diff --git a/CVE-2017/CVE-2017-03xx/CVE-2017-0358.json b/CVE-2017/CVE-2017-03xx/CVE-2017-0358.json index 179b3761bca..12eb91baaea 100644 --- a/CVE-2017/CVE-2017-03xx/CVE-2017-0358.json +++ b/CVE-2017/CVE-2017-03xx/CVE-2017-0358.json @@ -2,7 +2,7 @@ "id": "CVE-2017-0358", "sourceIdentifier": "security@debian.org", "published": "2018-04-13T15:29:00.397", - "lastModified": "2024-11-21T03:02:49.720", + "lastModified": "2025-12-04T16:15:48.560", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-269" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-269" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-111xx/CVE-2017-11185.json b/CVE-2017/CVE-2017-111xx/CVE-2017-11185.json index 56e1af6b7b8..e8c78c4c5e5 100644 --- a/CVE-2017/CVE-2017-111xx/CVE-2017-11185.json +++ b/CVE-2017/CVE-2017-111xx/CVE-2017-11185.json @@ -2,7 +2,7 @@ "id": "CVE-2017-11185", "sourceIdentifier": "cve@mitre.org", "published": "2017-08-18T17:29:01.497", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:15:49.337", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-476" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-128xx/CVE-2017-12893.json b/CVE-2017/CVE-2017-128xx/CVE-2017-12893.json index 121d088ce97..b733846e60e 100644 --- a/CVE-2017/CVE-2017-128xx/CVE-2017-12893.json +++ b/CVE-2017/CVE-2017-128xx/CVE-2017-12893.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12893", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.187", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:15:50.613", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-128xx/CVE-2017-12894.json b/CVE-2017/CVE-2017-128xx/CVE-2017-12894.json index 0e15748c466..7aedc1e55ec 100644 --- a/CVE-2017/CVE-2017-128xx/CVE-2017-12894.json +++ b/CVE-2017/CVE-2017-128xx/CVE-2017-12894.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12894", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.247", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:15:52.503", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-128xx/CVE-2017-12895.json b/CVE-2017/CVE-2017-128xx/CVE-2017-12895.json index fb2c0bb489a..19276a23c16 100644 --- a/CVE-2017/CVE-2017-128xx/CVE-2017-12895.json +++ b/CVE-2017/CVE-2017-128xx/CVE-2017-12895.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12895", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.280", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:15:53.290", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-128xx/CVE-2017-12896.json b/CVE-2017/CVE-2017-128xx/CVE-2017-12896.json index 248e8d346d1..deada5e00a3 100644 --- a/CVE-2017/CVE-2017-128xx/CVE-2017-12896.json +++ b/CVE-2017/CVE-2017-128xx/CVE-2017-12896.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12896", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.327", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:15:53.723", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -74,6 +94,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-128xx/CVE-2017-12897.json b/CVE-2017/CVE-2017-128xx/CVE-2017-12897.json index d346152ee57..ac2dc1b4cee 100644 --- a/CVE-2017/CVE-2017-128xx/CVE-2017-12897.json +++ b/CVE-2017/CVE-2017-128xx/CVE-2017-12897.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12897", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.357", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:15:54.117", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-128xx/CVE-2017-12898.json b/CVE-2017/CVE-2017-128xx/CVE-2017-12898.json index 4dd5fe520a3..8bbf2f8bcbd 100644 --- a/CVE-2017/CVE-2017-128xx/CVE-2017-12898.json +++ b/CVE-2017/CVE-2017-128xx/CVE-2017-12898.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12898", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.387", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:15:56.520", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-128xx/CVE-2017-12899.json b/CVE-2017/CVE-2017-128xx/CVE-2017-12899.json index f99884c6afa..dde44ab52e2 100644 --- a/CVE-2017/CVE-2017-128xx/CVE-2017-12899.json +++ b/CVE-2017/CVE-2017-128xx/CVE-2017-12899.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12899", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.437", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:15:57.487", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -74,6 +94,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-129xx/CVE-2017-12901.json b/CVE-2017/CVE-2017-129xx/CVE-2017-12901.json index 42c80920011..f08fed7254b 100644 --- a/CVE-2017/CVE-2017-129xx/CVE-2017-12901.json +++ b/CVE-2017/CVE-2017-129xx/CVE-2017-12901.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12901", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.513", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:15:57.943", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-129xx/CVE-2017-12902.json b/CVE-2017/CVE-2017-129xx/CVE-2017-12902.json index 7ff94f0ec20..abc45030117 100644 --- a/CVE-2017/CVE-2017-129xx/CVE-2017-12902.json +++ b/CVE-2017/CVE-2017-129xx/CVE-2017-12902.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12902", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.560", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:15:58.453", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -74,6 +94,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-129xx/CVE-2017-12985.json b/CVE-2017/CVE-2017-129xx/CVE-2017-12985.json index aa16f26fe18..4aa99ad10f8 100644 --- a/CVE-2017/CVE-2017-129xx/CVE-2017-12985.json +++ b/CVE-2017/CVE-2017-129xx/CVE-2017-12985.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12985", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.590", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:15:58.810", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-129xx/CVE-2017-12990.json b/CVE-2017/CVE-2017-129xx/CVE-2017-12990.json index 883d831d91f..edb4797c066 100644 --- a/CVE-2017/CVE-2017-129xx/CVE-2017-12990.json +++ b/CVE-2017/CVE-2017-129xx/CVE-2017-12990.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12990", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.763", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:01.430", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-835" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-129xx/CVE-2017-12992.json b/CVE-2017/CVE-2017-129xx/CVE-2017-12992.json index a1989a052e9..0e90ddd416e 100644 --- a/CVE-2017/CVE-2017-129xx/CVE-2017-12992.json +++ b/CVE-2017/CVE-2017-129xx/CVE-2017-12992.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12992", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.827", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:01.917", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-129xx/CVE-2017-12993.json b/CVE-2017/CVE-2017-129xx/CVE-2017-12993.json index e02becbb44f..52a0519cd60 100644 --- a/CVE-2017/CVE-2017-129xx/CVE-2017-12993.json +++ b/CVE-2017/CVE-2017-129xx/CVE-2017-12993.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12993", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.857", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:02.257", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-129xx/CVE-2017-12994.json b/CVE-2017/CVE-2017-129xx/CVE-2017-12994.json index 77066879834..5921253dc40 100644 --- a/CVE-2017/CVE-2017-129xx/CVE-2017-12994.json +++ b/CVE-2017/CVE-2017-129xx/CVE-2017-12994.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12994", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.903", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:02.727", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-129xx/CVE-2017-12995.json b/CVE-2017/CVE-2017-129xx/CVE-2017-12995.json index f806a09b167..81d0bed6cfa 100644 --- a/CVE-2017/CVE-2017-129xx/CVE-2017-12995.json +++ b/CVE-2017/CVE-2017-129xx/CVE-2017-12995.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12995", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.937", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:03.253", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-835" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-129xx/CVE-2017-12996.json b/CVE-2017/CVE-2017-129xx/CVE-2017-12996.json index 361b4a0f628..4f1bd21c96f 100644 --- a/CVE-2017/CVE-2017-129xx/CVE-2017-12996.json +++ b/CVE-2017/CVE-2017-129xx/CVE-2017-12996.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12996", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.967", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:05.493", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-129xx/CVE-2017-12997.json b/CVE-2017/CVE-2017-129xx/CVE-2017-12997.json index 5530af10952..7222765ed74 100644 --- a/CVE-2017/CVE-2017-129xx/CVE-2017-12997.json +++ b/CVE-2017/CVE-2017-129xx/CVE-2017-12997.json @@ -2,7 +2,7 @@ "id": "CVE-2017-12997", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:00.997", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:05.973", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-835" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13000.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13000.json index 101876f03f5..837c6308ca0 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13000.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13000.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13000", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:01.137", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:06.317", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13001.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13001.json index 0d0547ecfba..06dcd409fe5 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13001.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13001.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13001", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:01.247", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:06.633", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13002.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13002.json index 0278d55a699..4954d1f1d7f 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13002.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13002.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13002", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:01.280", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:06.927", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13006.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13006.json index f02b699f8fa..145fb42bf41 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13006.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13006.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13006", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:01.513", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:07.380", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13010.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13010.json index 61c51a72050..d714ecd9334 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13010.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13010.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13010", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:01.637", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:07.707", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13013.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13013.json index dbe78d5c45a..db50d22605d 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13013.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13013.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13013", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:01.733", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:09.447", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13014.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13014.json index 3a93f21268e..b9f9adb5c69 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13014.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13014.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13014", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:01.763", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:09.673", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13015.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13015.json index 745db317281..44430b2c833 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13015.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13015.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13015", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:01.793", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:09.933", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13016.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13016.json index 145cd1ac090..c86f80f98eb 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13016.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13016.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13016", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:01.827", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:10.197", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13017.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13017.json index b8d2ee81e1d..762c6c6434e 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13017.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13017.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13017", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:01.857", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:10.613", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13019.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13019.json index bd85ba0a74e..5bb77ac2596 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13019.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13019.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13019", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:01.937", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:10.900", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13020.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13020.json index cc9d331ed1e..6684dd288e5 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13020.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13020.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13020", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:01.967", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:11.177", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -74,6 +94,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13021.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13021.json index d64faa2d4a6..eb6162bf5b8 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13021.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13021.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13021", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:01.997", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:11.437", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13022.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13022.json index 872c4e0fe70..8a7d8a6a784 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13022.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13022.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13022", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:02.030", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:11.703", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13024.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13024.json index be489765b80..02d6abee2ef 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13024.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13024.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13024", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:02.137", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:12.170", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -74,6 +94,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13025.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13025.json index ed6dc73e724..572c3e43b62 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13025.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13025.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13025", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:02.187", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:12.653", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13028.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13028.json index 69bc5715822..51a108a24fc 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13028.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13028.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13028", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:02.280", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:12.930", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -74,6 +94,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13031.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13031.json index 4c21c4d8de6..7f998087a17 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13031.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13031.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13031", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:02.387", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:13.227", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13034.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13034.json index 2ad8e0b082d..eac63bdfea8 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13034.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13034.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13034", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:02.497", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:13.503", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13035.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13035.json index 4fe25a80599..163566ccf4e 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13035.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13035.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13035", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:02.547", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T16:16:13.957", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13038.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13038.json index 93fae192145..f6dfda4811f 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13038.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13038.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13038", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:02.637", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T15:15:48.930", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13040.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13040.json index af5c189e42f..55bb7869759 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13040.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13040.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13040", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:02.717", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T15:15:50.010", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13041.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13041.json index 1da93251108..87a85dc5a3b 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13041.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13041.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13041", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:02.747", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T15:15:50.300", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13045.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13045.json index 2cb61094bb3..c3a069e49e2 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13045.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13045.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13045", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:02.887", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T15:15:50.750", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13047.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13047.json index ee1d39efb11..48a764e6a8a 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13047.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13047.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13047", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:02.950", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T15:15:51.067", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13048.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13048.json index cc8fc2a1c1c..81d90f7db4b 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13048.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13048.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13048", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:02.997", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T15:15:51.347", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13050.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13050.json index bcbc2142ed7..7d578ddc8eb 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13050.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13050.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13050", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:03.077", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T15:15:51.647", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13053.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13053.json index 825ed7a356b..59930c15679 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13053.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13053.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13053", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:03.187", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T15:15:51.920", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13054.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13054.json index faefc8eed12..7fe5a6bf223 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13054.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13054.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13054", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:03.217", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T15:15:52.190", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-130xx/CVE-2017-13055.json b/CVE-2017/CVE-2017-130xx/CVE-2017-13055.json index 5fb0495fdba..11cb2a07f4f 100644 --- a/CVE-2017/CVE-2017-130xx/CVE-2017-13055.json +++ b/CVE-2017/CVE-2017-130xx/CVE-2017-13055.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13055", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:03.247", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T15:15:52.473", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-136xx/CVE-2017-13687.json b/CVE-2017/CVE-2017-136xx/CVE-2017-13687.json index a5cfc0b7a31..a4d993e6cc4 100644 --- a/CVE-2017/CVE-2017-136xx/CVE-2017-13687.json +++ b/CVE-2017/CVE-2017-136xx/CVE-2017-13687.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13687", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:03.297", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T15:15:52.917", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 5.9 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -74,6 +94,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-136xx/CVE-2017-13688.json b/CVE-2017/CVE-2017-136xx/CVE-2017-13688.json index 9f6d3a24925..2b48aac3827 100644 --- a/CVE-2017/CVE-2017-136xx/CVE-2017-13688.json +++ b/CVE-2017/CVE-2017-136xx/CVE-2017-13688.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13688", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:03.340", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T15:15:53.410", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-136xx/CVE-2017-13689.json b/CVE-2017/CVE-2017-136xx/CVE-2017-13689.json index bef1d5a153d..05af98c72ca 100644 --- a/CVE-2017/CVE-2017-136xx/CVE-2017-13689.json +++ b/CVE-2017/CVE-2017-136xx/CVE-2017-13689.json @@ -2,7 +2,7 @@ "id": "CVE-2017-13689", "sourceIdentifier": "cve@mitre.org", "published": "2017-09-14T06:29:03.373", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T15:15:53.663", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-125" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] } ], "configurations": [ diff --git a/CVE-2017/CVE-2017-13xx/CVE-2017-1303.json b/CVE-2017/CVE-2017-13xx/CVE-2017-1303.json index d1a4cf08a23..d99658de361 100644 --- a/CVE-2017/CVE-2017-13xx/CVE-2017-1303.json +++ b/CVE-2017/CVE-2017-13xx/CVE-2017-1303.json @@ -2,7 +2,7 @@ "id": "CVE-2017-1303", "sourceIdentifier": "psirt@us.ibm.com", "published": "2017-07-31T21:29:00.533", - "lastModified": "2025-04-20T01:37:25.860", + "lastModified": "2025-12-04T15:15:53.940", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [ @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ], "cvssMetricV30": [ { "source": "nvd@nist.gov", @@ -74,6 +96,16 @@ "value": "CWE-79" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] } ], "configurations": [ diff --git a/CVE-2022/CVE-2022-502xx/CVE-2022-50296.json b/CVE-2022/CVE-2022-502xx/CVE-2022-50296.json index 4b568d81627..d08f5687614 100644 --- a/CVE-2022/CVE-2022-502xx/CVE-2022-50296.json +++ b/CVE-2022/CVE-2022-502xx/CVE-2022-50296.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50296", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:40.987", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:34:09.233", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,43 +11,172 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK\n\nWhen CONFIG_CPUMASK_OFFSTACK and CONFIG_DEBUG_PER_CPU_MAPS is selected,\ncpu_max_bits_warn() generates a runtime warning similar as below while\nwe show /proc/cpuinfo. Fix this by using nr_cpu_ids (the runtime limit)\ninstead of NR_CPUS to iterate CPUs.\n\n[ 3.052463] ------------[ cut here ]------------\n[ 3.059679] WARNING: CPU: 3 PID: 1 at include/linux/cpumask.h:108 show_cpuinfo+0x5e8/0x5f0\n[ 3.070072] Modules linked in: efivarfs autofs4\n[ 3.076257] CPU: 0 PID: 1 Comm: systemd Not tainted 5.19-rc5+ #1052\n[ 3.099465] Stack : 9000000100157b08 9000000000f18530 9000000000cf846c 9000000100154000\n[ 3.109127] 9000000100157a50 0000000000000000 9000000100157a58 9000000000ef7430\n[ 3.118774] 90000001001578e8 0000000000000040 0000000000000020 ffffffffffffffff\n[ 3.128412] 0000000000aaaaaa 1ab25f00eec96a37 900000010021de80 900000000101c890\n[ 3.138056] 0000000000000000 0000000000000000 0000000000000000 0000000000aaaaaa\n[ 3.147711] ffff8000339dc220 0000000000000001 0000000006ab4000 0000000000000000\n[ 3.157364] 900000000101c998 0000000000000004 9000000000ef7430 0000000000000000\n[ 3.167012] 0000000000000009 000000000000006c 0000000000000000 0000000000000000\n[ 3.176641] 9000000000d3de08 9000000001639390 90000000002086d8 00007ffff0080286\n[ 3.186260] 00000000000000b0 0000000000000004 0000000000000000 0000000000071c1c\n[ 3.195868] ...\n[ 3.199917] Call Trace:\n[ 3.203941] [<90000000002086d8>] show_stack+0x38/0x14c\n[ 3.210666] [<9000000000cf846c>] dump_stack_lvl+0x60/0x88\n[ 3.217625] [<900000000023d268>] __warn+0xd0/0x100\n[ 3.223958] [<9000000000cf3c90>] warn_slowpath_fmt+0x7c/0xcc\n[ 3.231150] [<9000000000210220>] show_cpuinfo+0x5e8/0x5f0\n[ 3.238080] [<90000000004f578c>] seq_read_iter+0x354/0x4b4\n[ 3.245098] [<90000000004c2e90>] new_sync_read+0x17c/0x1c4\n[ 3.252114] [<90000000004c5174>] vfs_read+0x138/0x1d0\n[ 3.258694] [<90000000004c55f8>] ksys_read+0x70/0x100\n[ 3.265265] [<9000000000cfde9c>] do_syscall+0x7c/0x94\n[ 3.271820] [<9000000000202fe4>] handle_syscall+0xc4/0x160\n[ 3.281824] ---[ end trace 8b484262b4b8c24c ]---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.9.331", + "matchCriteriaId": "F5B7C986-E6CA-41ED-A833-EA73FCF421D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.296", + "matchCriteriaId": "1927ABC6-E0D2-478F-B103-B982A42D1158" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.262", + "matchCriteriaId": "D6B62970-1FAD-4ED6-930A-23E26A8D2E08" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.220", + "matchCriteriaId": "125F7133-B3B7-4175-8CF3-FF0845483254" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.150", + "matchCriteriaId": "C495821C-2A71-4F09-BED8-6A6EB4C9BA27" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.75", + "matchCriteriaId": "6D945F46-F32F-4C09-8400-C3477E22A9FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.17", + "matchCriteriaId": "19B4C3A4-E5C3-41DC-BB14-BE72858E7D35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.0.3", + "matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/16c546e148fa6d14a019431436a6f7b4087dbccd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2e3863cc02c156b51b50592d43ffa6a13b680b0d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5177bdc38eaa1c1ca6302214ab06913540cd00a2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6a73e6edcbf3cdd82796dcdf0c0f5fe5d91021af", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7efe61dc6aa45aab8a40e304fa2dae21e33b0db4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/844748412be03a236dcf4a208b588162a275e189", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8f96aa67c2ccbd7e41b8dc992b8d13cfe206d571", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cd251d39b13485eb94ee65bb000d024e02c00e45", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dbd964a733db015bbb9dff592c259c736398140f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-502xx/CVE-2022-50297.json b/CVE-2022/CVE-2022-502xx/CVE-2022-50297.json index f44385fc9dc..488be002329 100644 --- a/CVE-2022/CVE-2022-502xx/CVE-2022-50297.json +++ b/CVE-2022/CVE-2022-502xx/CVE-2022-50297.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50297", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:41.110", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:33:54.417", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,43 +11,173 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: verify the expected usb_endpoints are present\n\nThe bug arises when a USB device claims to be an ATH9K but doesn't\nhave the expected endpoints. (In this case there was an interrupt\nendpoint where the driver expected a bulk endpoint.) The kernel\nneeds to be able to handle such devices without getting an internal error.\n\nusb 1-1: BOGUS urb xfer, pipe 3 != type 1\nWARNING: CPU: 3 PID: 500 at drivers/usb/core/urb.c:493 usb_submit_urb+0xce2/0x1430 drivers/usb/core/urb.c:493\nModules linked in:\nCPU: 3 PID: 500 Comm: kworker/3:2 Not tainted 5.10.135-syzkaller #0\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014\nWorkqueue: events request_firmware_work_func\nRIP: 0010:usb_submit_urb+0xce2/0x1430 drivers/usb/core/urb.c:493\nCall Trace:\n ath9k_hif_usb_alloc_rx_urbs drivers/net/wireless/ath/ath9k/hif_usb.c:908 [inline]\n ath9k_hif_usb_alloc_urbs+0x75e/0x1010 drivers/net/wireless/ath/ath9k/hif_usb.c:1019\n ath9k_hif_usb_dev_init drivers/net/wireless/ath/ath9k/hif_usb.c:1109 [inline]\n ath9k_hif_usb_firmware_cb+0x142/0x530 drivers/net/wireless/ath/ath9k/hif_usb.c:1242\n request_firmware_work_func+0x12e/0x240 drivers/base/firmware_loader/main.c:1097\n process_one_work+0x9af/0x1600 kernel/workqueue.c:2279\n worker_thread+0x61d/0x12f0 kernel/workqueue.c:2425\n kthread+0x3b4/0x4a0 kernel/kthread.c:313\n ret_from_fork+0x22/0x30 arch/x86/entry/entry_64.S:299\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.35", + "versionEndExcluding": "4.9.337", + "matchCriteriaId": "8118BB3A-5FED-4BA6-8788-DE9274F8319B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.303", + "matchCriteriaId": "1E7450AD-4739-46F0-B81B-C02E7B35A97B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.270", + "matchCriteriaId": "AE8904A3-99BE-4E49-9682-1F90A6373F4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.229", + "matchCriteriaId": "A0C0D95E-414A-445E-941B-3EF6A4D3A093" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.163", + "matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.86", + "matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.16", + "matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.2", + "matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0b7e6d681e00a96cde2b32a15ffa70e1be2e3209", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/16ef02bad239f11f322df8425d302be62f0443ce", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1824ccabee5445347b83642e4087cc2eca070343", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2d2eccf52ea0215c8d386b62af0b5fd4fc122bd5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/932f0a5e829fb0b823f96d7fa9a0f4fc96660b77", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c319196a0e34ed2e66d6f876f58d8d446335c2a7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ca57748593ddd8e46d033fbaeb9d01ec533a6bfe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d008a202a0528a058bac658e657c010ce8534f4a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d64436af0bc3c9e579be761d7684f228fb95f3bb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-502xx/CVE-2022-50298.json b/CVE-2022/CVE-2022-502xx/CVE-2022-50298.json index 54ea0634dd4..76c9a6e400e 100644 --- a/CVE-2022/CVE-2022-502xx/CVE-2022-50298.json +++ b/CVE-2022/CVE-2022-502xx/CVE-2022-50298.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50298", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:41.240", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:33:39.543", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,23 +11,103 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nslimbus: qcom-ngd: cleanup in probe error path\n\nAdd proper error path in probe() to cleanup resources previously\nacquired/allocated to fix warnings visible during probe deferral:\n\n notifier callback qcom_slim_ngd_ssr_notify already registered\n WARNING: CPU: 6 PID: 70 at kernel/notifier.c:28 notifier_chain_register+0x5c/0x90\n Modules linked in:\n CPU: 6 PID: 70 Comm: kworker/u16:1 Not tainted 6.0.0-rc3-next-20220830 #380\n Call trace:\n notifier_chain_register+0x5c/0x90\n srcu_notifier_chain_register+0x44/0x90\n qcom_register_ssr_notifier+0x38/0x4c\n qcom_slim_ngd_ctrl_probe+0xd8/0x400\n platform_probe+0x6c/0xe0\n really_probe+0xbc/0x2d4\n __driver_probe_device+0x78/0xe0\n driver_probe_device+0x3c/0x12c\n __device_attach_driver+0xb8/0x120\n bus_for_each_drv+0x78/0xd0\n __device_attach+0xa8/0x1c0\n device_initial_probe+0x18/0x24\n bus_probe_device+0xa0/0xac\n deferred_probe_work_func+0x88/0xc0\n process_one_work+0x1d4/0x320\n worker_thread+0x2cc/0x44c\n kthread+0x110/0x114\n ret_from_fork+0x10/0x20" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.75", + "matchCriteriaId": "6D945F46-F32F-4C09-8400-C3477E22A9FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.17", + "matchCriteriaId": "19B4C3A4-E5C3-41DC-BB14-BE72858E7D35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.0.3", + "matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0c76110a3129c8d56d8fb7b6270dcc0c5c2f1a41", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/16f14551d0df9e7cd283545d7d748829594d912f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1d567179f27788925dc90fe5e905cdabfce7d190", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ef5c42e6eb29a86abbcd4b2fd427e5194e51053c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-502xx/CVE-2022-50299.json b/CVE-2022/CVE-2022-502xx/CVE-2022-50299.json index 8fac880c62c..895905d5694 100644 --- a/CVE-2022/CVE-2022-502xx/CVE-2022-50299.json +++ b/CVE-2022/CVE-2022-502xx/CVE-2022-50299.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50299", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:41.353", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:33:30.630", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,159 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd: Replace snprintf with scnprintf\n\nCurrent code produces a warning as shown below when total characters\nin the constituent block device names plus the slashes exceeds 200.\nsnprintf() returns the number of characters generated from the given\ninput, which could cause the expression \u201c200 \u2013 len\u201d to wrap around\nto a large positive number. Fix this by using scnprintf() instead,\nwhich returns the actual number of characters written into the buffer.\n\n[ 1513.267938] ------------[ cut here ]------------\n[ 1513.267943] WARNING: CPU: 15 PID: 37247 at /lib/vsprintf.c:2509 vsnprintf+0x2c8/0x510\n[ 1513.267944] Modules linked in: \n[ 1513.267969] CPU: 15 PID: 37247 Comm: mdadm Not tainted 5.4.0-1085-azure #90~18.04.1-Ubuntu\n[ 1513.267969] Hardware name: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/09/2022\n[ 1513.267971] RIP: 0010:vsnprintf+0x2c8/0x510\n<-snip->\n[ 1513.267982] Call Trace:\n[ 1513.267986] snprintf+0x45/0x70\n[ 1513.267990] ? disk_name+0x71/0xa0\n[ 1513.267993] dump_zones+0x114/0x240 [raid0]\n[ 1513.267996] ? _cond_resched+0x19/0x40\n[ 1513.267998] raid0_run+0x19e/0x270 [raid0]\n[ 1513.268000] md_run+0x5e0/0xc50\n[ 1513.268003] ? security_capable+0x3f/0x60\n[ 1513.268005] do_md_run+0x19/0x110\n[ 1513.268006] md_ioctl+0x195e/0x1f90\n[ 1513.268007] blkdev_ioctl+0x91f/0x9f0\n[ 1513.268010] block_ioctl+0x3d/0x50\n[ 1513.268012] do_vfs_ioctl+0xa9/0x640\n[ 1513.268014] ? __fput+0x162/0x260\n[ 1513.268016] ksys_ioctl+0x75/0x80\n[ 1513.268017] __x64_sys_ioctl+0x1a/0x20\n[ 1513.268019] do_syscall_64+0x5e/0x200\n[ 1513.268021] entry_SYSCALL_64_after_hwframe+0x44/0xa9" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.296", + "matchCriteriaId": "1927ABC6-E0D2-478F-B103-B982A42D1158" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.262", + "matchCriteriaId": "D6B62970-1FAD-4ED6-930A-23E26A8D2E08" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.220", + "matchCriteriaId": "125F7133-B3B7-4175-8CF3-FF0845483254" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.150", + "matchCriteriaId": "C495821C-2A71-4F09-BED8-6A6EB4C9BA27" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.75", + "matchCriteriaId": "6D945F46-F32F-4C09-8400-C3477E22A9FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.17", + "matchCriteriaId": "19B4C3A4-E5C3-41DC-BB14-BE72858E7D35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.0.3", + "matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1727fd5015d8f93474148f94e34cda5aa6ad4a43", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3b0a2bd51f60418ecd67493586a2bb2174199de3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/41ca95033a0c47cd6dace1f0a36a6eb5ebe799e6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5d8259c9d1915a50c60c7d6e9e7fb9b7da64a175", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/76694e9ce0b2238c0a5f3ba54f9361dd3770ec78", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/897b1450abe5a67c842a5d24173ce4449ccdfa94", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/97238b88583c27c9d3b4a0cedb45f816523f17c3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f95825c4e51cf9a653b0ef947ac78401fc9d3a40", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50300.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50300.json index 5fd3b01360d..e6c4072a629 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50300.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50300.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50300", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:41.483", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:33:20.600", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,23 +11,103 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix extent map use-after-free when handling missing device in read_one_chunk\n\nStore the error code before freeing the extent_map. Though it's\nreference counted structure, in that function it's the first and last\nallocation so this would lead to a potential use-after-free.\n\nThe error can happen eg. when chunk is stored on a missing device and\nthe degraded mount option is missing.\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=216721" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "5.15.87", + "matchCriteriaId": "B5E4BB44-E0A4-4635-8AF7-4A3DF104A47D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.18", + "matchCriteriaId": "08D38C5F-9644-4549-BBA6-F0860F024D14" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.4", + "matchCriteriaId": "BC4189D9-5478-4E88-A78D-9C1DE29B217C" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/169a4cf46882974d4db6d85eb623ec898e51bbc0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1742e1c90c3da344f3bb9b1f1309b3f47482756a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b8e7ed42bc3ca0d0e4191ee394d34962d3624c22", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fce3713197ebba239e1c7e02174ed216ea1ee014", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50301.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50301.json index ce31b8e9b74..a95ee319ee6 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50301.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50301.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50301", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:41.597", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:32:33.170", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,43 +11,173 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/omap: Fix buffer overflow in debugfs\n\nThere are two issues here:\n\n1) The \"len\" variable needs to be checked before the very first write.\n Otherwise if omap2_iommu_dump_ctx() with \"bytes\" less than 32 it is a\n buffer overflow.\n2) The snprintf() function returns the number of bytes that *would* have\n been copied if there were enough space. But we want to know the\n number of bytes which were *actually* copied so use scnprintf()\n instead." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.19", + "versionEndExcluding": "4.9.331", + "matchCriteriaId": "483879DF-4323-439A-BA93-B8677307A549" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.296", + "matchCriteriaId": "1927ABC6-E0D2-478F-B103-B982A42D1158" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.262", + "matchCriteriaId": "D6B62970-1FAD-4ED6-930A-23E26A8D2E08" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.220", + "matchCriteriaId": "125F7133-B3B7-4175-8CF3-FF0845483254" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.150", + "matchCriteriaId": "C495821C-2A71-4F09-BED8-6A6EB4C9BA27" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.75", + "matchCriteriaId": "6D945F46-F32F-4C09-8400-C3477E22A9FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.17", + "matchCriteriaId": "19B4C3A4-E5C3-41DC-BB14-BE72858E7D35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.0.3", + "matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0c7043a5b5c3b35f5dc8875757f71e7f491d64d4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/184233a5202786b20220acd2d04ddf909ef18f29", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2fee0dbfaeaaa4bda04279ce772c4572b1429d04", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4010a1afaae1c0fb9c2cac5de703bed29b1f1782", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/648472df221f2bbffb433b964bcb87baccc586d8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/706e359cf046c142db290244c3f4938b20fbe805", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9814cc350e0765ce69244bf55ae4c8b29facd27e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bd0438f534b2e31b12f0b39b355c5dc2bbdaf854", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ec53b99b6b9da8b501f001595a6260c03b42d5b7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50302.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50302.json index cbff16aa798..de9ec979ee2 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50302.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50302.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50302", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:41.720", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:31:49.697", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,27 +11,132 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlockd: set other missing fields when unlocking files\n\nvfs_lock_file() expects the struct file_lock to be fully initialised by\nthe caller. Re-exported NFSv3 has been seen to Oops if the fl_file field\nis NULL." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.56", + "versionEndExcluding": "5.15.86", + "matchCriteriaId": "49BA1967-9889-4B6D-93A3-F0A6B2CD73EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18.13", + "versionEndExcluding": "5.19", + "matchCriteriaId": "B70F816A-AF29-46E5-95C8-FA44312EE737" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19.1", + "versionEndExcluding": "6.0.16", + "matchCriteriaId": "0C2620B2-2842-4E85-A95E-ECF91003E1ED" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.2", + "matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:-:*:*:*:*:*:*", + "matchCriteriaId": "9D759CCF-9E1B-41B2-81AA-CB580C5F3EEC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc7:*:*:*:*:*:*", + "matchCriteriaId": "C178431E-AD82-4B3D-B70F-A273A02ABD5D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.19:rc8:*:*:*:*:*:*", + "matchCriteriaId": "2CF5D19C-C418-4B57-B52D-7795547F4096" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/18ebd35b61b4693a0ddc270b6d4f18def232e770", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/31c93ee5f1e4dc278b562e20f3c3274ac34997f3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/688575aef211b0986fc51010116f5888a99d76a2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/95d42a8d3d4ae84a0bd3ee23e1fee240cdf0a9f0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d7aa9f7778316beb690f6e2763b6d672ad8b256f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50303.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50303.json index 5437f409c32..31c441f47c9 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50303.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50303.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50303", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:41.840", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:31:34.053", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,89 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Fix double release compute pasid\n\nIf kfd_process_device_init_vm returns failure after vm is converted to\ncompute vm and vm->pasid set to compute pasid, KFD will not take\npdd->drm_file reference. As a result, drm close file handler maybe\ncalled to release the compute pasid before KFD process destroy worker to\nrelease the same pasid and set vm->pasid to zero, this generates below\nWARNING backtrace and NULL pointer access.\n\nAdd helper amdgpu_amdkfd_gpuvm_set_vm_pasid and call it at the last step\nof kfd_process_device_init_vm, to ensure vm pasid is the original pasid\nif acquiring vm failed or is the compute pasid with pdd->drm_file\nreference taken to avoid double release same pasid.\n\n amdgpu: Failed to create process VM object\n ida_free called for id=32770 which is not allocated.\n WARNING: CPU: 57 PID: 72542 at ../lib/idr.c:522 ida_free+0x96/0x140\n RIP: 0010:ida_free+0x96/0x140\n Call Trace:\n amdgpu_pasid_free_delayed+0xe1/0x2a0 [amdgpu]\n amdgpu_driver_postclose_kms+0x2d8/0x340 [amdgpu]\n drm_file_free.part.13+0x216/0x270 [drm]\n drm_close_helper.isra.14+0x60/0x70 [drm]\n drm_release+0x6e/0xf0 [drm]\n __fput+0xcc/0x280\n ____fput+0xe/0x20\n task_work_run+0x96/0xc0\n do_exit+0x3d0/0xc10\n\n BUG: kernel NULL pointer dereference, address: 0000000000000000\n RIP: 0010:ida_free+0x76/0x140\n Call Trace:\n amdgpu_pasid_free_delayed+0xe1/0x2a0 [amdgpu]\n amdgpu_driver_postclose_kms+0x2d8/0x340 [amdgpu]\n drm_file_free.part.13+0x216/0x270 [drm]\n drm_close_helper.isra.14+0x60/0x70 [drm]\n drm_release+0x6e/0xf0 [drm]\n __fput+0xcc/0x280\n ____fput+0xe/0x20\n task_work_run+0x96/0xc0\n do_exit+0x3d0/0xc10" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-415" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.19", + "versionEndExcluding": "6.0.19", + "matchCriteriaId": "C180833F-BD73-49E8-876B-EA337C1EC2C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.5", + "matchCriteriaId": "8C1E7766-4310-43F9-BAC4-3763A36C043A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1a799c4c190ea9f0e81028e3eb3037ed0ab17ff5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/89f0d766c9e3fdeafbed6f855d433c2768cde862", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a02c07b619899179384fde06f951530438a3512d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50304.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50304.json index 1b6e6299404..50417ae1350 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50304.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50304.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50304", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:41.953", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:31:23.977", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,89 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: core: fix possible resource leak in init_mtd()\n\nI got the error report while inject fault in init_mtd():\n\nsysfs: cannot create duplicate filename '/devices/virtual/bdi/mtd-0'\nCall Trace:\n \n dump_stack_lvl+0x67/0x83\n sysfs_warn_dup+0x60/0x70\n sysfs_create_dir_ns+0x109/0x120\n kobject_add_internal+0xce/0x2f0\n kobject_add+0x98/0x110\n device_add+0x179/0xc00\n device_create_groups_vargs+0xf4/0x100\n device_create+0x7b/0xb0\n bdi_register_va.part.13+0x58/0x2d0\n bdi_register+0x9b/0xb0\n init_mtd+0x62/0x171 [mtd]\n do_one_initcall+0x6c/0x3c0\n do_init_module+0x58/0x222\n load_module+0x268e/0x27d0\n __do_sys_finit_module+0xd5/0x140\n do_syscall_64+0x37/0x90\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n \nkobject_add_internal failed for mtd-0 with -EEXIST, don't try to register\n\tthings with the same name in the same directory.\nError registering mtd class or bdi: -17\n\nIf init_mtdchar() fails in init_mtd(), mtd_bdi will not be unregistered,\nas a result, we can't load the mtd module again, to fix this by calling\nbdi_unregister(mtd_bdi) after out_procfs label." