diff --git a/CVE-2020/CVE-2020-199xx/CVE-2020-19947.json b/CVE-2020/CVE-2020-199xx/CVE-2020-19947.json
index 7eec3c4c7db..db7fbfdd4c0 100644
--- a/CVE-2020/CVE-2020-199xx/CVE-2020-19947.json
+++ b/CVE-2020/CVE-2020-199xx/CVE-2020-19947.json
@@ -2,7 +2,7 @@
"id": "CVE-2020-19947",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-16T15:15:09.910",
- "lastModified": "2024-11-21T05:09:29.807",
+ "lastModified": "2025-02-26T17:15:11.910",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 6.0
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
+ "baseScore": 9.6,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 6.0
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-79"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2020/CVE-2020-248xx/CVE-2020-24857.json b/CVE-2020/CVE-2020-248xx/CVE-2020-24857.json
index 20dfda1ec95..89df14c57fd 100644
--- a/CVE-2020/CVE-2020-248xx/CVE-2020-24857.json
+++ b/CVE-2020/CVE-2020-248xx/CVE-2020-24857.json
@@ -2,7 +2,7 @@
"id": "CVE-2020-24857",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-23T22:15:12.783",
- "lastModified": "2024-11-21T05:16:08.230",
+ "lastModified": "2025-02-26T16:15:10.593",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-79"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2020/CVE-2020-34xx/CVE-2020-3432.json b/CVE-2020/CVE-2020-34xx/CVE-2020-3432.json
index 49d00d1cdd2..5f894a4d99a 100644
--- a/CVE-2020/CVE-2020-34xx/CVE-2020-3432.json
+++ b/CVE-2020/CVE-2020-34xx/CVE-2020-3432.json
@@ -2,7 +2,7 @@
"id": "CVE-2020-3432",
"sourceIdentifier": "psirt@cisco.com",
"published": "2025-02-12T00:15:07.670",
- "lastModified": "2025-02-24T16:15:11.573",
+ "lastModified": "2025-02-26T18:15:11.453",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -16,6 +16,28 @@
}
],
"metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H",
+ "baseScore": 5.6,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "REQUIRED",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.3,
+ "impactScore": 4.2
+ }
+ ],
"cvssMetricV30": [
{
"source": "psirt@cisco.com",
diff --git a/CVE-2021/CVE-2021-330xx/CVE-2021-33072.json b/CVE-2021/CVE-2021-330xx/CVE-2021-33072.json
index f590e052520..d7878d466aa 100644
--- a/CVE-2021/CVE-2021-330xx/CVE-2021-33072.json
+++ b/CVE-2021/CVE-2021-330xx/CVE-2021-33072.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33072",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:08.440",
- "lastModified": "2025-02-13T17:15:29.570",
+ "lastModified": "2025-02-26T06:26:20.130",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-330xx/CVE-2021-33084.json b/CVE-2021/CVE-2021-330xx/CVE-2021-33084.json
index e14cee77b3a..634a0fe118f 100644
--- a/CVE-2021/CVE-2021-330xx/CVE-2021-33084.json
+++ b/CVE-2021/CVE-2021-330xx/CVE-2021-33084.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33084",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:08.510",
- "lastModified": "2025-02-13T17:15:29.630",
+ "lastModified": "2025-02-26T06:26:21.207",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-330xx/CVE-2021-33085.json b/CVE-2021/CVE-2021-330xx/CVE-2021-33085.json
index 4fd6718d002..bbb860432b7 100644
--- a/CVE-2021/CVE-2021-330xx/CVE-2021-33085.json
+++ b/CVE-2021/CVE-2021-330xx/CVE-2021-33085.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33085",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:08.550",
- "lastModified": "2025-02-13T17:15:29.670",
+ "lastModified": "2025-02-26T06:26:21.253",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-330xx/CVE-2021-33099.json b/CVE-2021/CVE-2021-330xx/CVE-2021-33099.json
index 4053ec0b384..8ebe850a5f0 100644
--- a/CVE-2021/CVE-2021-330xx/CVE-2021-33099.json
+++ b/CVE-2021/CVE-2021-330xx/CVE-2021-33099.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33099",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:08.590",
- "lastModified": "2025-02-13T17:15:29.710",
+ "lastModified": "2025-02-26T06:26:22.037",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33100.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33100.json
index aeb5dfcd5e4..80b8c0a7ba8 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33100.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33100.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33100",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:08.633",
- "lastModified": "2025-02-13T17:15:29.753",
+ "lastModified": "2025-02-26T06:26:22.080",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33102.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33102.json
index 8fe53867b09..3d656dbc40c 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33102.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33102.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33102",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:08.673",
- "lastModified": "2025-02-13T17:15:29.797",
+ "lastModified": "2025-02-26T06:26:22.173",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33109.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33109.json
index 3ed453acec5..ad56070ba6a 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33109.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33109.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33109",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:08.707",
- "lastModified": "2025-02-13T17:15:29.840",
+ "lastModified": "2025-02-26T06:26:22.523",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33111.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33111.json
index 6db1d9cccfe..f322b9171ab 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33111.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33111.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33111",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:08.743",
- "lastModified": "2025-02-13T17:15:29.887",
+ "lastModified": "2025-02-26T06:26:22.617",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33112.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33112.json
index 4c6cc38279f..5d542685bc1 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33112.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33112.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33112",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:08.787",
- "lastModified": "2025-02-13T17:15:29.930",
+ "lastModified": "2025-02-26T06:26:22.660",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33116.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33116.json
index b0783972d91..8c4a7a899fc 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33116.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33116.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33116",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:08.827",
- "lastModified": "2025-02-13T17:15:29.967",
+ "lastModified": "2025-02-26T06:26:22.850",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33121.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33121.json
index 913db5a8103..e076bb79406 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33121.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33121.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33121",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:08.867",
- "lastModified": "2025-02-13T17:15:30.007",
+ "lastModified": "2025-02-26T06:26:23.090",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33125.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33125.json
index 40bdec8b2fc..96b8ebe66b5 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33125.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33125.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33125",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:08.907",
- "lastModified": "2025-02-13T17:15:30.047",
+ "lastModified": "2025-02-26T06:26:23.290",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33127.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33127.json
index 4364226ce84..de8ddea5c61 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33127.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33127.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33127",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:08.943",
- "lastModified": "2025-02-13T17:15:30.090",
+ "lastModified": "2025-02-26T06:26:23.387",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33131.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33131.json
index bc14c79383f..af78de22d42 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33131.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33131.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33131",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:08.980",
- "lastModified": "2025-02-13T17:15:30.130",
+ "lastModified": "2025-02-26T06:26:23.593",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33132.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33132.json
index d6923bb1964..0287d284d82 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33132.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33132.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33132",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.023",
- "lastModified": "2025-02-13T17:15:30.177",
+ "lastModified": "2025-02-26T06:26:23.637",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33133.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33133.json
index 8e186a348de..a645b512f63 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33133.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33133.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33133",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.063",
- "lastModified": "2025-02-13T17:15:30.223",
+ "lastModified": "2025-02-26T06:26:23.680",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33134.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33134.json
index 7427c6ea167..dea40605ba2 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33134.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33134.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33134",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.100",
- "lastModified": "2025-02-13T17:15:30.263",
+ "lastModified": "2025-02-26T06:26:23.723",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33136.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33136.json
index 853fc3d2487..b9325581c4b 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33136.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33136.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33136",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.140",
- "lastModified": "2025-02-13T17:15:30.310",
+ "lastModified": "2025-02-26T06:26:23.813",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33138.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33138.json
index 2b2f0f35e26..366e4ce5ab0 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33138.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33138.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33138",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.180",
- "lastModified": "2025-02-13T17:15:30.353",
+ "lastModified": "2025-02-26T06:26:23.900",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33140.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33140.json
index a46e6ae0ccb..15683c0a463 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33140.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33140.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33140",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.223",
- "lastModified": "2025-02-13T17:15:30.397",
+ "lastModified": "2025-02-26T06:26:23.993",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33143.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33143.json
index ee6ba5cec42..d1e7e82ede1 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33143.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33143.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33143",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.333",
- "lastModified": "2025-02-13T17:15:30.443",
+ "lastModified": "2025-02-26T06:26:24.140",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33144.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33144.json
index 6e0780ed025..691037dacc1 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33144.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33144.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33144",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.373",
- "lastModified": "2025-02-13T17:15:30.483",
+ "lastModified": "2025-02-26T06:26:24.183",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33148.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33148.json
index eee5526a182..771a684f3e4 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33148.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33148.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33148",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.480",
- "lastModified": "2025-02-13T17:15:30.530",
+ "lastModified": "2025-02-26T06:26:24.387",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33151.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33151.json
index 41b89729418..5e1a18b1ce2 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33151.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33151.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33151",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.520",
- "lastModified": "2025-02-13T17:15:30.577",
+ "lastModified": "2025-02-26T06:26:24.527",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33152.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33152.json
index 572f7dfb1e9..28ec611fae6 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33152.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33152.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33152",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.560",
- "lastModified": "2025-02-13T17:15:30.620",
+ "lastModified": "2025-02-26T06:26:24.567",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33153.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33153.json
index f440645113e..e6d3d2a517e 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33153.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33153.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33153",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.600",
- "lastModified": "2025-02-13T17:15:30.657",
+ "lastModified": "2025-02-26T06:26:24.610",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33154.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33154.json
index 705102b11b7..0d6ee70377f 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33154.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33154.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33154",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.637",
- "lastModified": "2025-02-13T17:15:30.703",
+ "lastModified": "2025-02-26T06:26:24.647",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33156.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33156.json
index f9d9db2af14..67d1d145738 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33156.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33156.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33156",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.677",
- "lastModified": "2025-02-13T17:15:30.750",
+ "lastModified": "2025-02-26T06:26:24.737",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33160.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33160.json
index f81c301c102..dc4c4dc8f82 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33160.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33160.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33160",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.793",
- "lastModified": "2025-02-13T17:15:30.797",
+ "lastModified": "2025-02-26T06:26:24.947",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33163.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33163.json
index f2ad0d9ec43..299ced75806 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33163.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33163.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33163",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.913",
- "lastModified": "2025-02-13T17:15:30.837",
+ "lastModified": "2025-02-26T06:26:25.100",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33165.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33165.json
index e376537b769..4d93e8c5a03 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33165.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33165.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33165",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.953",
- "lastModified": "2025-02-13T17:15:30.880",
+ "lastModified": "2025-02-26T06:26:25.190",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-331xx/CVE-2021-33167.json b/CVE-2021/CVE-2021-331xx/CVE-2021-33167.json
index 53205e70a8d..d47e7ca546d 100644
--- a/CVE-2021/CVE-2021-331xx/CVE-2021-33167.json
+++ b/CVE-2021/CVE-2021-331xx/CVE-2021-33167.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-33167",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:09.993",
- "lastModified": "2025-02-13T17:15:30.923",
+ "lastModified": "2025-02-26T06:26:25.287",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-367xx/CVE-2021-36741.json b/CVE-2021/CVE-2021-367xx/CVE-2021-36741.json
index 449614c64d1..9abd34d3fd3 100644
--- a/CVE-2021/CVE-2021-367xx/CVE-2021-36741.json
+++ b/CVE-2021/CVE-2021-367xx/CVE-2021-36741.json
@@ -2,13 +2,13 @@
"id": "CVE-2021-36741",
"sourceIdentifier": "security@trendmicro.com",
"published": "2021-07-29T20:15:07.620",
- "lastModified": "2025-02-12T19:23:38.797",
- "vulnStatus": "Analyzed",
+ "lastModified": "2025-02-26T06:28:35.203",
+ "vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
- "value": "An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product?s management console in order to exploit this vulnerability."
+ "value": "An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product\ufffds management console in order to exploit this vulnerability."
},
{
"lang": "es",
diff --git a/CVE-2021/CVE-2021-374xx/CVE-2021-37405.json b/CVE-2021/CVE-2021-374xx/CVE-2021-37405.json
index 096024848fd..63aee91f29e 100644
--- a/CVE-2021/CVE-2021-374xx/CVE-2021-37405.json
+++ b/CVE-2021/CVE-2021-374xx/CVE-2021-37405.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-37405",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:10.030",
- "lastModified": "2025-02-13T17:15:31.433",
+ "lastModified": "2025-02-26T06:29:03.530",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-380xx/CVE-2021-38000.json b/CVE-2021/CVE-2021-380xx/CVE-2021-38000.json
index 682d1cb291b..160eb3771e3 100644
--- a/CVE-2021/CVE-2021-380xx/CVE-2021-38000.json
+++ b/CVE-2021/CVE-2021-380xx/CVE-2021-38000.json
@@ -2,8 +2,8 @@
"id": "CVE-2021-38000",
"sourceIdentifier": "chrome-cve-admin@google.com",
"published": "2021-11-23T22:15:07.807",
- "lastModified": "2025-02-05T14:34:31.410",
- "vulnStatus": "Analyzed",
+ "lastModified": "2025-02-26T17:15:12.610",
+ "vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -106,6 +106,10 @@
{
"lang": "en",
"value": "CWE-20"
+ },
+ {
+ "lang": "en",
+ "value": "CWE-601"
}
]
}
diff --git a/CVE-2021/CVE-2021-38xx/CVE-2021-3885.json b/CVE-2021/CVE-2021-38xx/CVE-2021-3885.json
index e39d565b321..e85ed9e4f89 100644
--- a/CVE-2021/CVE-2021-38xx/CVE-2021-3885.json
+++ b/CVE-2021/CVE-2021-38xx/CVE-2021-3885.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-3885",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:10.070",
- "lastModified": "2025-02-13T17:15:31.930",
+ "lastModified": "2025-02-26T06:31:33.960",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-418xx/CVE-2021-41851.json b/CVE-2021/CVE-2021-418xx/CVE-2021-41851.json
index 93fed3e99cc..8a6cc1f1710 100644
--- a/CVE-2021/CVE-2021-418xx/CVE-2021-41851.json
+++ b/CVE-2021/CVE-2021-418xx/CVE-2021-41851.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-41851",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:10.110",
- "lastModified": "2025-02-13T17:15:32.327",
+ "lastModified": "2025-02-26T06:32:56.750",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-418xx/CVE-2021-41852.json b/CVE-2021/CVE-2021-418xx/CVE-2021-41852.json
index 85df56ec9b9..f09af659fcc 100644
--- a/CVE-2021/CVE-2021-418xx/CVE-2021-41852.json
+++ b/CVE-2021/CVE-2021-418xx/CVE-2021-41852.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-41852",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:10.150",
- "lastModified": "2025-02-13T17:15:32.460",
+ "lastModified": "2025-02-26T06:32:56.800",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-418xx/CVE-2021-41853.json b/CVE-2021/CVE-2021-418xx/CVE-2021-41853.json
index 5c26e1978a3..a4e90dc68a4 100644
--- a/CVE-2021/CVE-2021-418xx/CVE-2021-41853.json
+++ b/CVE-2021/CVE-2021-418xx/CVE-2021-41853.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-41853",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:10.190",
- "lastModified": "2025-02-13T17:15:32.590",
+ "lastModified": "2025-02-26T06:32:56.843",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-418xx/CVE-2021-41854.json b/CVE-2021/CVE-2021-418xx/CVE-2021-41854.json
index e8ba4e3ec15..137bc84202c 100644
--- a/CVE-2021/CVE-2021-418xx/CVE-2021-41854.json
+++ b/CVE-2021/CVE-2021-418xx/CVE-2021-41854.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-41854",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:10.227",
- "lastModified": "2025-02-13T17:15:32.737",
+ "lastModified": "2025-02-26T06:32:56.883",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-418xx/CVE-2021-41855.json b/CVE-2021/CVE-2021-418xx/CVE-2021-41855.json
index dfc9de62b35..ee480a67e18 100644
--- a/CVE-2021/CVE-2021-418xx/CVE-2021-41855.json
+++ b/CVE-2021/CVE-2021-418xx/CVE-2021-41855.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-41855",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:10.270",
- "lastModified": "2025-02-13T17:15:32.787",
+ "lastModified": "2025-02-26T06:32:56.927",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-418xx/CVE-2021-41856.json b/CVE-2021/CVE-2021-418xx/CVE-2021-41856.json
index edb9b4a492d..c52e712409e 100644
--- a/CVE-2021/CVE-2021-418xx/CVE-2021-41856.json
+++ b/CVE-2021/CVE-2021-418xx/CVE-2021-41856.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-41856",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:10.310",
- "lastModified": "2025-02-13T17:15:32.917",
+ "lastModified": "2025-02-26T06:32:56.967",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-418xx/CVE-2021-41857.json b/CVE-2021/CVE-2021-418xx/CVE-2021-41857.json
index aa18889c3a9..fa7e74f6808 100644
--- a/CVE-2021/CVE-2021-418xx/CVE-2021-41857.json
+++ b/CVE-2021/CVE-2021-418xx/CVE-2021-41857.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-41857",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:10.350",
- "lastModified": "2025-02-13T17:15:33.057",
+ "lastModified": "2025-02-26T06:32:57.007",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-418xx/CVE-2021-41858.json b/CVE-2021/CVE-2021-418xx/CVE-2021-41858.json
index 33112bbfaff..83d36e32abf 100644
--- a/CVE-2021/CVE-2021-418xx/CVE-2021-41858.json
+++ b/CVE-2021/CVE-2021-418xx/CVE-2021-41858.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-41858",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:10.390",
- "lastModified": "2025-02-13T17:15:33.190",
+ "lastModified": "2025-02-26T06:32:57.053",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-418xx/CVE-2021-41859.json b/CVE-2021/CVE-2021-418xx/CVE-2021-41859.json
index dbfacfe0621..a23632e731a 100644
--- a/CVE-2021/CVE-2021-418xx/CVE-2021-41859.json
+++ b/CVE-2021/CVE-2021-418xx/CVE-2021-41859.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-41859",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:10.430",
- "lastModified": "2025-02-13T17:15:33.240",
+ "lastModified": "2025-02-26T06:32:57.090",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-418xx/CVE-2021-41860.json b/CVE-2021/CVE-2021-418xx/CVE-2021-41860.json
index 281dad161e4..2efaf951970 100644
--- a/CVE-2021/CVE-2021-418xx/CVE-2021-41860.json
+++ b/CVE-2021/CVE-2021-418xx/CVE-2021-41860.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-41860",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:10.470",
- "lastModified": "2025-02-13T17:15:33.290",
+ "lastModified": "2025-02-26T06:32:57.137",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-433xx/CVE-2021-43351.json b/CVE-2021/CVE-2021-433xx/CVE-2021-43351.json
index d7badf7d6a3..869355f2312 100644
--- a/CVE-2021/CVE-2021-433xx/CVE-2021-43351.json
+++ b/CVE-2021/CVE-2021-433xx/CVE-2021-43351.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-43351",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:10.510",
- "lastModified": "2025-02-13T17:15:33.340",
+ "lastModified": "2025-02-26T06:33:50.690",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-444xx/CVE-2021-44457.json b/CVE-2021/CVE-2021-444xx/CVE-2021-44457.json
index dea49ed263c..1b98484f8f4 100644
--- a/CVE-2021/CVE-2021-444xx/CVE-2021-44457.json
+++ b/CVE-2021/CVE-2021-444xx/CVE-2021-44457.json
@@ -2,7 +2,7 @@
"id": "CVE-2021-44457",
"sourceIdentifier": "secure@intel.com",
"published": "2024-02-23T21:15:10.550",
- "lastModified": "2025-02-13T17:15:33.477",
+ "lastModified": "2025-02-26T06:34:35.257",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
diff --git a/CVE-2021/CVE-2021-44xx/CVE-2021-4453.json b/CVE-2021/CVE-2021-44xx/CVE-2021-4453.json
new file mode 100644
index 00000000000..0f8bbba51e1
--- /dev/null
+++ b/CVE-2021/CVE-2021-44xx/CVE-2021-4453.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2021-4453",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:29.820",
+ "lastModified": "2025-02-26T06:37:29.820",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/pm: fix a potential gpu_metrics_table memory leak\n\nMemory is allocated for gpu_metrics_table in renoir_init_smc_tables(),\nbut not freed in int smu_v12_0_fini_smc_tables(). Free it!"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/222cebd995cdf11fe0d502749560f65e64990e55",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/257b3bb16634fd936129fe2f57a91594a75b8751",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aa464957f7e660abd554f2546a588f6533720e21",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47631.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47631.json
new file mode 100644
index 00000000000..ef735d3bbe7
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47631.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2021-47631",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:04.400",
+ "lastModified": "2025-02-26T06:37:04.400",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nARM: davinci: da850-evm: Avoid NULL pointer dereference\n\nWith newer versions of GCC, there is a panic in da850_evm_config_emac()\nwhen booting multi_v5_defconfig in QEMU under the palmetto-bmc machine:\n\nUnable to handle kernel NULL pointer dereference at virtual address 00000020\npgd = (ptrval)\n[00000020] *pgd=00000000\nInternal error: Oops: 5 [#1] PREEMPT ARM\nModules linked in:\nCPU: 0 PID: 1 Comm: swapper Not tainted 5.15.0 #1\nHardware name: Generic DT based system\nPC is at da850_evm_config_emac+0x1c/0x120\nLR is at do_one_initcall+0x50/0x1e0\n\nThe emac_pdata pointer in soc_info is NULL because davinci_soc_info only\ngets populated on davinci machines but da850_evm_config_emac() is called\non all machines via device_initcall().\n\nMove the rmii_en assignment below the machine check so that it is only\ndereferenced when running on a supported SoC."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0940795c6834fbe7705acc5c3d4b2f7a5f67527a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0a312ec66a03133d28570f07bc52749ccfef54da",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/83a1cde5c74bfb44b49cb2a940d044bb2380f4ea",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/89931d4762572aaee6edbe5673d41f8082de110f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a12b356d45cbb6e8a1b718d1436b3d6239a862f3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c06f476e5b74bcabb8c4a2fba55864a37e62843b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c5628533a3ece64235d04fe11ec44d2be99e423d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c64e2ed5cc376e137e572babfd2edc38b2cfb61b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47632.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47632.json
new file mode 100644
index 00000000000..e13026eb9b8
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47632.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2021-47632",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:04.943",
+ "lastModified": "2025-02-26T06:37:04.943",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/set_memory: Avoid spinlock recursion in change_page_attr()\n\nCommit 1f9ad21c3b38 (\"powerpc/mm: Implement set_memory() routines\")\nincluded a spin_lock() to change_page_attr() in order to\nsafely perform the three step operations. But then\ncommit 9f7853d7609d (\"powerpc/mm: Fix set_memory_*() against\nconcurrent accesses\") modify it to use pte_update() and do\nthe operation safely against concurrent access.\n\nIn the meantime, Maxime reported some spinlock recursion.\n\n[ 15.351649] BUG: spinlock recursion on CPU#0, kworker/0:2/217\n[ 15.357540] lock: init_mm+0x3c/0x420, .magic: dead4ead, .owner: kworker/0:2/217, .owner_cpu: 0\n[ 15.366563] CPU: 0 PID: 217 Comm: kworker/0:2 Not tainted 5.15.0+ #523\n[ 15.373350] Workqueue: events do_free_init\n[ 15.377615] Call Trace:\n[ 15.380232] [e4105ac0] [800946a4] do_raw_spin_lock+0xf8/0x120 (unreliable)\n[ 15.387340] [e4105ae0] [8001f4ec] change_page_attr+0x40/0x1d4\n[ 15.393413] [e4105b10] [801424e0] __apply_to_page_range+0x164/0x310\n[ 15.400009] [e4105b60] [80169620] free_pcp_prepare+0x1e4/0x4a0\n[ 15.406045] [e4105ba0] [8016c5a0] free_unref_page+0x40/0x2b8\n[ 15.411979] [e4105be0] [8018724c] kasan_depopulate_vmalloc_pte+0x6c/0x94\n[ 15.418989] [e4105c00] [801424e0] __apply_to_page_range+0x164/0x310\n[ 15.425451] [e4105c50] [80187834] kasan_release_vmalloc+0xbc/0x134\n[ 15.431898] [e4105c70] [8015f7a8] __purge_vmap_area_lazy+0x4e4/0xdd8\n[ 15.438560] [e4105d30] [80160d10] _vm_unmap_aliases.part.0+0x17c/0x24c\n[ 15.445283] [e4105d60] [801642d0] __vunmap+0x2f0/0x5c8\n[ 15.450684] [e4105db0] [800e32d0] do_free_init+0x68/0x94\n[ 15.456181] [e4105dd0] [8005d094] process_one_work+0x4bc/0x7b8\n[ 15.462283] [e4105e90] [8005d614] worker_thread+0x284/0x6e8\n[ 15.468227] [e4105f00] [8006aaec] kthread+0x1f0/0x210\n[ 15.473489] [e4105f40] [80017148] ret_from_kernel_thread+0x14/0x1c\n\nRemove the read / modify / write sequence to make the operation atomic\nand remove the spin_lock() in change_page_attr().\n\nTo do the operation atomically, we can't use pte modification helpers\nanymore. Because all platforms have different combination of bits, it\nis not easy to use those bits directly. But all have the\n_PAGE_KERNEL_{RO/ROX/RW/RWX} set of flags. All we need it to compare\ntwo sets to know which bits are set or cleared.\n\nFor instance, by comparing _PAGE_KERNEL_ROX and _PAGE_KERNEL_RO you\nknow which bit gets cleared and which bit get set when changing exec\npermission."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/6def4eaf0391f24be541633a954c0e4876858b1e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6ebe5ca2cbe438a688f2ae238ef5a0b0b5f3468a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/96917107e67846f1d959ed03be281048efad14c5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a4c182ecf33584b9b2d1aa9dad073014a504c01f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47633.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47633.json
new file mode 100644
index 00000000000..3d903f9796b
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47633.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2021-47633",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:05.060",
+ "lastModified": "2025-02-26T06:37:05.060",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111\n\nThe bug was found during fuzzing. Stacktrace locates it in\nath5k_eeprom_convert_pcal_info_5111.\nWhen none of the curve is selected in the loop, idx can go\nup to AR5K_EEPROM_N_PD_CURVES. The line makes pd out of bound.\npd = &chinfo[pier].pd_curves[idx];\n\nThere are many OOB writes using pd later in the code. So I\nadded a sanity check for idx. Checks for other loops involving\nAR5K_EEPROM_N_PD_CURVES are not needed as the loop index is not\nused outside the loops.\n\nThe patch is NOT tested with real device.\n\nThe following is the fuzzing report\n\nBUG: KASAN: slab-out-of-bounds in ath5k_eeprom_read_pcal_info_5111+0x126a/0x1390 [ath5k]\nWrite of size 1 at addr ffff8880174a4d60 by task modprobe/214\n\nCPU: 0 PID: 214 Comm: modprobe Not tainted 5.6.0 #1\nCall Trace:\n dump_stack+0x76/0xa0\n print_address_description.constprop.0+0x16/0x200\n ? ath5k_eeprom_read_pcal_info_5111+0x126a/0x1390 [ath5k]\n ? ath5k_eeprom_read_pcal_info_5111+0x126a/0x1390 [ath5k]\n __kasan_report.cold+0x37/0x7c\n ? ath5k_eeprom_read_pcal_info_5111+0x126a/0x1390 [ath5k]\n kasan_report+0xe/0x20\n ath5k_eeprom_read_pcal_info_5111+0x126a/0x1390 [ath5k]\n ? apic_timer_interrupt+0xa/0x20\n ? ath5k_eeprom_init_11a_pcal_freq+0xbc0/0xbc0 [ath5k]\n ? ath5k_pci_eeprom_read+0x228/0x3c0 [ath5k]\n ath5k_eeprom_init+0x2513/0x6290 [ath5k]\n ? ath5k_eeprom_init_11a_pcal_freq+0xbc0/0xbc0 [ath5k]\n ? usleep_range+0xb8/0x100\n ? apic_timer_interrupt+0xa/0x20\n ? ath5k_eeprom_read_pcal_info_2413+0x2f20/0x2f20 [ath5k]\n ath5k_hw_init+0xb60/0x1970 [ath5k]\n ath5k_init_ah+0x6fe/0x2530 [ath5k]\n ? kasprintf+0xa6/0xe0\n ? ath5k_stop+0x140/0x140 [ath5k]\n ? _dev_notice+0xf6/0xf6\n ? apic_timer_interrupt+0xa/0x20\n ath5k_pci_probe.cold+0x29a/0x3d6 [ath5k]\n ? ath5k_pci_eeprom_read+0x3c0/0x3c0 [ath5k]\n ? mutex_lock+0x89/0xd0\n ? ath5k_pci_eeprom_read+0x3c0/0x3c0 [ath5k]\n local_pci_probe+0xd3/0x160\n pci_device_probe+0x23f/0x3e0\n ? pci_device_remove+0x280/0x280\n ? pci_device_remove+0x280/0x280\n really_probe+0x209/0x5d0"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/25efc5d03455c3839249bc77fce5e29ecb54677e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/564d4eceb97eaf381dd6ef6470b06377bb50c95a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9d7d83d0399e23d66fd431b553842a84ac10398f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/be2f81024e7981565d90a4c9ca3067d11b6bca7f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c4e2f577271e158d87a916afb4e87415a88ce856",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cbd96d6cad6625feba9c8d101ed4977d53e82f8e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ed3dfdaa8b5f0579eabfc1c5818eed30cfe1fe84",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f4de974019a0adf34d0e7de6b86252f1bd266b06",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fc8f7752a82f4accb99c0f1a868906ba1eb7b86f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47634.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47634.json
new file mode 100644
index 00000000000..4eadbf48e87
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47634.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2021-47634",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:05.173",
+ "lastModified": "2025-02-26T06:37:05.173",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl\n\nHulk Robot reported a KASAN report about use-after-free:\n ==================================================================\n BUG: KASAN: use-after-free in __list_del_entry_valid+0x13d/0x160\n Read of size 8 at addr ffff888035e37d98 by task ubiattach/1385\n [...]\n Call Trace:\n klist_dec_and_del+0xa7/0x4a0\n klist_put+0xc7/0x1a0\n device_del+0x4d4/0xed0\n cdev_device_del+0x1a/0x80\n ubi_attach_mtd_dev+0x2951/0x34b0 [ubi]\n ctrl_cdev_ioctl+0x286/0x2f0 [ubi]\n\n Allocated by task 1414:\n device_add+0x60a/0x18b0\n cdev_device_add+0x103/0x170\n ubi_create_volume+0x1118/0x1a10 [ubi]\n ubi_cdev_ioctl+0xb7f/0x1ba0 [ubi]\n\n Freed by task 1385:\n cdev_device_del+0x1a/0x80\n ubi_remove_volume+0x438/0x6c0 [ubi]\n ubi_cdev_ioctl+0xbf4/0x1ba0 [ubi]\n [...]\n ==================================================================\n\nThe lock held by ctrl_cdev_ioctl is ubi_devices_mutex, but the lock held\nby ubi_cdev_ioctl is ubi->device_mutex. Therefore, the two locks can be\nconcurrent.\n\nctrl_cdev_ioctl contains two operations: ubi_attach and ubi_detach.\nubi_detach is bug-free because it uses reference counting to prevent\nconcurrency. However, uif_init and uif_close in ubi_attach may race with\nubi_cdev_ioctl.\n\nuif_init will race with ubi_cdev_ioctl as in the following stack.\n cpu1 cpu2 cpu3\n_______________________|________________________|______________________\nctrl_cdev_ioctl\n ubi_attach_mtd_dev\n uif_init\n ubi_cdev_ioctl\n ubi_create_volume\n cdev_device_add\n ubi_add_volume\n // sysfs exist\n kill_volumes\n ubi_cdev_ioctl\n ubi_remove_volume\n cdev_device_del\n // first free\n ubi_free_volume\n cdev_del\n // double free\n cdev_device_del\n\nAnd uif_close will race with ubi_cdev_ioctl as in the following stack.\n cpu1 cpu2 cpu3\n_______________________|________________________|______________________\nctrl_cdev_ioctl\n ubi_attach_mtd_dev\n uif_init\n ubi_cdev_ioctl\n ubi_create_volume\n cdev_device_add\n ubi_debugfs_init_dev\n //error goto out_uif;\n uif_close\n kill_volumes\n ubi_cdev_ioctl\n ubi_remove_volume\n cdev_device_del\n // first free\n ubi_free_volume\n // double free\n\nThe cause of this problem is that commit 714fb87e8bc0 make device\n\"available\" before it becomes accessible via sysfs. Therefore, we\nroll back the modification. We will fix the race condition between\nubi device creation and udev by removing ubi_get_device in\nvol_attribute_show and dev_attribute_show.This avoids accessing\nuninitialized ubi_devices[ubi_num].\n\nubi_get_device is used to prevent devices from being deleted during\nsysfs execution. However, now kernfs ensures that devices will not\nbe deleted before all reference counting are released.\nThe key process is shown in the following stack.\n\ndevice_del\n device_remove_attrs\n device_remove_groups\n sysfs_remove_groups\n sysfs_remove_group\n remove_files\n kernfs_remove_by_name\n kernfs_remove_by_name_ns\n __kernfs_remove\n kernfs_drain"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1a3f1cf87054833242fcd0218de0481cf855f888",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3cbf0e392f173ba0ce425968c8374a6aa3e90f2e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/432b057f8e847ae5a2306515606f8d2defaca178",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5f9e9c223e48c264241d2f34d0bfc29e5fcb5c1b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a8ecee49259f8f78d91ddb329ab2be7e6fd01974",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c32fe764191b8ae8b128588beb96e3718d9179d8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d727fd32cbd1abf3465f607021bc9c746f17b5a8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f149b1bd213820363731aa119e5011ca892a2aac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47635.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47635.json
new file mode 100644
index 00000000000..2374927f449
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47635.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2021-47635",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:05.280",
+ "lastModified": "2025-02-26T06:37:05.280",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: Fix to add refcount once page is set private\n\nMM defined the rule [1] very clearly that once page was set with PG_private\nflag, we should increment the refcount in that page, also main flows like\npageout(), migrate_page() will assume there is one additional page\nreference count if page_has_private() returns true. Otherwise, we may\nget a BUG in page migration:\n\n page:0000000080d05b9d refcount:-1 mapcount:0 mapping:000000005f4d82a8\n index:0xe2 pfn:0x14c12\n aops:ubifs_file_address_operations [ubifs] ino:8f1 dentry name:\"f30e\"\n flags: 0x1fffff80002405(locked|uptodate|owner_priv_1|private|node=0|\n zone=1|lastcpupid=0x1fffff)\n page dumped because: VM_BUG_ON_PAGE(page_count(page) != 0)\n ------------[ cut here ]------------\n kernel BUG at include/linux/page_ref.h:184!\n invalid opcode: 0000 [#1] SMP\n CPU: 3 PID: 38 Comm: kcompactd0 Not tainted 5.15.0-rc5\n RIP: 0010:migrate_page_move_mapping+0xac3/0xe70\n Call Trace:\n ubifs_migrate_page+0x22/0xc0 [ubifs]\n move_to_new_page+0xb4/0x600\n migrate_pages+0x1523/0x1cc0\n compact_zone+0x8c5/0x14b0\n kcompactd+0x2bc/0x560\n kthread+0x18c/0x1e0\n ret_from_fork+0x1f/0x30\n\nBefore the time, we should make clean a concept, what does refcount means\nin page gotten from grab_cache_page_write_begin(). There are 2 situations:\nSituation 1: refcount is 3, page is created by __page_cache_alloc.\n TYPE_A - the write process is using this page\n TYPE_B - page is assigned to one certain mapping by calling\n\t __add_to_page_cache_locked()\n TYPE_C - page is added into pagevec list corresponding current cpu by\n\t calling lru_cache_add()\nSituation 2: refcount is 2, page is gotten from the mapping's tree\n TYPE_B - page has been assigned to one certain mapping\n TYPE_A - the write process is using this page (by calling\n\t page_cache_get_speculative())\nFilesystem releases one refcount by calling put_page() in xxx_write_end(),\nthe released refcount corresponds to TYPE_A (write task is using it). If\nthere are any processes using a page, page migration process will skip the\npage by judging whether expected_page_refs() equals to page refcount.\n\nThe BUG is caused by following process:\n PA(cpu 0) kcompactd(cpu 1)\n\t\t\t\tcompact_zone\nubifs_write_begin\n page_a = grab_cache_page_write_begin\n add_to_page_cache_lru\n lru_cache_add\n pagevec_add // put page into cpu 0's pagevec\n (refcnf = 3, for page creation process)\nubifs_write_end\n SetPagePrivate(page_a) // doesn't increase page count !\n unlock_page(page_a)\n put_page(page_a) // refcnt = 2\n\t\t\t\t[...]\n\n PB(cpu 0)\nfilemap_read\n filemap_get_pages\n add_to_page_cache_lru\n lru_cache_add\n __pagevec_lru_add // traverse all pages in cpu 0's pagevec\n\t __pagevec_lru_add_fn\n\t SetPageLRU(page_a)\n\t\t\t\tisolate_migratepages\n isolate_migratepages_block\n\t\t\t\t get_page_unless_zero(page_a)\n\t\t\t\t // refcnt = 3\n list_add(page_a, from_list)\n\t\t\t\tmigrate_pages(from_list)\n\t\t\t\t __unmap_and_move\n\t\t\t\t move_to_new_page\n\t\t\t\t ubifs_migrate_page(page_a)\n\t\t\t\t migrate_page_move_mapping\n\t\t\t\t\t expected_page_refs get 3\n (migration[1] + mapping[1] + private[1])\n\t release_pages\n\t put_page_testzero(page_a) // refcnt = 3\n page_ref_freeze // refcnt = 0\n\t page_ref_dec_and_test(0 - 1 = -1)\n page_ref_unfreeze\n VM_BUG_ON_PAGE(-1 != 0, page)\n\nUBIFS doesn't increase the page refcount after setting private flag, which\nleads to page migration task believes the page is not used by any other\nprocesses, so the page is migrated. This causes concurrent accessing on\npage refcount between put_page() called by other process(eg. read process\ncalls lru_cache_add) and page_ref_unfreeze() called by mi\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3b67db8a6ca83e6ff90b756d3da0c966f61cd37b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4f75bab98565afd4f905059c56ec4caba88a7eec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5aaa2c0f0052b02c4a982993d4c5bb68fb7cbe22",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c34ae24a2590fee96a3a7735ba2fa6cc52306221",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fbeb2139eed65e929ce806c6468e6601ade01b1b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47636.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47636.json
new file mode 100644
index 00000000000..560494d6e63
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47636.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2021-47636",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:05.377",
+ "lastModified": "2025-02-26T06:37:05.377",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()\n\nFunction ubifs_wbuf_write_nolock() may access buf out of bounds in\nfollowing process:\n\nubifs_wbuf_write_nolock():\n aligned_len = ALIGN(len, 8); // Assume len = 4089, aligned_len = 4096\n if (aligned_len <= wbuf->avail) ... // Not satisfy\n if (wbuf->used) {\n ubifs_leb_write() // Fill some data in avail wbuf\n len -= wbuf->avail; // len is still not 8-bytes aligned\n aligned_len -= wbuf->avail;\n }\n n = aligned_len >> c->max_write_shift;\n if (n) {\n n <<= c->max_write_shift;\n err = ubifs_leb_write(c, wbuf->lnum, buf + written,\n wbuf->offs, n);\n // n > len, read out of bounds less than 8(n-len) bytes\n }\n\n, which can be catched by KASAN:\n =========================================================\n BUG: KASAN: slab-out-of-bounds in ecc_sw_hamming_calculate+0x1dc/0x7d0\n Read of size 4 at addr ffff888105594ff8 by task kworker/u8:4/128\n Workqueue: writeback wb_workfn (flush-ubifs_0_0)\n Call Trace:\n kasan_report.cold+0x81/0x165\n nand_write_page_swecc+0xa9/0x160\n ubifs_leb_write+0xf2/0x1b0 [ubifs]\n ubifs_wbuf_write_nolock+0x421/0x12c0 [ubifs]\n write_head+0xdc/0x1c0 [ubifs]\n ubifs_jnl_write_inode+0x627/0x960 [ubifs]\n wb_workfn+0x8af/0xb80\n\nFunction ubifs_wbuf_write_nolock() accepts that parameter 'len' is not 8\nbytes aligned, the 'len' represents the true length of buf (which is\nallocated in 'ubifs_jnl_xxx', eg. ubifs_jnl_write_inode), so\nubifs_wbuf_write_nolock() must handle the length read from 'buf' carefully\nto write leb safely.\n\nFetch a reproducer in [Link]."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/07a209fadee7b53b46858538e1177597273862e4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3b7fb89135a20587d57f8877c02e25003e9edbdf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4f2262a334641e05f645364d5ade1f565c85f20b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5343575aa11c5d7044107d59d43f84aec01312b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a7054aaf1909cf40489c0ec1b728fdcf79c751a6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b80ccbec0e4804436c382d7dd60e943c386ed83a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e09fa5318d51f522e1af4fbaf8f74999355980c8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47637.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47637.json
new file mode 100644
index 00000000000..5f271c93264
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47637.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2021-47637",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:05.477",
+ "lastModified": "2025-02-26T06:37:05.477",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: Fix deadlock in concurrent rename whiteout and inode writeback\n\nFollowing hung tasks:\n[ 77.028764] task:kworker/u8:4 state:D stack: 0 pid: 132\n[ 77.028820] Call Trace:\n[ 77.029027] schedule+0x8c/0x1b0\n[ 77.029067] mutex_lock+0x50/0x60\n[ 77.029074] ubifs_write_inode+0x68/0x1f0 [ubifs]\n[ 77.029117] __writeback_single_inode+0x43c/0x570\n[ 77.029128] writeback_sb_inodes+0x259/0x740\n[ 77.029148] wb_writeback+0x107/0x4d0\n[ 77.029163] wb_workfn+0x162/0x7b0\n\n[ 92.390442] task:aa state:D stack: 0 pid: 1506\n[ 92.390448] Call Trace:\n[ 92.390458] schedule+0x8c/0x1b0\n[ 92.390461] wb_wait_for_completion+0x82/0xd0\n[ 92.390469] __writeback_inodes_sb_nr+0xb2/0x110\n[ 92.390472] writeback_inodes_sb_nr+0x14/0x20\n[ 92.390476] ubifs_budget_space+0x705/0xdd0 [ubifs]\n[ 92.390503] do_rename.cold+0x7f/0x187 [ubifs]\n[ 92.390549] ubifs_rename+0x8b/0x180 [ubifs]\n[ 92.390571] vfs_rename+0xdb2/0x1170\n[ 92.390580] do_renameat2+0x554/0x770\n\n, are caused by concurrent rename whiteout and inode writeback processes:\n\trename_whiteout(Thread 1)\t wb_workfn(Thread2)\nubifs_rename\n do_rename\n lock_4_inodes (Hold ui_mutex)\n ubifs_budget_space\n make_free_space\n shrink_liability\n\t __writeback_inodes_sb_nr\n\t bdi_split_work_to_wbs (Queue new wb work)\n\t\t\t\t\t wb_do_writeback(wb work)\n\t\t\t\t\t\t__writeback_single_inode\n\t\t\t\t\t ubifs_write_inode\n\t\t\t\t\t LOCK(ui_mutex)\n\t\t\t\t\t\t\t \u2191\n\t wb_wait_for_completion (Wait wb work) <-- deadlock!\n\nReproducer (Detail program in [Link]):\n 1. SYS_renameat2(\"/mp/dir/file\", \"/mp/dir/whiteout\", RENAME_WHITEOUT)\n 2. Consume out of space before kernel(mdelay) doing budget for whiteout\n\nFix it by doing whiteout space budget before locking ubifs inodes.\nBTW, it also fixes wrong goto tag 'out_release' in whiteout budget\nerror handling path(It should at least recover dir i_size and unlock\n4 ubifs inodes)."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/37bdf1ad592555ecda1d55b89f6e393e4c0589d1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/70e9090acc32348cedc5def0cd6d5c126efc97b9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/83e42a78428fc354f5e2049935b84c8d8d29b787",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8b278c8dcfb565cb65eceb62a38cbf7a7c326db5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9dddc8211430fb851ddf0b168e3a00c6f66cc185",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/afd427048047e8efdedab30e8888044e2be5aa9c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c58af8564a7b08757173009030b74baf4b2b762b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47638.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47638.json
new file mode 100644
index 00000000000..844e96a71f5
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47638.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2021-47638",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:05.580",
+ "lastModified": "2025-02-26T06:37:05.580",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: rename_whiteout: Fix double free for whiteout_ui->data\n\n'whiteout_ui->data' will be freed twice if space budget fail for\nrename whiteout operation as following process:\n\nrename_whiteout\n dev = kmalloc\n whiteout_ui->data = dev\n kfree(whiteout_ui->data) // Free first time\n iput(whiteout)\n ubifs_free_inode\n kfree(ui->data)\t // Double free!\n\nKASAN reports:\n==================================================================\nBUG: KASAN: double-free or invalid-free in ubifs_free_inode+0x4f/0x70\nCall Trace:\n kfree+0x117/0x490\n ubifs_free_inode+0x4f/0x70 [ubifs]\n i_callback+0x30/0x60\n rcu_do_batch+0x366/0xac0\n __do_softirq+0x133/0x57f\n\nAllocated by task 1506:\n kmem_cache_alloc_trace+0x3c2/0x7a0\n do_rename+0x9b7/0x1150 [ubifs]\n ubifs_rename+0x106/0x1f0 [ubifs]\n do_syscall_64+0x35/0x80\n\nFreed by task 1506:\n kfree+0x117/0x490\n do_rename.cold+0x53/0x8a [ubifs]\n ubifs_rename+0x106/0x1f0 [ubifs]\n do_syscall_64+0x35/0x80\n\nThe buggy address belongs to the object at ffff88810238bed8 which\nbelongs to the cache kmalloc-8 of size 8\n==================================================================\n\nLet ubifs_free_inode() free 'whiteout_ui->data'. BTW, delete unused\nassignment 'whiteout_ui->data_len = 0', process 'ubifs_evict_inode()\n-> ubifs_jnl_delete_inode() -> ubifs_jnl_write_inode()' doesn't need it\n(because 'inc_nlink(whiteout)' won't be excuted by 'goto out_release',\n and the nlink of whiteout inode is 0)."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/14276d38c89a170363e90b6ac0a53c3cf61b87fc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2ad07009c459e56ebdcc089d850d664660fdb742",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2b3236ecf96db7af5836e1366ce39ace8ce832fa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/40a8f0d5e7b3999f096570edab71c345da812e3e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6d7a158a7363c1f6604aa47ae1a280a5c65123dd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8b3c7be16f3f4dfd6e15ac651484e59d3fa36274",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a90e2dbe66d2647ff95a0442ad2e86482d977fd8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b9a937f096e608b3368c1abc920d4d640ba2c94f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47639.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47639.json
new file mode 100644
index 00000000000..a078323a61c
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47639.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2021-47639",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:05.677",
+ "lastModified": "2025-02-26T06:37:05.677",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU\n\nZap both valid and invalid roots when zapping/unmapping a gfn range, as\nKVM must ensure it holds no references to the freed page after returning\nfrom the unmap operation. Most notably, the TDP MMU doesn't zap invalid\nroots in mmu_notifier callbacks. This leads to use-after-free and other\nissues if the mmu_notifier runs to completion while an invalid root\nzapper yields as KVM fails to honor the requirement that there must be\n_no_ references to the page after the mmu_notifier returns.\n\nThe bug is most easily reproduced by hacking KVM to cause a collision\nbetween set_nx_huge_pages() and kvm_mmu_notifier_release(), but the bug\nexists between kvm_mmu_notifier_invalidate_range_start() and memslot\nupdates as well. Invalidating a root ensures pages aren't accessible by\nthe guest, and KVM won't read or write page data itself, but KVM will\ntrigger e.g. kvm_set_pfn_dirty() when zapping SPTEs, and thus completing\na zap of an invalid root _after_ the mmu_notifier returns is fatal.\n\n WARNING: CPU: 24 PID: 1496 at arch/x86/kvm/../../../virt/kvm/kvm_main.c:173 [kvm]\n RIP: 0010:kvm_is_zone_device_pfn+0x96/0xa0 [kvm]\n Call Trace:\n \n kvm_set_pfn_dirty+0xa8/0xe0 [kvm]\n __handle_changed_spte+0x2ab/0x5e0 [kvm]\n __handle_changed_spte+0x2ab/0x5e0 [kvm]\n __handle_changed_spte+0x2ab/0x5e0 [kvm]\n zap_gfn_range+0x1f3/0x310 [kvm]\n kvm_tdp_mmu_zap_invalidated_roots+0x50/0x90 [kvm]\n kvm_mmu_zap_all_fast+0x177/0x1a0 [kvm]\n set_nx_huge_pages+0xb4/0x190 [kvm]\n param_attr_store+0x70/0x100\n module_attr_store+0x19/0x30\n kernfs_fop_write_iter+0x119/0x1b0\n new_sync_write+0x11c/0x1b0\n vfs_write+0x1cc/0x270\n ksys_write+0x5f/0xe0\n do_syscall_64+0x38/0xc0\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n "
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0c8a8da182d4333d9bbb9131d765145568c847b2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8cf6f98ab1d16d5e607635a0c21c4231eb15367e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/af47248407c0c5ae52a752af1ab5ce5b0db91502",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d62007edf01f5c11f75d0f4b1e538fc52a5b1982",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47640.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47640.json
new file mode 100644
index 00000000000..46d6b172e1c
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47640.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2021-47640",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:05.780",
+ "lastModified": "2025-02-26T06:37:05.780",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/kasan: Fix early region not updated correctly\n\nThe shadow's page table is not updated when PTE_RPN_SHIFT is 24\nand PAGE_SHIFT is 12. It not only causes false positives but\nalso false negative as shown the following text.\n\nFix it by bringing the logic of kasan_early_shadow_page_entry here.\n\n1. False Positive:\n==================================================================\nBUG: KASAN: vmalloc-out-of-bounds in pcpu_alloc+0x508/0xa50\nWrite of size 16 at addr f57f3be0 by task swapper/0/1\n\nCPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.15.0-12267-gdebe436e77c7 #1\nCall Trace:\n[c80d1c20] [c07fe7b8] dump_stack_lvl+0x4c/0x6c (unreliable)\n[c80d1c40] [c02ff668] print_address_description.constprop.0+0x88/0x300\n[c80d1c70] [c02ff45c] kasan_report+0x1ec/0x200\n[c80d1cb0] [c0300b20] kasan_check_range+0x160/0x2f0\n[c80d1cc0] [c03018a4] memset+0x34/0x90\n[c80d1ce0] [c0280108] pcpu_alloc+0x508/0xa50\n[c80d1d40] [c02fd7bc] __kmem_cache_create+0xfc/0x570\n[c80d1d70] [c0283d64] kmem_cache_create_usercopy+0x274/0x3e0\n[c80d1db0] [c2036580] init_sd+0xc4/0x1d0\n[c80d1de0] [c00044a0] do_one_initcall+0xc0/0x33c\n[c80d1eb0] [c2001624] kernel_init_freeable+0x2c8/0x384\n[c80d1ef0] [c0004b14] kernel_init+0x24/0x170\n[c80d1f10] [c001b26c] ret_from_kernel_thread+0x5c/0x64\n\nMemory state around the buggy address:\n f57f3a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n f57f3b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n>f57f3b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n ^\n f57f3c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n f57f3c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n==================================================================\n\n2. False Negative (with KASAN tests):\n==================================================================\nBefore fix:\n ok 45 - kmalloc_double_kzfree\n # vmalloc_oob: EXPECTATION FAILED at lib/test_kasan.c:1039\n KASAN failure expected in \"((volatile char *)area)[3100]\", but none occurred\n not ok 46 - vmalloc_oob\n not ok 1 - kasan\n\n==================================================================\nAfter fix:\n ok 1 - kasan"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5a3d8f3192a409893c57808cc935e16484df1068",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7f19245c3647afea8c7c41f795506ef70f64b9f2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dd75080aa8409ce10d50fb58981c6b59bf8707d3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/de56beace6648065d404cd9835aa7d30e3df519d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e3d157a4b4f4e0268c98be5b7013bf4b31234bb6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f39a3309393a4a484532f6ba745c6acbcfe06115",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47641.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47641.json
new file mode 100644
index 00000000000..a73d32e47c0
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47641.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2021-47641",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:05.883",
+ "lastModified": "2025-02-26T06:37:05.883",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvideo: fbdev: cirrusfb: check pixclock to avoid divide by zero\n\nDo a sanity check on pixclock value to avoid divide by zero.\n\nIf the pixclock value is zero, the cirrusfb driver will round up\npixclock to get the derived frequency as close to maxclock as\npossible.\n\nSyzkaller reported a divide error in cirrusfb_check_pixclock.\n\ndivide error: 0000 [#1] SMP KASAN PTI\nCPU: 0 PID: 14938 Comm: cirrusfb_test Not tainted 5.15.0-rc6 #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.11.0-2\nRIP: 0010:cirrusfb_check_var+0x6f1/0x1260\n\nCall Trace:\n fb_set_var+0x398/0xf90\n do_fb_ioctl+0x4b8/0x6f0\n fb_ioctl+0xeb/0x130\n __x64_sys_ioctl+0x19d/0x220\n do_syscall_64+0x3a/0x80\n entry_SYSCALL_64_after_hwframe+0x44/0xae"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1d3fb46439ad4e8f0c5739eb33d1875ac9e0f135",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/40b13e3d85744210db13457785646634e2d056bd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/45800c42ef000f417270bcfc08630e42486fca99",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/53a2088a396cfa1da92690a1da289634cd73bf0d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5c6f402bdcf9e7239c6bc7087eda71ac99b31379",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6fe23ff94e7840097202e85c148688940b37c9b1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8c7e2141fb89c620ab4e41512e262fbf25b8260d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c656d04247a2654ede5cead2ecbf83431dad5261",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e498b504f8c81b07efab9febf8503448de4dc9cf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47642.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47642.json
new file mode 100644
index 00000000000..355bf53de27
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47642.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2021-47642",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:05.993",
+ "lastModified": "2025-02-26T06:37:05.993",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvideo: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow\n\nCoverity complains of a possible buffer overflow. However,\ngiven the 'static' scope of nvidia_setup_i2c_bus() it looks\nlike that can't happen after examiniing the call sites.\n\nCID 19036 (#1 of 1): Copy into fixed size buffer (STRING_OVERFLOW)\n1. fixed_size_dest: You might overrun the 48-character fixed-size string\n chan->adapter.name by copying name without checking the length.\n2. parameter_as_source: Note: This defect has an elevated risk because the\n source argument is a parameter of the current function.\n 89 strcpy(chan->adapter.name, name);\n\nFix this warning by using strscpy() which will silence the warning and\nprevent any future buffer overflows should the names used to identify the\nchannel become much longer."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/055cdd2e7b992921424d4daaa285ced787fb205f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/08dff482012758935c185532b1ad7d584785a86e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/37a1a2e6eeeb101285cd34e12e48a881524701aa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/41baa86b6c802cdc6ab8ff2d46c083c9be93de81",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/47e5533adf118afaf06d25a3e2aaaab89371b1c5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/580e5d3815474b8349250c25c16416585a72c7fe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6a5226e544ac043bb2d8dc1bfe8920d02282f7cd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/72dd5c46a152136712a55bf026a9aa8c1b12b60d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9ff2f7294ab0f011cd4d1b7dcd9a07d8fdf72834",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47643.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47643.json
new file mode 100644
index 00000000000..944b62a9df3
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47643.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2021-47643",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:06.097",
+ "lastModified": "2025-02-26T06:37:06.097",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: ir_toy: free before error exiting\n\nFix leak in error path."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2011363c196846c083649c91ed30aeef64358d52",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/382e0f6958ef34eb093127b6d74c12f3b8fd0904",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/52cdb013036391d9d87aba5b4fc49cdfc6ea4b23",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/93ef3fdf3b6633c58f049e5a6be755777dde4340",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/99e3f83539cac6884a4df02cb204a57a184ea12b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47644.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47644.json
new file mode 100644
index 00000000000..7792ef8d05f
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47644.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2021-47644",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:06.197",
+ "lastModified": "2025-02-26T06:37:06.197",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: staging: media: zoran: move videodev alloc\n\nMove some code out of zr36057_init() and create new functions for handling\nzr->video_dev. This permit to ease code reading and fix a zr->video_dev\nmemory leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1e501ec38796f43e995731d1bcd4173cb1ccfce0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/82e3a496eb56da0b9f29fdc5b63cedb3289e91de",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bd01629315ffd5b63da91d0bd529a77d30e55028",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c1ba65100a359fe28cfe37e09e10c99f247cbf1e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ff3357bffd9fb78f59762d8955afc7382a279079",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47645.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47645.json
new file mode 100644
index 00000000000..13b748e57be
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47645.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2021-47645",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:06.293",
+ "lastModified": "2025-02-26T06:37:06.293",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com\n\nOn the case tmp_dcim=1, the index of buffer is miscalculated.\nThis generate a NULL pointer dereference later.\n\nSo let's fix the calcul and add a check to prevent this to reappear."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/20811bbe685ca3eddd34b0c750860427d7030910",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/20db2ed1e2f9fcd417fa67853e5154f0c2537d6c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7e76f3ed7ab2ae026c6ef9cc23096a7554af8c52",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bafec1a6ba4b187a7fcdcfce0faebdc623d4ef8e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e3b86f4e558cea9eed71d894df2f19b10d60a207",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47646.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47646.json
new file mode 100644
index 00000000000..f3cb74d578d
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47646.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2021-47646",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:06.390",
+ "lastModified": "2025-02-26T06:37:06.390",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"Revert \"block, bfq: honor already-setup queue merges\"\"\n\nA crash [1] happened to be triggered in conjunction with commit\n2d52c58b9c9b (\"block, bfq: honor already-setup queue merges\"). The\nlatter was then reverted by commit ebc69e897e17 (\"Revert \"block, bfq:\nhonor already-setup queue merges\"\"). Yet, the reverted commit was not\nthe one introducing the bug. In fact, it actually triggered a UAF\nintroduced by a different commit, and now fixed by commit d29bd41428cf\n(\"block, bfq: reset last_bfqq_created on group change\").\n\nSo, there is no point in keeping commit 2d52c58b9c9b (\"block, bfq:\nhonor already-setup queue merges\") out. This commit restores it.\n\n[1] https://bugzilla.kernel.org/show_bug.cgi?id=214503"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/15729ff8143f8135b03988a100a19e66d7cb7ecd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4083925bd6dc89216d156474a8076feec904e607",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/65d8a737452e88f251fe5d925371de6d606df613",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/931aff627469a75c77b9fd3823146d0575afffd6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/abc2129e646af7b43025d90a071f83043f1ae76c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc051f497eac9d8a0d816cd4bffa3415f2724871",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f990f0985eda59d4f29fc83fcf300c92b1225d39",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47647.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47647.json
new file mode 100644
index 00000000000..70166c74770
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47647.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2021-47647",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:06.490",
+ "lastModified": "2025-02-26T06:37:06.490",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: qcom: ipq8074: fix PCI-E clock oops\n\nFix PCI-E clock related kernel oops that are caused by a missing clock\nparent.\n\npcie0_rchng_clk_src has num_parents set to 2 but only one parent is\nactually set via parent_hws, it should also have \"XO\" defined.\nThis will cause the kernel to panic on a NULL pointer in\nclk_core_get_parent_by_index().\n\nSo, to fix this utilize clk_parent_data to provide gcc_xo_gpll0 parent\ndata.\nSince there is already an existing static const char * const gcc_xo_gpll0[]\nused to provide the same parents via parent_names convert those users to\nclk_parent_data as well.\n\nWithout this earlycon is needed to even catch the OOPS as it will reset\nthe board before serial is initialized with the following:\n\n[ 0.232279] Unable to handle kernel paging request at virtual address 0000a00000000000\n[ 0.232322] Mem abort info:\n[ 0.239094] ESR = 0x96000004\n[ 0.241778] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 0.244908] SET = 0, FnV = 0\n[ 0.250377] EA = 0, S1PTW = 0\n[ 0.253236] FSC = 0x04: level 0 translation fault\n[ 0.256277] Data abort info:\n[ 0.261141] ISV = 0, ISS = 0x00000004\n[ 0.264262] CM = 0, WnR = 0\n[ 0.267820] [0000a00000000000] address between user and kernel address ranges\n[ 0.270954] Internal error: Oops: 96000004 [#1] SMP\n[ 0.278067] Modules linked in:\n[ 0.282751] CPU: 1 PID: 1 Comm: swapper/0 Not tainted 5.15.10 #0\n[ 0.285882] Hardware name: Xiaomi AX3600 (DT)\n[ 0.292043] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 0.296299] pc : clk_core_get_parent_by_index+0x68/0xec\n[ 0.303067] lr : __clk_register+0x1d8/0x820\n[ 0.308273] sp : ffffffc01111b7d0\n[ 0.312438] x29: ffffffc01111b7d0 x28: 0000000000000000 x27: 0000000000000040\n[ 0.315919] x26: 0000000000000002 x25: 0000000000000000 x24: ffffff8000308800\n[ 0.323037] x23: ffffff8000308850 x22: ffffff8000308880 x21: ffffff8000308828\n[ 0.330155] x20: 0000000000000028 x19: ffffff8000309700 x18: 0000000000000020\n[ 0.337272] x17: 000000005cc86990 x16: 0000000000000004 x15: ffffff80001d9d0a\n[ 0.344391] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000006\n[ 0.351508] x11: 0000000000000003 x10: 0101010101010101 x9 : 0000000000000000\n[ 0.358626] x8 : 7f7f7f7f7f7f7f7f x7 : 6468626f5e626266 x6 : 17000a3a403c1b06\n[ 0.365744] x5 : 061b3c403a0a0017 x4 : 0000000000000000 x3 : 0000000000000001\n[ 0.372863] x2 : 0000a00000000000 x1 : 0000000000000001 x0 : ffffff8000309700\n[ 0.379982] Call trace:\n[ 0.387091] clk_core_get_parent_by_index+0x68/0xec\n[ 0.389351] __clk_register+0x1d8/0x820\n[ 0.394210] devm_clk_hw_register+0x5c/0xe0\n[ 0.398030] devm_clk_register_regmap+0x44/0x8c\n[ 0.402198] qcom_cc_really_probe+0x17c/0x1d0\n[ 0.406711] qcom_cc_probe+0x34/0x44\n[ 0.411224] gcc_ipq8074_probe+0x18/0x30\n[ 0.414869] platform_probe+0x68/0xe0\n[ 0.418776] really_probe.part.0+0x9c/0x30c\n[ 0.422336] __driver_probe_device+0x98/0x144\n[ 0.426329] driver_probe_device+0x44/0x11c\n[ 0.430842] __device_attach_driver+0xb4/0x120\n[ 0.434836] bus_for_each_drv+0x68/0xb0\n[ 0.439349] __device_attach+0xb0/0x170\n[ 0.443081] device_initial_probe+0x14/0x20\n[ 0.446901] bus_probe_device+0x9c/0xa4\n[ 0.451067] device_add+0x35c/0x834\n[ 0.454886] of_device_add+0x54/0x64\n[ 0.458360] of_platform_device_create_pdata+0xc0/0x100\n[ 0.462181] of_platform_bus_create+0x114/0x370\n[ 0.467128] of_platform_bus_create+0x15c/0x370\n[ 0.471641] of_platform_populate+0x50/0xcc\n[ 0.476155] of_platform_default_populate_init+0xa8/0xc8\n[ 0.480324] do_one_initcall+0x50/0x1b0\n[ 0.485877] kernel_init_freeable+0x234/0x29c\n[ 0.489436] kernel_init+0x24/0x120\n[ 0.493948] ret_from_fork+0x10/0x20\n[ 0.497253] Code: d50323bf d65f03c0 f94002a2 b4000302 (f9400042)\n[ 0.501079] ---[ end trace 4ca7e1129da2abce ]---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/41e360fa73a4c2f5b78f5ded78a5375b08c206a5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5a5576ad405c3c89fc9afb245c4dcc3e412b0aa9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8b89c9e68a01a19a1dd689a42aa65d545e931899",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bf8f5182b8f59309809b41c1d1730ed9ca6134b1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d02b3d4a8c525068bc5cfb4341e0023d8eb82ace",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47648.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47648.json
new file mode 100644
index 00000000000..d30e6a047dc
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47648.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2021-47648",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:06.597",
+ "lastModified": "2025-02-26T06:37:06.597",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpu: host1x: Fix a memory leak in 'host1x_remove()'\n\nAdd a missing 'host1x_channel_list_free()' call in the remove function,\nas already done in the error handling path of the probe function."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/025c6643a81564f066d8381b9e2f4603e0f8438f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5124a344983e1b9670dae7add0e4d00d589aabcd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6bb107332db28a0e9256c2d36a0902b85307612c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c06577a80485511b894cb688e881ef0bc2d1d296",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fe1ce680560d4f0049ffa0c687de17567421c1ec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47649.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47649.json
new file mode 100644
index 00000000000..09773a3160d
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47649.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2021-47649",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:06.687",
+ "lastModified": "2025-02-26T06:37:06.687",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nudmabuf: validate ubuf->pagecount\n\nSyzbot has reported GPF in sg_alloc_append_table_from_pages(). The\nproblem was in ubuf->pages == ZERO_PTR.\n\nubuf->pagecount is calculated from arguments passed from user-space. If\nuser creates udmabuf with list.size == 0 then ubuf->pagecount will be\nalso equal to zero; it causes kmalloc_array() to return ZERO_PTR.\n\nFix it by validating ubuf->pagecount before passing it to\nkmalloc_array()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2b6dd600dd72573c23ea180b5b0b2f1813405882",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5d50f851dd307c07ca5591297093f19967c834a9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/811b667cefbea9cb7511a874b169d6a92907137e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9e9b4a269f84d3230f2af84ff42322db676440d9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a3728d32fc61eb0fe283cb8ff60b2c8f751e2202",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b267a8118c2b171bf7d67b90ed64154eeab9fae0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47650.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47650.json
new file mode 100644
index 00000000000..768b13bd475
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47650.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2021-47650",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:06.780",
+ "lastModified": "2025-02-26T06:37:06.780",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: soc-compress: prevent the potentially use of null pointer\n\nThere is one call trace that snd_soc_register_card()\n->snd_soc_bind_card()->soc_init_pcm_runtime()\n->snd_soc_dai_compress_new()->snd_soc_new_compress().\nIn the trace the 'codec_dai' transfers from card->dai_link,\nand we can see from the snd_soc_add_pcm_runtime() in\nsnd_soc_bind_card() that, if value of card->dai_link->num_codecs\nis 0, then 'codec_dai' could be null pointer caused\nby index out of bound in 'asoc_rtd_to_codec(rtd, 0)'.\nAnd snd_soc_register_card() is called by various platforms.\nTherefore, it is better to add the check in the case of misusing.\nAnd because 'cpu_dai' has already checked in soc_init_pcm_runtime(),\nthere is no need to check again.\nAdding the check as follow, then if 'codec_dai' is null,\nsnd_soc_new_compress() will not pass through the check\n'if (playback + capture != 1)', avoiding the leftover use of\n'codec_dai'."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/08af6da684b44097ea09f1d74d5858b837ed203b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4639c1d97f385f4784f44d66a3da0672f4951ada",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/68a69ad8df959e5211ed4a8e120783b2d352ea74",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/de2c6f98817fa5decb9b7d3b3a8a3ab864c10588",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f69a75cb8a98c6c487d620442c68595726a69f60",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fc237b8d624f4bcb0f21a532627ce4e3b3a85569",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47651.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47651.json
new file mode 100644
index 00000000000..0f5111e4c4b
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47651.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2021-47651",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:06.880",
+ "lastModified": "2025-02-26T06:37:06.880",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: rpmpd: Check for null return of devm_kcalloc\n\nBecause of the possible failure of the allocation, data->domains might\nbe NULL pointer and will cause the dereference of the NULL pointer\nlater.\nTherefore, it might be better to check it and directly return -ENOMEM\nwithout releasing data manually if fails, because the comment of the\ndevm_kmalloc() says \"Memory allocated with this function is\nautomatically freed on driver detach.\"."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/31b5124d742969ea8bf7a1360596f548ca23e770",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5a811126d38f9767a20cc271b34db7c8efc5a46c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/724376c30af5a57686b223dbcd6188e07d2a1de2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/755dbc3d73789ac9f0017c729abf5e4b153bf799",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/84b89fa877ad576e9ee8130f412cfd592f274508",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b5d6eba71997b6d661935d2b15094ac7f9f6132d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47652.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47652.json
new file mode 100644
index 00000000000..29e824a1407
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47652.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2021-47652",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:06.973",
+ "lastModified": "2025-02-26T06:37:06.973",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvideo: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()\n\nI got a null-ptr-deref report:\n\nBUG: kernel NULL pointer dereference, address: 0000000000000000\n...\nRIP: 0010:fb_destroy_modelist+0x38/0x100\n...\nCall Trace:\n ufx_usb_probe.cold+0x2b5/0xac1 [smscufx]\n usb_probe_interface+0x1aa/0x3c0 [usbcore]\n really_probe+0x167/0x460\n...\n ret_from_fork+0x1f/0x30\n\nIf fb_alloc_cmap() fails in ufx_usb_probe(), fb_destroy_modelist() will\nbe called to destroy modelist in the error handling path. But modelist\nhas not been initialized yet, so it will result in null-ptr-deref.\n\nInitialize modelist before calling fb_alloc_cmap() to fix this bug."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0fd28daec73525382e5c992db8743bf76e42cd5c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1791f487f877a9e83d81c8677bd3e7b259e7cb27",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/64ec3e678d76419f207b9cdd338dda438ca10b1c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9280ef235b05e8f19f8bc6d547b992f0a0ef398d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c420b540db4b5d69de0a36d8b9d9a6a79a04f05a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d1b6a1f0c23b7164250479bf92e2893291dca539",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d396c651e2b508b6179bb678cc029f3becbf5170",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/da8b269cc0a2526ebeaccbe2484c999eb0f822cf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dd3a6cc7385b89ec2303f39dfc3bafa4e24cec4b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47653.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47653.json
new file mode 100644
index 00000000000..f6496bdb481
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47653.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2021-47653",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:07.080",
+ "lastModified": "2025-02-26T06:37:07.080",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: davinci: vpif: fix use-after-free on driver unbind\n\nThe driver allocates and registers two platform device structures during\nprobe, but the devices were never deregistered on driver unbind.\n\nThis results in a use-after-free on driver unbind as the device\nstructures were allocated using devres and would be freed by driver\ncore when remove() returns.\n\nFix this by adding the missing deregistration calls to the remove()\ncallback and failing probe on registration errors.\n\nNote that the platform device structures must be freed using a proper\nrelease callback to avoid leaking associated resources like device\nnames."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/43acb728bbc40169d2e2425e84a80068270974be",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6512c3c39cb6b573b791ce45365818a38b76afbe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9ffc602e14d7b9f7e7cb2f67e18dfef9ef8af676",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b5a3bb7f6f164eb6ee74ef4898dcd019b2063448",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47654.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47654.json
new file mode 100644
index 00000000000..09117e7cae2
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47654.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2021-47654",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:07.170",
+ "lastModified": "2025-02-26T06:37:07.170",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsamples/landlock: Fix path_list memory leak\n\nClang static analysis reports this error\n\nsandboxer.c:134:8: warning: Potential leak of memory\n pointed to by 'path_list'\n ret = 0;\n ^\npath_list is allocated in parse_path() but never freed."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/017196730299ccd6eed24bbfabed8af4ffd81530",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/20fbf100f84b9aeb9c91421abe1927bc152bc32b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/49b0d8bf05809df5f87e5c03e26d74bdfdab4571",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/66b513b7c64a7290c1fbb88e657f7cece992e131",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47655.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47655.json
new file mode 100644
index 00000000000..46d458a384d
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47655.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2021-47655",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:07.267",
+ "lastModified": "2025-02-26T06:37:07.267",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: venus: vdec: fixed possible memory leak issue\n\nThe venus_helper_alloc_dpb_bufs() implementation allows an early return\non an error path when checking the id from ida_alloc_min() which would\nnot release the earlier buffer allocation.\n\nMove the direct kfree() from the error checking of dma_alloc_attrs() to\nthe common fail path to ensure that allocations are released on all\nerror paths in this function.\n\nAddresses-Coverity: 1494120 (\"Resource leak\")"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/55bccafc246b2e64763a155ec454470c07a54a6e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5cedfe8aaf1875a5305897107b7f298db4260019",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5f89d05ba93df9c2cdfe493843f93288e55e99eb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8403fdd775858a7bf04868d43daea0acbe49ddfc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47656.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47656.json
new file mode 100644
index 00000000000..7fc4be2af6a
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47656.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2021-47656",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:07.360",
+ "lastModified": "2025-02-26T06:37:07.360",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\njffs2: fix use-after-free in jffs2_clear_xattr_subsystem\n\nWhen we mount a jffs2 image, assume that the first few blocks of\nthe image are normal and contain at least one xattr-related inode,\nbut the next block is abnormal. As a result, an error is returned\nin jffs2_scan_eraseblock(). jffs2_clear_xattr_subsystem() is then\ncalled in jffs2_build_filesystem() and then again in\njffs2_do_fill_super().\n\nFinally we can observe the following report:\n ==================================================================\n BUG: KASAN: use-after-free in jffs2_clear_xattr_subsystem+0x95/0x6ac\n Read of size 8 at addr ffff8881243384e0 by task mount/719\n\n Call Trace:\n dump_stack+0x115/0x16b\n jffs2_clear_xattr_subsystem+0x95/0x6ac\n jffs2_do_fill_super+0x84f/0xc30\n jffs2_fill_super+0x2ea/0x4c0\n mtd_get_sb+0x254/0x400\n mtd_get_sb_by_nr+0x4f/0xd0\n get_tree_mtd+0x498/0x840\n jffs2_get_tree+0x25/0x30\n vfs_get_tree+0x8d/0x2e0\n path_mount+0x50f/0x1e50\n do_mount+0x107/0x130\n __se_sys_mount+0x1c5/0x2f0\n __x64_sys_mount+0xc7/0x160\n do_syscall_64+0x45/0x70\n entry_SYSCALL_64_after_hwframe+0x44/0xa9\n\n Allocated by task 719:\n kasan_save_stack+0x23/0x60\n __kasan_kmalloc.constprop.0+0x10b/0x120\n kasan_slab_alloc+0x12/0x20\n kmem_cache_alloc+0x1c0/0x870\n jffs2_alloc_xattr_ref+0x2f/0xa0\n jffs2_scan_medium.cold+0x3713/0x4794\n jffs2_do_mount_fs.cold+0xa7/0x2253\n jffs2_do_fill_super+0x383/0xc30\n jffs2_fill_super+0x2ea/0x4c0\n [...]\n\n Freed by task 719:\n kmem_cache_free+0xcc/0x7b0\n jffs2_free_xattr_ref+0x78/0x98\n jffs2_clear_xattr_subsystem+0xa1/0x6ac\n jffs2_do_mount_fs.cold+0x5e6/0x2253\n jffs2_do_fill_super+0x383/0xc30\n jffs2_fill_super+0x2ea/0x4c0\n [...]\n\n The buggy address belongs to the object at ffff8881243384b8\n which belongs to the cache jffs2_xattr_ref of size 48\n The buggy address is located 40 bytes inside of\n 48-byte region [ffff8881243384b8, ffff8881243384e8)\n [...]\n ==================================================================\n\nThe triggering of the BUG is shown in the following stack:\n-----------------------------------------------------------\njffs2_fill_super\n jffs2_do_fill_super\n jffs2_do_mount_fs\n jffs2_build_filesystem\n jffs2_scan_medium\n jffs2_scan_eraseblock <--- ERROR\n jffs2_clear_xattr_subsystem <--- free\n jffs2_clear_xattr_subsystem <--- free again\n-----------------------------------------------------------\n\nAn error is returned in jffs2_do_mount_fs(). If the error is returned\nby jffs2_sum_init(), the jffs2_clear_xattr_subsystem() does not need to\nbe executed. If the error is returned by jffs2_build_filesystem(), the\njffs2_clear_xattr_subsystem() also does not need to be executed again.\nSo move jffs2_clear_xattr_subsystem() from 'out_inohash' to 'out_root'\nto fix this UAF problem."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/22327bd7988f21de3a53c1373f3b81542bfe1f44",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/30bf7244acf32f19cb722c39f7bc1c2a9f300422",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3bd2454162ec6bbb5503233c804fce6e4b6dcec5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4c7c44ee1650677fbe89d86edbad9497b7679b5c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7a75740206af5f17e9f3efa384211cba70213da1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7bb7428dd73991bf4b3a7a61b493ca50046c2b13",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8c0f024f29e055840a5a89fe23b96ae3f921afed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9150cb625b46f68d524f4cfd491f1aafc23e10a9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c3b07c875fa8f906f932976460fd14798596f101",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47657.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47657.json
new file mode 100644
index 00000000000..4aac8968e8b
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47657.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2021-47657",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:07.467",
+ "lastModified": "2025-02-26T06:37:07.467",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()\n\nIf virtio_gpu_object_shmem_init() fails (e.g. due to fault injection, as it\nhappened in the bug report by syzbot), virtio_gpu_array_put_free() could be\ncalled with objs equal to NULL.\n\nEnsure that objs is not NULL in virtio_gpu_array_put_free(), or otherwise\nreturn from the function."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/6b79f96f4a23846516e5e6e4dd37fc06f43a60dd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/abc9ad36df16e27ac1c665085157f1a082d39bac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ac92b474eeeed75b8660374ba1d129a121c09da8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b094fece3810c71ceee6f0921676cb65d4e68c5a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47658.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47658.json
new file mode 100644
index 00000000000..76f31ea078d
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47658.json
@@ -0,0 +1,21 @@
+{
+ "id": "CVE-2021-47658",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:07.557",
+ "lastModified": "2025-02-26T06:37:07.557",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/pm: fix a potential gpu_metrics_table memory leak\n\nMemory is allocated for gpu_metrics_table in renoir_init_smc_tables(),\nbut not freed in int smu_v12_0_fini_smc_tables(). Free it!"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/583637d66a70fc7090e12fb0ebbacc33d39e2214",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47659.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47659.json
new file mode 100644
index 00000000000..2877d523cb9
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47659.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2021-47659",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:07.640",
+ "lastModified": "2025-02-26T06:37:07.640",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/plane: Move range check for format_count earlier\n\nWhile the check for format_count > 64 in __drm_universal_plane_init()\nshouldn't be hit (it's a WARN_ON), in its current position it will then\nleak the plane->format_types array and fail to call\ndrm_mode_object_unregister() leaking the modeset identifier. Move it to\nthe start of the function to avoid allocating those resources in the\nfirst place."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1e29d829ad51d1472dd035487953a6724b56fc33",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4ab7e453a3ee88c274cf97bee9487ab92a66d313",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4b674dd69701c2e22e8e7770c1706a69f3b17269",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/787163d19bc3cdc6ca4b96223f62208534d1cf6b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/978e3d023256bfaf34a0033d40c94e8a8e70cf3c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ad6dd7a2bac86118985c7b3426e175b9d3c1ec4f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b5cd108143513e4498027b96ec4710702d186f11",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2021/CVE-2021-476xx/CVE-2021-47660.json b/CVE-2021/CVE-2021-476xx/CVE-2021-47660.json
new file mode 100644
index 00000000000..cc14b989a17
--- /dev/null
+++ b/CVE-2021/CVE-2021-476xx/CVE-2021-47660.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2021-47660",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T06:37:07.733",
+ "lastModified": "2025-02-26T06:37:07.733",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'\n\nAll error handling paths lead to 'out' where many resources are freed.\n\nDo it as well here instead of a direct return, otherwise 'log', 'ra' and\n'log->one_page_buf' (at least) will leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2c97519ed6b4239594c58ddacf3d0d576cf070cc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bc4a1d384a04c6dba9312e1421a9f9f7c03339a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d8be98ab88250dc12a98efdb703792a537b0eac3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e589f9b7078e1c0191613cd736f598e81d2390de",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-214xx/CVE-2022-21445.json b/CVE-2022/CVE-2022-214xx/CVE-2022-21445.json
index 6ab3f6413fe..63bd8fde2e7 100644
--- a/CVE-2022/CVE-2022-214xx/CVE-2022-21445.json
+++ b/CVE-2022/CVE-2022-214xx/CVE-2022-21445.json
@@ -2,7 +2,7 @@
"id": "CVE-2022-21445",
"sourceIdentifier": "secalert_us@oracle.com",
"published": "2022-04-19T21:15:15.907",
- "lastModified": "2024-11-21T06:44:43.010",
+ "lastModified": "2025-02-26T17:15:12.863",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -78,6 +78,16 @@
"value": "CWE-502"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-502"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2022/CVE-2022-257xx/CVE-2022-25773.json b/CVE-2022/CVE-2022-257xx/CVE-2022-25773.json
new file mode 100644
index 00000000000..5753dbdaf8e
--- /dev/null
+++ b/CVE-2022/CVE-2022-257xx/CVE-2022-25773.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2022-25773",
+ "sourceIdentifier": "security@mautic.org",
+ "published": "2025-02-26T13:15:32.550",
+ "lastModified": "2025-02-26T13:15:32.550",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server.\n\n * Improper Limitation of a Pathname to a Restricted Directory:\u00a0A vulnerability exists in the asset upload functionality that allows users to upload files to directories outside of the intended temporary directory."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "security@mautic.org",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
+ "baseScore": 4.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 1.4
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "security@mautic.org",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-22"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/mautic/mautic/security/advisories/GHSA-4w2w-36vm-c8hf",
+ "source": "security@mautic.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-40xx/CVE-2022-4095.json b/CVE-2022/CVE-2022-40xx/CVE-2022-4095.json
index be3d8954476..1b9923cc6d0 100644
--- a/CVE-2022/CVE-2022-40xx/CVE-2022-4095.json
+++ b/CVE-2022/CVE-2022-40xx/CVE-2022-4095.json
@@ -2,7 +2,7 @@
"id": "CVE-2022-4095",
"sourceIdentifier": "secalert@redhat.com",
"published": "2023-03-22T15:15:10.113",
- "lastModified": "2024-11-21T07:34:34.383",
+ "lastModified": "2025-02-26T17:15:13.830",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.9
}
]
},
diff --git a/CVE-2022/CVE-2022-450xx/CVE-2022-45004.json b/CVE-2022/CVE-2022-450xx/CVE-2022-45004.json
index 34d7bbd6c7f..cfed24d3d80 100644
--- a/CVE-2022/CVE-2022-450xx/CVE-2022-45004.json
+++ b/CVE-2022/CVE-2022-450xx/CVE-2022-45004.json
@@ -2,7 +2,7 @@
"id": "CVE-2022-45004",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-22T21:15:18.027",
- "lastModified": "2024-11-21T07:28:36.307",
+ "lastModified": "2025-02-26T17:15:13.280",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-79"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2022/CVE-2022-456xx/CVE-2022-45634.json b/CVE-2022/CVE-2022-456xx/CVE-2022-45634.json
index e295b5bda4d..8d77b43df09 100644
--- a/CVE-2022/CVE-2022-456xx/CVE-2022-45634.json
+++ b/CVE-2022/CVE-2022-456xx/CVE-2022-45634.json
@@ -2,7 +2,7 @@
"id": "CVE-2022-45634",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-22T02:15:48.430",
- "lastModified": "2024-11-21T07:29:29.350",
+ "lastModified": "2025-02-26T17:15:13.513",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
+ "baseScore": 4.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 1.4
}
]
},
@@ -45,6 +65,16 @@
"value": "NVD-CWE-noinfo"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-200"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2022/CVE-2022-486xx/CVE-2022-48629.json b/CVE-2022/CVE-2022-486xx/CVE-2022-48629.json
index 65023e3abba..bb71bb7977b 100644
--- a/CVE-2022/CVE-2022-486xx/CVE-2022-48629.json
+++ b/CVE-2022/CVE-2022-486xx/CVE-2022-48629.json
@@ -2,13 +2,13 @@
"id": "CVE-2022-48629",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-03-05T12:15:45.707",
- "lastModified": "2025-02-14T15:31:56.023",
- "vulnStatus": "Analyzed",
+ "lastModified": "2025-02-26T07:00:18.270",
+ "vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
- "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qcom-rng - ensure buffer for generate is completely filled\n\nThe generate function in struct rng_alg expects that the destination\nbuffer is completely filled if the function returns 0. qcom_rng_read()\ncan run into a situation where the buffer is partially filled with\nrandomness and the remaining part of the buffer is zeroed since\nqcom_rng_generate() doesn't check the return value. This issue can\nbe reproduced by running the following from libkcapi:\n\n kcapi-rng -b 9000000 > OUTFILE\n\nThe generated OUTFILE will have three huge sections that contain all\nzeros, and this is caused by the code where the test\n'val & PRNG_STATUS_DATA_AVAIL' fails.\n\nLet's fix this issue by ensuring that qcom_rng_read() always returns\nwith a full buffer if the function returns success. Let's also have\nqcom_rng_generate() return the correct value.\n\nHere's some statistics from the ent project\n(https://www.fourmilab.ch/random/) that shows information about the\nquality of the generated numbers:\n\n $ ent -c qcom-random-before\n Value Char Occurrences Fraction\n 0 606748 0.067416\n 1 33104 0.003678\n 2 33001 0.003667\n ...\n 253 ? 32883 0.003654\n 254 ? 33035 0.003671\n 255 ? 33239 0.003693\n\n Total: 9000000 1.000000\n\n Entropy = 7.811590 bits per byte.\n\n Optimum compression would reduce the size\n of this 9000000 byte file by 2 percent.\n\n Chi square distribution for 9000000 samples is 9329962.81, and\n randomly would exceed this value less than 0.01 percent of the\n times.\n\n Arithmetic mean value of data bytes is 119.3731 (127.5 = random).\n Monte Carlo value for Pi is 3.197293333 (error 1.77 percent).\n Serial correlation coefficient is 0.159130 (totally uncorrelated =\n 0.0).\n\nWithout this patch, the results of the chi-square test is 0.01%, and\nthe numbers are certainly not random according to ent's project page.\nThe results improve with this patch:\n\n $ ent -c qcom-random-after\n Value Char Occurrences Fraction\n 0 35432 0.003937\n 1 35127 0.003903\n 2 35424 0.003936\n ...\n 253 ? 35201 0.003911\n 254 ? 34835 0.003871\n 255 ? 35368 0.003930\n\n Total: 9000000 1.000000\n\n Entropy = 7.999979 bits per byte.\n\n Optimum compression would reduce the size\n of this 9000000 byte file by 0 percent.\n\n Chi square distribution for 9000000 samples is 258.77, and randomly\n would exceed this value 42.24 percent of the times.\n\n Arithmetic mean value of data bytes is 127.5006 (127.5 = random).\n Monte Carlo value for Pi is 3.141277333 (error 0.01 percent).\n Serial correlation coefficient is 0.000468 (totally uncorrelated =\n 0.0).\n\nThis change was tested on a Nexus 5 phone (msm8974 SoC)."
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qcom-rng - ensure buffer for generate is completely filled\n\nThe generate function in struct rng_alg expects that the destination\nbuffer is completely filled if the function returns 0. qcom_rng_read()\ncan run into a situation where the buffer is partially filled with\nrandomness and the remaining part of the buffer is zeroed since\nqcom_rng_generate() doesn't check the return value. This issue can\nbe reproduced by running the following from libkcapi:\n\n kcapi-rng -b 9000000 > OUTFILE\n\nThe generated OUTFILE will have three huge sections that contain all\nzeros, and this is caused by the code where the test\n'val & PRNG_STATUS_DATA_AVAIL' fails.\n\nLet's fix this issue by ensuring that qcom_rng_read() always returns\nwith a full buffer if the function returns success. Let's also have\nqcom_rng_generate() return the correct value.\n\nHere's some statistics from the ent project\n(https://www.fourmilab.ch/random/) that shows information about the\nquality of the generated numbers:\n\n $ ent -c qcom-random-before\n Value Char Occurrences Fraction\n 0 606748 0.067416\n 1 33104 0.003678\n 2 33001 0.003667\n ...\n 253 \ufffd 32883 0.003654\n 254 \ufffd 33035 0.003671\n 255 \ufffd 33239 0.003693\n\n Total: 9000000 1.000000\n\n Entropy = 7.811590 bits per byte.\n\n Optimum compression would reduce the size\n of this 9000000 byte file by 2 percent.\n\n Chi square distribution for 9000000 samples is 9329962.81, and\n randomly would exceed this value less than 0.01 percent of the\n times.\n\n Arithmetic mean value of data bytes is 119.3731 (127.5 = random).\n Monte Carlo value for Pi is 3.197293333 (error 1.77 percent).\n Serial correlation coefficient is 0.159130 (totally uncorrelated =\n 0.0).\n\nWithout this patch, the results of the chi-square test is 0.01%, and\nthe numbers are certainly not random according to ent's project page.\nThe results improve with this patch:\n\n $ ent -c qcom-random-after\n Value Char Occurrences Fraction\n 0 35432 0.003937\n 1 35127 0.003903\n 2 35424 0.003936\n ...\n 253 \ufffd 35201 0.003911\n 254 \ufffd 34835 0.003871\n 255 \ufffd 35368 0.003930\n\n Total: 9000000 1.000000\n\n Entropy = 7.999979 bits per byte.\n\n Optimum compression would reduce the size\n of this 9000000 byte file by 0 percent.\n\n Chi square distribution for 9000000 samples is 258.77, and randomly\n would exceed this value 42.24 percent of the times.\n\n Arithmetic mean value of data bytes is 127.5006 (127.5 = random).\n Monte Carlo value for Pi is 3.141277333 (error 0.01 percent).\n Serial correlation coefficient is 0.000468 (totally uncorrelated =\n 0.0).\n\nThis change was tested on a Nexus 5 phone (msm8974 SoC)."
},
{
"lang": "es",
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49044.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49044.json
new file mode 100644
index 00000000000..ebd65c8bc09
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49044.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49044",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:41.680",
+ "lastModified": "2025-02-26T07:00:41.680",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm integrity: fix memory corruption when tag_size is less than digest size\n\nIt is possible to set up dm-integrity in such a way that the\n\"tag_size\" parameter is less than the actual digest size. In this\nsituation, a part of the digest beyond tag_size is ignored.\n\nIn this case, dm-integrity would write beyond the end of the\nic->recalc_tags array and corrupt memory. The corruption happened in\nintegrity_recalc->integrity_sector_checksum->crypto_shash_final.\n\nFix this corruption by increasing the tags array so that it has enough\npadding at the end to accomodate the loop in integrity_recalc() being\nable to write a full digest size for the last member of the tags\narray."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/08c1af8f1c13bbf210f1760132f4df24d0ed46d6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4d485cf9b609709e45d5113e6e2b1b01254b2fe9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6a95d91c0b315c965198f6ab7dec7c94129e17e0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6b4bf97587ef6c1927a78934b700204920655123",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7f84c937222944c03f4615ca4742df6bed0e5adf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cd02b2687d66f0a8e716384de4b9a0671331f1dc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49045.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49045.json
new file mode 100644
index 00000000000..9b81b08bb11
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49045.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49045",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:41.790",
+ "lastModified": "2025-02-26T07:00:41.790",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: pcm: Test for \"silence\" field in struct \"pcm_format_data\"\n\nSyzbot reports \"KASAN: null-ptr-deref Write in\nsnd_pcm_format_set_silence\".[1]\n\nIt is due to missing validation of the \"silence\" field of struct\n\"pcm_format_data\" in \"pcm_formats\" array.\n\nAdd a test for valid \"pat\" and, if it is not so, return -EINVAL.\n\n[1] https://lore.kernel.org/lkml/000000000000d188ef05dc2c7279@google.com/"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2f7a26abb8241a0208c68d22815aa247c5ddacab",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/377a80ca6590f40ec8a85227b889a5d399fe26c3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/63038f6e96a77a0abf8083649c53e6a72c1a0124",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/77af45df08768401602472f3e3879dce14f55497",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/912797e54c99a98f0722f21313e13a3938bb6dba",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/97345c90235b1bb7661e7a428d9dcb96b1d7f5d4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c3b2f23bfe5452b00eb1c842bc71098449e4ad9f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eb04e3112a3516e483d60a9af9762961702a6c1b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49046.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49046.json
new file mode 100644
index 00000000000..08198372dd8
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49046.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49046",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:41.890",
+ "lastModified": "2025-02-26T07:00:41.890",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: dev: check return value when calling dev_set_name()\n\nIf dev_set_name() fails, the dev_name() is null, check the return\nvalue of dev_set_name() to avoid the null-ptr-deref."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2f345bb14ad4744950499ff222e2899209297afa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/993eb48fa199b5f476df8204e652eff63dd19361",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c74d77a2d07744147d734138acd6ce9dba715e5d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49047.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49047.json
new file mode 100644
index 00000000000..09361458c4e
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49047.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49047",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:41.983",
+ "lastModified": "2025-02-26T07:00:41.983",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nep93xx: clock: Fix UAF in ep93xx_clk_register_gate()\n\narch/arm/mach-ep93xx/clock.c:154:2: warning: Use of memory after it is freed [clang-analyzer-unix.Malloc]\narch/arm/mach-ep93xx/clock.c:151:2: note: Taking true branch\nif (IS_ERR(clk))\n^\narch/arm/mach-ep93xx/clock.c:152:3: note: Memory is released\nkfree(psc);\n^~~~~~~~~~\narch/arm/mach-ep93xx/clock.c:154:2: note: Use of memory after it is freed\nreturn &psc->hw;\n^ ~~~~~~~~"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0f12166872da46c6b57ba2f1314bbf310b3bf017",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3b68b08885217abd9c57ff9b3bb3eb173eee02a9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49048.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49048.json
new file mode 100644
index 00000000000..9f9002ae946
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49048.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49048",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:42.073",
+ "lastModified": "2025-02-26T07:00:42.073",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix panic when forwarding a pkt with no in6 dev\n\nkongweibin reported a kernel panic in ip6_forward() when input interface\nhas no in6 dev associated.\n\nThe following tc commands were used to reproduce this panic:\ntc qdisc del dev vxlan100 root\ntc qdisc add dev vxlan100 root netem corrupt 5%"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/74b68f5249f16c5f7f675d0f604fa6ae20e3a151",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a263712ba8c9ded25dd9d2d5ced11bcea5b33a3e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ab2f5afb7af5c68389e8c7dd29e0a98fbeaaa435",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/adee01bbf6cb5b3e4ed08be8ff866aac90f13836",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e3fa461d8b0e185b7da8a101fe94dfe6dd500ac0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e69fb3de87a8923e5931a272a38fa3cceb01da44",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49049.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49049.json
new file mode 100644
index 00000000000..e64a3e292d5
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49049.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49049",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:42.170",
+ "lastModified": "2025-02-26T07:00:42.170",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/secretmem: fix panic when growing a memfd_secret\n\nWhen one tries to grow an existing memfd_secret with ftruncate, one gets\na panic [1]. For example, doing the following reliably induces the\npanic:\n\n fd = memfd_secret();\n\n ftruncate(fd, 10);\n ptr = mmap(NULL, 10, PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0);\n strcpy(ptr, \"123456789\");\n\n munmap(ptr, 10);\n ftruncate(fd, 20);\n\nThe basic reason for this is, when we grow with ftruncate, we call down\ninto simple_setattr, and then truncate_inode_pages_range, and eventually\nwe try to zero part of the memory. The normal truncation code does this\nvia the direct map (i.e., it calls page_address() and hands that to\nmemset()).\n\nFor memfd_secret though, we specifically don't map our pages via the\ndirect map (i.e. we call set_direct_map_invalid_noflush() on every\nfault). So the address returned by page_address() isn't useful, and\nwhen we try to memset() with it we panic.\n\nThis patch avoids the panic by implementing a custom setattr for\nmemfd_secret, which detects resizes specifically (setting the size for\nthe first time works just fine, since there are no existing pages to try\nto zero), and rejects them with EINVAL.\n\nOne could argue growing should be supported, but I think that will\nrequire a significantly more lengthy change. So, I propose a minimal\nfix for the benefit of stable kernels, and then perhaps to extend\nmemfd_secret to support growing in a separate patch.\n\n[1]:\n\n BUG: unable to handle page fault for address: ffffa0a889277028\n #PF: supervisor write access in kernel mode\n #PF: error_code(0x0002) - not-present page\n PGD afa01067 P4D afa01067 PUD 83f909067 PMD 83f8bf067 PTE 800ffffef6d88060\n Oops: 0002 [#1] PREEMPT SMP DEBUG_PAGEALLOC PTI\n CPU: 0 PID: 281 Comm: repro Not tainted 5.17.0-dbg-DEV #1\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n RIP: 0010:memset_erms+0x9/0x10\n Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01\n RSP: 0018:ffffb932c09afbf0 EFLAGS: 00010246\n RAX: 0000000000000000 RBX: ffffda63c4249dc0 RCX: 0000000000000fd8\n RDX: 0000000000000fd8 RSI: 0000000000000000 RDI: ffffa0a889277028\n RBP: ffffb932c09afc00 R08: 0000000000001000 R09: ffffa0a889277028\n R10: 0000000000020023 R11: 0000000000000000 R12: ffffda63c4249dc0\n R13: ffffa0a890d70d98 R14: 0000000000000028 R15: 0000000000000fd8\n FS: 00007f7294899580(0000) GS:ffffa0af9bc00000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: ffffa0a889277028 CR3: 0000000107ef6006 CR4: 0000000000370ef0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n ? zero_user_segments+0x82/0x190\n truncate_inode_partial_folio+0xd4/0x2a0\n truncate_inode_pages_range+0x380/0x830\n truncate_setsize+0x63/0x80\n simple_setattr+0x37/0x60\n notify_change+0x3d8/0x4d0\n do_sys_ftruncate+0x162/0x1d0\n __x64_sys_ftruncate+0x1c/0x20\n do_syscall_64+0x44/0xa0\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n Modules linked in: xhci_pci xhci_hcd virtio_net net_failover failover virtio_blk virtio_balloon uhci_hcd ohci_pci ohci_hcd evdev ehci_pci ehci_hcd 9pnet_virtio 9p netfs 9pnet\n CR2: ffffa0a889277028\n\n[lkp@intel.com: secretmem_iops can be static]\n Signed-off-by: kernel test robot \n[axelrasmussen@google.com: return EINVAL]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/9d3b877daf805fed29be8f61aa3d0ea37df82c7b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b6d17c67885a5624e96eb30c4178c65eea8374bf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f9b141f93659e09a52e28791ccbaf69c273b8e92",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49050.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49050.json
new file mode 100644
index 00000000000..13f632ff14e
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49050.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49050",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:42.270",
+ "lastModified": "2025-02-26T07:00:42.270",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmemory: renesas-rpc-if: fix platform-device leak in error path\n\nMake sure to free the flash platform device in the event that\nregistration fails during probe."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/05d1824a7fb43ab9adb1eb82404954af81d8c984",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/66b9b707ea4dcafca92b6261c6924652914e3b73",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b452dbf24d7d9a990d70118462925f6ee287d135",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c089ffc846c85f200db34ad208338f4f81a6d82d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49051.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49051.json
new file mode 100644
index 00000000000..94cb5565cbf
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49051.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49051",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:42.363",
+ "lastModified": "2025-02-26T07:00:42.363",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: aqc111: Fix out-of-bounds accesses in RX fixup\n\naqc111_rx_fixup() contains several out-of-bounds accesses that can be\ntriggered by a malicious (or defective) USB device, in particular:\n\n - The metadata array (desc_offset..desc_offset+2*pkt_count) can be out of bounds,\n causing OOB reads and (on big-endian systems) OOB endianness flips.\n - A packet can overlap the metadata array, causing a later OOB\n endianness flip to corrupt data used by a cloned SKB that has already\n been handed off into the network stack.\n - A packet SKB can be constructed whose tail is far beyond its end,\n causing out-of-bounds heap data to be considered part of the SKB's\n data.\n\nFound doing variant analysis. Tested it with another driver (ax88179_178a), since\nI don't have a aqc111 device to test it, but the code looks very similar."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/36311fe98f55dea9200c69e2dd6d6ddb8fc94080",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/404998a137bcb8a926f7c949030afbe285472593",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/afb8e246527536848b9b4025b40e613edf776a9d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b416898442f2b6aa9f1b2f2968ce07e3abaa05f7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d90df6da50c56ad8b1a132e3cf86b6cdf8f507b7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49052.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49052.json
new file mode 100644
index 00000000000..90c3aaf84a2
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49052.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49052",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:42.463",
+ "lastModified": "2025-02-26T07:00:42.463",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: fix unexpected zeroed page mapping with zram swap\n\nTwo processes under CLONE_VM cloning, user process can be corrupted by\nseeing zeroed page unexpectedly.\n\n CPU A CPU B\n\n do_swap_page do_swap_page\n SWP_SYNCHRONOUS_IO path SWP_SYNCHRONOUS_IO path\n swap_readpage valid data\n swap_slot_free_notify\n delete zram entry\n swap_readpage zeroed(invalid) data\n pte_lock\n map the *zero data* to userspace\n pte_unlock\n pte_lock\n if (!pte_same)\n goto out_nomap;\n pte_unlock\n return and next refault will\n read zeroed data\n\nThe swap_slot_free_notify is bogus for CLONE_VM case since it doesn't\nincrease the refcount of swap slot at copy_mm so it couldn't catch up\nwhether it's safe or not to discard data from backing device. In the\ncase, only the lock it could rely on to synchronize swap slot freeing is\npage table lock. Thus, this patch gets rid of the swap_slot_free_notify\nfunction. With this patch, CPU A will see correct data.\n\n CPU A CPU B\n\n do_swap_page do_swap_page\n SWP_SYNCHRONOUS_IO path SWP_SYNCHRONOUS_IO path\n swap_readpage original data\n pte_lock\n map the original data\n swap_free\n swap_range_free\n bd_disk->fops->swap_slot_free_notify\n swap_readpage read zeroed data\n pte_unlock\n pte_lock\n if (!pte_same)\n goto out_nomap;\n pte_unlock\n return\n on next refault will see mapped data by CPU B\n\nThe concern of the patch would increase memory consumption since it\ncould keep wasted memory with compressed form in zram as well as\nuncompressed form in address space. However, most of cases of zram uses\nno readahead and do_swap_page is followed by swap_free so it will free\nthe compressed form from in zram quickly."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/12ba1d38115a101c45d8e0ca3aa1181fd148e57f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/20ed94f8181a25212e7404e44958e234f407624b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/afac4b88699a06c8b9369f9d759a1ec3c254b788",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e914d8f00391520ecc4495dd0ca0124538ab7119",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f098f8b9820fe3f2e41aefc4329dfe8a3859d1c1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f86d55cf616199404c05f5b0c5c41b17351baa02",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49053.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49053.json
new file mode 100644
index 00000000000..4a137144b88
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49053.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49053",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:42.563",
+ "lastModified": "2025-02-26T07:00:42.563",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: tcmu: Fix possible page UAF\n\ntcmu_try_get_data_page() looks up pages under cmdr_lock, but it does not\ntake refcount properly and just returns page pointer. When\ntcmu_try_get_data_page() returns, the returned page may have been freed by\ntcmu_blocks_release().\n\nWe need to get_page() under cmdr_lock to avoid concurrent\ntcmu_blocks_release()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/a6968f7a367f128d120447360734344d5a3d5336",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a9564d84ed9f6ee71017d062d0d2182154294a4b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aec36b98a1bbaa84bfd8299a306e4c12314af626",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b7f3b5d70c834f49f7d87a2f2ed1c6284d9a0322",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d7c5d79e50be6e06b669141e3db1f977a0dd4e8e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e3e0e067d5b34e4a68e3cc55f8eebc413f56f8ed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fb7a5115422fbd6a4d505e8844f1ef5529f10489",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49054.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49054.json
new file mode 100644
index 00000000000..224c92cd6ab
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49054.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49054",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:42.667",
+ "lastModified": "2025-02-26T07:00:42.667",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nDrivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests\n\nhv_panic_page might contain guest-sensitive information, do not dump it\nover to Hyper-V by default in isolated guests.\n\nWhile at it, update some comments in hyperv_{panic,die}_event()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1b576e81d31b56b248316b8ff816b1cc5c4407c7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6230bc50d6d21cae4c084766623d0a6d17958721",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9f8b577f7b43b2170628d6c537252785dcc2dcea",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49055.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49055.json
new file mode 100644
index 00000000000..91103d04717
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49055.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49055",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:42.760",
+ "lastModified": "2025-02-26T07:00:42.760",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Check for potential null return of kmalloc_array()\n\nAs the kmalloc_array() may return null, the 'event_waiters[i].wait' would lead to null-pointer dereference.\nTherefore, it is better to check the return value of kmalloc_array() to avoid this confusion."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0a692c625e373fef692ffbc7fc41f8a025f01cb7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1d7a5aae884ca727d41c7ed15d4c82fdb67c040c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/32cf90a521dcc0f136db7ee5ba32bfe5f79e460e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/40bf32dbfef866c83a3e74800b81d79e52b6d20b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/94869bb0de69a812f70231b0eb480bb2f7ae73a6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c7a268b33882d5feaafd29c1734456f41ba41396",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ebbb7bb9e80305820dc2328a371c1b35679f2667",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f2658d5966bcee8c3eb487875f459756d4f7cdfc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49056.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49056.json
new file mode 100644
index 00000000000..0ffcd62bbb6
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49056.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49056",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:42.863",
+ "lastModified": "2025-02-26T07:00:42.863",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: abort file assignment prior to assigning creds\n\nWe need to either restore creds properly if we fail on the file\nassignment, or just do the file assignment first instead. Let's do\nthe latter as it's simpler, should make no difference here for\nfile assignment."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/262960775e0d2cdf97a3e33993e95e13175df4bb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/701521403cfb228536b3947035c8a6eca40d8e58",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49057.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49057.json
new file mode 100644
index 00000000000..7e6b878bceb
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49057.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49057",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:42.957",
+ "lastModified": "2025-02-26T07:00:42.957",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: null_blk: end timed out poll request\n\nWhen poll request is timed out, it is removed from the poll list,\nbut not completed, so the request is leaked, and never get chance\nto complete.\n\nFix the issue by ending it in timeout handler."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3e3876d322aef82416ecc496a4d4a587e0fdf7a3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/407d09a22f3f685fd634aa5d05840c64b23bfebc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49058.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49058.json
new file mode 100644
index 00000000000..fb75679ef82
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49058.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49058",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:43.047",
+ "lastModified": "2025-02-26T07:00:43.047",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: potential buffer overflow in handling symlinks\n\nSmatch printed a warning:\n\tarch/x86/crypto/poly1305_glue.c:198 poly1305_update_arch() error:\n\t__memcpy() 'dctx->buf' too small (16 vs u32max)\n\nIt's caused because Smatch marks 'link_len' as untrusted since it comes\nfrom sscanf(). Add a check to ensure that 'link_len' is not larger than\nthe size of the 'link_str' buffer."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1316c28569a80ab3596eeab05bf5e01991e7e739",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/22d658c6c5affed10c8907e67160cef0b6c92186",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3e582749e742e662a8e9bb37cffac62dccaaa1e2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4e166a41180be2f1e66bbb6d46448e80a9a5ec05",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/515e7ba11ef043d6febe69389949c8ef5f25e9d0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/64c4a37ac04eeb43c42d272f6e6c8c12bfcf4304",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9901b07ba42b39266b34a888e48d7306fd707bee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eb5f51756944735ac70cd8bb38637cc202e29c91",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49059.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49059.json
new file mode 100644
index 00000000000..7f81f644c88
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49059.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49059",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:43.150",
+ "lastModified": "2025-02-26T07:00:43.150",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: nci: add flush_workqueue to prevent uaf\n\nOur detector found a concurrent use-after-free bug when detaching an\nNCI device. The main reason for this bug is the unexpected scheduling\nbetween the used delayed mechanism (timer and workqueue).\n\nThe race can be demonstrated below:\n\nThread-1 Thread-2\n | nci_dev_up()\n | nci_open_device()\n | __nci_request(nci_reset_req)\n | nci_send_cmd\n | queue_work(cmd_work)\nnci_unregister_device() |\n nci_close_device() | ...\n del_timer_sync(cmd_timer)[1] |\n... | Worker\nnci_free_device() | nci_cmd_work()\n kfree(ndev)[3] | mod_timer(cmd_timer)[2]\n\nIn short, the cleanup routine thought that the cmd_timer has already\nbeen detached by [1] but the mod_timer can re-attach the timer [2], even\nit is already released [3], resulting in UAF.\n\nThis UAF is easy to trigger, crash trace by POC is like below\n\n[ 66.703713] ==================================================================\n[ 66.703974] BUG: KASAN: use-after-free in enqueue_timer+0x448/0x490\n[ 66.703974] Write of size 8 at addr ffff888009fb7058 by task kworker/u4:1/33\n[ 66.703974]\n[ 66.703974] CPU: 1 PID: 33 Comm: kworker/u4:1 Not tainted 5.18.0-rc2 #5\n[ 66.703974] Workqueue: nfc2_nci_cmd_wq nci_cmd_work\n[ 66.703974] Call Trace:\n[ 66.703974] \n[ 66.703974] dump_stack_lvl+0x57/0x7d\n[ 66.703974] print_report.cold+0x5e/0x5db\n[ 66.703974] ? enqueue_timer+0x448/0x490\n[ 66.703974] kasan_report+0xbe/0x1c0\n[ 66.703974] ? enqueue_timer+0x448/0x490\n[ 66.703974] enqueue_timer+0x448/0x490\n[ 66.703974] __mod_timer+0x5e6/0xb80\n[ 66.703974] ? mark_held_locks+0x9e/0xe0\n[ 66.703974] ? try_to_del_timer_sync+0xf0/0xf0\n[ 66.703974] ? lockdep_hardirqs_on_prepare+0x17b/0x410\n[ 66.703974] ? queue_work_on+0x61/0x80\n[ 66.703974] ? lockdep_hardirqs_on+0xbf/0x130\n[ 66.703974] process_one_work+0x8bb/0x1510\n[ 66.703974] ? lockdep_hardirqs_on_prepare+0x410/0x410\n[ 66.703974] ? pwq_dec_nr_in_flight+0x230/0x230\n[ 66.703974] ? rwlock_bug.part.0+0x90/0x90\n[ 66.703974] ? _raw_spin_lock_irq+0x41/0x50\n[ 66.703974] worker_thread+0x575/0x1190\n[ 66.703974] ? process_one_work+0x1510/0x1510\n[ 66.703974] kthread+0x2a0/0x340\n[ 66.703974] ? kthread_complete_and_exit+0x20/0x20\n[ 66.703974] ret_from_fork+0x22/0x30\n[ 66.703974] \n[ 66.703974]\n[ 66.703974] Allocated by task 267:\n[ 66.703974] kasan_save_stack+0x1e/0x40\n[ 66.703974] __kasan_kmalloc+0x81/0xa0\n[ 66.703974] nci_allocate_device+0xd3/0x390\n[ 66.703974] nfcmrvl_nci_register_dev+0x183/0x2c0\n[ 66.703974] nfcmrvl_nci_uart_open+0xf2/0x1dd\n[ 66.703974] nci_uart_tty_ioctl+0x2c3/0x4a0\n[ 66.703974] tty_ioctl+0x764/0x1310\n[ 66.703974] __x64_sys_ioctl+0x122/0x190\n[ 66.703974] do_syscall_64+0x3b/0x90\n[ 66.703974] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[ 66.703974]\n[ 66.703974] Freed by task 406:\n[ 66.703974] kasan_save_stack+0x1e/0x40\n[ 66.703974] kasan_set_track+0x21/0x30\n[ 66.703974] kasan_set_free_info+0x20/0x30\n[ 66.703974] __kasan_slab_free+0x108/0x170\n[ 66.703974] kfree+0xb0/0x330\n[ 66.703974] nfcmrvl_nci_unregister_dev+0x90/0xd0\n[ 66.703974] nci_uart_tty_close+0xdf/0x180\n[ 66.703974] tty_ldisc_kill+0x73/0x110\n[ 66.703974] tty_ldisc_hangup+0x281/0x5b0\n[ 66.703974] __tty_hangup.part.0+0x431/0x890\n[ 66.703974] tty_release+0x3a8/0xc80\n[ 66.703974] __fput+0x1f0/0x8c0\n[ 66.703974] task_work_run+0xc9/0x170\n[ 66.703974] exit_to_user_mode_prepare+0x194/0x1a0\n[ 66.703974] syscall_exit_to_user_mode+0x19/0x50\n[ 66.703974] do_syscall_64+0x48/0x90\n[ 66.703974] entry_SYSCALL_64_after_hwframe+0x44/0x\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1a1748d0dd0f0a98535c6baeef671c8722107639",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5c63ad2b0a267a524c12c88acb1ba9c2d109a801",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/67677050cecbe0edfdd81cd508415e9636ba7c65",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7d3232214ca4ea8f7d18df264c3b254aa8089d7f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9d243aff5f7e6b04e907c617426bbdf26e996ac8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9ded5ae40f4fe37fcc28f36d76bf45df20be5432",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/edd4600120641e1714e30112e69a548cfb68e067",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef27324e2cb7bb24542d6cb2571740eefe6b00dc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49060.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49060.json
new file mode 100644
index 00000000000..81ae5cc0343
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49060.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49060",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:43.257",
+ "lastModified": "2025-02-26T07:00:43.257",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: Fix NULL pointer dereference in smc_pnet_find_ib()\n\ndev_name() was called with dev.parent as argument but without to\nNULL-check it before.\nSolve this by checking the pointer before the call to dev_name()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/22025513ced3d599ee8b24169141c95cf2467a4a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/35b91e49bc80ca944a8679c3b139ddaf2f8eea0f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3a523807f01455fe9a0c1a433f27cd4411ee400f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a05f5e26cb8bb4d07e0595545fcad1bb406f0085",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d22f4f977236f97e01255a80bca2ea93a8094fc8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49061.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49061.json
new file mode 100644
index 00000000000..c18d6181e6b
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49061.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49061",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:43.353",
+ "lastModified": "2025-02-26T07:00:43.353",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link\n\nWhen using a fixed-link, the altr_tse_pcs driver crashes\ndue to null-pointer dereference as no phy_device is provided to\ntse_pcs_fix_mac_speed function. Fix this by adding a check for\nphy_dev before calling the tse_pcs_fix_mac_speed() function.\n\nAlso clean up the tse_pcs_fix_mac_speed function a bit. There is\nno need to check for splitter_base and sgmii_adapter_base\nbecause the driver will fail if these 2 variables are not\nderived from the device tree."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/08d5e3e954537931c8da7428034808d202e98299",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/62a48383ebe2e159fd68425dd3e16d4c6bd6599a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6c020f05253df04c3480b586fe188a3582740049",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7e59fdf9547c4f948d1d917ec7ffa5fb5ac53bdb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a6aaa00324240967272b451bfa772547bd576ee6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49062.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49062.json
new file mode 100644
index 00000000000..046651e35a2
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49062.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49062",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:43.450",
+ "lastModified": "2025-02-26T07:00:43.450",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncachefiles: Fix KASAN slab-out-of-bounds in cachefiles_set_volume_xattr\n\nUse the actual length of volume coherency data when setting the\nxattr to avoid the following KASAN report.\n\n BUG: KASAN: slab-out-of-bounds in cachefiles_set_volume_xattr+0xa0/0x350 [cachefiles]\n Write of size 4 at addr ffff888101e02af4 by task kworker/6:0/1347\n\n CPU: 6 PID: 1347 Comm: kworker/6:0 Kdump: loaded Not tainted 5.18.0-rc1-nfs-fscache-netfs+ #13\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-4.fc34 04/01/2014\n Workqueue: events fscache_create_volume_work [fscache]\n Call Trace:\n \n dump_stack_lvl+0x45/0x5a\n print_report.cold+0x5e/0x5db\n ? __lock_text_start+0x8/0x8\n ? cachefiles_set_volume_xattr+0xa0/0x350 [cachefiles]\n kasan_report+0xab/0x120\n ? cachefiles_set_volume_xattr+0xa0/0x350 [cachefiles]\n kasan_check_range+0xf5/0x1d0\n memcpy+0x39/0x60\n cachefiles_set_volume_xattr+0xa0/0x350 [cachefiles]\n cachefiles_acquire_volume+0x2be/0x500 [cachefiles]\n ? __cachefiles_free_volume+0x90/0x90 [cachefiles]\n fscache_create_volume_work+0x68/0x160 [fscache]\n process_one_work+0x3b7/0x6a0\n worker_thread+0x2c4/0x650\n ? process_one_work+0x6a0/0x6a0\n kthread+0x16c/0x1a0\n ? kthread_complete_and_exit+0x20/0x20\n ret_from_fork+0x22/0x30\n \n\n Allocated by task 1347:\n kasan_save_stack+0x1e/0x40\n __kasan_kmalloc+0x81/0xa0\n cachefiles_set_volume_xattr+0x76/0x350 [cachefiles]\n cachefiles_acquire_volume+0x2be/0x500 [cachefiles]\n fscache_create_volume_work+0x68/0x160 [fscache]\n process_one_work+0x3b7/0x6a0\n worker_thread+0x2c4/0x650\n kthread+0x16c/0x1a0\n ret_from_fork+0x22/0x30\n\n The buggy address belongs to the object at ffff888101e02af0\n which belongs to the cache kmalloc-8 of size 8\n The buggy address is located 4 bytes inside of\n 8-byte region [ffff888101e02af0, ffff888101e02af8)\n\n The buggy address belongs to the physical page:\n page:00000000a2292d70 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x101e02\n flags: 0x17ffffc0000200(slab|node=0|zone=2|lastcpupid=0x1fffff)\n raw: 0017ffffc0000200 0000000000000000 dead000000000001 ffff888100042280\n raw: 0000000000000000 0000000080660066 00000001ffffffff 0000000000000000\n page dumped because: kasan: bad access detected\n\n Memory state around the buggy address:\n ffff888101e02980: fc 00 fc fc fc fc 00 fc fc fc fc 00 fc fc fc fc\n ffff888101e02a00: 00 fc fc fc fc 00 fc fc fc fc 00 fc fc fc fc 00\n >ffff888101e02a80: fc fc fc fc 00 fc fc fc fc 00 fc fc fc fc 04 fc\n ^\n ffff888101e02b00: fc fc fc 00 fc fc fc fc 00 fc fc fc fc 00 fc fc\n ffff888101e02b80: fc fc 00 fc fc fc fc 00 fc fc fc fc 00 fc fc fc\n =================================================================="
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/09a5df1b88c8f126c8ff9938edf160edd4e92f42",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7b2f6c306601240635c72caa61f682e74d4591b2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49063.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49063.json
new file mode 100644
index 00000000000..ccc56709eef
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49063.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49063",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:43.547",
+ "lastModified": "2025-02-26T07:00:43.547",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: arfs: fix use-after-free when freeing @rx_cpu_rmap\n\nThe CI testing bots triggered the following splat:\n\n[ 718.203054] BUG: KASAN: use-after-free in free_irq_cpu_rmap+0x53/0x80\n[ 718.206349] Read of size 4 at addr ffff8881bd127e00 by task sh/20834\n[ 718.212852] CPU: 28 PID: 20834 Comm: sh Kdump: loaded Tainted: G S W IOE 5.17.0-rc8_nextqueue-devqueue-02643-g23f3121aca93 #1\n[ 718.219695] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0012.070720200218 07/07/2020\n[ 718.223418] Call Trace:\n[ 718.227139]\n[ 718.230783] dump_stack_lvl+0x33/0x42\n[ 718.234431] print_address_description.constprop.9+0x21/0x170\n[ 718.238177] ? free_irq_cpu_rmap+0x53/0x80\n[ 718.241885] ? free_irq_cpu_rmap+0x53/0x80\n[ 718.245539] kasan_report.cold.18+0x7f/0x11b\n[ 718.249197] ? free_irq_cpu_rmap+0x53/0x80\n[ 718.252852] free_irq_cpu_rmap+0x53/0x80\n[ 718.256471] ice_free_cpu_rx_rmap.part.11+0x37/0x50 [ice]\n[ 718.260174] ice_remove_arfs+0x5f/0x70 [ice]\n[ 718.263810] ice_rebuild_arfs+0x3b/0x70 [ice]\n[ 718.267419] ice_rebuild+0x39c/0xb60 [ice]\n[ 718.270974] ? asm_sysvec_apic_timer_interrupt+0x12/0x20\n[ 718.274472] ? ice_init_phy_user_cfg+0x360/0x360 [ice]\n[ 718.278033] ? delay_tsc+0x4a/0xb0\n[ 718.281513] ? preempt_count_sub+0x14/0xc0\n[ 718.284984] ? delay_tsc+0x8f/0xb0\n[ 718.288463] ice_do_reset+0x92/0xf0 [ice]\n[ 718.292014] ice_pci_err_resume+0x91/0xf0 [ice]\n[ 718.295561] pci_reset_function+0x53/0x80\n<...>\n[ 718.393035] Allocated by task 690:\n[ 718.433497] Freed by task 20834:\n[ 718.495688] Last potentially related work creation:\n[ 718.568966] The buggy address belongs to the object at ffff8881bd127e00\n which belongs to the cache kmalloc-96 of size 96\n[ 718.574085] The buggy address is located 0 bytes inside of\n 96-byte region [ffff8881bd127e00, ffff8881bd127e60)\n[ 718.579265] The buggy address belongs to the page:\n[ 718.598905] Memory state around the buggy address:\n[ 718.601809] ffff8881bd127d00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n[ 718.604796] ffff8881bd127d80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc\n[ 718.607794] >ffff8881bd127e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n[ 718.610811] ^\n[ 718.613819] ffff8881bd127e80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc\n[ 718.617107] ffff8881bd127f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n\nThis is due to that free_irq_cpu_rmap() is always being called\n*after* (devm_)free_irq() and thus it tries to work with IRQ descs\nalready freed. For example, on device reset the driver frees the\nrmap right before allocating a new one (the splat above).\nMake rmap creation and freeing function symmetrical with\n{request,free}_irq() calls i.e. do that on ifup/ifdown instead\nof device probe/remove/resume. These operations can be performed\nindependently from the actual device aRFS configuration.\nAlso, make sure ice_vsi_free_irq() clears IRQ affinity notifiers\nonly when aRFS is disabled -- otherwise, CPU rmap sets and clears\nits own and they must not be touched manually."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/d08d2fb6d99d82da1c63aba5c0d1c6f237e150f3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d7442f512b71fc63a99c8a801422dde4fbbf9f93",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49064.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49064.json
new file mode 100644
index 00000000000..125af14cede
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49064.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49064",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:43.637",
+ "lastModified": "2025-02-26T07:00:43.637",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncachefiles: unmark inode in use in error path\n\nUnmark inode in use if error encountered. If the in-use flag leakage\noccurs in cachefiles_open_file(), Cachefiles will complain \"Inode\nalready in use\" when later another cookie with the same index key is\nlooked up.\n\nIf the in-use flag leakage occurs in cachefiles_create_tmpfile(), though\nthe \"Inode already in use\" warning won't be triggered, fix the leakage\nanyway."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/b2055abafd3d4ee0376fb3eed5cae866316995a1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ea5dc046127e857a7873ae55fd57c866e9e86fb2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49065.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49065.json
new file mode 100644
index 00000000000..f6197ec3df9
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49065.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49065",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:43.723",
+ "lastModified": "2025-02-26T07:00:43.723",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: Fix the svc_deferred_event trace class\n\nFix a NULL deref crash that occurs when an svc_rqst is deferred\nwhile the sunrpc tracing subsystem is enabled. svc_revisit() sets\ndr->xprt to NULL, so it can't be relied upon in the tracepoint to\nprovide the remote's address.\n\nUnfortunately we can't revert the \"svc_deferred_class\" hunk in\ncommit ece200ddd54b (\"sunrpc: Save remote presentation address in\nsvc_xprt for trace events\") because there is now a specific check\nof event format specifiers for unsafe dereferences. The warning\nthat check emits is:\n\n event svc_defer_recv has unsafe dereference of argument 1\n\nA \"%pISpc\" format specifier with a \"struct sockaddr *\" is indeed\nflagged by this check.\n\nInstead, take the brute-force approach used by the svcrdma_qp_error\ntracepoint. Convert the dr::addr field into a presentation address\nin the TP_fast_assign() arm of the trace event, and store that as\na string. This fix can be backported to -stable kernels.\n\nIn the meantime, commit c6ced22997ad (\"tracing: Update print fmt\ncheck to handle new __get_sockaddr() macro\") is now in v5.18, so\nthis wonky fix can be replaced with __sockaddr() and friends\nproperly during the v5.19 merge window."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4d5004451ab2218eab94a30e1841462c9316ba19",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/726ae7300fcc25fefa46d188cc07eb16dc908f9e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/85ee17ca21cf92989e8c923e3ea4514c291e9d38",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c2456f470eea3bd06574d988bf6089e7c3f4c5cc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49066.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49066.json
new file mode 100644
index 00000000000..983b724763f
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49066.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49066",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:43.820",
+ "lastModified": "2025-02-26T07:00:43.820",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nveth: Ensure eth header is in skb's linear part\n\nAfter feeding a decapsulated packet to a veth device with act_mirred,\nskb_headlen() may be 0. But veth_xmit() calls __dev_forward_skb(),\nwhich expects at least ETH_HLEN byte of linear data (as\n__dev_forward_skb2() calls eth_type_trans(), which pulls ETH_HLEN bytes\nunconditionally).\n\nUse pskb_may_pull() to ensure veth_xmit() respects this constraint.\n\nkernel BUG at include/linux/skbuff.h:2328!\nRIP: 0010:eth_type_trans+0xcf/0x140\nCall Trace:\n \n __dev_forward_skb2+0xe3/0x160\n veth_xmit+0x6e/0x250 [veth]\n dev_hard_start_xmit+0xc7/0x200\n __dev_queue_xmit+0x47f/0x520\n ? skb_ensure_writable+0x85/0xa0\n ? skb_mpls_pop+0x98/0x1c0\n tcf_mirred_act+0x442/0x47e [act_mirred]\n tcf_action_exec+0x86/0x140\n fl_classify+0x1d8/0x1e0 [cls_flower]\n ? dma_pte_clear_level+0x129/0x1a0\n ? dma_pte_clear_level+0x129/0x1a0\n ? prb_fill_curr_block+0x2f/0xc0\n ? skb_copy_bits+0x11a/0x220\n __tcf_classify+0x58/0x110\n tcf_classify_ingress+0x6b/0x140\n __netif_receive_skb_core.constprop.0+0x47d/0xfd0\n ? __iommu_dma_unmap_swiotlb+0x44/0x90\n __netif_receive_skb_one_core+0x3d/0xa0\n netif_receive_skb+0x116/0x170\n be_process_rx+0x22f/0x330 [be2net]\n be_poll+0x13c/0x370 [be2net]\n __napi_poll+0x2a/0x170\n net_rx_action+0x22f/0x2f0\n __do_softirq+0xca/0x2a8\n __irq_exit_rcu+0xc1/0xe0\n common_interrupt+0x83/0xa0"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1ef0088e43af1de4e3b365218c4d3179d9a37eec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2fd90b86dff413fbf8128780c04ea9c6849c16e2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3de2a02b60a4ef0ab76263216f08c7d095fc7c42",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/46bc359fec0c6d87b70d7a008bcd9a5e30dd6f27",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/726e2c5929de841fdcef4e2bf995680688ae1b87",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/93940fc4cb81840dc0fa202de48cccb949a0261d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d417a859221f127e8edf09c14b76ab50f825e171",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d67c900f1947d64ba8a64f693504bcaab8d9000c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49067.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49067.json
new file mode 100644
index 00000000000..e86d80c4f2b
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49067.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49067",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:43.927",
+ "lastModified": "2025-02-26T07:00:43.927",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit\n\nmpe: On 64-bit Book3E vmalloc space starts at 0x8000000000000000.\n\nBecause of the way __pa() works we have:\n __pa(0x8000000000000000) == 0, and therefore\n virt_to_pfn(0x8000000000000000) == 0, and therefore\n virt_addr_valid(0x8000000000000000) == true\n\nWhich is wrong, virt_addr_valid() should be false for vmalloc space.\nIn fact all vmalloc addresses that alias with a valid PFN will return\ntrue from virt_addr_valid(). That can cause bugs with hardened usercopy\nas described below by Kefeng Wang:\n\n When running ethtool eth0 on 64-bit Book3E, a BUG occurred:\n\n usercopy: Kernel memory exposure attempt detected from SLUB object not in SLUB page?! (offset 0, size 1048)!\n kernel BUG at mm/usercopy.c:99\n ...\n usercopy_abort+0x64/0xa0 (unreliable)\n __check_heap_object+0x168/0x190\n __check_object_size+0x1a0/0x200\n dev_ethtool+0x2494/0x2b20\n dev_ioctl+0x5d0/0x770\n sock_do_ioctl+0xf0/0x1d0\n sock_ioctl+0x3ec/0x5a0\n __se_sys_ioctl+0xf0/0x160\n system_call_exception+0xfc/0x1f0\n system_call_common+0xf8/0x200\n\n The code shows below,\n\n data = vzalloc(array_size(gstrings.len, ETH_GSTRING_LEN));\n copy_to_user(useraddr, data, gstrings.len * ETH_GSTRING_LEN))\n\n The data is alloced by vmalloc(), virt_addr_valid(ptr) will return true\n on 64-bit Book3E, which leads to the panic.\n\n As commit 4dd7554a6456 (\"powerpc/64: Add VIRTUAL_BUG_ON checks for __va\n and __pa addresses\") does, make sure the virt addr above PAGE_OFFSET in\n the virt_addr_valid() for 64-bit, also add upper limit check to make\n sure the virt is below high_memory.\n\n Meanwhile, for 32-bit PAGE_OFFSET is the virtual address of the start\n of lowmem, high_memory is the upper low virtual address, the check is\n suitable for 32-bit, this will fix the issue mentioned in commit\n 602946ec2f90 (\"powerpc: Set max_mapnr correctly\") too.\n\nOn 32-bit there is a similar problem with high memory, that was fixed in\ncommit 602946ec2f90 (\"powerpc: Set max_mapnr correctly\"), but that\ncommit breaks highmem and needs to be reverted.\n\nWe can't easily fix __pa(), we have code that relies on its current\nbehaviour. So for now add extra checks to virt_addr_valid().\n\nFor 64-bit Book3S the extra checks are not necessary, the combination of\nvirt_to_pfn() and pfn_valid() should yield the correct result, but they\nare harmless.\n\n[mpe: Add additional change log detail]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/a3727c25eacd7e437c4f560957fa3a376fe93e6b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cbc065efcba000ad8f615f506ebe61b6d3c5145b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d36febbcd537fcc50284e8b89609632d0146529f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/deab81144d5a043f42804207fb76cfbd8a806978",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fddb88bd266f4513abab7c36bca98935c9148a98",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ffa0b64e3be58519ae472ea29a1a1ad681e32f48",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49068.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49068.json
new file mode 100644
index 00000000000..a1751b5070f
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49068.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49068",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:44.027",
+ "lastModified": "2025-02-26T07:00:44.027",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: release correct delalloc amount in direct IO write path\n\nRunning generic/406 causes the following WARNING in btrfs_destroy_inode()\nwhich tells there are outstanding extents left.\n\nIn btrfs_get_blocks_direct_write(), we reserve a temporary outstanding\nextents with btrfs_delalloc_reserve_metadata() (or indirectly from\nbtrfs_delalloc_reserve_space(()). We then release the outstanding extents\nwith btrfs_delalloc_release_extents(). However, the \"len\" can be modified\nin the COW case, which releases fewer outstanding extents than expected.\n\nFix it by calling btrfs_delalloc_release_extents() for the original length.\n\nTo reproduce the warning, the filesystem should be 1 GiB. It's\ntriggering a short-write, due to not being able to allocate a large\nextent and instead allocating a smaller one.\n\n WARNING: CPU: 0 PID: 757 at fs/btrfs/inode.c:8848 btrfs_destroy_inode+0x1e6/0x210 [btrfs]\n Modules linked in: btrfs blake2b_generic xor lzo_compress\n lzo_decompress raid6_pq zstd zstd_decompress zstd_compress xxhash zram\n zsmalloc\n CPU: 0 PID: 757 Comm: umount Not tainted 5.17.0-rc8+ #101\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS d55cb5a 04/01/2014\n RIP: 0010:btrfs_destroy_inode+0x1e6/0x210 [btrfs]\n RSP: 0018:ffffc9000327bda8 EFLAGS: 00010206\n RAX: 0000000000000000 RBX: ffff888100548b78 RCX: 0000000000000000\n RDX: 0000000000026900 RSI: 0000000000000000 RDI: ffff888100548b78\n RBP: ffff888100548940 R08: 0000000000000000 R09: ffff88810b48aba8\n R10: 0000000000000001 R11: ffff8881004eb240 R12: ffff88810b48a800\n R13: ffff88810b48ec08 R14: ffff88810b48ed00 R15: ffff888100490c68\n FS: 00007f8549ea0b80(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007f854a09e733 CR3: 000000010a2e9003 CR4: 0000000000370eb0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n \n destroy_inode+0x33/0x70\n dispose_list+0x43/0x60\n evict_inodes+0x161/0x1b0\n generic_shutdown_super+0x2d/0x110\n kill_anon_super+0xf/0x20\n btrfs_kill_super+0xd/0x20 [btrfs]\n deactivate_locked_super+0x27/0x90\n cleanup_mnt+0x12c/0x180\n task_work_run+0x54/0x80\n exit_to_user_mode_prepare+0x152/0x160\n syscall_exit_to_user_mode+0x12/0x30\n do_syscall_64+0x42/0x80\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n RIP: 0033:0x7f854a000fb7"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/07cacfd9d9dc134557ac8866c73d570a59b3d1f3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6d82ad13c4110e73c7b0392f00534a1502a1b520",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a04d37ddfe4be431b9e52e8504490376ab0a39a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49069.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49069.json
new file mode 100644
index 00000000000..e8dbdf027e3
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49069.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49069",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:44.120",
+ "lastModified": "2025-02-26T07:00:44.120",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw\n\n[Why]\nBelow general protection fault observed when WebGL Aquarium is run for\nlonger duration. If drm debug logs are enabled and set to 0x1f then the\nissue is observed within 10 minutes of run.\n\n[ 100.717056] general protection fault, probably for non-canonical address 0x2d33302d32323032: 0000 [#1] PREEMPT SMP NOPTI\n[ 100.727921] CPU: 3 PID: 1906 Comm: DrmThread Tainted: G W 5.15.30 #12 d726c6a2d6ebe5cf9223931cbca6892f916fe18b\n[ 100.754419] RIP: 0010:CalculateSwathWidth+0x1f7/0x44f\n[ 100.767109] Code: 00 00 00 f2 42 0f 11 04 f0 48 8b 85 88 00 00 00 f2 42 0f 10 04 f0 48 8b 85 98 00 00 00 f2 42 0f 11 04 f0 48 8b 45 10 0f 57 c0 42 0f 2a 04 b0 0f 57 c9 f3 43 0f 2a 0c b4 e8 8c e2 f3 ff 48 8b\n[ 100.781269] RSP: 0018:ffffa9230079eeb0 EFLAGS: 00010246\n[ 100.812528] RAX: 2d33302d32323032 RBX: 0000000000000500 RCX: 0000000000000000\n[ 100.819656] RDX: 0000000000000001 RSI: ffff99deb712c49c RDI: 0000000000000000\n[ 100.826781] RBP: ffffa9230079ef50 R08: ffff99deb712460c R09: ffff99deb712462c\n[ 100.833907] R10: ffff99deb7124940 R11: ffff99deb7124d70 R12: ffff99deb712ae44\n[ 100.841033] R13: 0000000000000001 R14: 0000000000000000 R15: ffffa9230079f0a0\n[ 100.848159] FS: 00007af121212640(0000) GS:ffff99deba780000(0000) knlGS:0000000000000000\n[ 100.856240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 100.861980] CR2: 0000209000fe1000 CR3: 000000011b18c000 CR4: 0000000000350ee0\n[ 100.869106] Call Trace:\n[ 100.871555] \n[ 100.873655] ? asm_sysvec_reschedule_ipi+0x12/0x20\n[ 100.878449] CalculateSwathAndDETConfiguration+0x1a3/0x6dd\n[ 100.883937] dml31_ModeSupportAndSystemConfigurationFull+0x2ce4/0x76da\n[ 100.890467] ? kallsyms_lookup_buildid+0xc8/0x163\n[ 100.895173] ? kallsyms_lookup_buildid+0xc8/0x163\n[ 100.899874] ? __sprint_symbol+0x80/0x135\n[ 100.903883] ? dm_update_plane_state+0x3f9/0x4d2\n[ 100.908500] ? symbol_string+0xb7/0xde\n[ 100.912250] ? number+0x145/0x29b\n[ 100.915566] ? vsnprintf+0x341/0x5ff\n[ 100.919141] ? desc_read_finalized_seq+0x39/0x87\n[ 100.923755] ? update_load_avg+0x1b9/0x607\n[ 100.927849] ? compute_mst_dsc_configs_for_state+0x7d/0xd5b\n[ 100.933416] ? fetch_pipe_params+0xa4d/0xd0c\n[ 100.937686] ? dc_fpu_end+0x3d/0xa8\n[ 100.941175] dml_get_voltage_level+0x16b/0x180\n[ 100.945619] dcn30_internal_validate_bw+0x10e/0x89b\n[ 100.950495] ? dcn31_validate_bandwidth+0x68/0x1fc\n[ 100.955285] ? resource_build_scaling_params+0x98b/0xb8c\n[ 100.960595] ? dcn31_validate_bandwidth+0x68/0x1fc\n[ 100.965384] dcn31_validate_bandwidth+0x9a/0x1fc\n[ 100.970001] dc_validate_global_state+0x238/0x295\n[ 100.974703] amdgpu_dm_atomic_check+0x9c1/0xbce\n[ 100.979235] ? _printk+0x59/0x73\n[ 100.982467] drm_atomic_check_only+0x403/0x78b\n[ 100.986912] drm_mode_atomic_ioctl+0x49b/0x546\n[ 100.991358] ? drm_ioctl+0x1c1/0x3b3\n[ 100.994936] ? drm_atomic_set_property+0x92a/0x92a\n[ 100.999725] drm_ioctl_kernel+0xdc/0x149\n[ 101.003648] drm_ioctl+0x27f/0x3b3\n[ 101.007051] ? drm_atomic_set_property+0x92a/0x92a\n[ 101.011842] amdgpu_drm_ioctl+0x49/0x7d\n[ 101.015679] __se_sys_ioctl+0x7c/0xb8\n[ 101.015685] do_syscall_64+0x5f/0xb8\n[ 101.015690] ? __irq_exit_rcu+0x34/0x96\n\n[How]\nIt calles populate_dml_pipes which uses doubles to initialize.\nAdding FPU protection avoids context switch and probable loss of vba context\nas there is potential contention while drm debug logs are enabled."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/76f4c5e5f99ee7084b555d9a38e8ffeb16ec65a2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ca1198849ab0e7af5efb392ef6baf1138f6fc086",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e995c5d52ec7415644eee617fc7e906b51aec7ae",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49070.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49070.json
new file mode 100644
index 00000000000..67480dfda83
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49070.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49070",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:44.217",
+ "lastModified": "2025-02-26T07:00:44.217",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: Fix unregistering of framebuffers without device\n\nOF framebuffers do not have an underlying device in the Linux\ndevice hierarchy. Do a regular unregister call instead of hot\nunplugging such a non-existing device. Fixes a NULL dereference.\nAn example error message on ppc64le is shown below.\n\n BUG: Kernel NULL pointer dereference on read at 0x00000060\n Faulting instruction address: 0xc00000000080dfa4\n Oops: Kernel access of bad area, sig: 11 [#1]\n LE PAGE_SIZE=64K MMU=Hash SMP NR_CPUS=2048 NUMA pSeries\n [...]\n CPU: 2 PID: 139 Comm: systemd-udevd Not tainted 5.17.0-ae085d7f9365 #1\n NIP: c00000000080dfa4 LR: c00000000080df9c CTR: c000000000797430\n REGS: c000000004132fe0 TRAP: 0300 Not tainted (5.17.0-ae085d7f9365)\n MSR: 8000000002009033 CR: 28228282 XER: 20000000\n CFAR: c00000000000c80c DAR: 0000000000000060 DSISR: 40000000 IRQMASK: 0\n GPR00: c00000000080df9c c000000004133280 c00000000169d200 0000000000000029\n GPR04: 00000000ffffefff c000000004132f90 c000000004132f88 0000000000000000\n GPR08: c0000000015658f8 c0000000015cd200 c0000000014f57d0 0000000048228283\n GPR12: 0000000000000000 c00000003fffe300 0000000020000000 0000000000000000\n GPR16: 0000000000000000 0000000113fc4a40 0000000000000005 0000000113fcfb80\n GPR20: 000001000f7283b0 0000000000000000 c000000000e4a588 c000000000e4a5b0\n GPR24: 0000000000000001 00000000000a0000 c008000000db0168 c0000000021f6ec0\n GPR28: c0000000016d65a8 c000000004b36460 0000000000000000 c0000000016d64b0\n NIP [c00000000080dfa4] do_remove_conflicting_framebuffers+0x184/0x1d0\n [c000000004133280] [c00000000080df9c] do_remove_conflicting_framebuffers+0x17c/0x1d0 (unreliable)\n [c000000004133350] [c00000000080e4d0] remove_conflicting_framebuffers+0x60/0x150\n [c0000000041333a0] [c00000000080e6f4] remove_conflicting_pci_framebuffers+0x134/0x1b0\n [c000000004133450] [c008000000e70438] drm_aperture_remove_conflicting_pci_framebuffers+0x90/0x100 [drm]\n [c000000004133490] [c008000000da0ce4] bochs_pci_probe+0x6c/0xa64 [bochs]\n [...]\n [c000000004133db0] [c00000000002aaa0] system_call_exception+0x170/0x2d0\n [c000000004133e10] [c00000000000c3cc] system_call_common+0xec/0x250\n\nThe bug [1] was introduced by commit 27599aacbaef (\"fbdev: Hot-unplug\nfirmware fb devices on forced removal\"). Most firmware framebuffers\nhave an underlying platform device, which can be hot-unplugged\nbefore loading the native graphics driver. OF framebuffers do not\n(yet) have that device. Fix the code by unregistering the framebuffer\nas before without a hot unplug.\n\nTested with 5.17 on qemu ppc64le emulation."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0f525289ff0ddeb380813bd81e0f9bdaaa1c9078",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2388f826cdc9af2651991adc0feb79de9bdf2232",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/de33df481545974ba47c46f05194e769e4307843",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/feed87ff122b1640c221d4dd559442ab2cd50bb1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49071.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49071.json
new file mode 100644
index 00000000000..0cf9c2b75ec
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49071.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49071",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:44.323",
+ "lastModified": "2025-02-26T07:00:44.323",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/panel: ili9341: fix optional regulator handling\n\nIf the optional regulator lookup fails, reset the pointer to NULL.\nOther functions such as mipi_dbi_poweron_reset_conditional() only do\na NULL pointer check and will otherwise dereference the error pointer."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/28dc1503a9d36654f9c61adb2915682515a30f71",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4ea189854b1e625ed5ec80d30147870f984db44c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d14eb80e27795b7b20060f7b151cdfe39722a813",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e3d982c111a6c033671dd6084b07f62fbf50f76f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49072.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49072.json
new file mode 100644
index 00000000000..45e476add75
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49072.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49072",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:44.423",
+ "lastModified": "2025-02-26T07:00:44.423",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: Restrict usage of GPIO chip irq members before initialization\n\nGPIO chip irq members are exposed before they could be completely\ninitialized and this leads to race conditions.\n\nOne such issue was observed for the gc->irq.domain variable which\nwas accessed through the I2C interface in gpiochip_to_irq() before\nit could be initialized by gpiochip_add_irqchip(). This resulted in\nKernel NULL pointer dereference.\n\nFollowing are the logs for reference :-\n\nkernel: Call Trace:\nkernel: gpiod_to_irq+0x53/0x70\nkernel: acpi_dev_gpio_irq_get_by+0x113/0x1f0\nkernel: i2c_acpi_get_irq+0xc0/0xd0\nkernel: i2c_device_probe+0x28a/0x2a0\nkernel: really_probe+0xf2/0x460\nkernel: RIP: 0010:gpiochip_to_irq+0x47/0xc0\n\nTo avoid such scenarios, restrict usage of GPIO chip irq members before\nthey are completely initialized."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0912cf021fb5749372b3782611d8b1de4986c13a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2c1fa3614795e2b24da1ba95de0b27b8f6ea4537",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5467801f1fcbdc46bc7298a84dbf3ca1ff2a7320",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7e88a50704b0c49ad3f2d11e8b963341cf68a89f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f8dea54f74cae8c2e4d7b2952e8fed7743a85c87",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49073.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49073.json
new file mode 100644
index 00000000000..8b034fcf600
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49073.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49073",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:44.647",
+ "lastModified": "2025-02-26T07:00:44.647",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nata: sata_dwc_460ex: Fix crash due to OOB write\n\nthe driver uses libata's \"tag\" values from in various arrays.\nSince the mentioned patch bumped the ATA_TAG_INTERNAL to 32,\nthe value of the SATA_DWC_QCMD_MAX needs to account for that.\n\nOtherwise ATA_TAG_INTERNAL usage cause similar crashes like\nthis as reported by Tice Rex on the OpenWrt Forum and\nreproduced (with symbols) here:\n\n| BUG: Kernel NULL pointer dereference at 0x00000000\n| Faulting instruction address: 0xc03ed4b8\n| Oops: Kernel access of bad area, sig: 11 [#1]\n| BE PAGE_SIZE=4K PowerPC 44x Platform\n| CPU: 0 PID: 362 Comm: scsi_eh_1 Not tainted 5.4.163 #0\n| NIP: c03ed4b8 LR: c03d27e8 CTR: c03ed36c\n| REGS: cfa59950 TRAP: 0300 Not tainted (5.4.163)\n| MSR: 00021000 CR: 42000222 XER: 00000000\n| DEAR: 00000000 ESR: 00000000\n| GPR00: c03d27e8 cfa59a08 cfa55fe0 00000000 0fa46bc0 [...]\n| [..]\n| NIP [c03ed4b8] sata_dwc_qc_issue+0x14c/0x254\n| LR [c03d27e8] ata_qc_issue+0x1c8/0x2dc\n| Call Trace:\n| [cfa59a08] [c003f4e0] __cancel_work_timer+0x124/0x194 (unreliable)\n| [cfa59a78] [c03d27e8] ata_qc_issue+0x1c8/0x2dc\n| [cfa59a98] [c03d2b3c] ata_exec_internal_sg+0x240/0x524\n| [cfa59b08] [c03d2e98] ata_exec_internal+0x78/0xe0\n| [cfa59b58] [c03d30fc] ata_read_log_page.part.38+0x1dc/0x204\n| [cfa59bc8] [c03d324c] ata_identify_page_supported+0x68/0x130\n| [...]\n\nThis is because sata_dwc_dma_xfer_complete() NULLs the\ndma_pending's next neighbour \"chan\" (a *dma_chan struct) in\nthis '32' case right here (line ~735):\n> hsdevp->dma_pending[tag] = SATA_DWC_DMA_PENDING_NONE;\n\nThen the next time, a dma gets issued; dma_dwc_xfer_setup() passes\nthe NULL'd hsdevp->chan to the dmaengine_slave_config() which then\ncauses the crash.\n\nWith this patch, SATA_DWC_QCMD_MAX is now set to ATA_MAX_QUEUE + 1.\nThis avoids the OOB. But please note, there was a worthwhile discussion\non what ATA_TAG_INTERNAL and ATA_MAX_QUEUE is. And why there should not\nbe a \"fake\" 33 command-long queue size.\n\nIdeally, the dw driver should account for the ATA_TAG_INTERNAL.\nIn Damien Le Moal's words: \"... having looked at the driver, it\nis a bigger change than just faking a 33rd \"tag\" that is in fact\nnot a command tag at all.\"\n\nBugLink: https://github.com/openwrt/openwrt/issues/9505"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/234c0132f76f0676d175757f61b0025191a3d935",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3a8751c0d4e24129e72dcec0139e99833b13904a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/55e1465ba79562a191708a40eeae3f8082a209e3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/596c7efd69aae94f4b0e91172b075eb197958b99",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7aa8104a554713b685db729e66511b93d989dd6a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8a05a6952ecd59aaa62cbdcdaf523ae2c8f436e8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fc629224aa62f23849cae83717932985ac51232d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49074.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49074.json
new file mode 100644
index 00000000000..e8fd6814f65
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49074.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49074",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:44.750",
+ "lastModified": "2025-02-26T07:00:44.750",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v3: Fix GICR_CTLR.RWP polling\n\nIt turns out that our polling of RWP is totally wrong when checking\nfor it in the redistributors, as we test the *distributor* bit index,\nwhereas it is a different bit number in the RDs... Oopsie boo.\n\nThis is embarassing. Not only because it is wrong, but also because\nit took *8 years* to notice the blunder...\n\nJust fix the damn thing."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0df6664531a12cdd8fc873f0cac0dcb40243d3e9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3c07cc242baf83f0bddbbd9d7945d0bee56d8b57",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/60e1eb4811f53f5f60c788297d978515e7a2637a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6fef3e3179e6ed8fecdd004ede541674ffa7749d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7218a789abb3e033f5f3a85636ca50d9ae7b0fc9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c7daf1b4ad809692d5c26f33c02ed8a031066548",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ff24114bb08d8b90edf2aff0a4fd0689523e6c17",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49075.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49075.json
new file mode 100644
index 00000000000..03934570656
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49075.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49075",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:44.847",
+ "lastModified": "2025-02-26T07:00:44.847",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix qgroup reserve overflow the qgroup limit\n\nWe use extent_changeset->bytes_changed in qgroup_reserve_data() to record\nhow many bytes we set for EXTENT_QGROUP_RESERVED state. Currently the\nbytes_changed is set as \"unsigned int\", and it will overflow if we try to\nfallocate a range larger than 4GiB. The result is we reserve less bytes\nand eventually break the qgroup limit.\n\nUnlike regular buffered/direct write, which we use one changeset for\neach ordered extent, which can never be larger than 256M. For\nfallocate, we use one changeset for the whole range, thus it no longer\nrespects the 256M per extent limit, and caused the problem.\n\nThe following example test script reproduces the problem:\n\n $ cat qgroup-overflow.sh\n #!/bin/bash\n\n DEV=/dev/sdj\n MNT=/mnt/sdj\n\n mkfs.btrfs -f $DEV\n mount $DEV $MNT\n\n # Set qgroup limit to 2GiB.\n btrfs quota enable $MNT\n btrfs qgroup limit 2G $MNT\n\n # Try to fallocate a 3GiB file. This should fail.\n echo\n echo \"Try to fallocate a 3GiB file...\"\n fallocate -l 3G $MNT/3G.file\n\n # Try to fallocate a 5GiB file.\n echo\n echo \"Try to fallocate a 5GiB file...\"\n fallocate -l 5G $MNT/5G.file\n\n # See we break the qgroup limit.\n echo\n sync\n btrfs qgroup show -r $MNT\n\n umount $MNT\n\nWhen running the test:\n\n $ ./qgroup-overflow.sh\n (...)\n\n Try to fallocate a 3GiB file...\n fallocate: fallocate failed: Disk quota exceeded\n\n Try to fallocate a 5GiB file...\n\n qgroupid\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 rfer\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 excl\u00a0\u00a0\u00a0\u00a0 max_rfer\n --------\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ----\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ----\u00a0\u00a0\u00a0\u00a0 --------\n 0/5\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 5.00GiB\u00a0\u00a0\u00a0\u00a0\u00a0 5.00GiB\u00a0\u00a0\u00a0\u00a0\u00a0 2.00GiB\n\nSince we have no control of how bytes_changed is used, it's better to\nset it to u64."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0355387ea5b02d353c9415613fab908fac5c52a6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/44277c50fdba5019ca25bfad1b71e2561b0de11b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4b98799e181b4326a613108cf37acc1f55d21b45",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6bfff81286d4491f02dad7814bae5c77c9ad2320",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7941b74ed49b6db25efbef2256ebef843c11a010",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/82ae73ac963cee877ce34f7c31b2b456b516e96c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b642b52d0b50f4d398cb4293f64992d0eed2e2ce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f3d97b22a708bf9e3f3ac2ba232bcefd0b0c136b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49076.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49076.json
new file mode 100644
index 00000000000..d623b96bdb9
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49076.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49076",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:44.943",
+ "lastModified": "2025-02-26T07:00:44.943",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hfi1: Fix use-after-free bug for mm struct\n\nUnder certain conditions, such as MPI_Abort, the hfi1 cleanup code may\nrepresent the last reference held on the task mm.\nhfi1_mmu_rb_unregister() then drops the last reference and the mm is freed\nbefore the final use in hfi1_release_user_pages(). A new task may\nallocate the mm structure while it is still being used, resulting in\nproblems. One manifestation is corruption of the mmap_sem counter leading\nto a hang in down_write(). Another is corruption of an mm struct that is\nin use by another task."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0b7186d657ee55e2cdefae498f07d5c1961e8023",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2bbac98d0930e8161b1957dc0ec99de39ade1b3c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5a9a1b24ddb510715f8f621263938186579a965c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5f54364ff6cfcd14cddf5441c4a490bb28dd69f7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9ca11bd8222a612de0d2f54d050bfcf61ae2883f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49077.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49077.json
new file mode 100644
index 00000000000..592cf809dfd
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49077.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49077",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:45.043",
+ "lastModified": "2025-02-26T07:00:45.043",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)\n\nIf an mremap() syscall with old_size=0 ends up in move_page_tables(), it\nwill call invalidate_range_start()/invalidate_range_end() unnecessarily,\ni.e. with an empty range.\n\nThis causes a WARN in KVM's mmu_notifier. In the past, empty ranges\nhave been diagnosed to be off-by-one bugs, hence the WARNing. Given the\nlow (so far) number of unique reports, the benefits of detecting more\nbuggy callers seem to outweigh the cost of having to fix cases such as\nthis one, where userspace is doing something silly. In this particular\ncase, an early return from move_page_tables() is enough to fix the\nissue."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/01e67e04c28170c47700c2c226d732bbfedb1ad0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/04bc13dae4a27b8d030843c85ae452bb2f1d9c1f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2358aa84ef6dafcf544a557caaa6b91afb4a0bd2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7d659cb1763ff17d1c6ee082fa6feb4267c7a30b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a04cb99c5d4668fe3f5c0e5b6da1cecd34c3f219",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a05540f3903bd8295e8c4cd90dd3d416239a115b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c19d8de4e682ec4b0ea2b04a832cd8cc0be3bb31",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e2c328c2a8f9de8b761bd4025b66c63120c55761",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eeaf28e2a0128147d687237e59d5407ee1b14693",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49078.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49078.json
new file mode 100644
index 00000000000..948a4ff18db
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49078.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49078",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:45.153",
+ "lastModified": "2025-02-26T07:00:45.153",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlz4: fix LZ4_decompress_safe_partial read out of bound\n\nWhen partialDecoding, it is EOF if we've either filled the output buffer\nor can't proceed with reading an offset for following match.\n\nIn some extreme corner cases when compressed data is suitably corrupted,\nUAF will occur. As reported by KASAN [1], LZ4_decompress_safe_partial\nmay lead to read out of bound problem during decoding. lz4 upstream has\nfixed it [2] and this issue has been disscussed here [3] before.\n\ncurrent decompression routine was ported from lz4 v1.8.3, bumping\nlib/lz4 to v1.9.+ is certainly a huge work to be done later, so, we'd\nbetter fix it first.\n\n[1] https://lore.kernel.org/all/000000000000830d1205cf7f0477@google.com/\n[2] https://github.com/lz4/lz4/commit/c5d6f8a8be3927c0bec91bcc58667a6cfad244ad#\n[3] https://lore.kernel.org/all/CC666AE8-4CA4-4951-B6FB-A2EFDE3AC03B@fb.com/"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/467d5e200ab4486b744fe1776154a43d1aa22d4b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6adc01a7aa37445dafe8846faa0610a86029b253",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/73953dfa9d50e5c9fe98ee13fd1d3427aa12a0a3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9fb8bc6cfc58773ce95414e11c9ccc8fc6ac4927",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e64dbe97c05c769525cbca099ddbd22485630235",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eafc0a02391b7b36617b36c97c4b5d6832cf5e24",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49079.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49079.json
new file mode 100644
index 00000000000..b26300cc58a
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49079.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49079",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:45.250",
+ "lastModified": "2025-02-26T07:00:45.250",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: zoned: traverse devices under chunk_mutex in btrfs_can_activate_zone\n\nbtrfs_can_activate_zone() can be called with the device_list_mutex already\nheld, which will lead to a deadlock:\n\ninsert_dev_extents() // Takes device_list_mutex\n`-> insert_dev_extent()\n `-> btrfs_insert_empty_item()\n `-> btrfs_insert_empty_items()\n `-> btrfs_search_slot()\n `-> btrfs_cow_block()\n `-> __btrfs_cow_block()\n `-> btrfs_alloc_tree_block()\n `-> btrfs_reserve_extent()\n `-> find_free_extent()\n `-> find_free_extent_update_loop()\n `-> can_allocate_chunk()\n `-> btrfs_can_activate_zone() // Takes device_list_mutex again\n\nInstead of using the RCU on fs_devices->device_list we\ncan use fs_devices->alloc_list, protected by the chunk_mutex to traverse\nthe list of active devices.\n\nWe are in the chunk allocation thread. The newer chunk allocation\nhappens from the devices in the fs_device->alloc_list protected by the\nchunk_mutex.\n\n btrfs_create_chunk()\n lockdep_assert_held(&info->chunk_mutex);\n gather_device_info\n list_for_each_entry(device, &fs_devices->alloc_list, dev_alloc_list)\n\nAlso, a device that reappears after the mount won't join the alloc_list\nyet and, it will be in the dev_list, which we don't want to consider in\nthe context of the chunk alloc.\n\n [15.166572] WARNING: possible recursive locking detected\n [15.167117] 5.17.0-rc6-dennis #79 Not tainted\n [15.167487] --------------------------------------------\n [15.167733] kworker/u8:3/146 is trying to acquire lock:\n [15.167733] ffff888102962ee0 (&fs_devs->device_list_mutex){+.+.}-{3:3}, at: find_free_extent+0x15a/0x14f0 [btrfs]\n [15.167733]\n [15.167733] but task is already holding lock:\n [15.167733] ffff888102962ee0 (&fs_devs->device_list_mutex){+.+.}-{3:3}, at: btrfs_create_pending_block_groups+0x20a/0x560 [btrfs]\n [15.167733]\n [15.167733] other info that might help us debug this:\n [15.167733] Possible unsafe locking scenario:\n [15.167733]\n [15.171834] CPU0\n [15.171834] ----\n [15.171834] lock(&fs_devs->device_list_mutex);\n [15.171834] lock(&fs_devs->device_list_mutex);\n [15.171834]\n [15.171834] *** DEADLOCK ***\n [15.171834]\n [15.171834] May be due to missing lock nesting notation\n [15.171834]\n [15.171834] 5 locks held by kworker/u8:3/146:\n [15.171834] #0: ffff888100050938 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1c3/0x5a0\n [15.171834] #1: ffffc9000067be80 ((work_completion)(&fs_info->async_data_reclaim_work)){+.+.}-{0:0}, at: process_one_work+0x1c3/0x5a0\n [15.176244] #2: ffff88810521e620 (sb_internal){.+.+}-{0:0}, at: flush_space+0x335/0x600 [btrfs]\n [15.176244] #3: ffff888102962ee0 (&fs_devs->device_list_mutex){+.+.}-{3:3}, at: btrfs_create_pending_block_groups+0x20a/0x560 [btrfs]\n [15.176244] #4: ffff8881152e4b78 (btrfs-dev-00){++++}-{3:3}, at: __btrfs_tree_lock+0x27/0x130 [btrfs]\n [15.179641]\n [15.179641] stack backtrace:\n [15.179641] CPU: 1 PID: 146 Comm: kworker/u8:3 Not tainted 5.17.0-rc6-dennis #79\n [15.179641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1.fc35 04/01/2014\n [15.179641] Workqueue: events_unbound btrfs_async_reclaim_data_space [btrfs]\n [15.179641] Call Trace:\n [15.179641] \n [15.179641] dump_stack_lvl+0x45/0x59\n [15.179641] __lock_acquire.cold+0x217/0x2b2\n [15.179641] lock_acquire+0xbf/0x2b0\n [15.183838] ? find_free_extent+0x15a/0x14f0 [btrfs]\n [15.183838] __mutex_lock+0x8e/0x970\n [15.183838] ? find_free_extent+0x15a/0x14f0 [btrfs]\n [15.183838] ? find_free_extent+0x15a/0x14f0 [btrfs]\n [15.183838] ? lock_is_held_type+0xd7/0x130\n [15.183838] ? find_free_extent+0x15a/0x14f0 [btrfs]\n [15.183838] find_free_extent+0x15a/0x14f0 [btrfs]\n [15.183838] ? _raw_spin_unlock+0x24/0x40\n [15.183838] ? btrfs_get_alloc_profile+0x106/0x230 [btrfs]\n [15.187601] btrfs_reserve_extent+0x131/0x260 [btrfs]\n [15.\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/09e65ae515af2b24d6dc23af21719a3b41de83e5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0b9e66762aa0cda2a9c2d5542d64e04dac528fa6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/142f822bd945a7be442a2916ec6167cc102c4183",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49080.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49080.json
new file mode 100644
index 00000000000..b4d4f4f8bfa
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49080.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49080",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:45.347",
+ "lastModified": "2025-02-26T07:00:45.347",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mempolicy: fix mpol_new leak in shared_policy_replace\n\nIf mpol_new is allocated but not used in restart loop, mpol_new will be\nfreed via mpol_put before returning to the caller. But refcnt is not\ninitialized yet, so mpol_put could not do the right things and might\nleak the unused mpol_new. This would happen if mempolicy was updated on\nthe shared shmem file while the sp->lock has been dropped during the\nmemory allocation.\n\nThis issue could be triggered easily with the below code snippet if\nthere are many processes doing the below work at the same time:\n\n shmid = shmget((key_t)5566, 1024 * PAGE_SIZE, 0666|IPC_CREAT);\n shm = shmat(shmid, 0, 0);\n loop many times {\n mbind(shm, 1024 * PAGE_SIZE, MPOL_LOCAL, mask, maxnode, 0);\n mbind(shm + 128 * PAGE_SIZE, 128 * PAGE_SIZE, MPOL_DEFAULT, mask,\n maxnode, 0);\n }"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/198932a14aeb19a15cf19e51e151d023bc4cd648",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/25f506273b6ae806fd46bfcb6fdaa5b9ec81a05b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/39a32f3c06f6d68a530bf9612afa19f50f12e93d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4ad099559b00ac01c3726e5c95dc3108ef47d03e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5e16dc5378abd749a836daa9ee4ab2c8d2668999",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6e00309ac716fa8225f0cbde2cd9c24f0e74ee21",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8510c2346d9e47a72b7f018a36ef0c39483e53d6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f7e183b0a7136b6dc9c7b9b2a85a608a8feba894",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fe39ac59dbbf893b73b24e3184161d0bd06d6651",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49081.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49081.json
new file mode 100644
index 00000000000..4a3f0b9016e
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49081.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49081",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:45.450",
+ "lastModified": "2025-02-26T07:00:45.450",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhighmem: fix checks in __kmap_local_sched_{in,out}\n\nWhen CONFIG_DEBUG_KMAP_LOCAL is enabled __kmap_local_sched_{in,out} check\nthat even slots in the tsk->kmap_ctrl.pteval are unmapped. The slots are\ninitialized with 0 value, but the check is done with pte_none. 0 pte\nhowever does not necessarily mean that pte_none will return true. e.g.\non xtensa it returns false, resulting in the following runtime warnings:\n\n WARNING: CPU: 0 PID: 101 at mm/highmem.c:627 __kmap_local_sched_out+0x51/0x108\n CPU: 0 PID: 101 Comm: touch Not tainted 5.17.0-rc7-00010-gd3a1cdde80d2-dirty #13\n Call Trace:\n dump_stack+0xc/0x40\n __warn+0x8f/0x174\n warn_slowpath_fmt+0x48/0xac\n __kmap_local_sched_out+0x51/0x108\n __schedule+0x71a/0x9c4\n preempt_schedule_irq+0xa0/0xe0\n common_exception_return+0x5c/0x93\n do_wp_page+0x30e/0x330\n handle_mm_fault+0xa70/0xc3c\n do_page_fault+0x1d8/0x3c4\n common_exception+0x7f/0x7f\n\n WARNING: CPU: 0 PID: 101 at mm/highmem.c:664 __kmap_local_sched_in+0x50/0xe0\n CPU: 0 PID: 101 Comm: touch Tainted: G W 5.17.0-rc7-00010-gd3a1cdde80d2-dirty #13\n Call Trace:\n dump_stack+0xc/0x40\n __warn+0x8f/0x174\n warn_slowpath_fmt+0x48/0xac\n __kmap_local_sched_in+0x50/0xe0\n finish_task_switch$isra$0+0x1ce/0x2f8\n __schedule+0x86e/0x9c4\n preempt_schedule_irq+0xa0/0xe0\n common_exception_return+0x5c/0x93\n do_wp_page+0x30e/0x330\n handle_mm_fault+0xa70/0xc3c\n do_page_fault+0x1d8/0x3c4\n common_exception+0x7f/0x7f\n\nFix it by replacing !pte_none(pteval) with pte_val(pteval) != 0."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/66f133ceab7456c789f70a242991ed1b27ba1c3d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7dd5b3b97716a611fcf67d92fd2370fcb8d50372",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/85550b0f5fa5dd3c30469ea702c44444ef242c83",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c21d040de6225414547d9bd31cd200f290991c85",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49082.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49082.json
new file mode 100644
index 00000000000..10d1d51ce12
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49082.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49082",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:45.540",
+ "lastModified": "2025-02-26T07:00:45.540",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpt3sas: Fix use after free in _scsih_expander_node_remove()\n\nThe function mpt3sas_transport_port_remove() called in\n_scsih_expander_node_remove() frees the port field of the sas_expander\nstructure, leading to the following use-after-free splat from KASAN when\nthe ioc_info() call following that function is executed (e.g. when doing\nrmmod of the driver module):\n\n[ 3479.371167] ==================================================================\n[ 3479.378496] BUG: KASAN: use-after-free in _scsih_expander_node_remove+0x710/0x750 [mpt3sas]\n[ 3479.386936] Read of size 1 at addr ffff8881c037691c by task rmmod/1531\n[ 3479.393524]\n[ 3479.395035] CPU: 18 PID: 1531 Comm: rmmod Not tainted 5.17.0-rc8+ #1436\n[ 3479.401712] Hardware name: Supermicro Super Server/H12SSL-NT, BIOS 2.1 06/02/2021\n[ 3479.409263] Call Trace:\n[ 3479.411743] \n[ 3479.413875] dump_stack_lvl+0x45/0x59\n[ 3479.417582] print_address_description.constprop.0+0x1f/0x120\n[ 3479.423389] ? _scsih_expander_node_remove+0x710/0x750 [mpt3sas]\n[ 3479.429469] kasan_report.cold+0x83/0xdf\n[ 3479.433438] ? _scsih_expander_node_remove+0x710/0x750 [mpt3sas]\n[ 3479.439514] _scsih_expander_node_remove+0x710/0x750 [mpt3sas]\n[ 3479.445411] ? _raw_spin_unlock_irqrestore+0x2d/0x40\n[ 3479.452032] scsih_remove+0x525/0xc90 [mpt3sas]\n[ 3479.458212] ? mpt3sas_expander_remove+0x1d0/0x1d0 [mpt3sas]\n[ 3479.465529] ? down_write+0xde/0x150\n[ 3479.470746] ? up_write+0x14d/0x460\n[ 3479.475840] ? kernfs_find_ns+0x137/0x310\n[ 3479.481438] pci_device_remove+0x65/0x110\n[ 3479.487013] __device_release_driver+0x316/0x680\n[ 3479.493180] driver_detach+0x1ec/0x2d0\n[ 3479.498499] bus_remove_driver+0xe7/0x2d0\n[ 3479.504081] pci_unregister_driver+0x26/0x250\n[ 3479.510033] _mpt3sas_exit+0x2b/0x6cf [mpt3sas]\n[ 3479.516144] __x64_sys_delete_module+0x2fd/0x510\n[ 3479.522315] ? free_module+0xaa0/0xaa0\n[ 3479.527593] ? __cond_resched+0x1c/0x90\n[ 3479.532951] ? lockdep_hardirqs_on_prepare+0x273/0x3e0\n[ 3479.539607] ? syscall_enter_from_user_mode+0x21/0x70\n[ 3479.546161] ? trace_hardirqs_on+0x1c/0x110\n[ 3479.551828] do_syscall_64+0x35/0x80\n[ 3479.556884] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[ 3479.563402] RIP: 0033:0x7f1fc482483b\n...\n[ 3479.943087] ==================================================================\n\nFix this by introducing the local variable port_id to store the port ID\nvalue before executing mpt3sas_transport_port_remove(). This local variable\nis then used in the call to ioc_info() instead of dereferencing the freed\nport structure."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/17d66b1c92bcb41e72271ec60069d3684aaa1c9c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1bb8a7fc64d63ec818e367e1b37676ea2ef2d20c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/25c1353dca74ad7cf3fd7ce258fe7c957a147d5e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/87d663d40801dffc99a5ad3b0188ad3e2b4d1557",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49083.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49083.json
new file mode 100644
index 00000000000..4e0928b3510
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49083.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49083",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:45.643",
+ "lastModified": "2025-02-26T07:00:45.643",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/omap: Fix regression in probe for NULL pointer dereference\n\nCommit 3f6634d997db (\"iommu: Use right way to retrieve iommu_ops\") started\ntriggering a NULL pointer dereference for some omap variants:\n\n__iommu_probe_device from probe_iommu_group+0x2c/0x38\nprobe_iommu_group from bus_for_each_dev+0x74/0xbc\nbus_for_each_dev from bus_iommu_probe+0x34/0x2e8\nbus_iommu_probe from bus_set_iommu+0x80/0xc8\nbus_set_iommu from omap_iommu_init+0x88/0xcc\nomap_iommu_init from do_one_initcall+0x44/0x24\n\nThis is caused by omap iommu probe returning 0 instead of ERR_PTR(-ENODEV)\nas noted by Jason Gunthorpe .\n\nLooks like the regression already happened with an earlier commit\n6785eb9105e3 (\"iommu/omap: Convert to probe/release_device() call-backs\")\nthat changed the function return type and missed converting one place."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1d89f2b9eadbcf3ce93c6d7238f68299a1f84968",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/47e239117bd97c8556f9187af7a9a7938db4e021",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/71ff461c3f41f6465434b9e980c01782763e7ad8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bd905fed87ce01ac010011bb8f44ed0140116ceb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ea518578aa8a9a0280605b53cc33f707e10c8178",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49084.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49084.json
new file mode 100644
index 00000000000..865fc276904
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49084.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49084",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:45.737",
+ "lastModified": "2025-02-26T07:00:45.737",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nqede: confirm skb is allocated before using\n\nqede_build_skb() assumes build_skb() always works and goes straight\nto skb_reserve(). However, build_skb() can fail under memory pressure.\nThis results in a kernel panic because the skb to reserve is NULL.\n\nAdd a check in case build_skb() failed to allocate and return NULL.\n\nThe NULL return is handled correctly in callers to qede_build_skb()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/034a92c6a81048128fc7b18d278d52438a13902a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4e910dbe36508654a896d5735b318c0b88172570",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8928239e5e2e460d95b8a0b89f61671625e7ece0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9648adb1b3ece55c657d3a4f52bfee663b710dfe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b2d6b3db9d1cf80908964036dbe1c52a86b1afb1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c9bdce2359b5f4986eb38d1e81865b3586cc20d2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e1fd0c42acfa22bb34d2ab6a111484f466ab8093",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49085.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49085.json
new file mode 100644
index 00000000000..09bce14e103
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49085.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49085",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:45.833",
+ "lastModified": "2025-02-26T07:00:45.833",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrbd: Fix five use after free bugs in get_initial_state\n\nIn get_initial_state, it calls notify_initial_state_done(skb,..) if\ncb->args[5]==1. If genlmsg_put() failed in notify_initial_state_done(),\nthe skb will be freed by nlmsg_free(skb).\nThen get_initial_state will goto out and the freed skb will be used by\nreturn value skb->len, which is a uaf bug.\n\nWhat's worse, the same problem goes even further: skb can also be\nfreed in the notify_*_state_change -> notify_*_state calls below.\nThus 4 additional uaf bugs happened.\n\nMy patch lets the problem callee functions: notify_initial_state_done\nand notify_*_state_change return an error code if errors happen.\nSo that the error codes could be propagated and the uaf bugs can be avoid.\n\nv2 reports a compilation warning. This v3 fixed this warning and built\nsuccessfully in my local environment with no additional warnings.\nv2: https://lore.kernel.org/patchwork/patch/1435218/"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0489700bfeb1e53eb2039c2291c67e71b0b40103",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/188fe6b26765edbad4055611c0f788b6870f4024",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/226e993c39405292781bfcf4b039a8db56aab362",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/594205b4936771a250f9d141e7e0fff21c3dd2d9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a972c768723359ec995579902473028fe3cd64b1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aadb22ba2f656581b2f733deb3a467c48cc618f6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b6a4055036eed1f5e239ce3d8b0db1ce38bba447",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dcf6be17b5c53b741898d2223b23e66d682de300",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/de63e74da2333b4068bb79983e632db730fea97e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49086.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49086.json
new file mode 100644
index 00000000000..a751f253e09
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49086.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49086",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:45.940",
+ "lastModified": "2025-02-26T07:00:45.940",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: fix leak of nested actions\n\nWhile parsing user-provided actions, openvswitch module may dynamically\nallocate memory and store pointers in the internal copy of the actions.\nSo this memory has to be freed while destroying the actions.\n\nCurrently there are only two such actions: ct() and set(). However,\nthere are many actions that can hold nested lists of actions and\novs_nla_free_flow_actions() just jumps over them leaking the memory.\n\nFor example, removal of the flow with the following actions will lead\nto a leak of the memory allocated by nf_ct_tmpl_alloc():\n\n actions:clone(ct(commit),0)\n\nNon-freed set() action may also leak the 'dst' structure for the\ntunnel info including device references.\n\nUnder certain conditions with a high rate of flow rotation that may\ncause significant memory leak problem (2MB per second in reporter's\ncase). The problem is also hard to mitigate, because the user doesn't\nhave direct control over the datapath flows generated by OVS.\n\nFix that by iterating over all the nested actions and freeing\neverything that needs to be freed recursively.\n\nNew build time assertion should protect us from this problem if new\nactions will be added in the future.\n\nUnfortunately, openvswitch module doesn't use NLA_F_NESTED, so all\nattributes has to be explicitly checked. sample() and clone() actions\nare mixing extra attributes into the user-provided action list. That\nprevents some code generalization too."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1f30fb9166d4f15a1aa19449b9da871fe0ed4796",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3554c214b83ec9a839ed574263a34218f372990c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/53bce9d19b0a9d245b25cd050b81652ed974a509",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5ae05b5eb58773cfec307ff88aff4cfd843c4cff",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7438dc55c0709819b813f4778aec2c48b782990b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/837b96d8103938e35e7d92cd9db96af914ca4fff",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef6f9ce0a79aa23b10fc5f3b3cab3814a25aac40",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49087.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49087.json
new file mode 100644
index 00000000000..001af1741e3
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49087.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49087",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:46.043",
+ "lastModified": "2025-02-26T07:00:46.043",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: fix a race in rxrpc_exit_net()\n\nCurrent code can lead to the following race:\n\nCPU0 CPU1\n\nrxrpc_exit_net()\n rxrpc_peer_keepalive_worker()\n if (rxnet->live)\n\n rxnet->live = false;\n del_timer_sync(&rxnet->peer_keepalive_timer);\n\n timer_reduce(&rxnet->peer_keepalive_timer, jiffies + delay);\n\n cancel_work_sync(&rxnet->peer_keepalive_work);\n\nrxrpc_exit_net() exits while peer_keepalive_timer is still armed,\nleading to use-after-free.\n\nsyzbot report was:\n\nODEBUG: free active (active state 0) object type: timer_list hint: rxrpc_peer_keepalive_timeout+0x0/0xb0\nWARNING: CPU: 0 PID: 3660 at lib/debugobjects.c:505 debug_print_object+0x16e/0x250 lib/debugobjects.c:505\nModules linked in:\nCPU: 0 PID: 3660 Comm: kworker/u4:6 Not tainted 5.17.0-syzkaller-13993-g88e6c0207623 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nWorkqueue: netns cleanup_net\nRIP: 0010:debug_print_object+0x16e/0x250 lib/debugobjects.c:505\nCode: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 00 1c 26 8a 4c 89 ee 48 c7 c7 00 10 26 8a e8 b1 e7 28 05 <0f> 0b 83 05 15 eb c5 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3\nRSP: 0018:ffffc9000353fb00 EFLAGS: 00010082\nRAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000\nRDX: ffff888029196140 RSI: ffffffff815efad8 RDI: fffff520006a7f52\nRBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000\nR10: ffffffff815ea4ae R11: 0000000000000000 R12: ffffffff89ce23e0\nR13: ffffffff8a2614e0 R14: ffffffff816628c0 R15: dffffc0000000000\nFS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007fe1f2908924 CR3: 0000000043720000 CR4: 00000000003506f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \n __debug_check_no_obj_freed lib/debugobjects.c:992 [inline]\n debug_check_no_obj_freed+0x301/0x420 lib/debugobjects.c:1023\n kfree+0xd6/0x310 mm/slab.c:3809\n ops_free_list.part.0+0x119/0x370 net/core/net_namespace.c:176\n ops_free_list net/core/net_namespace.c:174 [inline]\n cleanup_net+0x591/0xb00 net/core/net_namespace.c:598\n process_one_work+0x996/0x1610 kernel/workqueue.c:2289\n worker_thread+0x665/0x1080 kernel/workqueue.c:2436\n kthread+0x2e9/0x3a0 kernel/kthread.c:376\n ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298\n "
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/08ff0e74fab517dbc44e11b8bc683dd4ecc65950",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1946014ca3b19be9e485e780e862c375c6f98bad",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/41024a40f6c793abbb916a857f18fb009f07464c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/571d8e1d154ca18f08dcb72b69318d36e10010a0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7ee84d29f22de6f6c63fad6c54690517659862f1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/864297ee30727ae6233f80296b7fc91442620b05",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cd8aef1f30d1215648e4e6686cfb422004851429",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49088.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49088.json
new file mode 100644
index 00000000000..d3f7b55840a
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49088.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49088",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:46.143",
+ "lastModified": "2025-02-26T07:00:46.143",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe\n\nThis node pointer is returned by of_find_compatible_node() with\nrefcount incremented. Calling of_node_put() to aovid the refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2b04bd4f03bba021959ca339314f6739710f0954",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/45fdd98b70142521739615ad1bfb760401863b73",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/46d120f7c163706d6c31ee00baa0be64c4572b78",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/599874bbc4ed832ccb578d48ac0ae7344382ef43",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ebd1e3458dbf6643aa0272da398cb5b537d492b7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fbe5f4c0dd3475178f17ddd8b8d5044ebeae0be7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49089.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49089.json
new file mode 100644
index 00000000000..8452633e467
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49089.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49089",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:46.240",
+ "lastModified": "2025-02-26T07:00:46.240",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition\n\nThe documentation of the function rvt_error_qp says both r_lock and s_lock\nneed to be held when calling that function. It also asserts using lockdep\nthat both of those locks are held. However, the commit I referenced in\nFixes accidentally makes the call to rvt_error_qp in rvt_ruc_loopback no\nlonger covered by r_lock. This results in the lockdep assertion failing\nand also possibly in a race condition."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/43c2d7890ecabe527448a6c391fb2d9a5e6bbfe0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4d809f69695d4e7d1378b3a072fa9aef23123018",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/57800cc36e55db0547461c49acf5cd84c0f502b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/77ffb2495a41098f9d6a14f8aefde3188da75944",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8a50937227c385a477177c9ffa122b4230e40666",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/92f1947c0d26060e978b3a9f21f32ce7c8c9cca3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49090.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49090.json
new file mode 100644
index 00000000000..bde1a498bff
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49090.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49090",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:46.337",
+ "lastModified": "2025-02-26T07:00:46.337",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\narch/arm64: Fix topology initialization for core scheduling\n\nArm64 systems rely on store_cpu_topology() to call update_siblings_masks()\nto transfer the toplogy to the various cpu masks. This needs to be done\nbefore the call to notify_cpu_starting() which tells the scheduler about\neach cpu found, otherwise the core scheduling data structures are setup\nin a way that does not match the actual topology.\n\nWith smt_mask not setup correctly we bail on `cpumask_weight(smt_mask) == 1`\nfor !leaders in:\n\n notify_cpu_starting()\n cpuhp_invoke_callback_range()\n sched_cpu_starting()\n sched_core_cpu_starting()\n\nwhich leads to rq->core not being correctly set for !leader-rq's.\n\nWithout this change stress-ng (which enables core scheduling in its prctl\ntests in newer versions -- i.e. with PR_SCHED_CORE support) causes a warning\nand then a crash (trimmed for legibility):\n\n[ 1853.805168] ------------[ cut here ]------------\n[ 1853.809784] task_rq(b)->core != rq->core\n[ 1853.809792] WARNING: CPU: 117 PID: 0 at kernel/sched/fair.c:11102 cfs_prio_less+0x1b4/0x1c4\n...\n[ 1854.015210] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010\n...\n[ 1854.231256] Call trace:\n[ 1854.233689] pick_next_task+0x3dc/0x81c\n[ 1854.237512] __schedule+0x10c/0x4cc\n[ 1854.240988] schedule_idle+0x34/0x54"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5524cbb1bfcdff0cad0aaa9f94e6092002a07259",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/790c1567582bda8f1153015436e3330a7c6eb278",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/87f5d66daa5f457449bb95d6b8d18bb7596aa627",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c78a1b2d0bff678570c8dc9f14035606f5e5257d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49091.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49091.json
new file mode 100644
index 00000000000..d600984b523
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49091.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49091",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:46.430",
+ "lastModified": "2025-02-26T07:00:46.430",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/imx: Fix memory leak in imx_pd_connector_get_modes\n\nAvoid leaking the display mode variable if of_get_drm_display_mode\nfails.\n\nAddresses-Coverity-ID: 1443943 (\"Resource leak\")"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/31e449302ed00c38d4068443cf0243279701ab28",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/38bf605bd8c83d942c8dcffaef3633b7d8b37549",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/41624d7c0c3df71dee170c610744aaa5909327b8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7526102d908ec5ae777aa77723d52fce12916093",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bc23c327e1a23cc3555fa1e86288e13288515442",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bce81feb03a20fca7bbdd1c4af16b4e9d5c0e1d3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c539a6a5896ed92bfb91494e46996d013f3d5967",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d2c2758cfb0262637fd93350bdc8ad485fb1dd61",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f8b0ef0a5889890b50482b6593bd8de544736351",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49092.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49092.json
new file mode 100644
index 00000000000..1ec8c932709
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49092.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49092",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:46.530",
+ "lastModified": "2025-02-26T07:00:46.530",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipv4: fix route with nexthop object delete warning\n\nFRR folks have hit a kernel warning[1] while deleting routes[2] which is\ncaused by trying to delete a route pointing to a nexthop id without\nspecifying nhid but matching on an interface. That is, a route is found\nbut we hit a warning while matching it. The warning is from\nfib_info_nh() in include/net/nexthop.h because we run it on a fib_info\nwith nexthop object. The call chain is:\n inet_rtm_delroute -> fib_table_delete -> fib_nh_match (called with a\nnexthop fib_info and also with fc_oif set thus calling fib_info_nh on\nthe fib_info and triggering the warning). The fix is to not do any\nmatching in that branch if the fi has a nexthop object because those are\nmanaged separately. I.e. we should match when deleting without nh spec and\nshould fail when deleting a nexthop route with old-style nh spec because\nnexthop objects are managed separately, e.g.:\n $ ip r show 1.2.3.4/32\n 1.2.3.4 nhid 12 via 192.168.11.2 dev dummy0\n\n $ ip r del 1.2.3.4/32\n $ ip r del 1.2.3.4/32 nhid 12\n \n\n $ ip r del 1.2.3.4/32 dev dummy0\n \n\n[1]\n [ 523.462226] ------------[ cut here ]------------\n [ 523.462230] WARNING: CPU: 14 PID: 22893 at include/net/nexthop.h:468 fib_nh_match+0x210/0x460\n [ 523.462236] Modules linked in: dummy rpcsec_gss_krb5 xt_socket nf_socket_ipv4 nf_socket_ipv6 ip6table_raw iptable_raw bpf_preload xt_statistic ip_set ip_vs_sh ip_vs_wrr ip_vs_rr ip_vs xt_mark nf_tables xt_nat veth nf_conntrack_netlink nfnetlink xt_addrtype br_netfilter overlay dm_crypt nfsv3 nfs fscache netfs vhost_net vhost vhost_iotlb tap tun xt_CHECKSUM xt_MASQUERADE xt_conntrack 8021q garp mrp ipt_REJECT nf_reject_ipv4 ip6table_mangle ip6table_nat iptable_mangle iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_filter bridge stp llc rfcomm snd_seq_dummy snd_hrtimer rpcrdma rdma_cm iw_cm ib_cm ib_core ip6table_filter xt_comment ip6_tables vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) qrtr bnep binfmt_misc xfs vfat fat squashfs loop nvidia_drm(POE) nvidia_modeset(POE) nvidia_uvm(POE) nvidia(POE) intel_rapl_msr intel_rapl_common snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio snd_hda_codec_hdmi btusb btrtl iwlmvm uvcvideo btbcm snd_hda_intel edac_mce_amd\n [ 523.462274] videobuf2_vmalloc videobuf2_memops btintel snd_intel_dspcfg videobuf2_v4l2 snd_intel_sdw_acpi bluetooth snd_usb_audio snd_hda_codec mac80211 snd_usbmidi_lib joydev snd_hda_core videobuf2_common kvm_amd snd_rawmidi snd_hwdep snd_seq videodev ccp snd_seq_device libarc4 ecdh_generic mc snd_pcm kvm iwlwifi snd_timer drm_kms_helper snd cfg80211 cec soundcore irqbypass rapl wmi_bmof i2c_piix4 rfkill k10temp pcspkr acpi_cpufreq nfsd auth_rpcgss nfs_acl lockd grace sunrpc drm zram ip_tables crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel nvme sp5100_tco r8169 nvme_core wmi ipmi_devintf ipmi_msghandler fuse\n [ 523.462300] CPU: 14 PID: 22893 Comm: ip Tainted: P OE 5.16.18-200.fc35.x86_64 #1\n [ 523.462302] Hardware name: Micro-Star International Co., Ltd. MS-7C37/MPG X570 GAMING EDGE WIFI (MS-7C37), BIOS 1.C0 10/29/2020\n [ 523.462303] RIP: 0010:fib_nh_match+0x210/0x460\n [ 523.462304] Code: 7c 24 20 48 8b b5 90 00 00 00 e8 bb ee f4 ff 48 8b 7c 24 20 41 89 c4 e8 ee eb f4 ff 45 85 e4 0f 85 2e fe ff ff e9 4c ff ff ff <0f> 0b e9 17 ff ff ff 3c 0a 0f 85 61 fe ff ff 48 8b b5 98 00 00 00\n [ 523.462306] RSP: 0018:ffffaa53d4d87928 EFLAGS: 00010286\n [ 523.462307] RAX: 0000000000000000 RBX: ffffaa53d4d87a90 RCX: ffffaa53d4d87bb0\n [ 523.462308] RDX: ffff9e3d2ee6be80 RSI: ffffaa53d4d87a90 RDI: ffffffff920ed380\n [ 523.462309] RBP: ffff9e3d2ee6be80 R08: 0000000000000064 R09: 0000000000000000\n [ 523.462310] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000031\n [ 523.462310] R13: 0000000000000020 R14: 0000000000000000 R15: ffff9e3d331054e0\n [ 523.462311] FS: 00007f2455\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/63ea57478aaa3e06a597081a0f537318fc04e49f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6bf92d70e690b7ff12b24f4bfff5e5434d019b82",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/907c97986d6fa77318d17659dd76c94b65dd27c5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dcd689f9e2640c992f94eae9955b106f71c6825d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f5064531c23ad646da7be8b938292b00a7e61438",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f8db5743d09523c0bb35f16e13691e3b7eb5dba0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49093.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49093.json
new file mode 100644
index 00000000000..c401de6358a
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49093.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49093",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:46.633",
+ "lastModified": "2025-02-26T07:00:46.633",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nskbuff: fix coalescing for page_pool fragment recycling\n\nFix a use-after-free when using page_pool with page fragments. We\nencountered this problem during normal RX in the hns3 driver:\n\n(1) Initially we have three descriptors in the RX queue. The first one\n allocates PAGE1 through page_pool, and the other two allocate one\n half of PAGE2 each. Page references look like this:\n\n RX_BD1 _______ PAGE1\n RX_BD2 _______ PAGE2\n RX_BD3 _________/\n\n(2) Handle RX on the first descriptor. Allocate SKB1, eventually added\n to the receive queue by tcp_queue_rcv().\n\n(3) Handle RX on the second descriptor. Allocate SKB2 and pass it to\n netif_receive_skb():\n\n netif_receive_skb(SKB2)\n ip_rcv(SKB2)\n SKB3 = skb_clone(SKB2)\n\n SKB2 and SKB3 share a reference to PAGE2 through\n skb_shinfo()->dataref. The other ref to PAGE2 is still held by\n RX_BD3:\n\n SKB2 ---+- PAGE2\n SKB3 __/ /\n RX_BD3 _________/\n\n (3b) Now while handling TCP, coalesce SKB3 with SKB1:\n\n tcp_v4_rcv(SKB3)\n tcp_try_coalesce(to=SKB1, from=SKB3) // succeeds\n kfree_skb_partial(SKB3)\n skb_release_data(SKB3) // drops one dataref\n\n SKB1 _____ PAGE1\n \\____\n SKB2 _____ PAGE2\n /\n RX_BD3 _________/\n\n In skb_try_coalesce(), __skb_frag_ref() takes a page reference to\n PAGE2, where it should instead have increased the page_pool frag\n reference, pp_frag_count. Without coalescing, when releasing both\n SKB2 and SKB3, a single reference to PAGE2 would be dropped. Now\n when releasing SKB1 and SKB2, two references to PAGE2 will be\n dropped, resulting in underflow.\n\n (3c) Drop SKB2:\n\n af_packet_rcv(SKB2)\n consume_skb(SKB2)\n skb_release_data(SKB2) // drops second dataref\n page_pool_return_skb_page(PAGE2) // drops one pp_frag_count\n\n SKB1 _____ PAGE1\n \\____\n PAGE2\n /\n RX_BD3 _________/\n\n(4) Userspace calls recvmsg()\n Copies SKB1 and releases it. Since SKB3 was coalesced with SKB1, we\n release the SKB3 page as well:\n\n tcp_eat_recv_skb(SKB1)\n skb_release_data(SKB1)\n page_pool_return_skb_page(PAGE1)\n page_pool_return_skb_page(PAGE2) // drops second pp_frag_count\n\n(5) PAGE2 is freed, but the third RX descriptor was still using it!\n In our case this causes IOMMU faults, but it would silently corrupt\n memory if the IOMMU was disabled.\n\nChange the logic that checks whether pp_recycle SKBs can be coalesced.\nWe still reject differing pp_recycle between 'from' and 'to' SKBs, but\nin order to avoid the situation described above, we also reject\ncoalescing when both 'from' and 'to' are pp_recycled and 'from' is\ncloned.\n\nThe new logic allows coalescing a cloned pp_recycle SKB into a page\nrefcounted one, because in this case the release (4) will drop the right\nreference, the one taken by skb_try_coalesce()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1effe8ca4e34c34cdd9318436a4232dcb582ebf4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/72bb856d16e883437023ff2ff77d0c498018728a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ba965e8605aee5387cecaa28fcf7ee9f61779a49",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c4fa19615806a9a7e518c295b39175aa47a685ac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49094.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49094.json
new file mode 100644
index 00000000000..d0e3793e17a
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49094.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49094",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:46.747",
+ "lastModified": "2025-02-26T07:00:46.747",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/tls: fix slab-out-of-bounds bug in decrypt_internal\n\nThe memory size of tls_ctx->rx.iv for AES128-CCM is 12 setting in\ntls_set_sw_offload(). The return value of crypto_aead_ivsize()\nfor \"ccm(aes)\" is 16. So memcpy() require 16 bytes from 12 bytes\nmemory space will trigger slab-out-of-bounds bug as following:\n\n==================================================================\nBUG: KASAN: slab-out-of-bounds in decrypt_internal+0x385/0xc40 [tls]\nRead of size 16 at addr ffff888114e84e60 by task tls/10911\n\nCall Trace:\n \n dump_stack_lvl+0x34/0x44\n print_report.cold+0x5e/0x5db\n ? decrypt_internal+0x385/0xc40 [tls]\n kasan_report+0xab/0x120\n ? decrypt_internal+0x385/0xc40 [tls]\n kasan_check_range+0xf9/0x1e0\n memcpy+0x20/0x60\n decrypt_internal+0x385/0xc40 [tls]\n ? tls_get_rec+0x2e0/0x2e0 [tls]\n ? process_rx_list+0x1a5/0x420 [tls]\n ? tls_setup_from_iter.constprop.0+0x2e0/0x2e0 [tls]\n decrypt_skb_update+0x9d/0x400 [tls]\n tls_sw_recvmsg+0x3c8/0xb50 [tls]\n\nAllocated by task 10911:\n kasan_save_stack+0x1e/0x40\n __kasan_kmalloc+0x81/0xa0\n tls_set_sw_offload+0x2eb/0xa20 [tls]\n tls_setsockopt+0x68c/0x700 [tls]\n __sys_setsockopt+0xfe/0x1b0\n\nReplace the crypto_aead_ivsize() with prot->iv_size + prot->salt_size\nwhen memcpy() iv value in TLS_1_3_VERSION scenario."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2304660ab6c425df64d95301b601424c6a50f28b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/29be1816cbab9a0dc6243120939fd10a92753756",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2b7d14c105dd8f6412eda5a91e1e6154653731e3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/589154d0f18945f41d138a5b4e49e518d294474b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6e2f1b033b17dedda51d465861b69e58317d6343",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9381fe8c849cfbe50245ac01fc077554f6eaa0e2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49095.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49095.json
new file mode 100644
index 00000000000..d4210fce65c
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49095.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49095",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:46.887",
+ "lastModified": "2025-02-26T07:00:46.887",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()\n\nThe error handling path of the probe releases a resource that is not freed\nin the remove function. In some cases, a ioremap() must be undone.\n\nAdd the missing iounmap() call in the remove function."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/16ed828b872d12ccba8f07bcc446ae89ba662f9c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1e0c01319dedf1e63ec5df37ead048e17afd92ba",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/34a47f7ddb4fd1cbd12397aa6f7dad1de08b4050",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a845c678e094894f38cc9526d212b21933ce44c7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aefd755a96051aa56b198cb7ecd168b22ba384f6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c5f77b595379b5191316edd365a542f8b1526066",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ce430cfad6a5385d5b7f7c1dc3fa50f10abfd41b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/db863ab2baf058ed05c7b723612e3c40c9dd6885",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/de6aee0978f164d3d0c771ce03e3066a26c371c5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49096.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49096.json
new file mode 100644
index 00000000000..bdd7466c1c3
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49096.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49096",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:47.010",
+ "lastModified": "2025-02-26T07:00:47.010",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sfc: add missing xdp queue reinitialization\n\nAfter rx/tx ring buffer size is changed, kernel panic occurs when\nit acts XDP_TX or XDP_REDIRECT.\n\nWhen tx/rx ring buffer size is changed(ethtool -G), sfc driver\nreallocates and reinitializes rx and tx queues and their buffer\n(tx_queue->buffer).\nBut it misses reinitializing xdp queues(efx->xdp_tx_queues).\nSo, while it is acting XDP_TX or XDP_REDIRECT, it uses the uninitialized\ntx_queue->buffer.\n\nA new function efx_set_xdp_channels() is separated from efx_set_channels()\nto handle only xdp queues.\n\nSplat looks like:\n BUG: kernel NULL pointer dereference, address: 000000000000002a\n #PF: supervisor write access in kernel mode\n #PF: error_code(0x0002) - not-present page\n PGD 0 P4D 0\n Oops: 0002 [#4] PREEMPT SMP NOPTI\n RIP: 0010:efx_tx_map_chunk+0x54/0x90 [sfc]\n CPU: 2 PID: 0 Comm: swapper/2 Tainted: G D 5.17.0+ #55 e8beeee8289528f11357029357cf\n Code: 48 8b 8d a8 01 00 00 48 8d 14 52 4c 8d 2c d0 44 89 e0 48 85 c9 74 0e 44 89 e2 4c 89 f6 48 80\n RSP: 0018:ffff92f121e45c60 EFLAGS: 00010297\n RIP: 0010:efx_tx_map_chunk+0x54/0x90 [sfc]\n RAX: 0000000000000040 RBX: ffff92ea506895c0 RCX: ffffffffc0330870\n RDX: 0000000000000001 RSI: 00000001139b10ce RDI: ffff92ea506895c0\n RBP: ffffffffc0358a80 R08: 00000001139b110d R09: 0000000000000000\n R10: 0000000000000001 R11: ffff92ea414c0088 R12: 0000000000000040\n R13: 0000000000000018 R14: 00000001139b10ce R15: ffff92ea506895c0\n FS: 0000000000000000(0000) GS:ffff92f121ec0000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n Code: 48 8b 8d a8 01 00 00 48 8d 14 52 4c 8d 2c d0 44 89 e0 48 85 c9 74 0e 44 89 e2 4c 89 f6 48 80\n CR2: 000000000000002a CR3: 00000003e6810004 CR4: 00000000007706e0\n RSP: 0018:ffff92f121e85c60 EFLAGS: 00010297\n PKRU: 55555554\n RAX: 0000000000000040 RBX: ffff92ea50689700 RCX: ffffffffc0330870\n RDX: 0000000000000001 RSI: 00000001145a90ce RDI: ffff92ea50689700\n RBP: ffffffffc0358a80 R08: 00000001145a910d R09: 0000000000000000\n R10: 0000000000000001 R11: ffff92ea414c0088 R12: 0000000000000040\n R13: 0000000000000018 R14: 00000001145a90ce R15: ffff92ea50689700\n FS: 0000000000000000(0000) GS:ffff92f121e80000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 000000000000002a CR3: 00000003e6810005 CR4: 00000000007706e0\n PKRU: 55555554\n Call Trace:\n \n efx_xdp_tx_buffers+0x12b/0x3d0 [sfc 84c94b8e32d44d296c17e10a634d3ad454de4ba5]\n __efx_rx_packet+0x5c3/0x930 [sfc 84c94b8e32d44d296c17e10a634d3ad454de4ba5]\n efx_rx_packet+0x28c/0x2e0 [sfc 84c94b8e32d44d296c17e10a634d3ad454de4ba5]\n efx_ef10_ev_process+0x5f8/0xf40 [sfc 84c94b8e32d44d296c17e10a634d3ad454de4ba5]\n ? enqueue_task_fair+0x95/0x550\n efx_poll+0xc4/0x360 [sfc 84c94b8e32d44d296c17e10a634d3ad454de4ba5]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/059a47f1da93811d37533556d67e72f2261b1127",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b8c46bc358d84701e7f7ffa054037db25f25da0e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dcc85e1593686e42c6749ef3d356db34759d59e8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ed7a824fda8732578d1014fad1f7fb0363705090",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49097.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49097.json
new file mode 100644
index 00000000000..48020b7d36e
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49097.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49097",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:47.127",
+ "lastModified": "2025-02-26T07:00:47.127",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFS: Avoid writeback threads getting stuck in mempool_alloc()\n\nIn a low memory situation, allow the NFS writeback code to fail without\ngetting stuck in infinite loops in mempool_alloc()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0bae835b63c53f86cdc524f5962e39409585b22c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1b3fa9a3c420c31e77b406ddc28f3a627100516c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a6caeddd68977a1aaaf62fbd1955b41dd5c3c5d3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c74e2f6ecc51bd08bb5b0335477dba954a50592e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ea029e4ce760f786919d06ef52efa2e50ea92a5f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49098.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49098.json
new file mode 100644
index 00000000000..1bc8e61b1de
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49098.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49098",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:47.247",
+ "lastModified": "2025-02-26T07:00:47.247",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nDrivers: hv: vmbus: Fix potential crash on module unload\n\nThe vmbus driver relies on the panic notifier infrastructure to perform\nsome operations when a panic event is detected. Since vmbus can be built\nas module, it is required that the driver handles both registering and\nunregistering such panic notifier callback.\n\nAfter commit 74347a99e73a (\"x86/Hyper-V: Unload vmbus channel in hv panic callback\")\nthough, the panic notifier registration is done unconditionally in the module\ninitialization routine whereas the unregistering procedure is conditionally\nguarded and executes only if HV_FEATURE_GUEST_CRASH_MSR_AVAILABLE capability\nis set.\n\nThis patch fixes that by unconditionally unregistering the panic notifier\nin the module's exit routine as well."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2133c422a103cf7c7768c37b9ac382e73b691892",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3d0078f8bddd58d9bb1ad40bbe929f8633abb276",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5ea98d0f5f035c1bcf1517ccec0e024ae35a48b2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6b4c0149a56147b29169e07000d566162892722a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/792f232d57ff28bbd5f9c4abe0466b23d5879dc8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cf580d2e3884dbafd6b90269b03a24d661578624",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dcd6b1a624c0ffa21034d8b1e02e9d068458f596",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-490xx/CVE-2022-49099.json b/CVE-2022/CVE-2022-490xx/CVE-2022-49099.json
new file mode 100644
index 00000000000..b742be6ebb7
--- /dev/null
+++ b/CVE-2022/CVE-2022-490xx/CVE-2022-49099.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49099",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:47.347",
+ "lastModified": "2025-02-26T07:00:47.347",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nDrivers: hv: vmbus: Fix initialization of device object in vmbus_device_register()\n\nInitialize the device's dma_{mask,parms} pointers and the device's\ndma_mask value before invoking device_register(). Address the\nfollowing trace with 5.17-rc7:\n\n[ 49.646839] WARNING: CPU: 0 PID: 189 at include/linux/dma-mapping.h:543\n\tnetvsc_probe+0x37a/0x3a0 [hv_netvsc]\n[ 49.646928] Call Trace:\n[ 49.646930] \n[ 49.646935] vmbus_probe+0x40/0x60 [hv_vmbus]\n[ 49.646942] really_probe+0x1ce/0x3b0\n[ 49.646948] __driver_probe_device+0x109/0x180\n[ 49.646952] driver_probe_device+0x23/0xa0\n[ 49.646955] __device_attach_driver+0x76/0xe0\n[ 49.646958] ? driver_allows_async_probing+0x50/0x50\n[ 49.646961] bus_for_each_drv+0x84/0xd0\n[ 49.646964] __device_attach+0xed/0x170\n[ 49.646967] device_initial_probe+0x13/0x20\n[ 49.646970] bus_probe_device+0x8f/0xa0\n[ 49.646973] device_add+0x41a/0x8e0\n[ 49.646975] ? hrtimer_init+0x28/0x80\n[ 49.646981] device_register+0x1b/0x20\n[ 49.646983] vmbus_device_register+0x5e/0xf0 [hv_vmbus]\n[ 49.646991] vmbus_add_channel_work+0x12d/0x190 [hv_vmbus]\n[ 49.646999] process_one_work+0x21d/0x3f0\n[ 49.647002] worker_thread+0x4a/0x3b0\n[ 49.647005] ? process_one_work+0x3f0/0x3f0\n[ 49.647007] kthread+0xff/0x130\n[ 49.647011] ? kthread_complete_and_exit+0x20/0x20\n[ 49.647015] ret_from_fork+0x22/0x30\n[ 49.647020] \n[ 49.647021] ---[ end trace 0000000000000000 ]---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2fe4b8631427618175a32f125062df91a5fe3f73",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3a5469582c241abca22500f36a9cb8e9331969cf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49100.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49100.json
new file mode 100644
index 00000000000..fbe37e212d8
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49100.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49100",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:47.437",
+ "lastModified": "2025-02-26T07:00:47.437",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio_console: eliminate anonymous module_init & module_exit\n\nEliminate anonymous module_init() and module_exit(), which can lead to\nconfusion or ambiguity when reading System.map, crashes/oops/bugs,\nor an initcall_debug log.\n\nGive each of these init and exit functions unique driver-specific\nnames to eliminate the anonymous names.\n\nExample 1: (System.map)\n ffffffff832fc78c t init\n ffffffff832fc79e t init\n ffffffff832fc8f8 t init\n\nExample 2: (initcall_debug log)\n calling init+0x0/0x12 @ 1\n initcall init+0x0/0x12 returned 0 after 15 usecs\n calling init+0x0/0x60 @ 1\n initcall init+0x0/0x60 returned 0 after 2 usecs\n calling init+0x0/0x9a @ 1\n initcall init+0x0/0x9a returned 0 after 74 usecs"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0f3d824bd70a1303464d5e93ee3e7afe7832fe89",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3504b0a177208eda85bf472bbf7c9aa77d2b8343",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3fd5dee7404ce40c79cba468bb2510115639d975",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/44c2d5fbe7b2bd1f8cb114d608a591a73a5d4ae6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/71612aee09ecea3475f8751dc841d75a011b1fd0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7deaddb704713608e0ae559e27185581b9af71a0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/93e3d88321d2274fa4e26b006e19cc10fec331c2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c69b442125bf009fce26e15aa5616caf8a3673c3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fefb8a2a941338d871e2d83fbd65fbfa068857bd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49101.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49101.json
new file mode 100644
index 00000000000..c17e44dbab8
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49101.json
@@ -0,0 +1,16 @@
+{
+ "id": "CVE-2022-49101",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:47.533",
+ "lastModified": "2025-02-26T13:15:33.977",
+ "vulnStatus": "Rejected",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
+ }
+ ],
+ "metrics": {},
+ "references": []
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49102.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49102.json
new file mode 100644
index 00000000000..3301b0c9b97
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49102.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49102",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:47.633",
+ "lastModified": "2025-02-26T07:00:47.633",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhabanalabs: fix possible memory leak in MMU DR fini\n\nThis patch fixes what seems to be copy paste error.\n\nWe will have a memory leak if the host-resident shadow is NULL (which\nwill likely happen as the DR and HR are not dependent)."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/12e49aefda2e04b07604f13e03f40027cbeb0dc6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/30058d3a83cfe8c6aacbfe5ab13c01dd0c1799e3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6d421fb7a9eddd8ce0a05641a3db97283fe20699",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eb85eec858c1a5c11d3a0bff403f6440b05b40dc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49103.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49103.json
new file mode 100644
index 00000000000..cccc662fa58
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49103.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49103",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:47.723",
+ "lastModified": "2025-02-26T07:00:47.723",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify()\n\n[You don't often get email from xiongx18@fudan.edu.cn. Learn why this is important at http://aka.ms/LearnAboutSenderIdentification.]\n\nThe reference counting issue happens in two error paths in the\nfunction _nfs42_proc_copy_notify(). In both error paths, the function\nsimply returns the error code and forgets to balance the refcount of\nobject `ctx`, bumped by get_nfs_open_context() earlier, which may\ncause refcount leaks.\n\nFix it by balancing refcount of the `ctx` object before the function\nreturns in both error paths."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/9b9feec97c1fc7dd9bb69f62c4905cddf1801599",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b37f482ba9f0e6382c188e3fccf6c4b2fdc938eb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b7f114edd54326f730a754547e7cfb197b5bc132",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f46f632f9cfae4b2e3635fa58840a8ec584c42e3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fb73bf6305f4eb8f0cf9a61ee874d55f019d6dc4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49104.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49104.json
new file mode 100644
index 00000000000..af80b55064d
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49104.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49104",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:47.817",
+ "lastModified": "2025-02-26T07:00:47.817",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: vchiq_core: handle NULL result of find_service_by_handle\n\nIn case of an invalid handle the function find_servive_by_handle\nreturns NULL. So take care of this and avoid a NULL pointer dereference."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/04202f54dd8899e10f56a89c4c1ede0043fa22af",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3b424f6586a870b8d657c5e5419465bbe0e7b61f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/42f2142a337ee372455574809fc924580a7e51b2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aa0b7296785312a4bfa8fac0ba8ad78698fd9fcf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ca225857faf237234d2fffe5d1919467dfadd822",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49105.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49105.json
new file mode 100644
index 00000000000..62d65ba41b2
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49105.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49105",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:47.910",
+ "lastModified": "2025-02-26T07:00:47.910",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: wfx: fix an error handling in wfx_init_common()\n\nOne error handler of wfx_init_common() return without calling\nieee80211_free_hw(hw), which may result in memory leak. And I add\none err label to unify the error handler, which is useful for the\nsubsequent changes."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/60f1d3c92dc1ef1026e5b917a329a7fa947da036",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/86efcb524ae1889ae73f2a2f0bb7fff2ec757ab0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/93498c6e775ae91732a8109dba1bdcd324908f84",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9727912e906762a63c1a667c84731d3427653f88",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ab0fed1fa744173433cfd1dbaf9239f200ded650",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49106.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49106.json
new file mode 100644
index 00000000000..139a78f66cd
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49106.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49106",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:48.003",
+ "lastModified": "2025-02-26T07:00:48.003",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances\n\nvchiq_get_state() can return a NULL pointer. So handle this cases and\navoid a NULL pointer derefence in vchiq_dump_platform_instances."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/176df12b38c70b0a45e6392a0ee5bc83489dfc29",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4627250cabaa80278d3ab01ad107893cea83799f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/51e5e5c34c22c0bfec0808d8c33e0b2fcf4c7c89",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aa899e686d442c63d50f4d369cc02dbbf0941cb0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49107.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49107.json
new file mode 100644
index 00000000000..9c911b96f33
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49107.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49107",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:48.093",
+ "lastModified": "2025-02-26T07:00:48.093",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix memory leak in ceph_readdir when note_last_dentry returns error\n\nReset the last_readdir at the same time, and add a comment explaining\nwhy we don't free last_readdir when dir_emit returns false."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2fe82d3254029ef9ec4e7be890125d5ef4f537de",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7f740ede35132d3d5d19747cad56a511d21bb156",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e792575b902a3939ca482491ee9fb3a236f99640",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f4429786129648a8f4bb1e5faa143c4478cc5c4a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f639d9867eea647005dc824e0e24f39ffc50d4e4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49108.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49108.json
new file mode 100644
index 00000000000..35e2469009c
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49108.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49108",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:48.183",
+ "lastModified": "2025-02-26T07:00:48.183",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: mediatek: Fix memory leaks on probe\n\nHandle the error branches to free memory where required.\n\nAddresses-Coverity-ID: 1491825 (\"Resource leak\")"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/02742d1d5c95cff8b6e9379aae4ab12674f7265d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7a688c91d3fd54c53e7a9edd6052cdae98dd99d8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c6a0b413398588fc2d8b174a79ea715b66413fca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49109.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49109.json
new file mode 100644
index 00000000000..abeb67ed504
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49109.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49109",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:48.273",
+ "lastModified": "2025-02-26T07:00:48.273",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix inode reference leakage in ceph_get_snapdir()\n\nThe ceph_get_inode() will search for or insert a new inode into the\nhash for the given vino, and return a reference to it. If new is\nnon-NULL, its reference is consumed.\n\nWe should release the reference when in error handing cases."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/322794d3355c33adcc4feace0045d85a8e4ed813",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3ae7163598c611a8892698e0c056fe794e52b44b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9cd21981dedfb4fe9f344529e4be35727cb10940",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b2d9bb3f06abddefdfa740b0a604575b6797e1bf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49110.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49110.json
new file mode 100644
index 00000000000..074811b8dd4
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49110.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49110",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:48.363",
+ "lastModified": "2025-02-26T07:00:48.363",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: conntrack: revisit gc autotuning\n\nas of commit 4608fdfc07e1\n(\"netfilter: conntrack: collect all entries in one cycle\")\nconntrack gc was changed to run every 2 minutes.\n\nOn systems where conntrack hash table is set to large value, most evictions\nhappen from gc worker rather than the packet path due to hash table\ndistribution.\n\nThis causes netlink event overflows when events are collected.\n\nThis change collects average expiry of scanned entries and\nreschedules to the average remaining value, within 1 to 60 second interval.\n\nTo avoid event overflows, reschedule after each bucket and add a\nlimit for both run time and number of evictions per run.\n\nIf more entries have to be evicted, reschedule and restart 1 jiffy\ninto the future."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2cfadb761d3d0219412fd8150faea60c7e863833",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/58d52743ae85d28c9335c6034d6ce350b8689951",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/592e57591826f3d09c28d755a39ea8e9d13705ad",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7cd361d5e6d986c0d4cafb9ceaa803359048ae15",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49111.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49111.json
new file mode 100644
index 00000000000..e8c2326881d
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49111.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49111",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:48.470",
+ "lastModified": "2025-02-26T07:00:48.470",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Fix use after free in hci_send_acl\n\nThis fixes the following trace caused by receiving\nHCI_EV_DISCONN_PHY_LINK_COMPLETE which does call hci_conn_del without\nfirst checking if conn->type is in fact AMP_LINK and in case it is\ndo properly cleanup upper layers with hci_disconn_cfm:\n\n ==================================================================\n BUG: KASAN: use-after-free in hci_send_acl+0xaba/0xc50\n Read of size 8 at addr ffff88800e404818 by task bluetoothd/142\n\n CPU: 0 PID: 142 Comm: bluetoothd Not tainted\n 5.17.0-rc5-00006-gda4022eeac1a #7\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014\n Call Trace:\n \n dump_stack_lvl+0x45/0x59\n print_address_description.constprop.0+0x1f/0x150\n kasan_report.cold+0x7f/0x11b\n hci_send_acl+0xaba/0xc50\n l2cap_do_send+0x23f/0x3d0\n l2cap_chan_send+0xc06/0x2cc0\n l2cap_sock_sendmsg+0x201/0x2b0\n sock_sendmsg+0xdc/0x110\n sock_write_iter+0x20f/0x370\n do_iter_readv_writev+0x343/0x690\n do_iter_write+0x132/0x640\n vfs_writev+0x198/0x570\n do_writev+0x202/0x280\n do_syscall_64+0x38/0x90\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n RSP: 002b:00007ffce8a099b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014\n Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3\n 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 14 00 00 00 0f 05\n <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10\n RDX: 0000000000000001 RSI: 00007ffce8a099e0 RDI: 0000000000000015\n RAX: ffffffffffffffda RBX: 00007ffce8a099e0 RCX: 00007f788fc3cf77\n R10: 00007ffce8af7080 R11: 0000000000000246 R12: 000055e4ccf75580\n RBP: 0000000000000015 R08: 0000000000000002 R09: 0000000000000001\n \n R13: 000055e4ccf754a0 R14: 000055e4ccf75cd0 R15: 000055e4ccf4a6b0\n\n Allocated by task 45:\n kasan_save_stack+0x1e/0x40\n __kasan_kmalloc+0x81/0xa0\n hci_chan_create+0x9a/0x2f0\n l2cap_conn_add.part.0+0x1a/0xdc0\n l2cap_connect_cfm+0x236/0x1000\n le_conn_complete_evt+0x15a7/0x1db0\n hci_le_conn_complete_evt+0x226/0x2c0\n hci_le_meta_evt+0x247/0x450\n hci_event_packet+0x61b/0xe90\n hci_rx_work+0x4d5/0xc50\n process_one_work+0x8fb/0x15a0\n worker_thread+0x576/0x1240\n kthread+0x29d/0x340\n ret_from_fork+0x1f/0x30\n\n Freed by task 45:\n kasan_save_stack+0x1e/0x40\n kasan_set_track+0x21/0x30\n kasan_set_free_info+0x20/0x30\n __kasan_slab_free+0xfb/0x130\n kfree+0xac/0x350\n hci_conn_cleanup+0x101/0x6a0\n hci_conn_del+0x27e/0x6c0\n hci_disconn_phylink_complete_evt+0xe0/0x120\n hci_event_packet+0x812/0xe90\n hci_rx_work+0x4d5/0xc50\n process_one_work+0x8fb/0x15a0\n worker_thread+0x576/0x1240\n kthread+0x29d/0x340\n ret_from_fork+0x1f/0x30\n\n The buggy address belongs to the object at ffff88800c0f0500\n The buggy address is located 24 bytes inside of\n which belongs to the cache kmalloc-128 of size 128\n The buggy address belongs to the page:\n 128-byte region [ffff88800c0f0500, ffff88800c0f0580)\n flags: 0x100000000000200(slab|node=0|zone=1)\n page:00000000fe45cd86 refcount:1 mapcount:0\n mapping:0000000000000000 index:0x0 pfn:0xc0f0\n raw: 0000000000000000 0000000080100010 00000001ffffffff\n 0000000000000000\n raw: 0100000000000200 ffffea00003a2c80 dead000000000004\n ffff8880078418c0\n page dumped because: kasan: bad access detected\n ffff88800c0f0400: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc\n Memory state around the buggy address:\n >ffff88800c0f0500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ffff88800c0f0480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n ffff88800c0f0580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n \n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2cc803804ec9a296b3156855d6c8c4ca1c6b84be",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3803d896ddd97c7c16689a5381c0960040727647",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4da302b90b96c309987eb9b37c8547f939f042d2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/643a6c26bd32e339d00ad97b8822b6db009e803c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/684e505406abaeabe0058e9776f9210bf2747953",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b3c2ea1fd444b3bb7b82bfd2c3a45418f85c2502",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c41de54b0a963e59e4dd04c029a4a6d73f45ef9c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d404765dffdbd8dcd14758695d0c96c52fb2e624",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f63d24baff787e13b723d86fe036f84bdbc35045",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49112.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49112.json
