-2025-10625,0,1,3574cfb1df17f7a03d2e40c7e9ac964589c2795f929f75963fefd2a86d767c1e,2025-09-18T15:15:36.977000
+CVE-2025-10626,0,1,4f2a1aee18619b637adc5be547d01bd096e76116aaca93a6d7ff4b6808c2aba8,2025-09-18T15:15:37.127000
+CVE-2025-10627,0,1,615df416d70273d56bbf0f3c235c720955dedc01d9a9dd94ac6fcbee8b25f674,2025-09-18T14:15:47.307000
+CVE-2025-10628,0,1,ceccb745cb2724216bff842339220df63695a3a7998de52d27099a3a599467ed,2025-09-18T14:15:47.457000
+CVE-2025-10629,0,1,3a74b887f3fc55f15caf9ed4eed02eec71c0caa603caf8f32e2683f1dda28d1e,2025-09-18T14:15:47.710000
CVE-2025-1063,0,0,f6ebc08f6e2568783d19012ba06b647ad752279ad00c89461f145d2a92f0083e,2025-02-28T16:07:01.990000
-CVE-2025-10631,0,1,c19f33ccad39b8e393015bea31bc6ae63c3051823f925b1ac4c9a850185617c4,2025-09-18T13:43:34.310000
-CVE-2025-10632,0,1,e4cb89a12d4ea830f6ad64c5a3f6f3bf0fadc26d68379bd4e58eaddcf7b54cb5,2025-09-18T13:43:34.310000
-CVE-2025-10634,0,1,c285dc0ed839293da07a144ac4ad13d90175c6d0f09552927a10034659d0dee4,2025-09-18T13:43:34.310000
+CVE-2025-10631,0,1,57719c924479c5ab94885dc6785b7a7e335d217cc3535cc0dce2161fcf0f2020,2025-09-18T14:15:47.840000
+CVE-2025-10632,0,1,316fbacb7f4e4f25564d37a53cfd92c3e4f61e11d54fb0a0dede2870b974f803,2025-09-18T14:15:47.980000
+CVE-2025-10634,0,1,7d29a295285c5a144dce367a12498b03ed486c94ba6107043582955f85e6266b,2025-09-18T14:15:48.127000
CVE-2025-1064,0,0,7b7164b210697e056675206baf5cc1f85c1aa8eb0b02774ad30b163694ee3ea3,2025-02-25T20:41:01.500000
-CVE-2025-10642,0,1,fdd36cebcbe7f0ff3cb967e5101fefdf6ccaa189e48d009de317da47818b7f1a,2025-09-18T13:43:34.310000
-CVE-2025-10643,0,1,4ff81de117c7c6a77f6ce8ce6486c14e931b22bce69413e53a72a201ac80dcd5,2025-09-18T13:43:34.310000
-CVE-2025-10644,0,1,c6aaf90d1203f07da50610c90d90d70385ee6368d496870f15e5d6875f5495e2,2025-09-18T13:43:34.310000
+CVE-2025-10642,0,0,fdd36cebcbe7f0ff3cb967e5101fefdf6ccaa189e48d009de317da47818b7f1a,2025-09-18T13:43:34.310000
+CVE-2025-10643,0,0,4ff81de117c7c6a77f6ce8ce6486c14e931b22bce69413e53a72a201ac80dcd5,2025-09-18T13:43:34.310000
+CVE-2025-10644,0,0,c6aaf90d1203f07da50610c90d90d70385ee6368d496870f15e5d6875f5495e2,2025-09-18T13:43:34.310000
CVE-2025-1065,0,0,70a90000a3a4cb679474daa22883e05e6abe48ed1e55dd42dffa8e01fc4b0bec,2025-02-19T06:15:21.507000
CVE-2025-1066,0,0,ea1d475b44d8de28b14f691f200e1ff9439b36f3af9912524721934b30c9a74f,2025-03-20T14:15:22.783000
-CVE-2025-10662,0,1,b6630ff19968151024902557fc43da85675d7a1fab847f5c8053341488ccead2,2025-09-18T13:43:34.310000
-CVE-2025-10663,0,1,e076c7e777c3eef25c4d59b08f4e2cf97502527b436a0596fed2acc758dd07aa,2025-09-18T13:43:34.310000
-CVE-2025-10664,1,1,e70d6f0983da3f017992bcc77606a79e7ba589db8b679f0e4d25182eee7417c2,2025-09-18T13:43:34.310000
-CVE-2025-10665,1,1,b7000830915a71520e791e35db7554bb9bb3d8a0ccd647a0db3b878467a29520,2025-09-18T13:43:34.310000
-CVE-2025-10666,1,1,bae806302067a0e87cda77f1b019e651cc1bc0f97959f44c3ee67b6394d8d86a,2025-09-18T13:43:34.310000
-CVE-2025-10667,1,1,a1f960671badbb0862a0a7642efd9acedf2ac6afe43011c69e263175dc3431b1,2025-09-18T13:43:34.310000
+CVE-2025-10662,0,0,b6630ff19968151024902557fc43da85675d7a1fab847f5c8053341488ccead2,2025-09-18T13:43:34.310000
+CVE-2025-10663,0,0,e076c7e777c3eef25c4d59b08f4e2cf97502527b436a0596fed2acc758dd07aa,2025-09-18T13:43:34.310000
+CVE-2025-10664,0,0,e70d6f0983da3f017992bcc77606a79e7ba589db8b679f0e4d25182eee7417c2,2025-09-18T13:43:34.310000
+CVE-2025-10665,0,0,b7000830915a71520e791e35db7554bb9bb3d8a0ccd647a0db3b878467a29520,2025-09-18T13:43:34.310000
+CVE-2025-10666,0,1,eac2bf0b1cf249bbc8064054ed8f944a7b9382fba3d460ba8a0a0cd68bf671c1,2025-09-18T15:15:37.280000
+CVE-2025-10667,0,0,a1f960671badbb0862a0a7642efd9acedf2ac6afe43011c69e263175dc3431b1,2025-09-18T13:43:34.310000
+CVE-2025-10668,1,1,37606590391d55f00caa2259f6146078fde695dab2d06ab05e5104ba81b1e1a2,2025-09-18T14:15:48.683000
+CVE-2025-10669,1,1,e40517b5f005defcf481f549ad85c4d3931a192fdf9f5c04d287ec9aac9db2a0,2025-09-18T14:15:48.890000
CVE-2025-1067,0,0,203e1be7ff143a4ea32a733d8f1b78987b26fc285ac3f1e57c1368ebe4043a72,2025-06-20T19:48:19.247000
+CVE-2025-10670,1,1,4bfe7d3aeb0bc419c2f9c60105a1c5cf29d0edb399b683a1941b8396c6044fe7,2025-09-18T14:15:49.100000
+CVE-2025-10671,1,1,9f749ac7365a31384e4c3efffddbcbb39e5245b7e159d96772f9eca56927f9ab,2025-09-18T15:15:37.437000
+CVE-2025-10672,1,1,cf563d11ba4331d211ee6edb8891d8b1035e6872e3fb2346cf56fbde6376705b,2025-09-18T15:15:37.653000
+CVE-2025-10673,1,1,4ce7673490fcd3cce5724623868a99597067a1359daf709aa08e79fe62c21445,2025-09-18T15:15:37.863000
CVE-2025-1068,0,0,d52adb53e9203246fc0fec5b4d604c5c09dec74f8f2ecf90c14ecfbf164472cd,2025-06-20T19:48:30.127000
CVE-2025-1070,0,0,63c9f6366f7886d6af04d22c614f55b0f42e20f4e6634878d1102f0014dfbfa1,2025-02-13T06:15:22.463000
CVE-2025-1071,0,0,ec670b61a4cae3c6bd1b5d7c58db808e7643f8c91b0bf1aa44c5e336a078699f,2025-02-14T14:15:32.560000
@@ -288696,7 +288778,7 @@ CVE-2025-23249,0,0,59a3b8571ca390e26609a72a629b87261c069c8e1d3baf28bc328f587ea60
CVE-2025-2325,0,0,a1c3de12528dbf5a65aaa14f3483a3c6066344fd24d21f90a63ab60e2ee305ce,2025-03-25T20:07:03.383000
CVE-2025-23250,0,0,91f3b3980fce95b9fabf05e033aa35cbace52375f748056506d58aa63be351fa,2025-04-23T14:08:13.383000
CVE-2025-23251,0,0,767c024318627121b523c219b911f0fcc7569b8e3a786965fb257e88e30232e8,2025-04-23T14:08:13.383000
-CVE-2025-23252,0,0,a2f89a5440df919efb7c1bdaca3b1490f2b668df9db36a3ceed236abe07c17d0,2025-06-18T13:46:52.973000
+CVE-2025-23252,0,1,ff271c8c98b17705f7d03e7d3ede9abdeb916f4ae2912111f8ef50e28fa5edb5,2025-09-18T14:02:51.250000
CVE-2025-23253,0,0,f9de68ed984cf5e5c99edc68b635f242d07cc929f5185cb27e2c9dcd5ffcaea9,2025-04-23T14:08:13.383000
CVE-2025-23254,0,0,8be2e21d58ec3fd7d92ec8e896dd51db7ae8bc6c069a21e838d199f9a2844aa9,2025-05-02T13:53:20.943000
CVE-2025-23256,0,0,0502e4f6212e47ef36e4357fbc2ab3076d3624e6a79828d3e1a249f915c739e8,2025-09-05T17:47:24.833000
@@ -288712,7 +288794,7 @@ CVE-2025-23264,0,0,ba7052c322742e18943487d96360c38685d626e4abe6330a73d1efd7de0e7
CVE-2025-23265,0,0,9e9a26c0a7fcbce2bc7e047a32e64dced1170ca6aff74acc4a139cc356639f9e,2025-06-26T18:58:14.280000
CVE-2025-23266,0,0,8c6ce663685d0d400df6e0bc8537b04ba05e2ce2d661029c87562cc12d60c24f,2025-08-16T22:15:25.613000
CVE-2025-23267,0,0,5c478a7d6b3145698500b8dbf055d78795d2f5176c7607618d07d3ba845fa499,2025-07-17T21:15:50.197000
-CVE-2025-23268,0,1,5a347d90a2c0bcdc12199504e357f0fba64867c93aca1505bcc727f508c09481,2025-09-18T13:43:34.310000
+CVE-2025-23268,0,0,5a347d90a2c0bcdc12199504e357f0fba64867c93aca1505bcc727f508c09481,2025-09-18T13:43:34.310000
CVE-2025-23269,0,0,c52723ad2bc66f23bc78681dcbec3b0e3b683f8ddb54977de98ffde7247b81a2,2025-07-17T21:15:50.197000
CVE-2025-2327,0,0,623acf4a26d9d0a627c39d6e7bd3767484bbbf51b695c128c65dda426894e878,2025-06-17T20:50:23.507000
CVE-2025-23270,0,0,8824d11f24b21588634e20e6077d697aa34d6251ba417864c1f35f3f02c619d3,2025-07-17T21:15:50.197000
@@ -288746,11 +288828,11 @@ CVE-2025-23307,0,0,733973debfbbf2182e91514f279d3c4747b2b5c81deaf86f0ea02f55a7bc9
CVE-2025-2331,0,0,61e27e3dc18d187f2004d90c094bda4bc5eb71272cad63b1d4a17c1026ceeaf5,2025-08-11T14:17:42.643000
CVE-2025-23310,0,0,58a4d4caf76c2f9820b0fbdff98b80a1e5a9fe6ee80068835eec69ed346df94d,2025-08-12T16:34:02.277000
CVE-2025-23311,0,0,89e0cc28d4b30f7b1216a6b25978e4539cbea68be0b195028854dc74f88d8857,2025-08-12T16:34:15.230000
-CVE-2025-23312,0,0,ace5491f49f687c8230856392934e4cf3c3c45e7850f303da00d6d00057eca04,2025-08-29T16:22:31.970000
-CVE-2025-23313,0,0,a82902a9eaddff2a9ea16118e6cde2cf15832e1585bbfa3729eb20baa36d154c,2025-08-29T16:22:31.970000
-CVE-2025-23314,0,0,92f48a2554756183d23fc333e3e13b54f21d280501c9132c314deab8185de7c6,2025-08-29T16:22:31.970000
-CVE-2025-23315,0,0,fcc8fdbdea5c3f738ce4f4c4eea360e72c3a484797b470a75d35ee74e9cf7d6a,2025-08-29T16:22:31.970000
-CVE-2025-23316,0,1,fb6e6e27d8dcc09e3e62a0ffe573b50fc4a2c4d3d46da3e8818e16cbf39e9ce7,2025-09-18T13:43:34.310000
+CVE-2025-23312,0,1,da954584b536223fc97b0a108aa5fdc7fb9e8db9cc5465a2643f7b67797f860a,2025-09-18T15:26:32.363000
+CVE-2025-23313,0,1,625591b09d3f290916b25af2670ce7eee327c8c1445d97d2752d2216ea8f969a,2025-09-18T15:02:22.247000
+CVE-2025-23314,0,1,d827f92cf9399ef05cf5ae51abb9ed7fefacdacafabceb8a34e3964768481215,2025-09-18T15:00:48.740000
+CVE-2025-23315,0,1,015a8e366d443bc7e78bd93b43d75a9effa6b2247eff2557d49eba847a0ca6b1,2025-09-18T14:52:54.613000
+CVE-2025-23316,0,0,fb6e6e27d8dcc09e3e62a0ffe573b50fc4a2c4d3d46da3e8818e16cbf39e9ce7,2025-09-18T13:43:34.310000
CVE-2025-23317,0,0,87cc06bf51e23303199072e6e093e47328b40e26bd129f70168c82e06399b5fa,2025-08-12T16:34:24.833000
CVE-2025-23318,0,0,5c29b8b0d3091b791387e363e69127eec661d151ebc0ccc52982c7c5e2596fa3,2025-08-12T16:34:34.523000
CVE-2025-23319,0,0,0a585af27a1d6685f1db389bf8f27792fab0becf1a117c652167c187b1f7a80e,2025-08-12T16:34:43.160000