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "6.0.16", + "matchCriteriaId": "A3EF624E-E9CE-49B8-A5E4-45BA8B355B48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.2", + "matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1aadf01e5076b9ab6bf294b9622335c651314895", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/26c304a3f136009c5a2a04e2bf3ac6aa25aabcb4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/78816504100cbd8e6836df9f58cc4fbb8b262f1c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50305.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50305.json index 98c7ba69d15..4b092d0ef9d 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50305.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50305.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50305", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:42.077", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:31:13.883", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,109 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()\n\nsof_es8336_remove() calls cancel_delayed_work(). However, that\nfunction does not wait until the work function finishes. This\nmeans that the callback function may still be running after\nthe driver's remove function has finished, which would result\nin a use-after-free.\n\nFix by calling cancel_delayed_work_sync(), which ensures that\nthe work is properly cancelled, no longer running, and unable\nto re-schedule itself." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0.11", + "versionEndExcluding": "6.0.16", + "matchCriteriaId": "0AF3EDAF-B8F2-4CD0-A4A2-0C1E1477AA23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.1", + "versionEndExcluding": "6.1.2", + "matchCriteriaId": "19DAE4FE-61C6-476C-AEA7-E6F8F83ED539" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*", + "matchCriteriaId": "DE093B34-F4CD-4052-8122-730D6537A91A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*", + "matchCriteriaId": "3FFFB0B3-930D-408A-91E2-BAE0C2715D80" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*", + "matchCriteriaId": "8535320E-A0DB-4277-800E-D0CE5BBA59E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc8:*:*:*:*:*:*", + "matchCriteriaId": "21718AA4-4056-40F2-968E-BDAA465A7872" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1b41beaa7a58467505ec3023af8aad74f878b888", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/390a1a98288a53b2e7555097d83c6e55d579b166", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b85102a3aa3810a09eb55692e8cd6ffbb304e57d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50306.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50306.json index e6178825072..f6488bcae31 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50306.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50306.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50306", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:42.267", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:31:07.530", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,88 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix potential out of bound read in ext4_fc_replay_scan()\n\nFor scan loop must ensure that at least EXT4_FC_TAG_BASE_LEN space. If remain\nspace less than EXT4_FC_TAG_BASE_LEN which will lead to out of bound read\nwhen mounting corrupt file system image.\nADD_RANGE/HEAD/TAIL is needed to add extra check when do journal scan, as this\nthree tags will read data during scan, tag length couldn't less than data length\nwhich will read." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.15.87", + "matchCriteriaId": "EDD23C2A-C036-4567-8E10-D738E4C0B1EC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.6", + "matchCriteriaId": "98F5FA4A-A33F-4FAD-894E-FDC9D295742A" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1b45cc5c7b920fd8bf72e5a888ec7abeadf41e09", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6969367c1500c15eddc38fda12f6d15518ad6d03", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f234294812c9b68d603650d28743eafb718e7ad5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50307.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50307.json index 53c624684f1..34f6aec3a1d 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50307.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50307.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50307", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:42.377", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:30:58.510", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,124 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/cio: fix out-of-bounds access on cio_ignore free\n\nThe channel-subsystem-driver scans for newly available devices whenever\ndevice-IDs are removed from the cio_ignore list using a command such as:\n\n echo free >/proc/cio_ignore\n\nSince an I/O device scan might interfer with running I/Os, commit\n172da89ed0ea (\"s390/cio: avoid excessive path-verification requests\")\nintroduced an optimization to exclude online devices from the scan.\n\nThe newly added check for online devices incorrectly assumes that\nan I/O-subchannel's drvdata points to a struct io_subchannel_private.\nFor devices that are bound to a non-default I/O subchannel driver, such\nas the vfio_ccw driver, this results in an out-of-bounds read access\nduring each scan.\n\nFix this by changing the scan logic to rely on a driver-independent\nonline indication. For this we can use struct subchannel->config.ena,\nwhich is the driver's requested subchannel-enabled state. Since I/Os\ncan only be started on enabled subchannels, this matches the intent\nof the original optimization of not scanning devices where I/O might\nbe running." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.1", + "versionEndExcluding": "5.15.78", + "matchCriteriaId": "6335AFED-CC66-43A9-8729-710543F39109" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.7", + "matchCriteriaId": "65D387F0-209C-4EAD-98BA-C4B430A840C9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:-:*:*:*:*:*:*", + "matchCriteriaId": "40D9C0D1-0F32-4A2B-9840-1072F5497540" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "AF55383D-4DF2-45DC-93F7-571F4F978EAB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*", + "matchCriteriaId": "9E9481B2-8AA6-4CBD-B5D3-C10F51FF6D01" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc6:*:*:*:*:*:*", + "matchCriteriaId": "EBD45831-4B79-42BC-ABC0-86870F0DEA89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc7:*:*:*:*:*:*", + "matchCriteriaId": "948A6B8D-1B72-4945-8680-354E53BE1C80" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0e501fd0f38e42304bfa0d46a812d93f80294a87", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/106ab66cf5467726ca5ead51623043d37c06820a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1b6074112742f65ece71b0f299ca5a6a887d2db6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50308.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50308.json index 9b98e88b575..fd9dc70de5c 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50308.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50308.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50308", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:42.487", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:29:24.480", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,27 +11,117 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: qcom: Add checks for devm_kcalloc\n\nAs the devm_kcalloc may return NULL, the return value needs to be checked\nto avoid NULL poineter dereference." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10", + "versionEndExcluding": "5.10.163", + "matchCriteriaId": "CE4DEDD1-2BE5-40F9-8FBB-C0E7E01EF072" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.86", + "matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.16", + "matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.2", + "matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1bf5ee979076ceb121ee51c95197d890b1cee7f4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4518d7cc38b7d1a7ce5a7878ca601c91e19fe47d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7830e2289eb4b74970b6cd1b6cc68dcd021c2281", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b1e4f92dd0c1d3c162d7ca6c1196995565cca96d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f849c116d320e85d1e2c2804c0edb0be3953b62d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50309.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50309.json index f4888fba95a..423f0bf3901 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50309.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50309.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50309", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:42.617", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:28:59.283", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,43 +11,173 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init\n\nof_get_child_by_name() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nAdd missing of_node_put() to avoid refcount leak." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.1", + "versionEndExcluding": "4.9.331", + "matchCriteriaId": "EB75F1F8-21A9-44D9-A95C-EE613DD0CE61" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.296", + "matchCriteriaId": "1927ABC6-E0D2-478F-B103-B982A42D1158" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.262", + "matchCriteriaId": "D6B62970-1FAD-4ED6-930A-23E26A8D2E08" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.220", + "matchCriteriaId": "125F7133-B3B7-4175-8CF3-FF0845483254" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.150", + "matchCriteriaId": "C495821C-2A71-4F09-BED8-6A6EB4C9BA27" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.75", + "matchCriteriaId": "6D945F46-F32F-4C09-8400-C3477E22A9FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.17", + "matchCriteriaId": "19B4C3A4-E5C3-41DC-BB14-BE72858E7D35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.0.3", + "matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1c78f19c3a0ea312a8178a6bfd8934eb93e9b10a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/22b93530bbe6af9dce8e520bb6e978d1bda39d2b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2630cc88327a5557aa0d9cc63be95e3c6e0a55b3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2ea7caa9684687cf3adc1467cf4af3653a776192", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3336210948b22c2db43e9df2ea403d251b4d24ab", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3c38467c3255c428cdbd3cefaccca4662f302dc9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/59b315353252abe7b8fdb8651ca31b8484ce287a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6e7b3b1e4e9f739800cd8010b75a9bee8d808cee", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7b0efe7534071e0153708886355d80db69525d50", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50310.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50310.json index 8feffcddcc8..a28dc5e6e84 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50310.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50310.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50310", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:42.750", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:23:20.263", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,15 +11,80 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6mr: fix UAF issue in ip6mr_sk_done() when addrconf_init_net() failed\n\nIf the initialization fails in calling addrconf_init_net(), devconf_all is\nthe pointer that has been released. Then ip6mr_sk_done() is called to\nrelease the net, accessing devconf->mc_forwarding directly causes invalid\npointer access.\n\nThe process is as follows:\nsetup_net()\n\tops_init()\n\t\taddrconf_init_net()\n\t\tall = kmemdup(...) ---> alloc \"all\"\n\t\t...\n\t\tnet->ipv6.devconf_all = all;\n\t\t__addrconf_sysctl_register() ---> failed\n\t\t...\n\t\tkfree(all); ---> ipv6.devconf_all invalid\n\t\t...\n\tops_exit_list()\n\t\t...\n\t\tip6mr_sk_done()\n\t\t\tdevconf = net->ipv6.devconf_all;\n\t\t\t//devconf is invalid pointer\n\t\t\tif (!devconf || !atomic_read(&devconf->mc_forwarding))\n\nThe following is the Call Trace information:\nBUG: KASAN: use-after-free in ip6mr_sk_done+0x112/0x3a0\nRead of size 4 at addr ffff888075508e88 by task ip/14554\nCall Trace:\n\ndump_stack_lvl+0x8e/0xd1\nprint_report+0x155/0x454\nkasan_report+0xba/0x1f0\nkasan_check_range+0x35/0x1b0\nip6mr_sk_done+0x112/0x3a0\nrawv6_close+0x48/0x70\ninet_release+0x109/0x230\ninet6_release+0x4c/0x70\nsock_release+0x87/0x1b0\nigmp6_net_exit+0x6b/0x170\nops_exit_list+0xb0/0x170\nsetup_net+0x7ac/0xbd0\ncopy_net_ns+0x2e6/0x6b0\ncreate_new_namespaces+0x382/0xa50\nunshare_nsproxy_namespaces+0xa6/0x1c0\nksys_unshare+0x3a4/0x7e0\n__x64_sys_unshare+0x2d/0x40\ndo_syscall_64+0x35/0x80\nentry_SYSCALL_64_after_hwframe+0x46/0xb0\nRIP: 0033:0x7f7963322547\n\n\nAllocated by task 14554:\nkasan_save_stack+0x1e/0x40\nkasan_set_track+0x21/0x30\n__kasan_kmalloc+0xa1/0xb0\n__kmalloc_node_track_caller+0x4a/0xb0\nkmemdup+0x28/0x60\naddrconf_init_net+0x1be/0x840\nops_init+0xa5/0x410\nsetup_net+0x5aa/0xbd0\ncopy_net_ns+0x2e6/0x6b0\ncreate_new_namespaces+0x382/0xa50\nunshare_nsproxy_namespaces+0xa6/0x1c0\nksys_unshare+0x3a4/0x7e0\n__x64_sys_unshare+0x2d/0x40\ndo_syscall_64+0x35/0x80\nentry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nFreed by task 14554:\nkasan_save_stack+0x1e/0x40\nkasan_set_track+0x21/0x30\nkasan_save_free_info+0x2a/0x40\n____kasan_slab_free+0x155/0x1b0\nslab_free_freelist_hook+0x11b/0x220\n__kmem_cache_free+0xa4/0x360\naddrconf_init_net+0x623/0x840\nops_init+0xa5/0x410\nsetup_net+0x5aa/0xbd0\ncopy_net_ns+0x2e6/0x6b0\ncreate_new_namespaces+0x382/0xa50\nunshare_nsproxy_namespaces+0xa6/0x1c0\nksys_unshare+0x3a4/0x7e0\n__x64_sys_unshare+0x2d/0x40\ndo_syscall_64+0x35/0x80\nentry_SYSCALL_64_after_hwframe+0x46/0xb0" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "6.0.6", + "matchCriteriaId": "945D2A29-4105-4530-A8BD-10C1D2EA5764" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1ca695207ed2271ecbf8ee6c641970f621c157cc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/22a68c3b9362eaac7b035eba09e95e6b3f7a912c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50311.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50311.json index 2ce58699e41..af7fa121c28 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50311.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50311.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50311", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:42.860", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:23:00.490", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,159 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncxl: Fix refcount leak in cxl_calc_capp_routing\n\nof_get_next_parent() returns a node pointer with refcount incremented,\nwe should use of_node_put() on it when not need anymore.\nThis function only calls of_node_put() in normal path,\nmissing it in the error path.\nAdd missing of_node_put() to avoid refcount leak." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.12", + "versionEndExcluding": "4.14.303", + "matchCriteriaId": "13C63580-EFF9-4995-B2C4-EE99D7C0C771" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.270", + "matchCriteriaId": "AE8904A3-99BE-4E49-9682-1F90A6373F4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.229", + "matchCriteriaId": "A0C0D95E-414A-445E-941B-3EF6A4D3A093" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.163", + "matchCriteriaId": "D05D31FC-BD74-4F9E-B1D8-9CED62BE6F65" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.86", + "matchCriteriaId": "47237296-55D1-4ED4-8075-D00FC85A61EE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.16", + "matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.2", + "matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1d09697ff22908ae487fc8c4fbde1811732be523", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2d7b6580384e6d65419933ddc525bd176095da54", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/651e8bc9d0418c20a1989b7c078c64c2a6346fa3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6a310e8db5409676b4b3e6c1f54dff174e4fd04d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/81c8bbf5b2b5f0c8030fff1716c00849cda8571a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c9bebc503881c1391f6c4f820134884adecf1519", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ee870f72465015327ad96204b0e92450d04870cd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f2d60f6ba173cded65081cee690b67802395a479", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50312.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50312.json index f605e963079..6f059d78ef9 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50312.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50312.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50312", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:42.980", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:22:27.233", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,43 +11,173 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: serial: jsm: fix some leaks in probe\n\nThis error path needs to unwind instead of just returning directly." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.19", + "versionEndExcluding": "4.9.331", + "matchCriteriaId": "483879DF-4323-439A-BA93-B8677307A549" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.296", + "matchCriteriaId": "1927ABC6-E0D2-478F-B103-B982A42D1158" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.262", + "matchCriteriaId": "D6B62970-1FAD-4ED6-930A-23E26A8D2E08" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.220", + "matchCriteriaId": "125F7133-B3B7-4175-8CF3-FF0845483254" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.150", + "matchCriteriaId": "C495821C-2A71-4F09-BED8-6A6EB4C9BA27" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.75", + "matchCriteriaId": "6D945F46-F32F-4C09-8400-C3477E22A9FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.17", + "matchCriteriaId": "19B4C3A4-E5C3-41DC-BB14-BE72858E7D35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.0.3", + "matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1d5859ef229e381f4db38dce8ed58e4bf862006b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3bf05c2650cf6b8d83bf0b0d808cc78c6ee7e84c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3ea1fd63fdf0e83b491c2a9f25b395aa0e4bf6e8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6066bd69ffba3a6abc7c0793ccba1da79b7d77e3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6be8e565a4a60530797a974d0a3d0e30656166a1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/71ffe5111f0ffa2fd43c14fd176c6f05d4e82212", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/737594536dc3ce732976c0d84bb1dcc842065521", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/744c2d33a88b082d9d504520f0132b3d688547b2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ff9a5e50fb1910be33e62925bc7ee3bef474879e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50313.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50313.json index 254e9a7f298..db3fd1a8c99 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50313.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50313.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50313", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:43.120", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:22:16.860", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,31 +11,131 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: fix order >= MAX_ORDER warning due to crafted negative i_size\n\nAs syzbot reported [1], the root cause is that i_size field is a\nsigned type, and negative i_size is also less than EROFS_BLKSIZ.\nAs a consequence, it's handled as fast symlink unexpectedly.\n\nLet's fall back to the generic path to deal with such unusual i_size.\n\n[1] https://lore.kernel.org/r/000000000000ac8efa05e7feaa1f@google.com" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19", + "versionEndExcluding": "5.4.289", + "matchCriteriaId": "46A5E223-5899-4E46-B76B-C78D39EB0277" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.233", + "matchCriteriaId": "44569A17-FE4C-4BE3-9C0C-74AC54C7B51B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.82", + "matchCriteriaId": "0DC20DB6-73C1-4465-B931-117BFB8EBB02" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.17", + "matchCriteriaId": "19B4C3A4-E5C3-41DC-BB14-BE72858E7D35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.0.3", + "matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0ab621fcdff1a58ff4de51a8590fa92a0ecd34be", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/17a0cdbd7b0cf0fc0d7ca4187a67f8f1c18c291f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1dd73601a1cba37a0ed5f89a8662c90191df5873", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6235fb899b25fd287d5e42635ff82196395708cc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/acc2f40b980c61a9178b72cdedd150b829064997", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b6c8330f5b0f22149957a2e4977fd0f01a9db7cd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50314.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50314.json index c7dc3771fc3..f806efb168e 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50314.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50314.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50314", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:43.247", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:22:06.630", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,158 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnbd: Fix hung when signal interrupts nbd_start_device_ioctl()\n\nsyzbot reported hung task [1]. The following program is a simplified\nversion of the reproducer:\n\nint main(void)\n{\n\tint sv[2], fd;\n\n\tif (socketpair(AF_UNIX, SOCK_STREAM, 0, sv) < 0)\n\t\treturn 1;\n\tif ((fd = open(\"/dev/nbd0\", 0)) < 0)\n\t\treturn 1;\n\tif (ioctl(fd, NBD_SET_SIZE_BLOCKS, 0x81) < 0)\n\t\treturn 1;\n\tif (ioctl(fd, NBD_SET_SOCK, sv[0]) < 0)\n\t\treturn 1;\n\tif (ioctl(fd, NBD_DO_IT) < 0)\n\t\treturn 1;\n\treturn 0;\n}\n\nWhen signal interrupt nbd_start_device_ioctl() waiting the condition\natomic_read(&config->recv_threads) == 0, the task can hung because it\nwaits the completion of the inflight IOs.\n\nThis patch fixes the issue by clearing queue, not just shutdown, when\nsignal interrupt nbd_start_device_ioctl()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.14.296", + "matchCriteriaId": "C71AA4D8-A0D5-45D7-A420-247193B5BED7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.262", + "matchCriteriaId": "D6B62970-1FAD-4ED6-930A-23E26A8D2E08" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.220", + "matchCriteriaId": "125F7133-B3B7-4175-8CF3-FF0845483254" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.150", + "matchCriteriaId": "C495821C-2A71-4F09-BED8-6A6EB4C9BA27" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.75", + "matchCriteriaId": "6D945F46-F32F-4C09-8400-C3477E22A9FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.17", + "matchCriteriaId": "19B4C3A4-E5C3-41DC-BB14-BE72858E7D35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.0.3", + "matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1de7c3cf48fc41cd95adb12bd1ea9033a917798a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3575949513ea3b387b30dac1e69468a923c86caf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/35fb7d4a53d9e36d1b91161ea9870d9c6d57dccf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3ba3846cb3e2fb3c6fbf79e998472821b298419e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/62006a72b05e0d38727eef5188700f2488be5e89", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b2700f98b3f4dd19fb4315b70581e5caff89eb49", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c0d73be0af8c1310713bc39a8d7a22e35084e14f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c7b4641bd2395c2f3cd3b0a0cbf292ed9d489398", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50315.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50315.json index ac923657e47..312acc5f74b 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50315.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50315.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50315", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:43.373", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:21:57.063", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,163 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS\n\nUBSAN complains about array-index-out-of-bounds:\n[ 1.980703] kernel: UBSAN: array-index-out-of-bounds in /build/linux-9H675w/linux-5.15.0/drivers/ata/libahci.c:968:41\n[ 1.980709] kernel: index 15 is out of range for type 'ahci_em_priv [8]'\n[ 1.980713] kernel: CPU: 0 PID: 209 Comm: scsi_eh_8 Not tainted 5.15.0-25-generic #25-Ubuntu\n[ 1.980716] kernel: Hardware name: System manufacturer System Product Name/P5Q3, BIOS 1102 06/11/2010\n[ 1.980718] kernel: Call Trace:\n[ 1.980721] kernel: \n[ 1.980723] kernel: show_stack+0x52/0x58\n[ 1.980729] kernel: dump_stack_lvl+0x4a/0x5f\n[ 1.980734] kernel: dump_stack+0x10/0x12\n[ 1.980736] kernel: ubsan_epilogue+0x9/0x45\n[ 1.980739] kernel: __ubsan_handle_out_of_bounds.cold+0x44/0x49\n[ 1.980742] kernel: ahci_qc_issue+0x166/0x170 [libahci]\n[ 1.980748] kernel: ata_qc_issue+0x135/0x240\n[ 1.980752] kernel: ata_exec_internal_sg+0x2c4/0x580\n[ 1.980754] kernel: ? vprintk_default+0x1d/0x20\n[ 1.980759] kernel: ata_exec_internal+0x67/0xa0\n[ 1.980762] kernel: sata_pmp_read+0x8d/0xc0\n[ 1.980765] kernel: sata_pmp_read_gscr+0x3c/0x90\n[ 1.980768] kernel: sata_pmp_attach+0x8b/0x310\n[ 1.980771] kernel: ata_eh_revalidate_and_attach+0x28c/0x4b0\n[ 1.980775] kernel: ata_eh_recover+0x6b6/0xb30\n[ 1.980778] kernel: ? ahci_do_hardreset+0x180/0x180 [libahci]\n[ 1.980783] kernel: ? ahci_stop_engine+0xb0/0xb0 [libahci]\n[ 1.980787] kernel: ? ahci_do_softreset+0x290/0x290 [libahci]\n[ 1.980792] kernel: ? trace_event_raw_event_ata_eh_link_autopsy_qc+0xe0/0xe0\n[ 1.980795] kernel: sata_pmp_eh_recover.isra.0+0x214/0x560\n[ 1.980799] kernel: sata_pmp_error_handler+0x23/0x40\n[ 1.980802] kernel: ahci_error_handler+0x43/0x80 [libahci]\n[ 1.980806] kernel: ata_scsi_port_error_handler+0x2b1/0x600\n[ 1.980810] kernel: ata_scsi_error+0x9c/0xd0\n[ 1.980813] kernel: scsi_error_handler+0xa1/0x180\n[ 1.980817] kernel: ? scsi_unjam_host+0x1c0/0x1c0\n[ 1.980820] kernel: kthread+0x12a/0x150\n[ 1.980823] kernel: ? set_kthread_struct+0x50/0x50\n[ 1.980826] kernel: ret_from_fork+0x22/0x30\n[ 1.980831] kernel: \n\nThis happens because sata_pmp_init_links() initialize link->pmp up to\nSATA_PMP_MAX_PORTS while em_priv is declared as 8 elements array.\n\nI can't find the maximum Enclosure Management ports specified in AHCI\nspec v1.3.1, but \"12.2.1 LED message type\" states that \"Port Multiplier\nInformation\" can utilize 4 bits, which implies it can support up to 16\nports. Hence, use SATA_PMP_MAX_PORTS as EM_MAX_SLOTS to resolve the\nissue.\n\nBugLink: https://bugs.launchpad.net/bugs/1970074" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-129" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.9.332", + "matchCriteriaId": "4FBDCD91-2083-441C-B3A3-FE1E7B2054DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.298", + "matchCriteriaId": "7140B9A2-EB63-497C-96B1-68A96CD99051" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.264", + "matchCriteriaId": "8AE23A9F-BF98-4055-AA49-02118B96226D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.221", + "matchCriteriaId": "DF527781-6E98-4DBF-B668-377AA673CDCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.152", + "matchCriteriaId": "AFE2A429-A1A8-4B68-8F1D-A1595AB6A4F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.76", + "matchCriteriaId": "918A4953-6F82-40F5-B7A9-9836905139C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.6", + "matchCriteriaId": "98F5FA4A-A33F-4FAD-894E-FDC9D295742A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1e41e693f458eef2d5728207dbd327cd3b16580a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/303d0f761431d848dd8d7ff9fd9b8c101879cabe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/383b7c50f5445ff8dbbf03080905648d6980c39d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/67a00c299c5c143817c948fbc7de1a2fa1af38fb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8fbe13de1cc7cef2564be3cbf60400b33eee023b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d6314d5f68764550c84d732ce901ddd3ac6b415f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/da2ea4a961d9f89ed248734e7032350c260dc3a3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f70bd4339cb68bc7e206af4c922bc0d249244403", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50317.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50317.json index fdea2e0938f..442bb841a83 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50317.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50317.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50317", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:43.620", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:19:42.590", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,159 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: megachips: Fix a null pointer dereference bug\n\nWhen removing the module we will get the following warning:\n\n[ 31.911505] i2c-core: driver [stdp2690-ge-b850v3-fw] unregistered\n[ 31.912484] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI\n[ 31.913338] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]\n[ 31.915280] RIP: 0010:drm_bridge_remove+0x97/0x130\n[ 31.921825] Call Trace:\n[ 31.922533] stdp4028_ge_b850v3_fw_remove+0x34/0x60 [megachips_stdpxxxx_ge_b850v3_fw]\n[ 31.923139] i2c_device_remove+0x181/0x1f0\n\nThe two bridges (stdp2690, stdp4028) do not probe at the same time, so\nthe driver does not call ge_b850v3_resgiter() when probing, causing the\ndriver to try to remove the object that has not been initialized.\n\nFix this by checking whether both the bridges are probed." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.14.263", + "versionEndExcluding": "4.14.296", + "matchCriteriaId": "E480380A-87CF-448C-8226-1F034A1F1304" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19.226", + "versionEndExcluding": "4.19.262", + "matchCriteriaId": "34C6D73D-097B-42F8-83A1-3D4A90CA3491" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.174", + "versionEndExcluding": "5.4.220", + "matchCriteriaId": "378CC5F0-BA13-4A55-A21C-BD1BF566BEB1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.94", + "versionEndExcluding": "5.10.150", + "matchCriteriaId": "31F15608-CE37-4F08-B7DF-A8560D7F6E49" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.17", + "versionEndExcluding": "5.15.75", + "matchCriteriaId": "B8C3A451-258D-4D9D-94DA-03F0157D78B5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16.3", + "versionEndExcluding": "5.19.17", + "matchCriteriaId": "D67191C4-2452-46FC-A030-D9838CD1E1CE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.0.3", + "matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1daf69228e310938177119c4eadcd30fc75c81e0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1ff673333d46d2c1b053ebd0c1c7c7c79e36943e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/21764467ab396d9f08921e0a5ffa1214244e1ad9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4610e7a4111fa3f3ce27c09d6d94008c55f1cd31", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5bc20bafcd87ba0858ab772cefc7047cb51bc249", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7371fad5cfe6eada6bb5523c895fd6074b15c2b9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/877e92e9b1bdeb580b31a46061005936be902cd4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aaa512ad1e59f2edf8a9e4f2b167a44b24670679", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50318.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50318.json index 656938d2d9a..9b5d3c79b61 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50318.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50318.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50318", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:43.750", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:19:27.877", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,35 +11,157 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()\n\npci_get_device() will increase the reference count for the returned\n'dev'. We need to call pci_dev_put() to decrease the reference count.\nSince 'dev' is only used in pci_read_config_dword(), let's add\npci_dev_put() right after it." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19.189", + "versionEndExcluding": "4.19.270", + "matchCriteriaId": "380D33C4-CF46-4D10-B0B7-026B136EA7DE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.115", + "versionEndExcluding": "5.4.229", + "matchCriteriaId": "4EFCAD9F-4C87-4E64-ABDD-D2D2260351B3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.33", + "versionEndExcluding": "5.10.163", + "matchCriteriaId": "75D2DC16-ED7B-4E8F-B34A-910E49B3DE7C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11.17", + "versionEndExcluding": "5.12", + "matchCriteriaId": "963F6907-B24B-4355-92B0-ADB645996296" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.12.1", + "versionEndExcluding": "5.15.86", + "matchCriteriaId": "C573C832-12AC-4EB9-BF9D-385D14C2E425" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.16", + "matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.2", + "matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.12:-:*:*:*:*:*:*", + "matchCriteriaId": "75EB504D-4A83-4C67-9C8D-FD9C6C8EB4CD" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1ff9dd6e7071a561f803135c1d684b13c7a7d01d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3485f197518061371568f842405159aa9e4df551", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/48f32b9a74e2ac8e854bb87bfefdbc745125a123", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5a96c10a56037db006ba6769307a9731cf6073be", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bd66877c0b3b42eed0ecee0bd2a2a505c1e54177", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c0539d5d474ee6fa4ebc41f927a0f98f81244f25", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e293263248f25c6b8aa1caf7c1103d40aa03311e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50319.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50319.json index 2b4bf21c8ca..3f871e5629c 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50319.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50319.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50319", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:43.880", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:19:17.463", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,23 +11,103 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncoresight: trbe: remove cpuhp instance node before remove cpuhp state\n\ncpuhp_state_add_instance() and cpuhp_state_remove_instance() should\nbe used in pairs. Or there will lead to the warn on\ncpuhp_remove_multi_state() since the cpuhp_step list is not empty.\n\nThe following is the error log with 'rmmod coresight-trbe':\nError: Removing state 215 which has instances left.\nCall trace:\n __cpuhp_remove_state_cpuslocked+0x144/0x160\n __cpuhp_remove_state+0xac/0x100\n arm_trbe_device_remove+0x2c/0x60 [coresight_trbe]\n platform_remove+0x34/0x70\n device_remove+0x54/0x90\n device_release_driver_internal+0x1e4/0x250\n driver_detach+0x5c/0xb0\n bus_remove_driver+0x64/0xc0\n driver_unregister+0x3c/0x70\n platform_driver_unregister+0x20/0x30\n arm_trbe_exit+0x1c/0x658 [coresight_trbe]\n __arm64_sys_delete_module+0x1ac/0x24c\n invoke_syscall+0x50/0x120\n el0_svc_common.constprop.0+0x58/0x1a0\n do_el0_svc+0x38/0xd0\n el0_svc+0x2c/0xc0\n el0t_64_sync_handler+0x1ac/0x1b0\n el0t_64_sync+0x19c/0x1a0\n ---[ end trace 0000000000000000 ]---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.13", + "versionEndExcluding": "5.15.86", + "matchCriteriaId": "7520696A-9404-4EF7-BE25-AE79EAFA5337" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.16", + "matchCriteriaId": "C720A569-3D93-4D77-95F6-E2B3A3267D9F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.2", + "matchCriteriaId": "77239F4B-6BB2-4B9E-A654-36A52396116C" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/18b9202188a4e59923834c60b5c82ea1da7d1811", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/20ee8c223f792947378196307d8e707c9cdc2d61", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2ea334960afcd49385840c7afd59fc5f8d3ce682", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3c18888bc0b51835c74123b1e04d5df11543724c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50320.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50320.json index cf2bdd2ccae..e364a50f6eb 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50320.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50320.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50320", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:43.997", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:19:05.830", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,23 +11,102 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys address\n\nOn a Packard Bell Dot SC (Intel Atom N2600 model) there is a FPDT table\nwhich contains invalid physical addresses, with high bits set which fall\noutside the range of the CPU-s supported physical address range.\n\nCalling acpi_os_map_memory() on such an invalid phys address leads to\nthe below WARN_ON in ioremap triggering resulting in an oops/stacktrace.\n\nAdd code to verify the physical address before calling acpi_os_map_memory()\nto fix / avoid the oops.\n\n[ 1.226900] ioremap: invalid physical address 3001000000000000\n[ 1.226949] ------------[ cut here ]------------\n[ 1.226962] WARNING: CPU: 1 PID: 1 at arch/x86/mm/ioremap.c:200 __ioremap_caller.cold+0x43/0x5f\n[ 1.226996] Modules linked in:\n[ 1.227016] CPU: 1 PID: 1 Comm: swapper/0 Not tainted 6.0.0-rc3+ #490\n[ 1.227029] Hardware name: Packard Bell dot s/SJE01_CT, BIOS V1.10 07/23/2013\n[ 1.227038] RIP: 0010:__ioremap_caller.cold+0x43/0x5f\n[ 1.227054] Code: 96 00 00 e9 f8 af 24 ff 89 c6 48 c7 c7 d8 0c 84 99 e8 6a 96 00 00 e9 76 af 24 ff 48 89 fe 48 c7 c7 a8 0c 84 99 e8 56 96 00 00 <0f> 0b e9 60 af 24 ff 48 8b 34 24 48 c7 c7 40 0d 84 99 e8 3f 96 00\n[ 1.227067] RSP: 0000:ffffb18c40033d60 EFLAGS: 00010286\n[ 1.227084] RAX: 0000000000000032 RBX: 3001000000000000 RCX: 0000000000000000\n[ 1.227095] RDX: 0000000000000001 RSI: 00000000ffffdfff RDI: 00000000ffffffff\n[ 1.227105] RBP: 3001000000000000 R08: 0000000000000000 R09: ffffb18c40033c18\n[ 1.227115] R10: 0000000000000003 R11: ffffffff99d62fe8 R12: 0000000000000008\n[ 1.227124] R13: 0003001000000000 R14: 0000000000001000 R15: 3001000000000000\n[ 1.227135] FS: 0000000000000000(0000) GS:ffff913a3c080000(0000) knlGS:0000000000000000\n[ 1.227146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 1.227156] CR2: 0000000000000000 CR3: 0000000018c26000 CR4: 00000000000006e0\n[ 1.227167] Call Trace:\n[ 1.227176] \n[ 1.227185] ? acpi_os_map_iomem+0x1c9/0x1e0\n[ 1.227215] ? kmem_cache_alloc_trace+0x187/0x370\n[ 1.227254] acpi_os_map_iomem+0x1c9/0x1e0\n[ 1.227288] acpi_init_fpdt+0xa8/0x253\n[ 1.227308] ? acpi_debugfs_init+0x1f/0x1f\n[ 1.227339] do_one_initcall+0x5a/0x300\n[ 1.227406] ? rcu_read_lock_sched_held+0x3f/0x80\n[ 1.227442] kernel_init_freeable+0x28b/0x2cc\n[ 1.227512] ? rest_init+0x170/0x170\n[ 1.227538] kernel_init+0x16/0x140\n[ 1.227552] ret_from_fork+0x1f/0x30\n[ 1.227639] \n[ 1.227647] irq event stamp: 186819\n[ 1.227656] hardirqs last enabled at (186825): [] __up_console_sem+0x5e/0x70\n[ 1.227672] hardirqs last disabled at (186830): [] __up_console_sem+0x43/0x70\n[ 1.227686] softirqs last enabled at (186576): [] __irq_exit_rcu+0xed/0x160\n[ 1.227701] softirqs last disabled at (186569): [] __irq_exit_rcu+0xed/0x160\n[ 1.227715] ---[ end trace 0000000000000000 ]---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.15.75", + "matchCriteriaId": "9C6956B2-4DF8-4582-B8E4-66E19910BE4C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.17", + "matchCriteriaId": "19B4C3A4-E5C3-41DC-BB14-BE72858E7D35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.0.3", + "matchCriteriaId": "5BCD8201-B847-4442-B894-70D430128DEF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/16046a716c8e1f447909bec9b478d58e6e25e513", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/211391bf04b3c74e250c566eeff9cf808156c693", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/30eca146c89d216dda95868ce00a2d35cf73d5a4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/90bfc9ae875dfbed2e6089516520204cd431dba3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50322.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50322.json index ca0f63d0ecc..f0e377de846 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50322.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50322.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50322", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:44.240", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:12:01.390", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,89 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: msc313: Fix function prototype mismatch in msc313_rtc_probe()\n\nWith clang's kernel control flow integrity (kCFI, CONFIG_CFI_CLANG),\nindirect call targets are validated against the expected function\npointer prototype to make sure the call target is valid to help mitigate\nROP attacks. If they are not identical, there is a failure at run time,\nwhich manifests as either a kernel panic or thread getting killed.\n\nmsc313_rtc_probe() was passing clk_disable_unprepare() directly, which\ndid not have matching prototypes for devm_add_action_or_reset()'s\ncallback argument. Refactor to use devm_clk_get_enabled() instead.\n\nThis was found as a result of Clang's new -Wcast-function-type-strict\nflag, which is more sensitive than the simpler -Wcast-function-type,\nwhich only checks for type width mismatches." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.17", + "matchCriteriaId": "05B2AE8A-556C-47C1-9119-DBAC5EB60947" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.3", + "matchCriteriaId": "70594F60-3413-4969-AFD7-965266760EA6" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/21b8a1dd56a163825e5749b303858fb902ebf198", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5affaaf3334c9274131dae889ed79ea0553d61b4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ba50fee6b41bcbafaeed3c51f90d37d1480ff9a0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-503xx/CVE-2022-50323.json b/CVE-2022/CVE-2022-503xx/CVE-2022-50323.json index a30b16475ac..a80fdd31281 100644 --- a/CVE-2022/CVE-2022-503xx/CVE-2022-50323.json +++ b/CVE-2022/CVE-2022-503xx/CVE-2022-50323.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50323", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:44.357", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:07:59.800", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,126 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: do not sense pfmemalloc status in skb_append_pagefrags()\n\nskb_append_pagefrags() is used by af_unix and udp sendpage()\nimplementation so far.\n\nIn commit 326140063946 (\"tcp: TX zerocopy should not sense\npfmemalloc status\") we explained why we should not sense\npfmemalloc status for pages owned by user space.\n\nWe should also use skb_fill_page_desc_noacc()\nin skb_append_pagefrags() to avoid following KCSAN report:\n\nBUG: KCSAN: data-race in lru_add_fn / skb_append_pagefrags\n\nwrite to 0xffffea00058fc1c8 of 8 bytes by task 17319 on cpu 0:\n__list_add include/linux/list.h:73 [inline]\nlist_add include/linux/list.h:88 [inline]\nlruvec_add_folio include/linux/mm_inline.h:323 [inline]\nlru_add_fn+0x327/0x410 mm/swap.c:228\nfolio_batch_move_lru+0x1e1/0x2a0 mm/swap.c:246\nlru_add_drain_cpu+0x73/0x250 mm/swap.c:669\nlru_add_drain+0x21/0x60 mm/swap.c:773\nfree_pages_and_swap_cache+0x16/0x70 mm/swap_state.c:311\ntlb_batch_pages_flush mm/mmu_gather.c:59 [inline]\ntlb_flush_mmu_free mm/mmu_gather.c:256 [inline]\ntlb_flush_mmu+0x5b2/0x640 mm/mmu_gather.c:263\ntlb_finish_mmu+0x86/0x100 mm/mmu_gather.c:363\nexit_mmap+0x190/0x4d0 mm/mmap.c:3098\n__mmput+0x27/0x1b0 kernel/fork.c:1185\nmmput+0x3d/0x50 kernel/fork.c:1207\ncopy_process+0x19fc/0x2100 kernel/fork.c:2518\nkernel_clone+0x166/0x550 kernel/fork.c:2671\n__do_sys_clone kernel/fork.c:2812 [inline]\n__se_sys_clone kernel/fork.c:2796 [inline]\n__x64_sys_clone+0xc3/0xf0 kernel/fork.c:2796\ndo_syscall_x64 arch/x86/entry/common.c:50 [inline]\ndo_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nread to 0xffffea00058fc1c8 of 8 bytes by task 17325 on cpu 1:\npage_is_pfmemalloc include/linux/mm.h:1817 [inline]\n__skb_fill_page_desc include/linux/skbuff.h:2432 [inline]\nskb_fill_page_desc include/linux/skbuff.h:2453 [inline]\nskb_append_pagefrags+0x210/0x600 net/core/skbuff.c:3974\nunix_stream_sendpage+0x45e/0x990 net/unix/af_unix.c:2338\nkernel_sendpage+0x184/0x300 net/socket.c:3561\nsock_sendpage+0x5a/0x70 net/socket.c:1054\npipe_to_sendpage+0x128/0x160 fs/splice.c:361\nsplice_from_pipe_feed fs/splice.c:415 [inline]\n__splice_from_pipe+0x222/0x4d0 fs/splice.c:559\nsplice_from_pipe fs/splice.c:594 [inline]\ngeneric_splice_sendpage+0x89/0xc0 fs/splice.c:743\ndo_splice_from fs/splice.c:764 [inline]\ndirect_splice_actor+0x80/0xa0 fs/splice.c:931\nsplice_direct_to_actor+0x305/0x620 fs/splice.c:886\ndo_splice_direct+0xfb/0x180 fs/splice.c:974\ndo_sendfile+0x3bf/0x910 fs/read_write.c:1255\n__do_sys_sendfile64 fs/read_write.c:1323 [inline]\n__se_sys_sendfile64 fs/read_write.c:1309 [inline]\n__x64_sys_sendfile64+0x10c/0x150 fs/read_write.c:1309\ndo_syscall_x64 arch/x86/entry/common.c:50 [inline]\ndo_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nvalue changed: 0x0000000000000000 -> 0xffffea00058fc188\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 1 PID: 17325 Comm: syz-executor.0 Not tainted 6.1.0-rc1-syzkaller-00158-g440b7895c990-dirty #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.68", + "versionEndExcluding": "5.15.77", + "matchCriteriaId": "F9838B2C-7013-4FA9-9A74-DDF6B426182B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19.9", + "versionEndExcluding": "6.0", + "matchCriteriaId": "C642BB6C-5AE7-4FF1-BFED-4CCC8FC1E127" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0.1", + "versionEndExcluding": "6.0.7", + "matchCriteriaId": "8E5B300B-886E-4B07-B4A0-D7F41770FD29" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:-:*:*:*:*:*:*", + "matchCriteriaId": "7BE551E5-89CF-47A8-9B26-03CE727FBA37" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*", + "matchCriteriaId": "8E5FB72F-67CE-43CC-83FE-541604D98182" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*", + "matchCriteriaId": "3A0A7397-F5F8-4753-82DC-9A11288E696D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc7:*:*:*:*:*:*", + "matchCriteriaId": "E6DE049A-ABA8-41DD-988C-8C088358EE9B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/228ebc41dfab5b5d34cd76835ddb0ca8ee12f513", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/847a2859814b31392340a2b16604b25afaa92dcc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/92b4c5c3fa810212da20088bcc6c0a77fc8607bd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-532xx/CVE-2023-53200.json b/CVE-2023/CVE-2023-532xx/CVE-2023-53200.json index f983beed98d..ecaac102153 100644 --- a/CVE-2023/CVE-2023-532xx/CVE-2023-53200.json +++ b/CVE-2023/CVE-2023-532xx/CVE-2023-53200.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53200", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:46.400", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:07:32.157", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,23 +11,103 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: x_tables: fix percpu counter block leak on error path when creating new netns\n\nHere is the stack where we allocate percpu counter block:\n\n +-< __alloc_percpu\n +-< xt_percpu_counter_alloc\n +-< find_check_entry # {arp,ip,ip6}_tables.c\n +-< translate_table\n\nAnd it can be leaked on this code path:\n\n +-> ip6t_register_table\n +-> translate_table # allocates percpu counter block\n +-> xt_register_table # fails\n\nthere is no freeing of the counter block on xt_register_table fail.\nNote: xt_percpu_counter_free should be called to free it like we do in\ndo_replace through cleanup_entry helper (or in __ip6t_unregister_table).\n\nProbability of hitting this error path is low AFAICS (xt_register_table\ncan only return ENOMEM here, as it is not replacing anything, as we are\ncreating new netns, and it is hard to imagine that all previous\nallocations succeeded and after that one in xt_register_table failed).\nBut it's worth fixing even the rare leak." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.2", + "versionEndExcluding": "5.15.100", + "matchCriteriaId": "597EA373-48DF-4357-AABE-E932074EE4EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.18", + "matchCriteriaId": "C8D24FD5-5A98-4042-9419-39DCFCBEFFF5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.2.5", + "matchCriteriaId": "0575B33B-A320-4E51-84CA-10C937341E02" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0af8c09c896810879387decfba8c942994bb61f5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3cc9610a87b7dde82f7360dd4eb6c2c27940ed57", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/512b6c4b83c91d007301ea7d7f095d16c3aceacd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e306dbee4c98025a9326386023a12ef4d887e9d1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-532xx/CVE-2023-53201.json b/CVE-2023/CVE-2023-532xx/CVE-2023-53201.json index d1ccadba46a..f00cacd8834 100644 --- a/CVE-2023/CVE-2023-532xx/CVE-2023-53201.json +++ b/CVE-2023/CVE-2023-532xx/CVE-2023-53201.