new file mode 100644
index 00000000000..8e78f01b9b3
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49112.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49112",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:48.577",
+ "lastModified": "2025-02-26T07:00:48.577",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmt76: fix monitor mode crash with sdio driver\n\nmt7921s driver may receive frames with fragment buffers. If there is a\nCTS packet received in monitor mode, the payload is 10 bytes only and\nneed 6 bytes header padding after RXD buffer. However, only RXD in the\nfirst linear buffer, if we pull buffer size RXD-size+6 bytes with\nskb_pull(), that would trigger \"BUG_ON(skb->len < skb->data_len)\" in\n__skb_pull().\n\nTo avoid the nonlinear buffer issue, enlarge the RXD size from 128 to\n256 to make sure all MCU operation in linear buffer.\n\n[ 52.007562] kernel BUG at include/linux/skbuff.h:2313!\n[ 52.007578] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP\n[ 52.007987] pc : skb_pull+0x48/0x4c\n[ 52.008015] lr : mt7921_queue_rx_skb+0x494/0x890 [mt7921_common]\n[ 52.008361] Call trace:\n[ 52.008377] skb_pull+0x48/0x4c\n[ 52.008400] mt76s_net_worker+0x134/0x1b0 [mt76_sdio 35339a92c6eb7d4bbcc806a1d22f56365565135c]\n[ 52.008431] __mt76_worker_fn+0xe8/0x170 [mt76 ef716597d11a77150bc07e3fdd68eeb0f9b56917]\n[ 52.008449] kthread+0x148/0x3ac\n[ 52.008466] ret_from_fork+0x10/0x30"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/123bc712b1de0805f9d683687e17b1ec2aba0b68",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/13946d5a68efd11dd6af2f6ef4c908f6b00158a5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/95e2af01669c7a3cb7a933cefa06361f9db15059",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c37b4cab3d97ef64b206fca4d9daabd9aff7356e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49113.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49113.json
new file mode 100644
index 00000000000..a4e6cd3a4e2
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49113.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49113",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:48.677",
+ "lastModified": "2025-02-26T07:00:48.677",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/secvar: fix refcount leak in format_show()\n\nRefcount leak will happen when format_show returns failure in multiple\ncases. Unified management of of_node_put can fix this problem."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/02222bf4f0a27f6eba66d1f597cdb5daadd51829",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2a71e3ecd829a82013cf095c55068c61d991e885",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c105ffb6b9744158e37e9f81f0f38861951d1c1f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d05e4265d33af60b39606c20c731e3e719bfe3d6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d601fd24e6964967f115f036a840f4f28488f63f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49114.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49114.json
new file mode 100644
index 00000000000..4cd35c746bb
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49114.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49114",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:48.773",
+ "lastModified": "2025-02-26T07:00:48.773",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: libfc: Fix use after free in fc_exch_abts_resp()\n\nfc_exch_release(ep) will decrease the ep's reference count. When the\nreference count reaches zero, it is freed. But ep is still used in the\nfollowing code, which will lead to a use after free.\n\nReturn after the fc_exch_release() call to avoid use after free."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1d7effe5fff9d28e45e18ac3a564067c7ddfe898",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/271add11994ba1a334859069367e04d2be2ebdd4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/412dd8299b02e4410fe77b8396953c1a8dde183a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/499d198494e77b6533251b9b909baf5c101129cb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4a131d4ea8b581ac9b01d3a72754db4848be3232",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5cf2ce8967b0d98c8cfa4dc42ef4fcf080f5c836",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6044ad64f41c87382cfeeca281573d1886d80cbe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/87909291762d08fdb60d19069d7a89b5b308d0ef",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f581df412bc45c95176e3c808ee2839c05b2ab0c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49115.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49115.json
new file mode 100644
index 00000000000..30f940afec5
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49115.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49115",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:48.873",
+ "lastModified": "2025-02-26T07:00:48.873",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: endpoint: Fix misused goto label\n\nFix a misused goto label jump since that can result in a memory leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/70236a0d2d62b081d52076de22d8d017d6cbe99f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7c657c0694ff690e361a13ce41c36b9dfb433ec8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bf8d87c076f55b8b4dfdb6bc6c6b6dc0c2ccb487",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d3642fc64276b06446290f82fd45630aeaa4b007",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dc9d33b2d8d09e6478e8ef817a81cf26930acc3e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49116.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49116.json
new file mode 100644
index 00000000000..c5f324ae8c9
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49116.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49116",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:48.967",
+ "lastModified": "2025-02-26T07:00:48.967",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: use memset avoid memory leaks\n\nUse memset to initialize structs to prevent memory leaks\nin l2cap_ecred_connect"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/42b6a39f439b6f37cc2024d91ce547d83290ff78",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9567d54e70ff58c2695c2cc2e53c86c67551d3e6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d3715b2333e9a21692ba16ef8645eda584a9515d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d588c183a971b85c775ad66da563ee6e8bc8158f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e9e55acee9b7a737ec7f5161b94a78932a5514c8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49117.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49117.json
new file mode 100644
index 00000000000..ab286e272f2
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49117.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49117",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:49.057",
+ "lastModified": "2025-02-26T07:00:49.057",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmips: ralink: fix a refcount leak in ill_acc_of_setup()\n\nof_node_put(np) needs to be called when pdev == NULL."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/060a485df4ec1183d543317511cb4caa43468b5d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/142ae7d4f21524acfe073e5a3da5667aa85eb970",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4a0a1436053b17e50b7c88858fb0824326641793",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5fb47ca3490813d3884d8ad0b2ce511aa3537551",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8d7f7ef7980f287ace1c15f2ac03d6754e12f071",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c74c755daed551b9aceb8388159180861474bdfe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49118.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49118.json
new file mode 100644
index 00000000000..7ea8f7da978
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49118.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49118",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:49.150",
+ "lastModified": "2025-02-26T07:00:49.150",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hisi_sas: Free irq vectors in order for v3 HW\n\nIf the driver probe fails to request the channel IRQ or fatal IRQ, the\ndriver will free the IRQ vectors before freeing the IRQs in free_irq(),\nand this will cause a kernel BUG like this:\n\n------------[ cut here ]------------\nkernel BUG at drivers/pci/msi.c:369!\nInternal error: Oops - BUG: 0 [#1] PREEMPT SMP\nCall trace:\n free_msi_irqs+0x118/0x13c\n pci_disable_msi+0xfc/0x120\n pci_free_irq_vectors+0x24/0x3c\n hisi_sas_v3_probe+0x360/0x9d0 [hisi_sas_v3_hw]\n local_pci_probe+0x44/0xb0\n work_for_cpu_fn+0x20/0x34\n process_one_work+0x1d0/0x340\n worker_thread+0x2e0/0x460\n kthread+0x180/0x190\n ret_from_fork+0x10/0x20\n---[ end trace b88990335b610c11 ]---\n\nSo we use devm_add_action() to control the order in which we free the\nvectors."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/224903cc60d045576393c3b16907742f23e6c740",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/554fb72ee34f4732c7f694f56c3c6e67790352a0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8b6eab9d683bae7f88dc894b8c851f866032301c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b4cc04fa8f1fc3816c8494d77abab3f72b9d2292",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f05a0d8de2ea49af36821a20b0b501e20ced937e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49119.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49119.json
new file mode 100644
index 00000000000..0742d51cced
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49119.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49119",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:49.250",
+ "lastModified": "2025-02-26T07:00:49.250",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req()\n\nIn pm8001_chip_fw_flash_update_build(), if\npm8001_chip_fw_flash_update_build() fails, the struct fw_control_ex\nallocated must be freed."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/a25ed5f21f94f9ae4bcc8dd747e978668890c921",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d83574666bac4b1462e90df393fbed6c5f57d1a3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e5ecdb01952f230921aa8163d8d7f4c97c925ed8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f792a3629f4c4aa4c3703d66b43ce1edcc3ec09a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fe5b8ea5583b5c3f6f68e06acba50387edf3b5d5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49120.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49120.json
new file mode 100644
index 00000000000..19a55e803e2
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49120.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49120",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:49.350",
+ "lastModified": "2025-02-26T07:00:49.350",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: pm8001: Fix task leak in pm8001_send_abort_all()\n\nIn pm8001_send_abort_all(), make sure to free the allocated sas task\nif pm8001_tag_alloc() or pm8001_mpi_build_cmd() fail."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/146cae06d2682d7563732544be334e8e6d3862b8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2051044d7901f1a9d7be95d0d32e53b88e9548f7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2290dcad6f65864dec518fb2d5fb45f67d684150",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/34c79d16ee69cb53288c202bb1ab0ba0130d9674",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f90a74892f3acf0cdec5844e90fc8686ca13e7d7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49121.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49121.json
new file mode 100644
index 00000000000..2db1dfe03b3
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49121.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49121",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:49.450",
+ "lastModified": "2025-02-26T07:00:49.450",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: pm8001: Fix tag leaks on error\n\nIn pm8001_chip_set_dev_state_req(), pm8001_chip_fw_flash_update_req(),\npm80xx_chip_phy_ctl_req() and pm8001_chip_reg_dev_req() add missing calls\nto pm8001_tag_free() to free the allocated tag when pm8001_mpi_build_cmd()\nfails.\n\nSimilarly, in pm8001_exec_internal_task_abort(), if the chip ->task_abort\nmethod fails, the tag allocated for the abort request task must be\nfreed. Add the missing call to pm8001_tag_free()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/43c617eefab7077d69f5989ad3e2a273da1d728b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4c8f04b1905cd4b776d0b720463c091545478ef7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9cc72bcc1c096ed42c91646f130d4b4191580a4c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a0bb65eadbf942024226241d9d99fed17168940b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bdc74815f1c39905054b7d47399e0260b201b14d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49122.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49122.json
new file mode 100644
index 00000000000..82836a2e855
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49122.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49122",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:49.540",
+ "lastModified": "2025-02-26T07:00:49.540",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm ioctl: prevent potential spectre v1 gadget\n\nIt appears like cmd could be a Spectre v1 gadget as it's supplied by a\nuser and used as an array index. Prevent the contents of kernel memory\nfrom being leaked to userspace via speculative execution by using\narray_index_nospec."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/02cc46f397eb3691c56affbd5073e54f7a82ac32",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0320bac5801b31407200227173205d017488f140",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/44e6cb3ab177faae840bb2c1ebda9a2539876184",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/58880025e3362024f6d8ea01cb0c7a5df6c84ba6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/71c8df33fd777c7628f6fbc09b14e84806c55914",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/76c94651005f58885facf9c973007f5ea01ab01f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7ae2c5b89da3cfaf856df880af27d3bb32a74b3d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cd9c88da171a62c4b0f1c70e50c75845969fbc18",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dd86064417de828ff2102ddc6049c829bf7585b4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49123.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49123.json
new file mode 100644
index 00000000000..68dee2f8453
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49123.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49123",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:49.640",
+ "lastModified": "2025-02-26T07:00:49.640",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nath11k: Fix frames flush failure caused by deadlock\n\nWe are seeing below warnings:\n\nkernel: [25393.301506] ath11k_pci 0000:01:00.0: failed to flush mgmt transmit queue 0\nkernel: [25398.421509] ath11k_pci 0000:01:00.0: failed to flush mgmt transmit queue 0\nkernel: [25398.421831] ath11k_pci 0000:01:00.0: dropping mgmt frame for vdev 0, is_started 0\n\nthis means ath11k fails to flush mgmt. frames because wmi_mgmt_tx_work\nhas no chance to run in 5 seconds.\n\nBy setting /proc/sys/kernel/hung_task_timeout_secs to 20 and increasing\nATH11K_FLUSH_TIMEOUT to 50 we get below warnings:\n\nkernel: [ 120.763160] INFO: task wpa_supplicant:924 blocked for more than 20 seconds.\nkernel: [ 120.763169] Not tainted 5.10.90 #12\nkernel: [ 120.763177] \"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\nkernel: [ 120.763186] task:wpa_supplicant state:D stack: 0 pid: 924 ppid: 1 flags:0x000043a0\nkernel: [ 120.763201] Call Trace:\nkernel: [ 120.763214] __schedule+0x785/0x12fa\nkernel: [ 120.763224] ? lockdep_hardirqs_on_prepare+0xe2/0x1bb\nkernel: [ 120.763242] schedule+0x7e/0xa1\nkernel: [ 120.763253] schedule_timeout+0x98/0xfe\nkernel: [ 120.763266] ? run_local_timers+0x4a/0x4a\nkernel: [ 120.763291] ath11k_mac_flush_tx_complete+0x197/0x2b1 [ath11k 13c3a9bf37790f4ac8103b3decf7ab4008ac314a]\nkernel: [ 120.763306] ? init_wait_entry+0x2e/0x2e\nkernel: [ 120.763343] __ieee80211_flush_queues+0x167/0x21f [mac80211 335da900954f1c5ea7f1613d92088ce83342042c]\nkernel: [ 120.763378] __ieee80211_recalc_idle+0x105/0x125 [mac80211 335da900954f1c5ea7f1613d92088ce83342042c]\nkernel: [ 120.763411] ieee80211_recalc_idle+0x14/0x27 [mac80211 335da900954f1c5ea7f1613d92088ce83342042c]\nkernel: [ 120.763441] ieee80211_free_chanctx+0x77/0xa2 [mac80211 335da900954f1c5ea7f1613d92088ce83342042c]\nkernel: [ 120.763473] __ieee80211_vif_release_channel+0x100/0x131 [mac80211 335da900954f1c5ea7f1613d92088ce83342042c]\nkernel: [ 120.763540] ieee80211_vif_release_channel+0x66/0x81 [mac80211 335da900954f1c5ea7f1613d92088ce83342042c]\nkernel: [ 120.763572] ieee80211_destroy_auth_data+0xa3/0xe6 [mac80211 335da900954f1c5ea7f1613d92088ce83342042c]\nkernel: [ 120.763612] ieee80211_mgd_deauth+0x178/0x29b [mac80211 335da900954f1c5ea7f1613d92088ce83342042c]\nkernel: [ 120.763654] cfg80211_mlme_deauth+0x1a8/0x22c [cfg80211 8945aa5bc2af5f6972336665d8ad6f9c191ad5be]\nkernel: [ 120.763697] nl80211_deauthenticate+0xfa/0x123 [cfg80211 8945aa5bc2af5f6972336665d8ad6f9c191ad5be]\nkernel: [ 120.763715] genl_rcv_msg+0x392/0x3c2\nkernel: [ 120.763750] ? nl80211_associate+0x432/0x432 [cfg80211 8945aa5bc2af5f6972336665d8ad6f9c191ad5be]\nkernel: [ 120.763782] ? nl80211_associate+0x432/0x432 [cfg80211 8945aa5bc2af5f6972336665d8ad6f9c191ad5be]\nkernel: [ 120.763802] ? genl_rcv+0x36/0x36\nkernel: [ 120.763814] netlink_rcv_skb+0x89/0xf7\nkernel: [ 120.763829] genl_rcv+0x28/0x36\nkernel: [ 120.763840] netlink_unicast+0x179/0x24b\nkernel: [ 120.763854] netlink_sendmsg+0x393/0x401\nkernel: [ 120.763872] sock_sendmsg+0x72/0x76\nkernel: [ 120.763886] ____sys_sendmsg+0x170/0x1e6\nkernel: [ 120.763897] ? copy_msghdr_from_user+0x7a/0xa2\nkernel: [ 120.763914] ___sys_sendmsg+0x95/0xd1\nkernel: [ 120.763940] __sys_sendmsg+0x85/0xbf\nkernel: [ 120.763956] do_syscall_64+0x43/0x55\nkernel: [ 120.763966] entry_SYSCALL_64_after_hwframe+0x44/0xa9\nkernel: [ 120.763977] RIP: 0033:0x79089f3fcc83\nkernel: [ 120.763986] RSP: 002b:00007ffe604f0508 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\nkernel: [ 120.763997] RAX: ffffffffffffffda RBX: 000059b40e987690 RCX: 000079089f3fcc83\nkernel: [ 120.764006] RDX: 0000000000000000 RSI: 00007ffe604f0558 RDI: 0000000000000009\nkernel: [ 120.764014] RBP: 00007ffe604f0540 R08: 0000000000000004 R09: 0000000000400000\nkernel: [ 120.764023] R10: 00007ffe604f0638 R11: 0000000000000246 R12: 000059b40ea04980\nkernel: [ 120.764032] R13: 00007ffe604\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/261b07519518bd14cb168b287b17e1d195f8d0c8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/33e723dc054edfc94da90eecca3b72cb424ce4a3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49124.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49124.json
new file mode 100644
index 00000000000..191d8fe204f
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49124.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49124",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:49.740",
+ "lastModified": "2025-02-26T07:00:49.740",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/mce: Work around an erratum on fast string copy instructions\n\nA rare kernel panic scenario can happen when the following conditions\nare met due to an erratum on fast string copy instructions:\n\n1) An uncorrected error.\n2) That error must be in first cache line of a page.\n3) Kernel must execute page_copy from the page immediately before that\npage.\n\nThe fast string copy instructions (\"REP; MOVS*\") could consume an\nuncorrectable memory error in the cache line _right after_ the desired\nregion to copy and raise an MCE.\n\nBit 0 of MSR_IA32_MISC_ENABLE can be cleared to disable fast string\ncopy and will avoid such spurious machine checks. However, that is less\npreferable due to the permanent performance impact. Considering memory\npoison is rare, it's desirable to keep fast string copy enabled until an\nMCE is seen.\n\nIntel has confirmed the following:\n1. The CPU erratum of fast string copy only applies to Skylake,\nCascade Lake and Cooper Lake generations.\n\nDirectly return from the MCE handler:\n2. Will result in complete execution of the \"REP; MOVS*\" with no data\nloss or corruption.\n3. Will not result in another MCE firing on the next poisoned cache line\ndue to \"REP; MOVS*\".\n4. Will resume execution from a correct point in code.\n5. Will result in the same instruction that triggered the MCE firing a\nsecond MCE immediately for any other software recoverable data fetch\nerrors.\n6. Is not safe without disabling the fast string copy, as the next fast\nstring copy of the same buffer on the same CPU would result in a PANIC\nMCE.\n\nThis should mitigate the erratum completely with the only caveat that\nthe fast string copy is disabled on the affected hyper thread thus\nperformance degradation.\n\nThis is still better than the OS crashing on MCEs raised on an\nirrelevant process due to \"REP; MOVS*' accesses in a kernel context,\ne.g., copy_page.\n\n\nInjected errors on 1st cache line of 8 anonymous pages of process\n'proc1' and observed MCE consumption from 'proc2' with no panic\n(directly returned).\n\nWithout the fix, the host panicked within a few minutes on a\nrandom 'proc2' process due to kernel access from copy_page.\n\n [ bp: Fix comment style + touch ups, zap an unlikely(), improve the\n quirk function's readability. ]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/8ca97812c3c830573f965a07bbd84223e8c5f5bd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ba37c73be3d5632f6fb9fa20b250ce45560ca85d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49125.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49125.json
new file mode 100644
index 00000000000..67d86063e7e
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49125.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49125",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:49.837",
+ "lastModified": "2025-02-26T07:00:49.837",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sprd: fix potential NULL dereference\n\n'drm' could be null in sprd_drm_shutdown, and drm_warn maybe dereference\nit, remove this warning log.\n\n\nv1 -> v2:\n- Split checking platform_get_resource() return value to a separate patch\n- Use dev_warn() instead of removing the warning log"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/8668658aebb0a19d877d5a81c004baf716c4aaa6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c3acc8db1bc221604e2db9807f01d8a44b97a64d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49126.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49126.json
new file mode 100644
index 00000000000..d834e31d025
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49126.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49126",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:49.927",
+ "lastModified": "2025-02-26T07:00:49.927",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpi3mr: Fix memory leaks\n\nFix memory leaks related to operational reply queue's memory segments which\nare not getting freed while unloading the driver."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/27fc9e90171ab0a94a411f3fdb3522ef5acb9537",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5d76a88b8536d75ff5362e232097e85946b8aadf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/71c7ac65a084ae7d387c3c1d02d59edfdecb009f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d44b5fefb22e139408ae12b864da1ecb9ad9d1d2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49127.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49127.json
new file mode 100644
index 00000000000..1bfbf7518e8
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49127.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49127",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:50.023",
+ "lastModified": "2025-02-26T07:00:50.023",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nref_tracker: implement use-after-free detection\n\nWhenever ref_tracker_dir_init() is called, mark the struct ref_tracker_dir\nas dead.\n\nTest the dead status from ref_tracker_alloc() and ref_tracker_free()\n\nThis should detect buggy dev_put()/dev_hold() happening too late\nin netdevice dismantle process."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3743c9de303fa36c2e2ca2522ab280c52bcafbd2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e3ececfe668facd87d920b608349a32607060e66",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49128.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49128.json
new file mode 100644
index 00000000000..1170af7181d
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49128.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49128",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:50.113",
+ "lastModified": "2025-02-26T07:00:50.113",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: Add missing pm_runtime_put_sync\n\npm_runtime_get_sync() will increase the rumtime PM counter\neven when it returns an error. Thus a pairing decrement is needed\nto prevent refcount leak. Fix this by replacing this API with\npm_runtime_resume_and_get(), which will not change the runtime\nPM counter on error. Besides, a matching decrement is needed\non the error handling path to keep the counter balanced."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/46f47807738441e354873546dde0b000106c068a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/792533e54cd6e89191798ccd1abd590c62b9077e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9df80dc738926a2ea4bd1ce5993c3d0f4b0e855c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ff13c90d7f7ab606b37be6d15140d19013d6736c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49129.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49129.json
new file mode 100644
index 00000000000..a262a0037c8
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49129.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49129",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:50.203",
+ "lastModified": "2025-02-26T07:00:50.203",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmt76: mt7921: fix crash when startup fails.\n\nIf the nic fails to start, it is possible that the\nreset_work has already been scheduled. Ensure the\nwork item is canceled so we do not have use-after-free\ncrash in case cleanup is called before the work item\nis executed.\n\nThis fixes crash on my x86_64 apu2 when mt7921k radio\nfails to work. Radio still fails, but OS does not\ncrash."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/38fbe806645090c07aa97171f20fc62c3d7d3a98",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/827e7799c61b978fbc2cc9dac66cb62401b2b3f0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ac1260b661c2ef0d0a56680cdb5672b931b7be8f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c1a5e6002ec441a3b9fb4d048b4b49ae93409a46",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49130.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49130.json
new file mode 100644
index 00000000000..ec0d4da54cd
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49130.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49130",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:50.300",
+ "lastModified": "2025-02-26T07:00:50.300",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nath11k: mhi: use mhi_sync_power_up()\n\nIf amss.bin was missing ath11k would crash during 'rmmod ath11k_pci'. The\nreason for that was that we were using mhi_async_power_up() which does not\ncheck any errors. But mhi_sync_power_up() on the other hand does check for\nerrors so let's use that to fix the crash.\n\nI was not able to find a reason why an async version was used.\nath11k_mhi_start() (which enables state ATH11K_MHI_POWER_ON) is called from\nath11k_hif_power_up(), which can sleep. So sync version should be safe to use\nhere.\n\n[ 145.569731] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN PTI\n[ 145.569789] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\n[ 145.569843] CPU: 2 PID: 1628 Comm: rmmod Kdump: loaded Tainted: G W 5.16.0-wt-ath+ #567\n[ 145.569898] Hardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021\n[ 145.569956] RIP: 0010:ath11k_hal_srng_access_begin+0xb5/0x2b0 [ath11k]\n[ 145.570028] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ec 01 00 00 48 8b ab a8 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 <0f> b6 14 02 48 89 e8 83 e0 07 83 c0 03 45 85 ed 75 48 38 d0 7c 08\n[ 145.570089] RSP: 0018:ffffc900025d7ac0 EFLAGS: 00010246\n[ 145.570144] RAX: dffffc0000000000 RBX: ffff88814fca2dd8 RCX: 1ffffffff50cb455\n[ 145.570196] RDX: 0000000000000000 RSI: ffff88814fca2dd8 RDI: ffff88814fca2e80\n[ 145.570252] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffffa8659497\n[ 145.570329] R10: fffffbfff50cb292 R11: 0000000000000001 R12: ffff88814fca0000\n[ 145.570410] R13: 0000000000000000 R14: ffff88814fca2798 R15: ffff88814fca2dd8\n[ 145.570465] FS: 00007fa399988540(0000) GS:ffff888233e00000(0000) knlGS:0000000000000000\n[ 145.570519] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 145.570571] CR2: 00007fa399b51421 CR3: 0000000137898002 CR4: 00000000003706e0\n[ 145.570623] Call Trace:\n[ 145.570675] \n[ 145.570727] ? ath11k_ce_tx_process_cb+0x34b/0x860 [ath11k]\n[ 145.570797] ath11k_ce_tx_process_cb+0x356/0x860 [ath11k]\n[ 145.570864] ? tasklet_init+0x150/0x150\n[ 145.570919] ? ath11k_ce_alloc_pipes+0x280/0x280 [ath11k]\n[ 145.570986] ? tasklet_clear_sched+0x42/0xe0\n[ 145.571042] ? tasklet_kill+0xe9/0x1b0\n[ 145.571095] ? tasklet_clear_sched+0xe0/0xe0\n[ 145.571148] ? irq_has_action+0x120/0x120\n[ 145.571202] ath11k_ce_cleanup_pipes+0x45a/0x580 [ath11k]\n[ 145.571270] ? ath11k_pci_stop+0x10e/0x170 [ath11k_pci]\n[ 145.571345] ath11k_core_stop+0x8a/0xc0 [ath11k]\n[ 145.571434] ath11k_core_deinit+0x9e/0x150 [ath11k]\n[ 145.571499] ath11k_pci_remove+0xd2/0x260 [ath11k_pci]\n[ 145.571553] pci_device_remove+0x9a/0x1c0\n[ 145.571605] __device_release_driver+0x332/0x660\n[ 145.571659] driver_detach+0x1e7/0x2c0\n[ 145.571712] bus_remove_driver+0xe2/0x2d0\n[ 145.571772] pci_unregister_driver+0x21/0x250\n[ 145.571826] __do_sys_delete_module+0x30a/0x4b0\n[ 145.571879] ? free_module+0xac0/0xac0\n[ 145.571933] ? lockdep_hardirqs_on_prepare.part.0+0x18c/0x370\n[ 145.571986] ? syscall_enter_from_user_mode+0x1d/0x50\n[ 145.572039] ? lockdep_hardirqs_on+0x79/0x100\n[ 145.572097] do_syscall_64+0x3b/0x90\n[ 145.572153] entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nTested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03003-QCAHSPSWPL_V1_V2_SILICONZ_LITE-2"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/20d01a11efde2e05e47d5c66101f5c26eaca68e2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/339bd0b55ecdd0f7f341e9357c4cfde799de9418",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3df6d74aedfdca919cca475d15dfdbc8b05c9e5d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3fd7d50384c3808b7f7fa135aa9bb5feb1cb9849",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/646d533af2911be1184eaee8c900b7eb8ecc4396",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49131.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49131.json
new file mode 100644
index 00000000000..d5193adc879
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49131.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49131",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:50.393",
+ "lastModified": "2025-02-26T07:00:50.393",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nath11k: fix kernel panic during unload/load ath11k modules\n\nCall netif_napi_del() from ath11k_ahb_free_ext_irq() to fix\nthe following kernel panic when unload/load ath11k modules\nfor few iterations.\n\n[ 971.201365] Unable to handle kernel paging request at virtual address 6d97a208\n[ 971.204227] pgd = 594c2919\n[ 971.211478] [6d97a208] *pgd=00000000\n[ 971.214120] Internal error: Oops: 5 [#1] PREEMPT SMP ARM\n[ 971.412024] CPU: 2 PID: 4435 Comm: insmod Not tainted 5.4.89 #0\n[ 971.434256] Hardware name: Generic DT based system\n[ 971.440165] PC is at napi_by_id+0x10/0x40\n[ 971.445019] LR is at netif_napi_add+0x160/0x1dc\n\n[ 971.743127] (napi_by_id) from [<807d89a0>] (netif_napi_add+0x160/0x1dc)\n[ 971.751295] (netif_napi_add) from [<7f1209ac>] (ath11k_ahb_config_irq+0xf8/0x414 [ath11k_ahb])\n[ 971.759164] (ath11k_ahb_config_irq [ath11k_ahb]) from [<7f12135c>] (ath11k_ahb_probe+0x40c/0x51c [ath11k_ahb])\n[ 971.768567] (ath11k_ahb_probe [ath11k_ahb]) from [<80666864>] (platform_drv_probe+0x48/0x94)\n[ 971.779670] (platform_drv_probe) from [<80664718>] (really_probe+0x1c8/0x450)\n[ 971.789389] (really_probe) from [<80664cc4>] (driver_probe_device+0x15c/0x1b8)\n[ 971.797547] (driver_probe_device) from [<80664f60>] (device_driver_attach+0x44/0x60)\n[ 971.805795] (device_driver_attach) from [<806650a0>] (__driver_attach+0x124/0x140)\n[ 971.814822] (__driver_attach) from [<80662adc>] (bus_for_each_dev+0x58/0xa4)\n[ 971.823328] (bus_for_each_dev) from [<80663a2c>] (bus_add_driver+0xf0/0x1e8)\n[ 971.831662] (bus_add_driver) from [<806658a4>] (driver_register+0xa8/0xf0)\n[ 971.839822] (driver_register) from [<8030269c>] (do_one_initcall+0x78/0x1ac)\n[ 971.847638] (do_one_initcall) from [<80392524>] (do_init_module+0x54/0x200)\n[ 971.855968] (do_init_module) from [<803945b0>] (load_module+0x1e30/0x1ffc)\n[ 971.864126] (load_module) from [<803948b0>] (sys_init_module+0x134/0x17c)\n[ 971.871852] (sys_init_module) from [<80301000>] (ret_fast_syscall+0x0/0x50)\n\nTested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.6.0.1-00760-QCAHKSWPL_SILICONZ-1"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/22b59cb965f79ee1accf83172441c9ca0ecb632a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/38e488db194dc16d2eb23c77c6a8c04ff583c40d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/699e8c87e5c406af0f0606f40eeebd248c51b702",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c4b7653af62a9a5efe2856183d1f987c5429758b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c6a815f5abdf324108799829dd19ea62fef4bf95",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49132.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49132.json
new file mode 100644
index 00000000000..ce58d5fe580
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49132.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49132",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:50.497",
+ "lastModified": "2025-02-26T07:00:50.497",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nath11k: pci: fix crash on suspend if board file is not found\n\nMario reported that the kernel was crashing on suspend if ath11k was not able\nto find a board file:\n\n[ 473.693286] PM: Suspending system (s2idle)\n[ 473.693291] printk: Suspending console(s) (use no_console_suspend to debug)\n[ 474.407787] BUG: unable to handle page fault for address: 0000000000002070\n[ 474.407791] #PF: supervisor read access in kernel mode\n[ 474.407794] #PF: error_code(0x0000) - not-present page\n[ 474.407798] PGD 0 P4D 0\n[ 474.407801] Oops: 0000 [#1] PREEMPT SMP NOPTI\n[ 474.407805] CPU: 2 PID: 2350 Comm: kworker/u32:14 Tainted: G W 5.16.0 #248\n[...]\n[ 474.407868] Call Trace:\n[ 474.407870] \n[ 474.407874] ? _raw_spin_lock_irqsave+0x2a/0x60\n[ 474.407882] ? lock_timer_base+0x72/0xa0\n[ 474.407889] ? _raw_spin_unlock_irqrestore+0x29/0x3d\n[ 474.407892] ? try_to_del_timer_sync+0x54/0x80\n[ 474.407896] ath11k_dp_rx_pktlog_stop+0x49/0xc0 [ath11k]\n[ 474.407912] ath11k_core_suspend+0x34/0x130 [ath11k]\n[ 474.407923] ath11k_pci_pm_suspend+0x1b/0x50 [ath11k_pci]\n[ 474.407928] pci_pm_suspend+0x7e/0x170\n[ 474.407935] ? pci_pm_freeze+0xc0/0xc0\n[ 474.407939] dpm_run_callback+0x4e/0x150\n[ 474.407947] __device_suspend+0x148/0x4c0\n[ 474.407951] async_suspend+0x20/0x90\ndmesg-efi-164255130401001:\nOops#1 Part1\n[ 474.407955] async_run_entry_fn+0x33/0x120\n[ 474.407959] process_one_work+0x220/0x3f0\n[ 474.407966] worker_thread+0x4a/0x3d0\n[ 474.407971] kthread+0x17a/0x1a0\n[ 474.407975] ? process_one_work+0x3f0/0x3f0\n[ 474.407979] ? set_kthread_struct+0x40/0x40\n[ 474.407983] ret_from_fork+0x22/0x30\n[ 474.407991] \n\nThe issue here is that board file loading happens after ath11k_pci_probe()\nsuccesfully returns (ath11k initialisation happends asynchronously) and the\nsuspend handler is still enabled, of course failing as ath11k is not properly\ninitialised. Fix this by checking ATH11K_FLAG_QMI_FAIL during both suspend and\nresume.\n\nTested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03003-QCAHSPSWPL_V1_V2_SILICONZ_LITE-2"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/aeed776c00e804a0f7896db39c7c661cea34ee1f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b4f4c56459a5c744f7f066b9fc2b54ea995030c5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f3c5ef433da82d257337424b3647ce9dcb37d4b5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fed4cef115ab21a18faf499b3fa9b9a4b544f941",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49133.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49133.json
new file mode 100644
index 00000000000..828b9412177
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49133.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49133",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:50.590",
+ "lastModified": "2025-02-26T07:00:50.590",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: svm range restore work deadlock when process exit\n\nkfd_process_notifier_release flush svm_range_restore_work\nwhich calls svm_range_list_lock_and_flush_work to flush deferred_list\nwork, but if deferred_list work mmput release the last user, it will\ncall exit_mmap -> notifier_release, it is deadlock with below backtrace.\n\nMove flush svm_range_restore_work to kfd_process_wq_release to avoid\ndeadlock. Then svm_range_restore_work take task->mm ref to avoid mm is\ngone while validating and mapping ranges to GPU.\n\nWorkqueue: events svm_range_deferred_list_work [amdgpu]\nCall Trace:\n wait_for_completion+0x94/0x100\n __flush_work+0x12a/0x1e0\n __cancel_work_timer+0x10e/0x190\n cancel_delayed_work_sync+0x13/0x20\n kfd_process_notifier_release+0x98/0x2a0 [amdgpu]\n __mmu_notifier_release+0x74/0x1f0\n exit_mmap+0x170/0x200\n mmput+0x5d/0x130\n svm_range_deferred_list_work+0x104/0x230 [amdgpu]\n process_one_work+0x220/0x3c0"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/6225bb3a88d22594aacea2485dc28ca12d596721",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/858822905f4bf44100d63c5e22e263109976f7cb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a6be83086e91891081e0589e4b4645bf4643e897",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49134.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49134.json
new file mode 100644
index 00000000000..405f33c43c8
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49134.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49134",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:50.680",
+ "lastModified": "2025-02-26T07:00:50.680",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmlxsw: spectrum: Guard against invalid local ports\n\nWhen processing events generated by the device's firmware, the driver\nprotects itself from events reported for non-existent local ports, but\nnot for the CPU port (local port 0), which exists, but does not have all\nthe fields as any local port.\n\nThis can result in a NULL pointer dereference when trying access\n'struct mlxsw_sp_port' fields which are not initialized for CPU port.\n\nCommit 63b08b1f6834 (\"mlxsw: spectrum: Protect driver from buggy firmware\")\nalready handled such issue by bailing early when processing a PUDE event\nreported for the CPU port.\n\nGeneralize the approach by moving the check to a common function and\nmaking use of it in all relevant places."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4cad27ba2e5a5843a7fab5aa30de2b8e8c3db3a8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bcdfd615f83b4bd04678109bf18022d1476e4bbf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49135.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49135.json
new file mode 100644
index 00000000000..58da5d23c49
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49135.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49135",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:50.770",
+ "lastModified": "2025-02-26T07:00:50.770",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix memory leak\n\n[why]\nResource release is needed on the error handling path\nto prevent memory leak.\n\n[how]\nFix this by adding kfree on the error handling path."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3ce1497add6d17b48cc9df65095bd20202d93994",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5d5c6dba2b43e28845d7d7ed32a36802329a5f52",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7e10369c72db7a0e2f77b2e306aadc07aef6b07a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9d0bef3cc22cf250278ed45b829f062a00af9e27",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49136.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49136.json
new file mode 100644
index 00000000000..7b1d5142821
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49136.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49136",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:50.867",
+ "lastModified": "2025-02-26T07:00:50.867",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set\n\nhci_cmd_sync_queue shall return an error if HCI_UNREGISTER flag has\nbeen set as that means hci_unregister_dev has been called so it will\nlikely cause a uaf after the timeout as the hdev will be freed."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0b94f2651f56b9e4aa5f012b0d7eb57308c773cf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1c69ef84a808676cceb69210addf5df45b741323",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49137.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49137.json
new file mode 100644
index 00000000000..b42833c7345
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49137.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49137",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:50.953",
+ "lastModified": "2025-02-26T07:00:50.953",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj\n\nThis issue takes place in an error path in\namdgpu_cs_fence_to_handle_ioctl(). When `info->in.what` falls into\ndefault case, the function simply returns -EINVAL, forgetting to\ndecrement the reference count of a dma_fence obj, which is bumped\nearlier by amdgpu_cs_get_fence(). This may result in reference count\nleaks.\n\nFix it by decreasing the refcount of specific object before returning\nthe error code."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3edd8646cb7c11b57c90e026bda6f21076223f5b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4009f104b02b223d1a11d74b36b1cc083bc37028",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/72d77ddb2224ebc00648f4f78f8a9a259dccbdf7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/927beb05aaa429c883cc0ec6adc48964b187e291",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b6d1f7d97c81ebaf2cda9c4c943ee2e484fffdcf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bc2d5c0775c839e2b072884f4ee6a93ba410f107",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dfced44f122c500004a48ecc8db516bb6a295a1b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49138.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49138.json
new file mode 100644
index 00000000000..ab56c759dcc
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49138.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49138",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:51.047",
+ "lastModified": "2025-02-26T07:00:51.047",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Ignore multiple conn complete events\n\nWhen one of the three connection complete events is received multiple\ntimes for the same handle, the device is registered multiple times which\nleads to memory corruptions. Therefore, consequent events for a single\nconnection are ignored.\n\nThe conn->state can hold different values, therefore HCI_CONN_HANDLE_UNSET\nis introduced to identify new connections. To make sure the events do not\ncontain this or another invalid handle HCI_CONN_HANDLE_MAX and checks\nare introduced.\n\nBuglink: https://bugzilla.kernel.org/show_bug.cgi?id=215497"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/aa1ca580e3ffe62a2c5ea1c095b609b2943c5269",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5ebaa7c5f6f688959e8d40840b2249ede63b8ed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49139.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49139.json
new file mode 100644
index 00000000000..1f677c93587
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49139.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49139",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:51.133",
+ "lastModified": "2025-02-26T07:00:51.133",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: fix null ptr deref on hci_sync_conn_complete_evt\n\nThis event is just specified for SCO and eSCO link types.\nOn the reception of a HCI_Synchronous_Connection_Complete for a BDADDR\nof an existing LE connection, LE link type and a status that triggers the\nsecond case of the packet processing a NULL pointer dereference happens,\nas conn->link is NULL."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0f9db1209f59844839175b5b907d3778cafde93d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1c1291a84e94f6501644634c97544bb8291e9a1a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3afee2118132e93e5f6fa636dfde86201a860ab3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c1aa0dd52db4ce888be0bd820c3fa918d350ca0b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f61c23e73dc653b957781066abfa8105c3fa3f5b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49140.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49140.json
new file mode 100644
index 00000000000..74cff78c679
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49140.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49140",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:51.240",
+ "lastModified": "2025-02-26T07:00:51.240",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"nbd: fix possible overflow on 'first_minor' in nbd_dev_add()\"\n\nThis reverts commit 6d35d04a9e18990040e87d2bbf72689252669d54.\n\nBoth Gabriel and Borislav report that this commit casues a regression\nwith nbd:\n\nsysfs: cannot create duplicate filename '/dev/block/43:0'\n\nRevert it before 5.18-rc1 and we'll investigage this separately in\ndue time."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/24781c1b691c60c42748c669973d567a90573337",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3b14aa053181709d42319d4145855025c23ddd12",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7198bfc2017644c6b92d2ecef9b8b8e0363bb5fd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9d73b40f979737029bac724c39648016da3f914c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49141.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49141.json
new file mode 100644
index 00000000000..64b7538e6a5
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49141.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49141",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:51.327",
+ "lastModified": "2025-02-26T07:00:51.327",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: felix: fix possible NULL pointer dereference\n\nAs the possible failure of the allocation, kzalloc() may return NULL\npointer.\nTherefore, it should be better to check the 'sgi' in order to prevent\nthe dereference of NULL pointer."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/866b7a278cdb51eb158cd8513bc7438fc857804a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b7ff8b5e75d4e91ec8c62d621aac8dfb84c57aa9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49142.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49142.json
new file mode 100644
index 00000000000..ae4251a016c
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49142.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49142",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:51.420",
+ "lastModified": "2025-02-26T07:00:51.420",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: preserve skb_end_offset() in skb_unclone_keeptruesize()\n\nsyzbot found another way to trigger the infamous WARN_ON_ONCE(delta < len)\nin skb_try_coalesce() [1]\n\nI was able to root cause the issue to kfence.\n\nWhen kfence is in action, the following assertion is no longer true:\n\nint size = xxxx;\nvoid *ptr1 = kmalloc(size, gfp);\nvoid *ptr2 = kmalloc(size, gfp);\n\nif (ptr1 && ptr2)\n\tASSERT(ksize(ptr1) == ksize(ptr2));\n\nWe attempted to fix these issues in the blamed commits, but forgot\nthat TCP was possibly shifting data after skb_unclone_keeptruesize()\nhas been used, notably from tcp_retrans_try_collapse().\n\nSo we not only need to keep same skb->truesize value,\nwe also need to make sure TCP wont fill new tailroom\nthat pskb_expand_head() was able to get from a\naddr = kmalloc(...) followed by ksize(addr)\n\nSplit skb_unclone_keeptruesize() into two parts:\n\n1) Inline skb_unclone_keeptruesize() for the common case,\n when skb is not cloned.\n\n2) Out of line __skb_unclone_keeptruesize() for the 'slow path'.\n\nWARNING: CPU: 1 PID: 6490 at net/core/skbuff.c:5295 skb_try_coalesce+0x1235/0x1560 net/core/skbuff.c:5295\nModules linked in:\nCPU: 1 PID: 6490 Comm: syz-executor161 Not tainted 5.17.0-rc4-syzkaller-00229-g4f12b742eb2b #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nRIP: 0010:skb_try_coalesce+0x1235/0x1560 net/core/skbuff.c:5295\nCode: bf 01 00 00 00 0f b7 c0 89 c6 89 44 24 20 e8 62 24 4e fa 8b 44 24 20 83 e8 01 0f 85 e5 f0 ff ff e9 87 f4 ff ff e8 cb 20 4e fa <0f> 0b e9 06 f9 ff ff e8 af b2 95 fa e9 69 f0 ff ff e8 95 b2 95 fa\nRSP: 0018:ffffc900063af268 EFLAGS: 00010293\nRAX: 0000000000000000 RBX: 00000000ffffffd5 RCX: 0000000000000000\nRDX: ffff88806fc05700 RSI: ffffffff872abd55 RDI: 0000000000000003\nRBP: ffff88806e675500 R08: 00000000ffffffd5 R09: 0000000000000000\nR10: ffffffff872ab659 R11: 0000000000000000 R12: ffff88806dd554e8\nR13: ffff88806dd9bac0 R14: ffff88806dd9a2c0 R15: 0000000000000155\nFS: 00007f18014f9700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000020002000 CR3: 000000006be7a000 CR4: 00000000003506f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \n tcp_try_coalesce net/ipv4/tcp_input.c:4651 [inline]\n tcp_try_coalesce+0x393/0x920 net/ipv4/tcp_input.c:4630\n tcp_queue_rcv+0x8a/0x6e0 net/ipv4/tcp_input.c:4914\n tcp_data_queue+0x11fd/0x4bb0 net/ipv4/tcp_input.c:5025\n tcp_rcv_established+0x81e/0x1ff0 net/ipv4/tcp_input.c:5947\n tcp_v4_do_rcv+0x65e/0x980 net/ipv4/tcp_ipv4.c:1719\n sk_backlog_rcv include/net/sock.h:1037 [inline]\n __release_sock+0x134/0x3b0 net/core/sock.c:2779\n release_sock+0x54/0x1b0 net/core/sock.c:3311\n sk_wait_data+0x177/0x450 net/core/sock.c:2821\n tcp_recvmsg_locked+0xe28/0x1fd0 net/ipv4/tcp.c:2457\n tcp_recvmsg+0x137/0x610 net/ipv4/tcp.c:2572\n inet_recvmsg+0x11b/0x5e0 net/ipv4/af_inet.c:850\n sock_recvmsg_nosec net/socket.c:948 [inline]\n sock_recvmsg net/socket.c:966 [inline]\n sock_recvmsg net/socket.c:962 [inline]\n ____sys_recvmsg+0x2c4/0x600 net/socket.c:2632\n ___sys_recvmsg+0x127/0x200 net/socket.c:2674\n __sys_recvmsg+0xe2/0x1a0 net/socket.c:2704\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x44/0xae"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/23629b673b780d967b88a850b1518cf0f0ffc6aa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2b88cba55883eaafbc9b7cbff0b2c7cdba71ed01",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a903e516f5df44b46d526b403d93e7be1a425538",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a9a6d30264327d8ff7f23da33e7a77ffb793fa3f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49143.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49143.json
new file mode 100644
index 00000000000..26925c12706
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49143.json
@@ -0,0 +1,16 @@
+{
+ "id": "CVE-2022-49143",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:51.513",
+ "lastModified": "2025-02-26T15:15:15.857",
+ "vulnStatus": "Rejected",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
+ }
+ ],
+ "metrics": {},
+ "references": []
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49144.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49144.json
new file mode 100644
index 00000000000..1affd8b8e12
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49144.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49144",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:51.600",
+ "lastModified": "2025-02-26T07:00:51.600",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: fix memory leak of uid in files registration\n\nWhen there are no files for __io_sqe_files_scm() to process in the\nrange, it'll free everything and return. However, it forgets to put uid."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0853bd6885c2f293d88aaa7f7f1702c959b31680",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7fa8b228c3f30060b9f4b24bb9aaaf41b0ae83fe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b27de7011cb3ba14b047be2cee0ed8278368665b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c86d18f4aa93e0e66cda0e55827cd03eea6bc5f8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d6d7a517e81accf6ed22d55684baea763d2dbe43",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49145.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49145.json
new file mode 100644
index 00000000000..10695e0f0f2
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49145.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49145",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:51.693",
+ "lastModified": "2025-02-26T07:00:51.693",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: CPPC: Avoid out of bounds access when parsing _CPC data\n\nIf the NumEntries field in the _CPC return package is less than 2, do\nnot attempt to access the \"Revision\" element of that package, because\nit may not be present then.\n\nBugLink: https://lore.kernel.org/lkml/20220322143534.GC32582@xsang-OptiPlex-9020/"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/28d5387c1994f5e1e0d41b30a1f3dd6e1f609252",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/40d8abf364bcab23bc715a9221a3c8623956257b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/97b5593fd1b182b3fdb180b6bbe64ec09669988b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b3f15609ffa521de12244cd6af24002030dda3f5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b80b19b32a432c9eee1cd200ef7aaddf608f54d1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cb249f8c00f40dba83b7da8207ac14ca46e9ec9e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d208ea44e25b31db5a4d5e8c31df51787a3e9303",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d7339f2a3938fb56b5f28d53f5345900b5fa0e74",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e5b681822cac1f8093759b02e16c06b2c64b6788",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49146.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49146.json
new file mode 100644
index 00000000000..733f40a422c
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49146.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49146",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:51.793",
+ "lastModified": "2025-02-26T07:00:51.793",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio: use virtio_device_ready() in virtio_device_restore()\n\nAfter waking up a suspended VM, the kernel prints the following trace\nfor virtio drivers which do not directly call virtio_device_ready() in\nthe .restore:\n\n PM: suspend exit\n irq 22: nobody cared (try booting with the \"irqpoll\" option)\n Call Trace:\n \n dump_stack_lvl+0x38/0x49\n dump_stack+0x10/0x12\n __report_bad_irq+0x3a/0xaf\n note_interrupt.cold+0xb/0x60\n handle_irq_event+0x71/0x80\n handle_fasteoi_irq+0x95/0x1e0\n __common_interrupt+0x6b/0x110\n common_interrupt+0x63/0xe0\n asm_common_interrupt+0x1e/0x40\n ? __do_softirq+0x75/0x2f3\n irq_exit_rcu+0x93/0xe0\n sysvec_apic_timer_interrupt+0xac/0xd0\n \n \n asm_sysvec_apic_timer_interrupt+0x12/0x20\n arch_cpu_idle+0x12/0x20\n default_idle_call+0x39/0xf0\n do_idle+0x1b5/0x210\n cpu_startup_entry+0x20/0x30\n start_secondary+0xf3/0x100\n secondary_startup_64_no_verify+0xc3/0xcb\n \n handlers:\n [<000000008f9bac49>] vp_interrupt\n [<000000008f9bac49>] vp_interrupt\n Disabling IRQ #22\n\nThis happens because we don't invoke .enable_cbs callback in\nvirtio_device_restore(). That callback is used by some transports\n(e.g. virtio-pci) to enable interrupts.\n\nLet's fix it, by calling virtio_device_ready() as we do in\nvirtio_dev_probe(). This function calls .enable_cts callback and sets\nDRIVER_OK status bit.\n\nThis fix also avoids setting DRIVER_OK twice for those drivers that\ncall virtio_device_ready() in the .restore."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4ae431113179d72c668b61df320af0c06d1aa5c5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8d65bc9a5be3f23c5e2ab36b6b8ef40095165b18",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/94e9f5da39ee5f8ea31be1585de31c54f10dedce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49147.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49147.json
new file mode 100644
index 00000000000..ee211e78105
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49147.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49147",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:51.887",
+ "lastModified": "2025-02-26T07:00:51.887",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: Fix the maximum minor value is blk_alloc_ext_minor()\n\nida_alloc_range(..., min, max, ...) returns values from min to max,\ninclusive.\n\nSo, NR_EXT_DEVT is a valid idx returned by blk_alloc_ext_minor().\n\nThis is an issue because in device_add_disk(), this value is used in:\n ddev->devt = MKDEV(disk->major, disk->first_minor);\nand NR_EXT_DEVT is '(1 << MINORBITS)'.\n\nSo, should 'disk->first_minor' be NR_EXT_DEVT, it would overflow."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0f8cf8f5ccbad25ed6828875b222dbab29d5c272",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5b9ac3727e4abb11c9cfbe9c0781fc05dfdd7cfb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d1868328dec5ae2cf210111025fcbc71f78dd5ca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fbe2cc4525480ddd20c866bb5c0578071e01451a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49148.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49148.json
new file mode 100644
index 00000000000..1ec4814a802
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49148.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49148",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:51.973",
+ "lastModified": "2025-02-26T07:00:51.973",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatch_queue: Free the page array when watch_queue is dismantled\n\nCommit 7ea1a0124b6d (\"watch_queue: Free the alloc bitmap when the\nwatch_queue is torn down\") took care of the bitmap, but not the page\narray.\n\n BUG: memory leak\n unreferenced object 0xffff88810d9bc140 (size 32):\n comm \"syz-executor335\", pid 3603, jiffies 4294946994 (age 12.840s)\n hex dump (first 32 bytes):\n 40 a7 40 04 00 ea ff ff 00 00 00 00 00 00 00 00 @.@.............\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n kmalloc_array include/linux/slab.h:621 [inline]\n kcalloc include/linux/slab.h:652 [inline]\n watch_queue_set_size+0x12f/0x2e0 kernel/watch_queue.c:251\n pipe_ioctl+0x82/0x140 fs/pipe.c:632\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:874 [inline]\n __se_sys_ioctl fs/ioctl.c:860 [inline]\n __x64_sys_ioctl+0xfc/0x140 fs/ioctl.c:860\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/375cd2536494cfbcdda84ae8b3e35bf19d0250b9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3963a5d1ff75585bddf0c3a918566a6be09d7520",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4913daecd04addb41bc96a9175a885e1c19862a8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7169f60110915c8b53bffd43741fa020a75eb87a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b490207017ba237d97b735b2aa66dc241ccd18f5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49149.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49149.json
new file mode 100644
index 00000000000..c04e1a873b0
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49149.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49149",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:52.073",
+ "lastModified": "2025-02-26T07:00:52.073",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: Fix call timer start racing with call destruction\n\nThe rxrpc_call struct has a timer used to handle various timed events\nrelating to a call. This timer can get started from the packet input\nroutines that are run in softirq mode with just the RCU read lock held.\nUnfortunately, because only the RCU read lock is held - and neither ref or\nother lock is taken - the call can start getting destroyed at the same time\na packet comes in addressed to that call. This causes the timer - which\nwas already stopped - to get restarted. Later, the timer dispatch code may\nthen oops if the timer got deallocated first.\n\nFix this by trying to take a ref on the rxrpc_call struct and, if\nsuccessful, passing that ref along to the timer. If the timer was already\nrunning, the ref is discarded.\n\nThe timer completion routine can then pass the ref along to the call's work\nitem when it queues it. If the timer or work item where already\nqueued/running, the extra ref is discarded."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/051360e51341cd17738d82c15a8226010c7cb7f6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4a7f62f91933c8ae5308f9127fd8ea48188b6bc3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/54df5a37f1d951ed27fd47bf9b15a42279582110",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5e3c11144e557a9dbf9a2f6abe444689ef9d8aae",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8cbf4ae7a2833767d63114573e5f9a45740cc975",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49150.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49150.json
new file mode 100644
index 00000000000..ffb5e1720e2
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49150.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49150",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:52.203",
+ "lastModified": "2025-02-26T07:00:52.203",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: gamecube: Fix refcount leak in gamecube_rtc_read_offset_from_sram\n\nThe of_find_compatible_node() function returns a node pointer with\nrefcount incremented, We should use of_node_put() on it when done\nAdd the missing of_node_put() to release the refcount."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4b2dc39ca024990abe36ad5d145c4fe0c06afd34",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/de66e4f28dfd11f954966c447b4430529ed040a2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49151.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49151.json
new file mode 100644
index 00000000000..8a290282d72
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49151.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49151",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:52.330",
+ "lastModified": "2025-02-26T07:00:52.330",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: mcba_usb: properly check endpoint type\n\nSyzbot reported warning in usb_submit_urb() which is caused by wrong\nendpoint type. We should check that in endpoint is actually present to\nprevent this warning.\n\nFound pipes are now saved to struct mcba_priv and code uses them\ndirectly instead of making pipes in place.\n\nFail log:\n\n| usb 5-1: BOGUS urb xfer, pipe 3 != type 1\n| WARNING: CPU: 1 PID: 49 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502\n| Modules linked in:\n| CPU: 1 PID: 49 Comm: kworker/1:2 Not tainted 5.17.0-rc6-syzkaller-00184-g38f80f42147f #0\n| Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014\n| Workqueue: usb_hub_wq hub_event\n| RIP: 0010:usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502\n| ...\n| Call Trace:\n| \n| mcba_usb_start drivers/net/can/usb/mcba_usb.c:662 [inline]\n| mcba_usb_probe+0x8a3/0xc50 drivers/net/can/usb/mcba_usb.c:858\n| usb_probe_interface+0x315/0x7f0 drivers/usb/core/driver.c:396\n| call_driver_probe drivers/base/dd.c:517 [inline]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/136bed0bfd3bc9c95c88aafff2d22ecb3a919f23",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5598442edc29e8f6f2380e4b471dc1a3fcd80508",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/88272b4a37913bdf6f339162a7920bd8e9b49de2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b48d1bb3f1ca337ad653022aefb5a40a47dfe5cd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cbd110b8dd7ad763bf413f71c0484116ae9302d4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef0acc514123140157b19a9ff2e2de5d91d612bc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f2ec3cd0f34f8c3f94bc21fbba14868301c9c49d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fa9c1f14002dc0d5293e16a2007bd89b6e79207b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49152.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49152.json
new file mode 100644
index 00000000000..37a37f86558
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49152.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49152",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:52.440",
+ "lastModified": "2025-02-26T07:00:52.440",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nXArray: Fix xas_create_range() when multi-order entry present\n\nIf there is already an entry present that is of order >= XA_CHUNK_SHIFT\nwhen we call xas_create_range(), xas_create_range() will misinterpret\nthat entry as a node and dereference xa_node->parent, generally leading\nto a crash that looks something like this:\n\ngeneral protection fault, probably for non-canonical address 0xdffffc0000000001:\n0000 [#1] PREEMPT SMP KASAN\nKASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]\nCPU: 0 PID: 32 Comm: khugepaged Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0\nRIP: 0010:xa_parent_locked include/linux/xarray.h:1207 [inline]\nRIP: 0010:xas_create_range+0x2d9/0x6e0 lib/xarray.c:725\n\nIt's deterministically reproducable once you know what the problem is,\nbut producing it in a live kernel requires khugepaged to hit a race.\nWhile the problem has been present since xas_create_range() was\nintroduced, I'm not aware of a way to hit it before the page cache was\nconverted to use multi-index entries."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/18f13edf3424b3b61814b69d5269b2e14584800c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1ac49c8fd49fdf53d3cd8b77eb8ffda08d7fbe22",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/29968329b926d238e3107ec071a250397555d264",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3e2852eda19ee1a400cd809d7a9322680f34a262",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3e3c658055c002900982513e289398a1aad4a488",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7521a97b1929042604bef6859f62fa8b4bbc077b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49153.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49153.json
new file mode 100644
index 00000000000..0474055bd38
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49153.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49153",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:52.533",
+ "lastModified": "2025-02-26T07:00:52.533",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwireguard: socket: free skb in send6 when ipv6 is disabled\n\nI got a memory leak report:\n\nunreferenced object 0xffff8881191fc040 (size 232):\n comm \"kworker/u17:0\", pid 23193, jiffies 4295238848 (age 3464.870s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [] slab_post_alloc_hook+0x84/0x3b0\n [] kmem_cache_alloc_node+0x167/0x340\n [] __alloc_skb+0x1db/0x200\n [] wg_socket_send_buffer_to_peer+0x3d/0xc0\n [] wg_packet_send_handshake_initiation+0xfa/0x110\n [] wg_packet_handshake_send_worker+0x21/0x30\n [] process_one_work+0x2e8/0x770\n [] worker_thread+0x4a/0x4b0\n [] kthread+0x120/0x160\n [] ret_from_fork+0x1f/0x30\n\nIn function wg_socket_send_buffer_as_reply_to_skb() or wg_socket_send_\nbuffer_to_peer(), the semantics of send6() is required to free skb. But\nwhen CONFIG_IPV6 is disable, kfree_skb() is missing. This patch adds it\nto fix this bug."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/096f9d35cac0a0c95ffafc00db84786b665a4837",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0b19bcb753dbfb74710d12bb2761ec5ed706c726",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/402991a9771587acc2947cf6c4d689c5397f2258",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bbbf962d9460194993ee1943a793a0a0af4a7fbf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ebcc492f4ba14bae54b898f1016a37b4282558d1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49154.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49154.json
new file mode 100644
index 00000000000..bdf73a9e5f5
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49154.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49154",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:52.627",
+ "lastModified": "2025-02-26T07:00:52.627",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: fix panic on out-of-bounds guest IRQ\n\nAs guest_irq is coming from KVM_IRQFD API call, it may trigger\ncrash in svm_update_pi_irte() due to out-of-bounds:\n\ncrash> bt\nPID: 22218 TASK: ffff951a6ad74980 CPU: 73 COMMAND: \"vcpu8\"\n #0 [ffffb1ba6707fa40] machine_kexec at ffffffff8565b397\n #1 [ffffb1ba6707fa90] __crash_kexec at ffffffff85788a6d\n #2 [ffffb1ba6707fb58] crash_kexec at ffffffff8578995d\n #3 [ffffb1ba6707fb70] oops_end at ffffffff85623c0d\n #4 [ffffb1ba6707fb90] no_context at ffffffff856692c9\n #5 [ffffb1ba6707fbf8] exc_page_fault at ffffffff85f95b51\n #6 [ffffb1ba6707fc50] asm_exc_page_fault at ffffffff86000ace\n [exception RIP: svm_update_pi_irte+227]\n RIP: ffffffffc0761b53 RSP: ffffb1ba6707fd08 RFLAGS: 00010086\n RAX: ffffb1ba6707fd78 RBX: ffffb1ba66d91000 RCX: 0000000000000001\n RDX: 00003c803f63f1c0 RSI: 000000000000019a RDI: ffffb1ba66db2ab8\n RBP: 000000000000019a R8: 0000000000000040 R9: ffff94ca41b82200\n R10: ffffffffffffffcf R11: 0000000000000001 R12: 0000000000000001\n R13: 0000000000000001 R14: ffffffffffffffcf R15: 000000000000005f\n ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018\n #7 [ffffb1ba6707fdb8] kvm_irq_routing_update at ffffffffc09f19a1 [kvm]\n #8 [ffffb1ba6707fde0] kvm_set_irq_routing at ffffffffc09f2133 [kvm]\n #9 [ffffb1ba6707fe18] kvm_vm_ioctl at ffffffffc09ef544 [kvm]\n RIP: 00007f143c36488b RSP: 00007f143a4e04b8 RFLAGS: 00000246\n RAX: ffffffffffffffda RBX: 00007f05780041d0 RCX: 00007f143c36488b\n RDX: 00007f05780041d0 RSI: 000000004008ae6a RDI: 0000000000000020\n RBP: 00000000000004e8 R8: 0000000000000008 R9: 00007f05780041e0\n R10: 00007f0578004560 R11: 0000000000000246 R12: 00000000000004e0\n R13: 000000000000001a R14: 00007f1424001c60 R15: 00007f0578003bc0\n ORIG_RAX: 0000000000000010 CS: 0033 SS: 002b\n\nVmx have been fix this in commit 3a8b0677fc61 (KVM: VMX: Do not BUG() on\nout-of-bounds guest IRQ), so we can just copy source from that to fix\nthis."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0fb470eb48892e131d10aa3be6915239e65758f3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3fa2d747960521a646fc1aad7aea82e95e139a68",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a6ffdebfb6a9c2ffeed902b544b96fe67498210e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a80ced6ea514000d34bf1239d47553de0d1ee89e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e4d153d53d9648513481eb4ef8c212e7f1f8173d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49155.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49155.json
new file mode 100644
index 00000000000..8adc24456db
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49155.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49155",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:52.717",
+ "lastModified": "2025-02-26T07:00:52.717",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()\n\n[ 12.323788] BUG: using smp_processor_id() in preemptible [00000000] code: systemd-udevd/1020\n[ 12.332297] caller is qla2xxx_create_qpair+0x32a/0x5d0 [qla2xxx]\n[ 12.338417] CPU: 7 PID: 1020 Comm: systemd-udevd Tainted: G I --------- --- 5.14.0-29.el9.x86_64 #1\n[ 12.348827] Hardware name: Dell Inc. PowerEdge R610/0F0XJ6, BIOS 6.6.0 05/22/2018\n[ 12.356356] Call Trace:\n[ 12.358821] dump_stack_lvl+0x34/0x44\n[ 12.362514] check_preemption_disabled+0xd9/0xe0\n[ 12.367164] qla2xxx_create_qpair+0x32a/0x5d0 [qla2xxx]\n[ 12.372481] qla2x00_probe_one+0xa3a/0x1b80 [qla2xxx]\n[ 12.377617] ? _raw_spin_lock_irqsave+0x19/0x40\n[ 12.384284] local_pci_probe+0x42/0x80\n[ 12.390162] ? pci_match_device+0xd7/0x110\n[ 12.396366] pci_device_probe+0xfd/0x1b0\n[ 12.402372] really_probe+0x1e7/0x3e0\n[ 12.408114] __driver_probe_device+0xfe/0x180\n[ 12.414544] driver_probe_device+0x1e/0x90\n[ 12.420685] __driver_attach+0xc0/0x1c0\n[ 12.426536] ? __device_attach_driver+0xe0/0xe0\n[ 12.433061] ? __device_attach_driver+0xe0/0xe0\n[ 12.439538] bus_for_each_dev+0x78/0xc0\n[ 12.445294] bus_add_driver+0x12b/0x1e0\n[ 12.451021] driver_register+0x8f/0xe0\n[ 12.456631] ? 0xffffffffc07bc000\n[ 12.461773] qla2x00_module_init+0x1be/0x229 [qla2xxx]\n[ 12.468776] do_one_initcall+0x44/0x200\n[ 12.474401] ? load_module+0xad3/0xba0\n[ 12.479908] ? kmem_cache_alloc_trace+0x45/0x410\n[ 12.486268] do_init_module+0x5c/0x280\n[ 12.491730] __do_sys_init_module+0x12e/0x1b0\n[ 12.497785] do_syscall_64+0x3b/0x90\n[ 12.503029] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[ 12.509764] RIP: 0033:0x7f554f73ab2e"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1ab81d82fb1db7ec4be4b0d04563513e6d4bcdd5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/43195a0c620761fbb88db04e2475313855b948a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8077a7162bc3cf658dd9ff112bc77716c08458c5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9c33d49ab9f3d8bd7512b3070cd2f07c4a8849d5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a60447e7d451df42c7bde43af53b34f10f34f469",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a669a22aef0ceff706b885370af74b5a60a8ac85",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f68776f28d9134fa65056e7e63bfc734049730b7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f97316dd393bc8df1cc2af6295a97b876eecf252",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49156.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49156.json
new file mode 100644
index 00000000000..684681ea551
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49156.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49156",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:52.823",
+ "lastModified": "2025-02-26T07:00:52.823",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix scheduling while atomic\n\nThe driver makes a call into midlayer (fc_remote_port_delete) which can put\nthe thread to sleep. The thread that originates the call is in interrupt\ncontext. The combination of the two trigger a crash. Schedule the call in\nnon-interrupt context where it is more safe.\n\nkernel: BUG: scheduling while atomic: swapper/7/0/0x00010000\nkernel: Call Trace:\nkernel: \nkernel: dump_stack+0x66/0x81\nkernel: __schedule_bug.cold.90+0x5/0x1d\nkernel: __schedule+0x7af/0x960\nkernel: schedule+0x28/0x80\nkernel: schedule_timeout+0x26d/0x3b0\nkernel: wait_for_completion+0xb4/0x140\nkernel: ? wake_up_q+0x70/0x70\nkernel: __wait_rcu_gp+0x12c/0x160\nkernel: ? sdev_evt_alloc+0xc0/0x180 [scsi_mod]\nkernel: synchronize_sched+0x6c/0x80\nkernel: ? call_rcu_bh+0x20/0x20\nkernel: ? __bpf_trace_rcu_invoke_callback+0x10/0x10\nkernel: sdev_evt_alloc+0xfd/0x180 [scsi_mod]\nkernel: starget_for_each_device+0x85/0xb0 [scsi_mod]\nkernel: ? scsi_init_io+0x360/0x3d0 [scsi_mod]\nkernel: scsi_init_io+0x388/0x3d0 [scsi_mod]\nkernel: device_for_each_child+0x54/0x90\nkernel: fc_remote_port_delete+0x70/0xe0 [scsi_transport_fc]\nkernel: qla2x00_schedule_rport_del+0x62/0xf0 [qla2xxx]\nkernel: qla2x00_mark_device_lost+0x9c/0xd0 [qla2xxx]\nkernel: qla24xx_handle_plogi_done_event+0x55f/0x570 [qla2xxx]\nkernel: qla2x00_async_login_sp_done+0xd2/0x100 [qla2xxx]\nkernel: qla24xx_logio_entry+0x13a/0x3c0 [qla2xxx]\nkernel: qla24xx_process_response_queue+0x306/0x400 [qla2xxx]\nkernel: qla24xx_msix_rsp_q+0x3f/0xb0 [qla2xxx]\nkernel: __handle_irq_event_percpu+0x40/0x180\nkernel: handle_irq_event_percpu+0x30/0x80\nkernel: handle_irq_event+0x36/0x60"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/78225d6a2a4ffdb2250ce2b7691a9e68a3f86912",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/78612f2fe8e26637476d756a44f0f05cca0d97de",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7fef50214dd04427233a2e66cd624d468e67aecb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/826a9d4a00d1424afa961504aec6298ee92d5053",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/afd438ff874ca40b74321b3fa19bd61adfd7ca0c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49157.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49157.json
new file mode 100644
index 00000000000..80cd3dee58b
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49157.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49157",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:52.917",
+ "lastModified": "2025-02-26T07:00:52.917",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix premature hw access after PCI error\n\nAfter a recoverable PCI error has been detected and recovered, qla driver\nneeds to check to see if the error condition still persist and/or wait\nfor the OS to give the resume signal.\n\nSep 8 22:26:03 localhost kernel: WARNING: CPU: 9 PID: 124606 at qla_tmpl.c:440\nqla27xx_fwdt_entry_t266+0x55/0x60 [qla2xxx]\nSep 8 22:26:03 localhost kernel: RIP: 0010:qla27xx_fwdt_entry_t266+0x55/0x60\n[qla2xxx]\nSep 8 22:26:03 localhost kernel: Call Trace:\nSep 8 22:26:03 localhost kernel: ? qla27xx_walk_template+0xb1/0x1b0 [qla2xxx]\nSep 8 22:26:03 localhost kernel: ? qla27xx_execute_fwdt_template+0x12a/0x160\n[qla2xxx]\nSep 8 22:26:03 localhost kernel: ? qla27xx_fwdump+0xa0/0x1c0 [qla2xxx]\nSep 8 22:26:03 localhost kernel: ? qla2xxx_pci_mmio_enabled+0xfb/0x120\n[qla2xxx]\nSep 8 22:26:03 localhost kernel: ? report_mmio_enabled+0x44/0x80\nSep 8 22:26:03 localhost kernel: ? report_slot_reset+0x80/0x80\nSep 8 22:26:03 localhost kernel: ? pci_walk_bus+0x70/0x90\nSep 8 22:26:03 localhost kernel: ? aer_dev_correctable_show+0xc0/0xc0\nSep 8 22:26:03 localhost kernel: ? pcie_do_recovery+0x1bb/0x240\nSep 8 22:26:03 localhost kernel: ? aer_recover_work_func+0xaa/0xd0\nSep 8 22:26:03 localhost kernel: ? process_one_work+0x1a7/0x360\n..\nSep 8 22:26:03 localhost kernel: qla2xxx [0000:42:00.2]-8041:22: detected PCI\ndisconnect.\nSep 8 22:26:03 localhost kernel: qla2xxx [0000:42:00.2]-107ff:22:\nqla27xx_fwdt_entry_t262: dump ram MB failed. Area 5h start 198013h end 198013h\nSep 8 22:26:03 localhost kernel: qla2xxx [0000:42:00.2]-107ff:22: Unable to\ncapture FW dump\nSep 8 22:26:03 localhost kernel: qla2xxx [0000:42:00.2]-1015:22: cmd=0x0,\nwaited 5221 msecs\nSep 8 22:26:03 localhost kernel: qla2xxx [0000:42:00.2]-680d:22: mmio\nenabled returning.\nSep 8 22:26:03 localhost kernel: qla2xxx [0000:42:00.2]-d04c:22: MBX\nCommand timeout for cmd 0, iocontrol=ffffffff jiffies=10140f2e5\nmb[0-3]=[0xffff 0xffff 0xffff 0xffff]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5ef6319f9882699613d5182fbd7929b017e8c5ab",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6c125fd5ad035777f7b471553f7ddda76e8e7136",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d7994dff9071555a959a168f9184dd9abae68a6b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e35920ab7874d5e2faeb4f958a74bfa793f1ce5a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49158.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49158.json
new file mode 100644
index 00000000000..9f69b9a5ed8
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49158.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49158",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:53.013",
+ "lastModified": "2025-02-26T07:00:53.013",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix warning message due to adisc being flushed\n\nFix warning message due to adisc being flushed. Linux kernel triggered a\nwarning message where a different error code type is not matching up with\nthe expected type. Add additional translation of one error code type to\nanother.\n\nWARNING: CPU: 2 PID: 1131623 at drivers/scsi/qla2xxx/qla_init.c:498\nqla2x00_async_adisc_sp_done+0x294/0x2b0 [qla2xxx]\nCPU: 2 PID: 1131623 Comm: drmgr Not tainted 5.13.0-rc1-autotest #1\n..\nGPR28: c000000aaa9c8890 c0080000079ab678 c00000140a104800 c00000002bd19000\nNIP [c00800000790857c] qla2x00_async_adisc_sp_done+0x294/0x2b0 [qla2xxx]\nLR [c008000007908578] qla2x00_async_adisc_sp_done+0x290/0x2b0 [qla2xxx]\nCall Trace:\n[c00000001cdc3620] [c008000007908578] qla2x00_async_adisc_sp_done+0x290/0x2b0 [qla2xxx] (unreliable)\n[c00000001cdc3710] [c0080000078f3080] __qla2x00_abort_all_cmds+0x1b8/0x580 [qla2xxx]\n[c00000001cdc3840] [c0080000078f589c] qla2x00_abort_all_cmds+0x34/0xd0 [qla2xxx]\n[c00000001cdc3880] [c0080000079153d8] qla2x00_abort_isp_cleanup+0x3f0/0x570 [qla2xxx]\n[c00000001cdc3920] [c0080000078fb7e8] qla2x00_remove_one+0x3d0/0x480 [qla2xxx]\n[c00000001cdc39b0] [c00000000071c274] pci_device_remove+0x64/0x120\n[c00000001cdc39f0] [c0000000007fb818] device_release_driver_internal+0x168/0x2a0\n[c00000001cdc3a30] [c00000000070e304] pci_stop_bus_device+0xb4/0x100\n[c00000001cdc3a70] [c00000000070e4f0] pci_stop_and_remove_bus_device+0x20/0x40\n[c00000001cdc3aa0] [c000000000073940] pci_hp_remove_devices+0x90/0x130\n[c00000001cdc3b30] [c0080000070704d0] disable_slot+0x38/0x90 [rpaphp] [\nc00000001cdc3b60] [c00000000073eb4c] power_write_file+0xcc/0x180\n[c00000001cdc3be0] [c0000000007354bc] pci_slot_attr_store+0x3c/0x60\n[c00000001cdc3c00] [c00000000055f820] sysfs_kf_write+0x60/0x80 [c00000001cdc3c20]\n[c00000000055df10] kernfs_fop_write_iter+0x1a0/0x290\n[c00000001cdc3c70] [c000000000447c4c] new_sync_write+0x14c/0x1d0\n[c00000001cdc3d10] [c00000000044b134] vfs_write+0x224/0x330\n[c00000001cdc3d60] [c00000000044b3f4] ksys_write+0x74/0x130\n[c00000001cdc3db0] [c00000000002df70] system_call_exception+0x150/0x2d0\n[c00000001cdc3e10] [c00000000000d45c] system_call_common+0xec/0x278"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/64f24af75b79cba3b86b0760e27e0fa904db570f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7a3457777c4f700c64836e78dc71e6ce459f62b8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b13baf97ddbc1a7e7536168383bc0d84c2204b03",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d8fb8da69e194e0249b3cdb746ef09ce823ae26b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49159.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49159.json
new file mode 100644
index 00000000000..d5caf06ec30
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49159.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49159",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:53.103",
+ "lastModified": "2025-02-26T07:00:53.103",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Implement ref count for SRB\n\nThe timeout handler and the done function are racing. When\nqla2x00_async_iocb_timeout() starts to run it can be preempted by the\nnormal response path (via the firmware?). qla24xx_async_gpsc_sp_done()\nreleases the SRB unconditionally. When scheduling back to\nqla2x00_async_iocb_timeout() qla24xx_async_abort_cmd() will access an freed\nsp->qpair pointer:\n\n qla2xxx [0000:83:00.0]-2871:0: Async-gpsc timeout - hdl=63d portid=234500 50:06:0e:80:08:77:b6:21.\n qla2xxx [0000:83:00.0]-2853:0: Async done-gpsc res 0, WWPN 50:06:0e:80:08:77:b6:21\n qla2xxx [0000:83:00.0]-2854:0: Async-gpsc OUT WWPN 20:45:00:27:f8:75:33:00 speeds=2c00 speed=0400.\n qla2xxx [0000:83:00.0]-28d8:0: qla24xx_handle_gpsc_event 50:06:0e:80:08:77:b6:21 DS 7 LS 6 rc 0 login 1|1 rscn 1|0 lid 5\n BUG: unable to handle kernel NULL pointer dereference at 0000000000000004\n IP: qla24xx_async_abort_cmd+0x1b/0x1c0 [qla2xxx]\n\nObvious solution to this is to introduce a reference counter. One reference\nis taken for the normal code path (the 'good' case) and one for the timeout\npath. As we always race between the normal good case and the timeout/abort\nhandler we need to serialize it. Also we cannot assume any order between\nthe handlers. Since this is slow path we can use proper synchronization via\nlocks.\n\nWhen we are able to cancel a timer (del_timer returns 1) we know there\ncan't be any error handling in progress because the timeout handler hasn't\nexpired yet, thus we can safely decrement the refcounter by one.\n\nIf we are not able to cancel the timer, we know an abort handler is\nrunning. We have to make sure we call sp->done() in the abort handlers\nbefore calling kref_put()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/31e6cdbe0eae37badceb5e0d4f06cf051432fd77",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ceda7f794f3dfe272491e93e3e93049f8be5f07b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e140723f78ff418c8df7d990e102e07b65c87d4a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e17111dd2fda81c35f309b1e5b6ab35809a375e7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49160.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49160.json
new file mode 100644
index 00000000000..323ba129c18
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49160.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49160",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:53.190",
+ "lastModified": "2025-02-26T07:00:53.190",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix crash during module load unload test\n\nDuring purex packet handling the driver was incorrectly freeing a\npre-allocated structure. Fix this by skipping that entry.\n\nSystem crashed with the following stack during a module unload test.\n\nCall Trace:\n\tsbitmap_init_node+0x7f/0x1e0\n\tsbitmap_queue_init_node+0x24/0x150\n\tblk_mq_init_bitmaps+0x3d/0xa0\n\tblk_mq_init_tags+0x68/0x90\n\tblk_mq_alloc_map_and_rqs+0x44/0x120\n\tblk_mq_alloc_set_map_and_rqs+0x63/0x150\n\tblk_mq_alloc_tag_set+0x11b/0x230\n\tscsi_add_host_with_dma.cold+0x3f/0x245\n\tqla2x00_probe_one+0xd5a/0x1b80 [qla2xxx]\n\nCall Trace with slub_debug and debug kernel:\n\tkasan_report_invalid_free+0x50/0x80\n\t__kasan_slab_free+0x137/0x150\n\tslab_free_freelist_hook+0xc6/0x190\n\tkfree+0xe8/0x2e0\n\tqla2x00_free_device+0x3bb/0x5d0 [qla2xxx]\n\tqla2x00_remove_one+0x668/0xcf0 [qla2xxx]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0972252450f90db56dd5415a20e2aec21a08d036",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/213e57b42537f1a2e5395caa9d7189854133ed12",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/67f744f73eba870ab96411d0310e831a4adc3713",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9b7eb92dac240ab3bc83e188d83a3df834b41eb2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49161.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49161.json
new file mode 100644
index 00000000000..cdb2ea6072c
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49161.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49161",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:53.280",
+ "lastModified": "2025-02-26T07:00:53.280",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mediatek: Fix error handling in mt8183_da7219_max98357_dev_probe\n\nThe device_node pointer is returned by of_parse_phandle() with refcount\nincremented. We should use of_node_put() on it when done.\n\nThis function only calls of_node_put() in the regular path.\nAnd it will cause refcount leak in error paths.\nFix this by calling of_node_put() in error handling too."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/28a265a1ee11febeec5ea73a804f30dcec3181ca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9b9f6227e8d0c7c46b6d9d7b8a5c4e0536049fcf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49162.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49162.json
new file mode 100644
index 00000000000..97ee9390731
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49162.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49162",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:53.373",
+ "lastModified": "2025-02-26T07:00:53.373",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvideo: fbdev: sm712fb: Fix crash in smtcfb_write()\n\nWhen the sm712fb driver writes three bytes to the framebuffer, the\ndriver will crash:\n\n BUG: unable to handle page fault for address: ffffc90001ffffff\n RIP: 0010:smtcfb_write+0x454/0x5b0\n Call Trace:\n vfs_write+0x291/0xd60\n ? do_sys_openat2+0x27d/0x350\n ? __fget_light+0x54/0x340\n ksys_write+0xce/0x190\n do_syscall_64+0x43/0x90\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nFix it by removing the open-coded endianness fixup-code."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0ec746674296c94137f074309c26d17e644c0498",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1aea36a62f0a0ad67eccc945bac0bd6422ef720f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3b36c05f68ba32d0dfb63abc9016d6fe9117829f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4f01d09b2bbfbcb47b3eb305560a7f4857a32260",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/809b8cde86320698661eec677222bc5c5df76176",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aeb635b49530b7d19e140949753409f759ba99be",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b1c28577529cdfad40c8242673285f1e1e4c314e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eae90015d10f0c9a47fc4adccba4cd79dce664e4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fb791514acf9070225eed46e1ccbb0aa7aae5da5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49163.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49163.json
new file mode 100644
index 00000000000..a6d001248be
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49163.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49163",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:53.473",
+ "lastModified": "2025-02-26T07:00:53.473",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: imx-jpeg: fix a bug of accessing array out of bounds\n\nWhen error occurs in parsing jpeg, the slot isn't acquired yet, it may\nbe the default value MXC_MAX_SLOTS.\nIf the driver access the slot using the incorrect slot number, it will\naccess array out of bounds.\nThe result is the driver will change num_domains, which follows\nslot_data in struct mxc_jpeg_dev.\nThen the driver won't detach the pm domain at rmmod, which will lead to\nkernel panic when trying to insmod again."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/02f9f97d54ffc85b50ad77f5b1f3c8f69cd17747",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/20c8b90430c5d6c4a3936eaa7c35aac670581487",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/97558d170a1236280407e8d29a7d095d2c2ed554",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e209e6db2e527db6a93b14c2deedf969caca78fc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49164.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49164.json
new file mode 100644
index 00000000000..df61718568d
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49164.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49164",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:53.563",
+ "lastModified": "2025-02-26T07:00:53.563",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/tm: Fix more userspace r13 corruption\n\nCommit cf13435b730a (\"powerpc/tm: Fix userspace r13 corruption\") fixes a\nproblem in treclaim where a SLB miss can occur on the\nthread_struct->ckpt_regs while SCRATCH0 is live with the saved user r13\nvalue, clobbering it with the kernel r13 and ultimately resulting in\nkernel r13 being stored in ckpt_regs.\n\nThere is an equivalent problem in trechkpt where the user r13 value is\nloaded into r13 from chkpt_regs to be recheckpointed, but a SLB miss\ncould occur on ckpt_regs accesses after that, which will result in r13\nbeing clobbered with a kernel value and that will get recheckpointed and\nthen restored to user registers.\n\nThe same memory page is accessed right before this critical window where\na SLB miss could cause corruption, so hitting the bug requires the SLB\nentry be removed within a small window of instructions, which is\npossible if a SLB related MCE hits there. PAPR also permits the\nhypervisor to discard this SLB entry (because slb_shadow->persistent is\nonly set to SLB_NUM_BOLTED) although it's not known whether any\nimplementations would do this (KVM does not). So this is an extremely\nunlikely bug, only found by inspection.\n\nFix this by also storing user r13 in a temporary location on the kernel\nstack and don't change the r13 register from kernel r13 until the RI=0\ncritical section that does not fault.\n\nThe SCRATCH0 change is not strictly part of the fix, it's only used in\nthe RI=0 section so it does not have the same problem as the previous\nSCRATCH0 bug."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5dce84f475d13b773a1a4c823581cab25044d86a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/73d8082c90f17dfba57cad4ca94db5cae323f1b1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9d71165d3934e607070c4e48458c0cf161b1baea",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49165.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49165.json
new file mode 100644
index 00000000000..b9777f0d320
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49165.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49165",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:53.653",
+ "lastModified": "2025-02-26T07:00:53.653",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers\n\nIf the application queues an NV12M jpeg as output buffer, but then\nqueues a single planar capture buffer, the kernel will crash with\n\"Unable to handle kernel NULL pointer dereference\" in mxc_jpeg_addrs,\nprevent this by finishing the job with error."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/417591a766b3c040c346044541ff949c0b2bb7b2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4eb591c47c82a6a6ad293ed108c3cb77115fbc25",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8d075ede7d24f19dc817c5bd517a53f0524f9031",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eff76b180751e5e55c872d17755680c3b83ba9ab",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49166.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49166.json
new file mode 100644
index 00000000000..0dab080d751
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49166.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49166",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:53.743",
+ "lastModified": "2025-02-26T07:00:53.743",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nntfs: add sanity check on allocation size\n\nntfs_read_inode_mount invokes ntfs_malloc_nofs with zero allocation\nsize. It triggers one BUG in the __ntfs_malloc function.\n\nFix this by adding sanity check on ni->attr_list_size."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/07793d2e55563124108762f4e5f811db92ffe02f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/115fae2c1566eacc5ad2055f72521354612e72c3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/21d490232f323ed4053eb9924615e6fea291f154",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/24ab2d4ef52c2dbb62a60844b87fc8872383407a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/714fbf2647b1a33d914edd695d4da92029c7e7c0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b230f2d9441a34c7f483d39ab78519bcf73cc2e0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bd8d7daa0e53b184a2f3c6e0d47330780d0a0650",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c641087d381a08363e5f14179bc6b0a23eca7c47",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fe41ad8be036a3de3e4bdde709551aeb4de2fe7d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49167.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49167.json
new file mode 100644
index 00000000000..a5a954eadc3
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49167.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49167",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:53.837",
+ "lastModified": "2025-02-26T07:00:53.837",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: do not double complete bio on errors during compressed reads\n\nI hit some weird panics while fixing up the error handling from\nbtrfs_lookup_bio_sums(). Turns out the compression path will complete\nthe bio we use if we set up any of the compression bios and then return\nan error, and then btrfs_submit_data_bio() will also call bio_endio() on\nthe bio.\n\nFix this by making btrfs_submit_compressed_read() responsible for\ncalling bio_endio() on the bio if there are any errors. Currently it\nwas only doing it if we created the compression bios, otherwise it was\ndepending on btrfs_submit_data_bio() to do the right thing. This\ncreates the above problem, so fix up btrfs_submit_compressed_read() to\nalways call bio_endio() in case of an error, and then simply return from\nbtrfs_submit_data_bio() if we had to call\nbtrfs_submit_compressed_read()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4a4ceb2b990771c374d85d496a1a45255dde48e3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/987b5df1d10355d377315a26e7fb6c72ded83c9f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f9f15de85d74e7eef021af059ca53a15f041cdd8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49168.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49168.json
new file mode 100644
index 00000000000..8bfe94ac0b2
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49168.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49168",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:53.927",
+ "lastModified": "2025-02-26T07:00:53.927",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: do not clean up repair bio if submit fails\n\nThe submit helper will always run bio_endio() on the bio if it fails to\nsubmit, so cleaning up the bio just leads to a variety of use-after-free\nand NULL pointer dereference bugs because we race with the endio\nfunction that is cleaning up the bio. Instead just return BLK_STS_OK as\nthe repair function has to continue to process the rest of the pages,\nand the endio for the repair bio will do the appropriate cleanup for the\npage that it was given."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/8cbc3001a3264d998d6b6db3e23f935c158abd4d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d1cb11fb45ebbb1e7dfe5e9038b32ea72c184b14",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e76c78c48902dae6fa612749f59162bca0a79e0b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49169.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49169.json
new file mode 100644
index 00000000000..f40a1f9264e
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49169.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49169",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:54.017",
+ "lastModified": "2025-02-26T07:00:54.017",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: use spin_lock to avoid hang\n\n[14696.634553] task:cat state:D stack: 0 pid:1613738 ppid:1613735 flags:0x00000004\n[14696.638285] Call Trace:\n[14696.639038] \n[14696.640032] __schedule+0x302/0x930\n[14696.640969] schedule+0x58/0xd0\n[14696.641799] schedule_preempt_disabled+0x18/0x30\n[14696.642890] __mutex_lock.constprop.0+0x2fb/0x4f0\n[14696.644035] ? mod_objcg_state+0x10c/0x310\n[14696.645040] ? obj_cgroup_charge+0xe1/0x170\n[14696.646067] __mutex_lock_slowpath+0x13/0x20\n[14696.647126] mutex_lock+0x34/0x40\n[14696.648070] stat_show+0x25/0x17c0 [f2fs]\n[14696.649218] seq_read_iter+0x120/0x4b0\n[14696.650289] ? aa_file_perm+0x12a/0x500\n[14696.651357] ? lru_cache_add+0x1c/0x20\n[14696.652470] seq_read+0xfd/0x140\n[14696.653445] full_proxy_read+0x5c/0x80\n[14696.654535] vfs_read+0xa0/0x1a0\n[14696.655497] ksys_read+0x67/0xe0\n[14696.656502] __x64_sys_read+0x1a/0x20\n[14696.657580] do_syscall_64+0x3b/0xc0\n[14696.658671] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[14696.660068] RIP: 0033:0x7efe39df1cb2\n[14696.661133] RSP: 002b:00007ffc8badd948 EFLAGS: 00000246 ORIG_RAX: 0000000000000000\n[14696.662958] RAX: ffffffffffffffda RBX: 0000000000020000 RCX: 00007efe39df1cb2\n[14696.664757] RDX: 0000000000020000 RSI: 00007efe399df000 RDI: 0000000000000003\n[14696.666542] RBP: 00007efe399df000 R08: 00007efe399de010 R09: 00007efe399de010\n[14696.668363] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000000\n[14696.670155] R13: 0000000000000003 R14: 0000000000020000 R15: 0000000000020000\n[14696.671965] \n[14696.672826] task:umount state:D stack: 0 pid:1614985 ppid:1614984 flags:0x00004000\n[14696.674930] Call Trace:\n[14696.675903] \n[14696.676780] __schedule+0x302/0x930\n[14696.677927] schedule+0x58/0xd0\n[14696.679019] schedule_preempt_disabled+0x18/0x30\n[14696.680412] __mutex_lock.constprop.0+0x2fb/0x4f0\n[14696.681783] ? destroy_inode+0x65/0x80\n[14696.683006] __mutex_lock_slowpath+0x13/0x20\n[14696.684305] mutex_lock+0x34/0x40\n[14696.685442] f2fs_destroy_stats+0x1e/0x60 [f2fs]\n[14696.686803] f2fs_put_super+0x158/0x390 [f2fs]\n[14696.688238] generic_shutdown_super+0x7a/0x120\n[14696.689621] kill_block_super+0x27/0x50\n[14696.690894] kill_f2fs_super+0x7f/0x100 [f2fs]\n[14696.692311] deactivate_locked_super+0x35/0xa0\n[14696.693698] deactivate_super+0x40/0x50\n[14696.694985] cleanup_mnt+0x139/0x190\n[14696.696209] __cleanup_mnt+0x12/0x20\n[14696.697390] task_work_run+0x64/0xa0\n[14696.698587] exit_to_user_mode_prepare+0x1b7/0x1c0\n[14696.700053] syscall_exit_to_user_mode+0x27/0x50\n[14696.701418] do_syscall_64+0x48/0xc0\n[14696.702630] entry_SYSCALL_64_after_hwframe+0x44/0xae"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2eff60346e7ae1a24cd868b8fdcf58e946e7dde1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/738886004bd2885ac2db0bc63b4874aa471ca87e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/98237fcda4a24e67b0a4498c17d5aa4ad4537bc7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ec4187d45cc1c2d69fffeee5fa6aa4cb62477cfb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49170.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49170.json
new file mode 100644
index 00000000000..ddc1045a549
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49170.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49170",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:54.110",
+ "lastModified": "2025-02-26T07:00:54.110",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to do sanity check on curseg->alloc_type\n\nAs Wenqing Liu reported in bugzilla:\n\nhttps://bugzilla.kernel.org/show_bug.cgi?id=215657\n\n- Overview\nUBSAN: array-index-out-of-bounds in fs/f2fs/segment.c:3460:2 when mount and operate a corrupted image\n\n- Reproduce\ntested on kernel 5.17-rc4, 5.17-rc6\n\n1. mkdir test_crash\n2. cd test_crash\n3. unzip tmp2.zip\n4. mkdir mnt\n5. ./single_test.sh f2fs 2\n\n- Kernel dump\n[ 46.434454] loop0: detected capacity change from 0 to 131072\n[ 46.529839] F2FS-fs (loop0): Mounted with checkpoint version = 7548c2d9\n[ 46.738319] ================================================================================\n[ 46.738412] UBSAN: array-index-out-of-bounds in fs/f2fs/segment.c:3460:2\n[ 46.738475] index 231 is out of range for type 'unsigned int [2]'\n[ 46.738539] CPU: 2 PID: 939 Comm: umount Not tainted 5.17.0-rc6 #1\n[ 46.738547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.13.0-1ubuntu1.1 04/01/2014\n[ 46.738551] Call Trace:\n[ 46.738556] \n[ 46.738563] dump_stack_lvl+0x47/0x5c\n[ 46.738581] ubsan_epilogue+0x5/0x50\n[ 46.738592] __ubsan_handle_out_of_bounds+0x68/0x80\n[ 46.738604] f2fs_allocate_data_block+0xdff/0xe60 [f2fs]\n[ 46.738819] do_write_page+0xef/0x210 [f2fs]\n[ 46.738934] f2fs_do_write_node_page+0x3f/0x80 [f2fs]\n[ 46.739038] __write_node_page+0x2b7/0x920 [f2fs]\n[ 46.739162] f2fs_sync_node_pages+0x943/0xb00 [f2fs]\n[ 46.739293] f2fs_write_checkpoint+0x7bb/0x1030 [f2fs]\n[ 46.739405] kill_f2fs_super+0x125/0x150 [f2fs]\n[ 46.739507] deactivate_locked_super+0x60/0xc0\n[ 46.739517] deactivate_super+0x70/0xb0\n[ 46.739524] cleanup_mnt+0x11a/0x200\n[ 46.739532] __cleanup_mnt+0x16/0x20\n[ 46.739538] task_work_run+0x67/0xa0\n[ 46.739547] exit_to_user_mode_prepare+0x18c/0x1a0\n[ 46.739559] syscall_exit_to_user_mode+0x26/0x40\n[ 46.739568] do_syscall_64+0x46/0xb0\n[ 46.739584] entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nThe root cause is we missed to do sanity check on curseg->alloc_type,\nresult in out-of-bound accessing on sbi->block_count[] array, fix it."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0748a0f7dcb9d9dddc80302d73ebcecef6782ef0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/498b7088db71f9707359448cd6800bbb1882f4c3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c12765e3f129b144421c80d3383df885f85ee290",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f41ee8b91c00770d718be2ff4852a80017ae9ab3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f68caedf264a95c0b02dfd0d9f92ac2637d5848a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49171.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49171.json
new file mode 100644
index 00000000000..1c878ea8300
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49171.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49171",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:54.213",
+ "lastModified": "2025-02-26T07:00:54.213",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: don't BUG if someone dirty pages without asking ext4 first\n\n[un]pin_user_pages_remote is dirtying pages without properly warning\nthe file system in advance. A related race was noted by Jan Kara in\n2018[1]; however, more recently instead of it being a very hard-to-hit\nrace, it could be reliably triggered by process_vm_writev(2) which was\ndiscovered by Syzbot[2].\n\nThis is technically a bug in mm/gup.c, but arguably ext4 is fragile in\nthat if some other kernel subsystem dirty pages without properly\nnotifying the file system using page_mkwrite(), ext4 will BUG, while\nother file systems will not BUG (although data will still be lost).\n\nSo instead of crashing with a BUG, issue a warning (since there may be\npotential data loss) and just mark the page as clean to avoid\nunprivileged denial of service attacks until the problem can be\nproperly fixed. More discussion and background can be found in the\nthread starting at [2].\n\n[1] https://lore.kernel.org/linux-mm/20180103100430.GE4911@quack2.suse.cz\n[2] https://lore.kernel.org/r/Yg0m6IjcNmfaSokM@google.com"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0d3a6926f7e8be3c897fa46216ce13b119a9f56a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/330d0e44fc5a47c27df958ecdd4693a3cb1d8b81",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/343117559ef41e992e326f7a92da1a8f254dfa8c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5a016c053f426a73752c3b41b60b497b58694d48",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5db60e76edf5680ff1f3a7221036fc44b308f146",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/677c9d30e8487bee6c8e3b034070319d98f6e203",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a0856764dc1276ad2dc7891288c2e9246bf11a37",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc5095747edfb054ca2068d01af20be3fcc3634f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d666dfaa571465a19f014534a214c255ea33f301",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49172.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49172.json
new file mode 100644
index 00000000000..031d8a84d6c
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49172.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49172",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:54.313",
+ "lastModified": "2025-02-26T07:00:54.313",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nparisc: Fix non-access data TLB cache flush faults\n\nWhen a page is not present, we get non-access data TLB faults from\nthe fdc and fic instructions in flush_user_dcache_range_asm and\nflush_user_icache_range_asm. When these occur, the cache line is\nnot invalidated and potentially we get memory corruption. The\nproblem was hidden by the nullification of the flush instructions.\n\nThese faults also affect performance. With pa8800/pa8900 processors,\nthere will be 32 faults per 4 KB page since the cache line is 128\nbytes. There will be more faults with earlier processors.\n\nThe problem is fixed by using flush_cache_pages(). It does the flush\nusing a tmp alias mapping.\n\nThe flush_cache_pages() call in flush_cache_range() flushed too\nlarge a range.\n\nV2: Remove unnecessary preempt_disable() and preempt_enable() calls."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/b3d6adb3a49d82e4e557c5fc16f50c9ff731da5d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ddca4b82027e2a66333dd40fab21a4beff435c7e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f839e5f1cef36ce268950c387129b1bfefdaebc9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49173.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49173.json
new file mode 100644
index 00000000000..29c1c657e67
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49173.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49173",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:54.407",
+ "lastModified": "2025-02-26T07:00:54.407",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: fsi: Implement a timeout for polling status\n\nThe data transfer routines must poll the status register to\ndetermine when more data can be shifted in or out. If the hardware\ngets into a bad state, these polling loops may never exit. Prevent\nthis by returning an error if a timeout is exceeded."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/89b35e3f28514087d3f1e28e8f5634fbfd07c554",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d4982ceb137e6ecd2b466a6de639790a148cf19a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dac1438f347d3b8cf892105c94e254f29c5764de",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49174.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49174.json
new file mode 100644
index 00000000000..a7a3bc95cbb
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49174.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49174",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:54.503",
+ "lastModified": "2025-02-26T07:00:54.503",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix ext4_mb_mark_bb() with flex_bg with fast_commit\n\nIn case of flex_bg feature (which is by default enabled), extents for\nany given inode might span across blocks from two different block group.\next4_mb_mark_bb() only reads the buffer_head of block bitmap once for the\nstarting block group, but it fails to read it again when the extent length\nboundary overflows to another block group. Then in this below loop it\naccesses memory beyond the block group bitmap buffer_head and results\ninto a data abort.\n\n\tfor (i = 0; i < clen; i++)\n\t\tif (!mb_test_bit(blkoff + i, bitmap_bh->b_data) == !state)\n\t\t\talready++;\n\nThis patch adds this functionality for checking block group boundary in\next4_mb_mark_bb() and update the buffer_head(bitmap_bh) for every different\nblock group.\n\nw/o this patch, I was easily able to hit a data access abort using Power platform.\n\n<...>\n[ 74.327662] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1141: group 11, block bitmap and bg descriptor inconsistent: 21248 vs 23294 free clusters\n[ 74.533214] EXT4-fs (loop3): shut down requested (2)\n[ 74.536705] Aborting journal on device loop3-8.\n[ 74.702705] BUG: Unable to handle kernel data access on read at 0xc00000005e980000\n[ 74.703727] Faulting instruction address: 0xc0000000007bffb8\ncpu 0xd: Vector: 300 (Data Access) at [c000000015db7060]\n pc: c0000000007bffb8: ext4_mb_mark_bb+0x198/0x5a0\n lr: c0000000007bfeec: ext4_mb_mark_bb+0xcc/0x5a0\n sp: c000000015db7300\n msr: 800000000280b033\n dar: c00000005e980000\n dsisr: 40000000\n current = 0xc000000027af6880\n paca = 0xc00000003ffd5200 irqmask: 0x03 irq_happened: 0x01\n pid = 5167, comm = mount\n<...>\nenter ? for help\n[c000000015db7380] c000000000782708 ext4_ext_clear_bb+0x378/0x410\n[c000000015db7400] c000000000813f14 ext4_fc_replay+0x1794/0x2000\n[c000000015db7580] c000000000833f7c do_one_pass+0xe9c/0x12a0\n[c000000015db7710] c000000000834504 jbd2_journal_recover+0x184/0x2d0\n[c000000015db77c0] c000000000841398 jbd2_journal_load+0x188/0x4a0\n[c000000015db7880] c000000000804de8 ext4_fill_super+0x2638/0x3e10\n[c000000015db7a40] c0000000005f8404 get_tree_bdev+0x2b4/0x350\n[c000000015db7ae0] c0000000007ef058 ext4_get_tree+0x28/0x40\n[c000000015db7b00] c0000000005f6344 vfs_get_tree+0x44/0x100\n[c000000015db7b70] c00000000063c408 path_mount+0xdd8/0xe70\n[c000000015db7c40] c00000000063c8f0 sys_mount+0x450/0x550\n[c000000015db7d50] c000000000035770 system_call_exception+0x4a0/0x4e0\n[c000000015db7e10] c00000000000c74c system_call_common+0xec/0x250"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/6a6beb074186a0452368a023a261c7d0eaebe838",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/803fb0e8240cc16585a5c9df76add1dfaa781773",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b07eedd0222e9548ffc568ec429bb1f61d21a39c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bfdc502a4a4c058bf4cbb1df0c297761d528f54d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cd6d719534af993210306f8a13f9cb3e615f7c8d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49175.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49175.json
new file mode 100644
index 00000000000..9372a5a79cc
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49175.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49175",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:54.600",
+ "lastModified": "2025-02-26T07:00:54.600",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPM: core: keep irq flags in device_pm_check_callbacks()\n\nThe function device_pm_check_callbacks() can be called under the spin\nlock (in the reported case it happens from genpd_add_device() ->\ndev_pm_domain_set(), when the genpd uses spinlocks rather than mutexes.\n\nHowever this function uncoditionally uses spin_lock_irq() /\nspin_unlock_irq(), thus not preserving the CPU flags. Use the\nirqsave/irqrestore instead.\n\nThe backtrace for the reference:\n[ 2.752010] ------------[ cut here ]------------\n[ 2.756769] raw_local_irq_restore() called with IRQs enabled\n[ 2.762596] WARNING: CPU: 4 PID: 1 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x34/0x50\n[ 2.772338] Modules linked in:\n[ 2.775487] CPU: 4 PID: 1 Comm: swapper/0 Tainted: G S 5.17.0-rc6-00384-ge330d0d82eff-dirty #684\n[ 2.781384] Freeing initrd memory: 46024K\n[ 2.785839] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 2.785841] pc : warn_bogus_irq_restore+0x34/0x50\n[ 2.785844] lr : warn_bogus_irq_restore+0x34/0x50\n[ 2.785846] sp : ffff80000805b7d0\n[ 2.785847] x29: ffff80000805b7d0 x28: 0000000000000000 x27: 0000000000000002\n[ 2.785850] x26: ffffd40e80930b18 x25: ffff7ee2329192b8 x24: ffff7edfc9f60800\n[ 2.785853] x23: ffffd40e80930b18 x22: ffffd40e80930d30 x21: ffff7edfc0dffa00\n[ 2.785856] x20: ffff7edfc09e3768 x19: 0000000000000000 x18: ffffffffffffffff\n[ 2.845775] x17: 6572206f74206465 x16: 6c696166203a3030 x15: ffff80008805b4f7\n[ 2.853108] x14: 0000000000000000 x13: ffffd40e809550b0 x12: 00000000000003d8\n[ 2.860441] x11: 0000000000000148 x10: ffffd40e809550b0 x9 : ffffd40e809550b0\n[ 2.867774] x8 : 00000000ffffefff x7 : ffffd40e809ad0b0 x6 : ffffd40e809ad0b0\n[ 2.875107] x5 : 000000000000bff4 x4 : 0000000000000000 x3 : 0000000000000000\n[ 2.882440] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff7edfc03a8000\n[ 2.889774] Call trace:\n[ 2.892290] warn_bogus_irq_restore+0x34/0x50\n[ 2.896770] _raw_spin_unlock_irqrestore+0x94/0xa0\n[ 2.901690] genpd_unlock_spin+0x20/0x30\n[ 2.905724] genpd_add_device+0x100/0x2d0\n[ 2.909850] __genpd_dev_pm_attach+0xa8/0x23c\n[ 2.914329] genpd_dev_pm_attach_by_id+0xc4/0x190\n[ 2.919167] genpd_dev_pm_attach_by_name+0x3c/0xd0\n[ 2.924086] dev_pm_domain_attach_by_name+0x24/0x30\n[ 2.929102] psci_dt_attach_cpu+0x24/0x90\n[ 2.933230] psci_cpuidle_probe+0x2d4/0x46c\n[ 2.937534] platform_probe+0x68/0xe0\n[ 2.941304] really_probe.part.0+0x9c/0x2fc\n[ 2.945605] __driver_probe_device+0x98/0x144\n[ 2.950085] driver_probe_device+0x44/0x15c\n[ 2.954385] __device_attach_driver+0xb8/0x120\n[ 2.958950] bus_for_each_drv+0x78/0xd0\n[ 2.962896] __device_attach+0xd8/0x180\n[ 2.966843] device_initial_probe+0x14/0x20\n[ 2.971144] bus_probe_device+0x9c/0xa4\n[ 2.975092] device_add+0x380/0x88c\n[ 2.978679] platform_device_add+0x114/0x234\n[ 2.983067] platform_device_register_full+0x100/0x190\n[ 2.988344] psci_idle_init+0x6c/0xb0\n[ 2.992113] do_one_initcall+0x74/0x3a0\n[ 2.996060] kernel_init_freeable+0x2fc/0x384\n[ 3.000543] kernel_init+0x28/0x130\n[ 3.004132] ret_from_fork+0x10/0x20\n[ 3.007817] irq event stamp: 319826\n[ 3.011404] hardirqs last enabled at (319825): [] __up_console_sem+0x78/0x84\n[ 3.020332] hardirqs last disabled at (319826): [] el1_dbg+0x24/0x8c\n[ 3.028458] softirqs last enabled at (318312): [] _stext+0x410/0x588\n[ 3.036678] softirqs last disabled at (318299): [] __irq_exit_rcu+0x158/0x174\n[ 3.045607] ---[ end trace 0000000000000000 ]---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0cccf9d4fb45f1acbc0bbf6d7e4d8d0fb7a10416",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2add538e57a2825c61d639260386f385c75e4166",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3ec80d52b9b74b9e691997632a543c73eddfeba0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/524bb1da785a7ae43dd413cd392b5071c6c367f8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/78c4d68b952f5f537788dbd454031ea9bf50f642",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/be8bc05f38d667eda1e820bc6f69234795be7809",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c29642ba72f87c0a3d7449f7db5d6d76a7ed53c3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c7c0ec5a1dcc3eaa1e85c804c2ccf46e457788a3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ede1ef1a7de973321699736ef96d01a4b9a6fe9e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49176.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49176.json
new file mode 100644
index 00000000000..448f66ac571
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49176.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49176",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:54.717",
+ "lastModified": "2025-02-26T07:00:54.717",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbfq: fix use-after-free in bfq_dispatch_request\n\nKASAN reports a use-after-free report when doing normal scsi-mq test\n\n[69832.239032] ==================================================================\n[69832.241810] BUG: KASAN: use-after-free in bfq_dispatch_request+0x1045/0x44b0\n[69832.243267] Read of size 8 at addr ffff88802622ba88 by task kworker/3:1H/155\n[69832.244656]\n[69832.245007] CPU: 3 PID: 155 Comm: kworker/3:1H Not tainted 5.10.0-10295-g576c6382529e #8\n[69832.246626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014\n[69832.249069] Workqueue: kblockd blk_mq_run_work_fn\n[69832.250022] Call Trace:\n[69832.250541] dump_stack+0x9b/0xce\n[69832.251232] ? bfq_dispatch_request+0x1045/0x44b0\n[69832.252243] print_address_description.constprop.6+0x3e/0x60\n[69832.253381] ? __cpuidle_text_end+0x5/0x5\n[69832.254211] ? vprintk_func+0x6b/0x120\n[69832.254994] ? bfq_dispatch_request+0x1045/0x44b0\n[69832.255952] ? bfq_dispatch_request+0x1045/0x44b0\n[69832.256914] kasan_report.cold.9+0x22/0x3a\n[69832.257753] ? bfq_dispatch_request+0x1045/0x44b0\n[69832.258755] check_memory_region+0x1c1/0x1e0\n[69832.260248] bfq_dispatch_request+0x1045/0x44b0\n[69832.261181] ? bfq_bfqq_expire+0x2440/0x2440\n[69832.262032] ? blk_mq_delay_run_hw_queues+0xf9/0x170\n[69832.263022] __blk_mq_do_dispatch_sched+0x52f/0x830\n[69832.264011] ? blk_mq_sched_request_inserted+0x100/0x100\n[69832.265101] __blk_mq_sched_dispatch_requests+0x398/0x4f0\n[69832.266206] ? blk_mq_do_dispatch_ctx+0x570/0x570\n[69832.267147] ? __switch_to+0x5f4/0xee0\n[69832.267898] blk_mq_sched_dispatch_requests+0xdf/0x140\n[69832.268946] __blk_mq_run_hw_queue+0xc0/0x270\n[69832.269840] blk_mq_run_work_fn+0x51/0x60\n[69832.278170] process_one_work+0x6d4/0xfe0\n[69832.278984] worker_thread+0x91/0xc80\n[69832.279726] ? __kthread_parkme+0xb0/0x110\n[69832.280554] ? process_one_work+0xfe0/0xfe0\n[69832.281414] kthread+0x32d/0x3f0\n[69832.282082] ? kthread_park+0x170/0x170\n[69832.282849] ret_from_fork+0x1f/0x30\n[69832.283573]\n[69832.283886] Allocated by task 7725:\n[69832.284599] kasan_save_stack+0x19/0x40\n[69832.285385] __kasan_kmalloc.constprop.2+0xc1/0xd0\n[69832.286350] kmem_cache_alloc_node+0x13f/0x460\n[69832.287237] bfq_get_queue+0x3d4/0x1140\n[69832.287993] bfq_get_bfqq_handle_split+0x103/0x510\n[69832.289015] bfq_init_rq+0x337/0x2d50\n[69832.289749] bfq_insert_requests+0x304/0x4e10\n[69832.290634] blk_mq_sched_insert_requests+0x13e/0x390\n[69832.291629] blk_mq_flush_plug_list+0x4b4/0x760\n[69832.292538] blk_flush_plug_list+0x2c5/0x480\n[69832.293392] io_schedule_prepare+0xb2/0xd0\n[69832.294209] io_schedule_timeout+0x13/0x80\n[69832.295014] wait_for_common_io.constprop.1+0x13c/0x270\n[69832.296137] submit_bio_wait+0x103/0x1a0\n[69832.296932] blkdev_issue_discard+0xe6/0x160\n[69832.297794] blk_ioctl_discard+0x219/0x290\n[69832.298614] blkdev_common_ioctl+0x50a/0x1750\n[69832.304715] blkdev_ioctl+0x470/0x600\n[69832.305474] block_ioctl+0xde/0x120\n[69832.306232] vfs_ioctl+0x6c/0xc0\n[69832.306877] __se_sys_ioctl+0x90/0xa0\n[69832.307629] do_syscall_64+0x2d/0x40\n[69832.308362] entry_SYSCALL_64_after_hwframe+0x44/0xa9\n[69832.309382]\n[69832.309701] Freed by task 155:\n[69832.310328] kasan_save_stack+0x19/0x40\n[69832.311121] kasan_set_track+0x1c/0x30\n[69832.311868] kasan_set_free_info+0x1b/0x30\n[69832.312699] __kasan_slab_free+0x111/0x160\n[69832.313524] kmem_cache_free+0x94/0x460\n[69832.314367] bfq_put_queue+0x582/0x940\n[69832.315112] __bfq_bfqd_reset_in_service+0x166/0x1d0\n[69832.317275] bfq_bfqq_expire+0xb27/0x2440\n[69832.318084] bfq_dispatch_request+0x697/0x44b0\n[69832.318991] __blk_mq_do_dispatch_sched+0x52f/0x830\n[69832.319984] __blk_mq_sched_dispatch_requests+0x398/0x4f0\n[69832.321087] blk_mq_sched_dispatch_requests+0xdf/0x140\n[69832.322225] __blk_mq_run_hw_queue+0xc0/0x270\n[69832.323114] blk_mq_run_work_fn+0x51/0x6\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/080665e2c3cbfc68359b9a348a3546ed9b908e7a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/40b4ba0030e0b02cbacd424ebb9f4c8b0976c786",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5117c9ff4c2ebae0f5c2c262d42a25a8fbc086e6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5687958bf18f84384d809f521210d0f5deed03b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/74e610b5ee0d95e751280567100509eb11517efa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ab552fcb17cc9e4afe0e4ac4df95fc7b30e8490a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/df6e00b1a53c57dca82c63b5ecbcad5452231bc7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49177.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49177.json
new file mode 100644
index 00000000000..409a2199472
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49177.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49177",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:54.850",
+ "lastModified": "2025-02-26T07:00:54.850",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwrng: cavium - fix NULL but dereferenced coccicheck error\n\nFix following coccicheck warning:\n./drivers/char/hw_random/cavium-rng-vf.c:182:17-20: ERROR:\npdev is NULL but dereferenced."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/e47b12f9415169eceda6770fcf45802e0c8d2a66",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e6205ad58a7ac194abfb33897585b38687d797fa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49178.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49178.json
new file mode 100644
index 00000000000..d8da918dc37
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49178.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49178",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:54.947",
+ "lastModified": "2025-02-26T07:00:54.947",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmemstick/mspro_block: fix handling of read-only devices\n\nUse set_disk_ro to propagate the read-only state to the block layer\ninstead of checking for it in ->open and leaking a reference in case\nof a read-only device."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/057b53c4f87690d626203acef8b63d52a9bf2f43",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6a0725b9d78ff6efdc95a37e4f05072e79c63918",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6dab421bfe06a59bf8f212a72e34673e8acf2018",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49179.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49179.json
new file mode 100644
index 00000000000..d68366aeec0
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49179.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49179",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:55.037",
+ "lastModified": "2025-02-26T07:00:55.037",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock, bfq: don't move oom_bfqq\n\nOur test report a UAF:\n\n[ 2073.019181] ==================================================================\n[ 2073.019188] BUG: KASAN: use-after-free in __bfq_put_async_bfqq+0xa0/0x168\n[ 2073.019191] Write of size 8 at addr ffff8000ccf64128 by task rmmod/72584\n[ 2073.019192]\n[ 2073.019196] CPU: 0 PID: 72584 Comm: rmmod Kdump: loaded Not tainted 4.19.90-yk #5\n[ 2073.019198] Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015\n[ 2073.019200] Call trace:\n[ 2073.019203] dump_backtrace+0x0/0x310\n[ 2073.019206] show_stack+0x28/0x38\n[ 2073.019210] dump_stack+0xec/0x15c\n[ 2073.019216] print_address_description+0x68/0x2d0\n[ 2073.019220] kasan_report+0x238/0x2f0\n[ 2073.019224] __asan_store8+0x88/0xb0\n[ 2073.019229] __bfq_put_async_bfqq+0xa0/0x168\n[ 2073.019233] bfq_put_async_queues+0xbc/0x208\n[ 2073.019236] bfq_pd_offline+0x178/0x238\n[ 2073.019240] blkcg_deactivate_policy+0x1f0/0x420\n[ 2073.019244] bfq_exit_queue+0x128/0x178\n[ 2073.019249] blk_mq_exit_sched+0x12c/0x160\n[ 2073.019252] elevator_exit+0xc8/0xd0\n[ 2073.019256] blk_exit_queue+0x50/0x88\n[ 2073.019259] blk_cleanup_queue+0x228/0x3d8\n[ 2073.019267] null_del_dev+0xfc/0x1e0 [null_blk]\n[ 2073.019274] null_exit+0x90/0x114 [null_blk]\n[ 2073.019278] __arm64_sys_delete_module+0x358/0x5a0\n[ 2073.019282] el0_svc_common+0xc8/0x320\n[ 2073.019287] el0_svc_handler+0xf8/0x160\n[ 2073.019290] el0_svc+0x10/0x218\n[ 2073.019291]\n[ 2073.019294] Allocated by task 14163:\n[ 2073.019301] kasan_kmalloc+0xe0/0x190\n[ 2073.019305] kmem_cache_alloc_node_trace+0x1cc/0x418\n[ 2073.019308] bfq_pd_alloc+0x54/0x118\n[ 2073.019313] blkcg_activate_policy+0x250/0x460\n[ 2073.019317] bfq_create_group_hierarchy+0x38/0x110\n[ 2073.019321] bfq_init_queue+0x6d0/0x948\n[ 2073.019325] blk_mq_init_sched+0x1d8/0x390\n[ 2073.019330] elevator_switch_mq+0x88/0x170\n[ 2073.019334] elevator_switch+0x140/0x270\n[ 2073.019338] elv_iosched_store+0x1a4/0x2a0\n[ 2073.019342] queue_attr_store+0x90/0xe0\n[ 2073.019348] sysfs_kf_write+0xa8/0xe8\n[ 2073.019351] kernfs_fop_write+0x1f8/0x378\n[ 2073.019359] __vfs_write+0xe0/0x360\n[ 2073.019363] vfs_write+0xf0/0x270\n[ 2073.019367] ksys_write+0xdc/0x1b8\n[ 2073.019371] __arm64_sys_write+0x50/0x60\n[ 2073.019375] el0_svc_common+0xc8/0x320\n[ 2073.019380] el0_svc_handler+0xf8/0x160\n[ 2073.019383] el0_svc+0x10/0x218\n[ 2073.019385]\n[ 2073.019387] Freed by task 72584:\n[ 2073.019391] __kasan_slab_free+0x120/0x228\n[ 2073.019394] kasan_slab_free+0x10/0x18\n[ 2073.019397] kfree+0x94/0x368\n[ 2073.019400] bfqg_put+0x64/0xb0\n[ 2073.019404] bfqg_and_blkg_put+0x90/0xb0\n[ 2073.019408] bfq_put_queue+0x220/0x228\n[ 2073.019413] __bfq_put_async_bfqq+0x98/0x168\n[ 2073.019416] bfq_put_async_queues+0xbc/0x208\n[ 2073.019420] bfq_pd_offline+0x178/0x238\n[ 2073.019424] blkcg_deactivate_policy+0x1f0/0x420\n[ 2073.019429] bfq_exit_queue+0x128/0x178\n[ 2073.019433] blk_mq_exit_sched+0x12c/0x160\n[ 2073.019437] elevator_exit+0xc8/0xd0\n[ 2073.019440] blk_exit_queue+0x50/0x88\n[ 2073.019443] blk_cleanup_queue+0x228/0x3d8\n[ 2073.019451] null_del_dev+0xfc/0x1e0 [null_blk]\n[ 2073.019459] null_exit+0x90/0x114 [null_blk]\n[ 2073.019462] __arm64_sys_delete_module+0x358/0x5a0\n[ 2073.019467] el0_svc_common+0xc8/0x320\n[ 2073.019471] el0_svc_handler+0xf8/0x160\n[ 2073.019474] el0_svc+0x10/0x218\n[ 2073.019475]\n[ 2073.019479] The buggy address belongs to the object at ffff8000ccf63f00\n which belongs to the cache kmalloc-1024 of size 1024\n[ 2073.019484] The buggy address is located 552 bytes inside of\n 1024-byte region [ffff8000ccf63f00, ffff8000ccf64300)\n[ 2073.019486] The buggy address belongs to the page:\n[ 2073.019492] page:ffff7e000333d800 count:1 mapcount:0 mapping:ffff8000c0003a00 index:0x0 compound_mapcount: 0\n[ 2073.020123] flags: 0x7ffff0000008100(slab|head)\n[ 2073.020403] raw: 07ffff0000008100 ffff7e0003334c08 ffff7e00001f5a08 ffff8000c0003a00\n[ 2073.020409] ra\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/7507ead1e9d42957c2340f2c4a0e9d00034e3366",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8410f70977734f21b8ed45c37e925d311dfda2e7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/87fdfe8589d43e471dffb4c60f75eeb6f37afc4c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8f34dea99cd7761156a146a5258a67d045d862f7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c01fced8d38fbccc82787065229578006f28e020",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c4f5a678add58a8a0e7ee5e038496b376ea6d205",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49180.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49180.json
new file mode 100644
index 00000000000..f2b25810a27
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49180.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49180",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:55.137",
+ "lastModified": "2025-02-26T07:00:55.137",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nLSM: general protection fault in legacy_parse_param\n\nThe usual LSM hook \"bail on fail\" scheme doesn't work for cases where\na security module may return an error code indicating that it does not\nrecognize an input. In this particular case Smack sees a mount option\nthat it recognizes, and returns 0. A call to a BPF hook follows, which\nreturns -ENOPARAM, which confuses the caller because Smack has processed\nits data.\n\nThe SELinux hook incorrectly returns 1 on success. There was a time\nwhen this was correct, however the current expectation is that it\nreturn 0 on success. This is repaired."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/00fc07fa0b4a004711b6e1a944f0d2e46f7093b7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2784604c8c6fc523248f8f80a421c313a9d790b7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cadae7c5e477aaafcba819b8e4a3d1c1a1503b62",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ddcdda888e14ca451b3ee83d11b65b2a9c8e783b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ecff30575b5ad0eda149aadad247b7f75411fd47",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f3f93a1aaafc3032e0a9655fb43deccfb3e953a3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49181.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49181.json
new file mode 100644
index 00000000000..7b801572699
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49181.json
@@ -0,0 +1,16 @@
+{
+ "id": "CVE-2022-49181",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:55.230",
+ "lastModified": "2025-02-26T13:15:34.087",
+ "vulnStatus": "Rejected",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
+ }
+ ],
+ "metrics": {},
+ "references": []
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49182.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49182.json
new file mode 100644
index 00000000000..fc149751b38
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49182.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49182",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:55.333",
+ "lastModified": "2025-02-26T07:00:55.333",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: add vlan list lock to protect vlan list\n\nWhen adding port base VLAN, vf VLAN need to remove from HW and modify\nthe vlan state in vf VLAN list as false. If the periodicity task is\nfreeing the same node, it may cause \"use after free\" error.\nThis patch adds a vlan list lock to protect the vlan list."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/09e383ca97e798f9954189b741af54b5c51e7a97",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1932a624ab88ff407d1a1d567fe581faa15dc725",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/30f0ff7176efe8ac6c55f85bce26ed58bb608758",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f58af41deeab0f45c9c80adf5f2de489ebbac3dd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49183.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49183.json
new file mode 100644
index 00000000000..613ac8b9076
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49183.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49183",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:55.427",
+ "lastModified": "2025-02-26T07:00:55.427",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_ct: fix ref leak when switching zones\n\nWhen switching zones or network namespaces without doing a ct clear in\nbetween, it is now leaking a reference to the old ct entry. That's\nbecause tcf_ct_skb_nfct_cached() returns false and\ntcf_ct_flow_table_lookup() may simply overwrite it.\n\nThe fix is to, as the ct entry is not reusable, free it already at\ntcf_ct_skb_nfct_cached()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4bb42d73def9411e5cad885b9811987d72431df1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b24793a37d91aacad7cb9893b226a7924a89636a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bcb74e132a76ce0502bb33d5b65533a4ed72d159",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bcbf4e5c3b5b373cd61528392dd1ec8e9c0fd33d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49184.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49184.json
new file mode 100644
index 00000000000..34738403c97
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49184.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49184",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:55.520",
+ "lastModified": "2025-02-26T07:00:55.520",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sparx5: switchdev: fix possible NULL pointer dereference\n\nAs the possible failure of the allocation, devm_kzalloc() may return NULL\npointer.\nTherefore, it should be better to check the 'db' in order to prevent\nthe dereference of NULL pointer."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0906f3a3df07835e37077d8971aac65347f2ed57",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b375ea083fa649092cd016ac1f89a2d1fd8f8e8b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c346791877e6ce923bb21e34b30c6f99326aa5a8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e7e1fff76c4c57688dc7d53a3b6212182d5628d0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49185.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49185.json
new file mode 100644
index 00000000000..e94ac7aaccd
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49185.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49185",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:55.607",
+ "lastModified": "2025-02-26T07:00:55.607",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe\n\nThis node pointer is returned by of_parse_phandle() with refcount\nincremented in this function. Calling of_node_put() to avoid\nthe refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0067ba448f1c29ca06e5aee00d8506889ed1f9d0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0356d4b64a03d23daf99a2a29d7d7d91d6ec2ea8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/59250d547542f1c7765a78dc97ddfe5e6b0d2ab0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/62580a40c9bef3d8a90629c64dda381344b35ffd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/669b05ff43bd7ed684379c6e2006a6dad5127b71",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9511c6018cd772668def8b034bc67269847e591a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bc1e29a35147c1ba6ea2b06a16cb0028f7c852d2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c09ac191b1f97cfa06f394dbfd7a5db07986cefc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c52703355766c347f270df222a744e0c491a02f2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49186.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49186.json
new file mode 100644
index 00000000000..63707539463
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49186.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49186",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:55.710",
+ "lastModified": "2025-02-26T07:00:55.710",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: visconti: prevent array overflow in visconti_clk_register_gates()\n\nThis code was using -1 to represent that there was no reset function.\nUnfortunately, the -1 was stored in u8 so the if (clks[i].rs_id >= 0)\ncondition was always true. This lead to an out of bounds access in\nvisconti_clk_register_gates()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2723543c1d60278d5aef1c4ad732dbad24b84a81",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c5601e0720ce1a3ad895f94a5838530edde01ed3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49187.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49187.json
new file mode 100644
index 00000000000..7f7445cc2c0
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49187.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49187",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:55.803",
+ "lastModified": "2025-02-26T07:00:55.803",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: Fix clk_hw_get_clk() when dev is NULL\n\nAny registered clk_core structure can have a NULL pointer in its dev\nfield. While never actually documented, this is evidenced by the wide\nusage of clk_register and clk_hw_register with a NULL device pointer,\nand the fact that the core of_clk_hw_register() function also passes a\nNULL device pointer.\n\nA call to clk_hw_get_clk() on a clk_hw struct whose clk_core is in that\ncase will result in a NULL pointer derefence when it calls dev_name() on\nthat NULL device pointer.\n\nAdd a test for this case and use NULL as the dev_id if the device\npointer is NULL."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0c1b56df451716ba207bbf59f303473643eee4fd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/23f89fe005b105f0dcc55034c13eb89f9b570fac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4be3e4c05d8dd1b83b75652cad88c9e752ec7054",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d183f20cf5a7b546d4108e796b98210ceb317579",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49188.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49188.json
new file mode 100644
index 00000000000..262beac7f06
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49188.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49188",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:55.897",
+ "lastModified": "2025-02-26T07:00:55.897",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nremoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region\n\nThe device_node pointer is returned by of_parse_phandle() or\nof_get_child_by_name() with refcount incremented.\nWe should use of_node_put() on it when done.\n\nThis function only call of_node_put(node) when of_address_to_resource\nsucceeds, missing error cases."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/07a5dcc4bed9d7cae54adf5aa10ff9f037a3204b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a7d988735e757e111f9722de7cf1b40a84a48b1f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b9df3007b3cda4936cc50f5a7d2d30505a652828",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bd4771ba2cf9e18473a42b5b70175e50d67a64bb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f7210ca29a783c94478da02368731e4c9cf7cdb7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49189.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49189.json
new file mode 100644
index 00000000000..366ab05403b
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49189.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49189",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:55.990",
+ "lastModified": "2025-02-26T07:00:55.990",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: qcom: clk-rcg2: Update logic to calculate D value for RCG\n\nThe display pixel clock has a requirement on certain newer platforms to\nsupport M/N as (2/3) and the final D value calculated results in\nunderflow errors.\nAs the current implementation does not check for D value is within\nthe accepted range for a given M & N value. Update the logic to\ncalculate the final D value based on the range."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/334720f418f57b1d969dad2117b21f9388cb9395",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/34dca60982e93e69ae442aa2d36ce61c9a3bb563",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/52592f9afbfe01bce8f8953e4f19cbe3bcbdbd3a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/58922910add18583d5273c2edcdb9fd7bf4eca02",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/96888f0dcf351e758b9df57e015a48427ca709c1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a4e2e31971354790b0d1fa3e783452a9d135fcff",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49190.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49190.json
new file mode 100644
index 00000000000..8182c9bcb45
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49190.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49190",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:56.090",
+ "lastModified": "2025-02-26T07:00:56.090",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nkernel/resource: fix kfree() of bootmem memory again\n\nSince commit ebff7d8f270d (\"mem hotunplug: fix kfree() of bootmem\nmemory\"), we could get a resource allocated during boot via\nalloc_resource(). And it's required to release the resource using\nfree_resource(). Howerver, many people use kfree directly which will\nresult in kernel BUG. In order to fix this without fixing every call\nsite, just leak a couple of bytes in such corner case."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0cbcc92917c5de80f15c24d033566539ad696892",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a9e88c2618d228d7a4e7e515cf30dc0d0d813f27",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ab86020070999e758ce2e60c4348f20bf7ddba56",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d7faa04a44a0c37ac3d222fa8e0bdcbfcee9c0c8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49191.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49191.json
new file mode 100644
index 00000000000..f33d2674fcb
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49191.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49191",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:56.183",
+ "lastModified": "2025-02-26T07:00:56.183",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmxser: fix xmit_buf leak in activate when LSR == 0xff\n\nWhen LSR is 0xff in ->activate() (rather unlike), we return an error.\nProvided ->shutdown() is not called when ->activate() fails, nothing\nactually frees the buffer in this case.\n\nFix this by properly freeing the buffer in a designated label. We jump\nthere also from the \"!info->type\" if now too."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/125b7c929fc9b1e5eaa344bceb6367dfa6fd3f9d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2cd05c38a27bee7fb42aa4d43174d68ac55dac0f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/376922045009f8ea2d20a8fa3475e95b47c41690",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/685b6d16bf89595310b5d61394c9b97cc9505c7c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6c9041b2f90c0eace73106f22350e1d2c98f5edc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6dffc2035fbaada60ca8db59e0962e34f760370a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/996291d06851a26678a0fab488b6e1f0677c0576",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b125b08dbee3611f03f53b71471813ed4ccafcdd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cd3a4907ee334b40d7aa880c7ab310b154fd5cd4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49192.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49192.json
new file mode 100644
index 00000000000..628a1f72880
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49192.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49192",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:56.287",
+ "lastModified": "2025-02-26T07:00:56.287",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool\n\ncpsw_ethtool_begin directly returns the result of pm_runtime_get_sync\nwhen successful.\npm_runtime_get_sync returns -error code on failure and 0 on successful\nresume but also 1 when the device is already active. So the common case\nfor cpsw_ethtool_begin is to return 1. That leads to inconsistent calls\nto pm_runtime_put in the call-chain so that pm_runtime_put is called\none too many times and as result leaving the cpsw dev behind suspended.\n\nThe suspended cpsw dev leads to an access violation later on by\ndifferent parts of the cpsw driver.\n\nFix this by calling the return-friendly pm_runtime_resume_and_get\nfunction."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2844e2434385819f674d1fb4130c308c50ba681e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/30ad11bff021a94aff6dab1ec9236fdfd884fbff",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/459080fab12b23c0526026e5cedbf3fabb5457cc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/585dc196a08fccdcd1b7fcf473cf566b34c4b840",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49193.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49193.json
new file mode 100644
index 00000000000..8f8848465f7
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49193.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49193",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:56.383",
+ "lastModified": "2025-02-26T07:00:56.383",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: fix 'scheduling while atomic' on aux critical err interrupt\n\nThere's a kernel BUG splat on processing aux critical error\ninterrupts in ice_misc_intr():\n\n[ 2100.917085] BUG: scheduling while atomic: swapper/15/0/0x00010000\n...\n[ 2101.060770] Call Trace:\n[ 2101.063229] \n[ 2101.065252] dump_stack+0x41/0x60\n[ 2101.068587] __schedule_bug.cold.100+0x4c/0x58\n[ 2101.073060] __schedule+0x6a4/0x830\n[ 2101.076570] schedule+0x35/0xa0\n[ 2101.079727] schedule_preempt_disabled+0xa/0x10\n[ 2101.084284] __mutex_lock.isra.7+0x310/0x420\n[ 2101.088580] ? ice_misc_intr+0x201/0x2e0 [ice]\n[ 2101.093078] ice_send_event_to_aux+0x25/0x70 [ice]\n[ 2101.097921] ice_misc_intr+0x220/0x2e0 [ice]\n[ 2101.102232] __handle_irq_event_percpu+0x40/0x180\n[ 2101.106965] handle_irq_event_percpu+0x30/0x80\n[ 2101.111434] handle_irq_event+0x36/0x53\n[ 2101.115292] handle_edge_irq+0x82/0x190\n[ 2101.119148] handle_irq+0x1c/0x30\n[ 2101.122480] do_IRQ+0x49/0xd0\n[ 2101.125465] common_interrupt+0xf/0xf\n[ 2101.129146] \n...\n\nAs Andrew correctly mentioned previously[0], the following call\nladder happens:\n\nice_misc_intr() <- hardirq\n ice_send_event_to_aux()\n device_lock()\n mutex_lock()\n might_sleep()\n might_resched() <- oops\n\nAdd a new PF state bit which indicates that an aux critical error\noccurred and serve it in ice_service_task() in process context.\nThe new ice_pf::oicr_err_reg is read-write in both hardirq and\nprocess contexts, but only 3 bits of non-critical data probably\naren't worth explicit synchronizing (and they're even in the same\nbyte [31:24]).\n\n[0] https://lore.kernel.org/all/YeSRUVmrdmlUXHDn@lunn.ch"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/24d7ac8426306ae7ccea7f7dd612a7368fe7201d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/32d53c0aa3a7b727243473949bad2a830b908edc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/59e88a50afad7469c55804e46bf2924b9130281f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9b77c8cf69a41d1e3851370aeaa04a9ea83b865c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49194.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49194.json
new file mode 100644
index 00000000000..2f219067d44
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49194.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49194",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:56.483",
+ "lastModified": "2025-02-26T07:00:56.483",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bcmgenet: Use stronger register read/writes to assure ordering\n\nGCC12 appears to be much smarter about its dependency tracking and is\naware that the relaxed variants are just normal loads and stores and\nthis is causing problems like:\n\n[ 210.074549] ------------[ cut here ]------------\n[ 210.079223] NETDEV WATCHDOG: enabcm6e4ei0 (bcmgenet): transmit queue 1 timed out\n[ 210.086717] WARNING: CPU: 1 PID: 0 at net/sched/sch_generic.c:529 dev_watchdog+0x234/0x240\n[ 210.095044] Modules linked in: genet(E) nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat]\n[ 210.146561] ACPI CPPC: PCC check channel failed for ss: 0. ret=-110\n[ 210.146927] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G E 5.17.0-rc7G12+ #58\n[ 210.153226] CPPC Cpufreq:cppc_scale_freq_workfn: failed to read perf counters\n[ 210.161349] Hardware name: Raspberry Pi Foundation Raspberry Pi 4 Model B/Raspberry Pi 4 Model B, BIOS EDK2-DEV 02/08/2022\n[ 210.161353] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 210.161358] pc : dev_watchdog+0x234/0x240\n[ 210.161364] lr : dev_watchdog+0x234/0x240\n[ 210.161368] sp : ffff8000080a3a40\n[ 210.161370] x29: ffff8000080a3a40 x28: ffffcd425af87000 x27: ffff8000080a3b20\n[ 210.205150] x26: ffffcd425aa00000 x25: 0000000000000001 x24: ffffcd425af8ec08\n[ 210.212321] x23: 0000000000000100 x22: ffffcd425af87000 x21: ffff55b142688000\n[ 210.219491] x20: 0000000000000001 x19: ffff55b1426884c8 x18: ffffffffffffffff\n[ 210.226661] x17: 64656d6974203120 x16: 0000000000000001 x15: 6d736e617274203a\n[ 210.233831] x14: 2974656e65676d63 x13: ffffcd4259c300d8 x12: ffffcd425b07d5f0\n[ 210.241001] x11: 00000000ffffffff x10: ffffcd425b07d5f0 x9 : ffffcd4258bdad9c\n[ 210.248171] x8 : 00000000ffffdfff x7 : 000000000000003f x6 : 0000000000000000\n[ 210.255341] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000001000\n[ 210.262511] x2 : 0000000000001000 x1 : 0000000000000005 x0 : 0000000000000044\n[ 210.269682] Call trace:\n[ 210.272133] dev_watchdog+0x234/0x240\n[ 210.275811] call_timer_fn+0x3c/0x15c\n[ 210.279489] __run_timers.part.0+0x288/0x310\n[ 210.283777] run_timer_softirq+0x48/0x80\n[ 210.287716] __do_softirq+0x128/0x360\n[ 210.291392] __irq_exit_rcu+0x138/0x140\n[ 210.295243] irq_exit_rcu+0x1c/0x30\n[ 210.298745] el1_interrupt+0x38/0x54\n[ 210.302334] el1h_64_irq_handler+0x18/0x24\n[ 210.306445] el1h_64_irq+0x7c/0x80\n[ 210.309857] arch_cpu_idle+0x18/0x2c\n[ 210.313445] default_idle_call+0x4c/0x140\n[ 210.317470] cpuidle_idle_call+0x14c/0x1a0\n[ 210.321584] do_idle+0xb0/0x100\n[ 210.324737] cpu_startup_entry+0x30/0x8c\n[ 210.328675] secondary_start_kernel+0xe4/0x110\n[ 210.333138] __secondary_switched+0x94/0x98\n\nThe assumption when these were relaxed seems to be that device memory\nwould be mapped non reordering, and that other constructs\n(spinlocks/etc) would provide the barriers to assure that packet data\nand in memory rings/queues were ordered with respect to device\nregister reads/writes. This itself seems a bit sketchy, but the real\nproblem with GCC12 is that it is moving the actual reads/writes around\nat will as though they were independent operations when in truth they\nare not, but the compiler can't know that. When looking at the\nassembly dumps for many of these routines its possible to see very\nclean, but not strictly in program order operations occurring as the\ncompiler would be free to do if these weren't actually register\nreads/write operations.\n\nIts possible to suppress the timeout with a liberal bit of dma_mb()'s\nsprinkled around but the device still seems unable to reliably\nsend/receive data. A better plan is to use the safer readl/writel\neverywhere.\n\nSince this partially reverts an older commit, which notes the use of\nthe relaxed variants for performance reasons. I would suggest that\nany performance problems \n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/06d836801cd82ded282aaf9e888ff9e7e4a88b91",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1d717816189fd68f9e089cf89ed1f7327d2c2e71",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8d3ea3d402db94b61075617e71b67459a714a502",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b26091a02093104259ca64aeca73601e56160d62",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f49769b462f282477ca801cf648f875b1c5b59db",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49195.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49195.json
new file mode 100644
index 00000000000..d7b5f32b63c
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49195.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49195",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:56.580",
+ "lastModified": "2025-02-26T07:00:56.580",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: fix panic on shutdown if multi-chip tree failed to probe\n\nDSA probing is atypical because a tree of devices must probe all at\nonce, so out of N switches which call dsa_tree_setup_routing_table()\nduring probe, for (N - 1) of them, \"complete\" will return false and they\nwill exit probing early. The Nth switch will set up the whole tree on\ntheir behalf.\n\nThe implication is that for (N - 1) switches, the driver binds to the\ndevice successfully, without doing anything. When the driver is bound,\nthe ->shutdown() method may run. But if the Nth switch has failed to\ninitialize the tree, there is nothing to do for the (N - 1) driver\ninstances, since the slave devices have not been created, etc. Moreover,\ndsa_switch_shutdown() expects that the calling @ds has been in fact\ninitialized, so it jumps at dereferencing the various data structures,\nwhich is incorrect.\n\nAvoid the ensuing NULL pointer dereferences by simply checking whether\nthe Nth switch has previously set \"ds->setup = true\" for the switch\nwhich is currently shutting down. The entire setup is serialized under\ndsa2_mutex which we already hold."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/8fd36358ce82382519b50b05f437493e1e00c4a9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/95df5cd5a446df6738d2d45872e08594819080e4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b6e668ff43ebd87ccc8a19e5481345c428672295",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b864d5350c18bea9369d0bdd9e7eb6f6172cc283",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49196.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49196.json
new file mode 100644
index 00000000000..d5182461656
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49196.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49196",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:56.677",
+ "lastModified": "2025-02-26T07:00:56.677",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries: Fix use after free in remove_phb_dynamic()\n\nIn remove_phb_dynamic() we use &phb->io_resource, after we've called\ndevice_unregister(&host_bridge->dev). But the unregister may have freed\nphb, because pcibios_free_controller_deferred() is the release function\nfor the host_bridge.\n\nIf there are no outstanding references when we call device_unregister()\nthen phb will be freed out from under us.\n\nThis has gone mainly unnoticed, but with slub_debug and page_poison\nenabled it can lead to a crash:\n\n PID: 7574 TASK: c0000000d492cb80 CPU: 13 COMMAND: \"drmgr\"\n #0 [c0000000e4f075a0] crash_kexec at c00000000027d7dc\n #1 [c0000000e4f075d0] oops_end at c000000000029608\n #2 [c0000000e4f07650] __bad_page_fault at c0000000000904b4\n #3 [c0000000e4f076c0] do_bad_slb_fault at c00000000009a5a8\n #4 [c0000000e4f076f0] data_access_slb_common_virt at c000000000008b30\n Data SLB Access [380] exception frame:\n R0: c000000000167250 R1: c0000000e4f07a00 R2: c000000002a46100\n R3: c000000002b39ce8 R4: 00000000000000c0 R5: 00000000000000a9\n R6: 3894674d000000c0 R7: 0000000000000000 R8: 00000000000000ff\n R9: 0000000000000100 R10: 6b6b6b6b6b6b6b6b R11: 0000000000008000\n R12: c00000000023da80 R13: c0000009ffd38b00 R14: 0000000000000000\n R15: 000000011c87f0f0 R16: 0000000000000006 R17: 0000000000000003\n R18: 0000000000000002 R19: 0000000000000004 R20: 0000000000000005\n R21: 000000011c87ede8 R22: 000000011c87c5a8 R23: 000000011c87d3a0\n R24: 0000000000000000 R25: 0000000000000001 R26: c0000000e4f07cc8\n R27: c00000004d1cc400 R28: c0080000031d00e8 R29: c00000004d23d800\n R30: c00000004d1d2400 R31: c00000004d1d2540\n NIP: c000000000167258 MSR: 8000000000009033 OR3: c000000000e9f474\n CTR: 0000000000000000 LR: c000000000167250 XER: 0000000020040003\n CCR: 0000000024088420 MQ: 0000000000000000 DAR: 6b6b6b6b6b6b6ba3\n DSISR: c0000000e4f07920 Syscall Result: fffffffffffffff2\n [NIP : release_resource+56]\n [LR : release_resource+48]\n #5 [c0000000e4f07a00] release_resource at c000000000167258 (unreliable)\n #6 [c0000000e4f07a30] remove_phb_dynamic at c000000000105648\n #7 [c0000000e4f07ab0] dlpar_remove_slot at c0080000031a09e8 [rpadlpar_io]\n #8 [c0000000e4f07b50] remove_slot_store at c0080000031a0b9c [rpadlpar_io]\n #9 [c0000000e4f07be0] kobj_attr_store at c000000000817d8c\n #10 [c0000000e4f07c00] sysfs_kf_write at c00000000063e504\n #11 [c0000000e4f07c20] kernfs_fop_write_iter at c00000000063d868\n #12 [c0000000e4f07c70] new_sync_write at c00000000054339c\n #13 [c0000000e4f07d10] vfs_write at c000000000546624\n #14 [c0000000e4f07d60] ksys_write at c0000000005469f4\n #15 [c0000000e4f07db0] system_call_exception at c000000000030840\n #16 [c0000000e4f07e10] system_call_vectored_common at c00000000000c168\n\nTo avoid it, we can take a reference to the host_bridge->dev until we're\ndone using phb. Then when we drop the reference the phb will be freed."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/33d39efb61a84e055ca2386157d39ebbdf6b7d31",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/403f9e0bc5535a0a5184d1352fa3a70e6ffacb6f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/895ca4ae1f72e0a0160ab162723e59c9f265ec93",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fe2640bd7a62f1f7c3f55fbda31084085075bc30",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49197.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49197.json
new file mode 100644
index 00000000000..af2c6609f2d
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49197.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49197",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:56.770",
+ "lastModified": "2025-02-26T07:00:56.770",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_netlink: Fix shift out of bounds in group mask calculation\n\nWhen a netlink message is received, netlink_recvmsg() fills in the address\nof the sender. One of the fields is the 32-bit bitfield nl_groups, which\ncarries the multicast group on which the message was received. The least\nsignificant bit corresponds to group 1, and therefore the highest group\nthat the field can represent is 32. Above that, the UB sanitizer flags the\nout-of-bounds shift attempts.\n\nWhich bits end up being set in such case is implementation defined, but\nit's either going to be a wrong non-zero value, or zero, which is at least\nnot misleading. Make the latter choice deterministic by always setting to 0\nfor higher-numbered multicast groups.\n\nTo get information about membership in groups >= 32, userspace is expected\nto use nl_pktinfo control messages[0], which are enabled by NETLINK_PKTINFO\nsocket option.\n[0] https://lwn.net/Articles/147608/\n\nThe way to trigger this issue is e.g. through monitoring the BRVLAN group:\n\n\t# bridge monitor vlan &\n\t# ip link add name br type bridge\n\nWhich produces the following citation:\n\n\tUBSAN: shift-out-of-bounds in net/netlink/af_netlink.c:162:19\n\tshift exponent 32 is too large for 32-bit type 'int'"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0caf6d9922192dd1afa8dc2131abfb4df1443b9f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/41249fff507387c3323b198d0052faed08b14de4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7409ff6393a67ff9838d0ae1bd102fb5f020d07a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ac5883a8890a11c00b32a19949a25d4afeaa2f5a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b0898362188e05b2202656058cc32d98fabf3bac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e1c5d46f05aa23d740daae5cd3a6472145afac42",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e23e1e981247feb3c7d0236fe58aceb685f234ae",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e8aaf3134bc5e943048eefe9f2ddaabf41d92b1a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f75f4abeec4c04b600a15b50c89a481f1e7435ee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49198.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49198.json
new file mode 100644
index 00000000000..418e8e83c2f
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49198.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49198",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:56.880",
+ "lastModified": "2025-02-26T07:00:56.880",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb\n\nGot crash when doing pressure test of mptcp:\n\n===========================================================================\ndst_release: dst:ffffa06ce6e5c058 refcnt:-1\nkernel tried to execute NX-protected page - exploit attempt? (uid: 0)\nBUG: unable to handle kernel paging request at ffffa06ce6e5c058\nPGD 190a01067 P4D 190a01067 PUD 43fffb067 PMD 22e403063 PTE 8000000226e5c063\nOops: 0011 [#1] SMP PTI\nCPU: 7 PID: 7823 Comm: kworker/7:0 Kdump: loaded Tainted: G E\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.2.1 04/01/2014\nCall Trace:\n ? skb_release_head_state+0x68/0x100\n ? skb_release_all+0xe/0x30\n ? kfree_skb+0x32/0xa0\n ? mptcp_sendmsg_frag+0x57e/0x750\n ? __mptcp_retrans+0x21b/0x3c0\n ? __switch_to_asm+0x35/0x70\n ? mptcp_worker+0x25e/0x320\n ? process_one_work+0x1a7/0x360\n ? worker_thread+0x30/0x390\n ? create_worker+0x1a0/0x1a0\n ? kthread+0x112/0x130\n ? kthread_flush_work_fn+0x10/0x10\n ? ret_from_fork+0x35/0x40\n===========================================================================\n\nIn __mptcp_alloc_tx_skb skb was allocated and skb->tcp_tsorted_anchor will\nbe initialized, in under memory pressure situation sk_wmem_schedule will\nreturn false and then kfree_skb. In this case skb->_skb_refdst is not null\nbecause_skb_refdst and tcp_tsorted_anchor are stored in the same mem, and\nkfree_skb will try to release dst and cause crash."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3ef3905aa3b5b3e222ee6eb0210bfd999417a8cc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4d54181eba4b077fb74033a7186898ad4000a7a5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/752add6f5ce5305e55d8bda4ac8d69be3a09f14d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/af61a8f7603926c26158153d0a0755764d82657c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-491xx/CVE-2022-49199.json b/CVE-2022/CVE-2022-491xx/CVE-2022-49199.json
new file mode 100644
index 00000000000..ce5de9f7ea9
--- /dev/null
+++ b/CVE-2022/CVE-2022-491xx/CVE-2022-49199.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49199",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:56.970",
+ "lastModified": "2025-02-26T07:00:56.970",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit()\n\nThis code checks \"index\" for an upper bound but it does not check for\nnegatives. Change the type to unsigned to prevent underflows."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2a495ef04d5f42e6f00eb2bec1ee9075e3d5a771",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/87e0eacb176f9500c2063d140c0a1d7fa51ab8a5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f6dd8669b8299a3a536cd92a7069152a7704da1d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49200.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49200.json
new file mode 100644
index 00000000000..28d310ecac3
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49200.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49200",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:57.067",
+ "lastModified": "2025-02-26T07:00:57.067",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt\n\nFix the following kernel oops in btmtksdio_interrrupt\n\n[ 14.339134] btmtksdio_interrupt+0x28/0x54\n[ 14.339139] process_sdio_pending_irqs+0x68/0x1a0\n[ 14.339144] sdio_irq_work+0x40/0x70\n[ 14.339154] process_one_work+0x184/0x39c\n[ 14.339160] worker_thread+0x228/0x3e8\n[ 14.339168] kthread+0x148/0x3ac\n[ 14.339176] ret_from_fork+0x10/0x30\n\nThat happened because hdev->power_on is already called before\nsdio_set_drvdata which btmtksdio_interrupt handler relies on is not\nproperly set up.\n\nThe details are shown as the below: hci_register_dev would run\nqueue_work(hdev->req_workqueue, &hdev->power_on) as WQ_HIGHPRI\nworkqueue_struct to complete the power-on sequeunce and thus hci_power_on\nmay run before sdio_set_drvdata is done in btmtksdio_probe.\n\nThe hci_dev_do_open in hci_power_on would initialize the device and enable\nthe interrupt and thus it is possible that btmtksdio_interrupt is being\ncalled right before sdio_set_drvdata is filled out.\n\nWhen btmtksdio_interrupt is being called and sdio_set_drvdata is not filled\n, the kernel oops is going to happen because btmtksdio_interrupt access an\nuninitialized pointer."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4d3d1f2c35a19988d3c5f0ee86038b525e830840",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6d7be5afbb41c918d2f12f857f8c7efa50500be2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/70a6cf749d9ff9f463490248322e5343199bc267",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/770a97d3f34b801de1b04737b43e02c55118c41a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/874eca93966a786eace87fa6dfb206c2dd9519b1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b062a0b9c1dc1ff63094337dccfe1568d5b62023",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49201.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49201.json
new file mode 100644
index 00000000000..9f6cd1b0ef1
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49201.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49201",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:57.160",
+ "lastModified": "2025-02-26T07:00:57.160",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nibmvnic: fix race between xmit and reset\n\nThere is a race between reset and the transmit paths that can lead to\nibmvnic_xmit() accessing an scrq after it has been freed in the reset\npath. It can result in a crash like:\n\n\tKernel attempted to read user page (0) - exploit attempt? (uid: 0)\n\tBUG: Kernel NULL pointer dereference on read at 0x00000000\n\tFaulting instruction address: 0xc0080000016189f8\n\tOops: Kernel access of bad area, sig: 11 [#1]\n\t...\n\tNIP [c0080000016189f8] ibmvnic_xmit+0x60/0xb60 [ibmvnic]\n\tLR [c000000000c0046c] dev_hard_start_xmit+0x11c/0x280\n\tCall Trace:\n\t[c008000001618f08] ibmvnic_xmit+0x570/0xb60 [ibmvnic] (unreliable)\n\t[c000000000c0046c] dev_hard_start_xmit+0x11c/0x280\n\t[c000000000c9cfcc] sch_direct_xmit+0xec/0x330\n\t[c000000000bfe640] __dev_xmit_skb+0x3a0/0x9d0\n\t[c000000000c00ad4] __dev_queue_xmit+0x394/0x730\n\t[c008000002db813c] __bond_start_xmit+0x254/0x450 [bonding]\n\t[c008000002db8378] bond_start_xmit+0x40/0xc0 [bonding]\n\t[c000000000c0046c] dev_hard_start_xmit+0x11c/0x280\n\t[c000000000c00ca4] __dev_queue_xmit+0x564/0x730\n\t[c000000000cf97e0] neigh_hh_output+0xd0/0x180\n\t[c000000000cfa69c] ip_finish_output2+0x31c/0x5c0\n\t[c000000000cfd244] __ip_queue_xmit+0x194/0x4f0\n\t[c000000000d2a3c4] __tcp_transmit_skb+0x434/0x9b0\n\t[c000000000d2d1e0] __tcp_retransmit_skb+0x1d0/0x6a0\n\t[c000000000d2d984] tcp_retransmit_skb+0x34/0x130\n\t[c000000000d310e8] tcp_retransmit_timer+0x388/0x6d0\n\t[c000000000d315ec] tcp_write_timer_handler+0x1bc/0x330\n\t[c000000000d317bc] tcp_write_timer+0x5c/0x200\n\t[c000000000243270] call_timer_fn+0x50/0x1c0\n\t[c000000000243704] __run_timers.part.0+0x324/0x460\n\t[c000000000243894] run_timer_softirq+0x54/0xa0\n\t[c000000000ea713c] __do_softirq+0x15c/0x3e0\n\t[c000000000166258] __irq_exit_rcu+0x158/0x190\n\t[c000000000166420] irq_exit+0x20/0x40\n\t[c00000000002853c] timer_interrupt+0x14c/0x2b0\n\t[c000000000009a00] decrementer_common_virt+0x210/0x220\n\t--- interrupt: 900 at plpar_hcall_norets_notrace+0x18/0x2c\n\nThe immediate cause of the crash is the access of tx_scrq in the following\nsnippet during a reset, where the tx_scrq can be either NULL or an address\nthat will soon be invalid:\n\n\tibmvnic_xmit()\n\t{\n\t\t...\n\t\ttx_scrq = adapter->tx_scrq[queue_num];\n\t\ttxq = netdev_get_tx_queue(netdev, queue_num);\n\t\tind_bufp = &tx_scrq->ind_buf;\n\n\t\tif (test_bit(0, &adapter->resetting)) {\n\t\t...\n\t}\n\nBut beyond that, the call to ibmvnic_xmit() itself is not safe during a\nreset and the reset path attempts to avoid this by stopping the queue in\nibmvnic_cleanup(). However just after the queue was stopped, an in-flight\nibmvnic_complete_tx() could have restarted the queue even as the reset is\nprogressing.\n\nSince the queue was restarted we could get a call to ibmvnic_xmit() which\ncan then access the bad tx_scrq (or other fields).\n\nWe cannot however simply have ibmvnic_complete_tx() check the ->resetting\nbit and skip starting the queue. This can race at the \"back-end\" of a good\nreset which just restarted the queue but has not cleared the ->resetting\nbit yet. If we skip restarting the queue due to ->resetting being true,\nthe queue would remain stopped indefinitely potentially leading to transmit\ntimeouts.\n\nIOW ->resetting is too broad for this purpose. Instead use a new flag\nthat indicates whether or not the queues are active. Only the open/\nreset paths control when the queues are active. ibmvnic_complete_tx()\nand others wake up the queue only if the queue is marked active.\n\nSo we will have:\n\tA. reset/open thread in ibmvnic_cleanup() and __ibmvnic_open()\n\n\t\t->resetting = true\n\t\t->tx_queues_active = false\n\t\tdisable tx queues\n\t\t...\n\t\t->tx_queues_active = true\n\t\tstart tx queues\n\n\tB. Tx interrupt in ibmvnic_complete_tx():\n\n\t\tif (->tx_queues_active)\n\t\t\tnetif_wake_subqueue();\n\nTo ensure that ->tx_queues_active and state of the queues are consistent,\nwe need a lock which:\n\n\t- must also be taken in the interrupt path (ibmvnic_complete_tx())\n\t- shared across the multiple\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1bd58abf595b6cf1ba6dd47ec887c4c009155fc9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4219196d1f662cb10a462eb9e076633a3fc31a15",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/475f9cce98b63bc145b4efa66fa51175d4cb345f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8507c6ade73cdbbbda5c3d31d67f52f2e1cf03fe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49202.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49202.json
new file mode 100644
index 00000000000..c9147aeea39
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49202.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49202",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:57.260",
+ "lastModified": "2025-02-26T07:00:57.260",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_uart: add missing NULL check in h5_enqueue\n\nSyzbot hit general protection fault in __pm_runtime_resume(). The problem\nwas in missing NULL check.\n\nhu->serdev can be NULL and we should not blindly pass &serdev->dev\nsomewhere, since it will cause GPF."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/32cb08e958696908a9aad5e49a78d74f7e32fffb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7235485433d290367d60ae22fcdfc565e61d42ab",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8a3896c30f542439d36303183dc96f65df8cc528",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e6b6c904c0f88588b6a3ace20e4c0d61eab124f8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49203.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49203.json
new file mode 100644
index 00000000000..be9fbf30497
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49203.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49203",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:57.357",
+ "lastModified": "2025-02-26T07:00:57.357",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix double free during GPU reset on DC streams\n\n[Why]\nThe issue only occurs during the GPU reset code path.\n\nWe first backup the current state prior to commiting 0 streams\ninternally from DM to DC. This state backup contains valid link\nencoder assignments.\n\nDC will clear the link encoder assignments as part of current state\n(but not the backup, since it was a copied before the commit) and\nfree the extra stream reference it held.\n\nDC requires that the link encoder assignments remain cleared/invalid\nprior to commiting. Since the backup still has valid assignments we\ncall the interface post reset to clear them. This routine also\nreleases the extra reference that the link encoder interface held -\nresulting in a double free (and eventually a NULL pointer dereference).\n\n[How]\nWe'll have to do a full DC commit anyway after GPU reset because\nthe stream count previously went to 0.\n\nWe don't need to retain the assignment that we had backed up, so\njust copy off of the now clean current state assignment after the\nreset has occcurred with the new link_enc_cfg_copy() interface."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/32685b32d825ca08c5dec826477332df886c4743",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bbfcdd6289ba6f00f0cd7d496946dce9f6c600ac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49204.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49204.json
new file mode 100644
index 00000000000..7a5b929a205
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49204.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49204",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:57.480",
+ "lastModified": "2025-02-26T07:00:57.480",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix more uncharged while msg has more_data\n\nIn tcp_bpf_send_verdict(), if msg has more data after\ntcp_bpf_sendmsg_redir():\n\ntcp_bpf_send_verdict()\n tosend = msg->sg.size //msg->sg.size = 22220\n case __SK_REDIRECT:\n sk_msg_return() //uncharged msg->sg.size(22220) sk->sk_forward_alloc\n tcp_bpf_sendmsg_redir() //after tcp_bpf_sendmsg_redir, msg->sg.size=11000\n goto more_data;\n tosend = msg->sg.size //msg->sg.size = 11000\n case __SK_REDIRECT:\n sk_msg_return() //uncharged msg->sg.size(11000) to sk->sk_forward_alloc\n\nThe msg->sg.size(11000) has been uncharged twice, to fix we can charge the\nremaining msg->sg.size before goto more data.\n\nThis issue can cause the following info:\nWARNING: CPU: 0 PID: 9860 at net/core/stream.c:208 sk_stream_kill_queues+0xd4/0x1a0\nCall Trace:\n \n inet_csk_destroy_sock+0x55/0x110\n __tcp_close+0x279/0x470\n tcp_close+0x1f/0x60\n inet_release+0x3f/0x80\n __sock_release+0x3d/0xb0\n sock_close+0x11/0x20\n __fput+0x92/0x250\n task_work_run+0x6a/0xa0\n do_exit+0x33b/0xb60\n do_group_exit+0x2f/0xa0\n get_signal+0xb6/0x950\n arch_do_signal_or_restart+0xac/0x2a0\n ? vfs_write+0x237/0x290\n exit_to_user_mode_prepare+0xa9/0x200\n syscall_exit_to_user_mode+0x12/0x30\n do_syscall_64+0x46/0x80\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n \n\nWARNING: CPU: 0 PID: 2136 at net/ipv4/af_inet.c:155 inet_sock_destruct+0x13c/0x260\nCall Trace:\n \n __sk_destruct+0x24/0x1f0\n sk_psock_destroy+0x19b/0x1c0\n process_one_work+0x1b3/0x3c0\n worker_thread+0x30/0x350\n ? process_one_work+0x3c0/0x3c0\n kthread+0xe6/0x110\n ? kthread_complete_and_exit+0x20/0x20\n ret_from_fork+0x22/0x30\n "
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/168ff181f5b6e7fce684c98a30d35da1dbf8f82a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/244ce90c8d0bd10ebf957da02c6f3fcd5d920bdf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7b812a369e6416ab06d83cdd39d8e3f752781dd0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/84472b436e760ba439e1969a9e3c5ae7c86de39d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/87d532d41ef937e16f61b3d2094f3a2ac49be365",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/abb4caa477a5450817d2aa1198edce66450aecf8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49205.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49205.json
new file mode 100644
index 00000000000..38104b048a1
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49205.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49205",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:57.620",
+ "lastModified": "2025-02-26T07:00:57.620",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix double uncharge the mem of sk_msg\n\nIf tcp_bpf_sendmsg is running during a tear down operation, psock may be\nfreed.\n\ntcp_bpf_sendmsg()\n tcp_bpf_send_verdict()\n sk_msg_return()\n tcp_bpf_sendmsg_redir()\n unlikely(!psock))\n sk_msg_free()\n\nThe mem of msg has been uncharged in tcp_bpf_send_verdict() by\nsk_msg_return(), and would be uncharged by sk_msg_free() again. When psock\nis null, we can simply returning an error code, this would then trigger\nthe sk_msg_free_nocharge in the error path of __SK_REDIRECT and would have\nthe side effect of throwing an error up to user space. This would be a\nslight change in behavior from user side but would look the same as an\nerror if the redirect on the socket threw an error.\n\nThis issue can cause the following info:\nWARNING: CPU: 0 PID: 2136 at net/ipv4/af_inet.c:155 inet_sock_destruct+0x13c/0x260\nCall Trace:\n \n __sk_destruct+0x24/0x1f0\n sk_psock_destroy+0x19b/0x1c0\n process_one_work+0x1b3/0x3c0\n worker_thread+0x30/0x350\n ? process_one_work+0x3c0/0x3c0\n kthread+0xe6/0x110\n ? kthread_complete_and_exit+0x20/0x20\n ret_from_fork+0x22/0x30\n "
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/223f3c51ab163852dd4819d357dcf33039929434",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2486ab434b2c2a14e9237296db00b1e1b7ae3273",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/94c6ac22abcdede72bfaa0f4c22fb370891f4002",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ac3ecb7760c750c8e4fc09c719241d8e6e88028c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cb6f141ae705af0101e819065a79e6d029f6e393",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cd84ea3920aef936c559b63099ef0013ce6b2325",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49206.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49206.json
new file mode 100644
index 00000000000..b6f9a70afae
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49206.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49206",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:57.723",
+ "lastModified": "2025-02-26T07:00:57.723",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx5: Fix memory leak in error flow for subscribe event routine\n\nIn case the second xa_insert() fails, the obj_event is not released. Fix\nthe error unwind flow to free that memory to avoid a memory leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0174a89663a5ef83617da15bf24c0af2f62b6c7f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/087f9c3f2309ed183f7e4b85ae57121d8663224d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/414b4e8738484379f18d6c4e780787c80dbf8a2c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8dd392e352d3269938fea32061a74655a613f929",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c98d903ff9e79c210beddea4e6bc15ac38e25aa5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d66498507801fd9a20307a15a0814a0a016c3cde",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49207.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49207.json
new file mode 100644
index 00000000000..a5706df7f3e
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49207.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49207",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:57.817",
+ "lastModified": "2025-02-26T07:00:57.817",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix memleak in sk_psock_queue_msg\n\nIf tcp_bpf_sendmsg is running during a tear down operation we may enqueue\ndata on the ingress msg queue while tear down is trying to free it.\n\n sk1 (redirect sk2) sk2\n ------------------- ---------------\ntcp_bpf_sendmsg()\n tcp_bpf_send_verdict()\n tcp_bpf_sendmsg_redir()\n bpf_tcp_ingress()\n sock_map_close()\n lock_sock()\n lock_sock() ... blocking\n sk_psock_stop\n sk_psock_clear_state(psock, SK_PSOCK_TX_ENABLED);\n release_sock(sk);\n lock_sock()\n sk_mem_charge()\n get_page()\n sk_psock_queue_msg()\n sk_psock_test_state(psock, SK_PSOCK_TX_ENABLED);\n drop_sk_msg()\n release_sock()\n\nWhile drop_sk_msg(), the msg has charged memory form sk by sk_mem_charge\nand has sg pages need to put. To fix we use sk_msg_free() and then kfee()\nmsg.\n\nThis issue can cause the following info:\nWARNING: CPU: 0 PID: 9202 at net/core/stream.c:205 sk_stream_kill_queues+0xc8/0xe0\nCall Trace:\n \n inet_csk_destroy_sock+0x55/0x110\n tcp_rcv_state_process+0xe5f/0xe90\n ? sk_filter_trim_cap+0x10d/0x230\n ? tcp_v4_do_rcv+0x161/0x250\n tcp_v4_do_rcv+0x161/0x250\n tcp_v4_rcv+0xc3a/0xce0\n ip_protocol_deliver_rcu+0x3d/0x230\n ip_local_deliver_finish+0x54/0x60\n ip_local_deliver+0xfd/0x110\n ? ip_protocol_deliver_rcu+0x230/0x230\n ip_rcv+0xd6/0x100\n ? ip_local_deliver+0x110/0x110\n __netif_receive_skb_one_core+0x85/0xa0\n process_backlog+0xa4/0x160\n __napi_poll+0x29/0x1b0\n net_rx_action+0x287/0x300\n __do_softirq+0xff/0x2fc\n do_softirq+0x79/0x90\n \n\nWARNING: CPU: 0 PID: 531 at net/ipv4/af_inet.c:154 inet_sock_destruct+0x175/0x1b0\nCall Trace:\n \n __sk_destruct+0x24/0x1f0\n sk_psock_destroy+0x19b/0x1c0\n process_one_work+0x1b3/0x3c0\n ? process_one_work+0x3c0/0x3c0\n worker_thread+0x30/0x350\n ? process_one_work+0x3c0/0x3c0\n kthread+0xe6/0x110\n ? kthread_complete_and_exit+0x20/0x20\n ret_from_fork+0x22/0x30\n "
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/03948ed6553960db62f1c33bec29e64d7c191a3f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4dd2e947d3be13a4de3b3028859b9a6497266bcf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/938d3480b92fa5e454b7734294f12a7b75126f09",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef9785f429794567792561a584901faa9291d3ee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49208.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49208.json
new file mode 100644
index 00000000000..182c6fd378f
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49208.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49208",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:57.910",
+ "lastModified": "2025-02-26T07:00:57.910",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/irdma: Prevent some integer underflows\n\nMy static checker complains that:\n\n drivers/infiniband/hw/irdma/ctrl.c:3605 irdma_sc_ceq_init()\n warn: can subtract underflow 'info->dev->hmc_fpm_misc.max_ceqs'?\n\nIt appears that \"info->dev->hmc_fpm_misc.max_ceqs\" comes from the firmware\nin irdma_sc_parse_fpm_query_buf() so, yes, there is a chance that it could\nbe zero. Even if we trust the firmware, it's easy enough to change the\ncondition just as a hardenning measure."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/6f6dbb819dfc1a35bcb8b709b5c83a3ea8beff75",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7340c3675d7ac946f4019b84cd7c64ed542dfe4c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d52dab6e03550f9c97121b0c11c0a3ed78ee76a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f21056f15bbeacab7b4b87af232f5599d1f2bff1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49209.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49209.json
new file mode 100644
index 00000000000..07149799a2f
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49209.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49209",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:58.007",
+ "lastModified": "2025-02-26T07:00:58.007",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full\n\nIf tcp_bpf_sendmsg() is running while sk msg is full. When sk_msg_alloc()\nreturns -ENOMEM error, tcp_bpf_sendmsg() goes to wait_for_memory. If partial\nmemory has been alloced by sk_msg_alloc(), that is, msg_tx->sg.size is\ngreater than osize after sk_msg_alloc(), memleak occurs. To fix we use\nsk_msg_trim() to release the allocated memory, then goto wait for memory.\n\nOther call paths of sk_msg_alloc() have the similar issue, such as\ntls_sw_sendmsg(), so handle sk_msg_trim logic inside sk_msg_alloc(),\nas Cong Wang suggested.\n\nThis issue can cause the following info:\nWARNING: CPU: 3 PID: 7950 at net/core/stream.c:208 sk_stream_kill_queues+0xd4/0x1a0\nCall Trace:\n \n inet_csk_destroy_sock+0x55/0x110\n __tcp_close+0x279/0x470\n tcp_close+0x1f/0x60\n inet_release+0x3f/0x80\n __sock_release+0x3d/0xb0\n sock_close+0x11/0x20\n __fput+0x92/0x250\n task_work_run+0x6a/0xa0\n do_exit+0x33b/0xb60\n do_group_exit+0x2f/0xa0\n get_signal+0xb6/0x950\n arch_do_signal_or_restart+0xac/0x2a0\n exit_to_user_mode_prepare+0xa9/0x200\n syscall_exit_to_user_mode+0x12/0x30\n do_syscall_64+0x46/0x80\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n \n\nWARNING: CPU: 3 PID: 2094 at net/ipv4/af_inet.c:155 inet_sock_destruct+0x13c/0x260\nCall Trace:\n \n __sk_destruct+0x24/0x1f0\n sk_psock_destroy+0x19b/0x1c0\n process_one_work+0x1b3/0x3c0\n kthread+0xe6/0x110\n ret_from_fork+0x22/0x30\n "
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/6d03722c34d9603df325f67c6d30dc1b7b3c6067",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9c34e38c4a870eb30b13f42f5b44f42e9d19ccb8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bec34a91eba3483e1830c02bdd36f8f968642047",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d0b85dfc6f01d26808e2576c6537c131b590e270",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/de3a8d8fab0710186f7864ec812836d8d70da3c9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f677328f05f52d535cbdc15cb04476db49477eb4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49210.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49210.json
new file mode 100644
index 00000000000..3b6881b9c48
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49210.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49210",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:58.107",
+ "lastModified": "2025-02-26T07:00:58.107",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nMIPS: pgalloc: fix memory leak caused by pgd_free()\n\npgd page is freed by generic implementation pgd_free() since commit\nf9cb654cb550 (\"asm-generic: pgalloc: provide generic pgd_free()\"),\nhowever, there are scenarios that the system uses more than one page as\nthe pgd table, in such cases the generic implementation pgd_free() won't\nbe applicable anymore. For example, when PAGE_SIZE_4KB is enabled and\nMIPS_VA_BITS_48 is not enabled in a 64bit system, the macro \"PGD_ORDER\"\nwill be set as \"1\", which will cause allocating two pages as the pgd\ntable. Well, at the same time, the generic implementation pgd_free()\njust free one pgd page, which will result in the memory leak.\n\nThe memory leak can be easily detected by executing shell command:\n\"while true; do ls > /dev/null; grep MemFree /proc/meminfo; done\""
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1bf0d78c8cc3cf615a6e7bf33ada70b73592f0a1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2bc5bab9a763d520937e4f3fe8df51c6a1eceb97",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5a8501d34b261906e4c76ec9da679f2cb4d309ed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d29cda15cab086d82d692de016f7249545d4b6b4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fa3d44424579972cc7c4fac3d9cf227798ebdfa0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49211.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49211.json
new file mode 100644
index 00000000000..b880d2333dc
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49211.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49211",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:58.200",
+ "lastModified": "2025-02-26T07:00:58.200",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmips: cdmm: Fix refcount leak in mips_cdmm_phys_base\n\nThe of_find_compatible_node() function returns a node pointer with\nrefcount incremented, We should use of_node_put() on it when done\nAdd the missing of_node_put() to release the refcount."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4528668ca331f7ce5999b7746657b46db5b3b785",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4680c2ac9aabda82acd23ebbd1f900fb6a889cd3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/69155dc2e04777aa94207a73a8b10f12b8428a68",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/721ab4be20d4448dd04c2cc8ed99cd4f3e45f765",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef1728e3cb9e43f38ed10cde705a7ba2b4ad2d35",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49212.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49212.json
new file mode 100644
index 00000000000..78d69b7a11d
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49212.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49212",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:58.293",
+ "lastModified": "2025-02-26T07:00:58.293",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init\n\nThe reference counting issue happens in several error handling paths\non a refcounted object \"nc->dmac\". In these paths, the function simply\nreturns the error code, forgetting to balance the reference count of\n\"nc->dmac\", increased earlier by dma_request_channel(), which may\ncause refcount leaks.\n\nFix it by decrementing the refcount of specific object in those error\npaths."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0856bf27057561f42b37df111603cf5a0d040294",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8baea2b96fa90af8d0f937caf4cf2105ee094d93",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9843c9c98f26c6ad843260b19bfdaa2598f2ae1e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9b08d211db4c447eb1a07df65e45e0aa772e0fa6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a3587259ae553e41d1ce8c7435351a5d6b299a11",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f1694169f3674cdf7553aed06864254635679878",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fe0e2ce5c87e9c0b9485ff566362030aa55972cf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fecbd4a317c95d73c849648c406bcf1b6a0ec1cf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49213.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49213.json
new file mode 100644
index 00000000000..0a0f49cda4d
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49213.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49213",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:58.397",
+ "lastModified": "2025-02-26T07:00:58.397",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nath10k: Fix error handling in ath10k_setup_msa_resources\n\nThe device_node pointer is returned by of_parse_phandle() with refcount\nincremented. We should use of_node_put() on it when done.\n\nThis function only calls of_node_put() in the regular path.\nAnd it will cause refcount leak in error path."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/315772133a4b960859e4f5efe0e738e347188cdc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/32939187f254171a5666badc058bc3787fe454af",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4ed37d611ea5d222c3ecb3549e4c2d34b8f3c335",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/74b1d41e1b6410eed5c76d00eedb262036e9eff5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9747a78d5f758a5284751a10aee13c30d02bd5f1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49214.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49214.json
new file mode 100644
index 00000000000..bb0358f8aaf
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49214.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49214",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:58.490",
+ "lastModified": "2025-02-26T07:00:58.490",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/64s: Don't use DSISR for SLB faults\n\nSince commit 46ddcb3950a2 (\"powerpc/mm: Show if a bad page fault on data\nis read or write.\") we use page_fault_is_write(regs->dsisr) in\n__bad_page_fault() to determine if the fault is for a read or write, and\nchange the message printed accordingly.\n\nBut SLB faults, aka Data Segment Interrupts, don't set DSISR (Data\nStorage Interrupt Status Register) to a useful value. All ISA versions\nfrom v2.03 through v3.1 specify that the Data Segment Interrupt sets\nDSISR \"to an undefined value\". As far as I can see there's no mention of\nSLB faults setting DSISR in any BookIV content either.\n\nThis manifests as accesses that should be a read being incorrectly\nreported as writes, for example, using the xmon \"dump\" command:\n\n 0:mon> d 0x5deadbeef0000000\n 5deadbeef0000000\n [359526.415354][ C6] BUG: Unable to handle kernel data access on write at 0x5deadbeef0000000\n [359526.415611][ C6] Faulting instruction address: 0xc00000000010a300\n cpu 0x6: Vector: 380 (Data SLB Access) at [c00000000ffbf400]\n pc: c00000000010a300: mread+0x90/0x190\n\nIf we disassemble the PC, we see a load instruction:\n\n 0:mon> di c00000000010a300\n c00000000010a300 89490000 lbz r10,0(r9)\n\nWe can also see in exceptions-64s.S that the data_access_slb block\ndoesn't set IDSISR=1, which means it doesn't load DSISR into pt_regs. So\nthe value we're using to determine if the fault is a read/write is some\nstale value in pt_regs from a previous page fault.\n\nRework the printing logic to separate the SLB fault case out, and only\nprint read/write in the cases where we can determine it.\n\nThe result looks like eg:\n\n 0:mon> d 0x5deadbeef0000000\n 5deadbeef0000000\n [ 721.779525][ C6] BUG: Unable to handle kernel data access at 0x5deadbeef0000000\n [ 721.779697][ C6] Faulting instruction address: 0xc00000000014cbe0\n cpu 0x6: Vector: 380 (Data SLB Access) at [c00000000ffbf390]\n\n 0:mon> d 0\n 0000000000000000\n [ 742.793242][ C6] BUG: Kernel NULL pointer dereference at 0x00000000\n [ 742.793316][ C6] Faulting instruction address: 0xc00000000014cbe0\n cpu 0x6: Vector: 380 (Data SLB Access) at [c00000000ffbf390]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/093449bb182db885dae816d62874cccab7a4c42a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4a852ff9b7bea9c640540e2c1bc70bd3ba455d61",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a3dae36d632b2cf6eb20314273e512a96cb43c9a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d4679ac8ea2e5078704aa1c026db36580cc1bf9a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49215.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49215.json
new file mode 100644
index 00000000000..5fcdbded650
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49215.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49215",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:58.590",
+ "lastModified": "2025-02-26T07:00:58.590",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: Fix race at socket teardown\n\nFix a race in the xsk socket teardown code that can lead to a NULL pointer\ndereference splat. The current xsk unbind code in xsk_unbind_dev() starts by\nsetting xs->state to XSK_UNBOUND, sets xs->dev to NULL and then waits for any\nNAPI processing to terminate using synchronize_net(). After that, the release\ncode starts to tear down the socket state and free allocated memory.\n\n BUG: kernel NULL pointer dereference, address: 00000000000000c0\n PGD 8000000932469067 P4D 8000000932469067 PUD 0\n Oops: 0000 [#1] PREEMPT SMP PTI\n CPU: 25 PID: 69132 Comm: grpcpp_sync_ser Tainted: G I 5.16.0+ #2\n Hardware name: Dell Inc. PowerEdge R730/0599V5, BIOS 1.2.10 03/09/2015\n RIP: 0010:__xsk_sendmsg+0x2c/0x690\n [...]\n RSP: 0018:ffffa2348bd13d50 EFLAGS: 00010246\n RAX: 0000000000000000 RBX: 0000000000000040 RCX: ffff8d5fc632d258\n RDX: 0000000000400000 RSI: ffffa2348bd13e10 RDI: ffff8d5fc5489800\n RBP: ffffa2348bd13db0 R08: 0000000000000000 R09: 00007ffffffff000\n R10: 0000000000000000 R11: 0000000000000000 R12: ffff8d5fc5489800\n R13: ffff8d5fcb0f5140 R14: ffff8d5fcb0f5140 R15: 0000000000000000\n FS: 00007f991cff9400(0000) GS:ffff8d6f1f700000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00000000000000c0 CR3: 0000000114888005 CR4: 00000000001706e0\n Call Trace:\n \n ? aa_sk_perm+0x43/0x1b0\n xsk_sendmsg+0xf0/0x110\n sock_sendmsg+0x65/0x70\n __sys_sendto+0x113/0x190\n ? debug_smp_processor_id+0x17/0x20\n ? fpregs_assert_state_consistent+0x23/0x50\n ? exit_to_user_mode_prepare+0xa5/0x1d0\n __x64_sys_sendto+0x29/0x30\n do_syscall_64+0x3b/0xc0\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nThere are two problems with the current code. First, setting xs->dev to NULL\nbefore waiting for all users to stop using the socket is not correct. The\nentry to the data plane functions xsk_poll(), xsk_sendmsg(), and xsk_recvmsg()\nare all guarded by a test that xs->state is in the state XSK_BOUND and if not,\nit returns right away. But one process might have passed this test but still\nhave not gotten to the point in which it uses xs->dev in the code. In this\ninterim, a second process executing xsk_unbind_dev() might have set xs->dev to\nNULL which will lead to a crash for the first process. The solution here is\njust to get rid of this NULL assignment since it is not used anymore. Before\ncommit 42fddcc7c64b (\"xsk: use state member for socket synchronization\"),\nxs->dev was the gatekeeper to admit processes into the data plane functions,\nbut it was replaced with the state variable xs->state in the aforementioned\ncommit.\n\nThe second problem is that synchronize_net() does not wait for any process in\nxsk_poll(), xsk_sendmsg(), or xsk_recvmsg() to complete, which means that the\nstate they rely on might be cleaned up prematurely. This can happen when the\nnotifier gets called (at driver unload for example) as it uses xsk_unbind_dev().\nSolve this by extending the RCU critical region from just the ndo_xsk_wakeup\nto the whole functions mentioned above, so that both the test of xs->state ==\nXSK_BOUND and the last use of any member of xs is covered by the RCU critical\nsection. This will guarantee that when synchronize_net() completes, there will\nbe no processes left executing xsk_poll(), xsk_sendmsg(), or xsk_recvmsg() and\nstate can be cleaned up safely. Note that we need to drop the RCU lock for the\nskb xmit path as it uses functions that might sleep. Due to this, we have to\nretest the xs->state after we grab the mutex that protects the skb xmit code\nfrom, among a number of things, an xsk_unbind_dev() being executed from the\nnotifier at the same time."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/18b1ab7aa76bde181bdb1ab19a87fa9523c32f21",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8a2dea162b92c322f3e42eae0c4a74b8d20aa7a9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ad7219cd8751bd258b9d1e69ae0654ec00f71875",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d1579253ffce39986e7a6ab757ac93b2680a665f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49216.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49216.json
new file mode 100644
index 00000000000..fd1419ce516
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49216.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49216",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:58.687",
+ "lastModified": "2025-02-26T07:00:58.687",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/tegra: Fix reference leak in tegra_dsi_ganged_probe\n\nThe reference taken by 'of_find_device_by_node()' must be released when\nnot needed anymore. Add put_device() call to fix this."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0e2f4e434e71dffd1085c3dccd676514bd71d316",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1e06710c43a090f14bb67714265a01cd1d7a37c5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/221e3638feb8bc42143833c9a704fa89b6c366bb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2d6ae8b747fe55f54de4a4441d636974aa53f56a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5e8fdb6392d945d33fef959eab73f8c34bc0a63b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/852c1f5f3119a38ee68e319bab10277fc1ab06b7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a725070701883fe62266ee6d2f31d67e6cdd31df",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cd78b74031cbc94133965f1017deb822657fc1a6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f3c99c686e098300c246e5e8a1474133e3dacb05",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49217.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49217.json
new file mode 100644
index 00000000000..17169cad762
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49217.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49217",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:58.787",
+ "lastModified": "2025-02-26T07:00:58.787",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: pm8001: Fix abort all task initialization\n\nIn pm80xx_send_abort_all(), the n_elem field of the ccb used is not\ninitialized to 0. This missing initialization sometimes lead to the task\ncompletion path seeing the ccb with a non-zero n_elem resulting in the\nexecution of invalid dma_unmap_sg() calls in pm8001_ccb_task_free(),\ncausing a crash such as:\n\n[ 197.676341] RIP: 0010:iommu_dma_unmap_sg+0x6d/0x280\n[ 197.700204] RSP: 0018:ffff889bbcf89c88 EFLAGS: 00010012\n[ 197.705485] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff83d0bda0\n[ 197.712687] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffff88810dffc0d0\n[ 197.719887] RBP: 0000000000000000 R08: 0000000000000000 R09: ffff8881c790098b\n[ 197.727089] R10: ffffed1038f20131 R11: 0000000000000001 R12: 0000000000000000\n[ 197.734296] R13: ffff88810dffc0d0 R14: 0000000000000010 R15: 0000000000000000\n[ 197.741493] FS: 0000000000000000(0000) GS:ffff889bbcf80000(0000) knlGS:0000000000000000\n[ 197.749659] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 197.755459] CR2: 00007f16c1b42734 CR3: 0000000004814000 CR4: 0000000000350ee0\n[ 197.762656] Call Trace:\n[ 197.765127] \n[ 197.767162] pm8001_ccb_task_free+0x5f1/0x820 [pm80xx]\n[ 197.772364] ? do_raw_spin_unlock+0x54/0x220\n[ 197.776680] pm8001_mpi_task_abort_resp+0x2ce/0x4f0 [pm80xx]\n[ 197.782406] process_oq+0xe85/0x7890 [pm80xx]\n[ 197.786817] ? lock_acquire+0x194/0x490\n[ 197.790697] ? handle_irq_event+0x10e/0x1b0\n[ 197.794920] ? mpi_sata_completion+0x2d70/0x2d70 [pm80xx]\n[ 197.800378] ? __wake_up_bit+0x100/0x100\n[ 197.804340] ? lock_is_held_type+0x98/0x110\n[ 197.808565] pm80xx_chip_isr+0x94/0x130 [pm80xx]\n[ 197.813243] tasklet_action_common.constprop.0+0x24b/0x2f0\n[ 197.818785] __do_softirq+0x1b5/0x82d\n[ 197.822485] ? do_raw_spin_unlock+0x54/0x220\n[ 197.826799] __irq_exit_rcu+0x17e/0x1e0\n[ 197.830678] irq_exit_rcu+0xa/0x20\n[ 197.834114] common_interrupt+0x78/0x90\n[ 197.840051] \n[ 197.844236] \n[ 197.848397] asm_common_interrupt+0x1e/0x40\n\nAvoid this issue by always initializing the ccb n_elem field to 0 in\npm8001_send_abort_all(), pm8001_send_read_log() and\npm80xx_send_abort_all()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/16cd02e0951b520bef324adb9a35afcc92501caf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1824a21b2cedc5774a5adfa74f5f7b90472d8677",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/279f318bd7d6e04e6e0bc7b8cd8e190da8fa37a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/326d894adf89f3c707b7784becbe241830daaab6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/765674e3b30121782a2b792684554baa48c61f5e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7f12845c8389855dbcc67baa068b6832dc4a396e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9914461db82caee6c519acfbe10a86fe11bcdeca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c8db786858d895ac58342f67767b4999ae6538fa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d6ec4471550cc53e96485a7124c5891e6a38d1c3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49218.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49218.json
new file mode 100644
index 00000000000..a43524aeca0
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49218.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49218",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:58.890",
+ "lastModified": "2025-02-26T07:00:58.890",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp: Fix OOB read when handling Post Cursor2 register\n\nThe link_status array was not large enough to read the Adjust Request\nPost Cursor2 register, so remove the common helper function to avoid\nan OOB read, found with a -Warray-bounds build:\n\ndrivers/gpu/drm/drm_dp_helper.c: In function 'drm_dp_get_adjust_request_post_cursor':\ndrivers/gpu/drm/drm_dp_helper.c:59:27: error: array subscript 10 is outside array bounds of 'const u8[6]' {aka 'const unsigned char[6]'} [-Werror=array-bounds]\n 59 | return link_status[r - DP_LANE0_1_STATUS];\n | ~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~\ndrivers/gpu/drm/drm_dp_helper.c:147:51: note: while referencing 'link_status'\n 147 | u8 drm_dp_get_adjust_request_post_cursor(const u8 link_status[DP_LINK_STATUS_SIZE],\n | ~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n\nReplace the only user of the helper with an open-coded fetch and decode,\nsimilar to drivers/gpu/drm/amd/display/dc/core/dc_link_dp.c."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/a2151490cc6c57b368d7974ffd447a8b36ade639",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aeaed9a9fe694f8b1462fb81e2d33298c929180b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49219.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49219.json
new file mode 100644
index 00000000000..cd0b3b8754d
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49219.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49219",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:58.977",
+ "lastModified": "2025-02-26T07:00:58.977",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvfio/pci: fix memory leak during D3hot to D0 transition\n\nIf 'vfio_pci_core_device::needs_pm_restore' is set (PCI device does\nnot have No_Soft_Reset bit set in its PMCSR config register), then\nthe current PCI state will be saved locally in\n'vfio_pci_core_device::pm_save' during D0->D3hot transition and same\nwill be restored back during D3hot->D0 transition.\nFor saving the PCI state locally, pci_store_saved_state() is being\nused and the pci_load_and_free_saved_state() will free the allocated\nmemory.\n\nBut for reset related IOCTLs, vfio driver calls PCI reset-related\nAPI's which will internally change the PCI power state back to D0. So,\nwhen the guest resumes, then it will get the current state as D0 and it\nwill skip the call to vfio_pci_set_power_state() for changing the\npower state to D0 explicitly. In this case, the memory pointed by\n'pm_save' will never be freed. In a malicious sequence, the state changing\nto D3hot followed by VFIO_DEVICE_RESET/VFIO_DEVICE_PCI_HOT_RESET can be\nrun in a loop and it can cause an OOM situation.\n\nThis patch frees the earlier allocated memory first before overwriting\n'pm_save' to prevent the mentioned memory leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/26ddd196e9eb264da8e1bdc4df8a94d62581c8b5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4319f17fb8264ba39352b611dfa913a4d8c1d1a0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c8a1f8bd586ee31020614b8d48b702ece3e2ae44",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eadf88ecf6ac7d6a9f47a76c6055d9a1987a8991",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49220.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49220.json
new file mode 100644
index 00000000000..b7db20170d7
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49220.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49220",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:59.070",
+ "lastModified": "2025-02-26T07:00:59.070",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndax: make sure inodes are flushed before destroy cache\n\nA bug can be triggered by following command\n\n$ modprobe nd_pmem && modprobe -r nd_pmem\n\n[ 10.060014] BUG dax_cache (Not tainted): Objects remaining in dax_cache on __kmem_cache_shutdown()\n[ 10.060938] Slab 0x0000000085b729ac objects=9 used=1 fp=0x000000004f5ae469 flags=0x200000000010200(slab|head|node)\n[ 10.062433] Call Trace:\n[ 10.062673] dump_stack_lvl+0x34/0x44\n[ 10.062865] slab_err+0x90/0xd0\n[ 10.063619] __kmem_cache_shutdown+0x13b/0x2f0\n[ 10.063848] kmem_cache_destroy+0x4a/0x110\n[ 10.064058] __x64_sys_delete_module+0x265/0x300\n\nThis is caused by dax_fs_exit() not flushing inodes before destroy cache.\nTo fix this issue, call rcu_barrier() before destroy cache."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/770d42fff12d8595adda9025a0b92091f543e775",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a7e8de822e0b1979f08767c751f6c8a9c1d4ad86",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b786abe7c67c6ef71410c8e23292b3091d616ad1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e2951eaa9398415ac054b7bd80b8163b6838ead4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ec376f5c11c88c0215d173599db8449cd4196759",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f2a1e0eb70c2d954176c07d75d28742bde30e9f3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49221.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49221.json
new file mode 100644
index 00000000000..7918ef040a8
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49221.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49221",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:59.167",
+ "lastModified": "2025-02-26T07:00:59.167",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/dp: populate connector of struct dp_panel\n\nDP CTS test case 4.2.2.6 has valid edid with bad checksum on purpose\nand expect DP source return correct checksum. During drm edid read,\ncorrect edid checksum is calculated and stored at\nconnector::real_edid_checksum.\n\nThe problem is struct dp_panel::connector never be assigned, instead the\nconnector is stored in struct msm_dp::connector. When we run compliance\ntesting test case 4.2.2.6 dp_panel_handle_sink_request() won't have a valid\nedid set in struct dp_panel::edid so we'll try to use the connectors\nreal_edid_checksum and hit a NULL pointer dereference error because the\nconnector pointer is never assigned.\n\nChanges in V2:\n-- populate panel connector at msm_dp_modeset_init() instead of at dp_panel_read_sink_caps()\n\nChanges in V3:\n-- remove unhelpful kernel crash trace commit text\n-- remove renaming dp_display parameter to dp\n\nChanges in V4:\n-- add more details to commit text\n\nChanges in v10:\n-- group into one series\n\nChanges in v11:\n-- drop drm/msm/dp: dp_link_parse_sink_count() return immediately if aux read\n\nSignee-off-by: Kuogee Hsieh "
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/104074ebc0c3f358dd1ee944fbcde92c6e5a21dd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/413c62697b61226a236c8b1f5cd64dcf42bcc12f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5e602f5156910c7b19661699896cb6e3fb94fab9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9525b8bcae8b99188990b56484799cf4b1b43786",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fbba600f432a360b42452fee79d1fb35d3aa8aeb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49222.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49222.json
new file mode 100644
index 00000000000..e79f79ad632
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49222.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49222",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:59.260",
+ "lastModified": "2025-02-26T07:00:59.260",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: anx7625: Fix overflow issue on reading EDID\n\nThe length of EDID block can be longer than 256 bytes, so we should use\n`int` instead of `u8` for the `edid_pos` variable."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/64c06df2428bb7bb3d8cf5691416001af42d94dd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5c6f647aec9ed524aedd04a3aec5ebc21d39007",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/db1c47d299298a7c52ccb201905d6be979fd7507",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f0d5d938d51af4eb08d9d8684fd9903425a0a87d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49223.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49223.json
new file mode 100644
index 00000000000..7ed3d3e4ce8
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49223.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49223",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:59.363",
+ "lastModified": "2025-02-26T07:00:59.363",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncxl/port: Hold port reference until decoder release\n\nKASAN + DEBUG_KOBJECT_RELEASE reports a potential use-after-free in\ncxl_decoder_release() where it goes to reference its parent, a cxl_port,\nto free its id back to port->decoder_ida.\n\n BUG: KASAN: use-after-free in to_cxl_port+0x18/0x90 [cxl_core]\n Read of size 8 at addr ffff888119270908 by task kworker/35:2/379\n\n CPU: 35 PID: 379 Comm: kworker/35:2 Tainted: G OE 5.17.0-rc2+ #198\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015\n Workqueue: events kobject_delayed_cleanup\n Call Trace:\n \n dump_stack_lvl+0x59/0x73\n print_address_description.constprop.0+0x1f/0x150\n ? to_cxl_port+0x18/0x90 [cxl_core]\n kasan_report.cold+0x83/0xdf\n ? to_cxl_port+0x18/0x90 [cxl_core]\n to_cxl_port+0x18/0x90 [cxl_core]\n cxl_decoder_release+0x2a/0x60 [cxl_core]\n device_release+0x5f/0x100\n kobject_cleanup+0x80/0x1c0\n\nThe device core only guarantees parent lifetime until all children are\nunregistered. If a child needs a parent to complete its ->release()\ncallback that child needs to hold a reference to extend the lifetime of\nthe parent."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/49f2dab77a5e1354f5da6ccdc9346a8212697be2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/518bb96367123062b48b0a9842f2864249b565f6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/74be98774dfbc5b8b795db726bd772e735d2edd4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b0022ca445d5fc4d0c89d15dcd0f855977b22c1d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49224.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49224.json
new file mode 100644
index 00000000000..4f5c6ccf6bb
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49224.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49224",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:59.457",
+ "lastModified": "2025-02-26T07:00:59.457",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init\n\nkobject_init_and_add() takes reference even when it fails.\nAccording to the doc of kobject_init_and_add()\uff1a\n\n If this function returns an error, kobject_put() must be called to\n properly clean up the memory associated with the object.\n\nFix memory leak by calling kobject_put()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/19aa3c98ed7b2616e105946cec804f897837ab84",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/261041097ab3470f1120b7733cbf472712304d1e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/31cdf7897dba1f096b74f69d840f0575b8cdb9ae",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/41ed61364285ff38bbbe9ca8a45c8372ba72921d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6a4760463dbc6b603690938c468839985189ce0a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/879356a6a05559582b0a7895d86d2d4359745c08",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c32f6b6196b6efc1c68990dfeaac36fb8eb3b8e1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/db3a61ef8e6aef3b888baa6a85926c2230c2cc56",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ffb8e92b4cef92bd25563cf3d8b4489eb22bc61f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49225.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49225.json
new file mode 100644
index 00000000000..f23ccb5c214
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49225.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49225",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:59.563",
+ "lastModified": "2025-02-26T07:00:59.563",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmt76: mt7921s: fix a possible memory leak in mt7921_load_patch\n\nAlways release fw data at the end of mt7921_load_patch routine."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/11005b18f453aa192d035d410c11d07edcba5a45",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b301043384c5c2447357952be9a536c2026d8ad0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49226.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49226.json
new file mode 100644
index 00000000000..e8cad5ab71f
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49226.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49226",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:59.650",
+ "lastModified": "2025-02-26T07:00:59.650",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: asix: add proper error handling of usb read errors\n\nSyzbot once again hit uninit value in asix driver. The problem still the\nsame -- asix_read_cmd() reads less bytes, than was requested by caller.\n\nSince all read requests are performed via asix_read_cmd() let's catch\nusb related error there and add __must_check notation to be sure all\ncallers actually check return value.\n\nSo, this patch adds sanity check inside asix_read_cmd(), that simply\nchecks if bytes read are not less, than was requested and adds missing\nerror handling of asix_read_cmd() all across the driver code."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/662ff765470ad0d11a1153d6d8e99d69a98e60b4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/920a9fa27e7805499cfe78491b36fed2322c02ec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9ea8d2fca8fea3b17005b4dc02f8ef15f7a2fb97",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b96a7265f763b37ff3138b9ca8122a950f13b00e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49227.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49227.json
new file mode 100644
index 00000000000..b9502e484c7
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49227.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49227",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:59.747",
+ "lastModified": "2025-02-26T07:00:59.747",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nigc: avoid kernel warning when changing RX ring parameters\n\nCalling ethtool changing the RX ring parameters like this:\n\n $ ethtool -G eth0 rx 1024\n\non igc triggers kernel warnings like this:\n\n[ 225.198467] ------------[ cut here ]------------\n[ 225.198473] Missing unregister, handled but fix driver\n[ 225.198485] WARNING: CPU: 7 PID: 959 at net/core/xdp.c:168\nxdp_rxq_info_reg+0x79/0xd0\n[...]\n[ 225.198601] Call Trace:\n[ 225.198604] \n[ 225.198609] igc_setup_rx_resources+0x3f/0xe0 [igc]\n[ 225.198617] igc_ethtool_set_ringparam+0x30e/0x450 [igc]\n[ 225.198626] ethnl_set_rings+0x18a/0x250\n[ 225.198631] genl_family_rcv_msg_doit+0xca/0x110\n[ 225.198637] genl_rcv_msg+0xce/0x1c0\n[ 225.198640] ? rings_prepare_data+0x60/0x60\n[ 225.198644] ? genl_get_cmd+0xd0/0xd0\n[ 225.198647] netlink_rcv_skb+0x4e/0xf0\n[ 225.198652] genl_rcv+0x24/0x40\n[ 225.198655] netlink_unicast+0x20e/0x330\n[ 225.198659] netlink_sendmsg+0x23f/0x480\n[ 225.198663] sock_sendmsg+0x5b/0x60\n[ 225.198667] __sys_sendto+0xf0/0x160\n[ 225.198671] ? handle_mm_fault+0xb2/0x280\n[ 225.198676] ? do_user_addr_fault+0x1eb/0x690\n[ 225.198680] __x64_sys_sendto+0x20/0x30\n[ 225.198683] do_syscall_64+0x38/0x90\n[ 225.198687] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[ 225.198693] RIP: 0033:0x7f7ae38ac3aa\n\nigc_ethtool_set_ringparam() copies the igc_ring structure but neglects to\nreset the xdp_rxq_info member before calling igc_setup_rx_resources().\nThis in turn calls xdp_rxq_info_reg() with an already registered xdp_rxq_info.\n\nMake sure to unregister the xdp_rxq_info structure first in\nigc_setup_rx_resources."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3ddb49af08094ebee250b461172ee7b8e27a35d3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/453307b569a0d41bddd07f26bf41b784cd82a4c9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/65aebcf1e05bd97d2e7ffcdff36efea1757c9450",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ab8c107470d12e7ef99030bf0911a10cdef62d16",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49228.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49228.json
new file mode 100644
index 00000000000..f4c244021fd
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49228.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49228",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:59.840",
+ "lastModified": "2025-02-26T07:00:59.840",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix a btf decl_tag bug when tagging a function\n\nsyzbot reported a btf decl_tag bug with stack trace below:\n\n general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN\n KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\n CPU: 0 PID: 3592 Comm: syz-executor914 Not tainted 5.16.0-syzkaller-11424-gb7892f7d5cb2 #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\n RIP: 0010:btf_type_vlen include/linux/btf.h:231 [inline]\n RIP: 0010:btf_decl_tag_resolve+0x83e/0xaa0 kernel/bpf/btf.c:3910\n ...\n Call Trace:\n \n btf_resolve+0x251/0x1020 kernel/bpf/btf.c:4198\n btf_check_all_types kernel/bpf/btf.c:4239 [inline]\n btf_parse_type_sec kernel/bpf/btf.c:4280 [inline]\n btf_parse kernel/bpf/btf.c:4513 [inline]\n btf_new_fd+0x19fe/0x2370 kernel/bpf/btf.c:6047\n bpf_btf_load kernel/bpf/syscall.c:4039 [inline]\n __sys_bpf+0x1cbb/0x5970 kernel/bpf/syscall.c:4679\n __do_sys_bpf kernel/bpf/syscall.c:4738 [inline]\n __se_sys_bpf kernel/bpf/syscall.c:4736 [inline]\n __x64_sys_bpf+0x75/0xb0 kernel/bpf/syscall.c:4736\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nThe kasan error is triggered with an illegal BTF like below:\n type 0: void\n type 1: int\n type 2: decl_tag to func type 3\n type 3: func to func_proto type 8\nThe total number of types is 4 and the type 3 is illegal\nsince its func_proto type is out of range.\n\nCurrently, the target type of decl_tag can be struct/union, var or func.\nBoth struct/union and var implemented their own 'resolve' callback functions\nand hence handled properly in kernel.\nBut func type doesn't have 'resolve' callback function. When\nbtf_decl_tag_resolve() tries to check func type, it tries to get\nvlen of its func_proto type, which triggered the above kasan error.\n\nTo fix the issue, btf_decl_tag_resolve() needs to do btf_func_check()\nbefore trying to accessing func_proto type.\nIn the current implementation, func type is checked with\nbtf_func_check() in the main checking function btf_check_all_types().\nTo fix the above kasan issue, let us implement 'resolve' callback\nfunc type properly. The 'resolve' callback will be also called\nin btf_check_all_types() for func types."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/796d5666f6422ddadc938fb888044fcc16f2dbe3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a3bcd2110c087bc62e90fddd4a93237b049d6e68",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d7e7b42f4f956f2c68ad8cda87d750093dbba737",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49229.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49229.json
new file mode 100644
index 00000000000..58dd0d38b53
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49229.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49229",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:00:59.943",
+ "lastModified": "2025-02-26T07:00:59.943",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nptp: unregister virtual clocks when unregistering physical clock.\n\nWhen unregistering a physical clock which has some virtual clocks,\nunregister the virtual clocks with it.\n\nThis fixes the following oops, which can be triggered by unloading\na driver providing a PTP clock when it has enabled virtual clocks:\n\nBUG: unable to handle page fault for address: ffffffffc04fc4d8\nOops: 0000 [#1] PREEMPT SMP NOPTI\nRIP: 0010:ptp_vclock_read+0x31/0xb0\nCall Trace:\n timecounter_read+0xf/0x50\n ptp_vclock_refresh+0x2c/0x50\n ? ptp_clock_release+0x40/0x40\n ptp_aux_kworker+0x17/0x30\n kthread_worker_fn+0x9b/0x240\n ? kthread_should_park+0x30/0x30\n kthread+0xe2/0x110\n ? kthread_complete_and_exit+0x20/0x20\n ret_from_fork+0x22/0x30"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/9c796a57cbb5daf124a665689f0b2bc9262e0ced",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b2dea2a696d09163da4cd33cb598ce1f73e86597",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bfcbb76b0f595ea9ede9f7a218086fef85242f10",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c49eafe6249f844c26f9866886cc6719d81762df",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49230.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49230.json
new file mode 100644
index 00000000000..7e08c77feef
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49230.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49230",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:00.037",
+ "lastModified": "2025-02-26T07:01:00.037",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmt76: mt7915: fix possible memory leak in mt7915_mcu_add_sta\n\nFree allocated skb in mt7915_mcu_add_sta routine in case of failures."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/a43736cd12d82913102eb49cb56787a5553e028f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b334a245ff1d76b1e97af8cea648ea6798b9eb87",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/daf02c7e3c3dc82ffa925999597bd455cf799551",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49231.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49231.json
new file mode 100644
index 00000000000..cff158c3e7c
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49231.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49231",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:00.130",
+ "lastModified": "2025-02-26T07:01:00.130",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtw88: fix memory overrun and memory leak during hw_scan\n\nPreviously we allocated less memory than actual required, overwrite\nto the buffer causes the mm module to complaint and raise access\nviolation faults. Along with potential memory leaks when returned\nearly. Fix these by passing the correct size and proper deinit flow."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/d95984b5580dcb8b1c0036577c52b609990a1dab",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ec5da191bfcd5fd22b95459b623694f66c1cc10b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49232.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49232.json
new file mode 100644
index 00000000000..e898146478d
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49232.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49232",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:00.217",
+ "lastModified": "2025-02-26T07:01:00.217",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()\n\nIn amdgpu_dm_connector_add_common_modes(), amdgpu_dm_create_common_mode()\nis assigned to mode and is passed to drm_mode_probed_add() directly after\nthat. drm_mode_probed_add() passes &mode->head to list_add_tail(), and\nthere is a dereference of it in list_add_tail() without recoveries, which\ncould lead to NULL pointer dereference on failure of\namdgpu_dm_create_common_mode().\n\nFix this by adding a NULL check of mode.\n\nThis bug was found by a static analyzer.\n\nBuilds with 'make allyesconfig' show no new warnings,\nand our static analyzer no longer warns about this code."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/19a7eba284790cfbba2945deb2363cf03ce41648",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2c729dec8c1e3e2892fde5ce8181553860914e74",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/57f4ad5e286fe4599c8fc63cf89f85f9eec7f9c9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/588a70177df3b1777484267584ef38ab2ca899a2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/639b3b9def0a6a3f316a195d705d14113236e89c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bdc7429708a0772d90c208975694f7c2133b1202",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f4eaa999fec78dec2a9c2d797438e05cbffb125b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49233.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49233.json
new file mode 100644
index 00000000000..357d040d3ad
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49233.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49233",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:00.317",
+ "lastModified": "2025-02-26T07:01:00.317",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Call dc_stream_release for remove link enc assignment\n\n[Why]\nA porting error resulted in the stream assignment for the link\nbeing retained without being released - a memory leak.\n\n[How]\nFix the porting error by adding back the dc_stream_release() intended\nas part of the original patch."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/a28b7b6a0c827ce672edcdb5b2b5916b0beebe03",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f2bde8349c35d01d7c50456ea06a5c7d5e0e5ed0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49234.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49234.json
new file mode 100644
index 00000000000..70e76a578ea
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49234.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49234",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:00.407",
+ "lastModified": "2025-02-26T07:01:00.407",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: Avoid cross-chip syncing of VLAN filtering\n\nChanges to VLAN filtering are not applicable to cross-chip\nnotifications.\n\nOn a system like this:\n\n.-----. .-----. .-----.\n| sw1 +---+ sw2 +---+ sw3 |\n'-1-2-' '-1-2-' '-1-2-'\n\nBefore this change, upon sw1p1 leaving a bridge, a call to\ndsa_port_vlan_filtering would also be made to sw2p1 and sw3p1.\n\nIn this scenario:\n\n.---------. .-----. .-----.\n| sw1 +---+ sw2 +---+ sw3 |\n'-1-2-3-4-' '-1-2-' '-1-2-'\n\nWhen sw1p4 would leave a bridge, dsa_port_vlan_filtering would be\ncalled for sw2 and sw3 with a non-existing port - leading to array\nout-of-bounds accesses and crashes on mv88e6xxx."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/108dc8741c203e9d6ce4e973367f1bac20c7192b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e1f2a4dd8d433eec393d09273a78a3d3551339cf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49235.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49235.json
new file mode 100644
index 00000000000..1acd8ae1310
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49235.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49235",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:00.500",
+ "lastModified": "2025-02-26T07:01:00.500",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nath9k_htc: fix uninit value bugs\n\nSyzbot reported 2 KMSAN bugs in ath9k. All of them are caused by missing\nfield initialization.\n\nIn htc_connect_service() svc_meta_len and pad are not initialized. Based\non code it looks like in current skb there is no service data, so simply\ninitialize svc_meta_len to 0.\n\nhtc_issue_send() does not initialize htc_frame_hdr::control array. Based\non firmware code, it will initialize it by itself, so simply zero whole\narray to make KMSAN happy\n\nFail logs:\n\nBUG: KMSAN: kernel-usb-infoleak in usb_submit_urb+0x6c1/0x2aa0 drivers/usb/core/urb.c:430\n usb_submit_urb+0x6c1/0x2aa0 drivers/usb/core/urb.c:430\n hif_usb_send_regout drivers/net/wireless/ath/ath9k/hif_usb.c:127 [inline]\n hif_usb_send+0x5f0/0x16f0 drivers/net/wireless/ath/ath9k/hif_usb.c:479\n htc_issue_send drivers/net/wireless/ath/ath9k/htc_hst.c:34 [inline]\n htc_connect_service+0x143e/0x1960 drivers/net/wireless/ath/ath9k/htc_hst.c:275\n...\n\nUninit was created at:\n slab_post_alloc_hook mm/slab.h:524 [inline]\n slab_alloc_node mm/slub.c:3251 [inline]\n __kmalloc_node_track_caller+0xe0c/0x1510 mm/slub.c:4974\n kmalloc_reserve net/core/skbuff.c:354 [inline]\n __alloc_skb+0x545/0xf90 net/core/skbuff.c:426\n alloc_skb include/linux/skbuff.h:1126 [inline]\n htc_connect_service+0x1029/0x1960 drivers/net/wireless/ath/ath9k/htc_hst.c:258\n...\n\nBytes 4-7 of 18 are uninitialized\nMemory access of size 18 starts at ffff888027377e00\n\nBUG: KMSAN: kernel-usb-infoleak in usb_submit_urb+0x6c1/0x2aa0 drivers/usb/core/urb.c:430\n usb_submit_urb+0x6c1/0x2aa0 drivers/usb/core/urb.c:430\n hif_usb_send_regout drivers/net/wireless/ath/ath9k/hif_usb.c:127 [inline]\n hif_usb_send+0x5f0/0x16f0 drivers/net/wireless/ath/ath9k/hif_usb.c:479\n htc_issue_send drivers/net/wireless/ath/ath9k/htc_hst.c:34 [inline]\n htc_connect_service+0x143e/0x1960 drivers/net/wireless/ath/ath9k/htc_hst.c:275\n...\n\nUninit was created at:\n slab_post_alloc_hook mm/slab.h:524 [inline]\n slab_alloc_node mm/slub.c:3251 [inline]\n __kmalloc_node_track_caller+0xe0c/0x1510 mm/slub.c:4974\n kmalloc_reserve net/core/skbuff.c:354 [inline]\n __alloc_skb+0x545/0xf90 net/core/skbuff.c:426\n alloc_skb include/linux/skbuff.h:1126 [inline]\n htc_connect_service+0x1029/0x1960 drivers/net/wireless/ath/ath9k/htc_hst.c:258\n...\n\nBytes 16-17 of 18 are uninitialized\nMemory access of size 18 starts at ffff888027377e00"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0b700f7d06492de34964b6f414120043364f8191",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/11f11ac281f0c0b363d2940204f28bae0422ed71",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4d244b731188e0b63fc40a9d2dec72e9181fb37c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5abf2b761b998063f5e2bae93fd4ab10e2a80f10",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5c2a6a8daa17a3f65b38b9a5574bb362c13fa1d9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7da6169b6ebb75816b57be3beb829afa74f3b4b6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d1e0df1c57bd30871dd1c855742a7c346dbca853",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e352acdd378e9263cc4c6018e588f2dac7161d07",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ee4222052a76559c20e821bc3519cefb58b6d3e9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49236.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49236.json
new file mode 100644
index 00000000000..4834a8e309f
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49236.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49236",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:00.600",
+ "lastModified": "2025-02-26T07:01:00.600",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix UAF due to race between btf_try_get_module and load_module\n\nWhile working on code to populate kfunc BTF ID sets for module BTF from\nits initcall, I noticed that by the time the initcall is invoked, the\nmodule BTF can already be seen by userspace (and the BPF verifier). The\nexisting btf_try_get_module calls try_module_get which only fails if\nmod->state == MODULE_STATE_GOING, i.e. it can increment module reference\nwhen module initcall is happening in parallel.\n\nCurrently, BTF parsing happens from MODULE_STATE_COMING notifier\ncallback. At this point, the module initcalls have not been invoked.\nThe notifier callback parses and prepares the module BTF, allocates an\nID, which publishes it to userspace, and then adds it to the btf_modules\nlist allowing the kernel to invoke btf_try_get_module for the BTF.\n\nHowever, at this point, the module has not been fully initialized (i.e.\nits initcalls have not finished). The code in module.c can still fail\nand free the module, without caring for other users. However, nothing\nstops btf_try_get_module from succeeding between the state transition\nfrom MODULE_STATE_COMING to MODULE_STATE_LIVE.\n\nThis leads to a use-after-free issue when BPF program loads\nsuccessfully in the state transition, load_module's do_init_module call\nfails and frees the module, and BPF program fd on close calls module_put\nfor the freed module. Future patch has test case to verify we don't\nregress in this area in future.\n\nThere are multiple points after prepare_coming_module (in load_module)\nwhere failure can occur and module loading can return error. We\nillustrate and test for the race using the last point where it can\npractically occur (in module __init function).\n\nAn illustration of the race:\n\nCPU 0 CPU 1\n\t\t\t load_module\n\t\t\t notifier_call(MODULE_STATE_COMING)\n\t\t\t btf_parse_module\n\t\t\t btf_alloc_id\t// Published to userspace\n\t\t\t list_add(&btf_mod->list, btf_modules)\n\t\t\t mod->init(...)\n...\t\t\t\t^\nbpf_check\t\t |\ncheck_pseudo_btf_id |\n btf_try_get_module |\n returns true | ...\n... | module __init in progress\nreturn prog_fd | ...\n... V\n\t\t\t if (ret < 0)\n\t\t\t free_module(mod)\n\t\t\t ...\nclose(prog_fd)\n ...\n bpf_prog_free_deferred\n module_put(used_btf.mod) // use-after-free\n\nWe fix this issue by setting a flag BTF_MODULE_F_LIVE, from the notifier\ncallback when MODULE_STATE_LIVE state is reached for the module, so that\nwe return NULL from btf_try_get_module for modules that are not fully\nformed. Since try_module_get already checks that module is not in\nMODULE_STATE_GOING state, and that is the only transition a live module\ncan make before being removed from btf_modules list, this is enough to\nclose the race and prevent the bug.\n\nA later selftest patch crafts the race condition artifically to verify\nthat it has been fixed, and that verifier fails to load program (with\nENXIO).\n\nLastly, a couple of comments:\n\n 1. Even if this race didn't exist, it seems more appropriate to only\n access resources (ksyms and kfuncs) of a fully formed module which\n has been initialized completely.\n\n 2. This patch was born out of need for synchronization against module\n initcall for the next patch, so it is needed for correctness even\n without the aforementioned race condition. The BTF resources\n initialized by module initcall are set up once and then only looked\n up, so just waiting until the initcall has finished ensures correct\n behavior."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0481baa2318cb1ab13277715da6cdbb657807b3f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/18688de203b47e5d8d9d0953385bf30b5949324f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/51b82141fffa454abf937a8ff0b8af89e4fd0c8f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d7fccf264b1a785525b366a5b7f8113c756187ad",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49237.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49237.json