@@ -288763,15 +288845,15 @@ CVE-2025-23324,0,0,daaf087fc215b3af5cd5d27f457f38e7f5da59a04eb7563d629600401dd4d
CVE-2025-23325,0,0,1311d834a1cf0a596f29038f40ff87de3bfa5cc2dfd01821fb3fcf489f84d783,2025-08-12T16:35:34.600000
CVE-2025-23326,0,0,781f2dcded082534618ddf70bccaaa297b5a91c7a035168c263f74ebe70d12e2,2025-08-12T16:35:42.420000
CVE-2025-23327,0,0,e913a108bab2af117f68a3052f20087fb1b8b76d8b672fd8e1c9ce4a6f6cb9db,2025-08-12T16:36:00.690000
-CVE-2025-23328,0,1,c7ce9b8d713dc2855bfba467f171b385bebc9dda0ae367d2e998354d7c6214eb,2025-09-18T13:43:34.310000
-CVE-2025-23329,0,1,ecd46c65b24e9bd374332b872a9da8a725657efa13a357b6eda718f8eeb4fe41,2025-09-18T13:43:34.310000
+CVE-2025-23328,0,0,c7ce9b8d713dc2855bfba467f171b385bebc9dda0ae367d2e998354d7c6214eb,2025-09-18T13:43:34.310000
+CVE-2025-23329,0,0,ecd46c65b24e9bd374332b872a9da8a725657efa13a357b6eda718f8eeb4fe41,2025-09-18T13:43:34.310000
CVE-2025-2333,0,0,600470717f73ae989a4e33407be9c331e6223c6ec027e4a7c73886df7950cb72,2025-03-15T12:15:12.610000
CVE-2025-23331,0,0,b9d637440b807a135c829652e89daacb3f85e7f3a115f4a91f9ed71d699f166f,2025-08-12T16:36:10.777000
CVE-2025-23333,0,0,3e7e76a92d0381352268bfca930433ff2d3c370aca4bafa5a57cef2b98c4c9f2,2025-08-12T16:42:01.103000
CVE-2025-23334,0,0,bbde4bed46c50ba42704b270ddd52639a2641998f9faca1abf18c04b39779e22,2025-08-12T16:41:54.023000
CVE-2025-23335,0,0,45eea967f96663213c6066a6b2e8e7ab7250f2590bd875e169b2a4ea3be62d6d,2025-08-12T16:41:45.390000
-CVE-2025-23336,0,1,2bf1b351312729b7142a1dd12de8cde50e05ccb6a5b4fc2ae15222e92d1922bb,2025-09-18T13:43:34.310000
-CVE-2025-23337,0,1,39307245605ad0b1a533ad2427c1d18e8f7acc055afcd56e790917d027ef9e22,2025-09-18T13:43:34.310000
+CVE-2025-23336,0,0,2bf1b351312729b7142a1dd12de8cde50e05ccb6a5b4fc2ae15222e92d1922bb,2025-09-18T13:43:34.310000
+CVE-2025-23337,0,0,39307245605ad0b1a533ad2427c1d18e8f7acc055afcd56e790917d027ef9e22,2025-09-18T13:43:34.310000
CVE-2025-2334,0,0,af1cfc1613b38618f43c910beb17815194cac4ddb461c16fb47f2aba7d734581,2025-03-17T16:15:27.017000
CVE-2025-23342,0,0,24916ed211222c6ee9c5481b6b09efb78a6066654f4988cc3c3f3fb4be5ece2e,2025-09-11T17:14:25.240000
CVE-2025-23343,0,0,832979fd8f818faa2cd74b2cd2d64a3c569e7686045771d85c8f3c59d1d6b862,2025-09-11T17:14:25.240000
@@ -290869,7 +290951,7 @@ CVE-2025-25729,0,0,37dccbd23e8b05f5aabcfb584977649888f3f534d26d5e574ce2d7e88687c
CVE-2025-2573,0,0,9533157eb5528ef7f577a7b77f9eee7a7a2ab78fc05533cbaab118aab8be28b5,2025-03-27T16:45:46.410000
CVE-2025-25730,0,0,2d4e8c99634c9753085f1bf0f3dc2ae2d2ae9a31f8634761394f303c2de1e717,2025-02-28T20:15:46.803000
CVE-2025-25732,0,0,7b3de96a21e14100c02cb1944a98a2734c5ed67ceebd83a2a6f0b015ee0efa77,2025-09-17T17:54:02.850000
-CVE-2025-25733,0,0,9d96a0f1257bac7c385e98e907c186c206d0289802fef5e5c493e411eeb30f98,2025-08-29T16:22:31.970000
+CVE-2025-25733,0,1,2d7ca8b3c789f8dd34649097435823282f60962d2fd85dcaf541b4acefe4fb7a,2025-09-18T15:31:39.373000
CVE-2025-25734,0,0,f0c4436a150414dcd89e466245b52961a102d714a6fcb66cd40154085090f182,2025-09-16T19:37:16.167000
CVE-2025-25735,0,0,57397efe1a583d0640779e408d8f2740a75e3aaa866704cd6a665b8fea3a388d,2025-09-16T19:33:52.560000
CVE-2025-25736,0,0,3398b2764104bf6d2bd29f41d5ba00c22ba565a697e53b0452a73b52f8835a8f,2025-09-16T19:27:50.197000
@@ -293262,18 +293344,18 @@ CVE-2025-29870,0,0,94e3b8ab8d7fbdb6f03f28530f0ba477688ec414baa8650bbb887d85a3f03
CVE-2025-29871,0,0,c15e11a2c091486cbb02c9ae94080cea4dfb57cd62cdd0292d8272de01800d42,2025-06-18T18:11:44.963000
CVE-2025-29872,0,0,851c3605d2efd28a70e32e874676ab2595354c8705bbd198b79c12c75d6ab2b3,2025-06-18T18:11:18.457000
CVE-2025-29873,0,0,cd688a6dbd55e359088f195b3f5df6e8854a839ab689d3daf396aa11b5ca361e,2025-06-18T18:11:01.843000
-CVE-2025-29874,0,0,777ca909b18e2a11e93951fa30ab350bc19f7b21f89d0c0e0f57555f1dc44d10,2025-09-02T15:55:35.520000
-CVE-2025-29875,0,0,f382fc054c966ccb0f145146a0d78569214208f87a4b327d04452967cc4d0d8c,2025-09-02T15:55:35.520000
+CVE-2025-29874,0,1,543557a14cd4ff31ef0f76703919d828ae0439276e6621de7f7d14227313f8e5,2025-09-18T14:35:14.593000
+CVE-2025-29875,0,1,7a5bee2a6afdc4f62e191f69e44fc014802fa0d07d4b68d0c5dd98b64bc707ab,2025-09-18T14:34:42.557000
CVE-2025-29876,0,0,35e1806295f2a88f8b1fda48105c13c58cf5d2126c8c5ce3b0658954182e572a,2025-06-18T18:10:47.030000
CVE-2025-29877,0,0,8ce157d93f93a022f033bf9c6ba10560b0646ecf38d25b5ba660a5af6c35ec4f,2025-06-18T18:10:34.380000
-CVE-2025-29878,0,0,7d051d0f822f7c9c32036f417a68d6b3d1831175a8c1018e4e8d37e33d8ee33a,2025-09-02T15:55:35.520000
-CVE-2025-29879,0,0,c0193a4ab4080dd40d83e2e32ac56b9e6a9dc601363a98de4531a3b5db6818dc,2025-09-02T15:55:35.520000
+CVE-2025-29878,0,1,836feafc38210680dde3f8242a0dcea85cc4b746094b1cb577cb06162df101cf,2025-09-18T14:28:46.180000
+CVE-2025-29879,0,1,2c8a850504fcf35e491f347b08706d7c02718ca2265c41784b0c8a27e7db762c,2025-09-18T14:27:05.597000
CVE-2025-2988,0,0,6af5894147447c41642ebd584542a340ce8d53283d1f09edb8c7fec633f3f4a1,2025-09-17T17:56:23.087000
CVE-2025-29882,0,0,60d5f3a5958852032743ca5cee7c1cbbf3ecaeba277cc80c2c8f81f1753dae00,2025-09-02T15:55:35.520000
CVE-2025-29883,0,0,251438b7bb8374681c79559d277f6facc0fb08c276134cc0ba75e7405b8236d5,2025-06-18T17:32:09.147000
CVE-2025-29884,0,0,16c52b35f5f4de1c63c430e49760bad5dfae17727c27676858a621485ee9f8c5,2025-06-18T18:09:53.787000
CVE-2025-29885,0,0,0fe40d8433505542ac9c22815758640676cf8a4a5d492cc9702ca831587aaf3b,2025-06-18T19:24:48.993000
-CVE-2025-29886,0,0,f5ad82d230b9cfe13a48cfae56be86f5704986b4cd7be0213c916db30049d5c6,2025-09-02T15:55:35.520000
+CVE-2025-29886,0,1,3d31dbb830f13a33d761b983369c234d3378e98df84728224dd7dc74967bed3f,2025-09-18T14:23:34.787000
CVE-2025-29887,0,0,19e0273f2032a65c5b26e3a3ea27b4993e88d1b539a09b71a43b6c02add0b366,2025-09-02T15:55:35.520000
CVE-2025-29888,0,0,7b6e651ce17d3513fe14e61e9576655fe9efdcd5eb8b9230b01f1e12cf781efc,2025-09-02T15:55:35.520000
CVE-2025-29889,0,0,77a1419a70997664e42900bff93e19f03bf8aa7a96989bb19f3bae07ae677388,2025-09-02T15:55:35.520000
@@ -293524,7 +293606,7 @@ CVE-2025-30179,0,0,e6188b5cfe41efd4be24afd0a9be97fe3cad7c2aaaf7dc5206b7ef410f616
CVE-2025-3018,0,0,699e90ef59bc974dffc7069ff5404d401834f1962c8486f8c32f7bd651f7ed16,2025-04-07T14:35:25.290000
CVE-2025-30183,0,0,7bee93ac306b62ac86f055dc1627ff8ab4b0dfba12f958417a2c6907f9005be0,2025-08-12T14:20:51.827000
CVE-2025-30184,0,0,1d88338deabd19f31bc11b215e6d9be94ed6e9a44fdabe4d598a46beedc61e86,2025-08-12T14:22:08.940000
-CVE-2025-30187,0,1,6e5ed01cbccc429217d0e7136e164f3aef03a84479a32a50b086e210be9bc88f,2025-09-18T13:43:34.310000
+CVE-2025-30187,0,0,6e5ed01cbccc429217d0e7136e164f3aef03a84479a32a50b086e210be9bc88f,2025-09-18T13:43:34.310000
CVE-2025-3019,0,0,70e870259e621652f69977e8a6f5a1f65a77b053f491785fe2e80412bfee7fd9,2025-04-01T20:26:30.593000
CVE-2025-30192,0,0,76b07a7dc22a129ad1f94a9cae0c889009ce862cea8fae6b15fa7d69677ed4ce,2025-07-22T13:06:07.260000
CVE-2025-30193,0,0,b5631b7234d99d822f89477675795fc1e4557911370ff922aff47427c545178b,2025-05-21T20:25:16.407000
@@ -296133,7 +296215,7 @@ CVE-2025-32999,0,0,021f92785fb481c58ddc71d38612ee5432057a074c3e9802f4824b4ea1fbb
CVE-2025-3300,0,0,71838a45e38cfd4f9033706465f5d20314584bcf58aabb1bb7ca5cab40d52129,2025-04-29T13:52:47.470000
CVE-2025-33004,0,0,25ef1cacfc55679caa991fe4dacafc9bda9795da6ed1d8f7182b25d804d5e7f3,2025-06-09T18:08:21.600000
CVE-2025-33005,0,0,be550a5e2ac6a35d058e8160e960be9ea02dfa43a6b1cb81703cad86809f091d,2025-06-09T18:07:39.407000
-CVE-2025-33008,0,0,676fb2ecaed6923072fed6a9e6e26bbcac85e850c30c0e7896bf20e70ca9b9c1,2025-08-20T14:40:17.713000
+CVE-2025-33008,0,1,3ff757daea671c6357b2fec87db9d4f44ac9848f63d9bd779d4bdb1b08e966ef,2025-09-18T15:34:07.980000
CVE-2025-3301,0,0,b2cbbbf942710dc17dd30bf45e19011afe7becbc724cdeebd3bb45dd2691a5aa,2025-05-02T13:53:49.480000
CVE-2025-33013,0,0,488b09f0659a15b7d8ae33710b95ea7b176514949f12a88bb2a12278ff04815b,2025-08-22T18:10:19.113000
CVE-2025-33014,0,0,83858f2f1035d7e0b0ba3aa7cb9c816a49c3b575132f31c01260f8a915513830,2025-08-02T01:42:27.177000
@@ -296558,7 +296640,7 @@ CVE-2025-3501,0,0,3cfc724642adb686d4be247604702c94d8d9cf73b1f998b4646bd386cfaa00
CVE-2025-35010,0,0,1113be2dbd83122c4dc73ac15ff9397216b9c6135dbbacc0b793fe2e5464bc69,2025-06-09T12:15:47.880000
CVE-2025-3502,0,0,7c73723b0d4b00e6da894445c57c5ec7f552a238ff16d874e6183139bc542d93,2025-05-07T16:30:24.910000
CVE-2025-3503,0,0,8d73ed34ec38f7a3fa46caf6863bc942845955658d4c73ee2f17e6ea13b905f5,2025-05-07T16:30:33.803000
-CVE-2025-35036,0,0,4993f28543daf8dc5921daddc09f30459a44c07025c2600109d577bcde9488de,2025-06-04T14:54:33.783000
+CVE-2025-35036,0,1,90a342b0092a986853c535878839aa70b5f481b13c0e1e6cfcb975493c4b53c1,2025-09-18T14:19:46.060000
CVE-2025-3504,0,0,aa0bdb842e6d15cc15443745349224911fa493d95241cc6b8918b52272013f3a,2025-05-07T16:30:38.630000