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53201", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:46.513", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:07:21.827", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,31 +11,131 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/bnxt_re: wraparound mbox producer index\n\nDriver is not handling the wraparound of the mbox producer index correctly.\nCurrently the wraparound happens once u32 max is reached.\n\nBit 31 of the producer index register is special and should be set\nonly once for the first command. Because the producer index overflow\nsetting bit31 after a long time, FW goes to initialization sequence\nand this causes FW hang.\n\nFix is to wraparound the mbox producer index once it reaches u16 max." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.11", + "versionEndExcluding": "5.10.188", + "matchCriteriaId": "E45E7731-FBA7-4D75-9FC4-29304D9F5DE2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.121", + "matchCriteriaId": "EC77775B-EC31-4966-966C-1286C02B2A85" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.39", + "matchCriteriaId": "9BD1D4A1-304D-4187-8178-6D7C0050B1AF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.3.13", + "matchCriteriaId": "95CB4836-7F5D-4C20-B025-8E046EC87B78" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.4", + "versionEndExcluding": "6.4.4", + "matchCriteriaId": "6AB81046-CB69-4115-924C-963B37C41385" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0af91306e17ef3d18e5f100aa58aa787869118af", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/50d77c3739b2b15e9e1f1c9cbe50037d294800f8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/79226176cdd1b65a1e6a90e0e1a2b490f0a9df33", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7bfa0303fbc265c94cfbd17505c55b99848aa4e3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9341501e2f7af29f5b5562c2840a7fde40eb7de4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c9be352be9bb15e6b83e40abc4df7f4776b435ba", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-532xx/CVE-2023-53203.json b/CVE-2023/CVE-2023-532xx/CVE-2023-53203.json index fceb80fdfd4..c1b0c6f6a5d 100644 --- a/CVE-2023/CVE-2023-532xx/CVE-2023-53203.json +++ b/CVE-2023/CVE-2023-532xx/CVE-2023-53203.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53203", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:46.737", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:07:07.453", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,15 +11,75 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7996: rely on mt76_connac2_mac_tx_rate_val\n\nIn order to fix a possible NULL pointer dereference in\nmt7996_mac_write_txwi() of vif pointer, export\nmt76_connac2_mac_tx_rate_val utility routine and reuse it\nin mt7996 driver." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.2.3", + "matchCriteriaId": "88C67289-22AD-4CA9-B202-5F5A80E5BA4B" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0765b5b4719f0435bb019370b317d2fb8138eb34", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0b8e2d69467f78a7c9d87b452220e87012435e33", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-532xx/CVE-2023-53204.json b/CVE-2023/CVE-2023-532xx/CVE-2023-53204.json index 5cbe95edb29..62d4d7962eb 100644 --- a/CVE-2023/CVE-2023-532xx/CVE-2023-53204.json +++ b/CVE-2023/CVE-2023-532xx/CVE-2023-53204.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53204", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:46.847", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:06:57.090", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,208 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_unix: Fix data-races around user->unix_inflight.\n\nuser->unix_inflight is changed under spin_lock(unix_gc_lock),\nbut too_many_unix_fds() reads it locklessly.\n\nLet's annotate the write/read accesses to user->unix_inflight.\n\nBUG: KCSAN: data-race in unix_attach_fds / unix_inflight\n\nwrite to 0xffffffff8546f2d0 of 8 bytes by task 44798 on cpu 1:\n unix_inflight+0x157/0x180 net/unix/scm.c:66\n unix_attach_fds+0x147/0x1e0 net/unix/scm.c:123\n unix_scm_to_skb net/unix/af_unix.c:1827 [inline]\n unix_dgram_sendmsg+0x46a/0x14f0 net/unix/af_unix.c:1950\n unix_seqpacket_sendmsg net/unix/af_unix.c:2308 [inline]\n unix_seqpacket_sendmsg+0xba/0x130 net/unix/af_unix.c:2292\n sock_sendmsg_nosec net/socket.c:725 [inline]\n sock_sendmsg+0x148/0x160 net/socket.c:748\n ____sys_sendmsg+0x4e4/0x610 net/socket.c:2494\n ___sys_sendmsg+0xc6/0x140 net/socket.c:2548\n __sys_sendmsg+0x94/0x140 net/socket.c:2577\n __do_sys_sendmsg net/socket.c:2586 [inline]\n __se_sys_sendmsg net/socket.c:2584 [inline]\n __x64_sys_sendmsg+0x45/0x50 net/socket.c:2584\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x6e/0xd8\n\nread to 0xffffffff8546f2d0 of 8 bytes by task 44814 on cpu 0:\n too_many_unix_fds net/unix/scm.c:101 [inline]\n unix_attach_fds+0x54/0x1e0 net/unix/scm.c:110\n unix_scm_to_skb net/unix/af_unix.c:1827 [inline]\n unix_dgram_sendmsg+0x46a/0x14f0 net/unix/af_unix.c:1950\n unix_seqpacket_sendmsg net/unix/af_unix.c:2308 [inline]\n unix_seqpacket_sendmsg+0xba/0x130 net/unix/af_unix.c:2292\n sock_sendmsg_nosec net/socket.c:725 [inline]\n sock_sendmsg+0x148/0x160 net/socket.c:748\n ____sys_sendmsg+0x4e4/0x610 net/socket.c:2494\n ___sys_sendmsg+0xc6/0x140 net/socket.c:2548\n __sys_sendmsg+0x94/0x140 net/socket.c:2577\n __do_sys_sendmsg net/socket.c:2586 [inline]\n __se_sys_sendmsg net/socket.c:2584 [inline]\n __x64_sys_sendmsg+0x45/0x50 net/socket.c:2584\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x6e/0xd8\n\nvalue changed: 0x000000000000000c -> 0x000000000000000d\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 0 PID: 44814 Comm: systemd-coredum Not tainted 6.4.0-11989-g6843306689af #6\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.2.78", + "versionEndExcluding": "3.3", + "matchCriteriaId": "6E88DBF7-9C11-49CD-88B6-9AE0E5350F94" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.10.96", + "versionEndExcluding": "3.11", + "matchCriteriaId": "2D30AFF3-EA15-42C2-A3E0-8D98B6C41B08" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.12.57", + "versionEndExcluding": "3.13", + "matchCriteriaId": "891B3685-B840-4760-BEF5-B60FABCA63EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.14.60", + "versionEndExcluding": "3.15", + "matchCriteriaId": "5194146E-93C8-405F-8D58-440F1FF8D1F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.18.27", + "versionEndExcluding": "3.19", + "matchCriteriaId": "14D92A66-8C70-4279-97AA-2054416F1C44" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.1.17", + "versionEndExcluding": "4.2", + "matchCriteriaId": "E2E107F1-35B3-421F-8885-96D2886DA0D5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.3.5", + "versionEndExcluding": "4.4", + "matchCriteriaId": "10BEA0F1-FF96-4EBA-AAEA-0F6D1029A44B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.4.1", + "versionEndExcluding": "4.14.326", + "matchCriteriaId": "6EA8100E-C690-4C8A-9415-43903B77DF1B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.295", + "matchCriteriaId": "D419C7D6-F33D-4EF8-8950-1CB5DDF6A55D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.257", + "matchCriteriaId": "834BD148-28EC-43A4-A4F5-458124A1E39F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.195", + "matchCriteriaId": "C385B650-53DB-4BFB-83D1-1D8FADF653EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.132", + "matchCriteriaId": "5913891D-409A-4EEC-9231-F2EF5A493BC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.54", + "matchCriteriaId": "7353B9B4-AFFC-45DE-840E-1A7D2B00E7AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.5.4", + "matchCriteriaId": "CA8C8B88-AF36-445D-A228-AD78F3615373" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/03d133dfbcec9d439729cc64706c7eb6d1663a24", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0bc36c0650b21df36fbec8136add83936eaf0607", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9151ed4b006125cba7c06c79df504340ea4e9386", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ac92f239a079678a035c0faad9089354a874aede", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/adcf4e069358cdee8593663650ea447215a1c49e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b401d7e485b0a234cf8fe9a6ae99dbcd20863138", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b9cdbb38e030fc2fe97fe27b54cbb6b4fbff250f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/df97b5ea9f3ac9308c3a633524dab382cd59d9e5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-532xx/CVE-2023-53205.json b/CVE-2023/CVE-2023-532xx/CVE-2023-53205.json index d8e16d60554..67dfa3c805d 100644 --- a/CVE-2023/CVE-2023-532xx/CVE-2023-53205.json +++ b/CVE-2023/CVE-2023-532xx/CVE-2023-53205.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53205", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:46.977", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:06:38.500", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,23 +11,103 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390/diag: fix racy access of physical cpu number in diag 9c handler\n\nWe do check for target CPU == -1, but this might change at the time we\nare going to use it. Hold the physical target CPU in a local variable to\navoid out-of-bound accesses to the cpu arrays." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.13", + "versionEndExcluding": "5.15.121", + "matchCriteriaId": "2DD70DCA-71F9-4ADA-BA85-6F161D80109D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.39", + "matchCriteriaId": "9BD1D4A1-304D-4187-8178-6D7C0050B1AF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.4.4", + "matchCriteriaId": "A91BC267-63EE-413E-A6EF-6B96C2A278D1" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0bc380beb78aa352eadbc21d934dd9606fcee808", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/86bfb18bad60fc468e5f112cbbd918462a8dd435", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a9ccf140a2a03a0ae82be4bdfbdd17bdaea72ff5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dc7e0192c470a53d847c79a2796f9ac429477a26", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-532xx/CVE-2023-53206.json b/CVE-2023/CVE-2023-532xx/CVE-2023-53206.json index 6df0dc66f69..dd83bcf84e9 100644 --- a/CVE-2023/CVE-2023-532xx/CVE-2023-53206.json +++ b/CVE-2023/CVE-2023-532xx/CVE-2023-53206.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53206", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:47.090", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:06:28.720", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,15 +11,90 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (pmbus_core) Fix NULL pointer dereference\n\nPass i2c_client to _pmbus_is_enabled to drop the assumption\nthat a regulator device is passed in.\n\nThis will fix the issue of a NULL pointer dereference when called from\n_pmbus_get_flags." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.4", + "versionEndExcluding": "6.4.8", + "matchCriteriaId": "645579C2-235B-4FCC-A399-CECF5423170F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*", + "matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F5608371-157A-4318-8A2E-4104C3467EA1" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0bd66784274a287beada2933c2c0fa3a0ddae0d7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7444253cacd92412bc8d33d1c9b5401f52cdf0e2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-532xx/CVE-2023-53207.json b/CVE-2023/CVE-2023-532xx/CVE-2023-53207.json index c4963517bd7..1a037f6472d 100644 --- a/CVE-2023/CVE-2023-532xx/CVE-2023-53207.json +++ b/CVE-2023/CVE-2023-532xx/CVE-2023-53207.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53207", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:47.203", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:06:19.880", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,104 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nublk: fail to recover device if queue setup is interrupted\n\nIn ublk_ctrl_end_recovery(), if wait_for_completion_interruptible() is\ninterrupted by signal, queues aren't setup successfully yet, so we\nhave to fail UBLK_CMD_END_USER_RECOVERY, otherwise kernel oops can be\ntriggered." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1", + "versionEndExcluding": "6.1.43", + "matchCriteriaId": "B3611DCA-FF7E-48AB-B4D1-8E7ADA20D2AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.4.8", + "matchCriteriaId": "6F5CB671-C757-4B7A-B3D3-283AFE20F0D7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*", + "matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*", + "matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*", + "matchCriteriaId": "F5608371-157A-4318-8A2E-4104C3467EA1" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0c0cbd4ebc375ceebc75c89df04b74f215fab23a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/84415f934ad4e96f3507fd09b831953d60fb04ec", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b3a1e243a74632f88b22e713f1c7256754017d58", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-532xx/CVE-2023-53208.json b/CVE-2023/CVE-2023-532xx/CVE-2023-53208.json index cdc73a121d2..b32de0d7cac 100644 --- a/CVE-2023/CVE-2023-532xx/CVE-2023-53208.json +++ b/CVE-2023/CVE-2023-532xx/CVE-2023-53208.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53208", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:47.320", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:06:09.160", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,89 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state\n\nWhen emulating nested VM-Exit, load L1's TSC multiplier if L1's desired\nratio doesn't match the current ratio, not if the ratio L1 is using for\nL2 diverges from the default. Functionally, the end result is the same\nas KVM will run L2 with L1's multiplier if L2's multiplier is the default,\ni.e. checking that L1's multiplier is loaded is equivalent to checking if\nL2 has a non-default multiplier.\n\nHowever, the assertion that TSC scaling is exposed to L1 is flawed, as\nuserspace can trigger the WARN at will by writing the MSR and then\nupdating guest CPUID to hide the feature (modifying guest CPUID is\nallowed anytime before KVM_RUN). E.g. hacking KVM's state_test\nselftest to do\n\n vcpu_set_msr(vcpu, MSR_AMD64_TSC_RATIO, 0);\n vcpu_clear_cpuid_feature(vcpu, X86_FEATURE_TSCRATEMSR);\n\nafter restoring state in a new VM+vCPU yields an endless supply of:\n\n ------------[ cut here ]------------\n WARNING: CPU: 10 PID: 206939 at arch/x86/kvm/svm/nested.c:1105\n nested_svm_vmexit+0x6af/0x720 [kvm_amd]\n Call Trace:\n nested_svm_exit_handled+0x102/0x1f0 [kvm_amd]\n svm_handle_exit+0xb9/0x180 [kvm_amd]\n kvm_arch_vcpu_ioctl_run+0x1eab/0x2570 [kvm]\n kvm_vcpu_ioctl+0x4c9/0x5b0 [kvm]\n ? trace_hardirqs_off+0x4d/0xa0\n __se_sys_ioctl+0x7a/0xc0\n __x64_sys_ioctl+0x21/0x30\n do_syscall_64+0x41/0x90\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nUnlike the nested VMRUN path, hoisting the svm->tsc_scaling_enabled check\ninto the if-statement is wrong as KVM needs to ensure L1's multiplier is\nloaded in the above scenario. Alternatively, the WARN_ON() could simply\nbe deleted, but that would make KVM's behavior even more subtle, e.g. it's\nnot immediately obvious why it's safe to write MSR_AMD64_TSC_RATIO when\nchecking only tsc_ratio_msr." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.54", + "matchCriteriaId": "7353B9B4-AFFC-45DE-840E-1A7D2B00E7AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.5.4", + "matchCriteriaId": "CA8C8B88-AF36-445D-A228-AD78F3615373" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0c94e2468491cbf0754f49a5136ab51294a96b69", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5b2b0535fa7adee7e295fed0a3095082131a8d05", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e91c07f6cf7060d2acb3aeee31a6baebe3773d3f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-532xx/CVE-2023-53209.json b/CVE-2023/CVE-2023-532xx/CVE-2023-53209.json index b892a2862e2..20cd3c1cf66 100644 --- a/CVE-2023/CVE-2023-532xx/CVE-2023-53209.json +++ b/CVE-2023/CVE-2023-532xx/CVE-2023-53209.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53209", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:47.437", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:05:57.960", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,19 +11,88 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211_hwsim: Fix possible NULL dereference\n\nIn a call to mac80211_hwsim_select_tx_link() the sta pointer might\nbe NULL, thus need to check that it is not NULL before accessing it." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.1.42", + "matchCriteriaId": "F467B5D9-644D-4BD1-9BC8-C0A35E3E9012" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.4.7", + "matchCriteriaId": "60A1A1ED-EA6C-42F6-80D3-3316DC7608C7" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0cc80943ef518a1c51a1111e9346d1daf11dd545", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a8a20fed3e05b3a6866c5c58855deaf3c217ccd6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d0124848c7940aba73492e282506b32a13f2e30e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-532xx/CVE-2023-53210.json b/CVE-2023/CVE-2023-532xx/CVE-2023-53210.json index 7bddcda20e9..2495bfebb02 100644 --- a/CVE-2023/CVE-2023-532xx/CVE-2023-53210.json +++ b/CVE-2023/CVE-2023-532xx/CVE-2023-53210.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53210", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:47.547", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:01:04.117", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,23 +11,103 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid()\n\nr5l_flush_stripe_to_raid() will check if the list 'flushing_ios' is\nempty, and then submit 'flush_bio', however, r5l_log_flush_endio()\nis clearing the list first and then clear the bio, which will cause\nnull-ptr-deref:\n\nT1: submit flush io\nraid5d\n handle_active_stripes\n r5l_flush_stripe_to_raid\n // list is empty\n // add 'io_end_ios' to the list\n bio_init\n submit_bio\n // io1\n\nT2: io1 is done\nr5l_log_flush_endio\n list_splice_tail_init\n // clear the list\n\t\t\tT3: submit new flush io\n\t\t\t...\n\t\t\tr5l_flush_stripe_to_raid\n\t\t\t // list is empty\n\t\t\t // add 'io_end_ios' to the list\n\t\t\t bio_init\n bio_uninit\n // clear bio->bi_blkg\n\t\t\t submit_bio\n\t\t\t // null-ptr-deref\n\nFix this problem by clearing bio before clearing the list in\nr5l_log_flush_endio()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "6.1.53", + "matchCriteriaId": "D6D40380-C0F3-42CE-9D26-957632D198A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.4.16", + "matchCriteriaId": "C3039EA3-F6CA-43EF-9F17-81A7EC6841EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.5", + "versionEndExcluding": "6.5.3", + "matchCriteriaId": "880C803A-BEAE-4DA0-8A59-AC023F7B4EE3" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0d0bd28c500173bfca78aa840f8f36d261ef1765", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/711fb92606208a8626b785da4f9f23d648a5b6c8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7a8b6d93991bf4b72b3f959baea35397c6c8e521", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e46b2e7be8059d156af8c011dd8d665229b65886", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-532xx/CVE-2023-53213.json b/CVE-2023/CVE-2023-532xx/CVE-2023-53213.json index b7afa63d565..f90bbb264b4 100644 --- a/CVE-2023/CVE-2023-532xx/CVE-2023-53213.json +++ b/CVE-2023/CVE-2023-532xx/CVE-2023-53213.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53213", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:47.900", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:00:27.650", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,43 +11,172 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()\n\nFix a slab-out-of-bounds read that occurs in kmemdup() called from\nbrcmf_get_assoc_ies().\nThe bug could occur when assoc_info->req_len, data from a URB provided\nby a USB device, is bigger than the size of buffer which is defined as\nWL_EXTRA_BUF_MAX.\n\nAdd the size check for req_len/resp_len of assoc_info.\n\nFound by a modified version of syzkaller.\n\n[ 46.592467][ T7] ==================================================================\n[ 46.594687][ T7] BUG: KASAN: slab-out-of-bounds in kmemdup+0x3e/0x50\n[ 46.596572][ T7] Read of size 3014656 at addr ffff888019442000 by task kworker/0:1/7\n[ 46.598575][ T7]\n[ 46.599157][ T7] CPU: 0 PID: 7 Comm: kworker/0:1 Tainted: G O 5.14.0+ #145\n[ 46.601333][ T7] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.1-0-ga5cab58e9a3f-prebuilt.qemu.org 04/01/2014\n[ 46.604360][ T7] Workqueue: events brcmf_fweh_event_worker\n[ 46.605943][ T7] Call Trace:\n[ 46.606584][ T7] dump_stack_lvl+0x8e/0xd1\n[ 46.607446][ T7] print_address_description.constprop.0.cold+0x93/0x334\n[ 46.608610][ T7] ? kmemdup+0x3e/0x50\n[ 46.609341][ T7] kasan_report.cold+0x79/0xd5\n[ 46.610151][ T7] ? kmemdup+0x3e/0x50\n[ 46.610796][ T7] kasan_check_range+0x14e/0x1b0\n[ 46.611691][ T7] memcpy+0x20/0x60\n[ 46.612323][ T7] kmemdup+0x3e/0x50\n[ 46.612987][ T7] brcmf_get_assoc_ies+0x967/0xf60\n[ 46.613904][ T7] ? brcmf_notify_vif_event+0x3d0/0x3d0\n[ 46.614831][ T7] ? lock_chain_count+0x20/0x20\n[ 46.615683][ T7] ? mark_lock.part.0+0xfc/0x2770\n[ 46.616552][ T7] ? lock_chain_count+0x20/0x20\n[ 46.617409][ T7] ? mark_lock.part.0+0xfc/0x2770\n[ 46.618244][ T7] ? lock_chain_count+0x20/0x20\n[ 46.619024][ T7] brcmf_bss_connect_done.constprop.0+0x241/0x2e0\n[ 46.620019][ T7] ? brcmf_parse_configure_security.isra.0+0x2a0/0x2a0\n[ 46.620818][ T7] ? __lock_acquire+0x181f/0x5790\n[ 46.621462][ T7] brcmf_notify_connect_status+0x448/0x1950\n[ 46.622134][ T7] ? rcu_read_lock_bh_held+0xb0/0xb0\n[ 46.622736][ T7] ? brcmf_cfg80211_join_ibss+0x7b0/0x7b0\n[ 46.623390][ T7] ? find_held_lock+0x2d/0x110\n[ 46.623962][ T7] ? brcmf_fweh_event_worker+0x19f/0xc60\n[ 46.624603][ T7] ? mark_held_locks+0x9f/0xe0\n[ 46.625145][ T7] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0\n[ 46.625871][ T7] ? brcmf_cfg80211_join_ibss+0x7b0/0x7b0\n[ 46.626545][ T7] brcmf_fweh_call_event_handler.isra.0+0x90/0x100\n[ 46.627338][ T7] brcmf_fweh_event_worker+0x557/0xc60\n[ 46.627962][ T7] ? brcmf_fweh_call_event_handler.isra.0+0x100/0x100\n[ 46.628736][ T7] ? rcu_read_lock_sched_held+0xa1/0xd0\n[ 46.629396][ T7] ? rcu_read_lock_bh_held+0xb0/0xb0\n[ 46.629970][ T7] ? lockdep_hardirqs_on_prepare+0x273/0x3e0\n[ 46.630649][ T7] process_one_work+0x92b/0x1460\n[ 46.631205][ T7] ? pwq_dec_nr_in_flight+0x330/0x330\n[ 46.631821][ T7] ? rwlock_bug.part.0+0x90/0x90\n[ 46.632347][ T7] worker_thread+0x95/0xe00\n[ 46.632832][ T7] ? __kthread_parkme+0x115/0x1e0\n[ 46.633393][ T7] ? process_one_work+0x1460/0x1460\n[ 46.633957][ T7] kthread+0x3a1/0x480\n[ 46.634369][ T7] ? set_kthread_struct+0x120/0x120\n[ 46.634933][ T7] ret_from_fork+0x1f/0x30\n[ 46.635431][ T7]\n[ 46.635687][ T7] Allocated by task 7:\n[ 46.636151][ T7] kasan_save_stack+0x1b/0x40\n[ 46.636628][ T7] __kasan_kmalloc+0x7c/0x90\n[ 46.637108][ T7] kmem_cache_alloc_trace+0x19e/0x330\n[ 46.637696][ T7] brcmf_cfg80211_attach+0x4a0/0x4040\n[ 46.638275][ T7] brcmf_attach+0x389/0xd40\n[ 46.638739][ T7] brcmf_usb_probe+0x12de/0x1690\n[ 46.639279][ T7] usb_probe_interface+0x2aa/0x760\n[ 46.639820][ T7] really_probe+0x205/0xb70\n[ 46.640342][ T7] __driver_probe_device+0\n---truncated---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.14.315", + "matchCriteriaId": "1A8A9F0F-3562-4C72-A33C-CEFDA424F998" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.283", + "matchCriteriaId": "8AC1BC2D-A61C-4368-A3F6-50DF48E2EFC5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.243", + "matchCriteriaId": "E54ACEF5-C8C1-4266-85FC-7D513FFD1DEC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.180", + "matchCriteriaId": "78422AC3-CC89-479E-B4BC-62381D8F3564" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.110", + "matchCriteriaId": "F8674279-AC2F-41B0-BD2E-29AFEBA31CA0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.27", + "matchCriteriaId": "F6D7B93C-E8E7-4BEB-B708-3780D7793DAE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.2.14", + "matchCriteriaId": "0E62BC79-E13F-46D3-9641-F34A9BFDF62C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.3", + "versionEndExcluding": "6.3.1", + "matchCriteriaId": "18CA5E1B-C679-442E-8ADB-E56ACDE39BBE" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0da40e018fd034d87c9460123fa7f897b69fdee7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/21bee3e649d87f78fe8aef6ae02edd3d6f310fd0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/228186629ea970cc78b7d7d5f593f2d32fddf9f6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/39f9bd880abac6068bedb24a4e16e7bd26bf92da", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/425eea395f1f5ae349fb55f7fe51d833a5324bfe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/549825602e3e6449927ca1ea1a08fd89868439df", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/936a23293bbb3332bdf4cdb9c1496e80cb0bc2c8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ac5305e5d227b9af3aae25fa83380d3ff0225b73", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e29661611e6e71027159a3140e818ef3b99f32dd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-532xx/CVE-2023-53222.json b/CVE-2023/CVE-2023-532xx/CVE-2023-53222.json index d732faa6770..407c9011e79 100644 --- a/CVE-2023/CVE-2023-532xx/CVE-2023-53222.json +++ b/CVE-2023/CVE-2023-532xx/CVE-2023-53222.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53222", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:48.983", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:00:14.343", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,158 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: jfs_dmap: Validate db_l2nbperpage while mounting\n\nIn jfs_dmap.c at line 381, BLKTODMAP is used to get a logical block\nnumber inside dbFree(). db_l2nbperpage, which is the log2 number of\nblocks per page, is passed as an argument to BLKTODMAP which uses it\nfor shifting.\n\nSyzbot reported a shift out-of-bounds crash because db_l2nbperpage is\ntoo big. This happens because the large value is set without any\nvalidation in dbMount() at line 181.\n\nThus, make sure that db_l2nbperpage is correct while mounting.\n\nMax number of blocks per page = Page size / Min block size\n=> log2(Max num_block per page) = log2(Page size / Min block size)\n\t\t\t\t= log2(Page size) - log2(Min block size)\n\n=> Max db_l2nbperpage = L2PSIZE - L2MINBLOCKSIZE" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.14.322", + "matchCriteriaId": "90AC7CB1-E8BF-40AF-84E7-2196AD6394B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.291", + "matchCriteriaId": "D2D2CA9F-4CC4-4AF5-8C6D-E58415AB782E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.251", + "matchCriteriaId": "7FA663C4-CA72-4B5A-8592-7354D978F58E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.188", + "matchCriteriaId": "43CAE50A-4A6C-488E-813C-F8DB77C13C8B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.121", + "matchCriteriaId": "EC77775B-EC31-4966-966C-1286C02B2A85" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.40", + "matchCriteriaId": "69315BCC-36D2-45CD-84F8-381EDF8E38F3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.4.5", + "matchCriteriaId": "923F6AEA-C2EF-4B08-B038-69A18F3D41F8" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/11509910c599cbd04585ec35a6d5e1a0053d84c1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2a03c4e683d33d17b667418eb717b13dda1fac6b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/47b7eaae08e8b2f25bdf37bc14d21be090bcb20f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8c1efe3f74a7864461b0dff281c5562154b4aa8e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a4855aeb13e4ad1f23e16753b68212e180f7d848", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c7feb54b113802d2aba98708769d3c33fb017254", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/de984faecddb900fa850af4df574a25b32bb93f5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ef5c205b6e6f8d1f18ef0b4a9832b1b5fa85f7f2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-532xx/CVE-2023-53223.json b/CVE-2023/CVE-2023-532xx/CVE-2023-53223.json index af79b13ef14..d9ce56d59b3 100644 --- a/CVE-2023/CVE-2023-532xx/CVE-2023-53223.json +++ b/CVE-2023/CVE-2023-532xx/CVE-2023-53223.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53223", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:49.123", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:00:02.000", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,39 +11,158 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/dsi: Add missing check for alloc_ordered_workqueue\n\nAdd check for the return value of alloc_ordered_workqueue as it may return\nNULL pointer and cause NULL pointer dereference.\n\nPatchwork: https://patchwork.freedesktop.org/patch/517646/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.14.308", + "matchCriteriaId": "C56CFB26-8D6C-4A3D-99C5-DA43FA59DB77" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.276", + "matchCriteriaId": "C902FC54-DDBD-4DA6-BFEF-26889A267464" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.235", + "matchCriteriaId": "13DD5E68-8CB4-46EE-9A8F-C7F6C1A84430" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.173", + "matchCriteriaId": "4D810CFB-B7C5-493C-B98A-0D5F0D8A47B6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.99", + "matchCriteriaId": "5B8B2AC9-2F31-4A0F-96F5-7E26B50B27BB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.16", + "matchCriteriaId": "0FD95FDA-6525-4B13-B3FB-49D9995FD8ED" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.2.3", + "matchCriteriaId": "88C67289-22AD-4CA9-B202-5F5A80E5BA4B" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/115906ca7b535afb1fe7b5406c566ccd3873f82b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/25a6499b1a53d854eda2b161b5c8a20296515dbe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3a9a4a9725c60f04326b5019a52ce15aee808506", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3e18f157faeeb59034404569e8e07cbe1c0030a7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/540c66180afd59309a442d3bf1f2393464c8b4c5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5dfe7a5386fde5a656ca06602b31bf50e26954cd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/759ea5677c362fb1e3edc667260ba9f409dc931d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9257974858ee847b2e1fd552691b8ba5c2fc1c7b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-532xx/CVE-2023-53237.json b/CVE-2023/CVE-2023-532xx/CVE-2023-53237.json index 9bdfaa26183..802e4abf513 100644 --- a/CVE-2023/CVE-2023-532xx/CVE-2023-53237.json +++ b/CVE-2023/CVE-2023-532xx/CVE-2023-53237.json @@ -2,8 +2,8 @@ "id": "CVE-2023-53237", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-09-15T15:15:50.770", - "lastModified": "2025-09-15T15:22:27.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:18:54.620", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,23 +11,108 @@ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini\n\nThe gmc.ecc_irq is enabled by firmware per IFWI setting,\nand the host driver is not privileged to enable/disable\nthe interrupt. So, it is meaningless to use the amdgpu_irq_put\nfunction in gmc_v11_0_hw_fini, which also leads to the call\ntrace.\n\n[ 102.980303] Call Trace:\n[ 102.980303] \n[ 102.980304] gmc_v11_0_hw_fini+0x54/0x90 [amdgpu]\n[ 102.980357] gmc_v11_0_suspend+0xe/0x20 [amdgpu]\n[ 102.980409] amdgpu_device_ip_suspend_phase2+0x240/0x460 [amdgpu]\n[ 102.980459] amdgpu_device_ip_suspend+0x3d/0x80 [amdgpu]\n[ 102.980520] amdgpu_device_pre_asic_reset+0xd9/0x490 [amdgpu]\n[ 102.980573] amdgpu_device_gpu_recover.cold+0x548/0xce6 [amdgpu]\n[ 102.980687] amdgpu_debugfs_reset_work+0x4c/0x70 [amdgpu]\n[ 102.980740] process_one_work+0x21f/0x3f0\n[ 102.980741] worker_thread+0x200/0x3e0\n[ 102.980742] ? process_one_work+0x3f0/0x3f0\n[ 102.980743] kthread+0xfd/0x130\n[ 102.980743] ? kthread_complete_and_exit+0x20/0x20\n[ 102.980744] ret_from_fork+0x22/0x30" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.26", + "versionEndExcluding": "6.1.29", + "matchCriteriaId": "E194FA18-25A2-4D52-B9D4-0A9F06EB82E7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2.13", + "versionEndExcluding": "6.2.16", + "matchCriteriaId": "B0B55E7A-6035-43AF-BCB4-43AA7BFA8BD6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.3.1", + "versionEndExcluding": "6.3.3", + "matchCriteriaId": "C05BCEF5-7201-4DBA-8DC9-D78F17C46057" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.3:-:*:*:*:*:*:*", + "matchCriteriaId": "21D6F467-B848-453E-B1A4-BEF940E413A6" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/02e6cb9b3aeffc6b0e3955f6e0346293e2415cbc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/13af556104fa93b1945c70bbf8a0a62cd2c92879", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/396401bc035ff5bf0c7b29c67caa10040eb3fb62", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/79038b78af931908d6f5d4e279d3afe32e7c840b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-38xx/CVE-2024-3884.json b/CVE-2024/CVE-2024-38xx/CVE-2024-3884.json index 098ea9adf31..2acb8f4ec14 100644 --- a/CVE-2024/CVE-2024-38xx/CVE-2024-3884.json +++ b/CVE-2024/CVE-2024-38xx/CVE-2024-3884.json @@ -2,7 +2,7 @@ "id": "CVE-2024-3884", "sourceIdentifier": "secalert@redhat.com", "published": "2025-12-03T19:15:54.767", - "lastModified": "2025-12-03T19:15:54.767", + "lastModified": "2025-12-04T16:16:14.310", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert@redhat.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", @@ -38,7 +38,7 @@ "weaknesses": [ { "source": "secalert@redhat.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -48,6 +48,10 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2025:22777", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2024-3884", "source": "secalert@redhat.com" diff --git a/CVE-2024/CVE-2024-455xx/CVE-2024-45538.json b/CVE-2024/CVE-2024-455xx/CVE-2024-45538.json new file mode 100644 index 00000000000..b223511559f --- /dev/null +++ b/CVE-2024/CVE-2024-455xx/CVE-2024-45538.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2024-45538", + "sourceIdentifier": "security@synology.com", + "published": "2025-12-04T15:15:54.290", + "lastModified": "2025-12-04T15:15:54.290", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote attackers to execute arbitrary code via unspecified vectors." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@synology.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", + "baseScore": 9.6, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "security@synology.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_24_27", + "source": "security@synology.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-455xx/CVE-2024-45539.json b/CVE-2024/CVE-2024-455xx/CVE-2024-45539.json new file mode 100644 index 00000000000..491bc79c134 --- /dev/null +++ b/CVE-2024/CVE-2024-455xx/CVE-2024-45539.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2024-45539", + "sourceIdentifier": "security@synology.com", + "published": "2025-12-04T15:15:54.520", + "lastModified": "2025-12-04T15:15:54.520", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote attackers to conduct denial-of-service attacks via unspecified vectors." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@synology.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security@synology.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_24_27", + "source": "security@synology.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-54xx/CVE-2024-5401.json b/CVE-2024/CVE-2024-54xx/CVE-2024-5401.json new file mode 100644 index 00000000000..536a3c5167e --- /dev/null +++ b/CVE-2024/CVE-2024-54xx/CVE-2024-5401.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2024-5401", + "sourceIdentifier": "security@synology.com", + "published": "2025-12-04T15:15:54.733", + "lastModified": "2025-12-04T15:15:54.733", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manager (DSM) before 7.1.1-42962-8 and 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote authenticated users to obtain privileges without consent via unspecified vectors." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@synology.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@synology.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-913" + } + ] + } + ], + "references": [ + { + "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_24_27", + "source": "security@synology.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-112xx/CVE-2025-11222.json b/CVE-2025/CVE-2025-112xx/CVE-2025-11222.json index b8411bdc3f2..b6eb75e2431 100644 --- a/CVE-2025/CVE-2025-112xx/CVE-2025-11222.json +++ b/CVE-2025/CVE-2025-112xx/CVE-2025-11222.json @@ -2,7 +2,7 @@ "id": "CVE-2025-11222", "sourceIdentifier": "dl_cve@linecorp.com", "published": "2025-12-04T13:15:46.797", - "lastModified": "2025-12-04T13:15:46.797", + "lastModified": "2025-12-04T15:15:54.937", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -35,6 +35,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-601" + } + ] + } + ], "references": [ { "url": "https://github.com/line/centraldogma/security/advisories/GHSA-4hr2-xf7w-jf76", diff --git a/CVE-2025/CVE-2025-119xx/CVE-2025-11931.json b/CVE-2025/CVE-2025-119xx/CVE-2025-11931.json index e5c4deb819a..6f185f83e16 100644 --- a/CVE-2025/CVE-2025-119xx/CVE-2025-11931.json +++ b/CVE-2025/CVE-2025-119xx/CVE-2025-11931.json @@ -2,8 +2,8 @@ "id": "CVE-2025-11931", "sourceIdentifier": "facts@wolfssl.com", "published": "2025-11-21T23:15:43.690", - "lastModified": "2025-11-25T22:16:42.557", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-12-04T16:21:09.590", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", + "baseScore": 8.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.2 + } ] }, "weaknesses": [ @@ -69,10 +91,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:wolfssl:wolfssl:5.8.4:*:*:*:*:*:*:*", + "matchCriteriaId": "12A2E398-A7F0-4751-887C-32C7D81213E7" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/wolfSSL/wolfssl/pull/9223", - "source": "facts@wolfssl.com" + "source": "facts@wolfssl.com", + "tags": [ + "Issue Tracking", + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-119xx/CVE-2025-11932.json b/CVE-2025/CVE-2025-119xx/CVE-2025-11932.json index f86bdbe4cca..1434b8b320e 100644 --- a/CVE-2025/CVE-2025-119xx/CVE-2025-11932.json +++ b/CVE-2025/CVE-2025-119xx/CVE-2025-11932.json @@ -2,8 +2,8 @@ "id": "CVE-2025-11932", "sourceIdentifier": "facts@wolfssl.com", "published": "2025-11-21T23:15:44.097", - "lastModified": "2025-11-25T22:16:42.557", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-12-04T16:09:31.650", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } ] }, "weaknesses": [ @@ -69,10 +91,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:wolfssl:wolfssl:5.8.2:*:*:*:*:*:*:*", + "matchCriteriaId": "A9A77590-75C8-4CF5-A5C6-4A8A1249E9FF" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/wolfSSL/wolfssl/pull/9223", - "source": "facts@wolfssl.com" + "source": "facts@wolfssl.com", + "tags": [ + "Issue Tracking", + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12877.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12877.json index 0823995c680..af6f9838eff 100644 --- a/CVE-2025/CVE-2025-128xx/CVE-2025-12877.json +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12877.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12877", "sourceIdentifier": "security@wordfence.com", "published": "2025-11-22T08:15:44.207", - "lastModified": "2025-11-25T22:16:42.557", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:40:39.037", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,18 +47,46 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:themeatelier:idonate:*:*:*:*:*:wordpress:*:*", + "versionEndExcluding": "2.1.16", + "matchCriteriaId": "150FECCD-3B2E-4331-A600-6F5781FA8467" + } + ] + } + ] + } + ], "references": [ { "url": "https://plugins.trac.wordpress.org/changeset/3398056/idonate/trunk/src/Helpers/IDonateAjaxHandler.php?old=3372718&old_path=idonate%2Ftags%2F2.1.13%2Fsrc%2FHelpers%2FIDonateAjaxHandler.php", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Patch" + ] }, { "url": "https://plugins.trac.wordpress.org/changeset/3400306/idonate/trunk/src/Helpers/IDonateAjaxHandler.php?old=3372718&old_path=idonate%2Ftags%2F2.1.13%2Fsrc%2FHelpers%2FIDonateAjaxHandler.php", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Patch" + ] }, { "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/96bd997f-63d5-47a7-b433-486c1113b44b?source=cve", - "source": "security@wordfence.com" + "source": "security@wordfence.com", + "tags": [ + "Patch", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12888.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12888.json index 23d40db6e62..86950a028a9 100644 --- a/CVE-2025/CVE-2025-128xx/CVE-2025-12888.json +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12888.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12888", "sourceIdentifier": "facts@wolfssl.com", "published": "2025-11-21T23:15:44.970", - "lastModified": "2025-11-25T22:16:42.557", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-12-04T16:07:14.913", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -69,10 +91,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:wolfssl:wolfssl:5.8.2:*:*:*:*:*:*:*", + "matchCriteriaId": "A9A77590-75C8-4CF5-A5C6-4A8A1249E9FF" + } + ] + } + ] + } + ], "references": [ { "url": "https://https://github.com/wolfSSL/wolfssl/pull/9275", - "source": "facts@wolfssl.com" + "source": "facts@wolfssl.com", + "tags": [ + "Broken Link" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12889.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12889.json index c3da8a51aed..8e3e3a054dc 100644 --- a/CVE-2025/CVE-2025-128xx/CVE-2025-12889.json +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12889.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12889", "sourceIdentifier": "facts@wolfssl.com", "published": "2025-11-22T00:15:54.257", - "lastModified": "2025-11-25T22:16:42.557", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-12-04T15:43:04.780", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.5 + } ] }, "weaknesses": [ @@ -67,12 +89,43 @@ "value": "CWE-20" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:wolfssl:wolfssl:5.8.4:*:*:*:*:*:*:*", + "matchCriteriaId": "12A2E398-A7F0-4751-887C-32C7D81213E7" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/wolfSSL/wolfssl/pull/9395", - "source": "facts@wolfssl.com" + "source": "facts@wolfssl.com", + "tags": [ + "Issue Tracking", + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13120.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13120.json index c6fbe0fd2b7..6990dcb9174 100644 --- a/CVE-2025/CVE-2025-131xx/CVE-2025-13120.json +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13120.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13120", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-13T16:15:51.100", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-12-04T15:27:29.123", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ], "cvssMetricV2": [ @@ -120,34 +140,78 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mruby:mruby:*:*:*:*:*:ruby:*:*", + "versionEndIncluding": "3.4.0", + "matchCriteriaId": "F9663307-847C-4A95-9485-4AEA84AAB19E" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/makesoftwaresafe/mruby/pull/263", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Issue Tracking" + ] }, { "url": "https://github.com/mruby/mruby/commit/eb398971bfb43c38db3e04528b68ac9a7ce509bc", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/mruby/mruby/issues/6649", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Issue Tracking", + "Vendor Advisory" + ] }, { "url": "https://github.com/mruby/mruby/issues/6649#issue-3534393003", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Issue Tracking", + "Vendor Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.332325", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.332325", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.683435", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-135xx/CVE-2025-13544.json b/CVE-2025/CVE-2025-135xx/CVE-2025-13544.json index 1cea2c24df8..3d16b529cc1 100644 --- a/CVE-2025/CVE-2025-135xx/CVE-2025-13544.json +++ b/CVE-2025/CVE-2025-135xx/CVE-2025-13544.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13544", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-23T09:15:44.247", - "lastModified": "2025-11-25T22:16:42.557", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:37:43.520", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,24 +138,68 @@ "value": "CWE-434" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:ashraf-kabir:travel-agency:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2025-07-05", + "matchCriteriaId": "CD7E337B-D2CE-4CCE-A821-362C4CE1BD08" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/www223-ai/CVE/blob/main/travel-File%20Upload.docx", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.333311", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.333311", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.690975", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-135xx/CVE-2025-13545.json b/CVE-2025/CVE-2025-135xx/CVE-2025-13545.json index 6714fd08f0d..a0a4d01103e 100644 --- a/CVE-2025/CVE-2025-135xx/CVE-2025-13545.json +++ b/CVE-2025/CVE-2025-135xx/CVE-2025-13545.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13545", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-23T10:15:46.803", - "lastModified": "2025-11-25T22:16:42.557", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:33:27.840", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,24 +138,68 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:ashraf-kabir:travel-agency:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2025-07-05", + "matchCriteriaId": "CD7E337B-D2CE-4CCE-A821-362C4CE1BD08" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/www223-ai/CVE/blob/main/travel-sql.docx", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.333312", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.333312", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.690978", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-135xx/CVE-2025-13546.json b/CVE-2025/CVE-2025-135xx/CVE-2025-13546.json index e2bba2af1f2..67edad6f729 100644 --- a/CVE-2025/CVE-2025-135xx/CVE-2025-13546.json +++ b/CVE-2025/CVE-2025-135xx/CVE-2025-13546.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13546", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-23T11:15:44.723", - "lastModified": "2025-11-25T22:16:42.557", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T15:32:33.497", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,24 +138,68 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:ashraf-kabir:travel-agency:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2025-07-05", + "matchCriteriaId": "CD7E337B-D2CE-4CCE-A821-362C4CE1BD08" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/www223-ai/CVE/blob/main/travel-sql2.docx", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.333313", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.333313", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.691466", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-137xx/CVE-2025-13787.json b/CVE-2025/CVE-2025-137xx/CVE-2025-13787.json index b6304a8bc69..b3830c8508a 100644 --- a/CVE-2025/CVE-2025-137xx/CVE-2025-13787.json +++ b/CVE-2025/CVE-2025-137xx/CVE-2025-13787.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13787", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-30T11:15:48.567", - "lastModified": "2025-12-01T15:39:33.110", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T16:44:07.470", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 2.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", + "baseScore": 9.1, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.2 } ], "cvssMetricV2": [ @@ -120,38 +140,91 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zentao:zentao:*:*:*:*:*:*:*:*", + "versionEndExcluding": "21.7.7", + "matchCriteriaId": "725BA33D-560F-40A8-A4F0-605DF48E9A53" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/ez-lbz/ez-lbz.github.io/issues/1", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] }, { "url": "https://github.com/ez-lbz/ez-lbz.github.io/issues/1#issuecomment-3540423868", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.333791", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.333791", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.689892", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.zentao.net/extension-buyext-1601-download.html", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/ez-lbz/ez-lbz.github.io/issues/1", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] }, { "url": "https://github.com/ez-lbz/ez-lbz.github.io/issues/1#issuecomment-3540423868", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-137xx/CVE-2025-13788.json b/CVE-2025/CVE-2025-137xx/CVE-2025-13788.json index 58ec58e4e4e..9a98c3b7305 100644 --- a/CVE-2025/CVE-2025-137xx/CVE-2025-13788.json +++ b/CVE-2025/CVE-2025-137xx/CVE-2025-13788.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13788", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-30T13:15:59.877", - "lastModified": "2025-12-01T15:39:33.110", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-12-04T16:39:41.843", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,24 +138,69 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:chanjet:chanjet_crm:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2025-11-06", + "matchCriteriaId": "DA9E0D48-874D-4D12-9696-A297F2F705B8" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/Bellingham-max/CVE/issues/1", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.333792", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.333792", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.690084", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-137xx/CVE-2025-13789.json b/CVE-2025/CVE-2025-137xx/CVE-2025-13789.json index 33ec9302723..2e811c34133 100644 --- a/CVE-2025/CVE-2025-137xx/CVE-2025-13789.json +++ b/CVE-2025/CVE-2025-137xx/CVE-2025-13789.