new file mode 100644
index 00000000000..4332282c671
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49237.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49237",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:00.700",
+ "lastModified": "2025-02-26T07:01:00.700",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nath11k: add missing of_node_put() to avoid leak\n\nThe node pointer is returned by of_find_node_by_type()\nor of_parse_phandle() with refcount incremented. Calling\nof_node_put() to aovid the refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3d38faef0de1756994b3d95e47b2302842f729e2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7d51cb010b20d70b16dc6e4341bf29d6c5b32564",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49238.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49238.json
new file mode 100644
index 00000000000..70377030ede
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49238.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49238",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:00.790",
+ "lastModified": "2025-02-26T07:01:00.790",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nath11k: free peer for station when disconnect from AP for QCA6390/WCN6855\n\nCommit b4a0f54156ac (\"ath11k: move peer delete after vdev stop of station\nfor QCA6390 and WCN6855\") is to fix firmware crash by changing the WMI\ncommand sequence, but actually skip all the peer delete operation, then\nit lead commit 58595c9874c6 (\"ath11k: Fixing dangling pointer issue upon\npeer delete failure\") not take effect, and then happened a use-after-free\nwarning from KASAN. because the peer->sta is not set to NULL and then used\nlater.\n\nChange to only skip the WMI_PEER_DELETE_CMDID for QCA6390/WCN6855.\n\nlog of user-after-free:\n\n[ 534.888665] BUG: KASAN: use-after-free in ath11k_dp_rx_update_peer_stats+0x912/0xc10 [ath11k]\n[ 534.888696] Read of size 8 at addr ffff8881396bb1b8 by task rtcwake/2860\n\n[ 534.888705] CPU: 4 PID: 2860 Comm: rtcwake Kdump: loaded Tainted: G W 5.15.0-wt-ath+ #523\n[ 534.888712] Hardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021\n[ 534.888716] Call Trace:\n[ 534.888720] \n[ 534.888726] dump_stack_lvl+0x57/0x7d\n[ 534.888736] print_address_description.constprop.0+0x1f/0x170\n[ 534.888745] ? ath11k_dp_rx_update_peer_stats+0x912/0xc10 [ath11k]\n[ 534.888771] kasan_report.cold+0x83/0xdf\n[ 534.888783] ? ath11k_dp_rx_update_peer_stats+0x912/0xc10 [ath11k]\n[ 534.888810] ath11k_dp_rx_update_peer_stats+0x912/0xc10 [ath11k]\n[ 534.888840] ath11k_dp_rx_process_mon_status+0x529/0xa70 [ath11k]\n[ 534.888874] ? ath11k_dp_rx_mon_status_bufs_replenish+0x3f0/0x3f0 [ath11k]\n[ 534.888897] ? check_prev_add+0x20f0/0x20f0\n[ 534.888922] ? __lock_acquire+0xb72/0x1870\n[ 534.888937] ? find_held_lock+0x33/0x110\n[ 534.888954] ath11k_dp_rx_process_mon_rings+0x297/0x520 [ath11k]\n[ 534.888981] ? rcu_read_unlock+0x40/0x40\n[ 534.888990] ? ath11k_dp_rx_pdev_alloc+0xd90/0xd90 [ath11k]\n[ 534.889026] ath11k_dp_service_mon_ring+0x67/0xe0 [ath11k]\n[ 534.889053] ? ath11k_dp_rx_process_mon_rings+0x520/0x520 [ath11k]\n[ 534.889075] call_timer_fn+0x167/0x4a0\n[ 534.889084] ? add_timer_on+0x3b0/0x3b0\n[ 534.889103] ? lockdep_hardirqs_on_prepare.part.0+0x18c/0x370\n[ 534.889117] __run_timers.part.0+0x539/0x8b0\n[ 534.889123] ? ath11k_dp_rx_process_mon_rings+0x520/0x520 [ath11k]\n[ 534.889157] ? call_timer_fn+0x4a0/0x4a0\n[ 534.889164] ? mark_lock_irq+0x1c30/0x1c30\n[ 534.889173] ? clockevents_program_event+0xdd/0x280\n[ 534.889189] ? mark_held_locks+0xa5/0xe0\n[ 534.889203] run_timer_softirq+0x97/0x180\n[ 534.889213] __do_softirq+0x276/0x86a\n[ 534.889230] __irq_exit_rcu+0x11c/0x180\n[ 534.889238] irq_exit_rcu+0x5/0x20\n[ 534.889244] sysvec_apic_timer_interrupt+0x8e/0xc0\n[ 534.889251] \n[ 534.889254] \n[ 534.889259] asm_sysvec_apic_timer_interrupt+0x12/0x20\n[ 534.889265] RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70\n[ 534.889271] Code: 74 24 10 e8 ea c2 bf fd 48 89 ef e8 12 53 c0 fd 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 13 a7 b5 fd 65 8b 05 cc d9 9c 5e 85 c0 74 0a 5b 5d c3 e8 a0 ee\n[ 534.889276] RSP: 0018:ffffc90002e5f880 EFLAGS: 00000206\n[ 534.889284] RAX: 0000000000000006 RBX: 0000000000000200 RCX: ffffffff9f256f10\n[ 534.889289] RDX: 0000000000000000 RSI: ffffffffa1c6e420 RDI: 0000000000000001\n[ 534.889293] RBP: ffff8881095e6200 R08: 0000000000000001 R09: ffffffffa40d2b8f\n[ 534.889298] R10: fffffbfff481a571 R11: 0000000000000001 R12: ffff8881095e6e68\n[ 534.889302] R13: ffffc90002e5f908 R14: 0000000000000246 R15: 0000000000000000\n[ 534.889316] ? mark_lock+0xd0/0x14a0\n[ 534.889332] klist_next+0x1d4/0x450\n[ 534.889340] ? dpm_wait_for_subordinate+0x2d0/0x2d0\n[ 534.889350] device_for_each_child+0xa8/0x140\n[ 534.889360] ? device_remove_class_symlinks+0x1b0/0x1b0\n[ 534.889370] ? __lock_release+0x4bd/0x9f0\n[ 534.889378] ? dpm_suspend+0x26b/0x3f0\n[ 534.889390] dpm_wait_for_subordinate+\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/212ad7cb7d7592669c067125949e0a8e31ce6a0b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/400705c50bbf184794c885d1efad7fe9ccf1471a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49239.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49239.json
new file mode 100644
index 00000000000..a7864a823d1
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49239.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49239",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:00.887",
+ "lastModified": "2025-02-26T07:01:00.887",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data\n\nThe device_node pointer is returned by of_parse_phandle() with refcount\nincremented. We should use of_node_put() on it when done.\nThis is similar to commit 64b92de9603f\n(\"ASoC: wcd9335: fix a leaked reference by adding missing of_node_put\")"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1f24716e38220fc9e52e208d20591d2bc9b7f020",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2f44eca78cc6d4e1779eb95765ec79e433accab4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9531a631379169d57756b2411178c6238655df88",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f3793eeb7b94a5eeed6f5c7a44bce403c6681a12",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f8e89d84ea83c51ba3ba97ff154f7aa679326760",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49240.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49240.json
new file mode 100644
index 00000000000..92cad6f6eb7
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49240.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49240",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:00.977",
+ "lastModified": "2025-02-26T07:01:00.977",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mediatek: mt8195: Fix error handling in mt8195_mt6359_rt1019_rt5682_dev_probe\n\nThe device_node pointer is returned by of_parse_phandle() with refcount\nincremented. We should use of_node_put() on it when done.\n\nThis function only calls of_node_put() in the regular path.\nAnd it will cause refcount leak in error path."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/c4b7174fe5bb875a09a78674a14a1589d1a672f3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c652f8f0875b569f8afa80b8cf9762828fd6187b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49241.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49241.json
new file mode 100644
index 00000000000..b0bd4e79217
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49241.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49241",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:01.063",
+ "lastModified": "2025-02-26T07:01:01.063",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe\n\nThe device_node pointer is returned by of_parse_phandle() with refcount\nincremented. We should use of_node_put() on it when done.\n\nThis function only calls of_node_put() in the regular path.\nAnd it will cause refcount leak in error path."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/14228225091a0854b1de23e5b4fe8bdeeca9683b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/740dc3e846537c3743da98bf106f376023fd085c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/90ac679aa6a01841da90ec5a4aaa4b5e0badddf0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f43ad5dc43240289f4cf13c16cc506f4f7087931",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f589063b585ac6dd2081bde6c145411cf48d8d92",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49242.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49242.json
new file mode 100644
index 00000000000..26500dd66dd
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49242.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49242",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:01.153",
+ "lastModified": "2025-02-26T07:01:01.153",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mxs: Fix error handling in mxs_sgtl5000_probe\n\nThis function only calls of_node_put() in the regular path.\nAnd it will cause refcount leak in error paths.\nFor example, when codec_np is NULL, saif_np[0] and saif_np[1]\nare not NULL, it will cause leaks.\n\nof_node_put() will check if the node pointer is NULL, so we can\ncall it directly to release the refcount of regular pointers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/44acdaf7acb60054d872bed18ce0e7db8ce900ce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/67e12f1cb2f97468c12b59e21975eaa0f332e7d2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6ae0a4d8fec551ec581d620f0eb1fe31f755551c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/790d2628e3fcc819d8f5572eb5615113fb2e727a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/86b6cf989437e694fd0a15782b5a513853a739e0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8d880226c86f37624e2a5f3c6d92ac0ec3375f96",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d2923b48d99fe663cb93d8b481c93299fcd68656",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f16ad2c0e22687f80e5981c67374023f51c204b9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f8d38056bcd220ea6f0802a5586d1a12ebcce849",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49243.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49243.json
new file mode 100644
index 00000000000..da797916bf9
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49243.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49243",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:01.250",
+ "lastModified": "2025-02-26T07:01:01.250",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe\n\nThis node pointer is returned by of_parse_phandle() with refcount\nincremented in this function.\nCalling of_node_put() to avoid the refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0325193cf40dc3a6e27d55a5b98680936deebcd0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/32e6ceb05f36432811753852c674a301f944a24b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4793a02deb31b71b3984abc67bf1011a03c13b18",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/662ee5ac6b451aa5a27b8eebd397f2f5c7f42cec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/81f266396237cea09a8c6322a6a78535f06ed345",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a0bc36b247dcf4d21bf820bfc4bcbaf7f6cf19b5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b0c56a0071116a37c24df998166c22a7e4684626",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f590797fa3c1bccdd19e55441592a23b46aef449",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f8b7b9a0594715ecfbe6f18db2328d992242654a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49244.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49244.json
new file mode 100644
index 00000000000..4dae4383759
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49244.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49244",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:01.350",
+ "lastModified": "2025-02-26T07:01:01.350",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192_mt6359_dev_probe\n\nThe device_node pointer is returned by of_parse_phandle() with refcount\nincremented. We should use of_node_put() on it when done.\n\nThis function only calls of_node_put() in the regular path.\nAnd it will cause refcount leak in error paths.\nFix this by calling of_node_put() in error handling too."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1765787ec02e824f4f5e672cf269280a5da09d2f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/87e04a89c31e792eef62bcba6ebb77fd323d28a1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5a38629f1aaf397fd471b27e49d55289ddc0656",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e45ac7831ff3e2934d58cce319c17c8ec763c95c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49245.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49245.json
new file mode 100644
index 00000000000..3272dc6a175
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49245.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49245",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:01.450",
+ "lastModified": "2025-02-26T07:01:01.450",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: rockchip: Fix PM usage reference of rockchip_i2s_tdm_resume\n\npm_runtime_get_sync will increment pm usage counter\neven it failed. Forgetting to putting operation will\nresult in reference leak here. We fix it by replacing\nit with pm_runtime_resume_and_get to keep usage counter\nbalanced."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4e5510219111607b1f1875ab3c3f0485ba3c381c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5c1834aac759ddfd0f17c9f38db1b30adc8eb4e8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc5d8ac95663a5813c696008bc524b794d471215",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49246.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49246.json
new file mode 100644
index 00000000000..5d56352ba45
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49246.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49246",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:01.537",
+ "lastModified": "2025-02-26T07:01:01.537",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: atmel: Fix error handling in snd_proto_probe\n\nThe device_node pointer is returned by of_parse_phandle() with refcount\nincremented. We should use of_node_put() on it when done.\n\nThis function only calls of_node_put() in the regular path.\nAnd it will cause refcount leak in error paths.\nFix this by calling of_node_put() in error handling too."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0f517480d5888cd54487c5662ce4da95b30ad798",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8fa969cd8485031294f91fc7184399000cae6355",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b0bfaf0544d08d093d6211d7ef8816fb0b5b6c75",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f32ac9bf5e3f594ef9bfedb410aebc98cf784e69",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49247.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49247.json
new file mode 100644
index 00000000000..d76e62f1fb9
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49247.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49247",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:01.623",
+ "lastModified": "2025-02-26T07:01:01.623",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED\n\nIf the callback 'start_streaming' fails, then all\nqueued buffers in the driver should be returned with\nstate 'VB2_BUF_STATE_QUEUED'. Currently, they are\nreturned with 'VB2_BUF_STATE_ERROR' which is wrong.\nFix this. This also fixes the warning:\n\n[ 65.583633] WARNING: CPU: 5 PID: 593 at drivers/media/common/videobuf2/videobuf2-core.c:1612 vb2_start_streaming+0xd4/0x160 [videobuf2_common]\n[ 65.585027] Modules linked in: snd_usb_audio snd_hwdep snd_usbmidi_lib snd_rawmidi snd_soc_hdmi_codec dw_hdmi_i2s_audio saa7115 stk1160 videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common videodev mc crct10dif_ce panfrost snd_soc_simple_card snd_soc_audio_graph_card snd_soc_spdif_tx snd_soc_simple_card_utils gpu_sched phy_rockchip_pcie snd_soc_rockchip_i2s rockchipdrm analogix_dp dw_mipi_dsi dw_hdmi cec drm_kms_helper drm rtc_rk808 rockchip_saradc industrialio_triggered_buffer kfifo_buf rockchip_thermal pcie_rockchip_host ip_tables x_tables ipv6\n[ 65.589383] CPU: 5 PID: 593 Comm: v4l2src0:src Tainted: G W 5.16.0-rc4-62408-g32447129cb30-dirty #14\n[ 65.590293] Hardware name: Radxa ROCK Pi 4B (DT)\n[ 65.590696] pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 65.591304] pc : vb2_start_streaming+0xd4/0x160 [videobuf2_common]\n[ 65.591850] lr : vb2_start_streaming+0x6c/0x160 [videobuf2_common]\n[ 65.592395] sp : ffff800012bc3ad0\n[ 65.592685] x29: ffff800012bc3ad0 x28: 0000000000000000 x27: ffff800012bc3cd8\n[ 65.593312] x26: 0000000000000000 x25: ffff00000d8a7800 x24: 0000000040045612\n[ 65.593938] x23: ffff800011323000 x22: ffff800012bc3cd8 x21: ffff00000908a8b0\n[ 65.594562] x20: ffff00000908a8c8 x19: 00000000fffffff4 x18: ffffffffffffffff\n[ 65.595188] x17: 000000040044ffff x16: 00400034b5503510 x15: ffff800011323f78\n[ 65.595813] x14: ffff000013163886 x13: ffff000013163885 x12: 00000000000002ce\n[ 65.596439] x11: 0000000000000028 x10: 0000000000000001 x9 : 0000000000000228\n[ 65.597064] x8 : 0101010101010101 x7 : 7f7f7f7f7f7f7f7f x6 : fefefeff726c5e78\n[ 65.597690] x5 : ffff800012bc3990 x4 : 0000000000000000 x3 : ffff000009a34880\n[ 65.598315] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000007cd99f0\n[ 65.598940] Call trace:\n[ 65.599155] vb2_start_streaming+0xd4/0x160 [videobuf2_common]\n[ 65.599672] vb2_core_streamon+0x17c/0x1a8 [videobuf2_common]\n[ 65.600179] vb2_streamon+0x54/0x88 [videobuf2_v4l2]\n[ 65.600619] vb2_ioctl_streamon+0x54/0x60 [videobuf2_v4l2]\n[ 65.601103] v4l_streamon+0x3c/0x50 [videodev]\n[ 65.601521] __video_do_ioctl+0x1a4/0x428 [videodev]\n[ 65.601977] video_usercopy+0x320/0x828 [videodev]\n[ 65.602419] video_ioctl2+0x3c/0x58 [videodev]\n[ 65.602830] v4l2_ioctl+0x60/0x90 [videodev]\n[ 65.603227] __arm64_sys_ioctl+0xa8/0xe0\n[ 65.603576] invoke_syscall+0x54/0x118\n[ 65.603911] el0_svc_common.constprop.3+0x84/0x100\n[ 65.604332] do_el0_svc+0x34/0xa0\n[ 65.604625] el0_svc+0x1c/0x50\n[ 65.604897] el0t_64_sync_handler+0x88/0xb0\n[ 65.605264] el0t_64_sync+0x16c/0x170\n[ 65.605587] ---[ end trace 578e0ba07742170d ]---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/03054f22d5abd80ad89547512c2bfbfb2714d3ed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2874122ca4ca74adec72d6d6bf8828228ec20f15",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3cc050df73e3d973f1870a8dc0e177e77670bc7f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4d68603cc4382174bc1e7d532e10675c48c6b257",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a09e9882800fdfc5aab93f77c3f0132071d2191b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f04a520a422222fc921bf035dc67414c500a286a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f66e6fd1488d26229f11d86616de1b658c70fa8a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fbe04b49a54e31f4321d632270207f0e6304cd16",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49248.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49248.json
new file mode 100644
index 00000000000..988e71981dc
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49248.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49248",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:01.727",
+ "lastModified": "2025-02-26T07:01:01.727",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction\n\nAV/C deferred transaction was supported at a commit 00a7bb81c20f (\"ALSA:\nfirewire-lib: Add support for deferred transaction\") while 'deferrable'\nflag can be uninitialized for non-control/notify AV/C transactions.\nUBSAN reports it:\n\nkernel: ================================================================================\nkernel: UBSAN: invalid-load in /build/linux-aa0B4d/linux-5.15.0/sound/firewire/fcp.c:363:9\nkernel: load of value 158 is not a valid value for type '_Bool'\nkernel: CPU: 3 PID: 182227 Comm: irq/35-firewire Tainted: P OE 5.15.0-18-generic #18-Ubuntu\nkernel: Hardware name: Gigabyte Technology Co., Ltd. AX370-Gaming 5/AX370-Gaming 5, BIOS F42b 08/01/2019\nkernel: Call Trace:\nkernel: \nkernel: show_stack+0x52/0x58\nkernel: dump_stack_lvl+0x4a/0x5f\nkernel: dump_stack+0x10/0x12\nkernel: ubsan_epilogue+0x9/0x45\nkernel: __ubsan_handle_load_invalid_value.cold+0x44/0x49\nkernel: fcp_response.part.0.cold+0x1a/0x2b [snd_firewire_lib]\nkernel: fcp_response+0x28/0x30 [snd_firewire_lib]\nkernel: fw_core_handle_request+0x230/0x3d0 [firewire_core]\nkernel: handle_ar_packet+0x1d9/0x200 [firewire_ohci]\nkernel: ? handle_ar_packet+0x1d9/0x200 [firewire_ohci]\nkernel: ? transmit_complete_callback+0x9f/0x120 [firewire_core]\nkernel: ar_context_tasklet+0xa8/0x2e0 [firewire_ohci]\nkernel: tasklet_action_common.constprop.0+0xea/0xf0\nkernel: tasklet_action+0x22/0x30\nkernel: __do_softirq+0xd9/0x2e3\nkernel: ? irq_finalize_oneshot.part.0+0xf0/0xf0\nkernel: do_softirq+0x75/0xa0\nkernel: \nkernel: \nkernel: __local_bh_enable_ip+0x50/0x60\nkernel: irq_forced_thread_fn+0x7e/0x90\nkernel: irq_thread+0xba/0x190\nkernel: ? irq_thread_fn+0x60/0x60\nkernel: kthread+0x11e/0x140\nkernel: ? irq_thread_check_affinity+0xf0/0xf0\nkernel: ? set_kthread_struct+0x50/0x50\nkernel: ret_from_fork+0x22/0x30\nkernel: \nkernel: ================================================================================\n\nThis commit fixes the bug. The bug has no disadvantage for the non-\ncontrol/notify AV/C transactions since the flag has an effect for AV/C\nresponse with INTERIM (0x0f) status which is not used for the transactions\nin AV/C general specification."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/39d2c4a33dc1b4402cec68a3c8f82c6588b6edce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/60e5d391805d70458a01998de00d0c28cba40bf3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7025f40690a235a118c87674cfb93072694aa66d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7e6f5786621df060f8296f074efd275eaf20361a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/99582e4b19f367fa95bdd150b3034d7ce8113342",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b2b65c9013dc28836d82e25d0f0c94d794a14aba",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bf0cd60b7e33cf221fbe1114e4acb2c828b0af0d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d07e4bbaff6fbba6f70c04b092ea7d9afcdf392e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eab74c41612083bd627b60da650e19234e4f1051",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49249.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49249.json
new file mode 100644
index 00000000000..058a7dfe91e
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49249.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49249",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:01.830",
+ "lastModified": "2025-02-26T07:01:01.830",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: wc938x: fix accessing array out of bounds for enum type\n\nAccessing enums using integer would result in array out of bounds access\non platforms like aarch64 where sizeof(long) is 8 compared to enum size\nwhich is 4 bytes.\n\nFix this by using enumerated items instead of integers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/adafea71b49ec4dbc44e0b84ec6eb602004a7a08",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc587b7c8fbbe128f6bd0dad025a0caea5e6d164",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d09aee1b1da196be11ed86dd4897f228f2487613",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f03c0c94186d5876857132d97e28f20cdc100bdc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49250.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49250.json
new file mode 100644
index 00000000000..8c2d5b82706
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49250.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49250",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:01.920",
+ "lastModified": "2025-02-26T07:01:01.920",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: rx-macro: fix accessing compander for aux\n\nAUX interpolator does not have compander, so check before accessing\ncompander data for this.\n\nWithout this checkan array of out bounds access will be made in\ncomp_enabled[] array."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/42c709c4e1ce4c136891530646c9abd5dff3524f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6aa8ef9535dbd561293406608ebe791627b10196",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/87a2b44cb3005d30c3a72234d1e47b03ae3bb29a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9208ecc703b5ed5b12d7ea13c79207f4c8456638",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49251.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49251.json
new file mode 100644
index 00000000000..90c5f55e0c7
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49251.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49251",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:02.013",
+ "lastModified": "2025-02-26T07:01:02.013",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: va-macro: fix accessing array out of bounds for enum type\n\nAccessing enums using integer would result in array out of bounds access\non platforms like aarch64 where sizeof(long) is 8 compared to enum size\nwhich is 4 bytes."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0ea5eff7c6063a8f124188424f8e4c6727f35051",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4a799972a283ab4ec031041304d7e2d34e1a16eb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/966408e37d84b762d11978b7bfb03fff0c6222ad",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c0099bbf8bc85d30c4cf38220fca3c8d4253fa7f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49252.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49252.json
new file mode 100644
index 00000000000..20bb14eec35
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49252.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49252",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:02.103",
+ "lastModified": "2025-02-26T07:01:02.103",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: rx-macro: fix accessing array out of bounds for enum type\n\nAccessing enums using integer would result in array out of bounds access\non platforms like aarch64 where sizeof(long) is 8 compared to enum size\nwhich is 4 bytes."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/7e3629e256d1cabf801d00050550ade4d036cafe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aed43e92e4b9187029903880d5db608f7fa1c53c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bcfe5f76cc4051ea3f9eb5d2c8ea621641f290a5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eb15c6ea692fd88d70698d874d9a0d667fb4cde9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49253.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49253.json
new file mode 100644
index 00000000000..fc0e57c3920
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49253.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49253",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:02.200",
+ "lastModified": "2025-02-26T07:01:02.200",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: usb: go7007: s2250-board: fix leak in probe()\n\nCall i2c_unregister_device(audio) on this error path."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/14cd5a8e61c654828a1f1056d56f0b0a524d2c69",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/44973633b0064c46083833b55dd0a45e6235f8ca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/67e4550ecd6164bfbdff54c169e5bbf9ccfaf14d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/895364fa97e60749855f789bc4568883fc7a8b39",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/948ad5e5624487079c24cb5c81c74ddd02832440",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a97130cd5b0c00eec169b10a16d922b9ea67324a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b5470f3efa530b10296257bb578ce4b1769e9a04",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b7dd177225355da55f8d80d8e568928e0eec3608",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bbdd0e15738336e6b1208304ae98525117877bbd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49254.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49254.json
new file mode 100644
index 00000000000..86c25b74662
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49254.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49254",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:02.300",
+ "lastModified": "2025-02-26T07:01:02.300",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats()\n\nIn cal_ctx_v4l2_init_formats(), devm_kzalloc() is assigned to\nctx->active_fmt and there is a dereference of it after that, which could\nlead to NULL pointer dereference on failure of devm_kzalloc().\n\nFix this bug by adding a NULL check of ctx->active_fmt.\n\nThis bug was found by a static analyzer.\n\nBuilds with 'make allyesconfig' show no new warnings, and our static\nanalyzer no longer warns about this code."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1381f1a629a090c251965edb56f849ad648414a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/91e2805579ab0783eed53acc2bf9fb553e939004",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aa613ac270292e102503e9767882e39200efe608",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/abd77889851d2ead0d0c9c4d29f1808801477b00",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49255.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49255.json
new file mode 100644
index 00000000000..e0416ece039
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49255.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49255",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:02.397",
+ "lastModified": "2025-02-26T07:01:02.397",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix missing free nid in f2fs_handle_failed_inode\n\nThis patch fixes xfstests/generic/475 failure.\n\n[ 293.680694] F2FS-fs (dm-1): May loss orphan inode, run fsck to fix.\n[ 293.685358] Buffer I/O error on dev dm-1, logical block 8388592, async page read\n[ 293.691527] Buffer I/O error on dev dm-1, logical block 8388592, async page read\n[ 293.691764] sh (7615): drop_caches: 3\n[ 293.691819] sh (7616): drop_caches: 3\n[ 293.694017] Buffer I/O error on dev dm-1, logical block 1, async page read\n[ 293.695659] sh (7618): drop_caches: 3\n[ 293.696979] sh (7617): drop_caches: 3\n[ 293.700290] sh (7623): drop_caches: 3\n[ 293.708621] sh (7626): drop_caches: 3\n[ 293.711386] sh (7628): drop_caches: 3\n[ 293.711825] sh (7627): drop_caches: 3\n[ 293.716738] sh (7630): drop_caches: 3\n[ 293.719613] sh (7632): drop_caches: 3\n[ 293.720971] sh (7633): drop_caches: 3\n[ 293.727741] sh (7634): drop_caches: 3\n[ 293.730783] sh (7636): drop_caches: 3\n[ 293.732681] sh (7635): drop_caches: 3\n[ 293.732988] sh (7637): drop_caches: 3\n[ 293.738836] sh (7639): drop_caches: 3\n[ 293.740568] sh (7641): drop_caches: 3\n[ 293.743053] sh (7640): drop_caches: 3\n[ 293.821889] ------------[ cut here ]------------\n[ 293.824654] kernel BUG at fs/f2fs/node.c:3334!\n[ 293.826226] invalid opcode: 0000 [#1] PREEMPT SMP PTI\n[ 293.828713] CPU: 0 PID: 7653 Comm: umount Tainted: G OE 5.17.0-rc1-custom #1\n[ 293.830946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n[ 293.832526] RIP: 0010:f2fs_destroy_node_manager+0x33f/0x350 [f2fs]\n[ 293.833905] Code: e8 d6 3d f9 f9 48 8b 45 d0 65 48 2b 04 25 28 00 00 00 75 1a 48 81 c4 28 03 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b\n[ 293.837783] RSP: 0018:ffffb04ec31e7a20 EFLAGS: 00010202\n[ 293.839062] RAX: 0000000000000001 RBX: ffff9df947db2eb8 RCX: 0000000080aa0072\n[ 293.840666] RDX: 0000000000000000 RSI: ffffe86c0432a140 RDI: ffffffffc0b72a21\n[ 293.842261] RBP: ffffb04ec31e7d70 R08: ffff9df94ca85780 R09: 0000000080aa0072\n[ 293.843909] R10: ffff9df94ca85700 R11: ffff9df94e1ccf58 R12: ffff9df947db2e00\n[ 293.845594] R13: ffff9df947db2ed0 R14: ffff9df947db2eb8 R15: ffff9df947db2eb8\n[ 293.847855] FS: 00007f5a97379800(0000) GS:ffff9dfa77c00000(0000) knlGS:0000000000000000\n[ 293.850647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 293.852940] CR2: 00007f5a97528730 CR3: 000000010bc76005 CR4: 0000000000370ef0\n[ 293.854680] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 293.856423] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 293.858380] Call Trace:\n[ 293.859302] \n[ 293.860311] ? ttwu_do_wakeup+0x1c/0x170\n[ 293.861800] ? ttwu_do_activate+0x6d/0xb0\n[ 293.863057] ? _raw_spin_unlock_irqrestore+0x29/0x40\n[ 293.864411] ? try_to_wake_up+0x9d/0x5e0\n[ 293.865618] ? debug_smp_processor_id+0x17/0x20\n[ 293.866934] ? debug_smp_processor_id+0x17/0x20\n[ 293.868223] ? free_unref_page+0xbf/0x120\n[ 293.869470] ? __free_slab+0xcb/0x1c0\n[ 293.870614] ? preempt_count_add+0x7a/0xc0\n[ 293.871811] ? __slab_free+0xa0/0x2d0\n[ 293.872918] ? __wake_up_common_lock+0x8a/0xc0\n[ 293.874186] ? __slab_free+0xa0/0x2d0\n[ 293.875305] ? free_inode_nonrcu+0x20/0x20\n[ 293.876466] ? free_inode_nonrcu+0x20/0x20\n[ 293.877650] ? debug_smp_processor_id+0x17/0x20\n[ 293.878949] ? call_rcu+0x11a/0x240\n[ 293.880060] ? f2fs_destroy_stats+0x59/0x60 [f2fs]\n[ 293.881437] ? kfree+0x1fe/0x230\n[ 293.882674] f2fs_put_super+0x160/0x390 [f2fs]\n[ 293.883978] generic_shutdown_super+0x7a/0x120\n[ 293.885274] kill_block_super+0x27/0x50\n[ 293.886496] kill_f2fs_super+0x7f/0x100 [f2fs]\n[ 293.887806] deactivate_locked_super+0x35/0xa0\n[ 293.889271] deactivate_super+0x40/0x50\n[ 293.890513] cleanup_mnt+0x139/0x190\n[ 293.891689] __cleanup_mnt+0x12/0x20\n[ 293.892850] task_work_run+0x64/0xa0\n[ 293.894035] exit_to_user_mode_prepare+0x1b7/\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/005f9cdab70c915702254c5eb67a8efced80e821",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1a11a873749c6375bb668953fa1a196d8538d26b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2fef99b8372c1ae3d8445ab570e888b5a358dbe9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8579b413af100ec5f3592bd6cf11559312b380c0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aa80bf73e3b3fb7026d343c77b3ddc849e26a095",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d1eaaf6cadedf638e17017b0a04d56308405ac10",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49256.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49256.json
new file mode 100644
index 00000000000..33613b648fb
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49256.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49256",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:02.497",
+ "lastModified": "2025-02-26T07:01:02.497",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatch_queue: Actually free the watch\n\nfree_watch() does everything barring actually freeing the watch object. Fix\nthis by adding the missing kfree.\n\nkmemleak produces a report something like the following. Note that as an\naddress can be seen in the first word, the watch would appear to have gone\nthrough call_rcu().\n\nBUG: memory leak\nunreferenced object 0xffff88810ce4a200 (size 96):\n comm \"syz-executor352\", pid 3605, jiffies 4294947473 (age 13.720s)\n hex dump (first 32 bytes):\n e0 82 48 0d 81 88 ff ff 00 00 00 00 00 00 00 00 ..H.............\n 80 a2 e4 0c 81 88 ff ff 00 00 00 00 00 00 00 00 ................\n backtrace:\n [] kmalloc include/linux/slab.h:581 [inline]\n [] kzalloc include/linux/slab.h:714 [inline]\n [] keyctl_watch_key+0xec/0x2e0 security/keys/keyctl.c:1800\n [] __do_sys_keyctl+0x3c4/0x490 security/keys/keyctl.c:2016\n [] do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n [] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n [] entry_SYSCALL_64_after_hwframe+0x44/0xae"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/31824613a42aacdcbeb325bf07a1c8247a11ebe2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3d8dcf278b1ee1eff1e90be848fa2237db4c07a7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7e8c9b0df07a77f0d072603b8ced2677e30e1893",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9d92be1a09fbb3dd65600dbfe7eedb40e7228e4b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f69aecb49968e14196366bbe896eab0a904229f5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49257.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49257.json
new file mode 100644
index 00000000000..df7cc810f07
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49257.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49257",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:02.597",
+ "lastModified": "2025-02-26T07:01:02.597",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatch_queue: Fix NULL dereference in error cleanup\n\nIn watch_queue_set_size(), the error cleanup code doesn't take account of\nthe fact that __free_page() can't handle a NULL pointer when trying to free\nup buffer pages that did get allocated.\n\nFix this by only calling __free_page() on the pages actually allocated.\n\nWithout the fix, this can lead to something like the following:\n\nBUG: KASAN: null-ptr-deref in __free_pages+0x1f/0x1b0 mm/page_alloc.c:5473\nRead of size 4 at addr 0000000000000034 by task syz-executor168/3599\n...\nCall Trace:\n \n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106\n __kasan_report mm/kasan/report.c:446 [inline]\n kasan_report.cold+0x66/0xdf mm/kasan/report.c:459\n check_region_inline mm/kasan/generic.c:183 [inline]\n kasan_check_range+0x13d/0x180 mm/kasan/generic.c:189\n instrument_atomic_read include/linux/instrumented.h:71 [inline]\n atomic_read include/linux/atomic/atomic-instrumented.h:27 [inline]\n page_ref_count include/linux/page_ref.h:67 [inline]\n put_page_testzero include/linux/mm.h:717 [inline]\n __free_pages+0x1f/0x1b0 mm/page_alloc.c:5473\n watch_queue_set_size+0x499/0x630 kernel/watch_queue.c:275\n pipe_ioctl+0xac/0x2b0 fs/pipe.c:632\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:874 [inline]\n __se_sys_ioctl fs/ioctl.c:860 [inline]\n __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:860\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x44/0xae"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/112a2f9b0a8457794095a0450598f150724ec456",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5ae75b4ed30322b42abaa75ef1b784addfdb7dc9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/695c47cea02b9101e2fc2e7d36d552128592b347",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a635415a064e77bcfbf43da413fd9dfe0bbed9cb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b6f5ad3e45d19f9c4ee3e8a2aff829f28d68591d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49258.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49258.json
new file mode 100644
index 00000000000..f760c7a9002
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49258.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49258",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:02.720",
+ "lastModified": "2025-02-26T07:01:02.720",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: ccree - Fix use after free in cc_cipher_exit()\n\nkfree_sensitive(ctx_p->user.key) will free the ctx_p->user.key. But\nctx_p->user.key is still used in the next line, which will lead to a\nuse after free.\n\nWe can call kfree_sensitive() after dev_dbg() to avoid the uaf."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/25c358efee5153dfd240d4e0d3169d5bebe9cacd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/335bf1fc74f775a8255257aa3e33763f2257b676",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3d950c34074ed74d2713c3856ba01264523289e6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c93017c8d5ebf55a4e453ac7c84cc84cf92ab570",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cffb5382bd8d3cf21b874ab5b84bf7618932286b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49259.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49259.json
new file mode 100644
index 00000000000..38d6ebcaecb
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49259.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49259",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:02.850",
+ "lastModified": "2025-02-26T07:01:02.850",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: don't delete queue kobject before its children\n\nkobjects aren't supposed to be deleted before their child kobjects are\ndeleted. Apparently this is usually benign; however, a WARN will be\ntriggered if one of the child kobjects has a named attribute group:\n\n sysfs group 'modes' not found for kobject 'crypto'\n WARNING: CPU: 0 PID: 1 at fs/sysfs/group.c:278 sysfs_remove_group+0x72/0x80\n ...\n Call Trace:\n sysfs_remove_groups+0x29/0x40 fs/sysfs/group.c:312\n __kobject_del+0x20/0x80 lib/kobject.c:611\n kobject_cleanup+0xa4/0x140 lib/kobject.c:696\n kobject_release lib/kobject.c:736 [inline]\n kref_put include/linux/kref.h:65 [inline]\n kobject_put+0x53/0x70 lib/kobject.c:753\n blk_crypto_sysfs_unregister+0x10/0x20 block/blk-crypto-sysfs.c:159\n blk_unregister_queue+0xb0/0x110 block/blk-sysfs.c:962\n del_gendisk+0x117/0x250 block/genhd.c:610\n\nFix this by moving the kobject_del() and the corresponding\nkobject_uevent() to the correct place."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0b5924a14d64487ebd51127b0358d06066ef5384",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0f69288253e9fc7c495047720e523b9f1aba5712",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3d7e32c8da45957326f56937e0471c686d1a7711",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/84fe3ca6e7910beb47ec13509d484f84fa2a41ad",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b2001eb10f59363da930cdd6e086a2861986fa18",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cf0cb8686e55d9c022944bc6ba9e19e832889e83",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/efaa0e969261e97c1fdd8e0338e5dd3ba5b9219c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49260.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49260.json
new file mode 100644
index 00000000000..19fb6eb10f4
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49260.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49260",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:02.967",
+ "lastModified": "2025-02-26T07:01:02.967",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: hisilicon/sec - fix the aead software fallback for engine\n\nDue to the subreq pointer misuse the private context memory. The aead\nsoft crypto occasionally casues the OS panic as setting the 64K page.\nHere is fix it."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0a2a464f863187f97e96ebc6384c052cafd4a54c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/40dba7c26e897c637e91312b35f664f1d4d0073c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5c1149e2abe0b7489300736b8277b45b113de67f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef7b10f3cac7810ddcfd976304fd125aca33d144",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49261.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49261.json
new file mode 100644
index 00000000000..ec248f38a47
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49261.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49261",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:03.057",
+ "lastModified": "2025-02-26T07:01:03.057",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/gem: add missing boundary check in vm_access\n\nA missing bounds check in vm_access() can lead to an out-of-bounds read\nor write in the adjacent memory area, since the len attribute is not\nvalidated before the memcpy later in the function, potentially hitting:\n\n[ 183.637831] BUG: unable to handle page fault for address: ffffc90000c86000\n[ 183.637934] #PF: supervisor read access in kernel mode\n[ 183.637997] #PF: error_code(0x0000) - not-present page\n[ 183.638059] PGD 100000067 P4D 100000067 PUD 100258067 PMD 106341067 PTE 0\n[ 183.638144] Oops: 0000 [#2] PREEMPT SMP NOPTI\n[ 183.638201] CPU: 3 PID: 1790 Comm: poc Tainted: G D 5.17.0-rc6-ci-drm-11296+ #1\n[ 183.638298] Hardware name: Intel Corporation CoffeeLake Client Platform/CoffeeLake H DDR4 RVP, BIOS CNLSFWR1.R00.X208.B00.1905301319 05/30/2019\n[ 183.638430] RIP: 0010:memcpy_erms+0x6/0x10\n[ 183.640213] RSP: 0018:ffffc90001763d48 EFLAGS: 00010246\n[ 183.641117] RAX: ffff888109c14000 RBX: ffff888111bece40 RCX: 0000000000000ffc\n[ 183.642029] RDX: 0000000000001000 RSI: ffffc90000c86000 RDI: ffff888109c14004\n[ 183.642946] RBP: 0000000000000ffc R08: 800000000000016b R09: 0000000000000000\n[ 183.643848] R10: ffffc90000c85000 R11: 0000000000000048 R12: 0000000000001000\n[ 183.644742] R13: ffff888111bed190 R14: ffff888109c14000 R15: 0000000000001000\n[ 183.645653] FS: 00007fe5ef807540(0000) GS:ffff88845b380000(0000) knlGS:0000000000000000\n[ 183.646570] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 183.647481] CR2: ffffc90000c86000 CR3: 000000010ff02006 CR4: 00000000003706e0\n[ 183.648384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 183.649271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 183.650142] Call Trace:\n[ 183.650988] \n[ 183.651793] vm_access+0x1f0/0x2a0 [i915]\n[ 183.652726] __access_remote_vm+0x224/0x380\n[ 183.653561] mem_rw.isra.0+0xf9/0x190\n[ 183.654402] vfs_read+0x9d/0x1b0\n[ 183.655238] ksys_read+0x63/0xe0\n[ 183.656065] do_syscall_64+0x38/0xc0\n[ 183.656882] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[ 183.657663] RIP: 0033:0x7fe5ef725142\n[ 183.659351] RSP: 002b:00007ffe1e81c7e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000\n[ 183.660227] RAX: ffffffffffffffda RBX: 0000557055dfb780 RCX: 00007fe5ef725142\n[ 183.661104] RDX: 0000000000001000 RSI: 00007ffe1e81d880 RDI: 0000000000000005\n[ 183.661972] RBP: 00007ffe1e81e890 R08: 0000000000000030 R09: 0000000000000046\n[ 183.662832] R10: 0000557055dfc2e0 R11: 0000000000000246 R12: 0000557055dfb1c0\n[ 183.663691] R13: 00007ffe1e81e980 R14: 0000000000000000 R15: 0000000000000000\n\nChanges since v1:\n - Updated if condition with range_overflows_t [Chris Wilson]\n\n[mauld: tidy up the commit message and add Cc: stable]\n(cherry picked from commit 661412e301e2ca86799aa4f400d1cf0bd38c57c6)"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/312d3d4f49e12f97260bcf972c848c3562126a18",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3886a86e7e6cc6ce2ce93c440fecd8f42aed0ce7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5f6e560e3e86ac053447524224e411034f41f5c7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/89ddcc81914ab58cc203acc844f27d55ada8ec0e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8f0ebea8f6e8c474264ed97d7a64c9c09ed4f5aa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49262.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49262.json
new file mode 100644
index 00000000000..9d4038c41da
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49262.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49262",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:03.153",
+ "lastModified": "2025-02-26T07:01:03.153",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: octeontx2 - remove CONFIG_DM_CRYPT check\n\nNo issues were found while using the driver with dm-crypt enabled. So\nCONFIG_DM_CRYPT check in the driver can be removed.\n\nThis also fixes the NULL pointer dereference in driver release if\nCONFIG_DM_CRYPT is enabled.\n\n...\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000008\n...\nCall trace:\n crypto_unregister_alg+0x68/0xfc\n crypto_unregister_skciphers+0x44/0x60\n otx2_cpt_crypto_exit+0x100/0x1a0\n otx2_cptvf_remove+0xf8/0x200\n pci_device_remove+0x3c/0xd4\n __device_release_driver+0x188/0x234\n device_release_driver+0x2c/0x4c\n..."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2d841af23ae8f398c85dd1ff2dc24b5ec8ba4569",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a1bf728f3388ac3a2c2dffa57e25622e90b9f6f2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a462214866eebbca87e13ff6d73092b1c4895624",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e6374086f249295121384bfaa7cdcc8d461146f0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49263.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49263.json
new file mode 100644
index 00000000000..0174c868649
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49263.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49263",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:03.243",
+ "lastModified": "2025-02-26T07:01:03.243",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbrcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path\n\nThis avoids leaking memory if brcmf_chip_get_raminfo fails. Note that\nthe CLM blob is released in the device remove path."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0347bdfdb1529994ac3a4cb425087c477a74eb2c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4e0b507597e1a86e9b4c056ab274c427223cf8ea",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5e90f0f3ead014867dade7a22f93958119f5efab",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a88337a06966f2d733ad9a97714b874469133f14",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d0ab87f8dcdfe72dc1d763be3392c1fc51a1ace2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f3820ddaf4f3ac80c7401ccc6a42e663c9317f31",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49264.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49264.json
new file mode 100644
index 00000000000..22b282c62c3
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49264.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49264",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:03.337",
+ "lastModified": "2025-02-26T07:01:03.337",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nexec: Force single empty string when argv is empty\n\nQuoting[1] Ariadne Conill:\n\n\"In several other operating systems, it is a hard requirement that the\nsecond argument to execve(2) be the name of a program, thus prohibiting\na scenario where argc < 1. POSIX 2017 also recommends this behaviour,\nbut it is not an explicit requirement[2]:\n\n The argument arg0 should point to a filename string that is\n associated with the process being started by one of the exec\n functions.\n...\nInterestingly, Michael Kerrisk opened an issue about this in 2008[3],\nbut there was no consensus to support fixing this issue then.\nHopefully now that CVE-2021-4034 shows practical exploitative use[4]\nof this bug in a shellcode, we can reconsider.\n\nThis issue is being tracked in the KSPP issue tracker[5].\"\n\nWhile the initial code searches[6][7] turned up what appeared to be\nmostly corner case tests, trying to that just reject argv == NULL\n(or an immediately terminated pointer list) quickly started tripping[8]\nexisting userspace programs.\n\nThe next best approach is forcing a single empty string into argv and\nadjusting argc to match. The number of programs depending on argc == 0\nseems a smaller set than those calling execve with a NULL argv.\n\nAccount for the additional stack space in bprm_stack_limits(). Inject an\nempty string when argc == 0 (and set argc = 1). Warn about the case so\nuserspace has some notice about the change:\n\n process './argc0' launched './argc0' with NULL argv: empty string added\n\nAdditionally WARN() and reject NULL argv usage for kernel threads.\n\n[1] https://lore.kernel.org/lkml/20220127000724.15106-1-ariadne@dereferenced.org/\n[2] https://pubs.opengroup.org/onlinepubs/9699919799/functions/exec.html\n[3] https://bugzilla.kernel.org/show_bug.cgi?id=8408\n[4] https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt\n[5] https://github.com/KSPP/linux/issues/176\n[6] https://codesearch.debian.net/search?q=execve%5C+*%5C%28%5B%5E%2C%5D%2B%2C+*NULL&literal=0\n[7] https://codesearch.debian.net/search?q=execlp%3F%5Cs*%5C%28%5B%5E%2C%5D%2B%2C%5Cs*NULL&literal=0\n[8] https://lore.kernel.org/lkml/20220131144352.GE16385@xsang-OptiPlex-9020/"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1290eb4412aa0f0e9f3434b406dc8e255da85f9e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1fe82bfd9e4ce93399d815ca458b58505191c3e8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/27a6f495b63a1804cc71be45911065db7757a98c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/41f6ea5b9aaa28b740d47ffe995a5013211fdbb0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/98e0c7c702894987732776736c99b85ade6fba45",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a8054d3fa5deb84b215d6be1b910a978f3cb840d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b50fb8dbc8b81aaa126387de428f4c42a7c72a73",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cfbfff8ce5e3d674947581f1eb9af0a1b1807950",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dcd46d897adb70d63e025f175a00a89797d31a43",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49265.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49265.json
new file mode 100644
index 00000000000..ed240b5f4aa
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49265.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49265",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:03.437",
+ "lastModified": "2025-02-26T07:01:03.437",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPM: domains: Fix sleep-in-atomic bug caused by genpd_debug_remove()\n\nWhen a genpd with GENPD_FLAG_IRQ_SAFE gets removed, the following\nsleep-in-atomic bug will be seen, as genpd_debug_remove() will be called\nwith a spinlock being held.\n\n[ 0.029183] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1460\n[ 0.029204] in_atomic(): 1, irqs_disabled(): 128, non_block: 0, pid: 1, name: swapper/0\n[ 0.029219] preempt_count: 1, expected: 0\n[ 0.029230] CPU: 1 PID: 1 Comm: swapper/0 Not tainted 5.17.0-rc4+ #489\n[ 0.029245] Hardware name: Thundercomm TurboX CM2290 (DT)\n[ 0.029256] Call trace:\n[ 0.029265] dump_backtrace.part.0+0xbc/0xd0\n[ 0.029285] show_stack+0x3c/0xa0\n[ 0.029298] dump_stack_lvl+0x7c/0xa0\n[ 0.029311] dump_stack+0x18/0x34\n[ 0.029323] __might_resched+0x10c/0x13c\n[ 0.029338] __might_sleep+0x4c/0x80\n[ 0.029351] down_read+0x24/0xd0\n[ 0.029363] lookup_one_len_unlocked+0x9c/0xcc\n[ 0.029379] lookup_positive_unlocked+0x10/0x50\n[ 0.029392] debugfs_lookup+0x68/0xac\n[ 0.029406] genpd_remove.part.0+0x12c/0x1b4\n[ 0.029419] of_genpd_remove_last+0xa8/0xd4\n[ 0.029434] psci_cpuidle_domain_probe+0x174/0x53c\n[ 0.029449] platform_probe+0x68/0xe0\n[ 0.029462] really_probe+0x190/0x430\n[ 0.029473] __driver_probe_device+0x90/0x18c\n[ 0.029485] driver_probe_device+0x40/0xe0\n[ 0.029497] __driver_attach+0xf4/0x1d0\n[ 0.029508] bus_for_each_dev+0x70/0xd0\n[ 0.029523] driver_attach+0x24/0x30\n[ 0.029534] bus_add_driver+0x164/0x22c\n[ 0.029545] driver_register+0x78/0x130\n[ 0.029556] __platform_driver_register+0x28/0x34\n[ 0.029569] psci_idle_init_domains+0x1c/0x28\n[ 0.029583] do_one_initcall+0x50/0x1b0\n[ 0.029595] kernel_init_freeable+0x214/0x280\n[ 0.029609] kernel_init+0x2c/0x13c\n[ 0.029622] ret_from_fork+0x10/0x20\n\nIt doesn't seem necessary to call genpd_debug_remove() with the lock, so\nmove it out from locking to fix the problem."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2039163c30f886cf5638afd6993705ae9bb34a06",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d1b6840d8fb9b35193d45d8fe6b4d830bfd20c3c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f6bfe8b5b2c2a5ac8bd2fc7bca3706e6c3fc26d8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fee777ea77769cc5392a34805d9d73099a223fae",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49266.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49266.json
new file mode 100644
index 00000000000..5908ee55922
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49266.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49266",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:03.527",
+ "lastModified": "2025-02-26T07:01:03.527",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: fix rq-qos breakage from skipping rq_qos_done_bio()\n\na647a524a467 (\"block: don't call rq_qos_ops->done_bio if the bio isn't\ntracked\") made bio_endio() skip rq_qos_done_bio() if BIO_TRACKED is not set.\nWhile this fixed a potential oops, it also broke blk-iocost by skipping the\ndone_bio callback for merged bios.\n\nBefore, whether a bio goes through rq_qos_throttle() or rq_qos_merge(),\nrq_qos_done_bio() would be called on the bio on completion with BIO_TRACKED\ndistinguishing the former from the latter. rq_qos_done_bio() is not called\nfor bios which wenth through rq_qos_merge(). This royally confuses\nblk-iocost as the merged bios never finish and are considered perpetually\nin-flight.\n\nOne reliably reproducible failure mode is an intermediate cgroup geting\nstuck active preventing its children from being activated due to the\nleaf-only rule, leading to loss of control. The following is from\nresctl-bench protection scenario which emulates isolating a web server like\nworkload from a memory bomb run on an iocost configuration which should\nyield a reasonable level of protection.\n\n # cat /sys/block/nvme2n1/device/model\n Samsung SSD 970 PRO 512GB\n # cat /sys/fs/cgroup/io.cost.model\n 259:0 ctrl=user model=linear rbps=834913556 rseqiops=93622 rrandiops=102913 wbps=618985353 wseqiops=72325 wrandiops=71025\n # cat /sys/fs/cgroup/io.cost.qos\n 259:0 enable=1 ctrl=user rpct=95.00 rlat=18776 wpct=95.00 wlat=8897 min=60.00 max=100.00\n # resctl-bench -m 29.6G -r out.json run protection::scenario=mem-hog,loops=1\n ...\n Memory Hog Summary\n ==================\n\n IO Latency: R p50=242u:336u/2.5m p90=794u:1.4m/7.5m p99=2.7m:8.0m/62.5m max=8.0m:36.4m/350m\n W p50=221u:323u/1.5m p90=709u:1.2m/5.5m p99=1.5m:2.5m/9.5m max=6.9m:35.9m/350m\n\n Isolation and Request Latency Impact Distributions:\n\n min p01 p05 p10 p25 p50 p75 p90 p95 p99 max mean stdev\n isol% 15.90 15.90 15.90 40.05 57.24 59.07 60.01 74.63 74.63 90.35 90.35 58.12 15.82\n lat-imp% 0 0 0 0 0 4.55 14.68 15.54 233.5 548.1 548.1 53.88 143.6\n\n Result: isol=58.12:15.82% lat_imp=53.88%:143.6 work_csv=100.0% missing=3.96%\n\nThe isolation result of 58.12% is close to what this device would show\nwithout any IO control.\n\nFix it by introducing a new flag BIO_QOS_MERGED to mark merged bios and\ncalling rq_qos_done_bio() on them too. For consistency and clarity, rename\nBIO_TRACKED to BIO_QOS_THROTTLED. The flag checks are moved into\nrq_qos_done_bio() so that it's next to the code paths that set the flags.\n\nWith the patch applied, the above same benchmark shows:\n\n # resctl-bench -m 29.6G -r out.json run protection::scenario=mem-hog,loops=1\n ...\n Memory Hog Summary\n ==================\n\n IO Latency: R p50=123u:84.4u/985u p90=322u:256u/2.5m p99=1.6m:1.4m/9.5m max=11.1m:36.0m/350m\n W p50=429u:274u/995u p90=1.7m:1.3m/4.5m p99=3.4m:2.7m/11.5m max=7.9m:5.9m/26.5m\n\n Isolation and Request Latency Impact Distributions:\n\n min p01 p05 p10 p25 p50 p75 p90 p95 p99 max mean stdev\n isol% 84.91 84.91 89.51 90.73 92.31 94.49 96.36 98.04 98.71 100.0 100.0 94.42 2.81\n lat-imp% 0 0 0 0 0 2.81 5.73 11.11 13.92 17.53 22.61 4.10 4.68\n\n Result: isol=94.42:2.81% lat_imp=4.10%:4.68 work_csv=58.34% missing=0%"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/09737db4c891eba25e6f6383a7c38afd4acc883f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aa1b46dcdc7baaf5fec0be25782ef24b26aa209e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/af9452dfdba4bf7359ef7645eee2d243a1df0649",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dbd20bb904ad5731aaca8d009367a930d6ada111",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49267.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49267.json
new file mode 100644
index 00000000000..b5303df4990
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49267.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49267",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:03.620",
+ "lastModified": "2025-02-26T07:01:03.620",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: core: use sysfs_emit() instead of sprintf()\n\nsprintf() (still used in the MMC core for the sysfs output) is vulnerable\nto the buffer overflow. Use the new-fangled sysfs_emit() instead.\n\nFound by Linux Verification Center (linuxtesting.org) with the SVACE static\nanalysis tool."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/659ca56b5415c7a1d05e185c36fad80ba165d063",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c4ab65738ab3e21fe519ee46b2051222bc8e32ef",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f5d8a5fe77ce933f53eb8f2e22bb7a1a2019ea11",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49268.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49268.json
new file mode 100644
index 00000000000..83bea436940
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49268.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49268",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:03.710",
+ "lastModified": "2025-02-26T07:01:03.710",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM\n\nDo not call snd_dma_free_pages() when snd_dma_alloc_pages() returns\n-ENOMEM because it leads to a NULL pointer dereference bug.\n\nThe dmesg says:\n\n [ T1387] sof-audio-pci-intel-tgl 0000:00:1f.3: error: memory alloc failed: -12\n [ T1387] BUG: kernel NULL pointer dereference, address: 0000000000000000\n [ T1387] #PF: supervisor read access in kernel mode\n [ T1387] #PF: error_code(0x0000) - not-present page\n [ T1387] PGD 0 P4D 0\n [ T1387] Oops: 0000 [#1] PREEMPT SMP NOPTI\n [ T1387] CPU: 6 PID: 1387 Comm: alsa-sink-HDA A Tainted: G W 5.17.0-rc4-superb-owl-00055-g80d47f5de5e3\n [ T1387] Hardware name: HP HP Laptop 14s-dq2xxx/87FD, BIOS F.15 09/15/2021\n [ T1387] RIP: 0010:dma_free_noncontiguous+0x37/0x80\n [ T1387] Code: [... snip ...]\n [ T1387] RSP: 0000:ffffc90002b87770 EFLAGS: 00010246\n [ T1387] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000\n [ T1387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888101db30d0\n [ T1387] RBP: 00000000fffffff4 R08: 0000000000000000 R09: 0000000000000000\n [ T1387] R10: 0000000000000000 R11: ffffc90002b874d0 R12: 0000000000000001\n [ T1387] R13: 0000000000058000 R14: ffff888105260c68 R15: ffff888105260828\n [ T1387] FS: 00007f42e2ffd640(0000) GS:ffff888466b80000(0000) knlGS:0000000000000000\n [ T1387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n [ T1387] CR2: 0000000000000000 CR3: 000000014acf0003 CR4: 0000000000770ee0\n [ T1387] PKRU: 55555554\n [ T1387] Call Trace:\n [ T1387] \n [ T1387] cl_stream_prepare+0x10a/0x120 [snd_sof_intel_hda_common 146addf995b9279ae7f509621078cccbe4f875e1]\n [... snip ...]\n [ T1387] "
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/01df5f7627f1624d6bb0b8c0870a569b32adfbf8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/09eca322d4118dc26570ca6100fa34e59e5a5143",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0c307349fe060971625b856c92f0361b8ea9a120",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/67f7bd9ff9079c1ee2de58e024fb582905c74c16",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b6094744e261083d3790c3def770ebf5060d383b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b7fb0ae09009d076964afe4c1a2bde1ee2bd88a9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49269.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49269.json
new file mode 100644
index 00000000000..9ab24ccb214
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49269.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49269",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:03.813",
+ "lastModified": "2025-02-26T07:01:03.813",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: isotp: sanitize CAN ID checks in isotp_bind()\n\nSyzbot created an environment that lead to a state machine status that\ncan not be reached with a compliant CAN ID address configuration.\nThe provided address information consisted of CAN ID 0x6000001 and 0xC28001\nwhich both boil down to 11 bit CAN IDs 0x001 in sending and receiving.\n\nSanitize the SFF/EFF CAN ID values before performing the address checks."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3ea566422cbde9610c2734980d1286ab681bb40e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7b4652fc71dcec043977a6def80ef5034c913615",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cf522d741f5301223cc94b978eb1603c7590d65e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d72866a7f5326160d2a9d945a33eb6ef1883e25d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f343dbe82314ab457153c9afd970be4e9e553020",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49270.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49270.json
new file mode 100644
index 00000000000..88bb9986a32
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49270.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49270",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:03.907",
+ "lastModified": "2025-02-26T07:01:03.907",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm: fix use-after-free in dm_cleanup_zoned_dev()\n\ndm_cleanup_zoned_dev() uses queue, so it must be called\nbefore blk_cleanup_disk() starts its killing:\n\nblk_cleanup_disk->blk_cleanup_queue()->kobject_put()->blk_release_queue()->\n->...RCU...->blk_free_queue_rcu()->kmem_cache_free()\n\nOtherwise, RCU callback may be executed first and\ndm_cleanup_zoned_dev() will touch free'd memory:\n\n BUG: KASAN: use-after-free in dm_cleanup_zoned_dev+0x33/0xd0\n Read of size 8 at addr ffff88805ac6e430 by task dmsetup/681\n\n CPU: 4 PID: 681 Comm: dmsetup Not tainted 5.17.0-rc2+ #6\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-2 04/01/2014\n Call Trace:\n \n dump_stack_lvl+0x57/0x7d\n print_address_description.constprop.0+0x1f/0x150\n ? dm_cleanup_zoned_dev+0x33/0xd0\n kasan_report.cold+0x7f/0x11b\n ? dm_cleanup_zoned_dev+0x33/0xd0\n dm_cleanup_zoned_dev+0x33/0xd0\n __dm_destroy+0x26a/0x400\n ? dm_blk_ioctl+0x230/0x230\n ? up_write+0xd8/0x270\n dev_remove+0x156/0x1d0\n ctl_ioctl+0x269/0x530\n ? table_clear+0x140/0x140\n ? lock_release+0xb2/0x750\n ? remove_all+0x40/0x40\n ? rcu_read_lock_sched_held+0x12/0x70\n ? lock_downgrade+0x3c0/0x3c0\n ? rcu_read_lock_sched_held+0x12/0x70\n dm_ctl_ioctl+0xa/0x10\n __x64_sys_ioctl+0xb9/0xf0\n do_syscall_64+0x3b/0x90\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n RIP: 0033:0x7fb6dfa95c27"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0987f00a76a17aa7213da492c00ed9e5a6210c73",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/43a043aed964659bc69ef81f266912b73c80d837",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/588b7f5df0cb64f281290c7672470c006abe7160",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fdfe414ca28ddfd562c233fb27385cf820de03e8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49271.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49271.json
new file mode 100644
index 00000000000..cd21c21a213
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49271.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49271",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:04.000",
+ "lastModified": "2025-02-26T07:01:04.000",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: prevent bad output lengths in smb2_ioctl_query_info()\n\nWhen calling smb2_ioctl_query_info() with\nsmb_query_info::flags=PASSTHRU_FSCTL and\nsmb_query_info::output_buffer_length=0, the following would return\n0x10\n\n\tbuffer = memdup_user(arg + sizeof(struct smb_query_info),\n\t\t\t qi.output_buffer_length);\n\tif (IS_ERR(buffer)) {\n\t\tkfree(vars);\n\t\treturn PTR_ERR(buffer);\n\t}\n\nrather than a valid pointer thus making IS_ERR() check fail. This\nwould then cause a NULL ptr deference in @buffer when accessing it\nlater in smb2_ioctl_query_ioctl(). While at it, prevent having a\n@buffer smaller than 8 bytes to correctly handle SMB2_SET_INFO\nFileEndOfFileInformation requests when\nsmb_query_info::flags=PASSTHRU_SET_INFO.\n\nHere is a small C reproducer which triggers a NULL ptr in @buffer when\npassing an invalid smb_query_info::flags\n\n\t#include \n\t#include \n\t#include \n\t#include \n\t#include \n\t#include \n\n\t#define die(s) perror(s), exit(1)\n\t#define QUERY_INFO 0xc018cf07\n\n\tint main(int argc, char *argv[])\n\t{\n\t\tint fd;\n\n\t\tif (argc < 2)\n\t\t\texit(1);\n\t\tfd = open(argv[1], O_RDONLY);\n\t\tif (fd == -1)\n\t\t\tdie(\"open\");\n\t\tif (ioctl(fd, QUERY_INFO, (uint32_t[]) { 0, 0, 0, 4, 0, 0}) == -1)\n\t\t\tdie(\"ioctl\");\n\t\tclose(fd);\n\t\treturn 0;\n\t}\n\n\tmount.cifs //srv/share /mnt -o ...\n\tgcc repro.c && ./a.out /mnt/f0\n\n\t[ 114.138620] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN NOPTI\n\t[ 114.139310] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\n\t[ 114.139775] CPU: 2 PID: 995 Comm: a.out Not tainted 5.17.0-rc8 #1\n\t[ 114.140148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.15.0-0-g2dd4b9b-rebuilt.opensuse.org 04/01/2014\n\t[ 114.140818] RIP: 0010:smb2_ioctl_query_info+0x206/0x410 [cifs]\n\t[ 114.141221] Code: 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 c8 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 7b 28 4c 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 9c 01 00 00 49 8b 3f e8 58 02 fb ff 48 8b 14 24\n\t[ 114.142348] RSP: 0018:ffffc90000b47b00 EFLAGS: 00010256\n\t[ 114.142692] RAX: dffffc0000000000 RBX: ffff888115503200 RCX: ffffffffa020580d\n\t[ 114.143119] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffffa043a380\n\t[ 114.143544] RBP: ffff888115503278 R08: 0000000000000001 R09: 0000000000000003\n\t[ 114.143983] R10: fffffbfff4087470 R11: 0000000000000001 R12: ffff888115503288\n\t[ 114.144424] R13: 00000000ffffffea R14: ffff888115503228 R15: 0000000000000000\n\t[ 114.144852] FS: 00007f7aeabdf740(0000) GS:ffff888151600000(0000) knlGS:0000000000000000\n\t[ 114.145338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n\t[ 114.145692] CR2: 00007f7aeacfdf5e CR3: 000000012000e000 CR4: 0000000000350ee0\n\t[ 114.146131] Call Trace:\n\t[ 114.146291] \n\t[ 114.146432] ? smb2_query_reparse_tag+0x890/0x890 [cifs]\n\t[ 114.146800] ? cifs_mapchar+0x460/0x460 [cifs]\n\t[ 114.147121] ? rcu_read_lock_sched_held+0x3f/0x70\n\t[ 114.147412] ? cifs_strndup_to_utf16+0x15b/0x250 [cifs]\n\t[ 114.147775] ? dentry_path_raw+0xa6/0xf0\n\t[ 114.148024] ? cifs_convert_path_to_utf16+0x198/0x220 [cifs]\n\t[ 114.148413] ? smb2_check_message+0x1080/0x1080 [cifs]\n\t[ 114.148766] ? rcu_read_lock_sched_held+0x3f/0x70\n\t[ 114.149065] cifs_ioctl+0x1577/0x3320 [cifs]\n\t[ 114.149371] ? lock_downgrade+0x6f0/0x6f0\n\t[ 114.149631] ? cifs_readdir+0x2e60/0x2e60 [cifs]\n\t[ 114.149956] ? rcu_read_lock_sched_held+0x3f/0x70\n\t[ 114.150250] ? __rseq_handle_notify_resume+0x80b/0xbe0\n\t[ 114.150562] ? __up_read+0x192/0x710\n\t[ 114.150791] ? __ia32_sys_rseq+0xf0/0xf0\n\t[ 114.151025] ? __x64_sys_openat+0x11f/0x1d0\n\t[ 114.151296] __x64_sys_ioctl+0x127/0x190\n\t[ 114.151549] do_syscall_64+0x3b/0x90\n\t[ 114.151768] entry_SYSCALL_64_after_hwframe+0x44/0xae\n\t[ 114.152079] RIP: 0033:0x7f7aead043df\n\t[ 114.152306] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/7529fbee10d82493c5cb109e51788bf74816d1c0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9963ccea6087268e1275b992dca5d0dd4b938765",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b92e358757b91c2827af112cae9af513f26a3f34",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f143f8334fb9eb2f6c7c15b9da1472d9c965fd84",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fadddfc1dc3c6f79b21cff4a7e9a6c40b84fbc53",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49272.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49272.json
new file mode 100644
index 00000000000..28c314d39ad
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49272.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49272",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:04.097",
+ "lastModified": "2025-02-26T07:01:04.097",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock\n\nsyzbot caught a potential deadlock between the PCM\nruntime->buffer_mutex and the mm->mmap_lock. It was brought by the\nrecent fix to cover the racy read/write and other ioctls, and in that\ncommit, I overlooked a (hopefully only) corner case that may take the\nrevert lock, namely, the OSS mmap. The OSS mmap operation\nexceptionally allows to re-configure the parameters inside the OSS\nmmap syscall, where mm->mmap_mutex is already held. Meanwhile, the\ncopy_from/to_user calls at read/write operations also take the\nmm->mmap_lock internally, hence it may lead to a AB/BA deadlock.\n\nA similar problem was already seen in the past and we fixed it with a\nrefcount (in commit b248371628aa). The former fix covered only the\ncall paths with OSS read/write and OSS ioctls, while we need to cover\nthe concurrent access via both ALSA and OSS APIs now.\n\nThis patch addresses the problem above by replacing the buffer_mutex\nlock in the read/write operations with a refcount similar as we've\nused for OSS. The new field, runtime->buffer_accessing, keeps the\nnumber of concurrent read/write operations. Unlike the former\nbuffer_mutex protection, this protects only around the\ncopy_from/to_user() calls; the other codes are basically protected by\nthe PCM stream lock. The refcount can be a negative, meaning blocked\nby the ioctls. If a negative value is seen, the read/write aborts\nwith -EBUSY. In the ioctl side, OTOH, they check this refcount, too,\nand set to a negative value for blocking unless it's already being\naccessed."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/40f4cffbe13a51faf136faf5f9ef6847782cd595",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7777744e92a0b30e3e0cce2758d911837011ebd9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7e9133607e1501c94881be35e118d8f84d96dcb4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9017201e8d8c6d1472273361389ed431188584a0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9661bf674d6a82b76e4ae424438a8ce1e3ed855d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/abedf0d08c79d76da0d6fa0d5dbbc98871dcbc2e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bc55cfd5718c7c23e5524582e9fa70b4d10f2433",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/be9813ad2fc8f0885f5ce6925af0d993ce5da4e5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49273.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49273.json
new file mode 100644
index 00000000000..09ad2d09c49
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49273.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49273",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:04.190",
+ "lastModified": "2025-02-26T07:01:04.190",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: pl031: fix rtc features null pointer dereference\n\nWhen there is no interrupt line, rtc alarm feature is disabled.\n\nThe clearing of the alarm feature bit was being done prior to allocations\nof ldata->rtc device, resulting in a null pointer dereference.\n\nClear RTC_FEATURE_ALARM after the rtc device is allocated."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1b915703964f7e636961df04c540261dc55c6c70",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cd2722e411e8ab7e5ae41102f6925fa13dffdac5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d274ce4a3dfd0b9a292667535578359b865765cb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ea6af39f3da50c86367a71eb3cc674ade3ed244c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49274.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49274.json
new file mode 100644
index 00000000000..f94eff9d2e9
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49274.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49274",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:04.280",
+ "lastModified": "2025-02-26T07:01:04.280",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix crash when mount with quota enabled\n\nThere is a reported crash when mounting ocfs2 with quota enabled.\n\n RIP: 0010:ocfs2_qinfo_lock_res_init+0x44/0x50 [ocfs2]\n Call Trace:\n ocfs2_local_read_info+0xb9/0x6f0 [ocfs2]\n dquot_load_quota_sb+0x216/0x470\n dquot_load_quota_inode+0x85/0x100\n ocfs2_enable_quotas+0xa0/0x1c0 [ocfs2]\n ocfs2_fill_super.cold+0xc8/0x1bf [ocfs2]\n mount_bdev+0x185/0x1b0\n legacy_get_tree+0x27/0x40\n vfs_get_tree+0x25/0xb0\n path_mount+0x465/0xac0\n __x64_sys_mount+0x103/0x140\n\nIt is caused by when initializing dqi_gqlock, the corresponding dqi_type\nand dqi_sb are not properly initialized.\n\nThis issue is introduced by commit 6c85c2c72819, which wants to avoid\naccessing uninitialized variables in error cases. So make global quota\ninfo properly initialized."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/01931e1c4e3de5d777253acae64c0e8fd071a1dd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7c5312fdb1dcfdc1951b018669af88d5d6420b31",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/de19433423c7bedabbd4f9a25f7dbc62c5e78921",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eda31f77317647b9fbf889779ee1fb6907651865",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49275.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49275.json
new file mode 100644
index 00000000000..0428c35861d
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49275.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49275",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:04.370",
+ "lastModified": "2025-02-26T07:01:04.370",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: m_can: m_can_tx_handler(): fix use after free of skb\n\ncan_put_echo_skb() will clone skb then free the skb. Move the\ncan_put_echo_skb() for the m_can version 3.0.x directly before the\nstart of the xmit in hardware, similar to the 3.1.x branch."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/08d90846e438ac22dc56fc49ec0b0d195831c5ed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2e8e79c416aae1de224c0f1860f2e3350fa171f8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/31417073493f302d26ab66b3abc098d43227b835",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4db7d6f481990dd179a9ee7126dc7aa31ea4fff3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7728d937ec403a1ceff9483023252d2cb8777f81",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/869016a2938ac44f7b2fb7fc22c89edad99eb9b3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d3892a747ab16b1eb6593a19d29f62c3b3f020ac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d93ed9aff64968f4cdad690712eb4f48ae537bde",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f43e64076ff1b1dcb893fb77ad1204105f710a29",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49276.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49276.json
new file mode 100644
index 00000000000..7cee876f677
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49276.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49276",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:04.470",
+ "lastModified": "2025-02-26T07:01:04.470",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\njffs2: fix memory leak in jffs2_scan_medium\n\nIf an error is returned in jffs2_scan_eraseblock() and some memory\nhas been added to the jffs2_summary *s, we can observe the following\nkmemleak report:\n\n--------------------------------------------\nunreferenced object 0xffff88812b889c40 (size 64):\n comm \"mount\", pid 692, jiffies 4294838325 (age 34.288s)\n hex dump (first 32 bytes):\n 40 48 b5 14 81 88 ff ff 01 e0 31 00 00 00 50 00 @H........1...P.\n 00 00 01 00 00 00 01 00 00 00 02 00 00 00 09 08 ................\n backtrace:\n [] __kmalloc+0x613/0x910\n [] jffs2_sum_add_dirent_mem+0x5c/0xa0\n [] jffs2_scan_medium.cold+0x36e5/0x4794\n [] jffs2_do_mount_fs.cold+0xa7/0x2267\n [] jffs2_do_fill_super+0x383/0xc30\n [] jffs2_fill_super+0x2ea/0x4c0\n [] mtd_get_sb+0x254/0x400\n [] mtd_get_sb_by_nr+0x4f/0xd0\n [] get_tree_mtd+0x498/0x840\n [] jffs2_get_tree+0x25/0x30\n [] vfs_get_tree+0x8d/0x2e0\n [] path_mount+0x50f/0x1e50\n [] do_mount+0x107/0x130\n [] __se_sys_mount+0x1c5/0x2f0\n [] __x64_sys_mount+0xc7/0x160\n [] do_syscall_64+0x45/0x70\nunreferenced object 0xffff888114b54840 (size 32):\n comm \"mount\", pid 692, jiffies 4294838325 (age 34.288s)\n hex dump (first 32 bytes):\n c0 75 b5 14 81 88 ff ff 02 e0 02 00 00 00 02 00 .u..............\n 00 00 84 00 00 00 44 00 00 00 6b 6b 6b 6b 6b a5 ......D...kkkkk.\n backtrace:\n [] kmem_cache_alloc_trace+0x584/0x880\n [] jffs2_sum_add_inode_mem+0x54/0x90\n [] jffs2_scan_medium.cold+0x4481/0x4794\n [...]\nunreferenced object 0xffff888114b57280 (size 32):\n comm \"mount\", pid 692, jiffies 4294838393 (age 34.357s)\n hex dump (first 32 bytes):\n 10 d5 6c 11 81 88 ff ff 08 e0 05 00 00 00 01 00 ..l.............\n 00 00 38 02 00 00 28 00 00 00 6b 6b 6b 6b 6b a5 ..8...(...kkkkk.\n backtrace:\n [] kmem_cache_alloc_trace+0x584/0x880\n [] jffs2_sum_add_xattr_mem+0x54/0x90\n [] jffs2_scan_medium.cold+0x298c/0x4794\n [...]\nunreferenced object 0xffff8881116cd510 (size 16):\n comm \"mount\", pid 692, jiffies 4294838395 (age 34.355s)\n hex dump (first 16 bytes):\n 00 00 00 00 00 00 00 00 09 e0 60 02 00 00 6b a5 ..........`...k.\n backtrace:\n [] kmem_cache_alloc_trace+0x584/0x880\n [] jffs2_sum_add_xref_mem+0x54/0x90\n [] jffs2_scan_medium.cold+0x3a20/0x4794\n [...]\n--------------------------------------------\n\nTherefore, we should call jffs2_sum_reset_collected(s) on exit to\nrelease the memory added in s. In addition, a new tag \"out_buf\" is\nadded to prevent the NULL pointer reference caused by s being NULL.\n(thanks to Zhang Yi for this analysis)"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/455f4a23490bfcbedc8e5c245c463a59b19e5ddd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/51dbb5e36d59f62e34d462b801c1068248149cfe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/52ba0ab4f0a606f02a6163493378989faa1ec10a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/82462324bf35b6b553400af1c1aa265069cee28f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9b0c69182f09b70779817af4dcf89780955d5c4c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9cdd3128874f5fe759e2c4e1360ab7fb96a8d1df",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b26bbc0c122cad038831f226a4cb4de702225e16",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b36bccb04e14cc0c1e2d0e92d477fe220314fad6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e711913463af916d777a4873068f415f1fe2ad33",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49277.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49277.json
new file mode 100644
index 00000000000..2269773cce5
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49277.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49277",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:04.567",
+ "lastModified": "2025-02-26T07:01:04.567",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\njffs2: fix memory leak in jffs2_do_mount_fs\n\nIf jffs2_build_filesystem() in jffs2_do_mount_fs() returns an error,\nwe can observe the following kmemleak report:\n\n--------------------------------------------\nunreferenced object 0xffff88811b25a640 (size 64):\n comm \"mount\", pid 691, jiffies 4294957728 (age 71.952s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [] kmem_cache_alloc_trace+0x584/0x880\n [] jffs2_sum_init+0x86/0x130\n [] jffs2_do_mount_fs+0x798/0xac0\n [] jffs2_do_fill_super+0x383/0xc30\n [] jffs2_fill_super+0x2ea/0x4c0\n [...]\nunreferenced object 0xffff88812c760000 (size 65536):\n comm \"mount\", pid 691, jiffies 4294957728 (age 71.952s)\n hex dump (first 32 bytes):\n bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................\n bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................\n backtrace:\n [] __kmalloc+0x6b9/0x910\n [] jffs2_sum_init+0xd7/0x130\n [] jffs2_do_mount_fs+0x798/0xac0\n [] jffs2_do_fill_super+0x383/0xc30\n [] jffs2_fill_super+0x2ea/0x4c0\n [...]\n--------------------------------------------\n\nThis is because the resources allocated in jffs2_sum_init() are not\nreleased. Call jffs2_sum_exit() to release these resources to solve\nthe problem."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0978e9af4559a171ac7a74a1b3ef21804b0a0fa9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2a9d8184458562e6bf2f40d0e677fc85e2dd3834",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4392e8aeebc5a4f8073620bccba7de1b1f6d7c88",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5f34310d1376ca5b2ed798258def2c2ab3cc6699",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/607d3aab7349f18e0d9dba4100d09d16fe27caca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9a0f6610c7daedd2eace430beeb08a8b7ac80699",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c94128470e6fe53d9bd9d16d2d3271813f9d37af",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d051cef784de4d54835f6b6836d98a8f6935772c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dbe0d0521eaa6a3d235517319266c539bb5c5112",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49278.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49278.json
new file mode 100644
index 00000000000..0cfb55698b7
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49278.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49278",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:04.660",
+ "lastModified": "2025-02-26T07:01:04.660",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nremoteproc: Fix count check in rproc_coredump_write()\n\nCheck count for 0, to avoid a potential underflow. Make the check the\nsame as the one in rproc_recovery_write()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/11572dad9fbadbd9269a2550f7e236b5b8c2d80c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/34afac3c75fa08d6fabbab4c93f0a90618afaaa6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a8c3e53517985d69040a1b36a269e85f99cf0cea",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b97b305656a7013690e7b6e310f0e827e0bbff90",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f89672cc3681952f2d06314981a6b45f8b0045d1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49279.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49279.json
new file mode 100644
index 00000000000..d0ad72dbc12
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49279.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49279",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:04.750",
+ "lastModified": "2025-02-26T07:01:04.750",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: prevent integer overflow on 32 bit systems\n\nOn a 32 bit system, the \"len * sizeof(*p)\" operation can have an\ninteger overflow."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/23a9dbbe0faf124fc4c139615633b9d12a3a89ef",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/303cd6173dce0a28d26526c77814eb90a41bd898",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3a2789e8ccb4a3e2a631f6817a2d3bb98b8c4fd8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/79b1c54fc6ce09ee0d5fe088bb3de26ae2150e3c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7af164fa2f1abc577d357d22d83a2f3490875d7e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ce1aa09cc14ed625104acc2d487bd92b9a88efe2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e4195d27306ea468a6dc3a27af6f586709951229",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49280.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49280.json
new file mode 100644
index 00000000000..581ee676d8e
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49280.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49280",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:04.840",
+ "lastModified": "2025-02-26T07:01:04.840",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: prevent underflow in nfssvc_decode_writeargs()\n\nSmatch complains:\n\n\tfs/nfsd/nfsxdr.c:341 nfssvc_decode_writeargs()\n\twarn: no lower bound on 'args->len'\n\nChange the type to unsigned to prevent this issue."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/184416d4b98509fb4c3d8fc3d6dc1437896cc159",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1a33e0de60feda402d05ac8a6cf409c19ea3e0b3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2764af8ce0bf03cc43ee4a11897cab96bde6caae",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/413d8fefafe531a9442bb623e3fe292a38f88d65",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/438068f4912183a59fcb6b7496a06437f7fd4e2b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/614a61e1592051cc42d3c38f899c9f7bdaad8a1d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/65e21cc042f4c1518c8c55283f53bc725b78419d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/85259340fc9bd54e3d567b41b881ecb4d0055da1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9f0f048c1bfa7867d565a95fd8c28f4484ba1043",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49281.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49281.json
new file mode 100644
index 00000000000..063e959e9ef
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49281.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49281",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:04.967",
+ "lastModified": "2025-02-26T07:01:04.967",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix handlecache and multiuser\n\nIn multiuser each individual user has their own tcon structure for the\nshare and thus their own handle for a cached directory.\nWhen we umount such a share we much make sure to release the pinned down dentry\nfor each such tcon and not just the master tcon.\n\nOtherwise we will get nasty warnings on umount that dentries are still in use:\n[ 3459.590047] BUG: Dentry 00000000115c6f41{i=12000000019d95,n=/} still in use\\\n (2) [unmount of cifs cifs]\n...\n[ 3459.590492] Call Trace:\n[ 3459.590500] d_walk+0x61/0x2a0\n[ 3459.590518] ? shrink_lock_dentry.part.0+0xe0/0xe0\n[ 3459.590526] shrink_dcache_for_umount+0x49/0x110\n[ 3459.590535] generic_shutdown_super+0x1a/0x110\n[ 3459.590542] kill_anon_super+0x14/0x30\n[ 3459.590549] cifs_kill_sb+0xf5/0x104 [cifs]\n[ 3459.590773] deactivate_locked_super+0x36/0xa0\n[ 3459.590782] cleanup_mnt+0x131/0x190\n[ 3459.590789] task_work_run+0x5c/0x90\n[ 3459.590798] exit_to_user_mode_loop+0x151/0x160\n[ 3459.590809] exit_to_user_mode_prepare+0x83/0xd0\n[ 3459.590818] syscall_exit_to_user_mode+0x12/0x30\n[ 3459.590828] do_syscall_64+0x48/0x90\n[ 3459.590833] entry_SYSCALL_64_after_hwframe+0x44/0xae"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2fafbc198613823943c106d1ec9b516da692059f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/47178c7722ac528ea08aa82c3ef9ffa178962d7a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e71f6a3a1d5c826a30384fec587ca7503ef6bde5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ffa631c4bff59dde59b598011f570e27dfba3515",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49282.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49282.json
new file mode 100644
index 00000000000..bdbdf18dc07
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49282.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49282",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:05.073",
+ "lastModified": "2025-02-26T07:01:05.073",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: quota: fix loop condition at f2fs_quota_sync()\n\ncnt should be passed to sb_has_quota_active() instead of type to check\nactive quota properly.\n\nMoreover, when the type is -1, the compiler with enough inline knowledge\ncan discard sb_has_quota_active() check altogether, causing a NULL pointer\ndereference at the following inode_lock(dqopt->files[cnt]):\n\n[ 2.796010] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0\n[ 2.796024] Mem abort info:\n[ 2.796025] ESR = 0x96000005\n[ 2.796028] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 2.796029] SET = 0, FnV = 0\n[ 2.796031] EA = 0, S1PTW = 0\n[ 2.796032] Data abort info:\n[ 2.796034] ISV = 0, ISS = 0x00000005\n[ 2.796035] CM = 0, WnR = 0\n[ 2.796046] user pgtable: 4k pages, 39-bit VAs, pgdp=00000003370d1000\n[ 2.796048] [00000000000000a0] pgd=0000000000000000, pud=0000000000000000\n[ 2.796051] Internal error: Oops: 96000005 [#1] PREEMPT SMP\n[ 2.796056] CPU: 7 PID: 640 Comm: f2fs_ckpt-259:7 Tainted: G S 5.4.179-arter97-r8-64666-g2f16e087f9d8 #1\n[ 2.796057] Hardware name: Qualcomm Technologies, Inc. Lahaina MTP lemonadep (DT)\n[ 2.796059] pstate: 80c00005 (Nzcv daif +PAN +UAO)\n[ 2.796065] pc : down_write+0x28/0x70\n[ 2.796070] lr : f2fs_quota_sync+0x100/0x294\n[ 2.796071] sp : ffffffa3f48ffc30\n[ 2.796073] x29: ffffffa3f48ffc30 x28: 0000000000000000\n[ 2.796075] x27: ffffffa3f6d718b8 x26: ffffffa415fe9d80\n[ 2.796077] x25: ffffffa3f7290048 x24: 0000000000000001\n[ 2.796078] x23: 0000000000000000 x22: ffffffa3f7290000\n[ 2.796080] x21: ffffffa3f72904a0 x20: ffffffa3f7290110\n[ 2.796081] x19: ffffffa3f77a9800 x18: ffffffc020aae038\n[ 2.796083] x17: ffffffa40e38e040 x16: ffffffa40e38e6d0\n[ 2.796085] x15: ffffffa40e38e6cc x14: ffffffa40e38e6d0\n[ 2.796086] x13: 00000000000004f6 x12: 00162c44ff493000\n[ 2.796088] x11: 0000000000000400 x10: ffffffa40e38c948\n[ 2.796090] x9 : 0000000000000000 x8 : 00000000000000a0\n[ 2.796091] x7 : 0000000000000000 x6 : 0000d1060f00002a\n[ 2.796093] x5 : ffffffa3f48ff718 x4 : 000000000000000d\n[ 2.796094] x3 : 00000000060c0000 x2 : 0000000000000001\n[ 2.796096] x1 : 0000000000000000 x0 : 00000000000000a0\n[ 2.796098] Call trace:\n[ 2.796100] down_write+0x28/0x70\n[ 2.796102] f2fs_quota_sync+0x100/0x294\n[ 2.796104] block_operations+0x120/0x204\n[ 2.796106] f2fs_write_checkpoint+0x11c/0x520\n[ 2.796107] __checkpoint_and_complete_reqs+0x7c/0xd34\n[ 2.796109] issue_checkpoint_thread+0x6c/0xb8\n[ 2.796112] kthread+0x138/0x414\n[ 2.796114] ret_from_fork+0x10/0x18\n[ 2.796117] Code: aa0803e0 aa1f03e1 52800022 aa0103e9 (c8e97d02)\n[ 2.796120] ---[ end trace 96e942e8eb6a0b53 ]---\n[ 2.800116] Kernel panic - not syncing: Fatal exception\n[ 2.800120] SMP: stopping secondary CPUs"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/680af5b824a52faa819167628665804a14f0e0df",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/724469814d805820cd37ea789769dba94123ff1a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e58ee6bd939b773675240f5d0f5b88a367c037c4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e9ebf1e8fc50b6a9336f9aea1082d7845e568d0e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f1d5946d47c0827bae39e1537959ce8d6f0224c5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f9156db0987f1b426015d56505e2c58dee70c90d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49283.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49283.json
new file mode 100644
index 00000000000..4c2bc6c91dd
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49283.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49283",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:05.167",
+ "lastModified": "2025-02-26T07:01:05.167",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: sysfb: fix platform-device leak in error path\n\nMake sure to free the platform device also in the unlikely event that\nregistration fails."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/202c08914ba50dd324e42d5ad99535a89f242560",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b3e38f939ab4d0d86f56bff3362c3f88c4b2ad32",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bb7fcbe80a013dc883181dc818c407d38558f76c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fed4df558b8cdb6f3beea38a7c977f118f082b0d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49284.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49284.json
new file mode 100644
index 00000000000..04a80446e8f
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49284.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49284",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:05.260",
+ "lastModified": "2025-02-26T07:01:05.260",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncoresight: syscfg: Fix memleak on registration failure in cscfg_create_device\n\ndevice_register() calls device_initialize(),\naccording to doc of device_initialize:\n\n Use put_device() to give up your reference instead of freeing\n * @dev directly once you have called this function.\n\nTo prevent potential memleak, use put_device() for error handling."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/412225b32986d5b11c3c1ad9234c50a3f5c52c76",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a529af1f5a5c096f3e18f0d5a32cfcc3d82df1ec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c61e2fc87f24cae4701f352fe9ecd4c5c143106c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cfa5dbcdd7aece76f3415284569f2f384aff0253",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49285.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49285.json
new file mode 100644
index 00000000000..26814abf73e
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49285.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49285",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:05.360",
+ "lastModified": "2025-02-26T07:01:05.360",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: accel: mma8452: use the correct logic to get mma8452_data\n\nThe original logic to get mma8452_data is wrong, the *dev point to\nthe device belong to iio_dev. we can't use this dev to find the\ncorrect i2c_client. The original logic happen to work because it\nfinally use dev->driver_data to get iio_dev. Here use the API\nto_i2c_client() is wrong and make reader confuse. To correct the\nlogic, it should be like this\n\n struct mma8452_data *data = iio_priv(dev_get_drvdata(dev));\n\nBut after commit 8b7651f25962 (\"iio: iio_device_alloc(): Remove\nunnecessary self drvdata\"), the upper logic also can't work.\nWhen try to show the avialable scale in userspace, will meet kernel\ndump, kernel handle NULL pointer dereference.\n\nSo use dev_to_iio_dev() to correct the logic.\n\nDual fixes tags as the second reflects when the bug was exposed, whilst\nthe first reflects when the original bug was introduced."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4c0bb583a4444cce224e8661090cbffc98e2fe07",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c87b7b12f48db86ac9909894f4dc0107d7df6375",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d2d9ebdbff79d87d27652578e6d1638ad3b5f3bf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49286.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49286.json
new file mode 100644
index 00000000000..da2346a8037
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49286.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49286",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:05.453",
+ "lastModified": "2025-02-26T07:01:05.453",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: use try_get_ops() in tpm-space.c\n\nAs part of the series conversion to remove nested TPM operations:\n\nhttps://lore.kernel.org/all/20190205224723.19671-1-jarkko.sakkinen@linux.intel.com/\n\nexposure of the chip->tpm_mutex was removed from much of the upper\nlevel code. In this conversion, tpm2_del_space() was missed. This\ndidn't matter much because it's usually called closely after a\nconverted operation, so there's only a very tiny race window where the\nchip can be removed before the space flushing is done which causes a\nNULL deref on the mutex. However, there are reports of this window\nbeing hit in practice, so fix this by converting tpm2_del_space() to\nuse tpm_try_get_ops(), which performs all the teardown checks before\nacquring the mutex."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/476ddd23f818fb94cf86fb5617f3bb9a7c92113d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5b1d2561a03e534064b51c50c774657833d3d2cf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/95193d12f10a8a088843b25e0f5fe1d83ec6b079",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ba84f9a48366dcc3cdef978599433efe101dd5bd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eda1662cce964c8a65bb86321f8d9cfa6e9ceaab",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fb5abce6b2bb5cb3d628aaa63fa821da8c4600f9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49287.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49287.json
new file mode 100644
index 00000000000..791d6330c1e
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49287.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49287",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:05.557",
+ "lastModified": "2025-02-26T07:01:05.557",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: fix reference counting for struct tpm_chip\n\nThe following sequence of operations results in a refcount warning:\n\n1. Open device /dev/tpmrm.\n2. Remove module tpm_tis_spi.\n3. Write a TPM command to the file descriptor opened at step 1.\n\n------------[ cut here ]------------\nWARNING: CPU: 3 PID: 1161 at lib/refcount.c:25 kobject_get+0xa0/0xa4\nrefcount_t: addition on 0; use-after-free.\nModules linked in: tpm_tis_spi tpm_tis_core tpm mdio_bcm_unimac brcmfmac\nsha256_generic libsha256 sha256_arm hci_uart btbcm bluetooth cfg80211 vc4\nbrcmutil ecdh_generic ecc snd_soc_core crc32_arm_ce libaes\nraspberrypi_hwmon ac97_bus snd_pcm_dmaengine bcm2711_thermal snd_pcm\nsnd_timer genet snd phy_generic soundcore [last unloaded: spi_bcm2835]\nCPU: 3 PID: 1161 Comm: hold_open Not tainted 5.10.0ls-main-dirty #2\nHardware name: BCM2711\n[] (unwind_backtrace) from [] (show_stack+0x10/0x14)\n[] (show_stack) from [] (dump_stack+0xc4/0xd8)\n[] (dump_stack) from [] (__warn+0x104/0x108)\n[] (__warn) from [] (warn_slowpath_fmt+0x74/0xb8)\n[] (warn_slowpath_fmt) from [] (kobject_get+0xa0/0xa4)\n[] (kobject_get) from [] (tpm_try_get_ops+0x14/0x54 [tpm])\n[] (tpm_try_get_ops [tpm]) from [] (tpm_common_write+0x38/0x60 [tpm])\n[] (tpm_common_write [tpm]) from [] (vfs_write+0xc4/0x3c0)\n[] (vfs_write) from [] (ksys_write+0x58/0xcc)\n[] (ksys_write) from [] (ret_fast_syscall+0x0/0x4c)\nException stack(0xc226bfa8 to 0xc226bff0)\nbfa0: 00000000 000105b4 00000003 beafe664 00000014 00000000\nbfc0: 00000000 000105b4 000103f8 00000004 00000000 00000000 b6f9c000 beafe684\nbfe0: 0000006c beafe648 0001056c b6eb6944\n---[ end trace d4b8409def9b8b1f ]---\n\nThe reason for this warning is the attempt to get the chip->dev reference\nin tpm_common_write() although the reference counter is already zero.\n\nSince commit 8979b02aaf1d (\"tpm: Fix reference count to main device\") the\nextra reference used to prevent a premature zero counter is never taken,\nbecause the required TPM_CHIP_FLAG_TPM2 flag is never set.\n\nFix this by moving the TPM 2 character device handling from\ntpm_chip_alloc() to tpm_add_char_device() which is called at a later point\nin time when the flag has been set in case of TPM2.\n\nCommit fdc915f7f719 (\"tpm: expose spaces via a device link /dev/tpmrm\")\nalready introduced function tpm_devs_release() to release the extra\nreference but did not implement the required put on chip->devs that results\nin the call of this function.\n\nFix this by putting chip->devs in tpm_chip_unregister().\n\nFinally move the new implementation for the TPM 2 handling into a new\nfunction to avoid multiple checks for the TPM_CHIP_FLAG_TPM2 flag in the\ngood case and error cases."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/290e05f346d1829e849662c97e42d5ad984f5258",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2f928c0d5c02dbab49e8c19d98725c822f6fc409",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/473a66f99cb8173c14138c5a5c69bfad04e8f9ac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/662893b4f6bd466ff9e1cd454c44c26d32d554fe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6e7baf84149fb43950631415de231b3a41915aa3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7e0438f83dc769465ee663bb5dcf8cc154940712",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a27ed2f3695baf15f9b34d2d7a1f9fc105539a81",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cb64bd038beacb4331fe464a36c8b5481e8f51e2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49288.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49288.json
new file mode 100644
index 00000000000..ebf4bcb6281
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49288.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49288",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:05.657",
+ "lastModified": "2025-02-26T07:01:05.657",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: pcm: Fix races among concurrent prealloc proc writes\n\nWe have no protection against concurrent PCM buffer preallocation\nchanges via proc files, and it may potentially lead to UAF or some\nweird problem. This patch applies the PCM open_mutex to the proc\nwrite operation for avoiding the racy proc writes and the PCM stream\nopen (and further operations)."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/37b12c16beb6f6c1c3c678c1aacbc46525c250f7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/51fce708ab8986a9879ee5da946a2cc120f1036d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5ed8f8e3c4e59d0396b9ccf2e639711e24295bb6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/69534c48ba8ce552ce383b3dfdb271ffe51820c3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a21d2f323b5a978dedf9ff1d50f101f85e39b3f2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b560d670c87d7d40b3cf6949246fa4c7aa65a00a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e14dca613e0a6ddc2bf6e360f16936a9f865205b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e7786c445bb67a9a6e64f66ebd6b7215b153ff7d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49289.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49289.json
new file mode 100644
index 00000000000..90753e35b69
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49289.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49289",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:05.757",
+ "lastModified": "2025-02-26T07:01:05.757",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nuaccess: fix integer overflow on access_ok()\n\nThree architectures check the end of a user access against the\naddress limit without taking a possible overflow into account.\nPassing a negative length or another overflow in here returns\nsuccess when it should not.\n\nUse the most common correct implementation here, which optimizes\nfor a constant 'size' argument, and turns the common case into a\nsingle comparison."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/222ca305c9fd39e5ed8104da25c09b2b79a516a8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/99801e2f457824955da4aadaa035913a6dede03a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a1ad747fc1a0e06d1bf26b996ee8a56b5c8d02d8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e65d28d4e9bf90a35ba79c06661a572a38391dec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49290.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49290.json
new file mode 100644
index 00000000000..43b03c1d676
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49290.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49290",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:05.853",
+ "lastModified": "2025-02-26T07:01:05.853",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmac80211: fix potential double free on mesh join\n\nWhile commit 6a01afcf8468 (\"mac80211: mesh: Free ie data when leaving\nmesh\") fixed a memory leak on mesh leave / teardown it introduced a\npotential memory corruption caused by a double free when rejoining the\nmesh:\n\n ieee80211_leave_mesh()\n -> kfree(sdata->u.mesh.ie);\n ...\n ieee80211_join_mesh()\n -> copy_mesh_setup()\n -> old_ie = ifmsh->ie;\n -> kfree(old_ie);\n\nThis double free / kernel panics can be reproduced by using wpa_supplicant\nwith an encrypted mesh (if set up without encryption via \"iw\" then\nifmsh->ie is always NULL, which avoids this issue). And then calling:\n\n $ iw dev mesh0 mesh leave\n $ iw dev mesh0 mesh join my-mesh\n\nNote that typically these commands are not used / working when using\nwpa_supplicant. And it seems that wpa_supplicant or wpa_cli are going\nthrough a NETDEV_DOWN/NETDEV_UP cycle between a mesh leave and mesh join\nwhere the NETDEV_UP resets the mesh.ie to NULL via a memcpy of\ndefault_mesh_setup in cfg80211_netdev_notifier_call, which then avoids\nthe memory corruption, too.\n\nThe issue was first observed in an application which was not using\nwpa_supplicant but \"Senf\" instead, which implements its own calls to\nnl80211.\n\nFixing the issue by removing the kfree()'ing of the mesh IE in the mesh\njoin function and leaving it solely up to the mesh leave to free the\nmesh IE."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/12e407a8ef17623823fd0c066fbd7f103953d28d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/273ebddc5fda2967492cb0b6cdd7d81cfb821b76",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3bbd0000d012f92aec423b224784fbf0f7bf40f8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/46bb87d40683337757a2f902fcd4244b32bb4e86",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4a2d4496e15ea5bb5c8e83b94ca8ca7fb045e7d3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/582d8c60c0c053684f7138875e8150d5749ffc17",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5d3ff9542a40ce034416bca03864709540a36016",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/615716af8644813355e014314a0bc1e961250f5a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c1d9c3628ef0a0ca197595d0f9e01cd3b5dda186",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49291.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49291.json
new file mode 100644
index 00000000000..8c1b3ac6289
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49291.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49291",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:05.950",
+ "lastModified": "2025-02-26T07:01:05.950",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: pcm: Fix races among concurrent hw_params and hw_free calls\n\nCurrently we have neither proper check nor protection against the\nconcurrent calls of PCM hw_params and hw_free ioctls, which may result\nin a UAF. Since the existing PCM stream lock can't be used for\nprotecting the whole ioctl operations, we need a new mutex to protect\nthose racy calls.\n\nThis patch introduced a new mutex, runtime->buffer_mutex, and applies\nit to both hw_params and hw_free ioctl code paths. Along with it, the\nboth functions are slightly modified (the mmap_count check is moved\ninto the state-check block) for code simplicity."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0090c13cbbdffd7da079ac56f80373a9a1be0bf8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0f6947f5f5208f6ebd4d76a82a4757e2839a23f8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1bbf82d9f961414d6c76a08f7f843ea068e0ab7b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/33061d0fba51d2bf70a2ef9645f703c33fe8e438",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/92ee3c60ec9fe64404dc035e7c41277d74aa26cb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9cb6c40a6ebe4a0cfc9d6a181958211682cffea9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a42aa926843acca96c0dfbde2e835b8137f2f092",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fbeb492694ce0441053de57699e1e2b7bc148a69",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49292.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49292.json
new file mode 100644
index 00000000000..7e40d6f88ef
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49292.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49292",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:06.047",
+ "lastModified": "2025-02-26T07:01:06.047",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: oss: Fix PCM OSS buffer allocation overflow\n\nWe've got syzbot reports hitting INT_MAX overflow at vmalloc()\nallocation that is called from snd_pcm_plug_alloc(). Although we\napply the restrictions to input parameters, it's based only on the\nhw_params of the underlying PCM device. Since the PCM OSS layer\nallocates a temporary buffer for the data conversion, the size may\nbecome unexpectedly large when more channels or higher rates is given;\nin the reported case, it went over INT_MAX, hence it hits WARN_ON().\n\nThis patch is an attempt to avoid such an overflow and an allocation\nfor too large buffers. First off, it adds the limit of 1MB as the\nupper bound for period bytes. This must be large enough for all use\ncases, and we really don't want to handle a larger temporary buffer\nthan this size. The size check is performed at two places, where the\noriginal period bytes is calculated and where the plugin buffer size\nis calculated.\n\nIn addition, the driver uses array_size() and array3_size() for\nmultiplications to catch overflows for the converted period size and\nbuffer bytes."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0c4190b41a69990666b4000999e27f8f1b2a426b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5ce74ff7059341d8b2f4d01c3383491df63d1898",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7a40cbf3579a8e14849ba7ce46309c1992658d2b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a63af1baf0a5e11827db60e3127f87e437cab6e5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e74a069c6a7bb505f3ade141dddf85f4b0b5145a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/efb6402c3c4a7c26d97c92d70186424097b6e366",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fb08bf99195a87c798bc8ae1357337a981faeade",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49293.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49293.json
new file mode 100644
index 00000000000..f6e65434926
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49293.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49293",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:06.140",
+ "lastModified": "2025-02-26T07:01:06.140",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: initialize registers in nft_do_chain()\n\nInitialize registers to avoid stack leak into userspace."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/06f0ff82c70241a766a811ae1acf07d6e2734dcb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2c74374c2e88c7b7992bf808d9f9391f7452f9d9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4c905f6740a365464e91467aa50916555b28213d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4d28522acd1c4415c85f6b33463713a268f68965",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/64f24c76dd0ce53d0fa3a0bfb9aeea507c769485",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/88791b79a1eb2ba94e95d039243e28433583a67b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a3cc32863b175168283cb0a5fde08de6a1e27df9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dd03640529204ef4b8189fbdea08217d8d98271f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fafb904156fbb8f1dd34970cd5223e00b47c33be",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49294.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49294.json
new file mode 100644
index 00000000000..29eb759518e
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49294.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49294",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:06.237",
+ "lastModified": "2025-02-26T07:01:06.237",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Check if modulo is 0 before dividing.\n\n[How & Why]\nIf a value of 0 is read, then this will cause a divide-by-0 panic."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/07efce8269a038c37814eb656b4de14aa3015fc6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/10ef82d6e0af5536ec64770c07f6bbabfdd6977c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/49947b906a6bd9668eaf4f9cf691973c25c26955",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/96725758eff7b3805e4e94d1443a100757412720",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49295.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49295.json
new file mode 100644
index 00000000000..f93ca519133
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49295.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49295",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:06.333",
+ "lastModified": "2025-02-26T07:01:06.333",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnbd: call genl_unregister_family() first in nbd_cleanup()\n\nOtherwise there may be race between module removal and the handling of\nnetlink command, which can lead to the oops as shown below:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000098\n Oops: 0002 [#1] SMP PTI\n CPU: 1 PID: 31299 Comm: nbd-client Tainted: G E 5.14.0-rc4\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996)\n RIP: 0010:down_write+0x1a/0x50\n Call Trace:\n start_creating+0x89/0x130\n debugfs_create_dir+0x1b/0x130\n nbd_start_device+0x13d/0x390 [nbd]\n nbd_genl_connect+0x42f/0x748 [nbd]\n genl_family_rcv_msg_doit.isra.0+0xec/0x150\n genl_rcv_msg+0xe5/0x1e0\n netlink_rcv_skb+0x55/0x100\n genl_rcv+0x29/0x40\n netlink_unicast+0x1a8/0x250\n netlink_sendmsg+0x21b/0x430\n ____sys_sendmsg+0x2a4/0x2d0\n ___sys_sendmsg+0x81/0xc0\n __sys_sendmsg+0x62/0xb0\n __x64_sys_sendmsg+0x1f/0x30\n do_syscall_64+0x3b/0xc0\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n Modules linked in: nbd(E-)"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/013a79f1b5c89290e2e97f1ebf14b14e0cf5fe5c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/06c4da89c24e7023ea448cadf8e9daf06a0aae6e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1be608e1ee1f222464b2856bda9b85ab5184a33e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3d5da1ffba3388c2ae2e6c598855a4d887d3bf79",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6f505bbb8063fd3a238a4239d2d8c165e5279f6f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8a1435c862ea09b06be7acda325128dc08458e25",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c0868f6e728c3c28bef0e8bee89d2daf86a8bbca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cbeafa7a79d08ecdb55f8f1d41a11323d0f709db",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49296.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49296.json
new file mode 100644
index 00000000000..cdd6bcfce14
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49296.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49296",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:06.433",
+ "lastModified": "2025-02-26T07:01:06.433",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix possible deadlock when holding Fwb to get inline_data\n\n1, mount with wsync.\n2, create a file with O_RDWR, and the request was sent to mds.0:\n\n ceph_atomic_open()-->\n ceph_mdsc_do_request(openc)\n finish_open(file, dentry, ceph_open)-->\n ceph_open()-->\n ceph_init_file()-->\n ceph_init_file_info()-->\n ceph_uninline_data()-->\n {\n ...\n if (inline_version == 1 || /* initial version, no data */\n inline_version == CEPH_INLINE_NONE)\n goto out_unlock;\n ...\n }\n\nThe inline_version will be 1, which is the initial version for the\nnew create file. And here the ci->i_inline_version will keep with 1,\nit's buggy.\n\n3, buffer write to the file immediately:\n\n ceph_write_iter()-->\n ceph_get_caps(file, need=Fw, want=Fb, ...);\n generic_perform_write()-->\n a_ops->write_begin()-->\n ceph_write_begin()-->\n netfs_write_begin()-->\n netfs_begin_read()-->\n netfs_rreq_submit_slice()-->\n netfs_read_from_server()-->\n rreq->netfs_ops->issue_read()-->\n ceph_netfs_issue_read()-->\n {\n ...\n if (ci->i_inline_version != CEPH_INLINE_NONE &&\n ceph_netfs_issue_op_inline(subreq))\n return;\n ...\n }\n ceph_put_cap_refs(ci, Fwb);\n\nThe ceph_netfs_issue_op_inline() will send a getattr(Fsr) request to\nmds.1.\n\n4, then the mds.1 will request the rd lock for CInode::filelock from\nthe auth mds.0, the mds.0 will do the CInode::filelock state transation\nfrom excl --> sync, but it need to revoke the Fxwb caps back from the\nclients.\n\nWhile the kernel client has aleady held the Fwb caps and waiting for\nthe getattr(Fsr).\n\nIt's deadlock!\n\nURL: https://tracker.ceph.com/issues/55377"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/292b7a7275ce535a1abfa4dd0b2e586162aaae1e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/825978fd6a0defc3c29d8a38b6cea76a0938d21e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49297.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49297.json
new file mode 100644
index 00000000000..38e5fae8d4f
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49297.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49297",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:06.527",
+ "lastModified": "2025-02-26T07:01:06.527",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnbd: fix io hung while disconnecting device\n\nIn our tests, \"qemu-nbd\" triggers a io hung:\n\nINFO: task qemu-nbd:11445 blocked for more than 368 seconds.\n Not tainted 5.18.0-rc3-next-20220422-00003-g2176915513ca #884\n\"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\ntask:qemu-nbd state:D stack: 0 pid:11445 ppid: 1 flags:0x00000000\nCall Trace:\n \n __schedule+0x480/0x1050\n ? _raw_spin_lock_irqsave+0x3e/0xb0\n schedule+0x9c/0x1b0\n blk_mq_freeze_queue_wait+0x9d/0xf0\n ? ipi_rseq+0x70/0x70\n blk_mq_freeze_queue+0x2b/0x40\n nbd_add_socket+0x6b/0x270 [nbd]\n nbd_ioctl+0x383/0x510 [nbd]\n blkdev_ioctl+0x18e/0x3e0\n __x64_sys_ioctl+0xac/0x120\n do_syscall_64+0x35/0x80\n entry_SYSCALL_64_after_hwframe+0x44/0xae\nRIP: 0033:0x7fd8ff706577\nRSP: 002b:00007fd8fcdfebf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 0000000040000000 RCX: 00007fd8ff706577\nRDX: 000000000000000d RSI: 000000000000ab00 RDI: 000000000000000f\nRBP: 000000000000000f R08: 000000000000fbe8 R09: 000055fe497c62b0\nR10: 00000002aff20000 R11: 0000000000000246 R12: 000000000000006d\nR13: 0000000000000000 R14: 00007ffe82dc5e70 R15: 00007fd8fcdff9c0\n\n\"qemu-ndb -d\" will call ioctl 'NBD_DISCONNECT' first, however, following\nmessage was found:\n\nblock nbd0: Send disconnect failed -32\n\nWhich indicate that something is wrong with the server. Then,\n\"qemu-nbd -d\" will call ioctl 'NBD_CLEAR_SOCK', however ioctl can't clear\nrequests after commit 2516ab1543fd(\"nbd: only clear the queue on device\nteardown\"). And in the meantime, request can't complete through timeout\nbecause nbd_xmit_timeout() will always return 'BLK_EH_RESET_TIMER', which\nmeans such request will never be completed in this situation.\n\nNow that the flag 'NBD_CMD_INFLIGHT' can make sure requests won't\ncomplete multiple times, switch back to call nbd_clear_sock() in\nnbd_clear_sock_ioctl(), so that inflight requests can be cleared."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/09dadb5985023e27d4740ebd17e6fea4640110e5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/141318e62db87105b0103fccc59c9c5940da248d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/54b06dc2a206b4d67349bb56b92d4bd32700b7b1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/62d227f67a8c25d5e16f40e5290607f9306d2188",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/67e403136a0e1a55fef6a05f103a3979a39ad3fd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/69893d6d7f5c10d8306c1b5fc64b71efc91aa6cd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c4ba982bd5084fa659ef518aaf159e4dab02ecda",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f72df77600a43e59b3189e53b47f8685739867d3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49298.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49298.json
new file mode 100644
index 00000000000..08797015144
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49298.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49298",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:06.630",
+ "lastModified": "2025-02-26T07:01:06.630",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: rtl8712: fix uninit-value in r871xu_drv_init()\n\nWhen 'tmpU1b' returns from r8712_read8(padapter, EE_9346CR) is 0,\n'mac[6]' will not be initialized.\n\nBUG: KMSAN: uninit-value in r871xu_drv_init+0x2d54/0x3070 drivers/staging/rtl8712/usb_intf.c:541\n r871xu_drv_init+0x2d54/0x3070 drivers/staging/rtl8712/usb_intf.c:541\n usb_probe_interface+0xf19/0x1600 drivers/usb/core/driver.c:396\n really_probe+0x653/0x14b0 drivers/base/dd.c:596\n __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:752\n driver_probe_device drivers/base/dd.c:782 [inline]\n __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:899\n bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427\n __device_attach+0x593/0x8e0 drivers/base/dd.c:970\n device_initial_probe+0x4a/0x60 drivers/base/dd.c:1017\n bus_probe_device+0x17b/0x3e0 drivers/base/bus.c:487\n device_add+0x1fff/0x26e0 drivers/base/core.c:3405\n usb_set_configuration+0x37e9/0x3ed0 drivers/usb/core/message.c:2170\n usb_generic_driver_probe+0x13c/0x300 drivers/usb/core/generic.c:238\n usb_probe_device+0x309/0x570 drivers/usb/core/driver.c:293\n really_probe+0x653/0x14b0 drivers/base/dd.c:596\n __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:752\n driver_probe_device drivers/base/dd.c:782 [inline]\n __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:899\n bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427\n __device_attach+0x593/0x8e0 drivers/base/dd.c:970\n device_initial_probe+0x4a/0x60 drivers/base/dd.c:1017\n bus_probe_device+0x17b/0x3e0 drivers/base/bus.c:487\n device_add+0x1fff/0x26e0 drivers/base/core.c:3405\n usb_new_device+0x1b8e/0x2950 drivers/usb/core/hub.c:2566\n hub_port_connect drivers/usb/core/hub.c:5358 [inline]\n hub_port_connect_change drivers/usb/core/hub.c:5502 [inline]\n port_event drivers/usb/core/hub.c:5660 [inline]\n hub_event+0x58e3/0x89e0 drivers/usb/core/hub.c:5742\n process_one_work+0xdb6/0x1820 kernel/workqueue.c:2307\n worker_thread+0x10b3/0x21e0 kernel/workqueue.c:2454\n kthread+0x3c7/0x500 kernel/kthread.c:377\n ret_from_fork+0x1f/0x30\n\nLocal variable mac created at:\n r871xu_drv_init+0x1771/0x3070 drivers/staging/rtl8712/usb_intf.c:394\n usb_probe_interface+0xf19/0x1600 drivers/usb/core/driver.c:396\n\nKMSAN: uninit-value in r871xu_drv_init\nhttps://syzkaller.appspot.com/bug?id=3cd92b1d85428b128503bfa7a250294c9ae00bd8"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0458e5428e5e959d201a40ffe71d762a79ecedc4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0b7371a22489cbb2e8e826ca03fb5ce92afb04fe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/277faa442fe0c59f418ac53f47a78e1266addd65",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/52a0d88c328098b4e9fb8f2f3877fec0eff4104b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/70df04433fd351ba72bc635bd0b5fe443d9ac964",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/76a964ad0ea8f2b10abd69a7532e174a28258283",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a6535d00a9d54ce1c2a8d86a85001ffb6844f9b2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f36e754a1f0bafb9feeea63463de78080acb6de0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ff727ab0b7d7a56b5ef281f12abd00c4b85894e9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-492xx/CVE-2022-49299.json b/CVE-2022/CVE-2022-492xx/CVE-2022-49299.json
new file mode 100644
index 00000000000..373b86dbd45
--- /dev/null
+++ b/CVE-2022/CVE-2022-492xx/CVE-2022-49299.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49299",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:06.727",
+ "lastModified": "2025-02-26T07:01:06.727",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc2: gadget: don't reset gadget's driver->bus\n\nUDC driver should not touch gadget's driver internals, especially it\nshould not reset driver->bus. This wasn't harmful so far, but since\ncommit fc274c1e9973 (\"USB: gadget: Add a new bus for gadgets\") gadget\nsubsystem got it's own bus and messing with ->bus triggers the\nfollowing NULL pointer dereference:\n\ndwc2 12480000.hsotg: bound driver g_ether\n8<--- cut here ---\nUnable to handle kernel NULL pointer dereference at virtual address 00000000\n[00000000] *pgd=00000000\nInternal error: Oops: 5 [#1] SMP ARM\nModules linked in: ...\nCPU: 0 PID: 620 Comm: modprobe Not tainted 5.18.0-rc5-next-20220504 #11862\nHardware name: Samsung Exynos (Flattened Device Tree)\nPC is at module_add_driver+0x44/0xe8\nLR is at sysfs_do_create_link_sd+0x84/0xe0\n...\nProcess modprobe (pid: 620, stack limit = 0x(ptrval))\n...\n module_add_driver from bus_add_driver+0xf4/0x1e4\n bus_add_driver from driver_register+0x78/0x10c\n driver_register from usb_gadget_register_driver_owner+0x40/0xb4\n usb_gadget_register_driver_owner from do_one_initcall+0x44/0x1e0\n do_one_initcall from do_init_module+0x44/0x1c8\n do_init_module from load_module+0x19b8/0x1b9c\n load_module from sys_finit_module+0xdc/0xfc\n sys_finit_module from ret_fast_syscall+0x0/0x54\nException stack(0xf1771fa8 to 0xf1771ff0)\n...\ndwc2 12480000.hsotg: new device is high-speed\n---[ end trace 0000000000000000 ]---\n\nFix this by removing driver->bus entry reset."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/172cfc167c8ee6238f24f9c16efd598602af643c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3120aac6d0ecd9accf56894aeac0e265f74d3d5a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5127c0f365265bb69cd776ad6e4b872c309f3fa8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/547ebdc200b862dff761ff4890f66d8217c33316",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5b0c0298f7c3b57417f1729ec4071f76864b72dd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bee8f9808a7e82addfc73a0973b16a8bb684205b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d2159feb9d28ce496d77df98313ab454646372ac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d232ca0bbc7d03144bad0ffd1792c3352bfd03fa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/efb15ff4a77fe053c941281775fefa91c87770e0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49300.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49300.json
new file mode 100644
index 00000000000..71f14fa1529
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49300.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49300",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:06.830",
+ "lastModified": "2025-02-26T07:01:06.830",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnbd: fix race between nbd_alloc_config() and module removal\n\nWhen nbd module is being removing, nbd_alloc_config() may be\ncalled concurrently by nbd_genl_connect(), although try_module_get()\nwill return false, but nbd_alloc_config() doesn't handle it.\n\nThe race may lead to the leak of nbd_config and its related\nresources (e.g, recv_workq) and oops in nbd_read_stat() due\nto the unload of nbd module as shown below:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000040\n Oops: 0000 [#1] SMP PTI\n CPU: 5 PID: 13840 Comm: kworker/u17:33 Not tainted 5.14.0+ #1\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996)\n Workqueue: knbd16-recv recv_work [nbd]\n RIP: 0010:nbd_read_stat.cold+0x130/0x1a4 [nbd]\n Call Trace:\n recv_work+0x3b/0xb0 [nbd]\n process_one_work+0x1ed/0x390\n worker_thread+0x4a/0x3d0\n kthread+0x12a/0x150\n ret_from_fork+0x22/0x30\n\nFixing it by checking the return value of try_module_get()\nin nbd_alloc_config(). As nbd_alloc_config() may return ERR_PTR(-ENODEV),\nassign nbd->config only when nbd_alloc_config() succeeds to ensure\nthe value of nbd->config is binary (valid or NULL).\n\nAlso adding a debug message to check the reference counter\nof nbd_config during module removal."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/122e4adaff2439f1cc18cc7e931980fa7560df5c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/165cf2e0019fa6cedc75b456490c41494c34abb4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2573f2375b64280be977431701ed5d33b75b9ad0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2888fa41985f93ed0a6837cfbb06bcbfd7fa2314",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/71c142f910da44421213ade601bcbd23ceae19fa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8a7da4ced236ce6637fe70f14ca18e718d4bf9e9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c55b2b983b0fa012942c3eb16384b2b722caa810",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d09525720dd5201756f698bee1076de9aefd4602",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49301.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49301.json
new file mode 100644
index 00000000000..b672a8e9162
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49301.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49301",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:06.923",
+ "lastModified": "2025-02-26T07:01:06.923",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: rtl8712: fix uninit-value in usb_read8() and friends\n\nWhen r8712_usbctrl_vendorreq() returns negative, 'data' in\nusb_read{8,16,32} will not be initialized.\n\nBUG: KMSAN: uninit-value in string_nocheck lib/vsprintf.c:643 [inline]\nBUG: KMSAN: uninit-value in string+0x4ec/0x6f0 lib/vsprintf.c:725\n string_nocheck lib/vsprintf.c:643 [inline]\n string+0x4ec/0x6f0 lib/vsprintf.c:725\n vsnprintf+0x2222/0x3650 lib/vsprintf.c:2806\n va_format lib/vsprintf.c:1704 [inline]\n pointer+0x18e6/0x1f70 lib/vsprintf.c:2443\n vsnprintf+0x1a9b/0x3650 lib/vsprintf.c:2810\n vprintk_store+0x537/0x2150 kernel/printk/printk.c:2158\n vprintk_emit+0x28b/0xab0 kernel/printk/printk.c:2256\n dev_vprintk_emit+0x5ef/0x6d0 drivers/base/core.c:4604\n dev_printk_emit+0x1dd/0x21f drivers/base/core.c:4615\n __dev_printk+0x3be/0x440 drivers/base/core.c:4627\n _dev_info+0x1ea/0x22f drivers/base/core.c:4673\n r871xu_drv_init+0x1929/0x3070 drivers/staging/rtl8712/usb_intf.c:401\n usb_probe_interface+0xf19/0x1600 drivers/usb/core/driver.c:396\n really_probe+0x6c7/0x1350 drivers/base/dd.c:621\n __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:752\n driver_probe_device drivers/base/dd.c:782 [inline]\n __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:899\n bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427\n __device_attach+0x593/0x8e0 drivers/base/dd.c:970\n device_initial_probe+0x4a/0x60 drivers/base/dd.c:1017\n bus_probe_device+0x17b/0x3e0 drivers/base/bus.c:487\n device_add+0x1fff/0x26e0 drivers/base/core.c:3405\n usb_set_configuration+0x37e9/0x3ed0 drivers/usb/core/message.c:2170\n usb_generic_driver_probe+0x13c/0x300 drivers/usb/core/generic.c:238\n usb_probe_device+0x309/0x570 drivers/usb/core/driver.c:293\n really_probe+0x6c7/0x1350 drivers/base/dd.c:621\n __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:752\n driver_probe_device drivers/base/dd.c:782 [inline]\n __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:899\n bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427\n __device_attach+0x593/0x8e0 drivers/base/dd.c:970\n device_initial_probe+0x4a/0x60 drivers/base/dd.c:1017\n bus_probe_device+0x17b/0x3e0 drivers/base/bus.c:487\n device_add+0x1fff/0x26e0 drivers/base/core.c:3405\n usb_new_device+0x1b91/0x2950 drivers/usb/core/hub.c:2566\n hub_port_connect drivers/usb/core/hub.c:5363 [inline]\n hub_port_connect_change drivers/usb/core/hub.c:5507 [inline]\n port_event drivers/usb/core/hub.c:5665 [inline]\n hub_event+0x58e3/0x89e0 drivers/usb/core/hub.c:5747\n process_one_work+0xdb6/0x1820 kernel/workqueue.c:2289\n worker_thread+0x10d0/0x2240 kernel/workqueue.c:2436\n kthread+0x3c7/0x500 kernel/kthread.c:376\n ret_from_fork+0x1f/0x30\n\nLocal variable data created at:\n usb_read8+0x5d/0x130 drivers/staging/rtl8712/usb_ops.c:33\n r8712_read8+0xa5/0xd0 drivers/staging/rtl8712/rtl8712_io.c:29\n\nKMSAN: uninit-value in r871xu_drv_init\nhttps://syzkaller.appspot.com/bug?id=3cd92b1d85428b128503bfa7a250294c9ae00bd8"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/33ef21d55418ab6a62a63fd550b2dbe297433372",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/58762f1c63c75cbe1dc393eed3c9cf8e38310ca1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/95b0f54f8a898072a2810c05fab34d971f23a612",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d1b57669732d09da7e13ef86d058dab0cd57f6e0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d7ed3c85da0b230bcdf5329acfe012ed093f3daa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/de075af8c404f7d59ed34df230aedd9f645fb846",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49302.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49302.json
new file mode 100644
index 00000000000..fee4f34b99e
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49302.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49302",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:07.027",
+ "lastModified": "2025-02-26T07:01:07.027",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: host: isp116x: check return value after calling platform_get_resource()\n\nIt will cause null-ptr-deref if platform_get_resource() returns NULL,\nwe need check the return value."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/134a3408c2d3f7e23eb0e4556e0a2d9f36c2614e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3592cfd8b848bf0c4d7740d78a87a7b8f6e1fa9a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3825db88d8c704e7992b685618a03f82bffcf2ef",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7bffda1560a6f255fdf504e059fbbdb5d46b9e44",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/804de302ada3544699c5f48c5314b249af76faa3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/82a101f14943f479fd190b1e5b40d91c77e2ac1b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aca0cab0e9ed33b6371aafb519a6c38f2850ffc3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c91a74b1f0f2d2d7e728742ae55e3ffe9ba7853d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ee105039d3653444de4d3ede642383c92855dc1e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49303.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49303.json
new file mode 100644
index 00000000000..c15a588884e
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49303.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49303",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:07.123",
+ "lastModified": "2025-02-26T07:01:07.123",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: staging: rtl8192eu: Fix deadlock in rtw_joinbss_event_prehandle\n\nThere is a deadlock in rtw_joinbss_event_prehandle(), which is shown below:\n\n (Thread 1) | (Thread 2)\n | _set_timer()\nrtw_joinbss_event_prehandle()| mod_timer()\n spin_lock_bh() //(1) | (wait a time)\n ... | rtw_join_timeout_handler()\n | _rtw_join_timeout_handler()\n del_timer_sync() | spin_lock_bh() //(2)\n (wait timer to stop) | ...\n\nWe hold pmlmepriv->lock in position (1) of thread 1 and\nuse del_timer_sync() to wait timer to stop, but timer handler\nalso need pmlmepriv->lock in position (2) of thread 2.\nAs a result, rtw_joinbss_event_prehandle() will block forever.\n\nThis patch extracts del_timer_sync() from the protection of\nspin_lock_bh(), which could let timer handler to obtain\nthe needed lock. What`s more, we change spin_lock_bh() to\nspin_lock_irq() in _rtw_join_timeout_handler() in order to\nprevent deadlock."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0fcddf9c7c10202946d5b19409efbdff744fba88",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/25cf414b0610fea29d8e045f315648d9007c9a46",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49304.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49304.json
new file mode 100644
index 00000000000..41bb1af4216
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49304.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49304",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:07.213",
+ "lastModified": "2025-02-26T07:01:07.213",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: tty: serial: Fix deadlock in sa1100_set_termios()\n\nThere is a deadlock in sa1100_set_termios(), which is shown\nbelow:\n\n (Thread 1) | (Thread 2)\n | sa1100_enable_ms()\nsa1100_set_termios() | mod_timer()\n spin_lock_irqsave() //(1) | (wait a time)\n ... | sa1100_timeout()\n del_timer_sync() | spin_lock_irqsave() //(2)\n (wait timer to stop) | ...\n\nWe hold sport->port.lock in position (1) of thread 1 and\nuse del_timer_sync() to wait timer to stop, but timer handler\nalso need sport->port.lock in position (2) of thread 2. As a result,\nsa1100_set_termios() will block forever.\n\nThis patch moves del_timer_sync() before spin_lock_irqsave()\nin order to prevent the deadlock."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0976808d0d171ec837d4bd3e9f4ad4a00ab703b8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/09a5958a2452ad22d0cb638711ef34ea1863a829",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2cbfc38df580bff5b2fe19f21c1a7520efcc4b3b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/34d91e555e5582cffdbcbb75517bc9217866823e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/553213432ef0c295becdc08c0207d2094468f673",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/62b2caef400c1738b6d22f636c628d9f85cd4c4c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6e2273eefab54a521d9c59efb6e1114e742bdf41",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/85e20f8bd31a46d8c60103d0274a8ebe8f47f2b2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/920f0ae7a129ffee98a106e3bbdfd61a2a59e939",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49305.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49305.json
new file mode 100644
index 00000000000..d9fedf7ec42
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49305.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49305",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:07.310",
+ "lastModified": "2025-02-26T07:01:07.310",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()\n\nThere is a deadlock in ieee80211_beacons_stop(), which is shown below:\n\n (Thread 1) | (Thread 2)\n | ieee80211_send_beacon()\nieee80211_beacons_stop() | mod_timer()\n spin_lock_irqsave() //(1) | (wait a time)\n ... | ieee80211_send_beacon_cb()\n del_timer_sync() | spin_lock_irqsave() //(2)\n (wait timer to stop) | ...\n\nWe hold ieee->beacon_lock in position (1) of thread 1 and use\ndel_timer_sync() to wait timer to stop, but timer handler\nalso need ieee->beacon_lock in position (2) of thread 2.\nAs a result, ieee80211_beacons_stop() will block forever.\n\nThis patch extracts del_timer_sync() from the protection of\nspin_lock_irqsave(), which could let timer handler to obtain\nthe needed lock."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/042915c1bfedd684c1d98a841794ee203200571a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1fbe033c52480f7954c057510040fa6286c4ea25",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/66f769762f65d957f688f3258755c6ec410bf710",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/806c7b53414934ba2a39449b31fd1a038e500273",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b34cb54923a6e5ddefbaf358c85c922c6ab456e2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b465bb2ebf666116c1ac745cb80c65154dc0d27e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ffc9cab7243f8151be37966301307bfd3cda2db3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49306.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49306.json
new file mode 100644
index 00000000000..f6f50ae3a7c
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49306.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49306",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:07.413",
+ "lastModified": "2025-02-26T07:01:07.413",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: host: Stop setting the ACPI companion\n\nIt is no longer needed. The sysdev pointer is now used when\nassigning the ACPI companions to the xHCI ports and USB\ndevices.\n\nAssigning the ACPI companion here resulted in the\nfwnode->secondary pointer to be replaced also for the parent\ndwc3 device since the primary fwnode (the ACPI companion)\nwas shared. That was unintentional and it created potential\nside effects like resource leaks."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/7fd069d65da2e20b1caec3b7bcf9dfbe28c04bb2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9c185fde906a48368bd2d2a8c17d4b6fb3d670af",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d7f35934f7ab67bfd9adabc84207e59da9c19108",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49307.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49307.json
new file mode 100644
index 00000000000..783e764efc1
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49307.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49307",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:07.503",
+ "lastModified": "2025-02-26T07:01:07.503",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: synclink_gt: Fix null-pointer-dereference in slgt_clean()\n\nWhen the driver fails at alloc_hdlcdev(), and then we remove the driver\nmodule, we will get the following splat:\n\n[ 25.065966] general protection fault, probably for non-canonical address 0xdffffc0000000182: 0000 [#1] PREEMPT SMP KASAN PTI\n[ 25.066914] KASAN: null-ptr-deref in range [0x0000000000000c10-0x0000000000000c17]\n[ 25.069262] RIP: 0010:detach_hdlc_protocol+0x2a/0x3e0\n[ 25.077709] Call Trace:\n[ 25.077924] \n[ 25.078108] unregister_hdlc_device+0x16/0x30\n[ 25.078481] slgt_cleanup+0x157/0x9f0 [synclink_gt]\n\nFix this by checking whether the 'info->netdev' is a null pointer first."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/078212ad15dbd88840c82c97f12c93d83703c8fd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1ceb4ca9543a8a788febf6bc8dad2e605e172d5e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/50c341f9a2adc4c32a8ad5a39eb99d9c4a419e0d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/689ca31c542687709ba21ec2195c1fbce34fd029",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8a95696bdc0e13f8980f05b54a3b9081963d1256",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ba08cbc5b53e151d0acf1930fb526fc65b7f3e65",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d68d5e68b7f64de7170f8e04dd9b995c36b2c71c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ddd67751ab86c6a65f95c35293c42f85a42ac05d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f6e07eb7ebec53ffe81fc2489589320fbe4a6b75",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49308.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49308.json
new file mode 100644
index 00000000000..4652935191e
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49308.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49308",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:07.607",
+ "lastModified": "2025-02-26T07:01:07.607",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nextcon: Modify extcon device to be created after driver data is set\n\nCurrently, someone can invoke the sysfs such as state_show()\nintermittently before dev_set_drvdata() is done.\nAnd it can be a cause of kernel Oops because of edev is Null at that time.\nSo modified the driver registration to after setting drviver data.\n\n- Oops's backtrace.\n\nBacktrace:\n[] (state_show) from [] (dev_attr_show)\n[] (dev_attr_show) from [] (sysfs_kf_seq_show)\n[] (sysfs_kf_seq_show) from [] (kernfs_seq_show)\n[] (kernfs_seq_show) from [] (seq_read)\n[] (seq_read) from [] (kernfs_fop_read)\n[] (kernfs_fop_read) from [] (__vfs_read)\n[] (__vfs_read) from [] (vfs_read)\n[] (vfs_read) from [] (ksys_read)\n[] (ksys_read) from [] (sys_read)\n[] (sys_read) from [] (__sys_trace_return)"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/033ec4e7e59ae5e1ef1e8c10bc6552926044ed1c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/35ff1ac55d301efb3f467cf5426faaeb3452994b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/368e68ad6da4317fc4170e8d92b51c13d1bfe7a7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5dcc2afe716d69f5112ce035cb14f007461ff189",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6e721f3ad0535b24f19a62420f4da95212cf069c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/abf3b222614f49f98e606fccdd269161c0d70204",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cb81ea998c461868d1168411a867d8ffee12f23f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d472c78cc82999d07bd09193a6718016ce9cd386",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49309.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49309.json
new file mode 100644
index 00000000000..59a85959f26
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49309.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49309",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:07.700",
+ "lastModified": "2025-02-26T07:01:07.700",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()\n\nThere is a deadlock in rtw_surveydone_event_callback(),\nwhich is shown below:\n\n (Thread 1) | (Thread 2)\n | _set_timer()\nrtw_surveydone_event_callback()| mod_timer()\n spin_lock_bh() //(1) | (wait a time)\n ... | rtw_scan_timeout_handler()\n del_timer_sync() | spin_lock_bh() //(2)\n (wait timer to stop) | ...\n\nWe hold pmlmepriv->lock in position (1) of thread 1 and use\ndel_timer_sync() to wait timer to stop, but timer handler\nalso need pmlmepriv->lock in position (2) of thread 2.\nAs a result, rtw_surveydone_event_callback() will block forever.\n\nThis patch extracts del_timer_sync() from the protection of\nspin_lock_bh(), which could let timer handler to obtain\nthe needed lock. What`s more, we change spin_lock_bh() in\nrtw_scan_timeout_handler() to spin_lock_irq(). Otherwise,\nspin_lock_bh() will also cause deadlock() in timer handler."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2c41f5c341853f84b7bc2f32605d4e2782e8c279",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc7ad0d77b51c872d629bcd98aea463a3c4109e7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ce129d3efd181da5fd56f4360cc8827122afa67e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f89f6c3ebf69623b8ea48200bd690e9e210335a1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49310.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49310.json
new file mode 100644
index 00000000000..c15fed212f5
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49310.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49310",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:07.793",
+ "lastModified": "2025-02-26T07:01:07.793",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nchar: xillybus: fix a refcount leak in cleanup_dev()\n\nusb_get_dev is called in xillyusb_probe. So it is better to call\nusb_put_dev before xdev is released."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/21f1f167d727f3f857e26d509ef5a6d47fd31bc3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b67d19662fdee275c479d21853bc1239600a798f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bc8fceda3b89006e8a7dda8a097d36045d044c25",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e277b95acdab84cd5d2f8d537a37aef6d21e988b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49311.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49311.json
new file mode 100644
index 00000000000..757efca817d
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49311.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49311",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:07.887",
+ "lastModified": "2025-02-26T07:01:07.887",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle()\n\nThere is a deadlock in rtw_joinbss_event_prehandle(), which is shown\nbelow:\n\n (Thread 1) | (Thread 2)\n | _set_timer()\nrtw_joinbss_event_prehandle()| mod_timer()\n spin_lock_bh() //(1) | (wait a time)\n ... | _rtw_join_timeout_handler()\n del_timer_sync() | spin_lock_bh() //(2)\n (wait timer to stop) | ...\n\nWe hold pmlmepriv->lock in position (1) of thread 1 and\nuse del_timer_sync() to wait timer to stop, but timer handler\nalso need pmlmepriv->lock in position (2) of thread 2.\nAs a result, rtw_joinbss_event_prehandle() will block forever.\n\nThis patch extracts del_timer_sync() from the protection of\nspin_lock_bh(), which could let timer handler to obtain\nthe needed lock. What`s more, we change spin_lock_bh() to\nspin_lock_irq() in _rtw_join_timeout_handler() in order to\nprevent deadlock."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/041879b12ddb0c6c83ed9c0bdd10dc82a056f2fc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1f6c99b94ca3caad346876b3e22e3ca3d25bc8ee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ae60744d5fad840b9d056d35b4b652d95e755846",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eca9748d9267a38d532464e3305a38629e9c35a9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49312.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49312.json
new file mode 100644
index 00000000000..864aa5a66b6
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49312.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49312",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:07.997",
+ "lastModified": "2025-02-26T07:01:07.997",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: rtl8712: fix a potential memory leak in r871xu_drv_init()\n\nIn r871xu_drv_init(), if r8712_init_drv_sw() fails, then the memory\nallocated by r8712_alloc_io_queue() in r8712_usb_dvobj_init() is not\nproperly released as there is no action will be performed by\nr8712_usb_dvobj_deinit().\nTo properly release it, we should call r8712_free_io_queue() in\nr8712_usb_dvobj_deinit().\n\nBesides, in r871xu_dev_remove(), r8712_usb_dvobj_deinit() will be called\nby r871x_dev_unload() under condition `padapter->bup` and\nr8712_free_io_queue() is called by r8712_free_drv_sw().\nHowever, r8712_usb_dvobj_deinit() does not rely on `padapter->bup` and\ncalling r8712_free_io_queue() in r8712_free_drv_sw() is negative for\nbetter understading the code.\nSo I move r8712_usb_dvobj_deinit() into r871xu_dev_remove(), and remove\nr8712_free_io_queue() from r8712_free_drv_sw()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/205e039fead72e87ad2838f5e649a4c4834f648b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5a89a92efc342dd7c44b6056da87debc598f9c73",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7288ff561de650d4139fab80e9cb0da9b5b32434",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8eb42d6d10f8fe509117859defddf9e72b4fa4d0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a2882b8baad068d21c99fb2ab5a85a2bdbd5b834",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49313.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49313.json
new file mode 100644
index 00000000000..1b1f3cc59e7
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49313.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49313",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:08.143",
+ "lastModified": "2025-02-26T07:01:08.143",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: usb: host: Fix deadlock in oxu_bus_suspend()\n\nThere is a deadlock in oxu_bus_suspend(), which is shown below:\n\n (Thread 1) | (Thread 2)\n | timer_action()\noxu_bus_suspend() | mod_timer()\n spin_lock_irq() //(1) | (wait a time)\n ... | oxu_watchdog()\n del_timer_sync() | spin_lock_irq() //(2)\n (wait timer to stop) | ...\n\nWe hold oxu->lock in position (1) of thread 1, and use\ndel_timer_sync() to wait timer to stop, but timer handler\nalso need oxu->lock in position (2) of thread 2. As a result,\noxu_bus_suspend() will block forever.\n\nThis patch extracts del_timer_sync() from the protection of\nspin_lock_irq(), which could let timer handler to obtain\nthe needed lock."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2dcec0bc142be2096af71a5703d63237127db204",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4187b291a76664a3c03d3f0d9bfadc8322881868",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4d378f2ae58138d4c55684e1d274e7dd94aa6524",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9b58d255f27b0ed6a2e43208960864d67579db58",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a3d380188bde8900c3f604e82b56572896499124",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b97aae8b43b718314012e8170b7e03dbfd2e7677",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d888753872190abd18f68a7d77b9c7c367f0a7ab",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f8242044c91cafbba9e320b0fb31abf2429a3221",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ffe9440d698274c6462d2e304562c6ddfc8c84df",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49314.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49314.json
new file mode 100644
index 00000000000..a60a4e490ce
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49314.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49314",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:08.270",
+ "lastModified": "2025-02-26T07:01:08.270",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: Fix a possible resource leak in icom_probe\n\nWhen pci_read_config_dword failed, call pci_release_regions() and\npci_disable_device() to recycle the resource previously allocated."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/23e155b51d403c0ccedc60c0d6c3c452afed07fe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5f9b2e4ca88cab1a96b86ecd45544e488ca43faf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8c014373f178a4f13a08e045ef63bdb23f62e892",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9a8305f357a8d03698fc7bc855ff9c6865d5486b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a2df0b4d080cc770b4da7bff487048c803dfd07e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cb7147afd328c07edeeee287710d8d96ac0459f5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d703d912a985c1c5b50dd38c3181fc3540fa77cb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ee157a79e7c82b01ae4c25de0ac75899801f322c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f4c836d90da1ece88905d62ce2ce39a962f25d1a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49315.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49315.json
new file mode 100644
index 00000000000..4daf8cbea52
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49315.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49315",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:08.373",
+ "lastModified": "2025-02-26T07:01:08.373",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()\n\nThere is a deadlock in rtllib_beacons_stop(), which is shown\nbelow:\n\n (Thread 1) | (Thread 2)\n | rtllib_send_beacon()\nrtllib_beacons_stop() | mod_timer()\n spin_lock_irqsave() //(1) | (wait a time)\n ... | rtllib_send_beacon_cb()\n del_timer_sync() | spin_lock_irqsave() //(2)\n (wait timer to stop) | ...\n\nWe hold ieee->beacon_lock in position (1) of thread 1 and\nuse del_timer_sync() to wait timer to stop, but timer handler\nalso need ieee->beacon_lock in position (2) of thread 2.\nAs a result, rtllib_beacons_stop() will block forever.\n\nThis patch extracts del_timer_sync() from the protection of\nspin_lock_irqsave(), which could let timer handler to obtain\nthe needed lock."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/08bacf871c019163ccd1389d0bc957a43324967a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0f69d7d5e918aa43423d86bd17ddb11b1b5e8ada",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/381045dc64d23a2229c47c5524c06bfc33d34446",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4681129fda9e8555392eaaadb239ec6a6e2b3e12",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/46c861009bf437a18417df24cea0d181741b7d72",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/64b05fa212c7e4d057676e8b7e7120c6eb2f615b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9b6bdbd9337de3917945847bde262a34a87a6303",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fef451f0fbbe85dbd2962b18379d02e2965610db",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ffd4c4d5293e4985092ea45ba21cad9326e2e434",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49316.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49316.json
new file mode 100644
index 00000000000..28605466a3e
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49316.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49316",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:08.470",
+ "lastModified": "2025-02-26T07:01:08.470",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4: Don't hold the layoutget locks across multiple RPC calls\n\nWhen doing layoutget as part of the open() compound, we have to be\ncareful to release the layout locks before we can call any further RPC\ncalls, such as setattr(). The reason is that those calls could trigger\na recall, which could deadlock."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/08d7a26d115cc7892668baa9750f64bd8baca29b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0ee5b9644f06b4d3cdcd9544f43f63312e425a4c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6949493884fe88500de4af182588e071cf1544ee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6b3fc1496e7227cd6a39a80bbfb7588ef7c7a010",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a2b3be930e79cc5d9d829f158e31172b2043f0cd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d4c2a041ed3ba114502d5ed6ace5b1a48d637a8e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ea759ae0a9ae5acee677d722129710ac89cc59c1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49317.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49317.json
new file mode 100644
index 00000000000..acb623a16a9
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49317.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49317",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:08.567",
+ "lastModified": "2025-02-26T07:01:08.567",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: avoid infinite loop to flush node pages\n\nxfstests/generic/475 can give EIO all the time which give an infinite loop\nto flush node page like below. Let's avoid it.\n\n[16418.518551] Call Trace:\n[16418.518553] ? dm_submit_bio+0x48/0x400\n[16418.518574] ? submit_bio_checks+0x1ac/0x5a0\n[16418.525207] __submit_bio+0x1a9/0x230\n[16418.525210] ? kmem_cache_alloc+0x29e/0x3c0\n[16418.525223] submit_bio_noacct+0xa8/0x2b0\n[16418.525226] submit_bio+0x4d/0x130\n[16418.525238] __submit_bio+0x49/0x310 [f2fs]\n[16418.525339] ? bio_add_page+0x6a/0x90\n[16418.525344] f2fs_submit_page_bio+0x134/0x1f0 [f2fs]\n[16418.525365] read_node_page+0x125/0x1b0 [f2fs]\n[16418.525388] __get_node_page.part.0+0x58/0x3f0 [f2fs]\n[16418.525409] __get_node_page+0x2f/0x60 [f2fs]\n[16418.525431] f2fs_get_dnode_of_data+0x423/0x860 [f2fs]\n[16418.525452] ? asm_sysvec_apic_timer_interrupt+0x12/0x20\n[16418.525458] ? __mod_memcg_state.part.0+0x2a/0x30\n[16418.525465] ? __mod_memcg_lruvec_state+0x27/0x40\n[16418.525467] ? __xa_set_mark+0x57/0x70\n[16418.525472] f2fs_do_write_data_page+0x10e/0x7b0 [f2fs]\n[16418.525493] f2fs_write_single_data_page+0x555/0x830 [f2fs]\n[16418.525514] ? sysvec_apic_timer_interrupt+0x4e/0x90\n[16418.525518] ? asm_sysvec_apic_timer_interrupt+0x12/0x20\n[16418.525523] f2fs_write_cache_pages+0x303/0x880 [f2fs]\n[16418.525545] ? blk_flush_plug_list+0x47/0x100\n[16418.525548] f2fs_write_data_pages+0xfd/0x320 [f2fs]\n[16418.525569] do_writepages+0xd5/0x210\n[16418.525648] filemap_fdatawrite_wbc+0x7d/0xc0\n[16418.525655] filemap_fdatawrite+0x50/0x70\n[16418.525658] f2fs_sync_dirty_inodes+0xa4/0x230 [f2fs]\n[16418.525679] f2fs_write_checkpoint+0x16d/0x1720 [f2fs]\n[16418.525699] ? ttwu_do_wakeup+0x1c/0x160\n[16418.525709] ? ttwu_do_activate+0x6d/0xd0\n[16418.525711] ? __wait_for_common+0x11d/0x150\n[16418.525715] kill_f2fs_super+0xca/0x100 [f2fs]\n[16418.525733] deactivate_locked_super+0x3b/0xb0\n[16418.525739] deactivate_super+0x40/0x50\n[16418.525741] cleanup_mnt+0x139/0x190\n[16418.525747] __cleanup_mnt+0x12/0x20\n[16418.525749] task_work_run+0x6d/0xa0\n[16418.525765] exit_to_user_mode_prepare+0x1ad/0x1b0\n[16418.525771] syscall_exit_to_user_mode+0x27/0x50\n[16418.525774] do_syscall_64+0x48/0xc0\n[16418.525776] entry_SYSCALL_64_after_hwframe+0x44/0xae"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/a7b8618aa2f0f926ce85f2486ac835a85c753ca7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bd47ea5d776d8b524fb6f60de3240f95603901dd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49318.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49318.json
new file mode 100644
index 00000000000..44ad4d4afa6
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49318.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49318",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:08.660",
+ "lastModified": "2025-02-26T07:01:08.660",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: remove WARN_ON in f2fs_is_valid_blkaddr\n\nSyzbot triggers two WARNs in f2fs_is_valid_blkaddr and\n__is_bitmap_valid. For example, in f2fs_is_valid_blkaddr,\nif type is DATA_GENERIC_ENHANCE or DATA_GENERIC_ENHANCE_READ,\nit invokes WARN_ON if blkaddr is not in the right range.\nThe call trace is as follows:\n\n f2fs_get_node_info+0x45f/0x1070\n read_node_page+0x577/0x1190\n __get_node_page.part.0+0x9e/0x10e0\n __get_node_page\n f2fs_get_node_page+0x109/0x180\n do_read_inode\n f2fs_iget+0x2a5/0x58b0\n f2fs_fill_super+0x3b39/0x7ca0\n\nFix these two WARNs by replacing WARN_ON with dump_stack."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0a7a1fc7e71eecf2e5053a6c312c9f0dcbb9b8fd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/32bea51fe4c6e92c00403739f7547c89219bea88",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8c62c5e26345c34d199b4b8c8e69255ba3d0e751",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/99c09b298e47ebbe345a6da9f268b32a6b0f4582",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cd6374af36cc548464d8c47a93fdba7303bb82a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dc2f78e2d4cc844a1458653d57ce1b54d4a29f21",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49319.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49319.json
new file mode 100644
index 00000000000..d7cebd1484a
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49319.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49319",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:08.750",
+ "lastModified": "2025-02-26T07:01:08.750",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/arm-smmu-v3: check return value after calling platform_get_resource()\n\nIt will cause null-ptr-deref if platform_get_resource() returns NULL,\nwe need check the return value."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/54c1e0e3bbcab2abe25b2874a43050ae5df87831",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/54cf47da0c7532d151d76e5d63f5936191698c44",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b131fa8c1d2afd05d0b7598621114674289c2fbb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/db728a891f9177b044aaca89b678f6b5e24d5cc3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fb0f1c5eb8d60b3e018ba7c87da249b52674ebe6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49320.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49320.json
new file mode 100644
index 00000000000..3ceebb02898
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49320.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49320",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:08.840",
+ "lastModified": "2025-02-26T07:01:08.840",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type\n\nIn zynqmp_dma_alloc/free_chan_resources functions there is a\npotential overflow in the below expressions.\n\ndma_alloc_coherent(chan->dev, (2 * chan->desc_size *\n\t\t ZYNQMP_DMA_NUM_DESCS),\n\t\t &chan->desc_pool_p, GFP_KERNEL);\n\ndma_free_coherent(chan->dev,(2 * ZYNQMP_DMA_DESC_SIZE(chan) *\n ZYNQMP_DMA_NUM_DESCS),\n chan->desc_pool_v, chan->desc_pool_p);\n\nThe arguments desc_size and ZYNQMP_DMA_NUM_DESCS were 32 bit. Though\nthis overflow condition is not observed but it is a potential problem\nin the case of 32-bit multiplication. Hence fix it by changing the\ndesc_size data type to size_t.\n\nIn addition to coverity fix it also reuse ZYNQMP_DMA_DESC_SIZE macro in\ndma_alloc_coherent API argument.\n\nAddresses-Coverity: Event overflow_before_widen."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4838969e4d95d2bd2995d1605b20d3144fcb3e74",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7b5488f4721fed6e121e661e165bab06ae2f8675",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/83960276ffc9bf5570d4106490346b61e61be5f3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/90aefae2e3a770a6909d339f5d8a988c0b0ceaf0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/95a0ba85c1b51b36e909841c02d205cd223ab753",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f9a9f43a62a04ec3183fb0da9226c7706eed0115",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49321.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49321.json
new file mode 100644
index 00000000000..ff6f9cebcb0
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49321.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49321",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:08.933",
+ "lastModified": "2025-02-26T07:01:08.933",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxprtrdma: treat all calls not a bcall when bc_serv is NULL\n\nWhen a rdma server returns a fault format reply, nfs v3 client may\ntreats it as a bcall when bc service is not exist.\n\nThe debug message at rpcrdma_bc_receive_call are,\n\n[56579.837169] RPC: rpcrdma_bc_receive_call: callback XID\n00000001, length=20\n[56579.837174] RPC: rpcrdma_bc_receive_call: 00 00 00 01 00 00 00\n00 00 00 00 00 00 00 00 00 00 00 00 04\n\nAfter that, rpcrdma_bc_receive_call will meets NULL pointer as,\n\n[ 226.057890] BUG: unable to handle kernel NULL pointer dereference at\n00000000000000c8\n...\n[ 226.058704] RIP: 0010:_raw_spin_lock+0xc/0x20\n...\n[ 226.059732] Call Trace:\n[ 226.059878] rpcrdma_bc_receive_call+0x138/0x327 [rpcrdma]\n[ 226.060011] __ib_process_cq+0x89/0x170 [ib_core]\n[ 226.060092] ib_cq_poll_work+0x26/0x80 [ib_core]\n[ 226.060257] process_one_work+0x1a7/0x360\n[ 226.060367] ? create_worker+0x1a0/0x1a0\n[ 226.060440] worker_thread+0x30/0x390\n[ 226.060500] ? create_worker+0x1a0/0x1a0\n[ 226.060574] kthread+0x116/0x130\n[ 226.060661] ? kthread_flush_work_fn+0x10/0x10\n[ 226.060724] ret_from_fork+0x35/0x40\n..."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/11270e7ca268e8d61b5d9e5c3a54bd1550642c9c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8dbae5affbdbf524b48000f9d357925bb001e5f4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8e3943c50764dc7c5f25911970c3ff062ec1f18c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/90c4f73104016748533a5707ecd15930fbeff402",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/91784f3d77b73885e1b2e6b59d3cbf0de0a1126a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/998d35a2aff4b81a1c784f3aa45cd3afff6814c1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a3fc8051ee061e31db13e2fe011e8e0b71a7f815",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/da99331fa62131a38a0947a8204c5208de7b0454",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49322.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49322.json
new file mode 100644
index 00000000000..880956fd97b
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49322.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49322",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:09.030",
+ "lastModified": "2025-02-26T07:01:09.030",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Fix sleeping function called from invalid context on RT kernel\n\nWhen setting bootparams=\"trace_event=initcall:initcall_start tp_printk=1\" in the\ncmdline, the output_printk() was called, and the spin_lock_irqsave() was called in the\natomic and irq disable interrupt context suitation. On the PREEMPT_RT kernel,\nthese locks are replaced with sleepable rt-spinlock, so the stack calltrace will\nbe triggered.\nFix it by raw_spin_lock_irqsave when PREEMPT_RT and \"trace_event=initcall:initcall_start\ntp_printk=1\" enabled.\n\n BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:46\n in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1, name: swapper/0\n preempt_count: 2, expected: 0\n RCU nest depth: 0, expected: 0\n Preemption disabled at:\n [] try_to_wake_up+0x7e/0xba0\n CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.17.1-rt17+ #19 34c5812404187a875f32bee7977f7367f9679ea7\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-2 04/01/2014\n Call Trace:\n \n dump_stack_lvl+0x60/0x8c\n dump_stack+0x10/0x12\n __might_resched.cold+0x11d/0x155\n rt_spin_lock+0x40/0x70\n trace_event_buffer_commit+0x2fa/0x4c0\n ? map_vsyscall+0x93/0x93\n trace_event_raw_event_initcall_start+0xbe/0x110\n ? perf_trace_initcall_finish+0x210/0x210\n ? probe_sched_wakeup+0x34/0x40\n ? ttwu_do_wakeup+0xda/0x310\n ? trace_hardirqs_on+0x35/0x170\n ? map_vsyscall+0x93/0x93\n do_one_initcall+0x217/0x3c0\n ? trace_event_raw_event_initcall_level+0x170/0x170\n ? push_cpu_stop+0x400/0x400\n ? cblist_init_generic+0x241/0x290\n kernel_init_freeable+0x1ac/0x347\n ? _raw_spin_unlock_irq+0x65/0x80\n ? rest_init+0xf0/0xf0\n kernel_init+0x1e/0x150\n ret_from_fork+0x22/0x30\n "
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/12025abdc8539ed9d5014e2d647a3fd1bd3de5cd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1788e6dbb61286215442b1af99e51405a6206762",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/40f9fde06b25884baa0c4bd138b909a9b67218b4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/43bfc4dccc416c964b53cbdc430e814f8b6f770b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/48c6ee7d6c614f09b2c8553a95eefef6ecf196e0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9abf3db8bdb63ab545034148ef2118f4d088ca59",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9b534640a2c6a8d88168febc82ec6d161184f2ec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/be1f323fb9d9b14a505ca22d742d321769454de1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49323.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49323.json
new file mode 100644
index 00000000000..8165b4fb6aa
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49323.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49323",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:09.130",
+ "lastModified": "2025-02-26T07:01:09.130",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe()\n\nIt will cause null-ptr-deref when using 'res', if platform_get_resource()\nreturns NULL, so move using 'res' after devm_ioremap_resource() that\nwill check it to avoid null-ptr-deref.\nAnd use devm_platform_get_and_ioremap_resource() to simplify code."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3660db29b0305f9a1d95979c7af0f5db6ea99f5d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/449fc4561762ad9ad85362d5f01f0d0df397457a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/80776a71340f57d6a4952635fc89f0342072f3ca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/98dd53a92825747395649f54d23512a13c3ed471",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d9ed8af1dee37f181096631fb03729ece98ba816",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49324.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49324.json
new file mode 100644
index 00000000000..dad59856f8e
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49324.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49324",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:09.223",
+ "lastModified": "2025-02-26T07:01:09.223",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmips: cpc: Fix refcount leak in mips_cpc_default_phys_base\n\nAdd the missing of_node_put() to release the refcount incremented\nby of_find_compatible_node()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1699ec1bfb59304a788901474f6bb003f7831b61",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4107fa700f314592850e2c64608f6ede4c077476",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8f843cdfc202caaa5d67db3395d893e56362e43a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/961ee8a6eeef4632a215d995d837b204f8c7c2d4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aae6b4bb63c694bc91714412718f15468407fe51",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bed702566dcdb6ebe300bc0c62bf3600cf4d5874",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c667b3872a4c435a3f29d4e15971cd8c378b0043",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc0aed22d33ced9e266c50bdf1cbe668c5acfdf8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49325.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49325.json
new file mode 100644
index 00000000000..38b07c7b226
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49325.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49325",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:09.323",
+ "lastModified": "2025-02-26T07:01:09.323",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: add accessors to read/set tp->snd_cwnd\n\nWe had various bugs over the years with code\nbreaking the assumption that tp->snd_cwnd is greater\nthan zero.\n\nLately, syzbot reported the WARN_ON_ONCE(!tp->prior_cwnd) added\nin commit 8b8a321ff72c (\"tcp: fix zero cwnd in tcp_cwnd_reduction\")\ncan trigger, and without a repro we would have to spend\nconsiderable time finding the bug.\n\nInstead of complaining too late, we want to catch where\nand when tp->snd_cwnd is set to an illegal value."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3308676ec525901bf1656014003c443a60730a04",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/40570375356c874b1578e05c1dcc3ff7c1322dbe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/41e191fe72282e193a7744e2fc1786b23156c9e4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5aba0ad44fb4a7fb78c5076c313456de199a3c29",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49326.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49326.json
new file mode 100644
index 00000000000..aa21b67e587
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49326.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49326",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:09.417",
+ "lastModified": "2025-02-26T07:01:09.417",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtl818x: Prevent using not initialized queues\n\nUsing not existing queues can panic the kernel with rtl8180/rtl8185 cards.\nIgnore the skb priority for those cards, they only have one tx queue. Pierre\nAsselin (pa@panix.com) reported the kernel crash in the Gentoo forum:\n\nhttps://forums.gentoo.org/viewtopic-t-1147832-postdays-0-postorder-asc-start-25.html\n\nHe also confirmed that this patch fixes the issue. In summary this happened:\n\nAfter updating wpa_supplicant from 2.9 to 2.10 the kernel crashed with a\n\"divide error: 0000\" when connecting to an AP. Control port tx now tries to\nuse IEEE80211_AC_VO for the priority, which wpa_supplicants starts to use in\n2.10.\n\nSince only the rtl8187se part of the driver supports QoS, the priority\nof the skb is set to IEEE80211_AC_BE (2) by mac80211 for rtl8180/rtl8185\ncards.\n\nrtl8180 is then unconditionally reading out the priority and finally crashes on\ndrivers/net/wireless/realtek/rtl818x/rtl8180/dev.c line 544 without this\npatch:\n\tidx = (ring->idx + skb_queue_len(&ring->queue)) % ring->entries\n\n\"ring->entries\" is zero for rtl8180/rtl8185 cards, tx_ring[2] never got\ninitialized."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/6ad81ad0cf5744738ce94c8e64051ddd80a1734c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/746285cf81dc19502ab238249d75f5990bd2d231",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/769ec2a824deae2f1268dfda14999a4d14d0d0c5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/98e55b0b876bde3353f4e074883d66ecb55c65a3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9ad1981fc4de3afb7db3e8eb5a6a52d4c7d0d577",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9d5e96cc1f1720019ce27b127a31695148d38bb0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b5dca2cd3f0239512da808598b4e70557eb4c2a1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b8ce58ab80faaea015c206382041ff3bcf5495ff",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d7e30dfc166d33470bba31a42f9bbc346e5409d5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49327.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49327.json
new file mode 100644
index 00000000000..b4b688f661f
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49327.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49327",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:09.510",
+ "lastModified": "2025-02-26T07:01:09.510",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbcache: avoid journal no-space deadlock by reserving 1 journal bucket\n\nThe journal no-space deadlock was reported time to time. Such deadlock\ncan happen in the following situation.\n\nWhen all journal buckets are fully filled by active jset with heavy\nwrite I/O load, the cache set registration (after a reboot) will load\nall active jsets and inserting them into the btree again (which is\ncalled journal replay). If a journaled bkey is inserted into a btree\nnode and results btree node split, new journal request might be\ntriggered. For example, the btree grows one more level after the node\nsplit, then the root node record in cache device super block will be\nupgrade by bch_journal_meta() from bch_btree_set_root(). But there is no\nspace in journal buckets, the journal replay has to wait for new journal\nbucket to be reclaimed after at least one journal bucket replayed. This\nis one example that how the journal no-space deadlock happens.\n\nThe solution to avoid the deadlock is to reserve 1 journal bucket in\nrun time, and only permit the reserved journal bucket to be used during\ncache set registration procedure for things like journal replay. Then\nthe journal space will never be fully filled, there is no chance for\njournal no-space deadlock to happen anymore.\n\nThis patch adds a new member \"bool do_reserve\" in struct journal, it is\ninititalized to 0 (false) when struct journal is allocated, and set to\n1 (true) by bch_journal_space_reserve() when all initialization done in\nrun_cache_set(). In the run time when journal_reclaim() tries to\nallocate a new journal bucket, free_journal_buckets() is called to check\nwhether there are enough free journal buckets to use. If there is only\n1 free journal bucket and journal->do_reserve is 1 (true), the last\nbucket is reserved and free_journal_buckets() will return 0 to indicate\nno free journal bucket. Then journal_reclaim() will give up, and try\nnext time to see whetheer there is free journal bucket to allocate. By\nthis method, there is always 1 jouranl bucket reserved in run time.\n\nDuring the cache set registration, journal->do_reserve is 0 (false), so\nthe reserved journal bucket can be used to avoid the no-space deadlock."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1dda32aed6f62c163f38ff947ef5b3360e329159",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/32feee36c30ea06e38ccb8ae6e5c44c6eec790a6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5607652823ac65e2c6885e73bd46d5a4f9a20363",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/59afd4f287900c8187e968a4153ed35e6b48efce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6332ea3e35efa12dc08f0cbf5faea5e6e8eb0497",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49328.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49328.json
new file mode 100644
index 00000000000..f2c85afc5b5
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49328.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49328",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:09.610",
+ "lastModified": "2025-02-26T07:01:09.610",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmt76: fix use-after-free by removing a non-RCU wcid pointer\n\nFixes an issue caught by KASAN about use-after-free in mt76_txq_schedule\nby protecting mtxq->wcid with rcu_lock between mt76_txq_schedule and\nsta_info_[alloc, free].\n\n[18853.876689] ==================================================================\n[18853.876751] BUG: KASAN: use-after-free in mt76_txq_schedule+0x204/0xaf8 [mt76]\n[18853.876773] Read of size 8 at addr ffffffaf989a2138 by task mt76-tx phy0/883\n[18853.876786]\n[18853.876810] CPU: 5 PID: 883 Comm: mt76-tx phy0 Not tainted 5.10.100-fix-510-56778d365941-kasan #5 0b01fbbcf41a530f52043508fec2e31a4215\n\n[18853.876840] Call trace:\n[18853.876861] dump_backtrace+0x0/0x3ec\n[18853.876878] show_stack+0x20/0x2c\n[18853.876899] dump_stack+0x11c/0x1ac\n[18853.876918] print_address_description+0x74/0x514\n[18853.876934] kasan_report+0x134/0x174\n[18853.876948] __asan_report_load8_noabort+0x44/0x50\n[18853.876976] mt76_txq_schedule+0x204/0xaf8 [mt76 074e03e4640e97fe7405ee1fab547b81c4fa45d2]\n[18853.877002] mt76_txq_schedule_all+0x2c/0x48 [mt76 074e03e4640e97fe7405ee1fab547b81c4fa45d2]\n[18853.877030] mt7921_tx_worker+0xa0/0x1cc [mt7921_common f0875ebac9d7b4754e1010549e7db50fbd90a047]\n[18853.877054] __mt76_worker_fn+0x190/0x22c [mt76 074e03e4640e97fe7405ee1fab547b81c4fa45d2]\n[18853.877071] kthread+0x2f8/0x3b8\n[18853.877087] ret_from_fork+0x10/0x30\n[18853.877098]\n[18853.877112] Allocated by task 941:\n[18853.877131] kasan_save_stack+0x38/0x68\n[18853.877147] __kasan_kmalloc+0xd4/0xfc\n[18853.877163] kasan_kmalloc+0x10/0x1c\n[18853.877177] __kmalloc+0x264/0x3c4\n[18853.877294] sta_info_alloc+0x460/0xf88 [mac80211]\n[18853.877410] ieee80211_prep_connection+0x204/0x1ee0 [mac80211]\n[18853.877523] ieee80211_mgd_auth+0x6c4/0xa4c [mac80211]\n[18853.877635] ieee80211_auth+0x20/0x2c [mac80211]\n[18853.877733] rdev_auth+0x7c/0x438 [cfg80211]\n[18853.877826] cfg80211_mlme_auth+0x26c/0x390 [cfg80211]\n[18853.877919] nl80211_authenticate+0x6d4/0x904 [cfg80211]\n[18853.877938] genl_rcv_msg+0x748/0x93c\n[18853.877954] netlink_rcv_skb+0x160/0x2a8\n[18853.877969] genl_rcv+0x3c/0x54\n[18853.877985] netlink_unicast_kernel+0x104/0x1ec\n[18853.877999] netlink_unicast+0x178/0x268\n[18853.878015] netlink_sendmsg+0x3cc/0x5f0\n[18853.878030] sock_sendmsg+0xb4/0xd8\n[18853.878043] ____sys_sendmsg+0x2f8/0x53c\n[18853.878058] ___sys_sendmsg+0xe8/0x150\n[18853.878071] __sys_sendmsg+0xc4/0x1f4\n[18853.878087] __arm64_compat_sys_sendmsg+0x88/0x9c\n[18853.878101] el0_svc_common+0x1b4/0x390\n[18853.878115] do_el0_svc_compat+0x8c/0xdc\n[18853.878131] el0_svc_compat+0x10/0x1c\n[18853.878146] el0_sync_compat_handler+0xa8/0xcc\n[18853.878161] el0_sync_compat+0x188/0x1c0\n[18853.878171]\n[18853.878183] Freed by task 10927:\n[18853.878200] kasan_save_stack+0x38/0x68\n[18853.878215] kasan_set_track+0x28/0x3c\n[18853.878228] kasan_set_free_info+0x24/0x48\n[18853.878244] __kasan_slab_free+0x11c/0x154\n[18853.878259] kasan_slab_free+0x14/0x24\n[18853.878273] slab_free_freelist_hook+0xac/0x1b0\n[18853.878287] kfree+0x104/0x390\n[18853.878402] sta_info_free+0x198/0x210 [mac80211]\n[18853.878515] __sta_info_destroy_part2+0x230/0x2d4 [mac80211]\n[18853.878628] __sta_info_flush+0x300/0x37c [mac80211]\n[18853.878740] ieee80211_set_disassoc+0x2cc/0xa7c [mac80211]\n[18853.878851] ieee80211_mgd_deauth+0x4a4/0x10a0 [mac80211]\n[18853.878962] ieee80211_deauth+0x20/0x2c [mac80211]\n[18853.879057] rdev_deauth+0x7c/0x438 [cfg80211]\n[18853.879150] cfg80211_mlme_deauth+0x274/0x414 [cfg80211]\n[18853.879243] cfg80211_mlme_down+0xe4/0x118 [cfg80211]\n[18853.879335] cfg80211_disconnect+0x218/0x2d8 [cfg80211]\n[18853.879427] __cfg80211_leave+0x17c/0x240 [cfg80211]\n[18853.879519] cfg80211_leave+0x3c/0x58 [cfg80211]\n[18853.879611] wiphy_suspend+0xdc/0x200 [cfg80211]\n[18853.879628] dpm_run_callback+0x58/0x408\n[18853.879642] __device_suspend+0x4cc/0x864\n[18853.879658] async_suspend+0x34/0xf4\n[18\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4448327b41738dbfcda680eb4935ff835568f468",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/51fb1278aa57ae0fc54adaa786e1965362bed4fb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5f77f1dbb59feae81f88e44551e8e1d8a802d9a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e55bcdd0bf34a8b10d45ce80ebb3164c5292a17d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49329.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49329.json
new file mode 100644
index 00000000000..b1a13c66413
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49329.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49329",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:09.703",
+ "lastModified": "2025-02-26T07:01:09.703",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvduse: Fix NULL pointer dereference on sysfs access\n\nThe control device has no drvdata. So we will get a\nNULL pointer dereference when accessing control\ndevice's msg_timeout attribute via sysfs:\n\n[ 132.841881][ T3644] BUG: kernel NULL pointer dereference, address: 00000000000000f8\n[ 132.850619][ T3644] RIP: 0010:msg_timeout_show (drivers/vdpa/vdpa_user/vduse_dev.c:1271)\n[ 132.869447][ T3644] dev_attr_show (drivers/base/core.c:2094)\n[ 132.870215][ T3644] sysfs_kf_seq_show (fs/sysfs/file.c:59)\n[ 132.871164][ T3644] ? device_remove_bin_file (drivers/base/core.c:2088)\n[ 132.872082][ T3644] kernfs_seq_show (fs/kernfs/file.c:164)\n[ 132.872838][ T3644] seq_read_iter (fs/seq_file.c:230)\n[ 132.873578][ T3644] ? __vmalloc_area_node (mm/vmalloc.c:3041)\n[ 132.874532][ T3644] kernfs_fop_read_iter (fs/kernfs/file.c:238)\n[ 132.875513][ T3644] __kernel_read (fs/read_write.c:440 (discriminator 1))\n[ 132.876319][ T3644] kernel_read (fs/read_write.c:459)\n[ 132.877129][ T3644] kernel_read_file (fs/kernel_read_file.c:94)\n[ 132.877978][ T3644] kernel_read_file_from_fd (include/linux/file.h:45 fs/kernel_read_file.c:186)\n[ 132.879019][ T3644] __do_sys_finit_module (kernel/module.c:4207)\n[ 132.879930][ T3644] __ia32_sys_finit_module (kernel/module.c:4189)\n[ 132.880930][ T3644] do_int80_syscall_32 (arch/x86/entry/common.c:112 arch/x86/entry/common.c:132)\n[ 132.881847][ T3644] entry_INT80_compat (arch/x86/entry/entry_64_compat.S:419)\n\nTo fix it, don't create the unneeded attribute for\ncontrol device anymore."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/30fd1b56621e187346f65d01fe34870634b15188",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3a7a81f4835dfda11f39fdd27586da14331896eb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b22fdee17ec62604060fb0fda5e1414b634666e1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b27ee76c74dc831d6e092eaebc2dfc9c0beed1c9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49330.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49330.json
new file mode 100644
index 00000000000..6745ec6e2ee
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49330.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49330",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:09.797",
+ "lastModified": "2025-02-26T07:01:09.797",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: fix tcp_mtup_probe_success vs wrong snd_cwnd\n\nsyzbot got a new report [1] finally pointing to a very old bug,\nadded in initial support for MTU probing.\n\ntcp_mtu_probe() has checks about starting an MTU probe if\ntcp_snd_cwnd(tp) >= 11.\n\nBut nothing prevents tcp_snd_cwnd(tp) to be reduced later\nand before the MTU probe succeeds.\n\nThis bug would lead to potential zero-divides.\n\nDebugging added in commit 40570375356c (\"tcp: add accessors\nto read/set tp->snd_cwnd\") has paid off :)\n\nWhile we are at it, address potential overflows in this code.\n\n[1]\nWARNING: CPU: 1 PID: 14132 at include/net/tcp.h:1219 tcp_mtup_probe_success+0x366/0x570 net/ipv4/tcp_input.c:2712\nModules linked in:\nCPU: 1 PID: 14132 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-07857-gbabf0bb978e3 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nRIP: 0010:tcp_snd_cwnd_set include/net/tcp.h:1219 [inline]\nRIP: 0010:tcp_mtup_probe_success+0x366/0x570 net/ipv4/tcp_input.c:2712\nCode: 74 08 48 89 ef e8 da 80 17 f9 48 8b 45 00 65 48 ff 80 80 03 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 aa b0 c5 f8 <0f> 0b e9 16 fe ff ff 48 8b 4c 24 08 80 e1 07 38 c1 0f 8c c7 fc ff\nRSP: 0018:ffffc900079e70f8 EFLAGS: 00010287\nRAX: ffffffff88c0f7f6 RBX: ffff8880756e7a80 RCX: 0000000000040000\nRDX: ffffc9000c6c4000 RSI: 0000000000031f9e RDI: 0000000000031f9f\nRBP: 0000000000000000 R08: ffffffff88c0f606 R09: ffffc900079e7520\nR10: ffffed101011226d R11: 1ffff1101011226c R12: 1ffff1100eadcf50\nR13: ffff8880756e72c0 R14: 1ffff1100eadcf89 R15: dffffc0000000000\nFS: 00007f643236e700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f1ab3f1e2a0 CR3: 0000000064fe7000 CR4: 00000000003506e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \n tcp_clean_rtx_queue+0x223a/0x2da0 net/ipv4/tcp_input.c:3356\n tcp_ack+0x1962/0x3c90 net/ipv4/tcp_input.c:3861\n tcp_rcv_established+0x7c8/0x1ac0 net/ipv4/tcp_input.c:5973\n tcp_v6_do_rcv+0x57b/0x1210 net/ipv6/tcp_ipv6.c:1476\n sk_backlog_rcv include/net/sock.h:1061 [inline]\n __release_sock+0x1d8/0x4c0 net/core/sock.c:2849\n release_sock+0x5d/0x1c0 net/core/sock.c:3404\n sk_stream_wait_memory+0x700/0xdc0 net/core/stream.c:145\n tcp_sendmsg_locked+0x111d/0x3fc0 net/ipv4/tcp.c:1410\n tcp_sendmsg+0x2c/0x40 net/ipv4/tcp.c:1448\n sock_sendmsg_nosec net/socket.c:714 [inline]\n sock_sendmsg net/socket.c:734 [inline]\n __sys_sendto+0x439/0x5c0 net/socket.c:2119\n __do_sys_sendto net/socket.c:2131 [inline]\n __se_sys_sendto net/socket.c:2127 [inline]\n __x64_sys_sendto+0xda/0xf0 net/socket.c:2127\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x46/0xb0\nRIP: 0033:0x7f6431289109\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f643236e168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c\nRAX: ffffffffffffffda RBX: 00007f643139c100 RCX: 00007f6431289109\nRDX: 00000000d0d0c2ac RSI: 0000000020000080 RDI: 000000000000000a\nRBP: 00007f64312e308d R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007fff372533af R14: 00007f643236e300 R15: 0000000000022000"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/11825765291a93d8e7f44230da67b9f607c777bf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/29e13f6b38f0816af2012e0725507754e8f4569c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/38ca71a24cd4845021eed35fd2594d89dba9a5a8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/42726877453afdbe1508a8a96884ea907741d9a7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/602b338e3c3cd7f935f3f5011882961d074e5ac1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/90385f2b65d0cd2b3b1ac8909f0cc6dd31062cfc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9ba2b4ac35935f05ac98cff722f36ba07d62270e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aa7f333efd1138a68517a6a6a69ae540dd59d800",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f2845e1504a3bc4f3381394f057e8b63cb5f3f7a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49331.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49331.json
new file mode 100644
index 00000000000..d5df056e41e
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49331.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49331",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:09.900",
+ "lastModified": "2025-02-26T07:01:09.900",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling\n\nError paths do not free previously allocated memory. Add devm_kfree() to\nthose failure paths."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3eca2c42daa4659965db6817479027cbc6df7899",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/54423649bc0ed464b75807a7cf2857a5871f738f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/55904086041ba4ee4070187b36590f8f8d6df4cd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/593773088d615a46a42c97e01a0550d192bb7f74",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6fce324b530dd74750ad870699e33eeed1029ded",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/996419e0594abb311fb958553809f24f38e7abbe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d221ce54ce331c1a23be71eebf57f6a088632383",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/db836b97464d44340b568e041fd24602858713f7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f444ecd3f57f4ba5090fe8b6756933e37de4226e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49332.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49332.json
new file mode 100644
index 00000000000..92f70c25efe
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49332.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49332",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:09.997",
+ "lastModified": "2025-02-26T07:01:09.997",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Address NULL pointer dereference after starget_to_rport()\n\nCalls to starget_to_rport() may return NULL. Add check for NULL rport\nbefore dereference."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/68fcff1127e4995ddbd4b6861892a25c23db3f70",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6f808bd78e8296b4ded813b7182988d57e1f6176",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49333.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49333.json
new file mode 100644
index 00000000000..e8a2fce6f19
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49333.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49333",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:10.090",
+ "lastModified": "2025-02-26T07:01:10.090",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: E-Switch, pair only capable devices\n\nOFFLOADS paring using devcom is possible only on devices\nthat support LAG. Filter based on lag capabilities.\n\nThis fixes an issue where mlx5_get_next_phys_dev() was\ncalled without holding the interface lock.\n\nThis issue was found when commit\nbc4c2f2e0179 (\"net/mlx5: Lag, filter non compatible devices\")\nadded an assert that verifies the interface lock is held.\n\nWARNING: CPU: 9 PID: 1706 at drivers/net/ethernet/mellanox/mlx5/core/dev.c:642 mlx5_get_next_phys_dev+0xd2/0x100 [mlx5_core]\nModules linked in: mlx5_vdpa vringh vhost_iotlb vdpa mlx5_ib mlx5_core xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink xt_addrtype iptable_nat nf_nat br_netfilter rpcrdma rdma_ucm ib_iser libiscsi scsi_transport_iscsi rdma_cm iw_cm ib_umad ib_ipoib ib_cm ib_uverbs ib_core overlay fuse [last unloaded: mlx5_core]\nCPU: 9 PID: 1706 Comm: devlink Not tainted 5.18.0-rc7+ #11\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\nRIP: 0010:mlx5_get_next_phys_dev+0xd2/0x100 [mlx5_core]\nCode: 02 00 75 48 48 8b 85 80 04 00 00 5d c3 31 c0 5d c3 be ff ff ff ff 48 c7 c7 08 41 5b a0 e8 36 87 28 e3 85 c0 0f 85 6f ff ff ff <0f> 0b e9 68 ff ff ff 48 c7 c7 0c 91 cc 84 e8 cb 36 6f e1 e9 4d ff\nRSP: 0018:ffff88811bf47458 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: ffff88811b398000 RCX: 0000000000000001\nRDX: 0000000080000000 RSI: ffffffffa05b4108 RDI: ffff88812daaaa78\nRBP: ffff88812d050380 R08: 0000000000000001 R09: ffff88811d6b3437\nR10: 0000000000000001 R11: 00000000fddd3581 R12: ffff88815238c000\nR13: ffff88812d050380 R14: ffff8881018aa7e0 R15: ffff88811d6b3428\nFS: 00007fc82e18ae80(0000) GS:ffff88842e080000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f9630d1b421 CR3: 0000000149802004 CR4: 0000000000370ea0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \n mlx5_esw_offloads_devcom_event+0x99/0x3b0 [mlx5_core]\n mlx5_devcom_send_event+0x167/0x1d0 [mlx5_core]\n esw_offloads_enable+0x1153/0x1500 [mlx5_core]\n ? mlx5_esw_offloads_controller_valid+0x170/0x170 [mlx5_core]\n ? wait_for_completion_io_timeout+0x20/0x20\n ? mlx5_rescan_drivers_locked+0x318/0x810 [mlx5_core]\n mlx5_eswitch_enable_locked+0x586/0xc50 [mlx5_core]\n ? mlx5_eswitch_disable_pf_vf_vports+0x1d0/0x1d0 [mlx5_core]\n ? mlx5_esw_try_lock+0x1b/0xb0 [mlx5_core]\n ? mlx5_eswitch_enable+0x270/0x270 [mlx5_core]\n ? __debugfs_create_file+0x260/0x3e0\n mlx5_devlink_eswitch_mode_set+0x27e/0x870 [mlx5_core]\n ? mutex_lock_io_nested+0x12c0/0x12c0\n ? esw_offloads_disable+0x250/0x250 [mlx5_core]\n ? devlink_nl_cmd_trap_get_dumpit+0x470/0x470\n ? rcu_read_lock_sched_held+0x3f/0x70\n devlink_nl_cmd_eswitch_set_doit+0x217/0x620"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0cef0b7eb044bb8cfdaff4c1db55a8fd442f6bc9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3008e6a0049361e731b803c60fe8f3ab44e1d73f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cdbcdddb8076a09aa6ddaf20fd911fc787dca0e5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49334.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49334.json
new file mode 100644
index 00000000000..bfc5c2b7c4c
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49334.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49334",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:10.180",
+ "lastModified": "2025-02-26T07:01:10.180",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/huge_memory: Fix xarray node memory leak\n\nIf xas_split_alloc() fails to allocate the necessary nodes to complete the\nxarray entry split, it sets the xa_state to -ENOMEM, which xas_nomem()\nthen interprets as \"Please allocate more memory\", not as \"Please free\nany unnecessary memory\" (which was the intended outcome). It's confusing\nto use xas_nomem() to free memory in this context, so call xas_destroy()\ninstead."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/69a37a8ba1b408a1c7616494aa7018e4b3844cbe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/95c8181b4947e000f3b9b8e5918d899fce77b93d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c0c84962e297927ba57fd6ddc2bb000c9d149655",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49335.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49335.json
new file mode 100644
index 00000000000..8073288ede7
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49335.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49335",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:10.270",
+ "lastModified": "2025-02-26T07:01:10.270",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/cs: make commands with 0 chunks illegal behaviour.\n\nSubmitting a cs with 0 chunks, causes an oops later, found trying\nto execute the wrong userspace driver.\n\nMESA_LOADER_DRIVER_OVERRIDE=v3d glxinfo\n\n[172536.665184] BUG: kernel NULL pointer dereference, address: 00000000000001d8\n[172536.665188] #PF: supervisor read access in kernel mode\n[172536.665189] #PF: error_code(0x0000) - not-present page\n[172536.665191] PGD 6712a0067 P4D 6712a0067 PUD 5af9ff067 PMD 0\n[172536.665195] Oops: 0000 [#1] SMP NOPTI\n[172536.665197] CPU: 7 PID: 2769838 Comm: glxinfo Tainted: P O 5.10.81 #1-NixOS\n[172536.665199] Hardware name: To be filled by O.E.M. To be filled by O.E.M./CROSSHAIR V FORMULA-Z, BIOS 2201 03/23/2015\n[172536.665272] RIP: 0010:amdgpu_cs_ioctl+0x96/0x1ce0 [amdgpu]\n[172536.665274] Code: 75 18 00 00 4c 8b b2 88 00 00 00 8b 46 08 48 89 54 24 68 49 89 f7 4c 89 5c 24 60 31 d2 4c 89 74 24 30 85 c0 0f 85 c0 01 00 00 <48> 83 ba d8 01 00 00 00 48 8b b4 24 90 00 00 00 74 16 48 8b 46 10\n[172536.665276] RSP: 0018:ffffb47c0e81bbe0 EFLAGS: 00010246\n[172536.665277] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000\n[172536.665278] RDX: 0000000000000000 RSI: ffffb47c0e81be28 RDI: ffffb47c0e81bd68\n[172536.665279] RBP: ffff936524080010 R08: 0000000000000000 R09: ffffb47c0e81be38\n[172536.665281] R10: ffff936524080010 R11: ffff936524080000 R12: ffffb47c0e81bc40\n[172536.665282] R13: ffffb47c0e81be28 R14: ffff9367bc410000 R15: ffffb47c0e81be28\n[172536.665283] FS: 00007fe35e05d740(0000) GS:ffff936c1edc0000(0000) knlGS:0000000000000000\n[172536.665284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[172536.665286] CR2: 00000000000001d8 CR3: 0000000532e46000 CR4: 00000000000406e0\n[172536.665287] Call Trace:\n[172536.665322] ? amdgpu_cs_find_mapping+0x110/0x110 [amdgpu]\n[172536.665332] drm_ioctl_kernel+0xaa/0xf0 [drm]\n[172536.665338] drm_ioctl+0x201/0x3b0 [drm]\n[172536.665369] ? amdgpu_cs_find_mapping+0x110/0x110 [amdgpu]\n[172536.665372] ? selinux_file_ioctl+0x135/0x230\n[172536.665399] amdgpu_drm_ioctl+0x49/0x80 [amdgpu]\n[172536.665403] __x64_sys_ioctl+0x83/0xb0\n[172536.665406] do_syscall_64+0x33/0x40\n[172536.665409] entry_SYSCALL_64_after_hwframe+0x44/0xa9\n\nBug: https://gitlab.freedesktop.org/drm/amd/-/issues/2018"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/15c3bcc9b5349d40207e5f8d4d799b8b4b7d13b8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/20b947e5a3c74c5084d661c097517a554989d462",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/31ab27b14daaa75541a415c6794d6f3567fea44a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/70276460e914d560e96bfc208695a872fe9469c9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7086a23890d255bb5761604e39174b20d06231a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8189f44270db1be78169e11eec51a3eeb980bc63",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aa25acbe96692e4bf8482311c293f72d8c6034c0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/be585921f29df5422a39c952d188b418ad48ffab",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c12984cdb077b9042d2dc20ca18cb16a87bcc774",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49336.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49336.json
new file mode 100644
index 00000000000..35f3c261b37
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49336.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49336",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:10.370",
+ "lastModified": "2025-02-26T07:01:10.370",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem\n\nWhen the mapping is already reaped the unmap must be a no-op, as we\nwould otherwise try to remove the mapping twice, corrupting the involved\ndata structures."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/03bd455a79f69d97fee3e3b212ab754442f10e5c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/19323b3671a85788569d15685c8f83a05ec48cbb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/436cff507f2a41230baacc3e2ef1d3b2d2653f40",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/461c0fdf9434188875da9f10cfc86065866bb797",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/64f4edec081cb7c97c5e928529d0e1b0dbbffb83",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e168c25526cd0368af098095c2ded4a008007e1b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49337.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49337.json
new file mode 100644
index 00000000000..64c314f7d76
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49337.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49337",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:10.457",
+ "lastModified": "2025-02-26T07:01:10.457",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: dlmfs: fix error handling of user_dlm_destroy_lock\n\nWhen user_dlm_destroy_lock failed, it didn't clean up the flags it set\nbefore exit. For USER_LOCK_IN_TEARDOWN, if this function fails because of\nlock is still in used, next time when unlink invokes this function, it\nwill return succeed, and then unlink will remove inode and dentry if lock\nis not in used(file closed), but the dlm lock is still linked in dlm lock\nresource, then when bast come in, it will trigger a panic due to\nuser-after-free. See the following panic call trace. To fix this,\nUSER_LOCK_IN_TEARDOWN should be reverted if fail. And also error should\nbe returned if USER_LOCK_IN_TEARDOWN is set to let user know that unlink\nfail.\n\nFor the case of ocfs2_dlm_unlock failure, besides USER_LOCK_IN_TEARDOWN,\nUSER_LOCK_BUSY is also required to be cleared. Even though spin lock is\nreleased in between, but USER_LOCK_IN_TEARDOWN is still set, for\nUSER_LOCK_BUSY, if before every place that waits on this flag,\nUSER_LOCK_IN_TEARDOWN is checked to bail out, that will make sure no flow\nwaits on the busy flag set by user_dlm_destroy_lock(), then we can\nsimplely revert USER_LOCK_BUSY when ocfs2_dlm_unlock fails. Fix\nuser_dlm_cluster_lock() which is the only function not following this.\n\n[ 941.336392] (python,26174,16):dlmfs_unlink:562 ERROR: unlink\n004fb0000060000b5a90b8c847b72e1, error -16 from destroy\n[ 989.757536] ------------[ cut here ]------------\n[ 989.757709] kernel BUG at fs/ocfs2/dlmfs/userdlm.c:173!\n[ 989.757876] invalid opcode: 0000 [#1] SMP\n[ 989.758027] Modules linked in: ksplice_2zhuk2jr_ib_ipoib_new(O)\nksplice_2zhuk2jr(O) mptctl mptbase xen_netback xen_blkback xen_gntalloc\nxen_gntdev xen_evtchn cdc_ether usbnet mii ocfs2 jbd2 rpcsec_gss_krb5\nauth_rpcgss nfsv4 nfsv3 nfs_acl nfs fscache lockd grace ocfs2_dlmfs\nocfs2_stack_o2cb ocfs2_dlm ocfs2_nodemanager ocfs2_stackglue configfs bnx2fc\nfcoe libfcoe libfc scsi_transport_fc sunrpc ipmi_devintf bridge stp llc\nrds_rdma rds bonding ib_sdp ib_ipoib rdma_ucm ib_ucm ib_uverbs ib_umad\nrdma_cm ib_cm iw_cm falcon_lsm_serviceable(PE) falcon_nf_netcontain(PE)\nmlx4_vnic falcon_kal(E) falcon_lsm_pinned_13402(E) mlx4_ib ib_sa ib_mad\nib_core ib_addr xenfs xen_privcmd dm_multipath iTCO_wdt iTCO_vendor_support\npcspkr sb_edac edac_core i2c_i801 lpc_ich mfd_core ipmi_ssif i2c_core ipmi_si\nipmi_msghandler\n[ 989.760686] ioatdma sg ext3 jbd mbcache sd_mod ahci libahci ixgbe dca ptp\npps_core vxlan udp_tunnel ip6_udp_tunnel megaraid_sas mlx4_core crc32c_intel\nbe2iscsi bnx2i cnic uio cxgb4i cxgb4 cxgb3i libcxgbi ipv6 cxgb3 mdio\nlibiscsi_tcp qla4xxx iscsi_boot_sysfs libiscsi scsi_transport_iscsi wmi\ndm_mirror dm_region_hash dm_log dm_mod [last unloaded:\nksplice_2zhuk2jr_ib_ipoib_old]\n[ 989.761987] CPU: 10 PID: 19102 Comm: dlm_thread Tainted: P OE\n4.1.12-124.57.1.el6uek.x86_64 #2\n[ 989.762290] Hardware name: Oracle Corporation ORACLE SERVER\nX5-2/ASM,MOTHERBOARD,1U, BIOS 30350100 06/17/2021\n[ 989.762599] task: ffff880178af6200 ti: ffff88017f7c8000 task.ti:\nffff88017f7c8000\n[ 989.762848] RIP: e030:[] []\n__user_dlm_queue_lockres.part.4+0x76/0x80 [ocfs2_dlmfs]\n[ 989.763185] RSP: e02b:ffff88017f7cbcb8 EFLAGS: 00010246\n[ 989.763353] RAX: 0000000000000000 RBX: ffff880174d48008 RCX:\n0000000000000003\n[ 989.763565] RDX: 0000000000120012 RSI: 0000000000000003 RDI:\nffff880174d48170\n[ 989.763778] RBP: ffff88017f7cbcc8 R08: ffff88021f4293b0 R09:\n0000000000000000\n[ 989.763991] R10: ffff880179c8c000 R11: 0000000000000003 R12:\nffff880174d48008\n[ 989.764204] R13: 0000000000000003 R14: ffff880179c8c000 R15:\nffff88021db7a000\n[ 989.764422] FS: 0000000000000000(0000) GS:ffff880247480000(0000)\nknlGS:ffff880247480000\n[ 989.764685] CS: e033 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 989.764865] CR2: ffff8000007f6800 CR3: 0000000001ae0000 CR4:\n0000000000042660\n[ 989.765081] Stack:\n[ 989.765167] 00000000000\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/02480e2e82ae0e5588374bbbcf4fa6e4959fa174",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1434cd71ad9f3a6beda3036972983b6c4869207c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2c5e26a626fe46675bceba853e12aaf13c712e10",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/337e36550788dbe03254f0593a231c1c4873b20d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/733a35c00ef363a1c774d7ea486e0735b7c13a15",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/82bf8e7271fade40184177cb406203addc34c4a0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/863e0d81b6683c4cbc588ad831f560c90e494bef",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9c96238fac045b289993d7bc5aae7b2d72b25c76",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/efb54ec548829e1d3605f0434526f86e345b1b28",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49338.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49338.json
new file mode 100644
index 00000000000..fcd039ed938
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49338.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49338",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:10.560",
+ "lastModified": "2025-02-26T07:01:10.560",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules\n\nCT cleanup assumes that all tc rules were deleted first, and so\nis free to delete the CT shared resources (e.g the dr_action\nfwd_action which is shared for all tuples). But currently for\nuplink, this is happens in reverse, causing the below trace.\n\nCT cleanup is called from:\nmlx5e_cleanup_rep_tx()->mlx5e_cleanup_uplink_rep_tx()->\nmlx5e_rep_tc_cleanup()->mlx5e_tc_esw_cleanup()->\nmlx5_tc_ct_clean()\n\nOnly afterwards, tc cleanup is called from:\nmlx5e_cleanup_rep_tx()->mlx5e_tc_ht_cleanup()\nwhich would have deleted all the tc ct rules, and so delete\nall the offloaded tuples.\n\nFix this reversing the order of init and on cleanup, which\nwill result in tc cleanup then ct cleanup.\n\n[ 9443.593347] WARNING: CPU: 2 PID: 206774 at drivers/net/ethernet/mellanox/mlx5/core/steering/dr_action.c:1882 mlx5dr_action_destroy+0x188/0x1a0 [mlx5_core]\n[ 9443.593349] Modules linked in: act_ct nf_flow_table rdma_ucm(O) rdma_cm(O) iw_cm(O) ib_ipoib(O) ib_cm(O) ib_umad(O) mlx5_core(O-) mlxfw(O) mlxdevm(O) auxiliary(O) ib_uverbs(O) psample ib_core(O) mlx_compat(O) ip_gre gre ip_tunnel act_vlan bonding geneve esp6_offload esp6 esp4_offload esp4 act_tunnel_key vxlan ip6_udp_tunnel udp_tunnel act_mirred act_skbedit act_gact cls_flower sch_ingress nfnetlink_cttimeout nfnetlink xfrm_user xfrm_algo 8021q garp stp ipmi_devintf mrp ipmi_msghandler llc openvswitch nsh nf_conncount nf_nat mst_pciconf(O) dm_multipath sbsa_gwdt uio_pdrv_genirq uio mlxbf_pmc mlxbf_pka mlx_trio mlx_bootctl(O) bluefield_edac sch_fq_codel ip_tables ipv6 crc_ccitt btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor xor_neon raid6_pq raid1 raid0 crct10dif_ce i2c_mlxbf gpio_mlxbf2 mlxbf_gige aes_neon_bs aes_neon_blk [last unloaded: mlx5_ib]\n[ 9443.593419] CPU: 2 PID: 206774 Comm: modprobe Tainted: G O 5.4.0-1023.24.gc14613d-bluefield #1\n[ 9443.593422] Hardware name: https://www.mellanox.com BlueField SoC/BlueField SoC, BIOS BlueField:143ebaf Jan 11 2022\n[ 9443.593424] pstate: 20000005 (nzCv daif -PAN -UAO)\n[ 9443.593489] pc : mlx5dr_action_destroy+0x188/0x1a0 [mlx5_core]\n[ 9443.593545] lr : mlx5_ct_fs_smfs_destroy+0x24/0x30 [mlx5_core]\n[ 9443.593546] sp : ffff8000135dbab0\n[ 9443.593548] x29: ffff8000135dbab0 x28: ffff0003a6ab8e80\n[ 9443.593550] x27: 0000000000000000 x26: ffff0003e07d7000\n[ 9443.593552] x25: ffff800009609de0 x24: ffff000397fb2120\n[ 9443.593554] x23: ffff0003975c0000 x22: 0000000000000000\n[ 9443.593556] x21: ffff0003975f08c0 x20: ffff800009609de0\n[ 9443.593558] x19: ffff0003c8a13380 x18: 0000000000000014\n[ 9443.593560] x17: 0000000067f5f125 x16: 000000006529c620\n[ 9443.593561] x15: 000000000000000b x14: 0000000000000000\n[ 9443.593563] x13: 0000000000000002 x12: 0000000000000001\n[ 9443.593565] x11: ffff800011108868 x10: 0000000000000000\n[ 9443.593567] x9 : 0000000000000000 x8 : ffff8000117fb270\n[ 9443.593569] x7 : ffff0003ebc01288 x6 : 0000000000000000\n[ 9443.593571] x5 : ffff800009591ab8 x4 : fffffe000f6d9a20\n[ 9443.593572] x3 : 0000000080040001 x2 : fffffe000f6d9a20\n[ 9443.593574] x1 : ffff8000095901d8 x0 : 0000000000000025\n[ 9443.593577] Call trace:\n[ 9443.593634] mlx5dr_action_destroy+0x188/0x1a0 [mlx5_core]\n[ 9443.593688] mlx5_ct_fs_smfs_destroy+0x24/0x30 [mlx5_core]\n[ 9443.593743] mlx5_tc_ct_clean+0x34/0xa8 [mlx5_core]\n[ 9443.593797] mlx5e_tc_esw_cleanup+0x58/0x88 [mlx5_core]\n[ 9443.593851] mlx5e_rep_tc_cleanup+0x24/0x30 [mlx5_core]\n[ 9443.593905] mlx5e_cleanup_rep_tx+0x6c/0x78 [mlx5_core]\n[ 9443.593959] mlx5e_detach_netdev+0x74/0x98 [mlx5_core]\n[ 9443.594013] mlx5e_netdev_change_profile+0x70/0x180 [mlx5_core]\n[ 9443.594067] mlx5e_netdev_attach_nic_profile+0x34/0x40 [mlx5_core]\n[ 9443.594122] mlx5e_vport_rep_unload+0x15c/0x1a8 [mlx5_core]\n[ 9443.594177] mlx5_eswitch_unregister_vport_reps+0x228/0x298 [mlx5_core]\n[ 9443.594231] mlx5e_rep_remove+0x2c/0x38\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/11bcc79f4bcd244145e6a2c04d5dc755303492a8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/15ef9efa855cf405fadd78272e1e5d04e09a1cf3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49339.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49339.json
new file mode 100644
index 00000000000..90e2f0e632b
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49339.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49339",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:10.657",
+ "lastModified": "2025-02-26T07:01:10.657",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipv6: unexport __init-annotated seg6_hmac_init()\n\nEXPORT_SYMBOL and __init is a bad combination because the .init.text\nsection is freed up after the initialization. Hence, modules cannot\nuse symbols annotated __init. The access to a freed symbol may end up\nwith kernel panic.\n\nmodpost used to detect it, but it has been broken for a decade.\n\nRecently, I fixed modpost so it started to warn it again, then this\nshowed up in linux-next builds.\n\nThere are two ways to fix it:\n\n - Remove __init\n - Remove EXPORT_SYMBOL\n\nI chose the latter for this case because the caller (net/ipv6/seg6.c)\nand the callee (net/ipv6/seg6_hmac.c) belong to the same module.\nIt seems an internal function call in ipv6.ko."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1084716f76c8045eadf92a9d9a62641f3c8d8c90",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/317260b3eb6384a05a8af212308fa50f3b2e8290",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3e6de5037148c5a93a436b1e8d2edad3dac11755",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5801f064e35181c71857a80ff18af4dbec3c5f5c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5d9c1b081ad28c852a97e10dd75412546497694a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/64aef8efe96c1616142c4476a05731306fc4494e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9ba4416b831eeb4d185e88e73488d1d21288e63a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ab8b2c2de273ec1d698a18e399896a6febb5cda0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49340.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49340.json
new file mode 100644
index 00000000000..336581d8420
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49340.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49340",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:10.753",
+ "lastModified": "2025-02-26T07:01:10.753",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nip_gre: test csum_start instead of transport header\n\nGRE with TUNNEL_CSUM will apply local checksum offload on\nCHECKSUM_PARTIAL packets.\n\nipgre_xmit must validate csum_start after an optional skb_pull,\nelse lco_csum may trigger an overflow. The original check was\n\n\tif (csum && skb_checksum_start(skb) < skb->data)\n\t\treturn -EINVAL;\n\nThis had false positives when skb_checksum_start is undefined:\nwhen ip_summed is not CHECKSUM_PARTIAL. A discussed refinement\nwas straightforward\n\n\tif (csum && skb->ip_summed == CHECKSUM_PARTIAL &&\n\t skb_checksum_start(skb) < skb->data)\n\t\treturn -EINVAL;\n\nBut was eventually revised more thoroughly:\n- restrict the check to the only branch where needed, in an\n uncommon GRE path that uses header_ops and calls skb_pull.\n- test skb_transport_header, which is set along with csum_start\n in skb_partial_csum_set in the normal header_ops datapath.\n\nTurns out skbs can arrive in this branch without the transport\nheader set, e.g., through BPF redirection.\n\nRevise the check back to check csum_start directly, and only if\nCHECKSUM_PARTIAL. Do leave the check in the updated location.\nCheck field regardless of whether TUNNEL_CSUM is configured."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0c92d813c7c9ca2212ecd879232e7d87362fce98",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0ffa268724656633af5f37a38c212326d98ebe8c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3d08bc3a5d9b2106f5c8bcf1adb73147824aa006",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7596bd7920985f7fc8579a92e48bc53ce4475b21",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8d21e9963bec1aad2280cdd034c8993033ef2948",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e6b6f98fc7605c06c0a3baa70f62c534d7b4ce58",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fbeb8dfa8b87ef259eef0c89e39b53962a3cf604",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49341.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49341.json
new file mode 100644
index 00000000000..40ccdd12019
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49341.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49341",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:10.857",
+ "lastModified": "2025-02-26T07:01:10.857",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, arm64: Clear prog->jited_len along prog->jited\n\nsyzbot reported an illegal copy_to_user() attempt\nfrom bpf_prog_get_info_by_fd() [1]\n\nThere was no repro yet on this bug, but I think\nthat commit 0aef499f3172 (\"mm/usercopy: Detect vmalloc overruns\")\nis exposing a prior bug in bpf arm64.\n\nbpf_prog_get_info_by_fd() looks at prog->jited_len\nto determine if the JIT image can be copied out to user space.\n\nMy theory is that syzbot managed to get a prog where prog->jited_len\nhas been set to 43, while prog->bpf_func has ben cleared.\n\nIt is not clear why copy_to_user(uinsns, NULL, ulen) is triggering\nthis particular warning.\n\nI thought find_vma_area(NULL) would not find a vm_struct.\nAs we do not hold vmap_area_lock spinlock, it might be possible\nthat the found vm_struct was garbage.\n\n[1]\nusercopy: Kernel memory exposure attempt detected from vmalloc (offset 792633534417210172, size 43)!\nkernel BUG at mm/usercopy.c:101!\nInternal error: Oops - BUG: 0 [#1] PREEMPT SMP\nModules linked in:\nCPU: 0 PID: 25002 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-10139-g8291eaafed36 #0\nHardware name: linux,dummy-virt (DT)\npstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : usercopy_abort+0x90/0x94 mm/usercopy.c:101\nlr : usercopy_abort+0x90/0x94 mm/usercopy.c:89\nsp : ffff80000b773a20\nx29: ffff80000b773a30 x28: faff80000b745000 x27: ffff80000b773b48\nx26: 0000000000000000 x25: 000000000000002b x24: 0000000000000000\nx23: 00000000000000e0 x22: ffff80000b75db67 x21: 0000000000000001\nx20: 000000000000002b x19: ffff80000b75db3c x18: 00000000fffffffd\nx17: 2820636f6c6c616d x16: 76206d6f72662064 x15: 6574636574656420\nx14: 74706d6574746120 x13: 2129333420657a69 x12: 73202c3237313031\nx11: 3237313434333533 x10: 3336323937207465 x9 : 657275736f707865\nx8 : ffff80000a30c550 x7 : ffff80000b773830 x6 : ffff80000b773830\nx5 : 0000000000000000 x4 : ffff00007fbbaa10 x3 : 0000000000000000\nx2 : 0000000000000000 x1 : f7ff000028fc0000 x0 : 0000000000000064\nCall trace:\n usercopy_abort+0x90/0x94 mm/usercopy.c:89\n check_heap_object mm/usercopy.c:186 [inline]\n __check_object_size mm/usercopy.c:252 [inline]\n __check_object_size+0x198/0x36c mm/usercopy.c:214\n check_object_size include/linux/thread_info.h:199 [inline]\n check_copy_size include/linux/thread_info.h:235 [inline]\n copy_to_user include/linux/uaccess.h:159 [inline]\n bpf_prog_get_info_by_fd.isra.0+0xf14/0xfdc kernel/bpf/syscall.c:3993\n bpf_obj_get_info_by_fd+0x12c/0x510 kernel/bpf/syscall.c:4253\n __sys_bpf+0x900/0x2150 kernel/bpf/syscall.c:4956\n __do_sys_bpf kernel/bpf/syscall.c:5021 [inline]\n __se_sys_bpf kernel/bpf/syscall.c:5019 [inline]\n __arm64_sys_bpf+0x28/0x40 kernel/bpf/syscall.c:5019\n __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]\n invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:52\n el0_svc_common.constprop.0+0x44/0xec arch/arm64/kernel/syscall.c:142\n do_el0_svc+0xa0/0xc0 arch/arm64/kernel/syscall.c:206\n el0_svc+0x44/0xb0 arch/arm64/kernel/entry-common.c:624\n el0t_64_sync_handler+0x1ac/0x1b0 arch/arm64/kernel/entry-common.c:642\n el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:581\nCode: aa0003e3 d00038c0 91248000 97fff65f (d4210000)"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0cf7aaff290cdc4d7cee683d4a18138b0dacac48",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/10f3b29c65bb2fe0d47c2945cd0b4087be1c5218",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3f4d5e727aeaa610688d46c9f101f78b7f712583",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/41f7c4f85d402043687e863627a1a84fa867c62d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5c25a3040bc0486c41a7b63a1fb0de7cdb846ad7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aaf61a312af63e1cfe2264c4c5b8cd4ea3626025",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e412b3d178ea4bf746f6b8ee086761613704c6be",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49342.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49342.json
new file mode 100644
index 00000000000..32c1d4ee5bf
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49342.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49342",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:10.953",
+ "lastModified": "2025-02-26T07:01:10.953",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register\n\nof_get_child_by_name() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/7fb1fe7d9a167205413f1de8db9f7d0f82c78286",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b51996e35bbfcc7a27d94dfeed5cc2429b2c0df4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b8d91399775c55162073bb2aca061ec42e3d4bc1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49343.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49343.json
new file mode 100644
index 00000000000..259ae98cd7f
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49343.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49343",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:11.040",
+ "lastModified": "2025-02-26T07:01:11.040",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: avoid cycles in directory h-tree\n\nA maliciously corrupted filesystem can contain cycles in the h-tree\nstored inside a directory. That can easily lead to the kernel corrupting\ntree nodes that were already verified under its hands while doing a node\nsplit and consequently accessing unallocated memory. Fix the problem by\nverifying traversed block numbers are unique."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/24b8206fec1db21d7e82f21f0b2ff5e5672cf5b3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3a3ce941645407cd0b0b7f01ad9e2ea3770f46cc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3ba733f879c2a88910744647e41edeefbc0d92b2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6084240bfc44bf265ab6ae7d96980469b05be0f1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b3ad9ff6f06c1dc6abf7437691c88ca3d6da3ac0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5a16a6df2c16eaf4de04948553ef0089dee463f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e157c8f87e8fac112d6c955e69a60cdb9bc80a60",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ff4cafa51762da3824881a9000ca421d4b78b138",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49344.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49344.json
new file mode 100644
index 00000000000..0b067953700
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49344.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49344",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:11.140",
+ "lastModified": "2025-02-26T07:01:11.140",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_unix: Fix a data-race in unix_dgram_peer_wake_me().\n\nunix_dgram_poll() calls unix_dgram_peer_wake_me() without `other`'s\nlock held and check if its receive queue is full. Here we need to\nuse unix_recvq_full_lockless() instead of unix_recvq_full(), otherwise\nKCSAN will report a data-race."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/556720013c36c193d9cbfb06e7b33e51f0c39fbf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/662a80946ce13633ae90a55379f1346c10f0c432",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/71e8bfc7f838cabc60cba24e09ca84c4f8321ab2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8801eb3ccd2e4e3b1a01449383e3321ae6dbd9d6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/95f0ba806277733bf6024e23e27e1be773701cca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c61848500a3fd6867dfa4834b8c7f97133eceb9f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c926ae58f24f7bd55aa2ea4add9f952032507913",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49345.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49345.json
new file mode 100644
index 00000000000..ad31b5f4100
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49345.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49345",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:11.237",
+ "lastModified": "2025-02-26T07:01:11.237",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: xfrm: unexport __init-annotated xfrm4_protocol_init()\n\nEXPORT_SYMBOL and __init is a bad combination because the .init.text\nsection is freed up after the initialization. Hence, modules cannot\nuse symbols annotated __init. The access to a freed symbol may end up\nwith kernel panic.\n\nmodpost used to detect it, but it has been broken for a decade.\n\nRecently, I fixed modpost so it started to warn it again, then this\nshowed up in linux-next builds.\n\nThere are two ways to fix it:\n\n - Remove __init\n - Remove EXPORT_SYMBOL\n\nI chose the latter for this case because the only in-tree call-site,\nnet/ipv4/xfrm4_policy.c is never compiled as modular.\n(CONFIG_XFRM is boolean)"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2b253fbc9f7b5db18d716436bdcf8ecef09fd63d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/31f3c6a4dcd3260a386e62cef2d5b36e902600a1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4a388f08d8784af48f352193d2b72aaf167a57a1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/85a055c03691e51499123194a14a0c249cf33227",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/be3884d5cd04ccd58294b83a02d70b7c5fca19d3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c58d82a1264813e69119c13e9804e2e60b664ad5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e04d59cfe0c0129df7aba7ef7bb17b96be2a64f2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e53cd3814504b2cadaba4d5a8a07eeea9ddacd03",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef6d2354de238b065d8799c80da4be9a6af18e39",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49346.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49346.json
new file mode 100644
index 00000000000..f88b3087c0f
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49346.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49346",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:11.340",
+ "lastModified": "2025-02-26T07:01:11.340",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list\n\nEvery iteration of for_each_available_child_of_node() decrements\nthe reference count of the previous node.\nwhen breaking early from a for_each_available_child_of_node() loop,\nwe need to explicitly call of_node_put() on the gphy_fw_np.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0737e018a05e2aa352828c52bdeed3b02cff2930",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2e007ac6fa7c9c94ad84da075c5c504afad690a0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/32cd78c5610f02a929f63cac985e73692d05f33e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/54d6802c4d83fa8de7696cfec06f475d5fd92d27",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7c8df6fad43d9d5d77f281f794b2a93cd02fd1a9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c2ae49a113a5344232f1ebb93bcf18bbd11e9c39",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49347.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49347.json
new file mode 100644
index 00000000000..d43c07ffa7e
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49347.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49347",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:11.433",
+ "lastModified": "2025-02-26T07:01:11.433",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix bug_on in ext4_writepages\n\nwe got issue as follows:\nEXT4-fs error (device loop0): ext4_mb_generate_buddy:1141: group 0, block bitmap and bg descriptor inconsistent: 25 vs 31513 free cls\n------------[ cut here ]------------\nkernel BUG at fs/ext4/inode.c:2708!\ninvalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 2 PID: 2147 Comm: rep Not tainted 5.18.0-rc2-next-20220413+ #155\nRIP: 0010:ext4_writepages+0x1977/0x1c10\nRSP: 0018:ffff88811d3e7880 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88811c098000\nRDX: 0000000000000000 RSI: ffff88811c098000 RDI: 0000000000000002\nRBP: ffff888128140f50 R08: ffffffffb1ff6387 R09: 0000000000000000\nR10: 0000000000000007 R11: ffffed10250281ea R12: 0000000000000001\nR13: 00000000000000a4 R14: ffff88811d3e7bb8 R15: ffff888128141028\nFS: 00007f443aed9740(0000) GS:ffff8883aef00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000020007200 CR3: 000000011c2a4000 CR4: 00000000000006e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \n do_writepages+0x130/0x3a0\n filemap_fdatawrite_wbc+0x83/0xa0\n filemap_flush+0xab/0xe0\n ext4_alloc_da_blocks+0x51/0x120\n __ext4_ioctl+0x1534/0x3210\n __x64_sys_ioctl+0x12c/0x170\n do_syscall_64+0x3b/0x90\n\nIt may happen as follows:\n1. write inline_data inode\nvfs_write\n new_sync_write\n ext4_file_write_iter\n ext4_buffered_write_iter\n generic_perform_write\n ext4_da_write_begin\n ext4_da_write_inline_data_begin -> If inline data size too\n small will allocate block to write, then mapping will has\n dirty page\n ext4_da_convert_inline_data_to_extent ->clear EXT4_STATE_MAY_INLINE_DATA\n2. fallocate\ndo_vfs_ioctl\n ioctl_preallocate\n vfs_fallocate\n ext4_fallocate\n ext4_convert_inline_data\n ext4_convert_inline_data_nolock\n ext4_map_blocks -> fail will goto restore data\n ext4_restore_inline_data\n ext4_create_inline_data\n ext4_write_inline_data\n ext4_set_inode_state -> set inode EXT4_STATE_MAY_INLINE_DATA\n3. writepages\n__ext4_ioctl\n ext4_alloc_da_blocks\n filemap_flush\n filemap_fdatawrite_wbc\n do_writepages\n ext4_writepages\n if (ext4_has_inline_data(inode))\n BUG_ON(ext4_test_inode_state(inode, EXT4_STATE_MAY_INLINE_DATA))\n\nThe root cause of this issue is we destory inline data until call\next4_writepages under delay allocation mode. But there maybe already\nconvert from inline to extent. To solve this issue, we call\nfilemap_flush first.."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/013f12bdedb96816aaa27ee04349f4433d361f52",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/18a759f7f99f0b65a08ff5b7e745fc405a42bde4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/19918ec7717d87d5ab825884a46b26b21375d7ce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1b061af037646c9cdb0afd8a8d2f1e1c06285866",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1cde35417edc0370fb0179a4e38b78a15350a8d0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/73fd5b19285197078ee8a2e651d75d5b094a4de9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b2b78f5bf2d453dda3903955efee059260787a42",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/de1732b5c1693ad489c5d254f124f67cb775f37d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef09ed5d37b84d18562b30cf7253e57062d0db05",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49348.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49348.json
new file mode 100644
index 00000000000..5beb2a21f81
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49348.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49348",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:11.533",
+ "lastModified": "2025-02-26T07:01:11.533",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state\n\nThe EXT4_FC_REPLAY bit in sbi->s_mount_state is used to indicate that\nwe are in the middle of replay the fast commit journal. This was\nactually a mistake, since the sbi->s_mount_info is initialized from\nes->s_state. Arguably s_mount_state is misleadingly named, but the\nname is historical --- s_mount_state and s_state dates back to ext2.\n\nWhat should have been used is the ext4_{set,clear,test}_mount_flag()\ninline functions, which sets EXT4_MF_* bits in sbi->s_mount_flags.\n\nThe problem with using EXT4_FC_REPLAY is that a maliciously corrupted\nsuperblock could result in EXT4_FC_REPLAY getting set in\ns_mount_state. This bypasses some sanity checks, and this can trigger\na BUG() in ext4_es_cache_extent(). As a easy-to-backport-fix, filter\nout the EXT4_FC_REPLAY bit for now. We should eventually transition\naway from EXT4_FC_REPLAY to something like EXT4_MF_REPLAY."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/55b4dbb29054a05d839562f6d635ce05669b016d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/af2f1932743fb52ebcb008ad7ac500d9df0aa796",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b99fd73418350dea360da8311e87a6a7b0e15a4c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c878bea3c9d724ddfa05a813f30de3d25a0ba83f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc5b09cb6dacd4b32640537929ab4ee8fb2b9e04",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49349.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49349.json
new file mode 100644
index 00000000000..4e8cf325e0c
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49349.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49349",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:11.623",
+ "lastModified": "2025-02-26T07:01:11.623",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix use-after-free in ext4_rename_dir_prepare\n\nWe got issue as follows:\nEXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue\next4_get_first_dir_block: bh->b_data=0xffff88810bee6000 len=34478\next4_get_first_dir_block: *parent_de=0xffff88810beee6ae bh->b_data=0xffff88810bee6000\next4_rename_dir_prepare: [1] parent_de=0xffff88810beee6ae\n==================================================================\nBUG: KASAN: use-after-free in ext4_rename_dir_prepare+0x152/0x220\nRead of size 4 at addr ffff88810beee6ae by task rep/1895\n\nCPU: 13 PID: 1895 Comm: rep Not tainted 5.10.0+ #241\nCall Trace:\n dump_stack+0xbe/0xf9\n print_address_description.constprop.0+0x1e/0x220\n kasan_report.cold+0x37/0x7f\n ext4_rename_dir_prepare+0x152/0x220\n ext4_rename+0xf44/0x1ad0\n ext4_rename2+0x11c/0x170\n vfs_rename+0xa84/0x1440\n do_renameat2+0x683/0x8f0\n __x64_sys_renameat+0x53/0x60\n do_syscall_64+0x33/0x40\n entry_SYSCALL_64_after_hwframe+0x44/0xa9\nRIP: 0033:0x7f45a6fc41c9\nRSP: 002b:00007ffc5a470218 EFLAGS: 00000246 ORIG_RAX: 0000000000000108\nRAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f45a6fc41c9\nRDX: 0000000000000005 RSI: 0000000020000180 RDI: 0000000000000005\nRBP: 00007ffc5a470240 R08: 00007ffc5a470160 R09: 0000000020000080\nR10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000400bb0\nR13: 00007ffc5a470320 R14: 0000000000000000 R15: 0000000000000000\n\nThe buggy address belongs to the page:\npage:00000000440015ce refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x10beee\nflags: 0x200000000000000()\nraw: 0200000000000000 ffffea00043ff4c8 ffffea0004325608 0000000000000000\nraw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000\npage dumped because: kasan: bad access detected\n\nMemory state around the buggy address:\n ffff88810beee580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n ffff88810beee600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n>ffff88810beee680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n ^\n ffff88810beee700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n ffff88810beee780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n==================================================================\nDisabling lock debugging due to kernel taint\next4_rename_dir_prepare: [2] parent_de->inode=3537895424\next4_rename_dir_prepare: [3] dir=0xffff888124170140\next4_rename_dir_prepare: [4] ino=2\next4_rename_dir_prepare: ent->dir->i_ino=2 parent=-757071872\n\nReason is first directory entry which 'rec_len' is 34478, then will get illegal\nparent entry. Now, we do not check directory entry after read directory block\nin 'ext4_get_first_dir_block'.\nTo solve this issue, check directory entry in 'ext4_get_first_dir_block'.\n\n[ Trigger an ext4_error() instead of just warning if the directory is\n missing a '.' or '..' entry. Also make sure we return an error code\n if the file system is corrupted. -TYT ]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0be698ecbe4471fcad80e81ec6a05001421041b3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0ff38b99fa075ddd246487a28cb9af049f4ceef1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/10801095224de0d0ab06ae60698680c1f883a3ae",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1a3a15bf6f9963d755270cbdb282863b84839195",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/364380c00912bed9b5d99eb485018360b0ecf64f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4a2bea60cf7ff957b3eda0b17750d483876a02fa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/97f802a652a749422dede32071d29a53cf4bd034",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dd887f83ea54aea5b780a84527e23ab95f777fed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eaecf7ebfd5dd09038a80b14be46b844f54cfc5c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49350.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49350.json