CVE-2025-3506,0,0,ffac8f3ba9271548ec6bfdeb141eeb20bc96e782a27226d5b94d79dd653dd5a9,2025-08-25T14:51:47.760000
CVE-2025-3508,0,0,273c9a086986020a82a8efca26a8b080fbd80bd6a3c62b6bc908a6a9bbe617be,2025-07-29T14:14:55.157000
@@ -296600,13 +296682,13 @@ CVE-2025-3540,0,0,f985cb3ef1ae01ebd2dd0344431149f5225f213ab49c447467ad0f6d71a72e
CVE-2025-3541,0,0,76054be5f6cf9b541b7d6c89b3eb53c3c2e710e67999603a5607042d88d09527,2025-04-15T18:39:27.967000
CVE-2025-3542,0,0,7069234034d1085384239612ef1cc06a52922300116a8e30b4dd85ee7e19936d,2025-04-15T18:39:27.967000
CVE-2025-3543,0,0,42b4958a6b4097c9ab72211163e6bb81f2872c70c5e0844eb093dfe8d525d58c,2025-04-15T18:39:27.967000
-CVE-2025-35430,0,1,24f95196e2a10a2ea419b2413c245b6647aa1fa8615a1412b333d18e5924a5ff,2025-09-18T13:43:34.310000
-CVE-2025-35431,0,1,248f54b93cf40871c162b683163887c496aa9903e1050f1dc1e24864dc972fd5,2025-09-18T13:43:34.310000
-CVE-2025-35432,0,1,8b55b7acd28ebaf3eb321c17856e430a81a1ac43bf2d74eacf18aca30aae5535,2025-09-18T13:43:34.310000
-CVE-2025-35433,0,1,4bb48bc7d1f9080073818173ab4aba64d8e23d14ed3445988c2addbbf3ab744b,2025-09-18T13:43:34.310000
-CVE-2025-35434,0,1,692e7d71eff198806a391b584f3bc1275a37b314ac5ee3bc6fcd3b2c43a0e5dc,2025-09-18T13:43:34.310000
-CVE-2025-35435,0,1,98961777a3dae7335680045e709a270644c9c1e98ef8b6d0b5313dba0dfcd55d,2025-09-18T13:43:34.310000
-CVE-2025-35436,0,1,2e58a0bf305cc56c20afc207829a0bd70683e6c20fc0ebe5afed316ec5753f9b,2025-09-18T13:43:34.310000
+CVE-2025-35430,0,0,24f95196e2a10a2ea419b2413c245b6647aa1fa8615a1412b333d18e5924a5ff,2025-09-18T13:43:34.310000
+CVE-2025-35431,0,0,248f54b93cf40871c162b683163887c496aa9903e1050f1dc1e24864dc972fd5,2025-09-18T13:43:34.310000
+CVE-2025-35432,0,0,8b55b7acd28ebaf3eb321c17856e430a81a1ac43bf2d74eacf18aca30aae5535,2025-09-18T13:43:34.310000
+CVE-2025-35433,0,0,4bb48bc7d1f9080073818173ab4aba64d8e23d14ed3445988c2addbbf3ab744b,2025-09-18T13:43:34.310000
+CVE-2025-35434,0,0,692e7d71eff198806a391b584f3bc1275a37b314ac5ee3bc6fcd3b2c43a0e5dc,2025-09-18T13:43:34.310000
+CVE-2025-35435,0,0,98961777a3dae7335680045e709a270644c9c1e98ef8b6d0b5313dba0dfcd55d,2025-09-18T13:43:34.310000
+CVE-2025-35436,0,0,2e58a0bf305cc56c20afc207829a0bd70683e6c20fc0ebe5afed316ec5753f9b,2025-09-18T13:43:34.310000
CVE-2025-3544,0,0,fb4292fbe8f54ebce87a451a88dde09488b3a4a38d5557d70780d0bc7dcd8ae5,2025-04-15T18:39:27.967000
CVE-2025-3545,0,0,657281bd3da40a2604f3d7479b33f50d890eff134287481debeb8d8bc2292f0a,2025-04-15T18:39:27.967000
CVE-2025-35451,0,0,cc26934339c8b1b45c70a90e8b8bbc8561295f60887e4a0e67619da2d37ca6be,2025-09-08T16:25:59.157000
@@ -296937,7 +297019,7 @@ CVE-2025-37110,0,0,ce248e2e1f95620352e2fa9555c36d403abdc50a23c1070f45341637dc70a
CVE-2025-37111,0,0,87703d6d494fb9bd13666b7f07396ffc2366ecd77f446158b9f87d25c565e2a2,2025-08-04T15:06:36.623000
CVE-2025-37112,0,0,862679bd9f59ee593b5150aad06497ff6100471c40f30736d74bbcafb47b6e30,2025-08-04T15:06:36.623000
CVE-2025-3712,0,0,ea56365e47ceb44e31dafb8f72bb0d4f1a8a74a514b3fc339176f713c23eafa1,2025-05-28T03:15:22.310000
-CVE-2025-37122,0,1,5fb4557e6739d231d68c96910a0c17ba2b1328f8f7b02867623bd2fef15b8fed,2025-09-18T13:43:34.310000
+CVE-2025-37122,0,0,5fb4557e6739d231d68c96910a0c17ba2b1328f8f7b02867623bd2fef15b8fed,2025-09-18T13:43:34.310000
CVE-2025-37123,0,0,1aca248b742f9db751577df0cbff3ddd4e2b7a6737b1509a698919bceb9a4984,2025-09-17T14:18:55.093000
CVE-2025-37124,0,0,04c0e72599187c880b4068ce1d7aef29ff4e7ed60014790b0ee09fdbea26e6e8,2025-09-17T14:18:55.093000
CVE-2025-37125,0,0,c0ae62047b2214b6e15a23f56aae3fd1ceaebcbd9714ec663222678e70ef26e7,2025-09-17T14:18:55.093000
@@ -298587,22 +298669,22 @@ CVE-2025-39801,0,0,154765f1a3386b6d822ede1207b0b11492009064da6994f76e9e3a7e92c93
CVE-2025-39802,0,0,f48718141aaf4cb33244d6fcecc5b82bda2f32372b1136c43efe05127d353d79,2025-09-15T15:21:42.937000
CVE-2025-39803,0,0,424864e6828d98a4a8daf3b60197c7a2dd8f77d65f1201e6a81302f580f4b7aa,2025-09-15T15:21:42.937000
CVE-2025-39804,0,0,5e84b9967329786e5329f3030f64bcf9b4d926a811a6d6ee64a54a96e8385311,2025-09-15T15:21:42.937000
-CVE-2025-39805,0,1,735140ded737293df7b55a95294bf68de2aa3b53098d6870f3c0e776c600644a,2025-09-18T13:43:45.290000
-CVE-2025-39806,0,1,70e75d570983b605691777fa2eb89206516b12d2895eda588f6d1dbbb545802b,2025-09-18T13:43:45.290000
-CVE-2025-39807,0,1,acd29a3d16c3b01e5b6762497e0b3467f94bb31d955553470e9bdb9746996764,2025-09-18T13:43:45.290000
-CVE-2025-39808,0,1,fa293d8a7433c92435cba68b9fed332abcf338fc7288e2193c76ed8e9fbe0c36,2025-09-18T13:43:45.290000
-CVE-2025-39809,0,1,8e3004845424ae9b8d7acbeb659f47659be2e398cde6059791474294cf6610da,2025-09-18T13:43:34.310000
+CVE-2025-39805,0,0,735140ded737293df7b55a95294bf68de2aa3b53098d6870f3c0e776c600644a,2025-09-18T13:43:45.290000
+CVE-2025-39806,0,0,70e75d570983b605691777fa2eb89206516b12d2895eda588f6d1dbbb545802b,2025-09-18T13:43:45.290000
+CVE-2025-39807,0,0,acd29a3d16c3b01e5b6762497e0b3467f94bb31d955553470e9bdb9746996764,2025-09-18T13:43:45.290000
+CVE-2025-39808,0,0,fa293d8a7433c92435cba68b9fed332abcf338fc7288e2193c76ed8e9fbe0c36,2025-09-18T13:43:45.290000
+CVE-2025-39809,0,0,8e3004845424ae9b8d7acbeb659f47659be2e398cde6059791474294cf6610da,2025-09-18T13:43:34.310000
CVE-2025-3981,0,0,c4c947a9e8642d5aa8790f08197f762e2de38c86b71b0071179ded559bae82c2,2025-05-12T19:05:34.677000
-CVE-2025-39810,0,1,ba09f2d30b758ef7e5910c3dffea7a2d0cd32bcd679e012a08edcb5ca4e13b37,2025-09-18T13:43:34.310000
-CVE-2025-39811,0,1,a21b54ee7eb326956a4d30276013a8c46fe5943e6b609a81954ee2694a1bd3fa,2025-09-18T13:43:34.310000
-CVE-2025-39812,0,1,36cf6ac3d052b4576588989e95cab54f6ff3d49be2386555e920dadfc7d74a60,2025-09-18T13:43:34.310000
-CVE-2025-39813,0,1,10be887a6f3b812f6d91343984b5c7f3fc195bb87a1133b0c4631a203d4bdc25,2025-09-18T13:43:34.310000
-CVE-2025-39814,0,1,e5ec26493c90eb0fa04a6cf686051854df2eed7694e83e12e598d4c4e78f0a75,2025-09-18T13:43:34.310000
-CVE-2025-39815,0,1,b47d5d4dda987a5a07fbce80c7af6ee9acad4155c8b1416f4499dcaaaf37ded0,2025-09-18T13:43:34.310000
-CVE-2025-39816,0,1,37eb66530fb8034c2d7028d1e8f0e0ba0e706d040274652e6360b539a4611408,2025-09-18T13:43:34.310000
-CVE-2025-39817,0,1,8c0aa42eb858903798ded779a9c84f5a5a3de7eefbc134edc21b475bf645111f,2025-09-18T13:43:34.310000
-CVE-2025-39818,0,1,f8b371817bbeecfb6858c8efeefa1bc553524d565cb046c7915fbb3a2e0ffb9e,2025-09-18T13:43:34.310000
-CVE-2025-39819,0,1,fdb9158f179e199933eac8fdb935f0c954d5769057b68d67ee76bf1696fa44ab,2025-09-18T13:43:34.310000
+CVE-2025-39810,0,0,ba09f2d30b758ef7e5910c3dffea7a2d0cd32bcd679e012a08edcb5ca4e13b37,2025-09-18T13:43:34.310000
+CVE-2025-39811,0,0,a21b54ee7eb326956a4d30276013a8c46fe5943e6b609a81954ee2694a1bd3fa,2025-09-18T13:43:34.310000
+CVE-2025-39812,0,0,36cf6ac3d052b4576588989e95cab54f6ff3d49be2386555e920dadfc7d74a60,2025-09-18T13:43:34.310000
+CVE-2025-39813,0,0,10be887a6f3b812f6d91343984b5c7f3fc195bb87a1133b0c4631a203d4bdc25,2025-09-18T13:43:34.310000
+CVE-2025-39814,0,0,e5ec26493c90eb0fa04a6cf686051854df2eed7694e83e12e598d4c4e78f0a75,2025-09-18T13:43:34.310000
+CVE-2025-39815,0,0,b47d5d4dda987a5a07fbce80c7af6ee9acad4155c8b1416f4499dcaaaf37ded0,2025-09-18T13:43:34.310000
+CVE-2025-39816,0,0,37eb66530fb8034c2d7028d1e8f0e0ba0e706d040274652e6360b539a4611408,2025-09-18T13:43:34.310000
+CVE-2025-39817,0,0,8c0aa42eb858903798ded779a9c84f5a5a3de7eefbc134edc21b475bf645111f,2025-09-18T13:43:34.310000
+CVE-2025-39818,0,0,f8b371817bbeecfb6858c8efeefa1bc553524d565cb046c7915fbb3a2e0ffb9e,2025-09-18T13:43:34.310000
+CVE-2025-39819,0,0,fdb9158f179e199933eac8fdb935f0c954d5769057b68d67ee76bf1696fa44ab,2025-09-18T13:43:34.310000
CVE-2025-3982,0,0,1c838b355b08fccef91cdd4bc9c25377e0499804e9737f319e263a5e97db6999,2025-05-12T19:05:23.390000
CVE-2025-39820,0,0,aeae1ff2af27fe14113e770ea920247a6b46b22f553ce6b8d16eff70c23f2924,2025-09-17T14:18:55.093000
CVE-2025-39821,0,0,e5616613d9bf020781d2043a5c548003e137aba55c5d798103532ef75ae3b0b2,2025-09-17T14:18:55.093000
@@ -298791,8 +298873,8 @@ CVE-2025-40672,0,0,16bc6b87ff9caf15184dbd8991107d7b17c5beb8ff9d9c80bdf9b979ca591
CVE-2025-40673,0,0,b579e57f63d588753084335ab891fb47997b91677321939dfff9acbc408e6ab4,2025-05-28T15:01:30.720000
CVE-2025-40674,0,0,15df2c223b6a53c7a82378bea7413e640b70314876e7aac64c67fd250366cd43,2025-06-17T20:50:23.507000
CVE-2025-40675,0,0,654293ef1440eaa459ce9cb8c09f3edfd6a9e09aa98cb712b7c0ab443f6d7b48,2025-06-09T12:15:47.880000
-CVE-2025-40677,1,1,40caab0dc707b0b8af5420cc2a6758f831fce6997119890f5bd17d7234e64ab4,2025-09-18T13:43:34.310000
-CVE-2025-40678,1,1,d37d2482a6363fa782919ecbc72121e1d2771923092ded508ed9976f2655fd2a,2025-09-18T13:43:34.310000
+CVE-2025-40677,0,0,40caab0dc707b0b8af5420cc2a6758f831fce6997119890f5bd17d7234e64ab4,2025-09-18T13:43:34.310000
+CVE-2025-40678,0,0,d37d2482a6363fa782919ecbc72121e1d2771923092ded508ed9976f2655fd2a,2025-09-18T13:43:34.310000