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13789", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-30T14:16:29.640", - "lastModified": "2025-12-01T15:39:33.110", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T16:36:17.793", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 } ], "cvssMetricV2": [ @@ -116,34 +136,81 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zentao:zentao:*:*:*:*:*:*:*:*", + "versionEndExcluding": "21.7.6", + "matchCriteriaId": "817EA443-FA01-43A2-B8A6-A50B88B062F4" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/ez-lbz/ez-lbz.github.io/issues/2", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Issue Tracking", + "Exploit", + "Vendor Advisory" + ] }, { "url": "https://github.com/ez-lbz/ez-lbz.github.io/issues/2#issue-3598317459", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Issue Tracking", + "Exploit", + "Vendor Advisory" + ] }, { "url": "https://github.com/ez-lbz/ez-lbz.github.io/issues/2#issuecomment-3540247346", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Issue Tracking", + "Exploit" + ] }, { "url": "https://vuldb.com/?ctiid.333793", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.333793", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.690728", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.zentao.net/extension-viewext-6.html", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-140xx/CVE-2025-14006.json b/CVE-2025/CVE-2025-140xx/CVE-2025-14006.json new file mode 100644 index 00000000000..8dd7fde7a25 --- /dev/null +++ b/CVE-2025/CVE-2025-140xx/CVE-2025-14006.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-14006", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-12-04T15:15:55.557", + "lastModified": "2025-12-04T15:15:55.557", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 of the component Add Data Validation Page. The manipulation of the argument data[name] leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 3.5, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", + "baseScore": 4.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "NONE", + "integrityImpact": "PARTIAL", + "availabilityImpact": "NONE" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + }, + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/24-2021/vul/blob/main/xunruicms-Data%20Validation-XSS/xunruicms-Data%20Validation-XSS.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.334248", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.334248", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.692910", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-140xx/CVE-2025-14007.json b/CVE-2025/CVE-2025-140xx/CVE-2025-14007.json new file mode 100644 index 00000000000..a277492d863 --- /dev/null +++ b/CVE-2025/CVE-2025-140xx/CVE-2025-14007.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-14007", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-12-04T15:15:55.800", + "lastModified": "2025-12-04T15:15:55.800", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1. This affects an unknown part of the file /admin79f2ec220c7e.php?c=api&m=demo&name=mobile of the component Domain Name Binding Page. The manipulation results in cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.0, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 2.0, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.5, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:H/Au:M/C:N/I:P/A:N", + "baseScore": 1.7, + "accessVector": "NETWORK", + "accessComplexity": "HIGH", + "authentication": "MULTIPLE", + "confidentialityImpact": "NONE", + "integrityImpact": "PARTIAL", + "availabilityImpact": "NONE" + }, + "baseSeverity": "LOW", + "exploitabilityScore": 3.2, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + }, + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/24-2021/vul/blob/main/xunruicms-site_domain%2Bmobile_demo-URL%20redirection%20causing%20remote%20XSS/xunruicms-site_domain%2Bmobile_demo-URL%20redirection%20causing%20remote%20XSS.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.334249", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.334249", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.692914", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-140xx/CVE-2025-14008.json b/CVE-2025/CVE-2025-140xx/CVE-2025-14008.json new file mode 100644 index 00000000000..701dd45167a --- /dev/null +++ b/CVE-2025/CVE-2025-140xx/CVE-2025-14008.json @@ -0,0 +1,137 @@ +{ + "id": "CVE-2025-14008", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-12-04T15:15:56.057", + "lastModified": "2025-12-04T15:15:56.057", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A flaw has been found in dayrui XunRuiCMS up to 4.7.1. This vulnerability affects unknown code of the file admin79f2ec220c7e.php?c=api&m=test_site_domain of the component Project Domain Change Test. This manipulation of the argument v causes server-side request forgery. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P", + "baseScore": 5.8, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "MULTIPLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 6.4, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/24-2021/vul/blob/main/xunruicms-test_site_domain-SSRF/xunruicms-test_site_domain-SSRF.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.334250", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.334250", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.692915", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-140xx/CVE-2025-14024.json b/CVE-2025/CVE-2025-140xx/CVE-2025-14024.json new file mode 100644 index 00000000000..8a630210357 --- /dev/null +++ b/CVE-2025/CVE-2025-140xx/CVE-2025-14024.json @@ -0,0 +1,16 @@ +{ + "id": "CVE-2025-14024", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-12-04T16:16:14.510", + "lastModified": "2025-12-04T16:16:14.510", + "vulnStatus": "Rejected", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage." + } + ], + "metrics": {}, + "references": [] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-28xx/CVE-2025-2848.json b/CVE-2025/CVE-2025-28xx/CVE-2025-2848.json new file mode 100644 index 00000000000..3a924a2d8af --- /dev/null +++ b/CVE-2025/CVE-2025-28xx/CVE-2025-2848.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-2848", + "sourceIdentifier": "security@synology.com", + "published": "2025-12-04T15:15:57.077", + "lastModified": "2025-12-04T15:15:57.077", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability in Synology Mail Server allows remote authenticated attackers to read and write non-sensitive settings, and disable some non-critical functions." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@synology.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@synology.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_25_05", + "source": "security@synology.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-298xx/CVE-2025-29843.json b/CVE-2025/CVE-2025-298xx/CVE-2025-29843.json new file mode 100644 index 00000000000..297a17deaca --- /dev/null +++ b/CVE-2025/CVE-2025-298xx/CVE-2025-29843.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-29843", + "sourceIdentifier": "security@synology.com", + "published": "2025-12-04T15:15:56.287", + "lastModified": "2025-12-04T15:15:56.287", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@synology.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "security@synology.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_25_04", + "source": "security@synology.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-298xx/CVE-2025-29844.json b/CVE-2025/CVE-2025-298xx/CVE-2025-29844.json new file mode 100644 index 00000000000..b86d410aeda --- /dev/null +++ b/CVE-2025/CVE-2025-298xx/CVE-2025-29844.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-29844", + "sourceIdentifier": "security@synology.com", + "published": "2025-12-04T15:15:56.493", + "lastModified": "2025-12-04T15:15:56.493", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@synology.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@synology.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_25_04", + "source": "security@synology.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-298xx/CVE-2025-29845.json b/CVE-2025/CVE-2025-298xx/CVE-2025-29845.json new file mode 100644 index 00000000000..3c7af7ecde7 --- /dev/null +++ b/CVE-2025/CVE-2025-298xx/CVE-2025-29845.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-29845", + "sourceIdentifier": "security@synology.com", + "published": "2025-12-04T15:15:56.680", + "lastModified": "2025-12-04T15:15:56.680", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@synology.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@synology.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_25_04", + "source": "security@synology.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-298xx/CVE-2025-29846.json b/CVE-2025/CVE-2025-298xx/CVE-2025-29846.json new file mode 100644 index 00000000000..b7276854acb --- /dev/null +++ b/CVE-2025/CVE-2025-298xx/CVE-2025-29846.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-29846", + "sourceIdentifier": "security@synology.com", + "published": "2025-12-04T15:15:56.883", + "lastModified": "2025-12-04T15:15:56.883", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@synology.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security@synology.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_25_04", + "source": "security@synology.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40216.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40216.json new file mode 100644 index 00000000000..368a10bb39d --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40216.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-40216", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T15:15:57.300", + "lastModified": "2025-12-04T15:15:57.300", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/rsrc: don't rely on user vaddr alignment\n\nThere is no guaranteed alignment for user pointers, however the\ncalculation of an offset of the first page into a folio after coalescing\nuses some weird bit mask logic, get rid of it." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/3a3c6d61577dbb23c09df3e21f6f9eda1ecd634b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/50998b0ae7d9d552e96d8b7239981cf05f65eff5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f16769241594be59387b56ab525e327f54377e60", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40217.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40217.json new file mode 100644 index 00000000000..f6c632e0b65 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40217.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40217", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T15:15:57.510", + "lastModified": "2025-12-04T15:15:57.510", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npidfs: validate extensible ioctls\n\nValidate extensible ioctls stricter than we do now." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/3c17001b21b9f168c957ced9384abe969019b609", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bf0fbf5e8b0aff8a4a0fb35e32b10083baa83c04", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40218.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40218.json new file mode 100644 index 00000000000..71e078c3682 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40218.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-40218", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T15:15:57.643", + "lastModified": "2025-12-04T15:15:57.643", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/damon/vaddr: do not repeat pte_offset_map_lock() until success\n\nDAMON's virtual address space operation set implementation (vaddr) calls\npte_offset_map_lock() inside the page table walk callback function. This\nis for reading and writing page table accessed bits. If\npte_offset_map_lock() fails, it retries by returning the page table walk\ncallback function with ACTION_AGAIN.\n\npte_offset_map_lock() can continuously fail if the target is a pmd\nmigration entry, though. Hence it could cause an infinite page table walk\nif the migration cannot be done until the page table walk is finished. \nThis indeed caused a soft lockup when CPU hotplugging and DAMON were\nrunning in parallel.\n\nAvoid the infinite loop by simply not retrying the page table walk. DAMON\nis promising only a best-effort accuracy, so missing access to such pages\nis no problem." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0ccd91cf749536d41307a07e60ec14ab0dbf21f5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/677ebfe5d00f94adec0c0204f6e6e2a82d3f77bf", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ac42320ec873bfe726141069cfdd90ee5bc4e885", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b93af2cc8e036754c0d9970d9ddc47f43cc94b9f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40219.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40219.json new file mode 100644 index 00000000000..2fd8661965e --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40219.json @@ -0,0 +1,49 @@ +{ + "id": "CVE-2025-40219", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T15:15:57.790", + "lastModified": "2025-12-04T15:15:57.790", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV\n\nBefore disabling SR-IOV via config space accesses to the parent PF,\nsriov_disable() first removes the PCI devices representing the VFs.\n\nSince commit 9d16947b7583 (\"PCI: Add global pci_lock_rescan_remove()\")\nsuch removal operations are serialized against concurrent remove and\nrescan using the pci_rescan_remove_lock. No such locking was ever added\nin sriov_disable() however. In particular when commit 18f9e9d150fc\n(\"PCI/IOV: Factor out sriov_add_vfs()\") factored out the PCI device\nremoval into sriov_del_vfs() there was still no locking around the\npci_iov_remove_virtfn() calls.\n\nOn s390 the lack of serialization in sriov_disable() may cause double\nremove and list corruption with the below (amended) trace being observed:\n\n PSW: 0704c00180000000 0000000c914e4b38 (klist_put+56)\n GPRS: 000003800313fb48 0000000000000000 0000000100000001 0000000000000001\n\t00000000f9b520a8 0000000000000000 0000000000002fbd 00000000f4cc9480\n\t0000000000000001 0000000000000000 0000000000000000 0000000180692828\n\t00000000818e8000 000003800313fe2c 000003800313fb20 000003800313fad8\n #0 [3800313fb20] device_del at c9158ad5c\n #1 [3800313fb88] pci_remove_bus_device at c915105ba\n #2 [3800313fbd0] pci_iov_remove_virtfn at c9152f198\n #3 [3800313fc28] zpci_iov_remove_virtfn at c90fb67c0\n #4 [3800313fc60] zpci_bus_remove_device at c90fb6104\n #5 [3800313fca0] __zpci_event_availability at c90fb3dca\n #6 [3800313fd08] chsc_process_sei_nt0 at c918fe4a2\n #7 [3800313fd60] crw_collect_info at c91905822\n #8 [3800313fe10] kthread at c90feb390\n #9 [3800313fe68] __ret_from_fork at c90f6aa64\n #10 [3800313fe98] ret_from_fork at c9194f3f2.\n\nThis is because in addition to sriov_disable() removing the VFs, the\nplatform also generates hot-unplug events for the VFs. This being the\nreverse operation to the hotplug events generated by sriov_enable() and\nhandled via pdev->no_vf_scan. And while the event processing takes\npci_rescan_remove_lock and checks whether the struct pci_dev still exists,\nthe lack of synchronization makes this checking racy.\n\nOther races may also be possible of course though given that this lack of\nlocking persisted so long observable races seem very rare. Even on s390 the\nlist corruption was only observed with certain devices since the platform\nevents are only triggered by config accesses after the removal, so as long\nas the removal finished synchronously they would not race. Either way the\nlocking is missing so fix this by adding it to the sriov_del_vfs() helper.\n\nJust like PCI rescan-remove, locking is also missing in sriov_add_vfs()\nincluding for the error case where pci_stop_and_remove_bus_device() is\ncalled without the PCI rescan-remove lock being held. Even in the non-error\ncase, adding new PCI devices and buses should be serialized via the PCI\nrescan-remove lock. Add the necessary locking." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/05703271c3cdcc0f2a8cf6ebdc45892b8ca83520", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/1e8a80290f964bdbad225221c8a1594c7e01c8fd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/36039348bca77828bf06eae41b8f76e38cd15847", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/53154cd40ccf285f1d1c24367824082061d155bd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/5c1cd7d405e94dc6cb320cc0cc092b74895b6ddf", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a24219172456f035d886857e265ca24c85b167c8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a645ca21de09e3137cbb224fa6c23cca873a1d01", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ee40e5db052d7c6f406fdb95ad639c894c74674c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40220.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40220.json new file mode 100644 index 00000000000..91ad2c06495 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40220.json @@ -0,0 +1,45 @@ +{ + "id": "CVE-2025-40220", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T15:15:58.033", + "lastModified": "2025-12-04T15:15:58.033", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfuse: fix livelock in synchronous file put from fuseblk workers\n\nI observed a hang when running generic/323 against a fuseblk server.\nThis test opens a file, initiates a lot of AIO writes to that file\ndescriptor, and closes the file descriptor before the writes complete.\nUnsurprisingly, the AIO exerciser threads are mostly stuck waiting for\nresponses from the fuseblk server:\n\n# cat /proc/372265/task/372313/stack\n[<0>] request_wait_answer+0x1fe/0x2a0 [fuse]\n[<0>] __fuse_simple_request+0xd3/0x2b0 [fuse]\n[<0>] fuse_do_getattr+0xfc/0x1f0 [fuse]\n[<0>] fuse_file_read_iter+0xbe/0x1c0 [fuse]\n[<0>] aio_read+0x130/0x1e0\n[<0>] io_submit_one+0x542/0x860\n[<0>] __x64_sys_io_submit+0x98/0x1a0\n[<0>] do_syscall_64+0x37/0xf0\n[<0>] entry_SYSCALL_64_after_hwframe+0x4b/0x53\n\nBut the /weird/ part is that the fuseblk server threads are waiting for\nresponses from itself:\n\n# cat /proc/372210/task/372232/stack\n[<0>] request_wait_answer+0x1fe/0x2a0 [fuse]\n[<0>] __fuse_simple_request+0xd3/0x2b0 [fuse]\n[<0>] fuse_file_put+0x9a/0xd0 [fuse]\n[<0>] fuse_release+0x36/0x50 [fuse]\n[<0>] __fput+0xec/0x2b0\n[<0>] task_work_run+0x55/0x90\n[<0>] syscall_exit_to_user_mode+0xe9/0x100\n[<0>] do_syscall_64+0x43/0xf0\n[<0>] entry_SYSCALL_64_after_hwframe+0x4b/0x53\n\nThe fuseblk server is fuse2fs so there's nothing all that exciting in\nthe server itself. So why is the fuse server calling fuse_file_put?\nThe commit message for the fstest sheds some light on that:\n\n\"By closing the file descriptor before calling io_destroy, you pretty\nmuch guarantee that the last put on the ioctx will be done in interrupt\ncontext (during I/O completion).\n\nAha. AIO fgets a new struct file from the fd when it queues the ioctx.\nThe completion of the FUSE_WRITE command from userspace causes the fuse\nserver to call the AIO completion function. The completion puts the\nstruct file, queuing a delayed fput to the fuse server task. When the\nfuse server task returns to userspace, it has to run the delayed fput,\nwhich in the case of a fuseblk server, it does synchronously.\n\nSending the FUSE_RELEASE command sychronously from fuse server threads\nis a bad idea because a client program can initiate enough simultaneous\nAIOs such that all the fuse server threads end up in delayed_fput, and\nnow there aren't any threads left to handle the queued fuse commands.\n\nFix this by only using asynchronous fputs when closing files, and leave\na comment explaining why." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/26e5c67deb2e1f42a951f022fdf5b9f7eb747b01", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/548e1f2bac1d4df91a6138f26bb4ab00323fd948", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/83b375c6efef69b1066ad2d79601221e7892745a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b26923512dbe57ae4917bafd31396d22a9d1691a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bfd17b6138df0122a95989457d8e18ce0b86165e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/cfd1aa3e2b71f3327cb373c45a897c9028c62b35", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f19a1390af448d9e193c08e28ea5f727bf3c3049", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40221.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40221.json new file mode 100644 index 00000000000..3a684a33416 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40221.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-40221", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T15:15:58.200", + "lastModified": "2025-12-04T15:15:58.200", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: pci: mg4b: fix uninitialized iio scan data\n\nFix potential leak of uninitialized stack data to userspace by ensuring\nthat the `scan` structure is zeroed before use." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/b792eba44494b4e6ab5006013335f9819f303b8b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b7f82da7f86479cb6479a76ebe213ece7c77398f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c0d3f6969bb4d72476cfe7ea9263831f1c283704", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40222.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40222.json new file mode 100644 index 00000000000..84d34402e0c --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40222.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40222", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:14.627", + "lastModified": "2025-12-04T16:16:14.627", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: serial: sh-sci: fix RSCI FIFO overrun handling\n\nThe receive error handling code is shared between RSCI and all other\nSCIF port types, but the RSCI overrun_reg is specified as a memory\noffset, while for other SCIF types it is an enum value used to index\ninto the sci_port_params->regs array, as mentioned above the\nsci_serial_in() function.\n\nFor RSCI, the overrun_reg is CSR (0x48), causing the sci_getreg() call\ninside the sci_handle_fifo_overrun() function to index outside the\nbounds of the regs array, which currently has a size of 20, as specified\nby SCI_NR_REGS.\n\nBecause of this, we end up accessing memory outside of RSCI's\nrsci_port_params structure, which, when interpreted as a plat_sci_reg,\nhappens to have a non-zero size, causing the following WARN when\nsci_serial_in() is called, as the accidental size does not match the\nsupported register sizes.\n\nThe existence of the overrun_reg needs to be checked because\nSCIx_SH3_SCIF_REGTYPE has overrun_reg set to SCLSR, but SCLSR is not\npresent in the regs array.\n\nAvoid calling sci_getreg() for port types which don't use standard\nregister handling.\n\nUse the ops->read_reg() and ops->write_reg() functions to properly read\nand write registers for RSCI, and change the type of the status variable\nto accommodate the 32-bit CSR register.\n\nsci_getreg() and sci_serial_in() are also called with overrun_reg in the\nsci_mpxed_interrupt() interrupt handler, but that code path is not used\nfor RSCI, as it does not have a muxed interrupt.\n\n------------[ cut here ]------------\nInvalid register access\nWARNING: CPU: 0 PID: 0 at drivers/tty/serial/sh-sci.c:522 sci_serial_in+0x38/0xac\nModules linked in: renesas_usbhs at24 rzt2h_adc industrialio_adc sha256 cfg80211 bluetooth ecdh_generic ecc rfkill fuse drm backlight ipv6\nCPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1+ #30 PREEMPT\nHardware name: Renesas RZ/T2H EVK Board based on r9a09g077m44 (DT)\npstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : sci_serial_in+0x38/0xac\nlr : sci_serial_in+0x38/0xac\nsp : ffff800080003e80\nx29: ffff800080003e80 x28: ffff800082195b80 x27: 000000000000000d\nx26: ffff8000821956d0 x25: 0000000000000000 x24: ffff800082195b80\nx23: ffff000180e0d800 x22: 0000000000000010 x21: 0000000000000000\nx20: 0000000000000010 x19: ffff000180e72000 x18: 000000000000000a\nx17: ffff8002bcee7000 x16: ffff800080000000 x15: 0720072007200720\nx14: 0720072007200720 x13: 0720072007200720 x12: 0720072007200720\nx11: 0000000000000058 x10: 0000000000000018 x9 : ffff8000821a6a48\nx8 : 0000000000057fa8 x7 : 0000000000000406 x6 : ffff8000821fea48\nx5 : ffff00033ef88408 x4 : ffff8002bcee7000 x3 : ffff800082195b80\nx2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff800082195b80\nCall trace:\n sci_serial_in+0x38/0xac (P)\n sci_handle_fifo_overrun.isra.0+0x70/0x134\n sci_er_interrupt+0x50/0x39c\n __handle_irq_event_percpu+0x48/0x140\n handle_irq_event+0x44/0xb0\n handle_fasteoi_irq+0xf4/0x1a0\n handle_irq_desc+0x34/0x58\n generic_handle_domain_irq+0x1c/0x28\n gic_handle_irq+0x4c/0x140\n call_on_irq_stack+0x30/0x48\n do_interrupt_handler+0x80/0x84\n el1_interrupt+0x34/0x68\n el1h_64_irq_handler+0x18/0x24\n el1h_64_irq+0x6c/0x70\n default_idle_call+0x28/0x58 (P)\n do_idle+0x1f8/0x250\n cpu_startup_entry+0x34/0x3c\n rest_init+0xd8/0xe0\n console_on_rootfs+0x0/0x6c\n __primary_switched+0x88/0x90\n---[ end trace 0000000000000000 ]---" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/2ec9bbd09a6cdf5b8c726be34f29630faf585d07", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ef8fef45c74b5a0059488fda2df65fa133f7d7d0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40223.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40223.json new file mode 100644 index 00000000000..98cb6868891 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40223.json @@ -0,0 +1,45 @@ +{ + "id": "CVE-2025-40223", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:14.767", + "lastModified": "2025-12-04T16:16:14.767", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmost: usb: Fix use-after-free in hdm_disconnect\n\nhdm_disconnect() calls most_deregister_interface(), which eventually\nunregisters the MOST interface device with device_unregister(iface->dev).\nIf that drops the last reference, the device core may call release_mdev()\nimmediately while hdm_disconnect() is still executing.\n\nThe old code also freed several mdev-owned allocations in\nhdm_disconnect() and then performed additional put_device() calls.\nDepending on refcount order, this could lead to use-after-free or\ndouble-free when release_mdev() ran (or when unregister paths also\nperformed puts).\n\nFix by moving the frees of mdev-owned allocations into release_mdev(),\nso they happen exactly once when the device is truly released, and by\ndropping the extra put_device() calls in hdm_disconnect() that are\nredundant after device_unregister() and most_deregister_interface().\n\nThis addresses the KASAN slab-use-after-free reported by syzbot in\nhdm_disconnect(). See report and stack traces in the bug link below." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/33daf469f5294b9d07c4fc98216cace9f4f34cc6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3a3b8e89c7201c5b3b76ac4a4069d1adde1477d6", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4b1270902609ef0d935ed2faa2ea6d122bd148f5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/578eb18cd111addec94c43f61cd4b4429e454809", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/5b5c478f09b1b35e7fe6fc9a1786c9bf6030e831", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/72427dc6f87523995f4e6ae35a948bb2992cabce", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f93a84ffb884d761a9d4e869ba29c238711e81f1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40224.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40224.json new file mode 100644 index 00000000000..0290c50839a --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40224.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40224", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:14.917", + "lastModified": "2025-12-04T16:16:14.917", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc()\n\nThe driver allocates memory for sensor data using devm_kzalloc(), but\ndid not check if the allocation succeeded. In case of memory allocation\nfailure, dereferencing the NULL pointer would lead to a kernel crash.\n\nAdd a NULL pointer check and return -ENOMEM to handle allocation failure\nproperly." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/240b82b86a091c1aa49d951d4467425420a081a0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a09a5aa8bf258ddc99a22c30f17fe304b96b5350", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40225.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40225.json new file mode 100644 index 00000000000..372bec34860 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40225.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-40225", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:15.043", + "lastModified": "2025-12-04T16:16:15.043", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/panthor: Fix kernel panic on partial unmap of a GPU VA region\n\nThis commit address a kernel panic issue that can happen if Userspace\ntries to partially unmap a GPU virtual region (aka drm_gpuva).\nThe VM_BIND interface allows partial unmapping of a BO.\n\nPanthor driver pre-allocates memory for the new drm_gpuva structures\nthat would be needed for the map/unmap operation, done using drm_gpuvm\nlayer. It expected that only one new drm_gpuva would be needed on umap\nbut a partial unmap can require 2 new drm_gpuva and that's why it\nended up doing a NULL pointer dereference causing a kernel panic.\n\nFollowing dump was seen when partial unmap was exercised.\n Unable to handle kernel NULL pointer dereference at virtual address 0000000000000078\n Mem abort info:\n ESR = 0x0000000096000046\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x06: level 2 translation fault\n Data abort info:\n ISV = 0, ISS = 0x00000046, ISS2 = 0x00000000\n CM = 0, WnR = 1, TnD = 0, TagAccess = 0\n GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n user pgtable: 4k pages, 48-bit VAs, pgdp=000000088a863000\n [000000000000078] pgd=080000088a842003, p4d=080000088a842003, pud=0800000884bf5003, pmd=0000000000000000\n Internal error: Oops: 0000000096000046 [#1] PREEMPT SMP\n \n pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : panthor_gpuva_sm_step_remap+0xe4/0x330 [panthor]\n lr : panthor_gpuva_sm_step_remap+0x6c/0x330 [panthor]\n sp : ffff800085d43970\n x29: ffff800085d43970 x28: ffff00080363e440 x27: ffff0008090c6000\n x26: 0000000000000030 x25: ffff800085d439f8 x24: ffff00080d402000\n x23: ffff800085d43b60 x22: ffff800085d439e0 x21: ffff00080abdb180\n x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000010\n x17: 6e656c202c303030 x16: 3666666666646466 x15: 393d61766f69202c\n x14: 312d3d7361203a70 x13: 303030323d6e656c x12: ffff80008324bf58\n x11: 0000000000000003 x10: 0000000000000002 x9 : ffff8000801a6a9c\n x8 : ffff00080360b300 x7 : 0000000000000000 x6 : 000000088aa35fc7\n x5 : fff1000080000000 x4 : ffff8000842ddd30 x3 : 0000000000000001\n x2 : 0000000100000000 x1 : 0000000000000001 x0 : 0000000000000078\n Call trace:\n panthor_gpuva_sm_step_remap+0xe4/0x330 [panthor]\n op_remap_cb.isra.22+0x50/0x80\n __drm_gpuvm_sm_unmap+0x10c/0x1c8\n drm_gpuvm_sm_unmap+0x40/0x60\n panthor_vm_exec_op+0xb4/0x3d0 [panthor]\n panthor_vm_bind_exec_sync_op+0x154/0x278 [panthor]\n panthor_ioctl_vm_bind+0x160/0x4a0 [panthor]\n drm_ioctl_kernel+0xbc/0x138\n drm_ioctl+0x240/0x500\n __arm64_sys_ioctl+0xb0/0xf8\n invoke_syscall+0x4c/0x110\n el0_svc_common.constprop.1+0x98/0xf8\n do_el0_svc+0x24/0x38\n el0_svc+0x40/0xf8\n el0t_64_sync_handler+0xa0/0xc8\n el0t_64_sync+0x174/0x178" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/4eabd0d8791eaf9a7b114ccbf56eb488aefe7b1f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e9c19d19dd7e08db89cead5b0337c18590dc6645", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/efe6dced3512066ebee2cf7c4c38d1c99625814e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40226.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40226.json new file mode 100644 index 00000000000..df1fb8be36c --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40226.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-40226", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:15.197", + "lastModified": "2025-12-04T16:16:15.197", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Account for failed debug initialization\n\nWhen the SCMI debug subsystem fails to initialize, the related debug root\nwill be missing, and the underlying descriptor will be NULL.\n\nHandle this fault condition in the SCMI debug helpers that maintain\nmetrics counters." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/2290ab43b9d8eafb8046387f10a8dfa2b030ba46", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/554c9d5c6c695aedaecfb4365c187102709397b0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d719ce9f286c439795cd2beee4c91f12b84bc5a0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e088efcd97cb7c7297d166bb52c3b87a29f6a0b1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40227.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40227.json new file mode 100644 index 00000000000..d8d1501c3bf --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40227.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40227", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:15.333", + "lastModified": "2025-12-04T16:16:15.333", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/damon/sysfs: dealloc commit test ctx always\n\nThe damon_ctx for testing online DAMON parameters commit inputs is\ndeallocated only when the test fails. This means memory is leaked for\nevery successful online DAMON parameters commit. Fix the leak by always\ndeallocating it." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/139e7a572af0b45f558b5e502121a768dc328ba8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ba236520ae53418859f4b7c7de3c71478d3c0b5a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40228.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40228.json new file mode 100644 index 00000000000..f5327e51733 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40228.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40228", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:15.460", + "lastModified": "2025-12-04T16:16:15.460", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/damon/sysfs: catch commit test ctx alloc failure\n\nPatch series \"mm/damon/sysfs: fix commit test damon_ctx [de]allocation\".\n\nDAMON sysfs interface dynamically allocates and uses a damon_ctx object\nfor testing if given inputs for online DAMON parameters update is valid.\nThe object is being used without an allocation failure check, and leaked\nwhen the test succeeds. Fix the two bugs.\n\n\nThis patch (of 2):\n\nThe damon_ctx for testing online DAMON parameters commit inputs is used\nwithout its allocation failure check. This could result in an invalid\nmemory access. Fix it by directly returning an error when the allocation\nfailed." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/5b3609d9b9650bdea0bfdf643e0ce57e1aed67fc", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f0c5118ebb0eb7e4fd6f0d2ace3315ca141b317f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40229.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40229.json new file mode 100644 index 00000000000..7f4ac72d345 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40229.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40229", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:15.583", + "lastModified": "2025-12-04T16:16:15.583", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/damon/core: fix potential memory leak by cleaning ops_filter in damon_destroy_scheme\n\nCurrently, damon_destroy_scheme() only cleans up the filter list but\nleaves ops_filter untouched, which could lead to memory leaks when a\nscheme is destroyed.\n\nThis patch ensures both filter and ops_filter are properly freed in\ndamon_destroy_scheme(), preventing potential memory leaks." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/7071537159be845a5c4ed5fb7d3db25aa4bd04a3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ff8dcf621a4172f4a6d42cbbb25d21659d3ac300", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40230.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40230.json new file mode 100644 index 00000000000..3a8d14f206f --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40230.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-40230", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:15.720", + "lastModified": "2025-12-04T16:16:15.720", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: prevent poison consumption when splitting THP\n\nWhen performing memory error injection on a THP (Transparent Huge Page)\nmapped to userspace on an x86 server, the kernel panics with the following\ntrace. The expected behavior is to terminate the affected process instead\nof panicking the kernel, as the x86 Machine Check code can recover from an\nin-userspace #MC.\n\n mce: [Hardware Error]: CPU 0: Machine Check Exception: f Bank 3: bd80000000070134\n mce: [Hardware Error]: RIP 10: {memchr_inv+0x4c/0xf0}\n mce: [Hardware Error]: TSC afff7bbff88a ADDR 1d301b000 MISC 80 PPIN 1e741e77539027db\n mce: [Hardware Error]: PROCESSOR 0:d06d0 TIME 1758093249 SOCKET 0 APIC 0 microcode 80000320\n mce: [Hardware Error]: Run the above through 'mcelog --ascii'\n mce: [Hardware Error]: Machine check: Data load in unrecoverable area of kernel\n Kernel panic - not syncing: Fatal local machine check\n\nThe root cause of this panic is that handling a memory failure triggered\nby an in-userspace #MC necessitates splitting the THP. The splitting\nprocess employs a mechanism, implemented in\ntry_to_map_unused_to_zeropage(), which reads the pages in the THP to\nidentify zero-filled pages. However, reading the pages in the THP results\nin a second in-kernel #MC, occurring before the initial memory_failure()\ncompletes, ultimately leading to a kernel panic. See the kernel panic\ncall trace on the two #MCs.\n\n First Machine Check occurs // [1]\n memory_failure() // [2]\n try_to_split_thp_page()\n split_huge_page()\n split_huge_page_to_list_to_order()\n __folio_split() // [3]\n remap_page()\n remove_migration_ptes()\n remove_migration_pte()\n try_to_map_unused_to_zeropage() // [4]\n memchr_inv() // [5]\n Second Machine Check occurs // [6]\n Kernel panic\n\n[1] Triggered by accessing a hardware-poisoned THP in userspace, which is\n typically recoverable by terminating the affected process.\n\n[2] Call folio_set_has_hwpoisoned() before try_to_split_thp_page().\n\n[3] Pass the RMP_USE_SHARED_ZEROPAGE remap flag to remap_page().\n\n[4] Try to map the unused THP to zeropage.\n\n[5] Re-access pages in the hw-poisoned THP in the kernel.\n\n[6] Triggered in-kernel, leading to a panic kernel.\n\nIn Step[2], memory_failure() sets the poisoned flag on the page in the THP\nby TestSetPageHWPoison() before calling try_to_split_thp_page().\n\nAs suggested by David Hildenbrand, fix this panic by not accessing to the\npoisoned page in the THP during zeropage identification, while continuing\nto scan unaffected pages in the THP for possible zeropage mapping. This\nprevents a second in-kernel #MC that would cause kernel panic in Step[4].\n\nThanks to Andrew Zaborowski for his initial work on fixing this issue." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/6fc0a7c99e973a50018c8b4be34914a1b5c7b383", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/841a8bfcbad94bb1ba60f59ce34f75259074ae0d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/92acf4b04f255d2f0f6770bb0d0a208d8ffb2b77", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40231.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40231.json new file mode 100644 index 00000000000..2d8502460c6 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40231.json @@ -0,0 +1,45 @@ +{ + "id": "CVE-2025-40231", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:15.870", + "lastModified": "2025-12-04T16:16:15.870", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: fix lock inversion in vsock_assign_transport()\n\nSyzbot reported a potential lock inversion deadlock between\nvsock_register_mutex and sk_lock-AF_VSOCK when vsock_linger() is called.\n\nThe issue was introduced by commit 687aa0c5581b (\"vsock: Fix\ntransport_* TOCTOU\") which added vsock_register_mutex locking in\nvsock_assign_transport() around the transport->release() call, that can\ncall vsock_linger(). vsock_assign_transport() can be called with sk_lock\nheld. vsock_linger() calls sk_wait_event() that temporarily releases and\nre-acquires sk_lock. During this window, if another thread hold\nvsock_register_mutex while trying to acquire sk_lock, a circular\ndependency is created.\n\nFix this by releasing vsock_register_mutex before calling\ntransport->release() and vsock_deassign_transport(). This is safe\nbecause we don't need to hold vsock_register_mutex while releasing the\nold transport, and we ensure the new transport won't disappear by\nobtaining a module reference first via try_module_get()." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/09bba278ccde25a14b6e5088a9e65a8717d0cccf", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/251caee792a21eb0b781aab91362b422c945e162", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/42ed0784d11adebf748711e503af0eb9f1e6d81d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a2a4346eea8b4cb75037dbcb20b98cb454324f80", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b44182c116778feaa05da52a426aeb9da1878dcf", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ce4f856c64f0bc30e29302a0ce41f4295ca391c5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f7c877e7535260cc7a21484c994e8ce7e8cb6780", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40232.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40232.json new file mode 100644 index 00000000000..760d1770d2e --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40232.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40232", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:16.013", + "lastModified": "2025-12-04T16:16:16.013", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrv: Fully convert enabled_monitors to use list_head as iterator\n\nThe callbacks in enabled_monitors_seq_ops are inconsistent. Some treat the\niterator as struct rv_monitor *, while others treat the iterator as struct\nlist_head *.\n\nThis causes a wrong type cast and crashes the system as reported by Nathan.\n\nConvert everything to use struct list_head * as iterator. This also makes\nenabled_monitors consistent with available_monitors." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/103541e6a5854b08a25e4caa61e990af1009a52e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8948a0338d33c4a7ef1e0c439a3ad1d5fe9355ae", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40233.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40233.json new file mode 100644 index 00000000000..72303fb2ae0 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40233.json @@ -0,0 +1,49 @@ +{ + "id": "CVE-2025-40233", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:16.137", + "lastModified": "2025-12-04T16:16:16.137", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: clear extent cache after moving/defragmenting extents\n\nThe extent map cache can become stale when extents are moved or\ndefragmented, causing subsequent operations to see outdated extent flags. \nThis triggers a BUG_ON in ocfs2_refcount_cal_cow_clusters().\n\nThe problem occurs when:\n1. copy_file_range() creates a reflinked extent with OCFS2_EXT_REFCOUNTED\n2. ioctl(FITRIM) triggers ocfs2_move_extents()\n3. __ocfs2_move_extents_range() reads and caches the extent (flags=0x2)\n4. ocfs2_move_extent()/ocfs2_defrag_extent() calls __ocfs2_move_extent()\n which clears OCFS2_EXT_REFCOUNTED flag on disk (flags=0x0)\n5. The extent map cache is not invalidated after the move\n6. Later write() operations read stale cached flags (0x2) but disk has\n updated flags (0x0), causing a mismatch\n7. BUG_ON(!(rec->e_flags & OCFS2_EXT_REFCOUNTED)) triggers\n\nFix by clearing the extent map cache after each extent move/defrag\noperation in __ocfs2_move_extents_range(). This ensures subsequent\noperations read fresh extent data from disk." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/78a63493f8e352296dbc7cb7b3f4973105e8679e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/93166bc53c0e3587058327a4121daea34b4fecd5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/93b1ab422f1966b71561158e1aedce4ec100f357", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a21750df2f6169af6e039a3bb4893d6c9564e48d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a7ee72286efba1d407c6f15a0528e43593fb7007", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/aa6a21409dd6221bb268b56bb410e031c632ff9a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bb69928ed578f881e68d26aaf1a8f6e7faab3b44", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e92af7737a94a729225d2a5d180eaaa77fe0bbc1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40234.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40234.json new file mode 100644 index 00000000000..8f87f993841 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40234.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40234", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:16.273", + "lastModified": "2025-12-04T16:16:16.273", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: alienware-wmi-wmax: Fix NULL pointer dereference in sleep handlers\n\nDevices without the AWCC interface don't initialize `awcc`. Add a check\nbefore dereferencing it in sleep handlers." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/24c3812c9e817d19e4842d7495561594de1ddcb4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a49c4d48c3b60926e6a8cec217bf95aa65388ecc", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40235.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40235.json new file mode 100644 index 00000000000..c34ef4a79ad --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40235.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-40235", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:16.407", + "lastModified": "2025-12-04T16:16:16.407", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots()\n\nIf fs_info->super_copy or fs_info->super_for_commit allocated failed in\nbtrfs_get_tree_subvol(), then no need to call btrfs_free_fs_info().\nOtherwise btrfs_check_leaked_roots() would access NULL pointer because\nfs_info->allocated_roots had not been initialised.\n\nsyzkaller reported the following information:\n ------------[ cut here ]------------\n BUG: unable to handle page fault for address: fffffffffffffbb0\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 64c9067 P4D 64c9067 PUD 64cb067 PMD 0\n Oops: Oops: 0000 [#1] SMP KASAN PTI\n CPU: 0 UID: 0 PID: 1402 Comm: syz.1.35 Not tainted 6.15.8 #4 PREEMPT(lazy)\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), (...)\n RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:23 [inline]\n RIP: 0010:raw_atomic_read include/linux/atomic/atomic-arch-fallback.h:457 [inline]\n RIP: 0010:atomic_read include/linux/atomic/atomic-instrumented.h:33 [inline]\n RIP: 0010:refcount_read include/linux/refcount.h:170 [inline]\n RIP: 0010:btrfs_check_leaked_roots+0x18f/0x2c0 fs/btrfs/disk-io.c:1230\n [...]\n Call Trace:\n \n btrfs_free_fs_info+0x310/0x410 fs/btrfs/disk-io.c:1280\n btrfs_get_tree_subvol+0x592/0x6b0 fs/btrfs/super.c:2029\n btrfs_get_tree+0x63/0x80 fs/btrfs/super.c:2097\n vfs_get_tree+0x98/0x320 fs/super.c:1759\n do_new_mount+0x357/0x660 fs/namespace.c:3899\n path_mount+0x716/0x19c0 fs/namespace.c:4226\n do_mount fs/namespace.c:4239 [inline]\n __do_sys_mount fs/namespace.c:4450 [inline]\n __se_sys_mount fs/namespace.c:4427 [inline]\n __x64_sys_mount+0x28c/0x310 fs/namespace.c:4427\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0x92/0x180 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n RIP: 0033:0x7f032eaffa8d\n [...]" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0c2b2d4d053e9840e6da6ed581befa20309f281a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/17679ac6df6c4830ba711835aa8cf961be36cfa1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b1c2b4e6ffd307720ab6ce42f6749b0c02ba0a73", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40236.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40236.json new file mode 100644 index 00000000000..0f1319a98b0 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40236.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40236", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:16.567", + "lastModified": "2025-12-04T16:16:16.567", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-net: zero unused hash fields\n\nWhen GSO tunnel is negotiated virtio_net_hdr_tnl_from_skb() tries to\ninitialize the tunnel metadata but forget to zero unused rxhash\nfields. This may leak information to another side. Fixing this by\nzeroing the unused hash fields." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/b2284768c6b32aa224ca7d0ef0741beb434f03aa", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b625d231c66a6041e98817ffc944bf6e4c45b2e3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40237.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40237.json new file mode 100644 index 00000000000..2ea486cbfb9 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40237.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-40237", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:16.697", + "lastModified": "2025-12-04T16:16:16.697", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/notify: call exportfs_encode_fid with s_umount\n\nCalling intotify_show_fdinfo() on fd watching an overlayfs inode, while\nthe overlayfs is being unmounted, can lead to dereferencing NULL ptr.