new file mode 100644
index 00000000000..5920cd2dcf3
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49350.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49350",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:11.723",
+ "lastModified": "2025-02-26T07:01:11.723",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mdio: unexport __init-annotated mdio_bus_init()\n\nEXPORT_SYMBOL and __init is a bad combination because the .init.text\nsection is freed up after the initialization. Hence, modules cannot\nuse symbols annotated __init. The access to a freed symbol may end up\nwith kernel panic.\n\nmodpost used to detect it, but it has been broken for a decade.\n\nRecently, I fixed modpost so it started to warn it again, then this\nshowed up in linux-next builds.\n\nThere are two ways to fix it:\n\n - Remove __init\n - Remove EXPORT_SYMBOL\n\nI chose the latter for this case because the only in-tree call-site,\ndrivers/net/phy/phy_device.c is never compiled as modular.\n(CONFIG_PHYLIB is boolean)"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/35b42dce619701f1300fb8498dae82c9bb1f0263",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5534bcd7c40299862237c4a8fd9c5031b3db1538",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/59fa94cddf9eef8d8dae587373eed8b8f4eb11d7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6a90a44d53428a3bf01bd80df9ba78b19959270c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7759c3222815b945a94b212bc0c6cdec475cfec2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ab64ec2c75683f30ccde9eaaf0761002f901aa12",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f2f0f8c18b60ca64ff50892ed899cf1c77864755",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f5c68137f1191ba3fcf6260ec71b30be2e2bf4c3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49351.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49351.json
new file mode 100644
index 00000000000..dcc4166bba6
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49351.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49351",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:11.823",
+ "lastModified": "2025-02-26T07:01:11.823",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: altera: Fix refcount leak in altera_tse_mdio_create\n\nEvery iteration of for_each_child_of_node() decrements\nthe reference count of the previous node.\nWhen break from a for_each_child_of_node() loop,\nwe need to explicitly call of_node_put() on the child node when\nnot need anymore.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/11ec18b1d8d92b9df307d31950dcba0b3dd7283c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1fd12298a0e0ca23478c715e672ee64c85670584",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4f850fe0a32c3f1e19b76996a3b1ca32637a14de",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5cd0e22fa11f4a21a8c09cc258f20b1474c95801",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/803b217f1fb49a2dbb2123acdb45111b9c48b8be",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8174acbef87b8dd8bf3731eba2a5af1ac857e239",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/96bf5ed057df2d157274d4e2079002f9a9404bb8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a013fa884d8738ad8455aa1a843b8c9d80c6c833",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e31d9ba169860687dba19bdc8fccbfd34077f655",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49352.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49352.json
new file mode 100644
index 00000000000..a6b26b6a83a
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49352.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49352",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:11.920",
+ "lastModified": "2025-02-26T07:01:11.920",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix warning in ext4_handle_inode_extension\n\nWe got issue as follows:\nEXT4-fs error (device loop0) in ext4_reserve_inode_write:5741: Out of memory\nEXT4-fs error (device loop0): ext4_setattr:5462: inode #13: comm syz-executor.0: mark_inode_dirty error\nEXT4-fs error (device loop0) in ext4_setattr:5519: Out of memory\nEXT4-fs error (device loop0): ext4_ind_map_blocks:595: inode #13: comm syz-executor.0: Can't allocate blocks for non-extent mapped inodes with bigalloc\n------------[ cut here ]------------\nWARNING: CPU: 1 PID: 4361 at fs/ext4/file.c:301 ext4_file_write_iter+0x11c9/0x1220\nModules linked in:\nCPU: 1 PID: 4361 Comm: syz-executor.0 Not tainted 5.10.0+ #1\nRIP: 0010:ext4_file_write_iter+0x11c9/0x1220\nRSP: 0018:ffff924d80b27c00 EFLAGS: 00010282\nRAX: ffffffff815a3379 RBX: 0000000000000000 RCX: 000000003b000000\nRDX: ffff924d81601000 RSI: 00000000000009cc RDI: 00000000000009cd\nRBP: 000000000000000d R08: ffffffffbc5a2c6b R09: 0000902e0e52a96f\nR10: ffff902e2b7c1b40 R11: ffff902e2b7c1b40 R12: 000000000000000a\nR13: 0000000000000001 R14: ffff902e0e52aa10 R15: ffffffffffffff8b\nFS: 00007f81a7f65700(0000) GS:ffff902e3bc80000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: ffffffffff600400 CR3: 000000012db88001 CR4: 00000000003706e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n do_iter_readv_writev+0x2e5/0x360\n do_iter_write+0x112/0x4c0\n do_pwritev+0x1e5/0x390\n __x64_sys_pwritev2+0x7e/0xa0\n do_syscall_64+0x37/0x50\n entry_SYSCALL_64_after_hwframe+0x44/0xa9\n\nAbove issue may happen as follows:\nAssume\ninode.i_size=4096\nEXT4_I(inode)->i_disksize=4096\n\nstep 1: set inode->i_isize = 8192\next4_setattr\n if (attr->ia_size != inode->i_size)\n EXT4_I(inode)->i_disksize = attr->ia_size;\n rc = ext4_mark_inode_dirty\n ext4_reserve_inode_write\n ext4_get_inode_loc\n __ext4_get_inode_loc\n sb_getblk --> return -ENOMEM\n ...\n if (!error) ->will not update i_size\n i_size_write(inode, attr->ia_size);\nNow:\ninode.i_size=4096\nEXT4_I(inode)->i_disksize=8192\n\nstep 2: Direct write 4096 bytes\next4_file_write_iter\n ext4_dio_write_iter\n iomap_dio_rw ->return error\n if (extend)\n ext4_handle_inode_extension\n WARN_ON_ONCE(i_size_read(inode) < EXT4_I(inode)->i_disksize);\n->Then trigger warning.\n\nTo solve above issue, if mark inode dirty failed in ext4_setattr just\nset 'EXT4_I(inode)->i_disksize' with old value."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0ab308d72af7548f21e4499d025c25887da0c26a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1bcce88da60eccc946c0f4ed942b0f08cd565778",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/adf490083ca52ebfb0b2fe64ff1ead00c0452dd7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b81d2ff6885e38fc745eeaf9565775055778fc0b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e383c2aa5f02ab571530dc5c5696479672478c25",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f4534c9fc94d22383f187b9409abb3f9df2e3db3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49353.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49353.json
new file mode 100644
index 00000000000..f668ed20a3f
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49353.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49353",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:12.013",
+ "lastModified": "2025-02-26T07:01:12.013",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/papr_scm: don't requests stats with '0' sized stats buffer\n\nSachin reported [1] that on a POWER-10 lpar he is seeing a kernel panic being\nreported with vPMEM when papr_scm probe is being called. The panic is of the\nform below and is observed only with following option disabled(profile) for the\nsaid LPAR 'Enable Performance Information Collection' in the HMC:\n\n Kernel attempted to write user page (1c) - exploit attempt? (uid: 0)\n BUG: Kernel NULL pointer dereference on write at 0x0000001c\n Faulting instruction address: 0xc008000001b90844\n Oops: Kernel access of bad area, sig: 11 [#1]\n\n NIP [c008000001b90844] drc_pmem_query_stats+0x5c/0x270 [papr_scm]\n LR [c008000001b92794] papr_scm_probe+0x2ac/0x6ec [papr_scm]\n Call Trace:\n 0xc00000000941bca0 (unreliable)\n papr_scm_probe+0x2ac/0x6ec [papr_scm]\n platform_probe+0x98/0x150\n really_probe+0xfc/0x510\n __driver_probe_device+0x17c/0x230\n\n ---[ end trace 0000000000000000 ]---\n Kernel panic - not syncing: Fatal exception\n\nOn investigation looks like this panic was caused due to a 'stat_buffer' of\nsize==0 being provided to drc_pmem_query_stats() to fetch all performance\nstats-ids of an NVDIMM. However drc_pmem_query_stats() shouldn't have been called\nsince the vPMEM NVDIMM doesn't support and performance stat-id's. This was caused\ndue to missing check for 'p->stat_buffer_len' at the beginning of\npapr_scm_pmu_check_events() which indicates that the NVDIMM doesn't support\nperformance-stats.\n\nFix this by introducing the check for 'p->stat_buffer_len' at the beginning of\npapr_scm_pmu_check_events().\n\n[1] https://lore.kernel.org/all/6B3A522A-6A5F-4CC9-B268-0C63AA6E07D3@linux.ibm.com"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/07bf9431b1590d1cd7a8d62075d0b50b073f0495",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e1295aab2ebcda1c1a9ed342baedc080e5c393e5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49354.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49354.json
new file mode 100644
index 00000000000..944075e1dea
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49354.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49354",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:12.103",
+ "lastModified": "2025-02-26T07:01:12.103",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe\n\nof_find_device_by_node() takes reference, we should use put_device()\nto release it when not need anymore.\nAdd missing put_device() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/10d6bdf532902be1d8aa5900b3c03c5671612aa2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/19cb3ece14547cb1ca2021798aaf49a3f82643d1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7bd85c5ba1687daf54e3b6907673c3604b1e75cf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/888312dc297a8a103f6371ef668c7e04f57a7679",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8d8ad067b90f231b8fdb14acee673ca4012f6045",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a4d3e5f1d7d4f8b5e3834fec0f057a762c55806b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c9782e1b21bee4b783a64b2a91e7e71406c21a21",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5a1e7f33c88780b279835d63665d7e38ccb671f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fb2cb409b504bb3a69e65a17f3120328c8e50219",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49355.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49355.json
new file mode 100644
index 00000000000..85656bf709d
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49355.json
@@ -0,0 +1,16 @@
+{
+ "id": "CVE-2022-49355",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:12.200",
+ "lastModified": "2025-02-26T13:15:34.157",
+ "vulnStatus": "Rejected",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
+ }
+ ],
+ "metrics": {},
+ "references": []
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49356.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49356.json
new file mode 100644
index 00000000000..171cd949cb7
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49356.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49356",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:12.300",
+ "lastModified": "2025-02-26T07:01:12.300",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: Trap RDMA segment overflows\n\nPrevent svc_rdma_build_writes() from walking off the end of a Write\nchunk's segment array. Caught with KASAN.\n\nThe test that this fix replaces is invalid, and might have been left\nover from an earlier prototype of the PCL work."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/659f7568e09593945c221bf20217a82ebdfe1328",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/812c13521d4a72469c78ce06d8cdc8dc5b5557b5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ea26bf5eca1459b5a7824997d7823409ce38214e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f012e95b377c73c0283f009823c633104dedb337",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49357.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49357.json
new file mode 100644
index 00000000000..5dbd5287df1
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49357.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49357",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:12.390",
+ "lastModified": "2025-02-26T07:01:12.390",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi: Do not import certificates from UEFI Secure Boot for T2 Macs\n\nOn Apple T2 Macs, when Linux attempts to read the db and dbx efi variables\nat early boot to load UEFI Secure Boot certificates, a page fault occurs\nin Apple firmware code and EFI runtime services are disabled with the\nfollowing logs:\n\n[Firmware Bug]: Page fault caused by firmware at PA: 0xffffb1edc0068000\nWARNING: CPU: 3 PID: 104 at arch/x86/platform/efi/quirks.c:735 efi_crash_gracefully_on_page_fault+0x50/0xf0\n(Removed some logs from here)\nCall Trace:\n \n page_fault_oops+0x4f/0x2c0\n ? search_bpf_extables+0x6b/0x80\n ? search_module_extables+0x50/0x80\n ? search_exception_tables+0x5b/0x60\n kernelmode_fixup_or_oops+0x9e/0x110\n __bad_area_nosemaphore+0x155/0x190\n bad_area_nosemaphore+0x16/0x20\n do_kern_addr_fault+0x8c/0xa0\n exc_page_fault+0xd8/0x180\n asm_exc_page_fault+0x1e/0x30\n(Removed some logs from here)\n ? __efi_call+0x28/0x30\n ? switch_mm+0x20/0x30\n ? efi_call_rts+0x19a/0x8e0\n ? process_one_work+0x222/0x3f0\n ? worker_thread+0x4a/0x3d0\n ? kthread+0x17a/0x1a0\n ? process_one_work+0x3f0/0x3f0\n ? set_kthread_struct+0x40/0x40\n ? ret_from_fork+0x22/0x30\n \n---[ end trace 1f82023595a5927f ]---\nefi: Froze efi_rts_wq and disabled EFI Runtime Services\nintegrity: Couldn't get size: 0x8000000000000015\nintegrity: MODSIGN: Couldn't get UEFI db list\nefi: EFI Runtime Services are disabled!\nintegrity: Couldn't get size: 0x8000000000000015\nintegrity: Couldn't get UEFI dbx list\nintegrity: Couldn't get size: 0x8000000000000015\nintegrity: Couldn't get mokx list\nintegrity: Couldn't get size: 0x80000000\n\nSo we avoid reading these UEFI variables and thus prevent the crash."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/155ca952c7ca19aa32ecfb7373a32bbc2e1ec6eb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1f7264f0510f519b4e4f575a8f0579ea65e7592e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/65237307f88f5200782ae7f243bdd385e37cde5d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b1cda6dd2c44771f042d65f0d17bec322ef99a0a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b34786b25d75f9c119696e6bdf3827f54ae3601b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c072cab98bac11f6ef9db640fb51834d9552e2e6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49358.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49358.json
new file mode 100644
index 00000000000..ee04251e4db
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49358.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49358",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:12.487",
+ "lastModified": "2025-02-26T07:01:12.487",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: memleak flow rule from commit path\n\nAbort path release flow rule object, however, commit path does not.\nUpdate code to destroy these objects before releasing the transaction."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/330c0c6cd2150a2d7f47af16aa590078b0d2f736",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5b8d63489c3b701eb2a76f848ec94d8cbc9373b9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/80de9ea1f5b808a6601e91111fae601df2b26369",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9dd732e0bdf538b1b76dc7c157e2b5e560ff30d3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ab9f34a30c23f656e76f4c5b83125a4e7b53c86e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e33d9bd563e71f6c6528b96008d65524a459c4dc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49359.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49359.json
new file mode 100644
index 00000000000..8a5e3e31b4a
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49359.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49359",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:12.583",
+ "lastModified": "2025-02-26T07:01:12.583",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/panfrost: Job should reference MMU not file_priv\n\nFor a while now it's been allowed for a MMU context to outlive it's\ncorresponding panfrost_priv, however the job structure still references\npanfrost_priv to get hold of the MMU context. If panfrost_priv has been\nfreed this is a use-after-free which I've been able to trigger resulting\nin a splat.\n\nTo fix this, drop the reference to panfrost_priv in the job structure\nand add a direct reference to the MMU structure which is what's actually\nneeded."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/472dd7ea5e19a1aeabf1711ddc756777e05ee7c2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6e516faf04317db2c46cbec4e3b78b4653a5b109",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8c8e8cc91a6ffc79865108279a74fd57d9070a17",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49360.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49360.json
new file mode 100644
index 00000000000..8f19abfee1e
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49360.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49360",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:12.677",
+ "lastModified": "2025-02-26T07:01:12.677",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to do sanity check on total_data_blocks\n\nAs Yanming reported in bugzilla:\n\nhttps://bugzilla.kernel.org/show_bug.cgi?id=215916\n\nThe kernel message is shown below:\n\nkernel BUG at fs/f2fs/segment.c:2560!\nCall Trace:\n allocate_segment_by_default+0x228/0x440\n f2fs_allocate_data_block+0x13d1/0x31f0\n do_write_page+0x18d/0x710\n f2fs_outplace_write_data+0x151/0x250\n f2fs_do_write_data_page+0xef9/0x1980\n move_data_page+0x6af/0xbc0\n do_garbage_collect+0x312f/0x46f0\n f2fs_gc+0x6b0/0x3bc0\n f2fs_balance_fs+0x921/0x2260\n f2fs_write_single_data_page+0x16be/0x2370\n f2fs_write_cache_pages+0x428/0xd00\n f2fs_write_data_pages+0x96e/0xd50\n do_writepages+0x168/0x550\n __writeback_single_inode+0x9f/0x870\n writeback_sb_inodes+0x47d/0xb20\n __writeback_inodes_wb+0xb2/0x200\n wb_writeback+0x4bd/0x660\n wb_workfn+0x5f3/0xab0\n process_one_work+0x79f/0x13e0\n worker_thread+0x89/0xf60\n kthread+0x26a/0x300\n ret_from_fork+0x22/0x30\nRIP: 0010:new_curseg+0xe8d/0x15f0\n\nThe root cause is: ckpt.valid_block_count is inconsistent with SIT table,\nstat info indicates filesystem has free blocks, but SIT table indicates\nfilesystem has no free segment.\n\nSo that during garbage colloection, it triggers panic when LFS allocator\nfails to find free segment.\n\nThis patch tries to fix this issue by checking consistency in between\nckpt.valid_block_count and block accounted from SIT."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/071b1269a3b3ad9cec16ed76a48015bfffd9aee8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6b8beca0edd32075a769bfe4178ca00c0dcd22a9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c9e4cd5b0ccd7168801d6a811919171b185c5cf8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc8c9df19971e59ebbe669ce710080e347dfec32",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef221b738b26d8c9f7e7967f4586db2dd3bd5288",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49361.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49361.json
new file mode 100644
index 00000000000..3af4d0f1696
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49361.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49361",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:12.770",
+ "lastModified": "2025-02-26T07:01:12.770",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to do sanity check for inline inode\n\nYanming reported a kernel bug in Bugzilla kernel [1], which can be\nreproduced. The bug message is:\n\nThe kernel message is shown below:\n\nkernel BUG at fs/inode.c:611!\nCall Trace:\n evict+0x282/0x4e0\n __dentry_kill+0x2b2/0x4d0\n dput+0x2dd/0x720\n do_renameat2+0x596/0x970\n __x64_sys_rename+0x78/0x90\n do_syscall_64+0x3b/0x90\n\n[1] https://bugzilla.kernel.org/show_bug.cgi?id=215895\n\nThe bug is due to fuzzed inode has both inline_data and encrypted flags.\nDuring f2fs_evict_inode(), as the inode was deleted by rename(), it\nwill cause inline data conversion due to conflicting flags. The page\ncache will be polluted and the panic will be triggered in clear_inode().\n\nTry fixing the bug by doing more sanity checks for inline data inode in\nsanity_check_inode()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/11c1cd032df85df3c096a57a7f27d57819956e4a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/198fd9faa271dd54dca6fc8eb6873f42dfd3b4d8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/677a82b44ebf263d4f9a0cfbd576a6ade797a07b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7cfe2d43becaf76e562b9617d2c2d9b445f86761",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/efdefbe8b7564602ab446474788225a1f2a323b5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49362.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49362.json
new file mode 100644
index 00000000000..891df252312
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49362.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49362",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:12.860",
+ "lastModified": "2025-02-26T07:01:12.860",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Fix potential use-after-free in nfsd_file_put()\n\nnfsd_file_put_noref() can free @nf, so don't dereference @nf\nimmediately upon return from nfsd_file_put_noref()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/261eabe19cb28e4a8587a4442d257b543d7c2d57",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/333dcc94ebf53f79f3dc0e7a7c16700bc7ff7e57",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ada1757b259f353cade47037ee0a0249b4cddad3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b6c71c66b0ad8f2b59d9bc08c7a5079b110bec01",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49363.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49363.json
new file mode 100644
index 00000000000..b8d2a82ef2b
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49363.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49363",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:12.953",
+ "lastModified": "2025-02-26T07:01:12.953",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to do sanity check on block address in f2fs_do_zero_range()\n\nAs Yanming reported in bugzilla:\n\nhttps://bugzilla.kernel.org/show_bug.cgi?id=215894\n\nI have encountered a bug in F2FS file system in kernel v5.17.\n\nI have uploaded the system call sequence as case.c, and a fuzzed image can\nbe found in google net disk\n\nThe kernel should enable CONFIG_KASAN=y and CONFIG_KASAN_INLINE=y. You can\nreproduce the bug by running the following commands:\n\nkernel BUG at fs/f2fs/segment.c:2291!\nCall Trace:\n f2fs_invalidate_blocks+0x193/0x2d0\n f2fs_fallocate+0x2593/0x4a70\n vfs_fallocate+0x2a5/0xac0\n ksys_fallocate+0x35/0x70\n __x64_sys_fallocate+0x8e/0xf0\n do_syscall_64+0x3b/0x90\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nThe root cause is, after image was fuzzed, block mapping info in inode\nwill be inconsistent with SIT table, so in f2fs_fallocate(), it will cause\npanic when updating SIT with invalid blkaddr.\n\nLet's fix the issue by adding sanity check on block address before updating\nSIT table with it."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/25f8236213a91efdf708b9d77e9e51b6fc3e141c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/470493be19a5730ed432e3ac0f29a2ee7fc6c557",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7361c9f2bd6a8f0cbb41cdea9aff04765ff23f67",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/805b48b234a2803cb7daec7f158af12f0fbaefac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a34d7b49894b0533222188a52e2958750f830efd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f2e1c38b5ac64eb1a16a89c52fb419409d12c25b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49364.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49364.json
new file mode 100644
index 00000000000..1fd5c2a0aab
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49364.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49364",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:13.043",
+ "lastModified": "2025-02-26T07:01:13.043",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to clear dirty inode in f2fs_evict_inode()\n\nAs Yanming reported in bugzilla:\n\nhttps://bugzilla.kernel.org/show_bug.cgi?id=215904\n\nThe kernel message is shown below:\n\nkernel BUG at fs/f2fs/inode.c:825!\nCall Trace:\n evict+0x282/0x4e0\n __dentry_kill+0x2b2/0x4d0\n shrink_dentry_list+0x17c/0x4f0\n shrink_dcache_parent+0x143/0x1e0\n do_one_tree+0x9/0x30\n shrink_dcache_for_umount+0x51/0x120\n generic_shutdown_super+0x5c/0x3a0\n kill_block_super+0x90/0xd0\n kill_f2fs_super+0x225/0x310\n deactivate_locked_super+0x78/0xc0\n cleanup_mnt+0x2b7/0x480\n task_work_run+0xc8/0x150\n exit_to_user_mode_prepare+0x14a/0x150\n syscall_exit_to_user_mode+0x1d/0x40\n do_syscall_64+0x48/0x90\n\nThe root cause is: inode node and dnode node share the same nid,\nso during f2fs_evict_inode(), dnode node truncation will invalidate\nits NAT entry, so when truncating inode node, it fails due to\ninvalid NAT entry, result in inode is still marked as dirty, fix\nthis issue by clearing dirty for inode and setting SBI_NEED_FSCK\nflag in filesystem.\n\noutput from dump.f2fs:\n[print_node_info: 354] Node ID [0xf:15] is inode\ni_nid[0] \t\t[0x f : 15]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/03c9373b15fa1c245ec99b2b5e7ba209eae4ef42",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/54c116615c99e22aa08aa950757ed726e2f60821",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c469953917b319d415fd621b9e5d0ea5203565cd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c9196d21359be8c7ee231029d13682273925fd00",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ccd58045beb997544b94558a9156be4742628491",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f2db71053dc0409fae785096ad19cce4c8a95af7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49365.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49365.json
new file mode 100644
index 00000000000..f7592d2d255
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49365.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49365",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:13.140",
+ "lastModified": "2025-02-26T07:01:13.140",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()\n\nThe > ARRAY_SIZE() should be >= ARRAY_SIZE() to prevent an out of bounds\naccess."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/607c5cd1a08e196d9f2bd3b25a8083ed27ad7ceb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a35faec3db0e13aac8ea720bc1a3503081dd5a3d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b0808b7a04157b3f56e919f27023fec37a075fad",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ec9ec3bc08b18c5b1b2feafd306ea7c348013898",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49366.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49366.json
new file mode 100644
index 00000000000..661f16ac323
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49366.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49366",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:13.230",
+ "lastModified": "2025-02-26T07:01:13.230",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix reference count leak in smb_check_perm_dacl()\n\nThe issue happens in a specific path in smb_check_perm_dacl(). When\n\"id\" and \"uid\" have the same value, the function simply jumps out of\nthe loop without decrementing the reference count of the object\n\"posix_acls\", which is increased by get_acl() earlier. This may\nresult in memory leaks.\n\nFix it by decreasing the reference count of \"posix_acls\" before\njumping to label \"check_access_bits\"."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/248d71b440aef829f5cc5f6545ca113ef5062900",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9758a6653c27867d810de02b4e5697163dda9883",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cf824b95c12a1abacadbc2d069931963221a3414",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d21a580dafc69aa04f46e6099616146a536b0724",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49367.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49367.json
new file mode 100644
index 00000000000..20dab881202
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49367.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49367",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:13.353",
+ "lastModified": "2025-02-26T07:01:13.353",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register\n\nof_get_child_by_name() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\n\nmv88e6xxx_mdio_register() pass the device node to of_mdiobus_register().\nWe don't need the device node after it.\n\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/02ded5a173619b11728b8bf75a3fd995a2c1ff28",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/42658e47f1abbbe592007d3ba303de466114d0bb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/86c3c5f8e4bd1325e24f6fba9017cade29933377",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8a1a1255152da4fb934290e7ababc66f24985520",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a101793994c0a14c70bb4e44c7fda597eeebba0a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c1df9cb756e5a9ba1841648c44ee5d92306b9c65",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dc1cf8c6f9793546696fded437a5b4c84944c48b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e0d763d0c7665c7897e4f5a0847ab0c82543345f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49368.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49368.json
new file mode 100644
index 00000000000..33d3962c54f
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49368.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49368",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:13.483",
+ "lastModified": "2025-02-26T07:01:13.483",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()\n\nThe \"fsp->location\" variable comes from user via ethtool_get_rxnfc().\nCheck that it is valid to prevent an out of bounds read."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0b238f75b65ed4462ef4cdfa718cac0ac7fce3b8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2bd1faedb74dc2a2be3972abcd4239b75a3e7b00",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4cde554c70d7397cfa2e4116bacb4accdfb6fd48",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5ba81f82607ead85fe36f50869fc4f5661359ab8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/657e7174603f0aab2cdedc64ac81edffd2a87afe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/71ae30662ec610b92644d13f79c78f76f17873b3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b24ca1cf846273361d5bd73a35de95a486a54b6d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b4f0e57ea0d867aacffad7999527e48bd4ea9293",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e7e7104e2d5ddf3806a28695670f21bef471f1e1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49369.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49369.json
new file mode 100644
index 00000000000..ee78f1494ea
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49369.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49369",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:13.583",
+ "lastModified": "2025-02-26T07:01:13.583",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\namt: fix possible memory leak in amt_rcv()\n\nIf an amt receives packets and it finds socket.\nIf it can't find a socket, it should free a received skb.\nBut it doesn't.\nSo, a memory leak would possibly occur."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1a1a0e80e005cbdc2c250fc858e1d8570f4e4acb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4b8032d39b276c52db57ff834c300405b9da2691",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/60d9c020c69977e138727b3577bc6a0458325e9c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49370.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49370.json
new file mode 100644
index 00000000000..ebfce88f0c9
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49370.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49370",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:13.677",
+ "lastModified": "2025-02-26T07:01:13.677",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle\n\nkobject_init_and_add() takes reference even when it fails.\nAccording to the doc of kobject_init_and_add()\n\n If this function returns an error, kobject_put() must be called to\n properly clean up the memory associated with the object.\n\nFix this issue by calling kobject_put()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3ba359ebe914ac3f8c6c832b28007c14c39d3766",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/660ba678f9998aca6db74f2dd912fa5124f0fa31",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/985706bd3bbeffc8737bc05965ca8d24837bc7db",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a724634b2a49f6ff0177a9e19a5a92fc1545e1b7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a9bfb37d6ba7c376b0d53337a4c5f5ff324bd725",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c66cc3c62870a27ea8f060a7e4c1ad8d26dd3f0d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ec752973aa721ee281d5441e497364637c626c7b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ed38d04342dfbe9e5aca745c8b5eb4188a74f0ef",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fdffa4ad8f6bf1ece877edfb807f2b2c729d8578",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49371.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49371.json
new file mode 100644
index 00000000000..a6081c7251b
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49371.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49371",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:13.777",
+ "lastModified": "2025-02-26T07:01:13.777",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndriver core: fix deadlock in __device_attach\n\nIn __device_attach function, The lock holding logic is as follows:\n...\n__device_attach\ndevice_lock(dev) // get lock dev\n async_schedule_dev(__device_attach_async_helper, dev); // func\n async_schedule_node\n async_schedule_node_domain(func)\n entry = kzalloc(sizeof(struct async_entry), GFP_ATOMIC);\n\t/* when fail or work limit, sync to execute func, but\n\t __device_attach_async_helper will get lock dev as\n\t well, which will lead to A-A deadlock. */\n\tif (!entry || atomic_read(&entry_count) > MAX_WORK) {\n\t func;\n\telse\n\t queue_work_node(node, system_unbound_wq, &entry->work)\n device_unlock(dev)\n\nAs shown above, when it is allowed to do async probes, because of\nout of memory or work limit, async work is not allowed, to do\nsync execute instead. it will lead to A-A deadlock because of\n__device_attach_async_helper getting lock dev.\n\nTo fix the deadlock, move the async_schedule_dev outside device_lock,\nas we can see, in async_schedule_node_domain, the parameter of\nqueue_work_node is system_unbound_wq, so it can accept concurrent\noperations. which will also not change the code logic, and will\nnot lead to deadlock."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/34fdd9b7def9d2fcb71bb7b0bc4848dd7313767e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/36ee9ffca8ef56c302f2855c4a5fccf61c0c1ada",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/593b595332bd2d65e1a5c1ae7897996c157f5468",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b232b02bf3c205b13a26dcec08e53baddd8e59ed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d53a227bfcd5160ce1b61d9954901968a20651e7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/df6de52b80aa3b46f5ac804412355ffe2e1df93e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49372.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49372.json
new file mode 100644
index 00000000000..3fe9de0af2b
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49372.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49372",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:13.870",
+ "lastModified": "2025-02-26T07:01:13.870",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: tcp_rtx_synack() can be called from process context\n\nLaurent reported the enclosed report [1]\n\nThis bug triggers with following coditions:\n\n0) Kernel built with CONFIG_DEBUG_PREEMPT=y\n\n1) A new passive FastOpen TCP socket is created.\n This FO socket waits for an ACK coming from client to be a complete\n ESTABLISHED one.\n2) A socket operation on this socket goes through lock_sock()\n release_sock() dance.\n3) While the socket is owned by the user in step 2),\n a retransmit of the SYN is received and stored in socket backlog.\n4) At release_sock() time, the socket backlog is processed while\n in process context.\n5) A SYNACK packet is cooked in response of the SYN retransmit.\n6) -> tcp_rtx_synack() is called in process context.\n\nBefore blamed commit, tcp_rtx_synack() was always called from BH handler,\nfrom a timer handler.\n\nFix this by using TCP_INC_STATS() & NET_INC_STATS()\nwhich do not assume caller is in non preemptible context.\n\n[1]\nBUG: using __this_cpu_add() in preemptible [00000000] code: epollpep/2180\ncaller is tcp_rtx_synack.part.0+0x36/0xc0\nCPU: 10 PID: 2180 Comm: epollpep Tainted: G OE 5.16.0-0.bpo.4-amd64 #1 Debian 5.16.12-1~bpo11+1\nHardware name: Supermicro SYS-5039MC-H8TRF/X11SCD-F, BIOS 1.7 11/23/2021\nCall Trace:\n \n dump_stack_lvl+0x48/0x5e\n check_preemption_disabled+0xde/0xe0\n tcp_rtx_synack.part.0+0x36/0xc0\n tcp_rtx_synack+0x8d/0xa0\n ? kmem_cache_alloc+0x2e0/0x3e0\n ? apparmor_file_alloc_security+0x3b/0x1f0\n inet_rtx_syn_ack+0x16/0x30\n tcp_check_req+0x367/0x610\n tcp_rcv_state_process+0x91/0xf60\n ? get_nohz_timer_target+0x18/0x1a0\n ? lock_timer_base+0x61/0x80\n ? preempt_count_add+0x68/0xa0\n tcp_v4_do_rcv+0xbd/0x270\n __release_sock+0x6d/0xb0\n release_sock+0x2b/0x90\n sock_setsockopt+0x138/0x1140\n ? __sys_getsockname+0x7e/0xc0\n ? aa_sk_perm+0x3e/0x1a0\n __sys_setsockopt+0x198/0x1e0\n __x64_sys_setsockopt+0x21/0x30\n do_syscall_64+0x38/0xc0\n entry_SYSCALL_64_after_hwframe+0x44/0xae"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0a0f7f84148445c9f02f226928803a870139d820",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0a375c822497ed6ad6b5da0792a12a6f1af10c0b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3db889f883e65bbd3b1401279bfc1e9ed255c481",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/58bd38cbc961fd799842b7be8c5222310f04b908",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/88cd232146207ff1d41dededed5e77c0d4438113",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bdc28a8fb43cc476e33b11519235adb816ce00e8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c348b0f8d035fc4bdc040796889beec7218bd1b8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d05c2fdf8e10528bb6751bd95243e862d5402a9b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d8e1bc6029acac796293310aacef7b7336f35b6a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49373.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49373.json
new file mode 100644
index 00000000000..78006308e85
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49373.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49373",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:13.970",
+ "lastModified": "2025-02-26T07:01:13.970",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe\n\nof_parse_phandle() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\nAdd missing of_node_put() in some error paths."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5b110d940417942bc87d9e4bea6d4f24e05ed483",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5d24df3d690809952528e7a19a43d84bc5b99d44",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7a4afd8a003d6abf1f5d159c2bb67e6b7cbde253",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/910b1cdf6c50ae8fb222e46657d04fb181577017",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/91fa5aa53f68b85e779164b3127c7e23cad5c457",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f067b5286edfd83d2d3903e8578b561599d62539",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49374.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49374.json
new file mode 100644
index 00000000000..b55f5cfb239
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49374.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49374",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:14.060",
+ "lastModified": "2025-02-26T07:01:14.060",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: check attribute length for bearer name\n\nsyzbot reported uninit-value:\n=====================================================\nBUG: KMSAN: uninit-value in string_nocheck lib/vsprintf.c:644 [inline]\nBUG: KMSAN: uninit-value in string+0x4f9/0x6f0 lib/vsprintf.c:725\n string_nocheck lib/vsprintf.c:644 [inline]\n string+0x4f9/0x6f0 lib/vsprintf.c:725\n vsnprintf+0x2222/0x3650 lib/vsprintf.c:2806\n vprintk_store+0x537/0x2150 kernel/printk/printk.c:2158\n vprintk_emit+0x28b/0xab0 kernel/printk/printk.c:2256\n vprintk_default+0x86/0xa0 kernel/printk/printk.c:2283\n vprintk+0x15f/0x180 kernel/printk/printk_safe.c:50\n _printk+0x18d/0x1cf kernel/printk/printk.c:2293\n tipc_enable_bearer net/tipc/bearer.c:371 [inline]\n __tipc_nl_bearer_enable+0x2022/0x22a0 net/tipc/bearer.c:1033\n tipc_nl_bearer_enable+0x6c/0xb0 net/tipc/bearer.c:1042\n genl_family_rcv_msg_doit net/netlink/genetlink.c:731 [inline]\n\n- Do sanity check the attribute length for TIPC_NLA_BEARER_NAME.\n- Do not use 'illegal name' in printing message."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/292be63c382ce20673ee61dff1ee9ed4a3dcaae7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3af15272cde28fe5c8489174b8624e232c1775ec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7f36f798f89bf32c0164049cb0e3fd1af613d0bb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8b91d0dfc839e67708c905648cd0e7507a2263e5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/92a930fcf4250fe961f6238b99af0bc405799f39",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b8fac8e321044a9ac50f7185b4e9d91a7745e4b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f07670871f4d19e613740eebe210e7e9ea535973",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49375.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49375.json
new file mode 100644
index 00000000000..7f3dd88dd71
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49375.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49375",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:14.160",
+ "lastModified": "2025-02-26T07:01:14.160",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: mt6397: check return value after calling platform_get_resource()\n\nIt will cause null-ptr-deref if platform_get_resource() returns NULL,\nwe need check the return value."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3867f0bbb94773d41e789257abec0d14f37da217",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/58a729c55ce3a432eb827fdaa24c7909cd3b0a6b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6ecd4d5c28408df36a1a6f0b1973f633c949ac1f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/79fa3f5758d8712df0678df98161f948fc4370e5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/82bfea344e8f7e9a0e0b1bf9af27552baa756620",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/865051de2d9eaa50630e055b73921ceaf3c4a7fc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d3b43eb505bffb8e4cdf6800c15660c001553fe6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d77f28c1bc9d3043a52069fe42e4a26fbf961ebd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/da38e86d6cf6dd3bc65c602d998f357145aa1a0b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49376.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49376.json
new file mode 100644
index 00000000000..d3cc59a4d4d
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49376.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49376",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:14.260",
+ "lastModified": "2025-02-26T07:01:14.260",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sd: Fix potential NULL pointer dereference\n\nIf sd_probe() sees an early error before sdkp->device is initialized,\nsd_zbc_release_disk() is called. This causes a NULL pointer dereference\nwhen sd_is_zoned() is called inside that function. Avoid this by removing\nthe call to sd_zbc_release_disk() in sd_probe() error path.\n\nThis change is safe and does not result in zone information memory leakage\nbecause the zone information for a zoned disk is allocated only when\nsd_revalidate_disk() is called, at which point sdkp->disk_dev is fully set,\nresulting in sd_disk_release() being called when needed to cleanup a disk\nzone information using sd_zbc_release_disk()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/05fbde3a77a4f1d62e4c4428f384288c1f1a0be5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0fcb0b131cc90c8f523a293d84c58d0c7273c96f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3733439593ad12f7b54ae35c273ea6f15d692de3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/78f8e96df06e2d04d82d4071c299b59d28744f47",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c1f0187025905e9981000d44a92e159468b561a8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49377.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49377.json
new file mode 100644
index 00000000000..f9a3cad24bc
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49377.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49377",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:14.357",
+ "lastModified": "2025-02-26T07:01:14.357",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-mq: don't touch ->tagset in blk_mq_get_sq_hctx\n\nblk_mq_run_hw_queues() could be run when there isn't queued request and\nafter queue is cleaned up, at that time tagset is freed, because tagset\nlifetime is covered by driver, and often freed after blk_cleanup_queue()\nreturns.\n\nSo don't touch ->tagset for figuring out current default hctx by the mapping\nbuilt in request queue, so use-after-free on tagset can be avoided. Meantime\nthis way should be fast than retrieving mapping from tagset."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/460aa288c5cd0544dcf933a2f0ad0e8c6d2d35ff",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5d05426e2d5fd7df8afc866b78c36b37b00188b7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/70fdd922c7bf8949f8df109cf2635dff64c90392",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b140bac470b4f707cda59c7266214246238661df",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49378.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49378.json
new file mode 100644
index 00000000000..e11ec85e09a
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49378.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49378",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:14.450",
+ "lastModified": "2025-02-26T07:01:14.450",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsfc: fix considering that all channels have TX queues\n\nNormally, all channels have RX and TX queues, but this is not true if\nmodparam efx_separate_tx_channels=1 is used. In that cases, some\nchannels only have RX queues and others only TX queues (or more\npreciselly, they have them allocated, but not initialized).\n\nFix efx_channel_has_tx_queues to return the correct value for this case\ntoo.\n\nMessages shown at probe time before the fix:\n sfc 0000:03:00.0 ens6f0np0: MC command 0x82 inlen 544 failed rc=-22 (raw=0) arg=0\n ------------[ cut here ]------------\n netdevice: ens6f0np0: failed to initialise TXQ -1\n WARNING: CPU: 1 PID: 626 at drivers/net/ethernet/sfc/ef10.c:2393 efx_ef10_tx_init+0x201/0x300 [sfc]\n [...] stripped\n RIP: 0010:efx_ef10_tx_init+0x201/0x300 [sfc]\n [...] stripped\n Call Trace:\n efx_init_tx_queue+0xaa/0xf0 [sfc]\n efx_start_channels+0x49/0x120 [sfc]\n efx_start_all+0x1f8/0x430 [sfc]\n efx_net_open+0x5a/0xe0 [sfc]\n __dev_open+0xd0/0x190\n __dev_change_flags+0x1b3/0x220\n dev_change_flags+0x21/0x60\n [...] stripped\n\nMessages shown at remove time before the fix:\n sfc 0000:03:00.0 ens6f0np0: failed to flush 10 queues\n sfc 0000:03:00.0 ens6f0np0: failed to flush queues"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2e102b53f8a778f872dc137f4c7ac548705817aa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5567d69b95b9c07e1c56f15cf0301251d12e5f97",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8f81a4113e1e574d2cbde4f2cd599380a9189c0f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/913d45f02d346ce41c4aad057eaf53a8ed449dc3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e7e8d5e25dc762b70f9c88ec6b7d451d0816eead",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49379.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49379.json
new file mode 100644
index 00000000000..e7cad38fc56
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49379.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49379",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:14.543",
+ "lastModified": "2025-02-26T07:01:14.543",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndriver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction\n\nMounting NFS rootfs was timing out when deferred_probe_timeout was\nnon-zero [1]. This was because ip_auto_config() initcall times out\nwaiting for the network interfaces to show up when\ndeferred_probe_timeout was non-zero. While ip_auto_config() calls\nwait_for_device_probe() to make sure any currently running deferred\nprobe work or asynchronous probe finishes, that wasn't sufficient to\naccount for devices being deferred until deferred_probe_timeout.\n\nCommit 35a672363ab3 (\"driver core: Ensure wait_for_device_probe() waits\nuntil the deferred_probe_timeout fires\") tried to fix that by making\nsure wait_for_device_probe() waits for deferred_probe_timeout to expire\nbefore returning.\n\nHowever, if wait_for_device_probe() is called from the kernel_init()\ncontext:\n\n- Before deferred_probe_initcall() [2], it causes the boot process to\n hang due to a deadlock.\n\n- After deferred_probe_initcall() [3], it blocks kernel_init() from\n continuing till deferred_probe_timeout expires and beats the point of\n deferred_probe_timeout that's trying to wait for userspace to load\n modules.\n\nNeither of this is good. So revert the changes to\nwait_for_device_probe().\n\n[1] - https://lore.kernel.org/lkml/TYAPR01MB45443DF63B9EF29054F7C41FD8C60@TYAPR01MB4544.jpnprd01.prod.outlook.com/\n[2] - https://lore.kernel.org/lkml/YowHNo4sBjr9ijZr@dev-arch.thelio-3990X/\n[3] - https://lore.kernel.org/lkml/Yo3WvGnNk3LvLb7R@linutronix.de/"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/29357883a89193863f3cc6a2c5e0b42ceb022761",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4ad6af07efcca85369c21e4897b3020cff2c170b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/528229474e1cbb1b3451cb713d94aecb5f6ee264",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5ee76c256e928455212ab759c51d198fedbe7523",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/71cbce75031aed26c72c2dc8a83111d181685f1b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49380.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49380.json
new file mode 100644
index 00000000000..8c642f0f46e
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49380.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49380",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:14.633",
+ "lastModified": "2025-02-26T07:01:14.633",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()\n\nAs Yanming reported in bugzilla:\n\nhttps://bugzilla.kernel.org/show_bug.cgi?id=215897\n\nI have encountered a bug in F2FS file system in kernel v5.17.\n\nThe kernel should enable CONFIG_KASAN=y and CONFIG_KASAN_INLINE=y. You can\nreproduce the bug by running the following commands:\n\nThe kernel message is shown below:\n\nkernel BUG at fs/f2fs/f2fs.h:2511!\nCall Trace:\n f2fs_remove_inode_page+0x2a2/0x830\n f2fs_evict_inode+0x9b7/0x1510\n evict+0x282/0x4e0\n do_unlinkat+0x33a/0x540\n __x64_sys_unlinkat+0x8e/0xd0\n do_syscall_64+0x3b/0x90\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nThe root cause is: .total_valid_block_count or .total_valid_node_count\ncould fuzzed to zero, then once dec_valid_node_count() was called, it\nwill cause BUG_ON(), this patch fixes to print warning info and set\nSBI_NEED_FSCK into CP instead of panic."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2766ddaf45b69252bb8fe526b5b6e56904a9ae7a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4d17e6fe9293d57081ffdc11e1cf313e25e8fd9e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/89d9a48d0cd30429463ea4e37ca83be6773ed5eb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bce859358d3d5940aa858e40ceee70ee6e76130e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ccffa99ae6a1f44797b57444c6a80382a42928fe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f8b3c3fcf33105bc1ee7788e3b51b0a1ae42ae53",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49381.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49381.json
new file mode 100644
index 00000000000..bc07311c5c6
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49381.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49381",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:14.727",
+ "lastModified": "2025-02-26T07:01:14.727",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\njffs2: fix memory leak in jffs2_do_fill_super\n\nIf jffs2_iget() or d_make_root() in jffs2_do_fill_super() returns\nan error, we can observe the following kmemleak report:\n\n--------------------------------------------\nunreferenced object 0xffff888105a65340 (size 64):\n comm \"mount\", pid 710, jiffies 4302851558 (age 58.239s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [] kmem_cache_alloc_trace+0x475/0x8a0\n [] jffs2_sum_init+0x96/0x1a0\n [] jffs2_do_mount_fs+0x745/0x2120\n [] jffs2_do_fill_super+0x35c/0x810\n [] jffs2_fill_super+0x2b9/0x3b0\n [...]\nunreferenced object 0xffff8881bd7f0000 (size 65536):\n comm \"mount\", pid 710, jiffies 4302851558 (age 58.239s)\n hex dump (first 32 bytes):\n bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................\n bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................\n backtrace:\n [] kmalloc_order+0xda/0x110\n [] kmalloc_order_trace+0x21/0x130\n [] __kmalloc+0x711/0x8a0\n [] jffs2_sum_init+0xd9/0x1a0\n [] jffs2_do_mount_fs+0x745/0x2120\n [] jffs2_do_fill_super+0x35c/0x810\n [] jffs2_fill_super+0x2b9/0x3b0\n [...]\n--------------------------------------------\n\nThis is because the resources allocated in jffs2_sum_init() are not\nreleased. Call jffs2_sum_exit() to release these resources to solve\nthe problem."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/28048a4cf3813b7cf5cc8cce629dfdc7951cb1c2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3252d327f977b14663a10967f3b0930d6c325687",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4ba7bbeab8009faf3a726e565d98816593ddd5b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4da8763a3d2b684c773b72ed80fad40bc264bc40",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/69295267c481545f636b69ff341b8db75aa136b9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c14adb1cf70a984ed081c67e9d27bc3caad9537c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cf9db013e167bc8fc2ecd7a13ed97a37df0c9dab",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d3a4fff1e7e408c32649030daa7c2c42a7e19a95",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ecc53e58596542791e82eff00702f8af7a313f70",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49382.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49382.json
new file mode 100644
index 00000000000..fed5474e1ee
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49382.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49382",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:14.823",
+ "lastModified": "2025-02-26T07:01:14.823",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: rockchip: Fix refcount leak in rockchip_grf_init\n\nof_find_matching_node_and_match returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/042571fe1d171773655ad706715ecc865913d9a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/28133325526b92921f3269fdf97a20d90b92b217",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5b3e990f85eb034faa461e691e719e8ce9e2a3c8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/69a30b2ed620c2206cbbd1e9c112e4fc584e02bd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8f64e84924604bb969ee1fbc4b8d7d09b9214889",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9b59588d8be91c96bfb0371e912ceb4f16315dbf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aab25b669cb9fd3698c2631be4435f4fe92d9e59",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5422f323858cad3ac3581075f9a3a5e0d41c0d8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49383.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49383.json
new file mode 100644
index 00000000000..3894f915899
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49383.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49383",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:14.917",
+ "lastModified": "2025-02-26T07:01:14.917",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: rzg2l_wdt: Fix 'BUG: Invalid wait context'\n\nThis patch fixes the issue 'BUG: Invalid wait context' during restart()\ncallback by using clk_prepare_enable() instead of pm_runtime_get_sync()\nfor turning on the clocks during restart.\n\nThis issue is noticed when testing with renesas_defconfig.\n\n[ 42.213802] reboot: Restarting system\n[ 42.217860]\n[ 42.219364] =============================\n[ 42.223368] [ BUG: Invalid wait context ]\n[ 42.227372] 5.17.0-rc5-arm64-renesas-00002-g10393723e35e #522 Not tainted\n[ 42.234153] -----------------------------\n[ 42.238155] systemd-shutdow/1 is trying to lock:\n[ 42.242766] ffff00000a650828 (&genpd->mlock){+.+.}-{3:3}, at: genpd_lock_mtx+0x14/0x20\n[ 42.250709] other info that might help us debug this:\n[ 42.255753] context-{4:4}\n[ 42.258368] 2 locks held by systemd-shutdow/1:\n[ 42.262806] #0: ffff80000944e1c8 (system_transition_mutex#2){+.+.}-{3:3}, at: __do_sys_reboot+0xd0/0x250\n[ 42.272388] #1: ffff8000094c4e40 (rcu_read_lock){....}-{1:2}, at: atomic_notifier_call_chain+0x0/0x150\n[ 42.281795] stack backtrace:\n[ 42.284672] CPU: 0 PID: 1 Comm: systemd-shutdow Not tainted 5.17.0-rc5-arm64-renesas-00002-g10393723e35e #522\n[ 42.294577] Hardware name: Renesas SMARC EVK based on r9a07g044c2 (DT)\n[ 42.301096] Call trace:\n[ 42.303538] dump_backtrace+0xcc/0xd8\n[ 42.307203] show_stack+0x14/0x30\n[ 42.310517] dump_stack_lvl+0x88/0xb0\n[ 42.314180] dump_stack+0x14/0x2c\n[ 42.317492] __lock_acquire+0x1b24/0x1b50\n[ 42.321502] lock_acquire+0x120/0x3a8\n[ 42.325162] __mutex_lock+0x84/0x8f8\n[ 42.328737] mutex_lock_nested+0x30/0x58\n[ 42.332658] genpd_lock_mtx+0x14/0x20\n[ 42.336319] genpd_runtime_resume+0xc4/0x228\n[ 42.340587] __rpm_callback+0x44/0x170\n[ 42.344337] rpm_callback+0x64/0x70\n[ 42.347824] rpm_resume+0x4e0/0x6b8\n[ 42.351310] __pm_runtime_resume+0x50/0x78\n[ 42.355404] rzg2l_wdt_restart+0x28/0x68\n[ 42.359329] watchdog_restart_notifier+0x1c/0x30\n[ 42.363943] atomic_notifier_call_chain+0x94/0x150\n[ 42.368732] do_kernel_restart+0x24/0x30\n[ 42.372652] machine_restart+0x44/0x70\n[ 42.376399] kernel_restart+0x3c/0x60\n[ 42.380058] __do_sys_reboot+0x228/0x250\n[ 42.383977] __arm64_sys_reboot+0x20/0x28\n[ 42.387983] invoke_syscall+0x40/0xf8"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0a635239cd5484d8f2e702713ccc49ec82aa7594",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6505541e5298cea2b79da68ee626f583f8e18784",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e4cf89596c1f1e33309556699f910ced4abbaf44",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49384.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49384.json
new file mode 100644
index 00000000000..e46606fbcd0
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49384.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49384",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:15.007",
+ "lastModified": "2025-02-26T07:01:15.007",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd: fix double free of io_acct_set bioset\n\nNow io_acct_set is alloc and free in personality. Remove the codes that\nfree io_acct_set in md_free and md_stop."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/36a2fc44c574a59ee3b5e2cb327182f227b2b07e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/42b805af102471f53e3c7867b8c2b502ea4eef7e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ea7d7bd90079d96f9c86bdaf0b106e0cd2a70661",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f99d5b5dc8a42c807b5f1176b925aa45d61962ab",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49385.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49385.json
new file mode 100644
index 00000000000..b3518ed7769
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49385.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49385",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:15.103",
+ "lastModified": "2025-02-26T07:01:15.103",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndriver: base: fix UAF when driver_attach failed\n\nWhen driver_attach(drv); failed, the driver_private will be freed.\nBut it has been added to the bus, which caused a UAF.\n\nTo fix it, we need to delete it from the bus when failed."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/310862e574001a97ad02272bac0fd13f75f42a27",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5389101257828d1913d713d9a40acbe14f5961df",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5d709f58c743166fe1c6914b9de0ae8868600d9b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/823f24f2e329babd0330200d0b74882516fe57f4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c059665c84feab46b7173d3a1bf36c2fb7f9df86",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cdf1a683a01583bca4b618dd16223cbd6e462e21",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49386.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49386.json
new file mode 100644
index 00000000000..5e6e9035f32
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49386.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49386",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:15.233",
+ "lastModified": "2025-02-26T07:01:15.233",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks\n\nof_get_child_by_name() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nam65_cpsw_init_cpts() and am65_cpsw_nuss_probe() don't release\nthe refcount in error case.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2e44f21c384503562713b7d3b673c40bed20af3d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5dd89d2fc438457811cbbec07999ce0d80051ff5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/78aca10a16f001c9f49f1cc4dadfee8d444bb173",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a4b7ef3b159805ba6be061d0cd2403d84b9b0063",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f7ba2cc57f404d2d9f26fb85bd3833d35a477829",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49387.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49387.json
new file mode 100644
index 00000000000..cdbfc90f6e5
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49387.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49387",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:15.343",
+ "lastModified": "2025-02-26T07:01:15.343",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: rzg2l_wdt: Fix 32bit overflow issue\n\nThe value of timer_cycle_us can be 0 due to 32bit overflow.\nFor eg:- If we assign the counter value \"0xfff\" for computing\nmaxval.\n\nThis patch fixes this issue by appending ULL to 1024, so that\nit is promoted to 64bit.\n\nThis patch also fixes the warning message, 'watchdog: Invalid min and\nmax timeout values, resetting to 0!'."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/b95a47667d34e76c2c9013f8e3b1e5039a5a0b76",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e07b9fa0dc32b492de85528caaf9f0c605d8424f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ea2949df22a533cdf75e4583c00b1ce94cd5a83b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49388.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49388.json
new file mode 100644
index 00000000000..584168b90af
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49388.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49388",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:15.430",
+ "lastModified": "2025-02-26T07:01:15.430",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nubi: ubi_create_volume: Fix use-after-free when volume creation failed\n\nThere is an use-after-free problem for 'eba_tbl' in ubi_create_volume()'s\nerror handling path:\n\n ubi_eba_replace_table(vol, eba_tbl)\n vol->eba_tbl = tbl\nout_mapping:\n ubi_eba_destroy_table(eba_tbl) // Free 'eba_tbl'\nout_unlock:\n put_device(&vol->dev)\n vol_release\n kfree(tbl->entries)\t // UAF\n\nFix it by removing redundant 'eba_tbl' releasing.\nFetch a reproducer in [Link]."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1174ab8ba36a48025b68b5ff1085000b1e510217",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/25ff1e3a1351c0d936dd1ac2f9e58231ea1510c9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5ff2514e4fb55dcf3d88294686040ca73ea0c1a2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6d8d3f68cbecfd31925796f0fb668eb21ab06734",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8302620aeb940f386817321d272b12411ae7d39f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8c03a1c21d72210f81cb369cc528e3fde4b45411",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/abb67043060f2bf4c03d7c3debb9ae980e2b6db3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e27ecf325e51abd06aaefba57a6322a46fa4178b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49389.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49389.json
new file mode 100644
index 00000000000..70d69c6ed76
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49389.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49389",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:15.527",
+ "lastModified": "2025-02-26T07:01:15.527",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: usbip: fix a refcount leak in stub_probe()\n\nusb_get_dev() is called in stub_device_alloc(). When stub_probe() fails\nafter that, usb_put_dev() needs to be called to release the reference.\n\nFix this by moving usb_put_dev() to sdev_free error path handling.\n\nFind this by code review."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/11c65408bd0ba1d9cd1307caa38169292de9cdfb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/247d3809e45a34d9e1a3a2bb7012e31ed8b46031",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2f0ae93ec33c8456cdfbf7876b80403a6318ebce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/51422046be504515eb5a591adf0f424b62f46804",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6bafee2f18af5e5ac125e42960bc65496d0e56a0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8afb048800919d0ab10c57983940eba956339f21",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9ec4cbf1cc55d126759051acfe328d489c5d6e60",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bcbb795a9e78180d74c6ab21518da87e803dfdce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f20d2d3b3364ce6525c050a8b6b4c54c8c19674d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49390.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49390.json
new file mode 100644
index 00000000000..8755354ab80
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49390.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49390",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:15.620",
+ "lastModified": "2025-02-26T07:01:15.620",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmacsec: fix UAF bug for real_dev\n\nCreate a new macsec device but not get reference to real_dev. That can\nnot ensure that real_dev is freed after macsec. That will trigger the\nUAF bug for real_dev as following:\n\n==================================================================\nBUG: KASAN: use-after-free in macsec_get_iflink+0x5f/0x70 drivers/net/macsec.c:3662\nCall Trace:\n ...\n macsec_get_iflink+0x5f/0x70 drivers/net/macsec.c:3662\n dev_get_iflink+0x73/0xe0 net/core/dev.c:637\n default_operstate net/core/link_watch.c:42 [inline]\n rfc2863_policy+0x233/0x2d0 net/core/link_watch.c:54\n linkwatch_do_dev+0x2a/0x150 net/core/link_watch.c:161\n\nAllocated by task 22209:\n ...\n alloc_netdev_mqs+0x98/0x1100 net/core/dev.c:10549\n rtnl_create_link+0x9d7/0xc00 net/core/rtnetlink.c:3235\n veth_newlink+0x20e/0xa90 drivers/net/veth.c:1748\n\nFreed by task 8:\n ...\n kfree+0xd6/0x4d0 mm/slub.c:4552\n kvfree+0x42/0x50 mm/util.c:615\n device_release+0x9f/0x240 drivers/base/core.c:2229\n kobject_cleanup lib/kobject.c:673 [inline]\n kobject_release lib/kobject.c:704 [inline]\n kref_put include/linux/kref.h:65 [inline]\n kobject_put+0x1c8/0x540 lib/kobject.c:721\n netdev_run_todo+0x72e/0x10b0 net/core/dev.c:10327\n\nAfter commit faab39f63c1f (\"net: allow out-of-order netdev unregistration\")\nand commit e5f80fcf869a (\"ipv6: give an IPv6 dev to blackhole_netdev\"), we\ncan add dev_hold_track() in macsec_dev_init() and dev_put_track() in\nmacsec_free_netdev() to fix the problem."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/196a888ca6571deb344468e1d7138e3273206335",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/78933cbc143b82d02330e00900d2fd08f2682f4e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d130282179aa6051449ac8f8df1115769998a665",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49391.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49391.json
new file mode 100644
index 00000000000..6dbc2b562f5
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49391.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49391",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:15.713",
+ "lastModified": "2025-02-26T07:01:15.713",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nremoteproc: mtk_scp: Fix a potential double free\n\n'scp->rproc' is allocated using devm_rproc_alloc(), so there is no need\nto free it explicitly in the remove function."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/adc02700236613b344a947a897fc2741d52a43b9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eac3e5b1c12f85732e60f5f8b985444d273866bb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49392.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49392.json
new file mode 100644
index 00000000000..d3ee95547d5
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49392.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49392",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:15.803",
+ "lastModified": "2025-02-26T07:01:15.803",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: 8250_aspeed_vuart: Fix potential NULL dereference in aspeed_vuart_probe\n\nplatform_get_resource() may fail and return NULL, so we should\nbetter check it's return value to avoid a NULL pointer dereference."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0e0fd55719fa081de6f9e5d9e6cef48efb04d34a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/90a6b6fc52bfdcfe9698454bf5bea26112abbcd1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/923d34ce069e8e51a4d003caa6b66a8cd6ecd0ed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5f1275f101e0e8a172d300d897f5a12e87e3485",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49393.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49393.json
new file mode 100644
index 00000000000..59a2ed2a90b
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49393.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49393",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:15.890",
+ "lastModified": "2025-02-26T07:01:15.890",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: fastrpc: fix list iterator in fastrpc_req_mem_unmap_impl\n\nThis is another instance of incorrect use of list iterator and\nchecking it for NULL.\n\nThe list iterator value 'map' will *always* be set and non-NULL\nby list_for_each_entry(), so it is incorrect to assume that the\niterator value will be NULL if the list is empty (in this case, the\ncheck 'if (!map) {' will always be false and never exit as expected).\n\nTo fix the bug, use a new variable 'iter' as the list iterator,\nwhile use the original variable 'map' as a dedicated pointer to\npoint to the found element.\n\nWithout this patch, Kernel crashes with below trace:\n\nUnable to handle kernel access to user memory outside uaccess routines\n at virtual address 0000ffff7fb03750\n...\nCall trace:\n fastrpc_map_create+0x70/0x290 [fastrpc]\n fastrpc_req_mem_map+0xf0/0x2dc [fastrpc]\n fastrpc_device_ioctl+0x138/0xc60 [fastrpc]\n __arm64_sys_ioctl+0xa8/0xec\n invoke_syscall+0x48/0x114\n el0_svc_common.constprop.0+0xd4/0xfc\n do_el0_svc+0x28/0x90\n el0_svc+0x3c/0x130\n el0t_64_sync_handler+0xa4/0x130\n el0t_64_sync+0x18c/0x190\nCode: 14000016 f94000a5 eb05029f 54000260 (b94018a6)\n---[ end trace 0000000000000000 ]---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2d12905aad462383f4e7a5fdb024d2b7ae2d10cf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c5c07c5958cf0c9af6e76813e6de15d42ee49822",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49394.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49394.json
new file mode 100644
index 00000000000..6a86af8d86b
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49394.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49394",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:15.983",
+ "lastModified": "2025-02-26T07:01:15.983",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-iolatency: Fix inflight count imbalances and IO hangs on offline\n\niolatency needs to track the number of inflight IOs per cgroup. As this\ntracking can be expensive, it is disabled when no cgroup has iolatency\nconfigured for the device. To ensure that the inflight counters stay\nbalanced, iolatency_set_limit() freezes the request_queue while manipulating\nthe enabled counter, which ensures that no IO is in flight and thus all\ncounters are zero.\n\nUnfortunately, iolatency_set_limit() isn't the only place where the enabled\ncounter is manipulated. iolatency_pd_offline() can also dec the counter and\ntrigger disabling. As this disabling happens without freezing the q, this\ncan easily happen while some IOs are in flight and thus leak the counts.\n\nThis can be easily demonstrated by turning on iolatency on an one empty\ncgroup while IOs are in flight in other cgroups and then removing the\ncgroup. Note that iolatency shouldn't have been enabled elsewhere in the\nsystem to ensure that removing the cgroup disables iolatency for the whole\ndevice.\n\nThe following keeps flipping on and off iolatency on sda:\n\n echo +io > /sys/fs/cgroup/cgroup.subtree_control\n while true; do\n mkdir -p /sys/fs/cgroup/test\n echo '8:0 target=100000' > /sys/fs/cgroup/test/io.latency\n sleep 1\n rmdir /sys/fs/cgroup/test\n sleep 1\n done\n\nand there's concurrent fio generating direct rand reads:\n\n fio --name test --filename=/dev/sda --direct=1 --rw=randread \\\n --runtime=600 --time_based --iodepth=256 --numjobs=4 --bs=4k\n\nwhile monitoring with the following drgn script:\n\n while True:\n for css in css_for_each_descendant_pre(prog['blkcg_root'].css.address_of_()):\n for pos in hlist_for_each(container_of(css, 'struct blkcg', 'css').blkg_list):\n blkg = container_of(pos, 'struct blkcg_gq', 'blkcg_node')\n pd = blkg.pd[prog['blkcg_policy_iolatency'].plid]\n if pd.value_() == 0:\n continue\n iolat = container_of(pd, 'struct iolatency_grp', 'pd')\n inflight = iolat.rq_wait.inflight.counter.value_()\n if inflight:\n print(f'inflight={inflight} {disk_name(blkg.q.disk).decode(\"utf-8\")} '\n f'{cgroup_path(css.cgroup).decode(\"utf-8\")}')\n time.sleep(1)\n\nThe monitoring output looks like the following:\n\n inflight=1 sda /user.slice\n inflight=1 sda /user.slice\n ...\n inflight=14 sda /user.slice\n inflight=13 sda /user.slice\n inflight=17 sda /user.slice\n inflight=15 sda /user.slice\n inflight=18 sda /user.slice\n inflight=17 sda /user.slice\n inflight=20 sda /user.slice\n inflight=19 sda /user.slice <- fio stopped, inflight stuck at 19\n inflight=19 sda /user.slice\n inflight=19 sda /user.slice\n\nIf a cgroup with stuck inflight ends up getting throttled, the throttled IOs\nwill never get issued as there's no completion event to wake it up leading\nto an indefinite hang.\n\nThis patch fixes the bug by unifying enable handling into a work item which\nis automatically kicked off from iolatency_set_min_lat_nsec() which is\ncalled from both iolatency_set_limit() and iolatency_pd_offline() paths.\nPunting to a work item is necessary as iolatency_pd_offline() is called\nunder spinlocks while freezing a request_queue requires a sleepable context.\n\nThis also simplifies the code reducing LOC sans the comments and avoids the\nunnecessary freezes which were happening whenever a cgroup's latency target\nis newly set or cleared."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/515d077ee3085ae343b6bea7fd031f9906645f38",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5b0ff3ebbef791341695b718f8d2870869cf1d01",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/77692c02e1517c54f2fd0535f41aa4286ac9f140",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8a177a36da6c54c98b8685d4f914cb3637d53c0d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/968f7a239c590454ffba79c126fbe0e963a0ba78",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a30acbb5dfb7bcc813ad6a18ca31011ac44e5547",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d19fa8f252000d141f9199ca32959c50314e1f05",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49395.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49395.json
new file mode 100644
index 00000000000..f328a30b47a
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49395.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49395",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:16.080",
+ "lastModified": "2025-02-26T07:01:16.080",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\num: Fix out-of-bounds read in LDT setup\n\nsyscall_stub_data() expects the data_count parameter to be the number of\nlongs, not bytes.\n\n ==================================================================\n BUG: KASAN: stack-out-of-bounds in syscall_stub_data+0x70/0xe0\n Read of size 128 at addr 000000006411f6f0 by task swapper/1\n\n CPU: 0 PID: 1 Comm: swapper Not tainted 5.18.0+ #18\n Call Trace:\n show_stack.cold+0x166/0x2a7\n __dump_stack+0x3a/0x43\n dump_stack_lvl+0x1f/0x27\n print_report.cold+0xdb/0xf81\n kasan_report+0x119/0x1f0\n kasan_check_range+0x3a3/0x440\n memcpy+0x52/0x140\n syscall_stub_data+0x70/0xe0\n write_ldt_entry+0xac/0x190\n init_new_ldt+0x515/0x960\n init_new_context+0x2c4/0x4d0\n mm_init.constprop.0+0x5ed/0x760\n mm_alloc+0x118/0x170\n 0x60033f48\n do_one_initcall+0x1d7/0x860\n 0x60003e7b\n kernel_init+0x6e/0x3d4\n new_thread_handler+0x1e7/0x2c0\n\n The buggy address belongs to stack of task swapper/1\n and is located at offset 64 in frame:\n init_new_ldt+0x0/0x960\n\n This frame has 2 objects:\n [32, 40) 'addr'\n [64, 80) 'desc'\n =================================================================="
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/10995a382271254bd276627ec74136da4a23c4a6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/24ca648bf5f72ed8878cf09b5d4431935779681e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2a4a62a14be1947fa945c5c11ebf67326381a568",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3549ab4b962cf619e8c55484a0d870a34b3f845f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/668ca34a428d6ffc0f99a1a6a9b661a288d4183b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/91e5ba2af2d729d5126aefd5aa3eadc69b8426e5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9caad70819aef3431abaf73ba5163b55b161aba0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cf0dabc37446c5ee538ae7b4c467ab0e53fa5463",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef1dc929a1e5fa1b2d842256db9fb8710d3be910",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49396.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49396.json
new file mode 100644
index 00000000000..41232c29db8
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49396.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49396",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:16.173",
+ "lastModified": "2025-02-26T07:01:16.173",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nphy: qcom-qmp: fix reset-controller leak on probe errors\n\nMake sure to release the lane reset controller in case of a late probe\nerror (e.g. probe deferral).\n\nNote that due to the reset controller being defined in devicetree in\n\"lane\" child nodes, devm_reset_control_get_exclusive() cannot be used\ndirectly."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2156dc390402043ba5982489c6625adcb0b0975c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4d2900f20edfe541f75756a00deeb2ffe7c66bc1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7ac21b24af859c097eb4034e93430056068f8f31",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8c03eb0c8982677b4e17174073a011788891304d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a39d9eccb333b8c07c43ebea1c6dfda122378a0f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b7b5fbcaac5355e2e695dc0c08a0fcf248250388",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ba173a6f8d8dffed64bb13ab23081bdddfb464f0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/feb05b10b3ed3ae21b851520a0d0b71685439517",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49397.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49397.json
new file mode 100644
index 00000000000..97835234b87
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49397.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49397",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:16.270",
+ "lastModified": "2025-02-26T07:01:16.270",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nphy: qcom-qmp: fix struct clk leak on probe errors\n\nMake sure to release the pipe clock reference in case of a late probe\nerror (e.g. probe deferral)."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1668ad103679306ba2ef37f758d704e58a3ef1a0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/621a4bcfb7aa031e7760d7b156bad7a45df58387",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6f3673c8d8eff0c4ab5a5ee0d3ca9717d85419b4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ad9b0fad02f9b3a06ad5ac7df11f244e316a6254",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b246695636a861a09f0e2cde92bb2dd8f114f024",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b999d48b0869b8599de532ff6081575a7ab5358a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f0a4bc38a12f5a0cc5ad68670d9480e91e6a94df",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f8d23895a41243c6a8dbf392e531fff9497bb023",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49398.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49398.json
new file mode 100644
index 00000000000..251a69b1d00
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49398.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49398",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:16.377",
+ "lastModified": "2025-02-26T07:01:16.377",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback\n\nThe list_for_each_entry_safe() macro saves the current item (n) and\nthe item after (n+1), so that n can be safely removed without\ncorrupting the list. However, when traversing the list and removing\nitems using gadget giveback, the DWC3 lock is briefly released,\nallowing other routines to execute. There is a situation where, while\nitems are being removed from the cancelled_list using\ndwc3_gadget_ep_cleanup_cancelled_requests(), the pullup disable\nroutine is running in parallel (due to UDC unbind). As the cleanup\nroutine removes n, and the pullup disable removes n+1, once the\ncleanup retakes the DWC3 lock, it references a request who was already\nremoved/handled. With list debug enabled, this leads to a panic.\nEnsure all instances of the macro are replaced where gadget giveback\nis used.\n\nExample call stack:\n\nThread#1:\n__dwc3_gadget_ep_set_halt() - CLEAR HALT\n -> dwc3_gadget_ep_cleanup_cancelled_requests()\n ->list_for_each_entry_safe()\n ->dwc3_gadget_giveback(n)\n ->dwc3_gadget_del_and_unmap_request()- n deleted[cancelled_list]\n ->spin_unlock\n ->Thread#2 executes\n ...\n ->dwc3_gadget_giveback(n+1)\n ->Already removed!\n\nThread#2:\ndwc3_gadget_pullup()\n ->waiting for dwc3 spin_lock\n ...\n ->Thread#1 released lock\n ->dwc3_stop_active_transfers()\n ->dwc3_remove_requests()\n ->fetches n+1 item from cancelled_list (n removed by Thread#1)\n ->dwc3_gadget_giveback()\n ->dwc3_gadget_del_and_unmap_request()- n+1 deleted[cancelled_list]\n ->spin_unlock"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1c6e5dc3b639c96e6839a8d1b8e951923fdfd34a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2424307cdf421ac72075a1384eae4e4199ab6457",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/26a7e6832afe9d9a991cfd9015177f083cf959cc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bf594d1d0c1d7b895954018043536ffd327844f9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-493xx/CVE-2022-49399.json b/CVE-2022/CVE-2022-493xx/CVE-2022-49399.json
new file mode 100644
index 00000000000..89c065af269
--- /dev/null
+++ b/CVE-2022/CVE-2022-493xx/CVE-2022-49399.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49399",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:16.470",
+ "lastModified": "2025-02-26T07:01:16.470",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: goldfish: Use tty_port_destroy() to destroy port\n\nIn goldfish_tty_probe(), the port initialized through tty_port_init()\nshould be destroyed in error paths.In goldfish_tty_remove(), qtty->port\nalso should be destroyed or else might leak resources.\n\nFix the above by calling tty_port_destroy()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/241fcb79dd1df276d80b19f5f6acc9eaaaa63309",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/326192b99c903a2193d820c30ed936cc2402382c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/45f6ce70abfb7ccf9d787781cbc4c03294a775a1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4639d1b992de8f37d66f698056875c274efcd45f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/507b05063d1b7a1fcb9f7d7c47586fc4f3508f98",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9ae3d073f7db5578ae1907544f0c15947e9678e6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/da64f419d7f78272bfe40dde1262602d4ff6b32c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ee6c33b29e624f515202a31bf6ef0437f26a1867",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49400.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49400.json
new file mode 100644
index 00000000000..c287094edc4
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49400.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49400",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:16.570",
+ "lastModified": "2025-02-26T07:01:16.570",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd: Don't set mddev private to NULL in raid0 pers->free\n\nIn normal stop process, it does like this:\n do_md_stop\n |\n __md_stop (pers->free(); mddev->private=NULL)\n |\n md_free (free mddev)\n__md_stop sets mddev->private to NULL after pers->free. The raid device\nwill be stopped and mddev memory is free. But in reshape, it doesn't\nfree the mddev and mddev will still be used in new raid.\n\nIn reshape, it first sets mddev->private to new_pers and then runs\nold_pers->free(). Now raid0 sets mddev->private to NULL in raid0_free.\nThe new raid can't work anymore. It will panic when dereference\nmddev->private because of NULL pointer dereference.\n\nIt can panic like this:\n[63010.814972] kernel BUG at drivers/md/raid10.c:928!\n[63010.819778] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI\n[63010.825011] CPU: 3 PID: 44437 Comm: md0_resync Kdump: loaded Not tainted 5.14.0-86.el9.x86_64 #1\n[63010.833789] Hardware name: Dell Inc. PowerEdge R6415/07YXFK, BIOS 1.15.0 09/11/2020\n[63010.841440] RIP: 0010:raise_barrier+0x161/0x170 [raid10]\n[63010.865508] RSP: 0018:ffffc312408bbc10 EFLAGS: 00010246\n[63010.870734] RAX: 0000000000000000 RBX: ffffa00bf7d39800 RCX: 0000000000000000\n[63010.877866] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffa00bf7d39800\n[63010.884999] RBP: 0000000000000000 R08: fffffa4945e74400 R09: 0000000000000000\n[63010.892132] R10: ffffa00eed02f798 R11: 0000000000000000 R12: ffffa00bbc435200\n[63010.899266] R13: ffffa00bf7d39800 R14: 0000000000000400 R15: 0000000000000003\n[63010.906399] FS: 0000000000000000(0000) GS:ffffa00eed000000(0000) knlGS:0000000000000000\n[63010.914485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[63010.920229] CR2: 00007f5cfbe99828 CR3: 0000000105efe000 CR4: 00000000003506e0\n[63010.927363] Call Trace:\n[63010.929822] ? bio_reset+0xe/0x40\n[63010.933144] ? raid10_alloc_init_r10buf+0x60/0xa0 [raid10]\n[63010.938629] raid10_sync_request+0x756/0x1610 [raid10]\n[63010.943770] md_do_sync.cold+0x3e4/0x94c\n[63010.947698] md_thread+0xab/0x160\n[63010.951024] ? md_write_inc+0x50/0x50\n[63010.954688] kthread+0x149/0x170\n[63010.957923] ? set_kthread_struct+0x40/0x40\n[63010.962107] ret_from_fork+0x22/0x30\n\nRemoving the code that sets mddev->private to NULL in raid0 can fix\nproblem."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0f2571ad7a30ff6b33cde142439f9378669f8b4f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7da3454a65f8a56e65dfb44fa0ccac08cbc2f5a1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b7a51df785031cc49caf1c59766ca89cfa97b54b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f63fd1e0e0fc158023cc67ea6a07e278019061ba",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49401.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49401.json
new file mode 100644
index 00000000000..71d76a1ebf5
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49401.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49401",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:16.660",
+ "lastModified": "2025-02-26T07:01:16.660",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/page_owner: use strscpy() instead of strlcpy()\n\ncurrent->comm[] is not a string (no guarantee for a zero byte in it).\n\nstrlcpy(s1, s2, l) is calling strlen(s2), potentially\ncausing out-of-bound access, as reported by syzbot:\n\ndetected buffer overflow in __fortify_strlen\n------------[ cut here ]------------\nkernel BUG at lib/string_helpers.c:980!\ninvalid opcode: 0000 [#1] PREEMPT SMP KASAN\nCPU: 0 PID: 4087 Comm: dhcpcd-run-hooks Not tainted 5.18.0-rc3-syzkaller-01537-g20b87e7c29df #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nRIP: 0010:fortify_panic+0x18/0x1a lib/string_helpers.c:980\nCode: 8c e8 c5 ba e1 fa e9 23 0f bf fa e8 0b 5d 8c f8 eb db 55 48 89 fd e8 e0 49 40 f8 48 89 ee 48 c7 c7 80 f5 26 8a e8 99 09 f1 ff <0f> 0b e8 ca 49 40 f8 48 8b 54 24 18 4c 89 f1 48 c7 c7 00 00 27 8a\nRSP: 0018:ffffc900000074a8 EFLAGS: 00010286\n\nRAX: 000000000000002c RBX: ffff88801226b728 RCX: 0000000000000000\nRDX: ffff8880198e0000 RSI: ffffffff81600458 RDI: fffff52000000e87\nRBP: ffffffff89da2aa0 R08: 000000000000002c R09: 0000000000000000\nR10: ffffffff815fae2e R11: 0000000000000000 R12: ffff88801226b700\nR13: ffff8880198e0830 R14: 0000000000000000 R15: 0000000000000000\nFS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f5876ad6ff8 CR3: 000000001a48c000 CR4: 00000000003506f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600\nCall Trace:\n \n __fortify_strlen include/linux/fortify-string.h:128 [inline]\n strlcpy include/linux/fortify-string.h:143 [inline]\n __set_page_owner_handle+0x2b1/0x3e0 mm/page_owner.c:171\n __set_page_owner+0x3e/0x50 mm/page_owner.c:190\n prep_new_page mm/page_alloc.c:2441 [inline]\n get_page_from_freelist+0xba2/0x3e00 mm/page_alloc.c:4182\n __alloc_pages+0x1b2/0x500 mm/page_alloc.c:5408\n alloc_pages+0x1aa/0x310 mm/mempolicy.c:2272\n alloc_slab_page mm/slub.c:1799 [inline]\n allocate_slab+0x26c/0x3c0 mm/slub.c:1944\n new_slab mm/slub.c:2004 [inline]\n ___slab_alloc+0x8df/0xf20 mm/slub.c:3005\n __slab_alloc.constprop.0+0x4d/0xa0 mm/slub.c:3092\n slab_alloc_node mm/slub.c:3183 [inline]\n slab_alloc mm/slub.c:3225 [inline]\n __kmem_cache_alloc_lru mm/slub.c:3232 [inline]\n kmem_cache_alloc+0x360/0x3b0 mm/slub.c:3242\n dst_alloc+0x146/0x1f0 net/core/dst.c:92"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5cd9900a1ac8b0a4ff3cd97d4d77b7711be435bf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cd8c1fd8cdd14158f2d8bea2d1bfe8015dccfa3a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49402.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49402.json
new file mode 100644
index 00000000000..63599253033
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49402.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49402",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:16.750",
+ "lastModified": "2025-02-26T07:01:16.750",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nftrace: Clean up hash direct_functions on register failures\n\nWe see the following GPF when register_ftrace_direct fails:\n\n[ ] general protection fault, probably for non-canonical address \\\n 0x200000000000010: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC PTI\n[...]\n[ ] RIP: 0010:ftrace_find_rec_direct+0x53/0x70\n[ ] Code: 48 c1 e0 03 48 03 42 08 48 8b 10 31 c0 48 85 d2 74 [...]\n[ ] RSP: 0018:ffffc9000138bc10 EFLAGS: 00010206\n[ ] RAX: 0000000000000000 RBX: ffffffff813e0df0 RCX: 000000000000003b\n[ ] RDX: 0200000000000000 RSI: 000000000000000c RDI: ffffffff813e0df0\n[ ] RBP: ffffffffa00a3000 R08: ffffffff81180ce0 R09: 0000000000000001\n[ ] R10: ffffc9000138bc18 R11: 0000000000000001 R12: ffffffff813e0df0\n[ ] R13: ffffffff813e0df0 R14: ffff888171b56400 R15: 0000000000000000\n[ ] FS: 00007fa9420c7780(0000) GS:ffff888ff6a00000(0000) knlGS:000000000\n[ ] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ ] CR2: 000000000770d000 CR3: 0000000107d50003 CR4: 0000000000370ee0\n[ ] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ ] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ ] Call Trace:\n[ ] \n[ ] register_ftrace_direct+0x54/0x290\n[ ] ? render_sigset_t+0xa0/0xa0\n[ ] bpf_trampoline_update+0x3f5/0x4a0\n[ ] ? 0xffffffffa00a3000\n[ ] bpf_trampoline_link_prog+0xa9/0x140\n[ ] bpf_tracing_prog_attach+0x1dc/0x450\n[ ] bpf_raw_tracepoint_open+0x9a/0x1e0\n[ ] ? find_held_lock+0x2d/0x90\n[ ] ? lock_release+0x150/0x430\n[ ] __sys_bpf+0xbd6/0x2700\n[ ] ? lock_is_held_type+0xd8/0x130\n[ ] __x64_sys_bpf+0x1c/0x20\n[ ] do_syscall_64+0x3a/0x80\n[ ] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[ ] RIP: 0033:0x7fa9421defa9\n[ ] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 9 f8 [...]\n[ ] RSP: 002b:00007ffed743bd78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141\n[ ] RAX: ffffffffffffffda RBX: 00000000069d2480 RCX: 00007fa9421defa9\n[ ] RDX: 0000000000000078 RSI: 00007ffed743bd80 RDI: 0000000000000011\n[ ] RBP: 00007ffed743be00 R08: 0000000000bb7270 R09: 0000000000000000\n[ ] R10: 00000000069da210 R11: 0000000000000246 R12: 0000000000000001\n[ ] R13: 00007ffed743c4b0 R14: 00000000069d2480 R15: 0000000000000001\n[ ] \n[ ] Modules linked in: klp_vm(OK)\n[ ] ---[ end trace 0000000000000000 ]---\n\nOne way to trigger this is:\n 1. load a livepatch that patches kernel function xxx;\n 2. run bpftrace -e 'kfunc:xxx {}', this will fail (expected for now);\n 3. repeat #2 => gpf.\n\nThis is because the entry is added to direct_functions, but not removed.\nFix this by remove the entry from direct_functions when\nregister_ftrace_direct fails.\n\nAlso remove the last trailing space from ftrace.c, so we don't have to\nworry about it anymore."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/7d54c15cb89a29a5f59e5ffc9ee62e6591769ef1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/805e87af946d8d2954171361e64d143ff37a441b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/82c888e51c2176a06f8b4541cf748ee81aac6e7e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a0392833a178cf109a57c2a9d4d531bdfc6cd98f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cae2978d6907ef2c08b9b15f704e783f7c284713",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49403.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49403.json
new file mode 100644
index 00000000000..4c3ad7f8776
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49403.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49403",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:16.847",
+ "lastModified": "2025-02-26T07:01:16.847",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlib/string_helpers: fix not adding strarray to device's resource list\n\nAdd allocated strarray to device's resource list. This is a must to\nautomatically release strarray when the device disappears.\n\nWithout this fix we have a memory leak in the few drivers which use\ndevm_kasprintf_strarray()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/a152eb42fcecfe41239c3c6695342f3a128593e7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bf29edab0c9ff3d2633b8306a67d04c357e2a385",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cd290a9839cee2f6641558877e707bd373c8f6f1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49404.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49404.json
new file mode 100644
index 00000000000..1254b57cd5b
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49404.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49404",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:16.937",
+ "lastModified": "2025-02-26T07:01:16.937",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hfi1: Fix potential integer multiplication overflow errors\n\nWhen multiplying of different types, an overflow is possible even when\nstoring the result in a larger type. This is because the conversion is\ndone after the multiplication. So arithmetic overflow and thus in\nincorrect value is possible.\n\nCorrect an instance of this in the inter packet delay calculation. Fix by\nensuring one of the operands is u64 which will promote the other to u64 as\nwell ensuring no overflow."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/06039d8afefdbac05bcea5f397188407eba2996d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/252f4afd4557a2e7075f793a5c80fe6dd9e9ee4a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/31dca00d0cc9f4133320d72eb7e3720badc6d6e6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3f09ec80f115d2875d747ed28adc1773037e0f8b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/79c164e61f818054cd6012e9035701840d895c51",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8858284dd74906fa00f04f0252c75df4893a7959",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a89cb7ddf6a89bab6012e19da38b7cdb26175c19",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef5ab2e48a5f9960e2352332b7cdb7064bb49032",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f93e91a0372c922c20d5bee260b0f43b4b8a1bee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49405.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49405.json
new file mode 100644
index 00000000000..61cf2b9cc49
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49405.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49405",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:17.037",
+ "lastModified": "2025-02-26T07:01:17.037",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()\n\nThis code has a check to prevent read overflow but it needs another\ncheck to prevent writing beyond the end of the ->Ssid[] array."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/476bfda0be0f9669add92bff604ca78226cf53d1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ac2eab7de458f5e1210ce1237afab40a307075c8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bc10916e890948d8927a5c8c40fb5dc44be5e1b8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c4bd6b72df4f01aa866ceb298466d6d07a6bd525",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49406.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49406.json
new file mode 100644
index 00000000000..3f6be7363c0
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49406.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49406",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:17.123",
+ "lastModified": "2025-02-26T07:01:17.123",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: Fix potential deadlock in blk_ia_range_sysfs_show()\n\nWhen being read, a sysfs attribute is already protected against removal\nwith the kobject node active reference counter. As a result, in\nblk_ia_range_sysfs_show(), there is no need to take the queue sysfs\nlock when reading the value of a range attribute. Using the queue sysfs\nlock in this function creates a potential deadlock situation with the\ndisk removal, something that a lockdep signals with a splat when the\ndevice is removed:\n\n[ 760.703551] Possible unsafe locking scenario:\n[ 760.703551]\n[ 760.703554] CPU0 CPU1\n[ 760.703556] ---- ----\n[ 760.703558] lock(&q->sysfs_lock);\n[ 760.703565] lock(kn->active#385);\n[ 760.703573] lock(&q->sysfs_lock);\n[ 760.703579] lock(kn->active#385);\n[ 760.703587]\n[ 760.703587] *** DEADLOCK ***\n\nSolve this by removing the mutex_lock()/mutex_unlock() calls from\nblk_ia_range_sysfs_show()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/41e46b3c2aa24f755b2ae9ec4ce931ba5f0d8532",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/717b078bc745ba9a262abebed9806a17e8bbb77b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dc107c805cde709866b59867ef72b9390199205e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49407.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49407.json
new file mode 100644
index 00000000000..f7d503af7a8
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49407.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49407",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:17.217",
+ "lastModified": "2025-02-26T07:01:17.217",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndlm: fix plock invalid read\n\nThis patch fixes an invalid read showed by KASAN. A unlock will allocate a\n\"struct plock_op\" and a followed send_op() will append it to a global\nsend_list data structure. In some cases a followed dev_read() moves it\nto recv_list and dev_write() will cast it to \"struct plock_xop\" and access\nfields which are only available in those structures. At this point an\ninvalid read happens by accessing those fields.\n\nTo fix this issue the \"callback\" field is moved to \"struct plock_op\" to\nindicate that a cast to \"plock_xop\" is allowed and does the additional\n\"plock_xop\" handling if set.\n\nExample of the KASAN output which showed the invalid read:\n\n[ 2064.296453] ==================================================================\n[ 2064.304852] BUG: KASAN: slab-out-of-bounds in dev_write+0x52b/0x5a0 [dlm]\n[ 2064.306491] Read of size 8 at addr ffff88800ef227d8 by task dlm_controld/7484\n[ 2064.308168]\n[ 2064.308575] CPU: 0 PID: 7484 Comm: dlm_controld Kdump: loaded Not tainted 5.14.0+ #9\n[ 2064.310292] Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011\n[ 2064.311618] Call Trace:\n[ 2064.312218] dump_stack_lvl+0x56/0x7b\n[ 2064.313150] print_address_description.constprop.8+0x21/0x150\n[ 2064.314578] ? dev_write+0x52b/0x5a0 [dlm]\n[ 2064.315610] ? dev_write+0x52b/0x5a0 [dlm]\n[ 2064.316595] kasan_report.cold.14+0x7f/0x11b\n[ 2064.317674] ? dev_write+0x52b/0x5a0 [dlm]\n[ 2064.318687] dev_write+0x52b/0x5a0 [dlm]\n[ 2064.319629] ? dev_read+0x4a0/0x4a0 [dlm]\n[ 2064.320713] ? bpf_lsm_kernfs_init_security+0x10/0x10\n[ 2064.321926] vfs_write+0x17e/0x930\n[ 2064.322769] ? __fget_light+0x1aa/0x220\n[ 2064.323753] ksys_write+0xf1/0x1c0\n[ 2064.324548] ? __ia32_sys_read+0xb0/0xb0\n[ 2064.325464] do_syscall_64+0x3a/0x80\n[ 2064.326387] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[ 2064.327606] RIP: 0033:0x7f807e4ba96f\n[ 2064.328470] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 39 87 f8 ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 87 f8 ff 48\n[ 2064.332902] RSP: 002b:00007ffd50cfe6e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001\n[ 2064.334658] RAX: ffffffffffffffda RBX: 000055cc3886eb30 RCX: 00007f807e4ba96f\n[ 2064.336275] RDX: 0000000000000040 RSI: 00007ffd50cfe7e0 RDI: 0000000000000010\n[ 2064.337980] RBP: 00007ffd50cfe7e0 R08: 0000000000000000 R09: 0000000000000001\n[ 2064.339560] R10: 000055cc3886eb30 R11: 0000000000000293 R12: 000055cc3886eb80\n[ 2064.341237] R13: 000055cc3886eb00 R14: 000055cc3886f590 R15: 0000000000000001\n[ 2064.342857]\n[ 2064.343226] Allocated by task 12438:\n[ 2064.344057] kasan_save_stack+0x1c/0x40\n[ 2064.345079] __kasan_kmalloc+0x84/0xa0\n[ 2064.345933] kmem_cache_alloc_trace+0x13b/0x220\n[ 2064.346953] dlm_posix_unlock+0xec/0x720 [dlm]\n[ 2064.348811] do_lock_file_wait.part.32+0xca/0x1d0\n[ 2064.351070] fcntl_setlk+0x281/0xbc0\n[ 2064.352879] do_fcntl+0x5e4/0xfe0\n[ 2064.354657] __x64_sys_fcntl+0x11f/0x170\n[ 2064.356550] do_syscall_64+0x3a/0x80\n[ 2064.358259] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[ 2064.360745]\n[ 2064.361511] Last potentially related work creation:\n[ 2064.363957] kasan_save_stack+0x1c/0x40\n[ 2064.365811] __kasan_record_aux_stack+0xaf/0xc0\n[ 2064.368100] call_rcu+0x11b/0xf70\n[ 2064.369785] dlm_process_incoming_buffer+0x47d/0xfd0 [dlm]\n[ 2064.372404] receive_from_sock+0x290/0x770 [dlm]\n[ 2064.374607] process_recv_sockets+0x32/0x40 [dlm]\n[ 2064.377290] process_one_work+0x9a8/0x16e0\n[ 2064.379357] worker_thread+0x87/0xbf0\n[ 2064.381188] kthread+0x3ac/0x490\n[ 2064.383460] ret_from_fork+0x22/0x30\n[ 2064.385588]\n[ 2064.386518] Second to last potentially related work creation:\n[ 2064.389219] kasan_save_stack+0x1c/0x40\n[ 2064.391043] __kasan_record_aux_stack+0xaf/0xc0\n[ 2064.393303] call_rcu+0x11b/0xf70\n[ 2064.394885] dlm_process_incoming_buffer+0x47d/0xfd0 [dlm]\n[ 2064.397694] receive_from_sock+0x290/0x770 \n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2c55155cc365861044d9e6e80e342693e8805e33",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/42252d0d2aa9b94d168241710a761588b3959019",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/49cd9eb7b9a7b88124b31e31f8e539acaf1b3a6d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/56aa8d1fbd02357f3bf81bdfba1cde87ce8402fc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5a1765adf9855cf0f6d3f7e0eb4b78ca66f70dee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/72f2f68970f9bdc252d59e119b385a6441b0b155",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/899bc4429174861122f0c236588700a4710c1fec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/acdad5bc9827922ec2f2e84fd198718aa8e8ab92",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e421872fa17542cf33747071fb141b0130ce9ef7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49408.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49408.json
new file mode 100644
index 00000000000..8cabcf877be
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49408.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49408",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:17.323",
+ "lastModified": "2025-02-26T07:01:17.323",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix memory leak in parse_apply_sb_mount_options()\n\nIf processing the on-disk mount options fails after any memory was\nallocated in the ext4_fs_context, e.g. s_qf_names, then this memory is\nleaked. Fix this by calling ext4_fc_free() instead of kfree() directly.\n\nReproducer:\n\n mkfs.ext4 -F /dev/vdc\n tune2fs /dev/vdc -E mount_opts=usrjquota=file\n echo clear > /sys/kernel/debug/kmemleak\n mount /dev/vdc /vdc\n echo scan > /sys/kernel/debug/kmemleak\n sleep 5\n echo scan > /sys/kernel/debug/kmemleak\n cat /sys/kernel/debug/kmemleak"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/9ea3e6168948189cec31d0678d2b55b395f88491",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c069db76ed7b681c69159f44be96d2137e9ca989",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f92ded66e9d0aa20b883a2a5183973abc8f41815",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49409.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49409.json
new file mode 100644
index 00000000000..d5d313024ce
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49409.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49409",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:17.420",
+ "lastModified": "2025-02-26T07:01:17.420",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix bug_on in __es_tree_search\n\nHulk Robot reported a BUG_ON:\n==================================================================\nkernel BUG at fs/ext4/extents_status.c:199!\n[...]\nRIP: 0010:ext4_es_end fs/ext4/extents_status.c:199 [inline]\nRIP: 0010:__es_tree_search+0x1e0/0x260 fs/ext4/extents_status.c:217\n[...]\nCall Trace:\n ext4_es_cache_extent+0x109/0x340 fs/ext4/extents_status.c:766\n ext4_cache_extents+0x239/0x2e0 fs/ext4/extents.c:561\n ext4_find_extent+0x6b7/0xa20 fs/ext4/extents.c:964\n ext4_ext_map_blocks+0x16b/0x4b70 fs/ext4/extents.c:4384\n ext4_map_blocks+0xe26/0x19f0 fs/ext4/inode.c:567\n ext4_getblk+0x320/0x4c0 fs/ext4/inode.c:980\n ext4_bread+0x2d/0x170 fs/ext4/inode.c:1031\n ext4_quota_read+0x248/0x320 fs/ext4/super.c:6257\n v2_read_header+0x78/0x110 fs/quota/quota_v2.c:63\n v2_check_quota_file+0x76/0x230 fs/quota/quota_v2.c:82\n vfs_load_quota_inode+0x5d1/0x1530 fs/quota/dquot.c:2368\n dquot_enable+0x28a/0x330 fs/quota/dquot.c:2490\n ext4_quota_enable fs/ext4/super.c:6137 [inline]\n ext4_enable_quotas+0x5d7/0x960 fs/ext4/super.c:6163\n ext4_fill_super+0xa7c9/0xdc00 fs/ext4/super.c:4754\n mount_bdev+0x2e9/0x3b0 fs/super.c:1158\n mount_fs+0x4b/0x1e4 fs/super.c:1261\n[...]\n==================================================================\n\nAbove issue may happen as follows:\n-------------------------------------\next4_fill_super\n ext4_enable_quotas\n ext4_quota_enable\n ext4_iget\n __ext4_iget\n ext4_ext_check_inode\n ext4_ext_check\n __ext4_ext_check\n ext4_valid_extent_entries\n Check for overlapping extents does't take effect\n dquot_enable\n vfs_load_quota_inode\n v2_check_quota_file\n v2_read_header\n ext4_quota_read\n ext4_bread\n ext4_getblk\n ext4_map_blocks\n ext4_ext_map_blocks\n ext4_find_extent\n ext4_cache_extents\n ext4_es_cache_extent\n ext4_es_cache_extent\n __es_tree_search\n ext4_es_end\n BUG_ON(es->es_lblk + es->es_len < es->es_lblk)\n\nThe error ext4 extents is as follows:\n0af3 0300 0400 0000 00000000 extent_header\n00000000 0100 0000 12000000 extent1\n00000000 0100 0000 18000000 extent2\n02000000 0400 0000 14000000 extent3\n\nIn the ext4_valid_extent_entries function,\nif prev is 0, no error is returned even if lblock<=prev.\nThis was intended to skip the check on the first extent, but\nin the error image above, prev=0+1-1=0 when checking the second extent,\nso even though lblock<=prev, the function does not return an error.\nAs a result, bug_ON occurs in __es_tree_search and the system panics.\n\nTo solve this problem, we only need to check that:\n1. The lblock of the first extent is not less than 0.\n2. The lblock of the next extent is not less than\n the next block of the previous extent.\nThe same applies to extent_idx."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3c617827cd51018bc377bd2954e176920ddbcfad",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4fd58b5cf118d2d9038a0b8c9cc0e43096297686",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/59cf2fabbfe76de29d88dd7ae69858a25735b59f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d0083459e2b6b07ebd78bea2fe684a19cc0f3d0f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d36f6ed761b53933b0b4126486c10d3da7751e7f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ea6ea18b3ab0c0d7fefffb3c4d27df758b1c790a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49410.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49410.json
new file mode 100644
index 00000000000..f6ab25a5c84
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49410.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49410",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:17.517",
+ "lastModified": "2025-02-26T07:01:17.517",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Fix potential double free in create_var_ref()\n\nIn create_var_ref(), init_var_ref() is called to initialize the fields\nof variable ref_field, which is allocated in the previous function call\nto create_hist_field(). Function init_var_ref() allocates the\ncorresponding fields such as ref_field->system, but frees these fields\nwhen the function encounters an error. The caller later calls\ndestroy_hist_field() to conduct error handling, which frees the fields\nand the variable itself. This results in double free of the fields which\nare already freed in the previous function.\n\nFix this by storing NULL to the corresponding fields when they are freed\nin init_var_ref()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/058cb6d86b9789377216c936506b346aaa1eb581",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/37443b3508b8cce6832f8d25cb4550b2f7801f50",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4fdfb15e08598711dbf50daf56a33965232daf0e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/99696a2592bca641eb88cc9a80c90e591afebd0f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bd83ff3bbfb003832481c9bff999d12385f396ae",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c27f744ceefadc7bbeb14233b6abc150ced617d2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f8b383f83cb573152c577eca1ef101e89995b72a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49411.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49411.json
new file mode 100644
index 00000000000..608810c40cf
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49411.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49411",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:17.613",
+ "lastModified": "2025-02-26T07:01:17.613",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbfq: Make sure bfqg for which we are queueing requests is online\n\nBios queued into BFQ IO scheduler can be associated with a cgroup that\nwas already offlined. This may then cause insertion of this bfq_group\ninto a service tree. But this bfq_group will get freed as soon as last\nbio associated with it is completed leading to use after free issues for\nservice tree users. Fix the problem by making sure we always operate on\nonline bfq_group. If the bfq_group associated with the bio is not\nonline, we pick the first online parent."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/075a53b78b815301f8d3dd1ee2cd99554e34f0dd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/51f724bffa3403a5236597e6b75df7329c1ec6e9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6ee0868b0c3ccead5907685fcdcdd0c08dfe4b0b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7781c38552e6cc54ed8e9040279561340516b881",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/97bd6c56bdcb41079e488e31df56809e3b2ce628",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ccddf8cd411c1800863ed357064e56ceffd356bb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49412.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49412.json
new file mode 100644
index 00000000000..654e483e908
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49412.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49412",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:17.703",
+ "lastModified": "2025-02-26T07:01:17.703",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbfq: Avoid merging queues with different parents\n\nIt can happen that the parent of a bfqq changes between the moment we\ndecide two queues are worth to merge (and set bic->stable_merge_bfqq)\nand the moment bfq_setup_merge() is called. This can happen e.g. because\nthe process submitted IO for a different cgroup and thus bfqq got\nreparented. It can even happen that the bfqq we are merging with has\nparent cgroup that is already offline and going to be destroyed in which\ncase the merge can lead to use-after-free issues such as:\n\nBUG: KASAN: use-after-free in __bfq_deactivate_entity+0x9cb/0xa50\nRead of size 8 at addr ffff88800693c0c0 by task runc:[2:INIT]/10544\n\nCPU: 0 PID: 10544 Comm: runc:[2:INIT] Tainted: G E 5.15.2-0.g5fb85fd-default #1 openSUSE Tumbleweed (unreleased) f1f3b891c72369aebecd2e43e4641a6358867c70\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a-rebuilt.opensuse.org 04/01/2014\nCall Trace:\n \n dump_stack_lvl+0x46/0x5a\n print_address_description.constprop.0+0x1f/0x140\n ? __bfq_deactivate_entity+0x9cb/0xa50\n kasan_report.cold+0x7f/0x11b\n ? __bfq_deactivate_entity+0x9cb/0xa50\n __bfq_deactivate_entity+0x9cb/0xa50\n ? update_curr+0x32f/0x5d0\n bfq_deactivate_entity+0xa0/0x1d0\n bfq_del_bfqq_busy+0x28a/0x420\n ? resched_curr+0x116/0x1d0\n ? bfq_requeue_bfqq+0x70/0x70\n ? check_preempt_wakeup+0x52b/0xbc0\n __bfq_bfqq_expire+0x1a2/0x270\n bfq_bfqq_expire+0xd16/0x2160\n ? try_to_wake_up+0x4ee/0x1260\n ? bfq_end_wr_async_queues+0xe0/0xe0\n ? _raw_write_unlock_bh+0x60/0x60\n ? _raw_spin_lock_irq+0x81/0xe0\n bfq_idle_slice_timer+0x109/0x280\n ? bfq_dispatch_request+0x4870/0x4870\n __hrtimer_run_queues+0x37d/0x700\n ? enqueue_hrtimer+0x1b0/0x1b0\n ? kvm_clock_get_cycles+0xd/0x10\n ? ktime_get_update_offsets_now+0x6f/0x280\n hrtimer_interrupt+0x2c8/0x740\n\nFix the problem by checking that the parent of the two bfqqs we are\nmerging in bfq_setup_merge() is the same."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5ee21edaed09e6b25f2c007b3f326752bc89bacf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7d172b9dc913e161d8ff88770eea01701ff553de",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8abc8763b11c35e03cc91d59fd0cd28d39f88ca9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/97be7d13fbd4001eeab49b1be6399f23a8c66160",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a16c65cca7d2c7ff965fdd3adc8df2156529caf1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c1cee4ab36acef271be9101590756ed0c0c374d9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49413.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49413.json
new file mode 100644
index 00000000000..5f1ac9c9ff3
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49413.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49413",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:17.800",
+ "lastModified": "2025-02-26T07:01:17.800",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbfq: Update cgroup information before merging bio\n\nWhen the process is migrated to a different cgroup (or in case of\nwriteback just starts submitting bios associated with a different\ncgroup) bfq_merge_bio() can operate with stale cgroup information in\nbic. Thus the bio can be merged to a request from a different cgroup or\nit can result in merging of bfqqs for different cgroups or bfqqs of\nalready dead cgroups and causing possible use-after-free issues. Fix the\nproblem by updating cgroup information in bfq_merge_bio()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2a1077f17169a6059992a0bbdb330e0abad1e6d9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b06691af08b41dfd81052a3362514d9827b44bb1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d9165200c5627a2cf4408eefabdf0058bdf95e1a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/da9f3025d595956410ceaab2bea01980d7775948",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e8821f45612f2e6d9adb9c6ba0fb4184f57692aa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ea591cd4eb270393810e7be01feb8fde6a34fbbe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49414.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49414.json
new file mode 100644
index 00000000000..adc18217b14
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49414.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49414",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:17.890",
+ "lastModified": "2025-02-26T07:01:17.890",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix race condition between ext4_write and ext4_convert_inline_data\n\nHulk Robot reported a BUG_ON:\n ==================================================================\n EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0,\n block bitmap and bg descriptor inconsistent: 25 vs 31513 free clusters\n kernel BUG at fs/ext4/ext4_jbd2.c:53!\n invalid opcode: 0000 [#1] SMP KASAN PTI\n CPU: 0 PID: 25371 Comm: syz-executor.3 Not tainted 5.10.0+ #1\n RIP: 0010:ext4_put_nojournal fs/ext4/ext4_jbd2.c:53 [inline]\n RIP: 0010:__ext4_journal_stop+0x10e/0x110 fs/ext4/ext4_jbd2.c:116\n [...]\n Call Trace:\n ext4_write_inline_data_end+0x59a/0x730 fs/ext4/inline.c:795\n generic_perform_write+0x279/0x3c0 mm/filemap.c:3344\n ext4_buffered_write_iter+0x2e3/0x3d0 fs/ext4/file.c:270\n ext4_file_write_iter+0x30a/0x11c0 fs/ext4/file.c:520\n do_iter_readv_writev+0x339/0x3c0 fs/read_write.c:732\n do_iter_write+0x107/0x430 fs/read_write.c:861\n vfs_writev fs/read_write.c:934 [inline]\n do_pwritev+0x1e5/0x380 fs/read_write.c:1031\n [...]\n ==================================================================\n\nAbove issue may happen as follows:\n cpu1 cpu2\n__________________________|__________________________\ndo_pwritev\n vfs_writev\n do_iter_write\n ext4_file_write_iter\n ext4_buffered_write_iter\n generic_perform_write\n ext4_da_write_begin\n vfs_fallocate\n ext4_fallocate\n ext4_convert_inline_data\n ext4_convert_inline_data_nolock\n ext4_destroy_inline_data_nolock\n clear EXT4_STATE_MAY_INLINE_DATA\n ext4_map_blocks\n ext4_ext_map_blocks\n ext4_mb_new_blocks\n ext4_mb_regular_allocator\n ext4_mb_good_group_nolock\n ext4_mb_init_group\n ext4_mb_init_cache\n ext4_mb_generate_buddy --> error\n ext4_test_inode_state(inode, EXT4_STATE_MAY_INLINE_DATA)\n ext4_restore_inline_data\n set EXT4_STATE_MAY_INLINE_DATA\n ext4_block_write_begin\n ext4_da_write_end\n ext4_test_inode_state(inode, EXT4_STATE_MAY_INLINE_DATA)\n ext4_write_inline_data_end\n handle=NULL\n ext4_journal_stop(handle)\n __ext4_journal_stop\n ext4_put_nojournal(handle)\n ref_cnt = (unsigned long)handle\n BUG_ON(ref_cnt == 0) ---> BUG_ON\n\nThe lock held by ext4_convert_inline_data is xattr_sem, but the lock\nheld by generic_perform_write is i_rwsem. Therefore, the two locks can\nbe concurrent.\n\nTo solve above issue, we add inode_lock() for ext4_convert_inline_data().\nAt the same time, move ext4_convert_inline_data() in front of\next4_punch_hole(), remove similar handling from ext4_punch_hole()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/14602353b350950b551eccc6b46411aa3b12ffe2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/18881d7e517169193d9ef6c89c7f322e3e164277",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/725e00cb7039eae291890f1bb19bc867176745f6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/91f90b571f1a23f5b8a9c2b68a9aa5d6981a3c3d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ccc6639f831bee91aa8b41c8a1cdd020ecfb9f32",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f87c7a4b084afc13190cbb263538e444cb2b392a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49415.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49415.json
new file mode 100644
index 00000000000..2cb16dc3c3a
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49415.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49415",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:17.987",
+ "lastModified": "2025-02-26T07:01:17.987",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi:ipmb: Fix refcount leak in ipmi_ipmb_probe\n\nof_parse_phandle() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/a508e33956b538e034ed5df619a73ec7c15bda72",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f22068357acc268148bd55ce77f0a3e5c86701b4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49416.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49416.json
new file mode 100644
index 00000000000..bbee689126f
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49416.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49416",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:18.073",
+ "lastModified": "2025-02-26T07:01:18.073",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix use-after-free in chanctx code\n\nIn ieee80211_vif_use_reserved_context(), when we have an\nold context and the new context's replace_state is set to\nIEEE80211_CHANCTX_REPLACE_NONE, we free the old context\nin ieee80211_vif_use_reserved_reassign(). Therefore, we\ncannot check the old_ctx anymore, so we should set it to\nNULL after this point.\n\nHowever, since the new_ctx replace state is clearly not\nIEEE80211_CHANCTX_REPLACES_OTHER, we're not going to do\nanything else in this function and can just return to\navoid accessing the freed old_ctx."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/265bec4779a38b65e86a25120370f200822dfa76",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2965c4cdf7ad9ce0796fac5e57debb9519ea721e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4ba81e794f0fad6234f644c2da1ae14d5b95e1c4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4f05a9e15edcdf5b97e0d86ab6ecd5f187289f6c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6118bbdf69f4718b02d26bbcf2e497eb66004331",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/82c8e7bbdd06c7ed58e22450cc5b37f33a25bb2c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/88cc8f963febe192d6ded9df7217f92f380b449a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9f1e5cc85ad77e52f54049a94db0407445ae2a34",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b79110f2bf6022e60e590d2e094728a8eec3e79e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49417.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49417.json
new file mode 100644
index 00000000000..c2d4c6a8f9f
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49417.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49417",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:18.170",
+ "lastModified": "2025-02-26T07:01:18.170",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niwlwifi: mei: fix potential NULL-ptr deref\n\nIf SKB allocation fails, continue rather than using the NULL\npointer.\n\nCoverity CID: 1497650"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/29b81de94d62b5e2704bb5106b3e701ca8d7c7a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5d8d06fd3a02919100b28f927bcb76481ec0a0e3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/78488a64aea94a3336ee97f345c1496e9bc5ebdf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49418.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49418.json
new file mode 100644
index 00000000000..330740c3823
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49418.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49418",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:18.260",
+ "lastModified": "2025-02-26T07:01:18.260",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4: Fix free of uninitialized nfs4_label on referral lookup.\n\nSend along the already-allocated fattr along with nfs4_fs_locations, and\ndrop the memcpy of fattr. We end up growing two more allocations, but this\nfixes up a crash as:\n\nPID: 790 TASK: ffff88811b43c000 CPU: 0 COMMAND: \"ls\"\n #0 [ffffc90000857920] panic at ffffffff81b9bfde\n #1 [ffffc900008579c0] do_trap at ffffffff81023a9b\n #2 [ffffc90000857a10] do_error_trap at ffffffff81023b78\n #3 [ffffc90000857a58] exc_stack_segment at ffffffff81be1f45\n #4 [ffffc90000857a80] asm_exc_stack_segment at ffffffff81c009de\n #5 [ffffc90000857b08] nfs_lookup at ffffffffa0302322 [nfs]\n #6 [ffffc90000857b70] __lookup_slow at ffffffff813a4a5f\n #7 [ffffc90000857c60] walk_component at ffffffff813a86c4\n #8 [ffffc90000857cb8] path_lookupat at ffffffff813a9553\n #9 [ffffc90000857cf0] filename_lookup at ffffffff813ab86b"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/6015292653d95ba9f72906e2b65e536aa5807d64",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c3ed222745d9ad7b69299b349a64ba533c64a34f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eb1fe9600b86c24a789046bfc5c6851dda119280",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49419.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49419.json
new file mode 100644
index 00000000000..1f21d1a0913
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49419.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49419",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:18.350",
+ "lastModified": "2025-02-26T07:01:18.350",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvideo: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup\n\nCommit b3c9a924aab6 (\"fbdev: vesafb: Cleanup fb_info in .fb_destroy rather\nthan .remove\") fixed a use-after-free error due the vesafb driver freeing\nthe fb_info in the .remove handler instead of doing it in .fb_destroy.\n\nThis can happen if the .fb_destroy callback is executed after the .remove\ncallback, since the former tries to access a pointer freed by the latter.\n\nBut that change didn't take into account that another possible scenario is\nthat .fb_destroy is called before the .remove callback. For example, if no\nprocess has the fbdev chardev opened by the time the driver is removed.\n\nIf that's the case, fb_info will be freed when unregister_framebuffer() is\ncalled, making the fb_info pointer accessed in vesafb_remove() after that\nto no longer be valid.\n\nTo prevent that, move the expression containing the info->par to happen\nbefore the unregister_framebuffer() function call."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0fac5f8fb1bc2fc4f8714bf5e743c9cc3f547c63",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/acde4003efc16480375543638484d8f13f2e99a3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d260cad015945d1f4bb9b028a096f648506106a2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f605f5558ecc175ec70016a3c15f007cb6386531",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49420.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49420.json
new file mode 100644
index 00000000000..9ff82c2aca3
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49420.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49420",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:18.440",
+ "lastModified": "2025-02-26T07:01:18.440",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: annotate races around sk->sk_bound_dev_if\n\nUDP sendmsg() is lockless, and reads sk->sk_bound_dev_if while\nthis field can be changed by another thread.\n\nAdds minimal annotations to avoid KCSAN splats for UDP.\nFollowing patches will add more annotations to potential lockless readers.\n\nBUG: KCSAN: data-race in __ip6_datagram_connect / udpv6_sendmsg\n\nwrite to 0xffff888136d47a94 of 4 bytes by task 7681 on cpu 0:\n __ip6_datagram_connect+0x6e2/0x930 net/ipv6/datagram.c:221\n ip6_datagram_connect+0x2a/0x40 net/ipv6/datagram.c:272\n inet_dgram_connect+0x107/0x190 net/ipv4/af_inet.c:576\n __sys_connect_file net/socket.c:1900 [inline]\n __sys_connect+0x197/0x1b0 net/socket.c:1917\n __do_sys_connect net/socket.c:1927 [inline]\n __se_sys_connect net/socket.c:1924 [inline]\n __x64_sys_connect+0x3d/0x50 net/socket.c:1924\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x2b/0x50 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nread to 0xffff888136d47a94 of 4 bytes by task 7670 on cpu 1:\n udpv6_sendmsg+0xc60/0x16e0 net/ipv6/udp.c:1436\n inet6_sendmsg+0x5f/0x80 net/ipv6/af_inet6.c:652\n sock_sendmsg_nosec net/socket.c:705 [inline]\n sock_sendmsg net/socket.c:725 [inline]\n ____sys_sendmsg+0x39a/0x510 net/socket.c:2413\n ___sys_sendmsg net/socket.c:2467 [inline]\n __sys_sendmmsg+0x267/0x4c0 net/socket.c:2553\n __do_sys_sendmmsg net/socket.c:2582 [inline]\n __se_sys_sendmmsg net/socket.c:2579 [inline]\n __x64_sys_sendmmsg+0x53/0x60 net/socket.c:2579\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x2b/0x50 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nvalue changed: 0x00000000 -> 0xffffff9b\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 1 PID: 7670 Comm: syz-executor.3 Tainted: G W 5.18.0-rc1-syzkaller-dirty #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\n\nI chose to not add Fixes: tag because race has minor consequences\nand stable teams busy enough."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/20b2f61797873a2b18b5ff1a304ad2674fa1e0a5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4c971d2f3548e4f11b1460ac048f5307e4b39fdb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49421.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49421.json
new file mode 100644
index 00000000000..d301cf22352
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49421.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49421",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:18.533",
+ "lastModified": "2025-02-26T07:01:18.533",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvideo: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup\n\nof_parse_phandle() returns a node pointer with refcount incremented, we should\nuse of_node_put() on it when not need anymore. Add missing of_node_put() to\navoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2e2e2c71b2642289438392edbf5d08cdbc0b138b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/38d245cebf545338a6bc1c7762023de3fbecd7b7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/51eb1bb6baeb478538dd4ec6459fd68c44a855b1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6c92711db7c90f78e0b67ac2a8944d0fe7e12d83",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8db59df7f5826e104db82cfddbf22a33a151193e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b23789a59fa6f00e98a319291819f91fbba0deb8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bbb2a24e863b6a10129546a0a4ceea2f07deec39",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c1c4405222b6fc98c16e8c2aa679c14e41d81465",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f2dfb4ab887d67be7d0892ba041d3c8d738d3356",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49422.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49422.json
new file mode 100644
index 00000000000..9a6de3f88ce
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49422.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49422",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:18.657",
+ "lastModified": "2025-02-26T07:01:18.657",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: idxd: Fix the error handling path in idxd_cdev_register()\n\nIf a call to alloc_chrdev_region() fails, the already allocated resources\nare leaking.\n\nAdd the needed error handling path to fix the leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5e88561eceb34ae3f88451c2b8e30fe403484189",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6073af78156b8c3fc1198f8bcc190b7ac3ac0143",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aab08c1aac01097815fbcf10fce7021d2396a31f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b3c7b5d08e9d5b2ff31c03078c00ecf11042419f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c308a2e711a52a47f4b45e7add2b5200169e429a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49423.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49423.json
new file mode 100644
index 00000000000..b07f5e98e1e
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49423.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49423",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:18.783",
+ "lastModified": "2025-02-26T07:01:18.783",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtla: Avoid record NULL pointer dereference\n\nFix the following null/deref_null.cocci errors:\n./tools/tracing/rtla/src/osnoise_hist.c:870:31-36: ERROR: record is NULL but dereferenced.\n./tools/tracing/rtla/src/osnoise_top.c:650:31-36: ERROR: record is NULL but dereferenced.\n./tools/tracing/rtla/src/timerlat_hist.c:905:31-36: ERROR: record is NULL but dereferenced.\n./tools/tracing/rtla/src/timerlat_top.c:700:31-36: ERROR: record is NULL but dereferenced.\n\n\"record\" is NULL before calling osnoise_init_trace_tool.\nAdd a tag \"out_free\" to avoid dereferring a NULL pointer."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2a6b52ed72c822b5ee146a6a00ea66614fe02653",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b0f1c686baff74d5df10f2f46670ef4e24a75756",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49424.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49424.json
new file mode 100644
index 00000000000..12c4da37b6d
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49424.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49424",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:18.880",
+ "lastModified": "2025-02-26T07:01:18.880",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/mediatek: Fix NULL pointer dereference when printing dev_name\n\nWhen larbdev is NULL (in the case I hit, the node is incorrectly set\niommus = <&iommu NUM>), it will cause device_link_add() fail and\nkernel crashes when we try to print dev_name(larbdev).\n\nLet's fail the probe if a larbdev is NULL to avoid invalid inputs from\ndts.\n\nIt should work for normal correct setting and avoid the crash caused\nby my incorrect setting.\n\nError log:\n[ 18.189042][ T301] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000050\n...\n[ 18.344519][ T301] pstate: a0400005 (NzCv daif +PAN -UAO)\n[ 18.345213][ T301] pc : mtk_iommu_probe_device+0xf8/0x118 [mtk_iommu]\n[ 18.346050][ T301] lr : mtk_iommu_probe_device+0xd0/0x118 [mtk_iommu]\n[ 18.346884][ T301] sp : ffffffc00a5635e0\n[ 18.347392][ T301] x29: ffffffc00a5635e0 x28: ffffffd44a46c1d8\n[ 18.348156][ T301] x27: ffffff80c39a8000 x26: ffffffd44a80cc38\n[ 18.348917][ T301] x25: 0000000000000000 x24: ffffffd44a80cc38\n[ 18.349677][ T301] x23: ffffffd44e4da4c6 x22: ffffffd44a80cc38\n[ 18.350438][ T301] x21: ffffff80cecd1880 x20: 0000000000000000\n[ 18.351198][ T301] x19: ffffff80c439f010 x18: ffffffc00a50d0c0\n[ 18.351959][ T301] x17: ffffffffffffffff x16: 0000000000000004\n[ 18.352719][ T301] x15: 0000000000000004 x14: ffffffd44eb5d420\n[ 18.353480][ T301] x13: 0000000000000ad2 x12: 0000000000000003\n[ 18.354241][ T301] x11: 00000000fffffad2 x10: c0000000fffffad2\n[ 18.355003][ T301] x9 : a0d288d8d7142d00 x8 : a0d288d8d7142d00\n[ 18.355763][ T301] x7 : ffffffd44c2bc640 x6 : 0000000000000000\n[ 18.356524][ T301] x5 : 0000000000000080 x4 : 0000000000000001\n[ 18.357284][ T301] x3 : 0000000000000000 x2 : 0000000000000005\n[ 18.358045][ T301] x1 : 0000000000000000 x0 : 0000000000000000\n[ 18.360208][ T301] Hardware name: MT6873 (DT)\n[ 18.360771][ T301] Call trace:\n[ 18.361168][ T301] dump_backtrace+0xf8/0x1f0\n[ 18.361737][ T301] dump_stack_lvl+0xa8/0x11c\n[ 18.362305][ T301] dump_stack+0x1c/0x2c\n[ 18.362816][ T301] mrdump_common_die+0x184/0x40c [mrdump]\n[ 18.363575][ T301] ipanic_die+0x24/0x38 [mrdump]\n[ 18.364230][ T301] atomic_notifier_call_chain+0x128/0x2b8\n[ 18.364937][ T301] die+0x16c/0x568\n[ 18.365394][ T301] __do_kernel_fault+0x1e8/0x214\n[ 18.365402][ T301] do_page_fault+0xb8/0x678\n[ 18.366934][ T301] do_translation_fault+0x48/0x64\n[ 18.368645][ T301] do_mem_abort+0x68/0x148\n[ 18.368652][ T301] el1_abort+0x40/0x64\n[ 18.368660][ T301] el1h_64_sync_handler+0x54/0x88\n[ 18.368668][ T301] el1h_64_sync+0x68/0x6c\n[ 18.368673][ T301] mtk_iommu_probe_device+0xf8/0x118 [mtk_iommu]\n..."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/8837c2682b9b2eed83e6212bcf79850c593a6fee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c3c2734e28d7fac50228c4d2b8896e8695adf304",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/de78657e16f41417da9332f09c2d67d100096939",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e9c63c0f73a1bbfd02624f5eae7e881df8b6830f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49425.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49425.json
new file mode 100644
index 00000000000..6b287876ef7
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49425.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49425",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:18.977",
+ "lastModified": "2025-02-26T07:01:18.977",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix dereference of stale list iterator after loop body\n\nThe list iterator variable will be a bogus pointer if no break was hit.\nDereferencing it (cur->page in this case) could load an out-of-bounds/undefined\nvalue making it unsafe to use that in the comparision to determine if the\nspecific element was found.\n\nSince 'cur->page' *can* be out-ouf-bounds it cannot be guaranteed that\nby chance (or intention of an attacker) it matches the value of 'page'\neven though the correct element was not found.\n\nThis is fixed by using a separate list iterator variable for the loop\nand only setting the original variable if a suitable element was found.\nThen determing if the element was found is simply checking if the\nvariable is set."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2aaf51dd39afb6d01d13f1e6fe20b684733b37d5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/385edd3ce5b4b1e9d31f474a5e35a39779ec1110",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/45b2b7d7108ae1e25a5036cab04ab9273e792332",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/51d584704d18e60fa473823654f35611c777b291",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5e47a7add3dda7f236548c5ec3017776dc2a729f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b26e1c777890e4b938136deb8ec07a29f33862e4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ed7efc472c00986dcd6903ab6ed165c7fa167674",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49426.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49426.json
new file mode 100644
index 00000000000..990854fafc3
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49426.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49426",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:19.073",
+ "lastModified": "2025-02-26T07:01:19.073",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/arm-smmu-v3-sva: Fix mm use-after-free\n\nWe currently call arm64_mm_context_put() without holding a reference to\nthe mm, which can result in use-after-free. Call mmgrab()/mmdrop() to\nensure the mm only gets freed after we unpinned the ASID."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/9aa215450888cf29af0c479e14a712dc6b0c506c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cbd23144f7662b00bcde32a938c4a4057e476d68",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e3cbbdbff8a4db5d053c53fd71be62ccccdb52b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fc90f13ea0dcd960e5002d204fa55cec4e0db2fa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49427.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49427.json
new file mode 100644
index 00000000000..18a7bdbfe57
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49427.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49427",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:19.187",
+ "lastModified": "2025-02-26T07:01:19.187",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/mediatek: Remove clk_disable in mtk_iommu_remove\n\nAfter the commit b34ea31fe013 (\"iommu/mediatek: Always enable the clk on\nresume\"), the iommu clock is controlled by the runtime callback.\nthus remove the clk control in the mtk_iommu_remove.\n\nOtherwise, it will warning like:\n\necho 14018000.iommu > /sys/bus/platform/drivers/mtk-iommu/unbind\n\n[ 51.413044] ------------[ cut here ]------------\n[ 51.413648] vpp0_smi_iommu already disabled\n[ 51.414233] WARNING: CPU: 2 PID: 157 at */v5.15-rc1/kernel/mediatek/\n drivers/clk/clk.c:952 clk_core_disable+0xb0/0xb8\n[ 51.417174] Hardware name: MT8195V/C(ENG) (DT)\n[ 51.418635] pc : clk_core_disable+0xb0/0xb8\n[ 51.419177] lr : clk_core_disable+0xb0/0xb8\n...\n[ 51.429375] Call trace:\n[ 51.429694] clk_core_disable+0xb0/0xb8\n[ 51.430193] clk_core_disable_lock+0x24/0x40\n[ 51.430745] clk_disable+0x20/0x30\n[ 51.431189] mtk_iommu_remove+0x58/0x118\n[ 51.431705] platform_remove+0x28/0x60\n[ 51.432197] device_release_driver_internal+0x110/0x1f0\n[ 51.432873] device_driver_detach+0x18/0x28\n[ 51.433418] unbind_store+0xd4/0x108\n[ 51.433886] drv_attr_store+0x24/0x38\n[ 51.434363] sysfs_kf_write+0x40/0x58\n[ 51.434843] kernfs_fop_write_iter+0x164/0x1e0"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/053465ab20dcd324a43a1811ee98e5721e6a3e65",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6eaa046c696c83542c56765cdde564d9818ff1fb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/98df772bdd1c4ce717a26289efea15cbbe4b64ed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9b3bd97acb4f8954b8a43a5d63ed9050d463b4e1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49428.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49428.json
new file mode 100644
index 00000000000..ebfbf81f4f2
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49428.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49428",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:19.290",
+ "lastModified": "2025-02-26T07:01:19.290",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to do sanity check on inline_dots inode\n\nAs Wenqing reported in bugzilla:\n\nhttps://bugzilla.kernel.org/show_bug.cgi?id=215765\n\nIt will cause a kernel panic with steps:\n- mkdir mnt\n- mount tmp40.img mnt\n- ls mnt\n\nfolio_mark_dirty+0x33/0x50\nf2fs_add_regular_entry+0x541/0xad0 [f2fs]\nf2fs_add_dentry+0x6c/0xb0 [f2fs]\nf2fs_do_add_link+0x182/0x230 [f2fs]\n__recover_dot_dentries+0x2d6/0x470 [f2fs]\nf2fs_lookup+0x5af/0x6a0 [f2fs]\n__lookup_slow+0xac/0x200\nlookup_slow+0x45/0x70\nwalk_component+0x16c/0x250\npath_lookupat+0x8b/0x1f0\nfilename_lookup+0xef/0x250\nuser_path_at_empty+0x46/0x70\nvfs_statx+0x98/0x190\n__do_sys_newlstat+0x41/0x90\n__x64_sys_newlstat+0x1a/0x30\ndo_syscall_64+0x37/0xb0\nentry_SYSCALL_64_after_hwframe+0x44/0xae\n\nThe root cause is for special file: e.g. character, block, fifo or\nsocket file, f2fs doesn't assign address space operations pointer array\nfor mapping->a_ops field, so, in a fuzzed image, if inline_dots flag was\ntagged in special file, during lookup(), when f2fs runs into\n__recover_dot_dentries(), it will cause NULL pointer access once\nf2fs_add_regular_entry() calls a_ops->set_dirty_page()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/12662d19467b391b5b509ac5e9ab4f583c6dde16",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/250e5a6be52a6b9d82fe91976c83cc158868b4e9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2f46160d0a19b13bfe96c0dd50eed5c5d253ab7a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/34f48ce5d5936eea33e3b6415403e57eb84aff97",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49429.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49429.json
new file mode 100644
index 00000000000..3acb0d24b52
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49429.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49429",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:19.383",
+ "lastModified": "2025-02-26T07:01:19.383",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hfi1: Prevent panic when SDMA is disabled\n\nIf the hfi1 module is loaded with HFI1_CAP_SDMA off, a call to\nhfi1_write_iter() will dereference a NULL pointer and panic. A typical\nstack frame is:\n\n sdma_select_user_engine [hfi1]\n hfi1_user_sdma_process_request [hfi1]\n hfi1_write_iter [hfi1]\n do_iter_readv_writev\n do_iter_write\n vfs_writev\n do_writev\n do_syscall_64\n\nThe fix is to test for SDMA in hfi1_write_iter() and fail the I/O with\nEINVAL."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0e4dda8b3f4c07ee9ea670a10ea3171a5e63a86f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/22e7e400fd1a890db2ea13686324aff50e972f4f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/29952ab85d6c3fe0b7909d9a737f10c58bf6824d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/32e6aea33944f364d51cd263e4cd236393a188b6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/33794e8e9bcb4affc0ebff9cdec85acc8b8a1762",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/629e052d0c98e46dde9f0824f0aa437f678d9b8f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc80d3c37cec9d6ddb140483647901bc7cc6c31d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e60ad83f645ee6fadd5a8057ba267aeec54f08fe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49430.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49430.json
new file mode 100644
index 00000000000..462245fa271
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49430.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49430",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:19.480",
+ "lastModified": "2025-02-26T07:01:19.480",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: gpio-keys - cancel delayed work only in case of GPIO\n\ngpio_keys module can either accept gpios or interrupts. The module\ninitializes delayed work in case of gpios only and is only used if\ndebounce timer is not used, so make sure cancel_delayed_work_sync()\nis called only when its gpio-backed and debounce_use_hrtimer is false.\n\nThis fixes the issue seen below when the gpio_keys module is unloaded and\nan interrupt pin is used instead of GPIO:\n\n[ 360.297569] ------------[ cut here ]------------\n[ 360.302303] WARNING: CPU: 0 PID: 237 at kernel/workqueue.c:3066 __flush_work+0x414/0x470\n[ 360.310531] Modules linked in: gpio_keys(-)\n[ 360.314797] CPU: 0 PID: 237 Comm: rmmod Not tainted 5.18.0-rc5-arm64-renesas-00116-g73636105874d-dirty #166\n[ 360.324662] Hardware name: Renesas SMARC EVK based on r9a07g054l2 (DT)\n[ 360.331270] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 360.338318] pc : __flush_work+0x414/0x470\n[ 360.342385] lr : __cancel_work_timer+0x140/0x1b0\n[ 360.347065] sp : ffff80000a7fba00\n[ 360.350423] x29: ffff80000a7fba00 x28: ffff000012b9c5c0 x27: 0000000000000000\n[ 360.357664] x26: ffff80000a7fbb80 x25: ffff80000954d0a8 x24: 0000000000000001\n[ 360.364904] x23: ffff800009757000 x22: 0000000000000000 x21: ffff80000919b000\n[ 360.372143] x20: ffff00000f5974e0 x19: ffff00000f5974e0 x18: ffff8000097fcf48\n[ 360.379382] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000053f40\n[ 360.386622] x14: ffff800009850e88 x13: 0000000000000002 x12: 000000000000a60c\n[ 360.393861] x11: 000000000000a610 x10: 0000000000000000 x9 : 0000000000000008\n[ 360.401100] x8 : 0101010101010101 x7 : 00000000a473c394 x6 : 0080808080808080\n[ 360.408339] x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff80000919b458\n[ 360.415578] x2 : ffff8000097577f0 x1 : 0000000000000001 x0 : 0000000000000000\n[ 360.422818] Call trace:\n[ 360.425299] __flush_work+0x414/0x470\n[ 360.429012] __cancel_work_timer+0x140/0x1b0\n[ 360.433340] cancel_delayed_work_sync+0x10/0x18\n[ 360.437931] gpio_keys_quiesce_key+0x28/0x58 [gpio_keys]\n[ 360.443327] devm_action_release+0x10/0x18\n[ 360.447481] release_nodes+0x8c/0x1a0\n[ 360.451194] devres_release_all+0x90/0x100\n[ 360.455346] device_unbind_cleanup+0x14/0x60\n[ 360.459677] device_release_driver_internal+0xe8/0x168\n[ 360.464883] driver_detach+0x4c/0x90\n[ 360.468509] bus_remove_driver+0x54/0xb0\n[ 360.472485] driver_unregister+0x2c/0x58\n[ 360.476462] platform_driver_unregister+0x10/0x18\n[ 360.481230] gpio_keys_exit+0x14/0x828 [gpio_keys]\n[ 360.486088] __arm64_sys_delete_module+0x1e0/0x270\n[ 360.490945] invoke_syscall+0x40/0xf8\n[ 360.494661] el0_svc_common.constprop.3+0xf0/0x110\n[ 360.499515] do_el0_svc+0x20/0x78\n[ 360.502877] el0_svc+0x48/0xf8\n[ 360.505977] el0t_64_sync_handler+0x88/0xb0\n[ 360.510216] el0t_64_sync+0x148/0x14c\n[ 360.513930] irq event stamp: 4306\n[ 360.517288] hardirqs last enabled at (4305): [] __cancel_work_timer+0x130/0x1b0\n[ 360.526359] hardirqs last disabled at (4306): [] el1_dbg+0x24/0x88\n[ 360.534204] softirqs last enabled at (4278): [] _stext+0x4a0/0x5e0\n[ 360.542133] softirqs last disabled at (4267): [] irq_exit_rcu+0x18c/0x1b0\n[ 360.550591] ---[ end trace 0000000000000000 ]---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4160e09619086fc155b51ccdb3462a3f233a5f4b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8b1ae300c2953257c146b5f0757537935c0b6027",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/96c460687813915dedca9dd7d04ae0e90607fd79",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cee409bbba0d1bd3fb73064fb480ff365f453b5d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49431.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49431.json
new file mode 100644
index 00000000000..6ae5b700ed5
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49431.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49431",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:19.573",
+ "lastModified": "2025-02-26T07:01:19.573",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/iommu: Add missing of_node_put in iommu_init_early_dart\n\nThe device_node pointer is returned by of_find_compatible_node\nwith refcount incremented. We should use of_node_put() to avoid\nthe refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/57b742a5b8945118022973e6416b71351df512fb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7e3f1dfb9e21733d7276bc9ccea4daada163f2ba",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8657e8ea23325949091da72453ba84fb73cc2bd9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cb4f2dc513e99c5d0485661f114e4dda73612d10",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/df6d8b689252c0acc0448d4ae3d33f2d6db048ab",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dfc308d6f29aa28463deb9a12278a85a382385ca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49432.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49432.json
new file mode 100644
index 00000000000..2aa9e3ba8f0
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49432.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49432",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:19.667",
+ "lastModified": "2025-02-26T07:01:19.667",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/xics: fix refcount leak in icp_opal_init()\n\nThe of_find_compatible_node() function returns a node pointer with\nrefcount incremented, use of_node_put() on it when done."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1d5c8cea85fb1680eae8d645b96b92146cb4633c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2357bd7499a81c70b460e2191852bbfc7b63c354",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/537a317e5ff45d1f5a0ecaf6a0d7c8043c878cb1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/53f3f7f73e609b934083f896cb7ca2c2cb009b9f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5dd9e27ea4a39f7edd4bf81e9e70208e7ac0b7c9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6a61a97106279c2aa16fbbb2a171fd5dde127d23",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/977dbc81d0f866ef63b93c127b7404f07734b3cc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9a42bc2494fadb453de00ce61042e588563ddc6d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/df802880a7f9cd96b921b00639b00871f18a9a57",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49433.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49433.json
new file mode 100644
index 00000000000..c5e49e0b1dc
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49433.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49433",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:19.763",
+ "lastModified": "2025-02-26T07:01:19.763",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hfi1: Prevent use of lock before it is initialized\n\nIf there is a failure during probe of hfi1 before the sdma_map_lock is\ninitialized, the call to hfi1_free_devdata() will attempt to use a lock\nthat has not been initialized. If the locking correctness validator is on\nthen an INFO message and stack trace resembling the following may be seen:\n\n INFO: trying to register non-static key.\n The code is fine but needs lockdep annotation, or maybe\n you didn't initialize this object before use?\n turning off the locking correctness validator.\n Call Trace:\n register_lock_class+0x11b/0x880\n __lock_acquire+0xf3/0x7930\n lock_acquire+0xff/0x2d0\n _raw_spin_lock_irq+0x46/0x60\n sdma_clean+0x42a/0x660 [hfi1]\n hfi1_free_devdata+0x3a7/0x420 [hfi1]\n init_one+0x867/0x11a0 [hfi1]\n pci_device_probe+0x40e/0x8d0\n\nThe use of sdma_map_lock in sdma_clean() is for freeing the sdma_map\nmemory, and sdma_map is not allocated/initialized until after\nsdma_map_lock has been initialized. This code only needs to be run if\nsdma_map is not NULL, and so checking for that condition will avoid trying\nto use the lock before it is initialized."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/05c03dfd09c069c4ffd783b47b2da5dcc9421f2c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/288d198f50434f29b4a26a9de4394ae2305ad8af",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/30eb275e7ed588270ae159cc590a96658e0cfd8f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/66090815a24ce14cf51ef5453fc0218fe8a39bc2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/addb192000d8819c0b1553453994df9bb54c28db",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ca55150bff5817af4f857a746ecab9862c23e12a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fc0750e659db7b315bf6348902cc8ca3cdd4b8d8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49434.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49434.json
new file mode 100644
index 00000000000..be252f28f88
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49434.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49434",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:19.863",
+ "lastModified": "2025-02-26T07:01:19.863",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()\n\nThe sysfs sriov_numvfs_store() path acquires the device lock before the\nconfig space access lock:\n\n sriov_numvfs_store\n device_lock # A (1) acquire device lock\n sriov_configure\n vfio_pci_sriov_configure # (for example)\n vfio_pci_core_sriov_configure\n pci_disable_sriov\n sriov_disable\n pci_cfg_access_lock\n pci_wait_cfg # B (4) wait for dev->block_cfg_access == 0\n\nPreviously, pci_dev_lock() acquired the config space access lock before the\ndevice lock:\n\n pci_dev_lock\n pci_cfg_access_lock\n dev->block_cfg_access = 1 # B (2) set dev->block_cfg_access = 1\n device_lock # A (3) wait for device lock\n\nAny path that uses pci_dev_lock(), e.g., pci_reset_function(), may\ndeadlock with sriov_numvfs_store() if the operations occur in the sequence\n(1) (2) (3) (4).\n\nAvoid the deadlock by reversing the order in pci_dev_lock() so it acquires\nthe device lock before the config space access lock, the same as the\nsriov_numvfs_store() path.\n\n[bhelgaas: combined and adapted commit log from Jay Zhou's independent\nsubsequent posting:\nhttps://lore.kernel.org/r/20220404062539.1710-1-jianjay.zhou@huawei.com]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2cdd5284035322795b0964f899eefba254cfe483",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/59ea6b3ae51df7cd6bfd84c9c0030609b9315622",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a91ee0e9fca9d7501286cfbced9b30a33e52740a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aed6d4d519210c28817948f34c53b6e058e0456c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c3c6dc1853b8bf3c718f96fd8480a6eb09ba4831",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c9a81f9ed6ae3554621d6a50220b1bc74b67d81e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/da9792920ab525b8a932aa9aeee34529ad7b83f7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ea047f51172aa68841adef7f52d375002438b8f0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eff3587b9c01439b738298475e555c028ac9f55e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49435.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49435.json
new file mode 100644
index 00000000000..695d4c46e5d
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49435.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49435",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:19.957",
+ "lastModified": "2025-02-26T07:01:19.957",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()\n\nIt will cause null-ptr-deref when using 'res', if platform_get_resource()\nreturns NULL, so move using 'res' after devm_ioremap_resource() that\nwill check it to avoid null-ptr-deref.\nAnd use devm_platform_get_and_ioremap_resource() to simplify code."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2d00158a06efe6bbcd020108634ea0f2ed8b32f7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/311242c7703df0da14c206260b7e855f69cb0264",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/49c1e32e7b3f301642a60448700ec531df981269",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5289795824b77489803b0802cd9edc13824a2d0b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/579944b9f38727d9ff570b58f83bc424e8af8398",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a1d4941d9a24999f680799f9bbde7f57351ca637",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49436.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49436.json
new file mode 100644
index 00000000000..3650c2ef440
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49436.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49436",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:20.057",
+ "lastModified": "2025-02-26T07:01:20.057",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/papr_scm: Fix leaking nvdimm_events_map elements\n\nRight now 'char *' elements allocated for individual 'stat_id' in\n'papr_scm_priv.nvdimm_events_map[]' during papr_scm_pmu_check_events(), get\nleaked in papr_scm_remove() and papr_scm_pmu_register(),\npapr_scm_pmu_check_events() error paths.\n\nAlso individual 'stat_id' arent NULL terminated 'char *' instead they are fixed\n8-byte sized identifiers. However papr_scm_pmu_register() assumes it to be a\nNULL terminated 'char *' and at other places it assumes it to be a\n'papr_scm_perf_stat.stat_id' sized string which is 8-byes in size.\n\nFix this by allocating the memory for papr_scm_priv.nvdimm_events_map to also\ninclude space for 'stat_id' entries. This is possible since number of available\nevents/stat_ids are known upfront. This saves some memory and one extra level of\nindirection from 'nvdimm_events_map' to 'stat_id'. Also rest of the code\ncan continue to call 'kfree(papr_scm_priv.nvdimm_events_map)' without needing to\niterate over the array and free up individual elements."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0e0946e22f3665d27325d389ff45ade6e93f3678",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b073096df4dec70d0436321b7093bad27ae91f9e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49437.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49437.json
new file mode 100644
index 00000000000..10c162d51d4
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49437.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49437",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:20.150",
+ "lastModified": "2025-02-26T07:01:20.150",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/xive: Fix refcount leak in xive_spapr_init\n\nof_find_compatible_node() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1d1fb9618bdd5a5fbf9a9eb75133da301d33721c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/65f11ccdd746e0e7f0b469cc989ba43d4f30ecfe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6e806485d851986a2445267608f27cb4ba2ed774",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc62dde2a5f4ba14016fd9caec76f08d388f4b9c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49438.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49438.json
new file mode 100644
index 00000000000..d0a115ebf64
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49438.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49438",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:20.240",
+ "lastModified": "2025-02-26T07:01:20.240",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: sparcspkr - fix refcount leak in bbc_beep_probe\n\nof_find_node_by_path() calls of_find_node_opts_by_path(),\nwhich returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1124e39fea0e2fdb4202f95b716cb97cc7de7cc7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2f51db16cb740ff90086189a1ef2581eab665591",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/353bc58ac6c782d4dcde9136a91d1f90867938fe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/418b6a3e12f75638abc5673eb76cb32127d0ab13",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6e07ccc7d56130f760d23f67a70c45366c07debc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/73d6f42d8d86648bec2e73d34fe1648cb6d23e08",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bbc2b0ce6042dd3117827f10ea8cb67e0ab786da",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c8994b30d71d64d5dcc9bc0edbfdf367171aa96f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f13064b0f2c651a3fbb0749932795c6fd21556a8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49439.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49439.json
new file mode 100644
index 00000000000..37f5bc2d9db
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49439.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49439",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:20.337",
+ "lastModified": "2025-02-26T07:01:20.337",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/fsl_rio: Fix refcount leak in fsl_rio_setup\n\nof_parse_phandle() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/46fd994763cf6884b88a2da712af918f3ed54d7b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/51e25fbf20c9152d84a34b7afac15a41fe5c9116",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5607a77a365df8c0fd5ff43ac424812b95775527",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5b8aa2ba38c010f47c965dd9bb5a8561813ed649",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7b668a59ddfb32727e39b06fdf52b28e58c684e0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bcb6c4c5eb4836a21411dfe8247bf9951eb6e7c3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c70dd353d37158e06bf8d450d4b31a7091609924",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fcee96924ba1596ca80a6770b2567ca546f9a482",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49440.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49440.json
new file mode 100644
index 00000000000..92cf261e195
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49440.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49440",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:20.430",
+ "lastModified": "2025-02-26T07:01:20.430",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/rtas: Keep MSR[RI] set when calling RTAS\n\nRTAS runs in real mode (MSR[DR] and MSR[IR] unset) and in 32-bit big\nendian mode (MSR[SF,LE] unset).\n\nThe change in MSR is done in enter_rtas() in a relatively complex way,\nsince the MSR value could be hardcoded.\n\nFurthermore, a panic has been reported when hitting the watchdog interrupt\nwhile running in RTAS, this leads to the following stack trace:\n\n watchdog: CPU 24 Hard LOCKUP\n watchdog: CPU 24 TB:997512652051031, last heartbeat TB:997504470175378 (15980ms ago)\n ...\n Supported: No, Unreleased kernel\n CPU: 24 PID: 87504 Comm: drmgr Kdump: loaded Tainted: G E X 5.14.21-150400.71.1.bz196362_2-default #1 SLE15-SP4 (unreleased) 0d821077ef4faa8dfaf370efb5fdca1fa35f4e2c\n NIP: 000000001fb41050 LR: 000000001fb4104c CTR: 0000000000000000\n REGS: c00000000fc33d60 TRAP: 0100 Tainted: G E X (5.14.21-150400.71.1.bz196362_2-default)\n MSR: 8000000002981000 CR: 48800002 XER: 20040020\n CFAR: 000000000000011c IRQMASK: 1\n GPR00: 0000000000000003 ffffffffffffffff 0000000000000001 00000000000050dc\n GPR04: 000000001ffb6100 0000000000000020 0000000000000001 000000001fb09010\n GPR08: 0000000020000000 0000000000000000 0000000000000000 0000000000000000\n GPR12: 80040000072a40a8 c00000000ff8b680 0000000000000007 0000000000000034\n GPR16: 000000001fbf6e94 000000001fbf6d84 000000001fbd1db0 000000001fb3f008\n GPR20: 000000001fb41018 ffffffffffffffff 000000000000017f fffffffffffff68f\n GPR24: 000000001fb18fe8 000000001fb3e000 000000001fb1adc0 000000001fb1cf40\n GPR28: 000000001fb26000 000000001fb460f0 000000001fb17f18 000000001fb17000\n NIP [000000001fb41050] 0x1fb41050\n LR [000000001fb4104c] 0x1fb4104c\n Call Trace:\n Instruction dump:\n XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX\n XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX\n Oops: Unrecoverable System Reset, sig: 6 [#1]\n LE PAGE_SIZE=64K MMU=Hash SMP NR_CPUS=2048 NUMA pSeries\n ...\n Supported: No, Unreleased kernel\n CPU: 24 PID: 87504 Comm: drmgr Kdump: loaded Tainted: G E X 5.14.21-150400.71.1.bz196362_2-default #1 SLE15-SP4 (unreleased) 0d821077ef4faa8dfaf370efb5fdca1fa35f4e2c\n NIP: 000000001fb41050 LR: 000000001fb4104c CTR: 0000000000000000\n REGS: c00000000fc33d60 TRAP: 0100 Tainted: G E X (5.14.21-150400.71.1.bz196362_2-default)\n MSR: 8000000002981000 CR: 48800002 XER: 20040020\n CFAR: 000000000000011c IRQMASK: 1\n GPR00: 0000000000000003 ffffffffffffffff 0000000000000001 00000000000050dc\n GPR04: 000000001ffb6100 0000000000000020 0000000000000001 000000001fb09010\n GPR08: 0000000020000000 0000000000000000 0000000000000000 0000000000000000\n GPR12: 80040000072a40a8 c00000000ff8b680 0000000000000007 0000000000000034\n GPR16: 000000001fbf6e94 000000001fbf6d84 000000001fbd1db0 000000001fb3f008\n GPR20: 000000001fb41018 ffffffffffffffff 000000000000017f fffffffffffff68f\n GPR24: 000000001fb18fe8 000000001fb3e000 000000001fb1adc0 000000001fb1cf40\n GPR28: 000000001fb26000 000000001fb460f0 000000001fb17f18 000000001fb17000\n NIP [000000001fb41050] 0x1fb41050\n LR [000000001fb4104c] 0x1fb4104c\n Call Trace:\n Instruction dump:\n XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX\n XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX\n ---[ end trace 3ddec07f638c34a2 ]---\n\nThis happens because MSR[RI] is unset when entering RTAS but there is no\nvalid reason to not set it here.\n\nRTAS is expected to be called with MSR[RI] as specified in PAPR+ section\n\"7.2.1 Machine State\":\n\n R1\u20137.2.1\u20139. If called with MSR[RI] equal to 1, then RTAS must protect\n its own critical regions from recursion by setting the MSR[RI] bit to\n 0 when in the critical regions.\n\nFixing this by reviewing the way MSR is compute before calling RTAS. Now a\nhardcoded value meaning real \n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5ca40fcf0da0ce2b5bc44e7d8b036535955f2e3d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5f4367448f6817c8a0e94dc9736ed84fa8eee4a3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b6b1c3ce06ca438eb24e0f45bf0e63ecad0369f5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c9c41f0273826a13ac93124e66a4ff45df281ba0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49441.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49441.json
new file mode 100644
index 00000000000..0ea08697e0f
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49441.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49441",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:20.523",
+ "lastModified": "2025-02-26T07:01:20.523",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: fix deadlock caused by calling printk() under tty_port->lock\n\npty_write() invokes kmalloc() which may invoke a normal printk() to print\nfailure message. This can cause a deadlock in the scenario reported by\nsyz-bot below:\n\n CPU0 CPU1 CPU2\n ---- ---- ----\n lock(console_owner);\n lock(&port_lock_key);\n lock(&port->lock);\n lock(&port_lock_key);\n lock(&port->lock);\n lock(console_owner);\n\nAs commit dbdda842fe96 (\"printk: Add console owner and waiter logic to\nload balance console writes\") said, such deadlock can be prevented by\nusing printk_deferred() in kmalloc() (which is invoked in the section\nguarded by the port->lock). But there are too many printk() on the\nkmalloc() path, and kmalloc() can be called from anywhere, so changing\nprintk() to printk_deferred() is too complicated and inelegant.\n\nTherefore, this patch chooses to specify __GFP_NOWARN to kmalloc(), so\nthat printk() will not be called, and this deadlock problem can be\navoided.\n\nSyzbot reported the following lockdep error:\n\n======================================================\nWARNING: possible circular locking dependency detected\n5.4.143-00237-g08ccc19a-dirty #10 Not tainted\n------------------------------------------------------\nsyz-executor.4/29420 is trying to acquire lock:\nffffffff8aedb2a0 (console_owner){....}-{0:0}, at: console_trylock_spinning kernel/printk/printk.c:1752 [inline]\nffffffff8aedb2a0 (console_owner){....}-{0:0}, at: vprintk_emit+0x2ca/0x470 kernel/printk/printk.c:2023\n\nbut task is already holding lock:\nffff8880119c9158 (&port->lock){-.-.}-{2:2}, at: pty_write+0xf4/0x1f0 drivers/tty/pty.c:120\n\nwhich lock already depends on the new lock.\n\nthe existing dependency chain (in reverse order) is:\n\n-> #2 (&port->lock){-.-.}-{2:2}:\n __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]\n _raw_spin_lock_irqsave+0x35/0x50 kernel/locking/spinlock.c:159\n tty_port_tty_get drivers/tty/tty_port.c:288 [inline] \t\t<-- lock(&port->lock);\n tty_port_default_wakeup+0x1d/0xb0 drivers/tty/tty_port.c:47\n serial8250_tx_chars+0x530/0xa80 drivers/tty/serial/8250/8250_port.c:1767\n serial8250_handle_irq.part.0+0x31f/0x3d0 drivers/tty/serial/8250/8250_port.c:1854\n serial8250_handle_irq drivers/tty/serial/8250/8250_port.c:1827 [inline] \t<-- lock(&port_lock_key);\n serial8250_default_handle_irq+0xb2/0x220 drivers/tty/serial/8250/8250_port.c:1870\n serial8250_interrupt+0xfd/0x200 drivers/tty/serial/8250/8250_core.c:126\n __handle_irq_event_percpu+0x109/0xa50 kernel/irq/handle.c:156\n [...]\n\n-> #1 (&port_lock_key){-.-.}-{2:2}:\n __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]\n _raw_spin_lock_irqsave+0x35/0x50 kernel/locking/spinlock.c:159\n serial8250_console_write+0x184/0xa40 drivers/tty/serial/8250/8250_port.c:3198\n\t\t\t\t\t\t\t\t\t\t<-- lock(&port_lock_key);\n call_console_drivers kernel/printk/printk.c:1819 [inline]\n console_unlock+0x8cb/0xd00 kernel/printk/printk.c:2504\n vprintk_emit+0x1b5/0x470 kernel/printk/printk.c:2024\t\t\t<-- lock(console_owner);\n vprintk_func+0x8d/0x250 kernel/printk/printk_safe.c:394\n printk+0xba/0xed kernel/printk/printk.c:2084\n register_console+0x8b3/0xc10 kernel/printk/printk.c:2829\n univ8250_console_init+0x3a/0x46 drivers/tty/serial/8250/8250_core.c:681\n console_init+0x49d/0x6d3 kernel/printk/printk.c:2915\n start_kernel+0x5e9/0x879 init/main.c:713\n secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:241\n\n-> #0 (console_owner){....}-{0:0}:\n [...]\n lock_acquire+0x127/0x340 kernel/locking/lockdep.c:4734\n console_trylock_spinning kernel/printk/printk.c:1773 \n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/04ee31678c128a6cc7bb057ea189a8624ba5a314",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0bcf44903ef4df742dcada86ccaedd25374ffb50",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/18ca0d55e8639b911df8aae1b47598b13f9acded",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3219ac364ac3d8d30771612a6010f1e0b7fa0a28",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4af21b12a60ed2d3642284f4f85b42d7dc6ac246",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4c253caf9264d2aa47ee806a87986dd8eb91a5d9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6b9dbedbe3499fef862c4dff5217cf91f34e43b3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9834b13e8b962caa28fbcf1f422dd82413da4ede",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b3c974501d0c32258ae0e04e5cc3fb92383b40f6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49442.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49442.json
new file mode 100644
index 00000000000..99f5f198175
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49442.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49442",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:20.630",
+ "lastModified": "2025-02-26T07:01:20.630",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/base/node.c: fix compaction sysfs file leak\n\nCompaction sysfs file is created via compaction_register_node in\nregister_node. But we forgot to remove it in unregister_node. Thus\ncompaction sysfs file is leaked. Using compaction_unregister_node to fix\nthis issue."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/386e69e068177ee91cac27f2f0e6ebda1515f5ca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/39642b0feddb9c39faa6de469a94bfeb4dc0d3a9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/466134df7561aeb801baddf6666b512e0e1a1707",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/606732650a2c88e66c59c22dd5464ea0d820250e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6905be93d1ab54f73718047536fec0ca488d5315",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b3fcf1f583b1a0946d9d9bfb7362c9c186801775",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d8a5bdc767f17281da648555cdbd286f98fd98ee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/da63dc84befaa9e6079a0bc363ff0eaa975f9073",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f76ddc8fcf6d81fe89bfa4d3efcbc4fe69a91d48",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49443.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49443.json
new file mode 100644
index 00000000000..6d5e502b2b3
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49443.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49443",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:20.730",
+ "lastModified": "2025-02-26T07:01:20.730",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlist: fix a data-race around ep->rdllist\n\nep_poll() first calls ep_events_available() with no lock held and checks\nif ep->rdllist is empty by list_empty_careful(), which reads\nrdllist->prev. Thus all accesses to it need some protection to avoid\nstore/load-tearing.\n\nNote INIT_LIST_HEAD_RCU() already has the annotation for both prev\nand next.\n\nCommit bf3b9f6372c4 (\"epoll: Add busy poll support to epoll with socket\nfds.\") added the first lockless ep_events_available(), and commit\nc5a282e9635e (\"fs/epoll: reduce the scope of wq lock in epoll_wait()\")\nmade some ep_events_available() calls lockless and added single call under\na lock, finally commit e59d3c64cba6 (\"epoll: eliminate unnecessary lock\nfor zero timeout\") made the last ep_events_available() lockless.\n\nBUG: KCSAN: data-race in do_epoll_wait / do_epoll_wait\n\nwrite to 0xffff88810480c7d8 of 8 bytes by task 1802 on cpu 0:\n INIT_LIST_HEAD include/linux/list.h:38 [inline]\n list_splice_init include/linux/list.h:492 [inline]\n ep_start_scan fs/eventpoll.c:622 [inline]\n ep_send_events fs/eventpoll.c:1656 [inline]\n ep_poll fs/eventpoll.c:1806 [inline]\n do_epoll_wait+0x4eb/0xf40 fs/eventpoll.c:2234\n do_epoll_pwait fs/eventpoll.c:2268 [inline]\n __do_sys_epoll_pwait fs/eventpoll.c:2281 [inline]\n __se_sys_epoll_pwait+0x12b/0x240 fs/eventpoll.c:2275\n __x64_sys_epoll_pwait+0x74/0x80 fs/eventpoll.c:2275\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nread to 0xffff88810480c7d8 of 8 bytes by task 1799 on cpu 1:\n list_empty_careful include/linux/list.h:329 [inline]\n ep_events_available fs/eventpoll.c:381 [inline]\n ep_poll fs/eventpoll.c:1797 [inline]\n do_epoll_wait+0x279/0xf40 fs/eventpoll.c:2234\n do_epoll_pwait fs/eventpoll.c:2268 [inline]\n __do_sys_epoll_pwait fs/eventpoll.c:2281 [inline]\n __se_sys_epoll_pwait+0x12b/0x240 fs/eventpoll.c:2275\n __x64_sys_epoll_pwait+0x74/0x80 fs/eventpoll.c:2275\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nvalue changed: 0xffff88810480c7d0 -> 0xffff888103c15098\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 1 PID: 1799 Comm: syz-fuzzer Tainted: G W 5.17.0-rc7-syzkaller-dirty #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5d5d993f16be15d124be7b8ec71b28ef7b7dc3af",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cb3e48f7a35033deb9455abe3932e63cb500b9eb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d679ae94fdd5d3ab00c35078f5af5f37e068b03d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e039c0b5985999b150594126225e1ee51df7b4c9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49444.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49444.json
new file mode 100644
index 00000000000..445cdcf8dee
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49444.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49444",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:20.820",
+ "lastModified": "2025-02-26T07:01:20.820",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmodule: fix [e_shstrndx].sh_size=0 OOB access\n\nIt is trivial to craft a module to trigger OOB access in this line:\n\n\tif (info->secstrings[strhdr->sh_size - 1] != '\\0') {\n\nBUG: unable to handle page fault for address: ffffc90000aa0fff\nPGD 100000067 P4D 100000067 PUD 100066067 PMD 10436f067 PTE 0\nOops: 0000 [#1] PREEMPT SMP PTI\nCPU: 7 PID: 1215 Comm: insmod Not tainted 5.18.0-rc5-00007-g9bf578647087-dirty #10\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-4.fc34 04/01/2014\nRIP: 0010:load_module+0x19b/0x2391\n\n[rebased patch onto modules-next]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/09cb6663618a74fe5572a4931ecbf098832e79ec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/391e982bfa632b8315235d8be9c0a81374c6a19c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/45a76414b6d8b8b39c23fea53b9d20e831ae72a0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/921630e2e5124a04158129a8f22f4b425e61a858",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49445.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49445.json
new file mode 100644
index 00000000000..3bf30e0a6c9
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49445.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49445",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:20.913",
+ "lastModified": "2025-02-26T07:01:20.913",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources()\n\nIt will cause null-ptr-deref when using 'res', if platform_get_resource()\nreturns NULL, so move using 'res' after devm_ioremap_resource() that\nwill check it to avoid null-ptr-deref.\nAnd use devm_platform_get_and_ioremap_resource() to simplify code."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5376e3d904532e657fd7ca1a9b1ff3d351527b90",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5ed0519d425619b435150372cce2ffeec71581fa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e3a1ad8fd0ac11f4fa1260c23b5db71a25473254",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f991879762392c19661af5b722578089a12b305f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fb4f022b3ad1f3ff3cafdbc7d51896090ae17701",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49446.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49446.json
new file mode 100644
index 00000000000..6c8a00ad360
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49446.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49446",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:21.010",
+ "lastModified": "2025-02-26T07:01:21.010",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvdimm: Fix firmware activation deadlock scenarios\n\nLockdep reports the following deadlock scenarios for CXL root device\npower-management, device_prepare(), operations, and device_shutdown()\noperations for 'nd_region' devices:\n\n Chain exists of:\n &nvdimm_region_key --> &nvdimm_bus->reconfig_mutex --> system_transition_mutex\n\n Possible unsafe locking scenario:\n\n CPU0 CPU1\n ---- ----\n lock(system_transition_mutex);\n lock(&nvdimm_bus->reconfig_mutex);\n lock(system_transition_mutex);\n lock(&nvdimm_region_key);\n\n Chain exists of:\n &cxl_nvdimm_bridge_key --> acpi_scan_lock --> &cxl_root_key\n\n Possible unsafe locking scenario:\n\n CPU0 CPU1\n ---- ----\n lock(&cxl_root_key);\n lock(acpi_scan_lock);\n lock(&cxl_root_key);\n lock(&cxl_nvdimm_bridge_key);\n\nThese stem from holding nvdimm_bus_lock() over hibernate_quiet_exec()\nwhich walks the entire system device topology taking device_lock() along\nthe way. The nvdimm_bus_lock() is protecting against unregistration,\nmultiple simultaneous ops callers, and preventing activate_show() from\nracing activate_store(). For the first 2, the lock is redundant.\nUnregistration already flushes all ops users, and sysfs already prevents\nmultiple threads to be active in an ops handler at the same time. For\nthe last userspace should already be waiting for its last\nactivate_store() to complete, and does not need activate_show() to flush\nthe write side, so this lock usage can be deleted in these attributes."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2f97ebc58d5fc83ca1528cd553fa725472ab3ca8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2fd853fdb40afc052de338693df1372f2ead7be7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/641649f31e20df630310f5c22f26c071acc676d4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ceb924ee16b2c8e48dcac3d9ad6be01c40b5a228",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e6829d1bd3c4b58296ee9e412f7ed4d6cb390192",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49447.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49447.json
new file mode 100644
index 00000000000..dfff9514ece
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49447.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49447",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:21.103",
+ "lastModified": "2025-02-26T07:01:21.103",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nARM: hisi: Add missing of_node_put after of_find_compatible_node\n\nof_find_compatible_node will increment the refcount of the returned\ndevice_node. Calling of_node_put() to avoid the refcount leak"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/21a3effe446dd6dc5eed7fe897c2f9b88c9a5d6d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/45d211668d33c49d73f5213e8c2b58468108647c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/46cb7868811d025c3d29c10d18b3422db1cf20d5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9bc72e47d4630d58a840a66a869c56b29554cfe4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a3265a9440030068547a20dfee646666f3ca5278",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cafaaae4bb9ce84a2791fa29bf6907a9466c3883",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dd4be8ecfb41a29e7c4e551b4e866157ce4a3429",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e109058165137ef42841abd989f080adfefa14fa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f8da78b2bae1f54746647a2bb44f8bd6025c57af",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49448.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49448.json
new file mode 100644
index 00000000000..9ec50aff03f
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49448.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49448",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:21.200",
+ "lastModified": "2025-02-26T07:01:21.200",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: bcm: Check for NULL return of devm_kzalloc()\n\nAs the potential failure of allocation, devm_kzalloc() may return NULL. Then\nthe 'pd->pmb' and the follow lines of code may bring null pointer dereference.\n\nTherefore, it is better to check the return value of devm_kzalloc() to avoid\nthis confusion."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/36339ea7bae4943be01c8e9545e46e334591fecd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5650e103bfc70156001615861fb8aafb3947da6e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b48b98743b568bb219152ba2e15af6ef0d3d8a9b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b4bd2aafacce48db26b0a213d849818d940556dd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49449.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49449.json
new file mode 100644
index 00000000000..10cd4adee32
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49449.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49449",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:21.290",
+ "lastModified": "2025-02-26T07:01:21.290",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources()\n\nIt will cause null-ptr-deref when using 'res', if platform_get_resource()\nreturns NULL, so move using 'res' after devm_ioremap_resource() that\nwill check it to avoid null-ptr-deref.\nAnd use devm_platform_get_and_ioremap_resource() to simplify code."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/01f9e02e0f13df3fd291676dc80054e977be1601",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2f661477c2bb8068194dbba9738d05219f111c6e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/34c719b8fdfbd0c7c54cae56e6b0f16e9f8bf03e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b646e0cfeb38bf5f1944fd548f1dfa9b129fa00c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c16b59d445135c8026a04e388d8b2762feaa3b3b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49450.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49450.json
new file mode 100644
index 00000000000..424c9cb9279
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49450.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49450",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:21.390",
+ "lastModified": "2025-02-26T07:01:21.390",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: Fix listen() setting the bar too high for the prealloc rings\n\nAF_RXRPC's listen() handler lets you set the backlog up to 32 (if you bump\nup the sysctl), but whilst the preallocation circular buffers have 32 slots\nin them, one of them has to be a dead slot because we're using CIRC_CNT().\n\nThis means that listen(rxrpc_sock, 32) will cause an oops when the socket\nis closed because rxrpc_service_prealloc_one() allocated one too many calls\nand rxrpc_discard_prealloc() won't then be able to get rid of them because\nit'll think the ring is empty. rxrpc_release_calls_on_socket() then tries\nto abort them, but oopses because call->peer isn't yet set.\n\nFix this by setting the maximum backlog to RXRPC_BACKLOG_MAX - 1 to match\nthe ring capacity.\n\n BUG: kernel NULL pointer dereference, address: 0000000000000086\n ...\n RIP: 0010:rxrpc_send_abort_packet+0x73/0x240 [rxrpc]\n Call Trace:\n \n ? __wake_up_common_lock+0x7a/0x90\n ? rxrpc_notify_socket+0x8e/0x140 [rxrpc]\n ? rxrpc_abort_call+0x4c/0x60 [rxrpc]\n rxrpc_release_calls_on_socket+0x107/0x1a0 [rxrpc]\n rxrpc_release+0xc9/0x1c0 [rxrpc]\n __sock_release+0x37/0xa0\n sock_close+0x11/0x20\n __fput+0x89/0x240\n task_work_run+0x59/0x90\n do_exit+0x319/0xaa0"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/369de57492c4f1a42563c5a3bd365822ca3bfc79",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4a3a78b7918bdd723d8c7c9786522ca969bffcc4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5b4826657d36c218e9f08e8d3223b0edce3de88f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/616f76498d5ddf26b997caf64a95cda3c8a55533",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/61fb38cfbb1d54d3dafd0c25752f684b3cd00b32",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/88e22159750b0d55793302eeed8ee603f5c1a95c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/91b34bf0409f43bb60453bab23c5beadd726d022",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b3a9b227d5e7467b8518160ff034ea22bb9de573",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e198f1930050e3115c80b67d9249f80f98a27c67",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49451.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49451.json
new file mode 100644
index 00000000000..4c919435325
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49451.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49451",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:21.490",
+ "lastModified": "2025-02-26T07:01:21.490",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Fix list protocols enumeration in the base protocol\n\nWhile enumerating protocols implemented by the SCMI platform using\nBASE_DISCOVER_LIST_PROTOCOLS, the number of returned protocols is\ncurrently validated in an improper way since the check employs a sum\nbetween unsigned integers that could overflow and cause the check itself\nto be silently bypassed if the returned value 'loop_num_ret' is big\nenough.\n\nFix the validation avoiding the addition."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1052f22e127d0c34c3387bb389424ba1c61491ff",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2ccfcd7a09c826516edcfe464b05071961aada3f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/444a2d27fe9867d0da4b28fc45b793f32e099ab8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6e7978695f4a6cbd83616b5a702b77fa2087b247",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8009120e0354a67068e920eb10dce532391361d0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/98342148a8cd242855d7e257f298c966c96dba9f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b0e4bafac8963c2d85ee18d3d01f393735acceec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49452.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49452.json
new file mode 100644
index 00000000000..92731d24a14
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49452.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49452",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:21.587",
+ "lastModified": "2025-02-26T07:01:21.587",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndpaa2-eth: retrieve the virtual address before dma_unmap\n\nThe TSO header was DMA unmapped before the virtual address was retrieved\nand then used to free the buffer. This meant that we were actually\nremoving the DMA map and then trying to search for it to help in\nretrieving the virtual address. This lead to a invalid virtual address\nbeing used in the kfree call.\n\nFix this by calling dpaa2_iova_to_virt() prior to the dma_unmap call.\n\n[ 487.231819] Unable to handle kernel paging request at virtual address fffffd9807000008\n\n(...)\n\n[ 487.354061] Hardware name: SolidRun LX2160A Honeycomb (DT)\n[ 487.359535] pstate: a0400005 (NzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 487.366485] pc : kfree+0xac/0x304\n[ 487.369799] lr : kfree+0x204/0x304\n[ 487.373191] sp : ffff80000c4eb120\n[ 487.376493] x29: ffff80000c4eb120 x28: ffff662240c46400 x27: 0000000000000001\n[ 487.383621] x26: 0000000000000001 x25: ffff662246da0cc0 x24: ffff66224af78000\n[ 487.390748] x23: ffffad184f4ce008 x22: ffffad1850185000 x21: ffffad1838d13cec\n[ 487.397874] x20: ffff6601c0000000 x19: fffffd9807000000 x18: 0000000000000000\n[ 487.405000] x17: ffffb910cdc49000 x16: ffffad184d7d9080 x15: 0000000000004000\n[ 487.412126] x14: 0000000000000008 x13: 000000000000ffff x12: 0000000000000000\n[ 487.419252] x11: 0000000000000004 x10: 0000000000000001 x9 : ffffad184d7d927c\n[ 487.426379] x8 : 0000000000000000 x7 : 0000000ffffffd1d x6 : ffff662240a94900\n[ 487.433505] x5 : 0000000000000003 x4 : 0000000000000009 x3 : ffffad184f4ce008\n[ 487.440632] x2 : ffff662243eec000 x1 : 0000000100000100 x0 : fffffc0000000000\n[ 487.447758] Call trace:\n[ 487.450194] kfree+0xac/0x304\n[ 487.453151] dpaa2_eth_free_tx_fd.isra.0+0x33c/0x3e0 [fsl_dpaa2_eth]\n[ 487.459507] dpaa2_eth_tx_conf+0x100/0x2e0 [fsl_dpaa2_eth]\n[ 487.464989] dpaa2_eth_poll+0xdc/0x380 [fsl_dpaa2_eth]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/06d129946a71f3159b3b40ee95549183edf2c79d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ba5fe3dd4833bbc03609c5c0c2dd2cea5fa5addf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49453.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49453.json
new file mode 100644
index 00000000000..e1d2f0194b2
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49453.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49453",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:21.673",
+ "lastModified": "2025-02-26T07:01:21.673",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc\n\nThe allocation funciton devm_kcalloc may fail and return a null pointer,\nwhich would cause a null-pointer dereference later.\nIt might be better to check it and directly return -ENOMEM just like the\nusage of devm_kcalloc in previous code."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/01ba41a359622ab256ce4d4f8b94c67165ae3daf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/05efc4591f80582b6fe53366b70b6a35a42fd255",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7cef9274fa1b8506949d74bc45aef072b890824a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ba56291e297d28aa6eb82c5c1964fae2d7594746",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c4e188869406b47ac3350920bf165be303cb1c96",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49454.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49454.json
new file mode 100644
index 00000000000..ee3e6f79efb
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49454.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49454",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:21.767",
+ "lastModified": "2025-02-26T07:01:21.767",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: mediatek: Fix refcount leak in mtk_pcie_subsys_powerup()\n\nThe of_find_compatible_node() function returns a node pointer with\nrefcount incremented, We should use of_node_put() on it when done\nAdd the missing of_node_put() to release the refcount."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/09b2d906d78ddf5042b1f3e0091835fc6997e8a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/214e0d8fe4a813ae6ffd62bc2dfe7544c20914f4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4cef4237d6c37257cb6ddc397723e9c0dded0efe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ad1c9d13e04509ae24fae8dd2897148657323519",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49455.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49455.json
new file mode 100644
index 00000000000..bae3b545c1f
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49455.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49455",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:21.857",
+ "lastModified": "2025-02-26T07:01:21.857",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: ocxl: fix possible double free in ocxl_file_register_afu\n\ninfo_release() will be called in device_unregister() when info->dev's\nreference count is 0. So there is no need to call ocxl_afu_put() and\nkfree() again.\n\nFix this by adding free_minor() and return to err_unregister error path."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/252768d32e92c1214aeebb5fec0844ca479bcf5c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8fb674216835e1f0c143762696d645facebb4685",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/950cf957fe34d40d63dfa3bf3968210430b6491e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9e9087cf34ee69f4e95d146ac29385d6e367a97b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/de65c32ace9aa70d51facc61ba986607075e3a25",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ee89d8dee55ab4b3b8ad8b70866b2841ba334767",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49456.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49456.json
new file mode 100644
index 00000000000..f34ce987a4e
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49456.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49456",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:21.950",
+ "lastModified": "2025-02-26T07:01:21.950",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbonding: fix missed rcu protection\n\nWhen removing the rcu_read_lock in bond_ethtool_get_ts_info() as\ndiscussed [1], I didn't notice it could be called via setsockopt,\nwhich doesn't hold rcu lock, as syzbot pointed:\n\n stack backtrace:\n CPU: 0 PID: 3599 Comm: syz-executor317 Not tainted 5.18.0-rc5-syzkaller-01392-g01f4685797a5 #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\n Call Trace:\n \n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106\n bond_option_active_slave_get_rcu include/net/bonding.h:353 [inline]\n bond_ethtool_get_ts_info+0x32c/0x3a0 drivers/net/bonding/bond_main.c:5595\n __ethtool_get_ts_info+0x173/0x240 net/ethtool/common.c:554\n ethtool_get_phc_vclocks+0x99/0x110 net/ethtool/common.c:568\n sock_timestamping_bind_phc net/core/sock.c:869 [inline]\n sock_set_timestamping+0x3a3/0x7e0 net/core/sock.c:916\n sock_setsockopt+0x543/0x2ec0 net/core/sock.c:1221\n __sys_setsockopt+0x55e/0x6a0 net/socket.c:2223\n __do_sys_setsockopt net/socket.c:2238 [inline]\n __se_sys_setsockopt net/socket.c:2235 [inline]\n __x64_sys_setsockopt+0xba/0x150 net/socket.c:2235\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n RIP: 0033:0x7f8902c8eb39\n\nFix it by adding rcu_read_lock and take a ref on the real_dev.\nSince dev_hold() and dev_put() can take NULL these days, we can\nskip checking if real_dev exist.\n\n[1] https://lore.kernel.org/netdev/27565.1642742439@famine/"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1b66a533c47d29b38af8e05fbb53b609a5ba3a4e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/85eed460681da71b359ed906bce4d800081db854",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9b80ccda233fa6c59de411bf889cc4d0e028f2c7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49457.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49457.json
new file mode 100644
index 00000000000..33240e0767f
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49457.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49457",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:22.043",
+ "lastModified": "2025-02-26T07:01:22.043",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nARM: versatile: Add missing of_node_put in dcscb_init\n\nThe device_node pointer is returned by of_find_compatible_node\nwith refcount incremented. We should use of_node_put() to avoid\nthe refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/23b44f9c649bbef10b45fa33080cd8b4166800ae",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2d7b23db35254b7d46e852967090c64cdccf24da",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3c6006faed9aba5144b33176d061031a9be66954",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/83c329b980bddbc8c6a3d287d91f2103a4d4a860",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a0fc05cd17617e63fc13ad0c01f3f0afd890d8ec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bbdfb7d4f036118d36415a2575efa6f5246505ae",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d146e2a9864ade19914494de3fb520390b415d58",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d6de7b181c29cd4578ec139aafb5eac062abbe1b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fcd1999ba97445a12cc394f5f42ffd9116bf0185",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49458.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49458.json
new file mode 100644
index 00000000000..9fce5bc9cad
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49458.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49458",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:22.133",
+ "lastModified": "2025-02-26T07:01:22.133",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm: don't free the IRQ if it was not requested\n\nAs msm_drm_uninit() is called from the msm_drm_init() error path,\nadditional care should be necessary as not to call the free_irq() for\nthe IRQ that was not requested before (because an error occured earlier\nthan the request_irq() call).\n\nThis fixed the issue reported with the following backtrace:\n\n[ 8.571329] Trying to free already-free IRQ 187\n[ 8.571339] WARNING: CPU: 0 PID: 76 at kernel/irq/manage.c:1895 free_irq+0x1e0/0x35c\n[ 8.588746] Modules linked in: pmic_glink pdr_interface fastrpc qrtr_smd snd_soc_hdmi_codec msm fsa4480 gpu_sched drm_dp_aux_bus qrtr i2c_qcom_geni crct10dif_ce qcom_stats qcom_q6v5_pas drm_display_helper gpi qcom_pil_info drm_kms_helper qcom_q6v5 qcom_sysmon qcom_common qcom_glink_smem qcom_rng mdt_loader qmi_helpers phy_qcom_qmp ufs_qcom typec qnoc_sm8350 socinfo rmtfs_mem fuse drm ipv6\n[ 8.624154] CPU: 0 PID: 76 Comm: kworker/u16:2 Not tainted 5.18.0-rc5-next-20220506-00033-g6cee8cab6089-dirty #419\n[ 8.624161] Hardware name: Qualcomm Technologies, Inc. SM8350 HDK (DT)\n[ 8.641496] Workqueue: events_unbound deferred_probe_work_func\n[ 8.647510] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 8.654681] pc : free_irq+0x1e0/0x35c\n[ 8.658454] lr : free_irq+0x1e0/0x35c\n[ 8.662228] sp : ffff800008ab3950\n[ 8.665642] x29: ffff800008ab3950 x28: 0000000000000000 x27: ffff16350f56a700\n[ 8.672994] x26: ffff1635025df080 x25: ffff16350251badc x24: ffff16350251bb90\n[ 8.680343] x23: 0000000000000000 x22: 00000000000000bb x21: ffff16350e8f9800\n[ 8.687690] x20: ffff16350251ba00 x19: ffff16350cbd5880 x18: ffffffffffffffff\n[ 8.695039] x17: 0000000000000000 x16: ffffa2dd12179434 x15: ffffa2dd1431d02d\n[ 8.702391] x14: 0000000000000000 x13: ffffa2dd1431d028 x12: 662d79646165726c\n[ 8.709740] x11: ffffa2dd13fd2438 x10: 000000000000000a x9 : 00000000000000bb\n[ 8.717111] x8 : ffffa2dd13fd23f0 x7 : ffff800008ab3750 x6 : 00000000fffff202\n[ 8.724487] x5 : ffff16377e870a18 x4 : 00000000fffff202 x3 : ffff735a6ae1b000\n[ 8.731851] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff1635015f8000\n[ 8.739217] Call trace:\n[ 8.741755] free_irq+0x1e0/0x35c\n[ 8.745198] msm_drm_uninit.isra.0+0x14c/0x294 [msm]\n[ 8.750548] msm_drm_bind+0x28c/0x5d0 [msm]\n[ 8.755081] try_to_bring_up_aggregate_device+0x164/0x1d0\n[ 8.760657] __component_add+0xa0/0x170\n[ 8.764626] component_add+0x14/0x20\n[ 8.768337] dp_display_probe+0x2a4/0x464 [msm]\n[ 8.773242] platform_probe+0x68/0xe0\n[ 8.777043] really_probe.part.0+0x9c/0x28c\n[ 8.781368] __driver_probe_device+0x98/0x144\n[ 8.785871] driver_probe_device+0x40/0x140\n[ 8.790191] __device_attach_driver+0xb4/0x120\n[ 8.794788] bus_for_each_drv+0x78/0xd0\n[ 8.798751] __device_attach+0xdc/0x184\n[ 8.802713] device_initial_probe+0x14/0x20\n[ 8.807031] bus_probe_device+0x9c/0xa4\n[ 8.810991] deferred_probe_work_func+0x88/0xc0\n[ 8.815667] process_one_work+0x1d0/0x320\n[ 8.819809] worker_thread+0x14c/0x444\n[ 8.823688] kthread+0x10c/0x110\n[ 8.827036] ret_from_fork+0x10/0x20\n\nPatchwork: https://patchwork.freedesktop.org/patch/485422/"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/577e2a9dfc8fba7938aaf75db63fae7e328cc3cb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/59023c4fb1ab3de0fa001681650f662c253c7fd7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b288ec4439c1dad304c1862bf6b0be78d9b1b2b2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/beb81c13d020ceb7f8693e65464162e5f249218e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49459.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49459.json
new file mode 100644
index 00000000000..7475425dfa2
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49459.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49459",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:22.230",
+ "lastModified": "2025-02-26T07:01:22.230",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe\n\nplatform_get_resource() may return NULL, add proper check to\navoid potential NULL dereferencing."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/61621e042c22b47d1eadee617bdd26835294b425",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/79098339ac2065f4b4352ef5921628970b6f47e6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b3461ccaa5d2588568d865faee285512ad448049",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e20d136ec7d6f309989c447638365840d3424c8e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ee9b6b02e8c140323ed46d6602d805ea735c7719",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef1235c6514a58f274246cf4a2d5f4e40af539ce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49460.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49460.json
new file mode 100644
index 00000000000..166790624f1
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49460.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49460",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:22.327",
+ "lastModified": "2025-02-26T07:01:22.327",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPM / devfreq: rk3399_dmc: Disable edev on remove()\n\nOtherwise we hit an unablanced enable-count when unbinding the DFI\ndevice:\n\n[ 1279.659119] ------------[ cut here ]------------\n[ 1279.659179] WARNING: CPU: 2 PID: 5638 at drivers/devfreq/devfreq-event.c:360 devfreq_event_remove_edev+0x84/0x8c\n...\n[ 1279.659352] Hardware name: Google Kevin (DT)\n[ 1279.659363] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO BTYPE=--)\n[ 1279.659371] pc : devfreq_event_remove_edev+0x84/0x8c\n[ 1279.659380] lr : devm_devfreq_event_release+0x1c/0x28\n...\n[ 1279.659571] Call trace:\n[ 1279.659582] devfreq_event_remove_edev+0x84/0x8c\n[ 1279.659590] devm_devfreq_event_release+0x1c/0x28\n[ 1279.659602] release_nodes+0x1cc/0x244\n[ 1279.659611] devres_release_all+0x44/0x60\n[ 1279.659621] device_release_driver_internal+0x11c/0x1ac\n[ 1279.659629] device_driver_detach+0x20/0x2c\n[ 1279.659641] unbind_store+0x7c/0xb0\n[ 1279.659650] drv_attr_store+0x2c/0x40\n[ 1279.659663] sysfs_kf_write+0x44/0x58\n[ 1279.659672] kernfs_fop_write_iter+0xf4/0x190\n[ 1279.659684] vfs_write+0x2b0/0x2e4\n[ 1279.659693] ksys_write+0x80/0xec\n[ 1279.659701] __arm64_sys_write+0x24/0x30\n[ 1279.659714] el0_svc_common+0xf0/0x1d8\n[ 1279.659724] do_el0_svc_compat+0x28/0x3c\n[ 1279.659738] el0_svc_compat+0x10/0x1c\n[ 1279.659746] el0_sync_compat_handler+0xa8/0xcc\n[ 1279.659758] el0_sync_compat+0x188/0x1c0\n[ 1279.659768] ---[ end trace cec200e5094155b4 ]---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2fccf9e6050e0e3b8b4cd275d41daf7f7fa22804",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/664736e2cc09e504ce58ec61164d029d1f2651bb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/86b091b6894c449d2734de7aa7d79ccb33ffd97d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a0180e324a9a63de8f770da300477b48cb4a53f1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a9c2b23a7ac6ab19214cad8cac8af8608a4d9cef",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cb1be1d4be18fe286ba5a67d928598378fd7fbe5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fb089b6f21de03a685dd31df3789bbb01c59f8e3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49461.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49461.json
new file mode 100644
index 00000000000..0ddf5bed421
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49461.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49461",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:22.423",
+ "lastModified": "2025-02-26T07:01:22.423",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\namt: fix memory leak for advertisement message\n\nWhen a gateway receives an advertisement message, it extracts relay\ninformation and then it should be freed.\nBut the advertisement handler doesn't free it.\nSo, memory leak would occur."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/19bb2d57eac86a368839a92117d8a10ab7183623",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e7322da399fb86a2072f008b56f7160afa1b2051",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fe29794c3585d039fefebaa2b5a4932a627ad4fd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49462.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49462.json
new file mode 100644
index 00000000000..eb2a3aceeee
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49462.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49462",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:22.517",
+ "lastModified": "2025-02-26T07:01:22.517",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/a6xx: Fix refcount leak in a6xx_gpu_init\n\nof_parse_phandle() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\n\na6xx_gmu_init() passes the node to of_find_device_by_node()\nand of_dma_configure(), of_find_device_by_node() will takes its\nreference, of_dma_configure() doesn't need the node after usage.\n\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/06907a374f1b74f8f2fb30720dc6df81331e4fb5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/48e82ce8cdb19c20a5020fa446b286d6a147450c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/65ddbc0d26824e2a5d6154d01d8cf39344900213",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6832e36f156ea35a6ed74bca72727806116effdd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c56de483093d7ad0782327f95dda7da97bc4c315",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/edff4c1af831d0c02e654eed9da7d74174de49d5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49463.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49463.json
new file mode 100644
index 00000000000..997216b286a
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49463.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49463",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:22.603",
+ "lastModified": "2025-02-26T07:01:22.603",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe\n\nof_find_node_by_name() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/09700c504d8e63faffd2a2235074e8c5d130cb8f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0ec10303c10833c1bcba7a1bde2f297e494d5464",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3ade442ea5d3512a3c67984489ab4d8a6fb3b29f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8bbf522a2c51ef939d0e8835e236bfcd252193af",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ec0925b731697db7cab5944a3e55d2d58bb3d075",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49464.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49464.json
new file mode 100644
index 00000000000..cb6046bb05f
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49464.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49464",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:22.697",
+ "lastModified": "2025-02-26T07:01:22.697",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: fix buffer copy overflow of ztailpacking feature\n\nI got some KASAN report as below:\n\n[ 46.959738] ==================================================================\n[ 46.960430] BUG: KASAN: use-after-free in z_erofs_shifted_transform+0x2bd/0x370\n[ 46.960430] Read of size 4074 at addr ffff8880300c2f8e by task fssum/188\n...\n[ 46.960430] Call Trace:\n[ 46.960430] \n[ 46.960430] dump_stack_lvl+0x41/0x5e\n[ 46.960430] print_report.cold+0xb2/0x6b7\n[ 46.960430] ? z_erofs_shifted_transform+0x2bd/0x370\n[ 46.960430] kasan_report+0x8a/0x140\n[ 46.960430] ? z_erofs_shifted_transform+0x2bd/0x370\n[ 46.960430] kasan_check_range+0x14d/0x1d0\n[ 46.960430] memcpy+0x20/0x60\n[ 46.960430] z_erofs_shifted_transform+0x2bd/0x370\n[ 46.960430] z_erofs_decompress_pcluster+0xaae/0x1080\n\nThe root cause is that the tail pcluster won't be a complete filesystem\nblock anymore. So if ztailpacking is used, the second part of an\nuncompressed tail pcluster may not be ``rq->pageofs_out``."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4d53a625f29074e7b8236c2c0e0922edb7608df9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6b59e1907f58cf877c563dcf013159eb9f994b64",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dcbe6803fffd387f72b48c2373b5f5ed12a5804b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49465.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49465.json
new file mode 100644
index 00000000000..fd3fffe5773
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49465.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49465",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:22.787",
+ "lastModified": "2025-02-26T07:01:22.787",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-throttle: Set BIO_THROTTLED when bio has been throttled\n\n1.In current process, all bio will set the BIO_THROTTLED flag\nafter __blk_throtl_bio().\n\n2.If bio needs to be throttled, it will start the timer and\nstop submit bio directly. Bio will submit in\nblk_throtl_dispatch_work_fn() when the timer expires.But in\nthe current process, if bio is throttled. The BIO_THROTTLED\nwill be set to bio after timer start. If the bio has been\ncompleted, it may cause use-after-free blow.\n\nBUG: KASAN: use-after-free in blk_throtl_bio+0x12f0/0x2c70\nRead of size 2 at addr ffff88801b8902d4 by task fio/26380\n\n dump_stack+0x9b/0xce\n print_address_description.constprop.6+0x3e/0x60\n kasan_report.cold.9+0x22/0x3a\n blk_throtl_bio+0x12f0/0x2c70\n submit_bio_checks+0x701/0x1550\n submit_bio_noacct+0x83/0xc80\n submit_bio+0xa7/0x330\n mpage_readahead+0x380/0x500\n read_pages+0x1c1/0xbf0\n page_cache_ra_unbounded+0x471/0x6f0\n do_page_cache_ra+0xda/0x110\n ondemand_readahead+0x442/0xae0\n page_cache_async_ra+0x210/0x300\n generic_file_buffered_read+0x4d9/0x2130\n generic_file_read_iter+0x315/0x490\n blkdev_read_iter+0x113/0x1b0\n aio_read+0x2ad/0x450\n io_submit_one+0xc8e/0x1d60\n __se_sys_io_submit+0x125/0x350\n do_syscall_64+0x2d/0x40\n entry_SYSCALL_64_after_hwframe+0x44/0xa9\n\nAllocated by task 26380:\n kasan_save_stack+0x19/0x40\n __kasan_kmalloc.constprop.2+0xc1/0xd0\n kmem_cache_alloc+0x146/0x440\n mempool_alloc+0x125/0x2f0\n bio_alloc_bioset+0x353/0x590\n mpage_alloc+0x3b/0x240\n do_mpage_readpage+0xddf/0x1ef0\n mpage_readahead+0x264/0x500\n read_pages+0x1c1/0xbf0\n page_cache_ra_unbounded+0x471/0x6f0\n do_page_cache_ra+0xda/0x110\n ondemand_readahead+0x442/0xae0\n page_cache_async_ra+0x210/0x300\n generic_file_buffered_read+0x4d9/0x2130\n generic_file_read_iter+0x315/0x490\n blkdev_read_iter+0x113/0x1b0\n aio_read+0x2ad/0x450\n io_submit_one+0xc8e/0x1d60\n __se_sys_io_submit+0x125/0x350\n do_syscall_64+0x2d/0x40\n entry_SYSCALL_64_after_hwframe+0x44/0xa9\n\nFreed by task 0:\n kasan_save_stack+0x19/0x40\n kasan_set_track+0x1c/0x30\n kasan_set_free_info+0x1b/0x30\n __kasan_slab_free+0x111/0x160\n kmem_cache_free+0x94/0x460\n mempool_free+0xd6/0x320\n bio_free+0xe0/0x130\n bio_put+0xab/0xe0\n bio_endio+0x3a6/0x5d0\n blk_update_request+0x590/0x1370\n scsi_end_request+0x7d/0x400\n scsi_io_completion+0x1aa/0xe50\n scsi_softirq_done+0x11b/0x240\n blk_mq_complete_request+0xd4/0x120\n scsi_mq_done+0xf0/0x200\n virtscsi_vq_done+0xbc/0x150\n vring_interrupt+0x179/0x390\n __handle_irq_event_percpu+0xf7/0x490\n handle_irq_event_percpu+0x7b/0x160\n handle_irq_event+0xcc/0x170\n handle_edge_irq+0x215/0xb20\n common_interrupt+0x60/0x120\n asm_common_interrupt+0x1e/0x40\n\nFix this by move BIO_THROTTLED set into the queue_lock."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0cfc8a0fb07cde61915e4a77c4794c47de3114a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5a011f889b4832aa80c2a872a5aade5c48d2756f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/935fa666534d7b7185e8c6b0191cd06281be4290",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49466.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49466.json
new file mode 100644
index 00000000000..42947a05eb9
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49466.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49466",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:22.880",
+ "lastModified": "2025-02-26T07:01:22.880",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: scmi: Fix refcount leak in scmi_regulator_probe\n\nof_find_node_by_name() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/299a002161c7bfb72e99ba45e5b660aecc344ea0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4a59c763ef9b68c711dc2fd2ef4a6648da5480ee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/68d6c8476fd4f448e70e0ab31ff972838ac41dae",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9ebbfa73d69909b7c737f599fd4ebd42318fc881",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49467.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49467.json
new file mode 100644
index 00000000000..15225477ae7
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49467.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49467",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:22.967",
+ "lastModified": "2025-02-26T07:01:22.967",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: msm: fix possible memory leak in mdp5_crtc_cursor_set()\n\ndrm_gem_object_lookup will call drm_gem_object_get inside. So cursor_bo\nneeds to be put when msm_gem_get_and_pin_iova fails."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/33546183c16c7b9650682dc610bedd732d9c6919",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/449374565f349d4233beec811d4286fdfe5de44b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/656aa3c51fc662064f17179b38ec3ce43af53bca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/947a844bb3ebff0f4736d244d792ce129f6700d7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d544880482a5558ec06393b1b3d5dc9275b7a32b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d63ffe3fb3f8327ca21cf91b6a14a2961bc629b4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f8cd192752a1f613b14eee77783c6f0aebb49691",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49468.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49468.json
new file mode 100644
index 00000000000..0562892fa24
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49468.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49468",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:23.063",
+ "lastModified": "2025-02-26T07:01:23.063",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal/core: Fix memory leak in __thermal_cooling_device_register()\n\nI got memory leak as follows when doing fault injection test:\n\nunreferenced object 0xffff888010080000 (size 264312):\n comm \"182\", pid 102533, jiffies 4296434960 (age 10.100s)\n hex dump (first 32 bytes):\n 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N..........\n ff ff ff ff ff ff ff ff 40 7f 1f b9 ff ff ff ff ........@.......\n backtrace:\n [<0000000038b2f4fc>] kmalloc_order_trace+0x1d/0x110 mm/slab_common.c:969\n [<00000000ebcb8da5>] __kmalloc+0x373/0x420 include/linux/slab.h:510\n [<0000000084137f13>] thermal_cooling_device_setup_sysfs+0x15d/0x2d0 include/linux/slab.h:586\n [<00000000352b8755>] __thermal_cooling_device_register+0x332/0xa60 drivers/thermal/thermal_core.c:927\n [<00000000fb9f331b>] devm_thermal_of_cooling_device_register+0x6b/0xf0 drivers/thermal/thermal_core.c:1041\n [<000000009b8012d2>] max6650_probe.cold+0x557/0x6aa drivers/hwmon/max6650.c:211\n [<00000000da0b7e04>] i2c_device_probe+0x472/0xac0 drivers/i2c/i2c-core-base.c:561\n\nIf device_register() fails, thermal_cooling_device_destroy_sysfs() need be called\nto free the memory allocated in thermal_cooling_device_setup_sysfs()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/18530bedd221160823f63ccc20dd55c7a03edbcf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/21ccc58b671aea924f2481cf5c1cf0ebbfd3552d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3802171f0b5b8b831f4ade5c827547cb323a5bb2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/98a160e898c0f4a979af9de3ab48b4b1d42d1dbb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9abdf0c0184230f0cb5c6685aabf33dda89aa9fb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49469.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49469.json
new file mode 100644
index 00000000000..f9eb99ce86a
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49469.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49469",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:23.157",
+ "lastModified": "2025-02-26T07:01:23.157",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix anon_dev leak in create_subvol()\n\nWhen btrfs_qgroup_inherit(), btrfs_alloc_tree_block, or\nbtrfs_insert_root() fail in create_subvol(), we return without freeing\nanon_dev. Reorganize the error handling in create_subvol() to fix this."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2256e901f5bddc56e24089c96f27b77da932dfcc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7a875ad8706f0903a0e812e0dd701956ee9826ff",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d887b3de318834f9aa637ecf79c6bc66cba7c69a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49470.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49470.json
new file mode 100644
index 00000000000..521340645a0
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49470.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49470",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:23.240",
+ "lastModified": "2025-02-26T07:01:23.240",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event\n\nWe should not access skb buffer data anymore after hci_recv_frame was\ncalled.\n\n[ 39.634809] BUG: KASAN: use-after-free in btmtksdio_recv_event+0x1b0\n[ 39.634855] Read of size 1 at addr ffffff80cf28a60d by task kworker\n[ 39.634962] Call trace:\n[ 39.634974] dump_backtrace+0x0/0x3b8\n[ 39.634999] show_stack+0x20/0x2c\n[ 39.635016] dump_stack_lvl+0x60/0x78\n[ 39.635040] print_address_description+0x70/0x2f0\n[ 39.635062] kasan_report+0x154/0x194\n[ 39.635079] __asan_report_load1_noabort+0x44/0x50\n[ 39.635099] btmtksdio_recv_event+0x1b0/0x1c4\n[ 39.635129] btmtksdio_txrx_work+0x6cc/0xac4\n[ 39.635157] process_one_work+0x560/0xc5c\n[ 39.635177] worker_thread+0x7ec/0xcc0\n[ 39.635195] kthread+0x2d0/0x3d0\n[ 39.635215] ret_from_fork+0x10/0x20\n[ 39.635247] Allocated by task 0:\n[ 39.635260] (stack is not available)\n[ 39.635281] Freed by task 2392:\n[ 39.635295] kasan_save_stack+0x38/0x68\n[ 39.635319] kasan_set_track+0x28/0x3c\n[ 39.635338] kasan_set_free_info+0x28/0x4c\n[ 39.635357] ____kasan_slab_free+0x104/0x150\n[ 39.635374] __kasan_slab_free+0x18/0x28\n[ 39.635391] slab_free_freelist_hook+0x114/0x248\n[ 39.635410] kfree+0xf8/0x2b4\n[ 39.635427] skb_free_head+0x58/0x98\n[ 39.635447] skb_release_data+0x2f4/0x410\n[ 39.635464] skb_release_all+0x50/0x60\n[ 39.635481] kfree_skb+0xc8/0x25c\n[ 39.635498] hci_event_packet+0x894/0xca4 [bluetooth]\n[ 39.635721] hci_rx_work+0x1c8/0x68c [bluetooth]\n[ 39.635925] process_one_work+0x560/0xc5c\n[ 39.635951] worker_thread+0x7ec/0xcc0\n[ 39.635970] kthread+0x2d0/0x3d0\n[ 39.635990] ret_from_fork+0x10/0x20\n[ 39.636021] The buggy address belongs to the object at ffffff80cf28a600\n which belongs to the cache kmalloc-512 of size 512\n[ 39.636039] The buggy address is located 13 bytes inside of\n 512-byte region [ffffff80cf28a600, ffffff80cf28a800)"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/01c6a899fa6be4f4cbf60c4f44f0f6691155415f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/02ba31e09a26e8cd4582ac8e6163d80284997727",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0fab6361c4ba17d1b43a991bef4238a3c1754d35",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b3cec8a42fcd11d05313c724f27e01b1db77522c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49471.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49471.json
new file mode 100644
index 00000000000..2a151041594
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49471.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49471",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:23.333",
+ "lastModified": "2025-02-26T07:01:23.333",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtw89: cfo: check mac_id to avoid out-of-bounds\n\nSomehow, hardware reports incorrect mac_id and pollute memory. Check index\nbefore we access the array.\n\n UBSAN: array-index-out-of-bounds in rtw89/phy.c:2517:23\n index 188 is out of range for type 's32 [64]'\n CPU: 1 PID: 51550 Comm: irq/35-rtw89_pc Tainted: G OE\n Call Trace:\n \n show_stack+0x52/0x58\n dump_stack_lvl+0x4c/0x63\n dump_stack+0x10/0x12\n ubsan_epilogue+0x9/0x45\n __ubsan_handle_out_of_bounds.cold+0x44/0x49\n ? __alloc_skb+0x92/0x1d0\n rtw89_phy_cfo_parse+0x44/0x7f [rtw89_core]\n rtw89_core_rx+0x261/0x871 [rtw89_core]\n ? __alloc_skb+0xee/0x1d0\n rtw89_pci_napi_poll+0x3fa/0x4ea [rtw89_pci]\n __napi_poll+0x33/0x1a0\n net_rx_action+0x126/0x260\n ? __queue_work+0x217/0x4c0\n __do_softirq+0xd9/0x315\n ? disable_irq_nosync+0x10/0x10\n do_softirq.part.0+0x6d/0x90\n \n \n __local_bh_enable_ip+0x62/0x70\n rtw89_pci_interrupt_threadfn+0x182/0x1a6 [rtw89_pci]\n irq_thread_fn+0x28/0x60\n irq_thread+0xc8/0x190\n ? irq_thread_fn+0x60/0x60\n kthread+0x16b/0x190\n ? irq_thread_check_affinity+0xe0/0xe0\n ? set_kthread_struct+0x50/0x50\n ret_from_fork+0x22/0x30\n "
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/03ed236480aeec8c2fd327a1ea6d711364c495e3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/97df85871a5b187609d30fca6d85b912d9e02f29",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c32fafe68298bb599e825c298e1d0ba30186f0a5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49472.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49472.json
new file mode 100644
index 00000000000..e3d7c44569e
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49472.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49472",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:23.423",
+ "lastModified": "2025-02-26T07:01:23.423",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: phy: micrel: Allow probing without .driver_data\n\nCurrently, if the .probe element is present in the phy_driver structure\nand the .driver_data is not, a NULL pointer dereference happens.\n\nAllow passing .probe without .driver_data by inserting NULL checks\nfor priv->type."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/143878e18001c5a61fcc7ae5c5240323753bb641",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1e5fbfc2a6f384e3195446c14bbd3bc298eb88c2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/660dfa033ccc9afb032015b6dc76e846bba42cfb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7dcb404662839a4ed1a9703658fee979eb894ca4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/91e720b32cba25fa58eaa4c88fe957009cffe9f3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/abb5594ae2ba7b82cce85917cc6337ec5d774837",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bd219273b4e004a3f853da72e111fc8f81357501",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f2ef6f7539c68c6bd6c32323d8845ee102b7c450",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49473.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49473.json
new file mode 100644
index 00000000000..636c2fc1b91
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49473.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49473",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:23.517",
+ "lastModified": "2025-02-26T07:01:23.517",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_*\n\nof_parse_phandle() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not needed anymore.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2a3966b950b37a6f10c5f9caee15b4cdcf5a7413",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/510e879420b410d88c612aecc6ca15dc6fe77473",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/554df0f70bff1ace6d2df2fcaddbc9b7bd509de2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a34840c4eb3278a7c29c9c57a65ce7541c66f9f2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d748ff8fbb3a5296bddd586445dc692b079cbe3d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49474.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49474.json
new file mode 100644
index 00000000000..dc1c472a8c9
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49474.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49474",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:23.613",
+ "lastModified": "2025-02-26T07:01:23.613",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout\n\nConnecting the same socket twice consecutively in sco_sock_connect()\ncould lead to a race condition where two sco_conn objects are created\nbut only one is associated with the socket. If the socket is closed\nbefore the SCO connection is established, the timer associated with the\ndangling sco_conn object won't be canceled. As the sock object is being\nfreed, the use-after-free problem happens when the timer callback\nfunction sco_sock_timeout() accesses the socket. Here's the call trace:\n\ndump_stack+0x107/0x163\n? refcount_inc+0x1c/\nprint_address_description.constprop.0+0x1c/0x47e\n? refcount_inc+0x1c/0x7b\nkasan_report+0x13a/0x173\n? refcount_inc+0x1c/0x7b\ncheck_memory_region+0x132/0x139\nrefcount_inc+0x1c/0x7b\nsco_sock_timeout+0xb2/0x1ba\nprocess_one_work+0x739/0xbd1\n? cancel_delayed_work+0x13f/0x13f\n? __raw_spin_lock_init+0xf0/0xf0\n? to_kthread+0x59/0x85\nworker_thread+0x593/0x70e\nkthread+0x346/0x35a\n? drain_workqueue+0x31a/0x31a\n? kthread_bind+0x4b/0x4b\nret_from_fork+0x1f/0x30"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/36c644c63bfcaee2d3a426f45e89a9cd09799318",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/390d82733a953c1fabf3de9c9618091a7a9c90a6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/537f619dea4e3fa8ed1f8f938abffe3615794bcc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/65d347cb39e2e6bd0c2a745ad7c928998ebb0162",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6f55fac0af3531cf60d11369454c41f5fc81ab3f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7aa1e7d15f8a5b65f67bacb100d8fc033b21efa2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7d61dbd7311ab978d8ddac1749a758de4de00374",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/99df16007f4bbf9abfc3478cb17d10f0d7f8906e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9de3dc09e56f8deacd2bdbf4cecb71e11a312405",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49475.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49475.json
new file mode 100644
index 00000000000..45fdf04931c
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49475.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49475",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:23.713",
+ "lastModified": "2025-02-26T07:01:23.713",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()\n\nIt will cause null-ptr-deref if platform_get_resource_byname() returns NULL,\nwe need check the return value."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/10f537219629769498ecb8515e096be213224c24",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/33dda87d04598ac5d9a849218a373443f7d3de66",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/560dcbe1c7a78f597f2167371ebdbe2bca3d0735",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9d9c84825c3ec359b165c762a424cfdefe87fdd7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a2b331ac11e1cac56f5b7d367e9f3c5796deaaed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49476.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49476.json
new file mode 100644
index 00000000000..5b149d88b9b
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49476.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49476",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:23.800",
+ "lastModified": "2025-02-26T07:01:23.800",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmt76: mt7921: fix kernel crash at mt7921_pci_remove\n\nThe crash log shown it is possible that mt7921_irq_handler is called while\ndevm_free_irq is being handled so mt76_free_device need to be postponed\nuntil devm_free_irq is completed to solve the crash we free the mt76 device\ntoo early.\n\n[ 9299.339655] BUG: kernel NULL pointer dereference, address: 0000000000000008\n[ 9299.339705] #PF: supervisor read access in kernel mode\n[ 9299.339735] #PF: error_code(0x0000) - not-present page\n[ 9299.339768] PGD 0 P4D 0\n[ 9299.339786] Oops: 0000 [#1] SMP PTI\n[ 9299.339812] CPU: 1 PID: 1624 Comm: prepare-suspend Not tainted 5.15.14-1.fc32.qubes.x86_64 #1\n[ 9299.339863] Hardware name: Xen HVM domU, BIOS 4.14.3 01/20/2022\n[ 9299.339901] RIP: 0010:mt7921_irq_handler+0x1e/0x70 [mt7921e]\n[ 9299.340048] RSP: 0018:ffffa81b80c27cb0 EFLAGS: 00010082\n[ 9299.340081] RAX: 0000000000000000 RBX: ffff98a4cb752020 RCX: ffffffffa96211c5\n[ 9299.340123] RDX: 0000000000000000 RSI: 00000000000d4204 RDI: ffff98a4cb752020\n[ 9299.340165] RBP: ffff98a4c28a62a4 R08: ffff98a4c37a96c0 R09: 0000000080150011\n[ 9299.340207] R10: 0000000040000000 R11: 0000000000000000 R12: ffff98a4c4eaa080\n[ 9299.340249] R13: ffff98a4c28a6360 R14: ffff98a4cb752020 R15: ffff98a4c28a6228\n[ 9299.340297] FS: 00007260840d3740(0000) GS:ffff98a4ef700000(0000) knlGS:0000000000000000\n[ 9299.340345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 9299.340383] CR2: 0000000000000008 CR3: 0000000004c56001 CR4: 0000000000770ee0\n[ 9299.340432] PKRU: 55555554\n[ 9299.340449] Call Trace:\n[ 9299.340467] \n[ 9299.340485] __free_irq+0x221/0x350\n[ 9299.340527] free_irq+0x30/0x70\n[ 9299.340553] devm_free_irq+0x55/0x80\n[ 9299.340579] mt7921_pci_remove+0x2f/0x40 [mt7921e]\n[ 9299.340616] pci_device_remove+0x3b/0xa0\n[ 9299.340651] __device_release_driver+0x17a/0x240\n[ 9299.340686] device_driver_detach+0x3c/0xa0\n[ 9299.340714] unbind_store+0x113/0x130\n[ 9299.340740] kernfs_fop_write_iter+0x124/0x1b0\n[ 9299.340775] new_sync_write+0x15c/0x1f0\n[ 9299.340806] vfs_write+0x1d2/0x270\n[ 9299.340831] ksys_write+0x67/0xe0\n[ 9299.340857] do_syscall_64+0x3b/0x90\n[ 9299.340887] entry_SYSCALL_64_after_hwframe+0x44/0xae"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/09693f5b636fb3f6dd56fd943226fc1bbc600b51",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/677e669973bf5460705bc65033445ea9f6615999",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ad483ed9dd5193a54293269c852a29051813b7bd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49477.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49477.json
new file mode 100644
index 00000000000..5537a778c54
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49477.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49477",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:23.920",
+ "lastModified": "2025-02-26T07:01:23.920",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: samsung: Fix refcount leak in aries_audio_probe\n\nof_parse_phandle() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\nIf extcon_find_edev_by_node() fails, it doesn't call of_node_put()\nCalling of_node_put() after extcon_find_edev_by_node() to fix this."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/46d1b310a2d571811c4e08041ce287babb60b86a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/70130bde3457d28c02c76b6cacc5d40a72dd6e17",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/85d899f396622d3034643bf89615a78f9be7c91a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bf4a9b2467b775717d0e9034ad916888e19713a3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cacea459f95be22b3750f3b25b7a1c5897a68206",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49478.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49478.json
new file mode 100644
index 00000000000..790a8b5e6f5
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49478.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49478",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:24.050",