CVE-2025-4068,0,0,3e3326c67789178a2e89dd2c7182f86f8b00ff853809cd66d0d99e3251986e87,2025-05-28T17:27:28.983000
CVE-2025-40680,0,0,a421f470f04434dbbbf1b2ebed01b16f39aa3d9f3883b58aa875f3a7d487cb0b,2025-07-25T15:29:19.837000
CVE-2025-40682,0,0,39a6104ee35a6d4c840d26c64a301d98a4853f52cbb5edebab27119df5a68e49,2025-08-04T20:59:01.080000
@@ -298923,7 +299005,7 @@ CVE-2025-40928,0,0,9fea71c71bff85bce1a9b76dc52007a645cce6477eec9da41eb472ee2c2d0
CVE-2025-40929,0,0,f2e57369f4e81a15f96ebe1bc80171fce2e9a4a9a34c7fe03aca70a878d9d852,2025-09-08T20:15:34.703000
CVE-2025-4093,0,0,426d6945e92bfa0f6784cfac27262306e33a71ed38b9d14699e5d2c984a980bf,2025-05-09T19:31:46.917000
CVE-2025-40930,0,0,08a110479146dcdeb0807fe9f23ce5aaadf8c31c9b72a359ae125e12b26827f4,2025-09-08T19:15:35.487000
-CVE-2025-40933,0,1,75f71a9e4a5a8d790b3512b30c341bf377ae7a600bf3ebabdeb3dd46b5ac229b,2025-09-18T13:43:34.310000
+CVE-2025-40933,0,0,75f71a9e4a5a8d790b3512b30c341bf377ae7a600bf3ebabdeb3dd46b5ac229b,2025-09-18T13:43:34.310000
CVE-2025-4094,0,0,9389e1771cac6e6188e563be99dd04161be542f25f3d0fbc50799f1a765f05af,2025-06-09T20:13:20.070000
CVE-2025-4095,0,0,cae8e1c6358f7e063ff4b8cb5365d4cbb9a8d43b36017ef3b6ccb02f60becbc1,2025-05-02T13:53:40.163000
CVE-2025-4096,0,0,1ae7df9d13281138e5184e1418611854220fd93b516e980bb023c9d2941d8afa,2025-05-28T20:07:18.943000
@@ -299993,6 +300075,7 @@ CVE-2025-4440,0,0,2664c1cf05645457f92ebc54a1f1ba520a15af0474bcfaabcae2efe1f59261
CVE-2025-4441,0,0,b51083d28e8ffdf67b9f556d8821335246ec3c3d0df9af168bdc304029601b6d,2025-05-13T20:23:21.277000
CVE-2025-4442,0,0,6c90bee1a130eb2a46ed26e4bc01b2418d31c5d93924781dbdeda40c49c9990a,2025-05-13T20:23:14.620000
CVE-2025-4443,0,0,9b2be9010c99dcd417aa5bdbdca6b8cd2f8f8503b132682459a185b31ea049e3,2025-05-13T20:23:09.510000
+CVE-2025-4444,1,1,3bdc5b5d1e8e8baaea555ef7cb59f565e3df07df9be5cbe051bce27a97c06ac3,2025-09-18T14:15:49.887000
CVE-2025-4445,0,0,460cc616cbdc14b858457b6abf1393e7c5670f97e6f7b1a87c5be08b9f34d23f,2025-05-13T20:23:04.390000
CVE-2025-4446,0,0,317a852b048aa11a01b0cf53d155e26bcb996b6fc3a2cf2bf46072b22dd3e443,2025-05-12T17:32:52.810000
CVE-2025-4447,0,0,8b50905f2f388a177382a1fe4a9dbf60bc091c7f54bd7df9be2f39bf0ac5348f,2025-09-05T16:19:49.587000
@@ -302247,7 +302330,7 @@ CVE-2025-4849,0,0,79bafc8d78c1efc632ed95ad4a130766ed5d90c45e45605773df0d46773756
CVE-2025-48490,0,0,87ecfeb6e490715223675b6987710680d7319b22f1f72e859b8289d6cc58a36f,2025-05-30T16:31:03.107000
CVE-2025-48491,0,0,192909d10acf6a2f5c7dbd7cf4a77eb5c3f60df46b3da837effcf5a7a7693800,2025-05-30T16:31:03.107000
CVE-2025-48492,0,0,403a5473251d0861ab7d826ccca3a9aee2288a4f6bf49b37e21ab18d8ee7611e,2025-06-04T19:56:47.567000
-CVE-2025-48493,0,0,7c20ba456ec69ef1e70d2ecb4fd146dbaf6e95fff0c896df69b76de160cbc941,2025-06-05T20:12:23.777000
+CVE-2025-48493,0,1,33511e97cdbf8b4d3a94111b1db3f78b91730c05655668e5b67b7dd9417c30ea,2025-09-18T14:08:53.603000
CVE-2025-48494,0,0,985351c34eb16b64100f773a447c45ea3c32c4e4f2426f243aa654cd8ba5d489,2025-08-26T17:28:27.030000
CVE-2025-48495,0,0,f3be8d09a580a2f2f9c58d20125b1db45c90667517622f86f0f9041286b8e8eb,2025-08-26T17:29:01.460000
CVE-2025-48496,0,0,928f57dde76bd5c33e78704f772ad597574444952a08bd78d9f4c3630309e71f,2025-07-15T13:14:49.980000
@@ -303440,7 +303523,7 @@ CVE-2025-50177,0,0,885b5800cde044dfb51b7be1911d69dd53cef9e6d76a02f396012172b6010
CVE-2025-50178,0,0,efc9feaa706fc8f05b7ff1f2f2f44555ca7af407b3073278b82568b26c66e859,2025-06-26T18:57:43.670000
CVE-2025-50179,0,0,2a8ca64f142449067d040603e6898ca3a45d6217183a316e2a9ddbf07685d05c,2025-08-21T20:53:46.087000
CVE-2025-5018,0,0,e6074d13c744f0bbc4fedce0adf645747389e40f5acdd13f0492e74df313cc90,2025-06-06T14:07:28.330000
-CVE-2025-50181,0,1,35e1c9ed8b1e862a6c2cd4d661f9aa80d4a8b7a321f957d70f36e3e354561c8d,2025-09-18T13:51:10.240000
+CVE-2025-50181,0,0,35e1c9ed8b1e862a6c2cd4d661f9aa80d4a8b7a321f957d70f36e3e354561c8d,2025-09-18T13:51:10.240000
CVE-2025-50182,0,0,5b8cbddd3daeea44d3d0cc7715969b405b9ad5e28dbeb639bdab3b270dc14262,2025-06-30T19:15:25.017000
CVE-2025-50183,0,0,b9cf276d5b687c68a13333930dd57e3e3f99677f9926825c6d65877307fc5e27,2025-06-23T20:16:59.783000
CVE-2025-50184,0,0,3bd5007ac88e8a1b9fe6bafa45a02baeed0b4162e590767000b1dcc511412e26,2025-07-29T14:14:55.157000
@@ -303627,7 +303710,7 @@ CVE-2025-50868,0,0,968dd276c30849396798e3a27460013809e1bdf42c832d780e7f8e8ac8584
CVE-2025-50869,0,0,e6981831f0c83a76c858bf3da84b47f0dd9d6980e195ab2482f365421fb8cf44,2025-08-04T15:06:15.833000
CVE-2025-5087,0,0,97a04c259a7da6b0eb13bd0d940d2df5ae422311799538d80f20cb07d97cb949,2025-06-26T18:58:14.280000
CVE-2025-50870,0,0,c3fdeb200a42a63439f1b32e1fbbce4b110e8956e6275a33a4f89c335822c564,2025-08-04T15:06:15.833000
-CVE-2025-50891,0,1,6491b137e0dfe616c1eacc9075e9422fbf4e8a9cd30edf988bd089497a353533,2025-09-18T13:15:35.793000
+CVE-2025-50891,0,0,6491b137e0dfe616c1eacc9075e9422fbf4e8a9cd30edf988bd089497a353533,2025-09-18T13:15:35.793000
CVE-2025-50892,0,0,d15de1989bc11360da04e4bc3e03ee1f32539ad055b56580e3f06b8bf5f39369,2025-09-11T17:14:10.147000
CVE-2025-50897,0,0,a9dfdef4679a3fe602026db4faa83511c684468f9763c0b0b0ce0174746e145a,2025-08-20T14:40:17.713000
CVE-2025-50900,0,0,8c26736a9e788034d47679754a4d14b00427911595e746839617709a1bb30e08,2025-08-26T14:15:39.020000
@@ -304377,7 +304460,7 @@ CVE-2025-53030,0,0,c7d2f5076fe0d4d909edc5233f435dac26b886d26ab86a4b64b713ba01515
CVE-2025-53031,0,0,a0de3ca71a32b18578f303667116707166aab49fcda79b4cdcb7021b6df3f48c,2025-07-24T20:34:58.503000
CVE-2025-53032,0,0,6c3320bad3b080a8768b96684f937e37c722fbc05dea27fcc03dac2169a2f32f,2025-07-24T20:35:43.353000
CVE-2025-5304,0,0,27c7f2edf9ea9d7b46be7f6eeec8234451bc5c2847f1212c43eda6372fcf7130,2025-07-07T14:47:29.020000
-CVE-2025-5305,0,1,d1696596b786ad441627a7638286da38b9dae22275f025298cc3b62401749f0b,2025-09-18T13:43:34.310000
+CVE-2025-5305,0,0,d1696596b786ad441627a7638286da38b9dae22275f025298cc3b62401749f0b,2025-09-18T13:43:34.310000
CVE-2025-5306,0,0,8e759a80e2ac17573f0771395d0fe0be685c345a3389988c1ab6b692f3cd05fc,2025-09-16T13:25:41.920000
CVE-2025-5307,0,0,7244ff154b85c92ca09019f8de869bb0541c220b74776be3851e4cfba38a0ca8,2025-05-30T16:31:03.107000
CVE-2025-53073,0,0,dc72ce506142801c8b0cea2579e988f3f6c38bb40bb41e7362bf91b362c4103c,2025-06-26T18:58:14.280000
@@ -305315,7 +305398,7 @@ CVE-2025-54233,0,0,9b14013bc2511806dfc06793d5702178c0c1db7ab1a06628f77055eb730a9
CVE-2025-54234,0,0,63b102b1f6b1c5d0f31f0c2e7f95f9ab1cc614ffc8e6fbb5d6903cec341c04e0,2025-08-21T20:55:34.953000
CVE-2025-54235,0,0,4c6e47535464eb5cac8c8712d883f6108cec41e891c1af59388fea6e2afee65a,2025-08-13T18:14:43.213000
CVE-2025-54236,0,0,597c90736b74e1371efbf1f8a45ceed31b5649bede9435a40c72d920bf6b2008,2025-09-10T13:35:00.263000
-CVE-2025-54237,0,1,f86cd71bb4266b1e9b06486eb24aa138c30d53f2219596e78679b21c5750c179,2025-09-18T13:38:39.070000
+CVE-2025-54237,0,0,f86cd71bb4266b1e9b06486eb24aa138c30d53f2219596e78679b21c5750c179,2025-09-18T13:38:39.070000
CVE-2025-54238,0,0,a36be64074d7d47b6190447bb92bfe557d52fcc438e1a77896e2e199d15e1917,2025-08-14T01:06:18.920000
CVE-2025-54239,0,0,9ad52d97af19a42000e5faa35316c0d255739384a3fc936923a9b36b4d0dd5ae,2025-09-12T14:29:06.223000
CVE-2025-5424,0,0,d8bab5ac57a00ec101c3134b14732d4532a6a47fc4bf5cdeb3768fab15f0c122,2025-06-18T15:15:23.703000
@@ -305343,7 +305426,7 @@ CVE-2025-54259,0,0,314fd3faeac9a67fc0fca8d649a7cf77dd3e64b2fda63a7aab75de2638899
CVE-2025-5426,0,0,91d69104043a6386cfca11e8e329e92c24335e5efeef3d1a43c9e13795e3442e,2025-06-18T15:15:05.470000
CVE-2025-54260,0,0,fad928f0022fc30ba8b14e9968fc633ee99f9eb5658dc25e6609316d8ac5e009,2025-09-12T15:01:41.767000
CVE-2025-54261,0,0,9261cd3e108a0fa288e4845d8ee91a77c093b9db7433449dca68d3ddb6944059,2025-09-12T18:53:47.660000
-CVE-2025-54262,0,1,583446d3b9de22d3ef42515af4efca9665e05c589fc102a08c503e5079b76074,2025-09-18T13:38:25.510000
+CVE-2025-54262,0,0,583446d3b9de22d3ef42515af4efca9665e05c589fc102a08c503e5079b76074,2025-09-18T13:38:25.510000
CVE-2025-5427,0,0,5f63d9ad9dc6404e6fb72008382c641e46396609fcc52c5828eb2252185ffd4c,2025-06-18T15:14:51.873000
CVE-2025-5428,0,0,2e7c423ec5ae3bf4368570058331740a674fc62a4682da3d065e5fa91ab978f5,2025-06-16T16:18:13.987000
CVE-2025-5429,0,0,4fb90f6f61f001b2df63d98ac4a6940b3b8387c064a27049429bbaa8520457eb,2025-06-18T15:14:39.320000
@@ -305406,7 +305489,7 @@ CVE-2025-54387,0,0,d72eee9f3527d23b72b43e5c872d413c541486ae93b7d3cdbf59b1e417916
CVE-2025-54388,0,0,92bd0b81131d0f06ed26e364f7ccb1846ee6c2c7e3b9f91c6f33ca5d26bbe540,2025-09-08T16:34:31.630000
CVE-2025-54389,0,0,0ec7a86844410b2b4705636f5baca1ce43db3311e58838b09bde1d01b71766b8,2025-08-19T19:11:20.650000
CVE-2025-5439,0,0,5393809746e167bdac62d8e2386c4e04df7737502cd4e1d8c350287b2fcd8f5a,2025-07-02T18:08:04.770000
-CVE-2025-54390,0,1,70386cd37ada325ebe886279007551f82eafd40fa021d99f492d8d27f5e65e0b,2025-09-18T13:43:34.310000