\n\nThis issue was found by syzkaller.\n\nRace Condition Diagram:\n\nThread 1 Thread 2\n-------- --------\n\ngeneric_shutdown_super()\n shrink_dcache_for_umount\n sb->s_root = NULL\n\n |\n | vfs_read()\n | inotify_fdinfo()\n | * inode get from mark *\n | show_mark_fhandle(m, inode)\n | exportfs_encode_fid(inode, ..)\n | ovl_encode_fh(inode, ..)\n | ovl_check_encode_origin(inode)\n | * deref i_sb->s_root *\n |\n |\n v\n fsnotify_sb_delete(sb)\n\nWhich then leads to:\n\n[ 32.133461] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP DEBUG_PAGEALLOC KASAN NOPTI\n[ 32.134438] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]\n[ 32.135032] CPU: 1 UID: 0 PID: 4468 Comm: systemd-coredum Not tainted 6.17.0-rc6 #22 PREEMPT(none)\n\n\n\n[ 32.143353] Call Trace:\n[ 32.143732] ovl_encode_fh+0xd5/0x170\n[ 32.144031] exportfs_encode_inode_fh+0x12f/0x300\n[ 32.144425] show_mark_fhandle+0xbe/0x1f0\n[ 32.145805] inotify_fdinfo+0x226/0x2d0\n[ 32.146442] inotify_show_fdinfo+0x1c5/0x350\n[ 32.147168] seq_show+0x530/0x6f0\n[ 32.147449] seq_read_iter+0x503/0x12a0\n[ 32.148419] seq_read+0x31f/0x410\n[ 32.150714] vfs_read+0x1f0/0x9e0\n[ 32.152297] ksys_read+0x125/0x240\n\nIOW ovl_check_encode_origin derefs inode->i_sb->s_root, after it was set\nto NULL in the unmount path.\n\nFix it by protecting calling exportfs_encode_fid() from\nshow_mark_fhandle() with s_umount lock.\n\nThis form of fix was suggested by Amir in [1].\n\n[1]: https://lore.kernel.org/all/CAOQ4uxhbDwhb+2Brs1UdkoF0a3NSdBAOQPNfEHjahrgoKJpLEw@mail.gmail.com/" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/3f307a9f7a7a2822e38ac451b73e2244e7279496", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a7c4bb43bfdc2b9f06ee9d036028ed13a83df42a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bc1c6b803e14ea2b8f7e33b7164013f666ceb656", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d1894bc542becb0fda61e7e513b09523cab44030", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40238.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40238.json new file mode 100644 index 00000000000..7d327cffc11 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40238.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-40238", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:16.830", + "lastModified": "2025-12-04T16:16:16.830", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix IPsec cleanup over MPV device\n\nWhen we do mlx5e_detach_netdev() we eventually disable blocking events\nnotifier, among those events are IPsec MPV events from IB to core.\n\nSo before disabling those blocking events, make sure to also unregister\nthe devcom device and mark all this device operations as complete,\nin order to prevent the other device from using invalid netdev\nduring future devcom events which could cause the trace below.\n\nBUG: kernel NULL pointer dereference, address: 0000000000000010\nPGD 146427067 P4D 146427067 PUD 146488067 PMD 0\nOops: Oops: 0000 [#1] SMP\nCPU: 1 UID: 0 PID: 7735 Comm: devlink Tainted: GW 6.12.0-rc6_for_upstream_min_debug_2024_11_08_00_46 #1\nTainted: [W]=WARN\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\nRIP: 0010:mlx5_devcom_comp_set_ready+0x5/0x40 [mlx5_core]\nCode: 00 01 48 83 05 23 32 1e 00 01 41 b8 ed ff ff ff e9 60 ff ff ff 48 83 05 00 32 1e 00 01 eb e3 66 0f 1f 44 00 00 0f 1f 44 00 00 <48> 8b 47 10 48 83 05 5f 32 1e 00 01 48 8b 50 40 48 85 d2 74 05 40\nRSP: 0018:ffff88811a5c35f8 EFLAGS: 00010206\nRAX: ffff888106e8ab80 RBX: ffff888107d7e200 RCX: ffff88810d6f0a00\nRDX: ffff88810d6f0a00 RSI: 0000000000000001 RDI: 0000000000000000\nRBP: ffff88811a17e620 R08: 0000000000000040 R09: 0000000000000000\nR10: ffff88811a5c3618 R11: 0000000de85d51bd R12: ffff88811a17e600\nR13: ffff88810d6f0a00 R14: 0000000000000000 R15: ffff8881034bda80\nFS: 00007f27bdf89180(0000) GS:ffff88852c880000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000010 CR3: 000000010f159005 CR4: 0000000000372eb0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \n ? __die+0x20/0x60\n ? page_fault_oops+0x150/0x3e0\n ? exc_page_fault+0x74/0x130\n ? asm_exc_page_fault+0x22/0x30\n ? mlx5_devcom_comp_set_ready+0x5/0x40 [mlx5_core]\n mlx5e_devcom_event_mpv+0x42/0x60 [mlx5_core]\n mlx5_devcom_send_event+0x8c/0x170 [mlx5_core]\n blocking_event+0x17b/0x230 [mlx5_core]\n notifier_call_chain+0x35/0xa0\n blocking_notifier_call_chain+0x3d/0x60\n mlx5_blocking_notifier_call_chain+0x22/0x30 [mlx5_core]\n mlx5_core_mp_event_replay+0x12/0x20 [mlx5_core]\n mlx5_ib_bind_slave_port+0x228/0x2c0 [mlx5_ib]\n mlx5_ib_stage_init_init+0x664/0x9d0 [mlx5_ib]\n ? idr_alloc_cyclic+0x50/0xb0\n ? __kmalloc_cache_noprof+0x167/0x340\n ? __kmalloc_noprof+0x1a7/0x430\n __mlx5_ib_add+0x34/0xd0 [mlx5_ib]\n mlx5r_probe+0xe9/0x310 [mlx5_ib]\n ? kernfs_add_one+0x107/0x150\n ? __mlx5_ib_add+0xd0/0xd0 [mlx5_ib]\n auxiliary_bus_probe+0x3e/0x90\n really_probe+0xc5/0x3a0\n ? driver_probe_device+0x90/0x90\n __driver_probe_device+0x80/0x160\n driver_probe_device+0x1e/0x90\n __device_attach_driver+0x7d/0x100\n bus_for_each_drv+0x80/0xd0\n __device_attach+0xbc/0x1f0\n bus_probe_device+0x86/0xa0\n device_add+0x62d/0x830\n __auxiliary_device_add+0x3b/0xa0\n ? auxiliary_device_init+0x41/0x90\n add_adev+0xd1/0x150 [mlx5_core]\n mlx5_rescan_drivers_locked+0x21c/0x300 [mlx5_core]\n esw_mode_change+0x6c/0xc0 [mlx5_core]\n mlx5_devlink_eswitch_mode_set+0x21e/0x640 [mlx5_core]\n devlink_nl_eswitch_set_doit+0x60/0xe0\n genl_family_rcv_msg_doit+0xd0/0x120\n genl_rcv_msg+0x180/0x2b0\n ? devlink_get_from_attrs_lock+0x170/0x170\n ? devlink_nl_eswitch_get_doit+0x290/0x290\n ? devlink_nl_pre_doit_port_optional+0x50/0x50\n ? genl_family_rcv_msg_dumpit+0xf0/0xf0\n netlink_rcv_skb+0x54/0x100\n genl_rcv+0x24/0x40\n netlink_unicast+0x1fc/0x2d0\n netlink_sendmsg+0x1e4/0x410\n __sock_sendmsg+0x38/0x60\n ? sockfd_lookup_light+0x12/0x60\n __sys_sendto+0x105/0x160\n ? __sys_recvmsg+0x4e/0x90\n __x64_sys_sendto+0x20/0x30\n do_syscall_64+0x4c/0x100\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\nRIP: 0033:0x7f27bc91b13a\nCode: bb 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 8b 05 fa 96 2c 00 45 89 c9 4c 63 d1 48 63 ff 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff \n---truncated---" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/664f76be38a18c61151d0ef248c7e2f3afb4f3c7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7e212cebc863c2c7a82f480446cd731721451691", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8956686d398eca6d324d2d164f9d2a281175a3a1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40239.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40239.json new file mode 100644 index 00000000000..9b987001ec5 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40239.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-40239", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:16.963", + "lastModified": "2025-12-04T16:16:16.963", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: phy: micrel: always set shared->phydev for LAN8814\n\nCurrently, during the LAN8814 PTP probe shared->phydev is only set if PTP\nclock gets actually set, otherwise the function will return before setting\nit.\n\nThis is an issue as shared->phydev is unconditionally being used when IRQ\nis being handled, especially in lan8814_gpio_process_cap and since it was\nnot set it will cause a NULL pointer exception and crash the kernel.\n\nSo, simply always set shared->phydev to avoid the NULL pointer exception." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/399d10934740ae8cdaa4e3245f7c5f6c332da844", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b093b06826b836c2824858669db080c190c04715", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/da1ef8e9eb5d4a12bec32d11636e521e7d529b9e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40240.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40240.json new file mode 100644 index 00000000000..2e753ca7971 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40240.json @@ -0,0 +1,49 @@ +{ + "id": "CVE-2025-40240", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:17.100", + "lastModified": "2025-12-04T16:16:17.100", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: avoid NULL dereference when chunk data buffer is missing\n\nchunk->skb pointer is dereferenced in the if-block where it's supposed\nto be NULL only.\n\nchunk->skb can only be NULL if chunk->head_skb is not. Check for frag_list\ninstead and do it just before replacing chunk->skb. We're sure that\notherwise chunk->skb is non-NULL because of outer if() condition." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/03e80a4b04ef1fb2c61dd63216ab8d3a5dcb196f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/08165c296597075763130919f2aae59b5822f016", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/441f0647f7673e0e64d4910ef61a5fb8f16bfb82", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4f6da435fb5d8a21cbf8cae5ca5a2ba0e1012b71", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/61cda2777b07d27459f5cac5a047c3edf9c8a1a9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7a832b0f99be19df608cb75c023f8027b1789bd1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/89b465b54227c245ddc7cc9ed822231af21123ef", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/cb9055ba30306ede4ad920002233d0659982f1cb", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40241.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40241.json new file mode 100644 index 00000000000..ba9bf89324e --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40241.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40241", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:17.250", + "lastModified": "2025-12-04T16:16:17.250", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: fix crafted invalid cases for encoded extents\n\nRobert recently reported two corrupted images that can cause system\ncrashes, which are related to the new encoded extents introduced\nin Linux 6.15:\n\n - The first one [1] has plen != 0 (e.g. plen == 0x2000000) but\n (plen & Z_EROFS_EXTENT_PLEN_MASK) == 0. It is used to represent\n special extents such as sparse extents (!EROFS_MAP_MAPPED), but\n previously only plen == 0 was handled;\n\n - The second one [2] has pa 0xffffffffffdcffed and plen 0xb4000,\n then \"cur [0xfffffffffffff000] += bvec.bv_len [0x1000]\" in\n \"} while ((cur += bvec.bv_len) < end);\" wraps around, causing an\n out-of-bound access of pcl->compressed_bvecs[] in\n z_erofs_submit_queue(). EROFS only supports 48-bit physical block\n addresses (up to 1EiB for 4k blocks), so add a sanity check to\n enforce this." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/00d8fe0b72f4ca0a983abced36aad2160038c421", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a429b76114aaca3ef1aff4cd469dcf025431bd11", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40242.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40242.json new file mode 100644 index 00000000000..85c49df39bb --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40242.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-40242", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:17.390", + "lastModified": "2025-12-04T16:16:17.390", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: Fix unlikely race in gdlm_put_lock\n\nIn gdlm_put_lock(), there is a small window of time in which the\nDFL_UNMOUNT flag has been set but the lockspace hasn't been released,\nyet. In that window, dlm may still call gdlm_ast() and gdlm_bast().\nTo prevent it from dereferencing freed glock objects, only free the\nglock if the lockspace has actually been released." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/279bde3bbb0ac0bad5c729dfa85983d75a5d7641", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/28c4d9bc0708956c1a736a9e49fee71b65deee81", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/64c61b4ac645222fa7b724cef616c1f862a72a40", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40243.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40243.json new file mode 100644 index 00000000000..87da4441d26 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40243.json @@ -0,0 +1,49 @@ +{ + "id": "CVE-2025-40243", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:17.523", + "lastModified": "2025-12-04T16:16:17.523", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()\n\nThe syzbot reported issue in hfs_find_set_zero_bits():\n\n=====================================================\nBUG: KMSAN: uninit-value in hfs_find_set_zero_bits+0x74d/0xb60 fs/hfs/bitmap.c:45\n hfs_find_set_zero_bits+0x74d/0xb60 fs/hfs/bitmap.c:45\n hfs_vbm_search_free+0x13c/0x5b0 fs/hfs/bitmap.c:151\n hfs_extend_file+0x6a5/0x1b00 fs/hfs/extent.c:408\n hfs_get_block+0x435/0x1150 fs/hfs/extent.c:353\n __block_write_begin_int+0xa76/0x3030 fs/buffer.c:2151\n block_write_begin fs/buffer.c:2262 [inline]\n cont_write_begin+0x10e1/0x1bc0 fs/buffer.c:2601\n hfs_write_begin+0x85/0x130 fs/hfs/inode.c:52\n cont_expand_zero fs/buffer.c:2528 [inline]\n cont_write_begin+0x35a/0x1bc0 fs/buffer.c:2591\n hfs_write_begin+0x85/0x130 fs/hfs/inode.c:52\n hfs_file_truncate+0x1d6/0xe60 fs/hfs/extent.c:494\n hfs_inode_setattr+0x964/0xaa0 fs/hfs/inode.c:654\n notify_change+0x1993/0x1aa0 fs/attr.c:552\n do_truncate+0x28f/0x310 fs/open.c:68\n do_ftruncate+0x698/0x730 fs/open.c:195\n do_sys_ftruncate fs/open.c:210 [inline]\n __do_sys_ftruncate fs/open.c:215 [inline]\n __se_sys_ftruncate fs/open.c:213 [inline]\n __x64_sys_ftruncate+0x11b/0x250 fs/open.c:213\n x64_sys_call+0xfe3/0x3db0 arch/x86/include/generated/asm/syscalls_64.h:78\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xd9/0x210 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nUninit was created at:\n slab_post_alloc_hook mm/slub.c:4154 [inline]\n slab_alloc_node mm/slub.c:4197 [inline]\n __kmalloc_cache_noprof+0x7f7/0xed0 mm/slub.c:4354\n kmalloc_noprof include/linux/slab.h:905 [inline]\n hfs_mdb_get+0x1cc8/0x2a90 fs/hfs/mdb.c:175\n hfs_fill_super+0x3d0/0xb80 fs/hfs/super.c:337\n get_tree_bdev_flags+0x6e3/0x920 fs/super.c:1681\n get_tree_bdev+0x38/0x50 fs/super.c:1704\n hfs_get_tree+0x35/0x40 fs/hfs/super.c:388\n vfs_get_tree+0xb0/0x5c0 fs/super.c:1804\n do_new_mount+0x738/0x1610 fs/namespace.c:3902\n path_mount+0x6db/0x1e90 fs/namespace.c:4226\n do_mount fs/namespace.c:4239 [inline]\n __do_sys_mount fs/namespace.c:4450 [inline]\n __se_sys_mount+0x6eb/0x7d0 fs/namespace.c:4427\n __x64_sys_mount+0xe4/0x150 fs/namespace.c:4427\n x64_sys_call+0xfa7/0x3db0 arch/x86/include/generated/asm/syscalls_64.h:166\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xd9/0x210 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nCPU: 1 UID: 0 PID: 12609 Comm: syz.1.2692 Not tainted 6.16.0-syzkaller #0 PREEMPT(none)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025\n=====================================================\n\nThe HFS_SB(sb)->bitmap buffer is allocated in hfs_mdb_get():\n\nHFS_SB(sb)->bitmap = kmalloc(8192, GFP_KERNEL);\n\nFinally, it can trigger the reported issue because kmalloc()\ndoesn't clear the allocated memory. If allocated memory contains\nonly zeros, then everything will work pretty fine.\nBut if the allocated memory contains the \"garbage\", then\nit can affect the bitmap operations and it triggers\nthe reported issue.\n\nThis patch simply exchanges the kmalloc() on kzalloc()\nwith the goal to guarantee the correctness of bitmap operations.\nBecause, newly created allocation bitmap should have all\navailable blocks free. Potentially, initialization bitmap's read\noperation could not fill the whole allocated memory and\n\"garbage\" in the not initialized memory will be the reason of\nvolume coruptions and file system driver bugs." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/2048ec5b98dbdfe0b929d2e42dc7a54c389c53dd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/2a112cdd66f5a132da5235ca31a320528c86bf33", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3b447fd401824e1ccf0b769188edefe866a1e676", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/502fa92a71f344611101bd04ef1a595b8b6014f5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bf1683078fbdd09a7f7f9b74121ebaa03432bd00", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/cfafefcb0e1fc60135f7040f4aed0a4aef4f76ca", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e148ed5cda8fd96d4620c4622fb02f552a2d166a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/fc56548fca732f3d3692c83b40db796259a03887", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40244.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40244.json new file mode 100644 index 00000000000..bb9d5b6e0a4 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40244.json @@ -0,0 +1,49 @@ +{ + "id": "CVE-2025-40244", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:17.670", + "lastModified": "2025-12-04T16:16:17.670", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()\n\nThe syzbot reported issue in __hfsplus_ext_cache_extent():\n\n[ 70.194323][ T9350] BUG: KMSAN: uninit-value in __hfsplus_ext_cache_extent+0x7d0/0x990\n[ 70.195022][ T9350] __hfsplus_ext_cache_extent+0x7d0/0x990\n[ 70.195530][ T9350] hfsplus_file_extend+0x74f/0x1cf0\n[ 70.195998][ T9350] hfsplus_get_block+0xe16/0x17b0\n[ 70.196458][ T9350] __block_write_begin_int+0x962/0x2ce0\n[ 70.196959][ T9350] cont_write_begin+0x1000/0x1950\n[ 70.197416][ T9350] hfsplus_write_begin+0x85/0x130\n[ 70.197873][ T9350] generic_perform_write+0x3e8/0x1060\n[ 70.198374][ T9350] __generic_file_write_iter+0x215/0x460\n[ 70.198892][ T9350] generic_file_write_iter+0x109/0x5e0\n[ 70.199393][ T9350] vfs_write+0xb0f/0x14e0\n[ 70.199771][ T9350] ksys_write+0x23e/0x490\n[ 70.200149][ T9350] __x64_sys_write+0x97/0xf0\n[ 70.200570][ T9350] x64_sys_call+0x3015/0x3cf0\n[ 70.201065][ T9350] do_syscall_64+0xd9/0x1d0\n[ 70.201506][ T9350] entry_SYSCALL_64_after_hwframe+0x77/0x7f\n[ 70.202054][ T9350]\n[ 70.202279][ T9350] Uninit was created at:\n[ 70.202693][ T9350] __kmalloc_noprof+0x621/0xf80\n[ 70.203149][ T9350] hfsplus_find_init+0x8d/0x1d0\n[ 70.203602][ T9350] hfsplus_file_extend+0x6ca/0x1cf0\n[ 70.204087][ T9350] hfsplus_get_block+0xe16/0x17b0\n[ 70.204561][ T9350] __block_write_begin_int+0x962/0x2ce0\n[ 70.205074][ T9350] cont_write_begin+0x1000/0x1950\n[ 70.205547][ T9350] hfsplus_write_begin+0x85/0x130\n[ 70.206017][ T9350] generic_perform_write+0x3e8/0x1060\n[ 70.206519][ T9350] __generic_file_write_iter+0x215/0x460\n[ 70.207042][ T9350] generic_file_write_iter+0x109/0x5e0\n[ 70.207552][ T9350] vfs_write+0xb0f/0x14e0\n[ 70.207961][ T9350] ksys_write+0x23e/0x490\n[ 70.208375][ T9350] __x64_sys_write+0x97/0xf0\n[ 70.208810][ T9350] x64_sys_call+0x3015/0x3cf0\n[ 70.209255][ T9350] do_syscall_64+0xd9/0x1d0\n[ 70.209680][ T9350] entry_SYSCALL_64_after_hwframe+0x77/0x7f\n[ 70.210230][ T9350]\n[ 70.210454][ T9350] CPU: 2 UID: 0 PID: 9350 Comm: repro Not tainted 6.12.0-rc5 #5\n[ 70.211174][ T9350] Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[ 70.212115][ T9350] =====================================================\n[ 70.212734][ T9350] Disabling lock debugging due to kernel taint\n[ 70.213284][ T9350] Kernel panic - not syncing: kmsan.panic set ...\n[ 70.213858][ T9350] CPU: 2 UID: 0 PID: 9350 Comm: repro Tainted: G B 6.12.0-rc5 #5\n[ 70.214679][ T9350] Tainted: [B]=BAD_PAGE\n[ 70.215057][ T9350] Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[ 70.215999][ T9350] Call Trace:\n[ 70.216309][ T9350] \n[ 70.216585][ T9350] dump_stack_lvl+0x1fd/0x2b0\n[ 70.217025][ T9350] dump_stack+0x1e/0x30\n[ 70.217421][ T9350] panic+0x502/0xca0\n[ 70.217803][ T9350] ? kmsan_get_metadata+0x13e/0x1c0\n\n[ 70.218294][ Message fromT sy9350] kmsan_report+0x296/slogd@syzkaller 0x2aat Aug 18 22:11:058 ...\n kernel\n:[ 70.213284][ T9350] Kernel panic - not syncing: kmsan.panic [ 70.220179][ T9350] ? kmsan_get_metadata+0x13e/0x1c0\nset ...\n[ 70.221254][ T9350] ? __msan_warning+0x96/0x120\n[ 70.222066][ T9350] ? __hfsplus_ext_cache_extent+0x7d0/0x990\n[ 70.223023][ T9350] ? hfsplus_file_extend+0x74f/0x1cf0\n[ 70.224120][ T9350] ? hfsplus_get_block+0xe16/0x17b0\n[ 70.224946][ T9350] ? __block_write_begin_int+0x962/0x2ce0\n[ 70.225756][ T9350] ? cont_write_begin+0x1000/0x1950\n[ 70.226337][ T9350] ? hfsplus_write_begin+0x85/0x130\n[ 70.226852][ T9350] ? generic_perform_write+0x3e8/0x1060\n[ 70.227405][ T9350] ? __generic_file_write_iter+0x215/0x460\n[ 70.227979][ T9350] ? generic_file_write_iter+0x109/0x5e0\n[ 70.228540][ T9350] ? vfs_write+0xb0f/0x14e0\n[ 70.228997][ T9350] ? ksys_write+0x23e/0x490\n---truncated---" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/14c673a2f3ecf650b694a52a88688f1d71849899", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4840ceadef4290c56cc422f0fc697655f3cbf070", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/99202d94909d323a30d154ab0261c0a07166daec", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a5bfb13b4f406aef1a450f99d22d3e48df01528c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b8a72692aa42b7dcd179a96b90bc2763ac74576a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c135b8dca65526aa5b8814e9954e0ae317d9c598", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c1ec90bed504640a42bb20a5f413be39cd17ad71", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d7e313039a8f3a6ee072dc5ff4643234d2d735cf", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40245.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40245.json new file mode 100644 index 00000000000..577298e631a --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40245.json @@ -0,0 +1,41 @@ +{ + "id": "CVE-2025-40245", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:17.827", + "lastModified": "2025-12-04T16:16:17.827", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnios2: ensure that memblock.current_limit is set when setting pfn limits\n\nOn nios2, with CONFIG_FLATMEM set, the kernel relies on\nmemblock_get_current_limit() to determine the limits of mem_map, in\nparticular for max_low_pfn.\nUnfortunately, memblock.current_limit is only default initialized to\nMEMBLOCK_ALLOC_ANYWHERE at this point of the bootup, potentially leading\nto situations where max_low_pfn can erroneously exceed the value of\nmax_pfn and, thus, the valid range of available DRAM.\n\nThis can in turn cause kernel-level paging failures, e.g.:\n\n[ 76.900000] Unable to handle kernel paging request at virtual address 20303000\n[ 76.900000] ea = c0080890, ra = c000462c, cause = 14\n[ 76.900000] Kernel panic - not syncing: Oops\n[ 76.900000] ---[ end Kernel panic - not syncing: Oops ]---\n\nThis patch fixes this by pre-calculating memblock.current_limit\nbased on the upper limits of the available memory ranges via\nadjust_lowmem_bounds, a simplified version of the equivalent\nimplementation within the arm architecture." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/25f09699edd360b534ccae16bc276c3b52c471f3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/5c3e38a367822f036227dd52bac82dc4a05157e2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8912814f14e298b83df072fecc1f7ed1b63b1b2c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/90f5f715550e07cd6a51f80fc3f062d832c8c997", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/a20b83cf45be2057f3d073506779e52c7fa17f94", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b1ec9faef7e36269ca3ec890972a78effbaeb975", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40246.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40246.json new file mode 100644 index 00000000000..ff8a5cf8d42 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40246.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-40246", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:17.970", + "lastModified": "2025-12-04T16:16:17.970", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix out of bounds memory read error in symlink repair\n\nxfs/286 produced this report on my test fleet:\n\n ==================================================================\n BUG: KFENCE: out-of-bounds read in memcpy_orig+0x54/0x110\n\n Out-of-bounds read at 0xffff88843fe9e038 (184B right of kfence-#184):\n memcpy_orig+0x54/0x110\n xrep_symlink_salvage_inline+0xb3/0xf0 [xfs]\n xrep_symlink_salvage+0x100/0x110 [xfs]\n xrep_symlink+0x2e/0x80 [xfs]\n xrep_attempt+0x61/0x1f0 [xfs]\n xfs_scrub_metadata+0x34f/0x5c0 [xfs]\n xfs_ioc_scrubv_metadata+0x387/0x560 [xfs]\n xfs_file_ioctl+0xe23/0x10e0 [xfs]\n __x64_sys_ioctl+0x76/0xc0\n do_syscall_64+0x4e/0x1e0\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n\n kfence-#184: 0xffff88843fe9df80-0xffff88843fe9dfea, size=107, cache=kmalloc-128\n\n allocated by task 3470 on cpu 1 at 263329.131592s (192823.508886s ago):\n xfs_init_local_fork+0x79/0xe0 [xfs]\n xfs_iformat_local+0xa4/0x170 [xfs]\n xfs_iformat_data_fork+0x148/0x180 [xfs]\n xfs_inode_from_disk+0x2cd/0x480 [xfs]\n xfs_iget+0x450/0xd60 [xfs]\n xfs_bulkstat_one_int+0x6b/0x510 [xfs]\n xfs_bulkstat_iwalk+0x1e/0x30 [xfs]\n xfs_iwalk_ag_recs+0xdf/0x150 [xfs]\n xfs_iwalk_run_callbacks+0xb9/0x190 [xfs]\n xfs_iwalk_ag+0x1dc/0x2f0 [xfs]\n xfs_iwalk_args.constprop.0+0x6a/0x120 [xfs]\n xfs_iwalk+0xa4/0xd0 [xfs]\n xfs_bulkstat+0xfa/0x170 [xfs]\n xfs_ioc_fsbulkstat.isra.0+0x13a/0x230 [xfs]\n xfs_file_ioctl+0xbf2/0x10e0 [xfs]\n __x64_sys_ioctl+0x76/0xc0\n do_syscall_64+0x4e/0x1e0\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n\n CPU: 1 UID: 0 PID: 1300113 Comm: xfs_scrub Not tainted 6.18.0-rc4-djwx #rc4 PREEMPT(lazy) 3d744dd94e92690f00a04398d2bd8631dcef1954\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-4.module+el8.8.0+21164+ed375313 04/01/2014\n ==================================================================\n\nOn further analysis, I realized that the second parameter to min() is\nnot correct. xfs_ifork::if_bytes is the size of the xfs_ifork::if_data\nbuffer. if_bytes can be smaller than the data fork size because:\n\n(a) the forkoff code tries to keep the data area as large as possible\n(b) for symbolic links, if_bytes is the ondisk file size + 1\n(c) forkoff is always a multiple of 8.\n\nCase in point: for a single-byte symlink target, forkoff will be\n8 but the buffer will only be 2 bytes long.\n\nIn other words, the logic here is wrong and we walk off the end of the\nincore buffer. Fix that." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/678e1cc2f482e0985a0613ab4a5bf89c497e5acc", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7c2d68e091584149fe89bcbaf9b99b3162d46ee7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/81a8685cac4bf081c93a7df591644f4f80240bb9", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40247.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40247.json new file mode 100644 index 00000000000..d9788a92148 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40247.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40247", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:18.107", + "lastModified": "2025-12-04T16:16:18.107", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm: Fix pgtable prealloc error path\n\nThe following splat was reported:\n\n Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010\n Mem abort info:\n ESR = 0x0000000096000004\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x04: level 0 translation fault\n Data abort info:\n ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n user pgtable: 4k pages, 48-bit VAs, pgdp=00000008d0fd8000\n [0000000000000010] pgd=0000000000000000, p4d=0000000000000000\n Internal error: Oops: 0000000096000004 [#1] SMP\n CPU: 5 UID: 1000 PID: 149076 Comm: Xwayland Tainted: G S 6.16.0-rc2-00809-g0b6974bb4134-dirty #367 PREEMPT\n Tainted: [S]=CPU_OUT_OF_SPEC\n Hardware name: Qualcomm Technologies, Inc. SM8650 HDK (DT)\n pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)\n pc : build_detached_freelist+0x28/0x224\n lr : kmem_cache_free_bulk.part.0+0x38/0x244\n sp : ffff000a508c7a20\n x29: ffff000a508c7a20 x28: ffff000a508c7d50 x27: ffffc4e49d16f350\n x26: 0000000000000058 x25: 00000000fffffffc x24: 0000000000000000\n x23: ffff00098c4e1450 x22: 00000000fffffffc x21: 0000000000000000\n x20: ffff000a508c7af8 x19: 0000000000000002 x18: 00000000000003e8\n x17: ffff000809523850 x16: ffff000809523820 x15: 0000000000401640\n x14: ffff000809371140 x13: 0000000000000130 x12: ffff0008b5711e30\n x11: 00000000001058fa x10: 0000000000000a80 x9 : ffff000a508c7940\n x8 : ffff000809371ba0 x7 : 781fffe033087fff x6 : 0000000000000000\n x5 : ffff0008003cd000 x4 : 781fffe033083fff x3 : ffff000a508c7af8\n x2 : fffffdffc0000000 x1 : 0001000000000000 x0 : ffff0008001a6a00\n Call trace:\n build_detached_freelist+0x28/0x224 (P)\n kmem_cache_free_bulk.part.0+0x38/0x244\n kmem_cache_free_bulk+0x10/0x1c\n msm_iommu_pagetable_prealloc_cleanup+0x3c/0xd0\n msm_vma_job_free+0x30/0x240\n msm_ioctl_vm_bind+0x1d0/0x9a0\n drm_ioctl_kernel+0x84/0x104\n drm_ioctl+0x358/0x4d4\n __arm64_sys_ioctl+0x8c/0xe0\n invoke_syscall+0x44/0x100\n el0_svc_common.constprop.0+0x3c/0xe0\n do_el0_svc+0x18/0x20\n el0_svc+0x30/0x100\n el0t_64_sync_handler+0x104/0x130\n el0t_64_sync+0x170/0x174\n Code: aa0203f5 b26287e2 f2dfbfe2 aa0303f4 (f8737ab6)\n ---[ end trace 0000000000000000 ]---\n\nSince msm_vma_job_free() is called directly from the ioctl, this looks\nlike an error path cleanup issue. Which I think results from\nprealloc_cleanup() called without a preceding successful\nprealloc_allocate() call. So handle that case better.\n\nPatchwork: https://patchwork.freedesktop.org/patch/678677/" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/830d68f2cb8ab6fb798bb9555016709a9e012af0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b865da18b6cb878f33b5920693d03f23b9c4d1a3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40248.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40248.json new file mode 100644 index 00000000000..c61bc0489af --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40248.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-40248", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:18.240", + "lastModified": "2025-12-04T16:16:18.240", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: Ignore signal/timeout on connect() if already established\n\nDuring connect(), acting on a signal/timeout by disconnecting an already\nestablished socket leads to several issues:\n\n1. connect() invoking vsock_transport_cancel_pkt() ->\n virtio_transport_purge_skbs() may race with sendmsg() invoking\n virtio_transport_get_credit(). This results in a permanently elevated\n `vvs->bytes_unsent`. Which, in turn, confuses the SOCK_LINGER handling.\n\n2. connect() resetting a connected socket's state may race with socket\n being placed in a sockmap. A disconnected socket remaining in a sockmap\n breaks sockmap's assumptions. And gives rise to WARNs.\n\n3. connect() transitioning SS_CONNECTED -> SS_UNCONNECTED allows for a\n transport change/drop after TCP_ESTABLISHED. Which poses a problem for\n any simultaneous sendmsg() or connect() and may result in a\n use-after-free/null-ptr-deref.\n\nDo not disconnect socket on signal/timeout. Keep the logic for unconnected\nsockets: they don't linger, can't be placed in a sockmap, are rejected by\nsendmsg().\n\n[1]: https://lore.kernel.org/netdev/e07fd95c-9a38-4eea-9638-133e38c2ec9b@rbox.co/\n[2]: https://lore.kernel.org/netdev/20250317-vsock-trans-signal-race-v4-0-fc8837f3f1d4@rbox.co/\n[3]: https://lore.kernel.org/netdev/60f1b7db-3099-4f6a-875e-af9f6ef194f6@rbox.co/" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/002541ef650b742a198e4be363881439bb9d86b4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3f71753935d648082a8279a97d30efe6b85be680", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/5998da5a8208ae9ad7838ba322bccb2bdcd95e81", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ab6b19f690d89ae4709fba73a3c4a7911f495b7a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f1c170cae285e4b8f61be043bb17addc3d0a14b5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40249.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40249.json new file mode 100644 index 00000000000..0ad5f65a2db --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40249.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40249", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:18.380", + "lastModified": "2025-12-04T16:16:18.380", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: cdev: make sure the cdev fd is still active before emitting events\n\nWith the final call to fput() on a file descriptor, the release action\nmay be deferred and scheduled on a work queue. The reference count of\nthat descriptor is still zero and it must not be used. It's possible\nthat a GPIO change, we want to notify the user-space about, happens\nAFTER the reference count on the file descriptor associated with the\ncharacter device went down to zero but BEFORE the .release() callback\nwas called from the workqueue and so BEFORE we unregistered from the\nnotifier.\n\nUsing the regular get_file() routine in this situation triggers the\nfollowing warning:\n\n struct file::f_count incremented from zero; use-after-free condition present!\n\nSo use the get_file_active() variant that will return NULL on file\ndescriptors that have been or are being released." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/d4cd0902c156b2ca60fdda8cd8b5bcb4b0e9ed64", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/dccc6daa8afa0f64c432e4c867f275747e3415e1", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40250.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40250.json new file mode 100644 index 00000000000..2421b1707a2 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40250.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-40250", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:18.527", + "lastModified": "2025-12-04T16:16:18.527", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Clean up only new IRQ glue on request_irq() failure\n\nThe mlx5_irq_alloc() function can inadvertently free the entire rmap\nand end up in a crash[1] when the other threads tries to access this,\nwhen request_irq() fails due to exhausted IRQ vectors. This commit\nmodifies the cleanup to remove only the specific IRQ mapping that was\njust added.\n\nThis prevents removal of other valid mappings and ensures precise\ncleanup of the failed IRQ allocation's associated glue object.\n\nNote: This error is observed when both fwctl and rds configs are enabled.\n\n[1]\nmlx5_core 0000:05:00.0: Successfully registered panic handler for port 1\nmlx5_core 0000:05:00.0: mlx5_irq_alloc:293:(pid 66740): Failed to\nrequest irq. err = -28\ninfiniband mlx5_0: mlx5_ib_test_wc:290:(pid 66740): Error -28 while\ntrying to test write-combining support\nmlx5_core 0000:05:00.0: Successfully unregistered panic handler for port 1\nmlx5_core 0000:06:00.0: Successfully registered panic handler for port 1\nmlx5_core 0000:06:00.0: mlx5_irq_alloc:293:(pid 66740): Failed to\nrequest irq. err = -28\ninfiniband mlx5_0: mlx5_ib_test_wc:290:(pid 66740): Error -28 while\ntrying to test write-combining support\nmlx5_core 0000:06:00.0: Successfully unregistered panic handler for port 1\nmlx5_core 0000:03:00.0: mlx5_irq_alloc:293:(pid 28895): Failed to\nrequest irq. err = -28\nmlx5_core 0000:05:00.0: mlx5_irq_alloc:293:(pid 28895): Failed to\nrequest irq. err = -28\ngeneral protection fault, probably for non-canonical address\n0xe277a58fde16f291: 0000 [#1] SMP NOPTI\n\nRIP: 0010:free_irq_cpu_rmap+0x23/0x7d\nCall Trace:\n \n ? show_trace_log_lvl+0x1d6/0x2f9\n ? show_trace_log_lvl+0x1d6/0x2f9\n ? mlx5_irq_alloc.cold+0x5d/0xf3 [mlx5_core]\n ? __die_body.cold+0x8/0xa\n ? die_addr+0x39/0x53\n ? exc_general_protection+0x1c4/0x3e9\n ? dev_vprintk_emit+0x5f/0x90\n ? asm_exc_general_protection+0x22/0x27\n ? free_irq_cpu_rmap+0x23/0x7d\n mlx5_irq_alloc.cold+0x5d/0xf3 [mlx5_core]\n irq_pool_request_vector+0x7d/0x90 [mlx5_core]\n mlx5_irq_request+0x2e/0xe0 [mlx5_core]\n mlx5_irq_request_vector+0xad/0xf7 [mlx5_core]\n comp_irq_request_pci+0x64/0xf0 [mlx5_core]\n create_comp_eq+0x71/0x385 [mlx5_core]\n ? mlx5e_open_xdpsq+0x11c/0x230 [mlx5_core]\n mlx5_comp_eqn_get+0x72/0x90 [mlx5_core]\n ? xas_load+0x8/0x91\n mlx5_comp_irqn_get+0x40/0x90 [mlx5_core]\n mlx5e_open_channel+0x7d/0x3c7 [mlx5_core]\n mlx5e_open_channels+0xad/0x250 [mlx5_core]\n mlx5e_open_locked+0x3e/0x110 [mlx5_core]\n mlx5e_open+0x23/0x70 [mlx5_core]\n __dev_open+0xf1/0x1a5\n __dev_change_flags+0x1e1/0x249\n dev_change_flags+0x21/0x5c\n do_setlink+0x28b/0xcc4\n ? __nla_parse+0x22/0x3d\n ? inet6_validate_link_af+0x6b/0x108\n ? cpumask_next+0x1f/0x35\n ? __snmp6_fill_stats64.constprop.0+0x66/0x107\n ? __nla_validate_parse+0x48/0x1e6\n __rtnl_newlink+0x5ff/0xa57\n ? kmem_cache_alloc_trace+0x164/0x2ce\n rtnl_newlink+0x44/0x6e\n rtnetlink_rcv_msg+0x2bb/0x362\n ? __netlink_sendskb+0x4c/0x6c\n ? netlink_unicast+0x28f/0x2ce\n ? rtnl_calcit.isra.0+0x150/0x146\n netlink_rcv_skb+0x5f/0x112\n netlink_unicast+0x213/0x2ce\n netlink_sendmsg+0x24f/0x4d9\n __sock_sendmsg+0x65/0x6a\n ____sys_sendmsg+0x28f/0x2c9\n ? import_iovec+0x17/0x2b\n ___sys_sendmsg+0x97/0xe0\n __sys_sendmsg+0x81/0xd8\n do_syscall_64+0x35/0x87\n entry_SYSCALL_64_after_hwframe+0x6e/0x0\nRIP: 0033:0x7fc328603727\nCode: c3 66 90 41 54 41 89 d4 55 48 89 f5 53 89 fb 48 83 ec 10 e8 0b ed\nff ff 44 89 e2 48 89 ee 89 df 41 89 c0 b8 2e 00 00 00 0f 05 <48> 3d 00\nf0 ff ff 77 35 44 89 c7 48 89 44 24 08 e8 44 ed ff ff 48\nRSP: 002b:00007ffe8eb3f1a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e\nRAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007fc328603727\nRDX: 0000000000000000 RSI: 00007ffe8eb3f1f0 RDI: 000000000000000d\nRBP: 00007ffe8eb3f1f0 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000\nR13: 00000000000\n---truncated---" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/4d6b4bea8b80bfa13c903ba547538249e7c5e977", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/69e043bce09c9a77e5f55b9ac7505874a2a1a9f0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6ebd02cf2dde11b86f89ea4c9f55179eab30d4ee", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d47515af6cccd7484d8b0870376858c9848a18ec", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40251.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40251.json new file mode 100644 index 00000000000..ae22afdebce --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40251.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-40251", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:18.663", + "lastModified": "2025-12-04T16:16:18.663", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndevlink: rate: Unset parent pointer in devl_rate_nodes_destroy\n\nThe function devl_rate_nodes_destroy is documented to \"Unset parent for\nall rate objects\". However, it was only calling the driver-specific\n`rate_leaf_parent_set` or `rate_node_parent_set` ops and decrementing\nthe parent's refcount, without actually setting the\n`devlink_rate->parent` pointer to NULL.\n\nThis leaves a dangling pointer in the `devlink_rate` struct, which cause\nrefcount error in netdevsim[1] and mlx5[2]. In addition, this is\ninconsistent with the behavior of `devlink_nl_rate_parent_node_set`,\nwhere the parent pointer is correctly cleared.\n\nThis patch fixes the issue by explicitly setting `devlink_rate->parent`\nto NULL after notifying the driver, thus fulfilling the function's\ndocumented behavior for all rate objects.\n\n[1]\nrepro steps:\necho 1 > /sys/bus/netdevsim/new_device\ndevlink dev eswitch set netdevsim/netdevsim1 mode switchdev\necho 1 > /sys/bus/netdevsim/devices/netdevsim1/sriov_numvfs\ndevlink port function rate add netdevsim/netdevsim1/test_node\ndevlink port function rate set netdevsim/netdevsim1/128 parent test_node\necho 1 > /sys/bus/netdevsim/del_device\n\ndmesg:\nrefcount_t: decrement hit 0; leaking memory.\nWARNING: CPU: 8 PID: 1530 at lib/refcount.c:31 refcount_warn_saturate+0x42/0xe0\nCPU: 8 UID: 0 PID: 1530 Comm: bash Not tainted 6.18.0-rc4+ #1 NONE\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014\nRIP: 0010:refcount_warn_saturate+0x42/0xe0\nCall Trace:\n \n devl_rate_leaf_destroy+0x8d/0x90\n __nsim_dev_port_del+0x6c/0x70 [netdevsim]\n nsim_dev_reload_destroy+0x11c/0x140 [netdevsim]\n nsim_drv_remove+0x2b/0xb0 [netdevsim]\n device_release_driver_internal+0x194/0x1f0\n bus_remove_device+0xc6/0x130\n device_del+0x159/0x3c0\n device_unregister+0x1a/0x60\n del_device_store+0x111/0x170 [netdevsim]\n kernfs_fop_write_iter+0x12e/0x1e0\n vfs_write+0x215/0x3d0\n ksys_write+0x5f/0xd0\n do_syscall_64+0x55/0x10f0\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n\n[2]\ndevlink dev eswitch set pci/0000:08:00.0 mode switchdev\ndevlink port add pci/0000:08:00.0 flavour pcisf pfnum 0 sfnum 1000\ndevlink port function rate add pci/0000:08:00.0/group1\ndevlink port function rate set pci/0000:08:00.0/32768 parent group1\nmodprobe -r mlx5_ib mlx5_fwctl mlx5_core\n\ndmesg:\nrefcount_t: decrement hit 0; leaking memory.\nWARNING: CPU: 7 PID: 16151 at lib/refcount.c:31 refcount_warn_saturate+0x42/0xe0\nCPU: 7 UID: 0 PID: 16151 Comm: bash Not tainted 6.17.0-rc7_for_upstream_min_debug_2025_10_02_12_44 #1 NONE\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\nRIP: 0010:refcount_warn_saturate+0x42/0xe0\nCall Trace:\n \n devl_rate_leaf_destroy+0x8d/0x90\n mlx5_esw_offloads_devlink_port_unregister+0x33/0x60 [mlx5_core]\n mlx5_esw_offloads_unload_rep+0x3f/0x50 [mlx5_core]\n mlx5_eswitch_unload_sf_vport+0x40/0x90 [mlx5_core]\n mlx5_sf_esw_event+0xc4/0x120 [mlx5_core]\n notifier_call_chain+0x33/0xa0\n blocking_notifier_call_chain+0x3b/0x50\n mlx5_eswitch_disable_locked+0x50/0x110 [mlx5_core]\n mlx5_eswitch_disable+0x63/0x90 [mlx5_core]\n mlx5_unload+0x1d/0x170 [mlx5_core]\n mlx5_uninit_one+0xa2/0x130 [mlx5_core]\n remove_one+0x78/0xd0 [mlx5_core]\n pci_device_remove+0x39/0xa0\n device_release_driver_internal+0x194/0x1f0\n unbind_store+0x99/0xa0\n kernfs_fop_write_iter+0x12e/0x1e0\n vfs_write+0x215/0x3d0\n ksys_write+0x5f/0xd0\n do_syscall_64+0x53/0x1f0\n entry_SYSCALL_64_after_hwframe+0x4b/0x53" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/542f45486f1ce2d2dde75bd85aca0389ef7046c3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/715d9cda646a8a38ea8b2bb5afb679a7464055e2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c70df6c17d389cc743f0eb30160e2d6bc6910db8", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f94c1a114ac209977bdf5ca841b98424295ab1f0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40252.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40252.json new file mode 100644 index 00000000000..bcf3edaad1c --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40252.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-40252", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:18.807", + "lastModified": "2025-12-04T16:16:18.807", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()\n\nThe loops in 'qede_tpa_cont()' and 'qede_tpa_end()', iterate\nover 'cqe->len_list[]' using only a zero-length terminator as\nthe stopping condition. If the terminator was missing or\nmalformed, the loop could run past the end of the fixed-size array.\n\nAdd an explicit bound check using ARRAY_SIZE() in both loops to prevent\na potential out-of-bounds access.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/896f1a2493b59beb2b5ccdf990503dbb16cb2256", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/917a9d02182ac8b4f25eb47dc02f3ec679608c24", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e441db07f208184e0466abf44b389a81d70c340e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f0923011c1261b33a2ac1de349256d39cb750dd0", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40253.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40253.json new file mode 100644 index 00000000000..f9b24e3599b --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40253.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-40253", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:18.937", + "lastModified": "2025-12-04T16:16:18.937", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/ctcm: Fix double-kfree\n\nThe function 'mpc_rcvd_sweep_req(mpcginfo)' is called conditionally\nfrom function 'ctcmpc_unpack_skb'. It frees passed mpcginfo.\nAfter that a call to function 'kfree' in function 'ctcmpc_unpack_skb'\nfrees it again.\n\nRemove 'kfree' call in function 'mpc_rcvd_sweep_req(mpcginfo)'.\n\nBug detected by the clang static analyzer." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/06f1dd1de0d33dbfbd2e1fc9fc57d8895f730de2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3b177b2ded563df16f6d5920671ffcfe5915d472", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7ff76f8dc6b550f8d16487bf3cebc278be720b5c", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b9dbfb1b5699f9f1e4991f96741bdf9047147589", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/da02a1824884d6c84c5e5b5ac373b0c9e3288ec2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40254.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40254.json new file mode 100644 index 00000000000..dbcbfc0986f --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40254.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-40254", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:19.080", + "lastModified": "2025-12-04T16:16:19.080", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: remove never-working support for setting nsh fields\n\nThe validation of the set(nsh(...)) action is completely wrong.\nIt runs through the nsh_key_put_from_nlattr() function that is the\nsame function that validates NSH keys for the flow match and the\npush_nsh() action. However, the set(nsh(...)) has a very different\nmemory layout. Nested attributes in there are doubled in size in\ncase of the masked set(). That makes proper validation impossible.\n\nThere is also confusion in the code between the 'masked' flag, that\nsays that the nested attributes are doubled in size containing both\nthe value and the mask, and the 'is_mask' that says that the value\nwe're parsing is the mask. This is causing kernel crash on trying to\nwrite into mask part of the match with SW_FLOW_KEY_PUT() during\nvalidation, while validate_nsh() doesn't allocate any memory for it:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000018\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 1c2383067 P4D 1c2383067 PUD 20b703067 PMD 0\n Oops: Oops: 0000 [#1] SMP NOPTI\n CPU: 8 UID: 0 Kdump: loaded Not tainted 6.17.0-rc4+ #107 PREEMPT(voluntary)\n RIP: 0010:nsh_key_put_from_nlattr+0x19d/0x610 [openvswitch]\n Call Trace:\n \n validate_nsh+0x60/0x90 [openvswitch]\n validate_set.constprop.0+0x270/0x3c0 [openvswitch]\n __ovs_nla_copy_actions+0x477/0x860 [openvswitch]\n ovs_nla_copy_actions+0x8d/0x100 [openvswitch]\n ovs_packet_cmd_execute+0x1cc/0x310 [openvswitch]\n genl_family_rcv_msg_doit+0xdb/0x130\n genl_family_rcv_msg+0x14b/0x220\n genl_rcv_msg+0x47/0xa0\n netlink_rcv_skb+0x53/0x100\n genl_rcv+0x24/0x40\n netlink_unicast+0x280/0x3b0\n netlink_sendmsg+0x1f7/0x430\n ____sys_sendmsg+0x36b/0x3a0\n ___sys_sendmsg+0x87/0xd0\n __sys_sendmsg+0x6d/0xd0\n do_syscall_64+0x7b/0x2c0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nThe third issue with this process is that while trying to convert\nthe non-masked set into masked one, validate_set() copies and doubles\nthe size of the OVS_KEY_ATTR_NSH as if it didn't have any nested\nattributes. It should be copying each nested attribute and doubling\nthem in size independently. And the process must be properly reversed\nduring the conversion back from masked to a non-masked variant during\nthe flow dump.\n\nIn the end, the only two outcomes of trying to use this action are\neither validation failure or a kernel crash. And if somehow someone\nmanages to install a flow with such an action, it will most definitely\nnot do what it is supposed to, since all the keys and the masks are\nmixed up.\n\nFixing all the issues is a complex task as it requires re-writing\nmost of the validation code.\n\nGiven that and the fact that this functionality never worked since\nintroduction, let's just remove it altogether. It's better to\nre-introduce it later with a proper implementation instead of trying\nto fix it in stable releases." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0b903f33c31c82b1c3591279fd8a23893802b987", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3415faa1fcb4150f29a72c5ecf959339d797feb7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4689ba45296dbb3a47e70a1bc2ed0328263e48f3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9c61d8fe1350b7322f4953318165d6719c3b1475", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/dfe28c4167a9259fc0c372d9f9473e1ac95cff67", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40255.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40255.json new file mode 100644 index 00000000000..0225663169c --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40255.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40255", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:19.227", + "lastModified": "2025-12-04T16:16:19.227", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()\n\nThe ethtool tsconfig Netlink path can trigger a null pointer\ndereference. A call chain such as:\n\n tsconfig_prepare_data() ->\n dev_get_hwtstamp_phylib() ->\n vlan_hwtstamp_get() ->\n generic_hwtstamp_get_lower() ->\n generic_hwtstamp_ioctl_lower()\n\nresults in generic_hwtstamp_ioctl_lower() being called with\nkernel_cfg->ifr as NULL.\n\nThe generic_hwtstamp_ioctl_lower() function does not expect\na NULL ifr and dereferences it, leading to a system crash.\n\nFix this by adding a NULL check for kernel_cfg->ifr in\ngeneric_hwtstamp_ioctl_lower(). If ifr is NULL, return -EINVAL." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/8817f816ae41908e9625c0770c4af0dcdcc01238", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f796a8dec9beafcc0f6f0d3478ed685a15c5e062", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40256.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40256.json new file mode 100644 index 00000000000..f308b042798 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40256.