+ "lastModified": "2025-02-26T07:01:24.050",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init\n\nSyzbot reported that -1 is used as array index. The problem was in\nmissing validation check.\n\nhdw->unit_number is initialized with -1 and then if init table walk fails\nthis value remains unchanged. Since code blindly uses this member for\narray indexing adding sanity check is the easiest fix for that.\n\nhdw->workpoll initialization moved upper to prevent warning in\n__flush_work."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1310fc3538dcc375a2f46ef0a438512c2ca32827",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/24e807541e4a9263ed928e6ae3498de3ad43bd1e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2e004fe914b243db41fa96f9e583385f360ea58e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3309c2c574e13b21b44729f5bdbf21f60189b79a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4351bfe36aba9fa7dc9d68d498d25d41a0f45e67",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/471bec68457aaf981add77b4f590d65dd7da1059",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a3304766d9384886e6d3092c776273526947a2e9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a3660e06675bccec4bf149c7229ea1d491ba10d7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f99a8b1ec0eddc2931aeaa4f490277a15b39f511",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49479.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49479.json
new file mode 100644
index 00000000000..56698c7fd19
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49479.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49479",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:24.153",
+ "lastModified": "2025-02-26T07:01:24.153",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmt76: fix tx status related use-after-free race on station removal\n\nThere is a small race window where ongoing tx activity can lead to a skb\ngetting added to the status tracking idr after that idr has already been\ncleaned up, which will keep the wcid linked in the status poll list.\nFix this by only adding status skbs if the wcid pointer is still assigned\nin dev->wcid, which gets cleared early by mt76_sta_pre_rcu_remove"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/ddd426d72aca4054045a9bd3b80a4ce1d398f11f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef7f9f894cfd0b2e471206409a529af4a26ddd55",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fcfe1b5e162bf473c1d47760962cec8523c00466",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49480.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49480.json
new file mode 100644
index 00000000000..c4d1c849f9f
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49480.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49480",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:24.243",
+ "lastModified": "2025-02-26T07:01:24.243",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: imx-hdmi: Fix refcount leak in imx_hdmi_probe\n\nof_find_device_by_node() takes reference, we should use put_device()\nto release it. when devm_kzalloc() fails, it doesn't have a\nput_device(), it will cause refcount leak.\nAdd missing put_device() to fix this."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/81b7edaabd44ba133006ad72056914eb36828d60",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8205a0114db10ec41bd2b748cdd7528632082eca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cf760e494ee5fa6bc2dc222f0098c741ad460801",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ed46731d8e86c8d65f5fc717671e1f1f6c3146d2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49481.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49481.json
new file mode 100644
index 00000000000..13012f1d8c8
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49481.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49481",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:24.340",
+ "lastModified": "2025-02-26T07:01:24.340",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt\n\nof_node_get() returns a node with refcount incremented.\nCalling of_node_put() to drop the reference when not needed anymore."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0be5d9da5743b9825a95baec85a67500b2c1d362",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/49d785baeb91568332197be356d138e5e59c7ddb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/56ab0c01027492cd161c64148e1dc892c56887ad",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/671be14fc31374b1a10a3abd93db6a8480838fc9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6ca675f4abbc74bc991d154a1ecc8b384dc2aae4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/984cfef0675ed7398814e14af2c5323911723e1c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9f564e29a51210a49df3d925117777c157a17d6d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/afaa7b933ef00a2d3262f4d1252087613fb5c06d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b74c0dd9179d21b7260260e075d597b23970100c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49482.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49482.json
new file mode 100644
index 00000000000..7d0da4a7f21
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49482.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49482",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:24.433",
+ "lastModified": "2025-02-26T07:01:24.433",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mxs-saif: Fix refcount leak in mxs_saif_probe\n\nof_parse_phandle() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/18b907ff0ae4bf20120aae1538f7156b9d08e3a7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/24491124406666bf0dcb9ee10c5575c6ce6a1730",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2a0da7641e1f17a744ac7b3f76471388c97b63dc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2be84f73785fa9ed6443e3c5b158730266f1c2ee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/30d110ca703ce60162ec337aa564a3e4da30715f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4e2a1bcc51bdebed48176f6e88c150f175983f9c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c933829cbf3338b684869e6c4c8931abf5d68fbd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d42601e93fce7802bb8d70dd59b60cfeefa20469",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d855505851ee8ba666eb204149b49f906130dc17",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49483.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49483.json
new file mode 100644
index 00000000000..57b0ef626e6
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49483.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49483",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:24.527",
+ "lastModified": "2025-02-26T07:01:24.527",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/disp/dpu1: avoid clearing hw interrupts if hw_intr is null during drm uninit\n\nIf edp modeset init is failed due to panel being not ready and\nprobe defers during drm bind, avoid clearing irqs and dereference\nhw_intr when hw_intr is null.\n\nBUG: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000\n\nCall trace:\n dpu_core_irq_uninstall+0x50/0xb0\n dpu_irq_uninstall+0x18/0x24\n msm_drm_uninit+0xd8/0x16c\n msm_drm_bind+0x580/0x5fc\n try_to_bring_up_master+0x168/0x1c0\n __component_add+0xb4/0x178\n component_add+0x1c/0x28\n dp_display_probe+0x38c/0x400\n platform_probe+0xb0/0xd0\n really_probe+0xcc/0x2c8\n __driver_probe_device+0xbc/0xe8\n driver_probe_device+0x48/0xf0\n __device_attach_driver+0xa0/0xc8\n bus_for_each_drv+0x8c/0xd8\n __device_attach+0xc4/0x150\n device_initial_probe+0x1c/0x28\n\nChanges in V2:\n- Update commit message and coreect fixes tag.\n\nPatchwork: https://patchwork.freedesktop.org/patch/484430/"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/01013ba9bbddc62f7d011163cebfd7ed06bb698b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a7ca30c3a8b2e8bda65f2b922d382ac056be8aa4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a800701429313149afde18d98821554fbfcb3164",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49484.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49484.json
new file mode 100644
index 00000000000..3e090fb9d17
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49484.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49484",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:24.620",
+ "lastModified": "2025-02-26T07:01:24.620",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector\n\nFix possible NULL pointer dereference in mt7915_mac_fill_rx_vector\nroutine if the chip does not support dbdc and the hw reports band_idx\nset to 1."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/268e8ef187eb8780d021b0e4f5ffa92dee5c4983",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/62fdc974894eec80d678523458cf99bbdb887e22",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49485.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49485.json
new file mode 100644
index 00000000000..860485cab38
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49485.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49485",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:24.710",
+ "lastModified": "2025-02-26T07:01:24.710",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/v3d: Fix null pointer dereference of pointer perfmon\n\nIn the unlikely event that pointer perfmon is null the WARN_ON return path\noccurs after the pointer has already been deferenced. Fix this by only\ndereferencing perfmon after it has been null checked."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1df8f8901babcc8c8eea2c067179e455b5c828fd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3b72deb784a7d4ae8519a5c584cd87c4b57aa6c8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4be045434923e549a50846a066a04b7b6c1d6d33",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ce7a1ecf3f9f1fccaf67295307614511d8e11b13",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49486.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49486.json
new file mode 100644
index 00000000000..a0ed7c97b20
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49486.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49486",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:24.803",
+ "lastModified": "2025-02-26T07:01:24.803",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: fsl: Fix refcount leak in imx_sgtl5000_probe\n\nof_find_i2c_device_by_node() takes a reference,\nIn error paths, we should call put_device() to drop\nthe reference to aviod refount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/41cd312dfe980af869c3503b4d38e62ed20dd3b7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4bfbbfdb3d761323127a67d7d765abe2f77d7b21",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7f75e9f629ef54a0845b43889d8ab9dd6e280dd5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/922bccdb1796a9e7b989f2bc6d9ada7b499a4329",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/96fc3da6184af5687e153d420cd7dcdeefdd2f9a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e84aaf23ca82753d765bf84d05295d9d9c5fed29",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49487.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49487.json
new file mode 100644
index 00000000000..2d2e2d066bd
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49487.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49487",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:24.897",
+ "lastModified": "2025-02-26T07:01:24.897",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe()\n\nIt will cause null-ptr-deref when using 'res', if platform_get_resource()\nreturns NULL, so move using 'res' after devm_ioremap_resource() that\nwill check it to avoid null-ptr-deref."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/daa5166450b447415aeeaac0199e445bae7bd0f2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ddf66aefd685fd46500b9917333e1b1e118276dc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e5b1e419cdb6dd8709eb05ed34039a3ded8e6003",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f8e262eb7575a4a2412f30f7a1b293875aceba80",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49488.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49488.json
new file mode 100644
index 00000000000..adefe0d9764
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49488.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49488",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:24.990",
+ "lastModified": "2025-02-26T07:01:24.990",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected\n\nThere is a possibility for mdp5_get_global_state to return\n-EDEADLK when acquiring the modeset lock, but currently global_state in\nmdp5_mixer_release doesn't check for if an error is returned.\n\nTo avoid a NULL dereference error, let's have mdp5_mixer_release\ncheck if an error is returned and propagate that error.\n\nPatchwork: https://patchwork.freedesktop.org/patch/485181/"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/09bdeedc1fc53e64b8282e1de67752c69e43bdba",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1a5d1474026ea4f1a6f931075ca2adb884af39cf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/22d8424913b1348c6324916745fadaeea5273f0e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/46e5ce63924a96af452c4fc5ee0bb3b241e1b9f4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/47e393061049aff6818d1b9fdca7351411a23fc2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/883f1d52a57bf51e1d7a80c432345e2c6222477e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ca75f6f7c6f89365e40f10f641b15981b1f07c31",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49489.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49489.json
new file mode 100644
index 00000000000..3d4fc22039b
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49489.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49489",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:25.083",
+ "lastModified": "2025-02-26T07:01:25.083",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume\n\nBUG: Unable to handle kernel paging request at virtual address 006b6b6b6b6b6be3\n\nCall trace:\n dpu_vbif_init_memtypes+0x40/0xb8\n dpu_runtime_resume+0xcc/0x1c0\n pm_generic_runtime_resume+0x30/0x44\n __genpd_runtime_resume+0x68/0x7c\n genpd_runtime_resume+0x134/0x258\n __rpm_callback+0x98/0x138\n rpm_callback+0x30/0x88\n rpm_resume+0x36c/0x49c\n __pm_runtime_resume+0x80/0xb0\n dpu_core_irq_uninstall+0x30/0xb0\n dpu_irq_uninstall+0x18/0x24\n msm_drm_uninit+0xd8/0x16c\n\nPatchwork: https://patchwork.freedesktop.org/patch/483255/\n[DB: fixed Fixes tag]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/134760263f6441741db0b2970e7face6b34b6d1c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5b0adf5cbf3b74721e4e4c4e0cadc91b8df8bcc2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/97ac682b6f7d36be5d934f86c9911066540a68f1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aa4cb188988dc6f1b3f4917d4dbc452150a5d871",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef10d0c68e8608848cd58fca2589685718426607",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef4bdaac7cb5416f236613ed9337ff0ea8ee329b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fa5186b279ecf44b14fb435540d2065be91cb1ed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49490.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49490.json
new file mode 100644
index 00000000000..da5fe3709dc
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49490.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49490",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:25.183",
+ "lastModified": "2025-02-26T07:01:25.183",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected\n\nmdp5_get_global_state runs the risk of hitting a -EDEADLK when acquiring\nthe modeset lock, but currently mdp5_pipe_release doesn't check for if\nan error is returned. Because of this, there is a possibility of\nmdp5_pipe_release hitting a NULL dereference error.\n\nTo avoid this, let's have mdp5_pipe_release check if\nmdp5_get_global_state returns an error and propogate that error.\n\nChanges since v1:\n- Separated declaration and initialization of *new_state to avoid\n compiler warning\n- Fixed some spelling mistakes in commit message\n\nChanges since v2:\n- Return 0 in case where hwpipe is NULL as this is considered normal\n behavior\n- Added 2nd patch in series to fix a similar NULL dereference issue in\n mdp5_mixer_release\n\nPatchwork: https://patchwork.freedesktop.org/patch/485179/"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/04bef5f1ba8ea6d7c1c8f5f65e0395c62db59cb8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/19964dfb39bda4d7716a71009488f0668ecbcf52",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/33dc5aac46e0fad8f5eb193e5906ed0eb6b66ceb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/49dc28b4b2e28ef7564e355c91487996c1cbebd7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/776f5c58bfe16cf322d71eeed3c5dda1eeac7e6b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b2aa2c4efe93e2580d6a8774b04fe2b99756a322",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d59be579fa932c46b908f37509f319cbd4ca9a68",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49491.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49491.json
new file mode 100644
index 00000000000..ac1dbb78d6a
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49491.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49491",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:25.280",
+ "lastModified": "2025-02-26T07:01:25.280",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/rockchip: vop: fix possible null-ptr-deref in vop_bind()\n\nIt will cause null-ptr-deref in resource_size(), if platform_get_resource()\nreturns NULL, move calling resource_size() after devm_ioremap_resource() that\nwill check 'res' to avoid null-ptr-deref."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3451852312303d54a003c73bd0ae39cebb960bd5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/452922955df215a417c80d09dab72bbc667a1861",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6ff986e057bf28e2f7690dad410768b2270f9453",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/769c53bb6116d0eaec0f1fe4ec4b27a74465cad1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a9b4599665e437de8a1152799c34841b799a2e1c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b54926bd558d97c888c3d2d87886f3c159d3254a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ecfa52654d0c9c333c1fe1611f47105f6bce9591",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f8c242908ad15bbd604d3bcb54961b7d454c43f8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fcd6a886443730c39170b8383411e52118aec0a3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49492.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49492.json
new file mode 100644
index 00000000000..c81ac904dcc
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49492.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49492",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:25.410",
+ "lastModified": "2025-02-26T07:01:25.410",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags\n\nIn nvme_alloc_admin_tags, the admin_q can be set to an error (typically\n-ENOMEM) if the blk_mq_init_queue call fails to set up the queue, which\nis checked immediately after the call. However, when we return the error\nmessage up the stack, to nvme_reset_work the error takes us to\nnvme_remove_dead_ctrl()\n nvme_dev_disable()\n nvme_suspend_queue(&dev->queues[0]).\n\nHere, we only check that the admin_q is non-NULL, rather than not\nan error or NULL, and begin quiescing a queue that never existed, leading\nto bad / NULL pointer dereference."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/54a4c1e47d1b2585e74920399455bd9abbfb2bd7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7a28556082d1fbcbc599baf1c24252dfc73efefc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8321b17789f614414206af07e17ce4751c95dc76",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8da2b7bdb47e94bbc4062a3978c708926bcb022c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/906c81dba8ee8057523859b5e1a2479e9fd34860",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9e649471b396fa0139d53919354ce1eace9b9a24",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/af98940dd33c9f9e1beb4f71c0a39260100e2a65",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/da42761181627e9bdc37d18368b827948a583929",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f76729662650cd7bc8f8194e057af381370349a7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49493.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49493.json
new file mode 100644
index 00000000000..eaf328d4e00
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49493.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49493",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:25.520",
+ "lastModified": "2025-02-26T07:01:25.520",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: rt5645: Fix errorenous cleanup order\n\nThere is a logic error when removing rt5645 device as the function\nrt5645_i2c_remove() first cancel the &rt5645->jack_detect_work and\ndelete the &rt5645->btn_check_timer latter. However, since the timer\nhandler rt5645_btn_check_callback() will re-queue the jack_detect_work,\nthis cleanup order is buggy.\n\nThat is, once the del_timer_sync in rt5645_i2c_remove is concurrently\nrun with the rt5645_btn_check_callback, the canceled jack_detect_work\nwill be rescheduled again, leading to possible use-after-free.\n\nThis patch fix the issue by placing the del_timer_sync function before\nthe cancel_delayed_work_sync."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/061a6159cea583f1155f67d1915917a6b9282662",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0941150100173d4eaf3fe08ff4b16740e7c3026f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1a5a3dfd9f172dcb115072f0aea5e27d3083c20e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/236d29c5857f02e0a53fdf15d3dce1536c4322ce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2def44d3aec59e38d2701c568d65540783f90f2f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/453f0920ffc1a28e28ddb9c3cd5562472b2895b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7d801e807536a9a9c2146c5f4a5836f154517ed3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/88c09e4812d72c3153afc8e5a45ecac2d0eae3ff",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/abe7554da62cb489712a54de69ef5665c250e564",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49494.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49494.json
new file mode 100644
index 00000000000..d8328af42f2
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49494.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49494",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:25.613",
+ "lastModified": "2025-02-26T07:01:25.613",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe()\n\nIt will cause null-ptr-deref when using 'res', if platform_get_resource()\nreturns NULL, so move using 'res' after devm_ioremap_resource() that\nwill check it to avoid null-ptr-deref.\nAnd use devm_platform_get_and_ioremap_resource() to simplify code."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/069af5e27c1b0f7677ef76d8d3102e503ca4f80b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0cfee868b89ffa945f3d535ee5c985cb40c5a0f8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/13b60d3dc84b47307669edb66b633b18466014b4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/81f1ddffdc22ca5789e33b9d4712914e302090c1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a28ed09dafee20da51eb26452950839633afd824",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49495.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49495.json
new file mode 100644
index 00000000000..53192926814
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49495.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49495",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:25.707",
+ "lastModified": "2025-02-26T07:01:25.707",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/hdmi: check return value after calling platform_get_resource_byname()\n\nIt will cause null-ptr-deref if platform_get_resource_byname() returns NULL,\nwe need check the return value.\n\nPatchwork: https://patchwork.freedesktop.org/patch/482992/"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0978fcce91b90b561b8c82e7c492ba9fc8440eef",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2b3ed7547b1a052209da6c4ab886ffe0eed88c42",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4cd66a8016b872a153bf892fe4258cbc0dacf5b1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6369dda4a2209142ab819f01d3d2076d81e3ebdd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9cb1ee33efccb8b107ee04b7b3441820de3fd2da",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9f5495a5c51c1d11c6ffc13aa2befffec0c2651a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a36e506711548df923ceb7ec9f6001375be799a5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c1bfacf0daf25a5fc7d667399d6ff2dffda84cd8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d9cb951d11a4ace4de5c50b1178ad211de17079e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49496.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49496.json
new file mode 100644
index 00000000000..772f8ee6cf9
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49496.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49496",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:25.800",
+ "lastModified": "2025-02-26T07:01:25.800",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mediatek: vcodec: prevent kernel crash when rmmod mtk-vcodec-dec.ko\n\nIf the driver support subdev mode, the parameter \"dev->pm.dev\" will be\nNULL in mtk_vcodec_dec_remove. Kernel will crash when try to rmmod\nmtk-vcodec-dec.ko.\n\n[ 4380.702726] pc : do_raw_spin_trylock+0x4/0x80\n[ 4380.707075] lr : _raw_spin_lock_irq+0x90/0x14c\n[ 4380.711509] sp : ffff80000819bc10\n[ 4380.714811] x29: ffff80000819bc10 x28: ffff3600c03e4000 x27: 0000000000000000\n[ 4380.721934] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000\n[ 4380.729057] x23: ffff3600c0f34930 x22: ffffd5e923549000 x21: 0000000000000220\n[ 4380.736179] x20: 0000000000000208 x19: ffffd5e9213e8ebc x18: 0000000000000020\n[ 4380.743298] x17: 0000002000000000 x16: ffffd5e9213e8e90 x15: 696c346f65646976\n[ 4380.750420] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000040\n[ 4380.757542] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000\n[ 4380.764664] x8 : 0000000000000000 x7 : ffff3600c7273ae8 x6 : ffffd5e9213e8ebc\n[ 4380.771786] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000\n[ 4380.778908] x2 : 0000000000000000 x1 : ffff3600c03e4000 x0 : 0000000000000208\n[ 4380.786031] Call trace:\n[ 4380.788465] do_raw_spin_trylock+0x4/0x80\n[ 4380.792462] __pm_runtime_disable+0x2c/0x1b0\n[ 4380.796723] mtk_vcodec_dec_remove+0x5c/0xa0 [mtk_vcodec_dec]\n[ 4380.802466] platform_remove+0x2c/0x60\n[ 4380.806204] __device_release_driver+0x194/0x250\n[ 4380.810810] driver_detach+0xc8/0x15c\n[ 4380.814462] bus_remove_driver+0x5c/0xb0\n[ 4380.818375] driver_unregister+0x34/0x64\n[ 4380.822288] platform_driver_unregister+0x18/0x24\n[ 4380.826979] mtk_vcodec_dec_driver_exit+0x1c/0x888 [mtk_vcodec_dec]\n[ 4380.833240] __arm64_sys_delete_module+0x190/0x224\n[ 4380.838020] invoke_syscall+0x48/0x114\n[ 4380.841760] el0_svc_common.constprop.0+0x60/0x11c\n[ 4380.846540] do_el0_svc+0x28/0x90\n[ 4380.849844] el0_svc+0x4c/0x100\n[ 4380.852975] el0t_64_sync_handler+0xec/0xf0\n[ 4380.857148] el0t_64_sync+0x190/0x194\n[ 4380.860801] Code: 94431515 17ffffca d503201f d503245f (b9400004)"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1fa37b00dc55a061a3eb82e378849862b4aeca9d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c10c0086db688c95bb4e0e378e523818dff1551d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49497.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49497.json
new file mode 100644
index 00000000000..5ac6039ccaf
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49497.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49497",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:25.893",
+ "lastModified": "2025-02-26T07:01:25.893",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: remove two BUG() from skb_checksum_help()\n\nI have a syzbot report that managed to get a crash in skb_checksum_help()\n\nIf syzbot can trigger these BUG(), it makes sense to replace\nthem with more friendly WARN_ON_ONCE() since skb_checksum_help()\ncan instead return an error code.\n\nNote that syzbot will still crash there, until real bug is fixed."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/312c43e98ed190bd8fd7a71a0addf9539d5b8ab1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6320ae1b5876c30bf98203b6a5abe8b5c45e6a04",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b1320c9a4d30ff54b824a8ad6036e0b5fb4c5e73",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5281245f3502e960cb6b89348767b935379cee3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d7ea0d9df2a6265b2b180d17ebc64b38105968fc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49498.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49498.json
new file mode 100644
index 00000000000..78d05cc8c46
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49498.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49498",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:25.987",
+ "lastModified": "2025-02-26T07:01:25.987",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: pcm: Check for null pointer of pointer substream before dereferencing it\n\nPointer substream is being dereferenced on the assignment of pointer card\nbefore substream is being null checked with the macro PCM_RUNTIME_CHECK.\nAlthough PCM_RUNTIME_CHECK calls BUG_ON, it still is useful to perform the\nthe pointer check before card is assigned."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/011b559be832194f992f73d6c0d5485f5925a10b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1f2e28857be1e5c7db39bbc221332215fc5467e3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7784d22f81a29df2ec57ca90d54f93a35cbcd1a2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b2421a196cb0911ea95aec1050a0b830464c8fa6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b41ef7ad9238c22aa2e142f5ce4ce1a1a0d48123",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f2c68c52898f623fe84518da4606538d193b0cca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-494xx/CVE-2022-49499.json b/CVE-2022/CVE-2022-494xx/CVE-2022-49499.json
new file mode 100644
index 00000000000..1d95aaa5c59
--- /dev/null
+++ b/CVE-2022/CVE-2022-494xx/CVE-2022-49499.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49499",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:26.077",
+ "lastModified": "2025-02-26T07:01:26.077",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm: Fix null pointer dereferences without iommu\n\nCheck if 'aspace' is set before using it as it will stay null without\nIOMMU, such as on msm8974."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/36a1d1bda77e1851bddfa9cf4e8ada94476dbaff",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f09937e80f9bc792965476c9a528f26c8fdc9179",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49500.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49500.json
new file mode 100644
index 00000000000..e163ab2ed72
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49500.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49500",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:26.163",
+ "lastModified": "2025-02-26T07:01:26.163",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwl1251: dynamically allocate memory used for DMA\n\nWith introduction of vmap'ed stacks, stack parameters can no\nlonger be used for DMA and now leads to kernel panic.\n\nIt happens at several places for the wl1251 (e.g. when\naccessed through SDIO) making it unuseable on e.g. the\nOpenPandora.\n\nWe solve this by allocating temporary buffers or use wl1251_read32().\n\nTested on v5.18-rc5 with OpenPandora."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/454744754cbf2c21b3fc7344e46e10bee2768094",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/da03bbfbf5acd1ab0b074617e865ad1e8a5779ef",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49501.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49501.json
new file mode 100644
index 00000000000..818da5f6ab2
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49501.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49501",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:26.257",
+ "lastModified": "2025-02-26T07:01:26.257",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusbnet: Run unregister_netdev() before unbind() again\n\nCommit 2c9d6c2b871d (\"usbnet: run unbind() before unregister_netdev()\")\nsought to fix a use-after-free on disconnect of USB Ethernet adapters.\n\nIt turns out that a different fix is necessary to address the issue:\nhttps://lore.kernel.org/netdev/18b3541e5372bc9b9fc733d422f4e698c089077c.1650177997.git.lukas@wunner.de/\n\nSo the commit was not necessary.\n\nThe commit made binding and unbinding of USB Ethernet asymmetrical:\nBefore, usbnet_probe() first invoked the ->bind() callback and then\nregister_netdev(). usbnet_disconnect() mirrored that by first invoking\nunregister_netdev() and then ->unbind().\n\nSince the commit, the order in usbnet_disconnect() is reversed and no\nlonger mirrors usbnet_probe().\n\nOne consequence is that a PHY disconnected (and stopped) in ->unbind()\nis afterwards stopped once more by unregister_netdev() as it closes the\nnetdev before unregistering. That necessitates a contortion in ->stop()\nbecause the PHY may only be stopped if it hasn't already been\ndisconnected.\n\nReverting the commit allows making the call to phy_stop() unconditional\nin ->stop()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/6d5deb242874d924beccf7eb3cef04c1c3b0da79",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/969a1b3ea3cb7d58a16fe12fd1b04bfc0ea40509",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d1408f6b4dd78fb1b9e26bcf64477984e5f85409",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fbda837107f9bd4ec658d2aa88c6856dba606f06",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49502.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49502.json
new file mode 100644
index 00000000000..43739fc6cbf
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49502.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49502",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:26.353",
+ "lastModified": "2025-02-26T07:01:26.353",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: rga: fix possible memory leak in rga_probe\n\nrga->m2m_dev needs to be freed when rga_probe fails."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1cdc768468c25d6b10ab83ec1efd4a8554532d69",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8ddc89437ccefa18279918c19a61fd81527f40b9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a71eb6025305192e646040cd76ccacb5bd48a1b5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b7bbca4d08471bc8404a946bab1aa017dd05199b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eeb4819e94aa69767b9e5591e70c63e8b7c5786a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49503.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49503.json
new file mode 100644
index 00000000000..a99a77455f8
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49503.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49503",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:26.447",
+ "lastModified": "2025-02-26T07:01:26.447",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix\n\nThe \"rxstatus->rs_keyix\" eventually gets passed to test_bit() so we need to\nensure that it is within the bitmap.\n\ndrivers/net/wireless/ath/ath9k/common.c:46 ath9k_cmn_rx_accept()\nerror: passing untrusted data 'rx_stats->rs_keyix' to 'test_bit()'"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0bcb528402cd5e1a6e1833e956fd58a12d509e8e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2326d398ccd41ba6d93b8346532dfa432ab00fee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2dc509305cf956381532792cb8dceef2b1504765",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3dad3fed5672828c7fb0465cb66a3d9a70952fa6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/461e4c1f199076275f16bf6f3d3e42c6b6c79f33",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4bdcf32c965c27f55ccc4ee71c1927131115b0bb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7f6defe0fabc79f29603c6fa3c80e4fe0456a3e9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a048e0c3caa852397b7b50d4c82a0415c05f7ac3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eda518db7db16c360bc84379d90675650daa3048",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49504.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49504.json
new file mode 100644
index 00000000000..8f2e99bbcbd
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49504.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49504",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:26.543",
+ "lastModified": "2025-02-26T07:01:26.543",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Inhibit aborts if external loopback plug is inserted\n\nAfter running a short external loopback test, when the external loopback is\nremoved and a normal cable inserted that is directly connected to a target\ndevice, the system oops in the llpfc_set_rrq_active() routine.\n\nWhen the loopback was inserted an FLOGI was transmit. As we're looped back,\nwe receive the FLOGI request. The FLOGI is ABTS'd as we recognize the same\nwppn thus understand it's a loopback. However, as the ABTS sends address\ninformation the port is not set to (fffffe), the ABTS is dropped on the\nwire. A short 1 frame loopback test is run and completes before the ABTS\ntimes out. The looback is unplugged and the new cable plugged in, and the\nan FLOGI to the new device occurs and completes. Due to a mixup in ref\ncounting the completion of the new FLOGI releases the fabric ndlp. Then the\noriginal ABTS completes and references the released ndlp generating the\noops.\n\nCorrect by no-op'ing the ABTS when in loopback mode (it will be dropped\nanyway). Added a flag to track the mode to recognize when it should be\nno-op'd."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/a1516930cb605caee3bc7b4f3b7994b88c0b8505",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ead76d4c09b89f4c8d632648026a476a5a34fde8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49505.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49505.json
new file mode 100644
index 00000000000..d595eb9731b
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49505.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49505",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:26.633",
+ "lastModified": "2025-02-26T07:01:26.633",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFC: NULL out the dev->rfkill to prevent UAF\n\nCommit 3e3b5dfcd16a (\"NFC: reorder the logic in nfc_{un,}register_device\")\nassumes the device_is_registered() in function nfc_dev_up() will help\nto check when the rfkill is unregistered. However, this check only\ntake effect when device_del(&dev->dev) is done in nfc_unregister_device().\nHence, the rfkill object is still possible be dereferenced.\n\nThe crash trace in latest kernel (5.18-rc2):\n\n[ 68.760105] ==================================================================\n[ 68.760330] BUG: KASAN: use-after-free in __lock_acquire+0x3ec1/0x6750\n[ 68.760756] Read of size 8 at addr ffff888009c93018 by task fuzz/313\n[ 68.760756]\n[ 68.760756] CPU: 0 PID: 313 Comm: fuzz Not tainted 5.18.0-rc2 #4\n[ 68.760756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014\n[ 68.760756] Call Trace:\n[ 68.760756] \n[ 68.760756] dump_stack_lvl+0x57/0x7d\n[ 68.760756] print_report.cold+0x5e/0x5db\n[ 68.760756] ? __lock_acquire+0x3ec1/0x6750\n[ 68.760756] kasan_report+0xbe/0x1c0\n[ 68.760756] ? __lock_acquire+0x3ec1/0x6750\n[ 68.760756] __lock_acquire+0x3ec1/0x6750\n[ 68.760756] ? lockdep_hardirqs_on_prepare+0x410/0x410\n[ 68.760756] ? register_lock_class+0x18d0/0x18d0\n[ 68.760756] lock_acquire+0x1ac/0x4f0\n[ 68.760756] ? rfkill_blocked+0xe/0x60\n[ 68.760756] ? lockdep_hardirqs_on_prepare+0x410/0x410\n[ 68.760756] ? mutex_lock_io_nested+0x12c0/0x12c0\n[ 68.760756] ? nla_get_range_signed+0x540/0x540\n[ 68.760756] ? _raw_spin_lock_irqsave+0x4e/0x50\n[ 68.760756] _raw_spin_lock_irqsave+0x39/0x50\n[ 68.760756] ? rfkill_blocked+0xe/0x60\n[ 68.760756] rfkill_blocked+0xe/0x60\n[ 68.760756] nfc_dev_up+0x84/0x260\n[ 68.760756] nfc_genl_dev_up+0x90/0xe0\n[ 68.760756] genl_family_rcv_msg_doit+0x1f4/0x2f0\n[ 68.760756] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x230/0x230\n[ 68.760756] ? security_capable+0x51/0x90\n[ 68.760756] genl_rcv_msg+0x280/0x500\n[ 68.760756] ? genl_get_cmd+0x3c0/0x3c0\n[ 68.760756] ? lock_acquire+0x1ac/0x4f0\n[ 68.760756] ? nfc_genl_dev_down+0xe0/0xe0\n[ 68.760756] ? lockdep_hardirqs_on_prepare+0x410/0x410\n[ 68.760756] netlink_rcv_skb+0x11b/0x340\n[ 68.760756] ? genl_get_cmd+0x3c0/0x3c0\n[ 68.760756] ? netlink_ack+0x9c0/0x9c0\n[ 68.760756] ? netlink_deliver_tap+0x136/0xb00\n[ 68.760756] genl_rcv+0x1f/0x30\n[ 68.760756] netlink_unicast+0x430/0x710\n[ 68.760756] ? memset+0x20/0x40\n[ 68.760756] ? netlink_attachskb+0x740/0x740\n[ 68.760756] ? __build_skb_around+0x1f4/0x2a0\n[ 68.760756] netlink_sendmsg+0x75d/0xc00\n[ 68.760756] ? netlink_unicast+0x710/0x710\n[ 68.760756] ? netlink_unicast+0x710/0x710\n[ 68.760756] sock_sendmsg+0xdf/0x110\n[ 68.760756] __sys_sendto+0x19e/0x270\n[ 68.760756] ? __ia32_sys_getpeername+0xa0/0xa0\n[ 68.760756] ? fd_install+0x178/0x4c0\n[ 68.760756] ? fd_install+0x195/0x4c0\n[ 68.760756] ? kernel_fpu_begin_mask+0x1c0/0x1c0\n[ 68.760756] __x64_sys_sendto+0xd8/0x1b0\n[ 68.760756] ? lockdep_hardirqs_on+0xbf/0x130\n[ 68.760756] ? syscall_enter_from_user_mode+0x1d/0x50\n[ 68.760756] do_syscall_64+0x3b/0x90\n[ 68.760756] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[ 68.760756] RIP: 0033:0x7f67fb50e6b3\n...\n[ 68.760756] RSP: 002b:00007f67fa91fe90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c\n[ 68.760756] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f67fb50e6b3\n[ 68.760756] RDX: 000000000000001c RSI: 0000559354603090 RDI: 0000000000000003\n[ 68.760756] RBP: 00007f67fa91ff00 R08: 00007f67fa91fedc R09: 000000000000000c\n[ 68.760756] R10: 0000000000000000 R11: 0000000000000293 R12: 00007ffe824d496e\n[ 68.760756] R13: 00007ffe824d496f R14: 00007f67fa120000 R15: 0000000000000003\n\n[ 68.760756] \n[ 68.760756]\n[ 68.760756] Allocated by task 279:\n[ 68.760756] kasan_save_stack+0x1e/0x40\n[\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1632be63862f183cd5cf1cc094e698e6ec005dfd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1b0e81416a24d6e9b8c2341e22e8bf48f8b8bfc9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2a1b5110c95e4d49c8c3906270dfcde680a5a7be",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4a68938f43b7c2663e4c90bb9bbe29ac8b9a42a0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4f5d71930f41be78557f9714393179025baacd65",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6abfaca8711803d0d7cc8c0fac1070a88509d463",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a8e03bcad52dc9afabf650fdbad84f739cec9efa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f81270125b50532624400063281e6611ecd61ddf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fbf9c4c714d3cdeb98b6a18e4d057f931cad1d81",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49506.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49506.json
new file mode 100644
index 00000000000..e459b5511ef
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49506.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49506",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:26.737",
+ "lastModified": "2025-02-26T07:01:26.737",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Add vblank register/unregister callback functions\n\nWe encountered a kernel panic issue that callback data will be NULL when\nit's using in ovl irq handler. There is a timing issue between\nmtk_disp_ovl_irq_handler() and mtk_ovl_disable_vblank().\n\nTo resolve this issue, we use the flow to register/unregister vblank cb:\n- Register callback function and callback data when crtc creates.\n- Unregister callback function and callback data when crtc destroies.\n\nWith this solution, we can assure callback data will not be NULL when\nvblank is disable."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3a4027b5971fe2a94e32754f007d9d3c12c68ad1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8a265d9838bc3c63579002d55c2b2c655c4f8f26",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8a2dbdeccef6de47565638abdf3c25f41cdffc37",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b74d921b900b6ce38c6247c0a1c86be9f3746493",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49507.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49507.json
new file mode 100644
index 00000000000..28bb821bf6e
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49507.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49507",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:26.830",
+ "lastModified": "2025-02-26T07:01:26.830",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: da9121: Fix uninit-value in da9121_assign_chip_model()\n\nKASAN report slab-out-of-bounds in __regmap_init as follows:\n\nBUG: KASAN: slab-out-of-bounds in __regmap_init drivers/base/regmap/regmap.c:841\nRead of size 1 at addr ffff88803678cdf1 by task xrun/9137\n\nCPU: 0 PID: 9137 Comm: xrun Tainted: G W 5.18.0-rc2\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014\nCall Trace:\n \n dump_stack_lvl+0xe8/0x15a lib/dump_stack.c:88\n print_report.cold+0xcd/0x69b mm/kasan/report.c:313\n kasan_report+0x8e/0xc0 mm/kasan/report.c:491\n __regmap_init+0x4540/0x4ba0 drivers/base/regmap/regmap.c:841\n __devm_regmap_init+0x7a/0x100 drivers/base/regmap/regmap.c:1266\n __devm_regmap_init_i2c+0x65/0x80 drivers/base/regmap/regmap-i2c.c:394\n da9121_i2c_probe+0x386/0x6d1 drivers/regulator/da9121-regulator.c:1039\n i2c_device_probe+0x959/0xac0 drivers/i2c/i2c-core-base.c:563\n\nThis happend when da9121 device is probe by da9121_i2c_id, but with\ninvalid dts. Thus, chip->subvariant_id is set to -EINVAL, and later\nda9121_assign_chip_model() will access 'regmap' without init it.\n\nFix it by return -EINVAL from da9121_assign_chip_model() if\n'chip->subvariant_id' is invalid."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/60f21eda69f1b5727a97d2077da766eb27fcc21f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7da64c7c82c9b29b628a62c88a8c2fb06990563d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bab76514aca36bc513224525d5598da676938218",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/be96baa0c79588084e0d7a4fa21c574cec9a57f4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49508.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49508.json
new file mode 100644
index 00000000000..e94df1f2522
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49508.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49508",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:26.923",
+ "lastModified": "2025-02-26T07:01:26.923",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: elan: Fix potential double free in elan_input_configured\n\n'input' is a managed resource allocated with devm_input_allocate_device(),\nso there is no need to call input_free_device() explicitly or\nthere will be a double free.\n\nAccording to the doc of devm_input_allocate_device():\n * Managed input devices do not need to be explicitly unregistered or\n * freed as it will be done automatically when owner device unbinds from\n * its driver (or binding fails)."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1af20714fedad238362571620be0bd690ded05b6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/24f9dfdaece9bd75bb8dbfdba83eddeefdf7dc47",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5291451851feeb66fd4bf0826710f482f3b1ab38",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6d0726725c7c560495f5ff364862a2cefea542e3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8bb1716507ebf12d50bbf181764481de3b6bc7fd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c92ec22a991778a096342cf1a917ae36c5c86a90",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f1d4f19a796551edc6679a681ea1756b8c578c08",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49509.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49509.json
new file mode 100644
index 00000000000..6a72b0fe2b5
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49509.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49509",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:27.017",
+ "lastModified": "2025-02-26T07:01:27.017",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: i2c: max9286: fix kernel oops when removing module\n\nWhen removing the max9286 module we get a kernel oops:\n\nUnable to handle kernel paging request at virtual address 000000aa00000094\nMem abort info:\n ESR = 0x96000004\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x04: level 0 translation fault\nData abort info:\n ISV = 0, ISS = 0x00000004\n CM = 0, WnR = 0\nuser pgtable: 4k pages, 48-bit VAs, pgdp=0000000880d85000\n[000000aa00000094] pgd=0000000000000000, p4d=0000000000000000\nInternal error: Oops: 96000004 [#1] PREEMPT SMP\nModules linked in: fsl_jr_uio caam_jr rng_core libdes caamkeyblob_desc caamhash_desc caamalg_desc crypto_engine max9271 authenc crct10dif_ce mxc_jpeg_encdec\nCPU: 2 PID: 713 Comm: rmmod Tainted: G C 5.15.5-00057-gaebcd29c8ed7-dirty #5\nHardware name: Freescale i.MX8QXP MEK (DT)\npstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : i2c_mux_del_adapters+0x24/0xf0\nlr : max9286_remove+0x28/0xd0 [max9286]\nsp : ffff800013a9bbf0\nx29: ffff800013a9bbf0 x28: ffff00080b6da940 x27: 0000000000000000\nx26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000\nx23: ffff000801a5b970 x22: ffff0008048b0890 x21: ffff800009297000\nx20: ffff0008048b0f70 x19: 000000aa00000064 x18: 0000000000000000\nx17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\nx14: 0000000000000014 x13: 0000000000000000 x12: ffff000802da49e8\nx11: ffff000802051918 x10: ffff000802da4920 x9 : ffff000800030098\nx8 : 0101010101010101 x7 : 7f7f7f7f7f7f7f7f x6 : fefefeff6364626d\nx5 : 8080808000000000 x4 : 0000000000000000 x3 : 0000000000000000\nx2 : ffffffffffffffff x1 : ffff00080b6da940 x0 : 0000000000000000\nCall trace:\n i2c_mux_del_adapters+0x24/0xf0\n max9286_remove+0x28/0xd0 [max9286]\n i2c_device_remove+0x40/0x110\n __device_release_driver+0x188/0x234\n driver_detach+0xc4/0x150\n bus_remove_driver+0x60/0xe0\n driver_unregister+0x34/0x64\n i2c_del_driver+0x58/0xa0\n max9286_i2c_driver_exit+0x1c/0x490 [max9286]\n __arm64_sys_delete_module+0x194/0x260\n invoke_syscall+0x48/0x114\n el0_svc_common.constprop.0+0xd4/0xfc\n do_el0_svc+0x2c/0x94\n el0_svc+0x28/0x80\n el0t_64_sync_handler+0xa8/0x130\n el0t_64_sync+0x1a0/0x1a4\n\nThe Oops happens because the I2C client data does not point to\nmax9286_priv anymore but to v4l2_subdev. The change happened in\nmax9286_init() which calls v4l2_i2c_subdev_init() later on...\n\nBesides fixing the max9286_remove() function, remove the call to\ni2c_set_clientdata() in max9286_probe(), to avoid confusion, and make\nthe necessary changes to max9286_init() so that it doesn't have to use\ni2c_get_clientdata() in order to fetch the pointer to priv."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/365ab7ebc24eebb42b9e020aeb440d51af8960cd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/579c77595dbbdfe4f2edf335899f86ac51eca4e9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9dd783274c89c21a038d967b52a858a297e767f8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a4ec75df70575cdf33d9638c7844e729bfe6ce24",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49510.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49510.json
new file mode 100644
index 00000000000..1800210ad25
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49510.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49510",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:27.107",
+ "lastModified": "2025-02-26T07:01:27.107",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/omap: fix NULL but dereferenced coccicheck error\n\nFix the following coccicheck warning:\n./drivers/gpu/drm/omapdrm/omap_overlay.c:89:22-25: ERROR: r_ovl is NULL\nbut dereferenced.\n\nHere should be ovl->idx rather than r_ovl->idx."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/08d9a75eab594ca508a440db7c73064498d26687",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8f2a3970c969d0d8d7289a4c65edcedafc16fd92",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d2507be660310bb9bcca918f81f49b8bba07e462",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49511.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49511.json
new file mode 100644
index 00000000000..532b81d8f18
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49511.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49511",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:27.193",
+ "lastModified": "2025-02-26T07:01:27.193",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: defio: fix the pagelist corruption\n\nEasily hit the below list corruption:\n==\nlist_add corruption. prev->next should be next (ffffffffc0ceb090), but\nwas ffffec604507edc8. (prev=ffffec604507edc8).\nWARNING: CPU: 65 PID: 3959 at lib/list_debug.c:26\n__list_add_valid+0x53/0x80\nCPU: 65 PID: 3959 Comm: fbdev Tainted: G U\nRIP: 0010:__list_add_valid+0x53/0x80\nCall Trace:\n \n fb_deferred_io_mkwrite+0xea/0x150\n do_page_mkwrite+0x57/0xc0\n do_wp_page+0x278/0x2f0\n __handle_mm_fault+0xdc2/0x1590\n handle_mm_fault+0xdd/0x2c0\n do_user_addr_fault+0x1d3/0x650\n exc_page_fault+0x77/0x180\n ? asm_exc_page_fault+0x8/0x30\n asm_exc_page_fault+0x1e/0x30\nRIP: 0033:0x7fd98fc8fad1\n==\n\nFigure out the race happens when one process is adding &page->lru into\nthe pagelist tail in fb_deferred_io_mkwrite(), another process is\nre-initializing the same &page->lru in fb_deferred_io_fault(), which is\nnot protected by the lock.\n\nThis fix is to init all the page lists one time during initialization,\nit not only fixes the list corruption, but also avoids INIT_LIST_HEAD()\nredundantly.\n\nV2: change \"int i\" to \"unsigned int i\" (Geert Uytterhoeven)"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/6a9ae2fe887042f76fd3d334349e64e8ab3c55a2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/856082f021a28221db2c32bd0531614a8382be67",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e79b2b2aadeffe1db54a6b569b9b621575c3eb07",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49512.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49512.json
new file mode 100644
index 00000000000..8994694e905
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49512.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49512",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:27.287",
+ "lastModified": "2025-02-26T07:01:27.287",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: denali: Use managed device resources\n\nAll of the resources used by this driver has managed interfaces, so use\nthem. Otherwise we will get the following splat:\n\n[ 4.472703] denali-nand-pci 0000:00:05.0: timeout while waiting for irq 0x1000\n[ 4.474071] denali-nand-pci: probe of 0000:00:05.0 failed with error -5\n[ 4.473538] nand: No NAND device found\n[ 4.474068] BUG: unable to handle page fault for address: ffffc90005000410\n[ 4.475169] #PF: supervisor write access in kernel mode\n[ 4.475579] #PF: error_code(0x0002) - not-present page\n[ 4.478362] RIP: 0010:iowrite32+0x9/0x50\n[ 4.486068] Call Trace:\n[ 4.486269] \n[ 4.486443] denali_isr+0x15b/0x300 [denali]\n[ 4.486788] ? denali_direct_write+0x50/0x50 [denali]\n[ 4.487189] __handle_irq_event_percpu+0x161/0x3b0\n[ 4.487571] handle_irq_event+0x7d/0x1b0\n[ 4.487884] handle_fasteoi_irq+0x2b0/0x770\n[ 4.488219] __common_interrupt+0xc8/0x1b0\n[ 4.488549] common_interrupt+0x9a/0xc0"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3830dbdfb9a4aec680e43ed80b9f23db7a88eac9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3a745b51cddafade99aaea1b93aad31e9614e230",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3c68daf4a368cd9e63ae5a2145c9e4a6f838c166",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/87149cf9186201a63f0e0b93d9fa93d480bcb771",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/efea1dd176edd17c8252051b7de6957f06efc394",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49513.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49513.json
new file mode 100644
index 00000000000..38e77cf54aa
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49513.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49513",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:27.380",
+ "lastModified": "2025-02-26T07:01:27.380",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: governor: Use kobject release() method to free dbs_data\n\nThe struct dbs_data embeds a struct gov_attr_set and\nthe struct gov_attr_set embeds a kobject. Since every kobject must have\na release() method and we can't use kfree() to free it directly,\nso introduce cpufreq_dbs_data_release() to release the dbs_data via\nthe kobject::release() method. This fixes the calltrace like below:\n\n ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x34\n WARNING: CPU: 12 PID: 810 at lib/debugobjects.c:505 debug_print_object+0xb8/0x100\n Modules linked in:\n CPU: 12 PID: 810 Comm: sh Not tainted 5.16.0-next-20220120-yocto-standard+ #536\n Hardware name: Marvell OcteonTX CN96XX board (DT)\n pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : debug_print_object+0xb8/0x100\n lr : debug_print_object+0xb8/0x100\n sp : ffff80001dfcf9a0\n x29: ffff80001dfcf9a0 x28: 0000000000000001 x27: ffff0001464f0000\n x26: 0000000000000000 x25: ffff8000090e3f00 x24: ffff80000af60210\n x23: ffff8000094dfb78 x22: ffff8000090e3f00 x21: ffff0001080b7118\n x20: ffff80000aeb2430 x19: ffff800009e8f5e0 x18: 0000000000000000\n x17: 0000000000000002 x16: 00004d62e58be040 x15: 013590470523aff8\n x14: ffff8000090e1828 x13: 0000000001359047 x12: 00000000f5257d14\n x11: 0000000000040591 x10: 0000000066c1ffea x9 : ffff8000080d15e0\n x8 : ffff80000a1765a8 x7 : 0000000000000000 x6 : 0000000000000001\n x5 : ffff800009e8c000 x4 : ffff800009e8c760 x3 : 0000000000000000\n x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0001474ed040\n Call trace:\n debug_print_object+0xb8/0x100\n __debug_check_no_obj_freed+0x1d0/0x25c\n debug_check_no_obj_freed+0x24/0xa0\n kfree+0x11c/0x440\n cpufreq_dbs_governor_exit+0xa8/0xac\n cpufreq_exit_governor+0x44/0x90\n cpufreq_set_policy+0x29c/0x570\n store_scaling_governor+0x110/0x154\n store+0xb0/0xe0\n sysfs_kf_write+0x58/0x84\n kernfs_fop_write_iter+0x12c/0x1c0\n new_sync_write+0xf0/0x18c\n vfs_write+0x1cc/0x220\n ksys_write+0x74/0x100\n __arm64_sys_write+0x28/0x3c\n invoke_syscall.constprop.0+0x58/0xf0\n do_el0_svc+0x70/0x170\n el0_svc+0x54/0x190\n el0t_64_sync_handler+0xa4/0x130\n el0t_64_sync+0x1a0/0x1a4\n irq event stamp: 189006\n hardirqs last enabled at (189005): [] finish_task_switch.isra.0+0xe0/0x2c0\n hardirqs last disabled at (189006): [] el1_dbg+0x24/0xa0\n softirqs last enabled at (188966): [] __do_softirq+0x4b0/0x6a0\n softirqs last disabled at (188957): [] __irq_exit_rcu+0x108/0x1a4\n\n[ rjw: Because can be freed by the gov_attr_set_put() in\n cpufreq_dbs_governor_exit() now, it is also necessary to put the\n invocation of the governor ->exit() callback into the new\n cpufreq_dbs_data_release() function. ]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1e32083f327184b6226ce320ef30085ce785ea4e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a1964688582d26af1328e19b658933659fb54337",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a85ee6401a47ae3fc64ba506cacb3e7873823c65",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49514.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49514.json
new file mode 100644
index 00000000000..3ef1f24326f
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49514.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49514",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:27.470",
+ "lastModified": "2025-02-26T07:01:27.470",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe\n\nCall of_node_put(platform_node) to avoid refcount leak in\nthe error path."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0a1901f34f775b83ea4b8dbb5ed992147b9b8531",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1e932aba3c7628c9f880ee9c2cfcc2ae3ba0c01e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/23f340ed906c758cec6527376768e3bc1474ac30",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/48889eb3cce91d7f58e02bc07277b7f724b7a54a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4f4e0454e226de3bf4efd7e7924d1edc571c52d5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/98d5afe868df998b0244f4c229ab758b4083684a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc43b9fdca519c5b13be6a717bacbebccd628cf6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ebd5cb4f1f3f10b839e7575219e0f17b60c23113",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fb66e0512e5ccc093070e21cf88cce8d98c181b5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49515.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49515.json
new file mode 100644
index 00000000000..9adc27efc2a
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49515.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49515",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:27.567",
+ "lastModified": "2025-02-26T07:01:27.567",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: cs35l41: Fix an out-of-bounds access in otp_packed_element_t\n\nThe CS35L41_NUM_OTP_ELEM is 100, but only 99 entries are defined in\nthe array otp_map_1/2[CS35L41_NUM_OTP_ELEM], this will trigger UBSAN\nto report a shift-out-of-bounds warning in the cs35l41_otp_unpack()\nsince the last entry in the array will result in GENMASK(-1, 0).\n\nUBSAN reports this problem:\n UBSAN: shift-out-of-bounds in /home/hwang4/build/jammy/jammy/sound/soc/codecs/cs35l41-lib.c:836:8\n shift exponent 64 is too large for 64-bit type 'long unsigned int'\n CPU: 10 PID: 595 Comm: systemd-udevd Not tainted 5.15.0-23-generic #23\n Hardware name: LENOVO \\x02MFG_IN_GO/\\x02MFG_IN_GO, BIOS N3GET19W (1.00 ) 03/11/2022\n Call Trace:\n \n show_stack+0x52/0x58\n dump_stack_lvl+0x4a/0x5f\n dump_stack+0x10/0x12\n ubsan_epilogue+0x9/0x45\n __ubsan_handle_shift_out_of_bounds.cold+0x61/0xef\n ? regmap_unlock_mutex+0xe/0x10\n cs35l41_otp_unpack.cold+0x1c6/0x2b2 [snd_soc_cs35l41_lib]\n cs35l41_hda_probe+0x24f/0x33a [snd_hda_scodec_cs35l41]\n cs35l41_hda_i2c_probe+0x65/0x90 [snd_hda_scodec_cs35l41_i2c]\n ? cs35l41_hda_i2c_remove+0x20/0x20 [snd_hda_scodec_cs35l41_i2c]\n i2c_device_probe+0x252/0x2b0"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/9f342904216f378e88008bb0ce1ae200a4b99fe8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a59b9958416096dd21dc4f62b0c5be525d459ca8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dbc35268e14d5d89c7a9db72009ad4dcd9ede646",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49516.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49516.json
new file mode 100644
index 00000000000..7d7eab209ff
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49516.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49516",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:27.653",
+ "lastModified": "2025-02-26T07:01:27.653",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: always check VF VSI pointer values\n\nThe ice_get_vf_vsi function can return NULL in some cases, such as if\nhandling messages during a reset where the VSI is being removed and\nrecreated.\n\nSeveral places throughout the driver do not bother to check whether this\nVSI pointer is valid. Static analysis tools maybe report issues because\nthey detect paths where a potentially NULL pointer could be dereferenced.\n\nFix this by checking the return value of ice_get_vf_vsi everywhere."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/baeb705fd6a7245cc1fa69ed991a9cffdf44a174",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e7be3877589d539c52e5d1d23a625f889b541b9d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49517.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49517.json
new file mode 100644
index 00000000000..e6889164d69
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49517.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49517",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:27.740",
+ "lastModified": "2025-02-26T07:01:27.740",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe\n\nThis node pointer is returned by of_parse_phandle() with\nrefcount incremented in this function.\nCalling of_node_put() to avoid the refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/05654431a18fe24e5e46a375d98904134628a102",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/318afb1442eeef089fe7f8a8297d97c0302ff6f6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/61a85a20e8df5e0a92cfe169c92425c7bae0753b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9345122f5fb9f97a206f440f38bb656e53f46912",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/94587aa17abf8b26f543d2b29c44abc21bc36836",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bc2afecaabd2a2c9f17e43b4793a30e3461bfb29",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c71494f5f2b444adfd992a7359a0d2a791642b39",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f279c49f17ce10866087ea6c0c57382158974b63",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49518.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49518.json
new file mode 100644
index 00000000000..2c60eb68c5f
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49518.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49518",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:27.837",
+ "lastModified": "2025-02-26T07:01:27.837",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: ipc3-topology: Correct get_control_data for non bytes payload\n\nIt is possible to craft a topology where sof_get_control_data() would do\nout of bounds access because it expects that it is only called when the\npayload is bytes type.\nConfusingly it also handles other types of controls, but the payload\nparsing implementation is only valid for bytes.\n\nFix the code to count the non bytes controls and instead of storing a\npointer to sof_abi_hdr in sof_widget_data (which is only valid for bytes),\nstore the pointer to the data itself and add a new member to save the size\nof the data.\n\nIn case of non bytes controls we store the pointer to the chanv itself,\nwhich is just an array of values at the end.\n\nIn case of bytes control, drop the wrong cdata->data (wdata[i].pdata) check\nagainst NULL since it is incorrect and invalid in this context.\nThe data is pointing to the end of cdata struct, so it should never be\nnull."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/896b03bb7c7010042786cfae2115083d4c241dd3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a962890a5a3cce903ff7c7a19fadee63ed9efdc7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49519.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49519.json
new file mode 100644
index 00000000000..388b8a28af1
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49519.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49519",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:27.923",
+ "lastModified": "2025-02-26T07:01:27.923",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nath10k: skip ath10k_halt during suspend for driver state RESTARTING\n\nDouble free crash is observed when FW recovery(caused by wmi\ntimeout/crash) is followed by immediate suspend event. The FW recovery\nis triggered by ath10k_core_restart() which calls driver clean up via\nath10k_halt(). When the suspend event occurs between the FW recovery,\nthe restart worker thread is put into frozen state until suspend completes.\nThe suspend event triggers ath10k_stop() which again triggers ath10k_halt()\nThe double invocation of ath10k_halt() causes ath10k_htt_rx_free() to be\ncalled twice(Note: ath10k_htt_rx_alloc was not called by restart worker\nthread because of its frozen state), causing the crash.\n\nTo fix this, during the suspend flow, skip call to ath10k_halt() in\nath10k_stop() when the current driver state is ATH10K_STATE_RESTARTING.\nAlso, for driver state ATH10K_STATE_RESTARTING, call\nath10k_wait_for_suspend() in ath10k_stop(). This is because call to\nath10k_wait_for_suspend() is skipped later in\n[ath10k_halt() > ath10k_core_stop()] for the driver state\nATH10K_STATE_RESTARTING.\n\nThe frozen restart worker thread will be cancelled during resume when the\ndevice comes out of suspend.\n\nBelow is the crash stack for reference:\n\n[ 428.469167] ------------[ cut here ]------------\n[ 428.469180] kernel BUG at mm/slub.c:4150!\n[ 428.469193] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI\n[ 428.469219] Workqueue: events_unbound async_run_entry_fn\n[ 428.469230] RIP: 0010:kfree+0x319/0x31b\n[ 428.469241] RSP: 0018:ffffa1fac015fc30 EFLAGS: 00010246\n[ 428.469247] RAX: ffffedb10419d108 RBX: ffff8c05262b0000\n[ 428.469252] RDX: ffff8c04a8c07000 RSI: 0000000000000000\n[ 428.469256] RBP: ffffa1fac015fc78 R08: 0000000000000000\n[ 428.469276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 428.469285] Call Trace:\n[ 428.469295] ? dma_free_attrs+0x5f/0x7d\n[ 428.469320] ath10k_core_stop+0x5b/0x6f\n[ 428.469336] ath10k_halt+0x126/0x177\n[ 428.469352] ath10k_stop+0x41/0x7e\n[ 428.469387] drv_stop+0x88/0x10e\n[ 428.469410] __ieee80211_suspend+0x297/0x411\n[ 428.469441] rdev_suspend+0x6e/0xd0\n[ 428.469462] wiphy_suspend+0xb1/0x105\n[ 428.469483] ? name_show+0x2d/0x2d\n[ 428.469490] dpm_run_callback+0x8c/0x126\n[ 428.469511] ? name_show+0x2d/0x2d\n[ 428.469517] __device_suspend+0x2e7/0x41b\n[ 428.469523] async_suspend+0x1f/0x93\n[ 428.469529] async_run_entry_fn+0x3d/0xd1\n[ 428.469535] process_one_work+0x1b1/0x329\n[ 428.469541] worker_thread+0x213/0x372\n[ 428.469547] kthread+0x150/0x15f\n[ 428.469552] ? pr_cont_work+0x58/0x58\n[ 428.469558] ? kthread_blkcg+0x31/0x31\n\nTested-on: QCA6174 hw3.2 PCI WLAN.RM.4.4.1-00288-QCARMSWPZ-1"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5321e5211b5dc873e2e3d0deb749e69ecf4dbfe5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7eb14cb604f49e58b7cf6faa87961a865a3c8649",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8aa3750986ffcf73e0692db3b40dd3a8e8c0c575",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b72a4aff947ba807177bdabb43debaf2c66bee05",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c2272428090d0d215a3f017cbbbad731c07eee53",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49520.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49520.json
new file mode 100644
index 00000000000..4cea300c0e4
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49520.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49520",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:28.017",
+ "lastModified": "2025-02-26T07:01:28.017",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall\n\nIf a compat process tries to execute an unknown system call above the\n__ARM_NR_COMPAT_END number, the kernel sends a SIGILL signal to the\noffending process. Information about the error is printed to dmesg in\ncompat_arm_syscall() -> arm64_notify_die() -> arm64_force_sig_fault() ->\narm64_show_signal().\n\narm64_show_signal() interprets a non-zero value for\ncurrent->thread.fault_code as an exception syndrome and displays the\nmessage associated with the ESR_ELx.EC field (bits 31:26).\ncurrent->thread.fault_code is set in compat_arm_syscall() ->\narm64_notify_die() with the bad syscall number instead of a valid ESR_ELx\nvalue. This means that the ESR_ELx.EC field has the value that the user set\nfor the syscall number and the kernel can end up printing bogus exception\nmessages*. For example, for the syscall number 0x68000000, which evaluates\nto ESR_ELx.EC value of 0x1A (ESR_ELx_EC_FPAC) the kernel prints this error:\n\n[ 18.349161] syscall[300]: unhandled exception: ERET/ERETAA/ERETAB, ESR 0x68000000, Oops - bad compat syscall(2) in syscall[10000+50000]\n[ 18.350639] CPU: 2 PID: 300 Comm: syscall Not tainted 5.18.0-rc1 #79\n[ 18.351249] Hardware name: Pine64 RockPro64 v2.0 (DT)\n[..]\n\nwhich is misleading, as the bad compat syscall has nothing to do with\npointer authentication.\n\nStop arm64_show_signal() from printing exception syndrome information by\nhaving compat_arm_syscall() set the ESR_ELx value to 0, as it has no\nmeaning for an invalid system call number. The example above now becomes:\n\n[ 19.935275] syscall[301]: unhandled exception: Oops - bad compat syscall(2) in syscall[10000+50000]\n[ 19.936124] CPU: 1 PID: 301 Comm: syscall Not tainted 5.18.0-rc1-00005-g7e08006d4102 #80\n[ 19.936894] Hardware name: Pine64 RockPro64 v2.0 (DT)\n[..]\n\nwhich although shows less information because the syscall number,\nwrongfully advertised as the ESR value, is missing, it is better than\nshowing plainly wrong information. The syscall number can be easily\nobtained with strace.\n\n*A 32-bit value above or equal to 0x8000_0000 is interpreted as a negative\ninteger in compat_arm_syscal() and the condition scno < __ARM_NR_COMPAT_END\nevaluates to true; the syscall will exit to userspace in this case with the\nENOSYS error code instead of arm64_notify_die() being called."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/095e975f8150ccd7f852eb578c1cdbdd2f517c7a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3910ae71cb963fa2b68e684489d4fc3d105afda0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3fed9e551417b84038b15117732ea4505eee386b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/621916afe8cd4f322eb12759b64a2f938d4e551d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ad97425d23af3c3b8d4f6a2bb666cb485087c007",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/efd183d988b416fcdf6f7c298a17ced4859ca77d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49521.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49521.json
new file mode 100644
index 00000000000..acaa73e170c
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49521.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49521",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:28.113",
+ "lastModified": "2025-02-26T07:01:28.113",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp()\n\nIf no handler is found in lpfc_complete_unsol_iocb() to match the rctl of a\nreceived frame, the frame is dropped and resources are leaked.\n\nFix by returning resources when discarding an unhandled frame type. Update\nlpfc_fc_frame_check() handling of NOP basic link service."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/08709769ff2fb6c5ffedcda3742700d8ea1618a8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/40cf4ea4d2d497f7732c87d350ba5c3f5e8a43a1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/646db1a560f44236b7278b822ca99a1d3b6ea72c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7860d8f8082605b57596aa82d3d438c1fdad9a9e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fa1b509d41c5433672f72c0615cf4aefa0611c99",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49522.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49522.json
new file mode 100644
index 00000000000..208ad81a706
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49522.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49522",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:28.210",
+ "lastModified": "2025-02-26T07:01:28.210",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: jz4740: Apply DMA engine limits to maximum segment size\n\nDo what is done in other DMA-enabled MMC host drivers (cf. host/mmci.c) and\nlimit the maximum segment size based on the DMA engine's capabilities. This\nis needed to avoid warnings like the following with CONFIG_DMA_API_DEBUG=y.\n\n------------[ cut here ]------------\nWARNING: CPU: 0 PID: 21 at kernel/dma/debug.c:1162 debug_dma_map_sg+0x2f4/0x39c\nDMA-API: jz4780-dma 13420000.dma-controller: mapping sg segment longer than device claims to support [len=98304] [max=65536]\nCPU: 0 PID: 21 Comm: kworker/0:1H Not tainted 5.18.0-rc1 #19\nWorkqueue: kblockd blk_mq_run_work_fn\nStack : 81575aec 00000004 80620000 80620000 80620000 805e7358 00000009 801537ac\n 814c832c 806276e3 806e34b4 80620000 81575aec 00000001 81575ab8 09291444\n 00000000 00000000 805e7358 81575958 ffffffea 8157596c 00000000 636f6c62\n 6220646b 80387a70 0000000f 6d5f6b6c 80620000 00000000 81575ba4 00000009\n 805e170c 80896640 00000001 00010000 00000000 00000000 00006098 806e0000\n ...\nCall Trace:\n[<80107670>] show_stack+0x84/0x120\n[<80528cd8>] __warn+0xb8/0xec\n[<80528d78>] warn_slowpath_fmt+0x6c/0xb8\n[<8016f1d4>] debug_dma_map_sg+0x2f4/0x39c\n[<80169d4c>] __dma_map_sg_attrs+0xf0/0x118\n[<8016a27c>] dma_map_sg_attrs+0x14/0x28\n[<804f66b4>] jz4740_mmc_prepare_dma_data+0x74/0xa4\n[<804f6714>] jz4740_mmc_pre_request+0x30/0x54\n[<804f4ff4>] mmc_blk_mq_issue_rq+0x6e0/0x7bc\n[<804f5590>] mmc_mq_queue_rq+0x220/0x2d4\n[<8038b2c0>] blk_mq_dispatch_rq_list+0x480/0x664\n[<80391040>] blk_mq_do_dispatch_sched+0x2dc/0x370\n[<80391468>] __blk_mq_sched_dispatch_requests+0xec/0x164\n[<80391540>] blk_mq_sched_dispatch_requests+0x44/0x94\n[<80387900>] __blk_mq_run_hw_queue+0xb0/0xcc\n[<80134c14>] process_one_work+0x1b8/0x264\n[<80134ff8>] worker_thread+0x2ec/0x3b8\n[<8013b13c>] kthread+0x104/0x10c\n[<80101dcc>] ret_from_kernel_thread+0x14/0x1c\n\n---[ end trace 0000000000000000 ]---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/353298cadbd4c7d8e8a16d6000066414694933c3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7923f95997a79cef2ad161a2facae64c25a0bca0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/807f90f1960a59dc557542b818c484a8db9ac978",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/90281cadf5077f2d2bec8b08c2ead1f8cd12660e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a828920b9ec0d89d3011198d482b7fe224d2de19",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/afadb04f1d6e74b18a253403f5274cde5e3fd7bd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49523.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49523.json
new file mode 100644
index 00000000000..17eff4dd032
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49523.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49523",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:28.310",
+ "lastModified": "2025-02-26T07:01:28.310",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nath11k: disable spectral scan during spectral deinit\n\nWhen ath11k modules are removed using rmmod with spectral scan enabled,\ncrash is observed. Different crash trace is observed for each crash.\n\nSend spectral scan disable WMI command to firmware before cleaning\nthe spectral dbring in the spectral_deinit API to avoid this crash.\n\ncall trace from one of the crash observed:\n[ 1252.880802] Unable to handle kernel NULL pointer dereference at virtual address 00000008\n[ 1252.882722] pgd = 0f42e886\n[ 1252.890955] [00000008] *pgd=00000000\n[ 1252.893478] Internal error: Oops: 5 [#1] PREEMPT SMP ARM\n[ 1253.093035] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.4.89 #0\n[ 1253.115261] Hardware name: Generic DT based system\n[ 1253.121149] PC is at ath11k_spectral_process_data+0x434/0x574 [ath11k]\n[ 1253.125940] LR is at 0x88e31017\n[ 1253.132448] pc : [<7f9387b8>] lr : [<88e31017>] psr: a0000193\n[ 1253.135488] sp : 80d01bc8 ip : 00000001 fp : 970e0000\n[ 1253.141737] r10: 88e31000 r9 : 970ec000 r8 : 00000080\n[ 1253.146946] r7 : 94734040 r6 : a0000113 r5 : 00000057 r4 : 00000000\n[ 1253.152159] r3 : e18cb694 r2 : 00000217 r1 : 1df1f000 r0 : 00000001\n[ 1253.158755] Flags: NzCv IRQs off FIQs on Mode SVC_32 ISA ARM Segment user\n[ 1253.165266] Control: 10c0383d Table: 5e71006a DAC: 00000055\n[ 1253.172472] Process swapper/0 (pid: 0, stack limit = 0x60870141)\n[ 1253.458055] [<7f9387b8>] (ath11k_spectral_process_data [ath11k]) from [<7f917fdc>] (ath11k_dbring_buffer_release_event+0x214/0x2e4 [ath11k])\n[ 1253.466139] [<7f917fdc>] (ath11k_dbring_buffer_release_event [ath11k]) from [<7f8ea3c4>] (ath11k_wmi_tlv_op_rx+0x1840/0x29cc [ath11k])\n[ 1253.478807] [<7f8ea3c4>] (ath11k_wmi_tlv_op_rx [ath11k]) from [<7f8fe868>] (ath11k_htc_rx_completion_handler+0x180/0x4e0 [ath11k])\n[ 1253.490699] [<7f8fe868>] (ath11k_htc_rx_completion_handler [ath11k]) from [<7f91308c>] (ath11k_ce_per_engine_service+0x2c4/0x3b4 [ath11k])\n[ 1253.502386] [<7f91308c>] (ath11k_ce_per_engine_service [ath11k]) from [<7f9a4198>] (ath11k_pci_ce_tasklet+0x28/0x80 [ath11k_pci])\n[ 1253.514811] [<7f9a4198>] (ath11k_pci_ce_tasklet [ath11k_pci]) from [<8032227c>] (tasklet_action_common.constprop.2+0x64/0xe8)\n[ 1253.526476] [<8032227c>] (tasklet_action_common.constprop.2) from [<803021e8>] (__do_softirq+0x130/0x2d0)\n[ 1253.537756] [<803021e8>] (__do_softirq) from [<80322610>] (irq_exit+0xcc/0xe8)\n[ 1253.547304] [<80322610>] (irq_exit) from [<8036a4a4>] (__handle_domain_irq+0x60/0xb4)\n[ 1253.554428] [<8036a4a4>] (__handle_domain_irq) from [<805eb348>] (gic_handle_irq+0x4c/0x90)\n[ 1253.562321] [<805eb348>] (gic_handle_irq) from [<80301a78>] (__irq_svc+0x58/0x8c)\n\nTested-on: QCN6122 hw1.0 AHB WLAN.HK.2.6.0.1-00851-QCAHKSWPL_SILICONZ-1"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/161c64de239c7018e0295e7e0520a19f00aa32dc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/451b9076903a057b7b8d5b24dc84b3e436a1c743",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4b9c54caef58d2b55074710952cda70540722c01",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/60afa4f4e1350c876d8a061182a70c224de275dd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8f15e67af9bec5a69e815e0230a70cffddae371a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49524.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49524.json
new file mode 100644
index 00000000000..3e6a9ee3a86
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49524.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49524",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:28.407",
+ "lastModified": "2025-02-26T07:01:28.407",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: pci: cx23885: Fix the error handling in cx23885_initdev()\n\nWhen the driver fails to call the dma_set_mask(), the driver will get\nthe following splat:\n\n[ 55.853884] BUG: KASAN: use-after-free in __process_removed_driver+0x3c/0x240\n[ 55.854486] Read of size 8 at addr ffff88810de60408 by task modprobe/590\n[ 55.856822] Call Trace:\n[ 55.860327] __process_removed_driver+0x3c/0x240\n[ 55.861347] bus_for_each_dev+0x102/0x160\n[ 55.861681] i2c_del_driver+0x2f/0x50\n\nThis is because the driver has initialized the i2c related resources\nin cx23885_dev_setup() but not released them in error handling, fix this\nbug by modifying the error path that jumps after failing to call the\ndma_set_mask()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/453514a874c78df1e7804e6e3aaa60c8d8deb6a8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6041d1a0365baa729b6adfb6ed5386d9388018db",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7b9978e1c94e569d65a0e7e719abb9340f5db4a0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/86bd6a579c6c60547706cabf299cd2c9feab3332",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/98106f100f50c487469903b9cf6d966785fc9cc3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ca17e7a532d1a55466cc007b3f4d319541a27493",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e8123311cf06d7dae71e8c5fe78e0510d20cd30b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fa636e9ee4442215cd9a2e079cd5a8e1fe0cb8ba",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49525.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49525.json
new file mode 100644
index 00000000000..96b7db188fd
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49525.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49525",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:28.500",
+ "lastModified": "2025-02-26T07:01:28.500",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cx25821: Fix the warning when removing the module\n\nWhen removing the module, we will get the following warning:\n\n[ 14.746697] remove_proc_entry: removing non-empty directory 'irq/21', leaking at least 'cx25821[1]'\n[ 14.747449] WARNING: CPU: 4 PID: 368 at fs/proc/generic.c:717 remove_proc_entry+0x389/0x3f0\n[ 14.751611] RIP: 0010:remove_proc_entry+0x389/0x3f0\n[ 14.759589] Call Trace:\n[ 14.759792] \n[ 14.759975] unregister_irq_proc+0x14c/0x170\n[ 14.760340] irq_free_descs+0x94/0xe0\n[ 14.760640] mp_unmap_irq+0xb6/0x100\n[ 14.760937] acpi_unregister_gsi_ioapic+0x27/0x40\n[ 14.761334] acpi_pci_irq_disable+0x1d3/0x320\n[ 14.761688] pci_disable_device+0x1ad/0x380\n[ 14.762027] ? _raw_spin_unlock_irqrestore+0x2d/0x60\n[ 14.762442] ? cx25821_shutdown+0x20/0x9f0 [cx25821]\n[ 14.762848] cx25821_finidev+0x48/0xc0 [cx25821]\n[ 14.763242] pci_device_remove+0x92/0x240\n\nFix this by freeing the irq before call pci_disable_device()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/005fd553f5f10fe8618d92f94ad10f9051eac331",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1f0fc1dfb5fdd456657519a97fab83691b96c6a0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2203436a4d24302871617373a7eb21bc17e38762",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/222292930c8ecc3516e03ec1f9fa8448be7ff496",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/258639bc55a586ee6df92d89786ccf1c71546d70",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3f94169affa33c9db4a439d88f09cb2ed3a33332",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4d6295b6d986476232332fffd08575b185f90d81",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5beb85ff7d005ddb7bf604a4f2dc76f01b84b318",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9d92291698e5cc35a2b8a1106a01ddd7d60ade2d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49526.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49526.json
new file mode 100644
index 00000000000..59e630371ea
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49526.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49526",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:28.593",
+ "lastModified": "2025-02-26T07:01:28.593",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/bitmap: don't set sb values if can't pass sanity check\n\nIf bitmap area contains invalid data, kernel will crash then mdadm\ntriggers \"Segmentation fault\".\nThis is cluster-md speical bug. In non-clustered env, mdadm will\nhandle broken metadata case. In clustered array, only kernel space\nhandles bitmap slot info. But even this bug only happened in clustered\nenv, current sanity check is wrong, the code should be changed.\n\nHow to trigger: (faulty injection)\n\ndd if=/dev/zero bs=1M count=1 oflag=direct of=/dev/sda\ndd if=/dev/zero bs=1M count=1 oflag=direct of=/dev/sdb\nmdadm -C /dev/md0 -b clustered -e 1.2 -n 2 -l mirror /dev/sda /dev/sdb\nmdadm -Ss\necho aaa > magic.txt\n == below modifying slot 2 bitmap data ==\ndd if=magic.txt of=/dev/sda seek=16384 bs=1 count=3 <== destroy magic\ndd if=/dev/zero of=/dev/sda seek=16436 bs=1 count=4 <== ZERO chunksize\nmdadm -A /dev/md0 /dev/sda /dev/sdb\n == kernel crashes. mdadm outputs \"Segmentation fault\" ==\n\nReason of kernel crash:\n\nIn md_bitmap_read_sb (called by md_bitmap_create), bad bitmap magic didn't\nblock chunksize assignment, and zero value made DIV_ROUND_UP_SECTOR_T()\ntrigger \"divide error\".\n\nCrash log:\n\nkernel: md: md0 stopped.\nkernel: md/raid1:md0: not clean -- starting background reconstruction\nkernel: md/raid1:md0: active with 2 out of 2 mirrors\nkernel: dlm: ... ...\nkernel: md-cluster: Joined cluster 44810aba-38bb-e6b8-daca-bc97a0b254aa slot 1\nkernel: md0: invalid bitmap file superblock: bad magic\nkernel: md_bitmap_copy_from_slot can't get bitmap from slot 2\nkernel: md-cluster: Could not gather bitmaps from slot 2\nkernel: divide error: 0000 [#1] SMP NOPTI\nkernel: CPU: 0 PID: 1603 Comm: mdadm Not tainted 5.14.6-1-default\nkernel: Hardware name: QEMU Standard PC (i440FX + PIIX, 1996)\nkernel: RIP: 0010:md_bitmap_create+0x1d1/0x850 [md_mod]\nkernel: RSP: 0018:ffffc22ac0843ba0 EFLAGS: 00010246\nkernel: ... ...\nkernel: Call Trace:\nkernel: ? dlm_lock_sync+0xd0/0xd0 [md_cluster 77fe..7a0]\nkernel: md_bitmap_copy_from_slot+0x2c/0x290 [md_mod 24ea..d3a]\nkernel: load_bitmaps+0xec/0x210 [md_cluster 77fe..7a0]\nkernel: md_bitmap_load+0x81/0x1e0 [md_mod 24ea..d3a]\nkernel: do_md_run+0x30/0x100 [md_mod 24ea..d3a]\nkernel: md_ioctl+0x1290/0x15a0 [md_mod 24ea....d3a]\nkernel: ? mddev_unlock+0xaa/0x130 [md_mod 24ea..d3a]\nkernel: ? blkdev_ioctl+0xb1/0x2b0\nkernel: block_ioctl+0x3b/0x40\nkernel: __x64_sys_ioctl+0x7f/0xb0\nkernel: do_syscall_64+0x59/0x80\nkernel: ? exit_to_user_mode_prepare+0x1ab/0x230\nkernel: ? syscall_exit_to_user_mode+0x18/0x40\nkernel: ? do_syscall_64+0x69/0x80\nkernel: entry_SYSCALL_64_after_hwframe+0x44/0xae\nkernel: RIP: 0033:0x7f4a15fa722b\nkernel: ... ...\nkernel: ---[ end trace 8afa7612f559c868 ]---\nkernel: RIP: 0010:md_bitmap_create+0x1d1/0x850 [md_mod]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0959aa00f9765bd8c654b1365012e41b51c733cc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/27f672af28a8e9b783ff7f0eaf7ef2fbd5a2f4ba",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/422e8f7ba1e08c8e0e88d375bcb550bc2bbfe96d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cf9392282a2cf5a8d83dd1c5aa1a097e12f172bc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d8f1558e1daf54f53a90b4c5700ae3e3a4b13412",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e68cb83a57a458b01c9739e2ad9cb70b04d1e6d2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e69e93120f6219b9cc4fba3b515b6ababd8548aa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49527.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49527.json
new file mode 100644
index 00000000000..e9a5556ac90
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49527.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49527",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:28.690",
+ "lastModified": "2025-02-26T07:01:28.690",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: venus: hfi: avoid null dereference in deinit\n\nIf venus_probe fails at pm_runtime_put_sync the error handling first\ncalls hfi_destroy and afterwards hfi_core_deinit. As hfi_destroy sets\ncore->ops to NULL, hfi_core_deinit cannot call the core_deinit function\nanymore.\n\nAvoid this null pointer derefence by skipping the call when necessary."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0ac84ab50712879eac3c1dd2598440652a85d3d0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0ed5a643b1a4a46b9b7bfba5d468c10cc30e1359",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2533acb652359c9e097dfa33587896af782e8a91",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/27ad46da44177a78a4a0cae6fe03906888c61aa1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/86594f6af867b5165d2ba7b5a71fae3a5961e56c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9c385b961d4c378228e80f6abea8509cb67feab6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a21d15dde21d7e8ae047eb8368677407db45d840",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b73ed0510bb8d9647cd8e8a4c4c8772bbe545c3a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49528.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49528.json
new file mode 100644
index 00000000000..9c91ab57570
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49528.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49528",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:28.780",
+ "lastModified": "2025-02-26T07:01:28.780",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: i2c: dw9714: Disable the regulator when the driver fails to probe\n\nWhen the driver fails to probe, we will get the following splat:\n\n[ 59.305988] ------------[ cut here ]------------\n[ 59.306417] WARNING: CPU: 2 PID: 395 at drivers/regulator/core.c:2257 _regulator_put+0x3ec/0x4e0\n[ 59.310345] RIP: 0010:_regulator_put+0x3ec/0x4e0\n[ 59.318362] Call Trace:\n[ 59.318582] \n[ 59.318765] regulator_put+0x1f/0x30\n[ 59.319058] devres_release_group+0x319/0x3d0\n[ 59.319420] i2c_device_probe+0x766/0x940\n\nFix this by disabling the regulator in error handling."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/02276e18defa2fccf16413b44440277d98c2b1ea",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fa83ea1de5b3efd87fe01408d5db1fd2ff4767fa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49529.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49529.json
new file mode 100644
index 00000000000..7c4622ab534
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49529.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49529",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:28.873",
+ "lastModified": "2025-02-26T07:01:28.873",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/pm: fix the null pointer while the smu is disabled\n\nIt needs to check if the pp_funcs is initialized while release the\ncontext, otherwise it will trigger null pointer panic while the software\nsmu is not enabled.\n\n[ 1109.404555] BUG: kernel NULL pointer dereference, address: 0000000000000078\n[ 1109.404609] #PF: supervisor read access in kernel mode\n[ 1109.404638] #PF: error_code(0x0000) - not-present page\n[ 1109.404657] PGD 0 P4D 0\n[ 1109.404672] Oops: 0000 [#1] PREEMPT SMP NOPTI\n[ 1109.404701] CPU: 7 PID: 9150 Comm: amdgpu_test Tainted: G OEL 5.16.0-custom #1\n[ 1109.404732] Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006\n[ 1109.404765] RIP: 0010:amdgpu_dpm_force_performance_level+0x1d/0x170 [amdgpu]\n[ 1109.405109] Code: 5d c3 44 8b a3 f0 80 00 00 eb e5 66 90 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 08 4c 8b b7 f0 7d 00 00 <49> 83 7e 78 00 0f 84 f2 00 00 00 80 bf 87 80 00 00 00 48 89 fb 0f\n[ 1109.405176] RSP: 0018:ffffaf3083ad7c20 EFLAGS: 00010282\n[ 1109.405203] RAX: 0000000000000000 RBX: ffff9796b1c14600 RCX: 0000000002862007\n[ 1109.405229] RDX: ffff97968591c8c0 RSI: 0000000000000001 RDI: ffff9796a3700000\n[ 1109.405260] RBP: ffffaf3083ad7c50 R08: ffffffff9897de00 R09: ffff979688d9db60\n[ 1109.405286] R10: 0000000000000000 R11: ffff979688d9db90 R12: 0000000000000001\n[ 1109.405316] R13: ffff9796a3700000 R14: 0000000000000000 R15: ffff9796a3708fc0\n[ 1109.405345] FS: 00007ff055cff180(0000) GS:ffff9796bfdc0000(0000) knlGS:0000000000000000\n[ 1109.405378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 1109.405400] CR2: 0000000000000078 CR3: 000000000a394000 CR4: 00000000000506e0\n[ 1109.405434] Call Trace:\n[ 1109.405445] \n[ 1109.405456] ? delete_object_full+0x1d/0x20\n[ 1109.405480] amdgpu_ctx_set_stable_pstate+0x7c/0xa0 [amdgpu]\n[ 1109.405698] amdgpu_ctx_fini.part.0+0xcb/0x100 [amdgpu]\n[ 1109.405911] amdgpu_ctx_do_release+0x71/0x80 [amdgpu]\n[ 1109.406121] amdgpu_ctx_ioctl+0x52d/0x550 [amdgpu]\n[ 1109.406327] ? _raw_spin_unlock+0x1a/0x30\n[ 1109.406354] ? drm_gem_handle_delete+0x81/0xb0 [drm]\n[ 1109.406400] ? amdgpu_ctx_get_entity+0x2c0/0x2c0 [amdgpu]\n[ 1109.406609] drm_ioctl_kernel+0xb6/0x140 [drm]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/49ec3441aa5e5940f3e82dd2f0205b9c856e399d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eea5c7b3390c6e006ba4cbd906447dd8cea8cfbf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49530.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49530.json
new file mode 100644
index 00000000000..87430032a3f
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49530.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49530",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:28.967",
+ "lastModified": "2025-02-26T07:01:28.967",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/pm: fix double free in si_parse_power_table()\n\nIn function si_parse_power_table(), array adev->pm.dpm.ps and its member\nis allocated. If the allocation of each member fails, the array itself\nis freed and returned with an error code. However, the array is later\nfreed again in si_dpm_fini() function which is called when the function\nreturns an error.\n\nThis leads to potential double free of the array adev->pm.dpm.ps, as\nwell as leak of its array members, since the members are not freed in\nthe allocation function and the array is not nulled when freed.\nIn addition adev->pm.dpm.num_ps, which keeps track of the allocated\narray member, is not updated until the member allocation is\nsuccessfully finished, this could also lead to either use after free,\nor uninitialized variable access in si_dpm_fini().\n\nFix this by postponing the free of the array until si_dpm_fini() and\nincrement adev->pm.dpm.num_ps everytime the array member is allocated."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2615464854505188f909d0c07c37a6623693b5c7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/43eb9b667b95f2a31c63e8949b0d2161b9be59c3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6c5bdaa1325be7f04b79ea992ab216739192d342",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a5ce7051db044290b1a95045ff03c249005a3aa4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/af832028af6f44c6c45645757079c4ed6884ade5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c0e811c4ccf3b42705976285e3a94cc82dea7300",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ca1ce206894dd976275c78ee38dbc19873f22de9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f3fa2becf2fc25b6ac7cf8d8b1a2e4a86b3b72bd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fd2eff8b9dcbe469c3b7bbbc7083ab5ed94de07b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49531.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49531.json
new file mode 100644
index 00000000000..414a0a57150
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49531.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49531",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:29.067",
+ "lastModified": "2025-02-26T07:01:29.067",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nloop: implement ->free_disk\n\nEnsure that the lo_device which is stored in the gendisk private\ndata is valid until the gendisk is freed. Currently the loop driver\nuses a lot of effort to make sure a device is not freed when it is\nstill in use, but to to fix a potential deadlock this will be relaxed\na bit soon."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/aadd1443aae7fe8956e3b11157827067f034406a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d2c7f56f8b5256d57f9e3fc7794c31361d43bdd9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49532.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49532.json
new file mode 100644
index 00000000000..f44206e932b
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49532.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49532",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:29.170",
+ "lastModified": "2025-02-26T07:01:29.170",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes\n\ndrm_cvt_mode may return NULL and we should check it.\n\nThis bug is found by syzkaller:\n\nFAULT_INJECTION stacktrace:\n[ 168.567394] FAULT_INJECTION: forcing a failure.\nname failslab, interval 1, probability 0, space 0, times 1\n[ 168.567403] CPU: 1 PID: 6425 Comm: syz Kdump: loaded Not tainted 4.19.90-vhulk2201.1.0.h1035.kasan.eulerosv2r10.aarch64 #1\n[ 168.567406] Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015\n[ 168.567408] Call trace:\n[ 168.567414] dump_backtrace+0x0/0x310\n[ 168.567418] show_stack+0x28/0x38\n[ 168.567423] dump_stack+0xec/0x15c\n[ 168.567427] should_fail+0x3ac/0x3d0\n[ 168.567437] __should_failslab+0xb8/0x120\n[ 168.567441] should_failslab+0x28/0xc0\n[ 168.567445] kmem_cache_alloc_trace+0x50/0x640\n[ 168.567454] drm_mode_create+0x40/0x90\n[ 168.567458] drm_cvt_mode+0x48/0xc78\n[ 168.567477] virtio_gpu_conn_get_modes+0xa8/0x140 [virtio_gpu]\n[ 168.567485] drm_helper_probe_single_connector_modes+0x3a4/0xd80\n[ 168.567492] drm_mode_getconnector+0x2e0/0xa70\n[ 168.567496] drm_ioctl_kernel+0x11c/0x1d8\n[ 168.567514] drm_ioctl+0x558/0x6d0\n[ 168.567522] do_vfs_ioctl+0x160/0xf30\n[ 168.567525] ksys_ioctl+0x98/0xd8\n[ 168.567530] __arm64_sys_ioctl+0x50/0xc8\n[ 168.567536] el0_svc_common+0xc8/0x320\n[ 168.567540] el0_svc_handler+0xf8/0x160\n[ 168.567544] el0_svc+0x10/0x218\n\nKASAN stacktrace:\n[ 168.567561] BUG: KASAN: null-ptr-deref in virtio_gpu_conn_get_modes+0xb4/0x140 [virtio_gpu]\n[ 168.567565] Read of size 4 at addr 0000000000000054 by task syz/6425\n[ 168.567566]\n[ 168.567571] CPU: 1 PID: 6425 Comm: syz Kdump: loaded Not tainted 4.19.90-vhulk2201.1.0.h1035.kasan.eulerosv2r10.aarch64 #1\n[ 168.567573] Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015\n[ 168.567575] Call trace:\n[ 168.567578] dump_backtrace+0x0/0x310\n[ 168.567582] show_stack+0x28/0x38\n[ 168.567586] dump_stack+0xec/0x15c\n[ 168.567591] kasan_report+0x244/0x2f0\n[ 168.567594] __asan_load4+0x58/0xb0\n[ 168.567607] virtio_gpu_conn_get_modes+0xb4/0x140 [virtio_gpu]\n[ 168.567612] drm_helper_probe_single_connector_modes+0x3a4/0xd80\n[ 168.567617] drm_mode_getconnector+0x2e0/0xa70\n[ 168.567621] drm_ioctl_kernel+0x11c/0x1d8\n[ 168.567624] drm_ioctl+0x558/0x6d0\n[ 168.567628] do_vfs_ioctl+0x160/0xf30\n[ 168.567632] ksys_ioctl+0x98/0xd8\n[ 168.567636] __arm64_sys_ioctl+0x50/0xc8\n[ 168.567641] el0_svc_common+0xc8/0x320\n[ 168.567645] el0_svc_handler+0xf8/0x160\n[ 168.567649] el0_svc+0x10/0x218"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0f8bc147a963686b7351aa35d1701124ffacac08",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/194d250cdc4a40ccbd179afd522a9e9846957402",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/32e10aabc287f09a148ff759bb9ce70b01b0012c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/848dd072744ea662ab3097e3c8282bee552df218",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c51d00472fa54b9b05c17789ed665c17adf3a25d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e0828456578cc8ba0a69147f7ae3428392eec287",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/edafcad84c4134ebec4bc24b29ca4497a1184eea",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f85cb059fad03a3b33a50023be91e944bb065ae8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fadc626cae99aaa1325094edc6a9e2b883f3e562",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49533.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49533.json
new file mode 100644
index 00000000000..220245cc903
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49533.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49533",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:29.293",
+ "lastModified": "2025-02-26T07:01:29.293",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nath11k: Change max no of active probe SSID and BSSID to fw capability\n\nThe maximum number of SSIDs in a for active probe requests is currently\nreported as 16 (WLAN_SCAN_PARAMS_MAX_SSID) when registering the driver.\nThe scan_req_params structure only has the capacity to hold 10 SSIDs.\nThis leads to a buffer overflow which can be triggered from\nwpa_supplicant in userspace. When copying the SSIDs into the\nscan_req_params structure in the ath11k_mac_op_hw_scan route, it can\noverwrite the extraie pointer.\n\nFirmware supports 16 ssid * 4 bssid, for each ssid 4 bssid combo probe\nrequest will be sent, so totally 64 probe requests supported. So\nset both max ssid and bssid to 16 and 4 respectively. Remove the\nredundant macros of ssid and bssid.\n\nTested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.7.0.1-01300-QCAHKSWPL_SILICONZ-1"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/210505788f1d243232e21ef660efcd4838890ce8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/50dc9ce9f80554a88e33b73c30851acf2be36ed3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ec5dfa1d66f2f71a48dab027d26a9fa78eb0f58f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49534.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49534.json
new file mode 100644
index 00000000000..f68bfd96222
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49534.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49534",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:29.400",
+ "lastModified": "2025-02-26T07:01:29.400",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT\n\nThere is a potential memory leak in lpfc_ignore_els_cmpl() and\nlpfc_els_rsp_reject() that was allocated from NPIV PLOGI_RJT\n(lpfc_rcv_plogi()'s login_mbox).\n\nCheck if cmdiocb->context_un.mbox was allocated in lpfc_ignore_els_cmpl(),\nand then free it back to phba->mbox_mem_pool along with mbox->ctx_buf for\nservice parameters.\n\nFor lpfc_els_rsp_reject() failure, free both the ctx_buf for service\nparameters and the login_mbox."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/672d1cb40551ea9c95efad43ab6d45e4ab4e015f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c00df0f34a6d5e14da379f96ea67e501ce67b002",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49535.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49535.json
new file mode 100644
index 00000000000..c979a489c93
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49535.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49535",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:29.490",
+ "lastModified": "2025-02-26T07:01:29.490",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI\n\nIf lpfc_issue_els_flogi() fails and returns non-zero status, the node\nreference count is decremented to trigger the release of the nodelist\nstructure. However, if there is a prior registration or dev-loss-evt work\npending, the node may be released prematurely. When dev-loss-evt\ncompletes, the released node is referenced causing a use-after-free null\npointer dereference.\n\nSimilarly, when processing non-zero ELS PLOGI completion status in\nlpfc_cmpl_els_plogi(), the ndlp flags are checked for a transport\nregistration before triggering node removal. If dev-loss-evt work is\npending, the node may be released prematurely and a subsequent call to\nlpfc_dev_loss_tmo_handler() results in a use after free ndlp dereference.\n\nAdd test for pending dev-loss before decrementing the node reference count\nfor FLOGI, PLOGI, PRLI, and ADISC handling."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/10663ebec0ad5c78493a0dd34c9ee4d73d7ca0df",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/577a942df3de2666f6947bdd3a5c9e8d30073424",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49536.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49536.json
new file mode 100644
index 00000000000..e8b9150dc73
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49536.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49536",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:29.580",
+ "lastModified": "2025-02-26T07:01:29.580",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix SCSI I/O completion and abort handler deadlock\n\nDuring stress I/O tests with 500+ vports, hard LOCKUP call traces are\nobserved.\n\nCPU A:\n native_queued_spin_lock_slowpath+0x192\n _raw_spin_lock_irqsave+0x32\n lpfc_handle_fcp_err+0x4c6\n lpfc_fcp_io_cmd_wqe_cmpl+0x964\n lpfc_sli4_fp_handle_cqe+0x266\n __lpfc_sli4_process_cq+0x105\n __lpfc_sli4_hba_process_cq+0x3c\n lpfc_cq_poll_hdler+0x16\n irq_poll_softirq+0x76\n __softirqentry_text_start+0xe4\n irq_exit+0xf7\n do_IRQ+0x7f\n\nCPU B:\n native_queued_spin_lock_slowpath+0x5b\n _raw_spin_lock+0x1c\n lpfc_abort_handler+0x13e\n scmd_eh_abort_handler+0x85\n process_one_work+0x1a7\n worker_thread+0x30\n kthread+0x112\n ret_from_fork+0x1f\n\nDiagram of lockup:\n\nCPUA CPUB\n---- ----\nlpfc_cmd->buf_lock\n phba->hbalock\n lpfc_cmd->buf_lock\nphba->hbalock\n\nFix by reordering the taking of the lpfc_cmd->buf_lock and phba->hbalock in\nlpfc_abort_handler routine so that it tries to take the lpfc_cmd->buf_lock\nfirst before phba->hbalock."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/03cbbd7c2f5ee288f648f4aeedc765a181188553",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0c4eed901285b9cae36a622f32bea3e92490da6c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/21c0d469349957b5dc811c41200a2a998996ca8d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7625e81de2164a082810e1f27547d388406da610",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49537.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49537.json
new file mode 100644
index 00000000000..40297e72b83
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49537.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49537",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:29.667",
+ "lastModified": "2025-02-26T07:01:29.667",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix call trace observed during I/O with CMF enabled\n\nThe following was seen with CMF enabled:\n\nBUG: using smp_processor_id() in preemptible\ncode: systemd-udevd/31711\nkernel: caller is lpfc_update_cmf_cmd+0x214/0x420 [lpfc]\nkernel: CPU: 12 PID: 31711 Comm: systemd-udevd\nkernel: Call Trace:\nkernel: \nkernel: dump_stack_lvl+0x44/0x57\nkernel: check_preemption_disabled+0xbf/0xe0\nkernel: lpfc_update_cmf_cmd+0x214/0x420 [lpfc]\nkernel: lpfc_nvme_fcp_io_submit+0x23b4/0x4df0 [lpfc]\n\nthis_cpu_ptr() calls smp_processor_id() in a preemptible context.\n\nFix by using per_cpu_ptr() with raw_smp_processor_id() instead."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/517e0835cfb2007713ff16c4fb8479f08b16aec7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ae373d66c427812754db5292eb1481b181daf9ce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cd7f899de4b1b829125d72ee6fbfd878b637b815",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d6d45f67a11136cb88a70a29ab22ea6db8ae6bd5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49538.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49538.json
new file mode 100644
index 00000000000..5e284973cb7
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49538.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49538",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:29.760",
+ "lastModified": "2025-02-26T07:01:29.760",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: jack: Access input_dev under mutex\n\nIt is possible when using ASoC that input_dev is unregistered while\ncalling snd_jack_report, which causes NULL pointer dereference.\nIn order to prevent this serialize access to input_dev using mutex lock."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1b6a6fc5280e97559287b61eade2d4b363e836f2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/582aea6084cc59fec881204f026816d1219f2348",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5cc6f623f4818c7d7e9e966a45ebf324901ca9c5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/74bab3bcf422593c582e47130aa8eb41ebb2dc09",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8487a88136d54a1a4d3f26f1399685db648ab879",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9e6a73b0c0f2014eb89249fb1640c5a3d58221c4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c093b62c40027c21d649c5534ad7aa3605a99b00",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e2b8681769f6e205382f026b907d28aa5ec9d59a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f68bed124c7699e23ffb4ce4fcc84671e9193cde",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49539.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49539.json
new file mode 100644
index 00000000000..6d36668dd6a
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49539.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49539",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:29.857",
+ "lastModified": "2025-02-26T07:01:29.857",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtw89: ser: fix CAM leaks occurring in L2 reset\n\nThe CAM, meaning address CAM and bssid CAM here, will get leaks during\nSER (system error recover) L2 reset process and ieee80211_restart_hw()\nwhich is called by L2 reset process eventually.\n\nThe normal flow would be like\n-> add interface (acquire 1)\n-> enter ips (release 1)\n-> leave ips (acquire 1)\n-> connection (occupy 1) <(A) 1 leak after L2 reset if non-sec connection>\n\nThe ieee80211_restart_hw() flow (under connection)\n-> ieee80211 reconfig\n-> add interface (acquire 1)\n-> leave ips (acquire 1)\n-> connection (occupy (A) + 2) <(B) 1 more leak>\n\nOriginally, CAM is released before HW restart only if connection is under\nsecurity. Now, release CAM whatever connection it is to fix leak in (A).\nOTOH, check if CAM is already valid to avoid acquiring multiple times to\nfix (B).\n\nBesides, if AP mode, release address CAM of all stations before HW restart."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/b169f877f001a474fb89939842c390518160bcc5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f6aff772c9978844529618d86aafb53e5d3ae161",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49540.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49540.json
new file mode 100644
index 00000000000..75b784095cb
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49540.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49540",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:29.947",
+ "lastModified": "2025-02-26T07:01:29.947",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrcu-tasks: Fix race in schedule and flush work\n\nWhile booting secondary CPUs, cpus_read_[lock/unlock] is not keeping\nonline cpumask stable. The transient online mask results in below\ncalltrace.\n\n[ 0.324121] CPU1: Booted secondary processor 0x0000000001 [0x410fd083]\n[ 0.346652] Detected PIPT I-cache on CPU2\n[ 0.347212] CPU2: Booted secondary processor 0x0000000002 [0x410fd083]\n[ 0.377255] Detected PIPT I-cache on CPU3\n[ 0.377823] CPU3: Booted secondary processor 0x0000000003 [0x410fd083]\n[ 0.379040] ------------[ cut here ]------------\n[ 0.383662] WARNING: CPU: 0 PID: 10 at kernel/workqueue.c:3084 __flush_work+0x12c/0x138\n[ 0.384850] Modules linked in:\n[ 0.385403] CPU: 0 PID: 10 Comm: rcu_tasks_rude_ Not tainted 5.17.0-rc3-v8+ #13\n[ 0.386473] Hardware name: Raspberry Pi 4 Model B Rev 1.4 (DT)\n[ 0.387289] pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 0.388308] pc : __flush_work+0x12c/0x138\n[ 0.388970] lr : __flush_work+0x80/0x138\n[ 0.389620] sp : ffffffc00aaf3c60\n[ 0.390139] x29: ffffffc00aaf3d20 x28: ffffffc009c16af0 x27: ffffff80f761df48\n[ 0.391316] x26: 0000000000000004 x25: 0000000000000003 x24: 0000000000000100\n[ 0.392493] x23: ffffffffffffffff x22: ffffffc009c16b10 x21: ffffffc009c16b28\n[ 0.393668] x20: ffffffc009e53861 x19: ffffff80f77fbf40 x18: 00000000d744fcc9\n[ 0.394842] x17: 000000000000000b x16: 00000000000001c2 x15: ffffffc009e57550\n[ 0.396016] x14: 0000000000000000 x13: ffffffffffffffff x12: 0000000100000000\n[ 0.397190] x11: 0000000000000462 x10: ffffff8040258008 x9 : 0000000100000000\n[ 0.398364] x8 : 0000000000000000 x7 : ffffffc0093c8bf4 x6 : 0000000000000000\n[ 0.399538] x5 : 0000000000000000 x4 : ffffffc00a976e40 x3 : ffffffc00810444c\n[ 0.400711] x2 : 0000000000000004 x1 : 0000000000000000 x0 : 0000000000000000\n[ 0.401886] Call trace:\n[ 0.402309] __flush_work+0x12c/0x138\n[ 0.402941] schedule_on_each_cpu+0x228/0x278\n[ 0.403693] rcu_tasks_rude_wait_gp+0x130/0x144\n[ 0.404502] rcu_tasks_kthread+0x220/0x254\n[ 0.405264] kthread+0x174/0x1ac\n[ 0.405837] ret_from_fork+0x10/0x20\n[ 0.406456] irq event stamp: 102\n[ 0.406966] hardirqs last enabled at (101): [] _raw_spin_unlock_irq+0x78/0xb4\n[ 0.408304] hardirqs last disabled at (102): [] el1_dbg+0x24/0x5c\n[ 0.409410] softirqs last enabled at (54): [] local_bh_enable+0xc/0x2c\n[ 0.410645] softirqs last disabled at (50): [] local_bh_disable+0xc/0x2c\n[ 0.411890] ---[ end trace 0000000000000000 ]---\n[ 0.413000] smp: Brought up 1 node, 4 CPUs\n[ 0.413762] SMP: Total of 4 processors activated.\n[ 0.414566] CPU features: detected: 32-bit EL0 Support\n[ 0.415414] CPU features: detected: 32-bit EL1 Support\n[ 0.416278] CPU features: detected: CRC32 instructions\n[ 0.447021] Callback from call_rcu_tasks_rude() invoked.\n[ 0.506693] Callback from call_rcu_tasks() invoked.\n\nThis commit therefore fixes this issue by applying a single-CPU\noptimization to the RCU Tasks Rude grace-period process. The key point\nhere is that the purpose of this RCU flavor is to force a schedule on\neach online CPU since some past event. But the rcu_tasks_rude_wait_gp()\nfunction runs in the context of the RCU Tasks Rude's grace-period kthread,\nso there must already have been a context switch on the current CPU since\nthe call to either synchronize_rcu_tasks_rude() or call_rcu_tasks_rude().\nSo if there is only a single CPU online, RCU Tasks Rude's grace-period\nkthread does not need to anything at all.\n\nIt turns out that the rcu_tasks_rude_wait_gp() function's call to\nschedule_on_each_cpu() causes problems during early boot. During that\ntime, there is only one online CPU, namely the boot CPU. Therefore,\napplying this single-CPU optimization fixes early-boot instances of\nthis problem."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1c6c3f2336642fb3074593911f5176565f47ec41",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/230bf5878af6038dfb63d9184272a58475236580",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8f49a8758b5cd541bd7aa9a0d0d11c7426141c0e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ba722d061bc4b54802d701fc63fc2fd988934603",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f75fd4b9221d93177c50dcfde671b2e907f53e86",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49541.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49541.json
new file mode 100644
index 00000000000..e7d74b26163
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49541.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49541",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:30.043",
+ "lastModified": "2025-02-26T07:01:30.043",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix potential double free during failed mount\n\nRHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=2088799"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/8378a51e3f8140f60901fb27208cc7a6e47047b5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9a167fc440e5693c1cdd7f07071e05658bd9d89d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ce0008a0e410cdd95f0d8cd81b2902ec10a660c4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ee71f8f1cd3c8c4a251fd3e8abc89215ae3457cb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49542.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49542.json
new file mode 100644
index 00000000000..a1520054dea
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49542.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49542",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:30.133",
+ "lastModified": "2025-02-26T07:01:30.133",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg()\n\nIn an attempt to log message 0126 with LOG_TRACE_EVENT, the following hard\nlockup call trace hangs the system.\n\nCall Trace:\n _raw_spin_lock_irqsave+0x32/0x40\n lpfc_dmp_dbg.part.32+0x28/0x220 [lpfc]\n lpfc_cmpl_els_fdisc+0x145/0x460 [lpfc]\n lpfc_sli_cancel_jobs+0x92/0xd0 [lpfc]\n lpfc_els_flush_cmd+0x43c/0x670 [lpfc]\n lpfc_els_flush_all_cmd+0x37/0x60 [lpfc]\n lpfc_sli4_async_event_proc+0x956/0x1720 [lpfc]\n lpfc_do_work+0x1485/0x1d70 [lpfc]\n kthread+0x112/0x130\n ret_from_fork+0x1f/0x40\nKernel panic - not syncing: Hard LOCKUP\n\nThe same CPU tries to claim the phba->port_list_lock twice.\n\nMove the cfg_log_verbose checks as part of the lpfc_printf_vlog() and\nlpfc_printf_log() macros before calling lpfc_dmp_dbg(). There is no need\nto take the phba->port_list_lock within lpfc_dmp_dbg()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/09c772557a4fd9490fed1bfb133268313ea22213",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/271725e4028559ae7974d762a8467dc9de412f2e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc6501afccec55b8b6c90584cbf71f1fefa77d1e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e294647b1aed4247fe52851f3a3b2b19ae906228",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49543.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49543.json
new file mode 100644
index 00000000000..cdf2b82bc0b
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49543.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49543",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:30.220",
+ "lastModified": "2025-02-26T07:01:30.220",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nath11k: fix the warning of dev_wake in mhi_pm_disable_transition()\n\nWhen test device recovery with below command, it has warning in message\nas below.\necho assert > /sys/kernel/debug/ath11k/wcn6855\\ hw2.0/simulate_fw_crash\necho assert > /sys/kernel/debug/ath11k/qca6390\\ hw2.0/simulate_fw_crash\n\nwarning message:\n[ 1965.642121] ath11k_pci 0000:06:00.0: simulating firmware assert crash\n[ 1968.471364] ieee80211 phy0: Hardware restart was requested\n[ 1968.511305] ------------[ cut here ]------------\n[ 1968.511368] WARNING: CPU: 3 PID: 1546 at drivers/bus/mhi/core/pm.c:505 mhi_pm_disable_transition+0xb37/0xda0 [mhi]\n[ 1968.511443] Modules linked in: ath11k_pci ath11k mac80211 libarc4 cfg80211 qmi_helpers qrtr_mhi mhi qrtr nvme nvme_core\n[ 1968.511563] CPU: 3 PID: 1546 Comm: kworker/u17:0 Kdump: loaded Tainted: G W 5.17.0-rc3-wt-ath+ #579\n[ 1968.511629] Hardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021\n[ 1968.511704] Workqueue: mhi_hiprio_wq mhi_pm_st_worker [mhi]\n[ 1968.511787] RIP: 0010:mhi_pm_disable_transition+0xb37/0xda0 [mhi]\n[ 1968.511870] Code: a9 fe ff ff 4c 89 ff 44 89 04 24 e8 03 46 f6 e5 44 8b 04 24 41 83 f8 01 0f 84 21 fe ff ff e9 4c fd ff ff 0f 0b e9 af f8 ff ff <0f> 0b e9 5c f8 ff ff 48 89 df e8 da 9e ee e3 e9 12 fd ff ff 4c 89\n[ 1968.511923] RSP: 0018:ffffc900024efbf0 EFLAGS: 00010286\n[ 1968.511969] RAX: 00000000ffffffff RBX: ffff88811d241250 RCX: ffffffffc0176922\n[ 1968.512014] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888118a90a24\n[ 1968.512059] RBP: ffff888118a90800 R08: 0000000000000000 R09: ffff888118a90a27\n[ 1968.512102] R10: ffffed1023152144 R11: 0000000000000001 R12: ffff888118a908ac\n[ 1968.512229] R13: ffff888118a90928 R14: dffffc0000000000 R15: ffff888118a90a24\n[ 1968.512310] FS: 0000000000000000(0000) GS:ffff888234200000(0000) knlGS:0000000000000000\n[ 1968.512405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 1968.512493] CR2: 00007f5538f443a8 CR3: 000000016dc28001 CR4: 00000000003706e0\n[ 1968.512587] Call Trace:\n[ 1968.512672] \n[ 1968.512751] ? _raw_spin_unlock_irq+0x1f/0x40\n[ 1968.512859] mhi_pm_st_worker+0x3ac/0x790 [mhi]\n[ 1968.512959] ? mhi_pm_mission_mode_transition.isra.0+0x7d0/0x7d0 [mhi]\n[ 1968.513063] process_one_work+0x86a/0x1400\n[ 1968.513184] ? pwq_dec_nr_in_flight+0x230/0x230\n[ 1968.513312] ? move_linked_works+0x125/0x290\n[ 1968.513416] worker_thread+0x6db/0xf60\n[ 1968.513536] ? process_one_work+0x1400/0x1400\n[ 1968.513627] kthread+0x241/0x2d0\n[ 1968.513733] ? kthread_complete_and_exit+0x20/0x20\n[ 1968.513821] ret_from_fork+0x22/0x30\n[ 1968.513924] \n\nReason is mhi_deassert_dev_wake() from mhi_device_put() is called\nbut mhi_assert_dev_wake() from __mhi_device_get_sync() is not called\nin progress of recovery. Commit 8e0559921f9a (\"bus: mhi: core:\nSkip device wake in error or shutdown state\") add check for the\npm_state of mhi in __mhi_device_get_sync(), and the pm_state is not\nthe normal state untill recovery is completed, so it leads the\ndev_wake is not 0 and above warning print in mhi_pm_disable_transition()\nwhile checking mhi_cntrl->dev_wake.\n\nAdd check in ath11k_pci_write32()/ath11k_pci_read32() to skip call\nmhi_device_put() if mhi_device_get_sync() does not really do wake,\nthen the warning gone.\n\nTested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03003-QCAHSPSWPL_V1_V2_SILICONZ_LITE-2"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0d7a8a6204ea9271f1d0a8c66a9fd2f54d2e3cbc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5f18206cddae033c488e4879f198699092ca0524",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a2d9b7357469949ad02f511fc69f8fa3a1afbf89",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49544.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49544.json
new file mode 100644
index 00000000000..35667edae6c
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49544.json
@@ -0,0 +1,53 @@
+{
+ "id": "CVE-2022-49544",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:30.313",
+ "lastModified": "2025-02-26T07:01:30.313",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipw2x00: Fix potential NULL dereference in libipw_xmit()\n\ncrypt and crypt->ops could be null, so we need to checking null\nbefore dereference"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/167affc11781d7d35c4c3a7630a549ac74dd0b21",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1ff6b0727c8988f25eeb670b6c038c1120bb58dd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/48d4a820fd33f012e5f63735a59d15b5a3882882",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/528d2023ccf4748fd542582955236c1634a7d293",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5f7ea274e88c0eeffe6bd6dbf6cf5c479d356af6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8fb1b9beb085bb767ae43e441db5ac6fcd66a04d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/98d1dc32f890642476dbb78ed3437a456bf421b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b4628e0d3754ab2fc98ee6e3d21851ba45798077",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e8366bbabe1d207cf7c5b11ae50e223ae6fc278b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49545.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49545.json
new file mode 100644
index 00000000000..b57ffa8905e
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49545.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49545",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:30.410",
+ "lastModified": "2025-02-26T07:01:30.410",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Cancel pending work at closing a MIDI substream\n\nAt closing a USB MIDI output substream, there might be still a pending\nwork, which would eventually access the rawmidi runtime object that is\nbeing released. For fixing the race, make sure to cancel the pending\nwork at closing."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0125de38122f0f66bf61336158d12a1aabfe6425",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/11868ca21585561659c2575b0d6508ef8e9c4291",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/40bdb5ec957aca5c5c1924602bef6b0ab18e22d3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/517dcef4d2dda0132648f1e4c079ed17bba4d1a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5e5fe2b6065541c6216a7a003b0cddf386be0d2d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49546.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49546.json
new file mode 100644
index 00000000000..a52d5dba209
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49546.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49546",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:30.500",
+ "lastModified": "2025-02-26T07:01:30.500",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kexec: fix memory leak of elf header buffer\n\nThis is reported by kmemleak detector:\n\nunreferenced object 0xffffc900002a9000 (size 4096):\n comm \"kexec\", pid 14950, jiffies 4295110793 (age 373.951s)\n hex dump (first 32 bytes):\n 7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00 .ELF............\n 04 00 3e 00 01 00 00 00 00 00 00 00 00 00 00 00 ..>.............\n backtrace:\n [<0000000016a8ef9f>] __vmalloc_node_range+0x101/0x170\n [<000000002b66b6c0>] __vmalloc_node+0xb4/0x160\n [<00000000ad40107d>] crash_prepare_elf64_headers+0x8e/0xcd0\n [<0000000019afff23>] crash_load_segments+0x260/0x470\n [<0000000019ebe95c>] bzImage64_load+0x814/0xad0\n [<0000000093e16b05>] arch_kexec_kernel_image_load+0x1be/0x2a0\n [<000000009ef2fc88>] kimage_file_alloc_init+0x2ec/0x5a0\n [<0000000038f5a97a>] __do_sys_kexec_file_load+0x28d/0x530\n [<0000000087c19992>] do_syscall_64+0x3b/0x90\n [<0000000066e063a4>] entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nIn crash_prepare_elf64_headers(), a buffer is allocated via vmalloc() to\nstore elf headers. While it's not freed back to system correctly when\nkdump kernel is reloaded or unloaded. Then memory leak is caused. Fix it\nby introducing x86 specific function arch_kimage_file_post_load_cleanup(),\nand freeing the buffer there.\n\nAnd also remove the incorrect elf header buffer freeing code. Before\ncalling arch specific kexec_file loading function, the image instance has\nbeen initialized. So 'image->elf_headers' must be NULL. It doesn't make\nsense to free the elf header buffer in the place.\n\nThree different people have reported three bugs about the memory leak on\nx86_64 inside Redhat."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/115ee42a4c2f26ba2b4ace2668a3f004621f6833",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8765a423a87d74ef24ea02b43b2728fe4039f248",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b3e34a47f98974d0844444c5121aaff123004e57",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f675e3a9189d84a9324ab45b0cb19906c2bc8fcb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49547.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49547.json
new file mode 100644
index 00000000000..c3c889a1685
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49547.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49547",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:30.590",
+ "lastModified": "2025-02-26T07:01:30.590",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix deadlock between concurrent dio writes when low on free data space\n\nWhen reserving data space for a direct IO write we can end up deadlocking\nif we have multiple tasks attempting a write to the same file range, there\nare multiple extents covered by that file range, we are low on available\nspace for data and the writes don't expand the inode's i_size.\n\nThe deadlock can happen like this:\n\n1) We have a file with an i_size of 1M, at offset 0 it has an extent with\n a size of 128K and at offset 128K it has another extent also with a\n size of 128K;\n\n2) Task A does a direct IO write against file range [0, 256K), and because\n the write is within the i_size boundary, it takes the inode's lock (VFS\n level) in shared mode;\n\n3) Task A locks the file range [0, 256K) at btrfs_dio_iomap_begin(), and\n then gets the extent map for the extent covering the range [0, 128K).\n At btrfs_get_blocks_direct_write(), it creates an ordered extent for\n that file range ([0, 128K));\n\n4) Before returning from btrfs_dio_iomap_begin(), it unlocks the file\n range [0, 256K);\n\n5) Task A executes btrfs_dio_iomap_begin() again, this time for the file\n range [128K, 256K), and locks the file range [128K, 256K);\n\n6) Task B starts a direct IO write against file range [0, 256K) as well.\n It also locks the inode in shared mode, as it's within the i_size limit,\n and then tries to lock file range [0, 256K). It is able to lock the\n subrange [0, 128K) but then blocks waiting for the range [128K, 256K),\n as it is currently locked by task A;\n\n7) Task A enters btrfs_get_blocks_direct_write() and tries to reserve data\n space. Because we are low on available free space, it triggers the\n async data reclaim task, and waits for it to reserve data space;\n\n8) The async reclaim task decides to wait for all existing ordered extents\n to complete (through btrfs_wait_ordered_roots()).\n It finds the ordered extent previously created by task A for the file\n range [0, 128K) and waits for it to complete;\n\n9) The ordered extent for the file range [0, 128K) can not complete\n because it blocks at btrfs_finish_ordered_io() when trying to lock the\n file range [0, 128K).\n\n This results in a deadlock, because:\n\n - task B is holding the file range [0, 128K) locked, waiting for the\n range [128K, 256K) to be unlocked by task A;\n\n - task A is holding the file range [128K, 256K) locked and it's waiting\n for the async data reclaim task to satisfy its space reservation\n request;\n\n - the async data reclaim task is waiting for ordered extent [0, 128K)\n to complete, but the ordered extent can not complete because the\n file range [0, 128K) is currently locked by task B, which is waiting\n on task A to unlock file range [128K, 256K) and task A waiting\n on the async data reclaim task.\n\n This results in a deadlock between 4 task: task A, task B, the async\n data reclaim task and the task doing ordered extent completion (a work\n queue task).\n\nThis type of deadlock can sporadically be triggered by the test case\ngeneric/300 from fstests, and results in a stack trace like the following:\n\n[12084.033689] INFO: task kworker/u16:7:123749 blocked for more than 241 seconds.\n[12084.034877] Not tainted 5.18.0-rc2-btrfs-next-115 #1\n[12084.035562] \"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n[12084.036548] task:kworker/u16:7 state:D stack: 0 pid:123749 ppid: 2 flags:0x00004000\n[12084.036554] Workqueue: btrfs-flush_delalloc btrfs_work_helper [btrfs]\n[12084.036599] Call Trace:\n[12084.036601] \n[12084.036606] __schedule+0x3cb/0xed0\n[12084.036616] schedule+0x4e/0xb0\n[12084.036620] btrfs_start_ordered_extent+0x109/0x1c0 [btrfs]\n[12084.036651] ? prepare_to_wait_exclusive+0xc0/0xc0\n[12084.036659] btrfs_run_ordered_extent_work+0x1a/0x30 [btrfs]\n[12084.036688] btrfs_work_helper+0xf8/0x400 [btrfs]\n[12084.0367\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/cfae6f765b3c40882ee90dae8fbf9325c8de9c35",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f5585f4f0ef5b17026bbd60fbff6fcc91b99d5bf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49548.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49548.json
new file mode 100644
index 00000000000..f9866cb5736
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49548.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49548",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:30.683",
+ "lastModified": "2025-02-26T07:01:30.683",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix potential array overflow in bpf_trampoline_get_progs()\n\nThe cnt value in the 'cnt >= BPF_MAX_TRAMP_PROGS' check does not\ninclude BPF_TRAMP_MODIFY_RETURN bpf programs, so the number of\nthe attached BPF_TRAMP_MODIFY_RETURN bpf programs in a trampoline\ncan exceed BPF_MAX_TRAMP_PROGS.\n\nWhen this happens, the assignment '*progs++ = aux->prog' in\nbpf_trampoline_get_progs() will cause progs array overflow as the\nprogs field in the bpf_tramp_progs struct can only hold at most\nBPF_MAX_TRAMP_PROGS bpf programs."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/32c4559c61652f24c9fdd5440342196fe37453bc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4f8897bcc20b9ae44758e0572538d741ab66f0dc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7f845de2863334bed4f362e95853f5e7bc323737",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a2aa95b71c9bbec793b5c5fa50f0a80d882b3e8d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e36452d5da6325df7c10cffc60a9e68d21e2606d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49549.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49549.json
new file mode 100644
index 00000000000..76a3fcf46ea
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49549.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49549",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:30.773",
+ "lastModified": "2025-02-26T07:01:30.773",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/MCE/AMD: Fix memory leak when threshold_create_bank() fails\n\nIn mce_threshold_create_device(), if threshold_create_bank() fails, the\npreviously allocated threshold banks array @bp will be leaked because\nthe call to mce_threshold_remove_device() will not free it.\n\nThis happens because mce_threshold_remove_device() fetches the pointer\nthrough the threshold_banks per-CPU variable but bp is written there\nonly after the bank creation is successful, and not before, when\nthreshold_create_bank() fails.\n\nAdd a helper which unwinds all the bank creation work previously done\nand pass into it the previously allocated threshold banks array for\nfreeing.\n\n [ bp: Massage. ]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/396b8e7ab2a99ddac57d3522b3da5e58cb608d37",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9708f1956eeb70c86943e0bc62fa3b0101b59616",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b4acb8e7f1594607bc9017ef0aacb40b24a003d6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc0dd4456f9573bf8af9b4d8754433918e809e1e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e5f28623ceb103e13fc3d7bd45edf9818b227fd0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49550.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49550.json
new file mode 100644
index 00000000000..7419027077f
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49550.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49550",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:30.863",
+ "lastModified": "2025-02-26T07:01:30.863",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: provide block_invalidate_folio to fix memory leak\n\nThe ntfs3 filesystem lacks the 'invalidate_folio' method and it causes\nmemory leak. If you write to the filesystem and then unmount it, the\ncached written data are not freed and they are permanently leaked."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0753245a72ec99824677586499ee2e0919164b3f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/724bbe49c5e427cb077357d72d240a649f2e4054",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49551.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49551.json
new file mode 100644
index 00000000000..d9648b420b5
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49551.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49551",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:30.950",
+ "lastModified": "2025-02-26T07:01:30.950",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: isp1760: Fix out-of-bounds array access\n\nRunning the driver through kasan gives an interesting splat:\n\n BUG: KASAN: global-out-of-bounds in isp1760_register+0x180/0x70c\n Read of size 20 at addr f1db2e64 by task swapper/0/1\n (...)\n isp1760_register from isp1760_plat_probe+0x1d8/0x220\n (...)\n\nThis happens because the loop reading the regmap fields for the\ndifferent ISP1760 variants look like this:\n\n for (i = 0; i < HC_FIELD_MAX; i++) { ... }\n\nMeaning it expects the arrays to be at least HC_FIELD_MAX - 1 long.\n\nHowever the arrays isp1760_hc_reg_fields[], isp1763_hc_reg_fields[],\nisp1763_hc_volatile_ranges[] and isp1763_dc_volatile_ranges[] are\ndynamically sized during compilation.\n\nFix this by putting an empty assignment to the [HC_FIELD_MAX]\nand [DC_FIELD_MAX] array member at the end of each array.\nThis will make the array one member longer than it needs to be,\nbut avoids the risk of overwriting whatever is inside\n[HC_FIELD_MAX - 1] and is simple and intuitive to read. Also\nadd comments explaining what is going on."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/26ae2c942b5702f2e43d36b2a4389cfb7d616b6a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/463bddd3ff1acf4036ddb80c34a715eb99debf46",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/47d39cb57e8669e507d17d9e0d067d2b3e3a87ae",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bf2558bbdce3ab1d6bcba09f354914e4515d0a2b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49552.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49552.json
new file mode 100644
index 00000000000..4c716739824
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49552.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49552",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:31.040",
+ "lastModified": "2025-02-26T07:01:31.040",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix combination of jit blinding and pointers to bpf subprogs.\n\nThe combination of jit blinding and pointers to bpf subprogs causes:\n[ 36.989548] BUG: unable to handle page fault for address: 0000000100000001\n[ 36.990342] #PF: supervisor instruction fetch in kernel mode\n[ 36.990968] #PF: error_code(0x0010) - not-present page\n[ 36.994859] RIP: 0010:0x100000001\n[ 36.995209] Code: Unable to access opcode bytes at RIP 0xffffffd7.\n[ 37.004091] Call Trace:\n[ 37.004351] \n[ 37.004576] ? bpf_loop+0x4d/0x70\n[ 37.004932] ? bpf_prog_3899083f75e4c5de_F+0xe3/0x13b\n\nThe jit blinding logic didn't recognize that ld_imm64 with an address\nof bpf subprogram is a special instruction and proceeded to randomize it.\nBy itself it wouldn't have been an issue, but jit_subprogs() logic\nrelies on two step process to JIT all subprogs and then JIT them\nagain when addresses of all subprogs are known.\nBlinding process in the first JIT phase caused second JIT to miss\nadjustment of special ld_imm64.\n\nFix this issue by ignoring special ld_imm64 instructions that don't have\nuser controlled constants and shouldn't be blinded."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4b6313cf99b0d51b49aeaea98ec76ca8161ecb80",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a029b02b47dd5bb87a21550d9d9a80cb4dd3f714",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d106a3e96fca30e44081eae9c27aab28fc132a46",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49553.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49553.json
new file mode 100644
index 00000000000..8a87af98855
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49553.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49553",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:31.133",
+ "lastModified": "2025-02-26T07:01:31.133",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: validate BOOT sectors_per_clusters\n\nWhen the NTFS BOOT sectors_per_clusters field is > 0x80, it represents a\nshift value. Make sure that the shift value is not too large before using\nit (NTFS max cluster size is 2MB). Return -EVINVAL if it too large.\n\nThis prevents negative shift values and shift values that are larger than\nthe field size.\n\nPrevents this UBSAN error:\n\n UBSAN: shift-out-of-bounds in ../fs/ntfs3/super.c:673:16\n shift exponent -192 is negative"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4746c49b11b2403f5b5b07c6eac9e60663dcd9a3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/58cf68a1886d14ffdc5c892ce483a82156769e88",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a2b6986316a2d106f6951e76db70fa4b2fde64a9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a3b774342fa752a5290c0de36375289dfcf4a260",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49554.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49554.json
new file mode 100644
index 00000000000..ad45bda591b
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49554.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49554",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:31.223",
+ "lastModified": "2025-02-26T07:01:31.223",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nzsmalloc: fix races between asynchronous zspage free and page migration\n\nThe asynchronous zspage free worker tries to lock a zspage's entire page\nlist without defending against page migration. Since pages which haven't\nyet been locked can concurrently migrate off the zspage page list while\nlock_zspage() churns away, lock_zspage() can suffer from a few different\nlethal races.\n\nIt can lock a page which no longer belongs to the zspage and unsafely\ndereference page_private(), it can unsafely dereference a torn pointer to\nthe next page (since there's a data race), and it can observe a spurious\nNULL pointer to the next page and thus not lock all of the zspage's pages\n(since a single page migration will reconstruct the entire page list, and\ncreate_page_chain() unconditionally zeroes out each list pointer in the\nprocess).\n\nFix the races by using migrate_read_lock() in lock_zspage() to synchronize\nwith page migration."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2505a981114dcb715f8977b8433f7540854851d8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3674d8a8dadd03a447dd21069d4dacfc3399b63b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3ec459c8810e658401be428d3168eacfc380bdd0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/645996efc2ae391246d595832aaa6f9d3cc338c7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8ba7b7c1dad1f6503c541778f31b33f7f62eb966",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c5402fb5f71f1a725f1e55d9c6799c0c7bec308f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fae05b2314b147a78fbed1dc4c645d9a66313758",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fc658c083904427abbf8f18280d517ee2668677c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49555.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49555.json
new file mode 100644
index 00000000000..b465304a868
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49555.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49555",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:31.313",
+ "lastModified": "2025-02-26T07:01:31.313",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_qca: Use del_timer_sync() before freeing\n\nWhile looking at a crash report on a timer list being corrupted, which\nusually happens when a timer is freed while still active. This is\ncommonly triggered by code calling del_timer() instead of\ndel_timer_sync() just before freeing.\n\nOne possible culprit is the hci_qca driver, which does exactly that.\n\nEric mentioned that wake_retrans_timer could be rearmed via the work\nqueue, so also move the destruction of the work queue before\ndel_timer_sync()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2717654ae022e6ea959a4b7b762702fe1a4690c2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/37d17f63d085d601011964ade7371aeebeb6ed4b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4989bb03342941f2b730b37dfa38bce27b543661",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/72ef98445aca568a81c2da050532500a8345ad3a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/db03727b4bbbbb36e6ef4cb655c670eefb6448e9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49556.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49556.json
new file mode 100644
index 00000000000..dd5a638498e
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49556.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49556",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:31.407",
+ "lastModified": "2025-02-26T07:01:31.407",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak\n\nFor some sev ioctl interfaces, the length parameter that is passed maybe\nless than or equal to SEV_FW_BLOB_MAX_SIZE, but larger than the data\nthat PSP firmware returns. In this case, kmalloc will allocate memory\nthat is the size of the input rather than the size of the data.\nSince PSP firmware doesn't fully overwrite the allocated buffer, these\nsev ioctl interface may return uninitialized kernel slab memory."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/401bef1f95de92c3a8c6eece46e02fa88d7285ee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/57a01725339f9d82b099102ba2751621b1caab93",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bbdcc644b59e01e98c68894a9fab42b9687f42b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d22d2474e3953996f03528b84b7f52cc26a39403",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d8fdb4b24097472ff6b3c0559448200d420b1418",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49557.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49557.json
new file mode 100644
index 00000000000..d25870e80a7
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49557.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49557",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:31.503",
+ "lastModified": "2025-02-26T07:01:31.503",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave)\n\nSet the starting uABI size of KVM's guest FPU to 'struct kvm_xsave',\ni.e. to KVM's historical uABI size. When saving FPU state for usersapce,\nKVM (well, now the FPU) sets the FP+SSE bits in the XSAVE header even if\nthe host doesn't support XSAVE. Setting the XSAVE header allows the VM\nto be migrated to a host that does support XSAVE without the new host\nhaving to handle FPU state that may or may not be compatible with XSAVE.\n\nSetting the uABI size to the host's default size results in out-of-bounds\nwrites (setting the FP+SSE bits) and data corruption (that is thankfully\ncaught by KASAN) when running on hosts without XSAVE, e.g. on Core2 CPUs.\n\nWARN if the default size is larger than KVM's historical uABI size; all\nfeatures that can push the FPU size beyond the historical size must be\nopt-in.\n\n ==================================================================\n BUG: KASAN: slab-out-of-bounds in fpu_copy_uabi_to_guest_fpstate+0x86/0x130\n Read of size 8 at addr ffff888011e33a00 by task qemu-build/681\n CPU: 1 PID: 681 Comm: qemu-build Not tainted 5.18.0-rc5-KASAN-amd64 #1\n Hardware name: /DG35EC, BIOS ECG3510M.86A.0118.2010.0113.1426 01/13/2010\n Call Trace:\n \n dump_stack_lvl+0x34/0x45\n print_report.cold+0x45/0x575\n kasan_report+0x9b/0xd0\n fpu_copy_uabi_to_guest_fpstate+0x86/0x130\n kvm_arch_vcpu_ioctl+0x72a/0x1c50 [kvm]\n kvm_vcpu_ioctl+0x47f/0x7b0 [kvm]\n __x64_sys_ioctl+0x5de/0xc90\n do_syscall_64+0x31/0x50\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n \n Allocated by task 0:\n (stack is not available)\n The buggy address belongs to the object at ffff888011e33800\n which belongs to the cache kmalloc-512 of size 512\n The buggy address is located 0 bytes to the right of\n 512-byte region [ffff888011e33800, ffff888011e33a00)\n The buggy address belongs to the physical page:\n page:0000000089cd4adb refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e30\n head:0000000089cd4adb order:2 compound_mapcount:0 compound_pincount:0\n flags: 0x4000000000010200(slab|head|zone=1)\n raw: 4000000000010200 dead000000000100 dead000000000122 ffff888001041c80\n raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000\n page dumped because: kasan: bad access detected\n Memory state around the buggy address:\n ffff888011e33900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n ffff888011e33980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n >ffff888011e33a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n ^\n ffff888011e33a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n ffff888011e33b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n ==================================================================\n Disabling lock debugging due to kernel taint"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/9cf15ebb7dedfe2f27120743b8ea8441c99ac73c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c181acbd1a427859d5fda543b95fbae28f7f6068",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d187ba5312307d51818beafaad87d28a7d939adf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49558.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49558.json
new file mode 100644
index 00000000000..4c7cb115f0e
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49558.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49558",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:31.597",
+ "lastModified": "2025-02-26T07:01:31.597",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: double hook unregistration in netns path\n\n__nft_release_hooks() is called from pre_netns exit path which\nunregisters the hooks, then the NETDEV_UNREGISTER event is triggered\nwhich unregisters the hooks again.\n\n[ 565.221461] WARNING: CPU: 18 PID: 193 at net/netfilter/core.c:495 __nf_unregister_net_hook+0x247/0x270\n[...]\n[ 565.246890] CPU: 18 PID: 193 Comm: kworker/u64:1 Tainted: G E 5.18.0-rc7+ #27\n[ 565.253682] Workqueue: netns cleanup_net\n[ 565.257059] RIP: 0010:__nf_unregister_net_hook+0x247/0x270\n[...]\n[ 565.297120] Call Trace:\n[ 565.300900] \n[ 565.304683] nf_tables_flowtable_event+0x16a/0x220 [nf_tables]\n[ 565.308518] raw_notifier_call_chain+0x63/0x80\n[ 565.312386] unregister_netdevice_many+0x54f/0xb50\n\nUnregister and destroy netdev hook from netns pre_exit via kfree_rcu\nso the NETDEV_UNREGISTER path see unregistered hooks."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3fac8ce48fa9fd61ee9056d3ed48b2edefca8b82",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/86c0154f4c3a56c5db8b9dd09e3ce885382c2c19",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9c413a8c8bb49cc16796371805ecb260e885bb2b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a3940dcf552f2393d1e8f263b386593f98abe829",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b09e6ccf0d12f9356e8e3508d3e3dce126298538",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c73955a09408e7374d9abfd0e78ce3de9cda0635",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f9a43007d3f7ba76d5e7f9421094f00f2ef202f8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49559.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49559.json
new file mode 100644
index 00000000000..62c2660761d
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49559.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49559",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:31.687",
+ "lastModified": "2025-02-26T07:01:31.687",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Drop WARNs that assert a triple fault never \"escapes\" from L2\n\nRemove WARNs that sanity check that KVM never lets a triple fault for L2\nescape and incorrectly end up in L1. In normal operation, the sanity\ncheck is perfectly valid, but it incorrectly assumes that it's impossible\nfor userspace to induce KVM_REQ_TRIPLE_FAULT without bouncing through\nKVM_RUN (which guarantees kvm_check_nested_state() will see and handle\nthe triple fault).\n\nThe WARN can currently be triggered if userspace injects a machine check\nwhile L2 is active and CR4.MCE=0. And a future fix to allow save/restore\nof KVM_REQ_TRIPLE_FAULT, e.g. so that a synthesized triple fault isn't\nlost on migration, will make it trivially easy for userspace to trigger\nthe WARN.\n\nClearing KVM_REQ_TRIPLE_FAULT when forcibly leaving guest mode is\ntempting, but wrong, especially if/when the request is saved/restored,\ne.g. if userspace restores events (including a triple fault) and then\nrestores nested state (which may forcibly leave guest mode). Ignoring\nthe fact that KVM doesn't currently provide the necessary APIs, it's\nuserspace's responsibility to manage pending events during save/restore.\n\n ------------[ cut here ]------------\n WARNING: CPU: 7 PID: 1399 at arch/x86/kvm/vmx/nested.c:4522 nested_vmx_vmexit+0x7fe/0xd90 [kvm_intel]\n Modules linked in: kvm_intel kvm irqbypass\n CPU: 7 PID: 1399 Comm: state_test Not tainted 5.17.0-rc3+ #808\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015\n RIP: 0010:nested_vmx_vmexit+0x7fe/0xd90 [kvm_intel]\n Call Trace:\n \n vmx_leave_nested+0x30/0x40 [kvm_intel]\n vmx_set_nested_state+0xca/0x3e0 [kvm_intel]\n kvm_arch_vcpu_ioctl+0xf49/0x13e0 [kvm]\n kvm_vcpu_ioctl+0x4b9/0x660 [kvm]\n __x64_sys_ioctl+0x83/0xb0\n do_syscall_64+0x3b/0xc0\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n \n ---[ end trace 0000000000000000 ]---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/45846661d10422ce9e22da21f8277540b29eca22",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7de373c9b48229e428ecdb8fbde269c5a8617fd2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8d3a2aa0976f57320ba89baf9d57fb158dd0cd0d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f476a59d5c86c02a79eef893c6da86735f2977ac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49560.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49560.json
new file mode 100644
index 00000000000..a67aa803b73
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49560.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49560",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:31.780",
+ "lastModified": "2025-02-26T07:01:31.780",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: check if cluster num is valid\n\nSyzbot reported slab-out-of-bounds read in exfat_clear_bitmap.\nThis was triggered by reproducer calling truncute with size 0,\nwhich causes the following trace:\n\nBUG: KASAN: slab-out-of-bounds in exfat_clear_bitmap+0x147/0x490 fs/exfat/balloc.c:174\nRead of size 8 at addr ffff888115aa9508 by task syz-executor251/365\n\nCall Trace:\n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack_lvl+0x1e2/0x24b lib/dump_stack.c:118\n print_address_description+0x81/0x3c0 mm/kasan/report.c:233\n __kasan_report mm/kasan/report.c:419 [inline]\n kasan_report+0x1a4/0x1f0 mm/kasan/report.c:436\n __asan_report_load8_noabort+0x14/0x20 mm/kasan/report_generic.c:309\n exfat_clear_bitmap+0x147/0x490 fs/exfat/balloc.c:174\n exfat_free_cluster+0x25a/0x4a0 fs/exfat/fatent.c:181\n __exfat_truncate+0x99e/0xe00 fs/exfat/file.c:217\n exfat_truncate+0x11b/0x4f0 fs/exfat/file.c:243\n exfat_setattr+0xa03/0xd40 fs/exfat/file.c:339\n notify_change+0xb76/0xe10 fs/attr.c:336\n do_truncate+0x1ea/0x2d0 fs/open.c:65\n\nMove the is_valid_cluster() helper from fatent.c to a common\nheader to make it reusable in other *.c files. And add is_valid_cluster()\nto validate if cluster number is within valid range in exfat_clear_bitmap()\nand exfat_set_bitmap()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2193286402df2d9c53294f7a858d5e6fd7346e08",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/64ba4b15e5c045f8b746c6da5fc9be9a6b00b61d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7c58b14b6f9cde9f69e7fa053ab73f6e013a7131",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/82f723b8a5adf497f9e34c702a30ca7298615654",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c504167adc3248095a905fa0700a9693897cb5ed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49561.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49561.json
new file mode 100644
index 00000000000..9759d519ae5
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49561.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49561",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:31.877",
+ "lastModified": "2025-02-26T07:01:31.877",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: conntrack: re-fetch conntrack after insertion\n\nIn case the conntrack is clashing, insertion can free skb->_nfct and\nset skb->_nfct to the already-confirmed entry.\n\nThis wasn't found before because the conntrack entry and the extension\nspace used to free'd after an rcu grace period, plus the race needs\nevents enabled to trigger."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/01989d7eebb61c99bd4b88ebc8e261bd2f02caed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/04e4a11dc723c52db7a36dc58f0d69ce6426f8f0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/04f9e9104c969d8ce10a4a43634f641ed082092d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/56b14ecec97f39118bf85c9ac2438c5a949509ed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/91a36ec160ec1a0c8f5352b772dffcbb0b6023e3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/92a999d1963eed0df666284e20055136ceabd12f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b16bb373988da3ceb0308381634117e18b6ec60d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e97222b785e70e8973281666d709baad6523d8af",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49562.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49562.json
new file mode 100644
index 00000000000..074ed01ac86
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49562.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49562",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:31.970",
+ "lastModified": "2025-02-26T07:01:31.970",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits\n\nUse the recently introduced __try_cmpxchg_user() to update guest PTE A/D\nbits instead of mapping the PTE into kernel address space. The VM_PFNMAP\npath is broken as it assumes that vm_pgoff is the base pfn of the mapped\nVMA range, which is conceptually wrong as vm_pgoff is the offset relative\nto the file and has nothing to do with the pfn. The horrific hack worked\nfor the original use case (backing guest memory with /dev/mem), but leads\nto accessing \"random\" pfns for pretty much any other VM_PFNMAP case."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/38b888911e8dc89b89d8147cfb1d2dbe6373bf78",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8089e5e1d18402fb8152d6b6815450a36fffa9b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f122dfe4476890d60b8c679128cd2259ec96a24c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49563.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49563.json
new file mode 100644
index 00000000000..e7a47ff307e
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49563.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49563",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:32.060",
+ "lastModified": "2025-02-26T07:01:32.060",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qat - add param check for RSA\n\nReject requests with a source buffer that is bigger than the size of the\nkey. This is to prevent a possible integer underflow that might happen\nwhen copying the source scatterlist into a linear buffer."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4d6d2adce08788b7667a6e58002682ea1bbf6a79",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9714061423b8b24b8afb31b8eb4df977c63f19c4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f993321e50ba7a8ba4f5b19939e1772a921a1c42",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49564.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49564.json
new file mode 100644
index 00000000000..7d5c25cb818
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49564.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49564",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:32.150",
+ "lastModified": "2025-02-26T07:01:32.150",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qat - add param check for DH\n\nReject requests with a source buffer that is bigger than the size of the\nkey. This is to prevent a possible integer underflow that might happen\nwhen copying the source scatterlist into a linear buffer."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2acbb8771f6ac82422886e63832ee7a0f4b1635b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/76c9216833e7c20a67c987cf89719a3f01666aaa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e7f979ed51f96495328157df663c835b17db1e30",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49565.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49565.json
new file mode 100644
index 00000000000..75310bacbea
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49565.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49565",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:32.240",
+ "lastModified": "2025-02-26T07:01:32.240",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/x86/intel/lbr: Fix unchecked MSR access error on HSW\n\nThe fuzzer triggers the below trace.\n\n[ 7763.384369] unchecked MSR access error: WRMSR to 0x689\n(tried to write 0x1fffffff8101349e) at rIP: 0xffffffff810704a4\n(native_write_msr+0x4/0x20)\n[ 7763.397420] Call Trace:\n[ 7763.399881] \n[ 7763.401994] intel_pmu_lbr_restore+0x9a/0x1f0\n[ 7763.406363] intel_pmu_lbr_sched_task+0x91/0x1c0\n[ 7763.410992] __perf_event_task_sched_in+0x1cd/0x240\n\nOn a machine with the LBR format LBR_FORMAT_EIP_FLAGS2, when the TSX is\ndisabled, a TSX quirk is required to access LBR from registers.\nThe lbr_from_signext_quirk_needed() is introduced to determine whether\nthe TSX quirk should be applied. However, the\nlbr_from_signext_quirk_needed() is invoked before the\nintel_pmu_lbr_init(), which parses the LBR format information. Without\nthe correct LBR format information, the TSX quirk never be applied.\n\nMove the lbr_from_signext_quirk_needed() into the intel_pmu_lbr_init().\nChecking x86_pmu.lbr_has_tsx in the lbr_from_signext_quirk_needed() is\nnot required anymore.\n\nBoth LBR_FORMAT_EIP_FLAGS2 and LBR_FORMAT_INFO have LBR_TSX flag, but\nonly the LBR_FORMAT_EIP_FLAGS2 requirs the quirk. Update the comments\naccordingly."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/625bcd0685a1612225df83468c83412fc0edb3d7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b0380e13502adf7dd8be4c47d622c3522aae6c63",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49566.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49566.json
new file mode 100644
index 00000000000..9d8c26e8456
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49566.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49566",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:32.333",
+ "lastModified": "2025-02-26T07:01:32.333",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qat - fix memory leak in RSA\n\nWhen an RSA key represented in form 2 (as defined in PKCS #1 V2.1) is\nused, some components of the private key persist even after the TFM is\nreleased.\nReplace the explicit calls to free the buffers in qat_rsa_exit_tfm()\nwith a call to qat_rsa_clear_ctx() which frees all buffers referenced in\nthe TFM context."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0f967fdc09955221a1951a279481b0bf4d359941",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/80a52e1ee7757b742f96bfb0d58f0c14eb6583d0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a843925e0287eebb4aa808666bf22c664dfe4c53",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49567.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49567.json
new file mode 100644
index 00000000000..b81d47ad9a1
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49567.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49567",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:32.420",
+ "lastModified": "2025-02-26T07:01:32.420",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mempolicy: fix uninit-value in mpol_rebind_policy()\n\nmpol_set_nodemask()(mm/mempolicy.c) does not set up nodemask when\npol->mode is MPOL_LOCAL. Check pol->mode before access\npol->w.cpuset_mems_allowed in mpol_rebind_policy()(mm/mempolicy.c).\n\nBUG: KMSAN: uninit-value in mpol_rebind_policy mm/mempolicy.c:352 [inline]\nBUG: KMSAN: uninit-value in mpol_rebind_task+0x2ac/0x2c0 mm/mempolicy.c:368\n mpol_rebind_policy mm/mempolicy.c:352 [inline]\n mpol_rebind_task+0x2ac/0x2c0 mm/mempolicy.c:368\n cpuset_change_task_nodemask kernel/cgroup/cpuset.c:1711 [inline]\n cpuset_attach+0x787/0x15e0 kernel/cgroup/cpuset.c:2278\n cgroup_migrate_execute+0x1023/0x1d20 kernel/cgroup/cgroup.c:2515\n cgroup_migrate kernel/cgroup/cgroup.c:2771 [inline]\n cgroup_attach_task+0x540/0x8b0 kernel/cgroup/cgroup.c:2804\n __cgroup1_procs_write+0x5cc/0x7a0 kernel/cgroup/cgroup-v1.c:520\n cgroup1_tasks_write+0x94/0xb0 kernel/cgroup/cgroup-v1.c:539\n cgroup_file_write+0x4c2/0x9e0 kernel/cgroup/cgroup.c:3852\n kernfs_fop_write_iter+0x66a/0x9f0 fs/kernfs/file.c:296\n call_write_iter include/linux/fs.h:2162 [inline]\n new_sync_write fs/read_write.c:503 [inline]\n vfs_write+0x1318/0x2030 fs/read_write.c:590\n ksys_write+0x28b/0x510 fs/read_write.c:643\n __do_sys_write fs/read_write.c:655 [inline]\n __se_sys_write fs/read_write.c:652 [inline]\n __x64_sys_write+0xdb/0x120 fs/read_write.c:652\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nUninit was created at:\n slab_post_alloc_hook mm/slab.h:524 [inline]\n slab_alloc_node mm/slub.c:3251 [inline]\n slab_alloc mm/slub.c:3259 [inline]\n kmem_cache_alloc+0x902/0x11c0 mm/slub.c:3264\n mpol_new mm/mempolicy.c:293 [inline]\n do_set_mempolicy+0x421/0xb70 mm/mempolicy.c:853\n kernel_set_mempolicy mm/mempolicy.c:1504 [inline]\n __do_sys_set_mempolicy mm/mempolicy.c:1510 [inline]\n __se_sys_set_mempolicy+0x44c/0xb60 mm/mempolicy.c:1507\n __x64_sys_set_mempolicy+0xd8/0x110 mm/mempolicy.c:1507\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nKMSAN: uninit-value in mpol_rebind_task (2)\nhttps://syzkaller.appspot.com/bug?id=d6eb90f952c2a5de9ea718a1b873c55cb13b59dc\n\nThis patch seems to fix below bug too.\nKMSAN: uninit-value in mpol_rebind_mm (2)\nhttps://syzkaller.appspot.com/bug?id=f2fecd0d7013f54ec4162f60743a2b28df40926b\n\nThe uninit-value is pol->w.cpuset_mems_allowed in mpol_rebind_policy().\nWhen syzkaller reproducer runs to the beginning of mpol_new(),\n\n\t mpol_new() mm/mempolicy.c\n\t do_mbind() mm/mempolicy.c\n\tkernel_mbind() mm/mempolicy.c\n\n`mode` is 1(MPOL_PREFERRED), nodes_empty(*nodes) is `true` and `flags`\nis 0. Then\n\n\tmode = MPOL_LOCAL;\n\t...\n\tpolicy->mode = mode;\n\tpolicy->flags = flags;\n\nwill be executed. So in mpol_set_nodemask(),\n\n\t mpol_set_nodemask() mm/mempolicy.c\n\t do_mbind()\n\tkernel_mbind()\n\npol->mode is 4 (MPOL_LOCAL), that `nodemask` in `pol` is not initialized,\nwhich will be accessed in mpol_rebind_policy()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/018160ad314d75b1409129b2247b614a9f35894c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/13d51565cec1aa432a6ab363edc2bbc53c6f49cb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5735845906fb1d90fe597f8b503fc0a857d475e3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/777e563f10e91e91130fe06bee85220d508e7b9b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8c5429a04ccd8dbcc3c753dab2f4126774ec28d4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a1f8765f68bc9bf5744b365bb9f5e0b6db93edfe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aaa1c5d635a6fca2043513ffb5be169f9cd17d9e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ddb3f0b68863bd1c5f43177eea476bce316d4993",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49568.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49568.json
new file mode 100644
index 00000000000..fb64fb0eee9
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49568.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49568",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:32.517",
+ "lastModified": "2025-02-26T07:01:32.517",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: Don't null dereference ops->destroy\n\nA KVM device cleanup happens in either of two callbacks:\n1) destroy() which is called when the VM is being destroyed;\n2) release() which is called when a device fd is closed.\n\nMost KVM devices use 1) but Book3s's interrupt controller KVM devices\n(XICS, XIVE, XIVE-native) use 2) as they need to close and reopen during\nthe machine execution. The error handling in kvm_ioctl_create_device()\nassumes destroy() is always defined which leads to NULL dereference as\ndiscovered by Syzkaller.\n\nThis adds a checks for destroy!=NULL and adds a missing release().\n\nThis is not changing kvm_destroy_devices() as devices with defined\nrelease() should have been removed from the KVM devices list by then."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/170465715a60cbb7876e6b961b21bd3225469da8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3616776bc51cd3262bb1be60cc01c72e0a1959cf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d4a5a79b780891c5cbdfdc6124d46fdf8d13dba1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e8bc2427018826e02add7b0ed0fc625a60390ae5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e91665fbbf3ccb268b268a7d71a6513538d813ac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49569.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49569.json
new file mode 100644
index 00000000000..e1405eb2900
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49569.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49569",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:32.607",
+ "lastModified": "2025-02-26T07:01:32.607",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers\n\nIn case a IRQ based transfer times out the bcm2835_spi_handle_err()\nfunction is called. Since commit 1513ceee70f2 (\"spi: bcm2835: Drop\ndma_pending flag\") the TX and RX DMA transfers are unconditionally\ncanceled, leading to NULL pointer derefs if ctlr->dma_tx or\nctlr->dma_rx are not set.\n\nFix the NULL pointer deref by checking that ctlr->dma_tx and\nctlr->dma_rx are valid pointers before accessing them."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/49ffa473218012e765682343de2052eb4c1f06a7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4ceaa684459d414992acbefb4e4c31f2dfc50641",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/58466e05390043d2805685c70f55f3f59711bdf2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/684896e675edd8b669fd3e9f547c5038222d85bc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/76668d2a2f367d25ff448e6d7087406af7d7bb2b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49570.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49570.json
new file mode 100644
index 00000000000..ec357d4ef79
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49570.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49570",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:32.693",
+ "lastModified": "2025-02-26T07:01:32.693",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: gpio-xilinx: Fix integer overflow\n\nCurrent implementation is not able to configure more than 32 pins\ndue to incorrect data type. So type casting with unsigned long\nto avoid it."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/32c094a09d5829ad9b02cdf667569aefa8de0ea6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6f16a5390640807dde420ee5ccbc4c95577aea6a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e129e5486b981d324057e6986059f852658b0d00",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49571.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49571.json
new file mode 100644
index 00000000000..c5421c098cf
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49571.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49571",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:32.780",
+ "lastModified": "2025-02-26T07:01:32.780",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix data-races around sysctl_tcp_max_reordering.\n\nWhile reading sysctl_tcp_max_reordering, it can be changed\nconcurrently. Thus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/064852663308c801861bd54789d81421fa4c2928",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/46deb91ac8a790286ad6d24cf92e7ab0ab2582bb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/50a1d3d097503a90cf84ebe120afcde37e9c33b3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5e38cee24f19d19280c68f1ac8bf6790d607f60a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a11e5b3e7a59fde1a90b0eaeaa82320495cf8cae",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ce3731c61589ed73364a5b55ce34131762ef9b60",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49572.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49572.json
new file mode 100644
index 00000000000..e987745ca06
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49572.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49572",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:32.877",
+ "lastModified": "2025-02-26T07:01:32.877",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix data-races around sysctl_tcp_slow_start_after_idle.\n\nWhile reading sysctl_tcp_slow_start_after_idle, it can be changed\nconcurrently. Thus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0e3f82a03ec8c3808e87283e12946227415706c9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/369d99c2b89f54473adcf9acdf40ea562b5a6e0e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3b26e11b07a09b31247688bec61e2925d4a571b6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/41aeba4506f6b70ec7500c6fe202731a4ba29fe5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4845b5713ab18a1bb6e31d1fbb4d600240b8b691",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/68b6f9506747d507c7bfa374d178929b4157e8c6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49573.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49573.json
new file mode 100644
index 00000000000..c87ed8d7b56
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49573.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49573",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:32.970",
+ "lastModified": "2025-02-26T07:01:32.970",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix a data-race around sysctl_tcp_early_retrans.\n\nWhile reading sysctl_tcp_early_retrans, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its reader."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/11e8b013d16e5db63f8f76acceb5b86964098aaa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/488d3ad98ef7cddce7054193dbae6b4349c6807d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5037ca9e4b169cc9aed0174d658c3d81fdaf8ea5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/52e65865deb6a36718a463030500f16530eaab74",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/83767fe800a311370330d4ec83aa76093b744a80",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5975f6376ce90c2c483ae36bf88c9cface4c13b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49574.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49574.json
new file mode 100644
index 00000000000..48a26088fbf
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49574.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49574",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:33.063",
+ "lastModified": "2025-02-26T07:01:33.063",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix data-races around sysctl_tcp_recovery.\n\nWhile reading sysctl_tcp_recovery, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/52ee7f5c4811ce6be1becd14d38ba1f8a8a0df81",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/92c35113c63306091df9211375eebd0abd8c2160",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a31e2d0cb5cfa2aae3144cac04f25031d5d20fb4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c7a492db1f7c37c758a66915908677bd8bc5d368",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d8781f7cd04091744f474a2bada74772084b9dc9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e7d2ef837e14a971a05f60ea08c47f3fed1a36e4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49575.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49575.json
new file mode 100644
index 00000000000..72119aa2e55
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49575.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49575",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:33.157",
+ "lastModified": "2025-02-26T07:01:33.157",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.\n\nWhile reading sysctl_tcp_thin_linear_timeouts, it can be changed\nconcurrently. Thus, we need to add READ_ONCE() to its reader."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/404c53ccdebd11f96954f4070cffac8e0b4d5cb6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/492f3713b282c0e67e951cd804edd22eccc25412",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7c6f2a86ca590d5187a073d987e9599985fb1c7c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a0f96c4f179cb3560078cefccef105e8f1701210",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc133e4f4bc225079198192623945bb872c08143",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f4b0295be9a3c4260de4585fac4062e602a88ac7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49576.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49576.json
new file mode 100644
index 00000000000..1312f250777
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49576.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49576",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:33.243",
+ "lastModified": "2025-02-26T07:01:33.243",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: Fix data-races around sysctl_fib_multipath_hash_fields.\n\nWhile reading sysctl_fib_multipath_hash_fields, it can be changed\nconcurrently. Thus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/36f5b86f309b3b11295d087cd7433f1c897caf94",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/548d6678c4a3d43667e59686665f8674b82440a3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8895a9c2ac76fb9d3922fed4fe092c8ec5e5cccc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49577.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49577.json
new file mode 100644
index 00000000000..a6afc25bcc7
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49577.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49577",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:33.333",
+ "lastModified": "2025-02-26T07:01:33.333",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nudp: Fix a data-race around sysctl_udp_l3mdev_accept.\n\nWhile reading sysctl_udp_l3mdev_accept, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its reader."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3d72bb4188c708bb16758c60822fc4dda7a95174",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3f2ac2d6511bb0652abf4d7388d65bb9ff1c641c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cb0d28934ca10f99c47e2c6f451405d6c954fe48",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f39b03bd727a8fea62e82f10fe2e0d753b9930ff",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fcaef69c79ec222e55643e666b80b221e70fa6a8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49578.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49578.json
new file mode 100644
index 00000000000..94ef82b71d4
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49578.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49578",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:33.433",
+ "lastModified": "2025-02-26T07:01:33.433",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nip: Fix data-races around sysctl_ip_prot_sock.\n\nsysctl_ip_prot_sock is accessed concurrently, and there is always a chance\nof data-race. So, all readers and writers need some basic protection to\navoid load/store-tearing."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/95724fe897a4ecf2be51452ef96e818568071664",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9add240f76af6d141d2eebd3a1558a0e503a993d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9b55c20f83369dd54541d9ddbe3a018a8377f451",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef699813d99cc29e6e25c9f6da7766526cc8bd6e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49579.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49579.json
new file mode 100644
index 00000000000..094967b5d10
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49579.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49579",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:33.520",
+ "lastModified": "2025-02-26T07:01:33.520",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: Fix data-races around sysctl_fib_multipath_hash_policy.\n\nWhile reading sysctl_fib_multipath_hash_policy, it can be changed\nconcurrently. Thus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/21fb844bc1dc1461f5038d655aa1a14f39e13049",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7998c12a08c97cc26660532c9f90a34bd7d8da5a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/918ee6592ab9a2ff5316d06cfd4aaef60ccabec6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49580.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49580.json
new file mode 100644
index 00000000000..9fa610641db
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49580.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49580",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:33.610",
+ "lastModified": "2025-02-26T07:01:33.610",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: Fix a data-race around sysctl_fib_multipath_use_neigh.\n\nWhile reading sysctl_fib_multipath_use_neigh, it can be changed\nconcurrently. Thus, we need to add READ_ONCE() to its reader."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/14e996577ed2799a1ed6ffeb71c76d63acb28444",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6727f39e99e0f545d815edebb6c94228485427ec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/87507bcb4f5de16bb419e9509d874f4db6c0ad0f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b8d345db03b4deffb4f04219a51d3b1e94171b76",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e045d672ba06e1d35bacb56374d350de0ac99066",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49581.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49581.json
new file mode 100644
index 00000000000..e28976b5648
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49581.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49581",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:33.703",
+ "lastModified": "2025-02-26T07:01:33.703",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbe2net: Fix buffer overflow in be_get_module_eeprom\n\nbe_cmd_read_port_transceiver_data assumes that it is given a buffer that\nis at least PAGE_DATA_LEN long, or twice that if the module supports SFF\n8472. However, this is not always the case.\n\nFix this by passing the desired offset and length to\nbe_cmd_read_port_transceiver_data so that we only copy the bytes once."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/18043da94c023f3ef09c15017bdb04e8f695ef10",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/665cbe91de2f7c97c51ca8fce39aae26477c1948",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8ff4f9df73e5c551a72ee6034886c17e8de6596d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a5a8fc0679a8fd58d47aa2ebcfc5742631f753f9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a8569f76df7ec5b4b51155c57523a0b356db5741",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aba8ff847f4f927ad7a1a1ee4a9f29989a1a728f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d7241f679a59cfe27f92cb5c6272cb429fb1f7ec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fe4473fc7940f14c4a12db873b9729134c212654",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49582.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49582.json
new file mode 100644
index 00000000000..3d55de1b6dd
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49582.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49582",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:33.807",
+ "lastModified": "2025-02-26T07:01:33.807",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: fix NULL pointer dereference in dsa_port_reset_vlan_filtering\n\nThe \"ds\" iterator variable used in dsa_port_reset_vlan_filtering() ->\ndsa_switch_for_each_port() overwrites the \"dp\" received as argument,\nwhich is later used to call dsa_port_vlan_filtering() proper.\n\nAs a result, switches which do enter that code path (the ones with\nvlan_filtering_is_global=true) will dereference an invalid dp in\ndsa_port_reset_vlan_filtering() after leaving a VLAN-aware bridge.\n\nUse a dedicated \"other_dp\" iterator variable to avoid this from\nhappening."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1699b4d502eda3c7ea4070debad3ee570b5091b1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3240e12fe203a3a79b9814e83327106b770ed7b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49583.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49583.json
new file mode 100644
index 00000000000..dbe643ae8c4
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49583.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49583",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:33.897",
+ "lastModified": "2025-02-26T07:01:33.897",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niavf: Fix handling of dummy receive descriptors\n\nFix memory leak caused by not handling dummy receive descriptor properly.\niavf_get_rx_buffer now sets the rx_buffer return value for dummy receive\ndescriptors. Without this patch, when the hardware writes a dummy\ndescriptor, iavf would not free the page allocated for the previous receive\nbuffer. This is an unlikely event but can still happen.\n\n[Jesse: massaged commit message]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2918419c06088f6709ceb543feb01752779ade4c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6edb818732fc05fda495f5b3a749bd1cee01398b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a9f49e0060301a9bfebeca76739158d0cf91cdf6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c6af94324911ef0846af1a5ce5e049ca736db34b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d88d59faf4e6f9cc4767664206afdb999b10ec77",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49584.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49584.json
new file mode 100644
index 00000000000..10795adc694
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49584.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49584",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:33.987",
+ "lastModified": "2025-02-26T07:01:33.987",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nixgbe: Add locking to prevent panic when setting sriov_numvfs to zero\n\nIt is possible to disable VFs while the PF driver is processing requests\nfrom the VF driver. This can result in a panic.\n\nBUG: unable to handle kernel paging request at 000000000000106c\nPGD 0 P4D 0\nOops: 0000 [#1] SMP NOPTI\nCPU: 8 PID: 0 Comm: swapper/8 Kdump: loaded Tainted: G I --------- -\nHardware name: Dell Inc. PowerEdge R740/06WXJT, BIOS 2.8.2 08/27/2020\nRIP: 0010:ixgbe_msg_task+0x4c8/0x1690 [ixgbe]\nCode: 00 00 48 8d 04 40 48 c1 e0 05 89 7c 24 24 89 fd 48 89 44 24 10 83 ff\n01 0f 84 b8 04 00 00 4c 8b 64 24 10 4d 03 a5 48 22 00 00 <41> 80 7c 24 4c\n00 0f 84 8a 03 00 00 0f b7 c7 83 f8 08 0f 84 8f 0a\nRSP: 0018:ffffb337869f8df8 EFLAGS: 00010002\nRAX: 0000000000001020 RBX: 0000000000000000 RCX: 000000000000002b\nRDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000006\nRBP: 0000000000000006 R08: 0000000000000002 R09: 0000000000029780\nR10: 00006957d8f42832 R11: 0000000000000000 R12: 0000000000001020\nR13: ffff8a00e8978ac0 R14: 000000000000002b R15: ffff8a00e8979c80\nFS: 0000000000000000(0000) GS:ffff8a07dfd00000(0000) knlGS:00000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000000000000106c CR3: 0000000063e10004 CR4: 00000000007726e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \n ? ttwu_do_wakeup+0x19/0x140\n ? try_to_wake_up+0x1cd/0x550\n ? ixgbevf_update_xcast_mode+0x71/0xc0 [ixgbevf]\n ixgbe_msix_other+0x17e/0x310 [ixgbe]\n __handle_irq_event_percpu+0x40/0x180\n handle_irq_event_percpu+0x30/0x80\n handle_irq_event+0x36/0x53\n handle_edge_irq+0x82/0x190\n handle_irq+0x1c/0x30\n do_IRQ+0x49/0xd0\n common_interrupt+0xf/0xf\n\nThis can be eventually be reproduced with the following script:\n\nwhile :\ndo\n echo 63 > /sys/class/net//device/sriov_numvfs\n sleep 1\n echo 0 > /sys/class/net//device/sriov_numvfs\n sleep 1\ndone\n\nAdd lock when disabling SR-IOV to prevent process VF mailbox communication."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/031af9e617a6f51075d97e56fc9e712c7dde2508",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/16f929a5e76fd047fd8697e1e568bdd7d771955c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1e53834ce541d4fe271cdcca7703e50be0a44f8a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9d925d2dc82cec2bcbd8625457645d8a548ab22e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b82de63f8f817b5735480293dda8e92ba8170c52",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49585.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49585.json
new file mode 100644
index 00000000000..8bc9e9d9c6b
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49585.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49585",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:34.080",
+ "lastModified": "2025-02-26T07:01:34.080",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout.\n\nWhile reading sysctl_tcp_fastopen_blackhole_timeout, it can be changed\nconcurrently. Thus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/021266ec640c7a4527e6cd4b7349a512b351de1d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0dc2f19d8c2636cebda7976b5ea40c6d69f0d891",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8afa5604e295046c02b79ccf9e2bbbf8d969d60e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a77a75a0e7f397550ab039f96115103e78dd5c69",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49586.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49586.json
new file mode 100644
index 00000000000..e43dbb680c0
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49586.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49586",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:34.167",
+ "lastModified": "2025-02-26T07:01:34.167",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix data-races around sysctl_tcp_fastopen.\n\nWhile reading sysctl_tcp_fastopen, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/03da610696a32578fc4f986479341ce9d430df08",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/22938534c611136f35e2ca545bb668073ca5ef49",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/25d53d858a6c0b89a6e69e376c2a57c4f4c2c8cc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/448ab998947996a0a451f8229f19087964cf2670",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/539d9ab79eba3974b479cad61a8688c41fe62e12",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5a54213318c43f4009ae158347aa6016e3b9b55a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49587.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49587.json
new file mode 100644
index 00000000000..18f616a111e
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49587.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49587",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:34.260",
+ "lastModified": "2025-02-26T07:01:34.260",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix a data-race around sysctl_tcp_notsent_lowat.\n\nWhile reading sysctl_tcp_notsent_lowat, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its reader."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0f75343584ee474303e17efe0610bdd170af1d13",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/55be873695ed8912eb77ff46d1d1cadf028bd0f3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/62e56cfeb2ae4b53ae9ca24c80f54093250ce64a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/80d4d0c461674eea87f0977e12a2ecd334b9b79c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/91e21df688f8a75255ca9c459da39ac96300113a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c1b85c5a34294f7444c13bf828e0e84b0a0eed85",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e9362a993886613ef0284c2a4911c6017c97d803",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fd6f1284e380c377932186042ff0b5c987fb2b92",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49588.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49588.json
new file mode 100644
index 00000000000..badeee7c9d0
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49588.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49588",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:34.367",
+ "lastModified": "2025-02-26T07:01:34.367",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix data-races around sysctl_tcp_migrate_req.\n\nWhile reading sysctl_tcp_migrate_req, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4177f545895b1da08447a80692f30617154efa6e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6e569a11eea20a1ccebc3c4e6366bf0574a449e1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fcf6c6d8aeffebca66f37b17ef1b57112e5e09c1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49589.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49589.json
new file mode 100644
index 00000000000..17fe6e41459
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49589.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49589",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:34.470",
+ "lastModified": "2025-02-26T07:01:34.470",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nigmp: Fix data-races around sysctl_igmp_qrv.\n\nWhile reading sysctl_igmp_qrv, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its readers.\n\nThis test can be packed into a helper, so such changes will be in the\nfollow-up series after net is merged into net-next.\n\n qrv ?: READ_ONCE(net->ipv4.sysctl_igmp_qrv);"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/8ebcc62c738f68688ee7c6fec2efe5bc6d3d7e60",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9eeb3a7702998bdccbfcc37997b5dd9215b9a7f7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b399ffafffba39f47b731b26a5da1dc0ffc4b3ad",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c2954671010cd1127d1ffa328c6e6f8e99930982",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c721324afc589f8ea54bae04756b150aeaae5fa4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e20dd1b0e0ea15bee1e528536a0840dba972ca0e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49590.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49590.json
new file mode 100644
index 00000000000..a4f86e5bcd4
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49590.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49590",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:34.573",
+ "lastModified": "2025-02-26T07:01:34.573",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nigmp: Fix data-races around sysctl_igmp_llm_reports.\n\nWhile reading sysctl_igmp_llm_reports, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its readers.\n\nThis test can be packed into a helper, so such changes will be in the\nfollow-up series after net is merged into net-next.\n\n if (ipv4_is_local_multicast(pmc->multiaddr) &&\n !READ_ONCE(net->ipv4.sysctl_igmp_llm_reports))"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1656ecaddf90e2a070ec2d2404cdae3edf80faca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/260446eb8e5541402b271343a4516f2b33dec1e4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/46307adceb67bdf2ec38408dd9cebc378a6b5c46",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/473aad9ad57ff760005377e6f45a2ad4210e08ce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a84b4afaca2573ed3aed1f8854aefe3ca5a82e72",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d77969e7d4ccc26bf1f414a39ef35050a83ba6d5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ed876e99ccf417b8bd7fd8408ba5e8b008e46cc8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f6da2267e71106474fbc0943dc24928b9cb79119",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49591.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49591.json
new file mode 100644
index 00000000000..fdf4198f4da
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49591.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49591",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:34.667",
+ "lastModified": "2025-02-26T07:01:34.667",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: microchip: ksz_common: Fix refcount leak bug\n\nIn ksz_switch_register(), we should call of_node_put() for the\nreference returned by of_get_child_by_name() which has increased\nthe refcount."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4165e02716518bbbe9c9104b39530d40928bc7ce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/88ec2ff42da3ac93b2437dc52fe25cd4372148e6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a14bd7475452c51835dd5a0cee4c8fa48dd0b539",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49592.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49592.json
new file mode 100644
index 00000000000..9329ede3a84
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49592.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49592",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:34.760",
+ "lastModified": "2025-02-26T07:01:34.760",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: stmmac: fix dma queue left shift overflow issue\n\nWhen queue number is > 4, left shift overflows due to 32 bits\ninteger variable. Mask calculation is wrong for MTL_RXQ_DMA_MAP1.\n\nIf CONFIG_UBSAN is enabled, kernel dumps below warning:\n[ 10.363842] ==================================================================\n[ 10.363882] UBSAN: shift-out-of-bounds in /build/linux-intel-iotg-5.15-8e6Tf4/\nlinux-intel-iotg-5.15-5.15.0/drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c:224:12\n[ 10.363929] shift exponent 40 is too large for 32-bit type 'unsigned int'\n[ 10.363953] CPU: 1 PID: 599 Comm: NetworkManager Not tainted 5.15.0-1003-intel-iotg\n[ 10.363956] Hardware name: ADLINK Technology Inc. LEC-EL/LEC-EL, BIOS 0.15.11 12/22/2021\n[ 10.363958] Call Trace:\n[ 10.363960] \n[ 10.363963] dump_stack_lvl+0x4a/0x5f\n[ 10.363971] dump_stack+0x10/0x12\n[ 10.363974] ubsan_epilogue+0x9/0x45\n[ 10.363976] __ubsan_handle_shift_out_of_bounds.cold+0x61/0x10e\n[ 10.363979] ? wake_up_klogd+0x4a/0x50\n[ 10.363983] ? vprintk_emit+0x8f/0x240\n[ 10.363986] dwmac4_map_mtl_dma.cold+0x42/0x91 [stmmac]\n[ 10.364001] stmmac_mtl_configuration+0x1ce/0x7a0 [stmmac]\n[ 10.364009] ? dwmac410_dma_init_channel+0x70/0x70 [stmmac]\n[ 10.364020] stmmac_hw_setup.cold+0xf/0xb14 [stmmac]\n[ 10.364030] ? page_pool_alloc_pages+0x4d/0x70\n[ 10.364034] ? stmmac_clear_tx_descriptors+0x6e/0xe0 [stmmac]\n[ 10.364042] stmmac_open+0x39e/0x920 [stmmac]\n[ 10.364050] __dev_open+0xf0/0x1a0\n[ 10.364054] __dev_change_flags+0x188/0x1f0\n[ 10.364057] dev_change_flags+0x26/0x60\n[ 10.364059] do_setlink+0x908/0xc40\n[ 10.364062] ? do_setlink+0xb10/0xc40\n[ 10.364064] ? __nla_validate_parse+0x4c/0x1a0\n[ 10.364068] __rtnl_newlink+0x597/0xa10\n[ 10.364072] ? __nla_reserve+0x41/0x50\n[ 10.364074] ? __kmalloc_node_track_caller+0x1d0/0x4d0\n[ 10.364079] ? pskb_expand_head+0x75/0x310\n[ 10.364082] ? nla_reserve_64bit+0x21/0x40\n[ 10.364086] ? skb_free_head+0x65/0x80\n[ 10.364089] ? security_sock_rcv_skb+0x2c/0x50\n[ 10.364094] ? __cond_resched+0x19/0x30\n[ 10.364097] ? kmem_cache_alloc_trace+0x15a/0x420\n[ 10.364100] rtnl_newlink+0x49/0x70\n\nThis change fixes MTL_RXQ_DMA_MAP1 mask issue and channel/queue\nmapping warning.\n\nBugLink: https://bugzilla.kernel.org/show_bug.cgi?id=216195"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/508d86ead36cbd8dfb60773a33276790d668c473",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/573768dede0e2b7de38ecbc11cb3ee47643902dc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/613b065ca32e90209024ec4a6bb5ca887ee70980",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7c687a893f5cae5ca40d189635602e93af9bab73",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a3ac79f38d354b10925824899cdbd2caadce55ba",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ad2febdfbd01e1d092a08bfdba92ede79ea05ff3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e846bde09677fa3b203057846620b7ed96540f5f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49593.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49593.json
new file mode 100644
index 00000000000..1a95b7846c7
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49593.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49593",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:34.853",
+ "lastModified": "2025-02-26T07:01:34.853",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix a data-race around sysctl_tcp_probe_interval.\n\nWhile reading sysctl_tcp_probe_interval, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its reader."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2a85388f1d94a9f8b5a529118a2c5eaa0520d85c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/73a11588751a2c13f25d9da8117efc9a79b1843f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/80dabd089086e6553b7acfcff2ec223bdada87a1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b14cc8afbbcbc6dce4797913c0b85266b897f541",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b3798d3519eda9c409bb0815b0102f27ec42468d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c61aede097d350d890fa1edc9521b0072e14a0b8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e6b6f027e2854a51f345a5e3e808d7a88001d4f8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49594.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49594.json
new file mode 100644
index 00000000000..e15f99f7730
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49594.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49594",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:34.947",
+ "lastModified": "2025-02-26T07:01:34.947",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix a data-race around sysctl_tcp_mtu_probe_floor.\n\nWhile reading sysctl_tcp_mtu_probe_floor, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its reader."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/033963b220633ed1602d458e7e4ac06afa9fefb2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8e92d4423615a5257d0d871fc067aa561f597deb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc36c37f5fe066c4708e623ead96dc8f57224bf5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5bece4df6090395f891110ef52a6f82d16685db",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e2ecbf3f0aa88277d43908c53b99399d55729ff9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49595.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49595.json
new file mode 100644
index 00000000000..3f0e84af02e
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49595.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49595",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:35.040",
+ "lastModified": "2025-02-26T07:01:35.040",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix a data-race around sysctl_tcp_probe_threshold.\n\nWhile reading sysctl_tcp_probe_threshold, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its reader."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/44768749980d53bc01980d9c060f736808d11af0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/92c0aa4175474483d6cf373314343d4e624e882a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/96900fa61777402eb5056269d8000aace33a8b6c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9b5dc7ad6da1373d3c60d4b869d688f996e5d219",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b04817c94fbd285a967d9b830b274fe9998c9c0b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d452ce36f2d4c402fa3f5275c9677f80166e7fc6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f524c3e7f6cdad66b3b6a912cef47b656f8b0de3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fa5fb2cf9393db898772db8cb897ed5fd265eb78",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49596.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49596.json
new file mode 100644
index 00000000000..fd34a000575
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49596.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49596",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:35.133",
+ "lastModified": "2025-02-26T07:01:35.133",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix data-races around sysctl_tcp_min_snd_mss.\n\nWhile reading sysctl_tcp_min_snd_mss, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0d8a39feb58910a7f7746b1770ee5578cc551fe6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0fc9357282df055e30990b29f4b7afa53ab42cdb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/78eb166cdefcc3221c8c7c1e2d514e91a2eb5014",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/97992e8feff33b3ae154a113ec398546bbacda80",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fdb96b69f5909ffcdd6f1e0902219fc6d7689ff7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49597.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49597.json
new file mode 100644
index 00000000000..44abd2c8217
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49597.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49597",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:35.220",
+ "lastModified": "2025-02-26T07:01:35.220",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix data-races around sysctl_tcp_base_mss.\n\nWhile reading sysctl_tcp_base_mss, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/30b73edc1d2459ba2c71cb58fbf84a1a6e640fbf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4d7dea651b7fe0322be95054f64e3711afccc543",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/514d2254c7b8aa2d257f5ffc79f0d96be2d6bfda",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/88d78bc097cd8ebc6541e93316c9d9bf651b13e8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9ca18116bc16ec31b9a3ce28ea1350badfa36128",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49598.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49598.json
new file mode 100644
index 00000000000..e451ca89d95
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49598.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49598",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:35.310",
+ "lastModified": "2025-02-26T07:01:35.310",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix data-races around sysctl_tcp_mtu_probing.\n\nWhile reading sysctl_tcp_mtu_probing, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/77a04845f0d28a3561494a5f3121488470a968a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7e8fc428a7f680f1c4994a40e52d7f95a9a93038",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aabe9438fdfe004e021d5a206227ec105dbe2416",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b0920ca09d9ce19980c8391b9002455baa9c1417",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f47d00e077e7d61baf69e46dde3210c886360207",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f966773e13cdd3f12baa90071b7b660f6c633ccb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-495xx/CVE-2022-49599.json b/CVE-2022/CVE-2022-495xx/CVE-2022-49599.json
new file mode 100644
index 00000000000..7c910e61e7a
--- /dev/null
+++ b/CVE-2022/CVE-2022-495xx/CVE-2022-49599.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49599",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:35.403",
+ "lastModified": "2025-02-26T07:01:35.403",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix data-races around sysctl_tcp_l3mdev_accept.\n\nWhile reading sysctl_tcp_l3mdev_accept, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/08a75f10679470552a3a443f9aefd1399604d31d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1d9c81833dec46ccb52a1d0db970fefb7c4fa071",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7d38d86b818104cf88961f3aebea34da89364a8e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9ba9cd43b5776c27d25e5a32dde9e80bdeb1c6a1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49600.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49600.json
new file mode 100644
index 00000000000..7a9fe1d036d
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49600.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49600",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:35.497",
+ "lastModified": "2025-02-26T07:01:35.497",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nip: Fix a data-race around sysctl_ip_autobind_reuse.\n\nWhile reading sysctl_ip_autobind_reuse, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its reader."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0db232765887d9807df8bcb7b6f29b2871539eab",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/611ba70e5aca252ef43374dda97ed4cf1c47a07c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/87ceaa199a72c5856d49a030941fabcd5c3928d4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fa7cdcf9b28d13aac1eeb34b948db8a18e041341",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49601.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49601.json
new file mode 100644
index 00000000000..3cd879dca98
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49601.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49601",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:35.603",
+ "lastModified": "2025-02-26T07:01:35.603",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.\n\nWhile reading sysctl_tcp_fwmark_accept, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its reader."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/13207f9485b5de68decf296ceb0046f5eabb2485",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1a0008f9df59451d0a17806c1ee1a19857032fa8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/45fc82706a97242539d6b841ddd7a077ec20757b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/526d8cf8824f613c72dba2155542295e70135f62",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a7386602a2fe2f6192477e8ede291a815da09d81",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/abf70de2ec026ae8d7da4e79bec61888a880e00b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bf3134feffe61b7a0e21f60a04743f8da0958b53",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d4f65615db7fca3df9f7e79eadf937e6ddb03c54",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49602.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49602.json
new file mode 100644
index 00000000000..faf2a1bd3f3
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49602.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49602",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:35.717",
+ "lastModified": "2025-02-26T07:01:35.717",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nip: Fix a data-race around sysctl_fwmark_reflect.\n\nWhile reading sysctl_fwmark_reflect, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its reader."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0ee76fe01ff3c0b4efaa500aecc90d7c8d3a8860",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/25a635a67c830766110410fea88ec4e6ee29684b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5e7a1be3e68deef250ad43cc91f7bb8d7d758b48",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/85d0b4dbd74b95cc492b1f4e34497d3f894f5d9a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9096edcf4854289f92252e086cf6e498c7f8c21d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a475ecc9ad919aa3ebdd4e4a6ee612b793bf74b3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dccf8a67f30e18980d13f07006e5a536bbd1e136",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fc92e3b4bebfdd986ef1d2c5019f236837b0b982",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49603.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49603.json
new file mode 100644
index 00000000000..cf10b935ad0
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49603.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49603",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:35.817",
+ "lastModified": "2025-02-26T07:01:35.817",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nip: Fix data-races around sysctl_ip_fwd_update_priority.\n\nWhile reading sysctl_ip_fwd_update_priority, it can be changed\nconcurrently. Thus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/11038fa781ab916535c53351537b22d6d405667d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/351f81f7d7185d18a9ff76f8f8c2fa8c4eea563b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7bf9e18d9a5e99e3c83482973557e9f047b051e7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bcc03369d3277ae075ed421f0c8bf4adb5e65b74",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49604.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49604.json
new file mode 100644
index 00000000000..9354c9d1911
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49604.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49604",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:35.910",
+ "lastModified": "2025-02-26T07:01:35.910",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nip: Fix data-races around sysctl_ip_fwd_use_pmtu.\n\nWhile reading sysctl_ip_fwd_use_pmtu, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/60c158dc7b1f0558f6cadd5b50d0386da0000d50",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7828309df0f89419a9349761a37c7d1b0da45697",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/93fbc06da1d819f3981a7bd7928c3641ea67b364",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b96ed5ccb09ae71103023ed13acefb194f609794",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e364b5f6ffbfc457a997ad09a7baa16c19581edc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eb15262128b793e4b1d1c4514d3e6d19c3959764",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49605.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49605.json
new file mode 100644
index 00000000000..010a2488148
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49605.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49605",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:36.000",
+ "lastModified": "2025-02-26T07:01:36.000",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nigc: Reinstate IGC_REMOVED logic and implement it properly\n\nThe initially merged version of the igc driver code (via commit\n146740f9abc4, \"igc: Add support for PF\") contained the following\nIGC_REMOVED checks in the igc_rd32/wr32() MMIO accessors:\n\n\tu32 igc_rd32(struct igc_hw *hw, u32 reg)\n\t{\n\t\tu8 __iomem *hw_addr = READ_ONCE(hw->hw_addr);\n\t\tu32 value = 0;\n\n\t\tif (IGC_REMOVED(hw_addr))\n\t\t\treturn ~value;\n\n\t\tvalue = readl(&hw_addr[reg]);\n\n\t\t/* reads should not return all F's */\n\t\tif (!(~value) && (!reg || !(~readl(hw_addr))))\n\t\t\thw->hw_addr = NULL;\n\n\t\treturn value;\n\t}\n\nAnd:\n\n\t#define wr32(reg, val) \\\n\tdo { \\\n\t\tu8 __iomem *hw_addr = READ_ONCE((hw)->hw_addr); \\\n\t\tif (!IGC_REMOVED(hw_addr)) \\\n\t\t\twritel((val), &hw_addr[(reg)]); \\\n\t} while (0)\n\nE.g. igb has similar checks in its MMIO accessors, and has a similar\nmacro E1000_REMOVED, which is implemented as follows:\n\n\t#define E1000_REMOVED(h) unlikely(!(h))\n\nThese checks serve to detect and take note of an 0xffffffff MMIO read\nreturn from the device, which can be caused by a PCIe link flap or some\nother kind of PCI bus error, and to avoid performing MMIO reads and\nwrites from that point onwards.\n\nHowever, the IGC_REMOVED macro was not originally implemented:\n\n\t#ifndef IGC_REMOVED\n\t#define IGC_REMOVED(a) (0)\n\t#endif /* IGC_REMOVED */\n\nThis led to the IGC_REMOVED logic to be removed entirely in a\nsubsequent commit (commit 3c215fb18e70, \"igc: remove IGC_REMOVED\nfunction\"), with the rationale that such checks matter only for\nvirtualization and that igc does not support virtualization -- but a\nPCIe device can become detached even without virtualization being in\nuse, and without proper checks, a PCIe bus error affecting an igc\nadapter will lead to various NULL pointer dereferences, as the first\naccess after the error will set hw->hw_addr to NULL, and subsequent\naccesses will blindly dereference this now-NULL pointer.\n\nThis patch reinstates the IGC_REMOVED checks in igc_rd32/wr32(), and\nimplements IGC_REMOVED the way it is done for igb, by checking for the\nunlikely() case of hw_addr being NULL. This change prevents the oopses\nseen when a PCIe link flap occurs on an igc adapter."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/16cb6717f4f42487ef10583eb8bc98e7d1e33d65",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/70965b6e5c03aa70cc754af1226b9f9cde0c4bf3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/77836dbe35382aaf8108489060c5c89530c77494",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7c1ddcee5311f3315096217881d2dbe47cc683f9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e75b73081f1ec169518773626c2ff3950476660b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49606.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49606.json
new file mode 100644
index 00000000000..5a06d9a987a
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49606.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49606",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:36.093",
+ "lastModified": "2025-02-26T07:01:36.093",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/irdma: Fix sleep from invalid context BUG\n\nTaking the qos_mutex to process RoCEv2 QP's on netdev events causes a\nkernel splat.\n\nFix this by removing the handling for RoCEv2 in\nirdma_cm_teardown_connections that uses the mutex. This handling is only\nneeded for iWARP to avoid having connections established while the link is\ndown or having connections remain functional after the IP address is\nremoved.\n\n BUG: sleeping function called from invalid context at kernel/locking/mutex.\n Call Trace:\n kernel: dump_stack+0x66/0x90\n kernel: ___might_sleep.cold.92+0x8d/0x9a\n kernel: mutex_lock+0x1c/0x40\n kernel: irdma_cm_teardown_connections+0x28e/0x4d0 [irdma]\n kernel: ? check_preempt_curr+0x7a/0x90\n kernel: ? select_idle_sibling+0x22/0x3c0\n kernel: ? select_task_rq_fair+0x94c/0xc90\n kernel: ? irdma_exec_cqp_cmd+0xc27/0x17c0 [irdma]\n kernel: ? __wake_up_common+0x7a/0x190\n kernel: irdma_if_notify+0x3cc/0x450 [irdma]\n kernel: ? sched_clock_cpu+0xc/0xb0\n kernel: irdma_inet6addr_event+0xc6/0x150 [irdma]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2cae7e519032e4b4672cb9204d5586a441924364",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a4c5115140ed1833197bad9a6b80265840ff427f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc0315564d6eec91c716d314b743321be24c70b3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49607.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49607.json
new file mode 100644
index 00000000000..905ff6e9d04
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49607.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49607",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:36.180",
+ "lastModified": "2025-02-26T07:01:36.180",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/core: Fix data race between perf_event_set_output() and perf_mmap_close()\n\nYang Jihing reported a race between perf_event_set_output() and\nperf_mmap_close():\n\n\tCPU1\t\t\t\t\tCPU2\n\n\tperf_mmap_close(e2)\n\t if (atomic_dec_and_test(&e2->rb->mmap_count)) // 1 - > 0\n\t detach_rest = true\n\n\t\t\t\t\t\tioctl(e1, IOC_SET_OUTPUT, e2)\n\t\t\t\t\t\t perf_event_set_output(e1, e2)\n\n\t ...\n\t list_for_each_entry_rcu(e, &e2->rb->event_list, rb_entry)\n\t ring_buffer_attach(e, NULL);\n\t // e1 isn't yet added and\n\t // therefore not detached\n\n\t\t\t\t\t\t ring_buffer_attach(e1, e2->rb)\n\t\t\t\t\t\t list_add_rcu(&e1->rb_entry,\n\t\t\t\t\t\t\t\t &e2->rb->event_list)\n\nAfter this; e1 is attached to an unmapped rb and a subsequent\nperf_mmap() will loop forever more:\n\n\tagain:\n\t\tmutex_lock(&e->mmap_mutex);\n\t\tif (event->rb) {\n\t\t\t...\n\t\t\tif (!atomic_inc_not_zero(&e->rb->mmap_count)) {\n\t\t\t\t...\n\t\t\t\tmutex_unlock(&e->mmap_mutex);\n\t\t\t\tgoto again;\n\t\t\t}\n\t\t}\n\nThe loop in perf_mmap_close() holds e2->mmap_mutex, while the attach\nin perf_event_set_output() holds e1->mmap_mutex. As such there is no\nserialization to avoid this race.\n\nChange perf_event_set_output() to take both e1->mmap_mutex and\ne2->mmap_mutex to alleviate that problem. Additionally, have the loop\nin perf_mmap() detach the rb directly, this avoids having to wait for\nthe concurrent perf_mmap_close() to get around to doing it to make\nprogress."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/17f5417194136517ee9bbd6511249e5310e5617c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3bbd868099287ff9027db59029b502fcfa2202a0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/43128b3eee337824158f34da6648163d2f2fb937",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/68e3c69803dada336893640110cb87221bb01dcf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/98c3c8fd0d4c560e0f8335b79c407bbf7fc9462c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a9391ff7a7c5f113d6f2bf6621d49110950de49c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/da3c256e2d0ebc87c7db0c605c9692b6f1722074",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f836f9ac95df15f1e0af4beb0ec20021e8c91998",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49608.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49608.json
new file mode 100644
index 00000000000..ff5377c4ce7
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49608.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49608",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:36.270",
+ "lastModified": "2025-02-26T07:01:36.270",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: ralink: Check for null return of devm_kcalloc\n\nBecause of the possible failure of the allocation, data->domains might\nbe NULL pointer and will cause the dereference of the NULL pointer\nlater.\nTherefore, it might be better to check it and directly return -ENOMEM\nwithout releasing data manually if fails, because the comment of the\ndevm_kmalloc() says \"Memory allocated with this function is\nautomatically freed on driver detach.\"."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/13596e6c9e541e90e5fc2c52b23f08b951370da9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/44016a85419ca0d4f1e4d0127b330f8e4e2a57d0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5595d30c4dc27d939635c3188c68203b6ece1711",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5694b162f275fb9a9f89422701b2b963be11e496",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6194c021496addc11763d1ffa89ce5751889fe3c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c3b821e8e406d5650e587b7ac624ac24e9b780a8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49609.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49609.json
new file mode 100644
index 00000000000..547ab27a36b
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49609.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49609",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:36.363",
+ "lastModified": "2025-02-26T07:01:36.363",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npower/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe\n\nof_find_matching_node_and_match() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/493ceca3271316e74639c89ff8ac35883de64256",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/49fa778ee044b00471dd9ccae5f6a121fffea1ac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6689754b121bd487f99680280102b3a5cd7374af",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/71ab83ac65e2d671552374123bf920c1d698335a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/78bdf732cf5d74d1c6ecda06830a91f80a4aef6f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/80192eff64eee9b3bc0594a47381937b94b9d65a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a9ed3ad3a8d1dfbc829d86edb3236873a315db11",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b4d224eec96a18fa8959512cd9e5b6a50bd16a41",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49610.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49610.json
new file mode 100644
index 00000000000..7f28ada54bf
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49610.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49610",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:36.463",
+ "lastModified": "2025-02-26T07:01:36.463",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: VMX: Prevent RSB underflow before vmenter\n\nOn VMX, there are some balanced returns between the time the guest's\nSPEC_CTRL value is written, and the vmenter.\n\nBalanced returns (matched by a preceding call) are usually ok, but it's\nat least theoretically possible an NMI with a deep call stack could\nempty the RSB before one of the returns.\n\nFor maximum paranoia, don't allow *any* returns (balanced or otherwise)\nbetween the SPEC_CTRL write and the vmenter.\n\n [ bp: Fix 32-bit build. ]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/07853adc29a058c5fd143c14e5ac528448a72ed9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/afd743f6dde87296c6f3414706964c491bb85862",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49611.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49611.json
new file mode 100644
index 00000000000..a2a3104d426
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49611.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49611",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:36.553",
+ "lastModified": "2025-02-26T07:01:36.553",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/speculation: Fill RSB on vmexit for IBRS\n\nPrevent RSB underflow/poisoning attacks with RSB. While at it, add a\nbunch of comments to attempt to document the current state of tribal\nknowledge about RSB attacks and what exactly is being mitigated."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/17a9fc4a7b91f8599223631bb6ae6416bc0de1c0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3d323b99ff5c8c57005184056d65f6af5b0479d8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4d7f72b6e1bc630bec7e4cd51814bc2b092bf153",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8c38306e2e9257af4af2819aa287a4711ff36329",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8d5cff499a6d740c91ff37963907e0e983c37f0f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9756bba28470722dacb79ffce554336dd1f6a6cd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f744b88dfc201bf8092833ec70b23c720188b527",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49612.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49612.json
new file mode 100644
index 00000000000..7919362ca17
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49612.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49612",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:36.653",
+ "lastModified": "2025-02-26T07:01:36.653",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: core: Fix boundary conditions in interpolation\n\nThe functions power_supply_temp2resist_simple and power_supply_ocv2cap_simple\nhandle boundary conditions incorrectly.\nThe change was introduced in a4585ba2050f460f749bbaf2b67bd56c41e30283\n(\"power: supply: core: Use library interpolation\").\nThere are two issues: First, the lines \"high = i - 1\" and \"high = i\" in ocv2cap\nhave the wrong order compared to temp2resist. As a consequence, ocv2cap\nsets high=-1 if ocv>table[0].ocv, which causes an out-of-bounds read.\nSecond, the logic of temp2resist is also not correct.\nConsider the case table[] = {{20, 100}, {10, 80}, {0, 60}}.\nFor temp=5, we expect a resistance of 70% by interpolation.\nHowever, temp2resist sets high=low=2 and returns 60."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/093d27bb6f2d1963f927ef59c9a2d37059175426",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a762cee5d933fe4e2e1b773d60fc74fb8248d8c4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49613.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49613.json
new file mode 100644
index 00000000000..bc809e87a53
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49613.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49613",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:36.747",
+ "lastModified": "2025-02-26T07:01:36.747",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: 8250: Fix PM usage_count for console handover\n\nWhen console is enabled, univ8250_console_setup() calls\nserial8250_console_setup() before .dev is set to uart_port. Therefore,\nit will not call pm_runtime_get_sync(). Later, when the actual driver\nis going to take over univ8250_console_exit() is called. As .dev is\nalready set, serial8250_console_exit() makes pm_runtime_put_sync() call\nwith usage count being zero triggering PM usage count warning\n(extra debug for univ8250_console_setup(), univ8250_console_exit(), and\nserial8250_register_ports()):\n\n[ 0.068987] univ8250_console_setup ttyS0 nodev\n[ 0.499670] printk: console [ttyS0] enabled\n[ 0.717955] printk: console [ttyS0] printing thread started\n[ 1.960163] serial8250_register_ports assigned dev for ttyS0\n[ 1.976830] printk: console [ttyS0] disabled\n[ 1.976888] printk: console [ttyS0] printing thread stopped\n[ 1.977073] univ8250_console_exit ttyS0 usage:0\n[ 1.977075] serial8250 serial8250: Runtime PM usage count underflow!\n[ 1.977429] dw-apb-uart.6: ttyS0 at MMIO 0x4010006000 (irq = 33, base_baud = 115200) is a 16550A\n[ 1.977812] univ8250_console_setup ttyS0 usage:2\n[ 1.978167] printk: console [ttyS0] printing thread started\n[ 1.978203] printk: console [ttyS0] enabled\n\nTo fix the issue, call pm_runtime_get_sync() in\nserial8250_register_ports() as soon as .dev is set for an uart_port\nif it has console enabled.\n\nThis problem became apparent only recently because 82586a721595 (\"PM:\nruntime: Avoid device usage count underflows\") added the warning\nprintout. I confirmed this problem also occurs with v5.18 (w/o the\nwarning printout, obviously)."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/190ce5cdc55d1b66ea582ac2be6fd5a72e3cc486",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5df66302f03f87ae8953785a882d78e911f00c55",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d9cb6fabc90102f9e61fe35bd0160db88f4f53b4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f9b11229b79c0fb2100b5bb4628a101b1d37fbf6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49614.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49614.json
new file mode 100644
index 00000000000..e0496870bfa
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49614.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49614",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:36.837",
+ "lastModified": "2025-02-26T07:01:36.837",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: use struct group for generic command dwords\n\nThis will allow the trace event to know the full size of the data\nintended to be copied and silence read overflow checks."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3d8b35387e01cab217dc4691a6f770cbb6ed852c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5c629dc9609dc43492a7bc8060cc6120875bf096",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49615.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49615.json
new file mode 100644
index 00000000000..da079319dd1
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49615.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49615",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:36.927",
+ "lastModified": "2025-02-26T07:01:36.927",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error\n\nThe initial settings will be written before the codec probe function.\nBut, the rt711->component doesn't be assigned yet.\nIf IO error happened during initial settings operations, it will cause the kernel panic.\nThis patch changed component->dev to slave->dev to fix this issue."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1df793d479bef546569fc2e409ff8bb3f0fb8e99",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/269be8b2907378adf72d7347cfa43ef230351a06",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7bb71133cae88d3003a3490b97864af76533072b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49616.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49616.json
new file mode 100644
index 00000000000..5be168a4adf
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49616.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49616",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:37.017",
+ "lastModified": "2025-02-26T07:01:37.017",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: rt7*-sdw: harden jack_detect_handler\n\nRealtek headset codec drivers typically check if the card is\ninstantiated before proceeding with the jack detection.\n\nThe rt700, rt711 and rt711-sdca are however missing a check on the\ncard pointer, which can lead to NULL dereferences encountered in\ndriver bind/unbind tests."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0484271ab0ce50649329fa9dc23c50853c5b26a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/07a606e1389a63b61cb8cd591026f30529117573",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1d75b73ec6d6b705cca528b36d8315e43e8d7fa5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49617.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49617.json
new file mode 100644
index 00000000000..d77f8764112
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49617.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49617",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:37.107",
+ "lastModified": "2025-02-26T07:01:37.107",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: Intel: sof_sdw: handle errors on card registration\n\nIf the card registration fails, typically because of deferred probes,\nthe device properties added for headset codecs are not removed, which\nleads to kernel oopses in driver bind/unbind tests.\n\nWe already clean-up the device properties when the card is removed,\nthis code can be moved as a helper and called upon card registration\nerrors."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/09bca0ffc95c50369f1345d80ecfaca51864126f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f2556ce6b35ae0fc72000a4daa21ded12665e2f2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fe154c4ff376bc31041c6441958a08243df09c99",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49618.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49618.json
new file mode 100644
index 00000000000..b8005e57698
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49618.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49618",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:37.197",
+ "lastModified": "2025-02-26T07:01:37.197",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux()\n\npdesc could be null but still dereference pdesc->name and it will lead to\na null pointer access. So we move a null check before dereference."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3cb392b64304a05bf647e2e44efacd9a1f3c3c6a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/84a85d3fef2e75b1fe9fc2af6f5267122555a1ed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e162a24f1dd06c0dcae71f2565c9f3da2827b98e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef1e38532f4b2f0f3b460e938a2e7076c3bed5ee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49619.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49619.json
new file mode 100644
index 00000000000..25d1c5b2d11
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49619.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49619",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:37.290",
+ "lastModified": "2025-02-26T07:01:37.290",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sfp: fix memory leak in sfp_probe()\n\nsfp_probe() allocates a memory chunk from sfp with sfp_alloc(). When\ndevm_add_action() fails, sfp is not freed, which leads to a memory leak.\n\nWe should use devm_add_action_or_reset() instead of devm_add_action()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0a18d802d65cf662644fd1d369c86d84a5630652",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1545bc727625ea6e8decd717e5d1e8cc704ccf8f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/204543581a2f26bb3b997a304c0bd06926ba7f15",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/67dc32542a1fb7790d0853cf4a5cf859ac6a2002",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9ec5a97f327a89031fce6cfc3e95543c53936638",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ede990cfc42775bd0141e21f37ee365dcaeeb50f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f22ddc8a5278d7fb6369a0aeb0d8775a0aefaaee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49620.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49620.json
new file mode 100644
index 00000000000..f39be8d2b0e
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49620.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49620",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:37.387",
+ "lastModified": "2025-02-26T07:01:37.387",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tipc: fix possible refcount leak in tipc_sk_create()\n\nFree sk in case tipc_sk_insert() fails."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/00aff3590fc0a73bddd3b743863c14e76fd35c0c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3b2957fc09fe1ac7f07f40dd50dd5f93e3f3a7a2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4919d82f7041157a421ca9bf39a78551d5ad8a1b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/638fa20b618b2bbcf86da71231624cc82121a036",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7bc9e7f70bc57d8f02ffea2a42094281effb15ef",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/833ecd0eae76eadf81d6d747bb5bc992d1151867",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef488669b2652bde5b6ee5a409a5b048a2a50db4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/efa78f2ae363428525fb4981bb63c555ee79f3c7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49621.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49621.json