+CVE-2025-54390,0,0,70386cd37ada325ebe886279007551f82eafd40fa021d99f492d8d27f5e65e0b,2025-09-18T13:43:34.310000
CVE-2025-54391,0,0,9f20216d62c47a868668c8e638317aa691c277459bcfd2fdae3ec392d872c010,2025-09-17T14:18:55.093000
CVE-2025-54392,0,0,00b4aea27c66354e787cd98cef26f03267cc9473aa741edad352bc2be7240551,2025-08-11T14:46:23.540000
CVE-2025-54393,0,0,0b2e044aa56522988af96ecd8a62351d8e611187a97c3766421894bf7b45ff93,2025-08-11T14:46:30.703000
@@ -306006,7 +306089,7 @@ CVE-2025-55234,0,0,471c01baa46fe60507e58235ee47dedebdef4e0c51dd50c85aed7ad698cbe
CVE-2025-55236,0,0,9dbf240e000576aa388a3813d4fe0a35d8c4ccc684ad74f4708ef01850eabdf3,2025-09-12T14:47:55.667000
CVE-2025-55238,0,0,b1ad212e1665f349daf7798b1e446078508de00e74a14a07fc412186054ba7cc,2025-09-10T17:00:19.680000
CVE-2025-5524,0,0,9b54382a0d40419b36cb1a6dfd4d91e27c5e0b8cc8a8a2eaa1401782bff3e506,2025-06-23T20:16:59.783000
-CVE-2025-55241,0,0,34c20d3e2ed6b275e4facaf890703f472d47223520951718cd367e042174b8ad,2025-09-05T17:47:10.303000
+CVE-2025-55241,0,1,760b259411d1b51d07b0562a5b6d306380c7b5e905ea6a8141ae44104a806775,2025-09-18T14:15:50.110000
CVE-2025-55242,0,0,813da0f12f6793cc0257cf087e680325dd676219ba2aa4891eecc4be14cebb76,2025-09-05T17:47:10.303000
CVE-2025-55243,0,0,a04e1a315dce07c258384a45c3e5b2564b7cd320a5d9a2fc44cd1b9c64eba725,2025-09-11T17:14:25.240000
CVE-2025-55244,0,0,2564fe496671bfcca0e0ae3fcaf30c318adf602ed07bdc1c8c89bdd679c71ea2,2025-09-05T17:47:10.303000
@@ -306230,6 +306313,7 @@ CVE-2025-5588,0,0,f2de2123ce661e18a253375b07ab98eae21f0a928f6ef4ce36082985c7370c
CVE-2025-5589,0,0,6c79a04993e971b42452f3a0ae16618b76eb63bb362b0f3291c861226ed4734d,2025-06-16T12:32:18.840000
CVE-2025-5590,0,0,6716e39e14dca75da7b001f861b33c9910a40bed8e3e64e8d834c073ec799a31,2025-06-26T18:57:43.670000
CVE-2025-55904,0,0,292c27615a9e9c115a926b9ed5baf36909de90052e7ad0e47cd4f0e0e8b4eb81,2025-09-17T15:15:43.470000
+CVE-2025-55911,1,1,f9ed32e7805d5197423efc170acd0a59f976e87695f21c4e5c8112d75180113b,2025-09-18T15:15:38.083000
CVE-2025-5592,0,0,36c388f33c323490a93ebd79d5f124d5f4fdc10d946cc1144d6e587fb6694158,2025-06-09T15:02:45.030000
CVE-2025-5593,0,0,6df395e5fe3476beb67761792da6574eda83b6d9a337db7d77d384194417b8ee,2025-06-13T01:00:11.693000
CVE-2025-5594,0,0,83e7fdcfac2ba201d4fe551d7608819296af218dfeb5718bd91a2cdb5f7cbdd0,2025-06-13T00:58:21.617000
@@ -306343,7 +306427,7 @@ CVE-2025-5662,0,0,13b0e9eb543fdf837e585d27cf26a4fc713e76f1cf9d9e92a69010e02c783e
CVE-2025-5663,0,0,8c93d873d2b9bcbc305e1d9b46e20f6f681f336f769ee36ddc277777629edd2b,2025-06-06T18:43:14.380000
CVE-2025-56630,0,0,729cbeeb577d124be23f33245003dad97b206372edb1e4dc6e501140646d475b,2025-09-08T20:36:30.930000
CVE-2025-5664,0,0,074d167717e31a25a328ab1446dd36260b2abd74bcedd74ba2c593919d206734,2025-06-24T15:21:54.440000
-CVE-2025-56648,0,1,b0702de2eb8219e7403dbbb1055809903f9db12800a539afb9f35a8761d30fe3,2025-09-18T13:43:34.310000
+CVE-2025-56648,0,0,b0702de2eb8219e7403dbbb1055809903f9db12800a539afb9f35a8761d30fe3,2025-09-18T13:43:34.310000
CVE-2025-5665,0,0,2824619f1a9a35f45b2fa31c95baf28e5f64102ec35512ead930d2b494d05692,2025-06-24T15:22:02.157000
CVE-2025-5666,0,0,df69802ddbbbee8bd5aee5c58c228da8bb9c4009409caaefe51674350e6deb03,2025-06-24T15:22:09.833000
CVE-2025-5667,0,0,d35bdb249d68dd1985925a8f09b0a2978d873b01d77cebd14f7a75214490eb83,2025-06-24T15:22:20.200000
@@ -306394,7 +306478,7 @@ CVE-2025-5703,0,0,bfc110e215db4044492a701078e1f9e5e9c498c63eefa37ecccea8e912e2c2
CVE-2025-5704,0,0,61fe4f717ffdd3e0bc072a12abde42d2539cecd476b9e983237a0d42ed39dc33,2025-06-10T15:01:10.223000
CVE-2025-5705,0,0,8ff08853967923c427f10758ae4c72d50f3b210b4cfdb6cdf6fbd9f63adb1180,2025-06-10T15:00:58.353000
CVE-2025-57052,0,0,e9ad169ec2e910cf99aa195491c4ff4d415a727a8c80155fc0f30cae7c661f8b,2025-09-08T17:37:25.397000
-CVE-2025-57055,0,1,26ac63519a47fb82cb937b915550d785a136853d759edcfc6dd49600c03b4efc,2025-09-18T13:43:34.310000
+CVE-2025-57055,0,0,26ac63519a47fb82cb937b915550d785a136853d759edcfc6dd49600c03b4efc,2025-09-18T13:43:34.310000
CVE-2025-57057,0,0,92025e4957a4a3a181eb61883973f965350b2b9fd59d5e9d46802f3a85477710,2025-09-15T18:13:34.697000
CVE-2025-57058,0,0,e37c4915e0bdf4b7177566a86636aa0117f16108d2fe4dc6407fe29df58baf63,2025-09-15T18:14:03.890000
CVE-2025-57059,0,0,11bb2128c5c7ebb44f7573fd18edde9d8190c03b10ec8022872a194a4f9a4115,2025-09-15T18:14:18.027000
@@ -306475,6 +306559,7 @@ CVE-2025-5742,0,0,3f1f9aca7c2dca466be76bfa223583e3bd7a8a9038c62c6d71385533577fe1
CVE-2025-57425,0,0,5280d0aa20acc45f7cda83b7c3bf4d347063c962f0ffe22604f796c1e71651be,2025-09-04T18:34:38.040000
CVE-2025-5743,0,0,b8cc4e6373cb1ea9b0c8818fc6ee5b64bfaca611f01e23630053cdf010a8f3a5,2025-06-12T16:06:39.330000
CVE-2025-5745,0,0,3580be19c456f8a1a42e4194fda4fe5138a1c28c64f6ee9c28042cef6c57327d,2025-06-06T14:07:28.330000
+CVE-2025-57452,1,1,0365502a3aca9f1fda8c8609b9e002f18d7963e6ce0e89e2ace04874168097c4,2025-09-18T15:15:38.220000
CVE-2025-5746,0,0,056ea6c0a98547dc03e9ea5b7d2db7b23a8dcd4896e6644f25db46e7fea0be56,2025-07-03T15:13:53.147000
CVE-2025-5747,0,0,9410a6fcc6f1e9cd8c246cf721bbe4bfba0a8b250e3ca3f56d775e4424b1302f,2025-08-14T15:38:22.347000
CVE-2025-5748,0,0,39caf40af2aacd2cfc2b42317035d749c59ae8998a36cf4447a3f1abeb4e337b,2025-08-14T15:38:09.270000
@@ -306836,8 +306921,8 @@ CVE-2025-58421,0,0,0998f91bf71cfc5ebcf6c9d60cd7a260238b41e3e3b5d744915014ffec3cb
CVE-2025-58422,0,0,4ffe20835ffe87278344911f7fb3ccc99d05fd9f0d383b471d07e5c3d796aa79,2025-09-08T16:25:38.810000
CVE-2025-5843,0,0,b6364199423e5523e7158dcf634a29b05358f6970583ccf6788cad12452de9b6,2025-07-16T14:58:59.837000
CVE-2025-58430,0,0,f782bc001b2ae200bb02510ab65c0837d3698e86d92e48b229ba942ba1061bed,2025-09-11T17:14:25.240000
-CVE-2025-58431,0,1,e86dac595a69939d65bfc4c090a7ac301364f950aa474a4594c08cb7f2de7c5e,2025-09-18T13:43:34.310000
-CVE-2025-58432,0,1,3c36d70c0bf25790edae442969d6631fb1638144f1911ccffa6ae69bdcde7a1c,2025-09-18T13:43:34.310000
+CVE-2025-58431,0,0,e86dac595a69939d65bfc4c090a7ac301364f950aa474a4594c08cb7f2de7c5e,2025-09-18T13:43:34.310000
+CVE-2025-58432,0,0,3c36d70c0bf25790edae442969d6631fb1638144f1911ccffa6ae69bdcde7a1c,2025-09-18T13:43:34.310000
CVE-2025-58434,0,0,e58e6ba76cff66d14981b8f0fba3590c18406080399bb434fdee1b4ee1d44b62,2025-09-15T16:15:39.907000
CVE-2025-58435,0,0,911f44ff1ed9c17e40de6e7214bf8b6827472e9bf4db8828d64d71fc21d8bdd0,2025-09-11T17:14:25.240000
CVE-2025-58437,0,0,31ee6544c805c9d261927d4e8c268632cf63b234c1e8f74cbcd86334ac14ecc7,2025-09-08T16:25:38.810000
@@ -306849,7 +306934,7 @@ CVE-2025-58442,0,0,355928165b8cbdca1dd65a483eac7db736ed1d821bb4961eea9cce6d53daf
CVE-2025-58443,0,0,35ab2a05eefb0496857977e6e97a63156cf10501a0773977a20b7c2135402be8,2025-09-08T16:25:38.810000
CVE-2025-58444,0,0,73e0a441f22a88f242b4d165339a051077d902857990a8688debc428643d86b0,2025-09-09T16:28:43.660000
CVE-2025-58445,0,0,ec802a4ae0eba40a6d7140b9f1c4acb9aeddbe9c2345f732098470d415fad051,2025-09-10T19:43:08.493000
-CVE-2025-58446,0,0,c301748c3b4b0405c8c6ecfa832d6b4d4d3a8248b6801567c85115a931192699,2025-09-08T16:25:38.810000
+CVE-2025-58446,0,1,cc6c5749c7d0f4558de3edae3f04cf810fefb7e47401bfd73364314368b11ae3,2025-09-18T15:57:02.380000
CVE-2025-58447,0,0,5c93d450bf5942938abd2dc51a24778f316ea62a07ca30a8b43ffb63455803c0,2025-09-17T20:53:21.610000
CVE-2025-58448,0,0,4f2b9e9ff00c4f14b0299112489a861cf1d162a39c6693c809037414d3167620,2025-09-17T20:36:12.373000
CVE-2025-58449,0,0,38fa749d85cd6f8e690770f0cebaec894a44029208ac7e7d9d99623a4c785c5c,2025-09-09T16:28:43.660000
@@ -306968,14 +307053,14 @@ CVE-2025-58762,0,0,1a45b256b481dd23d5cfd0602483a2db2c540d667a5da35dd9286c8fce95d
CVE-2025-58763,0,0,56c838d5ad55f52998c1d685ab57961da41223880a72975de09eb95579fcd620,2025-09-11T17:14:25.240000
CVE-2025-58764,0,0,d3fc21dfa5095041d1247286a9df59fd0ee7d5efb7f0d4aa64f8cce886c82a62,2025-09-11T17:14:10.147000
CVE-2025-58765,0,0,53352420c5437deeaead7762f4ae08b2d687d0694ff480e3412abb2859f4ad9f,2025-09-11T17:14:25.240000
-CVE-2025-58766,0,1,7825087442698b0759fd33b4db143e071e6d5363315fb910651a764cd850d0a6,2025-09-18T13:43:34.310000
-CVE-2025-58767,0,1,bb3b2e2d2f7a1fc89a33346dc330990b582bf6ef2ff15b793699abc9617e96c3,2025-09-18T13:43:34.310000
+CVE-2025-58766,0,0,7825087442698b0759fd33b4db143e071e6d5363315fb910651a764cd850d0a6,2025-09-18T13:43:34.310000
+CVE-2025-58767,0,0,bb3b2e2d2f7a1fc89a33346dc330990b582bf6ef2ff15b793699abc9617e96c3,2025-09-18T13:43:34.310000
CVE-2025-58768,0,0,8182cd7d3078e2f9182e412acab84d67ec29a0e90de1b1b8646ae2dc0d9cee77,2025-09-11T17:14:25.240000
CVE-2025-5877,0,0,d0fc9d475beccd3a1a467515982c1f66a610522bd0dbdcaf601a57c1a88517bd,2025-07-02T19:17:43.003000
CVE-2025-5878,0,0,7460e28b521adf15f1e0947b351c873b699a9b031f986dc0aaec957b1b03014c,2025-06-30T18:38:23.493000