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40256", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:19.367", + "lastModified": "2025-12-04T16:16:19.367", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added\n\nIn commit b441cf3f8c4b (\"xfrm: delete x->tunnel as we delete x\"), I\nmissed the case where state creation fails between full\ninitialization (->init_state has been called) and being inserted on\nthe lists.\n\nIn this situation, ->init_state has been called, so for IPcomp\ntunnels, the fallback tunnel has been created and added onto the\nlists, but the user state never gets added, because we fail before\nthat. The user state doesn't go through __xfrm_state_delete, so we\ndon't call xfrm_state_delete_tunnel for those states, and we end up\nleaking the FB tunnel.\n\nThere are several codepaths affected by this: the add/update paths, in\nboth net/key and xfrm, and the migrate code (xfrm_migrate,\nxfrm_state_migrate). A \"proper\" rollback of the init_state work would\nprobably be doable in the add/update code, but for migrate it gets\nmore complicated as multiple states may be involved.\n\nAt some point, the new (not-inserted) state will be destroyed, so call\nxfrm_state_delete_tunnel during xfrm_state_gc_destroy. Most states\nwill have their fallback tunnel cleaned up during __xfrm_state_delete,\nwhich solves the issue that b441cf3f8c4b (and other patches before it)\naimed at. All states (including FB tunnels) will be removed from the\nlists once xfrm_state_fini has called flush_work(&xfrm_state_gc_work)." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/10deb69864840ccf96b00ac2ab3a2055c0c04721", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d6fe5c740c573af10943b8353992e1325cdb2715", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40257.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40257.json new file mode 100644 index 00000000000..35964060aeb --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40257.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-40257", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:19.503", + "lastModified": "2025-12-04T16:16:19.503", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: fix a race in mptcp_pm_del_add_timer()\n\nmptcp_pm_del_add_timer() can call sk_stop_timer_sync(sk, &entry->add_timer)\nwhile another might have free entry already, as reported by syzbot.\n\nAdd RCU protection to fix this issue.\n\nAlso change confusing add_timer variable with stop_timer boolean.\n\nsyzbot report:\n\nBUG: KASAN: slab-use-after-free in __timer_delete_sync+0x372/0x3f0 kernel/time/timer.c:1616\nRead of size 4 at addr ffff8880311e4150 by task kworker/1:1/44\n\nCPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025\nWorkqueue: events mptcp_worker\nCall Trace:\n \n dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0xca/0x240 mm/kasan/report.c:482\n kasan_report+0x118/0x150 mm/kasan/report.c:595\n __timer_delete_sync+0x372/0x3f0 kernel/time/timer.c:1616\n sk_stop_timer_sync+0x1b/0x90 net/core/sock.c:3631\n mptcp_pm_del_add_timer+0x283/0x310 net/mptcp/pm.c:362\n mptcp_incoming_options+0x1357/0x1f60 net/mptcp/options.c:1174\n tcp_data_queue+0xca/0x6450 net/ipv4/tcp_input.c:5361\n tcp_rcv_established+0x1335/0x2670 net/ipv4/tcp_input.c:6441\n tcp_v4_do_rcv+0x98b/0xbf0 net/ipv4/tcp_ipv4.c:1931\n tcp_v4_rcv+0x252a/0x2dc0 net/ipv4/tcp_ipv4.c:2374\n ip_protocol_deliver_rcu+0x221/0x440 net/ipv4/ip_input.c:205\n ip_local_deliver_finish+0x3bb/0x6f0 net/ipv4/ip_input.c:239\n NF_HOOK+0x30c/0x3a0 include/linux/netfilter.h:318\n NF_HOOK+0x30c/0x3a0 include/linux/netfilter.h:318\n __netif_receive_skb_one_core net/core/dev.c:6079 [inline]\n __netif_receive_skb+0x143/0x380 net/core/dev.c:6192\n process_backlog+0x31e/0x900 net/core/dev.c:6544\n __napi_poll+0xb6/0x540 net/core/dev.c:7594\n napi_poll net/core/dev.c:7657 [inline]\n net_rx_action+0x5f7/0xda0 net/core/dev.c:7784\n handle_softirqs+0x22f/0x710 kernel/softirq.c:622\n __do_softirq kernel/softirq.c:656 [inline]\n __local_bh_enable_ip+0x1a0/0x2e0 kernel/softirq.c:302\n mptcp_pm_send_ack net/mptcp/pm.c:210 [inline]\n mptcp_pm_addr_send_ack+0x41f/0x500 net/mptcp/pm.c:-1\n mptcp_pm_worker+0x174/0x320 net/mptcp/pm.c:1002\n mptcp_worker+0xd5/0x1170 net/mptcp/protocol.c:2762\n process_one_work kernel/workqueue.c:3263 [inline]\n process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346\n worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427\n kthread+0x711/0x8a0 kernel/kthread.c:463\n ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245\n \n\nAllocated by task 44:\n kasan_save_stack mm/kasan/common.c:56 [inline]\n kasan_save_track+0x3e/0x80 mm/kasan/common.c:77\n poison_kmalloc_redzone mm/kasan/common.c:400 [inline]\n __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:417\n kasan_kmalloc include/linux/kasan.h:262 [inline]\n __kmalloc_cache_noprof+0x1ef/0x6c0 mm/slub.c:5748\n kmalloc_noprof include/linux/slab.h:957 [inline]\n mptcp_pm_alloc_anno_list+0x104/0x460 net/mptcp/pm.c:385\n mptcp_pm_create_subflow_or_signal_addr+0xf9d/0x1360 net/mptcp/pm_kernel.c:355\n mptcp_pm_nl_fully_established net/mptcp/pm_kernel.c:409 [inline]\n __mptcp_pm_kernel_worker+0x417/0x1ef0 net/mptcp/pm_kernel.c:1529\n mptcp_pm_worker+0x1ee/0x320 net/mptcp/pm.c:1008\n mptcp_worker+0xd5/0x1170 net/mptcp/protocol.c:2762\n process_one_work kernel/workqueue.c:3263 [inline]\n process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346\n worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427\n kthread+0x711/0x8a0 kernel/kthread.c:463\n ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245\n\nFreed by task 6630:\n kasan_save_stack mm/kasan/common.c:56 [inline]\n kasan_save_track+0x3e/0x80 mm/kasan/common.c:77\n __kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:587\n kasan_save_free_info mm/kasan/kasan.h:406 [inline]\n poison_slab_object m\n---truncated---" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/426358d9be7ce3518966422f87b96f1bad27295f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6d3275d4ca62e2c02e1b7e8cd32db59df91c14b7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bbbd75346c8e6490b19c2ba90f38ea66ccf352b2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/c602cc344b4b8d41515fec3ffa98457ac963ee12", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40258.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40258.json new file mode 100644 index 00000000000..b533baf3b53 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40258.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-40258", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:19.640", + "lastModified": "2025-12-04T16:16:19.640", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: fix race condition in mptcp_schedule_work()\n\nsyzbot reported use-after-free in mptcp_schedule_work() [1]\n\nIssue here is that mptcp_schedule_work() schedules a work,\nthen gets a refcount on sk->sk_refcnt if the work was scheduled.\nThis refcount will be released by mptcp_worker().\n\n[A] if (schedule_work(...)) {\n[B] sock_hold(sk);\n return true;\n }\n\nProblem is that mptcp_worker() can run immediately and complete before [B]\n\nWe need instead :\n\n sock_hold(sk);\n if (schedule_work(...))\n return true;\n sock_put(sk);\n\n[1]\nrefcount_t: addition on 0; use-after-free.\n WARNING: CPU: 1 PID: 29 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 lib/refcount.c:25\nCall Trace:\n \n __refcount_add include/linux/refcount.h:-1 [inline]\n __refcount_inc include/linux/refcount.h:366 [inline]\n refcount_inc include/linux/refcount.h:383 [inline]\n sock_hold include/net/sock.h:816 [inline]\n mptcp_schedule_work+0x164/0x1a0 net/mptcp/protocol.c:943\n mptcp_tout_timer+0x21/0xa0 net/mptcp/protocol.c:2316\n call_timer_fn+0x17e/0x5f0 kernel/time/timer.c:1747\n expire_timers kernel/time/timer.c:1798 [inline]\n __run_timers kernel/time/timer.c:2372 [inline]\n __run_timer_base+0x648/0x970 kernel/time/timer.c:2384\n run_timer_base kernel/time/timer.c:2393 [inline]\n run_timer_softirq+0xb7/0x180 kernel/time/timer.c:2403\n handle_softirqs+0x22f/0x710 kernel/softirq.c:622\n __do_softirq kernel/softirq.c:656 [inline]\n run_ktimerd+0xcf/0x190 kernel/softirq.c:1138\n smpboot_thread_fn+0x542/0xa60 kernel/smpboot.c:160\n kthread+0x711/0x8a0 kernel/kthread.c:463\n ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/035bca3f017ee9dea3a5a756e77a6f7138cc6eea", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/3fc7723ed01d1130d4bf7063c50e0af60ecccbb4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/8f9ba1a99a89feef9b5867c15a0141a97e893309", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ac28dfddedf6f209190950fc71bcff65ec4ab47b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40259.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40259.json new file mode 100644 index 00000000000..f786d5830b4 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40259.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-40259", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:19.790", + "lastModified": "2025-12-04T16:16:19.790", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sg: Do not sleep in atomic context\n\nsg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may\nsleep. Hence, call sg_finish_rem_req() with interrupts enabled instead\nof disabled." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/11eeee00c94d770d4e45364060b5f1526dfe567b", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6983d8375c040bb449d2187f4a57a20de01244fe", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/90449f2d1e1f020835cba5417234636937dd657e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b2c0340cfa25c5c1f65e8590cc1a2dc97d14ef0f", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/b343cee5df7e750d9033fba33e96fc4399fa88a5", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40260.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40260.json new file mode 100644 index 00000000000..aea537d7bad --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40260.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40260", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:19.927", + "lastModified": "2025-12-04T16:16:19.927", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsched_ext: Fix scx_enable() crash on helper kthread creation failure\n\nA crash was observed when the sched_ext selftests runner was\nterminated with Ctrl+\\ while test 15 was running:\n\nNIP [c00000000028fa58] scx_enable.constprop.0+0x358/0x12b0\nLR [c00000000028fa2c] scx_enable.constprop.0+0x32c/0x12b0\nCall Trace:\nscx_enable.constprop.0+0x32c/0x12b0 (unreliable)\nbpf_struct_ops_link_create+0x18c/0x22c\n__sys_bpf+0x23f8/0x3044\nsys_bpf+0x2c/0x6c\nsystem_call_exception+0x124/0x320\nsystem_call_vectored_common+0x15c/0x2ec\n\nkthread_run_worker() returns an ERR_PTR() on failure rather than NULL,\nbut the current code in scx_alloc_and_add_sched() only checks for a NULL\nhelper. Incase of failure on SIGQUIT, the error is not handled in\nscx_alloc_and_add_sched() and scx_enable() ends up dereferencing an\nerror pointer.\n\nError handling is fixed in scx_alloc_and_add_sched() to propagate\nPTR_ERR() into ret, so that scx_enable() jumps to the existing error\npath, avoiding random dereference on failure." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/625e173e2a59b6cf6cbfb51c0a6bea47f3861eab", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7b6216baae751369195fa3c83d434d23bcda406a", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40261.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40261.json new file mode 100644 index 00000000000..d86482bfd4d --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40261.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-40261", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:20.053", + "lastModified": "2025-12-04T16:16:20.053", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()\n\nnvme_fc_delete_assocation() waits for pending I/O to complete before\nreturning, and an error can cause ->ioerr_work to be queued after\ncancel_work_sync() had been called. Move the call to cancel_work_sync() to\nbe after nvme_fc_delete_association() to ensure ->ioerr_work is not running\nwhen the nvme_fc_ctrl object is freed. Otherwise the following can occur:\n\n[ 1135.911754] list_del corruption, ff2d24c8093f31f8->next is NULL\n[ 1135.917705] ------------[ cut here ]------------\n[ 1135.922336] kernel BUG at lib/list_debug.c:52!\n[ 1135.926784] Oops: invalid opcode: 0000 [#1] SMP NOPTI\n[ 1135.931851] CPU: 48 UID: 0 PID: 726 Comm: kworker/u449:23 Kdump: loaded Not tainted 6.12.0 #1 PREEMPT(voluntary)\n[ 1135.943490] Hardware name: Dell Inc. PowerEdge R660/0HGTK9, BIOS 2.5.4 01/16/2025\n[ 1135.950969] Workqueue: 0x0 (nvme-wq)\n[ 1135.954673] RIP: 0010:__list_del_entry_valid_or_report.cold+0xf/0x6f\n[ 1135.961041] Code: c7 c7 98 68 72 94 e8 26 45 fe ff 0f 0b 48 c7 c7 70 68 72 94 e8 18 45 fe ff 0f 0b 48 89 fe 48 c7 c7 80 69 72 94 e8 07 45 fe ff <0f> 0b 48 89 d1 48 c7 c7 a0 6a 72 94 48 89 c2 e8 f3 44 fe ff 0f 0b\n[ 1135.979788] RSP: 0018:ff579b19482d3e50 EFLAGS: 00010046\n[ 1135.985015] RAX: 0000000000000033 RBX: ff2d24c8093f31f0 RCX: 0000000000000000\n[ 1135.992148] RDX: 0000000000000000 RSI: ff2d24d6bfa1d0c0 RDI: ff2d24d6bfa1d0c0\n[ 1135.999278] RBP: ff2d24c8093f31f8 R08: 0000000000000000 R09: ffffffff951e2b08\n[ 1136.006413] R10: ffffffff95122ac8 R11: 0000000000000003 R12: ff2d24c78697c100\n[ 1136.013546] R13: fffffffffffffff8 R14: 0000000000000000 R15: ff2d24c78697c0c0\n[ 1136.020677] FS: 0000000000000000(0000) GS:ff2d24d6bfa00000(0000) knlGS:0000000000000000\n[ 1136.028765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 1136.034510] CR2: 00007fd207f90b80 CR3: 000000163ea22003 CR4: 0000000000f73ef0\n[ 1136.041641] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 1136.048776] DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400\n[ 1136.055910] PKRU: 55555554\n[ 1136.058623] Call Trace:\n[ 1136.061074] \n[ 1136.063179] ? show_trace_log_lvl+0x1b0/0x2f0\n[ 1136.067540] ? show_trace_log_lvl+0x1b0/0x2f0\n[ 1136.071898] ? move_linked_works+0x4a/0xa0\n[ 1136.075998] ? __list_del_entry_valid_or_report.cold+0xf/0x6f\n[ 1136.081744] ? __die_body.cold+0x8/0x12\n[ 1136.085584] ? die+0x2e/0x50\n[ 1136.088469] ? do_trap+0xca/0x110\n[ 1136.091789] ? do_error_trap+0x65/0x80\n[ 1136.095543] ? __list_del_entry_valid_or_report.cold+0xf/0x6f\n[ 1136.101289] ? exc_invalid_op+0x50/0x70\n[ 1136.105127] ? __list_del_entry_valid_or_report.cold+0xf/0x6f\n[ 1136.110874] ? asm_exc_invalid_op+0x1a/0x20\n[ 1136.115059] ? __list_del_entry_valid_or_report.cold+0xf/0x6f\n[ 1136.120806] move_linked_works+0x4a/0xa0\n[ 1136.124733] worker_thread+0x216/0x3a0\n[ 1136.128485] ? __pfx_worker_thread+0x10/0x10\n[ 1136.132758] kthread+0xfa/0x240\n[ 1136.135904] ? __pfx_kthread+0x10/0x10\n[ 1136.139657] ret_from_fork+0x31/0x50\n[ 1136.143236] ? __pfx_kthread+0x10/0x10\n[ 1136.146988] ret_from_fork_asm+0x1a/0x30\n[ 1136.150915] " + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/0a2c5495b6d1ecb0fa18ef6631450f391a888256", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/33f64600a12055219bda38b55320c62cdeda9167", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/48ae433c6cc6985f647b1b37d8bb002972cf9bdb", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/fbd5741a556eaaa63d0908132ca79d335b58b1cd", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40262.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40262.json new file mode 100644 index 00000000000..84a6c3020a8 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40262.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-40262", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:20.200", + "lastModified": "2025-12-04T16:16:20.200", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: imx_sc_key - fix memory corruption on unload\n\nThis is supposed to be \"priv\" but we accidentally pass \"&priv\" which is\nan address in the stack and so it will lead to memory corruption when\nthe imx_sc_key_action() function is called. Remove the &." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/56881294915a6e866d31a46f9bcb5e19167cfbaa", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6524a15d33951b18ac408ebbcb9c16e14e21c336", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ca9a08de9b294422376f47ade323d69590dbc6f2", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/d83f1512758f4ef6fc5e83219fe7eeeb6b428ea4", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40263.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40263.json new file mode 100644 index 00000000000..c9cdaac8720 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40263.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-40263", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:20.340", + "lastModified": "2025-12-04T16:16:20.340", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: cros_ec_keyb - fix an invalid memory access\n\nIf cros_ec_keyb_register_matrix() isn't called (due to\n`buttons_switches_only`) in cros_ec_keyb_probe(), `ckdev->idev` remains\nNULL. An invalid memory access is observed in cros_ec_keyb_process()\nwhen receiving an EC_MKBP_EVENT_KEY_MATRIX event in cros_ec_keyb_work()\nin such case.\n\n Unable to handle kernel read from unreadable memory at virtual address 0000000000000028\n ...\n x3 : 0000000000000000 x2 : 0000000000000000\n x1 : 0000000000000000 x0 : 0000000000000000\n Call trace:\n input_event\n cros_ec_keyb_work\n blocking_notifier_call_chain\n ec_irq_thread\n\nIt's still unknown about why the kernel receives such malformed event,\nin any cases, the kernel shouldn't access `ckdev->idev` and friends if\nthe driver doesn't intend to initialize them." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/2d251c15c27e2dd16d6318425d2f7260cbd47d39", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/6d81068685154535af06163eb585d6d9663ec7ec", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7bfd959187f2c7584bb43280bbc7b2846e7a5085", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/9cf59f4724a9ee06ebb06c76b8678ac322e850b7", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/e08969c4d65ac31297fcb4d31d4808c789152f68", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40264.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40264.json new file mode 100644 index 00000000000..51979710b90 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40264.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-40264", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:20.510", + "lastModified": "2025-12-04T16:16:20.510", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbe2net: pass wrb_params in case of OS2BMC\n\nbe_insert_vlan_in_pkt() is called with the wrb_params argument being NULL\nat be_send_pkt_to_bmc() call site.\u00a0 This may lead to dereferencing a NULL\npointer when processing a workaround for specific packet, as commit\nbc0c3405abbb (\"be2net: fix a Tx stall bug caused by a specific ipv6\npacket\") states.\n\nThe correct way would be to pass the wrb_params from be_xmit()." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/1ecd86ec6efddb59a10c927e8e679f183bb9113e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/48d59b60dd5d7e4c48c077a2008c9dcd7b59bdfe", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/4c4741f6e7f2fa4e1486cb61e1c15b9236ec134d", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/7d277a7a58578dd62fd546ddaef459ec24ccae36", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ce0a3699244aca3acb659f143c9cb1327b210f89", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40265.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40265.json new file mode 100644 index 00000000000..85c120fbd00 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40265.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-40265", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:20.653", + "lastModified": "2025-12-04T16:16:20.653", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvfat: fix missing sb_min_blocksize() return value checks\n\nWhen emulating an nvme device on qemu with both logical_block_size and\nphysical_block_size set to 8 KiB, but without format, a kernel panic\nwas triggered during the early boot stage while attempting to mount a\nvfat filesystem.\n\n[95553.682035] EXT4-fs (nvme0n1): unable to set blocksize\n[95553.684326] EXT4-fs (nvme0n1): unable to set blocksize\n[95553.686501] EXT4-fs (nvme0n1): unable to set blocksize\n[95553.696448] ISOFS: unsupported/invalid hardware sector size 8192\n[95553.697117] ------------[ cut here ]------------\n[95553.697567] kernel BUG at fs/buffer.c:1582!\n[95553.697984] Oops: invalid opcode: 0000 [#1] SMP NOPTI\n[95553.698602] CPU: 0 UID: 0 PID: 7212 Comm: mount Kdump: loaded Not tainted 6.18.0-rc2+ #38 PREEMPT(voluntary)\n[95553.699511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\n[95553.700534] RIP: 0010:folio_alloc_buffers+0x1bb/0x1c0\n[95553.701018] Code: 48 8b 15 e8 93 18 02 65 48 89 35 e0 93 18 02 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d 31 d2 31 c9 31 f6 31 ff c3 cc cc cc cc <0f> 0b 90 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f\n[95553.702648] RSP: 0018:ffffd1b0c676f990 EFLAGS: 00010246\n[95553.703132] RAX: ffff8cfc4176d820 RBX: 0000000000508c48 RCX: 0000000000000001\n[95553.703805] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000000\n[95553.704481] RBP: ffffd1b0c676f9c8 R08: 0000000000000000 R09: 0000000000000000\n[95553.705148] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001\n[95553.705816] R13: 0000000000002000 R14: fffff8bc8257e800 R15: 0000000000000000\n[95553.706483] FS: 000072ee77315840(0000) GS:ffff8cfdd2c8d000(0000) knlGS:0000000000000000\n[95553.707248] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[95553.707782] CR2: 00007d8f2a9e5a20 CR3: 0000000039d0c006 CR4: 0000000000772ef0\n[95553.708439] PKRU: 55555554\n[95553.708734] Call Trace:\n[95553.709015] \n[95553.709266] __getblk_slow+0xd2/0x230\n[95553.709641] ? find_get_block_common+0x8b/0x530\n[95553.710084] bdev_getblk+0x77/0xa0\n[95553.710449] __bread_gfp+0x22/0x140\n[95553.710810] fat_fill_super+0x23a/0xfc0\n[95553.711216] ? __pfx_setup+0x10/0x10\n[95553.711580] ? __pfx_vfat_fill_super+0x10/0x10\n[95553.712014] vfat_fill_super+0x15/0x30\n[95553.712401] get_tree_bdev_flags+0x141/0x1e0\n[95553.712817] get_tree_bdev+0x10/0x20\n[95553.713177] vfat_get_tree+0x15/0x20\n[95553.713550] vfs_get_tree+0x2a/0x100\n[95553.713910] vfs_cmd_create+0x62/0xf0\n[95553.714273] __do_sys_fsconfig+0x4e7/0x660\n[95553.714669] __x64_sys_fsconfig+0x20/0x40\n[95553.715062] x64_sys_call+0x21ee/0x26a0\n[95553.715453] do_syscall_64+0x80/0x670\n[95553.715816] ? __fs_parse+0x65/0x1e0\n[95553.716172] ? fat_parse_param+0x103/0x4b0\n[95553.716587] ? vfs_parse_fs_param_source+0x21/0xa0\n[95553.717034] ? __do_sys_fsconfig+0x3d9/0x660\n[95553.717548] ? __x64_sys_fsconfig+0x20/0x40\n[95553.717957] ? x64_sys_call+0x21ee/0x26a0\n[95553.718360] ? do_syscall_64+0xb8/0x670\n[95553.718734] ? __x64_sys_fsconfig+0x20/0x40\n[95553.719141] ? x64_sys_call+0x21ee/0x26a0\n[95553.719545] ? do_syscall_64+0xb8/0x670\n[95553.719922] ? x64_sys_call+0x1405/0x26a0\n[95553.720317] ? do_syscall_64+0xb8/0x670\n[95553.720702] ? __x64_sys_close+0x3e/0x90\n[95553.721080] ? x64_sys_call+0x1b5e/0x26a0\n[95553.721478] ? do_syscall_64+0xb8/0x670\n[95553.721841] ? irqentry_exit+0x43/0x50\n[95553.722211] ? exc_page_fault+0x90/0x1b0\n[95553.722681] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[95553.723166] RIP: 0033:0x72ee774f3afe\n[95553.723562] Code: 73 01 c3 48 8b 0d 0a 33 0f 00 f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 49 89 ca b8 af 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d da 32 0f 00 f7 d8 64 89 01 48\n[95553.725188] RSP: 002b:00007ffe97148978 EFLAGS: 00000246 ORIG_RAX: 00000000000001af\n[95553.725892] RAX: ffffffffffffffda RBX: \n---truncated---" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/63b5aa01da0f38cdbd97d021477258e511631497", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/ee767b99b0045be286cceb8265bd4c9831be671e", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-402xx/CVE-2025-40266.json b/CVE-2025/CVE-2025-402xx/CVE-2025-40266.json new file mode 100644 index 00000000000..06572401b66 --- /dev/null +++ b/CVE-2025/CVE-2025-402xx/CVE-2025-40266.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-40266", + "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "published": "2025-12-04T16:16:20.787", + "lastModified": "2025-12-04T16:16:20.787", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Check the untrusted offset in FF-A memory share\n\nVerify the offset to prevent OOB access in the hypervisor\nFF-A buffer in case an untrusted large enough value\n[U32_MAX - sizeof(struct ffa_composite_mem_region) + 1, U32_MAX]\nis set from the host kernel." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://git.kernel.org/stable/c/103e17aac09cdd358133f9e00998b75d6c1f1518", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/bc1909ef38788f2ee3d8011d70bf029948433051", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/f9f1aed6c8a3427900da3121e1868124854569c3", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + }, + { + "url": "https://git.kernel.org/stable/c/fc3139d9f4c1fe1c7d5f25f99676bd8e9c6a1041", + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-539xx/CVE-2025-53963.json b/CVE-2025/CVE-2025-539xx/CVE-2025-53963.json new file mode 100644 index 00000000000..b285cbfe721 --- /dev/null +++ b/CVE-2025/CVE-2025-539xx/CVE-2025-53963.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-53963", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-04T15:15:58.497", + "lastModified": "2025-12-04T15:15:58.497", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH server accessible over the default port 22. The root account has a weak default password of ionadmin, and a password change policy for the root account is not enforced. Thus, an attacker with network connectivity can achieve root code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://assets.thermofisher.com/TFS-Assets/LSG/manuals/MAN0014388_IonOneTouch2Sys_UG.pdf", + "source": "cve@mitre.org" + }, + { + "url": "https://documents.thermofisher.com/TFS-Assets/CORP/Product-Guides/Ion_OneTouch_2_and_Torrent_Suite_Software.pdf", + "source": "cve@mitre.org" + }, + { + "url": "https://tools.thermofisher.cn/content/sfs/brochures/One_Touch_2_Spec_Sheet.pdf", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54057.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54057.json index 316c76bd99c..0afe8979c8a 100644 --- a/CVE-2025/CVE-2025-540xx/CVE-2025-54057.json +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54057.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54057", "sourceIdentifier": "security@apache.org", "published": "2025-11-27T12:15:47.253", - "lastModified": "2025-12-01T15:39:33.110", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-12-04T16:48:40.947", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:apache:skywalking:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.3.0", + "matchCriteriaId": "802C6A2F-36AC-40A6-AE35-9BD58BFC462A" + } + ] + } + ] + } + ], "references": [ { "url": "https://lists.apache.org/thread/sl2x2tx8y007x0mo746yddx2lvnv9tcr", - "source": "security@apache.org" + "source": "security@apache.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "http://www.openwall.com/lists/oss-security/2025/11/27/1", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54158.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54158.json new file mode 100644 index 00000000000..c2970ba8982 --- /dev/null +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54158.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54158", + "sourceIdentifier": "security@synology.com", + "published": "2025-12-04T16:16:20.923", + "lastModified": "2025-12-04T16:16:20.923", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified vectors." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@synology.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security@synology.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], + "references": [ + { + "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_25_08", + "source": "security@synology.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54159.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54159.json new file mode 100644 index 00000000000..f5ea1830118 --- /dev/null +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54159.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54159", + "sourceIdentifier": "security@synology.com", + "published": "2025-12-04T16:16:21.133", + "lastModified": "2025-12-04T16:16:21.133", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attackers to delete arbitrary files via unspecified vectors." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@synology.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security@synology.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_25_08", + "source": "security@synology.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54160.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54160.json new file mode 100644 index 00000000000..8be4343dd94 --- /dev/null +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54160.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54160", + "sourceIdentifier": "security@synology.com", + "published": "2025-12-04T16:16:21.343", + "lastModified": "2025-12-04T16:16:21.343", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified vectors." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@synology.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security@synology.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_25_08", + "source": "security@synology.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-543xx/CVE-2025-54303.json b/CVE-2025/CVE-2025-543xx/CVE-2025-54303.json new file mode 100644 index 00000000000..2c1a93326b3 --- /dev/null +++ b/CVE-2025/CVE-2025-543xx/CVE-2025-54303.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-54303", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-04T15:15:58.633", + "lastModified": "2025-12-04T15:15:58.633", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API. The ionadmin user account can be used to authenticate to default deployments with the password ionadmin. The user guide recommends changing default credentials; however, a password change policy for default administrative accounts is not enforced. Many deployments may retain default credentials, in which case an attacker is likely to be able to successfully authenticate with administrative privileges." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://assets.thermofisher.com/TFS-Assets/LSG/manuals/MAN0026163-Torrent-Suite-5.18-UG.pdf", + "source": "cve@mitre.org" + }, + { + "url": "https://documents.thermofisher.com/TFS-Assets/CORP/Product-Guides/Ion_OneTouch_2_and_Torrent_Suite_Software.pdf", + "source": "cve@mitre.org" + }, + { + "url": "https://www.thermofisher.com/us/en/home/life-science/sequencing/next-generation-sequencing/ion-torrent-next-generation-sequencing-workflow/ion-torrent-next-generation-sequencing-data-analysis-workflow/ion-torrent-suite-software.html", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-543xx/CVE-2025-54304.json b/CVE-2025/CVE-2025-543xx/CVE-2025-54304.json new file mode 100644 index 00000000000..039a5185448 --- /dev/null +++ b/CVE-2025/CVE-2025-543xx/CVE-2025-54304.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-54304", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-04T15:15:58.773", + "lastModified": "2025-12-04T15:15:58.773", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. When they are powered on, an X11 display server is started. The display server listens on all network interfaces and is accessible over port 6000. The X11 access control list, by default, allows connections from 127.0.0.1 and 192.168.2.15. If a device is powered on and later connected to a network with DHCP, the device may not be assigned the 192.168.2.15 IP address, leaving the display server accessible by other devices on the network. The exposed X11 display server can then be used to gain root privileges and the ability to execute code remotely by interacting with matchbox-desktop and spawning a terminal. NOTE: This vulnerability only affects products that are no longer supported by the maintainer." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://assets.thermofisher.com/TFS-Assets/LSG/manuals/MAN0014388_IonOneTouch2Sys_UG.pdf", + "source": "cve@mitre.org" + }, + { + "url": "https://documents.thermofisher.com/TFS-Assets/CORP/Product-Guides/Ion_OneTouch_2_and_Torrent_Suite_Software.pdf", + "source": "cve@mitre.org" + }, + { + "url": "https://www.thermofisher.com/order/catalog/product/4474779", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-543xx/CVE-2025-54305.json b/CVE-2025/CVE-2025-543xx/CVE-2025-54305.json new file mode 100644 index 00000000000..b530d9c9861 --- /dev/null +++ b/CVE-2025/CVE-2025-543xx/CVE-2025-54305.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-54305", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-04T15:15:58.893", + "lastModified": "2025-12-04T15:15:58.893", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. One of the middlewares included in this application, LocalhostAuthMiddleware, authenticates users as ionadmin if the REMOTE_ADDR property in request.META is set to 127.0.0.1, to 127.0.1.1, or to ::1. Any user with local access to the server may bypass authentication." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://assets.thermofisher.com/TFS-Assets/LSG/manuals/MAN0026163-Torrent-Suite-5.18-UG.pdf", + "source": "cve@mitre.org" + }, + { + "url": "https://documents.thermofisher.com/TFS-Assets/CORP/Product-Guides/Ion_OneTouch_2_and_Torrent_Suite_Software.pdf", + "source": "cve@mitre.org" + }, + { + "url": "https://www.thermofisher.com/us/en/home/life-science/sequencing/next-generation-sequencing/ion-torrent-next-generation-sequencing-workflow/ion-torrent-next-generation-sequencing-data-analysis-workflow/ion-torrent-suite-software.html", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-543xx/CVE-2025-54306.json b/CVE-2025/CVE-2025-543xx/CVE-2025-54306.json new file mode 100644 index 00000000000..9ba038b5f5f --- /dev/null +++ b/CVE-2025/CVE-2025-543xx/CVE-2025-54306.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-54306", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-04T15:15:59.030", + "lastModified": "2025-12-04T15:15:59.030", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. A remote code execution vulnerability exists in the network configuration functionality, stemming from insufficient input validation when processing network configuration parameters through administrative endpoints. The application allows administrators to modify the server's network configuration through the Django application. This configuration is processed by Bash scripts (TSsetnoproxy and TSsetproxy) that write user-controlled data directly to environment variables without proper sanitization. After updating environment variables, the scripts execute a source command on /etc/environment; if an attacker injects malicious data into environment variables, this command can enable arbitrary command execution. The vulnerability begins with the /admin/network endpoint, which passes user-supplied form data as arguments to subprocess.Popen calls. The user-supplied input is then used to update environment variables in TSsetnoproxy and TSsetproxy, and finally source $environment is executed." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://assets.thermofisher.com/TFS-Assets/LSG/manuals/MAN0026163-Torrent-Suite-5.18-UG.pdf", + "source": "cve@mitre.org" + }, + { + "url": "https://documents.thermofisher.com/TFS-Assets/CORP/Product-Guides/Ion_OneTouch_2_and_Torrent_Suite_Software.pdf", + "source": "cve@mitre.org" + }, + { + "url": "https://www.thermofisher.com/us/en/home/life-science/sequencing/next-generation-sequencing/ion-torrent-next-generation-sequencing-workflow/ion-torrent-next-generation-sequencing-data-analysis-workflow/ion-torrent-suite-software.html", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-543xx/CVE-2025-54307.json b/CVE-2025/CVE-2025-543xx/CVE-2025-54307.json new file mode 100644 index 00000000000..4e5e31543f2 --- /dev/null +++ b/CVE-2025/CVE-2025-543xx/CVE-2025-54307.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-54307", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-04T15:15:59.163", + "lastModified": "2025-12-04T15:15:59.163", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. The /configure/plugins/plugin/upload/zip/ and /configure/newupdates/offline/bundle/upload/ endpoints allow low-privilege users to upload ZIP files to the server. The plupload_file_upload function handles these file uploads and constructs the destination file path by using either the name parameter or the uploaded filename, neither of which is properly sanitized. The file extension is extracted by splitting the filename, and a format string is used to construct the final file path, leaving the destination path vulnerable to path traversal. An authenticated attacker with network connectivity can write arbitrary files to the server, enabling remote code execution after overwriting an executable file. An example is the pdflatex executable, which is executed through subprocess.Popen in the write_report_pdf function after requests to a /report/latex/(\\d+).pdf endpoint." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://assets.thermofisher.com/TFS-Assets/LSG/manuals/MAN0026163-Torrent-Suite-5.18-UG.pdf", + "source": "cve@mitre.org" + }, + { + "url": "https://documents.thermofisher.com/TFS-Assets/CORP/Product-Guides/Ion_OneTouch_2_and_Torrent_Suite_Software.pdf", + "source": "cve@mitre.org" + }, + { + "url": "https://www.thermofisher.com/us/en/home/life-science/sequencing/next-generation-sequencing/ion-torrent-next-generation-sequencing-workflow/ion-torrent-next-generation-sequencing-data-analysis-workflow/ion-torrent-suite-software.html", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-564xx/CVE-2025-56427.json b/CVE-2025/CVE-2025-564xx/CVE-2025-56427.json new file mode 100644 index 00000000000..637a14bcc3a --- /dev/null +++ b/CVE-2025/CVE-2025-564xx/CVE-2025-56427.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-56427", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-04T16:16:21.553", + "lastModified": "2025-12-04T16:16:21.553", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the _download_file_or_dir function." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/ComposioHQ/composio/blob/master/python/composio/server/api.py#L278", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/TOAST-Research/pocs/blob/main/composio/composio_1.md", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-572xx/CVE-2025-57210.json b/CVE-2025/CVE-2025-572xx/CVE-2025-57210.json new file mode 100644 index 00000000000..9ba879f9716 --- /dev/null +++ b/CVE-2025/CVE-2025-572xx/CVE-2025-57210.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-57210", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-04T16:16:21.700", + "lastModified": "2025-12-04T16:16:21.700", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect access control in the component ApiPayController.java of platform v1.0.0 allows attackers to access sensitive information via unspecified vectors." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/xueye0629/4411663241fa3bbba628d3044dc50451", + "source": "cve@mitre.org" + }, + { + "url": "https://gitee.com/fuyang_lipengjun/platform", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-572xx/CVE-2025-57212.json b/CVE-2025/CVE-2025-572xx/CVE-2025-57212.json new file mode 100644 index 00000000000..6d6e9828c7d --- /dev/null +++ b/CVE-2025/CVE-2025-572xx/CVE-2025-57212.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-57212", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-04T16:16:21.833", + "lastModified": "2025-12-04T16:16:21.833", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive information via a crafted request." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/xueye0629/85730f2317cfac2796fe5e23da3ae399", + "source": "cve@mitre.org" + }, + { + "url": "https://gitee.com/fuyang_lipengjun/platform", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-572xx/CVE-2025-57213.json b/CVE-2025/CVE-2025-572xx/CVE-2025-57213.json new file mode 100644 index 00000000000..1a7e339a1ab --- /dev/null +++ b/CVE-2025/CVE-2025-572xx/CVE-2025-57213.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-57213", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-04T16:16:21.970", + "lastModified": "2025-12-04T16:16:21.970", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect access control in the component orderService.queryObject of platform v1.0.0 allows attackers to access sensitive information via a crafted request." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/xueye0629/620e4e0cc0f23c903736971e6375f00e", + "source": "cve@mitre.org" + }, + { + "url": "https://gitee.com/fuyang_lipengjun/platform", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-593xx/CVE-2025-59390.json b/CVE-2025/CVE-2025-593xx/CVE-2025-59390.json index f5437a16793..d9aff257c17 100644 --- a/CVE-2025/CVE-2025-593xx/CVE-2025-59390.json +++ b/CVE-2025/CVE-2025-593xx/CVE-2025-59390.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59390", "sourceIdentifier": "security@apache.org", "published": "2025-11-26T09:15:46.033", - "lastModified": "2025-12-01T15:39:53.100", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T16:09:22.300", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:apache:druid:*:*:*:*:*:*:*:*", + "versionEndExcluding": "35.0.0", + "matchCriteriaId": "7C05CCA2-CAD4-448C-B893-BDA365E75D0C" + } + ] + } + ] + } + ], "references": [ { "url": "https://lists.apache.org/thread/jwjltllnntgj1sb9wzsjmvwm9f8rlhg8", - "source": "security@apache.org" + "source": "security@apache.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "http://www.openwall.com/lists/oss-security/2025/11/26/1", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-611xx/CVE-2025-61148.json b/CVE-2025/CVE-2025-611xx/CVE-2025-61148.json new file mode 100644 index 00000000000..4f607240ad3 --- /dev/null +++ b/CVE-2025/CVE-2025-611xx/CVE-2025-61148.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-61148", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-04T16:16:22.107", + "lastModified": "2025-12-04T16:16:22.107", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An Insecure Direct Object Reference (IDOR) vulnerability in the EduplusCampus 3.0.1 Student Payment API allows authenticated users to access other students personal and financial records by modifying the 'rec_no' parameter in the /student/get-receipt endpoint." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://drive.google.com/file/d/1BRZRurbl7TY6KU4uaelAUn7L9Cn6XfjC/view?usp=sharing", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/sharma19d/CVE-2025-61148", + "source": "cve@mitre.org" + }, + { + "url": "https://medium.com/@Charon19d/how-i-hacked-all-universities-in-my-city-d6b8e320455c", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-621xx/CVE-2025-62189.json b/CVE-2025/CVE-2025-621xx/CVE-2025-62189.json index a2e487e13b1..15087f69755 100644 --- a/CVE-2025/CVE-2025-621xx/CVE-2025-62189.json +++ b/CVE-2025/CVE-2025-621xx/CVE-2025-62189.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62189", "sourceIdentifier": "vultures@jpcert.or.jp", "published": "2025-11-21T07:15:54.507", - "lastModified": "2025-11-21T15:13:13.800", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-12-04T16:30:38.350", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -91,14 +91,55 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:secuavail:logstare_collector:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.4.2", + "matchCriteriaId": "074556F9-0A35-4E1F-AF34-ADC3A9503B75" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + } + ], "references": [ { "url": "https://jvn.jp/en/jp/JVN77560819/", - "source": "vultures@jpcert.or.jp" + "source": "vultures@jpcert.or.jp", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.logstare.com/vulnerability/2025-001/", - "source": "vultures@jpcert.or.jp" + "source": "vultures@jpcert.or.jp", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-627xx/CVE-2025-62728.json b/CVE-2025/CVE-2025-627xx/CVE-2025-62728.json index d254f8c1a21..27fbcb3fec9 100644 --- a/CVE-2025/CVE-2025-627xx/CVE-2025-62728.json +++ b/CVE-2025/CVE-2025-627xx/CVE-2025-62728.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62728", "sourceIdentifier": "security@apache.org", "published": "2025-11-26T09:15:46.293", - "lastModified": "2025-12-01T19:15:51.180", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T16:46:46.587", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:apache:hive:4.1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "40B6BA41-E7FC-4FFE-BEF8-62F1B668E8D1" + } + ] + } + ] + } + ], "references": [ { "url": "https://lists.apache.org/thread/yj65dd8dmzgy8p3nv8zy33v8knzg9o7g", - "source": "security@apache.org" + "source": "security@apache.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "http://www.openwall.com/lists/oss-security/2025/11/26/3", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63681.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63681.json new file mode 100644 index 00000000000..85cd4f8104e --- /dev/null +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63681.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63681", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-04T16:16:22.447", + "lastModified": "2025-12-04T16:16:22.447", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "open-webui v0.6.33 is vulnerable to Incorrect Access Control. The API /api/tasks/stop/ directly accesses and cancels tasks without verifying user ownership, enabling attackers (a normal user) to stop arbitrary LLM response tasks." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/TOAST-Research/pocs/blob/main/openwebui/arbitirary_task_stop/report.md", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/open-webui/open-webui/blob/46ae3f4f5d7d4d706041bdae4ad2d802e568712b/backend/open_webui/main.py#L1652", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-645xx/CVE-2025-64511.json b/CVE-2025/CVE-2025-645xx/CVE-2025-64511.json index 1ca3c72a023..60e274cd42b 100644 --- a/CVE-2025/CVE-2025-645xx/CVE-2025-64511.json +++ b/CVE-2025/CVE-2025-645xx/CVE-2025-64511.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64511", "sourceIdentifier": "security-advisories@github.com", "published": "2025-11-13T16:15:56.217", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-12-04T15:13:37.387", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 3.1, "impactScore": 3.7 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ] }, @@ -47,10 +67,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:maxkb:maxkb:*:*:*:*:-:*:*:*", + "versionEndExcluding": "2.3.1", + "matchCriteriaId": "AA83A5E9-B7E7-44CF-BBF2-E8CE07A734A2" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-9287-g7px-9rp4", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-653xx/CVE-2025-65346.json b/CVE-2025/CVE-2025-653xx/CVE-2025-65346.json new file mode 100644 index 00000000000..9ac060f2094 --- /dev/null +++ b/CVE-2025/CVE-2025-653xx/CVE-2025-65346.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-65346", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-04T15:15:59.377", + "lastModified": "2025-12-04T15:15:59.377", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/Theethat-Thamwasin/CVE-2025-65346", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/alexusmai/laravel-file-manager", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-655xx/CVE-2025-65516.json b/CVE-2025/CVE-2025-655xx/CVE-2025-65516.json new file mode 100644 index 00000000000..d631f3aa471 --- /dev/null +++ b/CVE-2025/CVE-2025-655xx/CVE-2025-65516.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-65516", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-12-04T16:16:22.593", + "lastModified": "2025-12-04T16:16:22.593", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12. When Seafile is configured with the Golang file server, an attacker can upload a crafted SVG file containing malicious JavaScript and share it using a public link. Opening the link triggers script execution in the victim's browser. This issue has been fixed in Seafile Community Edition 13.0.12." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/x0root/e5597622fede55b320d29a248dce01e6", + "source": "cve@mitre.org" + }, + { + "url": "https://manual.seafile.com/latest/changelog/server-changelog/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-659xx/CVE-2025-65946.json b/CVE-2025/CVE-2025-659xx/CVE-2025-65946.json index e09efe92ef2..fbe18a34ff5 100644 --- a/CVE-2025/CVE-2025-659xx/CVE-2025-65946.json +++ b/CVE-2025/CVE-2025-659xx/CVE-2025-65946.json @@ -2,8 +2,8 @@ "id": "CVE-2025-65946", "sourceIdentifier": "security-advisories@github.com", "published": "2025-11-21T23:15:45.170", - "lastModified": "2025-11-25T22:16:42.557", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-12-04T16:02:39.733", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -49,20 +49,57 @@ "value": "CWE-77" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:roocode:roo_code:*:*:*:*:*:*:*:*", + "versionEndExcluding": "3.26.7", + "matchCriteriaId": "4BCA2678-F80F-4370-9C08-59C3FAA651DC" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/RooCodeInc/Roo-Code/commit/b50104cc5987ce64f5154309d967ae8c74cfd1f3", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/RooCodeInc/Roo-Code/pull/7667", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Issue Tracking" + ] }, { "url": "https://github.com/RooCodeInc/Roo-Code/security/advisories/GHSA-hwm7-w97p-4h8p", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-660xx/CVE-2025-66059.json b/CVE-2025/CVE-2025-660xx/CVE-2025-66059.json index dbda61daabf..b7597b6511d 100644 --- a/CVE-2025/CVE-2025-660xx/CVE-2025-66059.json +++ b/CVE-2025/CVE-2025-660xx/CVE-2025-66059.json @@ -2,8 +2,8 @@ "id": "CVE-2025-66059", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-21T13:15:46.623", - "lastModified": "2025-11-21T15:15:57.923", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T16:22:39.440", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:castos:seriously_simple_podcasting:*:*:*:*:*:wordpress:*:*", + "versionEndExcluding": "3.14.0", + "matchCriteriaId": "201F9458-7BDE-4E42-85DD-AB15D5B6A90E" + } + ] + } + ] + } + ], "references": [ { "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/seriously-simple-podcasting/vulnerability/wordpress-seriously-simple-podcasting-plugin-3-13-0-sensitive-data-exposure-vulnerability?