new file mode 100644
index 00000000000..2407c9641af
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49621.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49621",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:37.487",
+ "lastModified": "2025-02-26T07:01:37.487",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: pmac32-cpufreq: Fix refcount leak bug\n\nIn pmac_cpufreq_init_MacRISC3(), we need to add corresponding\nof_node_put() for the three node pointers whose refcount have\nbeen incremented by of_find_node_by_name()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/37c16fc2cb13a13f3c0193bfc6f2edef7d7df7d7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3ea9dbf7c2f436952bca331c6f5d72f75aca224e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4513018d0bd739097570d26a7760551cba3deb56",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4585890ab2dbf455d80e254d3d859d4c1e357920",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4f242486bf46d314b2e3838cc64b56f008a3c4d7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/57289b6601fe78c09921599b042a0b430fb420ec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8dda30f81c751b01cd71f2cfaeef26ad4393b1d1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ccd7567d4b6cf187fdfa55f003a9e461ee629e36",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49622.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49622.json
new file mode 100644
index 00000000000..b39f3b238e1
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49622.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49622",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:37.580",
+ "lastModified": "2025-02-26T07:01:37.580",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: avoid skb access on nf_stolen\n\nWhen verdict is NF_STOLEN, the skb might have been freed.\n\nWhen tracing is enabled, this can result in a use-after-free:\n1. access to skb->nf_trace\n2. access to skb->mark\n3. computation of trace id\n4. dump of packet payload\n\nTo avoid 1, keep a cached copy of skb->nf_trace in the\ntrace state struct.\nRefresh this copy whenever verdict is != STOLEN.\n\nAvoid 2 by skipping skb->mark access if verdict is STOLEN.\n\n3 is avoided by precomputing the trace id.\n\nOnly dump the packet when verdict is not \"STOLEN\"."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0016d5d46d7440729a3132f61a8da3bf7f84e2ba",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e34b9ed96ce3b06c79bf884009b16961ca478f87",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49623.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49623.json
new file mode 100644
index 00000000000..45a379bfa17
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49623.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49623",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:37.663",
+ "lastModified": "2025-02-26T07:01:37.663",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/xive/spapr: correct bitmap allocation size\n\nkasan detects access beyond the end of the xibm->bitmap allocation:\n\nBUG: KASAN: slab-out-of-bounds in _find_first_zero_bit+0x40/0x140\nRead of size 8 at addr c00000001d1d0118 by task swapper/0/1\n\nCPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.19.0-rc2-00001-g90df023b36dd #28\nCall Trace:\n[c00000001d98f770] [c0000000012baab8] dump_stack_lvl+0xac/0x108 (unreliable)\n[c00000001d98f7b0] [c00000000068faac] print_report+0x37c/0x710\n[c00000001d98f880] [c0000000006902c0] kasan_report+0x110/0x354\n[c00000001d98f950] [c000000000692324] __asan_load8+0xa4/0xe0\n[c00000001d98f970] [c0000000011c6ed0] _find_first_zero_bit+0x40/0x140\n[c00000001d98f9b0] [c0000000000dbfbc] xive_spapr_get_ipi+0xcc/0x260\n[c00000001d98fa70] [c0000000000d6d28] xive_setup_cpu_ipi+0x1e8/0x450\n[c00000001d98fb30] [c000000004032a20] pSeries_smp_probe+0x5c/0x118\n[c00000001d98fb60] [c000000004018b44] smp_prepare_cpus+0x944/0x9ac\n[c00000001d98fc90] [c000000004009f9c] kernel_init_freeable+0x2d4/0x640\n[c00000001d98fd90] [c0000000000131e8] kernel_init+0x28/0x1d0\n[c00000001d98fe10] [c00000000000cd54] ret_from_kernel_thread+0x5c/0x64\n\nAllocated by task 0:\n kasan_save_stack+0x34/0x70\n __kasan_kmalloc+0xb4/0xf0\n __kmalloc+0x268/0x540\n xive_spapr_init+0x4d0/0x77c\n pseries_init_irq+0x40/0x27c\n init_IRQ+0x44/0x84\n start_kernel+0x2a4/0x538\n start_here_common+0x1c/0x20\n\nThe buggy address belongs to the object at c00000001d1d0118\n which belongs to the cache kmalloc-8 of size 8\nThe buggy address is located 0 bytes inside of\n 8-byte region [c00000001d1d0118, c00000001d1d0120)\n\nThe buggy address belongs to the physical page:\npage:c00c000000074740 refcount:1 mapcount:0 mapping:0000000000000000 index:0xc00000001d1d0558 pfn:0x1d1d\nflags: 0x7ffff000000200(slab|node=0|zone=0|lastcpupid=0x7ffff)\nraw: 007ffff000000200 c00000001d0003c8 c00000001d0003c8 c00000001d010480\nraw: c00000001d1d0558 0000000001e1000a 00000001ffffffff 0000000000000000\npage dumped because: kasan: bad access detected\n\nMemory state around the buggy address:\n c00000001d1d0000: fc 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n c00000001d1d0080: fc fc 00 fc fc fc fc fc fc fc fc fc fc fc fc fc\n>c00000001d1d0100: fc fc fc 02 fc fc fc fc fc fc fc fc fc fc fc fc\n ^\n c00000001d1d0180: fc fc fc fc 04 fc fc fc fc fc fc fc fc fc fc fc\n c00000001d1d0200: fc fc fc fc fc 04 fc fc fc fc fc fc fc fc fc fc\n\nThis happens because the allocation uses the wrong unit (bits) when it\nshould pass (BITS_TO_LONGS(count) * sizeof(long)) or equivalent. With small\nnumbers of bits, the allocated object can be smaller than sizeof(long),\nwhich results in invalid accesses.\n\nUse bitmap_zalloc() to allocate and initialize the irq bitmap, paired with\nbitmap_free() for consistency."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/10f2cd373e65bcd3be8f3cdc71c330c25763dfd8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/19fc5bb93c6bbdce8292b4d7eed04e2fa118d2fe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/99d1c36bddd93919072b5a51a89297bbb5ad6a6f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49624.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49624.json
new file mode 100644
index 00000000000..df7848aa8c4
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49624.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49624",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:37.753",
+ "lastModified": "2025-02-26T07:01:37.753",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atlantic: remove aq_nic_deinit() when resume\n\naq_nic_deinit() has been called while suspending, so we don't have to call\nit again on resume.\nActually, call it again leads to another hang issue when resuming from\nS3.\n\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992345] Call Trace:\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992346] \nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992348] aq_nic_deinit+0xb4/0xd0 [atlantic]\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992356] aq_pm_thaw+0x7f/0x100 [atlantic]\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992362] pci_pm_resume+0x5c/0x90\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992366] ? pci_pm_thaw+0x80/0x80\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992368] dpm_run_callback+0x4e/0x120\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992371] device_resume+0xad/0x200\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992373] async_resume+0x1e/0x40\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992374] async_run_entry_fn+0x33/0x120\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992377] process_one_work+0x220/0x3c0\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992380] worker_thread+0x4d/0x3f0\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992382] ? process_one_work+0x3c0/0x3c0\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992384] kthread+0x12a/0x150\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992386] ? set_kthread_struct+0x40/0x40\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992387] ret_from_fork+0x22/0x30\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992391] \nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992392] ---[ end trace 1ec8c79604ed5e0d ]---\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992394] PM: dpm_run_callback(): pci_pm_resume+0x0/0x90 returns -110\nJul 8 03:09:44 u-Precision-7865-Tower kernel: [ 5910.992397] atlantic 0000:02:00.0: PM: failed to resume async: error -110"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2e15c51fefaffaf9f72255eaef4fada05055e4c5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/58c90993933e7a76305519bc70da8c0cd2907c1f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/702419db7ded2e3686fbc05040b61d7428d611d5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c2978d0124f26e453ed30fda6a37f62d8c7f19cb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49625.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49625.json
new file mode 100644
index 00000000000..2e113c4b5d3
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49625.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49625",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:37.847",
+ "lastModified": "2025-02-26T07:01:37.847",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsfc: fix kernel panic when creating VF\n\nWhen creating VFs a kernel panic can happen when calling to\nefx_ef10_try_update_nic_stats_vf.\n\nWhen releasing a DMA coherent buffer, sometimes, I don't know in what\nspecific circumstances, it has to unmap memory with vunmap. It is\ndisallowed to do that in IRQ context or with BH disabled. Otherwise, we\nhit this line in vunmap, causing the crash:\n BUG_ON(in_interrupt());\n\nThis patch reenables BH to release the buffer.\n\nLog messages when the bug is hit:\n kernel BUG at mm/vmalloc.c:2727!\n invalid opcode: 0000 [#1] PREEMPT SMP NOPTI\n CPU: 6 PID: 1462 Comm: NetworkManager Kdump: loaded Tainted: G I --------- --- 5.14.0-119.el9.x86_64 #1\n Hardware name: Dell Inc. PowerEdge R740/06WXJT, BIOS 2.8.2 08/27/2020\n RIP: 0010:vunmap+0x2e/0x30\n ...skip...\n Call Trace:\n __iommu_dma_free+0x96/0x100\n efx_nic_free_buffer+0x2b/0x40 [sfc]\n efx_ef10_try_update_nic_stats_vf+0x14a/0x1c0 [sfc]\n efx_ef10_update_stats_vf+0x18/0x40 [sfc]\n efx_start_all+0x15e/0x1d0 [sfc]\n efx_net_open+0x5a/0xe0 [sfc]\n __dev_open+0xe7/0x1a0\n __dev_change_flags+0x1d7/0x240\n dev_change_flags+0x21/0x60\n ...skip..."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/16662524ec5da801fb78a1afcaf6e782f1cf103a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/68e5f32f0de9594629ff9e599294d9801c6187de",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/82bcb730f856086f033e6c04082eb4503d4c2fa4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ada74c5539eba06cf8b47d068f92e0b3963a9a6e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b82e4ad58a7fb72456503958a93060f87896e629",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b9072305270579a9d6afc9b926166231e5b1a7c8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d9840212a9c00507347c703f4fdeda16400407e0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/da346adcf5573fd8663cabfdfe8371009629a906",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49626.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49626.json
new file mode 100644
index 00000000000..15e1ad61fdc
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49626.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49626",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:37.937",
+ "lastModified": "2025-02-26T07:01:37.937",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsfc: fix use after free when disabling sriov\n\nUse after free is detected by kfence when disabling sriov. What was read\nafter being freed was vf->pci_dev: it was freed from pci_disable_sriov\nand later read in efx_ef10_sriov_free_vf_vports, called from\nefx_ef10_sriov_free_vf_vswitching.\n\nSet the pointer to NULL at release time to not trying to read it later.\n\nReproducer and dmesg log (note that kfence doesn't detect it every time):\n$ echo 1 > /sys/class/net/enp65s0f0np0/device/sriov_numvfs\n$ echo 0 > /sys/class/net/enp65s0f0np0/device/sriov_numvfs\n\n BUG: KFENCE: use-after-free read in efx_ef10_sriov_free_vf_vswitching+0x82/0x170 [sfc]\n\n Use-after-free read at 0x00000000ff3c1ba5 (in kfence-#224):\n efx_ef10_sriov_free_vf_vswitching+0x82/0x170 [sfc]\n efx_ef10_pci_sriov_disable+0x38/0x70 [sfc]\n efx_pci_sriov_configure+0x24/0x40 [sfc]\n sriov_numvfs_store+0xfe/0x140\n kernfs_fop_write_iter+0x11c/0x1b0\n new_sync_write+0x11f/0x1b0\n vfs_write+0x1eb/0x280\n ksys_write+0x5f/0xe0\n do_syscall_64+0x5c/0x80\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\n kfence-#224: 0x00000000edb8ef95-0x00000000671f5ce1, size=2792, cache=kmalloc-4k\n\n allocated by task 6771 on cpu 10 at 3137.860196s:\n pci_alloc_dev+0x21/0x60\n pci_iov_add_virtfn+0x2a2/0x320\n sriov_enable+0x212/0x3e0\n efx_ef10_sriov_configure+0x67/0x80 [sfc]\n efx_pci_sriov_configure+0x24/0x40 [sfc]\n sriov_numvfs_store+0xba/0x140\n kernfs_fop_write_iter+0x11c/0x1b0\n new_sync_write+0x11f/0x1b0\n vfs_write+0x1eb/0x280\n ksys_write+0x5f/0xe0\n do_syscall_64+0x5c/0x80\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\n freed by task 6771 on cpu 12 at 3170.991309s:\n device_release+0x34/0x90\n kobject_cleanup+0x3a/0x130\n pci_iov_remove_virtfn+0xd9/0x120\n sriov_disable+0x30/0xe0\n efx_ef10_pci_sriov_disable+0x57/0x70 [sfc]\n efx_pci_sriov_configure+0x24/0x40 [sfc]\n sriov_numvfs_store+0xfe/0x140\n kernfs_fop_write_iter+0x11c/0x1b0\n new_sync_write+0x11f/0x1b0\n vfs_write+0x1eb/0x280\n ksys_write+0x5f/0xe0\n do_syscall_64+0x5c/0x80\n entry_SYSCALL_64_after_hwframe+0x44/0xae"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3199e34912d84cdfb8a93a984c5ae5c73fb13e84",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/58d93e9d160c0de6d867c7eb4c2206671a351eb1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9c854ae512b89229aeee93849e9bd4c115b37909",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bcad880865bfb421885364b1f0c7351280fe2b97",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c2240500817b3b4b996cdf2a461a3a5679f49b94",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c9e75bb22a26e391f189f5a5133dd63dcb57fdaa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e435c4aeeaa073091f7f3b7735af2ef5c97d63f2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ebe41da5d47ac0fff877e57bd14c54dccf168827",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49627.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49627.json
new file mode 100644
index 00000000000..b7e9e56023c
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49627.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49627",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:38.030",
+ "lastModified": "2025-02-26T07:01:38.030",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nima: Fix potential memory leak in ima_init_crypto()\n\nOn failure to allocate the SHA1 tfm, IMA fails to initialize and exits\nwithout freeing the ima_algo_array. Add the missing kfree() for\nima_algo_array to avoid the potential memory leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/067d2521874135267e681c19d42761c601d503d6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/601ae26aa2802a4c10c94d7388a99eabdbefab2b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/830de9667b3ada0a75a3f098dfc7159709fe397b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c1d9702ceb4a091da6bee380627596d1fba09274",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49628.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49628.json
new file mode 100644
index 00000000000..5d893d62cb3
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49628.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49628",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:38.117",
+ "lastModified": "2025-02-26T07:01:38.117",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: stmmac: fix leaks in probe\n\nThese two error paths should clean up before returning."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/23aa6d5088e3bd65de77c5c307237b9937f8b48a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dd91bc60f305610401b2196bedb573693d6c8e46",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f4bd3202a2b4194ab6c0ce61628095d54f994db4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49629.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49629.json
new file mode 100644
index 00000000000..cb08cf45fac
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49629.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49629",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:38.200",
+ "lastModified": "2025-02-26T07:01:38.200",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnexthop: Fix data-races around nexthop_compat_mode.\n\nWhile reading nexthop_compat_mode, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0d17723afea3ae8c9f245c9bbd2ba5945b77e812",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a51040d4b120f3520df64fb0b9c63b31d69bea9b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ae3054f6fbccc90f14ecd6cf9b2c09a2401c64fd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bdf00bf24bef9be1ca641a6390fd5487873e0d2e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49630.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49630.json
new file mode 100644
index 00000000000..536d1ebaaab
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49630.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49630",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:38.290",
+ "lastModified": "2025-02-26T07:01:38.290",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix a data-race around sysctl_tcp_ecn_fallback.\n\nWhile reading sysctl_tcp_ecn_fallback, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its reader."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/12b8d9ca7e678abc48195294494f1815b555d658",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1ec3d6c2626ee6e1b36b7bd006873a271406ba61",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8bcf7339f2cf70ea4461df6ea045d1aadfabfa11",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49631.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49631.json
new file mode 100644
index 00000000000..e4840e145d8
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49631.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49631",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:38.380",
+ "lastModified": "2025-02-26T07:01:38.380",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nraw: Fix a data-race around sysctl_raw_l3mdev_accept.\n\nWhile reading sysctl_raw_l3mdev_accept, it can be changed concurrently.\nThus, we need to add READ_ONCE() to its reader."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/038a87b3e460d2ee579c8b1bd3890d816d6687b1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1dace014928e6e385363032d359a04dee9158af0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/46e9c46203fd4676720ddca0fef7eff26826648e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ab5adca2e17d6595f3fc0e25ccb6bcbe2e01ca4f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc9540ba5b3652c473af7e54892a48cdced87983",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49632.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49632.json
new file mode 100644
index 00000000000..7fb42afba6a
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49632.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49632",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:38.470",
+ "lastModified": "2025-02-26T07:01:38.470",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nicmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.\n\nWhile reading sysctl_icmp_errors_use_inbound_ifaddr, it can be changed\nconcurrently. Thus, we need to add READ_ONCE() to its reader."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/d2efabce81db7eed1c98fa1a3f203f0edd738ac3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/de9490c32bc10020efdd1509689a28f197d6dfb8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f9617844e4d5d6331dbce3fb19a24e5bda201e58",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49633.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49633.json
new file mode 100644
index 00000000000..3901659c791
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49633.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49633",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:38.560",
+ "lastModified": "2025-02-26T07:01:38.560",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nicmp: Fix data-races around sysctl_icmp_echo_enable_probe.\n\nWhile reading sysctl_icmp_echo_enable_probe, it can be changed\nconcurrently. Thus, we need to add READ_ONCE() to its readers."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/05c615033174f1d19374f42285ccd8e9af13e427",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4a2f7083cc6cb72dade9a63699ca352fad26d1cd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cce955efa0ab81f7fb72e22beed372054c86005c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49634.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49634.json
new file mode 100644
index 00000000000..8b3620aa1cb
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49634.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49634",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:38.647",
+ "lastModified": "2025-02-26T07:01:38.647",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsysctl: Fix data-races in proc_dou8vec_minmax().\n\nA sysctl variable is accessed concurrently, and there is always a chance\nof data-race. So, all readers and writers need some basic protection to\navoid load/store-tearing.\n\nThis patch changes proc_dou8vec_minmax() to use READ_ONCE() and\nWRITE_ONCE() internally to fix data-races on the sysctl side. For now,\nproc_dou8vec_minmax() itself is tolerant to a data-race, but we still\nneed to add annotations on the other subsystem's side."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5f776daef0b5354615ec4b4234cd9539ca05f273",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7dee5d7747a69aa2be41f04c6a7ecfe3ac8cdf18",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e58b02e445463065b4078bf621561da75197853f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f177b382c33900d0e5a9766493c11a1074076f78",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49635.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49635.json
new file mode 100644
index 00000000000..ab5bd8bb6c9
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49635.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49635",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:38.733",
+ "lastModified": "2025-02-26T07:01:38.733",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/selftests: fix subtraction overflow bug\n\nOn some machines hole_end can be small enough to cause subtraction\noverflow. On the other side (addr + 2 * min_alignment) can overflow\nin case of mock tests. This patch should handle both cases.\n\n(cherry picked from commit ab3edc679c552a466e4bf0b11af3666008bd65a2)"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/333991c4e66b3d4b5613315f18016da80344f659",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e8997d2d6b8d764e12489f1af2a1ce1d7384ca2a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49636.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49636.json
new file mode 100644
index 00000000000..ffa82f8f025
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49636.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49636",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:38.827",
+ "lastModified": "2025-02-26T07:01:38.827",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvlan: fix memory leak in vlan_newlink()\n\nBlamed commit added back a bug I fixed in commit 9bbd917e0bec\n(\"vlan: fix memory leak in vlan_dev_set_egress_priority\")\n\nIf a memory allocation fails in vlan_changelink() after other allocations\nsucceeded, we need to call vlan_dev_free_egress_priority()\nto free all allocated memory because after a failed ->newlink()\nwe do not call any methods like ndo_uninit() or dev->priv_destructor().\n\nIn following example, if the allocation for last element 2000:2001 fails,\nwe need to free eight prior allocations:\n\nip link add link dummy0 dummy0.100 type vlan id 100 \\\n\tegress-qos-map 1:2 2:3 3:4 4:5 5:6 6:7 7:8 8:9 2000:2001\n\nsyzbot report was:\n\nBUG: memory leak\nunreferenced object 0xffff888117bd1060 (size 32):\ncomm \"syz-executor408\", pid 3759, jiffies 4294956555 (age 34.090s)\nhex dump (first 32 bytes):\n09 00 00 00 00 a0 00 00 00 00 00 00 00 00 00 00 ................\n00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\nbacktrace:\n[] kmalloc include/linux/slab.h:600 [inline]\n[] vlan_dev_set_egress_priority+0xed/0x170 net/8021q/vlan_dev.c:193\n[] vlan_changelink+0x178/0x1d0 net/8021q/vlan_netlink.c:128\n[] vlan_newlink+0x148/0x260 net/8021q/vlan_netlink.c:185\n[] rtnl_newlink_create net/core/rtnetlink.c:3363 [inline]\n[] __rtnl_newlink+0xa58/0xdc0 net/core/rtnetlink.c:3580\n[] rtnl_newlink+0x49/0x70 net/core/rtnetlink.c:3593\n[] rtnetlink_rcv_msg+0x21c/0x5c0 net/core/rtnetlink.c:6089\n[] netlink_rcv_skb+0x87/0x1d0 net/netlink/af_netlink.c:2501\n[] netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]\n[] netlink_unicast+0x397/0x4c0 net/netlink/af_netlink.c:1345\n[] netlink_sendmsg+0x396/0x710 net/netlink/af_netlink.c:1921\n[] sock_sendmsg_nosec net/socket.c:714 [inline]\n[] sock_sendmsg+0x56/0x80 net/socket.c:734\n[] ____sys_sendmsg+0x36c/0x390 net/socket.c:2488\n[] ___sys_sendmsg+0x8b/0xd0 net/socket.c:2542\n[] __sys_sendmsg net/socket.c:2571 [inline]\n[] __do_sys_sendmsg net/socket.c:2580 [inline]\n[] __se_sys_sendmsg net/socket.c:2578 [inline]\n[] __x64_sys_sendmsg+0x78/0xf0 net/socket.c:2578\n[] do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n[] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n[] entry_SYSCALL_64_after_hwframe+0x46/0xb0"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4c43069bb1097dd6cc1cf0f7c43a36d1f7b3910b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/72a0b329114b1caa8e69dfa7cdad1dd3c69b8602",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49637.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49637.json
new file mode 100644
index 00000000000..a5aaa187824
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49637.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49637",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:38.920",
+ "lastModified": "2025-02-26T07:01:38.920",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: Fix a data-race around sysctl_fib_sync_mem.\n\nWhile reading sysctl_fib_sync_mem, it can be changed concurrently.\nSo, we need to add READ_ONCE() to avoid a data-race."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/190cd4ff128373271e065afb20f1d2247b3f10c3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/418b191d5f223a8cb6cab09eae1f72c04ba6adf2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/73318c4b7dbd0e781aaababff17376b2894745c0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7c1acd98fb221dc0d847451b9ab86319f8b9916c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9be8aac91960ea32fd0e874758c9afee665c57d2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49638.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49638.json
new file mode 100644
index 00000000000..13e72729ede
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49638.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49638",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:39.010",
+ "lastModified": "2025-02-26T07:01:39.010",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nicmp: Fix data-races around sysctl.\n\nWhile reading icmp sysctl variables, they can be changed concurrently.\nSo, we need to add READ_ONCE() to avoid data-races."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0cba7ca667ceb06934746ddd9833a25847bde81d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1740e5922fbb705637ae9fa5203db132fc45f9f6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/48d7ee321ea5182c6a70782aa186422a70e67e22",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/53ecd09ef2fb35fa69667ae8e414ef6b00fd3bf6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/798c2cf57c63ab39c8aac24d6a3d50f4fa5eeb06",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e088ceb73c24ab4774da391d54a6426f4bfaefce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e2828e8c605853f71267825c9415437c0a93e4f2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/edeec63b13c252193d626c2a48d7a2f0e7016dc2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49639.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49639.json
new file mode 100644
index 00000000000..42563226c59
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49639.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49639",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:39.100",
+ "lastModified": "2025-02-26T07:01:39.100",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncipso: Fix data-races around sysctl.\n\nWhile reading cipso sysctl variables, they can be changed concurrently.\nSo, we need to add READ_ONCE() to avoid data-races."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/07b0caf8aeb9b82e6ecc6c292a3e47c7fcdb1148",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0e41a0f73ccb9be112a80bde3804a771633caaef",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2764f82bbc158d106693ae3ced3675cf4b963b35",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/59e26906b89cc35bb54476498772b45cbc32323f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c321e99d2725d11f7e6a4ebd9ce752259f0bae81",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ca26ca5e2f3eeb3e6fe699cd6effa3b4b2aa8698",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dd44f04b9214adb68ef5684ae87a81ba03632250",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fe2a35fa2c4f9c8ce5ef970eb927031387f9446a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49640.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49640.json
new file mode 100644
index 00000000000..bc1a394ad33
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49640.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49640",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:39.193",
+ "lastModified": "2025-02-26T07:01:39.193",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsysctl: Fix data races in proc_douintvec_minmax().\n\nA sysctl variable is accessed concurrently, and there is always a chance\nof data-race. So, all readers and writers need some basic protection to\navoid load/store-tearing.\n\nThis patch changes proc_douintvec_minmax() to use READ_ONCE() and\nWRITE_ONCE() internally to fix data-races on the sysctl side. For now,\nproc_douintvec_minmax() itself is tolerant to a data-race, but we still\nneed to add annotations on the other subsystem's side."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2d3b559df3ed39258737789aae2ae7973d205bc1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/40e0477a7371d101c55b69d9c32a7a1ed82ab5ea",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b60eddf98b9716651069dfda296c91311a7a6293",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e3a2144b3b6bf9ecafd91087c8b8b48171ec19df",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49641.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49641.json
new file mode 100644
index 00000000000..7b9fb9a3752
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49641.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49641",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:39.280",
+ "lastModified": "2025-02-26T07:01:39.280",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsysctl: Fix data races in proc_douintvec().\n\nA sysctl variable is accessed concurrently, and there is always a chance\nof data-race. So, all readers and writers need some basic protection to\navoid load/store-tearing.\n\nThis patch changes proc_douintvec() to use READ_ONCE() and WRITE_ONCE()\ninternally to fix data-races on the sysctl side. For now, proc_douintvec()\nitself is tolerant to a data-race, but we still need to add annotations on\nthe other subsystem's side."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/4762b532ec9539755aab61445d5da6e1926ccb99",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/630c76850d554d7140232e71b5d1663e88cffb54",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d335db59f7fb3353f56e52371f1ee796ae9c8f09",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5d54714e329f646bd7af4994fc427d88ee68936",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49642.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49642.json
new file mode 100644
index 00000000000..bac94c320ea
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49642.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49642",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:39.373",
+ "lastModified": "2025-02-26T07:01:39.373",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: stmmac: dwc-qos: Disable split header for Tegra194\n\nThere is a long-standing issue with the Synopsys DWC Ethernet driver\nfor Tegra194 where random system crashes have been observed [0]. The\nproblem occurs when the split header feature is enabled in the stmmac\ndriver. In the bad case, a larger than expected buffer length is\nreceived and causes the calculation of the total buffer length to\noverflow. This results in a very large buffer length that causes the\nkernel to crash. Why this larger buffer length is received is not clear,\nhowever, the feedback from the NVIDIA design team is that the split\nheader feature is not supported for Tegra194. Therefore, disable split\nheader support for Tegra194 to prevent these random crashes from\noccurring.\n\n[0] https://lore.kernel.org/linux-tegra/b0b17697-f23e-8fa5-3757-604a86f3a095@nvidia.com/"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/029c1c2059e9c4b38f97a06204cdecd10cfbeb8a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2968830c9b47ce093237483c6207c61065712386",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9cc8edc571b871d974b3289868553f9ce544aba6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cfa4caf3e881ad6dd366c903c34f1c7f21b857ab",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5c315a787652c35045044877a249f7d5c8a4104",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49643.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49643.json
new file mode 100644
index 00000000000..95d9397e1ab
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49643.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49643",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:39.467",
+ "lastModified": "2025-02-26T07:01:39.467",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nima: Fix a potential integer overflow in ima_appraise_measurement\n\nWhen the ima-modsig is enabled, the rc passed to evm_verifyxattr() may be\nnegative, which may cause the integer overflow problem."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/388f3df7c3c8b7f2a32b9ae0a9b2f9f6ad3b1b77",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/640cea4c2839a821adfbb703b590a5928abe9286",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/831e190175f10652be93b08436cc7bf2e62e4bb6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c8d5d81940938b5f6c0f495ca9538e7740416f30",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d2ee2cfc4aa85ff6a2a3b198a3a524ec54e3d999",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49644.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49644.json
new file mode 100644
index 00000000000..9a0ecb3435c
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49644.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49644",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:39.567",
+ "lastModified": "2025-02-26T07:01:39.567",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915: fix a possible refcount leak in intel_dp_add_mst_connector()\n\nIf drm_connector_init fails, intel_connector_free will be called to take\ncare of proper free. So it is necessary to drop the refcount of port\nbefore intel_connector_free.\n\n(cherry picked from commit cea9ed611e85d36a05db52b6457bf584b7d969e2)"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/505114dda5bbfd07f4ce9a2df5b7d8ef5f2a1218",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/592f3bad00b7e2a95a6fb7a4f9e742c061c9c3c1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/72f231b9a88abcfac9f5ddaa1a0aacb3f9f87ba5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/85144df9ff4652816448369de76897c57cbb1b93",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a91522b4279bebb098106a19b91f82b9c3213be9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49645.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49645.json
new file mode 100644
index 00000000000..a4ca8f344b6
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49645.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49645",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:39.677",
+ "lastModified": "2025-02-26T07:01:39.677",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/panfrost: Fix shrinker list corruption by madvise IOCTL\n\nCalling madvise IOCTL twice on BO causes memory shrinker list corruption\nand crashes kernel because BO is already on the list and it's added to\nthe list again, while BO should be removed from the list before it's\nre-added. Fix it."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0581613df7f9a4c5fac096ce1d5fb15b7b994240",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1807d8867402a58b831a7fc16832747ff559a0d1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/393594aad55179eb761af41533d8d1d6eb4543b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9fc33eaaa979d112d10fea729edcd2a2e21aa912",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f036392edd9c49090781d8cca26ad6557a63bae4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49646.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49646.json
new file mode 100644
index 00000000000..1377d6b1a18
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49646.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49646",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:39.777",
+ "lastModified": "2025-02-26T07:01:39.777",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix queue selection for mesh/OCB interfaces\n\nWhen using iTXQ, the code assumes that there is only one vif queue for\nbroadcast packets, using the BE queue. Allowing non-BE queue marking\nviolates that assumption and txq->ac == skb_queue_mapping is no longer\nguaranteed. This can cause issues with queue handling in the driver and\nalso causes issues with the recent ATF change, resulting in an AQL\nunderflow warning."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/41ecab279a70dced9005f4d55fa0fcde8938603f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/444be5a02b77f3b7a8ac9c1a0b074fbb3bd89cd0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/50e2ab39291947b6c6c7025cf01707c270fcde59",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5a9df31017999197b6e60535940f2f2fe1bd3b0d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e013ea2a51a94b903b396a8dff531a07d470335d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49647.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49647.json
new file mode 100644
index 00000000000..dcedef8ef33
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49647.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49647",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:39.863",
+ "lastModified": "2025-02-26T07:01:39.863",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup: Use separate src/dst nodes when preloading css_sets for migration\n\nEach cset (css_set) is pinned by its tasks. When we're moving tasks around\nacross csets for a migration, we need to hold the source and destination\ncsets to ensure that they don't go away while we're moving tasks about. This\nis done by linking cset->mg_preload_node on either the\nmgctx->preloaded_src_csets or mgctx->preloaded_dst_csets list. Using the\nsame cset->mg_preload_node for both the src and dst lists was deemed okay as\na cset can't be both the source and destination at the same time.\n\nUnfortunately, this overloading becomes problematic when multiple tasks are\ninvolved in a migration and some of them are identity noop migrations while\nothers are actually moving across cgroups. For example, this can happen with\nthe following sequence on cgroup1:\n\n #1> mkdir -p /sys/fs/cgroup/misc/a/b\n #2> echo $$ > /sys/fs/cgroup/misc/a/cgroup.procs\n #3> RUN_A_COMMAND_WHICH_CREATES_MULTIPLE_THREADS &\n #4> PID=$!\n #5> echo $PID > /sys/fs/cgroup/misc/a/b/tasks\n #6> echo $PID > /sys/fs/cgroup/misc/a/cgroup.procs\n\nthe process including the group leader back into a. In this final migration,\nnon-leader threads would be doing identity migration while the group leader\nis doing an actual one.\n\nAfter #3, let's say the whole process was in cset A, and that after #4, the\nleader moves to cset B. Then, during #6, the following happens:\n\n 1. cgroup_migrate_add_src() is called on B for the leader.\n\n 2. cgroup_migrate_add_src() is called on A for the other threads.\n\n 3. cgroup_migrate_prepare_dst() is called. It scans the src list.\n\n 4. It notices that B wants to migrate to A, so it tries to A to the dst\n list but realizes that its ->mg_preload_node is already busy.\n\n 5. and then it notices A wants to migrate to A as it's an identity\n migration, it culls it by list_del_init()'ing its ->mg_preload_node and\n putting references accordingly.\n\n 6. The rest of migration takes place with B on the src list but nothing on\n the dst list.\n\nThis means that A isn't held while migration is in progress. If all tasks\nleave A before the migration finishes and the incoming task pins it, the\ncset will be destroyed leading to use-after-free.\n\nThis is caused by overloading cset->mg_preload_node for both src and dst\npreload lists. We wanted to exclude the cset from the src list but ended up\ninadvertently excluding it from the dst list too.\n\nThis patch fixes the issue by separating out cset->mg_preload_node into\n->mg_src_preload_node and ->mg_dst_preload_node, so that the src and dst\npreloadings don't interfere with each other."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/05f7658210d1d331e8dd4cb6e7bbbe3df5f5ac27",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/07fd5b6cdf3cc30bfde8fe0f644771688be04447",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0e41774b564befa6d271e8d5086bf870d617a4e6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/54aee4e5ce8c21555286a6333e46c1713880cf93",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7657e3958535d101a24ab4400f9b8062b9107cc4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ad44e05f3e016bdcb1ad25af35ade5b5f41ccd68",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cec2bbdcc14fbaa6b95ee15a7c423b05d97038be",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49648.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49648.json
new file mode 100644
index 00000000000..d1ab1a1b357
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49648.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49648",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:39.957",
+ "lastModified": "2025-02-26T07:01:39.957",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing/histograms: Fix memory leak problem\n\nThis reverts commit 46bbe5c671e06f070428b9be142cc4ee5cedebac.\n\nAs commit 46bbe5c671e0 (\"tracing: fix double free\") said, the\n\"double free\" problem reported by clang static analyzer is:\n > In parse_var_defs() if there is a problem allocating\n > var_defs.expr, the earlier var_defs.name is freed.\n > This free is duplicated by free_var_defs() which frees\n > the rest of the list.\n\nHowever, if there is a problem allocating N-th var_defs.expr:\n + in parse_var_defs(), the freed 'earlier var_defs.name' is\n actually the N-th var_defs.name;\n + then in free_var_defs(), the names from 0th to (N-1)-th are freed;\n\n IF ALLOCATING PROBLEM HAPPENED HERE!!! -+\n \\\n |\n 0th 1th (N-1)-th N-th V\n +-------------+-------------+-----+-------------+-----------\nvar_defs: | name | expr | name | expr | ... | name | expr | name | ///\n +-------------+-------------+-----+-------------+-----------\n\nThese two frees don't act on same name, so there was no \"double free\"\nproblem before. Conversely, after that commit, we get a \"memory leak\"\nproblem because the above \"N-th var_defs.name\" is not freed.\n\nIf enable CONFIG_DEBUG_KMEMLEAK and inject a fault at where the N-th\nvar_defs.expr allocated, then execute on shell like:\n $ echo 'hist:key=call_site:val=$v1,$v2:v1=bytes_req,v2=bytes_alloc' > \\\n/sys/kernel/debug/tracing/events/kmem/kmalloc/trigger\n\nThen kmemleak reports:\n unreferenced object 0xffff8fb100ef3518 (size 8):\n comm \"bash\", pid 196, jiffies 4295681690 (age 28.538s)\n hex dump (first 8 bytes):\n 76 31 00 00 b1 8f ff ff v1......\n backtrace:\n [<0000000038fe4895>] kstrdup+0x2d/0x60\n [<00000000c99c049a>] event_hist_trigger_parse+0x206f/0x20e0\n [<00000000ae70d2cc>] trigger_process_regex+0xc0/0x110\n [<0000000066737a4c>] event_trigger_write+0x75/0xd0\n [<000000007341e40c>] vfs_write+0xbb/0x2a0\n [<0000000087fde4c2>] ksys_write+0x59/0xd0\n [<00000000581e9cdf>] do_syscall_64+0x3a/0x80\n [<00000000cf3b065c>] entry_SYSCALL_64_after_hwframe+0x46/0xb0"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/22eeff55679d9e7c0f768c79bfbd83e2f8142d89",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4d453eb5e1eec89971aa5b3262857ee26cfdffd3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/78a1400c42ee11197eb1f0f85ba51df9a4fdfff0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7edc3945bdce9c39198a10d6129377a5c53559c2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eb622d5580b9e2ff694f62da6410618bd73853cb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ecc6dec12c33aa92c086cd702af9f544ddaf3c75",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49649.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49649.json
new file mode 100644
index 00000000000..2f81652874f
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49649.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49649",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:40.050",
+ "lastModified": "2025-02-26T07:01:40.050",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue\n\nxenvif_rx_next_skb() is expecting the rx queue not being empty, but\nin case the loop in xenvif_rx_action() is doing multiple iterations,\nthe availability of another skb in the rx queue is not being checked.\n\nThis can lead to crashes:\n\n[40072.537261] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080\n[40072.537407] IP: xenvif_rx_skb+0x23/0x590 [xen_netback]\n[40072.537534] PGD 0 P4D 0\n[40072.537644] Oops: 0000 [#1] SMP NOPTI\n[40072.537749] CPU: 0 PID: 12505 Comm: v1-c40247-q2-gu Not tainted 4.12.14-122.121-default #1 SLE12-SP5\n[40072.537867] Hardware name: HP ProLiant DL580 Gen9/ProLiant DL580 Gen9, BIOS U17 11/23/2021\n[40072.537999] task: ffff880433b38100 task.stack: ffffc90043d40000\n[40072.538112] RIP: e030:xenvif_rx_skb+0x23/0x590 [xen_netback]\n[40072.538217] RSP: e02b:ffffc90043d43de0 EFLAGS: 00010246\n[40072.538319] RAX: 0000000000000000 RBX: ffffc90043cd7cd0 RCX: 00000000000000f7\n[40072.538430] RDX: 0000000000000000 RSI: 0000000000000006 RDI: ffffc90043d43df8\n[40072.538531] RBP: 000000000000003f R08: 000077ff80000000 R09: 0000000000000008\n[40072.538644] R10: 0000000000007ff0 R11: 00000000000008f6 R12: ffffc90043ce2708\n[40072.538745] R13: 0000000000000000 R14: ffffc90043d43ed0 R15: ffff88043ea748c0\n[40072.538861] FS: 0000000000000000(0000) GS:ffff880484600000(0000) knlGS:0000000000000000\n[40072.538988] CS: e033 DS: 0000 ES: 0000 CR0: 0000000080050033\n[40072.539088] CR2: 0000000000000080 CR3: 0000000407ac8000 CR4: 0000000000040660\n[40072.539211] Call Trace:\n[40072.539319] xenvif_rx_action+0x71/0x90 [xen_netback]\n[40072.539429] xenvif_kthread_guest_rx+0x14a/0x29c [xen_netback]\n\nFix that by stopping the loop in case the rx queue becomes empty."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5a071aefd6414af5a20321ab58a0557b81993687",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7425479d20f9e96f7c3ec8e8a93fe0d7478724cb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/94e8100678889ab428e68acadf042de723f094b9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b99174ac57fe5d8867448c03b23828e63f24cb1c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b9c32a6886af79d6e0ad87a7b01800ed079cdd02",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c0fcceb5f3f1ec197c014fe218c2f28108cacd27",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5320c6a27aa975aff740f9cb481dcbde48f4348",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f0b5c819b062df8bf5f2acf4697e3871cb3722da",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49650.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49650.json
new file mode 100644
index 00000000000..1bfbfa7c533
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49650.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49650",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:40.150",
+ "lastModified": "2025-02-26T07:01:40.150",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: qcom: bam_dma: fix runtime PM underflow\n\nCommit dbad41e7bb5f (\"dmaengine: qcom: bam_dma: check if the runtime pm enabled\")\ncaused unbalanced pm_runtime_get/put() calls when the bam is\ncontrolled remotely. This commit reverts it and just enables pm_runtime\nin all cases, the clk_* functions already just nop when the clock is NULL.\n\nAlso clean up a bit by removing unnecessary bamclk null checks."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0ac9c3dd0d6fe293cd5044cfad10bec27d171e4e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2f6ded79068cac8cff41d5d5632564165d98ee12",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b702a1077b51fcb39507cc3bd39206f539319a96",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49651.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49651.json
new file mode 100644
index 00000000000..3552ce33d31
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49651.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49651",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:40.237",
+ "lastModified": "2025-02-26T07:01:40.237",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsrcu: Tighten cleanup_srcu_struct() GP checks\n\nCurrently, cleanup_srcu_struct() checks for a grace period in progress,\nbut it does not check for a grace period that has not yet started but\nwhich might start at any time. Such a situation could result in a\nuse-after-free bug, so this commit adds a check for a grace period that\nis needed but not yet started to cleanup_srcu_struct()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/8ed00760203d8018bee042fbfe8e076579be2c2b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e997dda6502eefbc1032d6b0da7b353c53344b07",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49652.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49652.json
new file mode 100644
index 00000000000..76b3d06bbd3
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49652.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49652",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:40.323",
+ "lastModified": "2025-02-26T07:01:40.323",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate\n\nof_parse_phandle() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not needed anymore.\n\nAdd missing of_node_put() in to fix this."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/37147e22cd8dfc0412495cb361708836157a4486",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3bd66010398871807c1cebacee07d60ded1b1402",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/452b9dfd7aca96befce22634fadb111737f22bbe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/61b4ef19c346dc21ab1d4f39f5c412e3037b2bdc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b31ab132561c7f1b6459039152b8d09e44eb3565",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b5a817f8d62e9e13280928f3756e54854ae4962e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c132fe78ad7b4ce8b5d49a501a15c29d08eeb23a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cb9813d7eae917acd34436160a278b8b5d48ca53",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49653.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49653.json
new file mode 100644
index 00000000000..a7b17a086b9
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49653.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49653",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:40.420",
+ "lastModified": "2025-02-26T07:01:40.420",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: piix4: Fix a memory leak in the EFCH MMIO support\n\nThe recently added support for EFCH MMIO regions introduced a memory\nleak in that code path. The leak is caused by the fact that\nrelease_resource() merely removes the resource from the tree but does\nnot free its memory. We need to call release_mem_region() instead,\nwhich does free the memory. As a nice side effect, this brings back\nsome symmetry between the legacy and MMIO paths."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/8ad59b397f86a4d8014966fdc0552095a0c4fb2b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a3263e4cf8265f0c9eb0ed8a9b50f132c7a42e19",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d2bf1a6480e8d44658a8ac3bdcec081238873212",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49654.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49654.json
new file mode 100644
index 00000000000..d374cf378c3
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49654.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49654",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:40.510",
+ "lastModified": "2025-02-26T07:01:40.510",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: qca8k: reset cpu port on MTU change\n\nIt was discovered that the Documentation lacks of a fundamental detail\non how to correctly change the MAX_FRAME_SIZE of the switch.\n\nIn fact if the MAX_FRAME_SIZE is changed while the cpu port is on, the\nswitch panics and cease to send any packet. This cause the mgmt ethernet\nsystem to not receive any packet (the slow fallback still works) and\nmakes the device not reachable. To recover from this a switch reset is\nrequired.\n\nTo correctly handle this, turn off the cpu ports before changing the\nMAX_FRAME_SIZE and turn on again after the value is applied."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/188c798f3c2554fa0d7147e9b97baf144b817019",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1993f5a06736ada59dd54b50dc96755a38796ee5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/386228c694bf1e7a7688e44412cb33500b0ac585",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49655.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49655.json
new file mode 100644
index 00000000000..505b1f8ec4c
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49655.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49655",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:40.600",
+ "lastModified": "2025-02-26T07:01:40.600",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfscache: Fix invalidation/lookup race\n\nIf an NFS file is opened for writing and closed, fscache_invalidate() will\nbe asked to invalidate the file - however, if the cookie is in the\nLOOKING_UP state (or the CREATING state), then request to invalidate\ndoesn't get recorded for fscache_cookie_state_machine() to do something\nwith.\n\nFix this by making __fscache_invalidate() set a flag if it sees the cookie\nis in the LOOKING_UP state to indicate that we need to go to invalidation.\nNote that this requires a count on the n_accesses counter for the state\nmachine, which that will release when it's done.\n\nfscache_cookie_state_machine() then shifts to the INVALIDATING state if it\nsees the flag.\n\nWithout this, an nfs file can get corrupted if it gets modified locally and\nthen read locally as the cache contents may not get updated."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/85e4ea1049c70fb99de5c6057e835d151fb647da",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b1ae9f617f8a5c848d9205b8e228c6f0d1af754b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49656.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49656.json
new file mode 100644
index 00000000000..d271fea6ef3
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49656.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49656",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:40.683",
+ "lastModified": "2025-02-26T07:01:40.683",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nARM: meson: Fix refcount leak in meson_smp_prepare_cpus\n\nof_find_compatible_node() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2e1bcd33478ef44e63a45457055060b5fe4118ad",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/34d2cd3fccced12b958b8848e3eff0ee4296764c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3cf8ece9113242c10f83c7675ea4f4f67959ee43",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3d90607e7e6afa89768b0aaa915b58bd2b849276",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7208101ded1e9dcc52c8f0f8b16474211c871c1a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c5fbf4f74c94fd60d5e9bf9f7f8268c3601562ca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49657.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49657.json
new file mode 100644
index 00000000000..da8719430c7
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49657.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49657",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:40.777",
+ "lastModified": "2025-02-26T07:01:40.777",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusbnet: fix memory leak in error case\n\nusbnet_write_cmd_async() mixed up which buffers\nneed to be freed in which error case.\n\nv2: add Fixes tag\nv3: fix uninitialized buf pointer"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0085da9df3dced730027923a6b48f58e9016af91",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/04894ab34faf40ab72a8a5ab5b404bb0606bbbff",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3eed421ca5c809da93456f69203d164d5220be3d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5269209f54dd8dfd15f9383f3a3a1fe8370764f8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b55a21b764c1e182014630fa5486d717484ac58f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5165e657987ff4ba0ace896d4376a3718a9fbc3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/db89582ff330556188da856e01382ccbf3a5e706",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e7b4f69946a38209b4a4f660bf0e4cbed94f9b4b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49658.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49658.json
new file mode 100644
index 00000000000..385e4848409
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49658.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49658",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:40.867",
+ "lastModified": "2025-02-26T07:01:40.867",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals\n\nKuee reported a corner case where the tnum becomes constant after the call\nto __reg_bound_offset(), but the register's bounds are not, that is, its\nmin bounds are still not equal to the register's max bounds.\n\nThis in turn allows to leak pointers through turning a pointer register as\nis into an unknown scalar via adjust_ptr_min_max_vals().\n\nBefore:\n\n func#0 @0\n 0: R1=ctx(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) R10=fp(off=0,imm=0,umax=0,var_off=(0x0; 0x0))\n 0: (b7) r0 = 1 ; R0_w=scalar(imm=1,umin=1,umax=1,var_off=(0x1; 0x0))\n 1: (b7) r3 = 0 ; R3_w=scalar(imm=0,umax=0,var_off=(0x0; 0x0))\n 2: (87) r3 = -r3 ; R3_w=scalar()\n 3: (87) r3 = -r3 ; R3_w=scalar()\n 4: (47) r3 |= 32767 ; R3_w=scalar(smin=-9223372036854743041,umin=32767,var_off=(0x7fff; 0xffffffffffff8000),s32_min=-2147450881)\n 5: (75) if r3 s>= 0x0 goto pc+1 ; R3_w=scalar(umin=9223372036854808575,var_off=(0x8000000000007fff; 0x7fffffffffff8000),s32_min=-2147450881,u32_min=32767)\n 6: (95) exit\n\n from 5 to 7: R0=scalar(imm=1,umin=1,umax=1,var_off=(0x1; 0x0)) R1=ctx(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) R3=scalar(umin=32767,umax=9223372036854775807,var_off=(0x7fff; 0x7fffffffffff8000),s32_min=-2147450881) R10=fp(off=0,imm=0,umax=0,var_off=(0x0; 0x0))\n 7: (d5) if r3 s<= 0x8000 goto pc+1 ; R3=scalar(umin=32769,umax=9223372036854775807,var_off=(0x7fff; 0x7fffffffffff8000),s32_min=-2147450881,u32_min=32767)\n 8: (95) exit\n\n from 7 to 9: R0=scalar(imm=1,umin=1,umax=1,var_off=(0x1; 0x0)) R1=ctx(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) R3=scalar(umin=32767,umax=32768,var_off=(0x7fff; 0x8000)) R10=fp(off=0,imm=0,umax=0,var_off=(0x0; 0x0))\n 9: (07) r3 += -32767 ; R3_w=scalar(imm=0,umax=1,var_off=(0x0; 0x0)) <--- [*]\n 10: (95) exit\n\nWhat can be seen here is that R3=scalar(umin=32767,umax=32768,var_off=(0x7fff;\n0x8000)) after the operation R3 += -32767 results in a 'malformed' constant, that\nis, R3_w=scalar(imm=0,umax=1,var_off=(0x0; 0x0)). Intersecting with var_off has\nnot been done at that point via __update_reg_bounds(), which would have improved\nthe umax to be equal to umin.\n\nRefactor the tnum <> min/max bounds information flow into a reg_bounds_sync()\nhelper and use it consistently everywhere. After the fix, bounds have been\ncorrected to R3_w=scalar(imm=0,umax=0,var_off=(0x0; 0x0)) and thus the register\nis regarded as a 'proper' constant scalar of 0.\n\nAfter:\n\n func#0 @0\n 0: R1=ctx(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) R10=fp(off=0,imm=0,umax=0,var_off=(0x0; 0x0))\n 0: (b7) r0 = 1 ; R0_w=scalar(imm=1,umin=1,umax=1,var_off=(0x1; 0x0))\n 1: (b7) r3 = 0 ; R3_w=scalar(imm=0,umax=0,var_off=(0x0; 0x0))\n 2: (87) r3 = -r3 ; R3_w=scalar()\n 3: (87) r3 = -r3 ; R3_w=scalar()\n 4: (47) r3 |= 32767 ; R3_w=scalar(smin=-9223372036854743041,umin=32767,var_off=(0x7fff; 0xffffffffffff8000),s32_min=-2147450881)\n 5: (75) if r3 s>= 0x0 goto pc+1 ; R3_w=scalar(umin=9223372036854808575,var_off=(0x8000000000007fff; 0x7fffffffffff8000),s32_min=-2147450881,u32_min=32767)\n 6: (95) exit\n\n from 5 to 7: R0=scalar(imm=1,umin=1,umax=1,var_off=(0x1; 0x0)) R1=ctx(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) R3=scalar(umin=32767,umax=9223372036854775807,var_off=(0x7fff; 0x7fffffffffff8000),s32_min=-2147450881) R10=fp(off=0,imm=0,umax=0,var_off=(0x0; 0x0))\n 7: (d5) if r3 s<= 0x8000 goto pc+1 ; R3=scalar(umin=32769,umax=9223372036854775807,var_off=(0x7fff; 0x7fffffffffff8000),s32_min=-2147450881,u32_min=32767)\n 8: (95) exit\n\n from 7 to 9: R0=scalar(imm=1,umin=1,umax=1,var_off=(0x1; 0x0)) R1=ctx(off=0,imm=0,umax=0,var_off=(0x0; 0x0)) R3=scalar(umin=32767,umax=32768,var_off=(0x7fff; 0x8000)) R10=fp(off=0\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3844d153a41adea718202c10ae91dc96b37453b5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a7de8d436db92bab8b1f44624297c2554a6ac36b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b2a28bb36664c94375926cbbb91976242847699d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e917be1f83ea14a68b3cf64d3da9968eaf991dae",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49659.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49659.json
new file mode 100644
index 00000000000..b9e0f0fe784
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49659.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49659",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:40.957",
+ "lastModified": "2025-02-26T07:01:40.957",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits\n\nIn commit 1be37d3b0414 (\"can: m_can: fix periph RX path: use\nrx-offload to ensure skbs are sent from softirq context\") the RX path\nfor peripheral devices was switched to RX-offload.\n\nReceived CAN frames are pushed to RX-offload together with a\ntimestamp. RX-offload is designed to handle overflows of the timestamp\ncorrectly, if 32 bit timestamps are provided.\n\nThe timestamps of m_can core are only 16 bits wide. So this patch\nshifts them to full 32 bit before passing them to RX-offload."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2a2914a5bd7f38efe55a8372178146de82e0bce9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4c3333693f07313f5f0145a922f14a7d3c0f4f21",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c7333f79888497bfd75dcd02a94eaf836dd1042c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49660.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49660.json
new file mode 100644
index 00000000000..ff013b45299
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49660.json
@@ -0,0 +1,16 @@
+{
+ "id": "CVE-2022-49660",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:41.043",
+ "lastModified": "2025-02-26T13:15:34.227",
+ "vulnStatus": "Rejected",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
+ }
+ ],
+ "metrics": {},
+ "references": []
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49661.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49661.json
new file mode 100644
index 00000000000..c739350eaef
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49661.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49661",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:41.137",
+ "lastModified": "2025-02-26T07:01:41.137",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: gs_usb: gs_usb_open/close(): fix memory leak\n\nThe gs_usb driver appears to suffer from a malady common to many USB\nCAN adapter drivers in that it performs usb_alloc_coherent() to\nallocate a number of USB request blocks (URBs) for RX, and then later\nrelies on usb_kill_anchored_urbs() to free them, but this doesn't\nactually free them. As a result, this may be leaking DMA memory that's\nbeen used by the driver.\n\nThis commit is an adaptation of the techniques found in the esd_usb2\ndriver where a similar design pattern led to a memory leak. It\nexplicitly frees the RX URBs and their DMA memory via a call to\nusb_free_coherent(). Since the RX URBs were allocated in the\ngs_can_open(), we remove them in gs_can_close() rather than in the\ndisconnect function as was done in esd_usb2.\n\nFor more information, see the 928150fad41b (\"can: esd_usb2: fix memory\nleak\")."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0e60230bc64355c80abe993d1719fdb318094e20",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2bda24ef95c0311ab93bda00db40486acf30bd0a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/339fa9f80d3b94177a7a459c6d115d3b56007d5a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6f655b5e13fa4b27e915b6c209ac0da74fd75963",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c1d806bc29ff7ffe0e2a023583c8720ed96cb0b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d0b8e223998866b3e7b2895927d4e9689b0a80d8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d91492638b054f4a359621ef216242be5973ed6b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ffb6cc6601ec7c8fa963dcf76025df4a02f2cf5c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49662.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49662.json
new file mode 100644
index 00000000000..da5952e48bd
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49662.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49662",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:41.230",
+ "lastModified": "2025-02-26T07:01:41.230",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix lockdep splat in in6_dump_addrs()\n\nAs reported by syzbot, we should not use rcu_dereference()\nwhen rcu_read_lock() is not held.\n\nWARNING: suspicious RCU usage\n5.19.0-rc2-syzkaller #0 Not tainted\n\nnet/ipv6/addrconf.c:5175 suspicious rcu_dereference_check() usage!\n\nother info that might help us debug this:\n\nrcu_scheduler_active = 2, debug_locks = 1\n1 lock held by syz-executor326/3617:\n #0: ffffffff8d5848e8 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0xae/0xc20 net/netlink/af_netlink.c:2223\n\nstack backtrace:\nCPU: 0 PID: 3617 Comm: syz-executor326 Not tainted 5.19.0-rc2-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nCall Trace:\n \n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106\n in6_dump_addrs+0x12d1/0x1790 net/ipv6/addrconf.c:5175\n inet6_dump_addr+0x9c1/0xb50 net/ipv6/addrconf.c:5300\n netlink_dump+0x541/0xc20 net/netlink/af_netlink.c:2275\n __netlink_dump_start+0x647/0x900 net/netlink/af_netlink.c:2380\n netlink_dump_start include/linux/netlink.h:245 [inline]\n rtnetlink_rcv_msg+0x73e/0xc90 net/core/rtnetlink.c:6046\n netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2501\n netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]\n netlink_unicast+0x543/0x7f0 net/netlink/af_netlink.c:1345\n netlink_sendmsg+0x917/0xe10 net/netlink/af_netlink.c:1921\n sock_sendmsg_nosec net/socket.c:714 [inline]\n sock_sendmsg+0xcf/0x120 net/socket.c:734\n ____sys_sendmsg+0x6eb/0x810 net/socket.c:2492\n ___sys_sendmsg+0xf3/0x170 net/socket.c:2546\n __sys_sendmsg net/socket.c:2575 [inline]\n __do_sys_sendmsg net/socket.c:2584 [inline]\n __se_sys_sendmsg net/socket.c:2582 [inline]\n __x64_sys_sendmsg+0x132/0x220 net/socket.c:2582\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x46/0xb0"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2930ee1a166df0e12fe9fec4b79cc3dc9634ae45",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4e43e64d0f1332fcc503babad4dc31aead7131ca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b39fda51c32dd879451e0119881f31493bf83283",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49663.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49663.json
new file mode 100644
index 00000000000..394a5b4f2fe
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49663.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49663",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:41.323",
+ "lastModified": "2025-02-26T07:01:41.323",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntunnels: do not assume mac header is set in skb_tunnel_check_pmtu()\n\nRecently added debug in commit f9aefd6b2aa3 (\"net: warn if mac header\nwas not set\") caught a bug in skb_tunnel_check_pmtu(), as shown\nin this syzbot report [1].\n\nIn ndo_start_xmit() paths, there is really no need to use skb->mac_header,\nbecause skb->data is supposed to point at it.\n\n[1] WARNING: CPU: 1 PID: 8604 at include/linux/skbuff.h:2784 skb_mac_header_len include/linux/skbuff.h:2784 [inline]\nWARNING: CPU: 1 PID: 8604 at include/linux/skbuff.h:2784 skb_tunnel_check_pmtu+0x5de/0x2f90 net/ipv4/ip_tunnel_core.c:413\nModules linked in:\nCPU: 1 PID: 8604 Comm: syz-executor.3 Not tainted 5.19.0-rc2-syzkaller-00443-g8720bd951b8e #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nRIP: 0010:skb_mac_header_len include/linux/skbuff.h:2784 [inline]\nRIP: 0010:skb_tunnel_check_pmtu+0x5de/0x2f90 net/ipv4/ip_tunnel_core.c:413\nCode: 00 00 00 00 fc ff df 4c 89 fa 48 c1 ea 03 80 3c 02 00 0f 84 b9 fe ff ff 4c 89 ff e8 7c 0f d7 f9 e9 ac fe ff ff e8 c2 13 8a f9 <0f> 0b e9 28 fc ff ff e8 b6 13 8a f9 48 8b 54 24 70 48 b8 00 00 00\nRSP: 0018:ffffc90002e4f520 EFLAGS: 00010212\nRAX: 0000000000000324 RBX: ffff88804d5fd500 RCX: ffffc90005b52000\nRDX: 0000000000040000 RSI: ffffffff87f05e3e RDI: 0000000000000003\nRBP: ffffc90002e4f650 R08: 0000000000000003 R09: 000000000000ffff\nR10: 000000000000ffff R11: 0000000000000000 R12: 000000000000ffff\nR13: 0000000000000000 R14: 000000000000ffcd R15: 000000000000001f\nFS: 00007f3babba9700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000020000080 CR3: 0000000075319000 CR4: 00000000003506e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n\ngeneve_xmit_skb drivers/net/geneve.c:927 [inline]\ngeneve_xmit+0xcf8/0x35d0 drivers/net/geneve.c:1107\n__netdev_start_xmit include/linux/netdevice.h:4805 [inline]\nnetdev_start_xmit include/linux/netdevice.h:4819 [inline]\n__dev_direct_xmit+0x500/0x730 net/core/dev.c:4309\ndev_direct_xmit include/linux/netdevice.h:3007 [inline]\npacket_direct_xmit+0x1b8/0x2c0 net/packet/af_packet.c:282\npacket_snd net/packet/af_packet.c:3073 [inline]\npacket_sendmsg+0x21f4/0x55d0 net/packet/af_packet.c:3104\nsock_sendmsg_nosec net/socket.c:714 [inline]\nsock_sendmsg+0xcf/0x120 net/socket.c:734\n____sys_sendmsg+0x6eb/0x810 net/socket.c:2489\n___sys_sendmsg+0xf3/0x170 net/socket.c:2543\n__sys_sendmsg net/socket.c:2572 [inline]\n__do_sys_sendmsg net/socket.c:2581 [inline]\n__se_sys_sendmsg net/socket.c:2579 [inline]\n__x64_sys_sendmsg+0x132/0x220 net/socket.c:2579\ndo_syscall_x64 arch/x86/entry/common.c:50 [inline]\ndo_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\nentry_SYSCALL_64_after_hwframe+0x46/0xb0\nRIP: 0033:0x7f3baaa89109\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f3babba9168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\nRAX: ffffffffffffffda RBX: 00007f3baab9bf60 RCX: 00007f3baaa89109\nRDX: 0000000000000000 RSI: 0000000020000a00 RDI: 0000000000000003\nRBP: 00007f3baaae305d R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007ffe74f2543f R14: 00007f3babba9300 R15: 0000000000022000\n"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/32dcf62efa0003f92a976aea0c57f118e689de8b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/59c51c3b545128a92ebfb6dbae990d3abee110e7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/674a641e5b67e16ba3112eacd680ff87b38539de",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/853a7614880231747040cada91d2b8d2e995c51a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49664.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49664.json
new file mode 100644
index 00000000000..71f525ccac7
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49664.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49664",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:41.420",
+ "lastModified": "2025-02-26T07:01:41.420",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: move bc link creation back to tipc_node_create\n\nShuang Li reported a NULL pointer dereference crash:\n\n [] BUG: kernel NULL pointer dereference, address: 0000000000000068\n [] RIP: 0010:tipc_link_is_up+0x5/0x10 [tipc]\n [] Call Trace:\n [] \n [] tipc_bcast_rcv+0xa2/0x190 [tipc]\n [] tipc_node_bc_rcv+0x8b/0x200 [tipc]\n [] tipc_rcv+0x3af/0x5b0 [tipc]\n [] tipc_udp_recv+0xc7/0x1e0 [tipc]\n\nIt was caused by the 'l' passed into tipc_bcast_rcv() is NULL. When it\ncreates a node in tipc_node_check_dest(), after inserting the new node\ninto hashtable in tipc_node_create(), it creates the bc link. However,\nthere is a gap between this insert and bc link creation, a bc packet\nmay come in and get the node from the hashtable then try to dereference\nits bc link, which is NULL.\n\nThis patch is to fix it by moving the bc link creation before inserting\ninto the hashtable.\n\nNote that for a preliminary node becoming \"real\", the bc link creation\nshould also be called before it's rehashed, as we don't create it for\npreliminary nodes."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/35fcb2ba35b4d9b592b558c3bcc6e0d90e213588",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/456bc338871c4a52117dd5ef29cce3745456d248",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cb8092d70a6f5f01ec1490fce4d35efed3ed996c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e52910e671f58c619e33dac476b11b35e2d3ab6f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49665.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49665.json
new file mode 100644
index 00000000000..90db387d1c9
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49665.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49665",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:41.513",
+ "lastModified": "2025-02-26T07:01:41.513",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource\n\nUnlike release_mem_region(), a call to release_resource() does not\nfree the resource, so it has to be freed explicitly to avoid a memory\nleak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3884bf75fa044c73e843d95dd71a424e80ebb095",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d2f33f0c3ad7b0d5262d9b986f1353265fad7a08",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49666.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49666.json
new file mode 100644
index 00000000000..d6f98ca0d5d
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49666.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49666",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:41.600",
+ "lastModified": "2025-02-26T07:01:41.600",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/memhotplug: Add add_pages override for PPC\n\nWith commit ffa0b64e3be5 (\"powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit\")\nthe kernel now validate the addr against high_memory value. This results\nin the below BUG_ON with dax pfns.\n\n[ 635.798741][T26531] kernel BUG at mm/page_alloc.c:5521!\n1:mon> e\ncpu 0x1: Vector: 700 (Program Check) at [c000000007287630]\n pc: c00000000055ed48: free_pages.part.0+0x48/0x110\n lr: c00000000053ca70: tlb_finish_mmu+0x80/0xd0\n sp: c0000000072878d0\n msr: 800000000282b033\n current = 0xc00000000afabe00\n paca = 0xc00000037ffff300 irqmask: 0x03 irq_happened: 0x05\n pid = 26531, comm = 50-landscape-sy\nkernel BUG at :5521!\nLinux version 5.19.0-rc3-14659-g4ec05be7c2e1 (kvaneesh@ltc-boston8) (gcc (Ubuntu 9.4.0-1ubuntu1~20.04.1) 9.4.0, GNU ld (GNU Binutils for Ubuntu) 2.34) #625 SMP Thu Jun 23 00:35:43 CDT 2022\n1:mon> t\n[link register ] c00000000053ca70 tlb_finish_mmu+0x80/0xd0\n[c0000000072878d0] c00000000053ca54 tlb_finish_mmu+0x64/0xd0 (unreliable)\n[c000000007287900] c000000000539424 exit_mmap+0xe4/0x2a0\n[c0000000072879e0] c00000000019fc1c mmput+0xcc/0x210\n[c000000007287a20] c000000000629230 begin_new_exec+0x5e0/0xf40\n[c000000007287ae0] c00000000070b3cc load_elf_binary+0x3ac/0x1e00\n[c000000007287c10] c000000000627af0 bprm_execve+0x3b0/0xaf0\n[c000000007287cd0] c000000000628414 do_execveat_common.isra.0+0x1e4/0x310\n[c000000007287d80] c00000000062858c sys_execve+0x4c/0x60\n[c000000007287db0] c00000000002c1b0 system_call_exception+0x160/0x2c0\n[c000000007287e10] c00000000000c53c system_call_common+0xec/0x250\n\nThe fix is to make sure we update high_memory on memory hotplug.\nThis is similar to what x86 does in commit 3072e413e305 (\"mm/memory_hotplug: introduce add_pages\")"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/84d146fd35a01b08e9515041de60f0f915a417d5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/89296ac435e2cf8a5101f7fab8f0c7b754b92052",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ac790d09885d36143076e7e02825c541e8eee899",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49667.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49667.json
new file mode 100644
index 00000000000..b0a5ec236e4
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49667.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49667",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:41.687",
+ "lastModified": "2025-02-26T07:01:41.687",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bonding: fix use-after-free after 802.3ad slave unbind\n\ncommit 0622cab0341c (\"bonding: fix 802.3ad aggregator reselection\"),\nresolve case, when there is several aggregation groups in the same bond.\nbond_3ad_unbind_slave will invalidate (clear) aggregator when\n__agg_active_ports return zero. So, ad_clear_agg can be executed even, when\nnum_of_ports!=0. Than bond_3ad_unbind_slave can be executed again for,\npreviously cleared aggregator. NOTE: at this time bond_3ad_unbind_slave\nwill not update slave ports list, because lag_ports==NULL. So, here we\ngot slave ports, pointing to freed aggregator memory.\n\nFix with checking actual number of ports in group (as was before\ncommit 0622cab0341c (\"bonding: fix 802.3ad aggregator reselection\") ),\nbefore ad_clear_agg().\n\nThe KASAN logs are as follows:\n\n[ 767.617392] ==================================================================\n[ 767.630776] BUG: KASAN: use-after-free in bond_3ad_state_machine_handler+0x13dc/0x1470\n[ 767.638764] Read of size 2 at addr ffff00011ba9d430 by task kworker/u8:7/767\n[ 767.647361] CPU: 3 PID: 767 Comm: kworker/u8:7 Tainted: G O 5.15.11 #15\n[ 767.655329] Hardware name: DNI AmazonGo1 A7040 board (DT)\n[ 767.660760] Workqueue: lacp_1 bond_3ad_state_machine_handler\n[ 767.666468] Call trace:\n[ 767.668930] dump_backtrace+0x0/0x2d0\n[ 767.672625] show_stack+0x24/0x30\n[ 767.675965] dump_stack_lvl+0x68/0x84\n[ 767.679659] print_address_description.constprop.0+0x74/0x2b8\n[ 767.685451] kasan_report+0x1f0/0x260\n[ 767.689148] __asan_load2+0x94/0xd0\n[ 767.692667] bond_3ad_state_machine_handler+0x13dc/0x1470"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/050133e1aa2cb49bb17be847d48a4431598ef562",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2765749def4765c5052a4c66445cf4c96fcccdbc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/63b2fe509f69b90168a75e04e14573dccf7984e6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/893825289ba840afd86bfffcb6f7f363c73efff8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a853b7a3a9fd1d74a4ccdd9cd73512b7dace2f1e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b90ac60303063a43e17dd4aec159067599d255e6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ef0af7d08d26c5333ff4944a559279464edf6f15",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f162f7c348fa2a5555bafdb5cc890b89b221e69c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49668.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49668.json
new file mode 100644
index 00000000000..5cd4c71d282
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49668.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49668",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:41.780",
+ "lastModified": "2025-02-26T07:01:41.780",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events\n\nof_get_child_by_name() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\nThis function only calls of_node_put() in normal path,\nmissing it in error paths.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/01121e39ef537289926ae6f5374dce92c796d863",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/194781229d4cbc804b8ded13156eb8addce87d6c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bdecd912e99acfd61507f1720d3f4eed1b3418d8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e65027fdebbacd40595e96ef7b5d2418f71bddf2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f44b799603a9b5d2e375b0b2d54dd0b791eddfc2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49669.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49669.json
new file mode 100644
index 00000000000..ddfebbbe22f
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49669.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49669",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:41.870",
+ "lastModified": "2025-02-26T07:01:41.870",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: fix race on unaccepted mptcp sockets\n\nWhen the listener socket owning the relevant request is closed,\nit frees the unaccepted subflows and that causes later deletion\nof the paired MPTCP sockets.\n\nThe mptcp socket's worker can run in the time interval between such delete\noperations. When that happens, any access to msk->first will cause an UaF\naccess, as the subflow cleanup did not cleared such field in the mptcp\nsocket.\n\nAddress the issue explicitly traversing the listener socket accept\nqueue at close time and performing the needed cleanup on the pending\nmsk.\n\nNote that the locking is a bit tricky, as we need to acquire the msk\nsocket lock, while still owning the subflow socket one."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/6aeed9045071f2252ff4e98fc13d1e304f33e5b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a8a3e95c74e48c2c9b07b81fafda9122993f2e12",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49670.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49670.json
new file mode 100644
index 00000000000..17ffba02d89
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49670.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49670",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:41.953",
+ "lastModified": "2025-02-26T07:01:41.953",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlinux/dim: Fix divide by 0 in RDMA DIM\n\nFix a divide 0 error in rdma_dim_stats_compare() when prev->cpe_ratio ==\n0.\n\nCallTrace:\n Hardware name: H3C R4900 G3/RS33M2C9S, BIOS 2.00.37P21 03/12/2020\n task: ffff880194b78000 task.stack: ffffc90006714000\n RIP: 0010:backport_rdma_dim+0x10e/0x240 [mlx_compat]\n RSP: 0018:ffff880c10e83ec0 EFLAGS: 00010202\n RAX: 0000000000002710 RBX: ffff88096cd7f780 RCX: 0000000000000064\n RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001\n RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000\n R10: 0000000000000000 R11: 0000000000000000 R12: 000000001d7c6c09\n R13: ffff88096cd7f780 R14: ffff880b174fe800 R15: 0000000000000000\n FS: 0000000000000000(0000) GS:ffff880c10e80000(0000)\n knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00000000a0965b00 CR3: 000000000200a003 CR4: 00000000007606e0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n PKRU: 55555554\n Call Trace:\n \n ib_poll_handler+0x43/0x80 [ib_core]\n irq_poll_softirq+0xae/0x110\n __do_softirq+0xd1/0x28c\n irq_exit+0xde/0xf0\n do_IRQ+0x54/0xe0\n common_interrupt+0x8f/0x8f\n \n ? cpuidle_enter_state+0xd9/0x2a0\n ? cpuidle_enter_state+0xc7/0x2a0\n ? do_idle+0x170/0x1d0\n ? cpu_startup_entry+0x6f/0x80\n ? start_secondary+0x1b9/0x210\n ? secondary_startup_64+0xa5/0xb0\n Code: 0f 87 e1 00 00 00 8b 4c 24 14 44 8b 43 14 89 c8 4d 63 c8 44 29 c0 99 31 d0 29 d0 31 d2 48 98 48 8d 04 80 48 8d 04 80 48 c1 e0 02 <49> f7 f1 48 83 f8 0a 0f 86 c1 00 00 00 44 39 c1 7f 10 48 89 df\n RIP: backport_rdma_dim+0x10e/0x240 [mlx_compat] RSP: ffff880c10e83ec0"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0b6e0eb5c45e79e9095de2498cc0ca5ec563fc5e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0fe3dbbefb74a8575f61d7801b08dbc50523d60d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5af106f8e072aebd88b95e164a08fa320651a99a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7c1963391af51ee322378d1b2849c60e9037f069",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fae2a9fb1eaf348ad8732f90d42ebbb971bd7e95",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49671.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49671.json
new file mode 100644
index 00000000000..2300bd0d2b5
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49671.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49671",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:42.043",
+ "lastModified": "2025-02-26T07:01:42.043",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/cm: Fix memory leak in ib_cm_insert_listen\n\ncm_alloc_id_priv() allocates resource for the cm_id_priv. When\ncm_init_listen() fails it doesn't free it, leading to memory leak.\n\nAdd the missing error unwind."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2990f223ffa7bb25422956b9f79f9176a5b38346",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2febf09a8a8ae4accf908f043f1bab1421056568",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/889000874c1204e47c7f2a4945db262a47e7efc9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b0cab8b517aeaf2592c3479294f934209c41a26f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49672.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49672.json
new file mode 100644
index 00000000000..68d7ea667f8
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49672.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49672",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:42.130",
+ "lastModified": "2025-02-26T07:01:42.130",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tun: unlink NAPI from device on destruction\n\nSyzbot found a race between tun file and device destruction.\nNAPIs live in struct tun_file which can get destroyed before\nthe netdev so we have to del them explicitly. The current\ncode is missing deleting the NAPI if the queue was detached\nfirst."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3b9bc84d311104906d2b4995a9a02d7b7ddab2db",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8145f77d38de4f88b8a69e1463f5c09ba189d77c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/82e729aee59acefe135fceffadcbc5b86dd4f1b9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8661d4b8faa2f7ee7a559969c0a7c57f077b1728",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a8cf919022373c97a84fe596bbea544f909c485d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bec1be0a745ab420718217e3e0d9542a75108989",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49673.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49673.json
new file mode 100644
index 00000000000..8bf69ac9f4e
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49673.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49673",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:42.223",
+ "lastModified": "2025-02-26T07:01:42.223",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm raid: fix KASAN warning in raid5_add_disks\n\nThere's a KASAN warning in raid5_add_disk when running the LVM testsuite.\nThe warning happens in the test\nlvconvert-raid-reshape-linear_to_raid6-single-type.sh. We fix the warning\nby verifying that rdev->saved_raid_disk is within limits."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/02cffb1921edadd9b6e4eee7ada4a5213e8ba12e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2d4e7c9898c20fb3d3f55381cab601761aab7d64",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2fb2928728038280bd925ce2aafb4997e9d47ee9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3553a69bb52be2deba61d0ca064c41aee842bb35",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/617b365872a247480e9dcd50a32c8d1806b21861",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d5b06039b195d4b6f94f5d345b1e4ac1975a9832",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d8bca518d5272fe349e0a722fdb9e3acb661f3f0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f157bd9cf377a947fdb7035e69466b6ecdc17c17",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49674.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49674.json
new file mode 100644
index 00000000000..95e9eb0f863
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49674.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49674",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:42.320",
+ "lastModified": "2025-02-26T07:01:42.320",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm raid: fix accesses beyond end of raid member array\n\nOn dm-raid table load (using raid_ctr), dm-raid allocates an array\nrs->devs[rs->raid_disks] for the raid device members. rs->raid_disks\nis defined by the number of raid metadata and image tupples passed\ninto the target's constructor.\n\nIn the case of RAID layout changes being requested, that number can be\ndifferent from the current number of members for existing raid sets as\ndefined in their superblocks. Example RAID layout changes include:\n- raid1 legs being added/removed\n- raid4/5/6/10 number of stripes changed (stripe reshaping)\n- takeover to higher raid level (e.g. raid5 -> raid6)\n\nWhen accessing array members, rs->raid_disks must be used in control\nloops instead of the potentially larger value in rs->md.raid_disks.\nOtherwise it will cause memory access beyond the end of the rs->devs\narray.\n\nFix this by changing code that is prone to out-of-bounds access.\nAlso fix validate_raid_redundancy() to validate all devices that are\nadded. Also, use braces to help clean up raid_iterate_devices().\n\nThe out-of-bounds memory accesses was discovered using KASAN.\n\nThis commit was verified to pass all LVM2 RAID tests (with KASAN\nenabled)."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/332bd0778775d0cf105c4b9e03e460b590749916",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5e161a8826b63c0b8b43e4a7fad1f956780f42ab",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6352b2f4d8e95ec0ae576d7705435d64cfa29503",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/90de15357504c8097ab29769dc6852e16281e9e8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9bf2b0757b04c78dc5d6e3a198acca98457b32a1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bcff98500ea3b4e7615ec31d2bdd326bc1ef5134",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/df1a5ab0dd0775f2ea101c71f2addbc4c0ea0f85",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49675.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49675.json
new file mode 100644
index 00000000000..aae5919c77b
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49675.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49675",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:42.413",
+ "lastModified": "2025-02-26T07:01:42.413",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntick/nohz: unexport __init-annotated tick_nohz_full_setup()\n\nEXPORT_SYMBOL and __init is a bad combination because the .init.text\nsection is freed up after the initialization. Hence, modules cannot\nuse symbols annotated __init. The access to a freed symbol may end up\nwith kernel panic.\n\nmodpost used to detect it, but it had been broken for a decade.\n\nCommit 28438794aba4 (\"modpost: fix section mismatch check for exported\ninit/exit sections\") fixed it so modpost started to warn it again, then\nthis showed up:\n\n MODPOST vmlinux.symvers\n WARNING: modpost: vmlinux.o(___ksymtab_gpl+tick_nohz_full_setup+0x0): Section mismatch in reference from the variable __ksymtab_tick_nohz_full_setup to the function .init.text:tick_nohz_full_setup()\n The symbol tick_nohz_full_setup is exported and annotated __init\n Fix this by removing the __init annotation of tick_nohz_full_setup or drop the export.\n\nDrop the export because tick_nohz_full_setup() is only called from the\nbuilt-in code in kernel/sched/isolation.c."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2390095113e98fc52fffe35c5206d30d9efe3f78",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c4ff3ffe0138234774602152fe67e3a898c615c6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ea32b27e2f8c58c92bff5ecba7fcf64b97707089",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f4a80ec8c51d68be4b7a7830c510f75080c5e417",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49676.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49676.json
new file mode 100644
index 00000000000..4212b017d2f
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49676.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49676",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:42.500",
+ "lastModified": "2025-02-26T07:01:42.500",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmemory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings\n\nof_parse_phandle() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nThis function doesn't call of_node_put() in some error paths.\nTo unify the structure, Add put_node label and goto it on errors."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1332661e09304b7b8e84e5edc11811ba08d12abe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/889aad2203e09eed2071ca8985c25e9d6aea5735",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bb2a481778c60f912c363e271ae46b55ff8132db",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cde4480b5ab06195b9164184b0c02ced71e601b4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49677.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49677.json
new file mode 100644
index 00000000000..26c608ee08a
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49677.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49677",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:42.587",
+ "lastModified": "2025-02-26T07:01:42.587",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nARM: cns3xxx: Fix refcount leak in cns3xxx_init\n\nof_find_compatible_node() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1ba904b6b16e08de5aed7c1349838d9cd0d178c5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/45bebbc8cea7d586a6216dc62814bdb380b9b29b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/68d4303bf59662b64bd555e2aa0518282d20aa4f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b8b84e01ca94e2e1f5492353e9c24dab520b2e5b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c980392af1473d6d5662f70d8089c8e6d85144a4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d1359e4129ad43e43972a28838b87291c51de23d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/da3ee7cd2f15922ad88a7ca6deee2eafdc7cd214",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dc5170aae24e04068fd5ea125d06c0ab51f48a27",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49678.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49678.json
new file mode 100644
index 00000000000..837a23bc56b
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49678.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49678",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:42.680",
+ "lastModified": "2025-02-26T07:01:42.680",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe\n\nof_find_matching_node() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nAdd missing of_node_put() to avoid refcount leak.\n\nIn brcmstb_init_sram, it pass dn to of_address_to_resource(),\nof_address_to_resource() will call of_find_device_by_node() to take\nreference, so we should release the reference returned by\nof_find_matching_node()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/10ba9d499a9fd82ed40897e734ba19870a879407",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/30bbfeb480ae8b5ee43199d72417b232590440c2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/37d838de369b07b596c19ff3662bf0293fdb09ee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4f5877bdf7b593e988f1924f4c3df6523f80b39c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/734a4d15142bb4c8ecad2d8ec70d7564e78ae34d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dcafd5463d8f20c4f90ddc138a5738adb99f74c8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49679.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49679.json
new file mode 100644
index 00000000000..e6a72eea3b5
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49679.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49679",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:42.773",
+ "lastModified": "2025-02-26T07:01:42.773",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nARM: Fix refcount leak in axxia_boot_secondary\n\nof_find_compatible_node() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/29ca9c4efacccdc15104a8d4bf10b5183fc92840",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3c19fe3f04f4f4e7a2b722c2fd3c98356fc1d72b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/44a5b3a073e5aaa5720929dba95b2725eb32bb65",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4d9c60e868f7cf8e09956e7d5bb44d807d712699",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/71e12e5b02674459a24f16e965255d63b31fe049",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7c7ff68daa93d8c4cdea482da4f2429c0398fcde",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a9b76c232a1ce4cbf27862097f7eb634dcc779eb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b385cb59aac8d61c29bc72ebf3d19a536914af96",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49680.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49680.json
new file mode 100644
index 00000000000..f3b5b26d3aa
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49680.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49680",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:42.867",
+ "lastModified": "2025-02-26T07:01:42.867",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nARM: exynos: Fix refcount leak in exynos_map_pmu\n\nof_find_matching_node() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nAdd missing of_node_put() to avoid refcount leak.\nof_node_put() checks null pointer."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/31d09571bb071c20f6bdc0bb7ac1ef8dd2987c04",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/545ae5cbae839ce39bfe09828e413f1c916082de",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/68f28d52e6cbab8dcfa249cac4356d1d0573e868",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7571bcecf01b69f0d3ec60ca41ce5d4c75411a4a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c4c79525042a4a7df96b73477feaf232fe44ae81",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d23f76018e17618559da9eea179d137362023f95",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f9b77a52937582a5b99a5a07e4ef1e2f48f87347",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fc354856e9fad9cd36e2ad28f9da70716025055a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49681.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49681.json
new file mode 100644
index 00000000000..761ef7a8025
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49681.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49681",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:42.963",
+ "lastModified": "2025-02-26T07:01:42.963",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxtensa: xtfpga: Fix refcount leak bug in setup\n\nIn machine_setup(), of_find_compatible_node() will return a node\npointer with refcount incremented. We should use of_node_put() when\nit is not used anymore."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0162451723178602c37f0555d235dfa17e486112",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0715d0e60052662c3f225342062f174dd721d1c7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/173940b3ae40114d4179c251a98ee039dc9cd5b3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/35d7e961be68732eb3acaeba81fb81ca16eafd05",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6c0839cf1b9e1b3c88da6af76794583cbfae8da3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9b30c5c8884eda3f541229899671cebbad15979b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a52972ee706b438302eb0350e61f378eb191e3d1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b12d5c52f073a0420622aaf2f21b615cce8b36cc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49682.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49682.json
new file mode 100644
index 00000000000..e39d2556bda
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49682.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49682",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:43.063",
+ "lastModified": "2025-02-26T07:01:43.063",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxtensa: Fix refcount leak bug in time.c\n\nIn calibrate_ccount(), of_find_compatible_node() will return a node\npointer with refcount incremented. We should use of_node_put() when\nit is not used anymore."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0dcc1dd8a5dd9240639f1051dfaa2dffc9fbbde5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0e403a383c14b63c86bd9df085b7e573e9caee64",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3e5eb904d9ba657308fc75a5de434b0e58dcb8d7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7de4502af68f4f3932f450157f5483eb7b33cb74",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a0117dc956429f2ede17b323046e1968d1849150",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/af0ff2da01521144bc11194f4c26485d7c9cee73",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e5234a9d64a976abd134a14710dcd5188158a7c5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f1eaf4ba5372ad111f687a80c67e270708e14c23",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49683.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49683.json
new file mode 100644
index 00000000000..0d8bb1bd41b
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49683.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49683",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:43.153",
+ "lastModified": "2025-02-26T07:01:43.153",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client\n\nof_parse_phandle() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/501652a2ad5450b4908e1f204ce75b2414c305b7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5eaa84e1605035a90a64d25b6cba79e89d188175",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ab7bf025cee89db73c649216ddd2bc589c3d3862",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ada7b0c0dedafd7d059115adf49e48acba3153a8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49684.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49684.json
new file mode 100644
index 00000000000..99139bd9575
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49684.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49684",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:43.247",
+ "lastModified": "2025-02-26T07:01:43.247",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: aspeed: Fix refcount leak in aspeed_adc_set_trim_data\n\nof_find_node_by_name() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when done.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/8a2b6b5687984a010ed094b4f436a2f091987758",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9664491db50a84be92696c8fad2c3b49a7a5f36f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49685.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49685.json
new file mode 100644
index 00000000000..2432eac630c
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49685.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49685",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:43.340",
+ "lastModified": "2025-02-26T07:01:43.340",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: trigger: sysfs: fix use-after-free on remove\n\nEnsure that the irq_work has completed before the trigger is freed.\n\n ==================================================================\n BUG: KASAN: use-after-free in irq_work_run_list\n Read of size 8 at addr 0000000064702248 by task python3/25\n\n Call Trace:\n irq_work_run_list\n irq_work_tick\n update_process_times\n tick_sched_handle\n tick_sched_timer\n __hrtimer_run_queues\n hrtimer_interrupt\n\n Allocated by task 25:\n kmem_cache_alloc_trace\n iio_sysfs_trig_add\n dev_attr_store\n sysfs_kf_write\n kernfs_fop_write_iter\n new_sync_write\n vfs_write\n ksys_write\n sys_write\n\n Freed by task 25:\n kfree\n iio_sysfs_trig_remove\n dev_attr_store\n sysfs_kf_write\n kernfs_fop_write_iter\n new_sync_write\n vfs_write\n ksys_write\n sys_write\n\n =================================================================="
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/31ff3309b47d98313c61b8301bf595820cc3cc33",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4687c3f955240ca2a576bdc3f742d4d915b6272d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4ef1e521be610b720daeb7cf899fedc7db0274c4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5e39397d60dacc7f5d81d442c1c958eaaaf31128",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/78601726d4a59a291acc5a52da1d3a0a6831e4e8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b07a30a774b3c3e584a68dc91779c68ea2da4813",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d6111e7bdb8ec27eb43d01c4cd4ff1620a75f7f2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fd5d8fb298a2866c337da635c79d63c3afabcaf7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49686.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49686.json
new file mode 100644
index 00000000000..f7f760c62b9
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49686.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49686",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:43.437",
+ "lastModified": "2025-02-26T07:01:43.437",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: uvc: fix list double add in uvcg_video_pump\n\nA panic can occur if the endpoint becomes disabled and the\nuvcg_video_pump adds the request back to the req_free list after it has\nalready been queued to the endpoint. The endpoint complete will add the\nrequest back to the req_free list. Invalidate the local request handle\nonce it's been queued.\n\n<6>[ 246.796704][T13726] configfs-gadget gadget: uvc: uvc_function_set_alt(1, 0)\n<3>[ 246.797078][ T26] list_add double add: new=ffffff878bee5c40, prev=ffffff878bee5c40, next=ffffff878b0f0a90.\n<6>[ 246.797213][ T26] ------------[ cut here ]------------\n<2>[ 246.797224][ T26] kernel BUG at lib/list_debug.c:31!\n<6>[ 246.807073][ T26] Call trace:\n<6>[ 246.807180][ T26] uvcg_video_pump+0x364/0x38c\n<6>[ 246.807366][ T26] process_one_work+0x2a4/0x544\n<6>[ 246.807394][ T26] worker_thread+0x350/0x784\n<6>[ 246.807442][ T26] kthread+0x2ac/0x320"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/96163f835e65f8c9897487fac965819f0651d671",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d95ac8b920de1d39525fadc408ce675697626ca6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49687.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49687.json
new file mode 100644
index 00000000000..ce447a9af67
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49687.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49687",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:43.527",
+ "lastModified": "2025-02-26T07:01:43.527",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio_net: fix xdp_rxq_info bug after suspend/resume\n\nThe following sequence currently causes a driver bug warning\nwhen using virtio_net:\n\n # ip link set eth0 up\n # echo mem > /sys/power/state (or e.g. # rtcwake -s 10 -m mem)\n \n # ip link set eth0 down\n\n Missing register, driver bug\n WARNING: CPU: 0 PID: 375 at net/core/xdp.c:138 xdp_rxq_info_unreg+0x58/0x60\n Call trace:\n xdp_rxq_info_unreg+0x58/0x60\n virtnet_close+0x58/0xac\n __dev_close_many+0xac/0x140\n __dev_change_flags+0xd8/0x210\n dev_change_flags+0x24/0x64\n do_setlink+0x230/0xdd0\n ...\n\nThis happens because virtnet_freeze() frees the receive_queue\ncompletely (including struct xdp_rxq_info) but does not call\nxdp_rxq_info_unreg(). Similarly, virtnet_restore() sets up the\nreceive_queue again but does not call xdp_rxq_info_reg().\n\nActually, parts of virtnet_freeze_down() and virtnet_restore_up()\nare almost identical to virtnet_close() and virtnet_open(): only\nthe calls to xdp_rxq_info_(un)reg() are missing. This means that\nwe can fix this easily and avoid such problems in the future by\njust calling virtnet_close()/open() from the freeze/restore handlers.\n\nAside from adding the missing xdp_rxq_info calls the only difference\nis that the refill work is only cancelled if netif_running(). However,\nthis should not make any functional difference since the refill work\nshould only be active if the network interface is actually up."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/340fbdc8011f2dc678f622c5ce1cbb5ab8305de7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/57ee40f1b198b59d43c216fbc4672f9300d3c8b0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8af52fe9fd3bf5e7478da99193c0632276e1dfce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8c7a32b7c15555beddc5810c3334d9cefff061bf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8d7fe9ad6fddc2af8bde4b921b4f8fab231ed38c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9222672fa6370f0ec3d899662cb8680e9282fc4c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49688.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49688.json
new file mode 100644
index 00000000000..cfa178176fc
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49688.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49688",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:43.617",
+ "lastModified": "2025-02-26T07:01:43.617",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix dynamic root getattr\n\nThe recent patch to make afs_getattr consult the server didn't account\nfor the pseudo-inodes employed by the dynamic root-type afs superblock\nnot having a volume or a server to access, and thus an oops occurs if\nsuch a directory is stat'd.\n\nFix this by checking to see if the vnode->volume pointer actually points\nanywhere before following it in afs_getattr().\n\nThis can be tested by stat'ing a directory in /afs. It may be\nsufficient just to do \"ls /afs\" and the oops looks something like:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000020\n ...\n RIP: 0010:afs_getattr+0x8b/0x14b\n ...\n Call Trace:\n \n vfs_statx+0x79/0xf5\n vfs_fstatat+0x49/0x62"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2b2bba96526f25f2eba74ecadb031de2e05a83ce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/65c24caf1b9f5b08397c6e805ec24ebc390c6e4d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7844ceada44eca740d31beb3d97b8511b1ca0a9b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7b564e3254b7db5fbfbf11a824627a6c31b932b4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cb78d1b5efffe4cf97e16766329dd7358aed3deb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e3a232e5767051483ffad4cef7d0a89d292a192b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49689.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49689.json
new file mode 100644
index 00000000000..d3eca5b03b7
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49689.json
@@ -0,0 +1,16 @@
+{
+ "id": "CVE-2022-49689",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:43.710",
+ "lastModified": "2025-02-26T13:15:34.300",
+ "vulnStatus": "Rejected",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
+ }
+ ],
+ "metrics": {},
+ "references": []
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49690.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49690.json
new file mode 100644
index 00000000000..ebc3c3c4f52
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49690.json
@@ -0,0 +1,16 @@
+{
+ "id": "CVE-2022-49690",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:43.803",
+ "lastModified": "2025-02-26T15:15:17.703",
+ "vulnStatus": "Rejected",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
+ }
+ ],
+ "metrics": {},
+ "references": []
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49691.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49691.json
new file mode 100644
index 00000000000..9d71362711c
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49691.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49691",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:43.893",
+ "lastModified": "2025-02-26T07:01:43.893",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nerspan: do not assume transport header is always set\n\nRewrite tests in ip6erspan_tunnel_xmit() and\nerspan_fb_xmit() to not assume transport header is set.\n\nsyzbot reported:\n\nWARNING: CPU: 0 PID: 1350 at include/linux/skbuff.h:2911 skb_transport_header include/linux/skbuff.h:2911 [inline]\nWARNING: CPU: 0 PID: 1350 at include/linux/skbuff.h:2911 ip6erspan_tunnel_xmit+0x15af/0x2eb0 net/ipv6/ip6_gre.c:963\nModules linked in:\nCPU: 0 PID: 1350 Comm: aoe_tx0 Not tainted 5.19.0-rc2-syzkaller-00160-g274295c6e53f #0\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014\nRIP: 0010:skb_transport_header include/linux/skbuff.h:2911 [inline]\nRIP: 0010:ip6erspan_tunnel_xmit+0x15af/0x2eb0 net/ipv6/ip6_gre.c:963\nCode: 0f 47 f0 40 88 b5 7f fe ff ff e8 8c 16 4b f9 89 de bf ff ff ff ff e8 a0 12 4b f9 66 83 fb ff 0f 85 1d f1 ff ff e8 71 16 4b f9 <0f> 0b e9 43 f0 ff ff e8 65 16 4b f9 48 8d 85 30 ff ff ff ba 60 00\nRSP: 0018:ffffc90005daf910 EFLAGS: 00010293\nRAX: 0000000000000000 RBX: 000000000000ffff RCX: 0000000000000000\nRDX: ffff88801f032100 RSI: ffffffff882e8d3f RDI: 0000000000000003\nRBP: ffffc90005dafab8 R08: 0000000000000003 R09: 000000000000ffff\nR10: 000000000000ffff R11: 0000000000000000 R12: ffff888024f21d40\nR13: 000000000000a288 R14: 00000000000000b0 R15: ffff888025a2e000\nFS: 0000000000000000(0000) GS:ffff88802c800000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000001b2e425000 CR3: 000000006d099000 CR4: 0000000000152ef0\nCall Trace:\n\n__netdev_start_xmit include/linux/netdevice.h:4805 [inline]\nnetdev_start_xmit include/linux/netdevice.h:4819 [inline]\nxmit_one net/core/dev.c:3588 [inline]\ndev_hard_start_xmit+0x188/0x880 net/core/dev.c:3604\nsch_direct_xmit+0x19f/0xbe0 net/sched/sch_generic.c:342\n__dev_xmit_skb net/core/dev.c:3815 [inline]\n__dev_queue_xmit+0x14a1/0x3900 net/core/dev.c:4219\ndev_queue_xmit include/linux/netdevice.h:2994 [inline]\ntx+0x6a/0xc0 drivers/block/aoe/aoenet.c:63\nkthread+0x1e7/0x3b0 drivers/block/aoe/aoecmd.c:1229\nkthread+0x2e9/0x3a0 kernel/kthread.c:376\nret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302\n"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/02da602bc2f353dccd9e489a604490034ded941e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2c8aeffc7c586d53e1d380f010bdca4f710f2480",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/301bd140ed0b24f0da660874c7e8a47dad8c8222",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a3b2470399f679587c45abe56e551caf10becca2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cec9867ee55478ef5dcb2adf030fe0c442a4c4ee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fb401f37f6eadf24956d93687e5758c163c0d12b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49692.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49692.json
new file mode 100644
index 00000000000..b7872413a4c
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49692.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49692",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:43.990",
+ "lastModified": "2025-02-26T07:01:43.990",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: phy: at803x: fix NULL pointer dereference on AR9331 PHY\n\nLatest kernel will explode on the PHY interrupt config, since it depends\nnow on allocated priv. So, run probe to allocate priv to fix it.\n\n ar9331_switch ethernet.1:10 lan0 (uninitialized): PHY [!ahb!ethernet@1a000000!mdio!switch@10:00] driver [Qualcomm Atheros AR9331 built-in PHY] (irq=13)\n CPU 0 Unable to handle kernel paging request at virtual address 0000000a, epc == 8050e8a8, ra == 80504b34\n ...\n Call Trace:\n [<8050e8a8>] at803x_config_intr+0x5c/0xd0\n [<80504b34>] phy_request_interrupt+0xa8/0xd0\n [<8050289c>] phylink_bringup_phy+0x2d8/0x3ac\n [<80502b68>] phylink_fwnode_phy_connect+0x118/0x130\n [<8074d8ec>] dsa_slave_create+0x270/0x420\n [<80743b04>] dsa_port_setup+0x12c/0x148\n [<8074580c>] dsa_register_switch+0xaf0/0xcc0\n [<80511344>] ar9331_sw_probe+0x370/0x388\n [<8050cb78>] mdio_probe+0x44/0x70\n [<804df300>] really_probe+0x200/0x424\n [<804df7b4>] __driver_probe_device+0x290/0x298\n [<804df810>] driver_probe_device+0x54/0xe4\n [<804dfd50>] __device_attach_driver+0xe4/0x130\n [<804dcb00>] bus_for_each_drv+0xb4/0xd8\n [<804dfac4>] __device_attach+0x104/0x1a4\n [<804ddd24>] bus_probe_device+0x48/0xc4\n [<804deb44>] deferred_probe_work_func+0xf0/0x10c\n [<800a0ffc>] process_one_work+0x314/0x4d4\n [<800a17fc>] worker_thread+0x2a4/0x354\n [<800a9a54>] kthread+0x134/0x13c\n [<8006306c>] ret_from_kernel_thread+0x14/0x1c\n\nSame Issue would affect some other PHYs (QCA8081, QCA9561), so fix it\ntoo."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/66fa352215e8455ba2e5f33793535795bd3e36ca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9926de7315be3d606cc011a305ad9adb9e8e14c9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49693.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49693.json
new file mode 100644
index 00000000000..8053bb1b3de
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49693.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49693",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:44.080",
+ "lastModified": "2025-02-26T07:01:44.080",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf\n\nof_graph_get_remote_node() returns remote device node pointer with\nrefcount incremented, we should use of_node_put() on it\nwhen not need anymore.\nAdd missing of_node_put() to avoid refcount leak.\n\nPatchwork: https://patchwork.freedesktop.org/patch/488473/"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3c39a17197733bc37786ed68c83267c2f491840b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b9cc4598607cb7f7eae5c75fc1e3209cd52ff5e0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d1592d3e362cc59b29f15019707b16c695d70ca3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d16a4339825e64f9ddcdff5277982d640bae933b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d607da76fd2b1cf1d377af9d9b7c6f8fecbb0e1d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49694.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49694.json
new file mode 100644
index 00000000000..5697568cb81
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49694.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49694",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:44.170",
+ "lastModified": "2025-02-26T07:01:44.170",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: disable the elevator int del_gendisk\n\nThe elevator is only used for file system requests, which are stopped in\ndel_gendisk. Move disabling the elevator and freeing the scheduler tags\nto the end of del_gendisk instead of doing that work in disk_release and\nblk_cleanup_queue to avoid a use after free on q->tag_set from\ndisk_release as the tag_set might not be alive at that point.\n\nMove the blk_qos_exit call as well, as it just depends on the elevator\nexit and would be the only reason to keep the not exactly cheap queue\nfreeze in disk_release."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/50e34d78815e474d410f342fbe783b18192ca518",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f28699fafc047ec33299da01e928c3a0073c5cc6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49695.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49695.json
new file mode 100644
index 00000000000..9a6124f9d9f
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49695.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49695",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:44.260",
+ "lastModified": "2025-02-26T07:01:44.260",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nigb: fix a use-after-free issue in igb_clean_tx_ring\n\nFix the following use-after-free bug in igb_clean_tx_ring routine when\nthe NIC is running in XDP mode. The issue can be triggered redirecting\ntraffic into the igb NIC and then closing the device while the traffic\nis flowing.\n\n[ 73.322719] CPU: 1 PID: 487 Comm: xdp_redirect Not tainted 5.18.3-apu2 #9\n[ 73.330639] Hardware name: PC Engines APU2/APU2, BIOS 4.0.7 02/28/2017\n[ 73.337434] RIP: 0010:refcount_warn_saturate+0xa7/0xf0\n[ 73.362283] RSP: 0018:ffffc9000081f798 EFLAGS: 00010282\n[ 73.367761] RAX: 0000000000000000 RBX: ffffc90000420f80 RCX: 0000000000000000\n[ 73.375200] RDX: ffff88811ad22d00 RSI: ffff88811ad171e0 RDI: ffff88811ad171e0\n[ 73.382590] RBP: 0000000000000900 R08: ffffffff82298f28 R09: 0000000000000058\n[ 73.390008] R10: 0000000000000219 R11: ffffffff82280f40 R12: 0000000000000090\n[ 73.397356] R13: ffff888102343a40 R14: ffff88810359e0e4 R15: 0000000000000000\n[ 73.404806] FS: 00007ff38d31d740(0000) GS:ffff88811ad00000(0000) knlGS:0000000000000000\n[ 73.413129] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 73.419096] CR2: 000055cff35f13f8 CR3: 0000000106391000 CR4: 00000000000406e0\n[ 73.426565] Call Trace:\n[ 73.429087] \n[ 73.431314] igb_clean_tx_ring+0x43/0x140 [igb]\n[ 73.436002] igb_down+0x1d7/0x220 [igb]\n[ 73.439974] __igb_close+0x3c/0x120 [igb]\n[ 73.444118] igb_xdp+0x10c/0x150 [igb]\n[ 73.447983] ? igb_pci_sriov_configure+0x70/0x70 [igb]\n[ 73.453362] dev_xdp_install+0xda/0x110\n[ 73.457371] dev_xdp_attach+0x1da/0x550\n[ 73.461369] do_setlink+0xfd0/0x10f0\n[ 73.465166] ? __nla_validate_parse+0x89/0xc70\n[ 73.469714] rtnl_setlink+0x11a/0x1e0\n[ 73.473547] rtnetlink_rcv_msg+0x145/0x3d0\n[ 73.477709] ? rtnl_calcit.isra.0+0x130/0x130\n[ 73.482258] netlink_rcv_skb+0x8d/0x110\n[ 73.486229] netlink_unicast+0x230/0x340\n[ 73.490317] netlink_sendmsg+0x215/0x470\n[ 73.494395] __sys_sendto+0x179/0x190\n[ 73.498268] ? move_addr_to_user+0x37/0x70\n[ 73.502547] ? __sys_getsockname+0x84/0xe0\n[ 73.506853] ? netlink_setsockopt+0x1c1/0x4a0\n[ 73.511349] ? __sys_setsockopt+0xc8/0x1d0\n[ 73.515636] __x64_sys_sendto+0x20/0x30\n[ 73.519603] do_syscall_64+0x3b/0x80\n[ 73.523399] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[ 73.528712] RIP: 0033:0x7ff38d41f20c\n[ 73.551866] RSP: 002b:00007fff3b945a68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c\n[ 73.559640] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff38d41f20c\n[ 73.567066] RDX: 0000000000000034 RSI: 00007fff3b945b30 RDI: 0000000000000003\n[ 73.574457] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000\n[ 73.581852] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3b945ab0\n[ 73.589179] R13: 0000000000000000 R14: 0000000000000003 R15: 00007fff3b945b30\n[ 73.596545] \n[ 73.598842] ---[ end trace 0000000000000000 ]---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2af944210dc23d43d8208dafac4df7be7e3c168b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3f6a57ee8544ec3982f8a3cbcbf4aea7d47eb9ec",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/68a0ed06dcd5d3ea732d011c0b83d66e4791f521",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c12a2c9b1b460ed72e6b3c33aac1ef51b0329b66",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49696.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49696.json
new file mode 100644
index 00000000000..e4a05b01d1e
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49696.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49696",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:44.357",
+ "lastModified": "2025-02-26T07:01:44.357",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix use-after-free Read in tipc_named_reinit\n\nsyzbot found the following issue on:\n==================================================================\nBUG: KASAN: use-after-free in tipc_named_reinit+0x94f/0x9b0\nnet/tipc/name_distr.c:413\nRead of size 8 at addr ffff88805299a000 by task kworker/1:9/23764\n\nCPU: 1 PID: 23764 Comm: kworker/1:9 Not tainted\n5.18.0-rc4-syzkaller-00878-g17d49e6e8012 #0\nHardware name: Google Compute Engine/Google Compute Engine,\nBIOS Google 01/01/2011\nWorkqueue: events tipc_net_finalize_work\nCall Trace:\n \n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106\n print_address_description.constprop.0.cold+0xeb/0x495\nmm/kasan/report.c:313\n print_report mm/kasan/report.c:429 [inline]\n kasan_report.cold+0xf4/0x1c6 mm/kasan/report.c:491\n tipc_named_reinit+0x94f/0x9b0 net/tipc/name_distr.c:413\n tipc_net_finalize+0x234/0x3d0 net/tipc/net.c:138\n process_one_work+0x996/0x1610 kernel/workqueue.c:2289\n worker_thread+0x665/0x1080 kernel/workqueue.c:2436\n kthread+0x2e9/0x3a0 kernel/kthread.c:376\n ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298\n \n[...]\n==================================================================\n\nIn the commit\nd966ddcc3821 (\"tipc: fix a deadlock when flushing scheduled work\"),\nthe cancel_work_sync() function just to make sure ONLY the work\ntipc_net_finalize_work() is executing/pending on any CPU completed before\ntipc namespace is destroyed through tipc_exit_net(). But this function\nis not guaranteed the work is the last queued. So, the destroyed instance\nmay be accessed in the work which will try to enqueue later.\n\nIn order to completely fix, we re-order the calling of cancel_work_sync()\nto make sure the work tipc_net_finalize_work() was last queued and it\nmust be completed by calling cancel_work_sync()."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/361c5521c1e49843b710f455cae3c0a50b714323",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8b246ddd394d7d9640816611693b0096b998e27a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/911600bf5a5e84bfda4d33ee32acc75ecf6159f0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cd7789e659e84f137631dc1f5ec8d794f2700e6c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49697.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49697.json
new file mode 100644
index 00000000000..89a80851f4c
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49697.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49697",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:44.450",
+ "lastModified": "2025-02-26T07:01:44.450",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix request_sock leak in sk lookup helpers\n\nA customer reported a request_socket leak in a Calico cloud environment. We\nfound that a BPF program was doing a socket lookup with takes a refcnt on\nthe socket and that it was finding the request_socket but returning the parent\nLISTEN socket via sk_to_full_sk() without decrementing the child request socket\n1st, resulting in request_sock slab object leak. This patch retains the\nexisting behaviour of returning full socks to the caller but it also decrements\nthe child request_socket if one is present before doing so to prevent the leak.\n\nThanks to Curtis Taylor for all the help in diagnosing and testing this. And\nthanks to Antoine Tenart for the reproducer and patch input.\n\nv2 of this patch contains, refactor as per Daniel Borkmann's suggestions to\nvalidate RCU flags on the listen socket so that it balances with bpf_sk_release()\nand update comments as per Martin KaFai Lau's suggestion. One small change to\nDaniels suggestion, put \"sk = sk2\" under \"if (sk2 != sk)\" to avoid an extra\ninstruction."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3046a827316c0e55fc563b4fb78c93b9ca5c7c37",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/516760f1d2979903eaad5b437256913c5cd98416",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5a62b5ba4c0ce8315b6382cd4ace81b48cd121cd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8ffe2e50e9678c8373027492035f094b130437f1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b03607437ea81b850599f705096b05b85e7a4a71",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49698.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49698.json
new file mode 100644
index 00000000000..69d23a4d603
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49698.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49698",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:44.547",
+ "lastModified": "2025-02-26T07:01:44.547",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: use get_random_u32 instead of prandom\n\nbh might occur while updating per-cpu rnd_state from user context,\nie. local_out path.\n\nBUG: using smp_processor_id() in preemptible [00000000] code: nginx/2725\ncaller is nft_ng_random_eval+0x24/0x54 [nft_numgen]\nCall Trace:\n check_preemption_disabled+0xde/0xe0\n nft_ng_random_eval+0x24/0x54 [nft_numgen]\n\nUse the random driver instead, this also avoids need for local prandom\nstate. Moreover, prandom now uses the random driver since d4150779e60f\n(\"random32: use real rng for non-deterministic randomness\").\n\nBased on earlier patch from Pablo Neira."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/15cc30ac2a8d7185f8ebf97dd1ddd90a7c79783b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6ce71f83f798be7e1ca68707fec449fbecb38852",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b1fd94e704571f98b21027340eecf821b2bdffba",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d0906b0fffc9f19bc42708ca3e84e2089088386c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-496xx/CVE-2022-49699.json b/CVE-2022/CVE-2022-496xx/CVE-2022-49699.json
new file mode 100644
index 00000000000..bc81a2973e5
--- /dev/null
+++ b/CVE-2022/CVE-2022-496xx/CVE-2022-49699.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49699",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:44.640",
+ "lastModified": "2025-02-26T07:01:44.640",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfilemap: Handle sibling entries in filemap_get_read_batch()\n\nIf a read races with an invalidation followed by another read, it is\npossible for a folio to be replaced with a higher-order folio. If that\nhappens, we'll see a sibling entry for the new folio in the next iteration\nof the loop. This manifests as a NULL pointer dereference while holding\nthe RCU read lock.\n\nHandle this by simply returning. The next call will find the new folio\nand handle it correctly. The other ways of handling this rare race are\nmore complex and it's just not worth it."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/a66f131d30e53000f08301776bf85c912ef47aad",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cb995f4eeba9d268fd4b56c2423ad6c1d1ea1b82",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49700.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49700.json
new file mode 100644
index 00000000000..9fec8828441
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49700.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49700",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:44.740",
+ "lastModified": "2025-02-26T07:01:44.740",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/slub: add missing TID updates on slab deactivation\n\nThe fastpath in slab_alloc_node() assumes that c->slab is stable as long as\nthe TID stays the same. However, two places in __slab_alloc() currently\ndon't update the TID when deactivating the CPU slab.\n\nIf multiple operations race the right way, this could lead to an object\ngetting lost; or, in an even more unlikely situation, it could even lead to\nan object being freed onto the wrong slab's freelist, messing up the\n`inuse` counter and eventually causing a page to be freed to the page\nallocator while it still contains slab objects.\n\n(I haven't actually tested these cases though, this is just based on\nlooking at the code. Writing testcases for this stuff seems like it'd be\na pain...)\n\nThe race leading to state inconsistency is (all operations on the same CPU\nand kmem_cache):\n\n - task A: begin do_slab_free():\n - read TID\n - read pcpu freelist (==NULL)\n - check `slab == c->slab` (true)\n - [PREEMPT A->B]\n - task B: begin slab_alloc_node():\n - fastpath fails (`c->freelist` is NULL)\n - enter __slab_alloc()\n - slub_get_cpu_ptr() (disables preemption)\n - enter ___slab_alloc()\n - take local_lock_irqsave()\n - read c->freelist as NULL\n - get_freelist() returns NULL\n - write `c->slab = NULL`\n - drop local_unlock_irqrestore()\n - goto new_slab\n - slub_percpu_partial() is NULL\n - get_partial() returns NULL\n - slub_put_cpu_ptr() (enables preemption)\n - [PREEMPT B->A]\n - task A: finish do_slab_free():\n - this_cpu_cmpxchg_double() succeeds()\n - [CORRUPT STATE: c->slab==NULL, c->freelist!=NULL]\n\nFrom there, the object on c->freelist will get lost if task B is allowed to\ncontinue from here: It will proceed to the retry_load_slab label,\nset c->slab, then jump to load_freelist, which clobbers c->freelist.\n\nBut if we instead continue as follows, we get worse corruption:\n\n - task A: run __slab_free() on object from other struct slab:\n - CPU_PARTIAL_FREE case (slab was on no list, is now on pcpu partial)\n - task A: run slab_alloc_node() with NUMA node constraint:\n - fastpath fails (c->slab is NULL)\n - call __slab_alloc()\n - slub_get_cpu_ptr() (disables preemption)\n - enter ___slab_alloc()\n - c->slab is NULL: goto new_slab\n - slub_percpu_partial() is non-NULL\n - set c->slab to slub_percpu_partial(c)\n - [CORRUPT STATE: c->slab points to slab-1, c->freelist has objects\n from slab-2]\n - goto redo\n - node_match() fails\n - goto deactivate_slab\n - existing c->freelist is passed into deactivate_slab()\n - inuse count of slab-1 is decremented to account for object from\n slab-2\n\nAt this point, the inuse count of slab-1 is 1 lower than it should be.\nThis means that if we free all allocated objects in slab-1 except for one,\nSLUB will think that slab-1 is completely unused, and may free its page,\nleading to use-after-free."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0515cc9b6b24877f59b222ade704bfaa42caa2a6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/197e257da473c725dfe47759c3ee02f2398d8ea5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/308c6d0e1f200fd26c71270c6e6bfcf0fc6ff082",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6c32496964da0dc230cea763a0e934b2e02dabd5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d6a597450e686d4c6388bd3cdcb17224b4dae7f0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e2b2f0e2e34d71ae6c2a1114fd3c525930e84bc7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e7e3e90d671078455a3a08189f89d85b3da2de9e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eeaa345e128515135ccb864c04482180c08e3259",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49701.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49701.json
new file mode 100644
index 00000000000..6ed6dfd59ff
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49701.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49701",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:44.930",
+ "lastModified": "2025-02-26T07:01:44.930",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ibmvfc: Allocate/free queue resource only during probe/remove\n\nCurrently, the sub-queues and event pool resources are allocated/freed for\nevery CRQ connection event such as reset and LPM. This exposes the driver\nto a couple issues. First the inefficiency of freeing and reallocating\nmemory that can simply be resued after being sanitized. Further, a system\nunder memory pressue runs the risk of allocation failures that could result\nin a crippled driver. Finally, there is a race window where command\nsubmission/compeletion can try to pull/return elements from/to an event\npool that is being deleted or already has been deleted due to the lack of\nhost state around freeing/allocating resources. The following is an example\nof list corruption following a live partition migration (LPM):\n\nOops: Exception in kernel mode, sig: 5 [#1]\nLE PAGE_SIZE=64K MMU=Hash SMP NR_CPUS=2048 NUMA pSeries\nModules linked in: vfat fat isofs cdrom ext4 mbcache jbd2 nft_counter nft_compat nf_tables nfnetlink rpadlpar_io rpaphp xsk_diag nfsv3 nfs_acl nfs lockd grace fscache netfs rfkill bonding tls sunrpc pseries_rng drm drm_panel_orientation_quirks xfs libcrc32c dm_service_time sd_mod t10_pi sg ibmvfc scsi_transport_fc ibmveth vmx_crypto dm_multipath dm_mirror dm_region_hash dm_log dm_mod ipmi_devintf ipmi_msghandler fuse\nCPU: 0 PID: 2108 Comm: ibmvfc_0 Kdump: loaded Not tainted 5.14.0-70.9.1.el9_0.ppc64le #1\nNIP: c0000000007c4bb0 LR: c0000000007c4bac CTR: 00000000005b9a10\nREGS: c00000025c10b760 TRAP: 0700 Not tainted (5.14.0-70.9.1.el9_0.ppc64le)\nMSR: 800000000282b033 CR: 2800028f XER: 0000000f\nCFAR: c0000000001f55bc IRQMASK: 0\n GPR00: c0000000007c4bac c00000025c10ba00 c000000002a47c00 000000000000004e\n GPR04: c0000031e3006f88 c0000031e308bd00 c00000025c10b768 0000000000000027\n GPR08: 0000000000000000 c0000031e3009dc0 00000031e0eb0000 0000000000000000\n GPR12: c0000031e2ffffa8 c000000002dd0000 c000000000187108 c00000020fcee2c0\n GPR16: 0000000000000000 0000000000000000 0000000000000000 0000000000000000\n GPR20: 0000000000000000 0000000000000000 0000000000000000 c008000002f81300\n GPR24: 5deadbeef0000100 5deadbeef0000122 c000000263ba6910 c00000024cc88000\n GPR28: 000000000000003c c0000002430a0000 c0000002430ac300 000000000000c300\nNIP [c0000000007c4bb0] __list_del_entry_valid+0x90/0x100\nLR [c0000000007c4bac] __list_del_entry_valid+0x8c/0x100\nCall Trace:\n[c00000025c10ba00] [c0000000007c4bac] __list_del_entry_valid+0x8c/0x100 (unreliable)\n[c00000025c10ba60] [c008000002f42284] ibmvfc_free_queue+0xec/0x210 [ibmvfc]\n[c00000025c10bb10] [c008000002f4246c] ibmvfc_deregister_scsi_channel+0xc4/0x160 [ibmvfc]\n[c00000025c10bba0] [c008000002f42580] ibmvfc_release_sub_crqs+0x78/0x130 [ibmvfc]\n[c00000025c10bc20] [c008000002f4f6cc] ibmvfc_do_work+0x5c4/0xc70 [ibmvfc]\n[c00000025c10bce0] [c008000002f4fdec] ibmvfc_work+0x74/0x1e8 [ibmvfc]\n[c00000025c10bda0] [c0000000001872b8] kthread+0x1b8/0x1c0\n[c00000025c10be10] [c00000000000cd64] ret_from_kernel_thread+0x5c/0x64\nInstruction dump:\n40820034 38600001 38210060 4e800020 7c0802a6 7c641b78 3c62fe7a 7d254b78\n3863b590 f8010070 4ba309cd 60000000 <0fe00000> 7c0802a6 3c62fe7a 3863b640\n---[ end trace 11a2b65a92f8b66c ]---\nibmvfc 30000003: Send warning. Receive queue closed, will retry.\n\nAdd registration/deregistration helpers that are called instead during\nconnection resets to sanitize and reconfigure the queues."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/161ec2a0807ddd58bc0f24f3e1e7e3d4fef5297f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/72ea7fe0db73d65c7d977208842d8ade9b823de9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9f23c499ca601b2a1e1d2e761d03964b739bca0e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49702.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49702.json
new file mode 100644
index 00000000000..34073978c26
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49702.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49702",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:45.827",
+ "lastModified": "2025-02-26T07:01:45.827",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix hang during unmount when block group reclaim task is running\n\nWhen we start an unmount, at close_ctree(), if we have the reclaim task\nrunning and in the middle of a data block group relocation, we can trigger\na deadlock when stopping an async reclaim task, producing a trace like the\nfollowing:\n\n[629724.498185] task:kworker/u16:7 state:D stack: 0 pid:681170 ppid: 2 flags:0x00004000\n[629724.499760] Workqueue: events_unbound btrfs_async_reclaim_metadata_space [btrfs]\n[629724.501267] Call Trace:\n[629724.501759] \n[629724.502174] __schedule+0x3cb/0xed0\n[629724.502842] schedule+0x4e/0xb0\n[629724.503447] btrfs_wait_on_delayed_iputs+0x7c/0xc0 [btrfs]\n[629724.504534] ? prepare_to_wait_exclusive+0xc0/0xc0\n[629724.505442] flush_space+0x423/0x630 [btrfs]\n[629724.506296] ? rcu_read_unlock_trace_special+0x20/0x50\n[629724.507259] ? lock_release+0x220/0x4a0\n[629724.507932] ? btrfs_get_alloc_profile+0xb3/0x290 [btrfs]\n[629724.508940] ? do_raw_spin_unlock+0x4b/0xa0\n[629724.509688] btrfs_async_reclaim_metadata_space+0x139/0x320 [btrfs]\n[629724.510922] process_one_work+0x252/0x5a0\n[629724.511694] ? process_one_work+0x5a0/0x5a0\n[629724.512508] worker_thread+0x52/0x3b0\n[629724.513220] ? process_one_work+0x5a0/0x5a0\n[629724.514021] kthread+0xf2/0x120\n[629724.514627] ? kthread_complete_and_exit+0x20/0x20\n[629724.515526] ret_from_fork+0x22/0x30\n[629724.516236] \n[629724.516694] task:umount state:D stack: 0 pid:719055 ppid:695412 flags:0x00004000\n[629724.518269] Call Trace:\n[629724.518746] \n[629724.519160] __schedule+0x3cb/0xed0\n[629724.519835] schedule+0x4e/0xb0\n[629724.520467] schedule_timeout+0xed/0x130\n[629724.521221] ? lock_release+0x220/0x4a0\n[629724.521946] ? lock_acquired+0x19c/0x420\n[629724.522662] ? trace_hardirqs_on+0x1b/0xe0\n[629724.523411] __wait_for_common+0xaf/0x1f0\n[629724.524189] ? usleep_range_state+0xb0/0xb0\n[629724.524997] __flush_work+0x26d/0x530\n[629724.525698] ? flush_workqueue_prep_pwqs+0x140/0x140\n[629724.526580] ? lock_acquire+0x1a0/0x310\n[629724.527324] __cancel_work_timer+0x137/0x1c0\n[629724.528190] close_ctree+0xfd/0x531 [btrfs]\n[629724.529000] ? evict_inodes+0x166/0x1c0\n[629724.529510] generic_shutdown_super+0x74/0x120\n[629724.530103] kill_anon_super+0x14/0x30\n[629724.530611] btrfs_kill_super+0x12/0x20 [btrfs]\n[629724.531246] deactivate_locked_super+0x31/0xa0\n[629724.531817] cleanup_mnt+0x147/0x1c0\n[629724.532319] task_work_run+0x5c/0xa0\n[629724.532984] exit_to_user_mode_prepare+0x1a6/0x1b0\n[629724.533598] syscall_exit_to_user_mode+0x16/0x40\n[629724.534200] do_syscall_64+0x48/0x90\n[629724.534667] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[629724.535318] RIP: 0033:0x7fa2b90437a7\n[629724.535804] RSP: 002b:00007ffe0b7e4458 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6\n[629724.536912] RAX: 0000000000000000 RBX: 00007fa2b9182264 RCX: 00007fa2b90437a7\n[629724.538156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555d6cf20dd0\n[629724.539053] RBP: 0000555d6cf20ba0 R08: 0000000000000000 R09: 00007ffe0b7e3200\n[629724.539956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\n[629724.540883] R13: 0000555d6cf20dd0 R14: 0000555d6cf20cb0 R15: 0000000000000000\n[629724.541796] \n\nThis happens because:\n\n1) Before entering close_ctree() we have the async block group reclaim\n task running and relocating a data block group;\n\n2) There's an async metadata (or data) space reclaim task running;\n\n3) We enter close_ctree() and park the cleaner kthread;\n\n4) The async space reclaim task is at flush_space() and runs all the\n existing delayed iputs;\n\n5) Before the async space reclaim task calls\n btrfs_wait_on_delayed_iputs(), the block group reclaim task which is\n doing the data block group relocation, creates a delayed iput at\n replace_file_extents() (called when COWing leaves that have file extent\n items pointing to relocated data exten\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/31e70e527806c546a72262f2fc3d982ee23c42d3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/341d33128a940c6634175dcb6ca92dc454cfa7d2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9fadb11f1295289e0da4d3342ecb6b92c1c99540",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49703.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49703.json
new file mode 100644
index 00000000000..cc47db9edd3
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49703.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49703",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:45.947",
+ "lastModified": "2025-02-26T07:01:45.947",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ibmvfc: Store vhost pointer during subcrq allocation\n\nCurrently the back pointer from a queue to the vhost adapter isn't set\nuntil after subcrq interrupt registration. The value is available when a\nqueue is first allocated and can/should be also set for primary and async\nqueues as well as subcrqs.\n\nThis fixes a crash observed during kexec/kdump on Power 9 with legacy XICS\ninterrupt controller where a pending subcrq interrupt from the previous\nkernel can be replayed immediately upon IRQ registration resulting in\ndereference of a garbage backpointer in ibmvfc_interrupt_scsi().\n\nKernel attempted to read user page (58) - exploit attempt? (uid: 0)\nBUG: Kernel NULL pointer dereference on read at 0x00000058\nFaulting instruction address: 0xc008000003216a08\nOops: Kernel access of bad area, sig: 11 [#1]\n...\nNIP [c008000003216a08] ibmvfc_interrupt_scsi+0x40/0xb0 [ibmvfc]\nLR [c0000000082079e8] __handle_irq_event_percpu+0x98/0x270\nCall Trace:\n[c000000047fa3d80] [c0000000123e6180] 0xc0000000123e6180 (unreliable)\n[c000000047fa3df0] [c0000000082079e8] __handle_irq_event_percpu+0x98/0x270\n[c000000047fa3ea0] [c000000008207d18] handle_irq_event+0x98/0x188\n[c000000047fa3ef0] [c00000000820f564] handle_fasteoi_irq+0xc4/0x310\n[c000000047fa3f40] [c000000008205c60] generic_handle_irq+0x50/0x80\n[c000000047fa3f60] [c000000008015c40] __do_irq+0x70/0x1a0\n[c000000047fa3f90] [c000000008016d7c] __do_IRQ+0x9c/0x130\n[c000000014622f60] [0000000020000000] 0x20000000\n[c000000014622ff0] [c000000008016e50] do_IRQ+0x40/0xa0\n[c000000014623020] [c000000008017044] replay_soft_interrupts+0x194/0x2f0\n[c000000014623210] [c0000000080172a8] arch_local_irq_restore+0x108/0x170\n[c000000014623240] [c000000008eb1008] _raw_spin_unlock_irqrestore+0x58/0xb0\n[c000000014623270] [c00000000820b12c] __setup_irq+0x49c/0x9f0\n[c000000014623310] [c00000000820b7c0] request_threaded_irq+0x140/0x230\n[c000000014623380] [c008000003212a50] ibmvfc_register_scsi_channel+0x1e8/0x2f0 [ibmvfc]\n[c000000014623450] [c008000003213d1c] ibmvfc_init_sub_crqs+0xc4/0x1f0 [ibmvfc]\n[c0000000146234d0] [c0080000032145a8] ibmvfc_reset_crq+0x150/0x210 [ibmvfc]\n[c000000014623550] [c0080000032147c8] ibmvfc_init_crq+0x160/0x280 [ibmvfc]\n[c0000000146235f0] [c00800000321a9cc] ibmvfc_probe+0x2a4/0x530 [ibmvfc]"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/6d38e3b614ded59da8b95377a98df969a5a5627a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8540f66196ca35b7b5e902932571c18b9fde0cd1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/aeaadcde1a60138bceb65de3cdaeec78170b4459",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49704.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49704.json
new file mode 100644
index 00000000000..12c296f42bd
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49704.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49704",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:46.060",
+ "lastModified": "2025-02-26T07:01:46.060",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\n9p: fix fid refcount leak in v9fs_vfs_get_link\n\nwe check for protocol version later than required, after a fid has\nbeen obtained. Just move the version check earlier."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/e5690f263208c5abce7451370b7786eb25b405eb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e7b6d622bd812013eb39c8f4cd65b7ee8ede1e02",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f0126bcaee81dabc1926012126aa74caa03a4c6e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49705.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49705.json
new file mode 100644
index 00000000000..4ef377361de
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49705.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49705",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:46.177",
+ "lastModified": "2025-02-26T07:01:46.177",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\n9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl\n\nWe need to release directory fid if we fail halfway through open\n\nThis fixes fid leaking with xfstests generic 531"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/22832ac3eb5be3f7168816a76b64c1284e12eb3c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8bc5412ba1a45edfd1e451874c483c26a097af2b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/beca774fc51a9ba8abbc869cf0c3d965ff17cd24",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49706.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49706.json
new file mode 100644
index 00000000000..0de56604a22
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49706.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49706",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:46.403",
+ "lastModified": "2025-02-26T07:01:46.403",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nzonefs: fix zonefs_iomap_begin() for reads\n\nIf a readahead is issued to a sequential zone file with an offset\nexactly equal to the current file size, the iomap type is set to\nIOMAP_UNWRITTEN, which will prevent an IO, but the iomap length is\ncalculated as 0. This causes a WARN_ON() in iomap_iter():\n\n[17309.548939] WARNING: CPU: 3 PID: 2137 at fs/iomap/iter.c:34 iomap_iter+0x9cf/0xe80\n[...]\n[17309.650907] RIP: 0010:iomap_iter+0x9cf/0xe80\n[...]\n[17309.754560] Call Trace:\n[17309.757078] \n[17309.759240] ? lock_is_held_type+0xd8/0x130\n[17309.763531] iomap_readahead+0x1a8/0x870\n[17309.767550] ? iomap_read_folio+0x4c0/0x4c0\n[17309.771817] ? lockdep_hardirqs_on_prepare+0x400/0x400\n[17309.778848] ? lock_release+0x370/0x750\n[17309.784462] ? folio_add_lru+0x217/0x3f0\n[17309.790220] ? reacquire_held_locks+0x4e0/0x4e0\n[17309.796543] read_pages+0x17d/0xb60\n[17309.801854] ? folio_add_lru+0x238/0x3f0\n[17309.807573] ? readahead_expand+0x5f0/0x5f0\n[17309.813554] ? policy_node+0xb5/0x140\n[17309.819018] page_cache_ra_unbounded+0x27d/0x450\n[17309.825439] filemap_get_pages+0x500/0x1450\n[17309.831444] ? filemap_add_folio+0x140/0x140\n[17309.837519] ? lock_is_held_type+0xd8/0x130\n[17309.843509] filemap_read+0x28c/0x9f0\n[17309.848953] ? zonefs_file_read_iter+0x1ea/0x4d0 [zonefs]\n[17309.856162] ? trace_contention_end+0xd6/0x130\n[17309.862416] ? __mutex_lock+0x221/0x1480\n[17309.868151] ? zonefs_file_read_iter+0x166/0x4d0 [zonefs]\n[17309.875364] ? filemap_get_pages+0x1450/0x1450\n[17309.881647] ? __mutex_unlock_slowpath+0x15e/0x620\n[17309.888248] ? wait_for_completion_io_timeout+0x20/0x20\n[17309.895231] ? lock_is_held_type+0xd8/0x130\n[17309.901115] ? lock_is_held_type+0xd8/0x130\n[17309.906934] zonefs_file_read_iter+0x356/0x4d0 [zonefs]\n[17309.913750] new_sync_read+0x2d8/0x520\n[17309.919035] ? __x64_sys_lseek+0x1d0/0x1d0\n\nFurthermore, this causes iomap_readahead() to loop forever as\niomap_readahead_iter() always returns 0, making no progress.\n\nFix this by treating reads after the file size as access to holes,\nsetting the iomap type to IOMAP_HOLE, the iomap addr to IOMAP_NULL_ADDR\nand using the length argument as is for the iomap length. To simplify\nthe code with this change, zonefs_iomap_begin() is split into the read\nvariant, zonefs_read_iomap_begin() and zonefs_read_iomap_ops, and the\nwrite variant, zonefs_write_iomap_begin() and zonefs_write_iomap_ops."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/355be6131164c5bacf2e810763835aecb6e01fcb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3a7f05f104347b407e865c10be2675cd833a4e48",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c1c1204c0d0c1dccc1310b9277fb2bd8b663d8fe",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c2f71b9bb398e2e573bdc2574149f42b45efe410",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49707.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49707.json
new file mode 100644
index 00000000000..711e3966acc
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49707.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49707",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:46.500",
+ "lastModified": "2025-02-26T07:01:46.500",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: add reserved GDT blocks check\n\nWe capture a NULL pointer issue when resizing a corrupt ext4 image which\nis freshly clear resize_inode feature (not run e2fsck). It could be\nsimply reproduced by following steps. The problem is because of the\nresize_inode feature was cleared, and it will convert the filesystem to\nmeta_bg mode in ext4_resize_fs(), but the es->s_reserved_gdt_blocks was\nnot reduced to zero, so could we mistakenly call reserve_backup_gdb()\nand passing an uninitialized resize_inode to it when adding new group\ndescriptors.\n\n mkfs.ext4 /dev/sda 3G\n tune2fs -O ^resize_inode /dev/sda #forget to run requested e2fsck\n mount /dev/sda /mnt\n resize2fs /dev/sda 8G\n\n ========\n BUG: kernel NULL pointer dereference, address: 0000000000000028\n CPU: 19 PID: 3243 Comm: resize2fs Not tainted 5.18.0-rc7-00001-gfde086c5ebfd #748\n ...\n RIP: 0010:ext4_flex_group_add+0xe08/0x2570\n ...\n Call Trace:\n \n ext4_resize_fs+0xbec/0x1660\n __ext4_ioctl+0x1749/0x24e0\n ext4_ioctl+0x12/0x20\n __x64_sys_ioctl+0xa6/0x110\n do_syscall_64+0x3b/0x90\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n RIP: 0033:0x7f2dd739617b\n ========\n\nThe fix is simple, add a check in ext4_resize_begin() to make sure that\nthe es->s_reserved_gdt_blocks is zero when the resize_inode feature is\ndisabled."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0dc2fca8e4f9ac4a40e8424a10163369cca0cc06",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/33b1bba31f4c784d33d2c2517964bdccdc9204cd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7c921328ac760bba780bdace41f4cd045f7f1405",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/af75c481a2e45e70f62f5942c93695e95bf7bd21",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b55c3cd102a6f48b90e61c44f7f3dda8c290c694",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b9747263b13e5290ac4d63bec47e38f701303cad",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bfd004a1d3a062aac300523d406ac1f3e5f1a82c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fba54289176702a7caac0b64738406775817f451",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49708.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49708.json
new file mode 100644
index 00000000000..be353824385
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49708.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49708",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:46.607",
+ "lastModified": "2025-02-26T07:01:46.607",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix bug_on ext4_mb_use_inode_pa\n\nHulk Robot reported a BUG_ON:\n==================================================================\nkernel BUG at fs/ext4/mballoc.c:3211!\n[...]\nRIP: 0010:ext4_mb_mark_diskspace_used.cold+0x85/0x136f\n[...]\nCall Trace:\n ext4_mb_new_blocks+0x9df/0x5d30\n ext4_ext_map_blocks+0x1803/0x4d80\n ext4_map_blocks+0x3a4/0x1a10\n ext4_writepages+0x126d/0x2c30\n do_writepages+0x7f/0x1b0\n __filemap_fdatawrite_range+0x285/0x3b0\n file_write_and_wait_range+0xb1/0x140\n ext4_sync_file+0x1aa/0xca0\n vfs_fsync_range+0xfb/0x260\n do_fsync+0x48/0xa0\n[...]\n==================================================================\n\nAbove issue may happen as follows:\n-------------------------------------\ndo_fsync\n vfs_fsync_range\n ext4_sync_file\n file_write_and_wait_range\n __filemap_fdatawrite_range\n do_writepages\n ext4_writepages\n mpage_map_and_submit_extent\n mpage_map_one_extent\n ext4_map_blocks\n ext4_mb_new_blocks\n ext4_mb_normalize_request\n >>> start + size <= ac->ac_o_ex.fe_logical\n ext4_mb_regular_allocator\n ext4_mb_simple_scan_group\n ext4_mb_use_best_found\n ext4_mb_new_preallocation\n ext4_mb_new_inode_pa\n ext4_mb_use_inode_pa\n >>> set ac->ac_b_ex.fe_len <= 0\n ext4_mb_mark_diskspace_used\n >>> BUG_ON(ac->ac_b_ex.fe_len <= 0);\n\nwe can easily reproduce this problem with the following commands:\n\t`fallocate -l100M disk`\n\t`mkfs.ext4 -b 1024 -g 256 disk`\n\t`mount disk /mnt`\n\t`fsstress -d /mnt -l 0 -n 1000 -p 1`\n\nThe size must be smaller than or equal to EXT4_BLOCKS_PER_GROUP.\nTherefore, \"start + size <= ac->ac_o_ex.fe_logical\" may occur\nwhen the size is truncated. So start should be the start position of\nthe group where ac_o_ex.fe_logical is located after alignment.\nIn addition, when the value of fe_logical or EXT4_BLOCKS_PER_GROUP\nis very large, the value calculated by start_off is more accurate."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5707d721d1819db57dba57b1d4623034fcb32047",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6880fb2e64331b9fdc85d3f32b1d7e81ad8703f1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6fdaf31ad5f3d3afab744dfd9a8b0d9142aa881f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/887a3e9ad4b8309a2266bce7ae749b2bf1f7a687",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/90f0f9d45dff0128c0fca0d2358c4153b024afa6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a08f789d2ab5242c07e716baf9a835725046be89",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a37c1359714da42517dd19d36fc3c4d17edba832",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a6b31616e5afe1d3972cb0682a373e50597faf5c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49709.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49709.json
new file mode 100644
index 00000000000..e804f23b51f
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49709.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49709",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:46.710",
+ "lastModified": "2025-02-26T07:01:46.710",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncfi: Fix __cfi_slowpath_diag RCU usage with cpuidle\n\nRCU_NONIDLE usage during __cfi_slowpath_diag can result in an invalid\nRCU state in the cpuidle code path:\n\n WARNING: CPU: 1 PID: 0 at kernel/rcu/tree.c:613 rcu_eqs_enter+0xe4/0x138\n ...\n Call trace:\n rcu_eqs_enter+0xe4/0x138\n rcu_idle_enter+0xa8/0x100\n cpuidle_enter_state+0x154/0x3a8\n cpuidle_enter+0x3c/0x58\n do_idle.llvm.6590768638138871020+0x1f4/0x2ec\n cpu_startup_entry+0x28/0x2c\n secondary_start_kernel+0x1b8/0x220\n __secondary_switched+0x94/0x98\n\nInstead, call rcu_irq_enter/exit to wake up RCU only when needed and\ndisable interrupts for the entire CFI shadow/module check when we do."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/57cd6d157eb479f0a8e820fd36b7240845c8a937",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/75f3a5fa2ad049c85ab5d5ee1ed9cfaa7e62c5ed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ca3897f2ac02ceae5e6fa794f83c36f9885b93da",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49710.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49710.json
new file mode 100644
index 00000000000..34c3de4df28
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49710.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49710",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:46.800",
+ "lastModified": "2025-02-26T07:01:46.800",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm mirror log: round up region bitmap size to BITS_PER_LONG\n\nThe code in dm-log rounds up bitset_size to 32 bits. It then uses\nfind_next_zero_bit_le on the allocated region. find_next_zero_bit_le\naccesses the bitmap using unsigned long pointers. So, on 64-bit\narchitectures, it may access 4 bytes beyond the allocated size.\n\nFix this bug by rounding up bitset_size to BITS_PER_LONG.\n\nThis bug was found by running the lvm2 testsuite with kasan."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0d2209b54f1de0c2f99cab246d4cf2cfe24aaaa9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/85e123c27d5cbc22cfdc01de1e2ca1d9003a02d0",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/9a02f3275acc628c0d956be771405ced79ac36df",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ae460312875159285cef5bf3dc654593f404a1ef",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ba751f0d25f07aa21ce9b85372a3792bf7969d13",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49711.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49711.json
new file mode 100644
index 00000000000..160a9d24374
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49711.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49711",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:46.893",
+ "lastModified": "2025-02-26T07:01:46.893",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()\n\nIn fsl_mc_bus_remove(), mc->root_mc_bus_dev->mc_io is passed to\nfsl_destroy_mc_io(). However, mc->root_mc_bus_dev is already freed in\nfsl_mc_device_remove(). Then reference to mc->root_mc_bus_dev->mc_io\ntriggers KASAN use-after-free. To avoid the use-after-free, keep the\nreference to mc->root_mc_bus_dev->mc_io in a local variable and pass to\nfsl_destroy_mc_io().\n\nThis patch needs rework to apply to kernels older than v5.15."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/161b68b0a728377aaa10a8e14c70e7734f3c9ff7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/928ea98252ad75118950941683893cf904541da9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ccd1751092341ac120a961835211f9f2e3735963",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49712.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49712.json
new file mode 100644
index 00000000000..2e5f3d9b972
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49712.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49712",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:46.987",
+ "lastModified": "2025-02-26T07:01:46.987",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe\n\nof_parse_phandle() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nAdd missing of_node_put() to avoid refcount leak.\nof_node_put() will check NULL pointer."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0ef6917c0524da5b88496b9706628ffef108b9bb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2a598da14856ead80c726b38ba426c68637d9211",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/46da1e4a8b6329479433b2a4056941dfdd7f3efd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/4757c9ade34178b351580133771f510b5ffcf9c8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/57901c658f77d9ea2e772f35cb38e47efb54c558",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/727c82d003e0ec64411fd1257a9a57de4ad7a99a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b75bddfcc18170ce8e3fb695a76ec2dec4ce0ea5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/d85e4e6284a91aa2d1ab004e9d84b9c09b4aa203",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49713.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49713.json
new file mode 100644
index 00000000000..f2a18e60d15
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49713.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49713",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:47.083",
+ "lastModified": "2025-02-26T07:01:47.083",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc2: Fix memory leak in dwc2_hcd_init\n\nusb_create_hcd will alloc memory for hcd, and we should\ncall usb_put_hcd to free it when platform_get_resource()\nfails to prevent memory leak.\ngoto error2 label instead error1 to fix this."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3755278f078460b021cd0384562977bf2039a57a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/52bfcedbfd5bf962dbdcb6e761f4d0dd3ba26dfd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6506aff2dc2f7059aa3d45ee2e8639b25e87090f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/701d8ec01e0f229d4db6f43d3d64ee479120cbeb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/84e6d0af87e27bbc0db94f2e7323b34abe17b6e5",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/981ee40649e5fd9550f82db1fbb3bfab037da346",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a44a8a762f7fe9ad3c065813d058e835a6180cb2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49714.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49714.json
new file mode 100644
index 00000000000..72f0322d485
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49714.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49714",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:47.170",
+ "lastModified": "2025-02-26T07:01:47.170",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/realtek-rtl: Fix refcount leak in map_interrupts\n\nof_find_node_by_phandle() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nThis function doesn't call of_node_put() in error path.\nCall of_node_put() directly after of_property_read_u32() to cover\nboth normal path and error path."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/e85b1b797de0e7a271b906291ce28245822820b8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eff4780f83d0ae3e5b6c02ff5d999dc4c1c5c8ce",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f6d6223df0666fbc054e3a8c6ac14eb0af37c286",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49715.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49715.json
new file mode 100644
index 00000000000..dead82bdae4
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49715.json
@@ -0,0 +1,41 @@
+{
+ "id": "CVE-2022-49715",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:47.257",
+ "lastModified": "2025-02-26T07:01:47.257",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions\n\nof_find_node_by_phandle() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/506a88a5bf261d76a5214c0338a320f2214c67ac",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8d884c08eeb83142a7173cb46bcff0434ec42cf1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c136c2924a59a399aa789858cfb320d481964fb7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cc5984cf270b69d03f9f4b27063e535036c659e9",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e824482e2c5edacc961b7dd30a92fd47606c3036",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fa1ad9d4cc47ca2470cd904ad4519f05d7e43a2b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49716.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49716.json
new file mode 100644
index 00000000000..4de668984a1
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49716.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49716",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:47.350",
+ "lastModified": "2025-02-26T07:01:47.350",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions\n\nof_get_child_by_name() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nWhen kcalloc fails, it missing of_node_put() and results in refcount\nleak. Fix this by goto out_put_node label."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0b325d993995a321f6ab4e6c51f0504ec092bf5b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/58e67c81e229351027d28c610638378606e33a08",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7c9dd9d23f26dabcfb14148b9acdfba540418b19",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c83c34c57798fc41faefcf078be78683db2f4beb",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ec8401a429ffee34ccf38cebf3443f8d5ae6cb0d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49717.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49717.json
new file mode 100644
index 00000000000..976a3db36ac
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49717.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49717",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:47.440",
+ "lastModified": "2025-02-26T07:01:47.440",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/apple-aic: Fix refcount leak in build_fiq_affinity\n\nof_find_node_by_phandle() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/2dc14cebe5dc053434b507bb24e6821cb795050f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b1ac803f47cb1615468f35cf1ccb553c52087301",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49718.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49718.json
new file mode 100644
index 00000000000..6f13fe369df
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49718.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49718",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:47.527",
+ "lastModified": "2025-02-26T07:01:47.527",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/apple-aic: Fix refcount leak in aic_of_ic_init\n\nof_get_child_by_name() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/3d45670fab3c25a7452721e4588cc95c51cda134",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6c0010d1dc67c89bcc857c46f542efe318f84ddc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49719.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49719.json
new file mode 100644
index 00000000000..0f96c266989
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49719.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49719",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:47.613",
+ "lastModified": "2025-02-26T07:01:47.613",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic/realview: Fix refcount leak in realview_gic_of_init\n\nof_find_matching_node_and_match() returns a node pointer with refcount\nincremented, we should use of_node_put() on it when not need anymore.\nAdd missing of_node_put() to avoid refcount leak."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/16b603cb8d34c2d917983918db1f88c8b831baaa",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/486f68f85085d9b16ae097679b1486dcb1b6eb69",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/56526c3883fc7a1f5898b1d40a02c8b8685a5d92",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5d38720661a4b9c87705c206a6081177ffb8ec1d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/87da903ce632d5689bef66d56ee5dae700d82104",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b634af84bc1edece4e63317b0ad95618dd3a8693",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e52a58b79f11755ea7e877015c4a1704303fa55f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f4b98e314888cc51486421bcf6d52852452ea48b",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49720.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49720.json
new file mode 100644
index 00000000000..b53045a30aa
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49720.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49720",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:47.703",
+ "lastModified": "2025-02-26T07:01:47.703",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: Fix handling of offline queues in blk_mq_alloc_request_hctx()\n\nThis patch prevents that test nvme/004 triggers the following:\n\nUBSAN: array-index-out-of-bounds in block/blk-mq.h:135:9\nindex 512 is out of range for type 'long unsigned int [512]'\nCall Trace:\n show_stack+0x52/0x58\n dump_stack_lvl+0x49/0x5e\n dump_stack+0x10/0x12\n ubsan_epilogue+0x9/0x3b\n __ubsan_handle_out_of_bounds.cold+0x44/0x49\n blk_mq_alloc_request_hctx+0x304/0x310\n __nvme_submit_sync_cmd+0x70/0x200 [nvme_core]\n nvmf_connect_io_queue+0x23e/0x2a0 [nvme_fabrics]\n nvme_loop_connect_io_queues+0x8d/0xb0 [nvme_loop]\n nvme_loop_create_ctrl+0x58e/0x7d0 [nvme_loop]\n nvmf_create_ctrl+0x1d7/0x4d0 [nvme_fabrics]\n nvmf_dev_write+0xae/0x111 [nvme_fabrics]\n vfs_write+0x144/0x560\n ksys_write+0xb7/0x140\n __x64_sys_write+0x42/0x50\n do_syscall_64+0x35/0x80\n entry_SYSCALL_64_after_hwframe+0x44/0xae"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/14dc7a18abbe4176f5626c13c333670da8e06aa1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/7fa28a7c3d74933a4fc22d341b60927952f31c19",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b202a0bd2580ee5b0453772c46d464152fafff73",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b5e65ef044d627effdc2599040b6d204e003f955",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49721.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49721.json
new file mode 100644
index 00000000000..16c638f4386
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49721.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49721",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:47.793",
+ "lastModified": "2025-02-26T07:01:47.793",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: ftrace: consistently handle PLTs.\n\nSometimes it is necessary to use a PLT entry to call an ftrace\ntrampoline. This is handled by ftrace_make_call() and ftrace_make_nop(),\nwith each having *almost* identical logic, but this is not handled by\nftrace_modify_call() since its introduction in commit:\n\n 3b23e4991fb66f6d (\"arm64: implement ftrace with regs\")\n\nDue to this, if we ever were to call ftrace_modify_call() for a callsite\nwhich requires a PLT entry for a trampoline, then either:\n\na) If the old addr requires a trampoline, ftrace_modify_call() will use\n an out-of-range address to generate the 'old' branch instruction.\n This will result in warnings from aarch64_insn_gen_branch_imm() and\n ftrace_modify_code(), and no instructions will be modified. As\n ftrace_modify_call() will return an error, this will result in\n subsequent internal ftrace errors.\n\nb) If the old addr does not require a trampoline, but the new addr does,\n ftrace_modify_call() will use an out-of-range address to generate the\n 'new' branch instruction. This will result in warnings from\n aarch64_insn_gen_branch_imm(), and ftrace_modify_code() will replace\n the 'old' branch with a BRK. This will result in a kernel panic when\n this BRK is later executed.\n\nPractically speaking, case (a) is vastly more likely than case (b), and\ntypically this will result in internal ftrace errors that don't\nnecessarily affect the rest of the system. This can be demonstrated with\nan out-of-tree test module which triggers ftrace_modify_call(), e.g.\n\n| # insmod test_ftrace.ko\n| test_ftrace: Function test_function raw=0xffffb3749399201c, callsite=0xffffb37493992024\n| branch_imm_common: offset out of range\n| branch_imm_common: offset out of range\n| ------------[ ftrace bug ]------------\n| ftrace failed to modify\n| [] test_function+0x8/0x38 [test_ftrace]\n| actual: 1d:00:00:94\n| Updating ftrace call site to call a different ftrace function\n| ftrace record flags: e0000002\n| (2) R\n| expected tramp: ffffb374ae42ed54\n| ------------[ cut here ]------------\n| WARNING: CPU: 0 PID: 165 at kernel/trace/ftrace.c:2085 ftrace_bug+0x280/0x2b0\n| Modules linked in: test_ftrace(+)\n| CPU: 0 PID: 165 Comm: insmod Not tainted 5.19.0-rc2-00002-g4d9ead8b45ce #13\n| Hardware name: linux,dummy-virt (DT)\n| pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n| pc : ftrace_bug+0x280/0x2b0\n| lr : ftrace_bug+0x280/0x2b0\n| sp : ffff80000839ba00\n| x29: ffff80000839ba00 x28: 0000000000000000 x27: ffff80000839bcf0\n| x26: ffffb37493994180 x25: ffffb374b0991c28 x24: ffffb374b0d70000\n| x23: 00000000ffffffea x22: ffffb374afcc33b0 x21: ffffb374b08f9cc8\n| x20: ffff572b8462c000 x19: ffffb374b08f9000 x18: ffffffffffffffff\n| x17: 6c6c6163202c6331 x16: ffffb374ae5ad110 x15: ffffb374b0d51ee4\n| x14: 0000000000000000 x13: 3435646532346561 x12: 3437336266666666\n| x11: 203a706d61727420 x10: 6465746365707865 x9 : ffffb374ae5149e8\n| x8 : 336266666666203a x7 : 706d617274206465 x6 : 00000000fffff167\n| x5 : ffff572bffbc4a08 x4 : 00000000fffff167 x3 : 0000000000000000\n| x2 : 0000000000000000 x1 : ffff572b84461e00 x0 : 0000000000000022\n| Call trace:\n| ftrace_bug+0x280/0x2b0\n| ftrace_replace_code+0x98/0xa0\n| ftrace_modify_all_code+0xe0/0x144\n| arch_ftrace_update_code+0x14/0x20\n| ftrace_startup+0xf8/0x1b0\n| register_ftrace_function+0x38/0x90\n| test_ftrace_init+0xd0/0x1000 [test_ftrace]\n| do_one_initcall+0x50/0x2b0\n| do_init_module+0x50/0x1f0\n| load_module+0x17c8/0x1d64\n| __do_sys_finit_module+0xa8/0x100\n| __arm64_sys_finit_module+0x2c/0x3c\n| invoke_syscall+0x50/0x120\n| el0_svc_common.constprop.0+0xdc/0x100\n| do_el0_svc+0x3c/0xd0\n| el0_svc+0x34/0xb0\n| el0t_64_sync_handler+0xbc/0x140\n| el0t_64_sync+0x18c/0x190\n| ---[ end trace 0000000000000000 ]---\n\nWe can solve this by consistently determining whether to use a PLT entry\nfor an address.\n\nNote that since (the earlier) commit:\n\n f1a54ae9\n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/a6253579977e4c6f7818eeb05bf2bc65678a7187",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bc28fde90937a920f7714ec4408269cac744f796",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/db73aa9466338ec821ed2a0b01721fe4d06876b1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/dcecc96ed16f73417de5550f384e348c9d56f279",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49722.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49722.json
new file mode 100644
index 00000000000..1b710747d27
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49722.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49722",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:47.887",
+ "lastModified": "2025-02-26T07:01:47.887",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Fix memory corruption in VF driver\n\nDisable VF's RX/TX queues, when it's disabled. VF can have queues enabled,\nwhen it requests a reset. If PF driver assumes that VF is disabled,\nwhile VF still has queues configured, VF may unmap DMA resources.\nIn such scenario device still can map packets to memory, which ends up\nsilently corrupting it.\nPreviously, VF driver could experience memory corruption, which lead to\ncrash:\n[ 5119.170157] BUG: unable to handle kernel paging request at 00001b9780003237\n[ 5119.170166] PGD 0 P4D 0\n[ 5119.170173] Oops: 0002 [#1] PREEMPT_RT SMP PTI\n[ 5119.170181] CPU: 30 PID: 427592 Comm: kworker/u96:2 Kdump: loaded Tainted: G W I --------- - - 4.18.0-372.9.1.rt7.166.el8.x86_64 #1\n[ 5119.170189] Hardware name: Dell Inc. PowerEdge R740/014X06, BIOS 2.3.10 08/15/2019\n[ 5119.170193] Workqueue: iavf iavf_adminq_task [iavf]\n[ 5119.170219] RIP: 0010:__page_frag_cache_drain+0x5/0x30\n[ 5119.170238] Code: 0f 0f b6 77 51 85 f6 74 07 31 d2 e9 05 df ff ff e9 90 fe ff ff 48 8b 05 49 db 33 01 eb b4 0f 1f 80 00 00 00 00 0f 1f 44 00 00 29 77 34 74 01 c3 48 8b 07 f6 c4 80 74 0f 0f b6 77 51 85 f6 74\n[ 5119.170244] RSP: 0018:ffffa43b0bdcfd78 EFLAGS: 00010282\n[ 5119.170250] RAX: ffffffff896b3e40 RBX: ffff8fb282524000 RCX: 0000000000000002\n[ 5119.170254] RDX: 0000000049000000 RSI: 0000000000000000 RDI: 00001b9780003203\n[ 5119.170259] RBP: ffff8fb248217b00 R08: 0000000000000022 R09: 0000000000000009\n[ 5119.170262] R10: 2b849d6300000000 R11: 0000000000000020 R12: 0000000000000000\n[ 5119.170265] R13: 0000000000001000 R14: 0000000000000009 R15: 0000000000000000\n[ 5119.170269] FS: 0000000000000000(0000) GS:ffff8fb1201c0000(0000) knlGS:0000000000000000\n[ 5119.170274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 5119.170279] CR2: 00001b9780003237 CR3: 00000008f3e1a003 CR4: 00000000007726e0\n[ 5119.170283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 5119.170286] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 5119.170290] PKRU: 55555554\n[ 5119.170292] Call Trace:\n[ 5119.170298] iavf_clean_rx_ring+0xad/0x110 [iavf]\n[ 5119.170324] iavf_free_rx_resources+0xe/0x50 [iavf]\n[ 5119.170342] iavf_free_all_rx_resources.part.51+0x30/0x40 [iavf]\n[ 5119.170358] iavf_virtchnl_completion+0xd8a/0x15b0 [iavf]\n[ 5119.170377] ? iavf_clean_arq_element+0x210/0x280 [iavf]\n[ 5119.170397] iavf_adminq_task+0x126/0x2e0 [iavf]\n[ 5119.170416] process_one_work+0x18f/0x420\n[ 5119.170429] worker_thread+0x30/0x370\n[ 5119.170437] ? process_one_work+0x420/0x420\n[ 5119.170445] kthread+0x151/0x170\n[ 5119.170452] ? set_kthread_struct+0x40/0x40\n[ 5119.170460] ret_from_fork+0x35/0x40\n[ 5119.170477] Modules linked in: iavf sctp ip6_udp_tunnel udp_tunnel mlx4_en mlx4_core nfp tls vhost_net vhost vhost_iotlb tap tun xt_CHECKSUM ipt_MASQUERADE xt_conntrack ipt_REJECT nf_reject_ipv4 nft_compat nft_counter nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables nfnetlink bridge stp llc rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs lockd grace fscache sunrpc intel_rapl_msr iTCO_wdt iTCO_vendor_support dell_smbios wmi_bmof dell_wmi_descriptor dcdbas kvm_intel kvm irqbypass intel_rapl_common isst_if_common skx_edac irdma nfit libnvdimm x86_pkg_temp_thermal i40e intel_powerclamp coretemp crct10dif_pclmul crc32_pclmul ghash_clmulni_intel ib_uverbs rapl ipmi_ssif intel_cstate intel_uncore mei_me pcspkr acpi_ipmi ib_core mei lpc_ich i2c_i801 ipmi_si ipmi_devintf wmi ipmi_msghandler acpi_power_meter xfs libcrc32c sd_mod t10_pi sg mgag200 drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops ice ahci drm libahci crc32c_intel libata tg3 megaraid_sas\n[ 5119.170613] i2c_algo_bit dm_mirror dm_region_hash dm_log dm_mod fuse [last unloaded: iavf]\n[ 5119.170627] CR2: 00001b9780003237"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/1bb8253b1dd44cf004e12c333acc6f25ee286cf3",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/efe41860008e57fb6b69855b4b93fdf34bc42798",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49723.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49723.json
new file mode 100644
index 00000000000..d7f9198af74
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49723.json
@@ -0,0 +1,33 @@
+{
+ "id": "CVE-2022-49723",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:47.980",
+ "lastModified": "2025-02-26T07:01:47.980",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/reset: Fix error_state_read ptr + offset use\n\nFix our pointer offset usage in error_state_read\nwhen there is no i915_gpu_coredump but buf offset\nis non-zero.\n\nThis fixes a kernel page fault can happen when\nmultiple tests are running concurrently in a loop\nand one is producing engine resets and consuming\nthe i915 error_state dump while the other is\nforcing full GT resets. (takes a while to trigger).\n\nThe dmesg call trace:\n\n[ 5590.803000] BUG: unable to handle page fault for address:\n ffffffffa0b0e000\n[ 5590.803009] #PF: supervisor read access in kernel mode\n[ 5590.803013] #PF: error_code(0x0000) - not-present page\n[ 5590.803016] PGD 5814067 P4D 5814067 PUD 5815063 PMD 109de4067\n PTE 0\n[ 5590.803022] Oops: 0000 [#1] PREEMPT SMP NOPTI\n[ 5590.803026] CPU: 5 PID: 13656 Comm: i915_hangman Tainted: G U\n 5.17.0-rc5-ups69-guc-err-capt-rev6+ #136\n[ 5590.803033] Hardware name: Intel Corporation Alder Lake Client\n Platform/AlderLake-M LP4x RVP, BIOS ADLPFWI1.R00.\n 3031.A02.2201171222\t01/17/2022\n[ 5590.803039] RIP: 0010:memcpy_erms+0x6/0x10\n[ 5590.803045] Code: fe ff ff cc eb 1e 0f 1f 00 48 89 f8 48 89 d1\n 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3\n 66 0f 1f 44 00 00 48 89 f8 48 89 d1 a4\n c3 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20\n 72 7e 40 38 fe\n[ 5590.803054] RSP: 0018:ffffc90003a8fdf0 EFLAGS: 00010282\n[ 5590.803057] RAX: ffff888107ee9000 RBX: ffff888108cb1a00\n RCX: 0000000000000f8f\n[ 5590.803061] RDX: 0000000000001000 RSI: ffffffffa0b0e000\n RDI: ffff888107ee9071\n[ 5590.803065] RBP: 0000000000000000 R08: 0000000000000001\n R09: 0000000000000001\n[ 5590.803069] R10: 0000000000000001 R11: 0000000000000002\n R12: 0000000000000019\n[ 5590.803073] R13: 0000000000174fff R14: 0000000000001000\n R15: ffff888107ee9000\n[ 5590.803077] FS: 00007f62a99bee80(0000) GS:ffff88849f880000(0000)\n knlGS:0000000000000000\n[ 5590.803082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 5590.803085] CR2: ffffffffa0b0e000 CR3: 000000010a1a8004\n CR4: 0000000000770ee0\n[ 5590.803089] PKRU: 55555554\n[ 5590.803091] Call Trace:\n[ 5590.803093] \n[ 5590.803096] error_state_read+0xa1/0xd0 [i915]\n[ 5590.803175] kernfs_fop_read_iter+0xb2/0x1b0\n[ 5590.803180] new_sync_read+0x116/0x1a0\n[ 5590.803185] vfs_read+0x114/0x1b0\n[ 5590.803189] ksys_read+0x63/0xe0\n[ 5590.803193] do_syscall_64+0x38/0xc0\n[ 5590.803197] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[ 5590.803201] RIP: 0033:0x7f62aaea5912\n[ 5590.803204] Code: c0 e9 b2 fe ff ff 50 48 8d 3d 5a b9 0c 00 e8 05\n 19 02 00 0f 1f 44 00 00 f3 0f 1e fa 64 8b 04 25\n 18 00 00 00 85 c0 75 10 0f 05 <48> 3d 00 f0 ff\n ff 77 56 c3 0f 1f 44 00 00 48 83 ec 28 48 89 54 24\n[ 5590.803213] RSP: 002b:00007fff5b659ae8 EFLAGS: 00000246\n ORIG_RAX: 0000000000000000\n[ 5590.803218] RAX: ffffffffffffffda RBX: 0000000000100000\n RCX: 00007f62aaea5912\n[ 5590.803221] RDX: 000000000008b000 RSI: 00007f62a8c4000f\n RDI: 0000000000000006\n[ 5590.803225] RBP: 00007f62a8bcb00f R08: 0000000000200010\n R09: 0000000000101000\n[ 5590.803229] R10: 0000000000000001 R11: 0000000000000246\n R12: 0000000000000006\n[ 5590.803233] R13: 0000000000075000 R14: 00007f62a8acb010\n R15: 0000000000200000\n[ 5590.803238] \n[ 5590.803240] Modules linked in: i915 ttm drm_buddy drm_dp_helper\n drm_kms_helper syscopyarea sysfillrect sysimgblt\n fb_sys_fops prime_numbers nfnetlink br_netfilter\n overlay mei_pxp mei_hdcp x86_pkg_temp_thermal\n coretemp kvm_intel snd_hda_codec_hdmi snd_hda_intel\n \n---truncated---"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/606e5d565605e26bf61a0933a6d56940f339c080",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/63b26fe0252f923e6aca373e3ad4b31202dcd331",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c9b576d0c7bf55aeae1a736da7974fa202c4394d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f4c5eba87675a07a6c28cdaca7366aeb4258ec78",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49724.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49724.json
new file mode 100644
index 00000000000..3d1b9078b7b
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49724.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49724",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:48.073",
+ "lastModified": "2025-02-26T07:01:48.073",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: goldfish: Fix free_irq() on remove\n\nPass the correct dev_id to free_irq() to fix this splat when the driver\nis unbound:\n\n WARNING: CPU: 0 PID: 30 at kernel/irq/manage.c:1895 free_irq\n Trying to free already-free IRQ 65\n Call Trace:\n warn_slowpath_fmt\n free_irq\n goldfish_tty_remove\n platform_remove\n device_remove\n device_release_driver_internal\n device_driver_detach\n unbind_store\n drv_attr_store\n ..."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/499e13aac6c762e1e828172b0f0f5275651d6512",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/65ca4db68b6819244df9024aea4be55edf8af1ef",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a6fcd7ffd76a9c1d998a2d02d518c78a55c5bed8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c4b0b8edccb0cfb15a8cecf4161e0571d3daac64",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/c83a1d40dc624070a203eb383ef9fb60eb634136",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f7183c76d500324b8b5bd0af5e663cfa57b7b836",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fb15e79cacddfbc62264e6e807bde50ad688e988",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49725.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49725.json
new file mode 100644
index 00000000000..c75faa1a5d4
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49725.json
@@ -0,0 +1,45 @@
+{
+ "id": "CVE-2022-49725",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:48.167",
+ "lastModified": "2025-02-26T07:01:48.167",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: Fix call trace in setup_tx_descriptors\n\nAfter PF reset and ethtool -t there was call trace in dmesg\nsometimes leading to panic. When there was some time, around 5\nseconds, between reset and test there were no errors.\n\nProblem was that pf reset calls i40e_vsi_close in prep_for_reset\nand ethtool -t calls i40e_vsi_close in diag_test. If there was not\nenough time between those commands the second i40e_vsi_close starts\nbefore previous i40e_vsi_close was done which leads to crash.\n\nAdd check to diag_test if pf is in reset and don't start offline\ntests if it is true.\nAdd netif_info(\"testing failed\") into unhappy path of i40e_diag_test()"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0a4e5a3dc5e41212870e6043895ae02455c93f63",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/15950157e2c24865b696db1c9ccc72743ae0e967",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/322271351b0e41565171e4cce70ea41854fac115",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/5ba9956ca57e361fb13ea369bb753eb33177acc7",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/814092927a215f5ca6c08249ec72a205e0b473cd",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/fd5855e6b1358e816710afee68a1d2bc685176ca",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ff6e03fe84bc917bb0c907d02de668c2fe101712",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49726.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49726.json
new file mode 100644
index 00000000000..6c50e2d5980
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49726.json
@@ -0,0 +1,37 @@
+{
+ "id": "CVE-2022-49726",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:48.257",
+ "lastModified": "2025-02-26T07:01:48.257",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclocksource: hyper-v: unexport __init-annotated hv_init_clocksource()\n\nEXPORT_SYMBOL and __init is a bad combination because the .init.text\nsection is freed up after the initialization. Hence, modules cannot\nuse symbols annotated __init. The access to a freed symbol may end up\nwith kernel panic.\n\nmodpost used to detect it, but it has been broken for a decade.\n\nRecently, I fixed modpost so it started to warn it again, then this\nshowed up in linux-next builds.\n\nThere are two ways to fix it:\n\n - Remove __init\n - Remove EXPORT_SYMBOL\n\nI chose the latter for this case because the only in-tree call-site,\narch/x86/kernel/cpu/mshyperv.c is never compiled as modular.\n(CONFIG_HYPERVISOR_GUEST is boolean)"
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0414eab7c78f3518143d383e448d44fc573ac6d2",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/245b993d8f6c4e25f19191edfbd8080b645e12b1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/937fcbb55a1e48a6422e87e8f49422c92265f102",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/cff3a7ce6e81418b6e8bac941779bbf5d342d626",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/db965e2757d95f695e606856418cd84003dd036d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49727.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49727.json
new file mode 100644
index 00000000000..e365fcc18b0
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49727.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49727",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:48.347",
+ "lastModified": "2025-02-26T07:01:48.347",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: Fix signed integer overflow in l2tp_ip6_sendmsg\n\nWhen len >= INT_MAX - transhdrlen, ulen = len + transhdrlen will be\noverflow. To fix, we can follow what udpv6 does and subtract the\ntranshdrlen from the max."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/034246122f5c5e2e2a0b9fe04e24517920e9beb1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/0e818d433fc2718fe4da044ffca7431812a7e04e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/27a37755ceb401111ded76810359d3adc4b268a1",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2cf73c7cb6125083408d77f43d0e84d86aed0000",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/2f42389d270f2304c8855b0b63498a5a4d0c053d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6c4e3486d21173d60925ef52e512cae727b43d30",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b8879ca1fd7348b4d5db7db86dcb97f60c73d751",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f638a84afef3dfe10554c51820c16e39a278c915",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49728.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49728.json
new file mode 100644
index 00000000000..b1c68dc6485
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49728.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2022-49728",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:48.433",
+ "lastModified": "2025-02-26T07:01:48.433",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: Fix signed integer overflow in __ip6_append_data\n\nResurrect ubsan overflow checks and ubsan report this warning,\nfix it by change the variable [length] type to size_t.\n\nUBSAN: signed-integer-overflow in net/ipv6/ip6_output.c:1489:19\n2147479552 + 8567 cannot be represented in type 'int'\nCPU: 0 PID: 253 Comm: err Not tainted 5.16.0+ #1\nHardware name: linux,dummy-virt (DT)\nCall trace:\n dump_backtrace+0x214/0x230\n show_stack+0x30/0x78\n dump_stack_lvl+0xf8/0x118\n dump_stack+0x18/0x30\n ubsan_epilogue+0x18/0x60\n handle_overflow+0xd0/0xf0\n __ubsan_handle_add_overflow+0x34/0x44\n __ip6_append_data.isra.48+0x1598/0x1688\n ip6_append_data+0x128/0x260\n udpv6_sendmsg+0x680/0xdd0\n inet6_sendmsg+0x54/0x90\n sock_sendmsg+0x70/0x88\n ____sys_sendmsg+0xe8/0x368\n ___sys_sendmsg+0x98/0xe0\n __sys_sendmmsg+0xf4/0x3b8\n __arm64_sys_sendmmsg+0x34/0x48\n invoke_syscall+0x64/0x160\n el0_svc_common.constprop.4+0x124/0x300\n do_el0_svc+0x44/0xc8\n el0_svc+0x3c/0x1e8\n el0t_64_sync_handler+0x88/0xb0\n el0t_64_sync+0x16c/0x170\n\nChanges since v1:\n-Change the variable [length] type to unsigned, as Eric Dumazet suggested.\nChanges since v2:\n-Don't change exthdrlen type in ip6_make_skb, as Paolo Abeni suggested.\nChanges since v3:\n-Don't change ulen type in udpv6_sendmsg and l2tp_ip6_sendmsg, as\nJakub Kicinski suggested."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/84dc940890e91e42898e4443a093281702440abf",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f93431c86b631bbca5614c66f966bf3ddb3c2803",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49729.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49729.json
new file mode 100644
index 00000000000..37309e3fcc8
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49729.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49729",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:48.523",
+ "lastModified": "2025-02-26T07:01:48.523",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred\n\nSimilar to the handling of play_deferred in commit 19cfe912c37b\n(\"Bluetooth: btusb: Fix memory leak in play_deferred\"), we thought\na patch might be needed here as well.\n\nCurrently usb_submit_urb is called directly to submit deferred tx\nurbs after unanchor them.\n\nSo the usb_giveback_urb_bh would failed to unref it in usb_unanchor_urb\nand cause memory leak.\n\nPut those urbs in tx_anchor to avoid the leak, and also fix the error\nhandling."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/0eeec1a8b0cd38c47edeb042980a6aeacecf35ed",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1eb0afecfb9cd0f38424b82bd9aaa542310934ee",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3e7c7df6991ac349f2fa8540047757df666e610f",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/3eadc560c1919b8193d17334145dad9a917960e4",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6616872cfe7f0474a22dd1f12699f95bcf81a54d",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/6b4d8b44e7163a77fe942f5b80e1651c1b78c537",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/8a4d480702b71184fabcf379b80bf7539716752e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/f21f908347712b8288ffe83b531b5e977042b29c",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49730.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49730.json
new file mode 100644
index 00000000000..6de283402f7
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49730.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49730",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:48.620",
+ "lastModified": "2025-02-26T07:01:48.620",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted\n\nA use-after-free crash can occur after an ELS LOGO is aborted.\n\nSpecifically, a nodelist structure is freed and then\nndlp->vport->cfg_log_verbose is dereferenced in lpfc_nlp_get() when the\ndiscovery state machine is mistakenly called a second time with\nNLP_EVT_DEVICE_RM argument.\n\nRework lpfc_cmpl_els_logo() to prevent the duplicate calls to release a\nnodelist structure."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/5e83869e29448958f8ae2c6911f350318f75e4fc",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/b1b3440f437b75fb2a9b0cfe58df461e40eca474",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/eea34ce23dc3a595695856dc73bb132a9c5a2902",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49731.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49731.json
new file mode 100644
index 00000000000..4b35786193b
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49731.json
@@ -0,0 +1,49 @@
+{
+ "id": "CVE-2022-49731",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T07:01:48.710",
+ "lastModified": "2025-02-26T07:01:48.710",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()\n\nIn an unlikely (and probably wrong?) case that the 'ppi' parameter of\nata_host_alloc_pinfo() points to an array starting with a NULL pointer,\nthere's going to be a kernel oops as the 'pi' local variable won't get\nreassigned from the initial value of NULL. Initialize 'pi' instead to\n'&ata_dummy_port_info' to fix the possible kernel oops for good...\n\nFound by Linux Verification Center (linuxtesting.org) with the SVACE static\nanalysis tool."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/07cbdb4807d369fbda73062a91b570c4dc5ec429",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/1ac5efee33f29e704226506d429b84575a5d66f8",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/253334f84c81bc6a43af489f108c0bddad989eef",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/36cd19e7d4e5571d77a2ed20c5b6ef50cf57734a",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/a810bd5af06977a847d1f202b22d7defd5c62497",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/bf476fe22aa1851bab4728e0c49025a6a0bea307",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ca4693e6e06e4fd2b240c0fec47aa2498c94848e",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/ff128fbea720bf763fa345680dda5f050bc24a47",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2022/CVE-2022-497xx/CVE-2022-49732.json b/CVE-2022/CVE-2022-497xx/CVE-2022-49732.json
new file mode 100644
index 00000000000..94a975f733c
--- /dev/null
+++ b/CVE-2022/CVE-2022-497xx/CVE-2022-49732.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2022-49732",
+ "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+ "published": "2025-02-26T15:15:17.843",
+ "lastModified": "2025-02-26T15:15:17.843",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsock: redo the psock vs ULP protection check\n\nCommit 8a59f9d1e3d4 (\"sock: Introduce sk->sk_prot->psock_update_sk_prot()\")\nhas moved the inet_csk_has_ulp(sk) check from sk_psock_init() to\nthe new tcp_bpf_update_proto() function. I'm guessing that this\nwas done to allow creating psocks for non-inet sockets.\n\nUnfortunately the destruction path for psock includes the ULP\nunwind, so we need to fail the sk_psock_init() itself.\nOtherwise if ULP is already present we'll notice that later,\nand call tcp_update_ulp() with the sk_proto of the ULP\nitself, which will most likely result in the ULP looping\nits callbacks."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://git.kernel.org/stable/c/72fa0f65b56605b8a9ae9fba2082f2123f7fe017",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/922309e50befb0cfa5cb65e4989b7706d6578846",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ },
+ {
+ "url": "https://git.kernel.org/stable/c/e34a07c0ae3906f97eb18df50902e2a01c1015b6",
+ "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-01xx/CVE-2023-0145.json b/CVE-2023/CVE-2023-01xx/CVE-2023-0145.json
index f85057bdef7..72553f294ca 100644
--- a/CVE-2023/CVE-2023-01xx/CVE-2023-0145.json
+++ b/CVE-2023/CVE-2023-01xx/CVE-2023-0145.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-0145",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-03-20T16:15:11.607",
- "lastModified": "2024-11-21T07:36:38.450",
+ "lastModified": "2025-02-26T15:15:17.957",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -35,6 +35,18 @@
}
]
},
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
"configurations": [
{
"nodes": [
diff --git a/CVE-2023/CVE-2023-03xx/CVE-2023-0364.json b/CVE-2023/CVE-2023-03xx/CVE-2023-0364.json
index 69a7fb40e94..3f22e390db5 100644
--- a/CVE-2023/CVE-2023-03xx/CVE-2023-0364.json
+++ b/CVE-2023/CVE-2023-03xx/CVE-2023-0364.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-0364",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-03-20T16:15:12.073",
- "lastModified": "2024-11-21T07:37:03.220",
+ "lastModified": "2025-02-26T15:15:18.123",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -35,6 +35,18 @@
}
]
},
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
"configurations": [
{
"nodes": [
diff --git a/CVE-2023/CVE-2023-03xx/CVE-2023-0365.json b/CVE-2023/CVE-2023-03xx/CVE-2023-0365.json
index aaf948b61c4..80599aeafa7 100644
--- a/CVE-2023/CVE-2023-03xx/CVE-2023-0365.json
+++ b/CVE-2023/CVE-2023-03xx/CVE-2023-0365.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-0365",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-03-20T16:15:12.153",
- "lastModified": "2024-11-21T07:37:03.330",
+ "lastModified": "2025-02-26T15:15:18.370",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -35,6 +35,18 @@
}
]
},
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
"configurations": [
{
"nodes": [
diff --git a/CVE-2023/CVE-2023-03xx/CVE-2023-0369.json b/CVE-2023/CVE-2023-03xx/CVE-2023-0369.json
index 1cd248d1564..43c0c45f6dc 100644
--- a/CVE-2023/CVE-2023-03xx/CVE-2023-0369.json
+++ b/CVE-2023/CVE-2023-03xx/CVE-2023-0369.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-0369",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-03-20T16:15:12.223",
- "lastModified": "2024-11-21T07:37:03.757",
+ "lastModified": "2025-02-26T15:15:18.493",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -35,6 +35,18 @@
}
]
},
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
"configurations": [
{
"nodes": [
diff --git a/CVE-2023/CVE-2023-03xx/CVE-2023-0386.json b/CVE-2023/CVE-2023-03xx/CVE-2023-0386.json
index 8ba3d6616d4..46ade0bb1d8 100644
--- a/CVE-2023/CVE-2023-03xx/CVE-2023-0386.json
+++ b/CVE-2023/CVE-2023-03xx/CVE-2023-0386.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-0386",
"sourceIdentifier": "secalert@redhat.com",
"published": "2023-03-22T21:15:18.090",
- "lastModified": "2024-11-21T07:37:05.620",
+ "lastModified": "2025-02-26T16:15:12.543",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,13 +32,33 @@
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "secalert@redhat.com",
- "type": "Secondary",
+ "type": "Primary",
"description": [
{
"lang": "en",
@@ -48,13 +68,23 @@
},
{
"source": "nvd@nist.gov",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-282"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-03xx/CVE-2023-0391.json b/CVE-2023/CVE-2023-03xx/CVE-2023-0391.json
index 9d0d3e47064..79956e9095b 100644
--- a/CVE-2023/CVE-2023-03xx/CVE-2023-0391.json
+++ b/CVE-2023/CVE-2023-03xx/CVE-2023-0391.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-0391",
"sourceIdentifier": "cve@rapid7.com",
"published": "2023-03-21T20:15:11.683",
- "lastModified": "2024-11-21T07:37:06.020",
+ "lastModified": "2025-02-26T17:15:14.073",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 8.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "HIGH",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.2,
+ "impactScore": 5.9
}
]
},
diff --git a/CVE-2023/CVE-2023-06xx/CVE-2023-0630.json b/CVE-2023/CVE-2023-06xx/CVE-2023-0630.json
index 85b43a54b57..c6e0b54542b 100644
--- a/CVE-2023/CVE-2023-06xx/CVE-2023-0630.json
+++ b/CVE-2023/CVE-2023-06xx/CVE-2023-0630.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-0630",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-03-20T16:15:12.367",
- "lastModified": "2024-11-21T07:37:31.013",
+ "lastModified": "2025-02-26T15:15:18.617",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -35,6 +35,18 @@
}
]
},
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
+ }
+ ],
"configurations": [
{
"nodes": [
diff --git a/CVE-2023/CVE-2023-06xx/CVE-2023-0631.json b/CVE-2023/CVE-2023-06xx/CVE-2023-0631.json
index ced51fa9250..610dfc4ef54 100644
--- a/CVE-2023/CVE-2023-06xx/CVE-2023-0631.json
+++ b/CVE-2023/CVE-2023-06xx/CVE-2023-0631.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-0631",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-03-20T16:15:12.437",
- "lastModified": "2024-11-21T07:37:31.107",
+ "lastModified": "2025-02-26T15:15:18.757",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -35,6 +35,18 @@
}
]
},
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
+ }
+ ],
"configurations": [
{
"nodes": [
diff --git a/CVE-2023/CVE-2023-08xx/CVE-2023-0865.json b/CVE-2023/CVE-2023-08xx/CVE-2023-0865.json
index 92d030561f7..20905d3b29b 100644
--- a/CVE-2023/CVE-2023-08xx/CVE-2023-0865.json
+++ b/CVE-2023/CVE-2023-08xx/CVE-2023-0865.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-0865",
"sourceIdentifier": "contact@wpscan.com",
"published": "2023-03-20T16:15:12.507",
- "lastModified": "2024-11-21T07:37:59.923",
+ "lastModified": "2025-02-26T15:15:18.883",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -35,6 +35,18 @@
}
]
},
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-639"
+ }
+ ]
+ }
+ ],
"configurations": [
{
"nodes": [
diff --git a/CVE-2023/CVE-2023-11xx/CVE-2023-1152.json b/CVE-2023/CVE-2023-11xx/CVE-2023-1152.json
index 02e73188319..3278a79baf7 100644
--- a/CVE-2023/CVE-2023-11xx/CVE-2023-1152.json
+++ b/CVE-2023/CVE-2023-11xx/CVE-2023-1152.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-1152",
"sourceIdentifier": "iletisim@usom.gov.tr",
"published": "2023-03-17T09:15:12.533",
- "lastModified": "2024-11-21T07:38:33.700",
+ "lastModified": "2025-02-26T17:15:14.377",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -52,13 +52,33 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "iletisim@usom.gov.tr",
- "type": "Secondary",
+ "type": "Primary",
"description": [
{
"lang": "en",
@@ -68,6 +88,16 @@
},
{
"source": "nvd@nist.gov",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Primary",
"description": [
{
diff --git a/CVE-2023/CVE-2023-11xx/CVE-2023-1168.json b/CVE-2023/CVE-2023-11xx/CVE-2023-1168.json
index 500245aeb46..d19a74cec8d 100644
--- a/CVE-2023/CVE-2023-11xx/CVE-2023-1168.json
+++ b/CVE-2023/CVE-2023-11xx/CVE-2023-1168.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-1168",
"sourceIdentifier": "security-alert@hpe.com",
"published": "2023-03-22T06:15:09.390",
- "lastModified": "2024-11-21T07:38:35.753",
+ "lastModified": "2025-02-26T17:15:14.790",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -65,6 +65,16 @@
"value": "NVD-CWE-noinfo"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-77"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-13xx/CVE-2023-1305.json b/CVE-2023/CVE-2023-13xx/CVE-2023-1305.json
index 7d3826f1b2b..39346dbfa75 100644
--- a/CVE-2023/CVE-2023-13xx/CVE-2023-1305.json
+++ b/CVE-2023/CVE-2023-13xx/CVE-2023-1305.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-1305",
"sourceIdentifier": "cve@rapid7.com",
"published": "2023-03-21T17:15:11.727",
- "lastModified": "2024-11-21T07:38:53.127",
+ "lastModified": "2025-02-26T17:15:15.230",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.2
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
+ "baseScore": 8.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 5.2
}
]
},
diff --git a/CVE-2023/CVE-2023-13xx/CVE-2023-1306.json b/CVE-2023/CVE-2023-13xx/CVE-2023-1306.json
index b73ddfa6a2b..dfbff5c41c3 100644
--- a/CVE-2023/CVE-2023-13xx/CVE-2023-1306.json
+++ b/CVE-2023/CVE-2023-13xx/CVE-2023-1306.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-1306",
"sourceIdentifier": "cve@rapid7.com",
"published": "2023-03-21T17:15:11.797",
- "lastModified": "2024-11-21T07:38:53.273",
+ "lastModified": "2025-02-26T17:15:15.517",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 8.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 5.9
}
]
},
diff --git a/CVE-2023/CVE-2023-14xx/CVE-2023-1466.json b/CVE-2023/CVE-2023-14xx/CVE-2023-1466.json
index 3fdd431bb71..a3375896b6b 100644
--- a/CVE-2023/CVE-2023-14xx/CVE-2023-1466.json
+++ b/CVE-2023/CVE-2023-14xx/CVE-2023-1466.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-1466",
"sourceIdentifier": "cna@vuldb.com",
"published": "2023-03-17T12:15:12.067",
- "lastModified": "2024-11-21T07:39:14.883",
+ "lastModified": "2025-02-26T18:15:11.973",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -15,7 +15,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Secondary",
+ "type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -35,7 +35,7 @@
},
{
"source": "nvd@nist.gov",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
@@ -83,7 +83,17 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
"description": [
{
"lang": "en",
diff --git a/CVE-2023/CVE-2023-247xx/CVE-2023-24795.json b/CVE-2023/CVE-2023-247xx/CVE-2023-24795.json
index 4ec676e6aec..fe004668cb4 100644
--- a/CVE-2023/CVE-2023-247xx/CVE-2023-24795.json
+++ b/CVE-2023/CVE-2023-247xx/CVE-2023-24795.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-24795",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-16T02:15:08.447",
- "lastModified": "2024-11-21T07:48:24.910",
+ "lastModified": "2025-02-26T17:15:18.970",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -45,6 +45,16 @@
"value": "NVD-CWE-noinfo"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-94"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-267xx/CVE-2023-26768.json b/CVE-2023/CVE-2023-267xx/CVE-2023-26768.json
index 87c3877beae..522e5ba8a72 100644
--- a/CVE-2023/CVE-2023-267xx/CVE-2023-26768.json
+++ b/CVE-2023/CVE-2023-267xx/CVE-2023-26768.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-26768",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-16T15:15:10.290",
- "lastModified": "2024-11-21T07:51:54.700",
+ "lastModified": "2025-02-26T16:15:12.880",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.6
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-120"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-120"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-270xx/CVE-2023-27054.json b/CVE-2023/CVE-2023-270xx/CVE-2023-27054.json
index f585b0fa32a..5b5b8973a75 100644
--- a/CVE-2023/CVE-2023-270xx/CVE-2023-27054.json
+++ b/CVE-2023/CVE-2023-270xx/CVE-2023-27054.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-27054",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-22T22:15:12.490",
- "lastModified": "2024-11-21T07:52:14.120",
+ "lastModified": "2025-02-26T16:15:13.097",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-79"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-270xx/CVE-2023-27060.json b/CVE-2023/CVE-2023-270xx/CVE-2023-27060.json
index 814cce09458..7516f2bdd2f 100644
--- a/CVE-2023/CVE-2023-270xx/CVE-2023-27060.json
+++ b/CVE-2023/CVE-2023-270xx/CVE-2023-27060.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-27060",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-22T22:15:12.547",
- "lastModified": "2024-11-21T07:52:14.553",
+ "lastModified": "2025-02-26T16:15:13.310",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "NVD-CWE-noinfo"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-306"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-270xx/CVE-2023-27094.json b/CVE-2023/CVE-2023-270xx/CVE-2023-27094.json
index b7ee08e3ac7..acf9e72e37d 100644
--- a/CVE-2023/CVE-2023-270xx/CVE-2023-27094.json
+++ b/CVE-2023/CVE-2023-270xx/CVE-2023-27094.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-27094",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-23T17:15:15.817",
- "lastModified": "2024-11-21T07:52:18.833",
+ "lastModified": "2025-02-26T16:15:13.513",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 8.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "NVD-CWE-Other"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-269"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-271xx/CVE-2023-27131.json b/CVE-2023/CVE-2023-271xx/CVE-2023-27131.json
index 7873c917a40..73916c86acb 100644
--- a/CVE-2023/CVE-2023-271xx/CVE-2023-27131.json
+++ b/CVE-2023/CVE-2023-271xx/CVE-2023-27131.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-27131",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-16T15:15:10.500",
- "lastModified": "2024-11-21T07:52:22.527",
+ "lastModified": "2025-02-26T16:15:13.717",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.7,
"impactScore": 2.7
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 4.8,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 1.7,
+ "impactScore": 2.7
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-79"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-275xx/CVE-2023-27570.json b/CVE-2023/CVE-2023-275xx/CVE-2023-27570.json
index 4ddc1ff7f78..a201ce16212 100644
--- a/CVE-2023/CVE-2023-275xx/CVE-2023-27570.json
+++ b/CVE-2023/CVE-2023-275xx/CVE-2023-27570.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-27570",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-21T16:15:13.113",
- "lastModified": "2024-11-21T07:53:10.287",
+ "lastModified": "2025-02-26T18:15:12.583",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -65,6 +65,16 @@
"value": "CWE-89"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-276xx/CVE-2023-27637.json b/CVE-2023/CVE-2023-276xx/CVE-2023-27637.json
index 20d6ba82902..27d976a08c7 100644
--- a/CVE-2023/CVE-2023-276xx/CVE-2023-27637.json
+++ b/CVE-2023/CVE-2023-276xx/CVE-2023-27637.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-27637",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-22T13:15:10.150",
- "lastModified": "2024-11-21T07:53:19.030",
+ "lastModified": "2025-02-26T16:15:13.920",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-89"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-276xx/CVE-2023-27638.json b/CVE-2023/CVE-2023-276xx/CVE-2023-27638.json
index a536da1af53..99f73ac2e3a 100644
--- a/CVE-2023/CVE-2023-276xx/CVE-2023-27638.json
+++ b/CVE-2023/CVE-2023-276xx/CVE-2023-27638.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-27638",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-22T13:15:10.213",
- "lastModified": "2024-11-21T07:53:19.187",
+ "lastModified": "2025-02-26T16:15:14.150",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-89"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-277xx/CVE-2023-27754.json b/CVE-2023/CVE-2023-277xx/CVE-2023-27754.json
index b4ff5014f9d..add134a03d4 100644
--- a/CVE-2023/CVE-2023-277xx/CVE-2023-27754.json
+++ b/CVE-2023/CVE-2023-277xx/CVE-2023-27754.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-27754",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-22T17:15:15.753",
- "lastModified": "2024-11-21T07:53:25.660",
+ "lastModified": "2025-02-26T16:15:14.353",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-787"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-787"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-277xx/CVE-2023-27786.json b/CVE-2023/CVE-2023-277xx/CVE-2023-27786.json
index 1c20d0bd1b4..6d28f403f31 100644
--- a/CVE-2023/CVE-2023-277xx/CVE-2023-27786.json
+++ b/CVE-2023/CVE-2023-277xx/CVE-2023-27786.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-27786",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-16T15:15:10.877",
- "lastModified": "2024-11-21T07:53:29.320",
+ "lastModified": "2025-02-26T17:15:19.787",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.6
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-476"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-476"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-277xx/CVE-2023-27787.json b/CVE-2023/CVE-2023-277xx/CVE-2023-27787.json
index 0edcbaa5664..5cf70a36b79 100644
--- a/CVE-2023/CVE-2023-277xx/CVE-2023-27787.json
+++ b/CVE-2023/CVE-2023-277xx/CVE-2023-27787.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-27787",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-16T15:15:10.940",
- "lastModified": "2024-11-21T07:53:29.473",
+ "lastModified": "2025-02-26T17:15:19.993",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.6
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-476"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-476"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-277xx/CVE-2023-27788.json b/CVE-2023/CVE-2023-277xx/CVE-2023-27788.json
index 3ed311c2f8f..8a3523cc94d 100644
--- a/CVE-2023/CVE-2023-277xx/CVE-2023-27788.json
+++ b/CVE-2023/CVE-2023-277xx/CVE-2023-27788.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-27788",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-16T15:15:11.000",
- "lastModified": "2024-11-21T07:53:29.630",
+ "lastModified": "2025-02-26T17:15:20.173",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.6
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-617"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-617"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-277xx/CVE-2023-27789.json b/CVE-2023/CVE-2023-277xx/CVE-2023-27789.json
index 446a858a85c..e4cfab9708d 100644
--- a/CVE-2023/CVE-2023-277xx/CVE-2023-27789.json
+++ b/CVE-2023/CVE-2023-277xx/CVE-2023-27789.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-27789",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-16T15:15:11.057",
- "lastModified": "2024-11-21T07:53:29.780",
+ "lastModified": "2025-02-26T17:15:20.357",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.6
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-617"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-617"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-278xx/CVE-2023-27842.json b/CVE-2023/CVE-2023-278xx/CVE-2023-27842.json
index 76c0df2168b..5d6645a1477 100644
--- a/CVE-2023/CVE-2023-278xx/CVE-2023-27842.json
+++ b/CVE-2023/CVE-2023-278xx/CVE-2023-27842.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-27842",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-21T15:15:12.413",
- "lastModified": "2024-11-21T07:53:33.280",
+ "lastModified": "2025-02-26T18:15:12.810",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 8.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "NVD-CWE-noinfo"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-277"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-278xx/CVE-2023-27875.json b/CVE-2023/CVE-2023-278xx/CVE-2023-27875.json
index baed47d8d2a..b1085bec1d6 100644
--- a/CVE-2023/CVE-2023-278xx/CVE-2023-27875.json
+++ b/CVE-2023/CVE-2023-278xx/CVE-2023-27875.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-27875",
"sourceIdentifier": "psirt@us.ibm.com",
"published": "2023-03-16T13:15:10.543",
- "lastModified": "2024-11-21T07:53:37.153",
+ "lastModified": "2025-02-26T15:15:19.580",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -65,6 +65,16 @@
"value": "NVD-CWE-Other"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-284"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-286xx/CVE-2023-28610.json b/CVE-2023/CVE-2023-286xx/CVE-2023-28610.json
index 47b1f3d0676..9c156f98836 100644
--- a/CVE-2023/CVE-2023-286xx/CVE-2023-28610.json
+++ b/CVE-2023/CVE-2023-286xx/CVE-2023-28610.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-28610",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-23T16:15:12.083",
- "lastModified": "2024-11-21T07:55:39.907",
+ "lastModified": "2025-02-26T15:15:19.780",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "NVD-CWE-noinfo"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-347"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-286xx/CVE-2023-28685.json b/CVE-2023/CVE-2023-286xx/CVE-2023-28685.json
index 43669e075b9..76919afd4ee 100644
--- a/CVE-2023/CVE-2023-286xx/CVE-2023-28685.json
+++ b/CVE-2023/CVE-2023-286xx/CVE-2023-28685.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-28685",
"sourceIdentifier": "jenkinsci-cert@googlegroups.com",
"published": "2023-03-22T06:15:11.060",
- "lastModified": "2024-11-21T07:55:48.230",
+ "lastModified": "2025-02-26T17:15:20.640",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 4.2
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
+ "baseScore": 7.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 4.2
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-611"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-611"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-287xx/CVE-2023-28725.json b/CVE-2023/CVE-2023-287xx/CVE-2023-28725.json
index aa312b6c606..9eaea7eac9e 100644
--- a/CVE-2023/CVE-2023-287xx/CVE-2023-28725.json
+++ b/CVE-2023/CVE-2023-287xx/CVE-2023-28725.json
@@ -2,7 +2,7 @@
"id": "CVE-2023-28725",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-03-22T00:15:12.907",
- "lastModified": "2024-11-21T07:55:52.713",
+ "lastModified": "2025-02-26T17:15:20.810",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+ "baseScore": 9.1,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.2
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-434"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-434"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-313xx/CVE-2023-31341.json b/CVE-2023/CVE-2023-313xx/CVE-2023-31341.json
index 11e90135529..9c6e859610f 100644
--- a/CVE-2023/CVE-2023-313xx/CVE-2023-31341.json
+++ b/CVE-2023/CVE-2023-313xx/CVE-2023-31341.json
@@ -2,13 +2,13 @@
"id": "CVE-2023-31341",
"sourceIdentifier": "psirt@amd.com",
"published": "2024-08-13T17:15:21.087",
- "lastModified": "2024-12-13T16:22:04.967",
- "vulnStatus": "Analyzed",
+ "lastModified": "2025-02-26T07:14:52.160",
+ "vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
- "value": "Insufficient\nvalidation of the Input Output Control (IOCTL) input buffer in AMD ?Prof may\nallow an authenticated attacker to cause an out-of-bounds write, potentially\ncausing a Windows\u00ae OS crash, resulting in denial of service."
+ "value": "Insufficient\nvalidation of the Input Output Control (IOCTL) input buffer in AMD \u03bcProf may\nallow an authenticated attacker to cause an out-of-bounds write, potentially\ncausing a Windows\u00ae OS crash, resulting in denial of service."
},
{
"lang": "es",
diff --git a/CVE-2023/CVE-2023-381xx/CVE-2023-38180.json b/CVE-2023/CVE-2023-381xx/CVE-2023-38180.json
index e493b70c111..f916d96d0b5 100644
--- a/CVE-2023/CVE-2023-381xx/CVE-2023-38180.json
+++ b/CVE-2023/CVE-2023-381xx/CVE-2023-38180.json
@@ -2,8 +2,8 @@
"id": "CVE-2023-38180",
"sourceIdentifier": "secure@microsoft.com",
"published": "2023-08-08T19:15:10.367",
- "lastModified": "2025-01-23T18:53:11.033",
- "vulnStatus": "Analyzed",
+ "lastModified": "2025-02-26T17:15:21.023",
+ "vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -15,7 +15,7 @@
"cvssMetricV31": [
{
"source": "secure@microsoft.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
@@ -49,6 +49,16 @@
"value": "NVD-CWE-noinfo"
}
]
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-400"
+ }
+ ]
}
],
"configurations": [
diff --git a/CVE-2023/CVE-2023-432xx/CVE-2023-43208.json b/CVE-2023/CVE-2023-432xx/CVE-2023-43208.json
index 80a5b437776..af2ed27a2d7 100644
--- a/CVE-2023/CVE-2023-432xx/CVE-2023-43208.json
+++ b/CVE-2023/CVE-2023-432xx/CVE-2023-43208.json
@@ -2,8 +2,8 @@
"id": "CVE-2023-43208",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-10-26T17:15:09.033",
- "lastModified": "2024-12-20T17:41:47.143",
- "vulnStatus": "Analyzed",
+ "lastModified": "2025-02-26T17:15:21.213",
+ "vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -78,6 +78,10 @@
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
+ {
+ "lang": "en",
+ "value": "CWE-78"
+ },
{
"lang": "en",
"value": "CWE-502"
diff --git a/CVE-2023/CVE-2023-497xx/CVE-2023-49785.json b/CVE-2023/CVE-2023-497xx/CVE-2023-49785.json
index 1c02207c0ba..1120ad5ccdd 100644
--- a/CVE-2023/CVE-2023-497xx/CVE-2023-49785.json
+++ b/CVE-2023/CVE-2023-497xx/CVE-2023-49785.json
@@ -2,8 +2,8 @@
"id": "CVE-2023-49785",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-12T00:15:26.383",
- "lastModified": "2024-11-21T08:33:50.407",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:15:08.143",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
}
]
},
@@ -55,38 +75,83 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:nextchat:nextchat:*:*:*:*:*:*:*:*",
+ "versionEndIncluding": "2.11.2",
+ "matchCriteriaId": "D2A3BB9A-D145-4A6C-8B18-140A2AB74DF5"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Product"
+ ]
},
{
"url": "https://www.horizon3.ai/attack-research/attack-blogs/nextchat-an-ai-chatbot-that-lets-you-talk-to-anyone-you-want-to/",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Exploit"
+ ]
},
{
"url": "https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Product"
+ ]
},
{
"url": "https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web/issues/4283",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit",
+ "Issue Tracking"
+ ]
},
{
"url": "https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web/pull/4285",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit",
+ "Issue Tracking",
+ "Patch"
+ ]
},
{
"url": "https://www.horizon3.ai/attack-research/attack-blogs/nextchat-an-ai-chatbot-that-lets-you-talk-to-anyone-you-want-to/",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit"
+ ]
},
{
"url": "https://www.vicarius.io/vsociety/posts/hacking-ai-chatbots-for-fun-and-learning-analyzing-an-unauthenticated-ssrf-and-reflected-xss-in-chatgpt-next-web-cve-2023-49785",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit"
+ ]
},
{
"url": "https://www.vicarius.io/vsociety/posts/hacking-ai-chatbots-for-fun-and-learning-analyzing-an-unauthenticated-ssrf-and-reflected-xss-in-chatgpt-next-web-cve-2023-49785",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-503xx/CVE-2023-50312.json b/CVE-2023/CVE-2023-503xx/CVE-2023-50312.json
index d41b043bda5..36245373fcc 100644
--- a/CVE-2023/CVE-2023-503xx/CVE-2023-50312.json
+++ b/CVE-2023/CVE-2023-503xx/CVE-2023-50312.json
@@ -2,8 +2,8 @@
"id": "CVE-2023-50312",
"sourceIdentifier": "psirt@us.ibm.com",
"published": "2024-03-01T03:15:06.620",
- "lastModified": "2024-11-21T08:36:50.413",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,55 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*",
+ "versionStartIncluding": "17.0.0.3",
+ "versionEndExcluding": "24.0.0.3",
+ "matchCriteriaId": "4A1C8482-98E0-46DE-B1BB-E185A229C1F2"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/274711",
- "source": "psirt@us.ibm.com"
+ "source": "psirt@us.ibm.com",
+ "tags": [
+ "VDB Entry",
+ "Vendor Advisory"
+ ]
},
{
"url": "https://www.ibm.com/support/pages/node/7125527",
- "source": "psirt@us.ibm.com"
+ "source": "psirt@us.ibm.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/274711",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "VDB Entry",
+ "Vendor Advisory"
+ ]
},
{
"url": "https://www.ibm.com/support/pages/node/7125527",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-60xx/CVE-2023-6090.json b/CVE-2023/CVE-2023-60xx/CVE-2023-6090.json
index fbdf18c375d..690bbb62615 100644
--- a/CVE-2023/CVE-2023-60xx/CVE-2023-6090.json
+++ b/CVE-2023/CVE-2023-60xx/CVE-2023-6090.json
@@ -2,8 +2,8 @@
"id": "CVE-2023-6090",
"sourceIdentifier": "audit@patchstack.com",
"published": "2024-02-29T06:15:46.237",
- "lastModified": "2024-11-21T08:43:06.953",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.3,
"impactScore": 6.0
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.2,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.2,
+ "impactScore": 5.9
}
]
},
@@ -51,14 +71,38 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:mollie:mollie_payments_for_woocommerce:*:*:*:*:*:wordpress:*:*",
+ "versionEndExcluding": "7.3.12",
+ "matchCriteriaId": "FA975723-B58F-48D4-9769-FE388F596ACE"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/mollie-payments-for-woocommerce/wordpress-mollie-payments-for-woocommerce-plugin-7-3-11-arbitrary-file-upload-vulnerability?_s_id=cve",
- "source": "audit@patchstack.com"
+ "source": "audit@patchstack.com",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://patchstack.com/database/vulnerability/mollie-payments-for-woocommerce/wordpress-mollie-payments-for-woocommerce-plugin-7-3-11-arbitrary-file-upload-vulnerability?_s_id=cve",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2023/CVE-2023-70xx/CVE-2023-7081.json b/CVE-2023/CVE-2023-70xx/CVE-2023-7081.json
index 4a30e474f64..1156f31ed87 100644
--- a/CVE-2023/CVE-2023-70xx/CVE-2023-7081.json
+++ b/CVE-2023/CVE-2023-70xx/CVE-2023-7081.json
@@ -2,13 +2,13 @@
"id": "CVE-2023-7081",
"sourceIdentifier": "iletisim@usom.gov.tr",
"published": "2024-02-15T16:15:46.373",
- "lastModified": "2025-01-23T16:53:04.707",
- "vulnStatus": "Analyzed",
+ "lastModified": "2025-02-26T07:32:59.377",
+ "vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
- "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSTAHS?L Online Payment System allows SQL Injection.This issue affects Online Payment System: before 14.02.2024.\n\n"
+ "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSTAHS\u0130L Online Payment System allows SQL Injection.This issue affects Online Payment System: before 14.02.2024.\n\n"
},
{
"lang": "es",
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "iletisim@usom.gov.tr",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
@@ -42,7 +42,7 @@
"weaknesses": [
{
"source": "iletisim@usom.gov.tr",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
diff --git a/CVE-2024/CVE-2024-101xx/CVE-2024-10152.json b/CVE-2024/CVE-2024-101xx/CVE-2024-10152.json
new file mode 100644
index 00000000000..bf27557f434
--- /dev/null
+++ b/CVE-2024/CVE-2024-101xx/CVE-2024-10152.json
@@ -0,0 +1,44 @@
+{
+ "id": "CVE-2024-10152",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:34.840",
+ "lastModified": "2025-02-26T17:15:21.417",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The Simple Certain Time to Show Content WordPress plugin before 1.3.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+ "baseScore": 7.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.7
+ }
+ ]
+ },
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/b4d17da2-4c47-4fd1-a6bd-6692b07cf710/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-104xx/CVE-2024-10483.json b/CVE-2024/CVE-2024-104xx/CVE-2024-10483.json
new file mode 100644
index 00000000000..51ecf61c443
--- /dev/null
+++ b/CVE-2024/CVE-2024-104xx/CVE-2024-10483.json
@@ -0,0 +1,44 @@
+{
+ "id": "CVE-2024-10483",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:35.213",
+ "lastModified": "2025-02-26T17:15:21.570",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The Simple:Press Forum WordPress plugin before 6.10.11 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+ "baseScore": 7.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.7
+ }
+ ]
+ },
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/c7e3c473-09b2-473b-87d7-0a01d8f52086/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-105xx/CVE-2024-10563.json b/CVE-2024/CVE-2024-105xx/CVE-2024-10563.json
new file mode 100644
index 00000000000..2ea19f6a061
--- /dev/null
+++ b/CVE-2024/CVE-2024-105xx/CVE-2024-10563.json
@@ -0,0 +1,44 @@
+{
+ "id": "CVE-2024-10563",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:35.443",
+ "lastModified": "2025-02-26T15:15:20.480",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The WooCommerce Cart Count Shortcode WordPress plugin before 1.1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 5.4,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.3,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/08ed69f6-9c9b-4548-9dbb-05b602530ef7/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-105xx/CVE-2024-10585.json b/CVE-2024/CVE-2024-105xx/CVE-2024-10585.json
index 1323a1756ff..104054c3f47 100644
--- a/CVE-2024/CVE-2024-105xx/CVE-2024-10585.json
+++ b/CVE-2024/CVE-2024-105xx/CVE-2024-10585.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-10585",
"sourceIdentifier": "security@wordfence.com",
"published": "2025-01-08T06:15:15.677",
- "lastModified": "2025-01-08T06:15:15.677",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T18:25:29.120",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,18 +51,45 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:revmakx:infinitewp_client:*:*:*:*:*:wordpress:*:*",
+ "versionEndExcluding": "1.13.1",
+ "matchCriteriaId": "AEEAC584-8E8B-4079-9D2F-665772572F05"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://plugins.svn.wordpress.org/iwp-client/tags/1.13.0/debug-chart/index.php",
- "source": "security@wordfence.com"
+ "source": "security@wordfence.com",
+ "tags": [
+ "Product"
+ ]
},
{
"url": "https://plugins.trac.wordpress.org/changeset/3202851/iwp-client/trunk/debug-chart/index.php",
- "source": "security@wordfence.com"
+ "source": "security@wordfence.com",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4d2518f6-3647-4bee-a98c-ce7f30375a62?source=cve",
- "source": "security@wordfence.com"
+ "source": "security@wordfence.com",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-120xx/CVE-2024-12084.json b/CVE-2024/CVE-2024-120xx/CVE-2024-12084.json
index a7084cfabf8..e1aac13795c 100644
--- a/CVE-2024/CVE-2024-120xx/CVE-2024-12084.json
+++ b/CVE-2024/CVE-2024-120xx/CVE-2024-12084.json
@@ -2,7 +2,7 @@
"id": "CVE-2024-12084",
"sourceIdentifier": "secalert@redhat.com",
"published": "2025-01-15T15:15:10.537",
- "lastModified": "2025-01-15T15:15:10.537",
+ "lastModified": "2025-02-26T14:15:10.473",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "secalert@redhat.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
@@ -42,7 +42,7 @@
"weaknesses": [
{
"source": "secalert@redhat.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -67,6 +67,10 @@
{
"url": "http://www.openwall.com/lists/oss-security/2025/01/14/6",
"source": "af854a3a-2127-422b-91ae-364da2661108"
+ },
+ {
+ "url": "https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-120xx/CVE-2024-12085.json b/CVE-2024/CVE-2024-120xx/CVE-2024-12085.json
index 1924ff3aa22..55f79235f07 100644
--- a/CVE-2024/CVE-2024-120xx/CVE-2024-12085.json
+++ b/CVE-2024/CVE-2024-120xx/CVE-2024-12085.json
@@ -2,7 +2,7 @@
"id": "CVE-2024-12085",
"sourceIdentifier": "secalert@redhat.com",
"published": "2025-01-14T18:15:25.123",
- "lastModified": "2025-02-20T00:15:19.130",
+ "lastModified": "2025-02-26T15:15:20.790",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -135,6 +135,10 @@
{
"url": "https://kb.cert.org/vuls/id/952657",
"source": "secalert@redhat.com"
+ },
+ {
+ "url": "https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-120xx/CVE-2024-12086.json b/CVE-2024/CVE-2024-120xx/CVE-2024-12086.json
index 6f58971cb68..092dc457c26 100644
--- a/CVE-2024/CVE-2024-120xx/CVE-2024-12086.json
+++ b/CVE-2024/CVE-2024-120xx/CVE-2024-12086.json
@@ -2,7 +2,7 @@
"id": "CVE-2024-12086",
"sourceIdentifier": "secalert@redhat.com",
"published": "2025-01-14T18:15:25.297",
- "lastModified": "2025-01-14T22:15:26.370",
+ "lastModified": "2025-02-26T15:15:21.020",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -63,6 +63,10 @@
{
"url": "https://kb.cert.org/vuls/id/952657",
"source": "secalert@redhat.com"
+ },
+ {
+ "url": "https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-120xx/CVE-2024-12087.json b/CVE-2024/CVE-2024-120xx/CVE-2024-12087.json
index f9891d19957..dab7e703db1 100644
--- a/CVE-2024/CVE-2024-120xx/CVE-2024-12087.json
+++ b/CVE-2024/CVE-2024-120xx/CVE-2024-12087.json
@@ -2,7 +2,7 @@
"id": "CVE-2024-12087",
"sourceIdentifier": "secalert@redhat.com",
"published": "2025-01-14T18:15:25.467",
- "lastModified": "2025-01-14T22:15:26.503",
+ "lastModified": "2025-02-26T15:15:21.137",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -63,6 +63,10 @@
{
"url": "https://kb.cert.org/vuls/id/952657",
"source": "secalert@redhat.com"
+ },
+ {
+ "url": "https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-120xx/CVE-2024-12088.json b/CVE-2024/CVE-2024-120xx/CVE-2024-12088.json
index 916b25b3702..aafb310c076 100644
--- a/CVE-2024/CVE-2024-120xx/CVE-2024-12088.json
+++ b/CVE-2024/CVE-2024-120xx/CVE-2024-12088.json
@@ -2,7 +2,7 @@
"id": "CVE-2024-12088",
"sourceIdentifier": "secalert@redhat.com",
"published": "2025-01-14T18:15:25.643",
- "lastModified": "2025-02-10T12:15:28.537",
+ "lastModified": "2025-02-26T15:15:22.257",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -63,6 +63,10 @@
{
"url": "https://kb.cert.org/vuls/id/952657",
"source": "secalert@redhat.com"
+ },
+ {
+ "url": "https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-124xx/CVE-2024-12434.json b/CVE-2024/CVE-2024-124xx/CVE-2024-12434.json
new file mode 100644
index 00000000000..77e711ce028
--- /dev/null
+++ b/CVE-2024/CVE-2024-124xx/CVE-2024-12434.json
@@ -0,0 +1,60 @@
+{
+ "id": "CVE-2024-12434",
+ "sourceIdentifier": "security@wordfence.com",
+ "published": "2025-02-26T13:15:36.353",
+ "lastModified": "2025-02-26T13:15:36.353",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The SureMembers plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.10.6 via the REST API. This makes it possible for unauthenticated attackers to extract sensitive data including restricted content."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "security@wordfence.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+ "baseScore": 5.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 1.4
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "security@wordfence.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-200"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://suremembers.com/whats-new/",
+ "source": "security@wordfence.com"
+ },
+ {
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f33e0019-e52e-464b-843d-a034e5205b2e?source=cve",
+ "source": "security@wordfence.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-127xx/CVE-2024-12737.json b/CVE-2024/CVE-2024-127xx/CVE-2024-12737.json
new file mode 100644
index 00000000000..853f148de3b
--- /dev/null
+++ b/CVE-2024/CVE-2024-127xx/CVE-2024-12737.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2024-12737",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:36.513",
+ "lastModified": "2025-02-26T15:15:22.363",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The WP BASE Booking of Appointments, Services and Events WordPress plugin before 5.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/997eb9f6-80e1-4bc5-be72-bd6a6f52379c/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-127xx/CVE-2024-12782.json b/CVE-2024/CVE-2024-127xx/CVE-2024-12782.json
index 8152c54fa48..4b5e59ab960 100644
--- a/CVE-2024/CVE-2024-127xx/CVE-2024-12782.json
+++ b/CVE-2024/CVE-2024-127xx/CVE-2024-12782.json
@@ -2,7 +2,7 @@
"id": "CVE-2024-12782",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-12-19T13:15:05.900",
- "lastModified": "2024-12-27T08:15:04.917",
+ "lastModified": "2025-02-26T16:15:14.653",
"vulnStatus": "Awaiting Analysis",
"cveTags": [
{
@@ -15,7 +15,7 @@
"descriptions": [
{
"lang": "en",
- "value": "A vulnerability has been found in Fujifilm Apeos C3070, Apeos C5570 and Apeos C6580 up to 24.8.28 and classified as critical. This vulnerability affects unknown code of the file /home/index.html#hashHome of the component Web Interface. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains that the reported behaviors are intended or not reproduced."