CVE-2025-58780,0,0,b352c8126dc059bdaaf56999ff90739eb2352451238619bfc4a5236e75f95e21,2025-09-08T21:15:34.090000
CVE-2025-58781,0,0,5551113e8038d80f654d940160936595945c00e2705d5895533de8ef48925810,2025-09-15T15:21:42.937000
-CVE-2025-58782,0,0,d218555c359b0be8c05be03018ed1a386b1fea89572399530c84e15eb17b25fc,2025-09-08T20:15:36.507000
+CVE-2025-58782,0,1,e620da4eefcedab35f9f08b998145e2659ba530bd196b9fabd6c1183d1004c75,2025-09-18T15:49:13.487000
CVE-2025-58783,0,0,24b8d4ee21a2b509516cade072389eb116099f316af7b2cae5e082ce47e4e4fa,2025-09-05T17:47:10.303000
CVE-2025-58784,0,0,9b988ce8ae2ae63ee076a987078e51fc302a6788e78d8998d158f9c47d5d3548,2025-09-05T17:47:10.303000
CVE-2025-58785,0,0,468c549db7e964e68283dfe3e0d7d973a2121b69c6c559730a6824c072144eca,2025-09-05T17:47:10.303000
@@ -307144,6 +307229,7 @@ CVE-2025-59037,0,0,3b03f8707eeef95611de2b2e135bc54030e336bf41ea66229e9233cb9b999
CVE-2025-59038,0,0,5b96dd83e9ac3194b1674854c3dc93f0779c34e61a2caa4861a702c31b440027,2025-09-11T17:14:10.147000
CVE-2025-59039,0,0,a74ea1e51bf3511c5a3a94ddb5fea83efe4b8dacd6130bca9fe84c668d52f2f2,2025-09-11T17:14:10.147000
CVE-2025-5904,0,0,db4898a012dd0898dbc3e4e633070e3c6a07c5f354ca34376bcc73e3e7fb7e22,2025-06-16T14:26:59.130000
+CVE-2025-59040,1,1,4370b59ae603a55cca4c048885b11e4d8787932fd75191b3a0baa62ea617a7f8,2025-09-18T15:15:38.370000
CVE-2025-59041,0,0,abb4e65301e1999c4ba9a3bbb2ebf5acfa500c695a726b72e7ccfe8b419f241c,2025-09-11T17:14:10.147000
CVE-2025-59042,0,0,0931877dad3c7edf2ae6edf8379b098d81d60795d2da9d611b2b727e39d17c35,2025-09-11T17:14:10.147000
CVE-2025-59044,0,0,3eef06b1c04e3e44fa725c59c0bc6993b95b225e3846b8a096c6c7103f268c14,2025-09-11T17:14:10.147000
@@ -307196,7 +307282,7 @@ CVE-2025-59270,0,0,673676ca9bee596f288896fffb67424ce737534e3c34b872c9730773d7d17
CVE-2025-5928,0,0,bf8e560b30d16961d3816817e86769462398f4dfd1c11ce3fc0a5a6f046bebeb,2025-06-16T12:32:18.840000
CVE-2025-5929,0,0,22ddf18d1b5be0427bfffe06c7c342a3ee4be212fd6ecf814d57608fd0af56fb,2025-07-08T11:32:50.840000
CVE-2025-5930,0,0,f247db24f36bcbf2f7d81e18a82d068f64b444dc019b1b0b868d92f5ff3fa36b,2025-06-16T12:32:18.840000
-CVE-2025-59304,0,1,ef8d3f570913e7cda02e5d28cd23699840827635d7275269130409f0e4d0e51a,2025-09-18T13:43:34.310000
+CVE-2025-59304,0,0,ef8d3f570913e7cda02e5d28cd23699840827635d7275269130409f0e4d0e51a,2025-09-18T13:43:34.310000
CVE-2025-59307,0,0,74259438c269f5b15ba157b909639cc3c3b75ce74711b5640e0569026c0dbd47,2025-09-17T14:18:55.093000
CVE-2025-5931,0,0,7ea6fa128fdebd640ce929e4ec70976863d6368ec84de5f873b44f53a8f3e222,2025-08-26T13:41:58.950000
CVE-2025-5932,0,0,2139f6b06237b79e72d4532bc8219346e6dc94ec5de4cc7ea77426914ccc3bb1,2025-07-07T16:03:18.250000
@@ -307208,22 +307294,22 @@ CVE-2025-59332,0,0,995b6243f6e93d46f7ddaa8e0175bd121ca22e3d582d726ae2031ca1ccc31
CVE-2025-59333,0,0,e21cb198e1b72bf73a53c55d59a6db26ca14925423a1612e50fb97e69cc1572c,2025-09-17T14:18:55.093000
CVE-2025-59334,0,0,45e16abed936ae3d024e4db5583a2540f7a8166f915bb238512ec1ed23cd3612,2025-09-17T14:18:55.093000
CVE-2025-59336,0,0,cf372aa2529344266b2c23088c3be1101076100796b736c4fdc862f1918941ed,2025-09-17T14:18:55.093000
-CVE-2025-59339,0,1,615f5af4da5dad3f9d87788762cf6dd4badbee4ea78ee30d4b0cc2eb807a4916,2025-09-18T13:43:34.310000
+CVE-2025-59339,0,0,615f5af4da5dad3f9d87788762cf6dd4badbee4ea78ee30d4b0cc2eb807a4916,2025-09-18T13:43:34.310000
CVE-2025-5934,0,0,2b04aea49be1b2e817d664c8d52ff126b146b95757a60bd9875f5715a4755cac,2025-06-20T13:11:11.560000
-CVE-2025-59340,0,1,de78b4b76ea60cf978c5405b42e6c014bf3347914b33285ce1853f2bd7a2a6ac,2025-09-18T13:43:34.310000
-CVE-2025-59341,0,1,d534543d38849499c87e51ecf9493d310b7bc15d84d5ae220f1c1a82064182cd,2025-09-18T13:43:34.310000
-CVE-2025-59342,0,1,324a8a6137c651742c494ff9196b1198f66625eaa4fab1fc601aef5bd54c8996,2025-09-18T13:43:34.310000
-CVE-2025-59345,0,1,5d14d7f167ea0ee84586cd20b68a7e25871acaba138d0fe6cb97e8ea07c69422,2025-09-18T13:43:34.310000
-CVE-2025-59346,0,1,c8f97f8c38cb5dd0eb80c9ba7bc2eb4dd9bd3becaeba49d66337d60300ba9876,2025-09-18T13:43:34.310000
-CVE-2025-59347,0,1,cb5e56f3f6868348ec61bb1f2a8130f5c3c12348fe3a3e8ec469aeeebd64ba07,2025-09-18T13:43:34.310000
-CVE-2025-59348,0,1,573e60e34c36c3b04416112fc63758c66732671201fee628bb6dd9e48c5a876a,2025-09-18T13:43:34.310000
-CVE-2025-59349,0,1,383730a8c88820cb96762ebee79eb14eda4cd6c146bfb8ef9ed7c55c30ad1125,2025-09-18T13:43:34.310000
+CVE-2025-59340,0,0,de78b4b76ea60cf978c5405b42e6c014bf3347914b33285ce1853f2bd7a2a6ac,2025-09-18T13:43:34.310000
+CVE-2025-59341,0,0,d534543d38849499c87e51ecf9493d310b7bc15d84d5ae220f1c1a82064182cd,2025-09-18T13:43:34.310000
+CVE-2025-59342,0,0,324a8a6137c651742c494ff9196b1198f66625eaa4fab1fc601aef5bd54c8996,2025-09-18T13:43:34.310000
+CVE-2025-59345,0,0,5d14d7f167ea0ee84586cd20b68a7e25871acaba138d0fe6cb97e8ea07c69422,2025-09-18T13:43:34.310000
+CVE-2025-59346,0,0,c8f97f8c38cb5dd0eb80c9ba7bc2eb4dd9bd3becaeba49d66337d60300ba9876,2025-09-18T13:43:34.310000
+CVE-2025-59347,0,0,cb5e56f3f6868348ec61bb1f2a8130f5c3c12348fe3a3e8ec469aeeebd64ba07,2025-09-18T13:43:34.310000
+CVE-2025-59348,0,0,573e60e34c36c3b04416112fc63758c66732671201fee628bb6dd9e48c5a876a,2025-09-18T13:43:34.310000
+CVE-2025-59349,0,0,383730a8c88820cb96762ebee79eb14eda4cd6c146bfb8ef9ed7c55c30ad1125,2025-09-18T13:43:34.310000
CVE-2025-5935,0,0,f27253ffd35342e4a77a594e09809f32cefb70812f89b61dacc27d87e675c26e,2025-06-12T16:06:39.330000
-CVE-2025-59350,0,1,ca01f4ea2153ed8be5af5638f8ba1bf1289d9ead345fa368e7f4e9a0c5f176a7,2025-09-18T13:43:34.310000
-CVE-2025-59351,0,1,6bbb6a51f1879a782c1dc15c6dbe29d145009064269150ddef14b479070c9e2f,2025-09-18T13:43:34.310000
-CVE-2025-59352,0,1,8b31a1d968ca46480df6e026847d490286fbb08f5bf61b79683eb2b09c22885a,2025-09-18T13:43:34.310000
-CVE-2025-59353,0,1,48ef6a0d89be0cc5cec51989122ebf407b643efe5fd68caa4f6a7bea5754006d,2025-09-18T13:43:34.310000
-CVE-2025-59354,0,1,2199763adf0c2aa3670f2a2f7ba9c79550d4d1691c327b1caccf15d34cd89fb6,2025-09-18T13:43:34.310000
+CVE-2025-59350,0,0,ca01f4ea2153ed8be5af5638f8ba1bf1289d9ead345fa368e7f4e9a0c5f176a7,2025-09-18T13:43:34.310000
+CVE-2025-59351,0,0,6bbb6a51f1879a782c1dc15c6dbe29d145009064269150ddef14b479070c9e2f,2025-09-18T13:43:34.310000
+CVE-2025-59352,0,0,8b31a1d968ca46480df6e026847d490286fbb08f5bf61b79683eb2b09c22885a,2025-09-18T13:43:34.310000
+CVE-2025-59353,0,0,48ef6a0d89be0cc5cec51989122ebf407b643efe5fd68caa4f6a7bea5754006d,2025-09-18T13:43:34.310000
+CVE-2025-59354,0,0,2199763adf0c2aa3670f2a2f7ba9c79550d4d1691c327b1caccf15d34cd89fb6,2025-09-18T13:43:34.310000
CVE-2025-59358,0,0,757e204da52fdfa428559c2fd7fa2d89430ed4081b1e6f8bb224862e051bd0d6,2025-09-15T15:21:42.937000
CVE-2025-59359,0,0,f3a87641795fa0d9094a2de02e24d19213fbc457738a8c7e2d60f85eb1d6c61e,2025-09-15T15:21:42.937000
CVE-2025-5936,0,0,5a2ef8dc5560fbcce6b1c9ab3c63719c3155e5810fde1167bb928311a7001c38,2025-07-07T15:55:10.410000
@@ -307243,11 +307329,13 @@ CVE-2025-59398,0,0,7d096f5ffdf57af2f88dc84b7369e623de1dc959cdc91d29c513292ff0aa0
CVE-2025-59399,0,0,5c6a1ec1278c34038811f1b747d49b610d632b05db32234a2424f05684f375e6,2025-09-16T12:49:16.060000
CVE-2025-5940,0,0,e934f4521d5519f04066b506472b3c339ac469931fdceb7d8db7faecdce1d721,2025-07-07T15:54:17.250000
CVE-2025-5941,0,0,9a62da19dd2e251401439c3253f0b7580e13b01fdb466cedc47c0aa27841a1e7,2025-08-14T13:11:53.633000
-CVE-2025-59410,0,1,bd2fa4ab92229ad9602cba9e4a8ca7b993e5cd4fa51dce414024a0d3ea5cf98b,2025-09-18T13:43:34.310000
-CVE-2025-59414,0,1,92d819ee372e5f275e6339c0faea93210cfde566c089a022161b72cee19f99fa,2025-09-18T13:43:34.310000
-CVE-2025-59415,0,1,e7c780a774982f6fc0aab75472d5e4f45a62d00aad3d988862ea44baa5b46fa3,2025-09-18T13:43:34.310000
-CVE-2025-59416,0,1,45c379fa01835c09e11baabda8e6c8dbe27dea0b3eab0b7f83c5c21a4611292f,2025-09-18T13:43:34.310000
+CVE-2025-59410,0,0,bd2fa4ab92229ad9602cba9e4a8ca7b993e5cd4fa51dce414024a0d3ea5cf98b,2025-09-18T13:43:34.310000
+CVE-2025-59414,0,0,92d819ee372e5f275e6339c0faea93210cfde566c089a022161b72cee19f99fa,2025-09-18T13:43:34.310000
+CVE-2025-59415,0,0,e7c780a774982f6fc0aab75472d5e4f45a62d00aad3d988862ea44baa5b46fa3,2025-09-18T13:43:34.310000
+CVE-2025-59416,0,0,45c379fa01835c09e11baabda8e6c8dbe27dea0b3eab0b7f83c5c21a4611292f,2025-09-18T13:43:34.310000
+CVE-2025-59417,1,1,685eee9c26d7cacb8c89f040144df057bc2375d0286389675b051c34cb9c504a,2025-09-18T15:15:38.557000
CVE-2025-5942,0,0,9a67d84942bda0fcd3c617faafa154ffcc880f1119ecef24c537b5296a7050db,2025-08-14T13:11:53.633000
+CVE-2025-59421,1,1,775d6e3f65d391f93520405bbc40e0f420a38c5151c697dff98cf14f1ec2f0d5,2025-09-18T15:15:38.743000
CVE-2025-5943,0,0,35b1a03e31f4997e71998954ee281c02ada0936b00fc64cfacb7aa84cfa29429,2025-06-12T16:06:29.520000
CVE-2025-59436,0,0,78bf56272b9a60ce0b6c199dc29700584d6f2c9ce09730577f346ae7e1d75569,2025-09-16T12:49:16.060000
CVE-2025-59437,0,0,6926a9bdd1a1ddbd7553ac591e281f6e1611507f5d64ae04c4588fd8ad0d328e,2025-09-16T12:49:16.060000