_s_id=cve", - "source": "audit@patchstack.com" + "source": "audit@patchstack.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-660xx/CVE-2025-66060.json b/CVE-2025/CVE-2025-660xx/CVE-2025-66060.json index 685b8f3c4e5..5c50e7e5f7d 100644 --- a/CVE-2025/CVE-2025-660xx/CVE-2025-66060.json +++ b/CVE-2025/CVE-2025-660xx/CVE-2025-66060.json @@ -2,8 +2,8 @@ "id": "CVE-2025-66060", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-21T13:15:46.767", - "lastModified": "2025-11-21T16:16:15.210", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T16:22:25.717", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:castos:seriously_simple_podcasting:*:*:*:*:*:wordpress:*:*", + "versionEndExcluding": "3.14.0", + "matchCriteriaId": "201F9458-7BDE-4E42-85DD-AB15D5B6A90E" + } + ] + } + ] + } + ], "references": [ { "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/seriously-simple-podcasting/vulnerability/wordpress-seriously-simple-podcasting-plugin-3-13-0-broken-access-control-vulnerability-2?_s_id=cve", - "source": "audit@patchstack.com" + "source": "audit@patchstack.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-660xx/CVE-2025-66061.json b/CVE-2025/CVE-2025-660xx/CVE-2025-66061.json index d06dcd259df..44b6f908010 100644 --- a/CVE-2025/CVE-2025-660xx/CVE-2025-66061.json +++ b/CVE-2025/CVE-2025-660xx/CVE-2025-66061.json @@ -2,8 +2,8 @@ "id": "CVE-2025-66061", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-21T13:15:46.920", - "lastModified": "2025-11-21T17:15:51.783", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-04T16:22:08.927", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -13,6 +13,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -47,10 +67,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:castos:seriously_simple_podcasting:*:*:*:*:*:wordpress:*:*", + "versionEndExcluding": "3.14.0", + "matchCriteriaId": "201F9458-7BDE-4E42-85DD-AB15D5B6A90E" + } + ] + } + ] + } + ], "references": [ { "url": "https://vdp.patchstack.com/database/Wordpress/Plugin/seriously-simple-podcasting/vulnerability/wordpress-seriously-simple-podcasting-plugin-3-13-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", - "source": "audit@patchstack.com" + "source": "audit@patchstack.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-664xx/CVE-2025-66424.json b/CVE-2025/CVE-2025-664xx/CVE-2025-66424.json index 11df7459324..96dac9a74fd 100644 --- a/CVE-2025/CVE-2025-664xx/CVE-2025-66424.json +++ b/CVE-2025/CVE-2025-664xx/CVE-2025-66424.json @@ -2,8 +2,8 @@ "id": "CVE-2025-66424", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-30T03:15:48.360", - "lastModified": "2025-12-01T15:39:33.110", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-12-04T16:50:12.790", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,60 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:tryton:trytond:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0.0", + "versionEndExcluding": "6.0.70", + "matchCriteriaId": "4E811A8E-7C2B-414F-B929-7AF685F83092" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:tryton:trytond:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.0.0", + "versionEndExcluding": "7.0.40", + "matchCriteriaId": "179B2F4A-0AF8-4D72-A371-B0B7A2BD9FBD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:tryton:trytond:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.4.0", + "versionEndExcluding": "7.4.21", + "matchCriteriaId": "EC73A2FC-9781-4560-9C79-3A6627BF3A73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:tryton:trytond:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.6.0", + "versionEndExcluding": "7.6.11", + "matchCriteriaId": "899860ED-5426-4396-AF24-470DB633F208" + } + ] + } + ] + } + ], "references": [ { "url": "https://discuss.tryton.org/t/security-release-for-issue-14366/8953", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Issue Tracking" + ] }, { "url": "https://foss.heptapod.net/tryton/tryton/-/issues/14366", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8074.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8074.json new file mode 100644 index 00000000000..2efd84df910 --- /dev/null +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8074.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-8074", + "sourceIdentifier": "security@synology.com", + "published": "2025-12-04T16:16:23.100", + "lastModified": "2025-12-04T16:16:23.100", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@synology.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H", + "baseScore": 5.6, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.3, + "impactScore": 4.2 + } + ] + }, + "weaknesses": [ + { + "source": "security@synology.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-346" + } + ] + } + ], + "references": [ + { + "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_25_09", + "source": "security@synology.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 45180581909..6b71ccb01b6 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-12-04T15:00:10.922694+00:00 +2025-12-04T17:00:12.396958+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-12-04T14:57:52.993000+00:00 +2025-12-04T16:50:12.790000+00:00 ``` ### Last Data Feed Release @@ -33,49 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -320066 +320147 ``` ### CVEs added in the last Commit -Recently added CVEs: `5` +Recently added CVEs: `81` -- [CVE-2025-11222](CVE-2025/CVE-2025-112xx/CVE-2025-11222.json) (`2025-12-04T13:15:46.797`) -- [CVE-2025-14004](CVE-2025/CVE-2025-140xx/CVE-2025-14004.json) (`2025-12-04T14:16:03.190`) -- [CVE-2025-14005](CVE-2025/CVE-2025-140xx/CVE-2025-14005.json) (`2025-12-04T14:16:03.470`) -- [CVE-2025-40214](CVE-2025/CVE-2025-402xx/CVE-2025-40214.json) (`2025-12-04T13:15:48.157`) -- [CVE-2025-40215](CVE-2025/CVE-2025-402xx/CVE-2025-40215.json) (`2025-12-04T13:15:48.473`) +- [CVE-2025-40260](CVE-2025/CVE-2025-402xx/CVE-2025-40260.json) (`2025-12-04T16:16:19.927`) +- [CVE-2025-40261](CVE-2025/CVE-2025-402xx/CVE-2025-40261.json) (`2025-12-04T16:16:20.053`) +- [CVE-2025-40262](CVE-2025/CVE-2025-402xx/CVE-2025-40262.json) (`2025-12-04T16:16:20.200`) +- [CVE-2025-40263](CVE-2025/CVE-2025-402xx/CVE-2025-40263.json) (`2025-12-04T16:16:20.340`) +- [CVE-2025-40264](CVE-2025/CVE-2025-402xx/CVE-2025-40264.json) (`2025-12-04T16:16:20.510`) +- [CVE-2025-40265](CVE-2025/CVE-2025-402xx/CVE-2025-40265.json) (`2025-12-04T16:16:20.653`) +- [CVE-2025-40266](CVE-2025/CVE-2025-402xx/CVE-2025-40266.json) (`2025-12-04T16:16:20.787`) +- [CVE-2025-53963](CVE-2025/CVE-2025-539xx/CVE-2025-53963.json) (`2025-12-04T15:15:58.497`) +- [CVE-2025-54158](CVE-2025/CVE-2025-541xx/CVE-2025-54158.json) (`2025-12-04T16:16:20.923`) +- [CVE-2025-54159](CVE-2025/CVE-2025-541xx/CVE-2025-54159.json) (`2025-12-04T16:16:21.133`) +- [CVE-2025-54160](CVE-2025/CVE-2025-541xx/CVE-2025-54160.json) (`2025-12-04T16:16:21.343`) +- [CVE-2025-54303](CVE-2025/CVE-2025-543xx/CVE-2025-54303.json) (`2025-12-04T15:15:58.633`) +- [CVE-2025-54304](CVE-2025/CVE-2025-543xx/CVE-2025-54304.json) (`2025-12-04T15:15:58.773`) +- [CVE-2025-54305](CVE-2025/CVE-2025-543xx/CVE-2025-54305.json) (`2025-12-04T15:15:58.893`) +- [CVE-2025-54306](CVE-2025/CVE-2025-543xx/CVE-2025-54306.json) (`2025-12-04T15:15:59.030`) +- [CVE-2025-54307](CVE-2025/CVE-2025-543xx/CVE-2025-54307.json) (`2025-12-04T15:15:59.163`) +- [CVE-2025-56427](CVE-2025/CVE-2025-564xx/CVE-2025-56427.json) (`2025-12-04T16:16:21.553`) +- [CVE-2025-57210](CVE-2025/CVE-2025-572xx/CVE-2025-57210.json) (`2025-12-04T16:16:21.700`) +- [CVE-2025-57212](CVE-2025/CVE-2025-572xx/CVE-2025-57212.json) (`2025-12-04T16:16:21.833`) +- [CVE-2025-57213](CVE-2025/CVE-2025-572xx/CVE-2025-57213.json) (`2025-12-04T16:16:21.970`) +- [CVE-2025-61148](CVE-2025/CVE-2025-611xx/CVE-2025-61148.json) (`2025-12-04T16:16:22.107`) +- [CVE-2025-63681](CVE-2025/CVE-2025-636xx/CVE-2025-63681.json) (`2025-12-04T16:16:22.447`) +- [CVE-2025-65346](CVE-2025/CVE-2025-653xx/CVE-2025-65346.json) (`2025-12-04T15:15:59.377`) +- [CVE-2025-65516](CVE-2025/CVE-2025-655xx/CVE-2025-65516.json) (`2025-12-04T16:16:22.593`) +- [CVE-2025-8074](CVE-2025/CVE-2025-80xx/CVE-2025-8074.json) (`2025-12-04T16:16:23.100`) ### CVEs modified in the last Commit -Recently modified CVEs: `33` +Recently modified CVEs: `117` -- [CVE-2022-50333](CVE-2022/CVE-2022-503xx/CVE-2022-50333.json) (`2025-12-04T13:48:21.410`) -- [CVE-2022-50334](CVE-2022/CVE-2022-503xx/CVE-2022-50334.json) (`2025-12-04T13:49:16.740`) -- [CVE-2022-50335](CVE-2022/CVE-2022-503xx/CVE-2022-50335.json) (`2025-12-04T13:50:35.600`) -- [CVE-2022-50336](CVE-2022/CVE-2022-503xx/CVE-2022-50336.json) (`2025-12-04T13:53:50.990`) -- [CVE-2022-50337](CVE-2022/CVE-2022-503xx/CVE-2022-50337.json) (`2025-12-04T13:56:39.980`) -- [CVE-2023-53224](CVE-2023/CVE-2023-532xx/CVE-2023-53224.json) (`2025-12-04T14:57:52.993`) -- [CVE-2023-53225](CVE-2023/CVE-2023-532xx/CVE-2023-53225.json) (`2025-12-04T14:57:32.613`) -- [CVE-2023-53226](CVE-2023/CVE-2023-532xx/CVE-2023-53226.json) (`2025-12-04T14:57:14.463`) -- [CVE-2023-53228](CVE-2023/CVE-2023-532xx/CVE-2023-53228.json) (`2025-12-04T14:57:03.673`) -- [CVE-2023-53229](CVE-2023/CVE-2023-532xx/CVE-2023-53229.json) (`2025-12-04T14:56:28.760`) -- [CVE-2023-53230](CVE-2023/CVE-2023-532xx/CVE-2023-53230.json) (`2025-12-04T14:56:19.720`) -- [CVE-2023-53231](CVE-2023/CVE-2023-532xx/CVE-2023-53231.json) (`2025-12-04T14:55:56.513`) -- [CVE-2023-53233](CVE-2023/CVE-2023-532xx/CVE-2023-53233.json) (`2025-12-04T14:55:34.970`) -- [CVE-2023-53235](CVE-2023/CVE-2023-532xx/CVE-2023-53235.json) (`2025-12-04T14:54:59.960`) -- [CVE-2023-53236](CVE-2023/CVE-2023-532xx/CVE-2023-53236.json) (`2025-12-04T14:54:44.517`) -- [CVE-2025-12466](CVE-2025/CVE-2025-124xx/CVE-2025-12466.json) (`2025-12-04T14:57:27.470`) -- [CVE-2025-12468](CVE-2025/CVE-2025-124xx/CVE-2025-12468.json) (`2025-12-04T14:01:37.227`) -- [CVE-2025-12469](CVE-2025/CVE-2025-124xx/CVE-2025-12469.json) (`2025-12-04T14:03:18.960`) -- [CVE-2025-20750](CVE-2025/CVE-2025-207xx/CVE-2025-20750.json) (`2025-12-04T13:54:20.800`) -- [CVE-2025-20751](CVE-2025/CVE-2025-207xx/CVE-2025-20751.json) (`2025-12-04T13:54:15.220`) -- [CVE-2025-20752](CVE-2025/CVE-2025-207xx/CVE-2025-20752.json) (`2025-12-04T13:34:14.127`) -- [CVE-2025-20753](CVE-2025/CVE-2025-207xx/CVE-2025-20753.json) (`2025-12-04T13:31:52.093`) -- [CVE-2025-20754](CVE-2025/CVE-2025-207xx/CVE-2025-20754.json) (`2025-12-04T13:30:07.043`) -- [CVE-2025-64703](CVE-2025/CVE-2025-647xx/CVE-2025-64703.json) (`2025-12-04T14:55:30.200`) -- [CVE-2025-64717](CVE-2025/CVE-2025-647xx/CVE-2025-64717.json) (`2025-12-04T14:39:53.937`) +- [CVE-2023-53237](CVE-2023/CVE-2023-532xx/CVE-2023-53237.json) (`2025-12-04T15:18:54.620`) +- [CVE-2024-3884](CVE-2024/CVE-2024-38xx/CVE-2024-3884.json) (`2025-12-04T16:16:14.310`) +- [CVE-2025-11222](CVE-2025/CVE-2025-112xx/CVE-2025-11222.json) (`2025-12-04T15:15:54.937`) +- [CVE-2025-11931](CVE-2025/CVE-2025-119xx/CVE-2025-11931.json) (`2025-12-04T16:21:09.590`) +- [CVE-2025-11932](CVE-2025/CVE-2025-119xx/CVE-2025-11932.json) (`2025-12-04T16:09:31.650`) +- [CVE-2025-12877](CVE-2025/CVE-2025-128xx/CVE-2025-12877.json) (`2025-12-04T15:40:39.037`) +- [CVE-2025-12888](CVE-2025/CVE-2025-128xx/CVE-2025-12888.json) (`2025-12-04T16:07:14.913`) +- [CVE-2025-12889](CVE-2025/CVE-2025-128xx/CVE-2025-12889.json) (`2025-12-04T15:43:04.780`) +- [CVE-2025-13120](CVE-2025/CVE-2025-131xx/CVE-2025-13120.json) (`2025-12-04T15:27:29.123`) +- [CVE-2025-13544](CVE-2025/CVE-2025-135xx/CVE-2025-13544.json) (`2025-12-04T15:37:43.520`) +- [CVE-2025-13545](CVE-2025/CVE-2025-135xx/CVE-2025-13545.json) (`2025-12-04T15:33:27.840`) +- [CVE-2025-13546](CVE-2025/CVE-2025-135xx/CVE-2025-13546.json) (`2025-12-04T15:32:33.497`) +- [CVE-2025-13787](CVE-2025/CVE-2025-137xx/CVE-2025-13787.json) (`2025-12-04T16:44:07.470`) +- [CVE-2025-13788](CVE-2025/CVE-2025-137xx/CVE-2025-13788.json) (`2025-12-04T16:39:41.843`) +- [CVE-2025-13789](CVE-2025/CVE-2025-137xx/CVE-2025-13789.json) (`2025-12-04T16:36:17.793`) +- [CVE-2025-54057](CVE-2025/CVE-2025-540xx/CVE-2025-54057.json) (`2025-12-04T16:48:40.947`) +- [CVE-2025-59390](CVE-2025/CVE-2025-593xx/CVE-2025-59390.json) (`2025-12-04T16:09:22.300`) +- [CVE-2025-62189](CVE-2025/CVE-2025-621xx/CVE-2025-62189.json) (`2025-12-04T16:30:38.350`) +- [CVE-2025-62728](CVE-2025/CVE-2025-627xx/CVE-2025-62728.json) (`2025-12-04T16:46:46.587`) +- [CVE-2025-64511](CVE-2025/CVE-2025-645xx/CVE-2025-64511.json) (`2025-12-04T15:13:37.387`) +- [CVE-2025-65946](CVE-2025/CVE-2025-659xx/CVE-2025-65946.json) (`2025-12-04T16:02:39.733`) +- [CVE-2025-66059](CVE-2025/CVE-2025-660xx/CVE-2025-66059.json) (`2025-12-04T16:22:39.440`) +- [CVE-2025-66060](CVE-2025/CVE-2025-660xx/CVE-2025-66060.json) (`2025-12-04T16:22:25.717`) +- [CVE-2025-66061](CVE-2025/CVE-2025-660xx/CVE-2025-66061.json) (`2025-12-04T16:22:08.927`) +- [CVE-2025-66424](CVE-2025/CVE-2025-664xx/CVE-2025-66424.json) (`2025-12-04T16:50:12.790`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 2a907957554..d97897deafe 100644 --- a/_state.csv +++ b/_state.csv @@ -93323,7 +93323,7 @@ CVE-2017-0354,0,0,e2ff2440e6c94cad69584b09982320d750ca50f104e84da4815365e8dc36b7 CVE-2017-0355,0,0,8dee1321a963794ee4047a747c22fb80bbbd0dc892b38168dad6b2b5f11634be,2025-04-20T01:37:25.860000 CVE-2017-0356,0,0,7a4028ee1942b825cf705b72a827b6e72a287cbd9918ea760a692ae6800213cf,2024-11-21T03:02:49.507000 CVE-2017-0357,0,0,cd95795a924a9928c289c7fa204ef845ee7756c0dac210c8600bf3e7bd9c21e0,2024-11-21T03:02:49.613000 -CVE-2017-0358,0,0,d7c8ebd0ac0fd31f88b09aba4e9353092909e7a15a2ea7568d7f9ca0b07e27cf,2024-11-21T03:02:49.720000 +CVE-2017-0358,0,1,82025f14b01f47bb761c5fa2c9907b1bab84a0656b18608297f88fd2b8abdab1,2025-12-04T16:15:48.560000 CVE-2017-0359,0,0,e205055fa2b069e5234840f78f1408af6c6b67ecdebb38e601d6443d0ce0776a,2024-11-21T03:02:49.840000 CVE-2017-0360,0,0,070a56a70dfe529235d3ba038419de57a91f85be9f5c43754026a03b3d4365f9,2025-04-20T01:37:25.860000 CVE-2017-0361,0,0,5a6f6a82c1a95ea9500a0066e2336663330845924d7e8ad8c5930b090ae1659f,2024-11-21T03:02:50.060000 @@ -95369,7 +95369,7 @@ CVE-2017-11181,0,0,c57da5652f4d3624b3d3707b483a8280dad1bce809bcccf59f26ad9e6ddd8 CVE-2017-11182,0,0,63402466990739527fcb6c9f7446f84ef7703de22196d443dd33b09ae2a2a3eb,2025-04-20T01:37:25.860000 CVE-2017-11183,0,0,52b0a86d5a8743bbb710e985fa5bd721ad2e1c23efb9f7f35cc59c16eac992a9,2025-04-20T01:37:25.860000 CVE-2017-11184,0,0,264c8739514350367a183fcf03ce631a9236496de9da5156013d65297b4a33af,2025-04-20T01:37:25.860000 -CVE-2017-11185,0,0,4315f0488851be069f2ab930f4cac76f0c4bcffc510e915760f47ed9b81af8cd,2025-04-20T01:37:25.860000 +CVE-2017-11185,0,1,b08463d6260e44a1b9bb2d3f80f23f5e417d61cb08d9a563051f70ebfdf91a44,2025-12-04T16:15:49.337000 CVE-2017-11187,0,0,0f1c5d16206f9f6897f4020b77b6ab124f2957e2bc8b655b31526d64ee8948a1,2025-04-20T01:37:25.860000 CVE-2017-11188,0,0,21bc7acc5c2cf846007e892c14de463dc10a2df45068eaffda9078cadcf9a694,2025-04-20T01:37:25.860000 CVE-2017-11189,0,0,f582f3dc41515d339daffd57011bab68ce3039f2bbc337870b8180790c93de5c,2025-04-20T01:37:25.860000 @@ -96850,17 +96850,17 @@ CVE-2017-12884,0,0,9777594fa02c58fb649cfec06600cc930196fe786c7ffbe481578b5924840 CVE-2017-12885,0,0,28957fcc038f670f132704e8795146c51be83bdea3e5928f6f9314776aa3c214,2024-11-21T03:10:22.630000 CVE-2017-1289,0,0,91b31bbb7c3541cf9666c55397cf7d357883e8920d4a98d9b0d758c2187949d2,2025-04-20T01:37:25.860000 CVE-2017-12892,0,0,fa2becfe6b6fe2965524e7f1d9b8916cfe669c2ae335ffefa8f5e1931ed9824a,2025-04-20T01:37:25.860000 -CVE-2017-12893,0,0,411abab66d6b20c41d7165d971311dba9d125b354f993e7a23075c4d4316a3b2,2025-04-20T01:37:25.860000 -CVE-2017-12894,0,0,82656cdf503ffd5e7fcd014e06890d9471acc4488e8031c54c09abb6209710fc,2025-04-20T01:37:25.860000 -CVE-2017-12895,0,0,4197ae250491e4e54ec8ebe42fba66a5efd78703091e4757d5e536f08cc4cfbc,2025-04-20T01:37:25.860000 -CVE-2017-12896,0,0,9a66992fbc883df9dd33150e3fe892ce3cbf195a0c8de02558e651e585fe1afe,2025-04-20T01:37:25.860000 -CVE-2017-12897,0,0,bd733ce1b3b2190483a924a30f099c90bd570a27cd8bf7d823873bcb3d804a1f,2025-04-20T01:37:25.860000 -CVE-2017-12898,0,0,ea85811fb354fd34899a42897915ddf4ab120e2c7d93c29e820560ffaa682282,2025-04-20T01:37:25.860000 -CVE-2017-12899,0,0,5c137609f45e230a03103aa996a74cb6c77d53e7b9ba02b03df021c149424a26,2025-04-20T01:37:25.860000 +CVE-2017-12893,0,1,ae47fed08e28a97e13dcc4046ad9c25e5948a5cf2345ed716ff821b0f41425b1,2025-12-04T16:15:50.613000 +CVE-2017-12894,0,1,1beb9af688687d52da2d244d7d7693fe82c17cb98651105270025703229bc662,2025-12-04T16:15:52.503000 +CVE-2017-12895,0,1,ed842a3652012dbb794076af48137b962fbaebefa40ead3a6e1412a4e2fc09d3,2025-12-04T16:15:53.290000 +CVE-2017-12896,0,1,318cb5ab5e5ac1da0aa71eeb5773b5e61ef0c5f4ed0456c5e38d88a912069835,2025-12-04T16:15:53.723000 +CVE-2017-12897,0,1,f64e22ffaebb22dec02d2e846814e46ec8dc5355933ec264703fa798e200d10d,2025-12-04T16:15:54.117000 +CVE-2017-12898,0,1,519b3f29b82b318e2dc61adaf3ae72f66be880b450c6b04fa1416c5230f18c8f,2025-12-04T16:15:56.520000 +CVE-2017-12899,0,1,4a219818e3e785d8bbf98b7f465c28b2666a04c228c1b1de3225b7b77da45a18,2025-12-04T16:15:57.487000 CVE-2017-1290,0,0,adc9be41ccd38bdf006cebbdd87ad1ca9f1c27eaaca15eb9875a0335bf823c15,2025-04-20T01:37:25.860000 CVE-2017-12900,0,0,f4fd254941940a624a9772da708f2865e1a525eb76dc6d56df6edf611c03c0d6,2025-04-20T01:37:25.860000 -CVE-2017-12901,0,0,327d70264c20200ddb262a6c0dcb44bd1e19d70ae7fec813e0fb3abf1ce01207,2025-04-20T01:37:25.860000 -CVE-2017-12902,0,0,495acab1544d8576c7e9540f3b28d97e011083a77b8e7fa65373a5de79513d83,2025-04-20T01:37:25.860000 +CVE-2017-12901,0,1,4100c91408a57215fd4b5389004d92214bbc55c8c4e8110adea0f7b3b65c9f78,2025-12-04T16:15:57.943000 +CVE-2017-12902,0,1,92d86c7e2f3e057ffdc71c8051507258f0cca605c38c514df20fabbda66307b8,2025-12-04T16:15:58.453000 CVE-2017-12904,0,0,0165666fbaf8365a6a28aad8973b1619cd686a141d3bffca18f092beb1593414,2025-04-20T01:37:25.860000 CVE-2017-12905,0,0,3e1ae59f99a9f9224551ab15b0b144b03b27daef471231ae40665ab85fea4a68,2025-04-20T01:37:25.860000 CVE-2017-12906,0,0,6da98d4332e7e0471ff617b1bcfa5bcc273d50ad0ace4dd8dff897564e0e077d,2025-04-20T01:37:25.860000 @@ -96939,84 +96939,84 @@ CVE-2017-12981,0,0,0fe0c7b2e62298f992540faa325f56b288b688cd0a6d9d18081a313933306 CVE-2017-12982,0,0,8cdc32c2d15dc38a250dc3f377c708a195d8b69057e8856ef24d5454789ab3a6,2025-04-20T01:37:25.860000 CVE-2017-12983,0,0,88b43ad12f023ebfa29c567b86ef02eccc8d677205c8be3201155570c59ab653,2025-04-20T01:37:25.860000 CVE-2017-12984,0,0,b71949df8b58fd8284f5d5cdb9b9fabb70825f1e83e5bcbe75f1cbe429f63827,2025-04-20T01:37:25.860000 -CVE-2017-12985,0,0,482089ae55b5b9ec7365f6c608e19f4421ecc702288108be60680aa8e1690967,2025-04-20T01:37:25.860000 +CVE-2017-12985,0,1,1bc13604bcc0572f4d7be26d3f9ae41f5bfb4170493d0bcc3a3394606f22cd43,2025-12-04T16:15:58.810000 CVE-2017-12986,0,0,f24b1653977b3b19b278912bc935c39c9818672bd664702adc4e2b2019f10971,2025-04-20T01:37:25.860000 CVE-2017-12987,0,0,79ebe457627d2fa339e6598222c47a22347d333e05bfee8b403c852a7886862d,2025-04-20T01:37:25.860000 CVE-2017-12988,0,0,0d56421e39b3f285dd96079f9c0fe81557de5f54575662028821a4da1484ea2d,2025-04-20T01:37:25.860000 CVE-2017-12989,0,0,59a9706c3f7e79cd12288cd894d23f0fad7e95b9e0f5258ade9e2d847df991af,2025-04-20T01:37:25.860000 CVE-2017-1299,0,0,fd0b0194d069851708b51c4a097983229bdd0062db45b4c8687e42fb8cdab702,2024-11-21T03:21:40.240000 -CVE-2017-12990,0,0,58ea0fbd6d7274a86cfe6c8641f0b2098b013894bc2487e35e781d22792cffdb,2025-04-20T01:37:25.860000 +CVE-2017-12990,0,1,56db5be8d8f2e3b857239bd03d838628e4c438ae2d63fbbf134b9c551771918c,2025-12-04T16:16:01.430000 CVE-2017-12991,0,0,367bb538160ccc910b1cfdb97ec23c74eafdf2af9568e762f25f7c702014b00d,2025-04-20T01:37:25.860000 -CVE-2017-12992,0,0,34827c4bba3a415c62b1e6a187ac7573f64401bba026e0c8c2ba96c2d9bdd9f4,2025-04-20T01:37:25.860000 -CVE-2017-12993,0,0,4091c1c91902781480dd139dad9134b151c27d6fbf25e66e0a3e218c07eda39c,2025-04-20T01:37:25.860000 -CVE-2017-12994,0,0,beb07477408058348cc08f3c8af64d09345ca8a56ef11888d073d5da5b26e528,2025-04-20T01:37:25.860000 -CVE-2017-12995,0,0,de06b778765813683443fdd910b8a946e46973e0e7aa7a785bc0d2f77ec8cebc,2025-04-20T01:37:25.860000 -CVE-2017-12996,0,0,f6c246c972bba4bf2153c748924ac394d47cbff5bb9ca44c005711ca7e78bdf6,2025-04-20T01:37:25.860000 -CVE-2017-12997,0,0,2bd5870012f6727ac583c17b813b3fa3b99be6d1b620a241204782ec0b6e48d2,2025-04-20T01:37:25.860000 +CVE-2017-12992,0,1,84e1124090ec6d4304f64584e0c49f00d816a4f7672fe976af05a2f23756fbbb,2025-12-04T16:16:01.917000 +CVE-2017-12993,0,1,6adc50983d9a0cfd3b1be72855a84bf6a734ef20cd5626161585c8054bc20e10,2025-12-04T16:16:02.257000 +CVE-2017-12994,0,1,de668d3b50510bc3a25781ae758b010d147d167f89defe8ada53d9c2ed78453e,2025-12-04T16:16:02.727000 +CVE-2017-12995,0,1,fa00dec31fc6ba57327bf1938206f107913cd79b7c880d2068c5d19ff76cc644,2025-12-04T16:16:03.253000 +CVE-2017-12996,0,1,e50b9981cb864fc12fcc7d3c21f6fcbf761082e0c045784d3e0954b9505fece2,2025-12-04T16:16:05.493000 +CVE-2017-12997,0,1,c92bd2004519d5c71ec312583732143799fe36725de107c312839ed0d9a88295,2025-12-04T16:16:05.973000 CVE-2017-12998,0,0,7b9ea96163d7d4e1ab723ba8869fc1ede6f06b3de29f64d60c463b0ce0800fdf,2025-04-20T01:37:25.860000 CVE-2017-12999,0,0,b79497701a1a6766400f7933b3288f69ce1dae3eda77ca903f455610f5e0ef8b,2025-04-20T01:37:25.860000 CVE-2017-1300,0,0,f128662fc2f86da2ebf5752e04f3befcab81e5b759763e6f9986ec49f7039037,2025-04-20T01:37:25.860000 -CVE-2017-13000,0,0,250770b2f92d9d6ef3f4c98dbe23185b3c92b80ca67e0b67f9853b68e25aa1bb,2025-04-20T01:37:25.860000 -CVE-2017-13001,0,0,8acd1ff65958129b3040a3bea9370669cd6e72d42a752a08f3a05af8e9de408d,2025-04-20T01:37:25.860000 -CVE-2017-13002,0,0,26ad0074a53de463e5870832cbcdd62e774a2a1cb81d9a08563b912ca64dd7dc,2025-04-20T01:37:25.860000 +CVE-2017-13000,0,1,eb0d293f2f62d8c1dcb1883f217771433f0c85b08c59f40163c472dac86f4457,2025-12-04T16:16:06.317000 +CVE-2017-13001,0,1,bc3529059be8584cab7e0d508a8b023cca00e4463d6ae59634c95597215e66e4,2025-12-04T16:16:06.633000 +CVE-2017-13002,0,1,9df290e527a25650314d71140deb2c99d0c2a47271c62b66d86ca4a459b0609b,2025-12-04T16:16:06.927000 CVE-2017-13003,0,0,9f59606f7cdf24d8cf18b4231f3731ba6059e02fbaaa66bab762ea0f28737f44,2025-04-20T01:37:25.860000 CVE-2017-13004,0,0,06aaf11e85a1d12dbb678d78e0319af8e67bb65a769c4f85d26705ad4217837a,2025-04-20T01:37:25.860000 CVE-2017-13005,0,0,7f3a0ce2143b91b039e1e49e8ecf214ad49ad74ba61626d5a63f51d516934a0c,2025-04-20T01:37:25.860000 -CVE-2017-13006,0,0,3b46d633241d7f04fa730c12f9976a42af78a4214e650cd69efd294229686f84,2025-04-20T01:37:25.860000 +CVE-2017-13006,0,1,35aae845c2cb9390abe76c57300fdcd20afb96c9438d761b6c9713498d35af36,2025-12-04T16:16:07.380000 CVE-2017-13007,0,0,78acfa5d3275a06ff7de77c3741e8be34cb8e493f7521bc9417804f85526e6bf,2025-04-20T01:37:25.860000 CVE-2017-13008,0,0,92bb057310b674655aac71c95b5b07ade371f3a6dbae30c28f9c4bf486652478,2025-04-20T01:37:25.860000 CVE-2017-13009,0,0,1be9fe6743591f2bd2672fc9fcbe01319a66ee778146caf6feec1e4c1e834724,2025-04-20T01:37:25.860000 CVE-2017-1301,0,0,f289f09ee8c456c3e27bea443124a435a56003a9373c8dc8e90e537bddebf696,2025-04-20T01:37:25.860000 -CVE-2017-13010,0,0,7700c2b2168b56e1a6ff5e99732f70a02d36a3022436ada42eff2ef038c30d60,2025-04-20T01:37:25.860000 +CVE-2017-13010,0,1,d0f1e7780db00e4d18ff2a2ba65aa8c75b8c2c24fcba764a1582c2d30b978326,2025-12-04T16:16:07.707000 CVE-2017-13011,0,0,ae15edcf27f6d0b00dd588269ed80a47aab89082ec3a1947dbecd08d89484f0e,2025-04-20T01:37:25.860000 CVE-2017-13012,0,0,27092a72a22de99ec2ccda76e20fc05b130f446a473905c6bd9df5eab75baf69,2025-04-20T01:37:25.860000 -CVE-2017-13013,0,0,5a401303dd9fc069fd682e0895b1329d3c338f43494727256a29351ff85b30a9,2025-04-20T01:37:25.860000 -CVE-2017-13014,0,0,133c350353e387762804a7db0ee5b382a2b77d1e58fde691db70929d2ec5b1f3,2025-04-20T01:37:25.860000 -CVE-2017-13015,0,0,f7b368e890a1ec591a7a952990a2b9b71f795f60716e1e795bcd7de5cf0eb524,2025-04-20T01:37:25.860000 -CVE-2017-13016,0,0,9ac6c5c82d7d00072bfa49012d186fd946940fc1dab3e23c779fc985228b183a,2025-04-20T01:37:25.860000 -CVE-2017-13017,0,0,e89b0af2fcc40e574626bf9dc35b7119c45c982858d4b4a306c6d275d2c3949c,2025-04-20T01:37:25.860000 +CVE-2017-13013,0,1,757b36ae03529b42ba17a946bad413e892945d02c19a2b3974a3f360d6eea7d3,2025-12-04T16:16:09.447000 +CVE-2017-13014,0,1,74040f5e5bad8753ea25b73d3738ed10574b5aef8bf24fd1f8c8f59649c70688,2025-12-04T16:16:09.673000 +CVE-2017-13015,0,1,4f4069c68b9d01a6a5fd864fafb43c029607e7af34105e279a7f60219d7e9fad,2025-12-04T16:16:09.933000 +CVE-2017-13016,0,1,836744aca4ec5f6d400af60cd36996190ee4b27558e6c87546e1a987cc922fe6,2025-12-04T16:16:10.197000 +CVE-2017-13017,0,1,9ac15cc87161169ce04221c9c8e53eb4271ac813e0b6c72ede535c14ea4d533b,2025-12-04T16:16:10.613000 CVE-2017-13018,0,0,1bffeb856cca282e2705716062cd85928167719c1599ac8c486cc3d8000d466f,2025-04-20T01:37:25.860000 -CVE-2017-13019,0,0,0547dc7195edcbd43fec2e82ad45616b28509db79ddd7d5b0368c474a3210cb9,2025-04-20T01:37:25.860000 +CVE-2017-13019,0,1,487a414fd5cd9137febb0bded3f27d521387cf751df2f4b7ff993ae6c60ab847,2025-12-04T16:16:10.900000 CVE-2017-1302,0,0,56063c382dbf8a8c60e65dbec7b6c320d5bf0894c21a0f208d087bdfdd653301,2025-04-20T01:37:25.860000 -CVE-2017-13020,0,0,085ea72452e9103942ee8c14594a552eb33360f77a7d208ffe9ce59d76ec648e,2025-04-20T01:37:25.860000 -CVE-2017-13021,0,0,476daa12627c2b8da097dad9862a793f1d5f3bd627e518806f299dd810058fe7,2025-04-20T01:37:25.860000 -CVE-2017-13022,0,0,260b02f731845ff3a2215071794754b94507349357f4108df9b5e6f3a2e3600a,2025-04-20T01:37:25.860000 +CVE-2017-13020,0,1,0d223ffd751ca28d954d64ec4e04f8f37170e5bfb60d0458d60ec31d6fb5968a,2025-12-04T16:16:11.177000 +CVE-2017-13021,0,1,d15a65b854fd9828356f0574e6ef413d3cfcc03c4b98ac9d74abbc2ce6213780,2025-12-04T16:16:11.437000 +CVE-2017-13022,0,1,69742371b6194aa0f25b004883f5fdb8ef2824061a25b924efd7022bd540e35e,2025-12-04T16:16:11.703000 CVE-2017-13023,0,0,64a6fbf6be7ac8cef7af34891225f336e4338e181358f5bebd7bc70b805d0e2d,2025-04-20T01:37:25.860000 -CVE-2017-13024,0,0,627d726bbc582d472cb77b4123cbe7cbd81e2a2cb58cb9bb12cc24032de5f453,2025-04-20T01:37:25.860000 -CVE-2017-13025,0,0,29d70e6fc508586fa65d3e1b0842ec3079aaed2f45cee85c9395073d8b828490,2025-04-20T01:37:25.860000 +CVE-2017-13024,0,1,8f6d03fd9b73c2366c6ad0aa10e9f15b6c1efb4dc6581379316c8d6181be0087,2025-12-04T16:16:12.170000 +CVE-2017-13025,0,1,e70b50ce3485a4e8061fccc22b85e4cb81aa8dbd3e8c8483c07795aecd2c3906,2025-12-04T16:16:12.653000 CVE-2017-13026,0,0,c4b0a29bdcf584a93be531f84c58e7f9933123d2673286e36422d9073271c785,2025-04-20T01:37:25.860000 CVE-2017-13027,0,0,b275b83b31fc625f2e8c7e7d2cc6ac973781f734820a0b099f9d6c8cd881ce81,2025-04-20T01:37:25.860000 -CVE-2017-13028,0,0,52f40e4c056682c86046360618f090c8eba0a3198bdd86c9dc817202f59a4aa6,2025-04-20T01:37:25.860000 +CVE-2017-13028,0,1,0e5948950f0425badb27bb7391092032403313d7c8260952fa5bc28b325d407f,2025-12-04T16:16:12.930000 CVE-2017-13029,0,0,e1a8aeeafa9bc29ca30b669a6136280f11579e7de6f837bab50626f892b4e02c,2025-04-20T01:37:25.860000 -CVE-2017-1303,0,0,4698b914e9e8d91357d4fd8105b93f6b8702e0c70bee8c6b23890033daab4ece,2025-04-20T01:37:25.860000 +CVE-2017-1303,0,1,af23bae16b3664cd008b449ec422dbce7b72ef7ae1f4471a972e29402513db44,2025-12-04T15:15:53.940000 CVE-2017-13030,0,0,1273d7f34ef2e0e34e3c2730eaf0acd6f54a6c52f1139afcf0d4fcbc6fe1af50,2025-04-20T01:37:25.860000 -CVE-2017-13031,0,0,71e82a4266264a84868dc117c0c2de4a4ef630c6a46e8d34993134235287491c,2025-04-20T01:37:25.860000 +CVE-2017-13031,0,1,de8d622bf9d41ca4bd2a58517c03e4533dfd27d191f5dfe8712e8aa6b39cbc23,2025-12-04T16:16:13.227000 CVE-2017-13032,0,0,2f49821de1aa52849e4c7c00d394d65250f0138100cab50fe6790223ef6800a9,2025-04-20T01:37:25.860000 CVE-2017-13033,0,0,c88873cd3fc5278c1c14d5cf910ec2d7fc080b355b100025d2e15d4f4ee0be3c,2025-04-20T01:37:25.860000 -CVE-2017-13034,0,0,4f8ccf8d2ac1189d0188bda02c3c6faf8df8417c8bf74700e34005d7b193b62d,2025-04-20T01:37:25.860000 -CVE-2017-13035,0,0,87fb5afa304651edb1058827703c68a6f03312133f2f525e05217527ffab4cc4,2025-04-20T01:37:25.860000 +CVE-2017-13034,0,1,f62473169308421a2f3dd231e5716c8afa00c11d78e1d9aebd47eaeb5667266c,2025-12-04T16:16:13.503000 +CVE-2017-13035,0,1,2ae6e556dc7717249579496a035de26ce52b320597f5d887dfbabf2150584bec,2025-12-04T16:16:13.957000 CVE-2017-13036,0,0,1c0dc29bedcc675a99a9ff88eaa98cc70cdc45a1a3b2d9ff883766b64f7ea3ea,2025-04-20T01:37:25.860000 CVE-2017-13037,0,0,ed8ffb8bbf0542fc6f771236ebb690efd72c0486557f49fce9156637e77be29f,2025-04-20T01:37:25.860000 -CVE-2017-13038,0,0,b600354209397eb8a8bab6f0001e727e8c285ae9e4d9eb3601766072563b2f02,2025-04-20T01:37:25.860000 +CVE-2017-13038,0,1,f1bfb5f8879e6b3ef1870792f579df1ff640b6175c4f314d7fb6c5093cbcf819,2025-12-04T15:15:48.930000 CVE-2017-13039,0,0,6c4a10710f3ba47f1c14674f6d68ea043c5b32c3ae9ac14eaa91c12fe25d0b0a,2025-04-20T01:37:25.860000 CVE-2017-1304,0,0,1f6a186db04cc6eef0843dd571fb0ba01d337e01a78261fc0ff8cb4fae253f21,2025-04-20T01:37:25.860000 -CVE-2017-13040,0,0,85e6137de503b936c9fbc8b303334dea399f07d4d7d88044f6cd3be5ac60d9cb,2025-04-20T01:37:25.860000 -CVE-2017-13041,0,0,36de1175ad4267da155538096c07e143625d8b5af1e809aceeb8bffea6294a90,2025-04-20T01:37:25.860000 +CVE-2017-13040,0,1,61b3a6697ea0b8783a5ef84e5c4c7297b6ca8cb1bc92c79803adadb516c0e9fe,2025-12-04T15:15:50.010000 +CVE-2017-13041,0,1,6957dceb8a2785b0791bc93c5d8d54bbac0b151b5159eca9c335009a7b5a3e6e,2025-12-04T15:15:50.300000 CVE-2017-13042,0,0,664b26eb684cef33b4745541e0430578dbed3b82b10e3a47975be6b6cfff6733,2025-04-20T01:37:25.860000 CVE-2017-13043,0,0,ce664d6ecad1ee0082a2e7a5458e8c22b7e986b3b0850e923fd8ddd062c7153f,2025-04-20T01:37:25.860000 CVE-2017-13044,0,0,0d0b2fbc606b7c4fd8ca4fedafb8c39fde59bb6a3e29f49d92557e8c3fb19192,2025-04-20T01:37:25.860000 -CVE-2017-13045,0,0,6c43e89e9536a1f25b43c09137aa839ea81534de547ade0b540f1f92e29708d5,2025-04-20T01:37:25.860000 +CVE-2017-13045,0,1,18619611a7e77de5ab33f39cc8ff592ae15bcc3e4be5292e0f192ee1dd84a1ae,2025-12-04T15:15:50.750000 CVE-2017-13046,0,0,884983597b172fefd82fc8827eb9bbe5ac580e2110c0517594775cc839e1e980,2025-04-20T01:37:25.860000 -CVE-2017-13047,0,0,cdf4a60b089a4de13fa171fc7598c5d21ccf7b9a381379a23a52e117e661016c,2025-04-20T01:37:25.860000 -CVE-2017-13048,0,0,3863fff5077aeff97f37bd9fe4df19df345c00cbd83fe1cfda7e3188847fa420,2025-04-20T01:37:25.860000 +CVE-2017-13047,0,1,6d6473a1bfc802f35d6b4ba44404da7c34b83c7e6337e3c8513ca5454f0f277d,2025-12-04T15:15:51.067000 +CVE-2017-13048,0,1,b80384ab596e19ceac33f9aa389488ea95cefb7c3785bc28b6db7bb510b9dca6,2025-12-04T15:15:51.347000 CVE-2017-13049,0,0,da6a5399ec791613f09a5330a5af8f4947885ccf3c0055db63513949da63287a,2025-04-20T01:37:25.860000 CVE-2017-1305,0,0,f942856534bfb416778cee5507780787f70dad1daf485f0cdc955a84c3b47bef,2025-04-20T01:37:25.860000 -CVE-2017-13050,0,0,b132c0659cf038f1cb65017866b6d34e7f3a8f8eb03a37d2b37ee289b8c27864,2025-04-20T01:37:25.860000 +CVE-2017-13050,0,1,1d1c92dd8b520f140210534d3972af51ac9cb96c44c25e5241a5b2c19505136f,2025-12-04T15:15:51.647000 CVE-2017-13051,0,0,fb9eaba7584c8cde67c66a7bb725af3502f099cf8241ce795e86d75bc38fac9f,2025-04-20T01:37:25.860000 CVE-2017-13052,0,0,2f2da08d3385ac4cd377a7ac9661dfd4c7c3b587e5415d4288176f655a807ae5,2025-04-20T01:37:25.860000 -CVE-2017-13053,0,0,d408a9603cfa8a8b4a990ca4f69841e9e76d81d0850434eb0ebbb590b71df43f,2025-04-20T01:37:25.860000 -CVE-2017-13054,0,0,43e1c29a4392f0082f35e2297807e35132b0069b230325c0d1df4e9da007a10b,2025-04-20T01:37:25.860000 -CVE-2017-13055,0,0,dee2607fd2d8695e4b505c6912f3d13eca20b7f3cb41949ef6e1965251ac809c,2025-04-20T01:37:25.860000 +CVE-2017-13053,0,1,c6399483409e2472ec28584a1bef575aac211f6b09bde588dcdd5396a0ca7d55,2025-12-04T15:15:51.920000 +CVE-2017-13054,0,1,d58678181ebeaed161e58151fd653984429b23487691a41a87c46aa2aa30e38f,2025-12-04T15:15:52.190000 +CVE-2017-13055,0,1,4e734b858b02b731a67fa00e2bafb0a5e20ca679f86fa3da1601884bf98ec749,2025-12-04T15:15:52.473000 CVE-2017-13056,0,0,7e2772eb41ac88d57e3ca3d0478eeee43b9ab37c9b55dceb0e5393ca5e76cde5,2025-04-20T01:37:25.860000 CVE-2017-13058,0,0,fb176a09f4389c166c76cbaf7fd8a04837db2e2ab59d3f17b9390de11ac55930,2025-04-20T01:37:25.860000 CVE-2017-13059,0,0,2b67f2d9136fe3ea0cd0ea9b4ee240daeef6451faf4a49b4e7537d53016d0d67,2025-04-20T01:37:25.860000 @@ -97362,9 +97362,9 @@ CVE-2017-13683,0,0,64a57c987d52f2c8c83d14d65ec406958136361db34a49fb2161ccb9d9314 CVE-2017-13684,0,0,74eb4ab00497a22bfaeca917c69aea90d7ecaa45fb5711815d9622e90ef7b325,2025-04-20T01:37:25.860000 CVE-2017-13685,0,0,278dbc3efcbec567a93117a15ddf5cc81a14660c662fbf09ccb247941da12ee5,2025-04-20T01:37:25.860000 CVE-2017-13686,0,0,3f4b1f368ff2e91a772991d6efde4868321f0f6bf7a8ebebe54f58ad89f0956c,2025-04-20T01:37:25.860000 -CVE-2017-13687,0,0,b0d65537632ab7379e8c47679f37211c525d358e01e8b34322072b9e4b73f16a,2025-04-20T01:37:25.860000 -CVE-2017-13688,0,0,42507a1f6ee3ec7c63f6e307fa90fe8fef33a242c10be6cf06d217020bfe1082,2025-04-20T01:37:25.860000 -CVE-2017-13689,0,0,6d130fed8a2656fb92e66eaf7a630ea7df41264a36f066717e410d1dbcd51a58,2025-04-20T01:37:25.860000 +CVE-2017-13687,0,1,c84f4a0a49a6ef7feb5cb3ac1951b8cee9699d9e57f65f2875507491a67162a1,2025-12-04T15:15:52.917000 +CVE-2017-13688,0,1,069dfb5449d4d500d841c365d3260561b3826b9196fee739b507ab3f59911d95,2025-12-04T15:15:53.410000 +CVE-2017-13689,0,1,82d106c67d70b9caf38856f3c3751fb1bab9f13b8f1401b80a56c683c7b2bbd5,2025-12-04T15:15:53.663000 CVE-2017-1369,0,0,3073ed4ad65fb835cdb0a2d7ce079ea13887d3a041616d096bfa1ccb589c1050,2025-04-20T01:37:25.860000 CVE-2017-13690,0,0,230d598fc42a590517904178dc807ba324c1096623131144160e8c4dcb18779c,2025-04-20T01:37:25.860000 CVE-2017-13692,0,0,b9de3cb1c2ff133210045fa5bc18b7f011a8311a056394c2756bd0b83a374b92,2025-04-20T01:37:25.860000 @@ -100506,7 +100506,7 @@ CVE-2017-16929,0,0,3128610921dfe83f37f1ffe90d6e92756099e424c04ddf2ff88a2171e03f0 CVE-2017-1693,0,0,3fe81b3cdac595785044a0e51c3c2347516ebf6c85eef6a7c3bcaa29b5a32e52,2024-11-21T03:22:13.700000 CVE-2017-16930,0,0,85fd672a90d4ccfaa77f9d84304e443f5e79d37f620165613a19f80484803168,2025-04-20T01:37:25.860000 CVE-2017-16931,0,0,8af654714e174c1f732ca02c12bb75c8f123d2e86c7062d641092ba09cc40689,2025-04-20T01:37:25.860000 -CVE-2017-16932,0,1,83e0427c9157f8ad1420e0f44f17130ec3b5a6e98322064a602f09a09a2adc1a,2025-12-04T14:16:01.300000 +CVE-2017-16932,0,0,83e0427c9157f8ad1420e0f44f17130ec3b5a6e98322064a602f09a09a2adc1a,2025-12-04T14:16:01.300000 CVE-2017-16933,0,0,0d92bcecf9640dd655f4d09b8f4bcf18b14b7c8409a53425efc0d9798c6b346a,2025-04-20T01:37:25.860000 CVE-2017-16934,0,0,2b76b8ede0950c4827143e57184e940a6aa99a7b75b75224a0a032def25d04df,2025-04-20T01:37:25.860000 CVE-2017-16935,0,0,d7e791004da414dc95b01e1132d55b1942a07e4acebee019cf70f6d7fd64591c,2025-04-20T01:37:25.860000 @@ -172788,7 +172788,7 @@ CVE-2021-26824,0,0,2cc926058dc2e9bf07b2e2aa43d9b1670ee4f5714dd58e327a61de164a825 CVE-2021-26825,0,0,e5822b60b049f116aaafab64fd936260eff4c520efaaf10f8bf6584f24f653bf,2024-11-21T05:56:51.880000 CVE-2021-26826,0,0,eb89fb360924216769927b9e6b08d2a3d4b91529ab4a32d3f8fe0c862383fde3,2024-11-21T05:56:52.017000 CVE-2021-26827,0,0,e0342ff16f890359b63a5d6cf3ab69b434d0c1495405c63f45f60ecccc01ce2c,2024-11-21T05:56:52.157000 -CVE-2021-26828,0,1,487c54e4131dfd474144ee3331027ce71f361317c27e596477e1d813e786e4c9,2025-12-04T14:47:47.693000 +CVE-2021-26828,0,0,487c54e4131dfd474144ee3331027ce71f361317c27e596477e1d813e786e4c9,2025-12-04T14:47:47.693000 CVE-2021-26829,0,0,fb63c04df516a3c606c3d7e4f9f71934bf29c1824c5c06a01ad9aabcc77cfa08,2025-12-01T15:23:18.697000 CVE-2021-26830,0,0,96159579fc07b134d3d013b635119bfddc14ca4d2dee6c836bb49d43d8fa2681,2024-11-21T05:56:52.563000 CVE-2021-26832,0,0,2161ab30b77784e25551f3199c93ea168946f8a1b44a4b2f18899567b606853c,2024-11-21T05:56:52.690000 @@ -215177,7 +215177,7 @@ CVE-2022-50276,0,0,03050cbb34c22f8eb8200c70934d60a4a16ac066a9a975f7046cb26751dcc CVE-2022-50277,0,0,9d1f88750442389b3ef5e79621c27bf210deab4e7e8ec7ce32fa3987c002c5c0,2025-12-03T18:31:12.860000 CVE-2022-50278,0,0,4953f9c4482bb8ac4c333712e71174cc880320674e96640189d3b20a9797b98a,2025-12-03T19:17:01.023000 CVE-2022-50279,0,0,5eadc02339f53da328bafdea4b9b6d519747bb42bb3e5cb7372bc57ea9f6b11c,2025-12-03T19:18:01.133000 -CVE-2022-50280,0,1,467f34a44e29363158e85878b120f42b3434333b4bf72b246adcb1cb9d77544a,2025-12-04T14:55:40.777000 +CVE-2022-50280,0,0,467f34a44e29363158e85878b120f42b3434333b4bf72b246adcb1cb9d77544a,2025-12-04T14:55:40.777000 CVE-2022-50281,0,0,f81f12227f44567a26115f927cb3948a9e445ae0dacbaeb3fa0852ba6f3611fe,2025-09-15T15:22:27.090000 CVE-2022-50282,0,0,d5399fa9014de1f655f969486eed697a29fde020ce5e15551c5585362baba9e1,2025-09-15T15:22:27.090000 CVE-2022-50283,0,0,036e7d49aac710e6d737271f611a7b048c25211a0e85273f02db3402b8729824,2025-09-15T15:22:27.090000 @@ -215193,48 +215193,48 @@ CVE-2022-50292,0,0,10211dddb7ccbfa1994072c00b4381d5f0e9ee03fa28b15632f549b46e1f0 CVE-2022-50293,0,0,6ec8bc849389a6eb6e9526ecf923a960699f7c71a6b5f1471a5218c2e3641072,2025-09-15T15:22:27.090000 CVE-2022-50294,0,0,f7f99d2084f08bf33e9b52c0df03865c0a38db964dcf3351049e1371245d4bde,2025-12-03T19:27:08.237000 CVE-2022-50295,0,0,bf90fa4ac4d02dae47f13e7274c6930e6a4fe664422e9e7d3c6aeeb689ffff0c,2025-09-15T15:22:27.090000 -CVE-2022-50296,0,0,af342d14b72cd23328a981bdaaf48c0327050c7b1c262f87182322d9c1ca92cf,2025-09-15T15:22:27.090000 -CVE-2022-50297,0,0,441be12516316685c11cd081fcd62a029c79b59ae1374f3a32ae984bff26a85e,2025-09-15T15:22:27.090000 -CVE-2022-50298,0,0,1fa39351e04b6b646de92d206c9d5049696bf51fcd6e4c53883f38f24d153ca3,2025-09-15T15:22:27.090000 -CVE-2022-50299,0,0,3e9394ed42fc899ed9542b4cedcfdab72fcf5d3613fb2d28d71465dc40444845,2025-09-15T15:22:27.090000 -CVE-2022-50300,0,0,b1ec69bb91800bd62c2ac9f5fba491e1693c788bf1fbf425ca3ba2e807a1d2ae,2025-09-15T15:22:27.090000 -CVE-2022-50301,0,0,266f265801d054cfa78b720d78d452bfb0e9b2fad04bbd20aae59ef6b4ec1b6f,2025-09-15T15:22:27.090000 -CVE-2022-50302,0,0,d98566236392d5160e3b1411da0fef9c8d2d9344ffd23fd35306155218f2068d,2025-09-15T15:22:27.090000 -CVE-2022-50303,0,0,d140f67c038e1689f56f7d8dc6ba00d078dcd58c74597174a19e92738afa572b,2025-09-15T15:22:27.090000 -CVE-2022-50304,0,0,560684107a60ee7b646a760748d2c1e1103ffbec4d1c6c66dcdb1d5d5e8880a4,2025-09-15T15:22:27.090000 -CVE-2022-50305,0,0,067e4b5c4f1af70ce2253d88335f987a386e1de407bfd5a0382260a1d2042b0b,2025-09-15T15:22:27.090000 -CVE-2022-50306,0,0,8c19f307f9ac5638a05ea4ced420a139d04cc5e4f91d9056bd8b0f4652462755,2025-09-15T15:22:27.090000 -CVE-2022-50307,0,0,f7370d193da55f45fa8b821ce61608fccdb6461d74fcc825e72d222a362e685d,2025-09-15T15:22:27.090000 -CVE-2022-50308,0,0,30a5dd1b9d7d43670de97cc04f8719e19d1c8356e7bb87ec09f7539786ad5676,2025-09-15T15:22:27.090000 -CVE-2022-50309,0,0,b5bb08bb07e7a5eabaf9d5b492edb637497dd6053d999200eaa418f7585a0019,2025-09-15T15:22:27.090000 -CVE-2022-50310,0,0,293bec8223a714bc7d795b190e575be1674de11de4e7075c51e21c556a95f65b,2025-09-15T15:22:27.090000 -CVE-2022-50311,0,0,ea2fd7d2a07c8d4091b03efb1ceb6957391961baf33aca9fb0a246441a216f81,2025-09-15T15:22:27.090000 -CVE-2022-50312,0,0,b1fc85e6484c3c38ec519c41ca72794108effd4745bbb8a79b12d9e612eba6dc,2025-09-15T15:22:27.090000 -CVE-2022-50313,0,0,47030b635f5b12dd0075046499c7849d3d48297cdcfc831c03f2a43ef9e9cfa8,2025-09-15T15:22:27.090000 -CVE-2022-50314,0,0,609147624e1c93cd0be48f55bda554d752795eabb5106a8ef9dc52009deb8eba,2025-09-15T15:22:27.090000 -CVE-2022-50315,0,0,179deda2559430717effe53efda16f7a2301fc472b9cc96ad48b26b57c4eb885,2025-09-15T15:22:27.090000 +CVE-2022-50296,0,1,4c69e44eb705fe3a725ef4623c349c87947484f8a1c16c54425cbd0c6400808f,2025-12-04T15:34:09.233000 +CVE-2022-50297,0,1,a75c9d9046003e34268d78be0b7e7d71f4fb46b9351ce36f8adcf3f8804b0f33,2025-12-04T15:33:54.417000 +CVE-2022-50298,0,1,44968465cb71f60d12df920f7527e9942b5d672fa4ecd6baa423ce5a8e4eb76f,2025-12-04T15:33:39.543000 +CVE-2022-50299,0,1,2a618ecda31a252d162ec4744997f4df2b661dfb0dff504b69f311bd5008658b,2025-12-04T15:33:30.630000 +CVE-2022-50300,0,1,29504310f0372092f51aa2afb65b50b83c67067e4aa1ace60ef43afccd3862be,2025-12-04T15:33:20.600000 +CVE-2022-50301,0,1,f63012eab93436c46480c0d798193d27ef5bf189d7a3e5daad85564c7ddf9659,2025-12-04T15:32:33.170000 +CVE-2022-50302,0,1,21f5b6f80fcf0d6bffc0cb3b8e34059a5c5417c1964323acf6571bbc81346a91,2025-12-04T15:31:49.697000 +CVE-2022-50303,0,1,a3077da51a3697479cb61583298fbd9eb2baf34af2d64f8c72621a5cb62abd08,2025-12-04T15:31:34.053000 +CVE-2022-50304,0,1,b643ed01d6bb12257d063d4216c01db14b8c6e8a836942285ae19e8d41154630,2025-12-04T15:31:23.977000 +CVE-2022-50305,0,1,90c8ab4619af7edbf275538aeb461e8a0788e8194202b84c0dd53b2c5ea86927,2025-12-04T15:31:13.883000 +CVE-2022-50306,0,1,546fc22c8ff4087fccc87ee1ddd925f00bab653f0435a118af2cd23263264815,2025-12-04T15:31:07.530000 +CVE-2022-50307,0,1,9eced6150f28f25023f8dbce14ae0177bfa6c56a53fe74f3b330ba7676a68e0b,2025-12-04T15:30:58.510000 +CVE-2022-50308,0,1,995eabe7b8f902565d83428cc92dcff7589054771cdc63efb19eecf4e2003957,2025-12-04T15:29:24.480000 +CVE-2022-50309,0,1,ba8d500aa1bafcb4c95ee29cb3abbc91c331f9496473bcfbf63b49163d667be2,2025-12-04T15:28:59.283000 +CVE-2022-50310,0,1,2ce8d36ceb0d93499fc69b04e1dfcf4a47894426a766b4645c3cde5cf3db3822,2025-12-04T15:23:20.263000 +CVE-2022-50311,0,1,802304137dcd000685823a011a42b7c66bcb75ed7e1d5f7d59879beef5707a5e,2025-12-04T15:23:00.490000 +CVE-2022-50312,0,1,61d68d17e000d75ef3aba874bd5a8f2ab67f6f8e625de1003b5eb58b82392f8a,2025-12-04T15:22:27.233000 +CVE-2022-50313,0,1,05852161677a3836722058b98f286e6d00aa3e9e2faf2b2c52cd2fd00877e561,2025-12-04T15:22:16.860000 +CVE-2022-50314,0,1,441051b8c8e7b47a86377b1295e0b5af70acc1a99f276b8308713f04a26f351d,2025-12-04T15:22:06.630000 +CVE-2022-50315,0,1,d4a4c280ad8b58437e43e60195e84dd44140414fb8ceb504b1e43ce4b25b1f3c,2025-12-04T15:21:57.063000 CVE-2022-50316,0,0,9a6b1c0641a8d9ac54ad299f7b737d97db986ba148bada8083c3046dbf2be258,2025-12-03T19:29:19.307000 -CVE-2022-50317,0,0,c5fc960d1c7030852199b24aa1120aba02173348974b1fb75d801ba356545099,2025-09-15T15:22:27.090000 -CVE-2022-50318,0,0,6bee3f1d4f7a65bfa026e28759b8631c53e4d741160183e3100792096e98b38a,2025-09-15T15:22:27.090000 -CVE-2022-50319,0,0,674c21f7e8083f1f69e7c4adef86692f92428e5c41724fb2da675e4d351ae757,2025-09-15T15:22:27.090000 -CVE-2022-50320,0,0,9a6fefc2a4b31c7c3ab1289103d38759f4afcd16f637b3d505c2be592f29d650,2025-09-15T15:22:27.090000 +CVE-2022-50317,0,1,60097221ba95d91a4a0817122360f60509a5e5ab3e1c4b563062595a1cbe5561,2025-12-04T15:19:42.590000 +CVE-2022-50318,0,1,4e936e9487dedaadd0fd06b9fb36774706c0bcb587953b794195d4ad7e107ab1,2025-12-04T15:19:27.877000 +CVE-2022-50319,0,1,a0dd13ef9336bcb32cce7597ce5c8cb24cce478161d0cab619407bf784131f97,2025-12-04T15:19:17.463000 +CVE-2022-50320,0,1,0c65fd3bdab2e3030651570d0fc15f42ab403ee206fe321481a20b65ddbdf3af,2025-12-04T15:19:05.830000 CVE-2022-50321,0,0,e8350fd4e25bcae51d602a0c45621e9961fd525970eb078512c51b096e5d7e3b,2025-12-03T19:29:55.420000 -CVE-2022-50322,0,0,d532431caa7cd62d65206fb913653e6c5618da17011df4e57740c7101b85bce5,2025-09-15T15:22:27.090000 -CVE-2022-50323,0,0,05a14ed1b338bd97260d8251c830adfff3d8e4e46f41edd136c3795e8b1da863,2025-09-15T15:22:27.090000 +CVE-2022-50322,0,1,c8246404acd3ceb4520f63b8bac5000db011d8062325aa981be1d4642fdfc90f,2025-12-04T15:12:01.390000 +CVE-2022-50323,0,1,c6a1a292188d5e5eeaccf251e336f77b51e79a08f42e60bd2ed094a06aeffa0d,2025-12-04T15:07:59.800000 CVE-2022-50324,0,0,6ec06a364a410ea2bf3085f4db4097e8443e1f4c46957ae0250949b587516022,2025-12-03T19:30:24.373000 -CVE-2022-50325,0,1,1f2548b36dfdae82eadf400e39dd6d951b83d144b46fd6c57179b0ca309692fb,2025-12-04T13:41:37.063000 +CVE-2022-50325,0,0,1f2548b36dfdae82eadf400e39dd6d951b83d144b46fd6c57179b0ca309692fb,2025-12-04T13:41:37.063000 CVE-2022-50326,0,0,b784f60d2bf68f53d77b0b00f9d32372f96ff483914ae99b61e12270178c81a2,2025-12-03T19:32:23.900000 CVE-2022-50327,0,0,a41a13e6a6f9e11b0075e021c82922d89537f34b3ad81ebb04916139dacdc147,2025-11-03T18:15:40.497000 -CVE-2022-50328,0,1,8cc402b6ed235dd3a9a7c4f27541acf0c267e78e7f73a16e5effae6d972a17ff,2025-12-04T13:42:22.360000 -CVE-2022-50329,0,1,7fa8c0e805d8d137ffbb9d5540daf36a0af3604f170c076f2dbbe39e9c08591c,2025-12-04T13:43:46.143000 -CVE-2022-50330,0,1,dedfd311c84462d62ee86a33fc10810288676f6c3b90e92b0947a290dcc40ab3,2025-12-04T13:44:36.560000 +CVE-2022-50328,0,0,8cc402b6ed235dd3a9a7c4f27541acf0c267e78e7f73a16e5effae6d972a17ff,2025-12-04T13:42:22.360000 +CVE-2022-50329,0,0,7fa8c0e805d8d137ffbb9d5540daf36a0af3604f170c076f2dbbe39e9c08591c,2025-12-04T13:43:46.143000 +CVE-2022-50330,0,0,dedfd311c84462d62ee86a33fc10810288676f6c3b90e92b0947a290dcc40ab3,2025-12-04T13:44:36.560000 CVE-2022-50331,0,0,9fd40ada59d479fe6c50769b80a27405867353cf73b0f9f5c325f54ea9f7cbaa,2025-12-03T19:36:00.050000 -CVE-2022-50332,0,1,311d757bd77af236229b84f7753c47bf46eca250a5be7b6e076438bd5b038240,2025-12-04T13:46:08.200000 -CVE-2022-50333,0,1,cda138c9288cc3e2b380f2341efe54a6a5015fe0dc4ef250e69c016321e68f82,2025-12-04T13:48:21.410000 -CVE-2022-50334,0,1,269b7c9eac979ce226e82a8bcf63564d236330d0b7c506f7b51cecf9bc422494,2025-12-04T13:49:16.740000 -CVE-2022-50335,0,1,a249b7502284046f33062c4eaac7f3e7125bd445948e2f9d17d108b1b6b2af95,2025-12-04T13:50:35.600000 -CVE-2022-50336,0,1,9f0f9ed56a8f4ca59d85b9c273c64055385bc737a740e21d5a1bbf38ed8fce78,2025-12-04T13:53:50.990000 -CVE-2022-50337,0,1,995c7bef9e09fc605658ba02773900ec4c33c6891e2c6e85aae3226ea141f0ed,2025-12-04T13:56:39.980000 +CVE-2022-50332,0,0,311d757bd77af236229b84f7753c47bf46eca250a5be7b6e076438bd5b038240,2025-12-04T13:46:08.200000 +CVE-2022-50333,0,0,cda138c9288cc3e2b380f2341efe54a6a5015fe0dc4ef250e69c016321e68f82,2025-12-04T13:48:21.410000 +CVE-2022-50334,0,0,269b7c9eac979ce226e82a8bcf63564d236330d0b7c506f7b51cecf9bc422494,2025-12-04T13:49:16.740000 +CVE-2022-50335,0,0,a249b7502284046f33062c4eaac7f3e7125bd445948e2f9d17d108b1b6b2af95,2025-12-04T13:50:35.600000 +CVE-2022-50336,0,0,9f0f9ed56a8f4ca59d85b9c273c64055385bc737a740e21d5a1bbf38ed8fce78,2025-12-04T13:53:50.990000 +CVE-2022-50337,0,0,995c7bef9e09fc605658ba02773900ec4c33c6891e2c6e85aae3226ea141f0ed,2025-12-04T13:56:39.980000 CVE-2022-50338,0,0,445462c037bc90df3ff937184349fb37c7b519129fdf9573724de5b16bc6189b,2025-10-10T16:15:49.533000 CVE-2022-50339,0,0,a2644a5d60c1dbaf7087cd967ecfa675511828fedf7822068ec286c0d63e3cca,2025-12-01T22:00:43.643000 CVE-2022-50340,0,0,f85bec820f37f0a107f965afa676f6f133d03760bebd5bcd1d9264bbf95b0195,2025-12-01T22:00:51.300000 @@ -243594,21 +243594,21 @@ CVE-2023-53197,0,0,fc8bf21a0c1a21037b717af3c12ee4587d3bcf273c41911aca5668355ddfb CVE-2023-53198,0,0,c5040343778b70866862e56cb92a3501a393a2d9b061dd632d15bfa7eb023990,2025-12-02T19:19:05.830000 CVE-2023-53199,0,0,f05da06097e9477d1b093d663bc8127a25bbb73eb5d65a7569a515f46511696f,2025-12-03T19:39:44.743000 CVE-2023-5320,0,0,cd8126756018b308be981f6bbb4221eb9a9bfdbd9eba3b473ffc471a8bbb9f15,2024-11-21T08:41:31.373000 -CVE-2023-53200,0,0,b4aae60340107563ae78bb5510d35f73d98b75b8f111616b52e0afcd2249ca7f,2025-09-15T15:22:27.090000 -CVE-2023-53201,0,0,d8955c2b3a644d30fdb1320ec7a90656718254a8c18c36150ae1664fd10c0483,2025-09-15T15:22:27.090000 +CVE-2023-53200,0,1,470b1f52685266fbe84c37c75086db88e99a1233d3145cfb611dc0c863c73ef4,2025-12-04T15:07:32.157000 +CVE-2023-53201,0,1,dba9b4da3aa62a4270d3cf4aa43badb38edbbfb14921063d412d9b02ded56ac8,2025-12-04T15:07:21.827000 CVE-2023-53202,0,0,da2502508fca4269701e668c4f669a301792493edf2d12153464cf00f9defa50,2025-12-03T19:41:02.513000 -CVE-2023-53203,0,0,33aa0d6def26e708f57b143a88c00a610a32feccd1bca85b75d885a96b0229d7,2025-09-15T15:22:27.090000 -CVE-2023-53204,0,0,c2cc03ba93544c50a15c6d1157b713430eec4c42b5c3ef18b2372bd00b7b4237,2025-09-15T15:22:27.090000 -CVE-2023-53205,0,0,13d8527c85b9d5dc0097e4136b5444c2264848c64c6f34c206751c71ac1f8f25,2025-09-15T15:22:27.090000 -CVE-2023-53206,0,0,e1d803f6f01e6dafa0dc0d0ec2cf80a3583a7e4e442d19fb52bbd98c834cf14d,2025-09-15T15:22:27.090000 -CVE-2023-53207,0,0,ebf3eb47bd1a198b92a3f311102a5b088fa087c5b1b8da165b93250b77dd492e,2025-09-15T15:22:27.090000 -CVE-2023-53208,0,0,33da78d1dca71c5ffefa6e146550e0f00a5f7d77908524dfc1176210efa266a9,2025-09-15T15:22:27.090000 -CVE-2023-53209,0,0,27e93ccaa7193ba0426880c721599504419213b4745a2f52dafd2d92454874c8,2025-09-15T15:22:27.090000 +CVE-2023-53203,0,1,ed7abbfb57f2703a463caae14ae529e524c6176614de642a61da1dbb9d0c6c47,2025-12-04T15:07:07.453000 +CVE-2023-53204,0,1,9f52969cdaa7df0b353f91c0a8b21c1cc44b38172671e349eba60c48d7e09fde,2025-12-04T15:06:57.090000 +CVE-2023-53205,0,1,373bee425de1212b40c268b9f8872662bd0c89dec08d2099c8f12676ce130b42,2025-12-04T15:06:38.500000 +CVE-2023-53206,0,1,9ef5f13f8509e1d4af8b4febe2d8d3734310f3e2f09125185ad66bb15168e763,2025-12-04T15:06:28.720000 +CVE-2023-53207,0,1,7881424b25035a8ac3473aba6db66c4e56715a2371df6b6c01e4f31210d605d3,2025-12-04T15:06:19.880000 +CVE-2023-53208,0,1,cd2e7944bc1ae28babdf0d6f38b72daa385e1db45057624fd4163f27ad978bdc,2025-12-04T15:06:09.160000 +CVE-2023-53209,0,1,b03e2b160c71c2df26f7e19c3823465b403f78967765b32f3393b6dbfbe70309,2025-12-04T15:05:57.960000 CVE-2023-5321,0,0,447e1fbc5ba9b1f2118b7eb42c4bdfd7a8c14292a844633b7c7285284ad77532,2024-11-21T08:41:31.507000 -CVE-2023-53210,0,0,b23d3b3c7be2cac5b48b1cd124a45023d1d2f76bc1b07454c86c8a539fef848f,2025-09-15T15:22:27.090000 +CVE-2023-53210,0,1,7dd78edebdeca6705197d6a5ce908e8175a2ebb2a37fc26b3da27dd842655f67,2025-12-04T15:01:04.117000 CVE-2023-53211,0,0,609338a6086f1e2686ce1ff23590ef67076fad7c2271dfddd49ca28e8c33914b,2025-12-03T19:41:45.407000 CVE-2023-53212,0,0,dd58576dfbf51622cd9f1ff36e34fd43a90a47ed9e82a001ce3f24ad499f22eb,2025-09-15T15:15:47.793000 -CVE-2023-53213,0,0,4ce8fa5b9565f42a184f31b173078be869054f9b132c0fd9517365d02fcad8e2,2025-09-15T15:22:27.090000 +CVE-2023-53213,0,1,2b8c67c79f58e10d76f54423e4b47cd2d627115680048cec20c5ebf8ceb43290,2025-12-04T15:00:27.650000 CVE-2023-53214,0,0,c3695a3e07872d1315dc99fec3b00e6301178a4baef8ff59b8e8f8a0f6ab9144,2025-12-03T16:26:15.690000 CVE-2023-53215,0,0,45ceb00872eb6a4c3555a9e83fa69ff3514353fe7986cb58cfcd341510fa0f4b,2025-12-03T16:19:11.453000 CVE-2023-53216,0,0,2fdd3bc5adaed60d1d8cbe0fc92056989b7482f65cb000fa5d97b1cf0c426def,2025-12-03T15:55:34.663000 @@ -243618,23 +243618,23 @@ CVE-2023-53219,0,0,86e946ff6c56fe551c3037f45bd12c9d24057b5af439c2de7d3792bedccf0 