@@ -307513,7 +307601,7 @@ CVE-2025-6233,0,0,ce1649cf8400f942c9a36f1031fd640bdc5ab8c42dcf1c66a6e721f98fc16e
CVE-2025-6234,0,0,0491328da59a34702cb5ec5ccee49e9ec3370c2c41c6aa5eaeaf74439b88e196,2025-07-11T18:29:08.090000
CVE-2025-6235,0,0,15aa60a25f13853f46a3585303068a055bacbb485688e9254a06f03753675055,2025-07-22T13:06:07.260000
CVE-2025-6236,0,0,0cb993ee3e7e7466ae2b5d98ede34be9b66a8b69331ceea9820d8b08034c243a,2025-07-11T18:28:45.253000
-CVE-2025-6237,0,1,00f2e90c09cdaaf48bfacb1cdbe56428547ce32a69e0760bfb5fdd56ce2a1d26,2025-09-18T13:43:34.310000
+CVE-2025-6237,0,1,a95d39b10f73b25589f2dd88c860edd7374e4c6bd515aef7158d421c1d3f6de0,2025-09-18T14:15:50.343000
CVE-2025-6238,0,0,0b4a8297328a35a6644a25d4444a485ab8a646f907b585bc3b7934ba4c3f9f95,2025-08-13T19:34:26.383000
CVE-2025-6240,0,0,ba4da5fd605eca3c919532cf0a8a1661ebda5a87c35d4010c4dddeaa23d93e9a,2025-06-23T20:16:59.783000
CVE-2025-6241,0,0,8bee062251a7638b26ad8a87fe3736339d34bcf2a8f241dc34bb570fbf33d695,2025-07-30T19:15:49.213000
@@ -307635,7 +307723,7 @@ CVE-2025-6371,0,0,0a94c5b6f2c8de87b0afb6b9540898e3a2c0f16abf713b5d77d3a930178a3e
CVE-2025-6372,0,0,57bd725e58155b22002b2fe27e5ef880df740adaf81477b1018fce26c7c2183a,2025-06-25T20:09:56.243000
CVE-2025-6373,0,0,fc3916a56b7bebb7f4afd8db9623b0c0b7ca6d04a407f196c28a44bfa23b9548,2025-06-25T20:10:16.027000
CVE-2025-6374,0,0,52c2a3762c3febff3f7133c40521ec4205f6d9bad96026808a9cc8ac3a049376,2025-06-25T20:10:23.920000
-CVE-2025-6375,0,1,3c0218e75488f414527cefdd17b11896c81776544f6b2535e85e853188940de3,2025-09-18T13:38:16.413000
+CVE-2025-6375,0,0,3c0218e75488f414527cefdd17b11896c81776544f6b2535e85e853188940de3,2025-09-18T13:38:16.413000
CVE-2025-6376,0,0,87f4055808a16f1bc8fc7dd569fbcc32ea4817836bdf8cc1b15fdc995f254398,2025-07-11T18:35:53.330000
CVE-2025-6377,0,0,ba3054fbb65a50a5d08a5d5b714d5d1e90e671230206993f7c04c49b605588c4,2025-07-11T18:34:12.230000
CVE-2025-6378,0,0,c9f832cbc4a58e4712b3be36fa473dbfb776e558d71ae65da6d05b8879aaf667,2025-07-07T17:15:44.053000
@@ -307751,7 +307839,7 @@ CVE-2025-6495,0,0,c92a6b8c9de0f5ced4f2937213131eb0b68d12940f835ffaae94b2e1e770d2
CVE-2025-6496,0,0,41dc145f9a02ba783f2ed330080b0df94da07c3c130615dd33f85880edf7aacb,2025-06-23T20:16:21.633000
CVE-2025-6497,0,0,085a542a1200fd4aa6eb1522dd911d9a98ef8c5a6df00f38adf93948fb0f75bd,2025-06-23T20:16:21.633000
CVE-2025-6498,0,0,11f74f8785056a6e7a545d5e8f3aeedffc98d72b787c795f6ceff6211b41f5d2,2025-06-23T20:16:21.633000
-CVE-2025-6499,0,1,621f3cf77e1b458ebcd19ed863e5aad4281ed7c03f96f46067a613c832800727,2025-09-18T13:06:38.160000
+CVE-2025-6499,0,0,621f3cf77e1b458ebcd19ed863e5aad4281ed7c03f96f46067a613c832800727,2025-09-18T13:06:38.160000
CVE-2025-6500,0,0,7602f435f20916b80cbc1166133738fb4cac000fa6415e2f6accb678745e58c5,2025-06-27T16:58:31.480000
CVE-2025-6501,0,0,591def2261ed5fcc841b9c04799c6fa610cec6ce768ede25e1ae9a7521130f5f,2025-06-27T16:57:09.610000
CVE-2025-6502,0,0,ecb07cc46151c2d4b33c0de3fb40627a8c80f86f6e7f693ee66a4e5afe98bc9c,2025-06-27T16:56:37.683000
@@ -308995,36 +309083,36 @@ CVE-2025-7973,0,0,78669e8d8411efc965a5db22ead1afaba6f6120a39ddac4e42f239df83fc5c
CVE-2025-7974,0,0,19b71ab1a3c309c66156caa72a439a6f42f9987f117a73bcdd7cd75b75114792,2025-09-04T15:36:56.447000
CVE-2025-7975,0,0,f8701586b5dfb3d4244e72eb5cf9f60d6fd41a8293c2efaa308d49d0057b86fc,2025-09-04T15:36:56.447000
CVE-2025-7976,0,0,a9c4452d89067a18ccaa87391914f28e1d1ca43fe2da4b351f339d1771caedd5,2025-09-04T15:36:56.447000
-CVE-2025-7977,0,1,4e2e223a1d59e73d0d6b6c2fc499636dacd4975b5bd4407b1c061dbe733c4bb8,2025-09-18T13:43:34.310000
-CVE-2025-7978,0,1,111f3ae335dda2776d3f824c371fa499a9bde28901c7b845e7a7015d341b1ca7,2025-09-18T13:43:34.310000
-CVE-2025-7979,0,1,6c094a98a1f5e4b29e89826623739e8fe01bdadf1e18c695d027471872c0f862,2025-09-18T13:43:34.310000
-CVE-2025-7980,0,1,b074a29676630cc3393ba38603724ad5e413609c76e2540e26df7f6913f53fc1,2025-09-18T13:43:34.310000
-CVE-2025-7981,0,1,3fc18ddbabf0a26f738672aab73ecf23080e4dde6a945250e0225f21a9b867a9,2025-09-18T13:43:34.310000
-CVE-2025-7982,0,1,99a6f8edb36e98a1a6cf9c1e8953dd4cb056922d9b660774639642d7b0fa20b0,2025-09-18T13:43:34.310000
-CVE-2025-7983,0,1,2c448f72d1d4b93a802f95d7777999f0aa8f48d2bd76fde0bd1a0bd51e20f7f7,2025-09-18T13:43:34.310000
-CVE-2025-7984,0,1,883464d0b6c656c91c1a5c57c6a4687737a4501b6dd4de2eddf54797d989e74c,2025-09-18T13:43:34.310000
-CVE-2025-7985,0,1,ba34466c0981f95cc786d9b8189ba8ed7a5d4a5f54d618bde2d6684d8d7b00ca,2025-09-18T13:43:34.310000
-CVE-2025-7986,0,1,0ee2f40a3676e69cae48c1b15100d64c3779498c359f609f1dbd6243571bdd27,2025-09-18T13:43:34.310000
-CVE-2025-7987,0,1,a843a6684e36329a964e336e394ccba1950b0b34beb6e26b6168b0ffd59da5aa,2025-09-18T13:43:34.310000
-CVE-2025-7988,0,1,d1dff3883b88fd8fba6d8b722496211fe1b5b3827fecd2082edc72c28aa0d9fd,2025-09-18T13:43:34.310000
-CVE-2025-7989,0,1,d1eea07b016ce3d01a23ce870c57ca62ec809a9a4d2cb91367257637f116beb7,2025-09-18T13:43:34.310000
-CVE-2025-7990,0,1,bc00c4a4bda0680b1fdeb643dfe6e4cfcfd24fccb81c9c34634e27e88f8a4fe7,2025-09-18T13:43:34.310000
-CVE-2025-7991,0,1,1769b7782c76fe2d3968bad1024323c9bcf5f9aa4713d9bef297cbc1e95dc209,2025-09-18T13:43:34.310000
-CVE-2025-7992,0,1,4eb7a14652125c6e2c1db2f59d47386d7612167c28ca4ab51a8e6e09ac42d678,2025-09-18T13:43:34.310000
-CVE-2025-7993,0,1,4730c109ed8ca1c530774b9251950aae34ef9f739c8077ec7bef6e724510d508,2025-09-18T13:43:34.310000
-CVE-2025-7994,0,1,e9605ec0cddce0ab12c3a8723b563f1f6e7f01dd0d2e805d7c2b34ce68e90176,2025-09-18T13:43:34.310000
-CVE-2025-7995,0,1,f27433bbee9c20a4fe8e0fae6244fd56dc823dd38dd08c0b5b23df6e0675bff5,2025-09-18T13:43:34.310000
-CVE-2025-7996,0,1,aec36f49c3cb209d9edc1b5331b7f95345a06c4e31ba59a59aab91fc0f03b8b6,2025-09-18T13:43:34.310000
-CVE-2025-7997,0,1,7139af177c333410b8ba50b6e43c447e3b3828f94353f8f578ddb759924ba67c,2025-09-18T13:43:34.310000
-CVE-2025-7998,0,1,3ae23a169c5498780e7a79879969f25c2f6158f73e22b188f80cecf16edcf807,2025-09-18T13:43:34.310000
-CVE-2025-7999,0,1,793e63de5c3b10014ff104f96b4fc3f5e7623096fe03643776944db6ae9981c9,2025-09-18T13:43:34.310000
-CVE-2025-8000,0,1,14d8e85064a77916e26698bcab98df7e9a69d6e146de54f2568da1153f8db894,2025-09-18T13:43:34.310000
-CVE-2025-8001,0,1,5c4835d57778ebce2cb2ca410dd48766418b3c1270b78d835477c213dc1c793f,2025-09-18T13:43:34.310000
-CVE-2025-8002,0,1,5086537321eba252f553dea8a2c363a4acaca7ae5e7777e2c528f829eab43454,2025-09-18T13:43:34.310000
-CVE-2025-8003,0,1,d4205fb0d65410c84ba4d8370bf1d835b22bb8f78d623b71f4cb13a60664594d,2025-09-18T13:43:34.310000
-CVE-2025-8004,0,1,66b15f89b8f7ea63b03ff0667e6dd48cb3ea92b4fd8805840717cf8ffe3aec6f,2025-09-18T13:43:34.310000
-CVE-2025-8005,0,1,6f29bed222828e3871d8eb4ca1ca9f4297d90ea9e54edda551a9279cc3548d7d,2025-09-18T13:43:34.310000
-CVE-2025-8006,0,1,18fabb738e36f8fbe1f4ac41e5246bd2b914e2440e50cf116080d497c40ecf8c,2025-09-18T13:43:34.310000
+CVE-2025-7977,0,0,4e2e223a1d59e73d0d6b6c2fc499636dacd4975b5bd4407b1c061dbe733c4bb8,2025-09-18T13:43:34.310000
+CVE-2025-7978,0,0,111f3ae335dda2776d3f824c371fa499a9bde28901c7b845e7a7015d341b1ca7,2025-09-18T13:43:34.310000
+CVE-2025-7979,0,0,6c094a98a1f5e4b29e89826623739e8fe01bdadf1e18c695d027471872c0f862,2025-09-18T13:43:34.310000
+CVE-2025-7980,0,0,b074a29676630cc3393ba38603724ad5e413609c76e2540e26df7f6913f53fc1,2025-09-18T13:43:34.310000
+CVE-2025-7981,0,0,3fc18ddbabf0a26f738672aab73ecf23080e4dde6a945250e0225f21a9b867a9,2025-09-18T13:43:34.310000
+CVE-2025-7982,0,0,99a6f8edb36e98a1a6cf9c1e8953dd4cb056922d9b660774639642d7b0fa20b0,2025-09-18T13:43:34.310000
+CVE-2025-7983,0,0,2c448f72d1d4b93a802f95d7777999f0aa8f48d2bd76fde0bd1a0bd51e20f7f7,2025-09-18T13:43:34.310000
+CVE-2025-7984,0,0,883464d0b6c656c91c1a5c57c6a4687737a4501b6dd4de2eddf54797d989e74c,2025-09-18T13:43:34.310000
+CVE-2025-7985,0,0,ba34466c0981f95cc786d9b8189ba8ed7a5d4a5f54d618bde2d6684d8d7b00ca,2025-09-18T13:43:34.310000
+CVE-2025-7986,0,0,0ee2f40a3676e69cae48c1b15100d64c3779498c359f609f1dbd6243571bdd27,2025-09-18T13:43:34.310000
+CVE-2025-7987,0,0,a843a6684e36329a964e336e394ccba1950b0b34beb6e26b6168b0ffd59da5aa,2025-09-18T13:43:34.310000
+CVE-2025-7988,0,0,d1dff3883b88fd8fba6d8b722496211fe1b5b3827fecd2082edc72c28aa0d9fd,2025-09-18T13:43:34.310000
+CVE-2025-7989,0,0,d1eea07b016ce3d01a23ce870c57ca62ec809a9a4d2cb91367257637f116beb7,2025-09-18T13:43:34.310000
+CVE-2025-7990,0,0,bc00c4a4bda0680b1fdeb643dfe6e4cfcfd24fccb81c9c34634e27e88f8a4fe7,2025-09-18T13:43:34.310000
+CVE-2025-7991,0,0,1769b7782c76fe2d3968bad1024323c9bcf5f9aa4713d9bef297cbc1e95dc209,2025-09-18T13:43:34.310000
+CVE-2025-7992,0,0,4eb7a14652125c6e2c1db2f59d47386d7612167c28ca4ab51a8e6e09ac42d678,2025-09-18T13:43:34.310000
+CVE-2025-7993,0,0,4730c109ed8ca1c530774b9251950aae34ef9f739c8077ec7bef6e724510d508,2025-09-18T13:43:34.310000
+CVE-2025-7994,0,0,e9605ec0cddce0ab12c3a8723b563f1f6e7f01dd0d2e805d7c2b34ce68e90176,2025-09-18T13:43:34.310000
+CVE-2025-7995,0,0,f27433bbee9c20a4fe8e0fae6244fd56dc823dd38dd08c0b5b23df6e0675bff5,2025-09-18T13:43:34.310000
+CVE-2025-7996,0,0,aec36f49c3cb209d9edc1b5331b7f95345a06c4e31ba59a59aab91fc0f03b8b6,2025-09-18T13:43:34.310000
+CVE-2025-7997,0,0,7139af177c333410b8ba50b6e43c447e3b3828f94353f8f578ddb759924ba67c,2025-09-18T13:43:34.310000
+CVE-2025-7998,0,0,3ae23a169c5498780e7a79879969f25c2f6158f73e22b188f80cecf16edcf807,2025-09-18T13:43:34.310000
+CVE-2025-7999,0,0,793e63de5c3b10014ff104f96b4fc3f5e7623096fe03643776944db6ae9981c9,2025-09-18T13:43:34.310000
+CVE-2025-8000,0,0,14d8e85064a77916e26698bcab98df7e9a69d6e146de54f2568da1153f8db894,2025-09-18T13:43:34.310000
+CVE-2025-8001,0,0,5c4835d57778ebce2cb2ca410dd48766418b3c1270b78d835477c213dc1c793f,2025-09-18T13:43:34.310000
+CVE-2025-8002,0,0,5086537321eba252f553dea8a2c363a4acaca7ae5e7777e2c528f829eab43454,2025-09-18T13:43:34.310000
+CVE-2025-8003,0,0,d4205fb0d65410c84ba4d8370bf1d835b22bb8f78d623b71f4cb13a60664594d,2025-09-18T13:43:34.310000
+CVE-2025-8004,0,0,66b15f89b8f7ea63b03ff0667e6dd48cb3ea92b4fd8805840717cf8ffe3aec6f,2025-09-18T13:43:34.310000
+CVE-2025-8005,0,0,6f29bed222828e3871d8eb4ca1ca9f4297d90ea9e54edda551a9279cc3548d7d,2025-09-18T13:43:34.310000
+CVE-2025-8006,0,0,18fabb738e36f8fbe1f4ac41e5246bd2b914e2440e50cf116080d497c40ecf8c,2025-09-18T13:43:34.310000
CVE-2025-8007,0,0,9b11c87c57d8b7955f6dc85f2602ed64d1e9a51937dc5731ff2945debf0792e3,2025-09-17T15:47:58.823000
CVE-2025-8008,0,0,670a65fcd7eec330bcf01ee7a106b1acad67ec0cf58430d932e89c34f6311b2e,2025-09-17T15:42:27.340000
CVE-2025-8009,0,0,ce1bc46ceec626f1ea0f9505db2795980e72427228cd13af7a06b22bd970bcd8,2025-07-25T15:29:19.837000
@@ -309067,7 +309155,7 @@ CVE-2025-8061,0,0,a66369d1a1413110903372fb5ab5ef005c0729e2c8a222e5363484bc1cd4d0
CVE-2025-8062,0,0,4a75cf0c0c3542236830f19264e272b6ec6c2383ee20982c72f2aad7600dbcb5,2025-08-25T20:24:45.327000
CVE-2025-8064,0,0,33ce12da66f8e5ca5366101889be8cbe562fc4368931412ee187b49360433fed,2025-08-22T18:09:17.710000
CVE-2025-8066,0,0,56c3dc5e826830069a7e75cb34796a4946f616630b17f34a3ba2880f0e3063ef,2025-08-25T23:15:32.430000
-CVE-2025-8067,0,0,88b58128b39d79a5ea573d5a3f25f3b283e572266689dc00819933cd4a7e4436,2025-09-18T04:15:58.183000
+CVE-2025-8067,0,1,0501bb84aba97980e5130111883dc7ff124fdd5a8242dae5a50a1e35a7d9fb6f,2025-09-18T15:15:39.607000
CVE-2025-8068,0,0,8fc2a783fb4a74740f23e511e8c4cbf48910c72a503561523b753a1b82f89ee7,2025-08-13T19:32:40.243000
CVE-2025-8069,0,0,45f65a480b823a9d8f483139ef7dec4376b7a5398674ac7c6e34386243cd887e,2025-07-25T15:29:44.523000
CVE-2025-8070,0,0,3f7b62492fc7cfd56b797c052d3cbcd9ec67af3eb4efee11a82fb4dc3a13d2f4,2025-07-25T15:29:44.523000
@@ -309457,7 +309545,7 @@ CVE-2025-8556,0,0,b0c021106f7fd54047b796dcd0da5621bb7fcbe9c24db06373d670e7f58e46
CVE-2025-8557,0,0,cd166a400d8d7a4f8ad655d2918c52403f0bf0363fc2d3060c1635ac81ca7458,2025-09-15T15:22:38.297000
CVE-2025-8562,0,0,a05f8837c6ac504338414fb6422da78cde965367d502fd49cc6150cc9d339578,2025-08-25T20:24:45.327000
CVE-2025-8564,0,0,fde76f7a9642acffcafbac06b8c0aa02a0a045c77b84aaefa8815bda01538561,2025-09-08T16:25:38.810000
-CVE-2025-8565,0,1,caaf6ce8c7fd49533545a1edf4b9d7dfefdbe8a65bb2418ad12b86e2a42b7055,2025-09-18T13:43:34.310000
+CVE-2025-8565,0,0,caaf6ce8c7fd49533545a1edf4b9d7dfefdbe8a65bb2418ad12b86e2a42b7055,2025-09-18T13:43:34.310000
CVE-2025-8567,0,0,245823861a96fc96ee1e7e2b89b916ec47089622256e9a29cbf1cc77fe95d79f,2025-08-19T13:42:47.510000
CVE-2025-8568,0,0,69ccd842593127d7d48728ee29239b31cfcc10b01f694fb863ef21fa9f2f54fd,2025-08-12T14:25:33.177000
CVE-2025-8570,0,0,eab5396e6e83135a26dbe5d0402adecae4d56b2e17582ca8f316df57abf30f80,2025-09-11T17:14:10.147000
@@ -309746,7 +309834,7 @@ CVE-2025-8938,0,0,9835f9abd008172aa695b220ccd160388fb760bbcf0d0de676c67e871ea14b
CVE-2025-8939,0,0,5adc9c56ae47df76cb5be5dbefc2ea78319d726fa6c3a661d331c80929b47581,2025-08-19T18:35:22.420000
CVE-2025-8940,0,0,89d13362d11f7583e0a40f5d1c64bdbc1623d4d617435f03e507034d3b52e5b6,2025-08-19T18:42:24.900000
CVE-2025-8941,0,0,cdd9d2db16c8709f5a6709e1f178ff5167d8a3939ddc44e2534e11999180fb73,2025-09-15T18:15:40.257000
-CVE-2025-8942,0,1,b0c0f4bbfe6f23585ed11ef15c31d7c76c368dc6bdfe8567e110c7fbcea6c67b,2025-09-18T13:43:34.310000
+CVE-2025-8942,0,0,b0c0f4bbfe6f23585ed11ef15c31d7c76c368dc6bdfe8567e110c7fbcea6c67b,2025-09-18T13:43:34.310000
CVE-2025-8943,0,0,969e8d5edf13573ec44b5baba5bd7762ae3728e5b188af09dd8a59705dfecf3e,2025-08-18T17:15:31.690000
CVE-2025-8944,0,0,9cfff69e3a02e284559aa1750bf8563639871f150bc30aff65fde87f12d05695,2025-09-05T17:47:10.303000
CVE-2025-8946,0,0,e875cef285eaa22a24aee7080ea4321a47e56c665c4eab9390771855f6cced7b,2025-08-14T17:41:38.477000
@@ -309853,7 +309941,7 @@ CVE-2025-9073,0,0,7c603c64871735941c7964ec6dad57b8570e77ded67467649a5f864765a09f
CVE-2025-9074,0,0,0f7f932f26664f74a5d866f9dce0f8dfe44f3c3391f21d99deea7ef732868253,2025-08-22T14:15:47.790000
CVE-2025-9076,0,0,9f2666b57ff11b2ca257904c51cc14f803bf713781fdb33e4ba7c3f50ca6bbf5,2025-09-15T15:21:42.937000
CVE-2025-9078,0,0,335318544e72942fe8b53cc51ab6f6e6e121a52e950d5560d8d10799f53407df,2025-09-16T15:58:12.830000
-CVE-2025-9083,0,1,1b6cf8687ead5b0a85e0c1245bfce2e9ef8a906cf41740b296d6f09537bae332,2025-09-18T13:43:34.310000
+CVE-2025-9083,0,0,1b6cf8687ead5b0a85e0c1245bfce2e9ef8a906cf41740b296d6f09537bae332,2025-09-18T13:43:34.310000
CVE-2025-9084,0,0,ca234a1a239647d000bb2ed51ece5fe4473d260c70d132cc34b31b81c67814d5,2025-09-16T15:59:24.377000
CVE-2025-9085,0,0,2d5fe8a0e0e814f44471d24f7037ed440cae8bd651d4e7adae78a265dd69aa38,2025-09-08T16:25:38.810000
CVE-2025-9086,0,0,06a132c7e0c8d4f5ad8dedf7f536e0b2aca5e429f995eac8cafffe8051d8478e,2025-09-15T15:21:42.937000
@@ -310224,7 +310312,7 @@ CVE-2025-9652,0,0,d2c61ab15d0a83afe9f73d7e888ddbe4db1d0f5c0f7f3132f31e9a960f58a3
CVE-2025-9653,0,0,ce8e0d1074411add5973f8003b785ff17b215120e3c9731b3f26085d2a2ad73a,2025-09-04T18:16:56.853000
CVE-2025-9654,0,0,607d8d4f2cab152ac6a71185c836334346fec269e6ea487fcab76473a6eef0e7,2025-08-29T16:24:29.730000
CVE-2025-9655,0,0,e77e94d39ecd767b86085deb8f8018d6e067b531c64d3225e31a71f205038de0,2025-09-16T16:34:34.900000
-CVE-2025-9656,0,0,0add1ad856002ad609364f75f2fd3cccef4754bafa653fd89e88474a3f72cfbf,2025-08-29T16:24:29.730000
+CVE-2025-9656,0,1,46f762aa7082bfc88540a46ed6bcb9d021c04f82160536e4a978372cdb5b43a2,2025-09-18T14:39:00.430000
CVE-2025-9657,0,0,da5558009ba2c3095e78e8cb8f641edaa13623ce863cceebed6c0baa351f2b1b,2025-09-16T16:32:41.250000
CVE-2025-9658,0,0,b6ab2d5294f850c5f7c76c87889fc9bb3e727f72e0015395d62246ebea1f8b1e,2025-09-16T16:27:19.240000
CVE-2025-9659,0,0,7646692b74cfe603af72f701a823bc75c7d2390d9649f36e2adbc28217875d82,2025-09-16T16:19:41.803000
@@ -310403,7 +310491,7 @@ CVE-2025-9855,0,0,041d9a04cb0eb8462323e9ad0f3eca89bbe99c11f10213c0d3fc13c54fe501
CVE-2025-9857,0,0,f8e8c23a9d8f9e5509372920ceb13a58eed188efa5394379da117adb11ef2f5d,2025-09-11T17:14:10.147000
CVE-2025-9860,0,0,1e392b26f079a5aa6d04f19fb350731b088c588ea72bef896e26fcdca3b1d514,2025-09-11T17:14:10.147000
CVE-2025-9861,0,0,9a4bad851379aca2f322036b75d8bd41822e48856005f90c8ce3a89e274b9c38,2025-09-11T17:14:10.147000
-CVE-2025-9862,0,1,7cec63d18e46671ccd7f98bd7c55df26149d5d9ad887c777d2142ca15ca997d3,2025-09-18T13:43:34.310000
+CVE-2025-9862,0,0,7cec63d18e46671ccd7f98bd7c55df26149d5d9ad887c777d2142ca15ca997d3,2025-09-18T13:43:34.310000
CVE-2025-9864,0,0,e5190da03fa5e6ce512172ab25598ca1fcad265c2c07162bdf4b7d87ba3a7f28,2025-09-04T16:12:52.660000
CVE-2025-9865,0,0,e7579e3ed0ba8f694e1e5bf8ba1ca8cdef328d24dd2b4e180ed19da3e3e32ef7,2025-09-04T16:12:54.513000
CVE-2025-9866,0,0,cc9671900d0c7aab355c37b2d1aaed960f92d2d62255e9b00c3366f164de6564,2025-09-04T16:12:56.293000
@@ -310451,7 +310539,7 @@ CVE-2025-9971,0,0,7f876bd170f14b1feb7ae560049c9f4e9a3be104d4d2460ee327aa5029e9d1
CVE-2025-9972,0,0,bcdcc0fd3aa7828af38b5c76817badc8364cc33b93c3bfb37fddf005a5756cf0,2025-09-17T14:18:55.093000
CVE-2025-9979,0,0,1c484ce9f3590c3fac34599a605eebea346d1c16468e0dda6a414f42f9beac64,2025-09-11T17:14:10.147000
CVE-2025-9990,0,0,cd6edb8c776c89f93d70b4fc2ebf7415e6ce8be4f12373137c89bb18f46a9185,2025-09-05T17:47:10.303000
-CVE-2025-9992,0,1,67600de4cfcaa488589f1f0af32fbc55874127240d4611401d85f822ffd0b269,2025-09-18T13:43:34.310000
+CVE-2025-9992,0,0,67600de4cfcaa488589f1f0af32fbc55874127240d4611401d85f822ffd0b269,2025-09-18T13:43:34.310000
CVE-2025-9994,0,0,4b7aec8fbfee8dfe4b760faaebf9f1e4c1aa6ee75c01a4f4520b558102464a14,2025-09-10T14:15:44.493000
CVE-2025-9996,0,0,51ff89534a52b84eed41fa9b7c658954653a6406757ffab82f311cbde38f6dc0,2025-09-11T17:14:25.240000
CVE-2025-9997,0,0,580982e2edcfc0f3a33559b17b7dd55be1cfb2a80ba33e66cd76ccfeb892006b,2025-09-11T17:14:10.147000