CVE-2023-5322,0,0,0f93c334b5989d868c968208ec65f75571fbac79bb515248aaa93c5de489f533,2024-11-21T08:41:31.650000 CVE-2023-53220,0,0,884059780912aff21197c87248f666214b9cb35e23ce4fdddd4c5aa685629d10,2025-12-03T15:29:49.683000 CVE-2023-53221,0,0,eb93dcfea72e091dc583a54413fe47aa63b530992253d140b7ed542a933f5e34,2025-12-03T15:27:46.513000 -CVE-2023-53222,0,0,c72f0d123f6f6ebbde281858d4e0873bb01fdde4ca3a6c0c3b19153eb3b62b84,2025-09-15T15:22:27.090000 -CVE-2023-53223,0,0,aa9e41acc1f1132909fb642283470184f70cfc843db448dc26a3b85077d57dba,2025-09-15T15:22:27.090000 -CVE-2023-53224,0,1,463f38f0977745ecfa3948103309214ee72ca4619f653a60fd12f16450c5943a,2025-12-04T14:57:52.993000 -CVE-2023-53225,0,1,924ac9c70f1f14ac5c31983926ea90239b8dde56fc12ef80c3ddcf16040cb607,2025-12-04T14:57:32.613000 -CVE-2023-53226,0,1,5634ad73f053e6f3c585ac2765b2a1d183e90411d1afb8af073f45c046a3bd61,2025-12-04T14:57:14.463000 +CVE-2023-53222,0,1,58337f3da053f181819dcbce8ef5820e42d835c3b0187047eca6437c0221f26b,2025-12-04T15:00:14.343000 +CVE-2023-53223,0,1,958ab0d3801c427443ebf026856267745ba324dd48a9b448abebd64ba6a846b7,2025-12-04T15:00:02 +CVE-2023-53224,0,0,463f38f0977745ecfa3948103309214ee72ca4619f653a60fd12f16450c5943a,2025-12-04T14:57:52.993000 +CVE-2023-53225,0,0,924ac9c70f1f14ac5c31983926ea90239b8dde56fc12ef80c3ddcf16040cb607,2025-12-04T14:57:32.613000 +CVE-2023-53226,0,0,5634ad73f053e6f3c585ac2765b2a1d183e90411d1afb8af073f45c046a3bd61,2025-12-04T14:57:14.463000 CVE-2023-53227,0,0,c79a88ab4400f5ff526d207e6ef393953c35a6bb1b7cd2cb215e571c34da210d,2025-09-16T10:15:37.437000 -CVE-2023-53228,0,1,17bab0bbb0926234dca5377751eaaeaa2d7b01750d91917b75e03481aaea0901,2025-12-04T14:57:03.673000 -CVE-2023-53229,0,1,d6b8b0a045b79fbdbfdc59ac4f4607947eb39f26ce7211eada18c3624aa2c993,2025-12-04T14:56:28.760000 +CVE-2023-53228,0,0,17bab0bbb0926234dca5377751eaaeaa2d7b01750d91917b75e03481aaea0901,2025-12-04T14:57:03.673000 +CVE-2023-53229,0,0,d6b8b0a045b79fbdbfdc59ac4f4607947eb39f26ce7211eada18c3624aa2c993,2025-12-04T14:56:28.760000 CVE-2023-5323,0,0,572ba6ccc4352c3ab6fd3b84c1db22d246ef468581c639c9d4004ac4503ce4f3,2024-11-21T08:41:31.800000 -CVE-2023-53230,0,1,246097115c597820a4bec46ad07b188fa3225368f81dbf5e94ccf2a13ecddc88,2025-12-04T14:56:19.720000 -CVE-2023-53231,0,1,8725d961088953d49012d8c1c4b2167a7e9e50cdb2aeb5bb37379f1f6465e8e0,2025-12-04T14:55:56.513000 +CVE-2023-53230,0,0,246097115c597820a4bec46ad07b188fa3225368f81dbf5e94ccf2a13ecddc88,2025-12-04T14:56:19.720000 +CVE-2023-53231,0,0,8725d961088953d49012d8c1c4b2167a7e9e50cdb2aeb5bb37379f1f6465e8e0,2025-12-04T14:55:56.513000 CVE-2023-53232,0,0,cad6a6bec756b76da3e4e445dc2764ca48483c0ebe599ae413a0d97f28578a73,2025-09-15T15:22:27.090000 -CVE-2023-53233,0,1,b5873c5ed8d943f8e8ccf9f28198fab39a98eaa62cc6260a5d919f64c449b46f,2025-12-04T14:55:34.970000 +CVE-2023-53233,0,0,b5873c5ed8d943f8e8ccf9f28198fab39a98eaa62cc6260a5d919f64c449b46f,2025-12-04T14:55:34.970000 CVE-2023-53234,0,0,1ab500184a89893914f25a4dc70815a0bd34fe57f634daa6a5d3a96b975fab60,2025-12-03T19:46:39.310000 -CVE-2023-53235,0,1,af7a42aafc22b525d35b2cbce60806f1a3385ee23215c1caed3fbe2f450485ea,2025-12-04T14:54:59.960000 -CVE-2023-53236,0,1,daeb227e7095d5e7831d2900977b70a41572022b99b7b6c6d44665798bca2bb9,2025-12-04T14:54:44.517000 -CVE-2023-53237,0,0,194b0fa68875c9250f758a63cbdfd37249a5c6f724c9d29abaad66192e728239,2025-09-15T15:22:27.090000 +CVE-2023-53235,0,0,af7a42aafc22b525d35b2cbce60806f1a3385ee23215c1caed3fbe2f450485ea,2025-12-04T14:54:59.960000 +CVE-2023-53236,0,0,daeb227e7095d5e7831d2900977b70a41572022b99b7b6c6d44665798bca2bb9,2025-12-04T14:54:44.517000 +CVE-2023-53237,0,1,737b7b522452f3a1dcf94b62fc77fdf23addecd42fbaca7948c435b15287ac2d,2025-12-04T15:18:54.620000 CVE-2023-53238,0,0,c5781129ae0cb44fa2a76e0cf840c209d7efe2a7d6c04dafd9cdd7641c01a661,2025-09-15T15:22:27.090000 CVE-2023-53239,0,0,19ac4ae4d3116dcb8b8c775afcc325f51be95672ee5ca32180291bcf83cd07b6,2025-12-03T20:42:08.590000 CVE-2023-5324,0,0,bbe0a471e6748e39a625196507042f197d2731a150ed5676b0ad34a8cd729aa8,2024-11-21T08:41:31.927000 @@ -266669,7 +266669,7 @@ CVE-2024-38831,0,0,5319663abcd090a9401130f3e27deb5191307d1f32c6f76daa14df5c860c6 CVE-2024-38832,0,0,5623f21b6b41431b3a59eb28368796bd04bdc3ad9fa35d8613016fb1a4fdf70a,2025-05-14T16:36:53.080000 CVE-2024-38833,0,0,3cf225740a3fb21387a42964975f071db604de1f73f084480c57be0e7b64db29,2025-05-14T16:36:49.860000 CVE-2024-38834,0,0,0d4492cea68413707b1c552e89c750c057b2c873760d90f473c9424613b54994,2025-05-14T16:36:45.747000 -CVE-2024-3884,0,0,6e7c233b61b44370d4de371a6a4f7c4b90ac7e13028d64a0b199a6d2525d5c79,2025-12-03T19:15:54.767000 +CVE-2024-3884,0,1,753c64ddcd62983f25eb759a9b39849a3fb80eab52c1364214f742eb97117b61,2025-12-04T16:16:14.310000 CVE-2024-3885,0,0,697db07154699868c9519cebb9a0d46d438686886aeac2cf18c630eb9b34ad7c,2025-01-15T18:03:51.497000 CVE-2024-38856,0,0,ddc237529fb4761fae39868bd65728eaf79a0a543601ad1ee6da8c6d1cd9750c,2025-10-23T14:49:04.117000 CVE-2024-38857,0,0,392b260a009bcf153896a24b0ca2ef35f6f5d57e012aa080627851164a4da679,2024-12-04T15:37:16.290000 @@ -271808,6 +271808,8 @@ CVE-2024-45527,0,0,136186ac2fc2f271ae852a681a194b5451a10ec9f614022b43feb946d7b86 CVE-2024-45528,0,0,2b62a46ad6721df273bf579b352dfc41d4b63f87803bbdffe8980da05bd0cffe,2025-03-31T18:53:04.780000 CVE-2024-4553,0,0,fb93ea8b9b15d40065d6ae14704246d0707e85e61c82926c0504e92275e39cb7,2025-01-24T14:42:56.390000 CVE-2024-45537,0,0,e4991fccb3abdc03f0d41abc273d14fb886e4c1626430be204dd2dbbe1a63e8d,2025-03-14T15:15:42.430000 +CVE-2024-45538,1,1,008bc874f722c72d0b710c74900c7ffb9f45012c49e0e1d796568dbff1bb2526,2025-12-04T15:15:54.290000 +CVE-2024-45539,1,1,3e1abe944e40bf78602dcc466bd9037c99e910a36f86bc81417ea365fdf9f1eb,2025-12-04T15:15:54.520000 CVE-2024-4554,0,0,6806f40f5534ca36a0549e00a6f173c04eec3e9c03e980be74d1aae3f324e9b2,2025-10-06T14:15:41.143000 CVE-2024-45540,0,0,7506d4890bb4c8621d34ab8668a3044ac2911601cfd2446a3b463009cb8d46d7,2025-10-06T20:11:15.510000 CVE-2024-45541,0,0,0641b1c9ca4c99970497509e4ff39c52a7a355cc3a9977e3e6cb523f64e96953,2025-08-11T15:06:17.607000 @@ -278191,6 +278193,7 @@ CVE-2024-54006,0,0,61d23867fd196669f228162f82e3e1775797f969549cf7a5d9386ed5d42ce CVE-2024-54007,0,0,5ef2a7401e32db371ec6a593e7678f152964ec7f814874240750a461a5fc323f,2025-01-07T19:15:32.927000 CVE-2024-54008,0,0,eea0fea8f522a304d841eaa6b0b75d4fade41407f80f4626ca71a3072a5c233d,2024-12-11T14:15:19.713000 CVE-2024-54009,0,0,57a4bb8c66b26b4000e58cbef542e2f0e67be86fc478ee09e8a3296c8cd7f828,2024-12-19T23:15:06.887000 +CVE-2024-5401,1,1,abd07e6fba13c105db49644c92235fa7867cb0659c5a3c2f6b51e8c49b4bba69,2025-12-04T15:15:54.733000 CVE-2024-54010,0,0,e416058a0e43b3161d01186417b7b48190d37daf5d8ae647cfe2dafe7e0f55f3,2025-01-31T18:15:37.577000 CVE-2024-54014,0,0,fef0a2723f6d0eb99b08285b0e1281168729dd64327291d1bbdb15f503c04c5e,2024-12-05T03:15:14.530000 CVE-2024-54015,0,0,dbf436db737d6bfb3984a92f484117dbb910c85ea10ee27c10b73e89cf2b95a9,2025-08-12T12:15:34.200000 @@ -286735,7 +286738,7 @@ CVE-2025-11216,0,0,5a508769020c8b7e3c68a40f35b6898aac36692fbd0d022c9456f23ec77eb CVE-2025-11219,0,0,10c868ee8c43ed4037750bc5a54eb1eda283490190242ebd9e4f6a0b0ccd4c95,2025-11-13T15:28:46.643000 CVE-2025-1122,0,0,af004a1028ca1d3e9e904d0fb063bfa7739dab0c4bfa5abba8b4397c5361cfa6,2025-10-06T16:56:59.303000 CVE-2025-11221,0,0,f1ed44ec9155d68e1ee24ecbceef9e75936bceb9ab06ea7fa73963c234761e21,2025-10-02T19:11:46.753000 -CVE-2025-11222,1,1,b7d2eea8df78bd0d2a702bdc29dbb166506a9653351e34e79a3120cf0d9d77cc,2025-12-04T13:15:46.797000 +CVE-2025-11222,0,1,e9ce55dbd70078a273b3f978771cfbb2c81afd8a980d51c73c93060f29d36e57,2025-12-04T15:15:54.937000 CVE-2025-11223,0,0,b43ee081d4c391d5e91cf64c5bd3396fac653e646be6c078c810dad5e0188c63,2025-10-06T14:57:05 CVE-2025-11226,0,0,c527080d0a224f5dc713cd7b6f76005524cc9d8c47cbc1cf7fb681f11e35d2d4,2025-10-31T15:15:41.197000 CVE-2025-11227,0,0,465d45b3821493a12d0e3dca76d052852fb788577bdf44c1539cd9683223b3a2,2025-11-26T17:03:10.513000 @@ -287388,8 +287391,8 @@ CVE-2025-11926,0,0,2d637a09ecc9cc487e1fac24db62486b2934dc62c9908a47be6a9800df978 CVE-2025-11927,0,0,be034a990a202e57b8e9ae521e7841f9161387c1536c502b67672de73542bed9,2025-11-04T15:41:31.450000 CVE-2025-11928,0,0,039850d5a9bc831f6682f232b969212d628a83fc99a6973f6f68f85e98ecf44d,2025-11-04T15:41:31.450000 CVE-2025-1193,0,0,eb3ead96a13b793e6e9b5b92bec2342b3721a77c6d9f3280b201ec2aa1c59b07,2025-03-28T16:20:35.580000 -CVE-2025-11931,0,0,cf481175c5caf47a93750118fd567a357a42c820faea4abdb0d6ad8d7957e8e5,2025-11-25T22:16:42.557000 -CVE-2025-11932,0,0,e26bc737f826468e7df956d554aabb1808f756c0987cd5971f3e402b52867ea5,2025-11-25T22:16:42.557000 +CVE-2025-11931,0,1,139072e2a4d5ca99709626ab21197af8d8a0cc8aaaa22e045f0e561c888d7d0a,2025-12-04T16:21:09.590000 +CVE-2025-11932,0,1,73002ce2358202067910a5cbc0801885ff26efa35153b9c985cdb94649b2e0a5,2025-12-04T16:09:31.650000 CVE-2025-11933,0,0,613572c979ba324aa3ab8edd42520fff3a28916b214dae0b7317ff1c83d68530,2025-12-03T18:47:07.833000 CVE-2025-11934,0,0,6696ec1ac42aa35581dd5a0cd1feb2b855348bd687c77330dc29e5bd0a9429c6,2025-12-03T18:47:17.287000 CVE-2025-11935,0,0,0a3708fd54459c0480f4519dc86950d06c2862606a83d1a3a9316e0404739862,2025-12-03T18:47:32.440000 @@ -287842,9 +287845,9 @@ CVE-2025-12461,0,0,73df26fc41701ba6e883cd078a481209eb8e82d6157c5953cd93d230efe73 CVE-2025-12463,0,0,23987d4654f8034e3df2c9af7f95dd71ff0f6cb55ca0f437aa71e6f9a1a80f12,2025-11-04T15:41:31.450000 CVE-2025-12464,0,0,c5ca71f78b524d6a131365af521606a684d49204e9363f58756ff52fad0e35c0,2025-11-04T15:41:31.450000 CVE-2025-12465,0,0,15ad5ed5401769bac3df0bd8208b912097c2eae4e9ba655eb8948043c829098b,2025-12-02T17:16:29.163000 -CVE-2025-12466,0,1,a61e68c15fc7175d6fad6944e0fc6e0c48f40456fb52e5feaefd0f3b55d46d19,2025-12-04T14:57:27.470000 -CVE-2025-12468,0,1,3152c6e0858c9cb95c0d6d9666037d64b4dec7056fb8baa4df3a03f00138811a,2025-12-04T14:01:37.227000 -CVE-2025-12469,0,1,539efbb582442f4db72c15c18b72d621ed279eca07ec7fea5a9c4afad90348e3,2025-12-04T14:03:18.960000 +CVE-2025-12466,0,0,a61e68c15fc7175d6fad6944e0fc6e0c48f40456fb52e5feaefd0f3b55d46d19,2025-12-04T14:57:27.470000 +CVE-2025-12468,0,0,3152c6e0858c9cb95c0d6d9666037d64b4dec7056fb8baa4df3a03f00138811a,2025-12-04T14:01:37.227000 +CVE-2025-12469,0,0,539efbb582442f4db72c15c18b72d621ed279eca07ec7fea5a9c4afad90348e3,2025-12-04T14:03:18.960000 CVE-2025-1247,0,0,413d4bcd6e00b55487b15f2b541fa31d8a6169438afa6345f0107f85b8ddc727,2025-03-03T14:15:34.120000 CVE-2025-12471,0,0,982e1366d58cceda0f9b997acb6704eec333e7df9672e057955230305e310024,2025-11-06T19:45:09.883000 CVE-2025-12472,0,0,816d150b846a4f7f53a52bfec3103e7c848c113c5a07260f280e8c20ad337da8,2025-11-19T19:14:59.327000 @@ -288123,14 +288126,14 @@ CVE-2025-12871,0,0,dabff4312f3828f70697288d6edae387238ee6033ff52304891a3445ad46a CVE-2025-12872,0,0,5d6e27a96d7cff7fd4c84328cc098620dd62741aabe32bb21e4bb805e36000d2,2025-11-12T16:19:12.850000 CVE-2025-12873,0,0,abd60d7d77abd142c09b355024d472b575253dc08bbde969192dc42148cb21e0,2025-11-18T19:39:24.953000 CVE-2025-12875,0,0,d518c45a33f5ef9e9ef93fa071b77dfdce474d71bf6b5c3a44ab3e26df91a98b,2025-12-02T16:15:18.943000 -CVE-2025-12877,0,0,e5cdd34032433c5e46b7fbdaf03cd42c3ce13caa0b994ec44187136155318a61,2025-11-25T22:16:42.557000 +CVE-2025-12877,0,1,eb31df67955f019dba5c8333b6013f18e57c14e4a383b92adaefdda827a68f73,2025-12-04T15:40:39.037000 CVE-2025-12878,0,0,d3a650f6b4ad686af1adbfbbe1b7d403da2d8da70e623616d323e17190cdcea9,2025-11-19T19:14:59.327000 CVE-2025-1288,0,0,b1965e5e56da9cca6692b046a70ea7d7201f828830785c6cba9490cb387ee949,2025-06-12T16:38:01.743000 CVE-2025-12880,0,0,fa67b261bea17b3ef7549c45c3cb6dd81686d3e7b0c923a819da0e5cb5e3e456,2025-11-12T16:19:34.210000 CVE-2025-12881,0,0,f5108142c84328e771ee8ea85704af1e759fa4d41688bb333113d58ea244f8d2,2025-11-21T15:13:13.800000 CVE-2025-12887,0,0,055f13b598b5827ac44102659912698df540b3b53f005ffea70c3c9262df036f,2025-12-03T13:16:01.610000 -CVE-2025-12888,0,0,57bf2a47c9d568b39feb8083daa0debdf8cae22f5f66456cf6e6d2ec2f849915,2025-11-25T22:16:42.557000 -CVE-2025-12889,0,0,136cdda3ae1961e2df535b051690a92413623edf620b7f92171d75b23d851072,2025-11-25T22:16:42.557000 +CVE-2025-12888,0,1,6d04e47b3697e80f22bcd69432bd81e49a8bade0c5ed2cb6a1be46b59a78626b,2025-12-04T16:07:14.913000 +CVE-2025-12889,0,1,106b1dcd468cbe29e22efb313c3e3e4d3fc69cbcc3e622b2f839300fc17fe83f,2025-12-04T15:43:04.780000 CVE-2025-1289,0,0,b0793d3587db9bc904bde95560edd5ad7000e4cca6cb15269282d500aec76a0b,2025-08-01T01:58:40.927000 CVE-2025-12890,0,0,f72d40230d7e0d25afd6e2ff205669443f18ad1d540cbe43c71a936bbccaee1d,2025-11-12T16:20:22.257000 CVE-2025-12891,0,0,01b0073c26012a691c2ed389f42b288d01ad0fbd5af63ba5d56a742bee7bbe71,2025-11-14T16:42:03.187000 @@ -288277,7 +288280,7 @@ CVE-2025-13117,0,0,6032f41f2b3f00b23be36c65e0564eeb0c10af8f4b19e61b13742920edf62 CVE-2025-13118,0,0,347a44109f141542c06365e33854c164aeaa42caee2741bcc28fcacd9937b014,2025-11-25T16:23:03.710000 CVE-2025-13119,0,0,fb8931ea404b0ea4853fc840c5e029de9bb1436726581728fa278360fd98718d,2025-11-17T12:30:52.537000 CVE-2025-1312,0,0,722f6492fca6972e3871e5d5750f81958bc068d23fe675f5f9ed3d0327ccb7dd,2025-03-27T16:45:27.850000 -CVE-2025-13120,0,0,c6060749ccf90adf5acb92d35bedb9d51533e76a0a324190c7dcf4d73bd895da,2025-11-14T16:42:03.187000 +CVE-2025-13120,0,1,3c0877499c5cdc31daade33279a0b349114b546addc4e8c44f0d14b34b34386a,2025-12-04T15:27:29.123000 CVE-2025-13121,0,0,5e128d86e6e51899559db613e75ba6c420a96c429acf145062534e727893fea2,2025-11-14T16:42:03.187000 CVE-2025-13122,0,0,1d4ff5fdc8baaaf10564f67fdbb1e6fa4f6cfb3f5e07bef25fb0a79668b9d3a6,2025-11-17T12:30:18.140000 CVE-2025-13123,0,0,16f3c4bae6c5a877691626e8f1feb9428c431f3696871a83712c7e404a50386c,2025-11-24T12:19:51.987000 @@ -288553,9 +288556,9 @@ CVE-2025-1354,0,0,e55c21cbd1f75bac3c8a803805ffb3f723d0da78df46917ed4345de571306e CVE-2025-13540,0,0,746e154520a6b48c073a803f1aa6373ac0b9019f68109283de7336d348a58457,2025-12-01T15:39:33.110000 CVE-2025-13541,0,0,62daff430091c5896d243519a804958c4e12a61b66d2d0b2c45c75dbd546feec,2025-11-24T15:15:46.987000 CVE-2025-13542,0,0,8b0fb52a6d552bfeb11d1809e5561a86f199ba96f232d446c174c690f190e08f,2025-12-02T20:15:49.670000 -CVE-2025-13544,0,0,c897647f4e5a463c98cf2dde6769eb83327c70fd3820386ee0e7256a0079c1ee,2025-11-25T22:16:42.557000 -CVE-2025-13545,0,0,de1f30e9627e41cb048a2a3e18dde7cda78461ab89550bea171ccd4ff14af52f,2025-11-25T22:16:42.557000 -CVE-2025-13546,0,0,680f8d46bd015dc74e1b7e2abfd5687d585a30935fc6805b27bbcf09187d2cb2,2025-11-25T22:16:42.557000 +CVE-2025-13544,0,1,f9c14e4c65ca8bd84bf594b8a7863374b3db8e19614fafb4a60ec21976704cfd,2025-12-04T15:37:43.520000 +CVE-2025-13545,0,1,f104a2f921c106bd0cc5561045b6cebde89239c078b1b62d685c698361db3e5e,2025-12-04T15:33:27.840000 +CVE-2025-13546,0,1,2c6a63bf0c72b964b5448cc0135ee3f4127bd1ff984bb02e78fbc620982e1733,2025-12-04T15:32:33.497000 CVE-2025-13547,0,0,9c85e578b45a1f35a2dddff10ed2bc8001c4f3a2bffbed7fd21b9f206e6062f1,2025-12-02T03:32:40.623000 CVE-2025-13548,0,0,abf838c1767a8237b73aba0e38c7b69cec59ea014c6e485c0ce34330a5a8f64a,2025-12-02T03:32:26.303000 CVE-2025-13549,0,0,c1633399bc1c8a49d4103ec2099008b368917ae3515aa8652a71d9a19992afee,2025-12-02T03:32:33.953000 @@ -288677,9 +288680,9 @@ CVE-2025-13783,0,0,8058cdb04f95f47bfb4aaefdabf01db01c529b7340d675143b7bbc621316f CVE-2025-13784,0,0,f2a418aaae529178c1a2d00553492ac394bb66963fc1f87e3832a444ec0744fc,2025-12-03T16:15:55.350000 CVE-2025-13785,0,0,f3642da10956b226f75a964e2eab8bb6229e3a442a69749a9095818c78c5736f,2025-12-02T18:15:47.003000 CVE-2025-13786,0,0,faefec8f82eace823af3eadfdd9e401c1532825e4b65225972b717f2138f6bdc,2025-12-01T21:15:49.950000 -CVE-2025-13787,0,0,21b6a867d86792c53769e6eac82f07d87e652d15e541875aa9a8b91e33b02c2b,2025-12-01T15:39:33.110000 -CVE-2025-13788,0,0,80c51aa429c3a336348e7489daccb9a7098889688d2bb77a8664aa3696634111,2025-12-01T15:39:33.110000 -CVE-2025-13789,0,0,aa68242411fe5000c2ea58eea6dbb1eb40df4049de97ac6bf98e8da118da9faa,2025-12-01T15:39:33.110000 +CVE-2025-13787,0,1,979ffe047a042896e8a6bb4601c7ce1168a02a80181ef356361271f0e01e60c5,2025-12-04T16:44:07.470000 +CVE-2025-13788,0,1,15d9a09216fab67a15e7b071add68cd143cd461a260ba47cf04e24683ae041dc,2025-12-04T16:39:41.843000 +CVE-2025-13789,0,1,49c6c916c82d946a25126551a49a52b3ab4d4a76e4eb73ee9f67c2f85f9b3353,2025-12-04T16:36:17.793000 CVE-2025-1379,0,0,5dcb3165f40d5545ed4ce19a6009cd3b7b7246346d15ef8a292528f915f8199d,2025-04-02T18:44:42.610000 CVE-2025-13790,0,0,420efa5394e93c667c667dedd7b9563b492b63833c60c220c04de86852e3a2dd,2025-12-01T15:39:33.110000 CVE-2025-13791,0,0,e08c12980bc607bebba43166171191e321a125cbeedd99efdbbd2f6af7f05e5d,2025-12-01T15:39:33.110000 @@ -288745,11 +288748,15 @@ CVE-2025-1398,0,0,d83bac3550fc7635b21484a96b732decccb9a75524309113ddbb6574c33b05 CVE-2025-1399,0,0,e8485dd7af68ba8f2d01d51196b9d6a2f2dcf208ff563be9860baa305f6daa36,2025-05-07T14:13:20.483000 CVE-2025-13992,0,0,9f0007ae2980bb83d7a17f7780b64fe51ab519a01a7ae176412e2149c84844c4,2025-12-03T20:16:24.520000 CVE-2025-1400,0,0,9f46a0258b2b238aeafb292dde4996586d32ba094d532a39f75891a9cb5fcf1e,2025-05-07T14:13:20.483000 -CVE-2025-14004,1,1,3c11625c0d0198c256b245b0670c1af334876c006b82dbb5bea14c3ea97b6b5f,2025-12-04T14:16:03.190000 -CVE-2025-14005,1,1,2da7fa559a8ca9019c399b7bc6c7e0b7d06cf0c87f8c25cfb296eabf248c3faf,2025-12-04T14:16:03.470000 +CVE-2025-14004,0,0,3c11625c0d0198c256b245b0670c1af334876c006b82dbb5bea14c3ea97b6b5f,2025-12-04T14:16:03.190000 +CVE-2025-14005,0,0,2da7fa559a8ca9019c399b7bc6c7e0b7d06cf0c87f8c25cfb296eabf248c3faf,2025-12-04T14:16:03.470000 +CVE-2025-14006,1,1,5db3a123c98b8d8f8e9cb7028bc9a75aad495901a59b1f2dcefcc58a489215a2,2025-12-04T15:15:55.557000 +CVE-2025-14007,1,1,98aaeece785c672821b93dab1e781f3bf6a07dfef8c9b83d05954453b55cf17d,2025-12-04T15:15:55.800000 +CVE-2025-14008,1,1,e29dcc0a859e02dddca30476c2250a1a98067225ab70259c96421f98fc4203a1,2025-12-04T15:15:56.057000 CVE-2025-1401,0,0,133011ee6945168c3da00a99f9ab3febf4bfdf6bf9088c02ff1a91a5995f2e5b,2025-04-29T14:33:03.920000 CVE-2025-14010,0,0,900ac4b30aa3b47ceed543ae212f95d7b433c9540bc64bf3281939b110acb201,2025-12-04T10:16:00.810000 CVE-2025-1402,0,0,c23c451cfa1d570fb16b3d38ae224aa085b42cdb084d4b1dbd67b0732fd42aba,2025-02-25T04:04:59.860000 +CVE-2025-14024,1,1,f8bb054a64a2945b281abd56321b57ac54b7ef622fd75a6b25231517034b73bd,2025-12-04T16:16:14.510000 CVE-2025-1403,0,0,bbb0f4b0495ae7d57ce7b9e72e833d3a3c9a0994e3b47ca5f62084e4b62156f3,2025-09-30T15:25:51.423000 CVE-2025-1404,0,0,f39be30144b0a5fe80b4b94433169bbe79b568debe0e45a11fa0a8302ed0e64e,2025-03-01T12:15:34.310000 CVE-2025-1405,0,0,9d1939e7603fe8cd2a4a6b659e6149cd03308d08f69102d0905681145b4d879a,2025-03-06T17:57:54.597000 @@ -289840,11 +289847,11 @@ CVE-2025-20747,0,0,95538d003f02f99574e9e2d8a9505eda9877f65b55ffe149f98dd1b1d0805 CVE-2025-20748,0,0,cd905e02deb1e7af1bf337f5b5262597188675e84264dff24cc608856bfcd1e5,2025-11-05T17:11:14.503000 CVE-2025-20749,0,0,2b6a872edd2bf98d126f05aa1804a670ec9e7462b9449b3285106d43adbf0d0e,2025-11-05T17:10:55.500000 CVE-2025-2075,0,0,68e35a7bbfd211f32fe3ff92575f1208e6805bc12e7db392ccf3410aba9d2209,2025-08-08T20:07:37.347000 -CVE-2025-20750,0,1,03be76e2709c543351aaf7c86570ddb3ff59d106d0600dc434f6bd7eca868b46,2025-12-04T13:54:20.800000 -CVE-2025-20751,0,1,4af744b5fef94b806761af118d52c892af7e76d1345dcdb9242c999d4d86653b,2025-12-04T13:54:15.220000 -CVE-2025-20752,0,1,e4a6909c11bc90bc04542e92a62fe1345e758a793d28bf19c35c54afa633b160,2025-12-04T13:34:14.127000 -CVE-2025-20753,0,1,a7bc4f6deb9a94394603507768bdd292f7ce7f193b77a89e14144191852bc85e,2025-12-04T13:31:52.093000 -CVE-2025-20754,0,1,2d51077c56bd7627288652a6903961c184c282e4aa676911135344dd60712f74,2025-12-04T13:30:07.043000 +CVE-2025-20750,0,0,03be76e2709c543351aaf7c86570ddb3ff59d106d0600dc434f6bd7eca868b46,2025-12-04T13:54:20.800000 +CVE-2025-20751,0,0,4af744b5fef94b806761af118d52c892af7e76d1345dcdb9242c999d4d86653b,2025-12-04T13:54:15.220000 +CVE-2025-20752,0,0,e4a6909c11bc90bc04542e92a62fe1345e758a793d28bf19c35c54afa633b160,2025-12-04T13:34:14.127000 +CVE-2025-20753,0,0,a7bc4f6deb9a94394603507768bdd292f7ce7f193b77a89e14144191852bc85e,2025-12-04T13:31:52.093000 +CVE-2025-20754,0,0,2d51077c56bd7627288652a6903961c184c282e4aa676911135344dd60712f74,2025-12-04T13:30:07.043000 CVE-2025-20755,0,0,5e77ee2ada919addb5c2b456375d87642a851c09912a8e95381dc5601baf0d74,2025-12-03T21:41:18.477000 CVE-2025-20756,0,0,3ef664ec057e23f5a4e0d6421d387a11fc70cc1f4bf9aea4833967bfa43037ba,2025-12-03T21:40:10.443000 CVE-2025-20757,0,0,2ab92031f8d9ad5631a7f79fe1a6fbf85754ffa971569abaf566b09086afd237,2025-12-03T21:38:45.177000 @@ -296390,6 +296397,7 @@ CVE-2025-2843,0,0,214dcdd7051c976d2d603a73db45f7c3a47b4a5fb450a080682c67193edd97 CVE-2025-2845,0,0,0d29244195920304e55232acb4ccd2e6c6cea90daf5fd748ae8ec09c4f450758,2025-04-09T23:15:37.690000 CVE-2025-2846,0,0,69d09b531496633b8223502f02678ba3827a7121dc45ffd626e00eaaecdf3842,2025-05-14T21:06:01.077000 CVE-2025-2847,0,0,dfc3855409f4807fd695a24b95987e54c72465404ec814c52e99da6bb28b51c9,2025-05-28T18:33:14.910000 +CVE-2025-2848,1,1,5614564b249b34fad5480ef288921f6281cb400c8ad278b041a4215516c02f24,2025-12-04T15:15:57.077000 CVE-2025-2849,0,0,6fd02295ed9ceed26fd865e3aceef68048f4536695a0f2f4dafab9de4c9ae787,2025-04-11T16:09:36.090000 CVE-2025-2850,0,0,7a61fe407bb2ecb5a2469496a2ed47b62a24f29630ff9caeea71e3b91277d520,2025-04-29T13:52:10.697000 CVE-2025-2851,0,0,afcce46a15e06b1b4bc9eb376d825514c609838d555c56fd7f796bf11435ff32,2025-04-29T13:52:10.697000 @@ -296968,6 +296976,10 @@ CVE-2025-2984,0,0,6856910f6d465de509adbdfd1a14abe6f1865d640beb12035c173336b2b925 CVE-2025-29840,0,0,eb5a50c2668948b8927a96ff823c2a5a5ee5e3c0e7cb34af87b9ad2ac1b57843,2025-06-23T13:46:22.847000 CVE-2025-29841,0,0,770d6c2c0e5ee243b5d0bc0d8ce799f865ffa860220358b711b0469c7a031be0,2025-05-19T18:29:53.210000 CVE-2025-29842,0,0,a3ed5cb1a08c2b7405fc30cf7fc5bbe0916589e57b977550bb7b3fa8538c4f3c,2025-05-19T18:29:35.220000 +CVE-2025-29843,1,1,0ee79178319c7a7771bf765ede7b558f8b6d0eacc55438131c0b612cc3e24176,2025-12-04T15:15:56.287000 +CVE-2025-29844,1,1,3b69a5d220afd2985b2eb29a2d4dc740b699cf415fb55b83807f28862e049b4c,2025-12-04T15:15:56.493000 +CVE-2025-29845,1,1,abe9283a43424ec5365665fe3e05e480f9b3c8ade807e5334c390a0478f5453f,2025-12-04T15:15:56.680000 +CVE-2025-29846,1,1,9c12d1390ab84a068c3aec5e4e43f3339beacc31d9796b26862f69af04da5811,2025-12-04T15:15:56.883000 CVE-2025-2985,0,0,0776e8bcf19d541e11517567c0d73f7924ca1745683645c0b82317c6340ec04d,2025-05-14T16:27:11.127000 CVE-2025-2986,0,0,2b215f632a1f34475741f55d4a45cf5f01a55bf73bd1c0f51b93e49414c7a101,2025-08-13T00:39:06.453000 CVE-2025-29864,0,0,e30a712345ff813467504d829dc8d022b5202ce59ed3678cbc2e38e5eb32b063,2025-12-03T09:15:47.640000 @@ -303186,13 +303198,64 @@ CVE-2025-40210,0,0,0fdfb56240315629f1bd1b9a5550f4c0565e6c788b9a9512eee887f4b50f2 CVE-2025-40211,0,0,df7bdb8d2b7cd5d345952a5c0342efc0f7e28b6a228dcd3939e46e3092e25229,2025-12-03T13:16:02.357000 CVE-2025-40212,0,0,535d4ff232d22648d0238d97bbf192706c28538d73a0240a69df2c0c0e83ff0e,2025-11-25T22:16:16.690000 CVE-2025-40213,0,0,d07875b32b108f8a8bd4540418ebef860e4e011d530f6351c9afffd1a5521754,2025-11-25T22:16:16.690000 -CVE-2025-40214,1,1,5082b3a550c2bef61b248777d43ed8bd80dce136b10c80ff8ddbc9666bcba9cf,2025-12-04T13:15:48.157000 -CVE-2025-40215,1,1,9e54d2c0e1f17e5ca5a455cb9819f240849fa8e895b6215f007a8886622458fb,2025-12-04T13:15:48.473000 +CVE-2025-40214,0,0,5082b3a550c2bef61b248777d43ed8bd80dce136b10c80ff8ddbc9666bcba9cf,2025-12-04T13:15:48.157000 +CVE-2025-40215,0,0,9e54d2c0e1f17e5ca5a455cb9819f240849fa8e895b6215f007a8886622458fb,2025-12-04T13:15:48.473000 +CVE-2025-40216,1,1,cac0a9250d8b32680ca599fa1bb218bd44af49a7bab9ea6fa15a46127c116139,2025-12-04T15:15:57.300000 +CVE-2025-40217,1,1,bb29175616e4e62aff241ecafa0f2828c0abf49e81b570e0eeae4e99364cc2c6,2025-12-04T15:15:57.510000 +CVE-2025-40218,1,1,bfbfafeac940103eaf3fa67bf873c5aacdadbdea886a31ea585faec3fc899152,2025-12-04T15:15:57.643000 +CVE-2025-40219,1,1,5aa2e3f7e291177296cc27c6fe8368be6fd65f86ff60d6db54e5f5cf4e96247f,2025-12-04T15:15:57.790000 CVE-2025-4022,0,0,a1fba37a4e8699aaf59e36177d278b3021c056ec8c049089fd7303a7bf431c4d,2025-05-14T19:32:08.403000 +CVE-2025-40220,1,1,5af73c601519d6afb2992447bccfafbb78b2fa2703edc11e645a98dbf08a85d3,2025-12-04T15:15:58.033000 +CVE-2025-40221,1,1,a354e19fbbbda918d62f409bbece596f7be8726731a7b1c28daee2f4933387cc,2025-12-04T15:15:58.200000 +CVE-2025-40222,1,1,f11f2a62744531ce6a811a66258f805017550ca02c87d787cda422b1e6218282,2025-12-04T16:16:14.627000 +CVE-2025-40223,1,1,c147eb093bbaa2b35a56cfd9abab17bb40599376ac4d65ee78af3819380fad20,2025-12-04T16:16:14.767000 +CVE-2025-40224,1,1,4f84b606151bcfd84b6eac17aab13c6bbfc34202f6af78cfb7bd2fa75417b0c7,2025-12-04T16:16:14.917000 +CVE-2025-40225,1,1,5acd2dd0cb9b51e86e54b24352b7e5c5d7812ed7ec6231ccf6e18bf5cfbff799,2025-12-04T16:16:15.043000 +CVE-2025-40226,1,1,33429416639484c3a22670ee85afcc46d6df219b377999cadd19fe398ddb0da2,2025-12-04T16:16:15.197000 +CVE-2025-40227,1,1,c8fef1c617319471755e46e08a929113cafa4d070f32913c699606c985cbb7cc,2025-12-04T16:16:15.333000 +CVE-2025-40228,1,1,f4e09f22983ae7f236c00434c0b15f9828a51f14d291a01562902b8f6cc85191,2025-12-04T16:16:15.460000 +CVE-2025-40229,1,1,3b5ca2652ba44a622be3afa1560b266922f187795ab0d998fead5641fdebb83d,2025-12-04T16:16:15.583000 CVE-2025-4023,0,0,a592703d0ef8f645af6a0508bf1e4e13f9643393aaa2ef4770783033cc077483,2025-05-14T19:02:53.387000 +CVE-2025-40230,1,1,2ee42a788713207ed9101beb29d91972f700d29ed0a2c52cf06ed5741f4cced3,2025-12-04T16:16:15.720000 +CVE-2025-40231,1,1,189775745148551dc8f67d86cc7ef0b12e9bdce7af9b2960442f35498c7138e5,2025-12-04T16:16:15.870000 +CVE-2025-40232,1,1,151b1f14751afba2ea55effc79e7ae4986f630a6ace913b1e8dbc32f8f6d501c,2025-12-04T16:16:16.013000 +CVE-2025-40233,1,1,93b600d2ffc002413497b6a599a4a068f9c7b15a1908606248d7ea9b32d3ffaf,2025-12-04T16:16:16.137000 +CVE-2025-40234,1,1,aaa205a55736d411e18b1b79a7026d4e79e2486d08193338f54d0d65d972960c,2025-12-04T16:16:16.273000 +CVE-2025-40235,1,1,20fa177f4d7b805916703cea9b0372c24fd824ad18aa9d57ac76562b676e8b35,2025-12-04T16:16:16.407000 +CVE-2025-40236,1,1,1cf0af4fdcfada85807589650d15b6c08593e907eeded1449728431cd4bedf0b,2025-12-04T16:16:16.567000 +CVE-2025-40237,1,1,3bbc6ab2c9590b7d72de4fc832f31ef7ec382fc92b4ec72cbc456685ca9a65ab,2025-12-04T16:16:16.697000 +CVE-2025-40238,1,1,99999bdf28c6fd6f8ef8a121018f0ac323350bbb812eca0057abafe4e91f0dc0,2025-12-04T16:16:16.830000 +CVE-2025-40239,1,1,be9b8a020d443e07b2da2e02912d72778d96820d0e9240578674ba787037948e,2025-12-04T16:16:16.963000 CVE-2025-4024,0,0,51d2aadaef1787c43205dd3a26db8f1f59a78292def543fea6c4eff7af3b3357,2025-04-30T19:55:28.690000 +CVE-2025-40240,1,1,8961c0cedd61f1e96c42f54b52178ef82f255fe81239189bcf87c56e84fd3b39,2025-12-04T16:16:17.100000 +CVE-2025-40241,1,1,e96f8600ac9b8e7bab1375a67816d4fdbcd83374ee64259712b9a115af03fc89,2025-12-04T16:16:17.250000 +CVE-2025-40242,1,1,311d37bc262c5e0cdd8cc6e45b3bb699e814652ace6f2b0c1e999a731bd54d88,2025-12-04T16:16:17.390000 +CVE-2025-40243,1,1,8972a9b50eeef75d191619240a13124140b653726b0c9b76f92a51fbf4cffd4a,2025-12-04T16:16:17.523000 +CVE-2025-40244,1,1,3e6b1d0e22cb23699a87d2e99906c309ffb7bf0880e146d05daa9cd777bc526b,2025-12-04T16:16:17.670000 +CVE-2025-40245,1,1,5f2f298f45871c34ea32a7cf5f5fa3c0df57919a7f4f364390f56786b6e7ec22,2025-12-04T16:16:17.827000 +CVE-2025-40246,1,1,f292cb214fe35b5eae21ed13e80b993bdd6de7614f1374d29ab815660007206f,2025-12-04T16:16:17.970000 +CVE-2025-40247,1,1,f9e5afc9acdd4caddf8ad5bad68d7595b3243ed9d9447dd7941d679a6af06c2b,2025-12-04T16:16:18.107000 +CVE-2025-40248,1,1,621b33372c43f8a2bb97578237bfe3a02a77ff48ae770e476e2dcaa62b910f9c,2025-12-04T16:16:18.240000 +CVE-2025-40249,1,1,5e8e2b3808d93410505e56acfe01f304f7d0710974abc1bf27c81b7829bd8118,2025-12-04T16:16:18.380000 CVE-2025-4025,0,0,fdb9397839d24231984d6fd8388d95b4eaa67ef5893900c4575f5927c6dd287e,2025-04-30T19:52:29.283000 +CVE-2025-40250,1,1,f63b5efe77b130e605ef9c1a69cd9e0b1fe189ad5ae5597df7deb33c88302b68,2025-12-04T16:16:18.527000 +CVE-2025-40251,1,1,5e9869ca0f1fc5e454f4f0389307d0be78a95e7b368b3ec0c2edb6b1b1a30745,2025-12-04T16:16:18.663000 +CVE-2025-40252,1,1,d7f45441bfcb953490c9c780a8e867d98ece38a0ce0f6b2e141a687a6daec4da,2025-12-04T16:16:18.807000 +CVE-2025-40253,1,1,cd2c6a7dff321a60c384a21ce9831f6954133c916ed0079e79b02d7983d4b229,2025-12-04T16:16:18.937000 +CVE-2025-40254,1,1,2e7c759c815038cc64d711ef3ca527af5f6b0c7ea8cc22b8218b9227588dd86a,2025-12-04T16:16:19.080000 +CVE-2025-40255,1,1,0764eee52d6305c9fd05b6147e03990a6d73f817dee16c95d5a4dc17648f0e1f,2025-12-04T16:16:19.227000 +CVE-2025-40256,1,1,18f8e78c44ab704e5beb8723d3f7edd8c56f58376982edf3b9914168431f666f,2025-12-04T16:16:19.367000 +CVE-2025-40257,1,1,862d3a09ab4dfd35ba34c6f98809bedea9ffa9cb4aba8b8f1ef5edc1c3a8e9e4,2025-12-04T16:16:19.503000 +CVE-2025-40258,1,1,8acf1e4d6b4a7b2b1ab2c00057633ecfde140b5828de3d2ed6627f881451b4ca,2025-12-04T16:16:19.640000 +CVE-2025-40259,1,1,880d36beaf1dad462ee82b4f673bbda823f078892b1f20d68d0e15fd237d85a5,2025-12-04T16:16:19.790000 CVE-2025-4026,0,0,ae0b07b3a3b89ebd0df18218a1139546bcf8b54b568372feb06ed2e1b2b53f2d,2025-09-30T15:50:41.097000 +CVE-2025-40260,1,1,9b6e86f3c33654588a43e2f2e05956b3e3d234de7d115083a8c033410b44b655,2025-12-04T16:16:19.927000 +CVE-2025-40261,1,1,ba41da60fbfd3bbe6bf6e173a0272654ac330cd84700306d3dd9404d47a754d7,2025-12-04T16:16:20.053000 +CVE-2025-40262,1,1,b2747c1a8dbd7eadbff41ee3c20e9ccf12b9f7aa001fe2071da6958fa0f2753e,2025-12-04T16:16:20.200000 +CVE-2025-40263,1,1,f1e75f6e2bd085551c7c955a0e1e70bc0cf59242388ca1630aff58aa72153b14,2025-12-04T16:16:20.340000 +CVE-2025-40264,1,1,5ce6bb5f9685e6419179a58b6aa9e146096f53be6f72059abf0d8c3453651aaf,2025-12-04T16:16:20.510000 +CVE-2025-40265,1,1,47de939afe0592fedee687f53b72d635173fd183d92731ad360e44f6679a91e4,2025-12-04T16:16:20.653000 +CVE-2025-40266,1,1,d28746a54757a9cad89681544c0de33772941944c042247aa0bf735a9af34038,2025-12-04T16:16:20.787000 CVE-2025-4027,0,0,86331e57ccecf1fae9d0cc0baebb4281a8160f843c30036be646a9e7df5b2dfc,2025-04-30T18:11:46.973000 CVE-2025-4028,0,0,1400843b2e8ec36049e376020ba888b237dcb1c526c84a46253570f428e7a927,2025-05-10T01:03:18.940000 CVE-2025-4029,0,0,1f7941aa3edebf77d89ea801c2e3ad8b75e287fa61c79b8111a89e7b882b5d46,2025-05-10T01:03:07.433000 @@ -310595,6 +310658,7 @@ CVE-2025-53957,0,0,c6027411c852658cf0f799ca0ad3fc6a9f9d4613030ada6f3b1a6fd24a330 CVE-2025-53958,0,0,848a4d88d49efe3b72844c66e726cb2a8cae2322f68355a3ac0990379bf0329f,2025-07-16T03:15:22.727000 CVE-2025-53959,0,0,55084e11690eabf4d77f92c72300b96c79895785755cb66b338d5936577d1c12,2025-10-14T14:14:50.700000 CVE-2025-5396,0,0,7a43f31dceac2ea398188984109c158b0906a292e11df62cd3b55e539804b20a,2025-07-17T21:15:50.197000 +CVE-2025-53963,1,1,b75abdcf9a34ebe9f85c2b14853fb8dfac44e2ebd62bd05bfb1fc95e3a787080,2025-12-04T15:15:58.497000 CVE-2025-53964,0,0,60346e61dfb171a70ac76d0fc48344d27635a5bfea3feedf943b9a0193e0f1a4,2025-11-06T16:43:59.190000 CVE-2025-53965,0,0,9161a91d5e8e5babdf319e60f680bc3713d347289521ceae07cf535e00ccc4c3,2025-12-03T20:16:25.443000 CVE-2025-53967,0,0,0abffc97491f27663de40c231cb88e05be9f92c3d4332b49bb5e65cd9c1b762c,2025-10-08T19:38:09.863000 @@ -310677,7 +310741,7 @@ CVE-2025-54053,0,0,e9e9459393609e57214e24c621c9cdd1763f894b6c4ba2fad91f796a7fd99 CVE-2025-54054,0,0,4dc38e397668595d8f02e8d92126e0bba8dc9783e9ef84ce397f6b1a3bfac661,2025-08-15T13:12:51.217000 CVE-2025-54055,0,0,47384fbb326a4a0000a75f3776efb052f4e07d4a72d80c10f2b26b455b745b95,2025-08-20T14:39:07.860000 CVE-2025-54056,0,0,ab5ae4acbb7d3cbab42b0598214f8fbdfd6a34b1f29cb0e3f3c6cd69a05eafc8,2025-08-20T14:39:07.860000 -CVE-2025-54057,0,0,99e5fa71eb3dc8daba5e9ffadb6e182749d961030eb05e79de72372df06d5a55,2025-12-01T15:39:33.110000 +CVE-2025-54057,0,1,05b79f33c3f72d3e93a3fb00c0a58d52b2cfd3e98c055e752e037b4ecd528338,2025-12-04T16:48:40.947000 CVE-2025-54058,0,0,54551bc905d08b35a9b59ff13f5d0f99cd06faa4c1f52db375d128cc426401f4,2025-07-30T19:57:36.920000 CVE-2025-54059,0,0,e7521325b784a60b8cf1ab44bee4a9338b70e573bec3931de470ea881a7e4eaa,2025-07-22T13:06:27.983000 CVE-2025-5406,0,0,509a344dc50e4611e2c15df30ada69259995c2180af6d40ea08b78d9fd22fed5,2025-11-10T20:43:07.087000 @@ -310773,7 +310837,10 @@ CVE-2025-54145,0,0,b3e70cfb238895c3c5f455fe7fa1f660e0f084ef273410fd8f8a58036fd7e CVE-2025-54153,0,0,fac33693510907df6dbf49438be4fbc3e6f201f4ec3cacec38b8aa0f0a18859d,2025-10-08T15:58:30.100000 CVE-2025-54154,0,0,800cae83d6f05631275dc4b1e4a8b3f0773c3a4d118139dfd39aae116146d509,2025-10-06T14:56:47.823000 CVE-2025-54156,0,0,6f1b93982eea73840e699c74da1caa76bc81124dffce5f0b5625bc9645b5e782,2025-10-17T17:28:02.640000 +CVE-2025-54158,1,1,6733cb66d7e11e9d02de98936e59f299893f0e41fb9485c3f0fdccc423d7bf92,2025-12-04T16:16:20.923000 +CVE-2025-54159,1,1,b49bce2e49ab98d06ea2d7021251884998790d72033ffc0509cc0cbfa043bdc0,2025-12-04T16:16:21.133000 CVE-2025-5416,0,0,b82749d7ca9856153fe0f0d922382aca2b21723eb74d3681d14135f98db22b28,2025-08-13T13:44:11.040000 +CVE-2025-54160,1,1,bba9e007239e346e89215fbd8f11da5ecca81c980770418497937e71154d49d7,2025-12-04T16:16:21.343000 CVE-2025-54167,0,0,17eebd45f8ff02754f9d9e7852c4f803f65a183eddb8d00a471ee556851f2a51,2025-11-12T16:20:22.257000 CVE-2025-54168,0,0,570e9ba48a4de26dbb03c018f18444514848e2760659995331b152d42db099b5,2025-11-14T20:13:07.527000 CVE-2025-5417,0,0,53137a57207257d6089e3e7d51f8ec8676d15dfe76379ab1ff5facd53eb97b0c,2025-08-19T16:15:29.083000 @@ -310907,6 +310974,11 @@ CVE-2025-54299,0,0,9793b7aa54430962decab0c3754dac5b83a52d973c460f34b28f9b87f6a90 CVE-2025-5430,0,0,0eb1babcf8d1008ba0c4b518e797e8a418d268a1c98e13323c1d397172d29254,2025-06-16T16:14:05.270000 CVE-2025-54300,0,0,8cec3ca9f9a96fa71193f61bdfa36478c06c29216a44a54cdc6cda887ba02f25,2025-08-25T20:24:45.327000 CVE-2025-54301,0,0,17ad6536abe38547a410588f094513e079e508c1dddab13a8ec8e613fe1d66b0,2025-08-25T20:24:45.327000 +CVE-2025-54303,1,1,40b631942aaad527e162744736ffc9a6786a844835b35a3aa297fd0c5f09afec,2025-12-04T15:15:58.633000 +CVE-2025-54304,1,1,be2b2e6b27e808163ccfe80c9cb951876d6294c44cd801257b9ea8d0ddf902a3,2025-12-04T15:15:58.773000 +CVE-2025-54305,1,1,48b775ce0ba24da4804f5b25898d725bd08f1c644cbb6910f8beea486cd3fce7,2025-12-04T15:15:58.893000 +CVE-2025-54306,1,1,c2d27cbbaf77a7942746b8a030356e46980164fb67310c2c0b3d0dd527518ca1,2025-12-04T15:15:59.030000 +CVE-2025-54307,1,1,91eda97b4aa37fb552633d16a285dcdb34166010519d3d07f4baf8e85fbec1da,2025-12-04T15:15:59.163000 CVE-2025-54309,0,0,f2e43713aed523fb3507d7a8f6c5bb499c0e000ee1c7a8b1c1b88cc5aeb059b0,2025-11-05T19:25:42.887000 CVE-2025-5431,0,0,f5ef4b2894d947be9cba680ed0279161886dc4fb2bd6b3b30f2bbfb4395270f6,2025-06-17T18:41:10.970000 CVE-2025-54310,0,0,96191045516375a6c2604dec6e3f974f3c13a0a5b210d2ce86f15c7ae9f4d800,2025-10-09T16:31:53.473000 @@ -312181,6 +312253,7 @@ CVE-2025-56413,0,0,2075dd38f02707fa5a26efc685ddcfe26b700f0df8227f33465e4613f528d CVE-2025-5642,0,0,07bc4ff6bdf6624bf56957684ab53a92c9369b191efa0f5f0ccbb572aed8a52a,2025-06-23T14:38:11.337000 CVE-2025-56423,0,0,cecd0bc8a09b9defbec0277d2a12167d4f51a1963000b46aca5608340361f759,2025-11-28T16:22:11.870000 CVE-2025-56426,0,0,1e6d230143e3582cb8f7de2fb755090ae125515d570ec7b708bbf77c9915c3e6,2025-10-30T14:30:40.043000 +CVE-2025-56427,1,1,dc25ab430d5a94a8a5f10828f68b3f4192bdaaa77418d69635fb66fbbc138da4,2025-12-04T16:16:21.553000 CVE-2025-5643,0,0,bdc7b71238ce4013f922d9b127c18310da265916fde136924493a6a34126de7b,2025-06-23T14:38:25.483000 CVE-2025-56432,0,0,6cb134ba3b0903f499af51c4e06e0b41a61258fd7565bcb993cdc51f63c5e0d1,2025-09-09T18:56:36.227000 CVE-2025-56435,0,0,e9edc4bdf9732010fb8d9d799722ad21b766cae4ab809fdbc67f76a52a87e6df,2025-09-09T15:59:26.683000 @@ -312372,6 +312445,9 @@ CVE-2025-57203,0,0,64a751710e725b04b924238673d30ad56587b462a36bbe5ed04598a6dd6db CVE-2025-57204,0,0,5de34bf0179ab689b0025cfb7a37c2e60b36eaea197ce8b07aeded2f77e1398e,2025-10-03T17:45:38.487000 CVE-2025-57205,0,0,a624d05afa298e0a7a1348f5283324b987a9a78a43caca4fb0b8f47444b5670b,2025-10-03T17:43:02.160000 CVE-2025-5721,0,0,4ddda3f968a454880e1d4d2d60023785a79773dd304728c3bc99e6ee61607aec,2025-06-10T15:47:37.680000 +CVE-2025-57210,1,1,83d1addc2186b4fdf8697a0512b5e8d30a05b5530172286d1ec6e269e9019be0,2025-12-04T16:16:21.700000 +CVE-2025-57212,1,1,5bef5a962d60a35ee0eb9cfb0848e0b0b48e2e0e2f3a08bfa6eae8fc8f5e7471,2025-12-04T16:16:21.833000 +CVE-2025-57213,1,1,0b48e07e372fb4ab764b3c2c9d0501cb713ece45b16098778f00a761bb6aa8ed,2025-12-04T16:16:21.970000 CVE-2025-57215,0,0,d9628d56589f2bc564b0294004bbdc1b1d07b76d52852572c78a3efca5341ea7,2025-09-03T16:11:17.773000 CVE-2025-57217,0,0,08ab8188764e9734f054eb1bfcc3e1b26a7794bf2e713292cee73ed12fcbc502,2025-09-03T16:11:31.440000 CVE-2025-57218,0,0,b3697e24bc3dd112ffa8bc450d5fe46d978a2e439f366941c416710aa5c6945a,2025-09-03T16:11:25.347000 @@ -313873,7 +313949,7 @@ CVE-2025-59377,0,0,0fceb6b4f100d0c2621644e18e2bf6957c3478559dcdfb413d1b52101e858 CVE-2025-59378,0,0,878e21f797c371da1a3f9632f6b0486ffa022755d793b2284fac75e910277283,2025-09-15T15:21:42.937000 CVE-2025-5938,0,0,b6370a8ee6e55a05b9d36025efbb828d7f040b696ea507c90e27727b74cb24b3,2025-07-10T00:38:09.650000 CVE-2025-5939,0,0,fae4e42cb7ec096d2eda48ac42042deaadc4d81bda29462ec7008261e2cabbf5,2025-06-16T12:32:18.840000 -CVE-2025-59390,0,0,54ee60a67c7082cef49cc41af525036a185c17c757d70e7484914a32ad8a1416,2025-12-01T15:39:53.100000 +CVE-2025-59390,0,1,ce75421de2f1ca50cea88a87895b9a7d34bbd2c59562ddc123ee977d147bfc07,2025-12-04T16:09:22.300000 CVE-2025-59392,0,0,97d41f111ef331a37fbb5b65d41bd253cfbe81eef38a28d510cc4b9bd40bdd0c,2025-11-06T19:45:09.883000 CVE-2025-59396,0,0,25ff92a0f46efa52546709566a5e844a2ebb9b5ba71f08cf3826214473e19eb5,2025-11-10T23:15:41.620000 CVE-2025-59397,0,0,b43c63789bdc165da79e61b73954c241435b8c1c1b068003c2f30af1d7375741,2025-11-03T18:17:00.883000 @@ -314836,6 +314912,7 @@ CVE-2025-61136,0,0,63c1fe05f94f27b6871aa887b983f5b7b79c9236df5dad4fde69bceb03986 CVE-2025-61138,0,0,49fca8d8ca7988e240a1b3451d6c4ff5ee6c69870f58e97ccf99816ec1868bee,2025-11-21T16:16:14.330000 CVE-2025-6114,0,0,a5a1fc96e35eee24acc4782ad200c5dc760c08b01c254701514c850e1da2af86,2025-06-17T20:32:17.510000 CVE-2025-61141,0,0,b32a63b019fb502e4df838e5bedd8da8d6dbda5e470b178a678f176dd793b0fc,2025-11-04T15:41:56.843000 +CVE-2025-61148,1,1,88e1b8305866108c752f0eaa934a321543271715a17a9f4267b03c134175f984,2025-12-04T16:16:22.107000 CVE-2025-6115,0,0,af077fb1bef81f56ac7ab650236e0c91f9462b0467974cfad475a819f130e356,2025-06-17T20:32:10.530000 CVE-2025-61152,0,0,af3346fa48b7abe88505b603ee180d4688757844e4e6be1879522c79e880b407,2025-11-25T18:15:53.043000 CVE-2025-61155,0,0,9779d9b0ee0995cb20b4ffaa53ef38c78cf08a890e87d06233b61f844bdcc391,2025-10-30T15:05:32.197000 @@ -315333,7 +315410,7 @@ CVE-2025-6218,0,0,0e265a89cc2a3bd08feb5d5cbdea0ea20f815a5e3a21352ce4021a3ae0596b CVE-2025-62185,0,0,23065d25d19006ec9ce0e7971490917791cb76b8db15150199dfb8e6295a3113,2025-10-10T16:21:24.813000 CVE-2025-62186,0,0,03751ea1dcd8c89ba993ad0cb3022dc40184343b0b2c27930bbff8334d398f17,2025-10-10T16:20:53.197000 CVE-2025-62187,0,0,0dc556ed1ccbcd83f3d743688420ee466016c258b1cba268f451585ff9b039e0,2025-10-10T16:20:13.313000 -CVE-2025-62189,0,0,5f42c1bd84c2fe43f90479a3f0504b73e0dc0f14435b11e09b46c2005b5795c3,2025-11-21T15:13:13.800000 +CVE-2025-62189,0,1,b1388397031aba0d387ac136f02772bb9f8bdf3ada6b2c8c67fc164d9bc35608,2025-12-04T16:30:38.350000 CVE-2025-62199,0,0,8ef6995ba2d58ea9eab82e64bde48e71306d1575153a94c5537531b793ba9bc2,2025-11-19T15:15:49.570000 CVE-2025-6220,0,0,e66f072c85720461fb3cacbee4402aeee35c76d5a4e75aa47105eb50b7753f18,2025-07-09T18:49:50.567000 CVE-2025-62200,0,0,f99b41200d2e4b8acf18699ce0bf474bb35433fe345606bbf67cd4453a2e10db,2025-11-17T18:01:59.723000 @@ -315700,7 +315777,7 @@ CVE-2025-62724,0,0,3da1fb4b0371355a092d683658ad02b19097fc2138e3f2ada56b9842cf245 CVE-2025-62725,0,0,20ee35d109619b84e168a6ca94288ade1ffd79591c081462c3c919f854ce0283,2025-10-30T15:05:32.197000 CVE-2025-62726,0,0,46f9cb2b8e1946c29cd401e65c80606f5a7ef4fcd1a045f5bc576b237579244c,2025-11-04T15:41:56.843000 CVE-2025-62727,0,0,ee45c642db070ed29854f756bb902966037f607edbf636d4de7e5ef2bb4cbd54,2025-11-04T18:16:45.480000 -CVE-2025-62728,0,0,cbf454c124b13e3977c838814936ea86467d4287c16463afce23eead4e6f4e2b,2025-12-01T19:15:51.180000 +CVE-2025-62728,0,1,11251a91a55ad7303d9e416da52a8a6c54ab85f47f94b9ec4b06a1887643b476,2025-12-04T16:46:46.587000 CVE-2025-62729,0,0,b98bf878b65b862912754cc82d841d7c5113366584f8f3cd74af60ba98a4dbbb,2025-11-24T13:52:24.263000 CVE-2025-6273,0,0,7fbd43be0636c447274ca5dd224661b382933a1bb0936c93b976e34f99babf3b,2025-06-23T20:16:40.143000 CVE-2025-62730,0,0,c04bc08ffabb612ddf969d9689e1768016be4417a08056e1f52b595505ec6395,2025-11-24T13:53:07.567000 @@ -316094,6 +316171,7 @@ CVE-2025-63678,0,0,c2f4b0a920b217addc4f0d29db833da7ecce835f0b86cb787ae5040b7ab82 CVE-2025-63679,0,0,b846b6d3322a05c9860673b5a9f224518b27f0e23691e5e1b3fe590a7ac806d4,2025-11-14T16:42:30.503000 CVE-2025-6368,0,0,126289802a5d0156ea451f7d958f55128ca1a1dddb40c6c6124f3221f79d35cd,2025-06-25T20:09:17.983000 CVE-2025-63680,0,0,174b3190484f45ff37c9b2a5ab3b871b9b304edcb6070dd509dec2de46a86ccd,2025-11-18T14:06:55.963000 +CVE-2025-63681,1,1,88be12483c5d5a96809faddec39b4dccb74e7e9119c8bca67e8cadec70b5c7d3,2025-12-04T16:16:22.447000 CVE-2025-63685,0,0,07601a327667b884c9fe8b467e3cd5faf817af38e0ef0887e05aa324353e1611,2025-11-21T15:15:52.747000 CVE-2025-63686,0,0,5706e409c84f3263a077d49029d90d5b0029aa83dd01bf8d5b66dfc658a10195,2025-11-12T17:15:38.890000 CVE-2025-63687,0,0,48b74a8f19813e4c448920295cc80cefabe0694d5fa2586e6a8d78fbaae2bf88,2025-11-12T17:15:39.127000 @@ -316525,7 +316603,7 @@ CVE-2025-64507,0,0,82ef62c09d62ac8ffc7fa3ade8dbeecdcee425bd90c0a78659de4c8422900 CVE-2025-64508,0,0,2f2724c7a80afba45e7750618373a3365b4d6a59a6bea36504d2594cd3d6093b,2025-11-12T16:19:59.103000 CVE-2025-64509,0,0,62316880220b5c27509c250c1e8031d58b5cb87ee3d8cb6bc508e3bef89b12ae,2025-11-12T16:19:59.103000 CVE-2025-6451,0,0,162dfc485be6ca55857229be75d149bc38483963a4257e9cc9bbd68d0b7a876e,2025-10-23T20:06:00.793000 -CVE-2025-64511,0,0,3cbb36ec6f9721df3e904afa4150983593860fae52549e5e868881b6bad28282,2025-11-14T16:42:03.187000 +CVE-2025-64511,0,1,f78a5ce31200307ab074a3c8fa9ee987eed6b64ae1b81667cebe084869c21375,2025-12-04T15:13:37.387000 CVE-2025-64512,0,0,f063ad6ebc77f0fcb6aaf08f4d4bc590e223b08c7d38f4da36e88416064a1a22,2025-11-19T01:15:56.897000 CVE-2025-64513,0,0,ee23f96382904014e0ea242865de51c1f0275543b32be326f5963b829c186d45,2025-11-12T16:19:59.103000 CVE-2025-64515,0,0,f27831e9cd7677d37bfb666c975a54b6bf405f725d33570364e9554c3be68ec2,2025-12-02T20:39:24.463000 @@ -316575,7 +316653,7 @@ CVE-2025-64690,0,0,dfccbcc414ceb67a7b956926b5e4fe336adf78e47d58170105a4cf637fb5d CVE-2025-64693,0,0,768b679909a6756a64f3de196685c3536412b18aebbd0edc3d7cb554e469f860,2025-11-25T22:16:16.690000 CVE-2025-64695,0,0,8450aab251061862923f9ed27f8b849225933e8e3ea8a84431a02e6940ee349a,2025-12-02T17:45:38.433000 CVE-2025-6470,0,0,d936e13b78f915da134ff47fa6c3b0ce8e10f680a7830df1f48298672cd185e1,2025-06-27T16:55:15 -CVE-2025-64703,0,1,a0fcec35be22069a8cb7a050281e917871e0ecf4ba7df88c3f2c8666b22d5adc,2025-12-04T14:55:30.200000 +CVE-2025-64703,0,0,a0fcec35be22069a8cb7a050281e917871e0ecf4ba7df88c3f2c8666b22d5adc,2025-12-04T14:55:30.200000 CVE-2025-64704,0,0,856faa21e6f56b276b31f0a69fa22c934118861432635a07971566eaefe01aae,2025-12-03T18:50:20.670000 CVE-2025-64705,0,0,ce297a25f5b2285ef592d9181e8824299e24e2cd0b489060d2dd49dd58f5105d,2025-11-17T19:21:31.943000 CVE-2025-64706,0,0,2c4717e469c2e0ad4f00c8d7d882e69edf3a6bc895bbe8606efe76dc742f22a0,2025-11-14T16:42:03.187000 @@ -316589,7 +316667,7 @@ CVE-2025-64713,0,0,6cdd9590bc9f882dadcda5f2e7a2a87e80b26b62878ea17ef06874798e11e CVE-2025-64714,0,0,484c8a723153aba71aca635665ddc8d6a6f07d727847283d66402a9cfafdf4ba,2025-11-14T16:42:03.187000 CVE-2025-64715,0,0,5f5663853703b251de08905aaa0481dd192931fbe19ac3459972de28c47e59f2,2025-12-01T15:39:33.110000 CVE-2025-64716,0,0,4509f4ced899bf34ff7ac04e0fa3722d5a6c0ad799dc5b5eb5492bb963cac4ed,2025-11-14T16:42:03.187000 -CVE-2025-64717,0,1,29b171ec8b333fcda0182a9a01868f607e053fc782be539bcbd0f3c365ce6ef7,2025-12-04T14:39:53.937000 +CVE-2025-64717,0,0,29b171ec8b333fcda0182a9a01868f607e053fc782be539bcbd0f3c365ce6ef7,2025-12-04T14:39:53.937000 CVE-2025-64718,0,0,73405722697a7dcdccb37ebf1ce62a66d88a1730ce10dc480e91edd75a354144,2025-12-02T19:33:03.310000 CVE-2025-6472,0,0,c97da6600cdcc39f2ef6e7ee5beb7c062c2fe0bce6f28aa79dd4ea5cf615cd9b,2025-06-27T16:56:41.610000 CVE-2025-64720,0,0,41a30021625d24fb4819a4a696603a289f0a04b8849dba287d8f245775ee85f2,2025-11-26T18:35:18.253000 @@ -316765,6 +316843,7 @@ CVE-2025-65320,0,0,7226ff72b71a48aba1998b2b6baf77c31335355b510f64f6159a88ca4a624 CVE-2025-6533,0,0,b3921245bb27860a41fea9b6818d3509607f218655b1a541e6cdaf4f2d01b5ff,2025-10-01T19:48:18.620000 CVE-2025-6534,0,0,13e71e65e4975da082aa90ac3032c75b6b718bf254d9353bced1b9990a1a7a3e,2025-07-09T19:08:31.183000 CVE-2025-65345,0,0,06c6bd995e343d57b02c2a9ea0ea56b3ed9aee7b1d7ce01f3afe44f0cf057e7c,2025-12-03T20:16:26.440000 +CVE-2025-65346,1,1,ceac5262ab16cdf915361724b803eedf1fe409ea0a1de4cbdb5a509296c1f682,2025-12-04T15:15:59.377000 CVE-2025-6535,0,0,405fb92d1d7e27a3beee8f305a197b3fa3db311b5a7300751657963a68d55107,2025-07-09T19:08:02.033000 CVE-2025-65358,0,0,dac2939503f1359cde98adc09867e375872605af13b33758d02fa7c1bcaca9be,2025-12-03T20:22:29.533000 CVE-2025-6536,0,0,bd4abefc70387d924c3e572721c1a2fa7652203fc239516c5a7622b44e3bfb00,2025-06-26T18:58:14.280000 @@ -316801,6 +316880,7 @@ CVE-2025-65501,0,0,e149450240f4117565b2ed9ad28b5f143ef44efb87be4e6441c3138d9336a CVE-2025-65502,0,0,5cbbf79a3dbab386ee7914d45b4f56eba4a851a1d7f8cd1b1e05fe778245c4c6,2025-11-25T22:16:16.690000 CVE-2025-65503,0,0,a8c582dabe00d1462b7e62c8ad05d4d9d70330e22480ee00885a37f88b8d03d5,2025-11-25T22:16:16.690000 CVE-2025-6551,0,0,2a94174e2614ca3546b6a5e525dcaf472420d11762377d8f50c13a66a36f8364,2025-07-08T14:26:00.507000 +CVE-2025-65516,1,1,665cadc1003d58faab30a152bdb3cce5a84edc7b7abb2f845b57ece356220029,2025-12-04T16:16:22.593000 CVE-2025-6552,0,0,8717beff1ed0b4c67a4a3bc77f60be53e5be3c4b231cbc45b02cbdea4703f774,2025-06-26T18:58:14.280000 CVE-2025-6553,0,0,2f657b7cf03c956e81099e116609231d2b204d14068050f3d7e21b7f1555e8f6,2025-10-14T19:36:59.730000 CVE-2025-6554,0,0,5d72c12e992174f6f54b2ed11e97142dc2ff5e9e77af0268f61959dbaab5db33,2025-10-24T14:11:20.707000 @@ -316872,7 +316952,7 @@ CVE-2025-65940,0,0,d30975f6fdc089d2e29ba40e541abd76c6a25bf8cb57168d82a27e067e3e5 CVE-2025-65941,0,0,9b3e00da91dbe6388595035ed33ef98ac9192f2c257c088a7678c4156a9ec736,2025-11-19T04:16:06.130000 CVE-2025-65942,0,0,be628eb2425cee8916058ee49f58df6283bf04c804616ccf5d5a70c346eda56a,2025-12-01T15:39:53.100000 CVE-2025-65944,0,0,4ed28096a1016dfea7b038dafffb159fb8530fa9cbac7e2bec993ab42a1b82dc,2025-11-25T22:16:16.690000 -CVE-2025-65946,0,0,8da4085405408aa4154470830efb2e6f2543c20d5e946293419ae528359a1eae,2025-11-25T22:16:42.557000 +CVE-2025-65946,0,1,8eaf087dd599486b9cb8f730e5f0f2d698be8bb58068b6fea0340bc3f498c265,2025-12-04T16:02:39.733000 CVE-2025-65947,0,0,c25fca1448812ec30bba47c292f5c3cc72207c468d1e8c2bbe666cdc9e8d0164,2025-11-25T22:16:42.557000 CVE-2025-65951,0,0,b04401856c716c430b0d31f4bbce0c4d958dfdec4e5d672bf89ca4a20c3abe22,2025-11-25T22:16:16.690000 CVE-2025-65952,0,0,89551dd82a165567eaeda23e3319dcff6a913ebe3eba482116d19b25c3ccd0bb,2025-12-01T15:39:53.100000 @@ -316913,10 +316993,10 @@ CVE-2025-66053,0,0,b39f1cc66001dd029d8ac40f45f2e267f2438c72d64903e517ffea5e6f153 CVE-2025-66055,0,0,cb96125b22d0747b7077970fe477bc4151f2b194931f416e2673dcfd80bf94a6,2025-11-21T15:15:55.743000 CVE-2025-66056,0,0,c93fbc7a6a70ee117e94a70327766ba2039213fa921ac6b8e6d1cc303d45210c,2025-11-21T15:15:57.057000 CVE-2025-66057,0,0,56d59fa820ff290b21bb0c0fe5993df082a9b9d9206ddcb5cb8b604f61d38e03,2025-11-21T15:15:57.640000 -CVE-2025-66059,0,0,23e8de5ddf8ba67e13e9fac0848040a40951e5c2e3a743121f0e5cdfff5cd8d7,2025-11-21T15:15:57.923000 +CVE-2025-66059,0,1,f2191cce041c2aeee393d7a7bcaf7285cb77143a5c66fd8f599a5663be90b2ef,2025-12-04T16:22:39.440000 CVE-2025-6606,0,0,95377cc9129cebdaa5f3a34697e72c1a75fc693f2083fa64b9fdb2a4aacce7cf,2025-07-02T16:23:44.753000 -CVE-2025-66060,0,0,bf59e54fa5721cc660b803ed1e985f5f85f9b0c6f0741cd377a09d51c8f5b2b7,2025-11-21T16:16:15.210000 -CVE-2025-66061,0,0,812f172cd755424fa129bc4332df461d1ee0d803c2678f01275684a19dd1191b,2025-11-21T17:15:51.783000 +CVE-2025-66060,0,1,ac5443a552315b32e2439f74a31f067c5391f006fe819f0686c062c1499e7a90,2025-12-04T16:22:25.717000 +CVE-2025-66061,0,1,f18568d015b51763602c75dacccebefae2953170ab78202c2ff017102ace9faa,2025-12-04T16:22:08.927000 CVE-2025-66062,0,0,3c989bb515f9bf96ea3cbe582dec75a00ca730896690ed26ac36b8fe61997d99,2025-11-21T17:15:51.983000 CVE-2025-66063,0,0,06a6fc7d49db0c1552dce2c2c36b3cf238ecb0fb7bab3cb0a9d9979f09929088,2025-11-21T17:15:52.183000 CVE-2025-66064,0,0,7133483b9b18dc32aa611710fe62d426eabd68b36880716af7a68072d64f460a,2025-11-21T19:16:03.690000 @@ -317090,7 +317170,7 @@ CVE-2025-66420,0,0,ff6efced740dcee0dd407e2772f268e6fbbbef65a1dd6c19a5d5198ee0ec9 CVE-2025-66421,0,0,d22603c2916cd27c9d4429e3c9c60ef9e53953c7f69fb09925171937dbc02153,2025-12-01T15:39:33.110000 CVE-2025-66422,0,0,f6e4e7709d93c6fdbf500974d65284a774aff297d23696fb7dc7ef4c3f16da74,2025-12-01T15:39:33.110000 CVE-2025-66423,0,0,5b67a06cf97ce6ca1a4ff23177770bbb34f35a8c3c407567bb7bd865ae7b5151,2025-12-01T15:39:33.110000 -CVE-2025-66424,0,0,43e804f22f0a577e56cfe997d4f2ac29962c04590e7d0a8a4237e625f16dc89a,2025-12-01T15:39:33.110000 +CVE-2025-66424,0,1,9b7cb601ad2f54e7f9bce0056df154642965f3262eaa4f1ceffb62a69419f245,2025-12-04T16:50:12.790000 CVE-2025-6643,0,0,27e89fc6b64098cb1e8fbcb1805e35e92b4979e917bb20db38f9199222858fe9,2025-07-01T19:31:57.240000 CVE-2025-66431,0,0,615b963cd9e248913bd468e1407184aae158b56ed575e432e55a278198e028eb,2025-12-03T17:15:54.810000 CVE-2025-66432,0,0,8b751ac4081119a1c08900cae102ddb583813dfd30e6595760ac387502643d8a,2025-12-01T15:39:33.110000 @@ -318395,6 +318475,7 @@ CVE-2025-8069,0,0,e8b2f492f4f3ac083f3ad7407ef30467bd26200609d96df8cd065d66d53ecc CVE-2025-8070,0,0,3f7b62492fc7cfd56b797c052d3cbcd9ec67af3eb4efee11a82fb4dc3a13d2f4,2025-07-25T15:29:44.523000 CVE-2025-8071,0,0,6c4454134bb489edd78d7acc20f775f6e1fa30e0fbd66eafa92d9c63b2fd23c0,2025-07-25T15:29:19.837000 CVE-2025-8073,0,0,c3224c833fc33dd93e4dc66ff2642bec21f5495cbade112a94bebaed797b9b97,2025-08-29T16:24:09.860000 +CVE-2025-8074,1,1,668e705106b071ca2dc69bc13369de01b7a3ac2f986016328e405219ae534b19,2025-12-04T16:16:23.100000 CVE-2025-8076,0,0,3bcdbdf53cc915c62da90e37ec9817d1809fdf9d77a2d4cdf77f65fb5881c916,2025-11-18T14:06:29.817000 CVE-2025-8077,0,0,6b9012c230d776505d4f43980977f615eaf5f569287447ea5e114745937f9052,2025-09-17T14:18:55.093000 CVE-2025-8078,0,0,97994f2e4bcdd31407e612258e9db1590c63c09a8e961c09ade9bd1701277b49,2025-10-28T19:36:21.637000