+ "value": "A vulnerability has been found in Fujifilm Apeos C3070, Apeos C5570 and Apeos C6580 up to 24.8.28 and classified as critical. This vulnerability affects unknown code of the file /home/index.html#hashHome of the component Web Interface. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains that \"during technical verification it is not possible to reproduce any active actions like reboots which were mentioned in the original researcher disclosure.\""
},
{
"lang": "es",
@@ -37,30 +37,30 @@
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
- "vulnerableSystemConfidentiality": "LOW",
- "vulnerableSystemIntegrity": "LOW",
- "vulnerableSystemAvailability": "LOW",
- "subsequentSystemConfidentiality": "NONE",
- "subsequentSystemIntegrity": "NONE",
- "subsequentSystemAvailability": "NONE",
+ "vulnConfidentialityImpact": "LOW",
+ "vulnIntegrityImpact": "LOW",
+ "vulnAvailabilityImpact": "LOW",
+ "subConfidentialityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
- "confidentialityRequirements": "NOT_DEFINED",
- "integrityRequirements": "NOT_DEFINED",
- "availabilityRequirements": "NOT_DEFINED",
+ "confidentialityRequirement": "NOT_DEFINED",
+ "integrityRequirement": "NOT_DEFINED",
+ "availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
- "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED",
- "modifiedVulnerableSystemIntegrity": "NOT_DEFINED",
- "modifiedVulnerableSystemAvailability": "NOT_DEFINED",
- "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED",
- "modifiedSubsequentSystemIntegrity": "NOT_DEFINED",
- "modifiedSubsequentSystemAvailability": "NOT_DEFINED",
- "safety": "NOT_DEFINED",
- "automatable": "NOT_DEFINED",
- "recovery": "NOT_DEFINED",
+ "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
+ "modifiedVulnIntegrityImpact": "NOT_DEFINED",
+ "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
+ "modifiedSubConfidentialityImpact": "NOT_DEFINED",
+ "modifiedSubIntegrityImpact": "NOT_DEFINED",
+ "modifiedSubAvailabilityImpact": "NOT_DEFINED",
+ "Safety": "NOT_DEFINED",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
@@ -132,10 +132,6 @@
}
],
"references": [
- {
- "url": "https://github.com/dycccccccc/Fuji/blob/main/Fujifilm%20Business%20Innovation.docx",
- "source": "cna@vuldb.com"
- },
{
"url": "https://vuldb.com/?ctiid.288958",
"source": "cna@vuldb.com"
diff --git a/CVE-2024/CVE-2024-128xx/CVE-2024-12878.json b/CVE-2024/CVE-2024-128xx/CVE-2024-12878.json
new file mode 100644
index 00000000000..fa2ce302e1a
--- /dev/null
+++ b/CVE-2024/CVE-2024-128xx/CVE-2024-12878.json
@@ -0,0 +1,44 @@
+{
+ "id": "CVE-2024-12878",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:36.610",
+ "lastModified": "2025-02-26T16:15:14.863",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The Custom Block Builder WordPress plugin before 3.8.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+ "baseScore": 7.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.7
+ }
+ ]
+ },
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/827444d1-87cb-4057-827a-d802eac82cf8/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-131xx/CVE-2024-13113.json b/CVE-2024/CVE-2024-131xx/CVE-2024-13113.json
new file mode 100644
index 00000000000..a8b5b873810
--- /dev/null
+++ b/CVE-2024/CVE-2024-131xx/CVE-2024-13113.json
@@ -0,0 +1,44 @@
+{
+ "id": "CVE-2024-13113",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:36.710",
+ "lastModified": "2025-02-26T16:15:15.020",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The Countdown Timer for Elementor WordPress plugin before 1.3.7 does not sanitise and escape some parameters when outputting them on the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
+ "baseScore": 5.9,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 1.7,
+ "impactScore": 3.7
+ }
+ ]
+ },
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/ffc31d9d-d245-4c4b-992d-394a01798117/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-133xx/CVE-2024-13339.json b/CVE-2024/CVE-2024-133xx/CVE-2024-13339.json
index 0e992336101..c666862ae89 100644
--- a/CVE-2024/CVE-2024-133xx/CVE-2024-13339.json
+++ b/CVE-2024/CVE-2024-133xx/CVE-2024-13339.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-13339",
"sourceIdentifier": "security@wordfence.com",
"published": "2025-02-19T09:15:09.240",
- "lastModified": "2025-02-19T09:15:09.240",
- "vulnStatus": "Received",
+ "lastModified": "2025-02-26T13:16:56.970",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "security@wordfence.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
+ "baseScore": 5.4,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.5
}
]
},
@@ -51,14 +71,38 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:debounce:email_validator:*:*:*:*:*:wordpress:*:*",
+ "versionEndIncluding": "5.6.6",
+ "matchCriteriaId": "B4F10E4C-4E9C-4417-AAAF-21EFB3CD8D09"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://wordpress.org/plugins/debounce-io-email-validator/",
- "source": "security@wordfence.com"
+ "source": "security@wordfence.com",
+ "tags": [
+ "Product"
+ ]
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/9121ab04-d16b-468b-880f-8f00bcec6489?source=cve",
- "source": "security@wordfence.com"
+ "source": "security@wordfence.com",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-133xx/CVE-2024-13363.json b/CVE-2024/CVE-2024-133xx/CVE-2024-13363.json
index 29df9ef27af..ebbe41b727a 100644
--- a/CVE-2024/CVE-2024-133xx/CVE-2024-13363.json
+++ b/CVE-2024/CVE-2024-133xx/CVE-2024-13363.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-13363",
"sourceIdentifier": "security@wordfence.com",
"published": "2025-02-19T09:15:09.390",
- "lastModified": "2025-02-19T09:15:09.390",
- "vulnStatus": "Received",
+ "lastModified": "2025-02-26T13:16:56.970",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,18 +51,45 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:raptive:raptive_ads:*:*:*:*:*:wordpress:*:*",
+ "versionEndIncluding": "3.6.3",
+ "matchCriteriaId": "076B202E-819E-40F9-A274-13CFDAAF54A5"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/adthrive-ads/trunk/components/static-files/partials/eyereturn",
- "source": "security@wordfence.com"
+ "source": "security@wordfence.com",
+ "tags": [
+ "Product"
+ ]
},
{
"url": "https://plugins.trac.wordpress.org/browser/adthrive-ads/trunk/components/static-files/partials/eyereturn/eyereturn.html",
- "source": "security@wordfence.com"
+ "source": "security@wordfence.com",
+ "tags": [
+ "Product"
+ ]
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f3d535b3-ad52-4322-988e-7d560dbfe3a3?source=cve",
- "source": "security@wordfence.com"
+ "source": "security@wordfence.com",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-135xx/CVE-2024-13560.json b/CVE-2024/CVE-2024-135xx/CVE-2024-13560.json
new file mode 100644
index 00000000000..6af60bc57e8
--- /dev/null
+++ b/CVE-2024/CVE-2024-135xx/CVE-2024-13560.json
@@ -0,0 +1,64 @@
+{
+ "id": "CVE-2024-13560",
+ "sourceIdentifier": "security@wordfence.com",
+ "published": "2025-02-26T13:15:36.800",
+ "lastModified": "2025-02-26T13:15:36.800",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The Subscriptions & Memberships for PayPal plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to delete arbitrary posts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "security@wordfence.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
+ "baseScore": 4.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 1.4
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "security@wordfence.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-352"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://plugins.trac.wordpress.org/changeset/3246039/subscriptions-memberships-for-paypal",
+ "source": "security@wordfence.com"
+ },
+ {
+ "url": "https://wordpress.org/plugins/subscriptions-memberships-for-paypal/#developers",
+ "source": "security@wordfence.com"
+ },
+ {
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2bed7fc8-a961-4141-80a1-9c23a6504fbd?source=cve",
+ "source": "security@wordfence.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-135xx/CVE-2024-13571.json b/CVE-2024/CVE-2024-135xx/CVE-2024-13571.json
new file mode 100644
index 00000000000..506c0c3b011
--- /dev/null
+++ b/CVE-2024/CVE-2024-135xx/CVE-2024-13571.json
@@ -0,0 +1,44 @@
+{
+ "id": "CVE-2024-13571",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:36.957",
+ "lastModified": "2025-02-26T16:15:15.210",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The Post Timeline WordPress plugin before 2.3.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+ "baseScore": 7.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.7
+ }
+ ]
+ },
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/ad6ad44d-fdc3-494c-a371-5d7959d1fd23/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-136xx/CVE-2024-13624.json b/CVE-2024/CVE-2024-136xx/CVE-2024-13624.json
new file mode 100644
index 00000000000..f88d9cbb807
--- /dev/null
+++ b/CVE-2024/CVE-2024-136xx/CVE-2024-13624.json
@@ -0,0 +1,44 @@
+{
+ "id": "CVE-2024-13624",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:37.053",
+ "lastModified": "2025-02-26T16:15:15.353",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The WPMovieLibrary WordPress plugin through 2.1.4.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+ "baseScore": 7.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.7
+ }
+ ]
+ },
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/c19b56cc-634f-420f-b6a0-9a10ad159049/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-136xx/CVE-2024-13628.json b/CVE-2024/CVE-2024-136xx/CVE-2024-13628.json
new file mode 100644
index 00000000000..809525bfddc
--- /dev/null
+++ b/CVE-2024/CVE-2024-136xx/CVE-2024-13628.json
@@ -0,0 +1,44 @@
+{
+ "id": "CVE-2024-13628",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:37.147",
+ "lastModified": "2025-02-26T15:15:22.510",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The WP Pricing Table WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/34d6c8a2-e70d-485c-a217-4a569c16b079/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-136xx/CVE-2024-13629.json b/CVE-2024/CVE-2024-136xx/CVE-2024-13629.json
new file mode 100644
index 00000000000..34d2426c1ca
--- /dev/null
+++ b/CVE-2024/CVE-2024-136xx/CVE-2024-13629.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2024-13629",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:37.247",
+ "lastModified": "2025-02-26T15:15:22.643",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The pushBIZ WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/5ffb548c-14f1-499d-8bbf-6ecc632cbb8c/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-136xx/CVE-2024-13630.json b/CVE-2024/CVE-2024-136xx/CVE-2024-13630.json
new file mode 100644
index 00000000000..d6572f5f1e3
--- /dev/null
+++ b/CVE-2024/CVE-2024-136xx/CVE-2024-13630.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2024-13630",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:37.343",
+ "lastModified": "2025-02-26T15:15:22.787",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The NewsTicker WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/15eed487-01ac-4c1e-88f8-26cfa036fb54/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-136xx/CVE-2024-13631.json b/CVE-2024/CVE-2024-136xx/CVE-2024-13631.json
new file mode 100644
index 00000000000..e194b48b6f5
--- /dev/null
+++ b/CVE-2024/CVE-2024-136xx/CVE-2024-13631.json
@@ -0,0 +1,44 @@
+{
+ "id": "CVE-2024-13631",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:37.447",
+ "lastModified": "2025-02-26T16:15:15.487",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The Om Stripe WordPress plugin through 02.00.00 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+ "baseScore": 7.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.7
+ }
+ ]
+ },
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/c991fdd0-cb9d-43ea-bafa-df3b2e806013/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-136xx/CVE-2024-13632.json b/CVE-2024/CVE-2024-136xx/CVE-2024-13632.json
new file mode 100644
index 00000000000..47c34829f32
--- /dev/null
+++ b/CVE-2024/CVE-2024-136xx/CVE-2024-13632.json
@@ -0,0 +1,44 @@
+{
+ "id": "CVE-2024-13632",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:37.540",
+ "lastModified": "2025-02-26T16:15:15.640",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The WP Extra Fields WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+ "baseScore": 7.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.7
+ }
+ ]
+ },
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/85c5b465-afce-4c68-b5e3-214ec4b5c9f2/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-136xx/CVE-2024-13633.json b/CVE-2024/CVE-2024-136xx/CVE-2024-13633.json
new file mode 100644
index 00000000000..52f69a845ee
--- /dev/null
+++ b/CVE-2024/CVE-2024-136xx/CVE-2024-13633.json
@@ -0,0 +1,44 @@
+{
+ "id": "CVE-2024-13633",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:37.640",
+ "lastModified": "2025-02-26T15:15:22.940",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The Simple catalogue WordPress plugin through 1.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+ "baseScore": 7.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.7
+ }
+ ]
+ },
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/4291d5eb-c006-42b0-accf-90f09f26b6a0/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-136xx/CVE-2024-13634.json b/CVE-2024/CVE-2024-136xx/CVE-2024-13634.json
new file mode 100644
index 00000000000..a7b619f98a6
--- /dev/null
+++ b/CVE-2024/CVE-2024-136xx/CVE-2024-13634.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2024-13634",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:37.730",
+ "lastModified": "2025-02-26T15:15:23.103",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The Post Sync WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/0e60bf74-19fb-441c-85a8-005def36af9a/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-136xx/CVE-2024-13669.json b/CVE-2024/CVE-2024-136xx/CVE-2024-13669.json
new file mode 100644
index 00000000000..65bfc7448e9
--- /dev/null
+++ b/CVE-2024/CVE-2024-136xx/CVE-2024-13669.json
@@ -0,0 +1,44 @@
+{
+ "id": "CVE-2024-13669",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:37.833",
+ "lastModified": "2025-02-26T15:15:23.263",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The CalendApp WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/71e69cf2-7d41-479c-9721-662b57571c90/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-136xx/CVE-2024-13678.json b/CVE-2024/CVE-2024-136xx/CVE-2024-13678.json
new file mode 100644
index 00000000000..1b5be4f991e
--- /dev/null
+++ b/CVE-2024/CVE-2024-136xx/CVE-2024-13678.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2024-13678",
+ "sourceIdentifier": "contact@wpscan.com",
+ "published": "2025-02-26T13:15:37.927",
+ "lastModified": "2025-02-26T15:15:23.433",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The R3W InstaFeed WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://wpscan.com/vulnerability/ba759796-a152-4f13-a474-f0368b4bc1f6/",
+ "source": "contact@wpscan.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-138xx/CVE-2024-13803.json b/CVE-2024/CVE-2024-138xx/CVE-2024-13803.json
new file mode 100644
index 00000000000..d9546601114
--- /dev/null
+++ b/CVE-2024/CVE-2024-138xx/CVE-2024-13803.json
@@ -0,0 +1,64 @@
+{
+ "id": "CVE-2024-13803",
+ "sourceIdentifier": "security@wordfence.com",
+ "published": "2025-02-26T13:15:38.027",
+ "lastModified": "2025-02-26T13:15:38.027",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The Essential Blocks \u2013 Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018data-marker\u2019 parameter in all versions up to, and including, 5.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "security@wordfence.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
+ "baseScore": 6.4,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 3.1,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "security@wordfence.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "http://localhost:1337/wp-content/plugins/essential-blocks/assets/admin/editor/editor.js",
+ "source": "security@wordfence.com"
+ },
+ {
+ "url": "https://plugins.trac.wordpress.org/changeset/3242493/",
+ "source": "security@wordfence.com"
+ },
+ {
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/efdeca40-e021-478f-af75-c5566ae70735?source=cve",
+ "source": "security@wordfence.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-13xx/CVE-2024-1301.json b/CVE-2024/CVE-2024-13xx/CVE-2024-1301.json
index ed43c21fbb6..83e146486c2 100644
--- a/CVE-2024/CVE-2024-13xx/CVE-2024-1301.json
+++ b/CVE-2024/CVE-2024-13xx/CVE-2024-1301.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-1301",
"sourceIdentifier": "cve-coordination@incibe.es",
"published": "2024-03-12T16:15:07.187",
- "lastModified": "2024-11-21T08:50:16.340",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:15:08.143",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.6
}
]
},
@@ -51,14 +71,38 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:badgermeter:monitool:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "4.7",
+ "matchCriteriaId": "C0AEE8BF-3432-443A-82D6-F12989019A86"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool",
- "source": "cve-coordination@incibe.es"
+ "source": "cve-coordination@incibe.es",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-13xx/CVE-2024-1302.json b/CVE-2024/CVE-2024-13xx/CVE-2024-1302.json
index d921cfdaf56..f6e11d2c0f9 100644
--- a/CVE-2024/CVE-2024-13xx/CVE-2024-1302.json
+++ b/CVE-2024/CVE-2024-13xx/CVE-2024-1302.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-1302",
"sourceIdentifier": "cve-coordination@incibe.es",
"published": "2024-03-12T16:15:07.397",
- "lastModified": "2024-11-21T08:50:16.467",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:15:08.143",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.1,
"impactScore": 5.2
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+ "baseScore": 5.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 3.6
}
]
},
@@ -49,16 +69,50 @@
"value": "CWE-200"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:badgermeter:monitool:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "4.7",
+ "matchCriteriaId": "C0AEE8BF-3432-443A-82D6-F12989019A86"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool",
- "source": "cve-coordination@incibe.es"
+ "source": "cve-coordination@incibe.es",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-13xx/CVE-2024-1303.json b/CVE-2024/CVE-2024-13xx/CVE-2024-1303.json
index 614d9185398..281fbe3f883 100644
--- a/CVE-2024/CVE-2024-13xx/CVE-2024-1303.json
+++ b/CVE-2024/CVE-2024-13xx/CVE-2024-1303.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-1303",
"sourceIdentifier": "cve-coordination@incibe.es",
"published": "2024-03-12T16:15:07.590",
- "lastModified": "2024-11-21T08:50:16.593",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:15:08.143",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,38 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:badgermeter:monitool:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "4.7",
+ "matchCriteriaId": "C0AEE8BF-3432-443A-82D6-F12989019A86"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool",
- "source": "cve-coordination@incibe.es"
+ "source": "cve-coordination@incibe.es",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-13xx/CVE-2024-1304.json b/CVE-2024/CVE-2024-13xx/CVE-2024-1304.json
index 8bfb9285042..363da429372 100644
--- a/CVE-2024/CVE-2024-13xx/CVE-2024-1304.json
+++ b/CVE-2024/CVE-2024-13xx/CVE-2024-1304.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-1304",
"sourceIdentifier": "cve-coordination@incibe.es",
"published": "2024-03-12T16:15:07.793",
- "lastModified": "2024-11-21T08:50:16.717",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:15:08.143",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
}
]
},
@@ -51,14 +71,38 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:badgermeter:monitool:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "4.7",
+ "matchCriteriaId": "C0AEE8BF-3432-443A-82D6-F12989019A86"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool",
- "source": "cve-coordination@incibe.es"
+ "source": "cve-coordination@incibe.es",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-14xx/CVE-2024-1434.json b/CVE-2024/CVE-2024-14xx/CVE-2024-1434.json
index ecde9bfb720..cb7b11fcf55 100644
--- a/CVE-2024/CVE-2024-14xx/CVE-2024-1434.json
+++ b/CVE-2024/CVE-2024-14xx/CVE-2024-1434.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-1434",
"sourceIdentifier": "audit@patchstack.com",
"published": "2024-02-29T06:15:46.417",
- "lastModified": "2024-11-21T08:50:34.710",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.7,
"impactScore": 3.7
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 4.8,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 1.7,
+ "impactScore": 2.7
}
]
},
@@ -51,14 +71,37 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:jordymeow:media_file_renamer:0.0.1:*:*:*:*:wordpress:*:*",
+ "matchCriteriaId": "AC7F4A5D-4845-4330-9D72-6A450AAEDE0B"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://patchstack.com/database/vulnerability/media-alt-renamer/wordpress-media-alt-renamer-plugin-0-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
- "source": "audit@patchstack.com"
+ "source": "audit@patchstack.com",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://patchstack.com/database/vulnerability/media-alt-renamer/wordpress-media-alt-renamer-plugin-0-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-15xx/CVE-2024-1527.json b/CVE-2024/CVE-2024-15xx/CVE-2024-1527.json
index 6a0f4ee9ae6..87dd708f68f 100644
--- a/CVE-2024/CVE-2024-15xx/CVE-2024-1527.json
+++ b/CVE-2024/CVE-2024-15xx/CVE-2024-1527.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-1527",
"sourceIdentifier": "cve-coordination@incibe.es",
"published": "2024-03-12T16:15:07.990",
- "lastModified": "2024-11-21T08:50:45.593",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:15:08.143",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 8.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 5.9
}
]
},
@@ -51,14 +71,37 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.14:*:*:*:*:*:*:*",
+ "matchCriteriaId": "1DE77B27-FF4F-4E3E-A05C-0AE09FD9372B"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cms-made-simple",
- "source": "cve-coordination@incibe.es"
+ "source": "cve-coordination@incibe.es",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cms-made-simple",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-15xx/CVE-2024-1528.json b/CVE-2024/CVE-2024-15xx/CVE-2024-1528.json
index 982b769ea5a..528de4403ee 100644
--- a/CVE-2024/CVE-2024-15xx/CVE-2024-1528.json
+++ b/CVE-2024/CVE-2024-15xx/CVE-2024-1528.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-1528",
"sourceIdentifier": "cve-coordination@incibe.es",
"published": "2024-03-12T16:15:08.200",
- "lastModified": "2024-11-21T08:50:45.720",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:15:08.143",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 4.0
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
}
]
},
@@ -51,14 +71,37 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.14:*:*:*:*:*:*:*",
+ "matchCriteriaId": "1DE77B27-FF4F-4E3E-A05C-0AE09FD9372B"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cms-made-simple",
- "source": "cve-coordination@incibe.es"
+ "source": "cve-coordination@incibe.es",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cms-made-simple",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-15xx/CVE-2024-1529.json b/CVE-2024/CVE-2024-15xx/CVE-2024-1529.json
index 7802c19248f..fd6a3da11cd 100644
--- a/CVE-2024/CVE-2024-15xx/CVE-2024-1529.json
+++ b/CVE-2024/CVE-2024-15xx/CVE-2024-1529.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-1529",
"sourceIdentifier": "cve-coordination@incibe.es",
"published": "2024-03-12T16:15:08.400",
- "lastModified": "2024-11-21T08:50:45.840",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:15:08.143",
+ "vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 4.0
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
}
]
},
@@ -51,14 +71,37 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.14:*:*:*:*:*:*:*",
+ "matchCriteriaId": "1DE77B27-FF4F-4E3E-A05C-0AE09FD9372B"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cms-made-simple",
- "source": "cve-coordination@incibe.es"
+ "source": "cve-coordination@incibe.es",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cms-made-simple",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-215xx/CVE-2024-21584.json b/CVE-2024/CVE-2024-215xx/CVE-2024-21584.json
index e20aec0bb61..c9af77ad5e5 100644
--- a/CVE-2024/CVE-2024-215xx/CVE-2024-21584.json
+++ b/CVE-2024/CVE-2024-215xx/CVE-2024-21584.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-21584",
"sourceIdentifier": "vultures@jpcert.or.jp",
"published": "2024-03-12T08:15:45.217",
- "lastModified": "2024-11-21T08:54:39.587",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:15:08.143",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,88 @@
"value": "Pleasanter 1.3.49.0 y anteriores contienen una vulnerabilidad de cross-site scripting. Si un atacante enga\u00f1a al usuario para que acceda al producto con una URL especialmente manipulada y realice una operaci\u00f3n espec\u00edfica, se puede ejecutar un script arbitrario en el navegador web del usuario."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:pleasanter:pleasanter:*:*:*:*:*:*:*:*",
+ "versionEndIncluding": "1.3.49.0",
+ "matchCriteriaId": "2309FCF5-A128-49A8-91E5-8C5E12C211D6"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://jvn.jp/en/jp/JVN51135247/",
- "source": "vultures@jpcert.or.jp"
+ "source": "vultures@jpcert.or.jp",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://pleasanter.org/archives/vulnerability-update-202401",
- "source": "vultures@jpcert.or.jp"
+ "source": "vultures@jpcert.or.jp",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://jvn.jp/en/jp/JVN51135247/",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://pleasanter.org/archives/vulnerability-update-202401",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-221xx/CVE-2024-22133.json b/CVE-2024/CVE-2024-221xx/CVE-2024-22133.json
index c51ea0f3b72..4816e4d6bb8 100644
--- a/CVE-2024/CVE-2024-221xx/CVE-2024-22133.json
+++ b/CVE-2024/CVE-2024-221xx/CVE-2024-22133.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-22133",
"sourceIdentifier": "cna@sap.com",
"published": "2024-03-12T01:15:49.293",
- "lastModified": "2024-11-21T08:55:39.080",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:15:08.143",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.1,
"impactScore": 2.5
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+ "baseScore": 6.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 2.5
}
]
},
@@ -51,22 +71,51 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:sap:fiori_front_end_server:605:*:*:*:*:*:*:*",
+ "matchCriteriaId": "7C8B4A25-0729-4748-B457-0AB605953757"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://me.sap.com/notes/3417399",
- "source": "cna@sap.com"
+ "source": "cna@sap.com",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364",
- "source": "cna@sap.com"
+ "source": "cna@sap.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://me.sap.com/notes/3417399",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-222xx/CVE-2024-22252.json b/CVE-2024/CVE-2024-222xx/CVE-2024-22252.json
index db088136817..26dfee85d83 100644
--- a/CVE-2024/CVE-2024-222xx/CVE-2024-22252.json
+++ b/CVE-2024/CVE-2024-222xx/CVE-2024-22252.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-22252",
"sourceIdentifier": "security@vmware.com",
"published": "2024-03-05T18:15:47.713",
- "lastModified": "2024-11-21T08:55:53.647",
- "vulnStatus": "Undergoing Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,17 +36,273 @@
},
"exploitabilityScore": 2.5,
"impactScore": 6.0
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 6.7,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 0.8,
+ "impactScore": 5.9
}
]
},
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-416"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "17.0.0",
+ "versionEndExcluding": "17.5.1",
+ "matchCriteriaId": "B0BFB423-5C6D-40F3-960A-53D9955E7621"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*",
+ "matchCriteriaId": "5CBA6B5A-F345-41D1-8AA0-E5F274A2D8FB"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:*",
+ "matchCriteriaId": "2C8DB7F6-5765-4355-B30E-9CAC39ECA5D9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:*",
+ "matchCriteriaId": "A790D41E-B398-4233-9EC7-CF5BE2BC3161"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:*",
+ "matchCriteriaId": "B7619C16-5306-4C4A-88E8-E80876635F66"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:*",
+ "matchCriteriaId": "238E7AF4-722B-423D-ABB1-424286B06715"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:*",
+ "matchCriteriaId": "1E4DE8C7-72FB-4BEC-AD9E-378786295011"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1e:*:*:*:*:*:*",
+ "matchCriteriaId": "2E6DE184-35C8-4A13-91D4-4B43E9F0168C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:*",
+ "matchCriteriaId": "D3E3A02D-6C1E-4DE8-B845-60F53C056F32"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:*",
+ "matchCriteriaId": "12D385F0-DB2B-4802-AD0E-31441DA056B9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:*",
+ "matchCriteriaId": "2C202879-9230-4E1D-BAB8-4FB7CE4BBC24"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:*",
+ "matchCriteriaId": "CC6DC107-5142-4155-A33B-D5BE72E9ED38"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2e:*:*:*:*:*:*",
+ "matchCriteriaId": "39817170-5C45-4F8A-916D-81B7352055DD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3:*:*:*:*:*:*",
+ "matchCriteriaId": "4ADC3CFF-7415-46A5-817A-2F053B261E8C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3c:*:*:*:*:*:*",
+ "matchCriteriaId": "A2F831A7-544E-4B45-BA49-7F7A0234579C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3d:*:*:*:*:*:*",
+ "matchCriteriaId": "80A0DD2E-F1CC-413B-91F9-E3986011A0A0"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3e:*:*:*:*:*:*",
+ "matchCriteriaId": "C77771B2-BC64-47A5-B6DB-9CBCC4456B67"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3f:*:*:*:*:*:*",
+ "matchCriteriaId": "86DE9CE6-F6C0-47D2-B3AB-34852A8B9603"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3g:*:*:*:*:*:*",
+ "matchCriteriaId": "E75B2F03-702E-4359-9BB2-E234F1DC38C8"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3i:*:*:*:*:*:*",
+ "matchCriteriaId": "ACAA9494-5248-4B01-8BC1-C38AB615FFD7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3j:*:*:*:*:*:*",
+ "matchCriteriaId": "BF12014B-BF2B-42EF-B70C-59CDA8E2176F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3k:*:*:*:*:*:*",
+ "matchCriteriaId": "F965D853-EE4A-41F5-840B-2D009ACC9754"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3l:*:*:*:*:*:*",
+ "matchCriteriaId": "BA7B7313-FF53-43C9-AF4D-B639053D3FA3"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3m:*:*:*:*:*:*",
+ "matchCriteriaId": "9FB5738F-27E4-42C6-BD1B-F7F66A7EF0A6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3n:*:*:*:*:*:*",
+ "matchCriteriaId": "FC3668A6-262B-42BF-9E90-28BAA9BB3347"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3o:*:*:*:*:*:*",
+ "matchCriteriaId": "DA4E9185-44BA-41E6-8600-C8616E199334"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:7.0.0:b:*:*:*:*:*:*",
+ "matchCriteriaId": "BC6F088D-0404-4588-9788-7A5903C5BC82"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:8.0:-:*:*:*:*:*:*",
+ "matchCriteriaId": "7A1A402A-9262-4B97-A0B7-E5AE045E394D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:8.0:a:*:*:*:*:*:*",
+ "matchCriteriaId": "FE44B379-9943-4DD1-8514-26F87482AFA8"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:8.0:b:*:*:*:*:*:*",
+ "matchCriteriaId": "2A797377-8945-4D75-AA68-A768855E5842"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:8.0:c:*:*:*:*:*:*",
+ "matchCriteriaId": "79D84D76-54BE-49E9-905C-7D65B4B42D68"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1:*:*:*:*:*:*",
+ "matchCriteriaId": "2F8767F7-7C3D-457D-9EAC-E8A30796F751"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1a:*:*:*:*:*:*",
+ "matchCriteriaId": "29AF8474-2D7A-4C5A-82B9-7A873AD90C2E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1c:*:*:*:*:*:*",
+ "matchCriteriaId": "7781A2CA-D927-48CD-9932-AE42B7BA1EFE"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_2:*:*:*:*:*:*",
+ "matchCriteriaId": "360C1B71-5360-4379-B0DE-63BB8F5E6DA2"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "operator": "AND",
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "13.0.0",
+ "versionEndExcluding": "13.5.1",
+ "matchCriteriaId": "50649AB8-57FD-4210-A7F4-3AD7D00F6A91"
+ }
+ ]
+ },
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": false,
+ "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html",
- "source": "security@vmware.com"
+ "source": "security@vmware.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-22xx/CVE-2024-2211.json b/CVE-2024/CVE-2024-22xx/CVE-2024-2211.json
index 706126ae440..733057859dc 100644
--- a/CVE-2024/CVE-2024-22xx/CVE-2024-2211.json
+++ b/CVE-2024/CVE-2024-22xx/CVE-2024-2211.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-2211",
"sourceIdentifier": "cve-coordination@incibe.es",
"published": "2024-03-06T11:15:07.233",
- "lastModified": "2024-11-21T09:09:15.890",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.1,
"impactScore": 2.5
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
}
]
},
@@ -51,14 +71,37 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:getgophish:gophish:0.12.1:*:*:*:*:*:*:*",
+ "matchCriteriaId": "701FC2FA-923A-4392-91EF-AE3916605D9C"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-gophish-admin-panel",
- "source": "cve-coordination@incibe.es"
+ "source": "cve-coordination@incibe.es",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-gophish-admin-panel",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-23xx/CVE-2024-2319.json b/CVE-2024/CVE-2024-23xx/CVE-2024-2319.json
index c0883fdfcb8..8da58c2da82 100644
--- a/CVE-2024/CVE-2024-23xx/CVE-2024-2319.json
+++ b/CVE-2024/CVE-2024-23xx/CVE-2024-2319.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-2319",
"sourceIdentifier": "cve-coordination@incibe.es",
"published": "2024-03-08T14:15:52.307",
- "lastModified": "2024-11-21T09:09:30.100",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
}
]
},
@@ -51,14 +71,37 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:neutronx:markdownx:4.0.2:*:*:*:*:django:*:*",
+ "matchCriteriaId": "2838FDFA-F16E-4286-B5E0-165637F1B365"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-django-markdownx",
- "source": "cve-coordination@incibe.es"
+ "source": "cve-coordination@incibe.es",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-django-markdownx",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-23xx/CVE-2024-2331.json b/CVE-2024/CVE-2024-23xx/CVE-2024-2331.json
index 898cbb40ca0..847cd4be165 100644
--- a/CVE-2024/CVE-2024-23xx/CVE-2024-2331.json
+++ b/CVE-2024/CVE-2024-23xx/CVE-2024-2331.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-2331",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-09T10:15:06.570",
- "lastModified": "2024-11-21T09:09:31.250",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -76,30 +96,65 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:razormist:tourist_reservation_system:1.0:*:*:*:*:*:*:*",
+ "matchCriteriaId": "C13D44B9-A5B7-4273-82A0-C10DFC617C10"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/wkeyi0x1/vul-report/blob/main/Tourist%20Reservation%20System%20using%20C%2B%2B%20with%20Free%20Source%20Code/buffer-overflow-1.md",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Broken Link"
+ ]
},
{
"url": "https://vuldb.com/?ctiid.256282",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://vuldb.com/?id.256282",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://github.com/wkeyi0x1/vul-report/blob/main/Tourist%20Reservation%20System%20using%20C%2B%2B%20with%20Free%20Source%20Code/buffer-overflow-1.md",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Broken Link"
+ ]
},
{
"url": "https://vuldb.com/?ctiid.256282",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://vuldb.com/?id.256282",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Permissions Required"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-23xx/CVE-2024-2333.json b/CVE-2024/CVE-2024-23xx/CVE-2024-2333.json
index 501b4d5aa10..67f67f58626 100644
--- a/CVE-2024/CVE-2024-23xx/CVE-2024-2333.json
+++ b/CVE-2024/CVE-2024-23xx/CVE-2024-2333.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-2333",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-09T16:15:42.790",
- "lastModified": "2024-11-21T09:09:31.550",
- "vulnStatus": "Undergoing Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.2,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.2,
+ "impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -76,30 +96,71 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:codeastro:membership_management_system:1.0:*:*:*:*:*:*:*",
+ "matchCriteriaId": "3A341555-1CAF-480B-978A-9AE299540FA3"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/0x404Ming/CVE_Hunter/blob/main/SQLi-3.md",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Exploit",
+ "Third Party Advisory"
+ ]
},
{
"url": "https://vuldb.com/?ctiid.256284",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Permissions Required",
+ "VDB Entry"
+ ]
},
{
"url": "https://vuldb.com/?id.256284",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Third Party Advisory",
+ "VDB Entry"
+ ]
},
{
"url": "https://github.com/0x404Ming/CVE_Hunter/blob/main/SQLi-3.md",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit",
+ "Third Party Advisory"
+ ]
},
{
"url": "https://vuldb.com/?ctiid.256284",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Permissions Required",
+ "VDB Entry"
+ ]
},
{
"url": "https://vuldb.com/?id.256284",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory",
+ "VDB Entry"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-23xx/CVE-2024-2351.json b/CVE-2024/CVE-2024-23xx/CVE-2024-2351.json
index fefeefe4597..65b8dc5defe 100644
--- a/CVE-2024/CVE-2024-23xx/CVE-2024-2351.json
+++ b/CVE-2024/CVE-2024-23xx/CVE-2024-2351.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-2351",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-09T23:15:49.590",
- "lastModified": "2024-11-21T09:09:34.440",
- "vulnStatus": "Undergoing Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -76,30 +96,71 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:codeastro:ecommerce_website:1.0:*:*:*:*:*:*:*",
+ "matchCriteriaId": "669BD820-8564-417C-896A-217BC5A5E4C7"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://docs.qq.com/doc/DYklCV0thWnRaaWpY",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Exploit",
+ "Third Party Advisory"
+ ]
},
{
"url": "https://vuldb.com/?ctiid.256303",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Permissions Required",
+ "VDB Entry"
+ ]
},
{
"url": "https://vuldb.com/?id.256303",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Third Party Advisory",
+ "VDB Entry"
+ ]
},
{
"url": "https://docs.qq.com/doc/DYklCV0thWnRaaWpY",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit",
+ "Third Party Advisory"
+ ]
},
{
"url": "https://vuldb.com/?ctiid.256303",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Permissions Required",
+ "VDB Entry"
+ ]
},
{
"url": "https://vuldb.com/?id.256303",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory",
+ "VDB Entry"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-23xx/CVE-2024-2354.json b/CVE-2024/CVE-2024-23xx/CVE-2024-2354.json
index ad3a59e16ba..b8b0afc4d99 100644
--- a/CVE-2024/CVE-2024-23xx/CVE-2024-2354.json
+++ b/CVE-2024/CVE-2024-23xx/CVE-2024-2354.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-2354",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-10T11:15:45.873",
- "lastModified": "2024-11-21T09:09:34.840",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
+ "baseScore": 6.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 3.6
}
],
"cvssMetricV2": [
@@ -76,30 +96,65 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:iteachyou:dreamer_cms:4.1.3:*:*:*:*:*:*:*",
+ "matchCriteriaId": "113EEBC1-2B91-4AE0-995F-E24A4AD607BC"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/sweatxi/BugHub/blob/main/dreamer_cms_admin_menu_toEdit_csrf.pdf",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Broken Link"
+ ]
},
{
"url": "https://vuldb.com/?ctiid.256314",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://vuldb.com/?id.256314",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://github.com/sweatxi/BugHub/blob/main/dreamer_cms_admin_menu_toEdit_csrf.pdf",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Broken Link"
+ ]
},
{
"url": "https://vuldb.com/?ctiid.256314",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://vuldb.com/?id.256314",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-23xx/CVE-2024-2365.json b/CVE-2024/CVE-2024-23xx/CVE-2024-2365.json
index 063e2208124..3c1dcd83116 100644
--- a/CVE-2024/CVE-2024-23xx/CVE-2024-2365.json
+++ b/CVE-2024/CVE-2024-23xx/CVE-2024-2365.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-2365",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-11T00:15:17.337",
- "lastModified": "2024-11-21T09:09:36.190",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 0.2,
"impactScore": 1.4
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
+ "baseScore": 4.2,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "PHYSICAL",
+ "attackComplexity": "HIGH",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 0.5,
+ "impactScore": 3.6
}
],
"cvssMetricV2": [
@@ -76,30 +96,65 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:kirillmakarov:musicshelf:1.1:*:*:*:*:*:*:*",
+ "matchCriteriaId": "F8C7E5A6-3D9A-43A8-8A64-4889855959DD"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/ctflearner/Android_Findings/blob/main/Musicshelf/Weak_Hashing_Algorithms.md",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Exploit"
+ ]
},
{
"url": "https://vuldb.com/?ctiid.256321",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://vuldb.com/?id.256321",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://github.com/ctflearner/Android_Findings/blob/main/Musicshelf/Weak_Hashing_Algorithms.md",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit"
+ ]
},
{
"url": "https://vuldb.com/?ctiid.256321",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://vuldb.com/?id.256321",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Permissions Required"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-23xx/CVE-2024-2391.json b/CVE-2024/CVE-2024-23xx/CVE-2024-2391.json
index 064194c5e05..6664be355b6 100644
--- a/CVE-2024/CVE-2024-23xx/CVE-2024-2391.json
+++ b/CVE-2024/CVE-2024-23xx/CVE-2024-2391.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-2391",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-12T11:15:49.923",
- "lastModified": "2024-11-21T09:09:39.147",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:15:08.143",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 0.9,
"impactScore": 1.4
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
}
],
"cvssMetricV2": [
@@ -76,30 +96,69 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:eve-ng:eve-ng:5.0.1-13:*:*:*:community:*:*:*",
+ "matchCriteriaId": "BC7CD49A-A63C-4D08-8E06-CBD2A981FFD5"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://vuldb.com/?ctiid.256442",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://vuldb.com/?id.256442",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Third Party Advisory",
+ "Permissions Required"
+ ]
},
{
"url": "https://www.exploit-db.com/exploits/51153",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Third Party Advisory",
+ "Exploit"
+ ]
},
{
"url": "https://vuldb.com/?ctiid.256442",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://vuldb.com/?id.256442",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory",
+ "Permissions Required"
+ ]
},
{
"url": "https://www.exploit-db.com/exploits/51153",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory",
+ "Exploit"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-23xx/CVE-2024-2394.json b/CVE-2024/CVE-2024-23xx/CVE-2024-2394.json
index 7ade46f2b4f..d6fa3b5a358 100644
--- a/CVE-2024/CVE-2024-23xx/CVE-2024-2394.json
+++ b/CVE-2024/CVE-2024-23xx/CVE-2024-2394.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-2394",
"sourceIdentifier": "cna@vuldb.com",
"published": "2024-03-12T15:15:49.280",
- "lastModified": "2024-11-21T09:09:39.550",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:15:08.143",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.2,
"impactScore": 3.4
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -76,30 +96,67 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:walterjnr1:employee_management_system:1.0:*:*:*:*:*:*:*",
+ "matchCriteriaId": "FF3F7354-F778-4707-BE75-ABC13A806D29"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/LiAoRJ/CVE_Hunter/blob/main/RCE-1.md",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Broken Link"
+ ]
},
{
"url": "https://vuldb.com/?ctiid.256454",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://vuldb.com/?id.256454",
- "source": "cna@vuldb.com"
+ "source": "cna@vuldb.com",
+ "tags": [
+ "Third Party Advisory",
+ "Permissions Required"
+ ]
},
{
"url": "https://github.com/LiAoRJ/CVE_Hunter/blob/main/RCE-1.md",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Broken Link"
+ ]
},
{
"url": "https://vuldb.com/?ctiid.256454",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://vuldb.com/?id.256454",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory",
+ "Permissions Required"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-247xx/CVE-2024-24765.json b/CVE-2024/CVE-2024-247xx/CVE-2024-24765.json
index e3d852119b2..f75cfd115b1 100644
--- a/CVE-2024/CVE-2024-247xx/CVE-2024-24765.json
+++ b/CVE-2024/CVE-2024-247xx/CVE-2024-24765.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-24765",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-06T18:15:46.807",
- "lastModified": "2024-11-21T08:59:39.437",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
}
]
},
@@ -49,32 +69,80 @@
"value": "CWE-200"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:icewhale:casaos:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "0.4.7",
+ "matchCriteriaId": "EF55D9C0-43A2-4CDB-9DC7-36E100CC1814"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://github.com/IceWhaleTech/CasaOS-UserService/commit/3f4558e23c0a9958f9a0e20aabc64aa8fd51840e",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/IceWhaleTech/CasaOS-UserService/releases/tag/v0.4.7",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Release Notes"
+ ]
},
{
"url": "https://github.com/IceWhaleTech/CasaOS-UserService/security/advisories/GHSA-h5gf-cmm8-cg7c",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Exploit",
+ "Vendor Advisory"
+ ]
},
{
"url": "https://github.com/IceWhaleTech/CasaOS-UserService/commit/3f4558e23c0a9958f9a0e20aabc64aa8fd51840e",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/IceWhaleTech/CasaOS-UserService/releases/tag/v0.4.7",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Release Notes"
+ ]
},
{
"url": "https://github.com/IceWhaleTech/CasaOS-UserService/security/advisories/GHSA-h5gf-cmm8-cg7c",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit",
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-247xx/CVE-2024-24767.json b/CVE-2024/CVE-2024-247xx/CVE-2024-24767.json
index 24eb87d3808..ee70c103cdb 100644
--- a/CVE-2024/CVE-2024-247xx/CVE-2024-24767.json
+++ b/CVE-2024/CVE-2024-247xx/CVE-2024-24767.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-24767",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-06T18:15:46.983",
- "lastModified": "2024-11-21T08:59:39.700",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
}
]
},
@@ -51,30 +71,69 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:icewhale:casaos:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "0.4.4.3",
+ "versionEndExcluding": "0.4.7",
+ "matchCriteriaId": "A10D3951-721C-45A1-B38F-589685D1167F"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/IceWhaleTech/CasaOS-UserService/commit/62006f61b55951048dbace4ebd9e483274838699",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/IceWhaleTech/CasaOS-UserService/releases/tag/v0.4.7",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Release Notes"
+ ]
},
{
"url": "https://github.com/IceWhaleTech/CasaOS-UserService/security/advisories/GHSA-c69x-5xmw-v44x",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Exploit",
+ "Vendor Advisory"
+ ]
},
{
"url": "https://github.com/IceWhaleTech/CasaOS-UserService/commit/62006f61b55951048dbace4ebd9e483274838699",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/IceWhaleTech/CasaOS-UserService/releases/tag/v0.4.7",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Release Notes"
+ ]
},
{
"url": "https://github.com/IceWhaleTech/CasaOS-UserService/security/advisories/GHSA-c69x-5xmw-v44x",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit",
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-251xx/CVE-2024-25111.json b/CVE-2024/CVE-2024-251xx/CVE-2024-25111.json
index 6b0d16a8be3..8ab685a1c4d 100644
--- a/CVE-2024/CVE-2024-251xx/CVE-2024-25111.json
+++ b/CVE-2024/CVE-2024-251xx/CVE-2024-25111.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-25111",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-06T19:15:07.510",
- "lastModified": "2024-11-21T09:00:16.677",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.6
}
]
},
@@ -51,46 +71,132 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "3.5.27",
+ "versionEndExcluding": "6.8",
+ "matchCriteriaId": "E44262DC-034E-4721-A653-BA7178370A68"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
+ "matchCriteriaId": "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
+ "matchCriteriaId": "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:netapp:bluexp:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "FC1AE8BD-EE3F-494C-9F03-D4B2B7233106"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "http://www.squid-cache.org/Versions/v6/SQUID-2024_1.patch",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Mailing List",
+ "Patch"
+ ]
},
{
"url": "https://github.com/squid-cache/squid/security/advisories/GHSA-72c2-c3wm-8qxc",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7R4KPSO3MQT3KAOZV7LC2GG3CYMCGK7H/",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Mailing List"
+ ]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWQHRDRHDM5PQTU6BHH4C5KGL37X6TVI/",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Mailing List"
+ ]
},
{
"url": "https://security.netapp.com/advisory/ntap-20240605-0001/",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "http://www.squid-cache.org/Versions/v6/SQUID-2024_1.patch",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Mailing List",
+ "Patch"
+ ]
},
{
"url": "https://github.com/squid-cache/squid/security/advisories/GHSA-72c2-c3wm-8qxc",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7R4KPSO3MQT3KAOZV7LC2GG3CYMCGK7H/",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Mailing List"
+ ]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWQHRDRHDM5PQTU6BHH4C5KGL37X6TVI/",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Mailing List"
+ ]
},
{
"url": "https://security.netapp.com/advisory/ntap-20240605-0001/",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-256xx/CVE-2024-25644.json b/CVE-2024/CVE-2024-256xx/CVE-2024-25644.json
index 891bc869561..c42e5c3d65a 100644
--- a/CVE-2024/CVE-2024-256xx/CVE-2024-25644.json
+++ b/CVE-2024/CVE-2024-256xx/CVE-2024-25644.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-25644",
"sourceIdentifier": "cna@sap.com",
"published": "2024-03-12T01:15:49.567",
- "lastModified": "2024-11-21T09:01:08.720",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:15:08.143",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -49,24 +49,63 @@
"value": "CWE-732"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:sap:netweaver:7.50:*:*:*:*:*:*:*",
+ "matchCriteriaId": "F2B37045-2FB7-49BB-AE38-B84FAA6ADFB0"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://me.sap.com/notes/3425682",
- "source": "cna@sap.com"
+ "source": "cna@sap.com",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364",
- "source": "cna@sap.com"
+ "source": "cna@sap.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://me.sap.com/notes/3425682",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-257xx/CVE-2024-25731.json b/CVE-2024/CVE-2024-257xx/CVE-2024-25731.json
index c9489b11de2..d43b26f2885 100644
--- a/CVE-2024/CVE-2024-257xx/CVE-2024-25731.json
+++ b/CVE-2024/CVE-2024-257xx/CVE-2024-25731.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-25731",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-05T00:15:52.457",
- "lastModified": "2024-11-21T09:01:17.700",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,87 @@
"value": "La aplicaci\u00f3n Elink Smart eSmartCam (com.cn.dq.ipc) 2.1.5 para Android contiene claves de cifrado AES codificadas que se pueden extraer de un archivo binario. Por lo tanto, el cifrado puede ser derrotado por un atacante que pueda observar los paquetes de datos (por ejemplo, a trav\u00e9s de Wi-Fi)."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "ADJACENT_NETWORK",
+ "attackComplexity": "HIGH",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 1.6,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-798"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:elinksmart:esmartcam:2.1.5:*:*:*:*:android:*:*",
+ "matchCriteriaId": "AD4C5E6A-4E27-4683-85C3-2D71138C6ACE"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/actuator/com.cn.dq.ipc",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://github.com/actuator/com.cn.dq.ipc/blob/main/CVE-2024-25731",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://github.com/actuator/com.cn.dq.ipc",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "https://github.com/actuator/com.cn.dq.ipc/blob/main/CVE-2024-25731",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-26xx/CVE-2024-2654.json b/CVE-2024/CVE-2024-26xx/CVE-2024-2654.json
index 7c1bc0e0f6f..b7b34066499 100644
--- a/CVE-2024/CVE-2024-26xx/CVE-2024-2654.json
+++ b/CVE-2024/CVE-2024-26xx/CVE-2024-2654.json
@@ -2,7 +2,7 @@
"id": "CVE-2024-2654",
"sourceIdentifier": "security@wordfence.com",
"published": "2024-04-09T19:15:35.947",
- "lastModified": "2024-11-21T09:10:13.343",
+ "lastModified": "2025-02-26T18:15:13.590",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -36,9 +36,41 @@
},
"exploitabilityScore": 2.3,
"impactScore": 4.0
+ },
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
+ "baseScore": 6.8,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "NONE",
+ "scope": "CHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.3,
+ "impactScore": 4.0
}
]
},
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-35"
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/wp-file-manager/trunk/file_folder_manager.php#L1353",
diff --git a/CVE-2024/CVE-2024-272xx/CVE-2024-27297.json b/CVE-2024/CVE-2024-272xx/CVE-2024-27297.json
index 32b0a407652..8a2ddcbc0eb 100644
--- a/CVE-2024/CVE-2024-272xx/CVE-2024-27297.json
+++ b/CVE-2024/CVE-2024-272xx/CVE-2024-27297.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27297",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-11T22:15:55.277",
- "lastModified": "2024-11-21T09:04:16.323",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.1,
"impactScore": 4.2
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
+ "baseScore": 5.9,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "HIGH",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.2,
+ "impactScore": 3.6
}
]
},
@@ -49,32 +69,99 @@
"value": "CWE-367"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-367"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:nixos:nix:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "2.3.18",
+ "matchCriteriaId": "47601C02-77F2-4F60-9077-298221CA12F5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:nixos:nix:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "2.4",
+ "versionEndExcluding": "2.18.2",
+ "matchCriteriaId": "0BD193CF-30E0-4583-AA03-101B1488A973"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:nixos:nix:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "2.19.0",
+ "versionEndExcluding": "2.19.4",
+ "matchCriteriaId": "69B51F29-3651-4418-B41A-847576A31C5A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:nixos:nix:*:*:*:*:*:*:*:*",
+ "versionStartIncluding": "2.20.0",
+ "versionEndExcluding": "2.20.5",
+ "matchCriteriaId": "2C2A184D-2C19-4A49-BF6A-44EC5C89C156"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://github.com/NixOS/nix/commit/f8170ce9f119e5e6724eb81ff1b5a2d4c0024000",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/NixOS/nix/security/advisories/GHSA-2ffj-w4mj-pg37",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://hackmd.io/03UGerewRcy3db44JQoWvw",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Exploit"
+ ]
},
{
"url": "https://github.com/NixOS/nix/commit/f8170ce9f119e5e6724eb81ff1b5a2d4c0024000",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/NixOS/nix/security/advisories/GHSA-2ffj-w4mj-pg37",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://hackmd.io/03UGerewRcy3db44JQoWvw",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-276xx/CVE-2024-27668.json b/CVE-2024/CVE-2024-276xx/CVE-2024-27668.json
index 3f128b8e507..459b2b6f4d0 100644
--- a/CVE-2024/CVE-2024-276xx/CVE-2024-27668.json
+++ b/CVE-2024/CVE-2024-276xx/CVE-2024-27668.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27668",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-04T15:15:07.110",
- "lastModified": "2024-11-21T09:04:52.770",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,15 +15,75 @@
"value": "Flusity-CMS v2.33 se ve afectado por: Cross Site Scripting (XSS) en 'Bloques personalizados'."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:flusity:flusity:2.33:*:*:*:*:*:*:*",
+ "matchCriteriaId": "1B6B6ED7-B93A-4853-9D83-40BCD781342C"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/LY102483/cms/blob/main/1.md",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Exploit",
+ "Third Party Advisory"
+ ]
},
{
"url": "https://github.com/LY102483/cms/blob/main/1.md",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit",
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-279xx/CVE-2024-27900.json b/CVE-2024/CVE-2024-279xx/CVE-2024-27900.json
index fe3435190e4..c6a21c26c5c 100644
--- a/CVE-2024/CVE-2024-279xx/CVE-2024-27900.json
+++ b/CVE-2024/CVE-2024-279xx/CVE-2024-27900.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27900",
"sourceIdentifier": "cna@sap.com",
"published": "2024-03-12T01:15:49.980",
- "lastModified": "2024-11-21T09:05:22.767",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:15:08.143",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+ "baseScore": 5.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 1.4
}
]
},
@@ -51,22 +71,56 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:sap:abap_platform:758:*:*:*:*:*:*:*",
+ "matchCriteriaId": "4E7618AC-8AF1-47E2-950E-E7433EAAEF81"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:sap:abap_platform:795:*:*:*:*:*:*:*",
+ "matchCriteriaId": "201C8077-3B46-4D5B-B95A-031E148FE2AE"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://me.sap.com/notes/3419022",
- "source": "cna@sap.com"
+ "source": "cna@sap.com",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364",
- "source": "cna@sap.com"
+ "source": "cna@sap.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://me.sap.com/notes/3419022",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-279xx/CVE-2024-27902.json b/CVE-2024/CVE-2024-279xx/CVE-2024-27902.json
index cd2b70be840..ed5c2f6b454 100644
--- a/CVE-2024/CVE-2024-279xx/CVE-2024-27902.json
+++ b/CVE-2024/CVE-2024-279xx/CVE-2024-27902.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27902",
"sourceIdentifier": "cna@sap.com",
"published": "2024-03-12T01:15:50.193",
- "lastModified": "2024-11-21T09:05:23.040",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:15:08.143",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
}
]
},
@@ -51,22 +71,56 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:sap:netweaver_as_abap:sap_ui_7.89:*:*:*:*:*:*:*",
+ "matchCriteriaId": "012E1427-6870-4531-97AF-77238A46C1E7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:sap:netweaver_as_abap:sap_ui_7.93:*:*:*:*:*:*:*",
+ "matchCriteriaId": "40AE9719-63A9-44F0-9974-66C77D04AAB0"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://me.sap.com/notes/3377979",
- "source": "cna@sap.com"
+ "source": "cna@sap.com",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364",
- "source": "cna@sap.com"
+ "source": "cna@sap.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://me.sap.com/notes/3377979",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Permissions Required"
+ ]
},
{
"url": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-279xx/CVE-2024-27938.json b/CVE-2024/CVE-2024-279xx/CVE-2024-27938.json
index 19390648ada..fab71caf9d1 100644
--- a/CVE-2024/CVE-2024-279xx/CVE-2024-27938.json
+++ b/CVE-2024/CVE-2024-279xx/CVE-2024-27938.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-27938",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-11T22:15:55.490",
- "lastModified": "2024-11-21T09:05:27.543",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,38 +51,80 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:postalserver:postal:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "3.0.0",
+ "matchCriteriaId": "C06A3275-3BD9-4478-9D50-BB5739736A2F"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/postalserver/postal/commit/0140dc4",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/postalserver/postal/security/advisories/GHSA-j42r-6c99-hqf2",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Technical Description"
+ ]
},
{
"url": "https://www.postfix.org/smtp-smuggling.html",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Exploit"
+ ]
},
{
"url": "https://github.com/postalserver/postal/commit/0140dc4",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/postalserver/postal/security/advisories/GHSA-j42r-6c99-hqf2",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Technical Description"
+ ]
},
{
"url": "https://www.postfix.org/smtp-smuggling.html",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-281xx/CVE-2024-28120.json b/CVE-2024/CVE-2024-281xx/CVE-2024-28120.json
index 8272753b9ac..34ef8b15278 100644
--- a/CVE-2024/CVE-2024-281xx/CVE-2024-28120.json
+++ b/CVE-2024/CVE-2024-281xx/CVE-2024-28120.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-28120",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-11T22:15:55.707",
- "lastModified": "2024-11-21T09:05:51.580",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.6
}
]
},
@@ -53,24 +73,67 @@
"value": "CWE-284"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:codeium:codeium:1.2.52:*:*:*:*:chrome:*:*",
+ "matchCriteriaId": "986CD079-22AF-4BF8-A70B-9DC93F5D638C"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://github.com/Exafunction/codeium-chrome/security/advisories/GHSA-8c7j-2h97-q63p",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Exploit",
+ "Vendor Advisory"
+ ]
},
{
"url": "https://securitylab.github.com/advisories/GHSL-2024-027_GHSL-2024-028_codeium-chrome",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Exploit",
+ "Third Party Advisory"
+ ]
},
{
"url": "https://github.com/Exafunction/codeium-chrome/security/advisories/GHSA-8c7j-2h97-q63p",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit",
+ "Vendor Advisory"
+ ]
},
{
"url": "https://securitylab.github.com/advisories/GHSL-2024-027_GHSL-2024-028_codeium-chrome",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit",
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-281xx/CVE-2024-28187.json b/CVE-2024/CVE-2024-281xx/CVE-2024-28187.json
index e7e0d2748c5..9573d2c3703 100644
--- a/CVE-2024/CVE-2024-281xx/CVE-2024-28187.json
+++ b/CVE-2024/CVE-2024-281xx/CVE-2024-28187.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-28187",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-11T20:15:07.180",
- "lastModified": "2024-11-21T09:05:59.240",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,22 +51,52 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:brassica:soy_cms:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "3.14.2",
+ "matchCriteriaId": "E7D4B399-4565-4859-A2AD-2F034CABD87C"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/inunosinsi/soycms/commit/9b0e452f628df28dec69cd72b6b55db21066cbf8",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/inunosinsi/soycms/security/advisories/GHSA-qg3q-hfgc-5jmm",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://github.com/inunosinsi/soycms/commit/9b0e452f628df28dec69cd72b6b55db21066cbf8",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/inunosinsi/soycms/security/advisories/GHSA-qg3q-hfgc-5jmm",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-281xx/CVE-2024-28198.json b/CVE-2024/CVE-2024-281xx/CVE-2024-28198.json
index 3f8dee0161b..e0c42d29a81 100644
--- a/CVE-2024/CVE-2024-281xx/CVE-2024-28198.json
+++ b/CVE-2024/CVE-2024-281xx/CVE-2024-28198.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-28198",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-11T20:15:07.643",
- "lastModified": "2024-11-21T09:06:00.677",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.2,
"impactScore": 3.4
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.6
}
]
},
@@ -51,30 +71,66 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:frentix:openolat:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "18.1.6",
+ "matchCriteriaId": "C7A58DE8-BC68-48E5-B2B6-4B2196FE1FA7"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/OpenOLAT/OpenOLAT/commit/23e6212e9412c3b099436159b8c8935321c91872",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/OpenOLAT/OpenOLAT/security/advisories/GHSA-pqvm-h9mg-434c",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://track.frentix.com/issue/OO-7553/XXE-injection-in-draw.io-endpoint",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Broken Link"
+ ]
},
{
"url": "https://github.com/OpenOLAT/OpenOLAT/commit/23e6212e9412c3b099436159b8c8935321c91872",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/OpenOLAT/OpenOLAT/security/advisories/GHSA-pqvm-h9mg-434c",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Vendor Advisory"
+ ]
},
{
"url": "https://track.frentix.com/issue/OO-7553/XXE-injection-in-draw.io-endpoint",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Broken Link"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-281xx/CVE-2024-28199.json b/CVE-2024/CVE-2024-281xx/CVE-2024-28199.json
index 40b6c18f3e7..8b47d16f99c 100644
--- a/CVE-2024/CVE-2024-281xx/CVE-2024-28199.json
+++ b/CVE-2024/CVE-2024-281xx/CVE-2024-28199.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-28199",
"sourceIdentifier": "security-advisories@github.com",
"published": "2024-03-11T23:15:47.333",
- "lastModified": "2024-11-21T09:06:00.800",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 4.2
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
}
]
},
@@ -51,38 +71,116 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:phlex:phlex:*:*:*:*:*:ruby:*:*",
+ "versionEndExcluding": "1.0.1",
+ "matchCriteriaId": "B2BF28C1-9D36-460D-9030-2ECDB054ADB1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:phlex:phlex:*:*:*:*:*:ruby:*:*",
+ "versionStartIncluding": "1.2.0",
+ "versionEndExcluding": "1.2.2",
+ "matchCriteriaId": "8A30CE8F-C58A-4851-8DB2-0724D67A0E58"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:phlex:phlex:*:*:*:*:*:ruby:*:*",
+ "versionStartIncluding": "1.3.0",
+ "versionEndExcluding": "1.3.3",
+ "matchCriteriaId": "91BCB672-57E6-47E2-9174-011BB8B9D08E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:phlex:phlex:1.1.0:*:*:*:*:ruby:*:*",
+ "matchCriteriaId": "A1724DBB-7DC6-43F3-BA3D-C05FCECD1D3C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:phlex:phlex:1.4.0:*:*:*:*:ruby:*:*",
+ "matchCriteriaId": "8E46CC01-3CD3-491D-8046-B5C5B740B7C9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:phlex:phlex:1.7.0:*:*:*:*:ruby:*:*",
+ "matchCriteriaId": "10E33F7C-8D3F-4182-A3A4-48940C967D31"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:phlex:phlex:1.9.0:*:*:*:*:ruby:*:*",
+ "matchCriteriaId": "1D4EB24C-96B0-4C2B-990F-848DF9CDEE86"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Technical Description"
+ ]
},
{
"url": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#unsafe-inline",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Technical Description"
+ ]
},
{
"url": "https://github.com/phlex-ruby/phlex/commit/aa50c604cdee1d0ce7ef068a4c66cbd5d43f96a1",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/phlex-ruby/phlex/security/advisories/GHSA-242p-4v39-2v8g",
- "source": "security-advisories@github.com"
+ "source": "security-advisories@github.com",
+ "tags": [
+ "Patch",
+ "Vendor Advisory"
+ ]
},
{
"url": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Technical Description"
+ ]
},
{
"url": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#unsafe-inline",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Technical Description"
+ ]
},
{
"url": "https://github.com/phlex-ruby/phlex/commit/aa50c604cdee1d0ce7ef068a4c66cbd5d43f96a1",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch"
+ ]
},
{
"url": "https://github.com/phlex-ruby/phlex/security/advisories/GHSA-242p-4v39-2v8g",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Patch",
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-287xx/CVE-2024-28757.json b/CVE-2024/CVE-2024-287xx/CVE-2024-28757.json
index b4e7b4191f7..ffb9b3be9f7 100644
--- a/CVE-2024/CVE-2024-287xx/CVE-2024-28757.json
+++ b/CVE-2024/CVE-2024-287xx/CVE-2024-28757.json
@@ -2,8 +2,8 @@
"id": "CVE-2024-28757",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-10T05:15:06.570",
- "lastModified": "2024-11-21T09:06:54.427",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:14:55.753",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,63 +15,417 @@
"value": "libexpat hasta 2.6.1 permite un ataque de expansi\u00f3n de entidad XML cuando hay un uso aislado de analizadores externos (creados a trav\u00e9s de XML_ExternalEntityParserCreate)."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-776"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "2.6.2",
+ "matchCriteriaId": "463A4DD2-9DA6-420C-A361-293B1166B9C6"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",
+ "matchCriteriaId": "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
+ "matchCriteriaId": "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*",
+ "matchCriteriaId": "CA277A6C-83EC-4536-9125-97B84C4FAF59"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
+ "matchCriteriaId": "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "5735E553-9731-4AAC-BCFF-989377F817B3"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*",
+ "matchCriteriaId": "A20333EE-4C13-426E-8B54-D78679D5DDB8"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:netapp:ontap_tools:10:*:*:*:*:vmware_vsphere:*:*",
+ "matchCriteriaId": "5333B745-F7A3-46CB-8437-8668DB08CD6F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:netapp:windows_host_utilities:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "15282AE5-2005-4852-8FC8-EF2CE0E28FB4"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "operator": "AND",
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
+ }
+ ]
+ },
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": false,
+ "criteria": "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "operator": "AND",
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
+ }
+ ]
+ },
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": false,
+ "criteria": "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "operator": "AND",
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "56409CEC-5A1E-4450-AA42-641E459CC2AF"
+ }
+ ]
+ },
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": false,
+ "criteria": "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "operator": "AND",
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
+ }
+ ]
+ },
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": false,
+ "criteria": "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "8497A4C9-8474-4A62-8331-3FE862ED4098"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "operator": "AND",
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"
+ }
+ ]
+ },
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": false,
+ "criteria": "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "operator": "AND",
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "89612649-BACF-4FAC-9BA4-324724FD93A6"
+ }
+ ]
+ },
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": false,
+ "criteria": "cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "F3D9B255-C1AF-42D1-BF9B-13642FBDC080"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "operator": "AND",
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "FD7CFE0E-9D1E-4495-B302-89C3096FC0DF"
+ }
+ ]
+ },
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": false,
+ "criteria": "cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "F63A3FA7-AAED-4A9D-9FDE-6195302DA0F6"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2024/03/15/1",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Mailing List",
+ "Patch",
+ "Release Notes"
+ ]
},
{
"url": "https://github.com/libexpat/libexpat/issues/839",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Exploit",
+ "Issue Tracking",
+ "Patch"
+ ]
},
{
"url": "https://github.com/libexpat/libexpat/pull/842",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Issue Tracking",
+ "Patch"
+ ]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD/",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Mailing List"
+ ]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKJ7V5F6LJCEQJXDBWGT27J7NAP3E3N7/",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Mailing List"
+ ]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VK2O34GH43NTHBZBN7G5Y6YKJKPUCTBE/",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Mailing List"
+ ]
},
{
"url": "https://security.netapp.com/advisory/ntap-20240322-0001/",
- "source": "cve@mitre.org"
+ "source": "cve@mitre.org",
+ "tags": [
+ "Third Party Advisory"
+ ]
},
{
"url": "http://www.openwall.com/lists/oss-security/2024/03/15/1",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Mailing List",
+ "Patch",
+ "Release Notes"
+ ]
},
{
"url": "https://github.com/libexpat/libexpat/issues/839",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Exploit",
+ "Issue Tracking",
+ "Patch"
+ ]
},
{
"url": "https://github.com/libexpat/libexpat/pull/842",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Issue Tracking",
+ "Patch"
+ ]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD/",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Mailing List"
+ ]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKJ7V5F6LJCEQJXDBWGT27J7NAP3E3N7/",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Mailing List"
+ ]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VK2O34GH43NTHBZBN7G5Y6YKJKPUCTBE/",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Mailing List"
+ ]
},
{
"url": "https://security.netapp.com/advisory/ntap-20240322-0001/",
- "source": "af854a3a-2127-422b-91ae-364da2661108"
+ "source": "af854a3a-2127-422b-91ae-364da2661108",
+ "tags": [
+ "Third Party Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-302xx/CVE-2024-30219.json b/CVE-2024/CVE-2024-302xx/CVE-2024-30219.json
index bc2ef97b128..611c80a964a 100644
--- a/CVE-2024/CVE-2024-302xx/CVE-2024-30219.json
+++ b/CVE-2024/CVE-2024-302xx/CVE-2024-30219.json
@@ -2,20 +2,13 @@
"id": "CVE-2024-30219",
"sourceIdentifier": "vultures@jpcert.or.jp",
"published": "2024-04-15T11:15:08.650",
- "lastModified": "2024-11-21T09:11:28.330",
+ "lastModified": "2025-02-26T13:15:38.863",
"vulnStatus": "Awaiting Analysis",
- "cveTags": [
- {
- "sourceIdentifier": "vultures@jpcert.or.jp",
- "tags": [
- "unsupported-when-assigned"
- ]
- }
- ],
+ "cveTags": [],
"descriptions": [
{
"lang": "en",
- "value": "Active debug code vulnerability exists in MZK-MF300N all firmware versions. If a logged-in user who knows how to use the debug function accesses the device's management page, an unintended operation may be performed."
+ "value": "Active debug code vulnerability exists in PLANEX COMMUNICATIONS wireless LAN routers. If a logged-in user who knows how to use the debug function accesses the device's management page, an unintended operation may be performed. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided."
},
{
"lang": "es",
@@ -24,6 +17,26 @@
],
"metrics": {
"cvssMetricV31": [
+ {
+ "source": "vultures@jpcert.or.jp",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 6.8,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "ADJACENT_NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 0.9,
+ "impactScore": 5.9
+ },
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
@@ -46,6 +59,18 @@
}
]
},
+ "weaknesses": [
+ {
+ "source": "vultures@jpcert.or.jp",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-489"
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://jvn.jp/en/vu/JVNVU91975826/",
diff --git a/CVE-2024/CVE-2024-302xx/CVE-2024-30220.json b/CVE-2024/CVE-2024-302xx/CVE-2024-30220.json
index e451d1b7550..f6547ae4e08 100644
--- a/CVE-2024/CVE-2024-302xx/CVE-2024-30220.json
+++ b/CVE-2024/CVE-2024-302xx/CVE-2024-30220.json
@@ -2,20 +2,13 @@
"id": "CVE-2024-30220",
"sourceIdentifier": "vultures@jpcert.or.jp",
"published": "2024-04-15T11:15:08.697",
- "lastModified": "2024-11-21T09:11:28.523",
+ "lastModified": "2025-02-26T13:15:39.090",
"vulnStatus": "Awaiting Analysis",
- "cveTags": [
- {
- "sourceIdentifier": "vultures@jpcert.or.jp",
- "tags": [
- "unsupported-when-assigned"
- ]
- }
- ],
+ "cveTags": [],
"descriptions": [
{
"lang": "en",
- "value": "Command injection vulnerability in MZK-MF300N all firmware versions allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port."
+ "value": "Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this product is not provided."
},
{
"lang": "es",
@@ -24,6 +17,26 @@
],
"metrics": {
"cvssMetricV31": [
+ {
+ "source": "vultures@jpcert.or.jp",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 8.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "ADJACENT_NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 5.9
+ },
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
@@ -47,9 +60,19 @@
]
},
"weaknesses": [
+ {
+ "source": "vultures@jpcert.or.jp",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-77"
+ }
+ ]
+ },
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
- "type": "Secondary",
+ "type": "Primary",
"description": [
{
"lang": "en",
diff --git a/CVE-2024/CVE-2024-303xx/CVE-2024-30397.json b/CVE-2024/CVE-2024-303xx/CVE-2024-30397.json
index c8cbbeab724..0e969b23b5c 100644
--- a/CVE-2024/CVE-2024-303xx/CVE-2024-30397.json
+++ b/CVE-2024/CVE-2024-303xx/CVE-2024-30397.json
@@ -2,13 +2,13 @@
"id": "CVE-2024-30397",
"sourceIdentifier": "sirt@juniper.net",
"published": "2024-04-12T16:15:39.267",
- "lastModified": "2025-02-06T20:36:00.690",
- "vulnStatus": "Analyzed",
+ "lastModified": "2025-02-26T07:46:51.690",
+ "vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
- "value": "An Improper Check for Unusual or Exceptional Conditions vulnerability in the the\u00a0Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause Denial of Service (DoS).\n\nThe pkid is responsible for the certificate verification. Upon a failed verification, the pkid uses all CPU resources and becomes unresponsive to future verification attempts. This means that all subsequent VPN negotiations depending on certificate verification will fail.\n\nThis CPU utilization of pkid can be checked using this command: \n\u00a0 root@srx> show system processes extensive | match pkid\n\u00a0 xxxxx ?root ?103? 0 ?846M ?136M ?CPU1 ?1\u00a0569:00 100.00% pkid\n\nThis issue affects:\nJuniper Networks Junos OS\n * All\u00a0versions prior to 20.4R3-S10;\n * 21.2 versions prior to 21.2R3-S7;\n * 21.4 versions prior to 21.4R3-S5;\n * 22.1 versions prior to 22.1R3-S4;\n * 22.2 versions prior to\u00a022.2R3-S3;\n * 22.3 versions prior to\u00a022.3R3-S1;\n * 22.4 versions prior to\u00a022.4R3;\n * 23.2 versions prior to\u00a023.2R1-S2, 23.2R2."
+ "value": "An Improper Check for Unusual or Exceptional Conditions vulnerability in the the\u00a0Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause Denial of Service (DoS).\n\nThe pkid is responsible for the certificate verification. Upon a failed verification, the pkid uses all CPU resources and becomes unresponsive to future verification attempts. This means that all subsequent VPN negotiations depending on certificate verification will fail.\n\nThis CPU utilization of pkid can be checked using this command: \n\u00a0 root@srx> show system processes extensive | match pkid\n\u00a0 xxxxx \u2003root \u2003103\u2003 0 \u2003846M \u2003136M \u2003CPU1 \u20031\u00a0569:00 100.00% pkid\n\nThis issue affects:\nJuniper Networks Junos OS\n * All\u00a0versions prior to 20.4R3-S10;\n * 21.2 versions prior to 21.2R3-S7;\n * 21.4 versions prior to 21.4R3-S5;\n * 22.1 versions prior to 22.1R3-S4;\n * 22.2 versions prior to\u00a022.2R3-S3;\n * 22.3 versions prior to\u00a022.3R3-S1;\n * 22.4 versions prior to\u00a022.4R3;\n * 23.2 versions prior to\u00a023.2R1-S2, 23.2R2."
},
{
"lang": "es",
@@ -30,30 +30,30 @@
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
- "vulnerableSystemConfidentiality": "NONE",
- "vulnerableSystemIntegrity": "NONE",
- "vulnerableSystemAvailability": "HIGH",
- "subsequentSystemConfidentiality": "NONE",
- "subsequentSystemIntegrity": "NONE",
- "subsequentSystemAvailability": "LOW",
+ "vulnConfidentialityImpact": "NONE",
+ "vulnIntegrityImpact": "NONE",
+ "vulnAvailabilityImpact": "HIGH",
+ "subConfidentialityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "subAvailabilityImpact": "LOW",
"exploitMaturity": "NOT_DEFINED",
- "confidentialityRequirements": "NOT_DEFINED",
- "integrityRequirements": "NOT_DEFINED",
- "availabilityRequirements": "NOT_DEFINED",
+ "confidentialityRequirement": "NOT_DEFINED",
+ "integrityRequirement": "NOT_DEFINED",
+ "availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
- "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED",
- "modifiedVulnerableSystemIntegrity": "NOT_DEFINED",
- "modifiedVulnerableSystemAvailability": "NOT_DEFINED",
- "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED",
- "modifiedSubsequentSystemIntegrity": "NOT_DEFINED",
- "modifiedSubsequentSystemAvailability": "NOT_DEFINED",
- "safety": "NOT_DEFINED",
- "automatable": "NOT_DEFINED",
- "recovery": "NOT_DEFINED",
+ "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
+ "modifiedVulnIntegrityImpact": "NOT_DEFINED",
+ "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
+ "modifiedSubConfidentialityImpact": "NOT_DEFINED",
+ "modifiedSubIntegrityImpact": "NOT_DEFINED",
+ "modifiedSubAvailabilityImpact": "NOT_DEFINED",
+ "Safety": "NOT_DEFINED",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
diff --git a/CVE-2024/CVE-2024-335xx/CVE-2024-33568.json b/CVE-2024/CVE-2024-335xx/CVE-2024-33568.json
index eb19259392e..04888c24976 100644
--- a/CVE-2024/CVE-2024-335xx/CVE-2024-33568.json
+++ b/CVE-2024/CVE-2024-335xx/CVE-2024-33568.json
@@ -2,13 +2,13 @@
"id": "CVE-2024-33568",
"sourceIdentifier": "audit@patchstack.com",
"published": "2024-06-04T14:15:10.440",
- "lastModified": "2025-01-29T17:32:13.227",
- "vulnStatus": "Analyzed",
+ "lastModified": "2025-02-26T13:15:39.343",
+ "vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
- "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Deserialization of Untrusted Data vulnerability in BdThemes Element Pack Pro allows Path Traversal, Object Injection.This issue affects Element Pack Pro: from n/a through 7.7.4."
+ "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Deserialization of Untrusted Data vulnerability in BdThemes Element Pack Pro allows Path Traversal, Object Injection.This issue affects Element Pack Pro: from n/a before 7.19.3."
},
{
"lang": "es",
diff --git a/CVE-2024/CVE-2024-394xx/CVE-2024-39441.json b/CVE-2024/CVE-2024-394xx/CVE-2024-39441.json
new file mode 100644
index 00000000000..c521c972438
--- /dev/null
+++ b/CVE-2024/CVE-2024-394xx/CVE-2024-39441.json
@@ -0,0 +1,44 @@
+{
+ "id": "CVE-2024-39441",
+ "sourceIdentifier": "security@unisoc.com",
+ "published": "2025-02-26T13:15:39.547",
+ "lastModified": "2025-02-26T13:15:39.547",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In wifi display, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "security@unisoc.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
+ "baseScore": 7.1,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 1.8,
+ "impactScore": 5.2
+ }
+ ]
+ },
+ "references": [
+ {
+ "url": "https://www.unisoc.com/en_us/secy/announcementDetail/1894203086612791298",
+ "source": "security@unisoc.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-462xx/CVE-2024-46226.json b/CVE-2024/CVE-2024-462xx/CVE-2024-46226.json
new file mode 100644
index 00000000000..01f87b3cb58
--- /dev/null
+++ b/CVE-2024/CVE-2024-462xx/CVE-2024-46226.json
@@ -0,0 +1,60 @@
+{
+ "id": "CVE-2024-46226",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T16:15:15.947",
+ "lastModified": "2025-02-26T16:15:15.947",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A stored cross site scripting (XSS) vulnerability in HelpDeskZ < v2.0.2 allows remote attackers to execute arbitrary JavaScript in the administration panel by including a malicious payload into the file name and upload file function when creating a new ticket."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 4.8,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 1.7,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://www.exploit-db.com/exploits/52068",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.exploit-db.com/exploits/52068",
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-470xx/CVE-2024-47051.json b/CVE-2024/CVE-2024-470xx/CVE-2024-47051.json
new file mode 100644
index 00000000000..2f4d1fe7718
--- /dev/null
+++ b/CVE-2024/CVE-2024-470xx/CVE-2024-47051.json
@@ -0,0 +1,68 @@
+{
+ "id": "CVE-2024-47051",
+ "sourceIdentifier": "security@mautic.org",
+ "published": "2025-02-26T13:15:39.957",
+ "lastModified": "2025-02-26T13:15:39.957",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "This advisory addresses two critical security vulnerabilities present in Mautic versions before 5.2.3. These vulnerabilities could be exploited by authenticated users.\n\n * Remote Code Execution (RCE) via Asset Upload:\u00a0A Remote Code Execution vulnerability has been identified in the asset upload functionality. Insufficient enforcement of allowed file extensions allows an attacker to bypass restrictions and upload executable files, such as PHP scripts.\n\n\n * Path Traversal File Deletion:\u00a0A Path Traversal vulnerability exists in the upload validation process. Due to improper handling of path components, an authenticated user can manipulate the file deletion process to delete arbitrary files on the host system."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "security@mautic.org",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
+ "baseScore": 9.1,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "CHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 3.1,
+ "impactScore": 5.3
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "security@mautic.org",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-23"
+ },
+ {
+ "lang": "en",
+ "value": "CWE-94"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/mautic/mautic/security/advisories/GHSA-73gx-x7r9-77x2",
+ "source": "security@mautic.org"
+ },
+ {
+ "url": "https://owasp.org/www-community/attacks/Code_Injection",
+ "source": "security@mautic.org"
+ },
+ {
+ "url": "https://owasp.org/www-community/attacks/Path_Traversal",
+ "source": "security@mautic.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-470xx/CVE-2024-47053.json b/CVE-2024/CVE-2024-470xx/CVE-2024-47053.json
new file mode 100644
index 00000000000..876494b28d6
--- /dev/null
+++ b/CVE-2024/CVE-2024-470xx/CVE-2024-47053.json
@@ -0,0 +1,64 @@
+{
+ "id": "CVE-2024-47053",
+ "sourceIdentifier": "security@mautic.org",
+ "published": "2025-02-26T13:15:40.090",
+ "lastModified": "2025-02-26T13:15:40.090",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensitive report data.\n\n * Improper Authorization:\u00a0An authorization flaw exists in Mautic's API Authorization implementation. Any authenticated user, regardless of assigned roles or permissions, can access all reports and their associated data via the API. This bypasses the intended access controls governed by the \"Reporting Permissions > View Own\" and \"Reporting Permissions > View Others\" permissions, which should restrict access to non-System Reports."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "security@mautic.org",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
+ "baseScore": 7.7,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "CHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 3.1,
+ "impactScore": 4.0
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "security@mautic.org",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-285"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://cwe.mitre.org/data/definitions/287.html",
+ "source": "security@mautic.org"
+ },
+ {
+ "url": "https://docs.mautic.org/en/5.2/configuration/settings.html#api-settings",
+ "source": "security@mautic.org"
+ },
+ {
+ "url": "https://github.com/mautic/mautic/security/advisories/GHSA-8xv7-g2q3-fqgc",
+ "source": "security@mautic.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-529xx/CVE-2024-52925.json b/CVE-2024/CVE-2024-529xx/CVE-2024-52925.json
new file mode 100644
index 00000000000..465a0a0b8bc
--- /dev/null
+++ b/CVE-2024/CVE-2024-529xx/CVE-2024-52925.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2024-52925",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:23.867",
+ "lastModified": "2025-02-26T15:15:23.867",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "In OPSWAT MetaDefender Kiosk before 4.7.0, arbitrary code execution can be performed by an attacker via the MD Kiosk Unlock Device feature for software encrypted USB drives."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "cve@mitre.org",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 6.8,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "PHYSICAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 0.9,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "cve@mitre.org",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-94"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://www.opswat.com/docs/mdkiosk/release-notes/cve-2024-52925",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-534xx/CVE-2024-53427.json b/CVE-2024/CVE-2024-534xx/CVE-2024-53427.json
new file mode 100644
index 00000000000..2e2735622fa
--- /dev/null
+++ b/CVE-2024/CVE-2024-534xx/CVE-2024-53427.json
@@ -0,0 +1,21 @@
+{
+ "id": "CVE-2024-53427",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T16:15:16.237",
+ "lastModified": "2025-02-26T16:15:16.237",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "jq v1.7.1 contains a stack-buffer-overflow in the decNumberCopy function within decNumber.c."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://github.com/jqlang/jq/issues/3196",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-68xx/CVE-2024-6810.json b/CVE-2024/CVE-2024-68xx/CVE-2024-6810.json
new file mode 100644
index 00000000000..6bbc423e60b
--- /dev/null
+++ b/CVE-2024/CVE-2024-68xx/CVE-2024-6810.json
@@ -0,0 +1,72 @@
+{
+ "id": "CVE-2024-6810",
+ "sourceIdentifier": "security@wordfence.com",
+ "published": "2025-02-26T13:15:40.600",
+ "lastModified": "2025-02-26T13:15:40.600",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The Quiz Organizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "security@wordfence.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
+ "baseScore": 4.4,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "HIGH",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "NONE",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 1.3,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "security@wordfence.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://plugins.trac.wordpress.org/browser/quiz-organizer/trunk/src/includes/admin/admin-modify-quiz.php#L230",
+ "source": "security@wordfence.com"
+ },
+ {
+ "url": "https://plugins.trac.wordpress.org/browser/quiz-organizer/trunk/src/includes/admin/admin-modify-quiz.php#L570",
+ "source": "security@wordfence.com"
+ },
+ {
+ "url": "https://plugins.trac.wordpress.org/browser/quiz-organizer/trunk/src/includes/sets/class-qzorg-plug-shortcode.php#L508",
+ "source": "security@wordfence.com"
+ },
+ {
+ "url": "https://wordpress.org/plugins/quiz-organizer/#developers",
+ "source": "security@wordfence.com"
+ },
+ {
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/651646b0-231f-401c-9f6d-d414609bd7ba?source=cve",
+ "source": "security@wordfence.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2024/CVE-2024-96xx/CVE-2024-9628.json b/CVE-2024/CVE-2024-96xx/CVE-2024-9628.json
index 6113a69d95b..7e54cdb1c3e 100644
--- a/CVE-2024/CVE-2024-96xx/CVE-2024-9628.json
+++ b/CVE-2024/CVE-2024-96xx/CVE-2024-9628.json
@@ -2,13 +2,13 @@
"id": "CVE-2024-9628",
"sourceIdentifier": "security@wordfence.com",
"published": "2024-10-25T08:15:03.457",
- "lastModified": "2025-01-23T21:17:43.533",
- "vulnStatus": "Analyzed",
+ "lastModified": "2025-02-26T08:12:22.750",
+ "vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
- "value": "The WPS Telegram Chat plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'Wps_Telegram_Chat_Admin::check?onnection' function in versions up to, and including, 4.5.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to have full access to the Telegram Bot API endpoint and communicate with it."
+ "value": "The WPS Telegram Chat plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'Wps_Telegram_Chat_Admin::check\u0421onnection' function in versions up to, and including, 4.5.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to have full access to the Telegram Bot API endpoint and communicate with it."
},
{
"lang": "es",
@@ -62,7 +62,7 @@
"weaknesses": [
{
"source": "security@wordfence.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
diff --git a/CVE-2025/CVE-2025-02xx/CVE-2025-0234.json b/CVE-2025/CVE-2025-02xx/CVE-2025-0234.json
new file mode 100644
index 00000000000..6d474452528
--- /dev/null
+++ b/CVE-2025/CVE-2025-02xx/CVE-2025-0234.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2025-0234",
+ "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
+ "published": "2025-02-26T08:12:46.393",
+ "lastModified": "2025-02-26T08:12:46.393",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Out-of-bounds vulnerability in curve segmentation processing of Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver / Generic LIPSLX V4 Printer Driver."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
+ "baseScore": 5.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 1.4
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-787"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://psirt.canon/advisory-information/cp2025-002/",
+ "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-02xx/CVE-2025-0235.json b/CVE-2025/CVE-2025-02xx/CVE-2025-0235.json
new file mode 100644
index 00000000000..31c46eac48c
--- /dev/null
+++ b/CVE-2025/CVE-2025-02xx/CVE-2025-0235.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2025-0235",
+ "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
+ "published": "2025-02-26T08:12:46.617",
+ "lastModified": "2025-02-26T08:12:46.617",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Out-of-bounds vulnerability due to improper memory release during image rendering in Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver / Generic LIPSLX V4 Printer Driver."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
+ "baseScore": 5.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 1.4
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-787"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://psirt.canon/advisory-information/cp2025-002/",
+ "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-02xx/CVE-2025-0236.json b/CVE-2025/CVE-2025-02xx/CVE-2025-0236.json
new file mode 100644
index 00000000000..6fa76ebbfd0
--- /dev/null
+++ b/CVE-2025/CVE-2025-02xx/CVE-2025-0236.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2025-0236",
+ "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
+ "published": "2025-02-26T08:12:46.730",
+ "lastModified": "2025-02-26T08:12:46.730",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Out-of-bounds vulnerability in slope processing during curve rendering in Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver / Generic LIPSLX V4 Printer Driver."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
+ "baseScore": 5.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 1.4
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-787"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://psirt.canon/advisory-information/cp2025-002/",
+ "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-07xx/CVE-2025-0719.json b/CVE-2025/CVE-2025-07xx/CVE-2025-0719.json
new file mode 100644
index 00000000000..2c7b0b5b364
--- /dev/null
+++ b/CVE-2025/CVE-2025-07xx/CVE-2025-0719.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2025-0719",
+ "sourceIdentifier": "psirt@us.ibm.com",
+ "published": "2025-02-26T14:15:11.587",
+ "lastModified": "2025-02-26T14:15:11.587",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "IBM Cloud Pak for Data 4.0.0 through 4.8.5 and 5.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "psirt@us.ibm.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 6.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "psirt@us.ibm.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://www.ibm.com/support/pages/node/7184173",
+ "source": "psirt@us.ibm.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-07xx/CVE-2025-0731.json b/CVE-2025/CVE-2025-07xx/CVE-2025-0731.json
new file mode 100644
index 00000000000..cf892427aaf
--- /dev/null
+++ b/CVE-2025/CVE-2025-07xx/CVE-2025-0731.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2025-0731",
+ "sourceIdentifier": "info@cert.vde.com",
+ "published": "2025-02-26T13:15:41.040",
+ "lastModified": "2025-02-26T13:15:41.040",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the demo account. The code can only be executed in the security context of the user."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "info@cert.vde.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
+ "baseScore": 6.5,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "LOW"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 2.5
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "info@cert.vde.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-434"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://cert.vde.com/en/advisories/VDE-2025-012",
+ "source": "info@cert.vde.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-08xx/CVE-2025-0889.json b/CVE-2025/CVE-2025-08xx/CVE-2025-0889.json
new file mode 100644
index 00000000000..3fbebd9e0ee
--- /dev/null
+++ b/CVE-2025/CVE-2025-08xx/CVE-2025-0889.json
@@ -0,0 +1,78 @@
+{
+ "id": "CVE-2025-0889",
+ "sourceIdentifier": "13061848-ea10-403d-bd75-c83a022c2891",
+ "published": "2025-02-26T08:13:09.050",
+ "lastModified": "2025-02-26T08:13:09.050",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain circumstances where an EPM policy allows for automatic privilege elevation of a user process."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV40": [
+ {
+ "source": "13061848-ea10-403d-bd75-c83a022c2891",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "4.0",
+ "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
+ "baseScore": 7.2,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "attackRequirements": "PRESENT",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "vulnConfidentialityImpact": "HIGH",
+ "vulnIntegrityImpact": "HIGH",
+ "vulnAvailabilityImpact": "NONE",
+ "subConfidentialityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "subAvailabilityImpact": "NONE",
+ "exploitMaturity": "NOT_DEFINED",
+ "confidentialityRequirement": "NOT_DEFINED",
+ "integrityRequirement": "NOT_DEFINED",
+ "availabilityRequirement": "NOT_DEFINED",
+ "modifiedAttackVector": "NOT_DEFINED",
+ "modifiedAttackComplexity": "NOT_DEFINED",
+ "modifiedAttackRequirements": "NOT_DEFINED",
+ "modifiedPrivilegesRequired": "NOT_DEFINED",
+ "modifiedUserInteraction": "NOT_DEFINED",
+ "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
+ "modifiedVulnIntegrityImpact": "NOT_DEFINED",
+ "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
+ "modifiedSubConfidentialityImpact": "NOT_DEFINED",
+ "modifiedSubIntegrityImpact": "NOT_DEFINED",
+ "modifiedSubAvailabilityImpact": "NOT_DEFINED",
+ "Safety": "NOT_DEFINED",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
+ "valueDensity": "NOT_DEFINED",
+ "vulnerabilityResponseEffort": "NOT_DEFINED",
+ "providerUrgency": "NOT_DEFINED"
+ }
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "13061848-ea10-403d-bd75-c83a022c2891",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-268"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://www.beyondtrust.com/trust-center/security-advisories/bt25-01",
+ "source": "13061848-ea10-403d-bd75-c83a022c2891"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-09xx/CVE-2025-0941.json b/CVE-2025/CVE-2025-09xx/CVE-2025-0941.json
new file mode 100644
index 00000000000..9b1a5bc7912
--- /dev/null
+++ b/CVE-2025/CVE-2025-09xx/CVE-2025-0941.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2025-0941",
+ "sourceIdentifier": "4ad3d9a7-bd20-4af3-8862-46d6b5a570db",
+ "published": "2025-02-26T17:15:21.910",
+ "lastModified": "2025-02-26T17:15:21.910",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain text within the system. This data is not available to unauthenticated users."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "4ad3d9a7-bd20-4af3-8862-46d6b5a570db",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
+ "baseScore": 5.8,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "ADJACENT_NETWORK",
+ "attackComplexity": "HIGH",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "CHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 1.3,
+ "impactScore": 4.0
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "4ad3d9a7-bd20-4af3-8862-46d6b5a570db",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-209"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://www.beckman.com/about-us/compliance/coordinated-vulnerability-disclosure/product-security-updates",
+ "source": "4ad3d9a7-bd20-4af3-8862-46d6b5a570db"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-12xx/CVE-2025-1249.json b/CVE-2025/CVE-2025-12xx/CVE-2025-1249.json
new file mode 100644
index 00000000000..b5a90e6ecfe
--- /dev/null
+++ b/CVE-2025/CVE-2025-12xx/CVE-2025-1249.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2025-1249",
+ "sourceIdentifier": "audit@patchstack.com",
+ "published": "2025-02-26T15:15:24.470",
+ "lastModified": "2025-02-26T15:15:24.470",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Missing Authorization vulnerability in Pixelite Events Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Events Manager: from n/a through 6.6.4.1."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "audit@patchstack.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+ "baseScore": 5.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 1.4
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "audit@patchstack.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-862"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://patchstack.com/database/wordpress/plugin/events-manager/vulnerability/wordpress-events-manager-plugin-6-6-4-1-broken-access-control-vulnerability?_s_id=cve",
+ "source": "audit@patchstack.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-13xx/CVE-2025-1353.json b/CVE-2025/CVE-2025-13xx/CVE-2025-1353.json
index f6febb2ed23..c8142be5ede 100644
--- a/CVE-2025/CVE-2025-13xx/CVE-2025-1353.json
+++ b/CVE-2025/CVE-2025-13xx/CVE-2025-1353.json
@@ -2,13 +2,20 @@
"id": "CVE-2025-1353",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-02-16T15:15:09.320",
- "lastModified": "2025-02-16T15:15:09.320",
- "vulnStatus": "Received",
- "cveTags": [],
+ "lastModified": "2025-02-26T08:13:23.443",
+ "vulnStatus": "Awaiting Analysis",
+ "cveTags": [
+ {
+ "sourceIdentifier": "cna@vuldb.com",
+ "tags": [
+ "disputed"
+ ]
+ }
+ ],
"descriptions": [
{
"lang": "en",
- "value": "A vulnerability was found in Kong Insomnia up to 10.3.0 and classified as critical. This issue affects some unknown processing in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way."
+ "value": "A vulnerability was found in Kong Insomnia up to 10.3.0 and classified as critical. This issue affects some unknown processing in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The real existence of this vulnerability is still doubted at the moment. The vendor is not able to reproduce the issue."
},
{
"lang": "es",
@@ -30,30 +37,30 @@
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
- "vulnerableSystemConfidentiality": "HIGH",
- "vulnerableSystemIntegrity": "HIGH",
- "vulnerableSystemAvailability": "HIGH",
- "subsequentSystemConfidentiality": "NONE",
- "subsequentSystemIntegrity": "NONE",
- "subsequentSystemAvailability": "NONE",
+ "vulnConfidentialityImpact": "HIGH",
+ "vulnIntegrityImpact": "HIGH",
+ "vulnAvailabilityImpact": "HIGH",
+ "subConfidentialityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
- "confidentialityRequirements": "NOT_DEFINED",
- "integrityRequirements": "NOT_DEFINED",
- "availabilityRequirements": "NOT_DEFINED",
+ "confidentialityRequirement": "NOT_DEFINED",
+ "integrityRequirement": "NOT_DEFINED",
+ "availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
- "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED",
- "modifiedVulnerableSystemIntegrity": "NOT_DEFINED",
- "modifiedVulnerableSystemAvailability": "NOT_DEFINED",
- "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED",
- "modifiedSubsequentSystemIntegrity": "NOT_DEFINED",
- "modifiedSubsequentSystemAvailability": "NOT_DEFINED",
- "safety": "NOT_DEFINED",
- "automatable": "NOT_DEFINED",
- "recovery": "NOT_DEFINED",
+ "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
+ "modifiedVulnIntegrityImpact": "NOT_DEFINED",
+ "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
+ "modifiedSubConfidentialityImpact": "NOT_DEFINED",
+ "modifiedSubIntegrityImpact": "NOT_DEFINED",
+ "modifiedSubAvailabilityImpact": "NOT_DEFINED",
+ "Safety": "NOT_DEFINED",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
@@ -63,7 +70,7 @@
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
@@ -111,7 +118,7 @@
"weaknesses": [
{
"source": "cna@vuldb.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
diff --git a/CVE-2025/CVE-2025-15xx/CVE-2025-1517.json b/CVE-2025/CVE-2025-15xx/CVE-2025-1517.json
new file mode 100644
index 00000000000..59ded9bc5f1
--- /dev/null
+++ b/CVE-2025/CVE-2025-15xx/CVE-2025-1517.json
@@ -0,0 +1,80 @@
+{
+ "id": "CVE-2025-1517",
+ "sourceIdentifier": "security@wordfence.com",
+ "published": "2025-02-26T13:15:41.193",
+ "lastModified": "2025-02-26T13:15:41.193",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "The Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Fancy Text, Countdown Widget, and Login Form shortcodes in all versions up to, and including, 3.6.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "security@wordfence.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
+ "baseScore": 6.4,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 3.1,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "security@wordfence.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/shaonsina/sina-extension-for-elementor/commit/5cb89db08b15a3011800ee0f6ad68c69c5a256d5",
+ "source": "security@wordfence.com"
+ },
+ {
+ "url": "https://plugins.trac.wordpress.org/browser/sina-extension-for-elementor/trunk/widgets/advanced/sina-countdown.php",
+ "source": "security@wordfence.com"
+ },
+ {
+ "url": "https://plugins.trac.wordpress.org/browser/sina-extension-for-elementor/trunk/widgets/advanced/sina-login-form.php",
+ "source": "security@wordfence.com"
+ },
+ {
+ "url": "https://plugins.trac.wordpress.org/browser/sina-extension-for-elementor/trunk/widgets/basic/sina-fancytext.php",
+ "source": "security@wordfence.com"
+ },
+ {
+ "url": "https://plugins.trac.wordpress.org/changeset/3246221/",
+ "source": "security@wordfence.com"
+ },
+ {
+ "url": "https://wordpress.org/plugins/sina-extension-for-elementor/#developers",
+ "source": "security@wordfence.com"
+ },
+ {
+ "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e699f521-9133-41b0-b667-528da78fec06?source=cve",
+ "source": "security@wordfence.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-16xx/CVE-2025-1634.json b/CVE-2025/CVE-2025-16xx/CVE-2025-1634.json
new file mode 100644
index 00000000000..f07478edefe
--- /dev/null
+++ b/CVE-2025/CVE-2025-16xx/CVE-2025-1634.json
@@ -0,0 +1,60 @@
+{
+ "id": "CVE-2025-1634",
+ "sourceIdentifier": "secalert@redhat.com",
+ "published": "2025-02-26T17:15:22.083",
+ "lastModified": "2025-02-26T17:15:22.083",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "secalert@redhat.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "secalert@redhat.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-401"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://access.redhat.com/security/cve/CVE-2025-1634",
+ "source": "secalert@redhat.com"
+ },
+ {
+ "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2347319",
+ "source": "secalert@redhat.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-17xx/CVE-2025-1716.json b/CVE-2025/CVE-2025-17xx/CVE-2025-1716.json
new file mode 100644
index 00000000000..64b76879006
--- /dev/null
+++ b/CVE-2025/CVE-2025-17xx/CVE-2025-1716.json
@@ -0,0 +1,82 @@
+{
+ "id": "CVE-2025-1716",
+ "sourceIdentifier": "103e4ec9-0a87-450b-af77-479448ddef11",
+ "published": "2025-02-26T15:15:24.653",
+ "lastModified": "2025-02-26T15:15:24.653",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package (hosted, for example, on pypi.org or GitHub) via `pip.main()`. Because pip is not a restricted global, the model, when scanned with picklescan, would pass security checks and appear to be safe, when it could instead prove to be problematic."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV40": [
+ {
+ "source": "103e4ec9-0a87-450b-af77-479448ddef11",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "4.0",
+ "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
+ "baseScore": 5.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "attackRequirements": "NONE",
+ "privilegesRequired": "NONE",
+ "userInteraction": "PASSIVE",
+ "vulnConfidentialityImpact": "NONE",
+ "vulnIntegrityImpact": "LOW",
+ "vulnAvailabilityImpact": "NONE",
+ "subConfidentialityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "subAvailabilityImpact": "NONE",
+ "exploitMaturity": "NOT_DEFINED",
+ "confidentialityRequirement": "NOT_DEFINED",
+ "integrityRequirement": "NOT_DEFINED",
+ "availabilityRequirement": "NOT_DEFINED",
+ "modifiedAttackVector": "NOT_DEFINED",
+ "modifiedAttackComplexity": "NOT_DEFINED",
+ "modifiedAttackRequirements": "NOT_DEFINED",
+ "modifiedPrivilegesRequired": "NOT_DEFINED",
+ "modifiedUserInteraction": "NOT_DEFINED",
+ "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
+ "modifiedVulnIntegrityImpact": "NOT_DEFINED",
+ "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
+ "modifiedSubConfidentialityImpact": "NOT_DEFINED",
+ "modifiedSubIntegrityImpact": "NOT_DEFINED",
+ "modifiedSubAvailabilityImpact": "NOT_DEFINED",
+ "Safety": "NOT_DEFINED",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
+ "valueDensity": "NOT_DEFINED",
+ "vulnerabilityResponseEffort": "NOT_DEFINED",
+ "providerUrgency": "NOT_DEFINED"
+ }
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "103e4ec9-0a87-450b-af77-479448ddef11",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-184"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/mmaitre314/picklescan/commit/78ce704227c51f070c0c5fb4b466d92c62a7aa3d",
+ "source": "103e4ec9-0a87-450b-af77-479448ddef11"
+ },
+ {
+ "url": "https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1716",
+ "source": "103e4ec9-0a87-450b-af77-479448ddef11"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-201xx/CVE-2025-20111.json b/CVE-2025/CVE-2025-201xx/CVE-2025-20111.json
new file mode 100644
index 00000000000..f7d7f1fecfa
--- /dev/null
+++ b/CVE-2025/CVE-2025-201xx/CVE-2025-20111.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2025-20111",
+ "sourceIdentifier": "psirt@cisco.com",
+ "published": "2025-02-26T17:15:22.240",
+ "lastModified": "2025-02-26T17:15:22.240",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.\r\n\r\nThis vulnerability is due to the incorrect handling of specific Ethernet frames. An attacker could exploit this vulnerability by sending a sustained rate of crafted Ethernet frames to an affected device. A successful exploit could allow the attacker to cause the device to reload."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "psirt@cisco.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
+ "baseScore": 7.4,
+ "baseSeverity": "HIGH",
+ "attackVector": "ADJACENT_NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "CHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 4.0
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "psirt@cisco.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-1220"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n3kn9k-healthdos-eOqSWK4g",
+ "source": "psirt@cisco.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-201xx/CVE-2025-20116.json b/CVE-2025/CVE-2025-201xx/CVE-2025-20116.json
new file mode 100644
index 00000000000..f304a56655b
--- /dev/null
+++ b/CVE-2025/CVE-2025-201xx/CVE-2025-20116.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2025-20116",
+ "sourceIdentifier": "psirt@cisco.com",
+ "published": "2025-02-26T17:15:22.403",
+ "lastModified": "2025-02-26T17:15:22.403",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A vulnerability in the web UI of Cisco APIC could allow an authenticated, remote attacker to perform a stored XSS attack on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials.\r\n\r\nThis vulnerability is due to improper input validation in the web UI. An authenticated attacker could exploit this vulnerability by injecting malicious code into specific pages of the web UI. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web UI or access sensitive, browser-based information."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "psirt@cisco.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+ "baseScore": 4.8,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 1.7,
+ "impactScore": 2.7
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "psirt@cisco.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-79"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-multi-vulns-9ummtg5",
+ "source": "psirt@cisco.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-201xx/CVE-2025-20117.json b/CVE-2025/CVE-2025-201xx/CVE-2025-20117.json
new file mode 100644
index 00000000000..cc077b47f67
--- /dev/null
+++ b/CVE-2025/CVE-2025-201xx/CVE-2025-20117.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2025-20117",
+ "sourceIdentifier": "psirt@cisco.com",
+ "published": "2025-02-26T17:15:22.567",
+ "lastModified": "2025-02-26T17:15:22.567",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A vulnerability in the CLI of Cisco APIC could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.\r\n\r\nThis vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "psirt@cisco.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N",
+ "baseScore": 5.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 0.8,
+ "impactScore": 4.2
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "psirt@cisco.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-77"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-multi-vulns-9ummtg5",
+ "source": "psirt@cisco.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-201xx/CVE-2025-20118.json b/CVE-2025/CVE-2025-201xx/CVE-2025-20118.json
new file mode 100644
index 00000000000..2bddd71e73a
--- /dev/null
+++ b/CVE-2025/CVE-2025-201xx/CVE-2025-20118.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2025-20118",
+ "sourceIdentifier": "psirt@cisco.com",
+ "published": "2025-02-26T17:15:22.723",
+ "lastModified": "2025-02-26T18:15:14.353",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.\r\n\r\nThis vulnerability is due to insufficient masking of sensitive information that is displayed through system CLI commands. An attacker could exploit this vulnerability by using reconnaissance techniques at the device CLI. A successful exploit could allow the attacker to access sensitive information on an affected device that could be used for additional attacks."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "psirt@cisco.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
+ "baseScore": 4.4,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 0.8,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "psirt@cisco.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-212"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-multi-vulns-9ummtg5",
+ "source": "psirt@cisco.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-201xx/CVE-2025-20119.json b/CVE-2025/CVE-2025-201xx/CVE-2025-20119.json
new file mode 100644
index 00000000000..85221e07981
--- /dev/null
+++ b/CVE-2025/CVE-2025-201xx/CVE-2025-20119.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2025-20119",
+ "sourceIdentifier": "psirt@cisco.com",
+ "published": "2025-02-26T17:15:22.883",
+ "lastModified": "2025-02-26T18:15:14.570",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could cause a DoS condition. To exploit this vulnerability, the attacker must have valid administrative credentials.\r\n\r\nThis vulnerability is due to a race condition with handling system files. An attacker could exploit this vulnerability by doing specific operations on the file system. A successful exploit could allow the attacker to overwrite system files, which could lead to the device being in an inconsistent state and cause a DoS condition."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "psirt@cisco.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
+ "baseScore": 6.0,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 0.8,
+ "impactScore": 5.2
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "psirt@cisco.com",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-362"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-multi-vulns-9ummtg5",
+ "source": "psirt@cisco.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-201xx/CVE-2025-20161.json b/CVE-2025/CVE-2025-201xx/CVE-2025-20161.json
new file mode 100644
index 00000000000..591591a425a
--- /dev/null
+++ b/CVE-2025/CVE-2025-201xx/CVE-2025-20161.json
@@ -0,0 +1,56 @@
+{
+ "id": "CVE-2025-20161",
+ "sourceIdentifier": "psirt@cisco.com",
+ "published": "2025-02-26T17:15:23.053",
+ "lastModified": "2025-02-26T17:15:23.053",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A vulnerability in the software upgrade process of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker with valid Administrator credentials to execute a command injection attack on the underlying operating system of an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of specific elements within a software image. An attacker could exploit this vulnerability by installing a crafted image. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. \r\nNote: Administrators should validate the hash of any software image before installation."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "psirt@cisco.com",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N",
+ "baseScore": 5.1,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 0.8,
+ "impactScore": 4.2
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "psirt@cisco.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-78"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ici-dpOjbWxk",
+ "source": "psirt@cisco.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-213xx/CVE-2025-21368.json b/CVE-2025/CVE-2025-213xx/CVE-2025-21368.json
index 1e66a8696ea..b440fa458e3 100644
--- a/CVE-2025/CVE-2025-213xx/CVE-2025-21368.json
+++ b/CVE-2025/CVE-2025-213xx/CVE-2025-21368.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-21368",
"sourceIdentifier": "secure@microsoft.com",
"published": "2025-02-11T18:15:35.123",
- "lastModified": "2025-02-11T18:15:35.123",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:23:31.897",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -42,19 +42,166 @@
"weaknesses": [
{
"source": "secure@microsoft.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-122"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.10240.20915",
+ "matchCriteriaId": "8B692D57-D1F5-440E-AC28-C7633740ED6E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.10240.20915",
+ "matchCriteriaId": "44723F8C-6B56-4A27-B213-E822ADC16078"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "C91C224C-5CC9-42EF-8053-AC80EE2CC2B5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "07421D08-3F88-4532-B652-36825784EFF9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "B5BC47F5-150E-4D18-8CC4-356F22171D81"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "E448ECB4-CE46-4A29-A092-5A4D334E5535"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.19044.5487",
+ "matchCriteriaId": "A932CBA3-651F-4BBA-968A-2D6CA7DF8506"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.19045.5487",
+ "matchCriteriaId": "810C8ECB-619F-447C-B352-E66F7EF5216E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.22621.4890",
+ "matchCriteriaId": "30AF7170-5722-4C9C-A8AD-7A9F0C5952EE"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.22631.4890",
+ "matchCriteriaId": "62FFD367-FB8B-48CA-813F-760E4F393555"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.26100.3194",
+ "matchCriteriaId": "B9C5B9BC-F08B-49F8-82D3-7CC6BDB68995"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
+ "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
+ "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
+ "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
+ "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "208FA80F-F742-473E-81D5-003DC2BFFC6C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "273EE4B9-8B53-4387-98C8-EC5D2558DB82"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.20348.3207",
+ "matchCriteriaId": "1711CDE0-4C93-40D3-91B7-DE507143A45F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.25398.1425",
+ "matchCriteriaId": "FB476271-F7D2-40F9-BAFC-2DCD597BFE27"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.26100.3194",
+ "matchCriteriaId": "C5C38103-E0F4-4302-98CE-BD8B20460004"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21368",
- "source": "secure@microsoft.com"
+ "source": "secure@microsoft.com",
+ "tags": [
+ "Patch",
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-213xx/CVE-2025-21369.json b/CVE-2025/CVE-2025-213xx/CVE-2025-21369.json
index f6e079da6d3..8b5a1bc28e9 100644
--- a/CVE-2025/CVE-2025-213xx/CVE-2025-21369.json
+++ b/CVE-2025/CVE-2025-213xx/CVE-2025-21369.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-21369",
"sourceIdentifier": "secure@microsoft.com",
"published": "2025-02-11T18:15:35.340",
- "lastModified": "2025-02-11T18:15:35.340",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:23:31.897",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -42,7 +42,7 @@
"weaknesses": [
{
"source": "secure@microsoft.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -53,12 +53,159 @@
"value": "CWE-190"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.10240.20915",
+ "matchCriteriaId": "8B692D57-D1F5-440E-AC28-C7633740ED6E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.10240.20915",
+ "matchCriteriaId": "44723F8C-6B56-4A27-B213-E822ADC16078"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "C91C224C-5CC9-42EF-8053-AC80EE2CC2B5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "07421D08-3F88-4532-B652-36825784EFF9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "B5BC47F5-150E-4D18-8CC4-356F22171D81"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "E448ECB4-CE46-4A29-A092-5A4D334E5535"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.19044.5487",
+ "matchCriteriaId": "A932CBA3-651F-4BBA-968A-2D6CA7DF8506"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.19045.5487",
+ "matchCriteriaId": "810C8ECB-619F-447C-B352-E66F7EF5216E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.22621.4890",
+ "matchCriteriaId": "30AF7170-5722-4C9C-A8AD-7A9F0C5952EE"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.22631.4890",
+ "matchCriteriaId": "62FFD367-FB8B-48CA-813F-760E4F393555"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.26100.3194",
+ "matchCriteriaId": "B9C5B9BC-F08B-49F8-82D3-7CC6BDB68995"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
+ "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
+ "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
+ "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
+ "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "208FA80F-F742-473E-81D5-003DC2BFFC6C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "273EE4B9-8B53-4387-98C8-EC5D2558DB82"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.20348.3207",
+ "matchCriteriaId": "1711CDE0-4C93-40D3-91B7-DE507143A45F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.25398.1425",
+ "matchCriteriaId": "FB476271-F7D2-40F9-BAFC-2DCD597BFE27"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.26100.3194",
+ "matchCriteriaId": "C5C38103-E0F4-4302-98CE-BD8B20460004"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21369",
- "source": "secure@microsoft.com"
+ "source": "secure@microsoft.com",
+ "tags": [
+ "Patch",
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-213xx/CVE-2025-21371.json b/CVE-2025/CVE-2025-213xx/CVE-2025-21371.json
index 5981ae3ad5f..c6ae14ba73c 100644
--- a/CVE-2025/CVE-2025-213xx/CVE-2025-21371.json
+++ b/CVE-2025/CVE-2025-213xx/CVE-2025-21371.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-21371",
"sourceIdentifier": "secure@microsoft.com",
"published": "2025-02-11T18:15:35.540",
- "lastModified": "2025-02-11T18:15:35.540",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:23:31.897",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -42,19 +42,166 @@
"weaknesses": [
{
"source": "secure@microsoft.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-122"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.10240.20915",
+ "matchCriteriaId": "8B692D57-D1F5-440E-AC28-C7633740ED6E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.10240.20915",
+ "matchCriteriaId": "44723F8C-6B56-4A27-B213-E822ADC16078"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "C91C224C-5CC9-42EF-8053-AC80EE2CC2B5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "07421D08-3F88-4532-B652-36825784EFF9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "B5BC47F5-150E-4D18-8CC4-356F22171D81"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "E448ECB4-CE46-4A29-A092-5A4D334E5535"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.19044.5487",
+ "matchCriteriaId": "A932CBA3-651F-4BBA-968A-2D6CA7DF8506"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.19045.5487",
+ "matchCriteriaId": "810C8ECB-619F-447C-B352-E66F7EF5216E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.22621.4890",
+ "matchCriteriaId": "30AF7170-5722-4C9C-A8AD-7A9F0C5952EE"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.22631.4890",
+ "matchCriteriaId": "62FFD367-FB8B-48CA-813F-760E4F393555"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.26100.3194",
+ "matchCriteriaId": "B9C5B9BC-F08B-49F8-82D3-7CC6BDB68995"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
+ "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
+ "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
+ "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
+ "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "208FA80F-F742-473E-81D5-003DC2BFFC6C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "273EE4B9-8B53-4387-98C8-EC5D2558DB82"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.20348.3207",
+ "matchCriteriaId": "1711CDE0-4C93-40D3-91B7-DE507143A45F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.25398.1425",
+ "matchCriteriaId": "FB476271-F7D2-40F9-BAFC-2DCD597BFE27"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.26100.3194",
+ "matchCriteriaId": "C5C38103-E0F4-4302-98CE-BD8B20460004"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21371",
- "source": "secure@microsoft.com"
+ "source": "secure@microsoft.com",
+ "tags": [
+ "Patch",
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-213xx/CVE-2025-21373.json b/CVE-2025/CVE-2025-213xx/CVE-2025-21373.json
index 74d33938968..2acbc589dff 100644
--- a/CVE-2025/CVE-2025-213xx/CVE-2025-21373.json
+++ b/CVE-2025/CVE-2025-213xx/CVE-2025-21373.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-21373",
"sourceIdentifier": "secure@microsoft.com",
"published": "2025-02-11T18:15:35.740",
- "lastModified": "2025-02-11T18:15:35.740",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:23:31.897",
+ "vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -42,19 +42,166 @@
"weaknesses": [
{
"source": "secure@microsoft.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-59"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.10240.20915",
+ "matchCriteriaId": "8B692D57-D1F5-440E-AC28-C7633740ED6E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.10240.20915",
+ "matchCriteriaId": "44723F8C-6B56-4A27-B213-E822ADC16078"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "C91C224C-5CC9-42EF-8053-AC80EE2CC2B5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "07421D08-3F88-4532-B652-36825784EFF9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "B5BC47F5-150E-4D18-8CC4-356F22171D81"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "E448ECB4-CE46-4A29-A092-5A4D334E5535"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.19044.5487",
+ "matchCriteriaId": "A932CBA3-651F-4BBA-968A-2D6CA7DF8506"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.19045.5487",
+ "matchCriteriaId": "810C8ECB-619F-447C-B352-E66F7EF5216E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.22621.4890",
+ "matchCriteriaId": "30AF7170-5722-4C9C-A8AD-7A9F0C5952EE"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.22631.4890",
+ "matchCriteriaId": "62FFD367-FB8B-48CA-813F-760E4F393555"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.26100.3194",
+ "matchCriteriaId": "B9C5B9BC-F08B-49F8-82D3-7CC6BDB68995"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
+ "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
+ "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
+ "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
+ "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "208FA80F-F742-473E-81D5-003DC2BFFC6C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "273EE4B9-8B53-4387-98C8-EC5D2558DB82"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.20348.3207",
+ "matchCriteriaId": "1711CDE0-4C93-40D3-91B7-DE507143A45F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.25398.1425",
+ "matchCriteriaId": "FB476271-F7D2-40F9-BAFC-2DCD597BFE27"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.26100.3194",
+ "matchCriteriaId": "C5C38103-E0F4-4302-98CE-BD8B20460004"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21373",
- "source": "secure@microsoft.com"
+ "source": "secure@microsoft.com",
+ "tags": [
+ "Patch",
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-213xx/CVE-2025-21375.json b/CVE-2025/CVE-2025-213xx/CVE-2025-21375.json
index 5dc7172a7bc..1a7f57977aa 100644
--- a/CVE-2025/CVE-2025-213xx/CVE-2025-21375.json
+++ b/CVE-2025/CVE-2025-213xx/CVE-2025-21375.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-21375",
"sourceIdentifier": "secure@microsoft.com",
"published": "2025-02-11T18:15:35.947",
- "lastModified": "2025-02-11T18:15:35.947",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:23:31.897",
+ "vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -42,7 +42,7 @@
"weaknesses": [
{
"source": "secure@microsoft.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -53,12 +53,159 @@
"value": "CWE-122"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.10240.20915",
+ "matchCriteriaId": "8B692D57-D1F5-440E-AC28-C7633740ED6E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.10240.20915",
+ "matchCriteriaId": "44723F8C-6B56-4A27-B213-E822ADC16078"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "C91C224C-5CC9-42EF-8053-AC80EE2CC2B5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "07421D08-3F88-4532-B652-36825784EFF9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "B5BC47F5-150E-4D18-8CC4-356F22171D81"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "E448ECB4-CE46-4A29-A092-5A4D334E5535"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.19044.5487",
+ "matchCriteriaId": "A932CBA3-651F-4BBA-968A-2D6CA7DF8506"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.19045.5487",
+ "matchCriteriaId": "810C8ECB-619F-447C-B352-E66F7EF5216E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.22621.4890",
+ "matchCriteriaId": "30AF7170-5722-4C9C-A8AD-7A9F0C5952EE"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.22631.4890",
+ "matchCriteriaId": "62FFD367-FB8B-48CA-813F-760E4F393555"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.26100.3194",
+ "matchCriteriaId": "B9C5B9BC-F08B-49F8-82D3-7CC6BDB68995"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
+ "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
+ "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
+ "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
+ "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "208FA80F-F742-473E-81D5-003DC2BFFC6C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "273EE4B9-8B53-4387-98C8-EC5D2558DB82"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.20348.3207",
+ "matchCriteriaId": "1711CDE0-4C93-40D3-91B7-DE507143A45F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.25398.1425",
+ "matchCriteriaId": "FB476271-F7D2-40F9-BAFC-2DCD597BFE27"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.26100.3194",
+ "matchCriteriaId": "C5C38103-E0F4-4302-98CE-BD8B20460004"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21375",
- "source": "secure@microsoft.com"
+ "source": "secure@microsoft.com",
+ "tags": [
+ "Patch",
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-213xx/CVE-2025-21376.json b/CVE-2025/CVE-2025-213xx/CVE-2025-21376.json
index 69f5df87552..86c5029ba10 100644
--- a/CVE-2025/CVE-2025-213xx/CVE-2025-21376.json
+++ b/CVE-2025/CVE-2025-213xx/CVE-2025-21376.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-21376",
"sourceIdentifier": "secure@microsoft.com",
"published": "2025-02-11T18:15:36.167",
- "lastModified": "2025-02-11T18:15:36.167",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:23:31.897",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -42,7 +42,7 @@
"weaknesses": [
{
"source": "secure@microsoft.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -57,12 +57,159 @@
"value": "CWE-362"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.10240.20915",
+ "matchCriteriaId": "8B692D57-D1F5-440E-AC28-C7633740ED6E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.10240.20915",
+ "matchCriteriaId": "44723F8C-6B56-4A27-B213-E822ADC16078"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "C91C224C-5CC9-42EF-8053-AC80EE2CC2B5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "07421D08-3F88-4532-B652-36825784EFF9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "B5BC47F5-150E-4D18-8CC4-356F22171D81"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "E448ECB4-CE46-4A29-A092-5A4D334E5535"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.19044.5487",
+ "matchCriteriaId": "A932CBA3-651F-4BBA-968A-2D6CA7DF8506"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.19045.5487",
+ "matchCriteriaId": "810C8ECB-619F-447C-B352-E66F7EF5216E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.22621.4890",
+ "matchCriteriaId": "30AF7170-5722-4C9C-A8AD-7A9F0C5952EE"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.22631.4890",
+ "matchCriteriaId": "62FFD367-FB8B-48CA-813F-760E4F393555"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.26100.3194",
+ "matchCriteriaId": "B9C5B9BC-F08B-49F8-82D3-7CC6BDB68995"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
+ "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
+ "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
+ "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
+ "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
+ "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.14393.7785",
+ "matchCriteriaId": "208FA80F-F742-473E-81D5-003DC2BFFC6C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.17763.6893",
+ "matchCriteriaId": "273EE4B9-8B53-4387-98C8-EC5D2558DB82"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
+ "versionEndExcluding": "10.0.20348.3207",
+ "matchCriteriaId": "1711CDE0-4C93-40D3-91B7-DE507143A45F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.25398.1425",
+ "matchCriteriaId": "FB476271-F7D2-40F9-BAFC-2DCD597BFE27"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
+ "versionEndExcluding": "10.0.26100.3194",
+ "matchCriteriaId": "C5C38103-E0F4-4302-98CE-BD8B20460004"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21376",
- "source": "secure@microsoft.com"
+ "source": "secure@microsoft.com",
+ "tags": [
+ "Patch",
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-213xx/CVE-2025-21392.json b/CVE-2025/CVE-2025-213xx/CVE-2025-21392.json
index 8d4a379f32e..fc1479a5af2 100644
--- a/CVE-2025/CVE-2025-213xx/CVE-2025-21392.json
+++ b/CVE-2025/CVE-2025-213xx/CVE-2025-21392.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-21392",
"sourceIdentifier": "secure@microsoft.com",
"published": "2025-02-11T18:15:37.907",
- "lastModified": "2025-02-11T18:15:37.907",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T15:23:31.897",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -42,19 +42,105 @@
"weaknesses": [
{
"source": "secure@microsoft.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
+ "matchCriteriaId": "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
+ "matchCriteriaId": "CD25F492-9272-4836-832C-8439EBE64CCF"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*",
+ "matchCriteriaId": "72324216-4EB3-4243-A007-FEF3133C7DF9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*",
+ "matchCriteriaId": "0FBB0E61-7997-4F26-9C07-54912D3F1C10"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*",
+ "matchCriteriaId": "CF5DDD09-902E-4881-98D0-CB896333B4AA"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*",
+ "matchCriteriaId": "26A3B226-5D7C-4556-9350-5222DC8EFC2C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:*:x64:*",
+ "matchCriteriaId": "1AC0C23F-FC55-4DA1-8527-EB4432038FB0"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:*:x86:*",
+ "matchCriteriaId": "A719B461-7869-46D0-9300-D0A348DC26A5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:macos:*:*",
+ "matchCriteriaId": "0DF36AFA-B48C-4423-AD1C-78EEFF85EF2C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:microsoft:office:2024:*:*:*:ltsc:*:x64:*",
+ "matchCriteriaId": "19F65776-446D-404C-A830-990D4232791A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:microsoft:office:2024:*:*:*:ltsc:*:x86:*",
+ "matchCriteriaId": "017875F7-5396-4069-9F9F-0BDA05143A25"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:microsoft:office:2024:*:*:*:ltsc:macos:*:*",
+ "matchCriteriaId": "873BD998-9D5A-4C09-A3B3-4DB12ABB6F72"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21392",
- "source": "secure@microsoft.com"
+ "source": "secure@microsoft.com",
+ "tags": [
+ "Patch",
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-222xx/CVE-2025-22211.json b/CVE-2025/CVE-2025-222xx/CVE-2025-22211.json
index a50e7ee65c6..117da05f627 100644
--- a/CVE-2025/CVE-2025-222xx/CVE-2025-22211.json
+++ b/CVE-2025/CVE-2025-222xx/CVE-2025-22211.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-22211",
"sourceIdentifier": "security@joomla.org",
"published": "2025-02-25T22:15:15.200",
- "lastModified": "2025-02-25T22:15:15.200",
+ "lastModified": "2025-02-26T18:15:14.723",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -25,6 +25,10 @@
}
],
"references": [
+ {
+ "url": "https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-22211",
+ "source": "security@joomla.org"
+ },
{
"url": "https://www.webdesigner-profi.de/",
"source": "security@joomla.org"
diff --git a/CVE-2025/CVE-2025-222xx/CVE-2025-22261.json b/CVE-2025/CVE-2025-222xx/CVE-2025-22261.json
index 4c74c01abf9..216006f62df 100644
--- a/CVE-2025/CVE-2025-222xx/CVE-2025-22261.json
+++ b/CVE-2025/CVE-2025-222xx/CVE-2025-22261.json
@@ -2,13 +2,13 @@
"id": "CVE-2025-22261",
"sourceIdentifier": "audit@patchstack.com",
"published": "2025-01-07T11:15:13.290",
- "lastModified": "2025-01-07T11:15:13.290",
+ "lastModified": "2025-02-26T15:15:24.877",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
- "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite WP FullCalendar allows Stored XSS.This issue affects WP FullCalendar: from n/a through 1.5."
+ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite WP FullCalendar wp-fullcalendar allows Stored XSS.This issue affects WP FullCalendar: from n/a through 1.5."
},
{
"lang": "es",
@@ -42,7 +42,7 @@
"weaknesses": [
{
"source": "audit@patchstack.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
diff --git a/CVE-2025/CVE-2025-228xx/CVE-2025-22868.json b/CVE-2025/CVE-2025-228xx/CVE-2025-22868.json
new file mode 100644
index 00000000000..ba82eaa355c
--- /dev/null
+++ b/CVE-2025/CVE-2025-228xx/CVE-2025-22868.json
@@ -0,0 +1,64 @@
+{
+ "id": "CVE-2025-22868",
+ "sourceIdentifier": "security@golang.org",
+ "published": "2025-02-26T08:14:24.897",
+ "lastModified": "2025-02-26T15:15:24.993",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-1286"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://go.dev/cl/652155",
+ "source": "security@golang.org"
+ },
+ {
+ "url": "https://go.dev/issue/71490",
+ "source": "security@golang.org"
+ },
+ {
+ "url": "https://pkg.go.dev/vuln/GO-2025-3488",
+ "source": "security@golang.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-228xx/CVE-2025-22869.json b/CVE-2025/CVE-2025-228xx/CVE-2025-22869.json
new file mode 100644
index 00000000000..5d5815e513f
--- /dev/null
+++ b/CVE-2025/CVE-2025-228xx/CVE-2025-22869.json
@@ -0,0 +1,64 @@
+{
+ "id": "CVE-2025-22869",
+ "sourceIdentifier": "security@golang.org",
+ "published": "2025-02-26T08:14:24.997",
+ "lastModified": "2025-02-26T15:15:25.160",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+ "baseScore": 7.5,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 3.6
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-770"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://go.dev/cl/652135",
+ "source": "security@golang.org"
+ },
+ {
+ "url": "https://go.dev/issue/71931",
+ "source": "security@golang.org"
+ },
+ {
+ "url": "https://pkg.go.dev/vuln/GO-2025-3487",
+ "source": "security@golang.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-228xx/CVE-2025-22881.json b/CVE-2025/CVE-2025-228xx/CVE-2025-22881.json
new file mode 100644
index 00000000000..5d90ca798af
--- /dev/null
+++ b/CVE-2025/CVE-2025-228xx/CVE-2025-22881.json
@@ -0,0 +1,78 @@
+{
+ "id": "CVE-2025-22881",
+ "sourceIdentifier": "759f5e80-c8e1-4224-bead-956d7b33c98b",
+ "published": "2025-02-26T08:14:25.137",
+ "lastModified": "2025-02-26T08:14:25.137",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV40": [
+ {
+ "source": "759f5e80-c8e1-4224-bead-956d7b33c98b",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "4.0",
+ "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
+ "baseScore": 8.4,
+ "baseSeverity": "HIGH",
+ "attackVector": "LOCAL",
+ "attackComplexity": "LOW",
+ "attackRequirements": "NONE",
+ "privilegesRequired": "NONE",
+ "userInteraction": "ACTIVE",
+ "vulnConfidentialityImpact": "HIGH",
+ "vulnIntegrityImpact": "HIGH",
+ "vulnAvailabilityImpact": "HIGH",
+ "subConfidentialityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "subAvailabilityImpact": "NONE",
+ "exploitMaturity": "NOT_DEFINED",
+ "confidentialityRequirement": "NOT_DEFINED",
+ "integrityRequirement": "NOT_DEFINED",
+ "availabilityRequirement": "NOT_DEFINED",
+ "modifiedAttackVector": "NOT_DEFINED",
+ "modifiedAttackComplexity": "NOT_DEFINED",
+ "modifiedAttackRequirements": "NOT_DEFINED",
+ "modifiedPrivilegesRequired": "NOT_DEFINED",
+ "modifiedUserInteraction": "NOT_DEFINED",
+ "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
+ "modifiedVulnIntegrityImpact": "NOT_DEFINED",
+ "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
+ "modifiedSubConfidentialityImpact": "NOT_DEFINED",
+ "modifiedSubIntegrityImpact": "NOT_DEFINED",
+ "modifiedSubAvailabilityImpact": "NOT_DEFINED",
+ "Safety": "NOT_DEFINED",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
+ "valueDensity": "NOT_DEFINED",
+ "vulnerabilityResponseEffort": "NOT_DEFINED",
+ "providerUrgency": "NOT_DEFINED"
+ }
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "759f5e80-c8e1-4224-bead-956d7b33c98b",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-122"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00003_CNCSoft-G2%20-%20Heap-based%20Buffer%20Overflow_v1.pdf",
+ "source": "759f5e80-c8e1-4224-bead-956d7b33c98b"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-244xx/CVE-2025-24434.json b/CVE-2025/CVE-2025-244xx/CVE-2025-24434.json
index 16d1dad8911..eb59249d70a 100644
--- a/CVE-2025/CVE-2025-244xx/CVE-2025-24434.json
+++ b/CVE-2025/CVE-2025-244xx/CVE-2025-24434.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-24434",
"sourceIdentifier": "psirt@adobe.com",
"published": "2025-02-11T18:15:46.157",
- "lastModified": "2025-02-11T18:15:46.157",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T13:16:56.970",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "psirt@adobe.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
@@ -42,19 +42,504 @@
"weaknesses": [
{
"source": "psirt@adobe.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-285"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-863"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*",
+ "matchCriteriaId": "D258D9EF-94FB-41F0-A7A5-7F66FA7A0055"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "4E5CF6F0-2388-4D3F-8FE1-43B8AF148564"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "1C3D7164-1C5F-40BC-9EEC-B0E00CD45808"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*",
+ "matchCriteriaId": "68AAE162-5957-42AF-BE20-40F341837FAC"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "D6D6F1A7-ABB5-4EDC-9EA8-98B74518847A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "CFEBDDF2-6443-4482-83B2-3CD272CF599F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*",
+ "matchCriteriaId": "6661093F-8D22-450F-BC6C-A8894A52E6A9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*",
+ "matchCriteriaId": "2515DA6D-2E74-4A05-BD29-FEEF3322BCB6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*",
+ "matchCriteriaId": "69A1F1F7-E53C-40F3-B3D9-DC011FC353BF"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "6A56E96C-6CE5-442C-AA88-F0059B02B5E7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "8867F510-201C-4199-8554-53DE156CE669"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*",
+ "matchCriteriaId": "23988132-DD4E-4968-B6B8-954122F76081"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*",
+ "matchCriteriaId": "9B07F7B2-E915-4EFF-8FFC-91143CEF082E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "7F5E9DB6-1386-4274-8270-2FE0F0CAF7FD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "5764CC97-C866-415D-A3A1-5B5B9E1C06A6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "8605E4E6-0F7D-42C8-B35B-2349A0BEFC69"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "B6318F97-E59A-4425-8DC7-045C78A644F8"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*",
+ "matchCriteriaId": "324A573E-DBC8-42A0-8CB8-EDD8FBAB7115"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*",
+ "matchCriteriaId": "54151A00-CFB8-4E6A-8E74-497CB67BF7E2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*",
+ "matchCriteriaId": "6DF0E74D-9293-4209-97D1-A3BA13C3DDE9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "8922D646-1A97-47ED-91C6-5A426781C98A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "952787C6-9BF1-49FB-9824-1236678E1902"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*",
+ "matchCriteriaId": "898A8679-3C46-4718-9EDF-583ADDFCF2EC"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*",
+ "matchCriteriaId": "7C7AFBB1-F9C9-4BDE-BCEF-94C9F0AC6798"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "D6086841-C175-46A1-8414-71C6163A0E7A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "D2E0DDD1-0F4A-4F96-B25D-40A39A1A535A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "A576B1B5-73A2-431E-998F-7E5458B51D6A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*",
+ "matchCriteriaId": "0E05F4AC-2A28-47E3-96DE-0E31AF73CD43"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*",
+ "matchCriteriaId": "3A9A62EE-1649-4815-8EC9-7AEF7949EB2F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*",
+ "matchCriteriaId": "E58690F9-FA9C-42A0-B4CD-91FD1197A53E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "77D01D8B-1FBC-43CA-90F9-C89D9B4D18F0"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "8B83729E-80AF-47CE-A70C-32BF83024A40"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*",
+ "matchCriteriaId": "B5D04853-0C2F-47DD-A939-3A8F6E22CB7D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "2E05341A-C70C-4B3D-AF30-9520D6B97D30"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "4D98B52E-3B59-4327-AC7E-DDBB0ADA08F6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "95026AA9-A28B-4D94-BD77-7628429EBA30"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:*",
+ "matchCriteriaId": "6D05A958-9749-486A-A149-C21647CDCADF"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*",
+ "matchCriteriaId": "C4667AA3-4CC9-41C0-8E0C-19B0FCE1CF79"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "2ADE32D1-2845-4030-BE1F-ECE28189D0F9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*",
+ "matchCriteriaId": "F2E771C9-86C4-455C-98D4-6F4FE7A9A822"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*",
+ "matchCriteriaId": "1C90C433-6655-4038-9AB3-0304C1AFF360"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "89BAB227-03E6-4776-ADE4-9D9CB666EFD9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*",
+ "matchCriteriaId": "6E94B136-7A2C-47F0-BCE4-6BB8E776A305"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*",
+ "matchCriteriaId": "3C5C3F26-24F0-4CF5-AA2E-7CA13E9D17DB"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "66F3EA5F-08A2-4A1E-82D3-BBE7FFA2667E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "7930F188-A689-4041-BF4F-FBCA579D2E49"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*",
+ "matchCriteriaId": "15C638A8-EFE0-47DB-B1F9-34093AF0FC17"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "CB863404-A9D7-4692-AB43-08945E669928"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "D8CFA8F4-D57D-4D0F-88D5-00A72E3AD8DA"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "A21F608C-C356-47B8-8FBB-DB28BABFC4C6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.0:*:*:*:*:*:*:*",
+ "matchCriteriaId": "E6DF9B16-DF4F-4EFC-8747-2CEEA71477DB"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "AC641EFE-3B9B-4988-A143-FE1F6FD0D689"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "5F7AA4A6-69E3-4BA4-A476-CA37F41D5482"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p10:*:*:open_source:*:*:*",
+ "matchCriteriaId": "3465841A-1CE5-4173-A795-48881146618B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p11:*:*:open_source:*:*:*",
+ "matchCriteriaId": "3252B090-DE40-4F56-B55A-BE20DA2AF606"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "A3D05570-FA72-4FCF-90E9-EC19731CD9F7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "7DF079F1-1886-4974-A0F0-82DEA88F2E83"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:*",
+ "matchCriteriaId": "C4E7AFE2-E02D-4C7D-B9C3-CEF345F1287C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:*",
+ "matchCriteriaId": "F39BCCFC-4748-4626-8E35-4BD299CE42A5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:*",
+ "matchCriteriaId": "EB9003A6-F5CC-463F-AC3A-C76F96A39F45"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:*",
+ "matchCriteriaId": "10DBD0CA-AFC2-4E12-9239-C2FBE778E6E4"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:*",
+ "matchCriteriaId": "FBB3AA19-BF6C-4C4B-A213-494D35F08D99"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:*",
+ "matchCriteriaId": "6FE43B88-BCD6-4ADF-94E7-81EC15550A67"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "7A41C717-4B9F-4972-ABA3-2294EEC20F3E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "3FA80BBC-2DF2-46E1-84CE-8A899415114E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:*",
+ "matchCriteriaId": "783E4AF1-52F3-446B-B003-8079EDA78CBF"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "510B1840-AE77-4BDD-9C09-26C64CC8FC81"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "FA1EDF58-8384-48C4-A584-54D24F6F7973"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*",
+ "matchCriteriaId": "9D2D9715-3A6B-4BE0-B1C5-8D19A683A083"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*",
+ "matchCriteriaId": "1C99B578-5DD6-476D-BB75-4DCAD7F79535"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*",
+ "matchCriteriaId": "7C1B2897-79A5-4A5B-9137-7A4B6B85AA84"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*",
+ "matchCriteriaId": "B9E8299D-FA97-483A-8E1B-BA7B869E467D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*",
+ "matchCriteriaId": "9A1B92EC-E83A-43B3-8F14-5C1A52B579B1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*",
+ "matchCriteriaId": "E5F2B6F1-AE8F-4AEE-9AB3-080976AE48B7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "789BD987-9DAD-4EAE-93DE-0E267D54F124"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "A3F113C0-00C5-4BC2-B42B-8AE3756252F2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "02592D65-2D2C-460A-A970-8A18F9B156ED"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "457B89CF-C75E-4ED6-8603-9C52BA462A9E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*",
+ "matchCriteriaId": "A572A2DC-2DAB-4ABE-8FC2-5AF2340C826F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*",
+ "matchCriteriaId": "2A2DD9C6-BAF5-4DF5-9C14-3478923B2019"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*",
+ "matchCriteriaId": "BA9CFC70-24CF-4DFA-AEF9-9B5A9DAF837D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*",
+ "matchCriteriaId": "2AA0B806-ABB8-4C18-9F9C-8291BE208F52"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*",
+ "matchCriteriaId": "AA9D4DAB-7567-48D7-BE60-2A10B35CFF27"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "0E06FE04-8844-4409-92D9-4972B47C921B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "9C77154A-DBFE-48C3-A274-03075A0DB040"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "F5AAC414-623C-444F-9BD5-EE0ACE2B2246"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "8292888D-B0B0-4DF3-8719-EA4CDCAB39D1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "59C10C74-FDB1-46EC-8F41-F3AC24AEFB7D"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://helpx.adobe.com/security/products/magento/apsb25-08.html",
- "source": "psirt@adobe.com"
+ "source": "psirt@adobe.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-244xx/CVE-2025-24435.json b/CVE-2025/CVE-2025-244xx/CVE-2025-24435.json
index f5def3b3318..054b7a3b93b 100644
--- a/CVE-2025/CVE-2025-244xx/CVE-2025-24435.json
+++ b/CVE-2025/CVE-2025-244xx/CVE-2025-24435.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-24435",
"sourceIdentifier": "psirt@adobe.com",
"published": "2025-02-11T18:15:46.347",
- "lastModified": "2025-02-11T18:15:46.347",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T13:16:56.970",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "psirt@adobe.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
@@ -42,19 +42,504 @@
"weaknesses": [
{
"source": "psirt@adobe.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*",
+ "matchCriteriaId": "D258D9EF-94FB-41F0-A7A5-7F66FA7A0055"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "4E5CF6F0-2388-4D3F-8FE1-43B8AF148564"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "1C3D7164-1C5F-40BC-9EEC-B0E00CD45808"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*",
+ "matchCriteriaId": "68AAE162-5957-42AF-BE20-40F341837FAC"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "D6D6F1A7-ABB5-4EDC-9EA8-98B74518847A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "CFEBDDF2-6443-4482-83B2-3CD272CF599F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*",
+ "matchCriteriaId": "6661093F-8D22-450F-BC6C-A8894A52E6A9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*",
+ "matchCriteriaId": "2515DA6D-2E74-4A05-BD29-FEEF3322BCB6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*",
+ "matchCriteriaId": "69A1F1F7-E53C-40F3-B3D9-DC011FC353BF"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "6A56E96C-6CE5-442C-AA88-F0059B02B5E7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "8867F510-201C-4199-8554-53DE156CE669"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*",
+ "matchCriteriaId": "23988132-DD4E-4968-B6B8-954122F76081"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*",
+ "matchCriteriaId": "9B07F7B2-E915-4EFF-8FFC-91143CEF082E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "7F5E9DB6-1386-4274-8270-2FE0F0CAF7FD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "5764CC97-C866-415D-A3A1-5B5B9E1C06A6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "8605E4E6-0F7D-42C8-B35B-2349A0BEFC69"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "B6318F97-E59A-4425-8DC7-045C78A644F8"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*",
+ "matchCriteriaId": "324A573E-DBC8-42A0-8CB8-EDD8FBAB7115"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*",
+ "matchCriteriaId": "54151A00-CFB8-4E6A-8E74-497CB67BF7E2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*",
+ "matchCriteriaId": "6DF0E74D-9293-4209-97D1-A3BA13C3DDE9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "8922D646-1A97-47ED-91C6-5A426781C98A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "952787C6-9BF1-49FB-9824-1236678E1902"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*",
+ "matchCriteriaId": "898A8679-3C46-4718-9EDF-583ADDFCF2EC"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*",
+ "matchCriteriaId": "7C7AFBB1-F9C9-4BDE-BCEF-94C9F0AC6798"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "D6086841-C175-46A1-8414-71C6163A0E7A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "D2E0DDD1-0F4A-4F96-B25D-40A39A1A535A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "A576B1B5-73A2-431E-998F-7E5458B51D6A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*",
+ "matchCriteriaId": "0E05F4AC-2A28-47E3-96DE-0E31AF73CD43"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*",
+ "matchCriteriaId": "3A9A62EE-1649-4815-8EC9-7AEF7949EB2F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*",
+ "matchCriteriaId": "E58690F9-FA9C-42A0-B4CD-91FD1197A53E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "77D01D8B-1FBC-43CA-90F9-C89D9B4D18F0"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "8B83729E-80AF-47CE-A70C-32BF83024A40"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*",
+ "matchCriteriaId": "B5D04853-0C2F-47DD-A939-3A8F6E22CB7D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "2E05341A-C70C-4B3D-AF30-9520D6B97D30"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "4D98B52E-3B59-4327-AC7E-DDBB0ADA08F6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "95026AA9-A28B-4D94-BD77-7628429EBA30"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:*",
+ "matchCriteriaId": "6D05A958-9749-486A-A149-C21647CDCADF"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*",
+ "matchCriteriaId": "C4667AA3-4CC9-41C0-8E0C-19B0FCE1CF79"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "2ADE32D1-2845-4030-BE1F-ECE28189D0F9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*",
+ "matchCriteriaId": "F2E771C9-86C4-455C-98D4-6F4FE7A9A822"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*",
+ "matchCriteriaId": "1C90C433-6655-4038-9AB3-0304C1AFF360"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "89BAB227-03E6-4776-ADE4-9D9CB666EFD9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*",
+ "matchCriteriaId": "6E94B136-7A2C-47F0-BCE4-6BB8E776A305"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*",
+ "matchCriteriaId": "3C5C3F26-24F0-4CF5-AA2E-7CA13E9D17DB"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "66F3EA5F-08A2-4A1E-82D3-BBE7FFA2667E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "7930F188-A689-4041-BF4F-FBCA579D2E49"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*",
+ "matchCriteriaId": "15C638A8-EFE0-47DB-B1F9-34093AF0FC17"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "CB863404-A9D7-4692-AB43-08945E669928"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "D8CFA8F4-D57D-4D0F-88D5-00A72E3AD8DA"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "A21F608C-C356-47B8-8FBB-DB28BABFC4C6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.0:*:*:*:*:*:*:*",
+ "matchCriteriaId": "E6DF9B16-DF4F-4EFC-8747-2CEEA71477DB"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "AC641EFE-3B9B-4988-A143-FE1F6FD0D689"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "5F7AA4A6-69E3-4BA4-A476-CA37F41D5482"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p10:*:*:open_source:*:*:*",
+ "matchCriteriaId": "3465841A-1CE5-4173-A795-48881146618B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p11:*:*:open_source:*:*:*",
+ "matchCriteriaId": "3252B090-DE40-4F56-B55A-BE20DA2AF606"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "A3D05570-FA72-4FCF-90E9-EC19731CD9F7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "7DF079F1-1886-4974-A0F0-82DEA88F2E83"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:*",
+ "matchCriteriaId": "C4E7AFE2-E02D-4C7D-B9C3-CEF345F1287C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:*",
+ "matchCriteriaId": "F39BCCFC-4748-4626-8E35-4BD299CE42A5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:*",
+ "matchCriteriaId": "EB9003A6-F5CC-463F-AC3A-C76F96A39F45"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:*",
+ "matchCriteriaId": "10DBD0CA-AFC2-4E12-9239-C2FBE778E6E4"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:*",
+ "matchCriteriaId": "FBB3AA19-BF6C-4C4B-A213-494D35F08D99"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:*",
+ "matchCriteriaId": "6FE43B88-BCD6-4ADF-94E7-81EC15550A67"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "7A41C717-4B9F-4972-ABA3-2294EEC20F3E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "3FA80BBC-2DF2-46E1-84CE-8A899415114E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:*",
+ "matchCriteriaId": "783E4AF1-52F3-446B-B003-8079EDA78CBF"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "510B1840-AE77-4BDD-9C09-26C64CC8FC81"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "FA1EDF58-8384-48C4-A584-54D24F6F7973"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*",
+ "matchCriteriaId": "9D2D9715-3A6B-4BE0-B1C5-8D19A683A083"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*",
+ "matchCriteriaId": "1C99B578-5DD6-476D-BB75-4DCAD7F79535"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*",
+ "matchCriteriaId": "7C1B2897-79A5-4A5B-9137-7A4B6B85AA84"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*",
+ "matchCriteriaId": "B9E8299D-FA97-483A-8E1B-BA7B869E467D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*",
+ "matchCriteriaId": "9A1B92EC-E83A-43B3-8F14-5C1A52B579B1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*",
+ "matchCriteriaId": "E5F2B6F1-AE8F-4AEE-9AB3-080976AE48B7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "789BD987-9DAD-4EAE-93DE-0E267D54F124"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "A3F113C0-00C5-4BC2-B42B-8AE3756252F2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "02592D65-2D2C-460A-A970-8A18F9B156ED"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "457B89CF-C75E-4ED6-8603-9C52BA462A9E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*",
+ "matchCriteriaId": "A572A2DC-2DAB-4ABE-8FC2-5AF2340C826F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*",
+ "matchCriteriaId": "2A2DD9C6-BAF5-4DF5-9C14-3478923B2019"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*",
+ "matchCriteriaId": "BA9CFC70-24CF-4DFA-AEF9-9B5A9DAF837D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*",
+ "matchCriteriaId": "2AA0B806-ABB8-4C18-9F9C-8291BE208F52"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*",
+ "matchCriteriaId": "AA9D4DAB-7567-48D7-BE60-2A10B35CFF27"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "0E06FE04-8844-4409-92D9-4972B47C921B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "9C77154A-DBFE-48C3-A274-03075A0DB040"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "F5AAC414-623C-444F-9BD5-EE0ACE2B2246"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "8292888D-B0B0-4DF3-8719-EA4CDCAB39D1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "59C10C74-FDB1-46EC-8F41-F3AC24AEFB7D"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://helpx.adobe.com/security/products/magento/apsb25-08.html",
- "source": "psirt@adobe.com"
+ "source": "psirt@adobe.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-244xx/CVE-2025-24436.json b/CVE-2025/CVE-2025-244xx/CVE-2025-24436.json
index 6932e8f2b45..06dbf309b3e 100644
--- a/CVE-2025/CVE-2025-244xx/CVE-2025-24436.json
+++ b/CVE-2025/CVE-2025-244xx/CVE-2025-24436.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-24436",
"sourceIdentifier": "psirt@adobe.com",
"published": "2025-02-11T18:15:46.537",
- "lastModified": "2025-02-11T18:15:46.537",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T13:16:56.970",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "psirt@adobe.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
@@ -36,25 +36,530 @@
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 8.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "psirt@adobe.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*",
+ "matchCriteriaId": "D258D9EF-94FB-41F0-A7A5-7F66FA7A0055"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "4E5CF6F0-2388-4D3F-8FE1-43B8AF148564"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "1C3D7164-1C5F-40BC-9EEC-B0E00CD45808"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*",
+ "matchCriteriaId": "68AAE162-5957-42AF-BE20-40F341837FAC"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "D6D6F1A7-ABB5-4EDC-9EA8-98B74518847A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "CFEBDDF2-6443-4482-83B2-3CD272CF599F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*",
+ "matchCriteriaId": "6661093F-8D22-450F-BC6C-A8894A52E6A9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*",
+ "matchCriteriaId": "2515DA6D-2E74-4A05-BD29-FEEF3322BCB6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*",
+ "matchCriteriaId": "69A1F1F7-E53C-40F3-B3D9-DC011FC353BF"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "6A56E96C-6CE5-442C-AA88-F0059B02B5E7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "8867F510-201C-4199-8554-53DE156CE669"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*",
+ "matchCriteriaId": "23988132-DD4E-4968-B6B8-954122F76081"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*",
+ "matchCriteriaId": "9B07F7B2-E915-4EFF-8FFC-91143CEF082E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "7F5E9DB6-1386-4274-8270-2FE0F0CAF7FD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "5764CC97-C866-415D-A3A1-5B5B9E1C06A6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "8605E4E6-0F7D-42C8-B35B-2349A0BEFC69"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "B6318F97-E59A-4425-8DC7-045C78A644F8"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*",
+ "matchCriteriaId": "324A573E-DBC8-42A0-8CB8-EDD8FBAB7115"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*",
+ "matchCriteriaId": "54151A00-CFB8-4E6A-8E74-497CB67BF7E2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*",
+ "matchCriteriaId": "6DF0E74D-9293-4209-97D1-A3BA13C3DDE9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "8922D646-1A97-47ED-91C6-5A426781C98A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "952787C6-9BF1-49FB-9824-1236678E1902"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*",
+ "matchCriteriaId": "898A8679-3C46-4718-9EDF-583ADDFCF2EC"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*",
+ "matchCriteriaId": "7C7AFBB1-F9C9-4BDE-BCEF-94C9F0AC6798"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "D6086841-C175-46A1-8414-71C6163A0E7A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "D2E0DDD1-0F4A-4F96-B25D-40A39A1A535A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "A576B1B5-73A2-431E-998F-7E5458B51D6A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*",
+ "matchCriteriaId": "0E05F4AC-2A28-47E3-96DE-0E31AF73CD43"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*",
+ "matchCriteriaId": "3A9A62EE-1649-4815-8EC9-7AEF7949EB2F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*",
+ "matchCriteriaId": "E58690F9-FA9C-42A0-B4CD-91FD1197A53E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "77D01D8B-1FBC-43CA-90F9-C89D9B4D18F0"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "8B83729E-80AF-47CE-A70C-32BF83024A40"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*",
+ "matchCriteriaId": "B5D04853-0C2F-47DD-A939-3A8F6E22CB7D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "2E05341A-C70C-4B3D-AF30-9520D6B97D30"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "4D98B52E-3B59-4327-AC7E-DDBB0ADA08F6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "95026AA9-A28B-4D94-BD77-7628429EBA30"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:*",
+ "matchCriteriaId": "6D05A958-9749-486A-A149-C21647CDCADF"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*",
+ "matchCriteriaId": "C4667AA3-4CC9-41C0-8E0C-19B0FCE1CF79"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "2ADE32D1-2845-4030-BE1F-ECE28189D0F9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*",
+ "matchCriteriaId": "F2E771C9-86C4-455C-98D4-6F4FE7A9A822"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*",
+ "matchCriteriaId": "1C90C433-6655-4038-9AB3-0304C1AFF360"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "89BAB227-03E6-4776-ADE4-9D9CB666EFD9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*",
+ "matchCriteriaId": "6E94B136-7A2C-47F0-BCE4-6BB8E776A305"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*",
+ "matchCriteriaId": "3C5C3F26-24F0-4CF5-AA2E-7CA13E9D17DB"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "66F3EA5F-08A2-4A1E-82D3-BBE7FFA2667E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "7930F188-A689-4041-BF4F-FBCA579D2E49"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*",
+ "matchCriteriaId": "15C638A8-EFE0-47DB-B1F9-34093AF0FC17"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "CB863404-A9D7-4692-AB43-08945E669928"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "D8CFA8F4-D57D-4D0F-88D5-00A72E3AD8DA"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "A21F608C-C356-47B8-8FBB-DB28BABFC4C6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.0:*:*:*:*:*:*:*",
+ "matchCriteriaId": "E6DF9B16-DF4F-4EFC-8747-2CEEA71477DB"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "AC641EFE-3B9B-4988-A143-FE1F6FD0D689"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "5F7AA4A6-69E3-4BA4-A476-CA37F41D5482"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p10:*:*:open_source:*:*:*",
+ "matchCriteriaId": "3465841A-1CE5-4173-A795-48881146618B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p11:*:*:open_source:*:*:*",
+ "matchCriteriaId": "3252B090-DE40-4F56-B55A-BE20DA2AF606"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "A3D05570-FA72-4FCF-90E9-EC19731CD9F7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "7DF079F1-1886-4974-A0F0-82DEA88F2E83"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:*",
+ "matchCriteriaId": "C4E7AFE2-E02D-4C7D-B9C3-CEF345F1287C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:*",
+ "matchCriteriaId": "F39BCCFC-4748-4626-8E35-4BD299CE42A5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:*",
+ "matchCriteriaId": "EB9003A6-F5CC-463F-AC3A-C76F96A39F45"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:*",
+ "matchCriteriaId": "10DBD0CA-AFC2-4E12-9239-C2FBE778E6E4"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:*",
+ "matchCriteriaId": "FBB3AA19-BF6C-4C4B-A213-494D35F08D99"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:*",
+ "matchCriteriaId": "6FE43B88-BCD6-4ADF-94E7-81EC15550A67"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "7A41C717-4B9F-4972-ABA3-2294EEC20F3E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "3FA80BBC-2DF2-46E1-84CE-8A899415114E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:*",
+ "matchCriteriaId": "783E4AF1-52F3-446B-B003-8079EDA78CBF"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "510B1840-AE77-4BDD-9C09-26C64CC8FC81"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "FA1EDF58-8384-48C4-A584-54D24F6F7973"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*",
+ "matchCriteriaId": "9D2D9715-3A6B-4BE0-B1C5-8D19A683A083"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*",
+ "matchCriteriaId": "1C99B578-5DD6-476D-BB75-4DCAD7F79535"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*",
+ "matchCriteriaId": "7C1B2897-79A5-4A5B-9137-7A4B6B85AA84"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*",
+ "matchCriteriaId": "B9E8299D-FA97-483A-8E1B-BA7B869E467D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*",
+ "matchCriteriaId": "9A1B92EC-E83A-43B3-8F14-5C1A52B579B1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*",
+ "matchCriteriaId": "E5F2B6F1-AE8F-4AEE-9AB3-080976AE48B7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "789BD987-9DAD-4EAE-93DE-0E267D54F124"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "A3F113C0-00C5-4BC2-B42B-8AE3756252F2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "02592D65-2D2C-460A-A970-8A18F9B156ED"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "457B89CF-C75E-4ED6-8603-9C52BA462A9E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*",
+ "matchCriteriaId": "A572A2DC-2DAB-4ABE-8FC2-5AF2340C826F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*",
+ "matchCriteriaId": "2A2DD9C6-BAF5-4DF5-9C14-3478923B2019"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*",
+ "matchCriteriaId": "BA9CFC70-24CF-4DFA-AEF9-9B5A9DAF837D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*",
+ "matchCriteriaId": "2AA0B806-ABB8-4C18-9F9C-8291BE208F52"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*",
+ "matchCriteriaId": "AA9D4DAB-7567-48D7-BE60-2A10B35CFF27"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "0E06FE04-8844-4409-92D9-4972B47C921B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "9C77154A-DBFE-48C3-A274-03075A0DB040"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "F5AAC414-623C-444F-9BD5-EE0ACE2B2246"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "8292888D-B0B0-4DF3-8719-EA4CDCAB39D1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "59C10C74-FDB1-46EC-8F41-F3AC24AEFB7D"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://helpx.adobe.com/security/products/magento/apsb25-08.html",
- "source": "psirt@adobe.com"
+ "source": "psirt@adobe.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-244xx/CVE-2025-24437.json b/CVE-2025/CVE-2025-244xx/CVE-2025-24437.json
index 3bd56cb90a5..450a22b64ad 100644
--- a/CVE-2025/CVE-2025-244xx/CVE-2025-24437.json
+++ b/CVE-2025/CVE-2025-244xx/CVE-2025-24437.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-24437",
"sourceIdentifier": "psirt@adobe.com",
"published": "2025-02-11T18:15:46.717",
- "lastModified": "2025-02-11T18:15:46.717",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T13:16:56.970",
+ "vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "psirt@adobe.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
@@ -36,25 +36,530 @@
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 8.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "psirt@adobe.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
+ },
+ {
+ "source": "nvd@nist.gov",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "NVD-CWE-noinfo"
+ }
+ ]
+ }
+ ],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*",
+ "matchCriteriaId": "D258D9EF-94FB-41F0-A7A5-7F66FA7A0055"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "4E5CF6F0-2388-4D3F-8FE1-43B8AF148564"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "1C3D7164-1C5F-40BC-9EEC-B0E00CD45808"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*",
+ "matchCriteriaId": "68AAE162-5957-42AF-BE20-40F341837FAC"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "D6D6F1A7-ABB5-4EDC-9EA8-98B74518847A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "CFEBDDF2-6443-4482-83B2-3CD272CF599F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*",
+ "matchCriteriaId": "6661093F-8D22-450F-BC6C-A8894A52E6A9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*",
+ "matchCriteriaId": "2515DA6D-2E74-4A05-BD29-FEEF3322BCB6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*",
+ "matchCriteriaId": "69A1F1F7-E53C-40F3-B3D9-DC011FC353BF"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "6A56E96C-6CE5-442C-AA88-F0059B02B5E7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "8867F510-201C-4199-8554-53DE156CE669"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*",
+ "matchCriteriaId": "23988132-DD4E-4968-B6B8-954122F76081"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*",
+ "matchCriteriaId": "9B07F7B2-E915-4EFF-8FFC-91143CEF082E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "7F5E9DB6-1386-4274-8270-2FE0F0CAF7FD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "5764CC97-C866-415D-A3A1-5B5B9E1C06A6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "8605E4E6-0F7D-42C8-B35B-2349A0BEFC69"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "B6318F97-E59A-4425-8DC7-045C78A644F8"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*",
+ "matchCriteriaId": "324A573E-DBC8-42A0-8CB8-EDD8FBAB7115"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*",
+ "matchCriteriaId": "54151A00-CFB8-4E6A-8E74-497CB67BF7E2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*",
+ "matchCriteriaId": "6DF0E74D-9293-4209-97D1-A3BA13C3DDE9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "8922D646-1A97-47ED-91C6-5A426781C98A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "952787C6-9BF1-49FB-9824-1236678E1902"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*",
+ "matchCriteriaId": "898A8679-3C46-4718-9EDF-583ADDFCF2EC"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*",
+ "matchCriteriaId": "7C7AFBB1-F9C9-4BDE-BCEF-94C9F0AC6798"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "D6086841-C175-46A1-8414-71C6163A0E7A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "D2E0DDD1-0F4A-4F96-B25D-40A39A1A535A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "A576B1B5-73A2-431E-998F-7E5458B51D6A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*",
+ "matchCriteriaId": "0E05F4AC-2A28-47E3-96DE-0E31AF73CD43"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*",
+ "matchCriteriaId": "3A9A62EE-1649-4815-8EC9-7AEF7949EB2F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*",
+ "matchCriteriaId": "E58690F9-FA9C-42A0-B4CD-91FD1197A53E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "77D01D8B-1FBC-43CA-90F9-C89D9B4D18F0"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "8B83729E-80AF-47CE-A70C-32BF83024A40"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*",
+ "matchCriteriaId": "B5D04853-0C2F-47DD-A939-3A8F6E22CB7D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "2E05341A-C70C-4B3D-AF30-9520D6B97D30"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "4D98B52E-3B59-4327-AC7E-DDBB0ADA08F6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "95026AA9-A28B-4D94-BD77-7628429EBA30"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:*",
+ "matchCriteriaId": "6D05A958-9749-486A-A149-C21647CDCADF"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*",
+ "matchCriteriaId": "C4667AA3-4CC9-41C0-8E0C-19B0FCE1CF79"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "2ADE32D1-2845-4030-BE1F-ECE28189D0F9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*",
+ "matchCriteriaId": "F2E771C9-86C4-455C-98D4-6F4FE7A9A822"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*",
+ "matchCriteriaId": "1C90C433-6655-4038-9AB3-0304C1AFF360"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "89BAB227-03E6-4776-ADE4-9D9CB666EFD9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*",
+ "matchCriteriaId": "6E94B136-7A2C-47F0-BCE4-6BB8E776A305"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*",
+ "matchCriteriaId": "3C5C3F26-24F0-4CF5-AA2E-7CA13E9D17DB"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "66F3EA5F-08A2-4A1E-82D3-BBE7FFA2667E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "7930F188-A689-4041-BF4F-FBCA579D2E49"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*",
+ "matchCriteriaId": "15C638A8-EFE0-47DB-B1F9-34093AF0FC17"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "CB863404-A9D7-4692-AB43-08945E669928"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "D8CFA8F4-D57D-4D0F-88D5-00A72E3AD8DA"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "A21F608C-C356-47B8-8FBB-DB28BABFC4C6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.0:*:*:*:*:*:*:*",
+ "matchCriteriaId": "E6DF9B16-DF4F-4EFC-8747-2CEEA71477DB"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "AC641EFE-3B9B-4988-A143-FE1F6FD0D689"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "5F7AA4A6-69E3-4BA4-A476-CA37F41D5482"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p10:*:*:open_source:*:*:*",
+ "matchCriteriaId": "3465841A-1CE5-4173-A795-48881146618B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p11:*:*:open_source:*:*:*",
+ "matchCriteriaId": "3252B090-DE40-4F56-B55A-BE20DA2AF606"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "A3D05570-FA72-4FCF-90E9-EC19731CD9F7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "7DF079F1-1886-4974-A0F0-82DEA88F2E83"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:*",
+ "matchCriteriaId": "C4E7AFE2-E02D-4C7D-B9C3-CEF345F1287C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:*",
+ "matchCriteriaId": "F39BCCFC-4748-4626-8E35-4BD299CE42A5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:*",
+ "matchCriteriaId": "EB9003A6-F5CC-463F-AC3A-C76F96A39F45"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:*",
+ "matchCriteriaId": "10DBD0CA-AFC2-4E12-9239-C2FBE778E6E4"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:*",
+ "matchCriteriaId": "FBB3AA19-BF6C-4C4B-A213-494D35F08D99"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:*",
+ "matchCriteriaId": "6FE43B88-BCD6-4ADF-94E7-81EC15550A67"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "7A41C717-4B9F-4972-ABA3-2294EEC20F3E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "3FA80BBC-2DF2-46E1-84CE-8A899415114E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:*",
+ "matchCriteriaId": "783E4AF1-52F3-446B-B003-8079EDA78CBF"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "510B1840-AE77-4BDD-9C09-26C64CC8FC81"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "FA1EDF58-8384-48C4-A584-54D24F6F7973"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*",
+ "matchCriteriaId": "9D2D9715-3A6B-4BE0-B1C5-8D19A683A083"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*",
+ "matchCriteriaId": "1C99B578-5DD6-476D-BB75-4DCAD7F79535"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*",
+ "matchCriteriaId": "7C1B2897-79A5-4A5B-9137-7A4B6B85AA84"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*",
+ "matchCriteriaId": "B9E8299D-FA97-483A-8E1B-BA7B869E467D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*",
+ "matchCriteriaId": "9A1B92EC-E83A-43B3-8F14-5C1A52B579B1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*",
+ "matchCriteriaId": "E5F2B6F1-AE8F-4AEE-9AB3-080976AE48B7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "789BD987-9DAD-4EAE-93DE-0E267D54F124"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "A3F113C0-00C5-4BC2-B42B-8AE3756252F2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "02592D65-2D2C-460A-A970-8A18F9B156ED"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "457B89CF-C75E-4ED6-8603-9C52BA462A9E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*",
+ "matchCriteriaId": "A572A2DC-2DAB-4ABE-8FC2-5AF2340C826F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*",
+ "matchCriteriaId": "2A2DD9C6-BAF5-4DF5-9C14-3478923B2019"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*",
+ "matchCriteriaId": "BA9CFC70-24CF-4DFA-AEF9-9B5A9DAF837D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*",
+ "matchCriteriaId": "2AA0B806-ABB8-4C18-9F9C-8291BE208F52"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*",
+ "matchCriteriaId": "AA9D4DAB-7567-48D7-BE60-2A10B35CFF27"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "0E06FE04-8844-4409-92D9-4972B47C921B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "9C77154A-DBFE-48C3-A274-03075A0DB040"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "F5AAC414-623C-444F-9BD5-EE0ACE2B2246"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "8292888D-B0B0-4DF3-8719-EA4CDCAB39D1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "59C10C74-FDB1-46EC-8F41-F3AC24AEFB7D"
+ }
+ ]
+ }
+ ]
}
],
"references": [
{
"url": "https://helpx.adobe.com/security/products/magento/apsb25-08.html",
- "source": "psirt@adobe.com"
+ "source": "psirt@adobe.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-244xx/CVE-2025-24438.json b/CVE-2025/CVE-2025-244xx/CVE-2025-24438.json
index ada2310f157..79ffd591248 100644
--- a/CVE-2025/CVE-2025-244xx/CVE-2025-24438.json
+++ b/CVE-2025/CVE-2025-244xx/CVE-2025-24438.json
@@ -2,8 +2,8 @@
"id": "CVE-2025-24438",
"sourceIdentifier": "psirt@adobe.com",
"published": "2025-02-11T18:15:46.893",
- "lastModified": "2025-02-11T18:15:46.893",
- "vulnStatus": "Awaiting Analysis",
+ "lastModified": "2025-02-26T13:16:56.970",
+ "vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "psirt@adobe.com",
- "type": "Primary",
+ "type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
@@ -42,7 +42,7 @@
"weaknesses": [
{
"source": "psirt@adobe.com",
- "type": "Primary",
+ "type": "Secondary",
"description": [
{
"lang": "en",
@@ -51,10 +51,485 @@
]
}
],
+ "configurations": [
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*",
+ "matchCriteriaId": "D258D9EF-94FB-41F0-A7A5-7F66FA7A0055"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "4E5CF6F0-2388-4D3F-8FE1-43B8AF148564"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "1C3D7164-1C5F-40BC-9EEC-B0E00CD45808"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*",
+ "matchCriteriaId": "68AAE162-5957-42AF-BE20-40F341837FAC"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "D6D6F1A7-ABB5-4EDC-9EA8-98B74518847A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "CFEBDDF2-6443-4482-83B2-3CD272CF599F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*",
+ "matchCriteriaId": "6661093F-8D22-450F-BC6C-A8894A52E6A9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*",
+ "matchCriteriaId": "2515DA6D-2E74-4A05-BD29-FEEF3322BCB6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*",
+ "matchCriteriaId": "69A1F1F7-E53C-40F3-B3D9-DC011FC353BF"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "6A56E96C-6CE5-442C-AA88-F0059B02B5E7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "8867F510-201C-4199-8554-53DE156CE669"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*",
+ "matchCriteriaId": "23988132-DD4E-4968-B6B8-954122F76081"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*",
+ "matchCriteriaId": "9B07F7B2-E915-4EFF-8FFC-91143CEF082E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "7F5E9DB6-1386-4274-8270-2FE0F0CAF7FD"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "5764CC97-C866-415D-A3A1-5B5B9E1C06A6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "8605E4E6-0F7D-42C8-B35B-2349A0BEFC69"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "B6318F97-E59A-4425-8DC7-045C78A644F8"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*",
+ "matchCriteriaId": "324A573E-DBC8-42A0-8CB8-EDD8FBAB7115"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*",
+ "matchCriteriaId": "54151A00-CFB8-4E6A-8E74-497CB67BF7E2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*",
+ "matchCriteriaId": "6DF0E74D-9293-4209-97D1-A3BA13C3DDE9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "8922D646-1A97-47ED-91C6-5A426781C98A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "952787C6-9BF1-49FB-9824-1236678E1902"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*",
+ "matchCriteriaId": "898A8679-3C46-4718-9EDF-583ADDFCF2EC"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*",
+ "matchCriteriaId": "7C7AFBB1-F9C9-4BDE-BCEF-94C9F0AC6798"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "D6086841-C175-46A1-8414-71C6163A0E7A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "D2E0DDD1-0F4A-4F96-B25D-40A39A1A535A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "A576B1B5-73A2-431E-998F-7E5458B51D6A"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*",
+ "matchCriteriaId": "0E05F4AC-2A28-47E3-96DE-0E31AF73CD43"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*",
+ "matchCriteriaId": "3A9A62EE-1649-4815-8EC9-7AEF7949EB2F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*",
+ "matchCriteriaId": "E58690F9-FA9C-42A0-B4CD-91FD1197A53E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "77D01D8B-1FBC-43CA-90F9-C89D9B4D18F0"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "8B83729E-80AF-47CE-A70C-32BF83024A40"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*",
+ "matchCriteriaId": "B5D04853-0C2F-47DD-A939-3A8F6E22CB7D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "2E05341A-C70C-4B3D-AF30-9520D6B97D30"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "4D98B52E-3B59-4327-AC7E-DDBB0ADA08F6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "95026AA9-A28B-4D94-BD77-7628429EBA30"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:*",
+ "matchCriteriaId": "6D05A958-9749-486A-A149-C21647CDCADF"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*",
+ "matchCriteriaId": "C4667AA3-4CC9-41C0-8E0C-19B0FCE1CF79"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "2ADE32D1-2845-4030-BE1F-ECE28189D0F9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*",
+ "matchCriteriaId": "F2E771C9-86C4-455C-98D4-6F4FE7A9A822"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*",
+ "matchCriteriaId": "1C90C433-6655-4038-9AB3-0304C1AFF360"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*",
+ "matchCriteriaId": "89BAB227-03E6-4776-ADE4-9D9CB666EFD9"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*",
+ "matchCriteriaId": "6E94B136-7A2C-47F0-BCE4-6BB8E776A305"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*",
+ "matchCriteriaId": "3C5C3F26-24F0-4CF5-AA2E-7CA13E9D17DB"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*",
+ "matchCriteriaId": "66F3EA5F-08A2-4A1E-82D3-BBE7FFA2667E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:*",
+ "matchCriteriaId": "7930F188-A689-4041-BF4F-FBCA579D2E49"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*",
+ "matchCriteriaId": "15C638A8-EFE0-47DB-B1F9-34093AF0FC17"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*",
+ "matchCriteriaId": "CB863404-A9D7-4692-AB43-08945E669928"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*",
+ "matchCriteriaId": "D8CFA8F4-D57D-4D0F-88D5-00A72E3AD8DA"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*",
+ "matchCriteriaId": "A21F608C-C356-47B8-8FBB-DB28BABFC4C6"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.0:*:*:*:*:*:*:*",
+ "matchCriteriaId": "E6DF9B16-DF4F-4EFC-8747-2CEEA71477DB"
+ }
+ ]
+ }
+ ]
+ },
+ {
+ "nodes": [
+ {
+ "operator": "OR",
+ "negate": false,
+ "cpeMatch": [
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "AC641EFE-3B9B-4988-A143-FE1F6FD0D689"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "5F7AA4A6-69E3-4BA4-A476-CA37F41D5482"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p10:*:*:open_source:*:*:*",
+ "matchCriteriaId": "3465841A-1CE5-4173-A795-48881146618B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p11:*:*:open_source:*:*:*",
+ "matchCriteriaId": "3252B090-DE40-4F56-B55A-BE20DA2AF606"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "A3D05570-FA72-4FCF-90E9-EC19731CD9F7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "7DF079F1-1886-4974-A0F0-82DEA88F2E83"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:*",
+ "matchCriteriaId": "C4E7AFE2-E02D-4C7D-B9C3-CEF345F1287C"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:*",
+ "matchCriteriaId": "F39BCCFC-4748-4626-8E35-4BD299CE42A5"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:*",
+ "matchCriteriaId": "EB9003A6-F5CC-463F-AC3A-C76F96A39F45"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:*",
+ "matchCriteriaId": "10DBD0CA-AFC2-4E12-9239-C2FBE778E6E4"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:*",
+ "matchCriteriaId": "FBB3AA19-BF6C-4C4B-A213-494D35F08D99"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:*",
+ "matchCriteriaId": "6FE43B88-BCD6-4ADF-94E7-81EC15550A67"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "7A41C717-4B9F-4972-ABA3-2294EEC20F3E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "3FA80BBC-2DF2-46E1-84CE-8A899415114E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:*",
+ "matchCriteriaId": "783E4AF1-52F3-446B-B003-8079EDA78CBF"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "510B1840-AE77-4BDD-9C09-26C64CC8FC81"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "FA1EDF58-8384-48C4-A584-54D24F6F7973"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*",
+ "matchCriteriaId": "9D2D9715-3A6B-4BE0-B1C5-8D19A683A083"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*",
+ "matchCriteriaId": "1C99B578-5DD6-476D-BB75-4DCAD7F79535"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*",
+ "matchCriteriaId": "7C1B2897-79A5-4A5B-9137-7A4B6B85AA84"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*",
+ "matchCriteriaId": "B9E8299D-FA97-483A-8E1B-BA7B869E467D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*",
+ "matchCriteriaId": "9A1B92EC-E83A-43B3-8F14-5C1A52B579B1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*",
+ "matchCriteriaId": "E5F2B6F1-AE8F-4AEE-9AB3-080976AE48B7"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "789BD987-9DAD-4EAE-93DE-0E267D54F124"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "A3F113C0-00C5-4BC2-B42B-8AE3756252F2"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "02592D65-2D2C-460A-A970-8A18F9B156ED"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "457B89CF-C75E-4ED6-8603-9C52BA462A9E"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*",
+ "matchCriteriaId": "A572A2DC-2DAB-4ABE-8FC2-5AF2340C826F"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*",
+ "matchCriteriaId": "2A2DD9C6-BAF5-4DF5-9C14-3478923B2019"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*",
+ "matchCriteriaId": "BA9CFC70-24CF-4DFA-AEF9-9B5A9DAF837D"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*",
+ "matchCriteriaId": "2AA0B806-ABB8-4C18-9F9C-8291BE208F52"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*",
+ "matchCriteriaId": "AA9D4DAB-7567-48D7-BE60-2A10B35CFF27"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*",
+ "matchCriteriaId": "0E06FE04-8844-4409-92D9-4972B47C921B"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "9C77154A-DBFE-48C3-A274-03075A0DB040"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*",
+ "matchCriteriaId": "F5AAC414-623C-444F-9BD5-EE0ACE2B2246"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*",
+ "matchCriteriaId": "8292888D-B0B0-4DF3-8719-EA4CDCAB39D1"
+ },
+ {
+ "vulnerable": true,
+ "criteria": "cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*",
+ "matchCriteriaId": "59C10C74-FDB1-46EC-8F41-F3AC24AEFB7D"
+ }
+ ]
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://helpx.adobe.com/security/products/magento/apsb25-08.html",
- "source": "psirt@adobe.com"
+ "source": "psirt@adobe.com",
+ "tags": [
+ "Vendor Advisory"
+ ]
}
]
}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-254xx/CVE-2025-25462.json b/CVE-2025/CVE-2025-254xx/CVE-2025-25462.json
new file mode 100644
index 00000000000..d1402917b6a
--- /dev/null
+++ b/CVE-2025/CVE-2025-254xx/CVE-2025-25462.json
@@ -0,0 +1,21 @@
+{
+ "id": "CVE-2025-25462",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T16:15:16.933",
+ "lastModified": "2025-02-26T16:15:16.933",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A SQL Injection vulnerability was found in /admin/add-propertytype.php in PHPGurukul Land Record System Project in PHP v1.0 allows remote attackers to execute arbitrary code via the propertytype POST request parameter."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "https://github.com/terrasystemlabs/CVE-IDs/blob/main/PHP-Gurukul/Land-record/Land_SQL_Injection.pdf",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-255xx/CVE-2025-25515.json b/CVE-2025/CVE-2025-255xx/CVE-2025-25515.json
index 5a4ed972a02..6b9c2b609f6 100644
--- a/CVE-2025/CVE-2025-255xx/CVE-2025-25515.json
+++ b/CVE-2025/CVE-2025-255xx/CVE-2025-25515.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-25515",
"sourceIdentifier": "cve@mitre.org",
"published": "2025-02-25T22:15:23.983",
- "lastModified": "2025-02-25T22:15:23.983",
+ "lastModified": "2025-02-26T15:15:25.327",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Seacms <=13.3 is vulnerable to SQL Injection in admin_collect.php that allows an authenticated attacker to exploit the database."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 8.8,
+ "baseSeverity": "HIGH",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/Colorado-all/cve/blob/main/seacms/seacms%20V13.3-sql-5.md",
diff --git a/CVE-2025/CVE-2025-255xx/CVE-2025-25516.json b/CVE-2025/CVE-2025-255xx/CVE-2025-25516.json
index 6fdc6966888..9bb8a8e9f63 100644
--- a/CVE-2025/CVE-2025-255xx/CVE-2025-25516.json
+++ b/CVE-2025/CVE-2025-255xx/CVE-2025-25516.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-25516",
"sourceIdentifier": "cve@mitre.org",
"published": "2025-02-25T22:15:24.067",
- "lastModified": "2025-02-25T22:15:24.067",
+ "lastModified": "2025-02-26T15:15:25.507",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Seacms <=13.3 is vulnerable to SQL Injection in admin_paylog.php."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/Colorado-all/cve/blob/main/seacms/seacms%20V13.3-sql-2.md",
diff --git a/CVE-2025/CVE-2025-255xx/CVE-2025-25517.json b/CVE-2025/CVE-2025-255xx/CVE-2025-25517.json
index 3ffe28a5e66..98ae09070bc 100644
--- a/CVE-2025/CVE-2025-255xx/CVE-2025-25517.json
+++ b/CVE-2025/CVE-2025-255xx/CVE-2025-25517.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-25517",
"sourceIdentifier": "cve@mitre.org",
"published": "2025-02-25T22:15:24.160",
- "lastModified": "2025-02-25T22:15:24.160",
+ "lastModified": "2025-02-26T15:15:25.680",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Seacms <=13.3 is vulnerable to SQL Injection in admin_reslib.php."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/Colorado-all/cve/blob/main/seacms/seacms%20V13.3-sql-7.md",
diff --git a/CVE-2025/CVE-2025-255xx/CVE-2025-25519.json b/CVE-2025/CVE-2025-255xx/CVE-2025-25519.json
index a90f9357d11..a87302acf15 100644
--- a/CVE-2025/CVE-2025-255xx/CVE-2025-25519.json
+++ b/CVE-2025/CVE-2025-255xx/CVE-2025-25519.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-25519",
"sourceIdentifier": "cve@mitre.org",
"published": "2025-02-25T22:15:24.257",
- "lastModified": "2025-02-25T22:15:24.257",
+ "lastModified": "2025-02-26T15:15:25.867",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Seacms <=13.3 is vulnerable to SQL Injection in admin_zyk.php."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/Colorado-all/cve/blob/main/seacms/seacms%20V13.3-sql-8.md",
diff --git a/CVE-2025/CVE-2025-255xx/CVE-2025-25520.json b/CVE-2025/CVE-2025-255xx/CVE-2025-25520.json
index d7368aae05d..97e852343ac 100644
--- a/CVE-2025/CVE-2025-255xx/CVE-2025-25520.json
+++ b/CVE-2025/CVE-2025-255xx/CVE-2025-25520.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-25520",
"sourceIdentifier": "cve@mitre.org",
"published": "2025-02-25T22:15:24.340",
- "lastModified": "2025-02-25T22:15:24.340",
+ "lastModified": "2025-02-26T15:15:26.053",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Seacms <13.3 is vulnerable to SQL Injection in admin_pay.php."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/Colorado-all/cve/blob/main/seacms/seacms%20V13.3-sql-4.md",
diff --git a/CVE-2025/CVE-2025-255xx/CVE-2025-25521.json b/CVE-2025/CVE-2025-255xx/CVE-2025-25521.json
index c528ed9a895..7b68052290a 100644
--- a/CVE-2025/CVE-2025-255xx/CVE-2025-25521.json
+++ b/CVE-2025/CVE-2025-255xx/CVE-2025-25521.json
@@ -2,7 +2,7 @@
"id": "CVE-2025-25521",
"sourceIdentifier": "cve@mitre.org",
"published": "2025-02-25T22:15:24.430",
- "lastModified": "2025-02-25T22:15:24.430",
+ "lastModified": "2025-02-26T15:15:26.240",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Seacms <=13.3 is vulnerable to SQL Injection in admin_type_news.php."
}
],
- "metrics": {},
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+ "baseScore": 9.8,
+ "baseSeverity": "CRITICAL",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "HIGH",
+ "integrityImpact": "HIGH",
+ "availabilityImpact": "HIGH"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 5.9
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-89"
+ }
+ ]
+ }
+ ],
"references": [
{
"url": "https://github.com/Colorado-all/cve/blob/main/seacms/seacms%20V13.3-sql-3.md",
diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25783.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25783.json
new file mode 100644
index 00000000000..93f3df9eee6
--- /dev/null
+++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25783.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25783",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:26.440",
+ "lastModified": "2025-02-26T15:15:26.440",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "An arbitrary file upload vulnerability in the component admin\\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via uploading a crafted Zip file."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://emlogpro.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/emlog/blob/main/emlog-3.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.emlog.net/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25784.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25784.json
new file mode 100644
index 00000000000..e1a0f7d45c5
--- /dev/null
+++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25784.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25784",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:26.580",
+ "lastModified": "2025-02-26T15:15:26.580",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "An arbitrary file upload vulnerability in the component \\c\\TemplateController.php of Jizhicms v2.5.4 allows attackers to execute arbitrary code via uploading a crafted Zip file."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://jizhicms.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/JizhiCms/blob/main/jizhicms.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.jizhicms.cn/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25785.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25785.json
new file mode 100644
index 00000000000..b256d34c890
--- /dev/null
+++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25785.json
@@ -0,0 +1,25 @@
+{
+ "id": "CVE-2025-25785",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:26.720",
+ "lastModified": "2025-02-26T15:15:26.720",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "JizhiCMS v2.5.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component \\c\\PluginsController.php. This vulnerability allows attackers to perform an intranet scan via a crafted request."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://jizhicms.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.jizhicms.cn/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25789.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25789.json
new file mode 100644
index 00000000000..7c2cb3a024f
--- /dev/null
+++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25789.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25789",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:26.853",
+ "lastModified": "2025-02-26T15:15:26.853",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "FoxCMS v1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the index() method at \\controller\\Sitemap.php."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://foxcms.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/FoxCMS/blob/main/FoxCMS-rce3.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.foxcms.cn/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25790.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25790.json
new file mode 100644
index 00000000000..cb45b6468f7
--- /dev/null
+++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25790.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25790",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:26.980",
+ "lastModified": "2025-02-26T15:15:26.980",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "An arbitrary file upload vulnerability in the component \\controller\\LocalTemplate.php of FoxCMS v1.2.5 allows attackers to execute arbitrary code via uploading a crafted Zip file."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://foxcms.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/FoxCMS/blob/main/FoxCMS-upload-rce.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.foxcms.cn/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25791.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25791.json
new file mode 100644
index 00000000000..a8ce9101e4e
--- /dev/null
+++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25791.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25791",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:27.100",
+ "lastModified": "2025-02-26T15:15:27.100",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://yzncms.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://gitee.com/ken678/YZNCMS",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/YZNCMS/blob/main/yzncms-upload.md",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25792.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25792.json
new file mode 100644
index 00000000000..93cad40381b
--- /dev/null
+++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25792.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25792",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:27.230",
+ "lastModified": "2025-02-26T15:15:27.230",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the isopen parameter at admin_weixin.php."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://seacms.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/Seacms/blob/main/seacmsv13.3-rce-1.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.seacms.com/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25793.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25793.json
new file mode 100644
index 00000000000..be77efd0bb9
--- /dev/null
+++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25793.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25793",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:27.367",
+ "lastModified": "2025-02-26T15:15:27.367",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_notify.php."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://seacms.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/Seacms/blob/main/Seacms13.3-rce-3.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.seacms.com/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25794.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25794.json
new file mode 100644
index 00000000000..cbc91b1635e
--- /dev/null
+++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25794.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25794",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:27.490",
+ "lastModified": "2025-02-26T15:15:27.490",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_ping.php."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://seacms.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/Seacms/blob/main/Seacms13.3-rce-4.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.seacms.com/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25796.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25796.json
new file mode 100644
index 00000000000..e75f55a65b2
--- /dev/null
+++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25796.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25796",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:27.620",
+ "lastModified": "2025-02-26T15:15:27.620",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_template.php."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://seacms.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/Seacms/blob/main/Seacms13.3-rce-6.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.seacms.com/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25797.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25797.json
new file mode 100644
index 00000000000..2303faa35f5
--- /dev/null
+++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25797.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25797",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:27.743",
+ "lastModified": "2025-02-26T15:15:27.743",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_smtp.php."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://seacms.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/Seacms/blob/main/Seacms13.3-rce-7.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.seacms.com/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-257xx/CVE-2025-25799.json b/CVE-2025/CVE-2025-257xx/CVE-2025-25799.json
new file mode 100644
index 00000000000..4c9eb7cbf23
--- /dev/null
+++ b/CVE-2025/CVE-2025-257xx/CVE-2025-25799.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25799",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:27.870",
+ "lastModified": "2025-02-26T15:15:27.870",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe.php."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://seacms.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/Seacms/blob/main/Seacms13.3-lrf.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.seacms.com/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-258xx/CVE-2025-25800.json b/CVE-2025/CVE-2025-258xx/CVE-2025-25800.json
new file mode 100644
index 00000000000..0a6cd4e793a
--- /dev/null
+++ b/CVE-2025/CVE-2025-258xx/CVE-2025-25800.json
@@ -0,0 +1,64 @@
+{
+ "id": "CVE-2025-25800",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:27.993",
+ "lastModified": "2025-02-26T16:15:17.053",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe_file.php."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+ "baseScore": 5.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "LOW",
+ "integrityImpact": "NONE",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 3.9,
+ "impactScore": 1.4
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+ "type": "Secondary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-22"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "http://seacms.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/Seacms/blob/main/Seacms13.3-lrf-2.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.seacms.com/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-258xx/CVE-2025-25802.json b/CVE-2025/CVE-2025-258xx/CVE-2025-25802.json
new file mode 100644
index 00000000000..7642bb51da2
--- /dev/null
+++ b/CVE-2025/CVE-2025-258xx/CVE-2025-25802.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25802",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:28.127",
+ "lastModified": "2025-02-26T15:15:28.127",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_ip.php."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://seacms.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/Seacms/blob/main/Seacms13.3-rce-2.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.seacms.com/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-258xx/CVE-2025-25813.json b/CVE-2025/CVE-2025-258xx/CVE-2025-25813.json
new file mode 100644
index 00000000000..b53c75396d5
--- /dev/null
+++ b/CVE-2025/CVE-2025-258xx/CVE-2025-25813.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25813",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:28.250",
+ "lastModified": "2025-02-26T15:15:28.250",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_files.php."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://seacms.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/Seacms/blob/main/Seacms13.3-rce-5.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.seacms.com/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-258xx/CVE-2025-25818.json b/CVE-2025/CVE-2025-258xx/CVE-2025-25818.json
new file mode 100644
index 00000000000..2f7acba4cea
--- /dev/null
+++ b/CVE-2025/CVE-2025-258xx/CVE-2025-25818.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25818",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:28.367",
+ "lastModified": "2025-02-26T15:15:28.367",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the postStrVar function at article_save.php."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://emlogpro.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/emlog/blob/main/xss.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.emlog.net/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-258xx/CVE-2025-25823.json b/CVE-2025/CVE-2025-258xx/CVE-2025-25823.json
new file mode 100644
index 00000000000..7a81f55a4e6
--- /dev/null
+++ b/CVE-2025/CVE-2025-258xx/CVE-2025-25823.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25823",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:28.497",
+ "lastModified": "2025-02-26T15:15:28.497",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://emlogpro.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/emlog/blob/main/xss-3.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.emlog.net/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-258xx/CVE-2025-25825.json b/CVE-2025/CVE-2025-258xx/CVE-2025-25825.json
new file mode 100644
index 00000000000..518f2c8739e
--- /dev/null
+++ b/CVE-2025/CVE-2025-258xx/CVE-2025-25825.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25825",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:28.620",
+ "lastModified": "2025-02-26T15:15:28.620",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Titile in the article category section."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://emlogpro.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/emlog/blob/main/xss-4.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.emlog.net/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-258xx/CVE-2025-25827.json b/CVE-2025/CVE-2025-258xx/CVE-2025-25827.json
new file mode 100644
index 00000000000..66cd62dc900
--- /dev/null
+++ b/CVE-2025/CVE-2025-258xx/CVE-2025-25827.json
@@ -0,0 +1,29 @@
+{
+ "id": "CVE-2025-25827",
+ "sourceIdentifier": "cve@mitre.org",
+ "published": "2025-02-26T15:15:28.747",
+ "lastModified": "2025-02-26T15:15:28.747",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "A Server-Side Request Forgery (SSRF) in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted URL."
+ }
+ ],
+ "metrics": {},
+ "references": [
+ {
+ "url": "http://emlogpro.com",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://github.com/Ka7arotto/emlog/blob/main/ssrf.md",
+ "source": "cve@mitre.org"
+ },
+ {
+ "url": "https://www.emlog.net/",
+ "source": "cve@mitre.org"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-266xx/CVE-2025-26698.json b/CVE-2025/CVE-2025-266xx/CVE-2025-26698.json
new file mode 100644
index 00000000000..690d0d749d1
--- /dev/null
+++ b/CVE-2025/CVE-2025-266xx/CVE-2025-26698.json
@@ -0,0 +1,60 @@
+{
+ "id": "CVE-2025-26698",
+ "sourceIdentifier": "vultures@jpcert.or.jp",
+ "published": "2025-02-26T13:15:41.983",
+ "lastModified": "2025-02-26T13:15:41.983",
+ "vulnStatus": "Received",
+ "cveTags": [],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Incorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks Browser. If exploited, malicious files may be downloaded to the system where using the product."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV30": [
+ {
+ "source": "vultures@jpcert.or.jp",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.0",
+ "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N",
+ "baseScore": 2.7,
+ "baseSeverity": "LOW",
+ "attackVector": "LOCAL",
+ "attackComplexity": "HIGH",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "CHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 1.0,
+ "impactScore": 1.4
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "vultures@jpcert.or.jp",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-669"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://jscom.jp/news-20250217/",
+ "source": "vultures@jpcert.or.jp"
+ },
+ {
+ "url": "https://jvn.jp/en/jp/JVN91300609/",
+ "source": "vultures@jpcert.or.jp"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/CVE-2025/CVE-2025-269xx/CVE-2025-26925.json b/CVE-2025/CVE-2025-269xx/CVE-2025-26925.json
new file mode 100644
index 00000000000..f87a1dba2e6
--- /dev/null
+++ b/CVE-2025/CVE-2025-269xx/CVE-2025-26925.json
@@ -0,0 +1,63 @@
+{
+ "id": "CVE-2025-26925",
+ "sourceIdentifier": "audit@patchstack.com",
+ "published": "2025-02-26T14:15:11.743",
+ "lastModified": "2025-02-26T14:15:11.743",
+ "vulnStatus": "Received",
+ "cveTags": [
+ {
+ "sourceIdentifier": "audit@patchstack.com",
+ "tags": [
+ "unsupported-when-assigned"
+ ]
+ }
+ ],
+ "descriptions": [
+ {
+ "lang": "en",
+ "value": "Cross-Site Request Forgery (CSRF) vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/a through 1.0.3."
+ }
+ ],
+ "metrics": {
+ "cvssMetricV31": [
+ {
+ "source": "audit@patchstack.com",
+ "type": "Secondary",
+ "cvssData": {
+ "version": "3.1",
+ "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
+ "baseScore": 4.3,
+ "baseSeverity": "MEDIUM",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "privilegesRequired": "NONE",
+ "userInteraction": "REQUIRED",
+ "scope": "UNCHANGED",
+ "confidentialityImpact": "NONE",
+ "integrityImpact": "LOW",
+ "availabilityImpact": "NONE"
+ },
+ "exploitabilityScore": 2.8,
+ "impactScore": 1.4
+ }
+ ]
+ },
+ "weaknesses": [
+ {
+ "source": "audit@patchstack.com",
+ "type": "Primary",
+ "description": [
+ {
+ "lang": "en",
+ "value": "CWE-352"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://patchstack.com/database/wordpress/plugin/admin-menu-manager/vulnerability/wordpress-admin-menu-manager-plugin-1-0-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve",
+ "source": "audit@patchstack.com"
+ }
+ ]
+}
\ No newline at end of file
diff --git a/README.md b/README.md
index f6081cebcea..8b0bfeb0848 100644
--- a/README.md
+++ b/README.md
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
-2025-02-26T00:55:44.484387+00:00
+2025-02-26T19:00:22.362560+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
-2025-02-26T00:15:11.250000+00:00
+2025-02-26T18:25:29.120000+00:00
```
### Last Data Feed Release
@@ -27,31 +27,75 @@ Repository synchronizes with the NVD every 2 hours.
Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest)
```plain
-2025-02-25T01:00:04.363820+00:00
+2025-02-26T01:00:04.371294+00:00
```
### Total Number of included CVEs
```plain
-282381
+283171
```
### CVEs added in the last Commit
-Recently added CVEs: `3`
+Recently added CVEs: `790`
-- [CVE-2024-30150](CVE-2024/CVE-2024-301xx/CVE-2024-30150.json) (`2025-02-25T23:15:10.753`)
-- [CVE-2025-0760](CVE-2025/CVE-2025-07xx/CVE-2025-0760.json) (`2025-02-26T00:15:10.890`)
-- [CVE-2025-1091](CVE-2025/CVE-2025-10xx/CVE-2025-1091.json) (`2025-02-26T00:15:11.250`)
+- [CVE-2025-22868](CVE-2025/CVE-2025-228xx/CVE-2025-22868.json) (`2025-02-26T08:14:24.897`)
+- [CVE-2025-22869](CVE-2025/CVE-2025-228xx/CVE-2025-22869.json) (`2025-02-26T08:14:24.997`)
+- [CVE-2025-22881](CVE-2025/CVE-2025-228xx/CVE-2025-22881.json) (`2025-02-26T08:14:25.137`)
+- [CVE-2025-25462](CVE-2025/CVE-2025-254xx/CVE-2025-25462.json) (`2025-02-26T16:15:16.933`)
+- [CVE-2025-25783](CVE-2025/CVE-2025-257xx/CVE-2025-25783.json) (`2025-02-26T15:15:26.440`)
+- [CVE-2025-25784](CVE-2025/CVE-2025-257xx/CVE-2025-25784.json) (`2025-02-26T15:15:26.580`)
+- [CVE-2025-25785](CVE-2025/CVE-2025-257xx/CVE-2025-25785.json) (`2025-02-26T15:15:26.720`)
+- [CVE-2025-25789](CVE-2025/CVE-2025-257xx/CVE-2025-25789.json) (`2025-02-26T15:15:26.853`)
+- [CVE-2025-25790](CVE-2025/CVE-2025-257xx/CVE-2025-25790.json) (`2025-02-26T15:15:26.980`)
+- [CVE-2025-25791](CVE-2025/CVE-2025-257xx/CVE-2025-25791.json) (`2025-02-26T15:15:27.100`)
+- [CVE-2025-25792](CVE-2025/CVE-2025-257xx/CVE-2025-25792.json) (`2025-02-26T15:15:27.230`)
+- [CVE-2025-25793](CVE-2025/CVE-2025-257xx/CVE-2025-25793.json) (`2025-02-26T15:15:27.367`)
+- [CVE-2025-25794](CVE-2025/CVE-2025-257xx/CVE-2025-25794.json) (`2025-02-26T15:15:27.490`)
+- [CVE-2025-25796](CVE-2025/CVE-2025-257xx/CVE-2025-25796.json) (`2025-02-26T15:15:27.620`)
+- [CVE-2025-25797](CVE-2025/CVE-2025-257xx/CVE-2025-25797.json) (`2025-02-26T15:15:27.743`)
+- [CVE-2025-25799](CVE-2025/CVE-2025-257xx/CVE-2025-25799.json) (`2025-02-26T15:15:27.870`)
+- [CVE-2025-25800](CVE-2025/CVE-2025-258xx/CVE-2025-25800.json) (`2025-02-26T15:15:27.993`)
+- [CVE-2025-25802](CVE-2025/CVE-2025-258xx/CVE-2025-25802.json) (`2025-02-26T15:15:28.127`)
+- [CVE-2025-25813](CVE-2025/CVE-2025-258xx/CVE-2025-25813.json) (`2025-02-26T15:15:28.250`)
+- [CVE-2025-25818](CVE-2025/CVE-2025-258xx/CVE-2025-25818.json) (`2025-02-26T15:15:28.367`)
+- [CVE-2025-25823](CVE-2025/CVE-2025-258xx/CVE-2025-25823.json) (`2025-02-26T15:15:28.497`)
+- [CVE-2025-25825](CVE-2025/CVE-2025-258xx/CVE-2025-25825.json) (`2025-02-26T15:15:28.620`)
+- [CVE-2025-25827](CVE-2025/CVE-2025-258xx/CVE-2025-25827.json) (`2025-02-26T15:15:28.747`)
+- [CVE-2025-26698](CVE-2025/CVE-2025-266xx/CVE-2025-26698.json) (`2025-02-26T13:15:41.983`)
+- [CVE-2025-26925](CVE-2025/CVE-2025-269xx/CVE-2025-26925.json) (`2025-02-26T14:15:11.743`)
### CVEs modified in the last Commit
-Recently modified CVEs: `3`
+Recently modified CVEs: `167`
-- [CVE-2023-37541](CVE-2023/CVE-2023-375xx/CVE-2023-37541.json) (`2025-02-26T00:15:10.740`)
-- [CVE-2025-1067](CVE-2025/CVE-2025-10xx/CVE-2025-1067.json) (`2025-02-26T00:15:11.040`)
-- [CVE-2025-1068](CVE-2025/CVE-2025-10xx/CVE-2025-1068.json) (`2025-02-26T00:15:11.140`)
+- [CVE-2024-30220](CVE-2024/CVE-2024-302xx/CVE-2024-30220.json) (`2025-02-26T13:15:39.090`)
+- [CVE-2024-30397](CVE-2024/CVE-2024-303xx/CVE-2024-30397.json) (`2025-02-26T07:46:51.690`)
+- [CVE-2024-33568](CVE-2024/CVE-2024-335xx/CVE-2024-33568.json) (`2025-02-26T13:15:39.343`)
+- [CVE-2024-9628](CVE-2024/CVE-2024-96xx/CVE-2024-9628.json) (`2025-02-26T08:12:22.750`)
+- [CVE-2025-1353](CVE-2025/CVE-2025-13xx/CVE-2025-1353.json) (`2025-02-26T08:13:23.443`)
+- [CVE-2025-21368](CVE-2025/CVE-2025-213xx/CVE-2025-21368.json) (`2025-02-26T15:23:31.897`)
+- [CVE-2025-21369](CVE-2025/CVE-2025-213xx/CVE-2025-21369.json) (`2025-02-26T15:23:31.897`)
+- [CVE-2025-21371](CVE-2025/CVE-2025-213xx/CVE-2025-21371.json) (`2025-02-26T15:23:31.897`)
+- [CVE-2025-21373](CVE-2025/CVE-2025-213xx/CVE-2025-21373.json) (`2025-02-26T15:23:31.897`)
+- [CVE-2025-21375](CVE-2025/CVE-2025-213xx/CVE-2025-21375.json) (`2025-02-26T15:23:31.897`)
+- [CVE-2025-21376](CVE-2025/CVE-2025-213xx/CVE-2025-21376.json) (`2025-02-26T15:23:31.897`)
+- [CVE-2025-21392](CVE-2025/CVE-2025-213xx/CVE-2025-21392.json) (`2025-02-26T15:23:31.897`)
+- [CVE-2025-22211](CVE-2025/CVE-2025-222xx/CVE-2025-22211.json) (`2025-02-26T18:15:14.723`)
+- [CVE-2025-22261](CVE-2025/CVE-2025-222xx/CVE-2025-22261.json) (`2025-02-26T15:15:24.877`)
+- [CVE-2025-24434](CVE-2025/CVE-2025-244xx/CVE-2025-24434.json) (`2025-02-26T13:16:56.970`)
+- [CVE-2025-24435](CVE-2025/CVE-2025-244xx/CVE-2025-24435.json) (`2025-02-26T13:16:56.970`)
+- [CVE-2025-24436](CVE-2025/CVE-2025-244xx/CVE-2025-24436.json) (`2025-02-26T13:16:56.970`)
+- [CVE-2025-24437](CVE-2025/CVE-2025-244xx/CVE-2025-24437.json) (`2025-02-26T13:16:56.970`)
+- [CVE-2025-24438](CVE-2025/CVE-2025-244xx/CVE-2025-24438.json) (`2025-02-26T13:16:56.970`)
+- [CVE-2025-25515](CVE-2025/CVE-2025-255xx/CVE-2025-25515.json) (`2025-02-26T15:15:25.327`)
+- [CVE-2025-25516](CVE-2025/CVE-2025-255xx/CVE-2025-25516.json) (`2025-02-26T15:15:25.507`)
+- [CVE-2025-25517](CVE-2025/CVE-2025-255xx/CVE-2025-25517.json) (`2025-02-26T15:15:25.680`)
+- [CVE-2025-25519](CVE-2025/CVE-2025-255xx/CVE-2025-25519.json) (`2025-02-26T15:15:25.867`)
+- [CVE-2025-25520](CVE-2025/CVE-2025-255xx/CVE-2025-25520.json) (`2025-02-26T15:15:26.053`)
+- [CVE-2025-25521](CVE-2025/CVE-2025-255xx/CVE-2025-25521.json) (`2025-02-26T15:15:26.240`)
## Download and Usage
diff --git a/_state.csv b/_state.csv
index 55174730bb1..dc1fd9c2b30 100644
--- a/_state.csv
+++ b/_state.csv
@@ -152652,7 +152652,7 @@ CVE-2020-1992,0,0,b8a1b6eb4684fc23ae420aa24365e2aafbb55810947ab5a2ed50828fc6a2a4
CVE-2020-19924,0,0,c58623e2477ebd72b964e0745fe7551586955af2dc2f6a5422563aa228866fcd,2024-11-21T05:09:29.657000
CVE-2020-1993,0,0,f80d0d8e32a16af33e272079cf045946d83476d74fa2ab75b19709144ec60541,2024-11-21T05:11:48.380000
CVE-2020-1994,0,0,442b1e43b9fdbcb0210c8b4e0fb3676403e0df3580e960cb16033a9f901f26bf,2024-11-21T05:11:48.507000
-CVE-2020-19947,0,0,d76b1e5a1e8272a0008f1b63fe26abae30de1b78dff6fb3d805e7fe418c58443,2024-11-21T05:09:29.807000
+CVE-2020-19947,0,1,38a833ec35bcde3ce136ce617de08e61dcfcad5fc2b80a510d7e429f059dff62,2025-02-26T17:15:11.910000
CVE-2020-19949,0,0,bb2b0b21856b8e03cdfaae9e6bc10a450e9341f80432babf5219f8c521a42786,2024-11-21T05:09:29.967000
CVE-2020-1995,0,0,47be4a55bd414d50fdc950c9b7200a5fb249ee4b5b0e750555bbdb13c3cd3e15,2024-11-21T05:11:48.643000
CVE-2020-19950,0,0,66e580e61ac3b42c73c992d71cb837154718d13b780d803d1f595301590683ce,2024-11-21T05:09:30.120000
@@ -154528,7 +154528,7 @@ CVE-2020-24847,0,0,1dd7d6082ae4e2094fffe5bd7a810467176f2181113cfb13bb2f6b1f5b65f
CVE-2020-24848,0,0,8851b292cc31f7846b4861c92ecc12ae0a85677e5c0320ab0938a34846ac155f,2024-11-21T05:16:07.707000
CVE-2020-24849,0,0,060577c2522d0a96095606c68efa19b0cb0e0a733eaffaec233de363ffa07e4a,2024-11-21T05:16:07.883000
CVE-2020-24855,0,0,010c2cedc0dbca448bfdf14312a6d02a9addeffa17cfef8baf29af2e91ed46c0,2024-11-21T05:16:08.063000
-CVE-2020-24857,0,0,2a8ade2d108fe1974973c4a21a2552450aeda528cfb1ca974b311138cff72337,2024-11-21T05:16:08.230000
+CVE-2020-24857,0,1,3bda9ae468a0cf94ec8d90ab01aeb6cb9c321adcfd3a9914c0c10b691f514444,2025-02-26T16:15:10.593000
CVE-2020-24860,0,0,64fba2286046d334b2648c01fcb84dc0009097e57f2b6149b00a0e747166a25f,2024-11-21T05:16:08.420000
CVE-2020-24861,0,0,9d83329ce2744479645300847ef9f4363f10815e581af305500cfe48f6126d3d,2024-11-21T05:16:08.603000
CVE-2020-24862,0,0,f6a4a51937ea7fd803f7b8f248901ca8d04c5643c8e2b2442c4ccf053e5d40b4,2024-11-21T05:16:08.760000
@@ -158135,7 +158135,7 @@ CVE-2020-3428,0,0,1d203dfb64afc88635ecdea956d4e399018ec66b0845e3a3c519582ad91af9
CVE-2020-3429,0,0,101e53f438fdaab4d8036c36641c0ed4e00559faf42044f1ad2ece55c0b4650a,2024-11-21T05:31:03.167000
CVE-2020-3430,0,0,98eeb5229dfeae10e40545efe1765338b1e8931dcbdcc810929adf0530704da8,2024-11-21T05:31:03.293000
CVE-2020-3431,0,0,cd6d3bac32cfd8857a644f1078f419fb235151f316f0943be1e4e9e1b0583c53,2024-11-18T17:11:17.393000
-CVE-2020-3432,0,0,bbe7edf78b101f7d200386b3adba4245c294e0e397a21299eb820f8cdd5b3dc4,2025-02-24T16:15:11.573000
+CVE-2020-3432,0,1,292de24a5fa5c6ae612adde66023561c99cae401fd3a4a396fa384b78b4e6903,2025-02-26T18:15:11.453000
CVE-2020-3433,0,0,2c85045431b9488c2e1c1014ac599de02c76a7bc319f5ca94e1cd53433e20ccb,2025-02-24T15:40:28.853000
CVE-2020-3434,0,0,c8995b33bcde31c655667c0230d7d58e1c0dd14cc20aaace02cd27edf751de36,2024-11-21T05:31:03.617000
CVE-2020-3435,0,0,42896a56717af6cb678dbb4889e2a239138d23b959eef5d7c82a355eef30417a,2024-11-21T05:31:03.753000
@@ -176996,7 +176996,7 @@ CVE-2021-33068,0,0,c4fc01f1c57d03d2bdba1518c77b4a9700fa553f224ba0ae20a81ba9593ee
CVE-2021-33069,0,0,41af97503063ee4fb7410ed4c349b6c4bed28e229e242604ad9b286b3c28b33c,2024-11-21T06:08:13.977000
CVE-2021-33070,0,0,b05967e611e4c24693ea9cdc493af8f2468fdd6331aab32cb0caec3ce2c12832,2023-11-07T03:35:48.187000
CVE-2021-33071,0,0,15602ef565d622027b321ad1ccca6259c48c426da877257621d751beefd0293a,2024-11-21T06:08:14.110000
-CVE-2021-33072,0,0,dd3fae1f53c34702a446084a78b4967b1cb8c1d9992e8fc9e005c53571ff3411,2025-02-13T17:15:29.570000
+CVE-2021-33072,0,1,c044489d1f26c9c57a65b8c01cf2e8d80f73b70910014ba72939636b64796b1d,2025-02-26T06:26:20.130000
CVE-2021-33073,0,0,7a5eacc207b92571ad8e50e2fcc658cb948a92bd8982f2dca5fd50b85b086ac5,2024-11-21T06:08:14.270000
CVE-2021-33074,0,0,8774c7d6b61718ac4855c2e48e3c748e8adc6e2539de0466c9ddb153dd7ef27d,2024-11-21T06:08:14.370000
CVE-2021-33075,0,0,69d4a455a27087b962957467a00fbc414b216bd3ca65577cb90c6b6168b4cb2e,2024-11-21T06:08:14.477000
@@ -177009,8 +177009,8 @@ CVE-2021-33080,0,0,57ecd13bed1c2684836f31e4925d4a9205e90ea1a41a1ac6e6a4532997cb3
CVE-2021-33081,0,0,07cc9d24dd5009f5015b51c2c04765b1034c87e305da03889243c59a65b5d02a,2025-02-05T21:15:14.030000
CVE-2021-33082,0,0,3f7344be48024e98d990c4b5d0181f420cdc1c989ba750ad53dbf7c8c99edaef,2024-11-21T06:08:15.373000
CVE-2021-33083,0,0,3c021684173a1e17341e8cd21f3f27912030997449feec87cbe93ae3e6ca567b,2024-11-21T06:08:15.493000
-CVE-2021-33084,0,0,fb1789f95477ab42744f14f69147aff168d1e71148aa264446d2865dd8108138,2025-02-13T17:15:29.630000
-CVE-2021-33085,0,0,b422ee7f57fc2ab8c459cf4d96905b8b1f7e3a720764db9668b47f3dd41aedfb,2025-02-13T17:15:29.670000
+CVE-2021-33084,0,1,a10f41e35d4e946d83de0f6ef4ea5c1fd87cd21d3305480c656c6638c9801c2b,2025-02-26T06:26:21.207000
+CVE-2021-33085,0,1,05a87d7b8b895f6001e23989c7757b32b0e8171859d42c2c906091448d7d66b4,2025-02-26T06:26:21.253000
CVE-2021-33086,0,0,59ea0cbfce012205ca9810c02f116a7402a4e447c1e55b95ddfeb0c444958cf4,2024-11-21T06:08:15.697000
CVE-2021-33087,0,0,903d40f14b051647aaeb632121980a244005e09e115953136b2e6722641c77de,2024-11-21T06:08:15.900000
CVE-2021-33088,0,0,31925ca3163080f7115a036d09a87ac360cec29c8d43193b9ae30461d6e92807,2024-11-21T06:08:16.003000
@@ -177025,81 +177025,81 @@ CVE-2021-33095,0,0,f5c0ba20ce27cc93ea30d8c751a9de24d86a58e10be44c2b83b63f20d839e
CVE-2021-33096,0,0,eb91cd6c0eec22113ee9fbb4b8e74c042cdbe69e3c3de5fe5f7d1fe6dacfbf44,2024-11-21T06:08:16.867000
CVE-2021-33097,0,0,a6f85df4b6c8fc783b81fd1bea6cc864037291243c7aadc180a3c3b2010d003b,2024-11-21T06:08:17.003000
CVE-2021-33098,0,0,7fedeb6f2afb7ca2e87a59ee8d8dda7e4a0ab27bfaf5b9c2e8c019d27071a904,2024-11-21T06:08:17.120000
-CVE-2021-33099,0,0,f502b7b23ee39675372834af590b3de1deeef15606304c8c21c65c659c31ea5b,2025-02-13T17:15:29.710000
+CVE-2021-33099,0,1,23140c5b7878c6f4e1f9fab51922e33cf36590d746afddbfbbfdabb2d37c57c7,2025-02-26T06:26:22.037000
CVE-2021-3310,0,0,02be5dd32216b5c8c12738bb08ef66e645ec1a3a7d6db80703a603a0495cb3ca,2024-11-21T06:21:15.400000
-CVE-2021-33100,0,0,fcf6f9b702107b4d35e2eb77bf3391cb0fa4126a9198b2720f6a8b8b587b1043,2025-02-13T17:15:29.753000
+CVE-2021-33100,0,1,6958a4807edc64243bb0f2e7d16ffe3765db99000e24baa07b3b17e83d9fdc1a,2025-02-26T06:26:22.080000
CVE-2021-33101,0,0,6034461c5398f6c60cecc54b65b04d4d25cc00a522ff89a1708552795e3a5e93,2024-11-21T06:08:17.347000
-CVE-2021-33102,0,0,99959f59d12fc81cbed216cf4b3b38fe9abc588bc97da9f019b163302df9589e,2025-02-13T17:15:29.797000
+CVE-2021-33102,0,1,7c45c282d7c3fabfa787fafa170ee4cbb415bfaa6af13af8070856b906391475,2025-02-26T06:26:22.173000
CVE-2021-33103,0,0,e39b3ff5d0b8347a3831d7e580eea1203538dfd1473a6fc8f4cc69be319e70fb,2024-11-21T06:08:17.503000
CVE-2021-33104,0,0,a265a3ee1bc858a54951c0c2bf4eb229ff64bc16ac966c0b8941f0b776592ba8,2024-11-21T06:08:17.880000
CVE-2021-33105,0,0,e9b2df814eaca3c8604a88eca08dc68bc332f32bd9b20e7c4815b7abc9591218,2024-11-21T06:08:18
CVE-2021-33106,0,0,269dcfc49b89ad1295d4b9020fede70e2759d072d293a9856b15213b8b95e571,2024-11-21T06:08:18.120000
CVE-2021-33107,0,0,305859621fa6312a13f88407cd00b71550dfc440ebbe84da78e0b56809091c17,2024-11-21T06:08:18.233000
CVE-2021-33108,0,0,61b629f11845d76da48d12da4d7b749386f8abe9d370f74914e8b8080db6c34c,2024-11-21T06:08:18.730000
-CVE-2021-33109,0,0,1c7043833516d54cb2887cb90f84f8a76c219125f95dd982b7d959c76480f74a,2025-02-13T17:15:29.840000
+CVE-2021-33109,0,1,7ca69c9117f3998947578cce2ffd1a8c4c3efe4ffe3fe059624afc66c9488489,2025-02-26T06:26:22.523000
CVE-2021-3311,0,0,ccd6e9b3c1cb66d91ecf89bdf17585c17929eccb6264ab97d0c02f9952a77c26,2024-11-21T06:21:15.570000
CVE-2021-33110,0,0,ffcc9dcbedf61517fe5885953392667952af30172d277a7608cf757cae16c87c,2024-11-21T06:08:18.880000
-CVE-2021-33111,0,0,a86e16cc44abda6472bb34f0bcfe9fe622dfa6668a24ec292c35be1626235810,2025-02-13T17:15:29.887000
-CVE-2021-33112,0,0,085c57bc1ed027b5568582e6aa7be04a6d122a8bd99173f09176ddfac17b93a3,2025-02-13T17:15:29.930000
+CVE-2021-33111,0,1,43c167b0efbe5ad86ba7d61556c21daa43dd975dcc7004879c455d09d8e3c316,2025-02-26T06:26:22.617000
+CVE-2021-33112,0,1,5bddbfc84339613086a817ecef882301ae6f9e46c2ed4227ae536b38e49f5e47,2025-02-26T06:26:22.660000
CVE-2021-33113,0,0,50874b6d3e5029bfbf009ea89495f63e400c14fb41eb48878583a1887ca3324d,2024-11-21T06:08:19.080000
CVE-2021-33114,0,0,2ee7d352a31e171d155b0db8e6b1dff9d74c9ed41977006d9b4c9f6a0776099b,2024-11-21T06:08:19.207000
CVE-2021-33115,0,0,63dc35571426ea04f1f1583ba5f1696ef799a2e44474ccef3f379a7fb8c131b1,2024-11-21T06:08:19.330000
-CVE-2021-33116,0,0,e0c94bf6c9dd1326cec07a93f5cff74415cad96ac77a0693150622b3f3d6b49d,2025-02-13T17:15:29.967000
+CVE-2021-33116,0,1,3c59610e0bc5c43dc976a1626d759208f5b5a38578372f82c8b64610e597d269,2025-02-26T06:26:22.850000
CVE-2021-33117,0,0,086746573aafc606068121b597dcfbf2851574b99eb528a77c93cf0cc7af9832,2024-11-21T06:08:19.503000
CVE-2021-33118,0,0,8dcd8e6bed5ac6d4dbaf27e2770e0ebb3bd02debb83764973d9116b1ce41a168,2024-11-21T06:08:19.643000
CVE-2021-33119,0,0,4422347446be8ede8a60f0c644c3189d4b4d43f8fcb0ae70d130e38a3ba850cb,2024-11-21T06:08:19.783000
CVE-2021-3312,0,0,f1c8ef9b0ffbfec698dc8eb521c3634b531eefc1864ba5d98b13360ba6aadf6b,2024-11-21T06:21:15.743000
CVE-2021-33120,0,0,53b65b8898cd614b05c1ca11cea308d2666d9e6e97d60f4512cd910063361d1b,2024-11-21T06:08:19.900000
-CVE-2021-33121,0,0,aba34880f0c12938875b33624e28e8b4e1ff0a06fc3b525dcc4e826a459bb8db,2025-02-13T17:15:30.007000
+CVE-2021-33121,0,1,e68ed292ffc9fc539029a1c2164f563bcb4c0974858a41b75ea807cc1dc7d8e1,2025-02-26T06:26:23.090000
CVE-2021-33122,0,0,346e56bcd2fa52fe75bf4977dadd23f029d4fa873e9400b91d03d24533c9d6d3,2024-11-21T06:08:20.100000
CVE-2021-33123,0,0,f28a2566004330ba939c0143c87c0eec819a5186c36d0720000680c5fc31ac21,2024-11-21T06:08:20.487000
CVE-2021-33124,0,0,aa20054f05010150676eac49b0c1ff0c3a8a00c7528c6cc4fc8d81e63a25452b,2024-11-21T06:08:22.013000
-CVE-2021-33125,0,0,491d601e977fe2bdbcdb7e560325ef942f6bdbe7a963bbd482ce113441b69ade,2025-02-13T17:15:30.047000
+CVE-2021-33125,0,1,7d1c60dfc87359f780fe32127f48f12341a7f48b8b9a192c506061fc3b06ab10,2025-02-26T06:26:23.290000
CVE-2021-33126,0,0,8118a7ca0b408483851519c62ef5766ca9c872b2328a5e9bd3e33f4f3a8fe650,2024-11-21T06:08:23.633000
-CVE-2021-33127,0,0,63652301c4eab8cb51d5140b26ba0eca35ec4c4d441c8b13ccfdc74fa2436b25,2025-02-13T17:15:30.090000
+CVE-2021-33127,0,1,0ee75ca819ae8e73dc5d321b989559d089739b50678cab7b23bcf32405f54d8a,2025-02-26T06:26:23.387000
CVE-2021-33128,0,0,54e91cd2933e700c7c5786519f1d35117565db7bddad1a8ffa6cd722d73fc9ee,2024-11-21T06:08:23.810000
CVE-2021-33129,0,0,81707727ad100a5351ebb8022729db66755431fae8f4743ba302d7f7f7a8c622,2024-11-21T06:08:23.927000
CVE-2021-3313,0,0,97d1dedda96c5c2bef1088d3336bbef6e8f2da272c254bb7b9a5dc6ff0001b41,2024-11-21T06:21:16.067000
CVE-2021-33130,0,0,71bf3fdb571a7299824ec494751b9b32027946fc04000d2f63cc9899fdf065b4,2024-11-21T06:08:24.033000
-CVE-2021-33131,0,0,2c33aa34f162c4b3d007d115b1ba10ea1890d7f55f6a429cd254082d8ea0fc18,2025-02-13T17:15:30.130000
-CVE-2021-33132,0,0,32e4a58fa602718a46eaff849d29effd905f1964f293f52e5b734f7cc089247a,2025-02-13T17:15:30.177000
-CVE-2021-33133,0,0,2aaa24fb21768996fd523d460a42b9bc0a9da51dbed56042662fee28591185a8,2025-02-13T17:15:30.223000
-CVE-2021-33134,0,0,65f04b38937609f7f604730616e111fc819e45d3de08f996f289a674694686f9,2025-02-13T17:15:30.263000
+CVE-2021-33131,0,1,9ac9fe20474964962bfa82427ae534ee93c289b6c8b6ae6a510a832bbe57a37d,2025-02-26T06:26:23.593000
+CVE-2021-33132,0,1,06a1da1184dd245379422a22c2033aa0b43b76f3ce111c99edfbb70c9da1ab66,2025-02-26T06:26:23.637000
+CVE-2021-33133,0,1,8d1fc8c5c90e3d02a282d409a440da3395dd784c6ee97c008716954710a15f61,2025-02-26T06:26:23.680000
+CVE-2021-33134,0,1,ce069675c939fe920c5523b99ce9ad1db7776995e63f99b30288864b11d14cb9,2025-02-26T06:26:23.723000
CVE-2021-33135,0,0,87fc6722c1ab2e2e9ebbbf1143ce5884f196d0dc4915060390451b264289b857,2024-11-21T06:08:24.300000
-CVE-2021-33136,0,0,17bcb196b69c94a6b96ac40288a2f6b20002093ee8ebda34fcb9d26c16ff2fe3,2025-02-13T17:15:30.310000
+CVE-2021-33136,0,1,f56762cc3251560d3795ca98ba942533c14b089f8fbeedabc63ba257623b2726,2025-02-26T06:26:23.813000
CVE-2021-33137,0,0,4b875561d3c6f02dbf99201a8b1c98b0ffa200d23521c6999589e4081b990adf,2024-11-21T06:08:24.450000
-CVE-2021-33138,0,0,30d2317faffe69e5e890e963604f9ce99d676330999e9e5d510475e6d3490c9f,2025-02-13T17:15:30.353000
+CVE-2021-33138,0,1,cc47b21024b1f8c70b6f35ef3407f04eabadeccc2f42ea8731e9c7833b9ae5bd,2025-02-26T06:26:23.900000
CVE-2021-33139,0,0,b322fe75d324c8ecd77ada43debc8bb457eb8f361d853236f1f497d538f882fc,2024-11-21T06:08:24.607000
CVE-2021-3314,0,0,6a3d8aa71e0e9e1cd9ab9738a0e3560017a731456e04519a9aec54a931048463,2024-11-21T06:21:16.247000
-CVE-2021-33140,0,0,d4dea194d4ae6d6c4c4a40eba007b502e68b34e23674fd9e3a7a08d6a88dd7e7,2025-02-13T17:15:30.397000
+CVE-2021-33140,0,1,f60d0cc9dc0537ec1444fa265e9c7633cb1d1af9a079361b74eb801766cb8ffa,2025-02-26T06:26:23.993000
CVE-2021-33141,0,0,020ac1f0766d100797cb40d6b1c8d68160bc01661f31ad52898b01b5d47f9138,2024-11-21T06:08:24.773000
CVE-2021-33142,0,0,5187f9940fdf90296777098290ef869aedc51179f2c9458499bb9da6cc4de789,2024-11-21T06:08:24.900000
-CVE-2021-33143,0,0,f5ea41a1559b3c4deeab719ba71a9e6b7c12129310e5d2e5cc6e514fd4957ccf,2025-02-13T17:15:30.443000
-CVE-2021-33144,0,0,2b8b894ccedd654e13eebe706a332f7cbd7d082dd992684e2f8b291c44263e58,2025-02-13T17:15:30.483000
+CVE-2021-33143,0,1,fe7986f739dac4458307de35b0e1cdb50251c3e9c67f46eb2b3b3a99042479f6,2025-02-26T06:26:24.140000
+CVE-2021-33144,0,1,6491be0029cf6098b14ec602e41bd54c709235719f3cdac4800f9690c985ab13,2025-02-26T06:26:24.183000
CVE-2021-33145,0,0,f30703e460cecd2a7fd096a4e5d6cd2ea906e7c796d66cc196833f63d15223ab,2024-11-21T06:08:25.090000
CVE-2021-33146,0,0,ac08e7a29557d165880aac6473f049324da08e6527fcc7ee6e52e5b0da06b871,2024-11-21T06:08:25.220000
CVE-2021-33147,0,0,3b377e7eac4449580720fa280f4835939c76a33724238ff36d0e0e24ec370c3d,2024-11-21T06:08:25.353000
-CVE-2021-33148,0,0,8d3e406043eae93216d5bcc2331699fa513014ba96bdc53ba60368d5a45bf798,2025-02-13T17:15:30.530000
+CVE-2021-33148,0,1,1549b23fe9d075eb104d79227061590085285ef179aa7287b93a94f9f4209d65,2025-02-26T06:26:24.387000
CVE-2021-33149,0,0,49d3f40e578dfca0d90cf8b3c649f24b12fadff6818b3092e742cc3fb7310f37,2024-11-21T06:08:25.510000
CVE-2021-3315,0,0,909ede1a8c43cdb0f23ac03e06a76c19cf8dd22ff2d31e55e5f70a708763ebd9,2024-11-21T06:21:16.420000
CVE-2021-33150,0,0,2cf2135f7a96a5d4e2a7a72ce42be0733920ef7cc95d8facd28f49cee487ca44,2024-11-21T06:08:25.633000
-CVE-2021-33151,0,0,5b4cb9a4268408a8b1096b9c9594bb7474f83102cec5fb6a242ffaa41f14e0c9,2025-02-13T17:15:30.577000
-CVE-2021-33152,0,0,9e1b720a345150a7da34b8fb391036d58ab4d2e287fd2b361f573550bad0e2c7,2025-02-13T17:15:30.620000
-CVE-2021-33153,0,0,ece7293698211ccf163c2104518fb21b77592731bb10140805ccdcf9e90b71bc,2025-02-13T17:15:30.657000
-CVE-2021-33154,0,0,08480ac4dbbab05e5d0b8184a01d34a50ffa1fc15a18be2e2c4005213212e275,2025-02-13T17:15:30.703000
+CVE-2021-33151,0,1,d93973389c4cc2c26d6e904ba0fdccbe81581b1fac4383a1d48efe1113f2ec00,2025-02-26T06:26:24.527000
+CVE-2021-33152,0,1,9d129f19c2900bf8915e8928b3230c09ae38e042ee0e17e140415dd92eeac4c2,2025-02-26T06:26:24.567000
+CVE-2021-33153,0,1,268bae7b26f70f9c5a08424519a3b9dc7202403cf57218dc989d90d43426d6ab,2025-02-26T06:26:24.610000
+CVE-2021-33154,0,1,fa594fbd0bbd106460abe9c6d33577392455c7f5f86976a91c58838830c0f835,2025-02-26T06:26:24.647000
CVE-2021-33155,0,0,b7cfe5cbe10bf4e27d0722114fe890825c53daea086b17a508616ff5fe3bd4fa,2024-11-21T06:08:26.010000
-CVE-2021-33156,0,0,51d9f8331f8fca7999e5025e31d0340d1aba8dfc332c9784b8d8c2edefb8e9ad,2025-02-13T17:15:30.750000
+CVE-2021-33156,0,1,b4bbae8b6e269d08d3dee95feac28a3ced1f241dfe9b3af4a0c7ac3e00dce0af,2025-02-26T06:26:24.737000
CVE-2021-33157,0,0,bd8d8145a108b2bebd763d1cfd1bb5592f5f30060dc6137d8c0761abc98284c3,2024-11-21T06:08:26.190000
CVE-2021-33158,0,0,4085ff3eae8493e2435a4680ef84c2ea3e03255a1b6dc0b6b7c2aa8105c72cf7,2024-11-21T06:08:26.310000
CVE-2021-33159,0,0,404f5cea2c0e25f49f5fb7908371eec7a036d5a4f170d048ba7a08a26cd5a099,2025-02-05T21:15:14.210000
-CVE-2021-33160,0,0,f91b59f6dcb9d07326164fb44ddfccfc19f360b7ab0ba0c72252dc7ee6a25232,2025-02-13T17:15:30.797000
+CVE-2021-33160,0,1,9d6a9e1dfd7e2f303f563ace7838eb3b847b6c2352294f2ceadf915022fc1bfe,2025-02-26T06:26:24.947000
CVE-2021-33161,0,0,a2ea5d477a36cb82a3a68c0bada71ebcef578b9884f755153465fca1afeb0f86,2024-11-21T06:08:26.587000
CVE-2021-33162,0,0,b08afceaca310f5fcced287aa2c43b2c76e6dd7bf65b62bb25118f416daa4448,2024-11-21T06:08:26.710000
-CVE-2021-33163,0,0,33e818c472d75bf86e418e7c10f23cdb55c2d62a56216b0109e0bf09dd62f812,2025-02-13T17:15:30.837000
+CVE-2021-33163,0,1,b39c9d8fa2006e3ab1999f4ac23aa96bb32ff98be28020635565be282f074359,2025-02-26T06:26:25.100000
CVE-2021-33164,0,0,1519ee29c5c70b4a103201a1a15012c2aca3ef185dfeb781893145581ea67131,2024-11-21T06:08:26.870000
-CVE-2021-33165,0,0,e67e22e3f68c6ac630399a7f698c0c92cb80d7f4aef6a3333b5cdb4b82ac7692,2025-02-13T17:15:30.880000
+CVE-2021-33165,0,1,223c5c0322c4ee21936d3ac7401524cbd584e244f743f66df9a19e028d0b4e00,2025-02-26T06:26:25.190000
CVE-2021-33166,0,0,868a9b9dce56e0397c41c97cd5dfaed00a1d1337203a32b7dc033814c644da5c,2024-11-21T06:08:27.037000
-CVE-2021-33167,0,0,ef520b3709e4c45a917d934bbb9bcd9f1076d4f869a95561fd90b8255d267626,2025-02-13T17:15:30.923000
+CVE-2021-33167,0,1,6b50da18dcd02dda26eaf33761b3fe0c81f2fb75b804a222be5272dcd230183f,2025-02-26T06:26:25.287000
CVE-2021-3317,0,0,bec09b757fa0100a814babe8831676461ed551a784ecc358deab4d004754983e,2024-11-21T06:21:16.607000
CVE-2021-33175,0,0,95b5a1089971a3f797603c2484b1a00cb90ff15f5355fda62292dd41e31b545c,2024-11-21T06:08:27.247000
CVE-2021-33176,0,0,653f421bc7c111e4ee143ab64ece19a1da343f5d5a731ba33625b29af5e02f81,2024-11-21T06:08:27.377000
@@ -179581,7 +179581,7 @@ CVE-2021-36738,0,0,532bf9d28cbc5dc3b0045b7d28e87db70b9ffbc8759ba1ede54a382f8b26a
CVE-2021-36739,0,0,f26d0be0a721fbe6be03df43ffbc9b3042175c6173cfb23d10478df22eda26d0,2024-11-21T06:13:59.493000
CVE-2021-3674,0,0,178351e059b2b3ea2a9a6033b7cb7de9cd09205da9e9773e280f37890127dd58,2025-02-25T17:15:10.237000
CVE-2021-36740,0,0,54bc6cdf23940c08f7f28324a9e8120c825654c24d2b52459fcb9fe03320bbf6,2024-11-21T06:13:59.623000
-CVE-2021-36741,0,0,d280b45653300f468a60e6fac9bd749827b184c0e1831b0373fcedbae7e2d3c9,2025-02-12T19:23:38.797000
+CVE-2021-36741,0,1,012e2787bb6aec64e3691b1236a761fc35c79cd0e5bcf32623f08f7fff040792,2025-02-26T06:28:35.203000
CVE-2021-36742,0,0,2e41644e342db51beeadf18bf8dc0c4d7f3c0355ab530a8109799a1fcf7f4b10,2025-02-13T14:26:24.660000
CVE-2021-36744,0,0,d45285bc3db76c0d6dab50f059ca546f427f4488393c91f33c651825cfcee74a,2024-11-21T06:14:00.137000
CVE-2021-36745,0,0,1cce952eb8dd2370e5aefef31e1a86c4ba7f1e524f793d1e889818873e30880d,2024-11-21T06:14:00.293000
@@ -180143,7 +180143,7 @@ CVE-2021-37401,0,0,c71e4deac7fe77ed8c0d0fef4d19628974c4005d7a8b68bbd24b6e67f6734
CVE-2021-37402,0,0,c0c9aee299adc056ebd1c52252b35eb5e3e4795ae9ecbfeb972a1a41b7a15cf9,2024-11-21T06:15:05.403000
CVE-2021-37403,0,0,1b764e08c0158edb62a4711ebdf8b0efc6728e085337eccf82042af2a895c7a1,2024-11-21T06:15:05.613000
CVE-2021-37404,0,0,4b17b767ac3f2ade1887d5557af7982411e70102bdbc10af376b43eb5696d032,2024-11-21T06:15:05.910000
-CVE-2021-37405,0,0,b670840e86f10fc4de648b047563ca3d0f68f279d148cf00f525a43f508461dc,2025-02-13T17:15:31.433000
+CVE-2021-37405,0,1,ac992280996fb394b01a10ee3d9eda13566b762ff53157f11a9993beb861af02,2025-02-26T06:29:03.530000
CVE-2021-37409,0,0,4922c7f8de9be19fc8dd3222e4edaa007fc88467971c26e82c64412fa35fce94,2024-11-21T06:15:06.103000
CVE-2021-3741,0,0,89d448344188605b3980f8549d91c3f992952972913c4a200b3f67f78a39f572,2024-11-19T17:07:38.267000
CVE-2021-37412,0,0,c35f96fabac3273d864a23de95c3576c1c4062c8b745dc0650469d23102874ba,2024-11-21T06:15:06.250000
@@ -180602,7 +180602,7 @@ CVE-2021-37997,0,0,b5873777c6a5e20470a54ba1a1c6025285ad8e67be8ad4b9c5d27c3e2a0f1
CVE-2021-37998,0,0,6efcecb078b7a44561848d5a4474daa54053e695fb402582e8907a8013debc42,2024-11-21T06:16:13.913000
CVE-2021-37999,0,0,1f2768954c2a961766177fbe4a6d6abe80ceabb1e3cf74e91481fb98d047b81f,2024-11-21T06:16:14.067000
CVE-2021-3800,0,0,788bff6afab8225e6279e3db5d092a3aa00f5d15d5bcdf8ff3629898fbf7a5b2,2024-11-21T06:22:28.277000
-CVE-2021-38000,0,0,d91d84b706364da65733d953b8b3b19e5cd022620079da26cba331047eecb472,2025-02-05T14:34:31.410000
+CVE-2021-38000,0,1,c7e43ae1f129ac29db19d67bbaee26587da768895c4fa60ab603e16f69a96938,2025-02-26T17:15:12.610000
CVE-2021-38001,0,0,a270ff17709cbfcf80a8b4c0ba0ebb079b9c29a285e4e4b937578791b0add0f5,2024-11-21T06:16:14.473000
CVE-2021-38002,0,0,d3c7d52c73bc0aa30462058ba648cf123701e7fbbaed225c13fa64200c486e4c,2024-11-21T06:16:14.620000
CVE-2021-38003,0,0,62631e08ed89c486dc93f186552782f091e4ec55a09e0e7a78f94a5ad0047bc1,2025-02-05T14:34:47.073000
@@ -181268,7 +181268,7 @@ CVE-2021-3884,0,0,676c4eefc5ff9d11a68e6ffe693ffb85528b9da0ddc286b37251fd79c35aca
CVE-2021-38840,0,0,42da19012d8a86c89bf0aff92ecb0ed7f9908c8a787c963d95529ef082417ed2,2024-11-21T06:18:05.603000
CVE-2021-38841,0,0,18ab1af6dfb211659f5485d35a293f361c44313cd83b6f6542925f7197fa3a31,2024-11-21T06:18:05.807000
CVE-2021-38847,0,0,d48ef8371f093fa1ffed95b1d8b2b8cdcdf6db880372c289938e712289b6612a,2024-11-21T06:18:05.990000
-CVE-2021-3885,0,0,9b64193b0a28d7b1f927efcef0025321fea6743f34d587b81730d1e00102a9cf,2025-02-13T17:15:31.930000
+CVE-2021-3885,0,1,76d70a4c2627d0f250199dbaebf5ab972f1fb35b6a1ff817d058fe2c33eb6746,2025-02-26T06:31:33.960000
CVE-2021-38859,0,0,d1295fbc3f55a45c4e22e211e3813589593f61b3c209301e9c70e42b1fca78f6,2024-11-21T06:18:06.190000
CVE-2021-3886,0,0,541b9faeaeb144d7df1a208f4f6cd55c7c390e63913f4dedac79f28426fd5468,2023-11-07T03:38:22.643000
CVE-2021-38862,0,0,1043c053e78c88dfdda5fe3427283ce99a3947740cf992f9085ca0b3ae584c23,2024-11-21T06:18:06.377000
@@ -183711,17 +183711,17 @@ CVE-2021-41848,0,0,c21f97ab88c06c48264272068b904d9d3dddb4d5c06f8bddf42476b612d36
CVE-2021-41849,0,0,239026552f98af63cd5dffc6ea721b80d94e7394dfc280b969253af26c3c3b2b,2024-11-21T06:26:54.027000
CVE-2021-4185,0,0,d8922b4f5d05e186a82dcb7809618fdf3ab0519a888924b601a8eb2da402b7ee,2024-11-21T06:37:05.767000
CVE-2021-41850,0,0,d944d7c6576f040a6c51a22bddd5c9dc2363b6f8b77cecf3fbbf3584793df357,2024-11-21T06:26:54.183000
-CVE-2021-41851,0,0,eeafff187ed6535302b2e25757fe7803a66af92a9cddfb4eaca19e81fa74e48b,2025-02-13T17:15:32.327000
-CVE-2021-41852,0,0,4a2e834fd461935e7ae8dc62a88865521a6da24d68d08ff5cd9045592b777253,2025-02-13T17:15:32.460000
-CVE-2021-41853,0,0,1aabff4cf0027dc67db5c535cc1c32288b0edfa591a67d9c140a677a9fe490a0,2025-02-13T17:15:32.590000
-CVE-2021-41854,0,0,2cf3dfa02be42710fd8b5569e88e6622d2469677c235c344e136b3c6d77eb23a,2025-02-13T17:15:32.737000
-CVE-2021-41855,0,0,5887d23644b1190c2d62e050ab36a67c634aa106594389c8dab68823cdc761c8,2025-02-13T17:15:32.787000
-CVE-2021-41856,0,0,bee898607ff7b65ce16773d71764489bdd97decb88aa5c6945846ad284cca11c,2025-02-13T17:15:32.917000
-CVE-2021-41857,0,0,450b292b9ef6c60b318ca3a0dbd82e32bcdbe43547b5d2221264204e7a51bf63,2025-02-13T17:15:33.057000
-CVE-2021-41858,0,0,bcb64e316cf7091dfe202d6662ef4fe11eb8e55594cfb1fd12fe793bd3460212,2025-02-13T17:15:33.190000
-CVE-2021-41859,0,0,1e384029497d323a27454e151452d6b8b6b92ae3f2b3f0d2fc4b8a13b9704c50,2025-02-13T17:15:33.240000
+CVE-2021-41851,0,1,9e8b9dad832d59a775414743a82fd963ca4fa688a7df7ad22e7b9f04b4571a4a,2025-02-26T06:32:56.750000
+CVE-2021-41852,0,1,e89ab59a2f3133e03a1b6e7b379a556580f07fbbdbb5428f7d48682f36335f09,2025-02-26T06:32:56.800000
+CVE-2021-41853,0,1,e58cc55db8b10232a18b88f2552015528f19ab5b912e6ed909b21f4579206730,2025-02-26T06:32:56.843000
+CVE-2021-41854,0,1,cfb91307f876c237a8bfdd25030668ba9c0a5651f6328896e6298825806101cb,2025-02-26T06:32:56.883000
+CVE-2021-41855,0,1,20e9615c53492e4cd2bb8aaa61770a21f66e273adb6ff78332efb8f3b4c597d2,2025-02-26T06:32:56.927000
+CVE-2021-41856,0,1,d56704f7870c9ffcfed215f5290b73de50275d1a4dcd04122bbb2e9b823649dc,2025-02-26T06:32:56.967000
+CVE-2021-41857,0,1,1a20a2511c6672abd6661374eb345e016db68954eed6483a27770809b6e7e16d,2025-02-26T06:32:57.007000
+CVE-2021-41858,0,1,a274cd02a571a3cc9d9bd9080b0bd27fba13e3946730d1a4153a55b3fe354299,2025-02-26T06:32:57.053000
+CVE-2021-41859,0,1,2509cbfe10e709c8b14de70092b28dd1aae385275acd0305d9ebd56c10f01bf0,2025-02-26T06:32:57.090000
CVE-2021-4186,0,0,dd0c71f3d57620e28a7a179648c9f35b8f17eb072720f6e3c8eb8d994bd97d5d,2024-11-21T06:37:05.960000
-CVE-2021-41860,0,0,65fa6eb0f791fc526c969c6be3a4125eb7982427d904587c4bb97bf0e2cbd06e,2025-02-13T17:15:33.290000
+CVE-2021-41860,0,1,c1dac2c5ff9ba52670bd32227d124033674797065f1e6a3ff7c39e4c1a3f56f9,2025-02-26T06:32:57.137000
CVE-2021-41861,0,0,f1ed73d33502def3e66a0250b90fbb4a5bddafa44b0ccbad02d8695e49c79bbb,2024-11-21T06:26:54.747000
CVE-2021-41862,0,0,4f62dc8a40a0ee67f93c2ff6fd72e8f11e0e337fc5573493cbb9c53f25a0068c,2024-11-21T06:26:54.893000
CVE-2021-41864,0,0,2f087a92c676bab39708c4af4af035bdac09d3fe728ca75e4418cecb1988598d,2024-11-21T06:26:55.027000
@@ -184741,7 +184741,7 @@ CVE-2021-43339,0,0,4f77a94ed3d0da5738a342e29b8d6ec4531a5c3698f41acca4b646ba2949f
CVE-2021-4334,0,0,72152454498bc700f241bb907d29e60a462e9365ecc4f5c7651b849c517d9a93,2024-11-21T06:37:26.650000
CVE-2021-4335,0,0,09097caaff3926158e7866f15414bc3611ceb898c0d4f4588c22f62237753af6,2024-11-21T06:37:26.793000
CVE-2021-43350,0,0,ad4cef3713ac2e538f3d9307e4e0f78d8c85a84f2529f016d5629a8bae389689,2024-11-21T06:29:07.007000
-CVE-2021-43351,0,0,d20e5efd445e3a114c7d08e2d6162152c0fb1335624275254ef1f6c404c27dec,2025-02-13T17:15:33.340000
+CVE-2021-43351,0,1,4d0c1d57e7f375eefe16bcd519c848ded4b02125d0b1112dedbdf8ca8a547d34,2025-02-26T06:33:50.690000
CVE-2021-43353,0,0,73ad11451e705d28cd0ea0c0883c37cc6dc262faf3e0fcea73e0732b18df2e75,2025-02-14T16:07:28.230000
CVE-2021-43355,0,0,bf7355e8f081bfa580d6bce404b83dedb9e73618ac66533f1c390e9466c49d38,2024-11-21T06:29:07.330000
CVE-2021-43358,0,0,9e85ffdc032b7f898f882022743c813a5fcf36b26f0a615cfcc619b837df9741,2024-11-21T06:29:07.480000
@@ -185599,7 +185599,7 @@ CVE-2021-44450,0,0,9aaa14f8820be0af77790b7bde6886c33d1052567e15b863f83df8f41b249
CVE-2021-44451,0,0,1c84a549f4c7a0b5e257185c51135142c4e10920542577090af02c3338d6b4e4,2024-11-21T06:31:00.580000
CVE-2021-44453,0,0,98781018fb7a6ea34a51aaee9c7be9f56f6b423c6fc32a990178e2f1e1dedbb8,2024-11-21T06:31:00.720000
CVE-2021-44454,0,0,8cb2942a043a1063ea371b5e6903989f417ce41387aa7165dd0533424127bafa,2024-11-21T06:31:00.850000
-CVE-2021-44457,0,0,430ae93209941b3662998c9084ce4eee5ddb9c96d233e168c37a34ce5a7758d8,2025-02-13T17:15:33.477000
+CVE-2021-44457,0,1,2d8ffda9c70c3bec14a60be9f0c65f4e8ccabb6e47dbc5f0c8f47108019c7a47,2025-02-26T06:34:35.257000
CVE-2021-44458,0,0,6ef09f2079047621cd881186785cea0b72efc0199c412a7e898aecfdfa807fb0,2024-11-21T06:31:01.017000
CVE-2021-4446,0,0,fc600d102e4efffc5b4f3dbfa3240a392aea976863fe29ddd959e229228250d3,2025-01-10T14:46:34.020000
CVE-2021-44460,0,0,a69e89211633952e61608b5a9514bf5af38fbb780ec06e9ace0705cfaf6c9f48,2024-11-21T06:31:01.170000
@@ -185669,6 +185669,7 @@ CVE-2021-44526,0,0,7ea3241da3c4b98a7ec39e7167eeb0e7907c4a19b0d89197fa337d186f61f
CVE-2021-44527,0,0,7319922d1be00e495135202ffea66439e6defe836e4fe697b546a514590436aa,2024-11-21T06:31:09.933000
CVE-2021-44528,0,0,d1b06b895f167c9432839ddbbbf028b094b0f18def21b7f3343fa88e5359c944,2024-11-21T06:31:10.060000
CVE-2021-44529,0,0,56bd9b4288dd6c97350a8754260dc5af997b1a920f77d92c24ec20a8f9e2816c,2024-11-21T06:31:10.190000
+CVE-2021-4453,1,1,0768aa6f71014ebdeb3efa339103249c888db0bbc529db35227613d398d11f69,2025-02-26T06:37:29.820000
CVE-2021-44530,0,0,50dd50139f6db9cec4390a2fe08291ecb15c33442e808b321adfda099dd59322,2024-11-21T06:31:10.440000
CVE-2021-44531,0,0,e72c46aef544c16b9b7d45ce9edf39451e4c154a1afe49b24a4148b3cccb1819,2024-11-21T06:31:10.550000
CVE-2021-44532,0,0,24351336b904bc34f340cbe67f0e8f8f158ccb31b0ba4c0d06bec574c2e4c906,2024-11-21T06:31:10.750000
@@ -187868,6 +187869,36 @@ CVE-2021-47621,0,0,cc65e3006cebbde43642e9fbd2d8cfabb01079eb7c90b09b8a7980eb912b1
CVE-2021-47622,0,0,3f7658486b916d46d507738eba465babaa2980cfbdc235eebc36198bd63c2e16,2024-11-21T06:36:41.647000
CVE-2021-47623,0,0,91986677d2b927797b5966fc0ca5a89d3af7a7e6c7265115b11848398ade465a,2024-11-21T06:36:41.780000
CVE-2021-47624,0,0,592282086cd10fb104528f56f6839241d592ee1a02779ba76fa63df4227294fb,2024-11-21T06:36:41.900000
+CVE-2021-47631,1,1,99f982b2c7cf6d73a7115bc8bd2e1408634d1487c521542057d6f1bd3ab491d6,2025-02-26T06:37:04.400000
+CVE-2021-47632,1,1,5e895e1b270063ce04332b3dcf6ad666f2de7aa1c8c979ab1b94d6c1119912b8,2025-02-26T06:37:04.943000
+CVE-2021-47633,1,1,e8ede94dddd4afa481fae6a72ea901714b309ea0e517f71d7221a8ecfc8a8823,2025-02-26T06:37:05.060000
+CVE-2021-47634,1,1,997137038efe3ce8b46ab4f9d69543414d2a8ca03cd9a9fa4033f57403fefde7,2025-02-26T06:37:05.173000
+CVE-2021-47635,1,1,903dcd5e119b780dd4b83cda32cfa2b7d12f11b33b8fbbde549d23e00230dc63,2025-02-26T06:37:05.280000
+CVE-2021-47636,1,1,308e01075387dd21a1f0032e958fd4256d4515b97a1961071b6df02570cd6827,2025-02-26T06:37:05.377000
+CVE-2021-47637,1,1,accbd28e4dd4cd7159adb0282ff618fc657acdd73a9f341f088325a31921ffa6,2025-02-26T06:37:05.477000
+CVE-2021-47638,1,1,5e7abb40cfe2c98c4ad50fd0a40d1db4654cb01c7d3cfc07e22d8ddedce0cade,2025-02-26T06:37:05.580000
+CVE-2021-47639,1,1,7b8bf6d8de79b9ec3308660e6af583193d3b8426d1a982c24efb4b4726ff450e,2025-02-26T06:37:05.677000
+CVE-2021-47640,1,1,0398e595f0c4b65f1c48280cc62b93455da59c7e5711d281b52d0710648d26ce,2025-02-26T06:37:05.780000
+CVE-2021-47641,1,1,9b6de44cce4467ff48e787d4d4224ac8afad2d242d24bcb035d5b985701cb352,2025-02-26T06:37:05.883000
+CVE-2021-47642,1,1,d898c87cba3d04ef4614fdad90cbf21b9d829eeb76bccfcd178acfdae0950ed3,2025-02-26T06:37:05.993000
+CVE-2021-47643,1,1,49993d0803a6553b25e355eeeda63314d4c0473475ffc2512d5f99ae93055d64,2025-02-26T06:37:06.097000
+CVE-2021-47644,1,1,66153fbd04bc9da11c470999aec6056e193f18ad53b81b98da1f3c51df8957a2,2025-02-26T06:37:06.197000
+CVE-2021-47645,1,1,702cecc66a772df959b018b65065c8d95527be4b0a17766b0b3641b5871b6329,2025-02-26T06:37:06.293000
+CVE-2021-47646,1,1,aa3a0716159d269f8d6aa8c6076b15d56ed0a1a20551f397d7102df69786366c,2025-02-26T06:37:06.390000
+CVE-2021-47647,1,1,4a6fb1577af80a36eaee67445132d90ad22f4abdaf4d4a0ef53bea402a07201f,2025-02-26T06:37:06.490000
+CVE-2021-47648,1,1,8aee38a226cc739f36deb3d3942f718605290d671b5efbdfb2822bc34a6474cf,2025-02-26T06:37:06.597000
+CVE-2021-47649,1,1,b92abd3e016e981c7b4a21493012d09b454ec48ee442a9a06f04ee8d1e46da3e,2025-02-26T06:37:06.687000
+CVE-2021-47650,1,1,c1ee21a8927c50452789b434f4c6a27549f5b0e6efcc84424b87b988ac45220c,2025-02-26T06:37:06.780000
+CVE-2021-47651,1,1,38352f07671e2fb89dff6662b2a7803610a4f0830322bddb244e534cdee3f770,2025-02-26T06:37:06.880000
+CVE-2021-47652,1,1,5dac3245c4082a8ac667646f369373df0679d08aaa4be0a5117b4ffb032ce1ff,2025-02-26T06:37:06.973000
+CVE-2021-47653,1,1,8bb339fc3c0fd581e138c4f6cebfab0c737e874ad8386f9204dacb0908a9611e,2025-02-26T06:37:07.080000
+CVE-2021-47654,1,1,6bf7742a801883c2038de658f203dbb939a9a5692a812481f2e91ec4eab50db2,2025-02-26T06:37:07.170000
+CVE-2021-47655,1,1,07a286b5437b0ab0bbadc4d0248c6f10174a5456a017ed0c718b269cf986c1b4,2025-02-26T06:37:07.267000
+CVE-2021-47656,1,1,44d63d2d0df6f3dfb64ae6d252572c99ef25aaaa1ae55347eae059af524f03e0,2025-02-26T06:37:07.360000
+CVE-2021-47657,1,1,846313dc19371aad222a353ce5fa52dbc80099cc31d4f0feb9906fdd00c2987f,2025-02-26T06:37:07.467000
+CVE-2021-47658,1,1,026227a429c1675cb95b08438f19b7f7b602999a92b3b51e891ff1a0b2001be2,2025-02-26T06:37:07.557000
+CVE-2021-47659,1,1,f9dc004467c8894a72bb5439b7f910f7feda091452d5992ee661458d581914df,2025-02-26T06:37:07.640000
+CVE-2021-47660,1,1,b3bee00b6a670938933b811ecd35b9647208bffbf541543719468f80e1f447ee,2025-02-26T06:37:07.733000
CVE-2022-0001,0,0,d630d65d043af9b84ecc9398947f34a2295c0c4d0361b3aeea445eb7fd5fee61,2024-11-21T06:37:45.587000
CVE-2022-0002,0,0,8109a7e42c2476389a26f4b576e048bf54a0f7b87a24a41ab958cd97937ab177,2024-11-21T06:37:45.933000
CVE-2022-0004,0,0,76e2034631db671c6d78b8f053274466d56a4afd5cff5cbbea3a9413334df9ae,2024-11-21T06:37:46.137000
@@ -191136,7 +191167,7 @@ CVE-2022-21441,0,0,26d9af75995c08648706edb73e97015b2e499ffd976f9c62152c0ee5b82ec
CVE-2022-21442,0,0,a93f74f9655d5062b3eb713a215ea42aafe509409b16bef4d32b0d98fe6915fc,2024-11-21T06:44:42.557000
CVE-2022-21443,0,0,c07c90b2013677d990006fc9474f86e5b45928d0f64b39e1126cff9c6df22b86,2024-11-21T06:44:42.700000
CVE-2022-21444,0,0,37c77ad4799692b449eaa6341fd35e930063aad9abf8762f5e6381366ca65c42,2024-11-21T06:44:42.863000
-CVE-2022-21445,0,0,b772c6dd143ba068be9d87f56ede1c263056957d8e81ac932510f62f53759a00,2024-11-21T06:44:43.010000
+CVE-2022-21445,0,1,7fb9eb5ad138b093cd6e99330c3d3c0c6171307328831a98420b622774bc6d62,2025-02-26T17:15:12.863000
CVE-2022-21446,0,0,9e1a7306a1fb2547c56353ee3e18754ea42ee3038381bbaf4f3d23f962278cfc,2024-11-21T06:44:43.167000
CVE-2022-21447,0,0,e70b610295025dbd7bd9fee6193e62200bcb2018fb55a167531b7d96da16a4ea,2024-11-21T06:44:43.300000
CVE-2022-21448,0,0,b706e09bcc1a19a21c67e2e007c01bf059882f23236add7aa21dcbcb364d4c43,2024-11-21T06:44:43.437000
@@ -195083,6 +195114,7 @@ CVE-2022-25769,0,0,0998a8c2839e5b963472953b8a6e7b675aeed2823f1e1b450c7dcfa1d35a8
CVE-2022-2577,0,0,7dfb4d9179f1eefcc863c8a3e76107909150e1945e894d94650c4a3f70597e2c,2024-11-21T07:01:16.753000
CVE-2022-25770,0,0,510fc679d9e702469c74e16d4311f3e48d75da55ed647a36d826a76f23b3ba6e,2024-09-20T12:30:17.483000
CVE-2022-25772,0,0,ff796297ad7865332e00bb2b318127a389900f15aa53f8502eeaf569afa498b5,2024-11-21T06:52:58.343000
+CVE-2022-25773,1,1,00d32a7f292ee7b146bf4498aafb7466139f5e577695a6511ef83b462882762a,2025-02-26T13:15:32.550000
CVE-2022-25774,0,0,bd380684d32ffa9cd4640164928b773a3662f874edc7e0d020930c6456c349a1,2024-09-23T23:21:35.443000
CVE-2022-25775,0,0,86cd764b6a567381983af3ef2ac724e63b9fbc2964b23fee64b226f75093e044,2024-09-23T23:22:15.763000
CVE-2022-25776,0,0,b92a32835cc3936cfcece435820b9a30ee61228c21cc5409787525b6dbc22604,2024-09-24T15:19:46.117000
@@ -207089,7 +207121,7 @@ CVE-2022-40942,0,0,7b291ca016d3664acfaa687583c918329696f86856aba25a1c0c44b07bb61
CVE-2022-40943,0,0,97f304c0b30a77cbebe24818cabdb898cd4053d8b64255315a8291fb44898fb5,2024-11-21T07:22:17.197000
CVE-2022-40944,0,0,58a4ad43d0d10f01629a367e8a03c70dbdb401591c7e0a5c53db0edc4871deed,2024-11-21T07:22:17.360000
CVE-2022-40946,0,0,657514247a23d4019514c4be4ea49ed31df545798b64fe3a2569aa4f52653132,2025-02-06T17:15:13.863000
-CVE-2022-4095,0,0,1455725e301b8433d4c12c68479ad797be2ad7e06d6cfe40aa08e47e9988947c,2024-11-21T07:34:34.383000
+CVE-2022-4095,0,1,59a7d7c624fd89929e10d522cb2536c27d7c93ea70c027665b07c8005ab50199,2025-02-26T17:15:13.830000
CVE-2022-40954,0,0,764a46138bb7f275703fa4d6701c38674d7256fcaa4284658649cb33f7d75f1e,2024-11-21T07:22:17.677000
CVE-2022-40955,0,0,7e3d3dd62b661fdec6fbf4e3e206895fa44954a434a7406ceade69536df380fb,2024-11-21T07:22:17.800000
CVE-2022-40956,0,0,0d2e014450a0d8110d91fead0c9c7673b6b2907e9a64a8d0330731ece22cf7f1,2024-11-21T07:22:17.930000
@@ -210178,7 +210210,7 @@ CVE-2022-4497,0,0,8a411873ba01392b8818b1d13f79bc81a482b39e873afc9015a6d4d6cf8a53
CVE-2022-4498,0,0,c7ecc77be1bfe828b2493f3a023ccaa2f891c8ec9e053be481bf8d836e6515f2,2024-11-21T07:35:23.057000
CVE-2022-4499,0,0,f4028e61318875e617c19007df4987b91374063a9ad9cf0b11dfd84ab29b5f76,2024-11-21T07:35:23.177000
CVE-2022-45003,0,0,d1e7f705ddf829dbd640ecd7a5626782308566ef0664ccefac98b79b5e718702,2025-02-25T22:15:11.043000
-CVE-2022-45004,0,0,7c935b3445e605fd163a377ab9ca116be2752a2035ab9ff9d2c2757c2e53002b,2024-11-21T07:28:36.307000
+CVE-2022-45004,0,1,bfcae60beaf5f207e320642ea45b72fdd7b6c4d0251b3b594311d84c381c4305,2025-02-26T17:15:13.280000
CVE-2022-45005,0,0,e4298d0b05d57a725ed72c92bed10d1ff6fa5f3f4e26ce729e7191c5071d00f6,2024-11-21T07:28:36.443000
CVE-2022-45008,0,0,e07b5e281b874d670badcb48ccf98d87ed91029925af0fd8b74da67d4f10c58e,2024-11-21T07:28:36.580000
CVE-2022-45009,0,0,a7b7e291df3d61ed6a06839df315a82e3756426a5bbd63b3f857d6ee60507ecb,2024-11-21T07:28:36.713000
@@ -210634,7 +210666,7 @@ CVE-2022-45613,0,0,788ed998768a6ce492ffa28a04fefa8906093e7e113f6e1463ea5c78c6884
CVE-2022-45614,0,0,7424394622e79f4eeca38a29b4fd1082414df065bf41f2662739f54666e33270,2023-11-07T03:54:45.677000
CVE-2022-4562,0,0,633b42ff01d0035f8cc00fbee5875631cf452f6563eb751dc0d3aa5b484a6d44,2024-11-21T07:35:29.820000
CVE-2022-4563,0,0,559857fd7e7ce55075c6ca477e41968e965f645a2f7e4534b2996fd1b7653c4e,2024-11-21T07:35:29.937000
-CVE-2022-45634,0,0,7a8d84256be8518c845d1fcfedf20d03aacb2b0d352aa84af03cc5d2794ee5c6,2024-11-21T07:29:29.350000
+CVE-2022-45634,0,1,f816674c07368532dbecc62466190a6ded12c3f5755d46bafe53d47ddfd0ba49,2025-02-26T17:15:13.513000
CVE-2022-45635,0,0,b94da9110252df62490ab0b2afa6a9d1ac8406a99f819310b3c3804a8213614d,2024-11-21T07:29:29.500000
CVE-2022-45636,0,0,ab66c349ff23cb1d5e51c3a56edfb2146eb80b3261ba3f05066fb8c30700ef1b,2024-11-21T07:29:29.657000
CVE-2022-45637,0,0,97a0cb688f6cfd904fcc789c1d0efdbaa5fa3e99f6a936cdef9904a140256380,2024-11-21T07:29:29.813000
@@ -212677,7 +212709,7 @@ CVE-2022-48625,0,0,ad1548e03625a1597bed096d4ae7617552f2279c80077db9d95ac7c5db9b1
CVE-2022-48626,0,0,9d4f63da0a918f51b7c85b0ffa7c98eb3b3f0bdfe14eedcb544bde294c904c2d,2024-11-21T07:33:38.317000
CVE-2022-48627,0,0,450773013a86dee085659fbeb135aaa41eee00eb1f2d7ba0c46cf0fcba42ac12,2024-11-21T07:33:38.493000
CVE-2022-48628,0,0,38c6820367758e57858643c90208981922cfb44dfdb56b80c9489f9ea4749b42,2025-01-13T18:26:13.343000
-CVE-2022-48629,0,0,8dc9651dec90ba27f16ecc9756ef659eb59364be16f98fb06b092297768e5e32,2025-02-14T15:31:56.023000
+CVE-2022-48629,0,1,61e95796ad26cabbf634a5891e412934a1a901a2d9e6e15e591b6dbf1939873a,2025-02-26T07:00:18.270000
CVE-2022-4863,0,0,d4d829a1beb8e4fd89587644cb89a6f79551c4f0525d6fe5f92668872dbe819d,2024-11-21T07:36:05.650000
CVE-2022-48630,0,0,c1c0b149824310772dd2a34eccec1464745f453029fe1e494c66edf69e66a0b2,2025-02-03T14:09:55.317000
CVE-2022-48631,0,0,07cfa709b2311dbd1149137d694e3cc56dbf7ee50a39f3e8764d7c810d0b445c,2024-11-21T07:33:39.040000
@@ -213126,72 +213158,761 @@ CVE-2022-4904,0,0,1d0b55967e86b1295bf3f96c72699076a95bf24673221db4e4586532e40411
CVE-2022-49040,0,0,7c1631b8e82470f3fb0abe0b727113e6db8e2f90e0ba3793feff44556a8e1dbf,2024-10-08T16:07:11.210000
CVE-2022-49041,0,0,a98f649e96ac9b0759657a1878fe20db3a57b93d993dafffc5b04e911a2c6299,2024-10-08T16:06:51.067000
CVE-2022-49043,0,0,7174066d58537267d7d2a315cb17b3519790e5764e973f2a3d77df9ee2584f26,2025-01-26T06:15:21
+CVE-2022-49044,1,1,2203b8b9482d29edc4f6aff384e0ad33203f328bb0b95fe82526cee32393bf09,2025-02-26T07:00:41.680000
+CVE-2022-49045,1,1,8a6705459c2b19facd1e9be555aebc389ab445796af96eac29f4caf2d176e70e,2025-02-26T07:00:41.790000
+CVE-2022-49046,1,1,df92e917df618b803c8732672c9d86db95e812afeb62618fc8a41440304058dc,2025-02-26T07:00:41.890000
+CVE-2022-49047,1,1,62f390566b51f1ba5e1e7e631b369879692f1cddd929303d2209f2ee1d0f7ead,2025-02-26T07:00:41.983000
+CVE-2022-49048,1,1,dce93d94c79111e32ab37587412c6a76dfde7a46784a34639bf07f311cb6de42,2025-02-26T07:00:42.073000
+CVE-2022-49049,1,1,cc4fd9097291bcd9e1239a38d0b84ca4e92d4c321be4d68025addd2f2376adb7,2025-02-26T07:00:42.170000
CVE-2022-4905,0,0,71313ae270fb5be33f7aff9db48d95ece499a953689009ab679dec981b993cf5,2024-11-21T07:36:13.077000
+CVE-2022-49050,1,1,58e12274d428d15945ce3440723dee7420e41a58d259189cdab143af8b2a9975,2025-02-26T07:00:42.270000
+CVE-2022-49051,1,1,441124ae74f7ae0301f5df6bee558e7250d29cba35895caa2a37efbda1850889,2025-02-26T07:00:42.363000
+CVE-2022-49052,1,1,f357a243ec74b7d536892c720bcfc02f1e5b0bf9f945464055ee585c784b09ba,2025-02-26T07:00:42.463000
+CVE-2022-49053,1,1,cac9e1b9c1616144fb1d246cf0b7dcf0e1016b4001befc8c09314c62bfd98301,2025-02-26T07:00:42.563000
+CVE-2022-49054,1,1,a90a230a571286a4dd850a83d1d43fdbdb6ebc0c58e98aade1b252a8e6ae3ec0,2025-02-26T07:00:42.667000
+CVE-2022-49055,1,1,711b79189c05d6b8a94fbeaa76941666c2138d3bd9e8e25675e11215e155439a,2025-02-26T07:00:42.760000
+CVE-2022-49056,1,1,65735eec858202f4a4989efbef9b24a9987242e501c83850a0b5e13c469a13ee,2025-02-26T07:00:42.863000
+CVE-2022-49057,1,1,6407e6574c3a7cbcba9791dbcd18089af1ea2efe0d26a43ae7a6480f3fb5b09e,2025-02-26T07:00:42.957000
+CVE-2022-49058,1,1,c495e58cd47ec4ba2f99ad0440daae9be893f6c40c7a7903a23399265fcd0906,2025-02-26T07:00:43.047000
+CVE-2022-49059,1,1,374af99330e3f8034c4afd61b70c71da9458be3887a91c1deb1f4d9e4e4e49b1,2025-02-26T07:00:43.150000
CVE-2022-4906,0,0,a823b4bbfbbc923f2df028a42581e18917821bc8c8d60008f8440a61828e4ecc,2024-11-21T07:36:13.207000
+CVE-2022-49060,1,1,4bb12bea527861d358c3fecc8e34f58edf94fd37a9267a859bc512d78e3881d9,2025-02-26T07:00:43.257000
+CVE-2022-49061,1,1,467c122603b899cd6bdc9ce5b74a1cd7e2c8c3cebba5c726ba766201c25bd453,2025-02-26T07:00:43.353000
+CVE-2022-49062,1,1,caf319ab53e98905987a4958e4977fce76daf8c905439205294f21028e096c05,2025-02-26T07:00:43.450000
+CVE-2022-49063,1,1,5df9bdaebdd4ccf05e8aa6544f3e0758688c7c0b3ee2ff8afcdd3c67e017189e,2025-02-26T07:00:43.547000
+CVE-2022-49064,1,1,b8d94ded4a909cd311e8fe26e7c2d92130c47dab0113897b222428477202f93d,2025-02-26T07:00:43.637000
+CVE-2022-49065,1,1,15a8d0bcb27aa029d913581b6edaf6ff6fd6d0358ed10d1475820c871885ea5f,2025-02-26T07:00:43.723000
+CVE-2022-49066,1,1,1b8bf54835c7216314b35e861b33ded5f585b9f6a5a98c16eeb435a92278ef00,2025-02-26T07:00:43.820000
+CVE-2022-49067,1,1,df0596a5020633e9fc570f86192eab1995cfe5089520f619aa4b7ae75d16507d,2025-02-26T07:00:43.927000
+CVE-2022-49068,1,1,73638749fdf6d8f47b4be6de655c3d1d3c6194e657f49644ba2bc438ffcea0d4,2025-02-26T07:00:44.027000
+CVE-2022-49069,1,1,e744e7eee6c0a9690b8a2dc83303b7b4543b0dd6c9c4aad64437ceaa6790b03d,2025-02-26T07:00:44.120000
CVE-2022-4907,0,0,0196061cf6e3e0458ba6dde85cf42a89e1110c92e69c62feca2776c69370599d,2024-11-21T07:36:13.317000
+CVE-2022-49070,1,1,e762347fe6f55e1431dee51b3c47c8f5540980e5bb4f6cc6b40e59697ed41481,2025-02-26T07:00:44.217000
+CVE-2022-49071,1,1,98392bddd5692c3e2de55bbb01fd5a8c71e761539c943b7c0e5ebd0bf12e5288,2025-02-26T07:00:44.323000
+CVE-2022-49072,1,1,a7f651188791101ed667f6a27ca5df2887b2a9a1714747976c03449f11e952fb,2025-02-26T07:00:44.423000
+CVE-2022-49073,1,1,fc90533268682274c099c54ecb52b40d1e1e09d91562032c561caaea2b065161,2025-02-26T07:00:44.647000
+CVE-2022-49074,1,1,8dbcde2964413863936318f4d761bfded88505acf89e2590978c7021d405e14b,2025-02-26T07:00:44.750000
+CVE-2022-49075,1,1,e401caab4e2cd50dd873316e76ce4663c9dd4d2d8b9eb8c7f55dfc2e75eceeab,2025-02-26T07:00:44.847000
+CVE-2022-49076,1,1,89cfa60bd1a594f17795b2fa89ee616d19983b4b8ee7c68806fc76f90dab4bc4,2025-02-26T07:00:44.943000
+CVE-2022-49077,1,1,d5181cd5d0207ec53060d8b12233fdcc4d4124acd7e3b5f2090725e903fea526,2025-02-26T07:00:45.043000
+CVE-2022-49078,1,1,25372eebed050959d2e988d369624d38319df175b94936d3533bee883d173d51,2025-02-26T07:00:45.153000
+CVE-2022-49079,1,1,7d6502bafddbbe656bf2b3504d76ba9a41447c925885bd993317c0a042aa4d1e,2025-02-26T07:00:45.250000
CVE-2022-4908,0,0,383323d7ed3fc2aa1cb27670a39714ac299a31d311bbc6cad999a9d72854959d,2024-11-21T07:36:13.443000
+CVE-2022-49080,1,1,46daf799a71f3d91f9d3c5a7bd3b03a530669dfb3fb9f38744947062c6ea9df1,2025-02-26T07:00:45.347000
+CVE-2022-49081,1,1,ad31b68330d4f1ab28c316884755bef117d87cc1a44e7ad06c2907b8043601a3,2025-02-26T07:00:45.450000
+CVE-2022-49082,1,1,68f5ac358c482a28bcd5462e81311715d7a463ba5421913784e5509d42dcf3e5,2025-02-26T07:00:45.540000
+CVE-2022-49083,1,1,b535d105f748518c61bd17f72aa6984343610371329e9f2e70886c302c14d784,2025-02-26T07:00:45.643000
+CVE-2022-49084,1,1,14f466a56984c6ca4bf531f864ff28aeba45d097692d3c51bbd13e3ecad54f75,2025-02-26T07:00:45.737000
+CVE-2022-49085,1,1,4cc21e34d54c27c9a8a4fe340d9561d951c97178be81f70968e26e3fe2a3a38f,2025-02-26T07:00:45.833000
+CVE-2022-49086,1,1,4a98f5f6d7ddb7bd7c15ae6ecf682771da4fdfa80758e54b5fc2b9027660505c,2025-02-26T07:00:45.940000
+CVE-2022-49087,1,1,25a7304c42dfb7da9a337944f1bdde2b59fa7a2cd8c7f7952073163a16a8f61c,2025-02-26T07:00:46.043000
+CVE-2022-49088,1,1,3c74fad7622594426e2a6f2c92cc3996d50a4b1ec096da3568e9817122efa5ff,2025-02-26T07:00:46.143000
+CVE-2022-49089,1,1,ad0db0ee42e5d6f1b9d7f541e2a7400e81cba717ab56d786c63f5bd86e56c706,2025-02-26T07:00:46.240000
CVE-2022-4909,0,0,28e150195670658dbb597d2ae16b58acadec9146b9a0e6f41e387727d58a210b,2024-11-21T07:36:13.560000
+CVE-2022-49090,1,1,0d8160f98a6b6b1ea1af6921f1498cb9a49f6a768b2c5479a63ab89260b4e208,2025-02-26T07:00:46.337000
+CVE-2022-49091,1,1,e348d433bc22cfcac4cb8378cb8a6e0e4673196c953cc3c3311682e67536a792,2025-02-26T07:00:46.430000
+CVE-2022-49092,1,1,ca6b3b2829ffc3816a81b270c4631325ea0ab0edf905af210e97dbd63ae59d47,2025-02-26T07:00:46.530000
+CVE-2022-49093,1,1,3254a3cec8018dfef23d047f3bbbadcbcd3ddcb4a878faf4eff6533ffadd2793,2025-02-26T07:00:46.633000
+CVE-2022-49094,1,1,569eb8d167cebb85be582cb3ea644ceb7ba83cd357ab869b4db3f97faa20d392,2025-02-26T07:00:46.747000
+CVE-2022-49095,1,1,8052384cff0087ba80330438f6adf142a2d616e312868814bbf1d228f4e703ec,2025-02-26T07:00:46.887000
+CVE-2022-49096,1,1,9e70a354621e717fb799b5e2efcb9cfa1dceeabfbfa379817b72bba3a6950e57,2025-02-26T07:00:47.010000
+CVE-2022-49097,1,1,f60a1a5c7b835d5300ad1b9766fbeb7f2d965a1d7adcd90ad66ddacd3ab1e535,2025-02-26T07:00:47.127000
+CVE-2022-49098,1,1,268c23b76745892f35b7762cb857c9aa408860aa9c3d310133f26a1352ff2f0d,2025-02-26T07:00:47.247000
+CVE-2022-49099,1,1,0285d357a4473ee0b33377362392aa0da4306fd853ac95fbec64850b965042eb,2025-02-26T07:00:47.347000
CVE-2022-4910,0,0,0578d222e37c72ba1a57588b55149e801184b5443a4d394ba72ee7d1ccf12f02,2024-11-21T07:36:13.667000
+CVE-2022-49100,1,1,d818e8fd278b029e01eb3399b15376f97277a42b99842dfc16b51587b301ac3e,2025-02-26T07:00:47.437000
+CVE-2022-49101,1,1,935c63acf95eb88709eba4f596df2fabdee6ea4912a035181cf00d16b7fc76c4,2025-02-26T13:15:33.977000
+CVE-2022-49102,1,1,10ad75d3b4c2a83f395fb17bf77b72bf6573372c496582e372127f75295756ba,2025-02-26T07:00:47.633000
+CVE-2022-49103,1,1,43780a6ade9c853f5945f3353732fd6fa06cbd42b23545f981f550f7de5c518e,2025-02-26T07:00:47.723000
+CVE-2022-49104,1,1,7bc591405b3cf893d770c29a528db527343c1ac05b7c018de814e9b995113903,2025-02-26T07:00:47.817000
+CVE-2022-49105,1,1,8f57fbe556f24c87e2787d36c78210ac995018636bcee9ff789c2f65464631f2,2025-02-26T07:00:47.910000
+CVE-2022-49106,1,1,3ca6f5dead418ab982e3a5656ab46d4aa94dd011431951d03eceeda735abeb55,2025-02-26T07:00:48.003000
+CVE-2022-49107,1,1,62d724c7faa9b22bb9d4cf1265e4fa685266d5c6c03c2f7011d27614aafdf0ef,2025-02-26T07:00:48.093000
+CVE-2022-49108,1,1,a0a957c05c41d83b387a7118ea9c4365ec02159e32b283814a87c36c6361ee59,2025-02-26T07:00:48.183000
+CVE-2022-49109,1,1,e6d0b9bd915508b28af80a4c7d6ccc3b8b397bbd7940345a4920d25f83abea9d,2025-02-26T07:00:48.273000
CVE-2022-4911,0,0,584ace30c9064e713cd09c96d4db8b9174c37337aaf32c92be96843fae8619c7,2024-11-21T07:36:13.780000
+CVE-2022-49110,1,1,79c260571f84dbaaba1acd67d8b4c69ef5c796cbdaef6f29e26bd60985fe050a,2025-02-26T07:00:48.363000
+CVE-2022-49111,1,1,e385206268b80477262478d1a05be332efe1d55dd82d973c1d8f594b03c39120,2025-02-26T07:00:48.470000
+CVE-2022-49112,1,1,88d9fda802e3d333c77034ca297f0f2e603b1f6963b81a274a63fd1e572aa4f1,2025-02-26T07:00:48.577000
+CVE-2022-49113,1,1,2be1e4b644c51d9a697b6902d895476a4a9aa2c37dd3c2166099056b889228fc,2025-02-26T07:00:48.677000
+CVE-2022-49114,1,1,e2d1a5ae7225acfae6868fb2a87d99ce964c5ae85a84ec15313490959eb1513f,2025-02-26T07:00:48.773000
+CVE-2022-49115,1,1,2a0534683a417d90482e2b566331d914f5d20c4140b5e03b71b91f2cbf436109,2025-02-26T07:00:48.873000
+CVE-2022-49116,1,1,fe2b61a3cc9ab1011b3cec671b49b11bd1b36b86623fbb5d9960db17bf7322a4,2025-02-26T07:00:48.967000
+CVE-2022-49117,1,1,ee080e0a7ad13c945630a33ed795205a507cfa27c22612c91acef91bca2f0d01,2025-02-26T07:00:49.057000
+CVE-2022-49118,1,1,cb09319e3c05e61d52abf966abafb9698e92c3e49198d2eaabfdd3e300d6ea25,2025-02-26T07:00:49.150000
+CVE-2022-49119,1,1,14c153a24dfdb903a3d91a832a19781839a9e9fb8599ca55f7a33ce09ad798c2,2025-02-26T07:00:49.250000
CVE-2022-4912,0,0,f31c2366ccb5db0b2edeef2656f7822d272d2a0015b283eecc00bab9f788a0fd,2024-11-21T07:36:13.897000
+CVE-2022-49120,1,1,91dc22555629b2785f705746421d7a151e8b52dc6e4e83896a2bfadda09d7f13,2025-02-26T07:00:49.350000
+CVE-2022-49121,1,1,25330b11b9ad97c077f21020d8d37f59fa70e2932a8035ed2f175442cb150676,2025-02-26T07:00:49.450000
+CVE-2022-49122,1,1,baa384461bf1834489e23162a534ef835b25e034627b3d73d282c0cfee17683d,2025-02-26T07:00:49.540000
+CVE-2022-49123,1,1,0f6205efd2625366cf7436d756f0bce5575dcf365f7b802178450f46c6d04dda,2025-02-26T07:00:49.640000
+CVE-2022-49124,1,1,ddb7323e81cfead4ec852710ca5e799576d579b7ce58494bbd001811570b7f2c,2025-02-26T07:00:49.740000
+CVE-2022-49125,1,1,a982edad32d5eafe0ca6d4f94e135990db26132a1278a77fa1ffaf00a4798ec9,2025-02-26T07:00:49.837000
+CVE-2022-49126,1,1,2a9cb2772331805a762b82db8a43bc63317eb5f0e87b6d4185ead63793578fec,2025-02-26T07:00:49.927000
+CVE-2022-49127,1,1,335a2536334a98c2a26ab04e6c68f4a7397483e654da5199afc0918995c7907d,2025-02-26T07:00:50.023000
+CVE-2022-49128,1,1,f6d7d91badfbf690a36067f746ef767b9fc3d17309065fd17e24dcd87e93d48d,2025-02-26T07:00:50.113000
+CVE-2022-49129,1,1,635187c24833be1421fd147a77f0a2f9a5dd731a5b7ccd4819fcdebd73d3f567,2025-02-26T07:00:50.203000
CVE-2022-4913,0,0,e8dbca49e3518f819fca949d98a7bb3175c26403fd3fd8fca017d6ea88f023bf,2024-11-21T07:36:14
+CVE-2022-49130,1,1,855be5ee8cfafb1f6e1d2efc1041ebb62cf40c9b592639b6d4e053b9a594738f,2025-02-26T07:00:50.300000
+CVE-2022-49131,1,1,88bf638620237e97a70660d8266662d3955359e4bdcfc54ad9f97aeb6cf8f949,2025-02-26T07:00:50.393000
+CVE-2022-49132,1,1,dbc2403edcf0fe8a94fd025236efc808af0828e502ae9ccba3138d68e3caa7a7,2025-02-26T07:00:50.497000
+CVE-2022-49133,1,1,9dfbea63135d73ab468dcdf665efdbe36b2f7e6b59dc0a92194b0e05ab85369a,2025-02-26T07:00:50.590000
+CVE-2022-49134,1,1,81b15360b4c0149d855216e894c9ac4ea22db71898a0c845e6b00506f605b434,2025-02-26T07:00:50.680000
+CVE-2022-49135,1,1,30e5827757074130e4c037044d6b4c5ed4efa2bc2acf898d046f684b3bda629e,2025-02-26T07:00:50.770000
+CVE-2022-49136,1,1,cf8e12edd89952a65f6153848ddf525931e7ba1581d8d7d3f2a54825819c0ec2,2025-02-26T07:00:50.867000
+CVE-2022-49137,1,1,5b1746b2ec50f0dc2ec6bf0272d0a3183c707ace26571c91a8fa2971e0704a0a,2025-02-26T07:00:50.953000
+CVE-2022-49138,1,1,8437106ee0a6fabf2a2246cb985b009354cf0467f29aadb6b0d556c8df8dbb11,2025-02-26T07:00:51.047000
+CVE-2022-49139,1,1,67a318aa5642355e534ed7df583fdf13225b0e9fcaad79c9392e0a29c74de0b2,2025-02-26T07:00:51.133000
CVE-2022-4914,0,0,b1a3bfb604bc94d6f8d72a9a472ff2a255c53e356f5955922fa3b7d4adc587ee,2024-11-21T07:36:14.103000
+CVE-2022-49140,1,1,490209681c0d54ccf6c78b2ae206c8a6d91e21102245bd99b40eda88100d5705,2025-02-26T07:00:51.240000
+CVE-2022-49141,1,1,d0eefd0b54c73da52b26ce590001b5b1e0afb1fe0c4545a1cc3004d4ba1bab75,2025-02-26T07:00:51.327000
+CVE-2022-49142,1,1,66c078d32fa681151a9e26bff1b4bbb2ac446fbd0aee2986a1cf80baa1672489,2025-02-26T07:00:51.420000
+CVE-2022-49143,1,1,715c3e9e10466e960c8f40210c1260495316f9d05ddb956ea2e6e6f055457d25,2025-02-26T15:15:15.857000
+CVE-2022-49144,1,1,b0cacb8efc4ffa4ac4ff0b1a383f2d7ac4a500e6a7e32d122d9d2825c78370be,2025-02-26T07:00:51.600000
+CVE-2022-49145,1,1,6974408b82e14ae49183d21dbc27e4dd2a7c9a012525b6fe12c4068fcba0620c,2025-02-26T07:00:51.693000
+CVE-2022-49146,1,1,9ebea0e78d5ee80539a5487add0b5849739a5bf365c65312b3b7f5e8ccb7be3f,2025-02-26T07:00:51.793000
+CVE-2022-49147,1,1,266080f202e21391f4fcc2a409297600df9b4a68ed40dabf09cfb9fbb5c3552f,2025-02-26T07:00:51.887000
+CVE-2022-49148,1,1,87f180fd9e4ed53221f1e913ba1f80616706ba0e0f04513d261ae25bb30e012e,2025-02-26T07:00:51.973000
+CVE-2022-49149,1,1,cf7af6c7197fb02329938be79fcdf06620bc3935237d664c797b32d740d92554,2025-02-26T07:00:52.073000
CVE-2022-4915,0,0,78e97bf5fafb2d4b7a3e2f6f595e7dd1ee238a60190a7a2d5d6415e7dc17ff0a,2024-11-21T07:36:14.217000
+CVE-2022-49150,1,1,96198bbe36301ef47dd7745ba89156e143134168e2a4a3c829ce0b2901692759,2025-02-26T07:00:52.203000
+CVE-2022-49151,1,1,4f6ad0e9a004510c2bc592ba1885a757ffeefbff766a2484eb4254b831092751,2025-02-26T07:00:52.330000
+CVE-2022-49152,1,1,8fdebd2534976353dba4f0e28543fd3451649a91f8746d0e08f3fb9cc3d8962f,2025-02-26T07:00:52.440000
+CVE-2022-49153,1,1,ad7e88534985840947b5c8827653deb2d795dd6c2e5184034cf76a5a88f54344,2025-02-26T07:00:52.533000
+CVE-2022-49154,1,1,b85fdbd9db24a0505f872b06475d56329e39b5cdc80a62a7eda62510571ea6a9,2025-02-26T07:00:52.627000
+CVE-2022-49155,1,1,1c47051ceb01e203ace0de5b708a12803650d22053ae7ee339748b7676d2adfb,2025-02-26T07:00:52.717000
+CVE-2022-49156,1,1,c5e4839bb8e5e9cae16752b494b523233bfd692ce0d9489a7c6051507b9138cf,2025-02-26T07:00:52.823000
+CVE-2022-49157,1,1,c6ebd250befa48d51b36b71108ea70b8ea5df5d94e7f4ad90baf3792736e9de6,2025-02-26T07:00:52.917000
+CVE-2022-49158,1,1,457adb7348a95ee03c14db6b1656f74e3c3d4af292eb707eba9464e2226bab1b,2025-02-26T07:00:53.013000
+CVE-2022-49159,1,1,0d918263da04e8a177d5c53ead53320f33fd61e833049eadb558c92ae9438da1,2025-02-26T07:00:53.103000
CVE-2022-4916,0,0,506155fd081e87d1f14db90edc228c7abea923b78f3efea545f8566eb768dffa,2024-11-21T07:36:14.323000
+CVE-2022-49160,1,1,35eddaf833e10b1c6e436c65bc8e32f7dd8eea27a10a0c09fc29d7eb52822b62,2025-02-26T07:00:53.190000
+CVE-2022-49161,1,1,438b297b6d8b694881d21ed656ba18974a9d860b944b568b00ceddd45ff47435,2025-02-26T07:00:53.280000
+CVE-2022-49162,1,1,1994e16aad45a5e9e1fc25c4b35f80d783011fb1acdf0940c31a6c7172900ee9,2025-02-26T07:00:53.373000
+CVE-2022-49163,1,1,b65b81ac70def70b0986e8c017ec3b0bbb7ecd21c855cf952e58bfd72b9c4dc4,2025-02-26T07:00:53.473000
+CVE-2022-49164,1,1,4c018abbd4f1d7b4615bb0a8d9f779494949e7d5d29037218fcc59fcf71a8bdd,2025-02-26T07:00:53.563000
+CVE-2022-49165,1,1,5b5aded0c2c4b6917f2f05ca4bd91e354456b639308e0403336f36321763f8c2,2025-02-26T07:00:53.653000
+CVE-2022-49166,1,1,f716bd9e2ef4079667efc9f9b5602d4c08fd289203ba1e49ad0071f40d12fb4e,2025-02-26T07:00:53.743000
+CVE-2022-49167,1,1,04d7f51f90134d787c73cd94a8d77fff68eb60624dfb8a4c40a84d343ddd3b15,2025-02-26T07:00:53.837000
+CVE-2022-49168,1,1,a5873977864e9d2755cccbcc804c0a1d186c272eff4b632468d6ee2a6be08977,2025-02-26T07:00:53.927000
+CVE-2022-49169,1,1,993d6d150f2c70adbc43b8ad1b935b02a15f3e62cfaaaff28da594efd829502d,2025-02-26T07:00:54.017000
CVE-2022-4917,0,0,632226f8b02c5f8d00ce4b404529b7905bf41638914202b70d798cef2843a50d,2024-11-21T07:36:14.493000
+CVE-2022-49170,1,1,7c87709422d3736ed7539b49fe445e546ec9a8855c9bcd6cee5b8b0955a77a06,2025-02-26T07:00:54.110000
+CVE-2022-49171,1,1,bf1defd98b078b2e52f27db36d7161eab295816906ed115b227371abc06f1930,2025-02-26T07:00:54.213000
+CVE-2022-49172,1,1,b5423a2e59351877d885903dca16c080a58678a47ed9e789946258ece2737f1a,2025-02-26T07:00:54.313000
+CVE-2022-49173,1,1,2509ad7a7410304e8dee4a2119e65dbcef56f8c7a515bcaaefbcdcd41bc84cbb,2025-02-26T07:00:54.407000
+CVE-2022-49174,1,1,c5143b5d6a5ad95c0897b099c6ad5b5c75776be77e7f8750fdca7fbc8f85fcc5,2025-02-26T07:00:54.503000
+CVE-2022-49175,1,1,228d68467849fba76d75f7e13b031d387e5652a3ca9fcfa660013ed7e9ea9433,2025-02-26T07:00:54.600000
+CVE-2022-49176,1,1,287ccead8e8bfa076a8ace1a10c2d3ec78fcd16359af3d3f6cc2d1b4f138b771,2025-02-26T07:00:54.717000
+CVE-2022-49177,1,1,6b65621d4d4e4b3576467907edbb3e69f1f42092ce46e543648e695ebb25bb49,2025-02-26T07:00:54.850000
+CVE-2022-49178,1,1,540ea6935b001f7814b720e898282c2b2351a93778993fb999959fd695d03799,2025-02-26T07:00:54.947000
+CVE-2022-49179,1,1,5850f2bf183b01e4b89839be7fe84dfe942d64b3de3936768b62df43f48026c9,2025-02-26T07:00:55.037000
CVE-2022-4918,0,0,c4f03a0a064390463bddfe1751a6538e5a2ff20b187ebaa73606b1a29097d2ab,2024-11-21T07:36:14.707000
+CVE-2022-49180,1,1,c4f7dcfa900ffd3b7fc79efef06511387ee33662a968f19a1872650754b01ea0,2025-02-26T07:00:55.137000
+CVE-2022-49181,1,1,8a4c3e6b9ca8dc4d9b8f15b356b1ef8d9d688badb48456bd7a0c47c0d7df2b88,2025-02-26T13:15:34.087000
+CVE-2022-49182,1,1,7e0f0a9c2d8f1d58674f90b82e9032529018249d174999e72ad443a7ce51f3ff,2025-02-26T07:00:55.333000
+CVE-2022-49183,1,1,8ef852f3298cde30d9a9a443b7f4b8d32f85c7f2c448c25549d6be58fca5d5da,2025-02-26T07:00:55.427000
+CVE-2022-49184,1,1,cb13d879b5f0866b5d622d6ab946f7754d8e2cfa6b5379a0ca825f66c12a7d84,2025-02-26T07:00:55.520000
+CVE-2022-49185,1,1,c5e0cc2cb3bc744cb0ba29e7fb102baa38a5ffc6d8c5850d895d3c0ccfa18712,2025-02-26T07:00:55.607000
+CVE-2022-49186,1,1,28f96e962eb6ebf24adff6c2819c9f66a829c42078a955935156eb7576019b59,2025-02-26T07:00:55.710000
+CVE-2022-49187,1,1,99964b588d1f16b591e364a9d80e55636f0f5bc3baa02f4d5d0d02ce85c04387,2025-02-26T07:00:55.803000
+CVE-2022-49188,1,1,a57c25ba71159d3a119b37def7111c4a2b6e79d80475bef465215949c79713be,2025-02-26T07:00:55.897000
+CVE-2022-49189,1,1,e0a9acecbeeee29af1ba6d78342bf1ee6e7b90862fde5de979b084723a8d7cd2,2025-02-26T07:00:55.990000
CVE-2022-4919,0,0,98cb93515b7aa4f8c3b1d5996b5569b16bc03402364c91cf633e9a3eefb9bd48,2024-11-21T07:36:14.903000
+CVE-2022-49190,1,1,c8fe25122b5df51bd2e73b2d03c76824956ce6f3406b9c38bc4c2c55be57dee5,2025-02-26T07:00:56.090000
+CVE-2022-49191,1,1,2ea993e5881fa114b0b3469ef40c5de849e23c253bb8a1758e29f7a90ab18876,2025-02-26T07:00:56.183000
+CVE-2022-49192,1,1,af37f2a9ebebc8c7e586d7b0536d1848be3987485141a5ab491ded6ad13d00ac,2025-02-26T07:00:56.287000
+CVE-2022-49193,1,1,2edef125bcea36c23c49054bd32643038ae55760d97b5cc0fe64af9fe41952ca,2025-02-26T07:00:56.383000
+CVE-2022-49194,1,1,8398638a0063707be6ea13d4268a20c78a5090aed61cfb15447a898cf4abc4e2,2025-02-26T07:00:56.483000
+CVE-2022-49195,1,1,c1b3df78a30d4ff4cec29008947cfbcdcc532c4d3af661f31050644d6a75054a,2025-02-26T07:00:56.580000
+CVE-2022-49196,1,1,6d8b0fe784e634ab27b3aff1b7ba0031f5574c42851e786bf95d3c4c1a64a983,2025-02-26T07:00:56.677000
+CVE-2022-49197,1,1,c515088bf3f04fbad320d0aadc94f264f53288bcbd1e6b12a57302a5c3941d58,2025-02-26T07:00:56.770000
+CVE-2022-49198,1,1,eb8724bc81500fa6a9b129ab0ed77d6272c8d1af6be69a59be88db039add9cbe,2025-02-26T07:00:56.880000
+CVE-2022-49199,1,1,ab0d5c26c0b3417450c1256ad5faf6d8bef8aa9fa182ae9b0a172a1a17b71180,2025-02-26T07:00:56.970000
CVE-2022-4920,0,0,6d91084fa28049e94d0212ded35971c929fba3ddd5aefbde0fa3ce59a47f5d1c,2024-11-21T07:36:15.140000
+CVE-2022-49200,1,1,154d1750482090f5b1ad9aebcec8639c46e045ceaed1701980abef1071568b3d,2025-02-26T07:00:57.067000
+CVE-2022-49201,1,1,f15f9aef919f03ef68d4f2ac005c22ef10d2740c0a9b4adef16752db5b7e380f,2025-02-26T07:00:57.160000
+CVE-2022-49202,1,1,68e26be2909adabea9839d262fc68fb592a228fa1a1fec6df2daaeb06556f865,2025-02-26T07:00:57.260000
+CVE-2022-49203,1,1,e50b12f611a89b536b3b368f30927b7fa6c426dfebcb40a46b9b112853a6dc05,2025-02-26T07:00:57.357000
+CVE-2022-49204,1,1,37926cd84c3ed6e2b81d8abeb248a7fe235afb4ce245274b4aa7d16a6c70361d,2025-02-26T07:00:57.480000
+CVE-2022-49205,1,1,d69dcbd1d6d73de06ed3a3ce0493831f2039dcdabb144117b9719885fef12733,2025-02-26T07:00:57.620000
+CVE-2022-49206,1,1,a2f0ad2c441eec56615ecd9355cd6af3fdabd6a4e225ab81a0e9287d1bf9d9f6,2025-02-26T07:00:57.723000
+CVE-2022-49207,1,1,c3510ad7f94947d6deb1c85d61a897549737d27efb96e21470fad26b65945e94,2025-02-26T07:00:57.817000
+CVE-2022-49208,1,1,92bcf50e037aff2a2cdeeab98afa21a547e0aac00cb8ca3727e9a0e0386e02b6,2025-02-26T07:00:57.910000
+CVE-2022-49209,1,1,e58d8c0f1e1f46e04aa50f3404b38dfa6383697345ec14c3ebf4d3e0048be230,2025-02-26T07:00:58.007000
CVE-2022-4921,0,0,abb8970108be08849e8b46c4d5bb6d517f02615a1ad9856e3cef3142736ec36e,2024-11-21T07:36:15.330000
+CVE-2022-49210,1,1,3b750d9656bad0559b18f86bd337afb2e4a4c160d5c2d07f8d36d4e4432c87b8,2025-02-26T07:00:58.107000
+CVE-2022-49211,1,1,8cc9d47e31e7147bd9fa15ecd57e898237bc8d981570426633b7c73f97b5642e,2025-02-26T07:00:58.200000
+CVE-2022-49212,1,1,f9410b1a4b22d1bc788c90b7669f457ce20b9de6b98957eb4af090744f4fba47,2025-02-26T07:00:58.293000
+CVE-2022-49213,1,1,8b86e986bdac543f44a95189198d7167c74e314da55982d1604cbbb96ec4784c,2025-02-26T07:00:58.397000
+CVE-2022-49214,1,1,580f8359091e8af811f770e0ceda6f7da8a6ffd16dc7c43cedc94db81a0b72cc,2025-02-26T07:00:58.490000
+CVE-2022-49215,1,1,42daf4ddcad7e209fc242918ca728132c55cad50909c3e550896133cf728685a,2025-02-26T07:00:58.590000
+CVE-2022-49216,1,1,f4adb4f55b1799c4045f9a2b2101d2bfa76f57a72e447681f97973a12c941e99,2025-02-26T07:00:58.687000
+CVE-2022-49217,1,1,5b35f050bd8f7d5ae0a37fd3f8c491f2e04b08a07fcbd2babe92b1f1eba07e99,2025-02-26T07:00:58.787000
+CVE-2022-49218,1,1,7c9fc37c59a90e374bb4a22038a1b8e0cb9510ec57d544a8208faf8f5a290bab,2025-02-26T07:00:58.890000
+CVE-2022-49219,1,1,20561bc9aa51f4b5f7c5118232c7af6d5bd27cba72faadd847b4affb79647d05,2025-02-26T07:00:58.977000
CVE-2022-4922,0,0,845ac042dcd4b5ec74159a973e2efc3ff642abc4a48ec290dcd8ade6154e85ef,2024-11-21T07:36:15.513000
+CVE-2022-49220,1,1,1bf5f8f544935453bef31a4ecd67bc2f5fc84f04f266b3fb29793456794b39a6,2025-02-26T07:00:59.070000
+CVE-2022-49221,1,1,352783bcb84076ace1f7ef63620bfe9e1964c9ca9b7dd8be35eaa8fad9d738cf,2025-02-26T07:00:59.167000
+CVE-2022-49222,1,1,ed5a14b3e6a68cafe149e4495bde341503683b79a937e4a5ee07623212814cff,2025-02-26T07:00:59.260000
+CVE-2022-49223,1,1,cc6832b4d98049880aa8227bcfe078e9047c373148b88dd30abbb6cc14ac0d67,2025-02-26T07:00:59.363000
+CVE-2022-49224,1,1,0dfc7b315cc0a9196858b5d3f6926d708463358bbaa76ec923c9b3dd108f2809,2025-02-26T07:00:59.457000
+CVE-2022-49225,1,1,b5ecf7157dc9210f63c6a5dee34c00119ffca9cebc209406194aaf48bd53963a,2025-02-26T07:00:59.563000
+CVE-2022-49226,1,1,bd6335a0bc58740c540347599a6264847ee35bc10cfabffa0304b21e310a4321,2025-02-26T07:00:59.650000
+CVE-2022-49227,1,1,61c965d39d93edf028ff11aeb54aca25ebf42386394598c8dd1bee3693ec8710,2025-02-26T07:00:59.747000
+CVE-2022-49228,1,1,dce38597cb49c886593489dc5d16693aea87f8bfdd3b92debb19606321ce71d4,2025-02-26T07:00:59.840000
+CVE-2022-49229,1,1,a1033c434dd157eab19b03ef8c6dd1301a90287875913c69a39b642f9ec7ae42,2025-02-26T07:00:59.943000
CVE-2022-4923,0,0,41664ac8b2df2573b9f33a9b7990a9913a2c441bb6eccf7450f8a6f553a54573,2024-11-21T07:36:15.623000
+CVE-2022-49230,1,1,feecc45f466d0b8dfd3632072c3c54d3393403ef19668b37153b50b3bee40de6,2025-02-26T07:01:00.037000
+CVE-2022-49231,1,1,bf27a8ac4b1450665b0f5e63c1e5c30b5e9ff3e0b4397c4c10805f2bde3de599,2025-02-26T07:01:00.130000
+CVE-2022-49232,1,1,a849a5af0f2665becdc85b37dff49905779a3369327d646829812367ee2d9159,2025-02-26T07:01:00.217000
+CVE-2022-49233,1,1,989473ff019b48f7fedcb6ca5234b9d536fe697b8f704b4dc8ba114fac2b3542,2025-02-26T07:01:00.317000
+CVE-2022-49234,1,1,f62cc34ce31e4e24952f3777b23cd8a302adea934499ccb930053f4ce557e087,2025-02-26T07:01:00.407000
+CVE-2022-49235,1,1,a8562abcc73c5755f99522d5e5a2926b0f28fa8852556afc18375ece1f0e830e,2025-02-26T07:01:00.500000
+CVE-2022-49236,1,1,79ec66f90cad233567be8687c64bf19937167d6e51d506b16e3b45c77d006ad2,2025-02-26T07:01:00.600000
+CVE-2022-49237,1,1,4a10d2383537f0fd099deaa353fac85143df257802f812afe3fea7b11ae63d36,2025-02-26T07:01:00.700000
+CVE-2022-49238,1,1,f8f096e40637e62b88561ae60005748422c0d5fa9fa70846a1d61ad2f02f9b9c,2025-02-26T07:01:00.790000
+CVE-2022-49239,1,1,4bf4920068aecd0cedc8315cc12e0e84e08834779ac85c08ccaf45f8bf7d5a96,2025-02-26T07:01:00.887000
CVE-2022-4924,0,0,478cd65cc39d1a4a12365dd984816c2000e169260e72489e81fdf56aab2bfb16,2024-11-21T07:36:15.747000
+CVE-2022-49240,1,1,584a9751d2751ebfe606ed3b65f602333ef1499b0061b067a87e94d7f3e3b907,2025-02-26T07:01:00.977000
+CVE-2022-49241,1,1,c190d4c26633a160830cc7e1711ff8d19209410f575bfdb27fde43633fda820e,2025-02-26T07:01:01.063000
+CVE-2022-49242,1,1,ebb73be6a3d60ef207cabba59d1fe64e3362fa4fde523cdc5e1fdfe1b9bc7e6c,2025-02-26T07:01:01.153000
+CVE-2022-49243,1,1,3dbf702eca227000b8012d85d30625145291f22ef1f331b8a57734cd7ca5c490,2025-02-26T07:01:01.250000
+CVE-2022-49244,1,1,15dc96eb05dd2e5ed618877d4a479194f782b48a6630680717db6d7c1c3c3556,2025-02-26T07:01:01.350000
+CVE-2022-49245,1,1,16845e8679d6bec884b825565b9944b336c9f0cfff75016cb9f39b333d1a00a8,2025-02-26T07:01:01.450000
+CVE-2022-49246,1,1,878c85209a249890129e5207e01f224b1a7b311f10d6953f953c4ec951237f95,2025-02-26T07:01:01.537000
+CVE-2022-49247,1,1,e4e9909a5bcdfa8d9b9fa1a3e0481434cdb22367d66e899e83c266e0985fd22e,2025-02-26T07:01:01.623000
+CVE-2022-49248,1,1,55ded3d3d520b190395d3e8f67cef6360496ea4fa9fa7c6c32c0324175393bcd,2025-02-26T07:01:01.727000
+CVE-2022-49249,1,1,d7476758f1104e9b04e989a4cdac414d0571f11509ae710e516a3e2ab89d24b6,2025-02-26T07:01:01.830000
CVE-2022-4925,0,0,883abcc543d22f24dfb5afedfff08048c863049c7000143c7e9a88ee1850b7f3,2024-11-21T07:36:15.857000
+CVE-2022-49250,1,1,2397a2005e65a0008511cbdb43b087eb10299cb64c5e945acfdf8aabc0bc2a63,2025-02-26T07:01:01.920000
+CVE-2022-49251,1,1,c614f2ad8971f71f4b6fb4b20948ca21b25b3a2c726bee4b695d79a699a97640,2025-02-26T07:01:02.013000
+CVE-2022-49252,1,1,ad6a7d4ecb3b4d98f9a3a62e6876418db291d59471973b5c6a2819b8e5f395b6,2025-02-26T07:01:02.103000
+CVE-2022-49253,1,1,893bbe95fd8c7f87427c730ffbcdfcbe730ddb6505ab08346d8aa6d2c50df105,2025-02-26T07:01:02.200000
+CVE-2022-49254,1,1,de82d9872498309fba0961065d7c690e1307c96fbde02d13b1eb6ebc2cc90ebe,2025-02-26T07:01:02.300000
+CVE-2022-49255,1,1,1584f53b5b4d9ef816abcf04b2bb6d64dffff362d61885f8d6da57dc7a626afb,2025-02-26T07:01:02.397000
+CVE-2022-49256,1,1,0983d9535fb4bc87454ae32f72810fa5245847a82dce93daf9a7ea5f7d270e4e,2025-02-26T07:01:02.497000
+CVE-2022-49257,1,1,aef59c8f6c4daf98c543c8a8c965310d4923bf88140e870fe577c6f82fb653ad,2025-02-26T07:01:02.597000
+CVE-2022-49258,1,1,4d80a319b8cd814064ccd3cc60a4427ff0be23e33f42067f1298ddfbe92b3ae2,2025-02-26T07:01:02.720000
+CVE-2022-49259,1,1,629cfec34602a0e6688d6ecee568bc7c5e4cea8d0bbb2257e31c91e935220a58,2025-02-26T07:01:02.850000
CVE-2022-4926,0,0,97f811d640cb5b71af561412ae9269e091dd51730c3d06da7203d649f9e5797b,2024-11-21T07:36:15.960000
+CVE-2022-49260,1,1,8edc4010767ab82723cf428968a7316b2e8fcbcce09865b615cbfd9317759088,2025-02-26T07:01:02.967000
+CVE-2022-49261,1,1,faaa44b8b9d99eab5c64903f6b924ae15f94edfdaa7dd9aefdbe3eeed7816af3,2025-02-26T07:01:03.057000
+CVE-2022-49262,1,1,edd0b4b4e114bcc2f31b1c52fd073bdf9b118857a3198121f091c913449722c0,2025-02-26T07:01:03.153000
+CVE-2022-49263,1,1,be801f77283274f271fda935d7516cc88f0081088cc337bb4980fae74dca5e20,2025-02-26T07:01:03.243000
+CVE-2022-49264,1,1,d70fdc358c976cd295163800ad7273bb5cac652683fadad28de03df566179290,2025-02-26T07:01:03.337000
+CVE-2022-49265,1,1,5fdefa612b3bc2ba7a1aae6805288a63c005b4f2733f86e23b271b3045b7008f,2025-02-26T07:01:03.437000
+CVE-2022-49266,1,1,31adb542bd736e6e735dd9816703f4ceb4d8f49949517b2c171ad5950fc68d9d,2025-02-26T07:01:03.527000
+CVE-2022-49267,1,1,14cf6e86dbee6bfef01eee0d707840d55565948313f6244cb0e36e0f83a35cbd,2025-02-26T07:01:03.620000
+CVE-2022-49268,1,1,68861c5d695cd4f3f0ecba55b9802f4d295901a17c22f5986c2744aa5d0ee6ab,2025-02-26T07:01:03.710000
+CVE-2022-49269,1,1,cfbf2dbdb41932c60c00b5942c6b07ef6d2b39663f15351967811b6961ae13c8,2025-02-26T07:01:03.813000
CVE-2022-4927,0,0,38cabefc86faa21ef7a71fd3b17ce17fef5bf62f0a9bf16de2aec372df1e9418,2024-11-21T07:36:16.143000
+CVE-2022-49270,1,1,c1088f16de28bc387f404fc17624a8e944704f53c0db360d39fcc96b8de8b94d,2025-02-26T07:01:03.907000
+CVE-2022-49271,1,1,81ec18b86300beda71f17ee2dec64ee7abcf84cbdaf8fcd3970c998b9d63d764,2025-02-26T07:01:04
+CVE-2022-49272,1,1,2398c975f2a4a553e310ca8af213f15464295377e7f82eb2bd1ef0da7f541839,2025-02-26T07:01:04.097000
+CVE-2022-49273,1,1,e75c5ce021d2555c06178559590a309db5c066ce3f7c0db6a274b2043a067ae0,2025-02-26T07:01:04.190000
+CVE-2022-49274,1,1,eb1e5a5f4849a7d384036ded4e7910468c3d56b28f9fd81e14132bdd303f20c8,2025-02-26T07:01:04.280000
+CVE-2022-49275,1,1,7fb971b9548784df9e9292a797f7f2de179a9309e3838c3008f8a1c168228d84,2025-02-26T07:01:04.370000
+CVE-2022-49276,1,1,515339dee9158220e33bae9672e42f9189c0267586b817992308feb5c8457a09,2025-02-26T07:01:04.470000
+CVE-2022-49277,1,1,0ec0cb50db056f53ab17f94511792b4071a0e53c9c319f64c8eba39bad414d83,2025-02-26T07:01:04.567000
+CVE-2022-49278,1,1,7ec0dca1a1c0d66c7ac44fe809696c56fb52e68c7e67ea4c7acc08dae3d01816,2025-02-26T07:01:04.660000
+CVE-2022-49279,1,1,1bf279e4dd5256bfb835a1cf07e327741df471f397be8a7038f106e1463e373f,2025-02-26T07:01:04.750000
CVE-2022-4928,0,0,55113902c03503fa1ab1a487ca9bd5c82e2b7a386b6bdc538a9776f2c4eb50bb,2024-11-21T07:36:16.280000
+CVE-2022-49280,1,1,09b86a3bfcd85c33422d1196d0c5b379ffef7ed3f5558e3b8d19f4da61790629,2025-02-26T07:01:04.840000
+CVE-2022-49281,1,1,04cd02f680fcee5f4e9ea3e7d5d24cc98a082c1dcfbd1832b3e21ac7122b469a,2025-02-26T07:01:04.967000
+CVE-2022-49282,1,1,8ef8a6f8924d5fce65914eb197b8467a7d97195ebb41502994cca7799767fc1a,2025-02-26T07:01:05.073000
+CVE-2022-49283,1,1,e3d3b0c2407a88f1bb5cc771a887e4b05010b3502dd9e2bb8ec57036f2d163b0,2025-02-26T07:01:05.167000
+CVE-2022-49284,1,1,73a0665886f75aa71a2125be1544eddaa1b4d1472b654f06124ccc5139ee34d9,2025-02-26T07:01:05.260000
+CVE-2022-49285,1,1,f2c3f399d311b9fa1d07cd4a8ee3a4f3db99b0659d482a36f7571886574891ae,2025-02-26T07:01:05.360000
+CVE-2022-49286,1,1,eab7d78b82b8aa770864f42db2ac36370285950df2ac91af16e595291f816695,2025-02-26T07:01:05.453000
+CVE-2022-49287,1,1,3ed873470a132025a98f5b3d3c803f9641fe503f321d8c71ff4747267ea1bc02,2025-02-26T07:01:05.557000
+CVE-2022-49288,1,1,e1602f37c3a2cf7ed1a07096e534074f606d46723fe655f1f2c10e38a2b6118a,2025-02-26T07:01:05.657000
+CVE-2022-49289,1,1,e6fc5461994572a8febc714b17e9a3856912a029b40f3d639447394b03df0fff,2025-02-26T07:01:05.757000
CVE-2022-4929,0,0,44429f972431c9add0abbd71f7b863649b7649f353d704d77271ec361956d7aa,2024-11-21T07:36:16.417000
+CVE-2022-49290,1,1,91682a598633e97d4336d00df3891391521f1b7822f1a292237ae649015c2e83,2025-02-26T07:01:05.853000
+CVE-2022-49291,1,1,84b4fde4834de2a6e66fed3fc873a4340112f86a0efaa5197a5418a078676d45,2025-02-26T07:01:05.950000
+CVE-2022-49292,1,1,329d2fe9869cf6ba474956f36ad05755efafcce0bb151e3593029bccd90353c1,2025-02-26T07:01:06.047000
+CVE-2022-49293,1,1,a6704f5cc77827a5e3266b83bb663d880e1b44aa6adba028a05e9e7b495af563,2025-02-26T07:01:06.140000
+CVE-2022-49294,1,1,0995ee45a86d384bb37a401c653d869b0e95b381ac00621970623ce85bb4fa76,2025-02-26T07:01:06.237000
+CVE-2022-49295,1,1,9be5e9661c0e309eb65f431c8255efc8c3fae324a4b4fdcc2cdbaf7c66dd45dc,2025-02-26T07:01:06.333000
+CVE-2022-49296,1,1,8558452685c0b8b8f64c96a3aaa3a6a40f8179da42eedcd9b7fedc9edfead0ec,2025-02-26T07:01:06.433000
+CVE-2022-49297,1,1,22c4910f81e3b2a75a1edefc6dab4ecd6f68bc18cb1fe82529c867f5ae91232b,2025-02-26T07:01:06.527000
+CVE-2022-49298,1,1,86cd03827f33b29e9b6867fa7ffba7bc8ba350a080ac36137c253776fd56d7ff,2025-02-26T07:01:06.630000
+CVE-2022-49299,1,1,26519d21ebd53c0c7d05093d71f93acf4fdab4176614738bd458822da494fff4,2025-02-26T07:01:06.727000
CVE-2022-4930,0,0,7e21b5888ba08ac9f714e1d7cc949231011fc7edea53dba39ac9bb8b71344e77,2024-11-21T07:36:16.550000
+CVE-2022-49300,1,1,b5c19f7bb1f13250d9a7be89fe6d164e4b138584de271cb471ffc1d87de8de41,2025-02-26T07:01:06.830000
+CVE-2022-49301,1,1,e85744d4e96319e698f65e9387d12ba2a339e4ce0d93f20b606caa681334b6ee,2025-02-26T07:01:06.923000
+CVE-2022-49302,1,1,1a4ebee6b0472b1ff0dd2a1948413248152c0459dae936a2c56f12d7f46ebdb9,2025-02-26T07:01:07.027000
+CVE-2022-49303,1,1,933ef3eecd76fb6d92500083a0c54d284c7f0a9c47c81c58812ef35d75aa95ea,2025-02-26T07:01:07.123000
+CVE-2022-49304,1,1,3812406b14aff3d03577b9447a67bf0db691cae3a0b7df2c57d2d87b3b98bccd,2025-02-26T07:01:07.213000
+CVE-2022-49305,1,1,b9ec47606415c795fe8fcd74677df41f48514f37455822b0c4b163e5eba22b41,2025-02-26T07:01:07.310000
+CVE-2022-49306,1,1,b1c18ab35c0082618597c23a233ac44a03f8ec539d7be1bdbc37179be91477b7,2025-02-26T07:01:07.413000
+CVE-2022-49307,1,1,53219ab039a14613f9edc208591466d0dd17ee1b444fd62e48c86dd96b60f166,2025-02-26T07:01:07.503000
+CVE-2022-49308,1,1,7bb119abb6e3380e97fba8305d1a73a540a778926c7ca5df7034e0856e850077,2025-02-26T07:01:07.607000
+CVE-2022-49309,1,1,e355b481fb57cdbb48d8f8ee03b2249f9a65e7eec7d2a7160a68371678f60aee,2025-02-26T07:01:07.700000
CVE-2022-4931,0,0,a532fe15470676bd43e3e554e3755fa6ea4f32eaed39a0989b1e4aa5acb9c67c,2024-11-21T07:36:16.680000
+CVE-2022-49310,1,1,fdfe985d926593dbf5e53c86234016afd1571774f4db387008ee4609d6ca910b,2025-02-26T07:01:07.793000
+CVE-2022-49311,1,1,182e0ca6b351b5a13291d2f3b2853f0a017f3604284864b44bd0aa041080b512,2025-02-26T07:01:07.887000
+CVE-2022-49312,1,1,d26380eab6990276b9719406123363265b60c672eb2e77cd7597e5672b2a92d2,2025-02-26T07:01:07.997000
+CVE-2022-49313,1,1,302bd434bea97a6049734c23c25c7059aef1e4da93b384c9b776d8b3c8eafd7f,2025-02-26T07:01:08.143000
+CVE-2022-49314,1,1,cec3de8f923c5ee58a4ecb042e8e4364083a3f1ebe8b8e1d52f46c11575eeba2,2025-02-26T07:01:08.270000
+CVE-2022-49315,1,1,47b96cdcce3f7e1324ba2777264f69a4b24e308d193d9b106c977d5ecb5d9d27,2025-02-26T07:01:08.373000
+CVE-2022-49316,1,1,7a7418264e50ad97acfe1da6b6d7469d4a5d826d13970440b744e43dfb2a1415,2025-02-26T07:01:08.470000
+CVE-2022-49317,1,1,1fbc1adb6c388b457cdb93dc136f447afe4b39fba1b156464455e311edc8bb07,2025-02-26T07:01:08.567000
+CVE-2022-49318,1,1,807c11b6d0c120699c9be878d3a7dacbf3698e543652ca80a0ac4d248ccd588d,2025-02-26T07:01:08.660000
+CVE-2022-49319,1,1,03fa5bd48550e26a46e11e3cb6ceeef0d3924b0e6f34167b23afdd3aec66ce29,2025-02-26T07:01:08.750000
CVE-2022-4932,0,0,38277e45881755a1bc9fb65d6b419499ee923a7cdcbdaea771e44bb51f547438,2024-11-21T07:36:16.787000
+CVE-2022-49320,1,1,4f70593daf6af5f7f3e319564c3e95edd32df9326a8eacd184732dfb4b310011,2025-02-26T07:01:08.840000
+CVE-2022-49321,1,1,6b6b5ddc9fabe6a6cfba28f5ec78501e28fc88a99860d2bdfdfe3ee9e2cceef0,2025-02-26T07:01:08.933000
+CVE-2022-49322,1,1,edcd41b2ce5d06c241aa1fa205fb49201700e53267369e4a615f8389827c6fda,2025-02-26T07:01:09.030000
+CVE-2022-49323,1,1,3e2e1715ddab7998fb8be971b91d65f6044e1505c4dc469c2744333a0df6b7a1,2025-02-26T07:01:09.130000
+CVE-2022-49324,1,1,49d0b0c6af4b2cf6aaffda99afb91f52d0f4266510a4d64b9292da85bae66a22,2025-02-26T07:01:09.223000
+CVE-2022-49325,1,1,482d9e246153edb772deda69245c75f9f70b88358385c35a0abe49193f929c9c,2025-02-26T07:01:09.323000
+CVE-2022-49326,1,1,1868af15a0fe34ac347f83cb11c79f8e079dbc4f3d5db56ff5af3e15515fa129,2025-02-26T07:01:09.417000
+CVE-2022-49327,1,1,a528e04f58e5820d5e72d1fb59c2c6e26f71e442866fb3496ad53515181be68d,2025-02-26T07:01:09.510000
+CVE-2022-49328,1,1,3652c56781fd29eb10ce70175a66be5b778e554991237aeab1efbcad0b8dcdbf,2025-02-26T07:01:09.610000
+CVE-2022-49329,1,1,2a93d66a643a197e3f00403749b6af5bf31821c687ab3b9e22744dbbe2cc6a31,2025-02-26T07:01:09.703000
CVE-2022-4933,0,0,d122e5bd0202c57480b45e5b80ba8ba9aee30fe0686b6e4b51d4527b501848e9,2024-11-21T07:36:16.890000
+CVE-2022-49330,1,1,a10491dca1a972463b132de636ff60efbeb0972e54557618f2cdc09a6a2cebab,2025-02-26T07:01:09.797000
+CVE-2022-49331,1,1,7154538ec7c6a951fb7d6bda46e6f2fff7aef679ced8fb4542290c8caec20c0c,2025-02-26T07:01:09.900000
+CVE-2022-49332,1,1,e91cd909a61152dd10b6c2cbf79b7c1be85fa04338511ce936f40fad09862713,2025-02-26T07:01:09.997000
+CVE-2022-49333,1,1,1cd31b675e1c9b60cdcb4ba8507c33670c293c65c4c13644ea5c1fd6e14ec7f8,2025-02-26T07:01:10.090000
+CVE-2022-49334,1,1,a7e033ddbd7930aed5f9418c4b9237cd071a27c3dfbf2996342d68c93cfb969f,2025-02-26T07:01:10.180000
+CVE-2022-49335,1,1,91c882f4e2401f75f51d994762df1810358d767aa8352a34863e56512e0a98a7,2025-02-26T07:01:10.270000
+CVE-2022-49336,1,1,707b77e8abce92981672cbf131db46114241152ac30f1d9872acec5a709e1b78,2025-02-26T07:01:10.370000
+CVE-2022-49337,1,1,35314ca1c8fd24cf04285725f2ce07c90fc2f4b5c84b9b518c4f330ca6076842,2025-02-26T07:01:10.457000
+CVE-2022-49338,1,1,72cce7e9427907cd67c64302fe183cfd45969ca7a726d31f03e9bdffa12cce99,2025-02-26T07:01:10.560000
+CVE-2022-49339,1,1,ba38a91056de92ff2b85fc17c12554bba52fdf2a3435c570f0b960185d19dc8e,2025-02-26T07:01:10.657000
CVE-2022-4934,0,0,56ce5ce2e2af34c46b4bc4a41f82652c91d66b92f181e703a04356d294695edf,2025-02-11T15:15:15.590000
+CVE-2022-49340,1,1,db23a163e41ec06c966a82981380cca87adac9eb0c826926d7ecc0b79b21fcb9,2025-02-26T07:01:10.753000
+CVE-2022-49341,1,1,5c3b56d0e79e1bdbdb66b3cb1e25a90a5a11744e680c92208eccbc384f73c608,2025-02-26T07:01:10.857000
+CVE-2022-49342,1,1,fe4d1190a5b646fa45d4477a7eaab461c1d92d6b2611112d14af78fa95b4c875,2025-02-26T07:01:10.953000
+CVE-2022-49343,1,1,5070c44f2f69497d2dc728f2d8481f2c4180130fd0f4a5b5da86138600c66ac0,2025-02-26T07:01:11.040000
+CVE-2022-49344,1,1,56f619e5ee27f2042010b279600b7461d9f1da5978f3d91e9f4750a1fe3fb55d,2025-02-26T07:01:11.140000
+CVE-2022-49345,1,1,9ef1ee3283cde9374aea6212586339465771a6592b499d9da1291bef262d2f38,2025-02-26T07:01:11.237000
+CVE-2022-49346,1,1,3b76f7f7a8a134d64ab19a5786c0d3c9361fcbf66a96ac2845c772a4ff71efa0,2025-02-26T07:01:11.340000
+CVE-2022-49347,1,1,762d19c4605e161b5f6840cf63857d82f1015ca95b57b3143a36eecea78e75bb,2025-02-26T07:01:11.433000
+CVE-2022-49348,1,1,4194c1bb0bd768fc1bffc1fd63427356d8362131793889924f10118306f4cf5b,2025-02-26T07:01:11.533000
+CVE-2022-49349,1,1,473b18de232a351e7b4816c4b15f8fcf02ac8585f0fcdf62cd5606563592648c,2025-02-26T07:01:11.623000
CVE-2022-4935,0,0,c31e88e6073fd3a29bae4107f25ae33694ff5130dac188737279f3976c97e421,2024-11-21T07:36:17.127000
+CVE-2022-49350,1,1,515ab58c753f7109f85b7a0304704bc20450dd93f94de4cfaf4317e4a0a054e0,2025-02-26T07:01:11.723000
+CVE-2022-49351,1,1,fe208c614edc6928347e2e67d4eb5b3391aac70627cd806f6aa1833ce4354011,2025-02-26T07:01:11.823000
+CVE-2022-49352,1,1,9450c29df2e4749bac0d6418cf66cffeef16b075591c57710f294395c061b22d,2025-02-26T07:01:11.920000
+CVE-2022-49353,1,1,6b86cec615788a6f7388d794fbab7c973b97b49bd6cc8ff5d7535bb844bf82b2,2025-02-26T07:01:12.013000
+CVE-2022-49354,1,1,e421941a7b7105f53c4351a34dbd028bc39ae451625c97308167a86e903d6a7b,2025-02-26T07:01:12.103000
+CVE-2022-49355,1,1,80fa4fd5e635de4f91692140e2c86158eee6f65edf7fc01373d8d1f58728fae1,2025-02-26T13:15:34.157000
+CVE-2022-49356,1,1,3735a9e7ee38abf62bce69f73999c17e02f700241d5befba3d70faf4b7f21f1a,2025-02-26T07:01:12.300000
+CVE-2022-49357,1,1,637dda3e5c27c01e3898a9841a927d5ea912509c344c9f3240b4e0c164d23650,2025-02-26T07:01:12.390000
+CVE-2022-49358,1,1,bbe466343a4faeb3203ec7aea9e5679f8d8e076b88172dcfc1582c9214c0a461,2025-02-26T07:01:12.487000
+CVE-2022-49359,1,1,9454c72c679e7259728c797a8a57d63311e6bcd80c07aa5a95bbc1f7b16b2742,2025-02-26T07:01:12.583000
CVE-2022-4936,0,0,65f80b05cad36259fef0938d250fce71f92bdab50ccfcffc0c93e77961d09f04,2024-11-21T07:36:17.243000
+CVE-2022-49360,1,1,2a973a46c18e26c3c82bb1121d82cd674a8f87c32459564bc057342ed04cf78a,2025-02-26T07:01:12.677000
+CVE-2022-49361,1,1,4d61c877100016dbe8da0355c8968e7a04c0efb2b2c491eecd65e4aa22640bbe,2025-02-26T07:01:12.770000
+CVE-2022-49362,1,1,9eef5986719bccea7b7484c064d71452a592ce4ef3bd2ca8b012ea81a1f6a019,2025-02-26T07:01:12.860000
+CVE-2022-49363,1,1,28743cbb0a82eff7e564a9127bfbca36ea84098cc27f985dbb41642451cf550e,2025-02-26T07:01:12.953000
+CVE-2022-49364,1,1,ab0f3010e78c034a68e03706c0f4c28e07880c52d510955d0b1b71690983039c,2025-02-26T07:01:13.043000
+CVE-2022-49365,1,1,d90241121918b1a759748a4f5200df56945cc7ee49fe82a3aeab496bba2394f3,2025-02-26T07:01:13.140000
+CVE-2022-49366,1,1,59efbb9b0c3db696cdf9e470fca4037ea41d3038fdd6b31b000343c8674510b3,2025-02-26T07:01:13.230000
+CVE-2022-49367,1,1,67ce57bed05a14cd1635f62365f79deec21fd48c1b52bbf379e2730643480079,2025-02-26T07:01:13.353000
+CVE-2022-49368,1,1,d053dda24c971bced9e058780900fe33656be127d8af925adbc95aac6e682755,2025-02-26T07:01:13.483000
+CVE-2022-49369,1,1,b597aa52d418a038856fb8e5bce9110afc4e9353995ebc53eee6249fd0138461,2025-02-26T07:01:13.583000
CVE-2022-4937,0,0,07302c80f5a7c2979805d71a80cb3053942460da65e6d67dc85b7bf9334a2383,2024-11-21T07:36:17.353000
+CVE-2022-49370,1,1,f98aa1ee99e5afdac810e89a0dd43b9b15dfbdffc5c269de7274dd77ffc8d908,2025-02-26T07:01:13.677000
+CVE-2022-49371,1,1,66fc203372a2776166644050ae2ab296fbdf6c769fdcae934167a898ffb74a23,2025-02-26T07:01:13.777000
+CVE-2022-49372,1,1,b98e96ce39f7f990f76570f78b144dd8c4303862bb0f506634cf332c0b6340ff,2025-02-26T07:01:13.870000
+CVE-2022-49373,1,1,4e2854aabfc7d3f78f97c75867345efee30cd9fbf7e6a392327f98f86d4a404b,2025-02-26T07:01:13.970000
+CVE-2022-49374,1,1,d048a10ed657eda737a2f59705a48fd64aa71f142e05010aed4fa38a1507c4e5,2025-02-26T07:01:14.060000
+CVE-2022-49375,1,1,a576be0092cf671c7c727c1dcebe8934c0488b41f29e7c11f3fcb22bcb1f0bac,2025-02-26T07:01:14.160000
+CVE-2022-49376,1,1,b4ab3efe14c6d810fff7730f6f75421e4d965a7d01df308bba3be417ba3622f4,2025-02-26T07:01:14.260000
+CVE-2022-49377,1,1,c89c5760f1b3bb7aefcfc30e99aa32c0dbcd149cef961318460676cf78777928,2025-02-26T07:01:14.357000
+CVE-2022-49378,1,1,940e4ed796d272d233f40d57c6bc4a0d7aa0d7d507fb6ed7c2eb6e3f1d9c36b2,2025-02-26T07:01:14.450000
+CVE-2022-49379,1,1,7b3af74344a00565a96196b22b16bb3261e4f80c0c366a77e886aed9d9c078f0,2025-02-26T07:01:14.543000
CVE-2022-4938,0,0,2332c28f2266da2838561d3fa8517b8e02799844e68fbf6d1d4046cef0e62add,2024-11-21T07:36:17.473000
+CVE-2022-49380,1,1,2680650ab33d26f8a4a8e4034ccfd6bde4c32dcdcf4e111e583b0476fd67ce4c,2025-02-26T07:01:14.633000
+CVE-2022-49381,1,1,e91d2cc0817b8375c305f0aab5e8561f39579701be54b8f4a9b2fdb3ad2f934f,2025-02-26T07:01:14.727000
+CVE-2022-49382,1,1,fe6cbc42da6688a0d8c05f6a2537f015e4024e22099a62f240ca8df5e8082501,2025-02-26T07:01:14.823000
+CVE-2022-49383,1,1,bb2d55531cd8e60f8bb57bb6e5beed5f00ebb3d054cd1e57068320b7cab7138c,2025-02-26T07:01:14.917000
+CVE-2022-49384,1,1,ac26e9b927f63306f5cce0a03da4df2a1fc5a98ae549c36a1e5ab9cd24073ab6,2025-02-26T07:01:15.007000
+CVE-2022-49385,1,1,1739de54ed41be7043205c715558ad10aa36a92a8f90548d159743bbc417eb41,2025-02-26T07:01:15.103000
+CVE-2022-49386,1,1,3b4018aba82375c7c9aeb01d1732096bbdb9b0087f4dadea9720fe106e7748fc,2025-02-26T07:01:15.233000
+CVE-2022-49387,1,1,b44c23fdc209060b85c8598dad2f09008a2ea1502e159da0f1048a070c6b2435,2025-02-26T07:01:15.343000
+CVE-2022-49388,1,1,c70a9f5d8d9084e3886b3bf927200148a70af4c8406b757b4011aaed5db76a3c,2025-02-26T07:01:15.430000
+CVE-2022-49389,1,1,3f24f12dc127ea1f4bce5dd1bb65d9093dce4bcb6a37a84d6e2e26364da9433b,2025-02-26T07:01:15.527000
CVE-2022-4939,0,0,0cba4e037d925063e40978b79f96a48c7a5c9c275420fe2dbac9dff13a084ba3,2024-11-21T07:36:17.580000
+CVE-2022-49390,1,1,6fb9d69ca3ef74a64cac766cab5c41428345679cf4196e880f8cce3f32deaa8f,2025-02-26T07:01:15.620000
+CVE-2022-49391,1,1,39398bdd44eaac475267d78714be54b1471a0748f3d6a6a0d3aa3d69cbeff27f,2025-02-26T07:01:15.713000
+CVE-2022-49392,1,1,62b851b7c7f771f18936846152654a9aa7388d00aa2251dd5ed365f50fbdeb4f,2025-02-26T07:01:15.803000
+CVE-2022-49393,1,1,ee7434d2286c74d58de0c7debc30ba2ba07cbe61d4d1287c118741afd27faa9a,2025-02-26T07:01:15.890000
+CVE-2022-49394,1,1,092146053ccd8796313918e8b1dfd4c8a6efcf17612fdbd4b5024ccb19f75f97,2025-02-26T07:01:15.983000
+CVE-2022-49395,1,1,2746813a2adab5b2e071a5a7c870d5f629c41510a66331a9b5723f3513be1326,2025-02-26T07:01:16.080000
+CVE-2022-49396,1,1,34184b04754198992950a2a4e94136877ca024bc6f76355f41bc34ae5b8f3228,2025-02-26T07:01:16.173000
+CVE-2022-49397,1,1,a47b2d11717737c4a5d95a9486c681ef9f32bee71a961fcd80d00fa2f6e62964,2025-02-26T07:01:16.270000
+CVE-2022-49398,1,1,7f6c71887a54dc37c61153b26063e1f82d9028d287298bf15caea12aa83e6a6a,2025-02-26T07:01:16.377000
+CVE-2022-49399,1,1,5a6e896d75cc4506d18c30bb270632a1f19e1a390507080fff395eb41e398e0a,2025-02-26T07:01:16.470000
CVE-2022-4940,0,0,71a9143220b531c495a5a6c3a808eef2946ae15ed7f044ebeeb7369c9a995c72,2024-11-21T07:36:17.693000
+CVE-2022-49400,1,1,9b4f9fb589e5c41dfc7b0056c9d5e0799dd996cdb236974768bf7209d86270e5,2025-02-26T07:01:16.570000
+CVE-2022-49401,1,1,2fd18968d24f0c77d55d987d9d9058f1a6516ba9dcc7bf8931361ad3e98294d4,2025-02-26T07:01:16.660000
+CVE-2022-49402,1,1,234a2fe38767f3eb8e75da0664fa133e03e21c0f2a886bbde8c3cc5e974f7214,2025-02-26T07:01:16.750000
+CVE-2022-49403,1,1,f76ebe54a6ee922c3424c85ab3e1747282c15063721a8a859c5aac697777917b,2025-02-26T07:01:16.847000
+CVE-2022-49404,1,1,9f3d21221be0689f57a1cc24640d977c62e87cb4cb243b9f03cac06123d8a204,2025-02-26T07:01:16.937000
+CVE-2022-49405,1,1,08f215c05eda6dcaa776c21655516a87e284703dbb7c14e89793e3626d821a5d,2025-02-26T07:01:17.037000
+CVE-2022-49406,1,1,e1b7b5f14e5d7556175718c5530425b55c6b301d26d0d6b198037b9ec8409369,2025-02-26T07:01:17.123000
+CVE-2022-49407,1,1,821ee8548c0db12465f99422fc45bbbfbad5cead1203073a2647bee630fa0f84,2025-02-26T07:01:17.217000
+CVE-2022-49408,1,1,79ffb39bf21a61ff85a67cc0ad95ead7a501d8751a492f346de1c0f392582522,2025-02-26T07:01:17.323000
+CVE-2022-49409,1,1,e516cb00ab70cb46b87d554f2c3fb499b7308e6f1067057120a28bbf46a19a5f,2025-02-26T07:01:17.420000
CVE-2022-4941,0,0,c9bd40e150e10c29b1c1e079ad1ffb2aea9c86536c13026eb988f154ee982f63,2024-11-21T07:36:17.807000
+CVE-2022-49410,1,1,a58f7d186ac6bf4a196ad85066e2e191e64e394ad7579864dad99ced160c92cf,2025-02-26T07:01:17.517000
+CVE-2022-49411,1,1,f38a47f2adf60e7197a091bc94eb5ef219c27eb48923634d7366ec372ad314d4,2025-02-26T07:01:17.613000
+CVE-2022-49412,1,1,c70220407d15016491df62ff89c9744874a1c68ccc7e0fad1fa109629744f792,2025-02-26T07:01:17.703000
+CVE-2022-49413,1,1,8c4a79d0b330edea3e57664a74d0ed13097fb186c3e483710d0850b97af3cb9a,2025-02-26T07:01:17.800000
+CVE-2022-49414,1,1,1d1ee0437589b3b75a09ef91a95c7e2857b15b8f3d7fd36cebc880e11b2b09da,2025-02-26T07:01:17.890000
+CVE-2022-49415,1,1,13f85599b3182f1e5ba4b8ead7cfca08220157b2909d9146d31ce848d56cabe0,2025-02-26T07:01:17.987000
+CVE-2022-49416,1,1,84cf0753041ae8d8c0638126822c51f99ab2ffc3fa6317d5c007bb31e505f14d,2025-02-26T07:01:18.073000
+CVE-2022-49417,1,1,17b5d635049cb077b4e971cfada27c1fd195d3a22179b278a32746afd9da6996,2025-02-26T07:01:18.170000
+CVE-2022-49418,1,1,4ecde112bc03373c3bb2b00eda77333665676c29956a7fd7a5b1808d3f514b84,2025-02-26T07:01:18.260000
+CVE-2022-49419,1,1,ba7653983be0a8c9bd4eb96de99fab076cbebda31e3b4d45e9885f43cf08606e,2025-02-26T07:01:18.350000
CVE-2022-4942,0,0,4bfd31c9d3683237fc0f66ee6838a8e9abe03973c1dc054d19973ecd2181f17a,2024-11-21T07:36:17.917000
+CVE-2022-49420,1,1,637257ef12b3fe0a02d337bf7406f3b9affcdb52667be5a01eb55aaee3f0b9df,2025-02-26T07:01:18.440000
+CVE-2022-49421,1,1,bd3860ee271687b34b3ca2edd46397f934622cd7791a6621cb526fa3721c1a4d,2025-02-26T07:01:18.533000
+CVE-2022-49422,1,1,0589c756644a96b284e09a5275cd61d4f24560ea238981472956da44a5159926,2025-02-26T07:01:18.657000
+CVE-2022-49423,1,1,cafe7c05b5763baf796da66aaf17ee96037e3691f18e935fdf9d669f9b8322be,2025-02-26T07:01:18.783000
+CVE-2022-49424,1,1,1b384bfb2d8a28b0b04e2bf71671083b0671cb7d7d784468f77e27e21c1f2a86,2025-02-26T07:01:18.880000
+CVE-2022-49425,1,1,eec1086f28fd35e7d3a109335ba6388d180b8145b3460d16175433801c034f81,2025-02-26T07:01:18.977000
+CVE-2022-49426,1,1,583fc7581e26f15e541755d06a17f56758c53aa8d2ce2ce1826d09f0022e92f2,2025-02-26T07:01:19.073000
+CVE-2022-49427,1,1,1dab1702689120e7de199d15eabbf38cccaa6d2467792d5bc8f93aa4d14f153f,2025-02-26T07:01:19.187000
+CVE-2022-49428,1,1,67421d5b657164565775e5ad04ac62168ecc788a951dc55b796ad2980620e8de,2025-02-26T07:01:19.290000
+CVE-2022-49429,1,1,a77c90ea5e9e167ace6e4eaf1be518bf43aa3d4ea438a4a04fa89515a87408ed,2025-02-26T07:01:19.383000
CVE-2022-4943,0,0,fbd7d57d4d1dd683863251f5fce13ef18de52df2a34c1f64d948aac8a5b8e404,2024-11-21T07:36:18.063000
+CVE-2022-49430,1,1,a610de9dfeda2623cc15d14be2e10ea65223dd20cec79becfcba1bf211263b96,2025-02-26T07:01:19.480000
+CVE-2022-49431,1,1,be028a8af4d171f5a75b1d7a3ffb77f8a176fa0047eb7268d6398ffa6b228644,2025-02-26T07:01:19.573000
+CVE-2022-49432,1,1,e8f128dc69065943af1de05518821e3ace20eb57e966bd404c0275c823805567,2025-02-26T07:01:19.667000
+CVE-2022-49433,1,1,6e675c670e5f3fb39453c3b4cd2fff2eeb21036959a53e0669896f9f875c912b,2025-02-26T07:01:19.763000
+CVE-2022-49434,1,1,7b4a7fc83cd829446a9638c8a03e434e3c27a86b016b3253c10ca94f2db536f6,2025-02-26T07:01:19.863000
+CVE-2022-49435,1,1,665b87e8b9d073d7204dff89f630bda680643f23203d11d8b582bdda74c9b77d,2025-02-26T07:01:19.957000
+CVE-2022-49436,1,1,4bda2760a974db70400d713ef193ac9239a62977f812e04dba3426fa991e540f,2025-02-26T07:01:20.057000
+CVE-2022-49437,1,1,6162f59760a53949b79a6d3db4f2f0e82b843d2fd0eefe89f3aad693980d8575,2025-02-26T07:01:20.150000
+CVE-2022-49438,1,1,d82f2349edf42b5d53102fb9151ce305cc1b3c98cc26b6373083410528cddb04,2025-02-26T07:01:20.240000
+CVE-2022-49439,1,1,b6187a5369ad7ebe198775f7091dc945b4663fca0553afebd785cd9286336ea4,2025-02-26T07:01:20.337000
CVE-2022-4944,0,0,4f9cb06fff170c9f36034ff3c0e0d5a7fddec2b4f0eb92639847dd2d54218639,2024-11-21T07:36:18.190000
+CVE-2022-49440,1,1,4f103e3b607535963a6de51752076abbf8576db2450dc5aa6a7e6f111d029d61,2025-02-26T07:01:20.430000
+CVE-2022-49441,1,1,c9d0aab91d750b4594d9de9935d256d8337c215611b3167ccdeb3c91579fdeb8,2025-02-26T07:01:20.523000
+CVE-2022-49442,1,1,62652f8f488e2beb7a579df16217e58b8101050c91491622f77fea906f49d17f,2025-02-26T07:01:20.630000
+CVE-2022-49443,1,1,62d9e38a4f2fe26788ac7dba7e6f51e42dee409aa576168727ca02500758d62b,2025-02-26T07:01:20.730000
+CVE-2022-49444,1,1,39958188b8154194137900981239d84fb98a7e438e20df8a3da742af7bd81f27,2025-02-26T07:01:20.820000
+CVE-2022-49445,1,1,9d2a35ef61028e8574c193872b5d57d086fd681ed969d1789201c6cbcc0536d9,2025-02-26T07:01:20.913000
+CVE-2022-49446,1,1,0e9a2e46e8c67bba5a28497202d41acd8db637019a1be43a16f3393d60a0d482,2025-02-26T07:01:21.010000
+CVE-2022-49447,1,1,b7897c8dc90497b1cc249e2f21991d0027615de1640c098614d423890c5dc56c,2025-02-26T07:01:21.103000
+CVE-2022-49448,1,1,40479ec5f89242e4a3cdb972d1dfba6de2f06b5dc5dd546ccd46fce4620393f3,2025-02-26T07:01:21.200000
+CVE-2022-49449,1,1,85343e07e9343e27c7bc7370f7ef1a8504b6be02178db515acd1b9ef50b5fb88,2025-02-26T07:01:21.290000
CVE-2022-4945,0,0,20784b9d1103172e5d46b8cc80ea749a5a202a1d8d741e78d1464bc851f0caeb,2024-11-21T07:36:18.330000
+CVE-2022-49450,1,1,d776efb4da2cfa39f64ca7b7a22d6a50b12da70baa93cd64cb38cfcbc891cdf0,2025-02-26T07:01:21.390000
+CVE-2022-49451,1,1,f5f9ce70f9597b17b72fcd25feba8cc37654311f6c79be50bad11de9602e5309,2025-02-26T07:01:21.490000
+CVE-2022-49452,1,1,128f1065b363a736e0d94c3b0f59b20b20f4e2a39ba936b282fdd50c00797e5e,2025-02-26T07:01:21.587000
+CVE-2022-49453,1,1,165efc77ea85fe6f4109e8266e1d0751341221c5949302a3ccbf588779e8560f,2025-02-26T07:01:21.673000
+CVE-2022-49454,1,1,d95dd2f0fa41549e4eb3520d24beaf31e8ee967e431ac857a106a8edb109b2d2,2025-02-26T07:01:21.767000
+CVE-2022-49455,1,1,6041465bdc4b1879340ef24b26ceff22a4b982298a07b758fb9871fe92b874c7,2025-02-26T07:01:21.857000
+CVE-2022-49456,1,1,981eb8c0d73e84607d2ab621f8e58c73e36d0ef964de6a56dbcbe07d50d38924,2025-02-26T07:01:21.950000
+CVE-2022-49457,1,1,699f9b426d0cc577298c04260aeb8a21863943690f2988bc992d1e67cb7bf29d,2025-02-26T07:01:22.043000
+CVE-2022-49458,1,1,f71a660e62a35e2ab140ec01b4f40f3624e550726fbc9d953fecd78fbf1b2fb6,2025-02-26T07:01:22.133000
+CVE-2022-49459,1,1,1db0e36bf4012494f5519d6897f3132125ebd9863ae6b588a80e4215febb0f37,2025-02-26T07:01:22.230000
CVE-2022-4946,0,0,41fd8dc7f83b35220687a8d1d330ae53710d4c60699555a4ab3f45165abf6e79,2025-01-08T17:15:07.773000
+CVE-2022-49460,1,1,fe0b0923c9513a92097a7c1f8d1da32ca58d7dace863b60d9126734022b61dc2,2025-02-26T07:01:22.327000
+CVE-2022-49461,1,1,74faf687caef89e36114d7956a7a18db362b51069fc3e321422389e97363a002,2025-02-26T07:01:22.423000
+CVE-2022-49462,1,1,c8ca2d00e7b9be87321b54aa6affa272b57fb1ded438fac4e56d85f513a12179,2025-02-26T07:01:22.517000
+CVE-2022-49463,1,1,bd05c300217e6d154e5bb8b22a7ac4cd153fe3dec27a9b3df908af179995fc46,2025-02-26T07:01:22.603000
+CVE-2022-49464,1,1,2e7f3026c0466cef8ae39110da534b3aecf6c2b2be1a1d05207ee201f3c851dd,2025-02-26T07:01:22.697000
+CVE-2022-49465,1,1,c6be0a56052621c6ad58ded3e81399291100ca5576c7bddc492402712b875986,2025-02-26T07:01:22.787000
+CVE-2022-49466,1,1,77b4eb41313aef8460db4397e5a1809bba361069263eba76d0a2032724c90bc1,2025-02-26T07:01:22.880000
+CVE-2022-49467,1,1,f771bcac55daa7619c79a1062188ab4bd4efdc14a06e0839c8c60dace866e3c6,2025-02-26T07:01:22.967000
+CVE-2022-49468,1,1,2e4259e03719527dcd960576bc49e5288c537a27115ac18fa1bcf31303c52282,2025-02-26T07:01:23.063000
+CVE-2022-49469,1,1,822ba518e11cfe2bd7e3a9f448c70fea01a9999dbdb88bfcfe27cc29d83c31fe,2025-02-26T07:01:23.157000
+CVE-2022-49470,1,1,46a87092f6a251b99366f05a652a1316e12d0211b058f9d066e06bc80227200f,2025-02-26T07:01:23.240000
+CVE-2022-49471,1,1,66e9e08f5b7b0b79bfaed71bf4a0b2f5b1f9b16204ffa206a0ef0b7b88878831,2025-02-26T07:01:23.333000
+CVE-2022-49472,1,1,956c50c3f37512517f2f6940d030066c70ece3dd153e4dbeaa1024cfe4a4eb26,2025-02-26T07:01:23.423000
+CVE-2022-49473,1,1,ca4719509337104ef61da10abe55cb95b4661826ce42be25632d7fa25f439023,2025-02-26T07:01:23.517000
+CVE-2022-49474,1,1,b140b5f3ffeea60c0918be17ce1f8fe31c3ff178fe13c150dbc87d752d8ac70e,2025-02-26T07:01:23.613000
+CVE-2022-49475,1,1,6adc491b005ef36749f3be0afebe4409ff418ad62f62a9c6038729d9241f684b,2025-02-26T07:01:23.713000
+CVE-2022-49476,1,1,640fbc92ec372b9fc733538d5d06673770f3ebb7fd5fd2d15cbf4426f35f2339,2025-02-26T07:01:23.800000
+CVE-2022-49477,1,1,b5d7f2a452fa030f680bb20216240f1b6e2ad8cd555ac11aaa42cce16eb360af,2025-02-26T07:01:23.920000
+CVE-2022-49478,1,1,f25e1762442177f803844f822c9ee530fc5c0c034b646b5eeab5c71e4eb36c4d,2025-02-26T07:01:24.050000
+CVE-2022-49479,1,1,f02b3786eef963adc054c322867822a8dff8a8c913703994a560736a6527f761,2025-02-26T07:01:24.153000
CVE-2022-4948,0,0,3f06e3662375e23afad4aa4576d0c4fd807f6f0a60e20fd1d377539f48f1a48c,2024-11-21T07:36:18.570000
+CVE-2022-49480,1,1,d0179cdcbb9d92338cb7030ebf43a57582627bfd199f799b87711395649e7e93,2025-02-26T07:01:24.243000
+CVE-2022-49481,1,1,148b2f51b41ea5cce2a925c20e6698590e9de23705599b2dfddfbef3ee0f72d6,2025-02-26T07:01:24.340000
+CVE-2022-49482,1,1,d7d2e14cd6988f8f8e2cde0616a7fc72738a7a0e05ab7aadab9af9e700b949c4,2025-02-26T07:01:24.433000
+CVE-2022-49483,1,1,2f1d2aa266f1ff140b3924aa17fcfc62466def1c4d3a6080103facf46dede084,2025-02-26T07:01:24.527000
+CVE-2022-49484,1,1,8f580e3059b01b6f04518108e4b256082a2e717acdb326a2f0de9692bdfa1aa8,2025-02-26T07:01:24.620000
+CVE-2022-49485,1,1,efaa7606dd3a77bb0c9171620d8519f1b43af81235145f7d637c41c01e517c55,2025-02-26T07:01:24.710000
+CVE-2022-49486,1,1,bf466d3f608927a180daef3e1242986b357c0f916d80684bbada132e6107aaad,2025-02-26T07:01:24.803000
+CVE-2022-49487,1,1,b85e80274fa3a8f20f614b44006b3db1f0259e60f97d07d19e0a018ac969ab4a,2025-02-26T07:01:24.897000
+CVE-2022-49488,1,1,5361b4c3e93f0c4aaecba53cda62387f5842938ec0175aa9926141f509398ada,2025-02-26T07:01:24.990000
+CVE-2022-49489,1,1,529ab1020b2a8a2ca37b30dacf35a6ac686be47ae797bec4e7598381c7fd0fb2,2025-02-26T07:01:25.083000
CVE-2022-4949,0,0,20ecd66c665d4a7df211e25b3128a2f7367a36b316ae054ac00474cadd4e5062,2024-11-21T07:36:18.687000
+CVE-2022-49490,1,1,be1548e2f91eb4b94e259aa0caa5f9af30684172e2d59364aad173af2618ddb8,2025-02-26T07:01:25.183000
+CVE-2022-49491,1,1,cd60ea56501cd25d2157510145510046a2b5471362a94666134e36f523b5d661,2025-02-26T07:01:25.280000
+CVE-2022-49492,1,1,d82fdea0c2e6fc26fa79cd871499418a6aaeacfed0f6add7e8e3bf3dc8f534c7,2025-02-26T07:01:25.410000
+CVE-2022-49493,1,1,b9a2797661ec6819531c73a15c6acfe126a5aa2407adbc3b6ffc9a6fee120d3f,2025-02-26T07:01:25.520000
+CVE-2022-49494,1,1,a7eea3b4ef11a97dd755aab6093e43d3f8252333cba49c9e73f1fc803d726d71,2025-02-26T07:01:25.613000
+CVE-2022-49495,1,1,b6dc2e6a9d20b820423bb5c29aea93b630e7075a91738842865e068c3d5efdb8,2025-02-26T07:01:25.707000
+CVE-2022-49496,1,1,fd8e4a2e58bc96835ad145f1b2768a27158a33a0a10b3bab015711b7fee9cece,2025-02-26T07:01:25.800000
+CVE-2022-49497,1,1,27b66f899698e2a887480dce57f8ca2efc595f365b0ab688780b1f4019f33c48,2025-02-26T07:01:25.893000
+CVE-2022-49498,1,1,f9600e4a2cac3c4965c2ad0b66be39b675aae56651f80c6115554f7f74f8f9b9,2025-02-26T07:01:25.987000
+CVE-2022-49499,1,1,2c127c9fd7c88b3d4d5430f28fde103481887c43621d1aa792247a91578222a9,2025-02-26T07:01:26.077000
CVE-2022-4950,0,0,553f8616c590a48d9a934a6dc8477b16541d05a5e26a41275fd32eff9d48e9d2,2024-11-21T07:36:18.810000
+CVE-2022-49500,1,1,991df30b70f007d3061c7dd64fe713760c29f3a80be81e2008d1877e0cf5c9c1,2025-02-26T07:01:26.163000
+CVE-2022-49501,1,1,9a159dec21f03e68eb0839300135c49554a6f3bec26f47088d215af5ec3fa783,2025-02-26T07:01:26.257000
+CVE-2022-49502,1,1,89672d9193ab66e6e4295d3d3a0b950e2c9a8da794cf16b607aebeccadd84a0d,2025-02-26T07:01:26.353000
+CVE-2022-49503,1,1,1cd521e3160c7683bcaf6f2f831c7e3f283f7edef8a6db3deaca7c4c165edd9c,2025-02-26T07:01:26.447000
+CVE-2022-49504,1,1,fd785117748f74d2fdb63d7fd088e13e19e9bc95c772729b83225421460c1e97,2025-02-26T07:01:26.543000
+CVE-2022-49505,1,1,661f36409d61471c21fe9d7ba2eb9c2ac7af14d82e0db876a7da8ab54c6beb5c,2025-02-26T07:01:26.633000
+CVE-2022-49506,1,1,208be324946220bb4165e799d227ea784a01c73a67b01907965e03d8aff97547,2025-02-26T07:01:26.737000
+CVE-2022-49507,1,1,ed9ce57a32d7d0954afed61f11275aa9a97676fd2730a4012781fe267a810e3f,2025-02-26T07:01:26.830000
+CVE-2022-49508,1,1,229d6f3f4ed32bf1c9d326d60531522b12c2150a7b9d25e73fd1b4ed64bfb544,2025-02-26T07:01:26.923000
+CVE-2022-49509,1,1,4e733e96dea02e09853a8d8f364cd7d21727cf7e179f86a3bb12d124a254c438,2025-02-26T07:01:27.017000
+CVE-2022-49510,1,1,f05f548dae8167558d3eee1345561c5cd8cbd304b376e2ba65739e94bce93edb,2025-02-26T07:01:27.107000
+CVE-2022-49511,1,1,caef507c59ea0ca9f0f98627d4830ae39555dd252915b3f332a79a99e7208e2d,2025-02-26T07:01:27.193000
+CVE-2022-49512,1,1,838d61ef4435578fcffc1f55b349dc22f838f550d67a680fe4ae45de90c44d72,2025-02-26T07:01:27.287000
+CVE-2022-49513,1,1,c4287fc150261d383aa601c08c1dc5670c9104bf62ff718ed83aa3e9c2f3debe,2025-02-26T07:01:27.380000
+CVE-2022-49514,1,1,5b8fa7df49dc89ad070c6adfc99a415a04eae452112ae358a5dc8e9fd9d7457b,2025-02-26T07:01:27.470000
+CVE-2022-49515,1,1,ad2f07650db8c9195f18b85b79fd74764a7e66e57332bbae3f2bbe23437919cf,2025-02-26T07:01:27.567000
+CVE-2022-49516,1,1,7549c1b230b260acc78ed69a90b05d4bb46b63b6455b7d7ff91050c065063d96,2025-02-26T07:01:27.653000
+CVE-2022-49517,1,1,cd5aa598940bf2a14e39816802459998b84f9c274d112dbfe0a31cb95cb56c4a,2025-02-26T07:01:27.740000
+CVE-2022-49518,1,1,50f169be46a00414449f51c9f6d06e728f8d6fa4ce37aa0a8f43faae19d73356,2025-02-26T07:01:27.837000
+CVE-2022-49519,1,1,c34b48c55c297faec932eb88f6a6f96d84bc8edcffc97c235504daa46fef8135,2025-02-26T07:01:27.923000
CVE-2022-4952,0,0,7415f2ca4d823196175a3ec862b711ce8ea62fc540125d8d988ae7bb2051f370,2024-11-21T07:36:18.930000
+CVE-2022-49520,1,1,f2e8bdc19c3d71b9c3d1afad1006c3d2c3f3f4e35db501b1b4fc1d01acdc4fa7,2025-02-26T07:01:28.017000
+CVE-2022-49521,1,1,0c02454b8e2dc250f97a0a04be93dda8e4f0f9058d8e7871fb4a867673cd9326,2025-02-26T07:01:28.113000
+CVE-2022-49522,1,1,a4407bf677fbac155505b03f694d8ed0a9522e5d27fb847bc2ae17efc1f86bff,2025-02-26T07:01:28.210000
+CVE-2022-49523,1,1,654be4632aacf3c1117446390883f3f78787ac4ab6caa6c14751f1f6662dc310,2025-02-26T07:01:28.310000
+CVE-2022-49524,1,1,f996416aa5fb20a468be0132cfcc257ecc6410b201c2a94361b9000cdbdd5101,2025-02-26T07:01:28.407000
+CVE-2022-49525,1,1,1e4561bcb3d9662172ba88a6aba9cb6f4a1f9c3efc84f266ea00867a0f92769d,2025-02-26T07:01:28.500000
+CVE-2022-49526,1,1,c417a58a9a8837e9d4203b697af2382f63270ccb642dc99133f70a78c9350c54,2025-02-26T07:01:28.593000
+CVE-2022-49527,1,1,1b2cca0b8ce3894f6ffe144f413ee21484316d7f83cf571a96259357dc63307a,2025-02-26T07:01:28.690000
+CVE-2022-49528,1,1,a2a6159252ef984503d74a77cd5e40639fb33acc92c5b749e34e4ac5d863929e,2025-02-26T07:01:28.780000
+CVE-2022-49529,1,1,8ffc86281c0c531cfb031bd6ac5877d48580f4f237c5b91103dc20fc31c5edaf,2025-02-26T07:01:28.873000
CVE-2022-4953,0,0,e04a15b779bfbe898a916a95d05683f7f5f4c144cc0c5cedf2ea84fbc775f5f1,2024-11-21T07:36:19.067000
+CVE-2022-49530,1,1,e0710f969551cfea14c7fc35f8c5aaf3b01c001b791e936b3c1de78282eb84d1,2025-02-26T07:01:28.967000
+CVE-2022-49531,1,1,bcc8e99c2179eeb842bb7605f5bbf6a3443fd2fe7e0413fd44583d9a16663d48,2025-02-26T07:01:29.067000
+CVE-2022-49532,1,1,a5ffd6ff781077501c7b2ebdbffffe12e9981584442a539952766e8cf16f39aa,2025-02-26T07:01:29.170000
+CVE-2022-49533,1,1,afcec182555ff5ca487aac89ad597d97856fbecf2c361276f209f8493c77810d,2025-02-26T07:01:29.293000
+CVE-2022-49534,1,1,c4461f5c4ba46e3eb7f3de0e571457425a17021a6602c94336443eeada686aa1,2025-02-26T07:01:29.400000
+CVE-2022-49535,1,1,3ca28ee30bf6231e2e29e44c147ae696ce1d6e3e335466b803051bc8e9717a0b,2025-02-26T07:01:29.490000
+CVE-2022-49536,1,1,5879171cb53c59e2b6b018dffcbafd62095bdcf62e7be357477df9279cd7baa9,2025-02-26T07:01:29.580000
+CVE-2022-49537,1,1,f2669b5a1b78518748fb173efd6ad42004496fcfb0f87e4e4b741a2ab901eedd,2025-02-26T07:01:29.667000
+CVE-2022-49538,1,1,a21e6f08f092ba11614b7f88efbe3e83bb79952c8014988e30906b73552edd06,2025-02-26T07:01:29.760000
+CVE-2022-49539,1,1,57380cbb9cd1b6c94bb2d35319ea77425d994143bd1a6a4828a867af553e406f,2025-02-26T07:01:29.857000
CVE-2022-4954,0,0,3d35faeb50ff70fc83ed96ba4420fbc0348e83af9bccccd35fe117bc65a97504,2024-11-21T07:36:19.187000
+CVE-2022-49540,1,1,a7a6f5f8b24296e2c4a856039dea4052715c4406ed0fc761f4714f07da403e92,2025-02-26T07:01:29.947000
+CVE-2022-49541,1,1,bdb074c7918c651c5381ecd65f344baea7655ed6e91731e65f7f98f8bcf22431,2025-02-26T07:01:30.043000
+CVE-2022-49542,1,1,47a4f2e1839eb490fe5307a39b0005a5acf07c198a4762d78fef0f349b9830da,2025-02-26T07:01:30.133000
+CVE-2022-49543,1,1,ec718e6a6c820076a3e89aea4b2b00820ce7ba75b8c5299efc76050eb8ce8884,2025-02-26T07:01:30.220000
+CVE-2022-49544,1,1,31cbc4b3f3c89938f00113ec16a182da9a5d5599b33e7ad2b59d04c9f950e329,2025-02-26T07:01:30.313000
+CVE-2022-49545,1,1,f366b45f627eacc0f729efeedc5c4f8808ccfd6829ee14fb8d7923ddc8938530,2025-02-26T07:01:30.410000
+CVE-2022-49546,1,1,e60c0b399095087701c98afbd02127fe687214d393c60b5e325e440460e0be78,2025-02-26T07:01:30.500000
+CVE-2022-49547,1,1,d58c98fbc7b46a7a54c8e99e8b380fb14e9f523a4925f4288f24db795f87e7aa,2025-02-26T07:01:30.590000
+CVE-2022-49548,1,1,16000afe2c81a7ed677cf2c7f87a401963f613b7987d6efdeadfd4ae4c7e3597,2025-02-26T07:01:30.683000
+CVE-2022-49549,1,1,b20ba735db7fc8697f1fca7e6c9fe3fed1c96eedb86f03bc92c6ae5e08d7b10f,2025-02-26T07:01:30.773000
CVE-2022-4955,0,0,94df8e1948dbb5187c1ece47af6795f51d100c945ff4ef8af1e29d9575313920,2024-11-21T07:36:19.300000
+CVE-2022-49550,1,1,2ac0e74c8cbb4f3965111bef69b665515bd285d744b319d5be25fe38ceab5e86,2025-02-26T07:01:30.863000
+CVE-2022-49551,1,1,d526673a1f6a36fea68866fe3dbab0a2315fe53110f244c333537d1b5e9f65ec,2025-02-26T07:01:30.950000
+CVE-2022-49552,1,1,f931a6dcbab135216a5edab56dd122ec92ee856edd2fbfa670f1903a8bd7c18f,2025-02-26T07:01:31.040000
+CVE-2022-49553,1,1,c7296ea4f8414eb9213c5fd80b834eda6c537d7ca35ae77b2dd1617a6a4df225,2025-02-26T07:01:31.133000
+CVE-2022-49554,1,1,1a8f5818556e679a2397b22e8451ed70b9e6f6a2a58196efa5bb17b93069c6ac,2025-02-26T07:01:31.223000
+CVE-2022-49555,1,1,d2bd6941c5ac7cd8443f5a5a9350404cd17c120d0189996c840415d4df5aba97,2025-02-26T07:01:31.313000
+CVE-2022-49556,1,1,d54b85fc9263cc11fc9044c777e93b93854e3fd0848f3b00e1c605cc01c4229f,2025-02-26T07:01:31.407000
+CVE-2022-49557,1,1,d0d72340c0bc8d8f60690cc9f4775965f9444742eca814b7b1abe80885ff5765,2025-02-26T07:01:31.503000
+CVE-2022-49558,1,1,3a8d83a852261ca98c9b3a298926e171b849de897f09f75b8140e362066d1c8f,2025-02-26T07:01:31.597000
+CVE-2022-49559,1,1,ca28283ded44f97cd0899954a5299bc37f5005675385ccc0f2797fd85a76a23f,2025-02-26T07:01:31.687000
CVE-2022-4956,0,0,43d14a14df320488a03d84b995042cdf95aa3fb7ff65406b2df0e2b91a52a9a3,2024-11-21T07:36:19.420000
+CVE-2022-49560,1,1,17baf2e8d996e158fe75a43290fa268e19453141b391e0d0d771f1706e52c573,2025-02-26T07:01:31.780000
+CVE-2022-49561,1,1,1b50454cb036a77142f6b4dfa5d0e43ca633fbb60e58b9affc51c9d5b04ea628,2025-02-26T07:01:31.877000
+CVE-2022-49562,1,1,5c671c30bbcd694c6ba1f49dc21dc769e70ea2608734bb29ae91ad60ea7914f5,2025-02-26T07:01:31.970000
+CVE-2022-49563,1,1,a56125f3f62a24a16c19f4b00be96914daf9f634eb9e3bcccf6ea5dd0b4edb75,2025-02-26T07:01:32.060000
+CVE-2022-49564,1,1,fe0b47fa335df0495ef19eb430be0f845c93ffd903520fdbc8ae27875d63d879,2025-02-26T07:01:32.150000
+CVE-2022-49565,1,1,ba8687e69f534dcaec637bb518eb2d72bc9eb412fa7082deeb979b1ada28bb4e,2025-02-26T07:01:32.240000
+CVE-2022-49566,1,1,4a28c43fac4293e22195a3dccf464046f3bccff47d92934ac1e95d14c468a26e,2025-02-26T07:01:32.333000
+CVE-2022-49567,1,1,ab68e8fc709e360bff18da33546e4787580ee5c397b63fb46e2270aae2ddd978,2025-02-26T07:01:32.420000
+CVE-2022-49568,1,1,939be0d342b5a1afdb07b6b7782b7e6e92f5aba749ea6d262d2510a9ae321589,2025-02-26T07:01:32.517000
+CVE-2022-49569,1,1,268fbb030ed07524875c5c487a0fed61022021fe1bd171ab40ab3339e8c26325,2025-02-26T07:01:32.607000
CVE-2022-4957,0,0,0f59f801825d8335616db50df55384f4a214170b9e1eeee6c3796753d9651f88,2024-11-21T07:36:19.570000
+CVE-2022-49570,1,1,3fb9e422910f77b5d2094fc62389afb86a6b8fdab723d5e92c111a0f4c0ef00c,2025-02-26T07:01:32.693000
+CVE-2022-49571,1,1,239a0e72dd9cfc9a2f9e580171de1d1a2be91f372972b389b7d265a12913363a,2025-02-26T07:01:32.780000
+CVE-2022-49572,1,1,5acdd2b76675c281445a5f28eea257686c58de9fc373c76c8c8b9e2b1634e9dd,2025-02-26T07:01:32.877000
+CVE-2022-49573,1,1,07520d248450f8cebdf10d0f29ef4fb2fa68b5926a86ab5030fbcbe069b7cee4,2025-02-26T07:01:32.970000
+CVE-2022-49574,1,1,3b467bac5d1e14a5fd893c8c87d7fe57b9948eb65d123d79e359f3c3a20027ec,2025-02-26T07:01:33.063000
+CVE-2022-49575,1,1,58bf7f315c246a64de5e6e282137945a879d5bb3a8b698e341a656aaa4b5546a,2025-02-26T07:01:33.157000
+CVE-2022-49576,1,1,01fa6bced9cfde81e7cc310bd70df95f79b98152c9ff090f70807ea2def1959a,2025-02-26T07:01:33.243000
+CVE-2022-49577,1,1,ab318a07d13dbe6a24dd7db625b31041bf7c19bb4ac441a63328ecf73e1e3bce,2025-02-26T07:01:33.333000
+CVE-2022-49578,1,1,ac718e81730fa1c616328dce5407f3da035250709d14a9ec1ec6b6615949dc41,2025-02-26T07:01:33.433000
+CVE-2022-49579,1,1,0384fa85651f82e05209d51146d96de0c92644555be51b2ac96c34297d4fbe62,2025-02-26T07:01:33.520000
CVE-2022-4958,0,0,d6d6128b8fdd4a8fe744760bd37908b3ed213bef3370b8b8a46a12919160ac31,2024-11-21T07:36:19.707000
+CVE-2022-49580,1,1,1ff38df53edb1274abccda184c3977a67429ae1395f033b917c747888c1a7a44,2025-02-26T07:01:33.610000
+CVE-2022-49581,1,1,b1cb2a5b272c23f1371cdd219233330c0e954d3214f08dffcc7a98c1b739bf72,2025-02-26T07:01:33.703000
+CVE-2022-49582,1,1,67ab71e9c476d87ab70ebde05f78bdd704b50261c9e0d9f9b3a6c13754ed1cd9,2025-02-26T07:01:33.807000
+CVE-2022-49583,1,1,8f33e11bc91d1e824bcbae6155d1764cfe59dc58a955b926b56e22361fd5f5d9,2025-02-26T07:01:33.897000
+CVE-2022-49584,1,1,5a2718808892ab5655027fb9fc260010998515f6d9c77374be5d4b5eb5fd8e84,2025-02-26T07:01:33.987000
+CVE-2022-49585,1,1,cd4fbe12db0b74e762e434ec7df0e1aca7650608fe4c9d1d827b9504e7cf3b8f,2025-02-26T07:01:34.080000
+CVE-2022-49586,1,1,9e2a84f81995e451d7e743cfebf79e11a28c9e3f841a6bb4f64ec5d174258e3f,2025-02-26T07:01:34.167000
+CVE-2022-49587,1,1,484094bbef09ed79b7185cc70c367d890967ede74d6bdf2d999684331eaa5423,2025-02-26T07:01:34.260000
+CVE-2022-49588,1,1,5607dca6cd6b6aba00e6567cc37e08a8cefad1c90f4932bb50848b51a751947e,2025-02-26T07:01:34.367000
+CVE-2022-49589,1,1,1ac1355e86d9482116a10b1234ab1cd62e7f31d00359422e0e5f5e69380215b5,2025-02-26T07:01:34.470000
CVE-2022-4959,0,0,e1112e964cfdf0ebbfe3fa4005ae2e8c4f9c407689379dbe03328e96b22503f5,2024-11-21T07:36:19.850000
+CVE-2022-49590,1,1,0d860252934c52e3e42cddef0b0693fa7a24ca4ab6a39b972754ca55cb4a364a,2025-02-26T07:01:34.573000
+CVE-2022-49591,1,1,010892fcd597f862b4ac4e920a8dfa5285850fe865050c3435fe5f71f2617cfe,2025-02-26T07:01:34.667000
+CVE-2022-49592,1,1,0306781dcc11071de3b102f2d344b7c7dca5892a66ddf38647d25cd3e23f74b1,2025-02-26T07:01:34.760000
+CVE-2022-49593,1,1,34ad675ba9b69fa2206f439d0ddb6b1a743b658a3212f91494da47e115f2a7c0,2025-02-26T07:01:34.853000
+CVE-2022-49594,1,1,7c5a0f4ced3efc0d493266edfdb396d2ce68abccf8db785388108bde16777df4,2025-02-26T07:01:34.947000
+CVE-2022-49595,1,1,a15716cf6ce801b5b05a5fa38840b0996dffcae6e0288d1407a9a80a3bd68df9,2025-02-26T07:01:35.040000
+CVE-2022-49596,1,1,304ddaf2cfca8f965b365dffa5bb96ad04e42f0691e513a18d403cc8c072f95e,2025-02-26T07:01:35.133000
+CVE-2022-49597,1,1,f651dfc09d9f9b999032a236d302a9c02d5f18b2d004ef05b24bae8d65538237,2025-02-26T07:01:35.220000
+CVE-2022-49598,1,1,29eabe19dc9314e3f9b59a6520e3370e44360ffab7dd1bb0b18a9602e4e95c1d,2025-02-26T07:01:35.310000
+CVE-2022-49599,1,1,db78850429e4b34e264d3726910b2de302c24be8669a7ab64639a152efd5a45f,2025-02-26T07:01:35.403000
CVE-2022-4960,0,0,b445d73955b3452a42faaf28d577ad453defce902d7d2b7869afb976b59de9a5,2024-11-21T07:36:19.990000
+CVE-2022-49600,1,1,d95aa23766f12f7c3397af50d1101ed6b20c8ba09539ac64a8f08f67095ef6b0,2025-02-26T07:01:35.497000
+CVE-2022-49601,1,1,a686f59ed2234d1b37ac8578238f03a95cfacbfe85ef1ff8676d01bb1d17d491,2025-02-26T07:01:35.603000
+CVE-2022-49602,1,1,88cc30b907cc663f8a21663a65a9600d4454e87db64b55ee1f0e461286accbf1,2025-02-26T07:01:35.717000
+CVE-2022-49603,1,1,65b0c0fbcdce25343e059c3db7e4772602d20908fa1f8815560438b4cc08b93a,2025-02-26T07:01:35.817000
+CVE-2022-49604,1,1,788313542a52b4790302cda4102d2f141a11f609244eec9bfc0081cffdac42b0,2025-02-26T07:01:35.910000
+CVE-2022-49605,1,1,3e472a549bbde99b4248a7492e04350483f8b5e2d6ffce30fb58ea5b8d725fc9,2025-02-26T07:01:36
+CVE-2022-49606,1,1,01f31895c839374158d53c222688c772da5209b4bd8ff55f024190f8113cbdb0,2025-02-26T07:01:36.093000
+CVE-2022-49607,1,1,152a7619323dc2c66932ce2afbc18f668c37d99a2b58232f201b54122495c14b,2025-02-26T07:01:36.180000
+CVE-2022-49608,1,1,df6823ec0cb9cc210c39ad0334a4dc4497287e15c7f35eab8ac349d6931922fc,2025-02-26T07:01:36.270000
+CVE-2022-49609,1,1,0d3689a6bd92001bfed40acd3e05a3bea004e50f2a2f459d4cfaa7c1cddaf670,2025-02-26T07:01:36.363000
CVE-2022-4961,0,0,05f2ffcd05e2d23e254218df57459bbdd8360d7bb570b059f299fba2169a2704,2024-11-21T07:36:20.120000
+CVE-2022-49610,1,1,870666c27b7068723102f9ebac173150c7107d7f6c52482f981027c39d54ee1c,2025-02-26T07:01:36.463000
+CVE-2022-49611,1,1,e6dc09e339e6e76ea360b01cc14c2d69eb9fa90828c5d276d0ee2099fe92dabf,2025-02-26T07:01:36.553000
+CVE-2022-49612,1,1,ce56189dcb26fd1999675d987dc618a1d67344fca118527e187d47bae3c3d0be,2025-02-26T07:01:36.653000
+CVE-2022-49613,1,1,5d80adf80fb92033c1bc1ffd701bd157879235379d5dba1326ab73bbf763aeb2,2025-02-26T07:01:36.747000
+CVE-2022-49614,1,1,1df95ae7c5f54f8417fdf8b4511ad9a37dd7da7908b5b13845650c4238075c7c,2025-02-26T07:01:36.837000
+CVE-2022-49615,1,1,31d27ec361163398640c6224c7947d06deed8067ba264d2fb237be45f9c2c52d,2025-02-26T07:01:36.927000
+CVE-2022-49616,1,1,d2ed02ccc98a15803c056919ae01014e1fced4478e31404ede25785a0fe8d867,2025-02-26T07:01:37.017000
+CVE-2022-49617,1,1,5538b96ffe3a7a4120a151fb90dbf7bfea8ff11be5b1a642c04d1dc3526d6c3f,2025-02-26T07:01:37.107000
+CVE-2022-49618,1,1,5c18fec967efa9aff76b39ed937281c8cf2a99adb3fc2ddb7905e8e36fcafe3e,2025-02-26T07:01:37.197000
+CVE-2022-49619,1,1,f493024bb63d384b281e595de3e97660710297667764b8c83a58e4dbfd03edb9,2025-02-26T07:01:37.290000
CVE-2022-4962,0,0,386805a0e4416acdab18cedde9e47f610c5ba3ec156161822cfc562e819f4b4c,2024-11-21T07:36:20.270000
+CVE-2022-49620,1,1,9de1fe816fd2157d488af355312fbf831884f48be8bc3f19a68a5d16ac657df7,2025-02-26T07:01:37.387000
+CVE-2022-49621,1,1,66afccc87170c831ba7b5a6b1b241641df0bd8f00641b2ffc442d4cddae80b61,2025-02-26T07:01:37.487000
+CVE-2022-49622,1,1,cd487d27b7076b870f273338e8d5028c632cfd061b18c3accb4aa24a6fcc3918,2025-02-26T07:01:37.580000
+CVE-2022-49623,1,1,a28b2a60e9874d468fdd816c216370805099d448f10a012c7797e37935e347f5,2025-02-26T07:01:37.663000
+CVE-2022-49624,1,1,dd2bfa5ee832de795cfa794508626771ecb56d853847dc36a5e70a123d501e89,2025-02-26T07:01:37.753000
+CVE-2022-49625,1,1,9f58fe38a969e38714d16c17f2a99815539a04b1a6e03ea784518f5bfdf34769,2025-02-26T07:01:37.847000
+CVE-2022-49626,1,1,99525c788693c33cb8c4ecf5d45f8ab842f555b22927bff657c726dd04860471,2025-02-26T07:01:37.937000
+CVE-2022-49627,1,1,7d61a807fe20d3c1c87260c94102067f804cc7813fdf5ddedcba2d7c9c482b4d,2025-02-26T07:01:38.030000
+CVE-2022-49628,1,1,7116a363ad204d4293929b543886ef7c8aecb8eace1240643b1d511c163013bf,2025-02-26T07:01:38.117000
+CVE-2022-49629,1,1,50d0a03953fe76b07677b1a8964f4bc78f06fc887a6cef14354f301f52ab6479,2025-02-26T07:01:38.200000
CVE-2022-4963,0,0,98e593377621d08daabb0add53a5a4be2ffba8d7cf2baf44af342bb34b74d97f,2024-11-21T07:36:20.423000
+CVE-2022-49630,1,1,0c88a73b6271b8f3daf4c4ad0e7ba3c270ec1e66d3e51379700749b8711acb77,2025-02-26T07:01:38.290000
+CVE-2022-49631,1,1,7ae10e62a1bc7357b83cefe5a6a7b07537e742162ce169991dbdc35cc3769810,2025-02-26T07:01:38.380000
+CVE-2022-49632,1,1,f9e1fe35fbb42dfe44e48d121ea306cd389f30060a236e19129a13265663c5a8,2025-02-26T07:01:38.470000
+CVE-2022-49633,1,1,1f1e77f91707e7167c4b9935d07a3c8ca189b743414dab80d5417a22fb7b4661,2025-02-26T07:01:38.560000
+CVE-2022-49634,1,1,d77956d5c51ccd3bc469dc8d4ce344bda761bba28457c8811a8faad5925566ca,2025-02-26T07:01:38.647000
+CVE-2022-49635,1,1,61d7aa7fce3655912220fb17dac2e62a416dd137827ccd9792db602e6a0f46f8,2025-02-26T07:01:38.733000
+CVE-2022-49636,1,1,6393669e36e0e3bfee13f76027abb8695d784ab67d8a422697ffe75ed1e2c98c,2025-02-26T07:01:38.827000
+CVE-2022-49637,1,1,bd2426e042e6575f0c1dd3bf959c6d57ec627951e5d75299fc07f5bf54827a5a,2025-02-26T07:01:38.920000
+CVE-2022-49638,1,1,4bb5bea93a6de106849f9f1f01019c3ef353597ac19fda1af69cb61b1376749b,2025-02-26T07:01:39.010000
+CVE-2022-49639,1,1,f1ecef1e3fb76adff73f258d929fc2029c7e9f28b47b32e85492d4389be60ecf,2025-02-26T07:01:39.100000
CVE-2022-4964,0,0,6b85e135c4fc3ab619388ff7b8392e5e6a2cdd14202905220d049a92e07cc5e3,2024-11-21T07:36:20.560000
+CVE-2022-49640,1,1,9c0e2eacee95c9155d06cc4f91bedb1d7bbe40cf636dc25e491cdbc0e38fbf65,2025-02-26T07:01:39.193000
+CVE-2022-49641,1,1,23a6a3d2c7d4e50045865b33a61607e040e1d16e9c38848475e0edacfd318488,2025-02-26T07:01:39.280000
+CVE-2022-49642,1,1,c29e9fc2a813735643c50f1e136a88d0565cafb9c430b5c8f491c9a8d4dda2af,2025-02-26T07:01:39.373000
+CVE-2022-49643,1,1,f8e50f8802b93ee97fbb1c604f4189150b2065e3aea996b81f906278e8a04c8b,2025-02-26T07:01:39.467000
+CVE-2022-49644,1,1,ed718a3f6baf2e113a75133f2ff881eb06bf9e4e251d0cffa529309e3edb964c,2025-02-26T07:01:39.567000
+CVE-2022-49645,1,1,81be08e506e6945be5038ef5795fd6199a9f4fb2a22e998e4fa378c99a4428a8,2025-02-26T07:01:39.677000
+CVE-2022-49646,1,1,2e9a876e5f95933f4c73be0514431615ea6d7849c3b4180954e06f6a67f51aac,2025-02-26T07:01:39.777000
+CVE-2022-49647,1,1,707399151729375fda861f2ef90d81131bcd8bd5be62975941da489c4055417e,2025-02-26T07:01:39.863000
+CVE-2022-49648,1,1,294289f4fe7d5537f06f3e820f72235b5e223eeccaafb86e3510285b7cb93c66,2025-02-26T07:01:39.957000
+CVE-2022-49649,1,1,7829643169bede34b683f89d95ec494a695a7c973cd6b4c486a5037284e80043,2025-02-26T07:01:40.050000
CVE-2022-4965,0,0,60520f7fe367ad75afc49cb5a38d09f60dd060ea4cbc4cab5dd51ee8b1f8d468,2024-11-21T07:36:20.697000
+CVE-2022-49650,1,1,f5d32cf60278699fd6a650d2a09904f9cd969913b2008b33fef0454729763660,2025-02-26T07:01:40.150000
+CVE-2022-49651,1,1,609fa08ffcd235312b13503d78fe717bd334fb10ce4b5d1608779cf0d1cd0146,2025-02-26T07:01:40.237000
+CVE-2022-49652,1,1,98bbdf4bf70c62a2c11bab9ce07781b360cae34ec4a8a0a6445cdf7311e2c1fa,2025-02-26T07:01:40.323000
+CVE-2022-49653,1,1,f66746824c55a89451f07b881ff883adedb47481deb93dd0d91f20154cf880f1,2025-02-26T07:01:40.420000
+CVE-2022-49654,1,1,c7c747dac98ead6ae5a77a62ece5a5789eba4f994fe34059d6b593ad68ffac5d,2025-02-26T07:01:40.510000
+CVE-2022-49655,1,1,40a4f12dc1619a316253099136681ccfd832aafa375cd00d91bbf6d26723a694,2025-02-26T07:01:40.600000
+CVE-2022-49656,1,1,4ced223a95e5bf470c24f41d421ec06f674ca666ab34c8be969bac7bec4efcac,2025-02-26T07:01:40.683000
+CVE-2022-49657,1,1,1a2efaecbfff79bada31f17a47ef47f0db4413b50ecb567eec9e491a4345bbb7,2025-02-26T07:01:40.777000
+CVE-2022-49658,1,1,3cdb78198dcf9920a8af2e0e05fc2a9de725257370467d3d80d1b9e61cbdb8b7,2025-02-26T07:01:40.867000
+CVE-2022-49659,1,1,3549296e59a0b3fb29e7b0837f05ed5acc88d2752c6b5449ecc15b54955477e0,2025-02-26T07:01:40.957000
CVE-2022-4966,0,0,b9d213db176e3f688cb999f6fb4e9d706d4dd4cb8237e2d70136404a8893c1f5,2024-11-21T07:36:20.813000
+CVE-2022-49660,1,1,d4790bfa84025c03cdb65ab4b0738cdd799d4b81d425161ae2d3f674b999f588,2025-02-26T13:15:34.227000
+CVE-2022-49661,1,1,c3dd0df8f8eb75371cdb2d933c9329d5b9f34c3b9f6f371fd57ee296d5edf239,2025-02-26T07:01:41.137000
+CVE-2022-49662,1,1,48fb426b37e52b54035ebb9f8c21f4babecfafadabbaa24411b531b35516af1b,2025-02-26T07:01:41.230000
+CVE-2022-49663,1,1,d65c6449531a59de0c58ad5d7fb8396dab5adf12da29eb4ae84a6bd5a2716a10,2025-02-26T07:01:41.323000
+CVE-2022-49664,1,1,acc87b12ff893a72d1e4d50d3289708524a19935aed875fa20333c8c9aba2e92,2025-02-26T07:01:41.420000
+CVE-2022-49665,1,1,38402ea9b3a124d6a1df1983495417acc0978c17c7d4aaee08c0f3df7450fc30,2025-02-26T07:01:41.513000
+CVE-2022-49666,1,1,e36b7409adf910f421e9cea513f4391491a8502e218ad78820afdc7f7044d80d,2025-02-26T07:01:41.600000
+CVE-2022-49667,1,1,1e099cb23e79847e583751cb9cb100e0907d441455187f259f9ed1a74fc9637f,2025-02-26T07:01:41.687000
+CVE-2022-49668,1,1,bafeb229616c3db7083f8dbff72ceac6aab45287b893b5d718b6393f0b0c1cc1,2025-02-26T07:01:41.780000
+CVE-2022-49669,1,1,3fd27c20ab4dcace94d9e467b84b1c1d0477bf870b3801dd22f90f10f86a8d4a,2025-02-26T07:01:41.870000
CVE-2022-4967,0,0,7bad2c988cb94d61125773a7a88a30404d5f4c0bbce5e0a1937e4f25b7e6b432,2024-11-21T07:36:20.957000
+CVE-2022-49670,1,1,c54d3317486660bbd6cde1b7aa381fe4a30b02b38d6df6482f115483995fde19,2025-02-26T07:01:41.953000
+CVE-2022-49671,1,1,a93e99b064e6eeafde5c1c56176193a8f2547c81387b08116f956edebdd40ad6,2025-02-26T07:01:42.043000
+CVE-2022-49672,1,1,a3d5856bb0144bf1f4e1820d2e8f889adfe270383f49dbb40f020fac4adf6869,2025-02-26T07:01:42.130000
+CVE-2022-49673,1,1,3869764ab83d906962ed044dea1dde0649593391f03ff4763abe3f0842597223,2025-02-26T07:01:42.223000
+CVE-2022-49674,1,1,55501d3b07a780da41576e82aeb9422ade40a863ee47324f4604cf19c62b4c65,2025-02-26T07:01:42.320000
+CVE-2022-49675,1,1,3e81600156cf1643b73646e94bd64f6e346f7cc7e9773db8170e78145b0c98e0,2025-02-26T07:01:42.413000
+CVE-2022-49676,1,1,b36671c28a9ecea18aa7ad5de394862017fe8ecfc65b8f72f3cc08ac6a2f7251,2025-02-26T07:01:42.500000
+CVE-2022-49677,1,1,c951f14916f8125db545c664d3afd05950894890fce91d340f146d5d5c5896da,2025-02-26T07:01:42.587000
+CVE-2022-49678,1,1,d175e04d89b961c3f5a21fd1810cbaae8ec561f899a1209e7f4f1690aa85fa79,2025-02-26T07:01:42.680000
+CVE-2022-49679,1,1,924a6ca1250d462e160866f877b68184ae8b8286d5aa3991826e74f260393033,2025-02-26T07:01:42.773000
CVE-2022-4968,0,0,943dc961a80e9392015a5b33a469efe5c0291971944fd460d5f7c41e33205936,2024-11-21T07:36:21.080000
+CVE-2022-49680,1,1,a7889791b9e77fbcc0d2810b1c0c5d36aaf0bc53a375bfacaae955b7491d0b43,2025-02-26T07:01:42.867000
+CVE-2022-49681,1,1,2e367068ac72d3f8cc8654b3b5bce57aaf6953b5402214850999d23be43379c6,2025-02-26T07:01:42.963000
+CVE-2022-49682,1,1,37814c4f01d3a0829fad9e4fa7ea16be382963b240c7d1f8ec196665600c81fd,2025-02-26T07:01:43.063000
+CVE-2022-49683,1,1,f89cd84deb79228832db270f65a7e8d775337fb7e5339d043a0f0d126b173d03,2025-02-26T07:01:43.153000
+CVE-2022-49684,1,1,9694d7a567f090adadd86d68d9e7b55859a96199ac66a1ea7a4566199eb4aa28,2025-02-26T07:01:43.247000
+CVE-2022-49685,1,1,683966b6ae6a2cf5bd2f61e118e2e0b5821796d6914a63895c55cae7dac12bff,2025-02-26T07:01:43.340000
+CVE-2022-49686,1,1,7239daec22d53e71c4f7af2f98e827b6a53d319aec1c6c26df3c1286e411653f,2025-02-26T07:01:43.437000
+CVE-2022-49687,1,1,4137488d76e3d12d0579db9f9d9981a8b7c0f1ce2766e8c902ace78539ff2c13,2025-02-26T07:01:43.527000
+CVE-2022-49688,1,1,3d3663e9d294c2e59e2a48c65024468f6105404766c6dacdd88939c071db54ef,2025-02-26T07:01:43.617000
+CVE-2022-49689,1,1,7bd49c09374f7fd790a524c7c41bebac33954627da85eed58bd36134f90c5034,2025-02-26T13:15:34.300000
CVE-2022-4969,0,0,d1bdae96dfdb0ec50899da0af463cbebd7dea2e729035dde082a201b18e22a8e,2024-11-21T07:36:21.240000
+CVE-2022-49690,1,1,793e057a79f8adbe5af54106dfc25e8729a6e63e0dfc223f4e86a9a491eb772f,2025-02-26T15:15:17.703000
+CVE-2022-49691,1,1,325d51214696b88d36748aa2db137aaa419b2046bbc8f76fce0440107779182f,2025-02-26T07:01:43.893000
+CVE-2022-49692,1,1,9e48fabfd49b351faef80b96b392670b998a599bbdd04b7a7743edc165606e62,2025-02-26T07:01:43.990000
+CVE-2022-49693,1,1,31d65d2f199ec52e265937acc096fd57e14bca5c77865f2c0ad34fddebcea4e1,2025-02-26T07:01:44.080000
+CVE-2022-49694,1,1,a32977593f82381c19ce979c7ffa18c044daf0fcb9128b2dd7cf474cecf1ada5,2025-02-26T07:01:44.170000
+CVE-2022-49695,1,1,5d98abb865e09b62718e7959c28e23565e9962c963ba67197ad29eb259460d69,2025-02-26T07:01:44.260000
+CVE-2022-49696,1,1,dc5c43dd02e6b41f48ae49a21142d22d95be08e8a3afa1c1e8222ee5b8c16381,2025-02-26T07:01:44.357000
+CVE-2022-49697,1,1,37f111100890cc8a6c4b57f219ed290637e7ffd09bf2ee8aa7fbd97234b28102,2025-02-26T07:01:44.450000
+CVE-2022-49698,1,1,fba7b0d95440675c9697f9f8e91bea4daa74a5f528c74ed01b53c2bf59757c3c,2025-02-26T07:01:44.547000
+CVE-2022-49699,1,1,5533ed2ba7ccd3ba1f9cebc8dbb8c1bfe21a97d92d0c02d9244f66885a67873a,2025-02-26T07:01:44.640000
+CVE-2022-49700,1,1,78d750225653a616b885035698d3dac15a97785171065fa32f7014d7d9064334,2025-02-26T07:01:44.740000
+CVE-2022-49701,1,1,62aaacfd738b64040f01c3737dbb2861a3f8ca018a5bdc10ec9b72eafaaac2b7,2025-02-26T07:01:44.930000
+CVE-2022-49702,1,1,2f4cf6c65f94da646144a2a1f2ca00e40c2bcfe05a985ee462e1e10492edaaab,2025-02-26T07:01:45.827000
+CVE-2022-49703,1,1,2106d8835fb296a6e80ae1004028b21c13a37e45bf665be0c4fb766796980951,2025-02-26T07:01:45.947000
+CVE-2022-49704,1,1,3f1c8797b9feff87cc27c35472b38648d8f6dda9331e0c45861d5fb331862b90,2025-02-26T07:01:46.060000
+CVE-2022-49705,1,1,1fc7dd66343d10a4d33f500badd993e47fd7b4a769ad30c14a4cc9be64a9b25e,2025-02-26T07:01:46.177000
+CVE-2022-49706,1,1,47896256d263e62b48a3ce05ec42375eaeeab49a70758bf7dd70a645ed85764f,2025-02-26T07:01:46.403000
+CVE-2022-49707,1,1,bbc79e5070037ef86e583df02dbc024ffbeb99f0e612cb46a0e3d874545b3c85,2025-02-26T07:01:46.500000
+CVE-2022-49708,1,1,8e5427a95a7a8ae48ba2005d5e7b81e5d1b63e8415240ab48ed3d8a1fc31eaf9,2025-02-26T07:01:46.607000
+CVE-2022-49709,1,1,98473eea65ada0d06fb88733cf1c4e3e4a5573b33e161a3350e00c132677e4cf,2025-02-26T07:01:46.710000
CVE-2022-4971,0,0,8284339847d56a982dc79d79b0900fdcef988337c6504d3d0fb43eff5f9bcb0a,2024-10-30T16:37:33.237000
+CVE-2022-49710,1,1,592536be5e15dae2963c97160e23b05940c3349928e5284d53386b96a89b74ad,2025-02-26T07:01:46.800000
+CVE-2022-49711,1,1,5e3d9648df664b4632c9d332ff1c5c700d69eb46b910d181f94eea0ffadcbbea,2025-02-26T07:01:46.893000
+CVE-2022-49712,1,1,3ee9b40ef91e04be44077581722686fbcacedd0401937b766e99d40f64d75938,2025-02-26T07:01:46.987000
+CVE-2022-49713,1,1,c427b68c2cf55fb03ab35896d5ce5c90add114036430b8a5bfe36f5da4ead55c,2025-02-26T07:01:47.083000
+CVE-2022-49714,1,1,0e59cd9560bea73e18001122356eeb5c7511354b09b3d34caf687afcfa073fed,2025-02-26T07:01:47.170000
+CVE-2022-49715,1,1,145675c8f59042dc0b7afdb1cd1d7c4ba310837973b7aa5f897b481c5bdb8998,2025-02-26T07:01:47.257000
+CVE-2022-49716,1,1,5776255ed6d700622a80c12eb5c25565403c9027cb68abd8fdbabad90fce9a76,2025-02-26T07:01:47.350000
+CVE-2022-49717,1,1,e595e24da0dbbdd99c9ea2cf70c632e09ae54e8fa3f369b4805fc233511a9c55,2025-02-26T07:01:47.440000
+CVE-2022-49718,1,1,df1d35c4eaf32eb3f5e4e9255fe3e6257303ad53eec6d517f77434275c2be783,2025-02-26T07:01:47.527000
+CVE-2022-49719,1,1,aaa7e1f20bdcec68cc4ea09f5a8423bf67c7f723e3ca4ab7a2e2d6ab6370a0fb,2025-02-26T07:01:47.613000
CVE-2022-4972,0,0,dd0bba328c6c263b4470904688c48aab55242d31bd9c6ea9c0560b0bf0ebaa74,2024-10-30T16:34:55.117000
+CVE-2022-49720,1,1,7fc656351ce34da79f0cd73b94150b3eed70111185f75dedb7d39d1c5f7bd657,2025-02-26T07:01:47.703000
+CVE-2022-49721,1,1,0c1db6b5081f5b64d8f4cba674abb9139f5f0713818c0875172c8e7eaac93b0b,2025-02-26T07:01:47.793000
+CVE-2022-49722,1,1,89f6ecd1d1adc732bc703c8e1b7be908a731474fad5c9baafbb4862e03159bac,2025-02-26T07:01:47.887000
+CVE-2022-49723,1,1,86ae21e17a82ab52b2d319b4e23a49b5e137b6f7ccd05a64a7d6dfd56a1f5672,2025-02-26T07:01:47.980000
+CVE-2022-49724,1,1,834cbbd441a4c8210fae384290c878947e78b0ffc264892dc92a7bdc35f9dbbf,2025-02-26T07:01:48.073000
+CVE-2022-49725,1,1,c41d17e7c6f618146cb8bc93974729460b613eaf12c9ac295f27128fca5e9759,2025-02-26T07:01:48.167000
+CVE-2022-49726,1,1,6d08e5c2db2c8223b37e223dfaa8a65d62bb48eb075a7c68795f0e21e12fbc0b,2025-02-26T07:01:48.257000
+CVE-2022-49727,1,1,ac6a51f7d9b208ce4fad40013a4b9693227dff65516f8a58384c0782ada1ef81,2025-02-26T07:01:48.347000
+CVE-2022-49728,1,1,221085aae52fa8aedd1439e92f6f732ee88405dc351e60ea4ea82576c7d83d7f,2025-02-26T07:01:48.433000
+CVE-2022-49729,1,1,9dcd52103d8ff8d3cee28bf857d4b545299bf73125d081c11fcdcaf92a2cae34,2025-02-26T07:01:48.523000
CVE-2022-4973,0,0,3f7bb8af7d8ad41d4b8c2b6df6303f0dad9415526c1ebfae5140748d302176bc,2024-10-30T15:58:30.907000
+CVE-2022-49730,1,1,64eb3d78ac04b8105d9b8a2318c8ed002f1f70a14f90c0bd037bbd57747fe8d7,2025-02-26T07:01:48.620000
+CVE-2022-49731,1,1,3087aebf92cbb510ce471fc8272df920f283560767e2c40c990611543a35c126,2025-02-26T07:01:48.710000
+CVE-2022-49732,1,1,357e26d46f1a26687bbcdbaccaf2828e1a219bc057c20eaf6d9b9cc65a408ec2,2025-02-26T15:15:17.843000
CVE-2022-4974,0,0,b3c59950ee3eade0f74a15ade2edad03cf700537d377a12415779325d85e4da4,2024-10-16T16:38:14.557000
CVE-2022-4975,0,0,f3499ac468d9abe551aab7c55d7d6df29ba7ff95cc64d5206edf5add6a87fbd5,2025-01-27T14:15:27.210000
CVE-2023-0001,0,0,2dfbf6dbe59b530ec18f5af443ba14cd4d2a5b201d3a1ffcc25574a8da444091,2024-11-21T07:36:22.050000
@@ -213336,7 +214057,7 @@ CVE-2023-0141,0,0,8449d886e8c42816e954f2a6395034070872d037333169286c287a27d7724d
CVE-2023-0142,0,0,b7133677787ddbbd1130cc8c143928e5cbd31febaed1bc74027c053535510e61,2025-01-14T19:29:55.853000
CVE-2023-0143,0,0,334e384f36df47912952c035eb92b4003d79caef43b8c038c64a3fcf6498783c,2024-11-21T07:36:38.267000
CVE-2023-0144,0,0,04d6adc5e9c8d3d966538b6f377a484e000949368d55f2371a62400361af1881,2024-11-21T07:36:38.360000
-CVE-2023-0145,0,0,b6a125d5b691c0623c81ad27b6f9d13886c19205b3c1cab14ee2845c9c0d2dfc,2024-11-21T07:36:38.450000
+CVE-2023-0145,0,1,76f79db9487ad9532671e0cbbce2965b693467bec2d96f49f54dcad1e64fb731,2025-02-26T15:15:17.957000
CVE-2023-0146,0,0,51837284e68a79a6fb8b71476def95b0412f5126cc0c968522c759299e2bd301,2024-11-21T07:36:38.547000
CVE-2023-0147,0,0,a53028a6fdebcbe095e178fe37fae8cc61b4039af856e4b0dff173466cd6be0e,2024-11-21T07:36:38.643000
CVE-2023-0148,0,0,8a62d15c710261b523921c8b171ae869903e790230fa7ca37f5da65332c3be4c,2024-11-21T07:36:38.733000
@@ -213549,12 +214270,12 @@ CVE-2023-0360,0,0,6b7654c5aa663d97c571204cb30ceca675e1339e8f1dd6d89702203544a2e6
CVE-2023-0361,0,0,e70f1a8ce03e9520b20b17912ead01ec69391b9199f00fae58eb18e3f48d0432,2024-11-21T07:37:02.870000
CVE-2023-0362,0,0,4abe6b60580899ecdb18fea050a16b36cec253adfaa2539c4708ec635b65b154,2024-11-21T07:37:03.007000
CVE-2023-0363,0,0,1cd79a0486a160da83f5ac09c2c0776dc6991ac996722fb6ea969fe966332bca,2025-02-11T16:15:30.060000
-CVE-2023-0364,0,0,6c80204f48168fa156a1b2e2a64ce4ed280159708791fb408341f55a5356dd22,2024-11-21T07:37:03.220000
-CVE-2023-0365,0,0,e743037d4a4c2ba49fefc7e4d9ccdf06b4eb526e7909a27b64ed97754ba5528e,2024-11-21T07:37:03.330000
+CVE-2023-0364,0,1,663a39c3237744bec44dbd34a7c48db0a263a0130df6ce5e432e101cb03c53e0,2025-02-26T15:15:18.123000
+CVE-2023-0365,0,1,5892ab3a5cb8c5982c61c38ec827e8ab4030d5c888cc92e145c5959802577970,2025-02-26T15:15:18.370000
CVE-2023-0366,0,0,4b5d93f5c2dc2aeca3f9c034e426d902e6770dbb099459e37b8d750787c31c0b,2024-11-21T07:37:03.440000
CVE-2023-0367,0,0,144ef5f6ccf950276c0d7be929c8a4aec7c990fb44df318160ffd3559bb035a3,2024-11-21T07:37:03.543000
CVE-2023-0368,0,0,e4bf7dd812cfa89bec739c14903be638fccbb4768d16c23eb9420d8066bcc8e4,2024-12-12T17:15:06.953000
-CVE-2023-0369,0,0,34a14d4eaa3605f1536be7b9351f43af71d06558815362a1b135f9e3052d4ef5,2024-11-21T07:37:03.757000
+CVE-2023-0369,0,1,88cad11377f8c5e40f02ac5bb5779b5855f15bcde2713a0b0289dfa006e4ba34,2025-02-26T15:15:18.493000
CVE-2023-0370,0,0,95ce5a3a45532cb2269c1ad171161c1d386ae478c6effc8d9e6ec0104b9c681f,2024-11-21T07:37:03.863000
CVE-2023-0371,0,0,399b61b5d12d6fa2fd6237ec1963a8bb821231352b64e295416361b2545aedb3,2024-11-21T07:37:03.980000
CVE-2023-0372,0,0,9605cf8257987f4bfdb63a268f482adb7b387992e0c488953292d1b8f311bcf5,2024-11-21T07:37:04.087000
@@ -213571,11 +214292,11 @@ CVE-2023-0382,0,0,74df95cd11c65f3e32e101ac93474214ed7fd751aafe1a489acb854b3ad088
CVE-2023-0383,0,0,2dd17f8e3f21172fd0d947223df8988fa47c58739face7170e70183ef112e5d2,2024-11-21T07:37:05.243000
CVE-2023-0384,0,0,317073837dfa5a62a0b542d55228582d6dcfc135bf2a6505767847825e5542c0,2024-11-21T07:37:05.360000
CVE-2023-0385,0,0,e3b8c0c970ec6db46d6ced2c52117d599eca2a0a0c360218a78a2bdb50cc68a7,2024-11-21T07:37:05.477000
-CVE-2023-0386,0,0,a49351c90073462d6c96be05c7d640bd491faedd0d85ddc2dfa9834c3b6521fa,2024-11-21T07:37:05.620000
+CVE-2023-0386,0,1,7507bd7b00c00a8358733bcb0fc5dc8323c92bbb6ec248b11b8fac0a7936ae5e,2025-02-26T16:15:12.543000
CVE-2023-0387,0,0,b3007d9eab56742948bf0860ee2c15051e7609baee877e6d419745c7c5e67467,2023-11-07T04:00:22.913000
CVE-2023-0388,0,0,5f1a60fe199f4d73e08beaa633f10d20147801316a80c66ee5f23ab208abc539,2025-02-04T19:15:26.970000
CVE-2023-0389,0,0,d3a6859917d00580d863b1cc40656754ef4aae3a0ed0d7ace8ca00904f8449e6,2024-11-21T07:37:05.903000
-CVE-2023-0391,0,0,1501c977f283445a69e6f9019d5860be42bcb8f727bac9d69151b20436d7b38a,2024-11-21T07:37:06.020000
+CVE-2023-0391,0,1,4ff4461dc52966f2e7c25d0686259ce837e898d51f19b1fde13e9099f009e156,2025-02-26T17:15:14.073000
CVE-2023-0392,0,0,8a7a998dac312487f8c5dc9b83d0872c5c624db0d1b91b751bbaa7822fdc6d5c,2024-11-21T07:37:06.157000
CVE-2023-0394,0,0,8e170d43769bdc6718a413799d76d2e93b3416a224594f7b7909d6519f5a0fd9,2024-11-21T07:37:06.357000
CVE-2023-0395,0,0,e433e7fd12f29bb1b0de0990175e4e13bce1ca11a518d400756db9b100437213,2025-02-19T15:15:12.247000
@@ -213801,8 +214522,8 @@ CVE-2023-0626,0,0,66b454a1f2a64e228f8638b52590a60150b0e68a5bac4c60006842b880b3da
CVE-2023-0627,0,0,7a9420db815d9e55f645a0d70380bb6b7308e2f55fc62746a34d49f0da716e7c,2024-11-21T07:37:30.697000
CVE-2023-0628,0,0,ed8580fe1dddbc7c86abf9f58ab32d00576ae7ce49c69cbd0cd53ddcc274af94,2024-11-21T07:37:30.807000
CVE-2023-0629,0,0,68d90bb8cc977892d434914da460792e44f81d9d0ebabfdbdbba1c815f310d15,2024-11-21T07:37:30.910000
-CVE-2023-0630,0,0,f1ff308d98bd2b351db858e92015e96e6446ad0e4f3cb29bb9e499fff12e3f89,2024-11-21T07:37:31.013000
-CVE-2023-0631,0,0,1ab34b9590c5630949755b3584ec551da7fe32269bce103e74186b782dedceff,2024-11-21T07:37:31.107000
+CVE-2023-0630,0,1,db7d23460b27b082b7d4e51311a76fccbd618263928c6641f29bc3c46586cdc0,2025-02-26T15:15:18.617000
+CVE-2023-0631,0,1,a9adba3ca0e86deb3efd873ec2c8e0cdc8e7d486f2d0b7f8a4ec90c0f76d66e7,2025-02-26T15:15:18.757000
CVE-2023-0632,0,0,336adaf2117b8021c3f2e477c72db84bd3b4b41a81769d3d11d9eb79fe01ba71,2024-11-21T07:37:31.197000
CVE-2023-0633,0,0,008d95d0ec234358db5e751f500a73503492c6f7120a93f4ff9aa85009d67a56,2024-11-21T07:37:31.313000
CVE-2023-0634,0,0,e1f434232229f0b69e5813912fc243d281927b7062ddb545130690b604bd0d71,2023-11-07T04:01:03.280000
@@ -214026,7 +214747,7 @@ CVE-2023-0861,0,0,f2cd119106d8bad106c9684055fa49c0960752afcdaf4c55ee93135505147d
CVE-2023-0862,0,0,7d40bd53b60105d56b59f81b771b0a7abb6e3aef903eeea250c446d3385b0794,2024-11-21T07:37:59.533000
CVE-2023-0863,0,0,444c9ae1629bb686905a1e15e3793c90cfd9d35285a62ad4e2d6717925de998f,2024-11-21T07:37:59.653000
CVE-2023-0864,0,0,2cd49ea5f9a35a220cc5742a91d8dfa041a9439a7d0008fb9dc75bf93a0eb865,2024-11-21T07:37:59.800000
-CVE-2023-0865,0,0,eaffcd02ec652a3ad676ba6d3563082e71eeb6f8ed6d83044522a8e1ce069fe6,2024-11-21T07:37:59.923000
+CVE-2023-0865,0,1,81a95cd60b170c2fcff700593f6a2ac32bc33e9b213aad249c7b5ee1633efc68,2025-02-26T15:15:18.883000
CVE-2023-0866,0,0,f06e9dfd682a2d382c74db4221d0e3386eec9c7d3a98b0320afb20a535580627,2024-11-21T07:38:00.027000
CVE-2023-0867,0,0,1b2fb3a64c2af6eb81fec226ac57958c4816d0b68782593397e6605201554c24,2024-11-21T07:38:00.143000
CVE-2023-0868,0,0,8b4281c08384f6d9a877717f9be8989e36215c26640e9c876dce7c90fd1ec73c,2024-11-21T07:38:00.267000
@@ -214300,7 +215021,7 @@ CVE-2023-1148,0,0,e421854df1a48ef2eed7eac26323dabaab51fe683cd0948694bd5c21a1ad84
CVE-2023-1149,0,0,96b66b11292079da9e2e8d6ec3ead3c929d217a384d8fb03bca066977f84ff45,2024-11-21T07:38:33.287000
CVE-2023-1150,0,0,ad8d4a3187ef7664a1bbd2861640b06fa5af42a8be96eb09895f88a7b09e7330,2024-11-21T07:38:33.400000
CVE-2023-1151,0,0,48ed4cb86095bcec8653c2413772e811336d151b5893c3754f80426986249ebe,2024-11-21T07:38:33.563000
-CVE-2023-1152,0,0,ca6f91c2028600e77024f3e6ac917329e71fbb981037dd0831655c15a2e59710,2024-11-21T07:38:33.700000
+CVE-2023-1152,0,1,ebab846345002ef9a104681dd7047694d5cc6678e135af9623a5fdb76306fbb4,2025-02-26T17:15:14.377000
CVE-2023-1153,0,0,5cde9e8c9f7b02bf39e57dd352c90da3015b6835bd79d91f22ad1d3fd8299cad,2024-11-21T07:38:33.820000
CVE-2023-1154,0,0,e6696fd9c6508fb43822158f8acfc7604c6b378de37b87ec1efdb33933dcb4cd,2024-11-21T07:38:33.940000
CVE-2023-1155,0,0,842cec26d3d2910c51b8a8606076c377955d96e3f699b52298fd9f4fd6f891dd,2024-11-21T07:38:34.053000
@@ -214316,7 +215037,7 @@ CVE-2023-1164,0,0,cd95affe38dd1da2f7cad384d131dc6e2f344aeca6455a3e27db16e3090a52
CVE-2023-1165,0,0,71c87946cb57d9e5cf8b725b79e00af7ae902214f6e2681b63ac9b9cc968ec24,2024-11-21T07:38:35.367000
CVE-2023-1166,0,0,60ae72323bbff0b1dc10dd41044aa7febf94b8be6e137b0aa72276c0e2034882,2024-11-21T07:38:35.517000
CVE-2023-1167,0,0,767ad86d542447acdd37535777e86f698416272e001e7a439b280574b4f50281,2025-02-10T21:15:14.280000
-CVE-2023-1168,0,0,d7c203437964f76af70d294530daeb5d37bdd8cf85df9489f1bb83c625365879,2024-11-21T07:38:35.753000
+CVE-2023-1168,0,1,3bddce9ea2219d25de13a4ffe78e4c0102a158a019d071dff1f005c6ed822b36,2025-02-26T17:15:14.790000
CVE-2023-1169,0,0,090d92a9d5b08f496d1ef691534e1c7fb8350082e1bcd7858146a9a558f33f59,2024-11-21T07:38:35.883000
CVE-2023-1170,0,0,f09d9fd62e48a0a3f12d33ca85e801006542d4675d69954c73fa9f66686ae16c,2024-11-21T07:38:36.007000
CVE-2023-1171,0,0,cdef650d9baac7a796694898948199175f4256e023eea05d17b6556a90524aac,2025-02-11T02:15:31.160000
@@ -214447,8 +215168,8 @@ CVE-2023-1301,0,0,7028900776d23e7f2caa69e19470efbd07c876a36537c6b5f3247ff082115b
CVE-2023-1302,0,0,705e779553ce2cf009268f7c6c53f47cb23d2d587c693b760dcf0376a9724c9a,2024-11-21T07:38:52.730000
CVE-2023-1303,0,0,1320badb56f08c774bb0da011b6d0512261d9ff266bda3119a833ecb842b8949,2024-11-21T07:38:52.867000
CVE-2023-1304,0,0,58935c1a5804c77fb5678df9a7e5b4cb1c6e1f869d1f1e450d28e45b649dd9ab,2025-02-25T19:15:12.393000
-CVE-2023-1305,0,0,7c67749b81d49b601c8995b0d0e4e277654d0c03dd04bf5a5e515fa650a4bfef,2024-11-21T07:38:53.127000
-CVE-2023-1306,0,0,cea7984793cc39120ed87d6345f3958808c8913eb736f843a765c01408590017,2024-11-21T07:38:53.273000
+CVE-2023-1305,0,1,5e579420fbe317576e85907b778496b57d0b68676e2cf14307a202de3665a2fd,2025-02-26T17:15:15.230000
+CVE-2023-1306,0,1,5cd22be91e4432f0f65b2f7ebf12caee28c9b79f99863bf2e72918bdf59c2f23,2025-02-26T17:15:15.517000
CVE-2023-1307,0,0,2b729406daaee7e27c49bfb195a2ed2ff87c5d2c4777f7c967e65c1256bd9c7b,2024-11-21T07:38:53.390000
CVE-2023-1308,0,0,fad79cc096c7ae5d9f09f8ac3470635d7bbb7f1dbd9f222a5b29d2107d56e631,2024-11-21T07:38:53.510000
CVE-2023-1309,0,0,fbc003d88eccc158ed3e6176bb1c367cd2c170d44992a0689713025a3254aec0,2024-11-21T07:38:53.637000
@@ -214600,7 +215321,7 @@ CVE-2023-1462,0,0,65929d154fd80a7cf9a9d75a643b7d8b0498c7c0286c509b6bda03ffbed872
CVE-2023-1463,0,0,b95072cd3e9d6485017c63c9c011ef9865ed08e8dbbffe51d23b8919f3e1fab4,2024-11-21T07:39:14.547000
CVE-2023-1464,0,0,68e04fd667f28470f40a8cf3626c1d3f3537d6e75a84295c99a20e7613246699,2024-11-21T07:39:14.660000
CVE-2023-1465,0,0,4250f7cdeeffd9d84f70554f7ed723332932669109e2921e71e5884c8c578f10,2024-11-21T07:39:14.780000
-CVE-2023-1466,0,0,46bcb721d63c14f0c6f95393f3c52f76ebef34da7de7324b935ee510b230ac07,2024-11-21T07:39:14.883000
+CVE-2023-1466,0,1,e21cf646deea1b2d7e66d43c8441c55884c9dd4f64f55d232fc554601bc9c091,2025-02-26T18:15:11.973000
CVE-2023-1467,0,0,2d5e0d3c88b96518d775dc936abdef24f2146e241d17aa7f4c866075205f8544,2024-11-21T07:39:14.993000
CVE-2023-1468,0,0,f5558a3779bd2a6b7d05f3a277dbf4d1874b888acff1883d729bd0c302361ef6,2024-11-21T07:39:15.113000
CVE-2023-1469,0,0,604afc5800d1993cece033e099e7241d470f50e51c1ca1b4b9e8667abf7a962e,2024-11-21T07:39:15.237000
@@ -219133,7 +219854,7 @@ CVE-2023-24787,0,0,1bb160417f56158608d2467445788d315bc974ff3fa7fc414e55d4483c668
CVE-2023-24788,0,0,868ff4d8e88aff25ad543e70a65b697e1d178d63050b1ca143aa0decdb797d27,2024-11-21T07:48:24.640000
CVE-2023-24789,0,0,478a774a25a83944ccf6fe2be0a5de598b6e51ea788134ed3d69cefa03b9080d,2024-11-21T07:48:24.780000
CVE-2023-2479,0,0,4801134ef77265136ffc1bb85eb06ca5e6918eec27800c07ac6e0c5e0435b44f,2024-11-21T07:58:41.860000
-CVE-2023-24795,0,0,87acf6ba296c42149b10204dfda61069c3419c9d106dea2f2b51cea8de96d935,2024-11-21T07:48:24.910000
+CVE-2023-24795,0,1,50c263ab5cfb37ef26a3b5605f966902dfc5978a6d9b8282427d790bae59e9be,2025-02-26T17:15:18.970000
CVE-2023-24796,0,0,0811d8124e097273749efb44bf056e7530d4475a682a12a8354f5594791213f6,2025-02-03T18:15:28.627000
CVE-2023-24797,0,0,82fe4745123461bace6d5d2f0677988eb959e24e2dd509bd732deb950dd29eb9,2025-02-13T15:15:14.623000
CVE-2023-24798,0,0,8208b1374b7c89f32a5bff5db2d20d878ed031eab58b048871ee3ec743290444,2025-02-13T15:15:14.830000
@@ -220778,7 +221499,7 @@ CVE-2023-2676,0,0,51c3bf7c174796a0fefc1be82999f859d717cf4431b2be630e0fa1236f4caa
CVE-2023-26760,0,0,89f9e45fb0a1dc5ec5e14dec98e146f8906d1bae8839c609d65a64b33f9d5888,2024-11-21T07:51:54.287000
CVE-2023-26762,0,0,0388b8218c60aae0d42c87aa07c8a1c23641c4af6b54582651fb1e130aaf7067,2024-11-21T07:51:54.423000
CVE-2023-26767,0,0,5fe24d45af58c3119646db53b1338acba1676c4ab295dc483e176dbfabb97b25,2024-11-21T07:51:54.563000
-CVE-2023-26768,0,0,b8466815b84377f39420df486d1fd756c2da9712f822abd975be56bb312614d5,2024-11-21T07:51:54.700000
+CVE-2023-26768,0,1,c978cb2181c3f42996917312808e142929cf4ebc6f2b1192617fe7d0bf219aa3,2025-02-26T16:15:12.880000
CVE-2023-26769,0,0,86b2131687e8e371a51c69df2ef7a2a199878bff674828980e0433bfe3fdb18b,2024-11-21T07:51:54.830000
CVE-2023-2677,0,0,3ffddf69904435f3d62ec2bc45b9f4fcddecbef61945c8cf4757d9405b07d1ff,2024-11-21T07:59:03.887000
CVE-2023-26770,0,0,5af76da89474a0fbc87e8df2569dab1444fbb511a4b535fcb3d53f6ff0438504,2024-10-07T19:36:19.377000
@@ -220942,11 +221663,11 @@ CVE-2023-27042,0,0,1cedf843b32c16727863c5a72d3c2800736ca8dabb04be01b541ea6348a2d
CVE-2023-27043,0,0,5ea1fc4ec929cf34c45ce62cc3e412b9e4b9786ba8a7b21aee0140712925cd51,2024-11-21T07:52:13.737000
CVE-2023-2705,0,0,1d378a1ed7a0999bc4bd863ae6705e50e51e2497f8907ea8cc07553e423078c5,2024-11-21T07:59:07.393000
CVE-2023-27052,0,0,ef246db50bc99dae8670b10b9548f6fb8f9a9c37194a9cebc3ce6c5923335e70,2024-11-21T07:52:13.973000
-CVE-2023-27054,0,0,1a8abef1e8e2966a4c0eaa9185349a299feb631b8eb2a9a190a3472ff3e2e837,2024-11-21T07:52:14.120000
+CVE-2023-27054,0,1,4022ffb4c3b7a352b1f4608c849205c4f844a1cc308e00234264350626c6e6ae,2025-02-26T16:15:13.097000
CVE-2023-27055,0,0,c3b765d627486c20c7048d2434097ef9a617abbbcdd3354eaa7b20c6c338f4ed,2025-02-21T20:15:33.310000
CVE-2023-27059,0,0,35d6750dbe8e367b74e8098c417629b9d0dfd130770a5fdaddc91156da7434e9,2024-11-21T07:52:14.417000
CVE-2023-2706,0,0,67564059ab4cd916430c0a7474043a76b4d4a2638882e61da7692bd571ea8041,2024-11-21T07:59:07.573000
-CVE-2023-27060,0,0,da603f2c567bc4581fbce5134abc90230c99b0a7b781f3e565af91c8a86692b7,2024-11-21T07:52:14.553000
+CVE-2023-27060,0,1,edad0120c53d68dba7a8f83d22c7cf50334169ddbda943ab328f92a5b0071f7f,2025-02-26T16:15:13.310000
CVE-2023-27061,0,0,c00a6ed773c44a0b3682fd9ffe955c7b68cd06d8ad23241f99d4a5cc5e59b45c,2024-11-21T07:52:14.710000
CVE-2023-27062,0,0,1f308f3ffbd86d90c8e821892d9ddd8d315f03e9e0867c83dde311bc0f2a2bd6,2024-11-21T07:52:14.857000
CVE-2023-27063,0,0,74da4df8f33f0caa802007aa7235baaee68c1342174a91b93f62a47feda096a1,2024-11-21T07:52:15.007000
@@ -220977,7 +221698,7 @@ CVE-2023-27090,0,0,1a3f0320c4001f0d005218a016e3cd8f3d06fdcf83168c8eb42da3e6a3a64
CVE-2023-27091,0,0,17a7b5261302c28e15dd27d73684171a9a7734aebe7f6790e6711cf73bf58d52,2025-02-18T18:15:14.490000
CVE-2023-27092,0,0,cf3f3f0aaada06ef1105abffb2ded8a829e5905a1e5298bb29b9a9ff84578a52,2025-02-06T16:15:34.183000
CVE-2023-27093,0,0,75ab2d12a6e9a95bb315b505a78454ddc548197730f843a655ef303062aa9b5e,2024-11-21T07:52:18.680000
-CVE-2023-27094,0,0,efe71e92652676c9e8d5adcd8c0958e6d181e1ab904060580293934e81cb5b9f,2024-11-21T07:52:18.833000
+CVE-2023-27094,0,1,f48b9353a8ca8161ba53e46ff3b50e774c9819a7f64ba9905f74967ed5d3c53e,2025-02-26T16:15:13.513000
CVE-2023-27095,0,0,45f61d04f5041ae51c68a2456b891821b07495a6882f83d75c0613cf57e169c1,2024-11-21T07:52:18.987000
CVE-2023-27096,0,0,b5bbde82080cff0831a26e4ba24898522a8993d040a57fc6ab0afa65c353767b,2024-11-21T07:52:19.130000
CVE-2023-27098,0,0,2a981ea0f8af934fad7c86fb42d2de8e39c66c337d08337a72d5c602c4b07a5b,2024-11-21T07:52:19.290000
@@ -221001,7 +221722,7 @@ CVE-2023-27121,0,0,af045596d8f6ca5455dc424bc9c25c07b7fe2d491f8715ab4033cd0f1876e
CVE-2023-27126,0,0,35fc7284ec132577512aee82955bceff6609ee899eb30f2c32fa490cd809d87c,2025-01-08T16:15:27.993000
CVE-2023-2713,0,0,694cae7c4482cca62c82db41fe8d786686723088181886401cf7387927edecf9,2024-11-21T07:59:09.097000
CVE-2023-27130,0,0,06f01336b108dc04849f3b5e9bb0b65956704ace7574b369f36c2736344f73d9,2024-11-21T07:52:22.387000
-CVE-2023-27131,0,0,e881c5ced24ba136ac16c86df0eb8291acc060ef6490a70e3b625e6de1cdc682,2024-11-21T07:52:22.527000
+CVE-2023-27131,0,1,ede3ee934e6dc790d2b2c101bd6c84fe0f928e30b09901f7ceff37f8b8a1cc63,2025-02-26T16:15:13.717000
CVE-2023-27132,0,0,a48ad484660cd3a7901a525df0df6fd4171dd4cf0b72c9354d0fa61b5da81553,2024-11-21T07:52:22.660000
CVE-2023-27133,0,0,3727da1ddb4b361c88c42efd4b2b2e1f92d7625b5cd4155c85cfb02c50971edd,2024-11-21T07:52:22.807000
CVE-2023-27135,0,0,b2331f6cd975e72b11e1fcb0b8907a11cd4b75ad94024a26dd916c829603ab9e,2025-02-25T19:15:13.030000
@@ -221383,7 +222104,7 @@ CVE-2023-27567,0,0,360d050fab4e5c8c22c7fdf0f2e6e7fb5030310ba206a0a9d9dcdfc14aa42
CVE-2023-27568,0,0,f5a1403363921ab7fc1cf56bc2c0d0905aeb65a857a163fd7edcf497d05172a0,2025-01-29T21:15:15.063000
CVE-2023-27569,0,0,02fefa352c2019eaedbbabc29cf0f56358688133dc2c1f87297ac6021c892365,2024-11-21T07:53:10.130000
CVE-2023-2757,0,0,a2cd86ad9d8f6d688347ab07eee9989a9090ac17e23e43d191468be0c19893fb,2024-11-21T07:59:13.940000
-CVE-2023-27570,0,0,0a390c98a9b6dd50cc6b2fcbf171b00fb0736db18b9f5ff01029abab30eb8aff,2024-11-21T07:53:10.287000
+CVE-2023-27570,0,1,f15c691218f1f20a9bd3a38ba88f2fb0857403160933fa09cd45968860b108c5,2025-02-26T18:15:12.583000
CVE-2023-27571,0,0,1664d994358801a2e2cc6084d7f67372ed92e7bfc4f7161e3ba1f66590f3a522,2025-02-10T16:15:34.290000
CVE-2023-27572,0,0,13e429f2aaecf4c9aca9a294c0bd171df16f2ce6e26e8cfec3e8388ac5794180,2025-02-10T16:15:34.503000
CVE-2023-27574,0,0,df567f9b89da09129f0cbae1ad637d6f0f78a62f6df3074318157b9b5b0d8889,2024-11-21T07:53:10.753000
@@ -221454,8 +222175,8 @@ CVE-2023-27633,0,0,9596882cde8a91033c70840d4a7f060fdc78db357ed82968af4c28423dabf
CVE-2023-27634,0,0,650374638f0bc63e3675febba5be677c6e9115d4344c29dd2247960a851d55a8,2024-11-21T07:53:18.503000
CVE-2023-27635,0,0,7570faaf95037e88bbfd243d760e242c5b4e564b313fe143f69cc957bd376873,2024-11-21T07:53:18.637000
CVE-2023-27636,0,0,6f60f33851fb60ef626e844875511aae7fdfd14f3d9cae98499bd7070ddb60e1,2024-11-21T07:53:18.780000
-CVE-2023-27637,0,0,e336980e21c9f457fefe8b00c6dda3939956833d62bee8b874a32a047427487e,2024-11-21T07:53:19.030000
-CVE-2023-27638,0,0,f9b8c74c29ed470086db04fe0ea2dc288af15cae523377e09d3050be9363d63c,2024-11-21T07:53:19.187000
+CVE-2023-27637,0,1,0de9fb0d00de1c4d7a997df6600583e40af9e801bdc59d5c8165ee71d7c6239a,2025-02-26T16:15:13.920000
+CVE-2023-27638,0,1,8d8074717eef7105b156dcf8ab5fdd2dda3bdcaeceaf4c0c72384285e2b41369,2025-02-26T16:15:14.150000
CVE-2023-27639,0,0,4e9c0ff551ab50dda013f61fef99e9dd960aea1c6f9e5aefa03c183e7e05a324,2025-01-09T20:15:31.873000
CVE-2023-2764,0,0,b60275bd60dae63771cfc63f6038367441d1d2a394ae81d73e693a63f3a17bc0,2024-11-21T07:59:14.770000
CVE-2023-27640,0,0,942d90eefd00ea0707349532a745b9ab0786557b6735d3ecc97aba150d6ceb39,2025-01-08T21:15:07.413000
@@ -221512,7 +222233,7 @@ CVE-2023-27748,0,0,1d6edfcaa49337a1b2cabad953164db256bd057914b08bb50dadd74ba2ba6
CVE-2023-2775,0,0,cbea37db2293647b042a599336dcab0ec5e76980f5a80d26479ecf6ed1a578f4,2024-11-21T07:59:16.140000
CVE-2023-27751,0,0,b598eb2b96a230fd69cac86dde93885c9a5654e17637716e22c22e3f9baba0d5,2023-11-07T04:10:02.983000
CVE-2023-27752,0,0,6adf0a84e3fe66f88124773064d313db8b29054b4f97804e56c422189369d0be,2023-11-07T04:10:03.027000
-CVE-2023-27754,0,0,5c9c1de0660f6854dbe180fc8816d6fb3e3001aab2ebf71bb2533728b259f95c,2024-11-21T07:53:25.660000
+CVE-2023-27754,0,1,8d11170f4132fcbefd9da514794604d1fb04f34958172617ce1f8598b607a65f,2025-02-26T16:15:14.353000
CVE-2023-27755,0,0,030e4e29a08e32cec80a06cfd9ceed9e6a484ac94095525885308529b6a5215a,2025-02-06T16:15:34.790000
CVE-2023-27757,0,0,2b1c31a8bd90f1ac9fd058810f197194db7cc21789aa13aeb9c645b2425f2f86,2024-11-21T07:53:25.947000
CVE-2023-27759,0,0,7a267de726e4dc42036281eaebf1377a0fe10a0efc081203dc822a1bff303e31,2025-02-14T17:15:14.240000
@@ -221539,10 +222260,10 @@ CVE-2023-27781,0,0,e3fdf1e3961a5e7eac4856a5307c4b879ab7c3221a076c5199e21687df779
CVE-2023-27783,0,0,c549b5cfa267dd07ca6eef3bc4256704095c5b69495cab798a263c4adad4199a,2024-11-21T07:53:28.860000
CVE-2023-27784,0,0,85b03edd09df89ab9c828154298783fb8b8a66d9602653516840cab5544e6256,2024-11-21T07:53:29.020000
CVE-2023-27785,0,0,590d68df9da9bc516c4aabd32d62f6901cc3f0706c22990b57a6c2c2ec88191c,2024-11-21T07:53:29.173000
-CVE-2023-27786,0,0,afad646a6a5b59080ec4f2965d58fe6f9a8de4f18a75f36a0019d3da823a5a55,2024-11-21T07:53:29.320000
-CVE-2023-27787,0,0,1cceb35c2d51237e212f7cf74b81979dd4cfad3ada2daaf89cca420b9f50d7ea,2024-11-21T07:53:29.473000
-CVE-2023-27788,0,0,8946aa7aa1e5538c3ac70adefb32a4dfd4f5a3e4db003c3cd53e1d0a9e9fa59f,2024-11-21T07:53:29.630000
-CVE-2023-27789,0,0,9a88ecc3fc11166b59b39ce2da8feb776552750cb190b700d87bfad9ad7b33e3,2024-11-21T07:53:29.780000
+CVE-2023-27786,0,1,6a60574ff6fdac944f99a83486dcc4e498bd1c634b63266f934248985d352645,2025-02-26T17:15:19.787000
+CVE-2023-27787,0,1,33a48f8f876e81590f52b483bc3787176479de12ba8a55d5f21f1429128c5eb7,2025-02-26T17:15:19.993000
+CVE-2023-27788,0,1,951a9d118abad55eb2bd73d4ff240b5a4cb84e79f57d004e7b76196e7ed2e1ff,2025-02-26T17:15:20.173000
+CVE-2023-27789,0,1,d056a44662cc83f28345cf926460f9a76ae78add4b80734dd7f0757c54501576,2025-02-26T17:15:20.357000
CVE-2023-2779,0,0,ab326e0aff9a0861db4d81a6bf058192f8d749d734dd10836bf55ab52b765f19,2024-12-12T22:15:06.780000
CVE-2023-27791,0,0,fd9b2f23cd2d47941a2914b907d2a8a143912d7ea14f8dca16a6928a5ed21b5f,2024-11-21T07:53:29.940000
CVE-2023-27792,0,0,771f484a85298382aaad02856e48f5e7b9abab26ca06baee895aa2c6d04004d8,2024-11-21T07:53:30.100000
@@ -221570,7 +222291,7 @@ CVE-2023-27830,0,0,08433043b476c28647ae95fc537d643478ed4a149dac6b513d7f1f8205b62
CVE-2023-27836,0,0,e570ef98939da4780bfb99b46bb9aa7a73a3d5992a3a95011a96e45e50ba6087,2025-01-06T16:15:26.730000
CVE-2023-27837,0,0,09ca7af765c2ff6927776c1eecc7d27a9e98a3793e382e704f3567fa1aeeb314,2025-01-03T21:15:11.333000
CVE-2023-2784,0,0,3beb45ba8d37afa28c5b710c953916c9a0cc09ed1f3ea22bda898c6b758d70ca,2024-11-21T07:59:17.050000
-CVE-2023-27842,0,0,ff4319ffbaa6389afa0396471ae6b5a71fce4f1fe6e68640710e37a063b03c1c,2024-11-21T07:53:33.280000
+CVE-2023-27842,0,1,f372ee4b143d8b41665ee705a9f21667a37ea0f4d0f38d5be3a1b709be9da886,2025-02-26T18:15:12.810000
CVE-2023-27843,0,0,e581568ce25fbecaed7391f9196e990bee2c3d9614523ec2b5f36b1ed39fc6f3,2025-02-03T20:15:30.890000
CVE-2023-27844,0,0,6a467843d4ddc20cb4a689e95c3d3c21e1663d935d53d05c04d846b778ca9e1d,2025-02-06T16:15:34.993000
CVE-2023-27845,0,0,e777b579d76cec52bb5b019a8f229f789ae039687ebb3010325b3e376a4defbc,2024-11-21T07:53:33.737000
@@ -221603,7 +222324,7 @@ CVE-2023-27870,0,0,5a93ef538c76ad72b85487f58b0c0be0eb4b47e5f50c65604bcdbec5a3204
CVE-2023-27871,0,0,fbbfbb56455ea9f12c530d424d42467bff8b11a81c40f902efe3413869d94a8b,2025-02-25T20:15:32.610000
CVE-2023-27873,0,0,b31b1d8677b8e850135ecaa71dd7d112f59b0e81c5ddcce14b855c8ba08f5f95,2024-11-21T07:53:36.910000
CVE-2023-27874,0,0,0463bc709b1afe4b00211e6eff9a08d11e494f4b25c1a468020d0c4ff2d7a5a8,2024-11-21T07:53:37.033000
-CVE-2023-27875,0,0,d836b02936bcf7e7e8900e84a05e64c6d618fdaa90a236459817f16e7f8f5094,2024-11-21T07:53:37.153000
+CVE-2023-27875,0,1,7f0d557575c2b165cc9b57744ed6c539309d61c64b660b58498bf6802da15550,2025-02-26T15:15:19.580000
CVE-2023-27876,0,0,689addb1aef747f5498bd82316472d21744b648e10126c9f432379937453e126,2024-11-21T07:53:37.280000
CVE-2023-27877,0,0,84614afc892d06fad397c609dbe0d0d47384180832d3d5769e2dd0cc0d967b59,2024-11-21T07:53:37.403000
CVE-2023-27879,0,0,ac2d39ae0cc701192e9c1860d54eb5dea20ecacfa79bf99e3a82d7d903c4b8f1,2024-11-21T07:53:37.537000
@@ -222334,7 +223055,7 @@ CVE-2023-28606,0,0,eb8cadd4cc0bb344dd056dff59a2f7820cd9193b85d62091a3dcbddec4bb4
CVE-2023-28607,0,0,ad086174c50fc01b81fbfca7790e1206177a95de58d3382b1eadc186e40cd058,2024-11-21T07:55:39.633000
CVE-2023-28609,0,0,6068ffa294f0e6988b397514c8fd2573e93b3c10500455957d1cc6e1bf0d993d,2024-11-21T07:55:39.767000
CVE-2023-2861,0,0,5885773add24eeeeb895e4720bb2c617dd810e24ef56cf1984238fc1f67f8232,2024-11-21T07:59:26.520000
-CVE-2023-28610,0,0,c2832eb1faa4149d061e300eb0948f619f22b052134b20690add0fdfadafb610,2024-11-21T07:55:39.907000
+CVE-2023-28610,0,1,9e637fc0f31f9f5f6926681261d51bf431361189c209cb23713a8a4179189ce8,2025-02-26T15:15:19.780000
CVE-2023-28611,0,0,9825574aa74254e5205640cc1b664d840b00e699dd5036ed070afc0d272755c9,2025-02-25T20:15:32.780000
CVE-2023-28613,0,0,fb1c18281369a97704e4af5d25363e5fd4eb5679b03d28d04efe72a8e355aa0b,2025-02-13T17:16:15.820000
CVE-2023-28614,0,0,a79c9160086d25f6f418422eb38f200c673459ec375f8064cd814162a1ca0b52,2024-11-21T07:55:40.330000
@@ -222410,7 +223131,7 @@ CVE-2023-28681,0,0,1be2dbc07b1f323ac85fc4fa5c211b386ea8b128ac137817a75d4214f8d92
CVE-2023-28682,0,0,d65b34103244697b854c6a160d132adc49424b50648a31ef362edf1f30db2520,2025-02-25T19:15:14.060000
CVE-2023-28683,0,0,bf56f73ac3376691a41c3ba0b05d8d66ab0e836e852cd7d6e07e04bae6e9a810,2025-02-21T16:15:31.807000
CVE-2023-28684,0,0,3d5ef9444463524f57fde213fef9f58c5bf57ade30cb16ffb0ec868310dbee5b,2025-02-20T22:15:30.487000
-CVE-2023-28685,0,0,658083785298e53ddf6aa90648b9d44e88c968a84e6bb685839c5265a01391fd,2024-11-21T07:55:48.230000
+CVE-2023-28685,0,1,4f00181258ab7a679c91ebdcd7eb9278869561584137295688990525e663b462,2025-02-26T17:15:20.640000
CVE-2023-28686,0,0,ad1c64a874f05e7a4b6092d7d1962734d7835d50862e6e2d1722875a373bf303,2025-02-19T22:15:16.367000
CVE-2023-28687,0,0,ceefbdbe598543b06473759f72008a6c46fc5a0e006e0d46fc9ec6c79c82ff45,2024-11-21T07:55:48.500000
CVE-2023-28688,0,0,cd7b143cea73ab0ceb97912669e0bb889aef5ecd6e1e7e361f265c0c3d8fe49e,2024-12-09T13:15:26.370000
@@ -222450,7 +223171,7 @@ CVE-2023-28720,0,0,ac09d331d5cfd20938bb7223dd423e76cc8964f995f8c7729deac6115c29c
CVE-2023-28722,0,0,0197cba368cfa8b5f792e3f581bf72641d1d1d543c23749ec06924490cb0c8c0,2024-11-21T07:55:52.330000
CVE-2023-28723,0,0,7b254bb302fbb257f66674f78765f98e600565c72f7d162513acd5e3c9ee4af5,2024-11-21T07:55:52.463000
CVE-2023-28724,0,0,44bcf68e1f19fad54575ed7fbf7d55ba86a0066f726af5bd34c7c502eea49c66,2025-02-13T17:16:16.667000
-CVE-2023-28725,0,0,0fa27e0548bbbb90f2e5f5eb34d47caf7e8ade76cd43b6a37bba438346c0424d,2024-11-21T07:55:52.713000
+CVE-2023-28725,0,1,90a5d3a1482dec07d626fa4f3ea2ac41ee59a4f80376afdfc8d0dc6db4596fcc,2025-02-26T17:15:20.810000
CVE-2023-28726,0,0,4560c129a70424e59a9e0ec9144c7f21498c12307fd7f20d442d10065e14a6c7,2025-02-12T15:15:11.567000
CVE-2023-28727,0,0,78378bb9aa3aaf6db5bf3c0ec59fefff29006f7f3848c76556bc4caf615c2e86,2025-02-12T15:15:11.747000
CVE-2023-28728,0,0,877a20ac4146bd2c6f7a990ad91e5f70e2fa07084297c678d945a8a8c485ba15,2024-11-21T07:55:53.123000
@@ -224446,7 +225167,7 @@ CVE-2023-3133,0,0,d5f1746339c07f99a99e4b5aaafc3808f2efda9bbec532dbbbe65cdc1103d1
CVE-2023-31331,0,0,6c1c93160bdc5f8bdc11956d4ff37249b2ec87530252b52fe8036c2466a22cdc,2025-02-11T22:15:26.643000
CVE-2023-31339,0,0,55016df2b1f62c6b4660412aa764fde8ebdeabe77b5e76cdf782b4574058e985,2024-11-27T15:55:02.843000
CVE-2023-3134,0,0,b41055d7bc0dc4c054369608e6a2b8131a42873b85a487dd8d397c15935034b8,2024-11-21T08:16:32.053000
-CVE-2023-31341,0,0,4d30d8bcca3cc5a6fb3cb512a407b048c8089f2e2668f1d6af1cd5e924a75c8b,2024-12-13T16:22:04.967000
+CVE-2023-31341,0,1,d2d64a0cad78f97cb0402ef9ed7de90448bd7ac62373363912041ec7bcda1df1,2025-02-26T07:14:52.160000
CVE-2023-31342,0,0,5581e3315f33565e8d198caec32b7360c07b3e58671ddf96ad9d3ca7b9eb8c8a,2025-02-11T23:15:08.277000
CVE-2023-31343,0,0,2ab04ccb78f7e1e3d9f869c51605ee5df970c39ab608cd9f72b408d759a1a64a,2025-02-11T23:15:08.407000
CVE-2023-31345,0,0,18975085e4d02ffd41c901d1c9c65360a4abdefba85a72a0bfab3961b666d456,2025-02-12T00:15:08.003000
@@ -229158,7 +229879,7 @@ CVE-2023-37538,0,0,7414a3e037b0a5e442b9050dfeb3fa8db1c810e5dbe300ededfe889aa96f3
CVE-2023-37539,0,0,064c589038998efb579598afaddbc24901f3347c04b6d935d10e59eb6c6513f9,2024-11-21T08:11:53.703000
CVE-2023-3754,0,0,4b326e12dfe6122b76ecd8c7711cc61d410af237af0cb17639fd73eb4f9fa4f4,2024-11-21T08:17:59.297000
CVE-2023-37540,0,0,3c6799f76c6051093c99b54f7df7198740dc5d7484c7d9fda8e53d1a8134262c,2024-11-29T16:15:07.357000
-CVE-2023-37541,0,1,dd6853845245f0d55dae3297be3ab00258b3c1ab984d577cbeea23da00d97373,2025-02-26T00:15:10.740000
+CVE-2023-37541,0,0,dd6853845245f0d55dae3297be3ab00258b3c1ab984d577cbeea23da00d97373,2025-02-26T00:15:10.740000
CVE-2023-37543,0,0,eeee2bb60025b83c75108c241fb5105e6f2fd29b1d03e0fba80aec176cb7674a,2024-11-21T08:11:54.123000
CVE-2023-37544,0,0,d9c0d990e26d9532f1b44ecd12ccdde5d772f5cf2c13e45660d9601c731d37e1,2024-11-21T08:11:54.283000
CVE-2023-37545,0,0,e0ec6c115a20f275e6579a0dcabe86df5b74790ef39a156e5b62e01f4cbfb841,2024-11-21T08:11:54.430000
@@ -229683,7 +230404,7 @@ CVE-2023-38175,0,0,ef1c8529b3657e2f66fcf0c37f671b4b6edc91494a166816094eac680db4d
CVE-2023-38176,0,0,3fdc33ad178160a5c99abc1a3ac59e3e73fc42e8ab098f2163e13646e62e3b2c,2024-11-21T08:13:01.133000
CVE-2023-38177,0,0,730bcd01c82a54192a212d95053de3fec2969268787436a461567cb09272c10c,2024-11-21T08:13:01.270000
CVE-2023-38178,0,0,7c75f8662268ca89daf277bec3375208706881a79c0c88533a7f4fd2922ae19d,2024-11-21T08:13:01.407000
-CVE-2023-38180,0,0,612b1911c52ea2f062593ceee33894f7388f3480d0937f708bb9306a34879190,2025-01-23T18:53:11.033000
+CVE-2023-38180,0,1,7523d2c869c4ef7450617cdc50a46fdba4769848e232d1fb6bc5f1f64d628371,2025-02-26T17:15:21.023000
CVE-2023-38181,0,0,5a8b679495a586462dbde9c3056012cf04f2dc6c5625ddc2c0a5b368831d71af,2024-11-21T08:13:01.720000
CVE-2023-38182,0,0,4d4a59af220c252b63fea8ea60f7e53085011cf3820ea3ee0c3d6c02139ee575,2024-11-21T08:13:01.853000
CVE-2023-38184,0,0,8041243a4a2b4032f9464c8d84f0fc87c8a2d1f56ecf4620773160e63efc0f4a,2024-11-21T08:13:01.980000
@@ -233659,7 +234380,7 @@ CVE-2023-43203,0,0,c5f43f330a0aa47742da601ce3685bd755f7f7d9ab6ebb64781eb13ff1399
CVE-2023-43204,0,0,405e036bb3184a7a179a9c4f21ed6c5f9f1635df31afbf5874dc0d62b27b1663,2024-11-21T08:23:49.803000
CVE-2023-43206,0,0,91374bcbd7fa94046c0e01ed4ab2af8ccb38a6185b4d6cce69be85defa8f3e40,2024-11-21T08:23:50.030000
CVE-2023-43207,0,0,73bef3fa73b1104259ad40cd7fc06db4d20cce747ffc2532e824570b3f5f0958,2024-11-21T08:23:50.253000
-CVE-2023-43208,0,0,10ff2c3fa5ebbc08b8c1f48bbaddae7b36de320bf7570650b531f3d7a92ff431,2024-12-20T17:41:47.143000
+CVE-2023-43208,0,1,a0a19bd49bce72bea4b3240a7040c1b94c45404f6af592234f46080190ecc20b,2025-02-26T17:15:21.213000
CVE-2023-4321,0,0,085e1cbb7abaeb38d420ac3b379575bc4b47d6929c3ff2b92bda924e6306d7c8,2024-11-21T08:34:51.040000
CVE-2023-43216,0,0,36f34093c9a1885a067dfd71b90fec85477364023b8581b3e15ae8b97b27ff81,2024-11-21T08:23:50.697000
CVE-2023-4322,0,0,1532a8b57387d09ae4c94e72d6fbfa510e33b1660215708f14716f6493a97a7a,2024-11-21T08:34:51.173000
@@ -238386,7 +239107,7 @@ CVE-2023-49780,0,0,c6de505a2c82852b714e9ddbd98df62b117ecf9e9e227b1280e542311bff4
CVE-2023-49781,0,0,3563f4405dfa96098f4f59027cce7c23b059b81f69ad6687b4bbd7d42605bb73,2024-11-21T08:33:50.010000
CVE-2023-49782,0,0,d88bb5846ccf235986a34db8ee7ec2e7c4f993cc0c87f8a5d3589de125363ba3,2024-11-21T08:33:50.137000
CVE-2023-49783,0,0,cd66debb4e559f3c84e5128cc8085a7de9859741fad8a54e1384a18a6f8b2960,2024-11-21T08:33:50.277000
-CVE-2023-49785,0,0,6a27bf7e6c2bf12b444b9e08cac0945a8bac1385f7860dd01d86b99a53fb6603,2024-11-21T08:33:50.407000
+CVE-2023-49785,0,1,c9df0d9085234e527d39975a2cd162c871096449bb6ad7bc6fbd3878d0049fc6,2025-02-26T15:15:08.143000
CVE-2023-49786,0,0,20b439200195914831c35a759573e1e6db52a706eab293af8b2d3497d57412ec,2024-11-21T08:33:50.533000
CVE-2023-49787,0,0,b20de0bfd533e3acdd26aa09fc198295c363ed210589c620b78d3626a0d5abca,2023-12-07T18:15:08.447000
CVE-2023-49788,0,0,613111abec7fc93778b1b146211d273f909dc18edfa3a74a048fe3e2dc7a23a9,2024-11-21T08:33:50.700000
@@ -238764,7 +239485,7 @@ CVE-2023-50309,0,0,3710913107524245e5271ccebac144284551995d27b55911d0ad98d408e70
CVE-2023-5031,0,0,c15eb3bf24311ad5ba1ff97f455276e30339f2370acbcbb30160cc9662735c68,2024-11-21T08:40:55.833000
CVE-2023-50310,0,0,ee63583edc72c7bb2dd2fbd446b3bacc51b87b3209164901da3eca6b0c813dde,2024-11-05T16:40:57.533000
CVE-2023-50311,0,0,bfcc9d072f5a2d893dd33392360fe36f36ce6d9885fb951e98233624c4f9ba2b,2024-11-21T08:36:50.263000
-CVE-2023-50312,0,0,027067cd6f90ddc1edb0fd700b8d6cc6de4744104a57dbc20cf5afab309334f7,2024-11-21T08:36:50.413000
+CVE-2023-50312,0,1,1e67563904324223fd079dcc66d3aab87e6451abcc03afbf697386cae3c09a79,2025-02-26T15:14:55.753000
CVE-2023-50313,0,0,a83e416401577e94df6dfe4b1b998ddd0a8952164aaa6f5ea90e36bebd23e193,2024-11-21T08:36:50.540000
CVE-2023-50314,0,0,ce35340ffb0568ccdcb723e50bf9507ce76dc59cc4416bfa4739778b544bd02c,2024-08-23T19:20:22.473000
CVE-2023-50315,0,0,625341a76fda8905bc70b73219527e00e0b32c20581d112bacaee69e8b51c52a,2024-09-11T13:38:26.370000
@@ -241530,7 +242251,7 @@ CVE-2023-6086,0,0,79b3b4c704d4eae97b6eb567c7e900f85bf470813ab3e2a766b4fec4328609
CVE-2023-6087,0,0,c95a3f15a49185dd173f192494c330c6542c10e6856126500bd668b5e636f1b0,2023-11-14T00:15:08.983000
CVE-2023-6088,0,0,1593e247b5c0e107895d2cbacbbc62dced25f2ce8e8a32dd4c327d873d7ba928,2023-11-14T00:15:09.027000
CVE-2023-6089,0,0,6f90a4364e51fa81b88ac137b96caedddf365534fc1b7e3c574c7e088dfe560b,2023-11-14T00:15:09.073000
-CVE-2023-6090,0,0,dcb7365c43afb48932854bbd8d6cd5e54282c729136d407b908a7423f07631d1,2024-11-21T08:43:06.953000
+CVE-2023-6090,0,1,768ba70b5a162dcedaecef853710003e8d872a15aa0173132cd46605ab2e3daa,2025-02-26T15:14:55.753000
CVE-2023-6091,0,0,55bf28cffcfc1919e2457bd840d7327a8fae6aef9819c2501da294c7632a5297,2024-11-21T08:43:07.070000
CVE-2023-6092,0,0,bfe88f017f7890c71c9895ad0ac41fde23dbce7447a9c924d23f115a4eebc354,2023-11-14T00:15:09.117000
CVE-2023-6093,0,0,cf81a8f48b0d76a12f0693698c30f44c6645c7bc1929eb05955703beabdfc53f,2024-11-21T08:43:07.250000
@@ -242415,7 +243136,7 @@ CVE-2023-7077,0,0,20a538ff690ee7669a6b7becf4d527d8c10e60b9150e28ffac2a747a00df33
CVE-2023-7078,0,0,f7d7fe7655b5566666f340379eb2eacc725fc271aad9069efc986b62c2b4df19,2024-11-21T08:45:12.253000
CVE-2023-7079,0,0,46c393c570993abb391f057750b5f3d862f3a7268c200e5fdd089347f6f96ee5,2024-11-21T08:45:12.460000
CVE-2023-7080,0,0,0dedea4579e0ebdb20487dc410d73c81f344d084a8525a398527f331a9f27e4d,2024-11-21T08:45:12.610000
-CVE-2023-7081,0,0,2fe4490705f8e9ecee063bc4d822f9a7e1295d07a32ac6286c362765558d2e7b,2025-01-23T16:53:04.707000
+CVE-2023-7081,0,1,cbaa9786d6ad482915b5f22bfbcb479ed5078e23977a450744b2c7e5c413ed38,2025-02-26T07:32:59.377000
CVE-2023-7082,0,0,01da1b16e99cb894b19b28e654f0eb0d1f946ad3cc9cf73b506a5d550a9446db,2024-11-21T08:45:12.920000
CVE-2023-7083,0,0,c5aa53dbff112a3d086d0b26f297d981e1f6ee6c887d1ac2941e9a37a179680a,2024-11-21T08:45:13.047000
CVE-2023-7084,0,0,d9889df429199caea86387e661e3ff9a19490ddaa4c78a76e3ed6d89055dc2e5,2024-11-21T08:45:13.180000
@@ -243653,6 +244374,7 @@ CVE-2024-10148,0,0,db0d5db25a1f49f9ba7e42a06491994c37a2b37e9a76e3ae4cc30f2bbf70e
CVE-2024-1015,0,0,be928180cb003f6a5eec5ab2bae4726bcad9bf29373863ff5830478d50997929,2025-01-03T19:15:53.587000
CVE-2024-10150,0,0,fac5f7de9492af33015847edbbaf4e66b672db3781dc50dc161c61d03c3e187d,2024-11-05T17:47:35.353000
CVE-2024-10151,0,0,196e4fe4a8a05e0a3b22ed32baf3158e628b58ccada6bd06daf1c3495376c183,2025-01-08T16:15:33.753000
+CVE-2024-10152,1,1,2f35e1b91aaabc072a1f101140d7a0909974b52b780336ef45503dc46241515c,2025-02-26T17:15:21.417000
CVE-2024-10153,0,0,205337601504c6a6060c88aa213139cbdb5096813b7204f786c736b1a09bbbe9,2024-10-22T14:45:04.670000
CVE-2024-10154,0,0,8bc22a596ba6d08db60619a5118141d0b00a385670008138b09554e9c573f4a2,2024-10-22T14:44:47.807000
CVE-2024-10155,0,0,542e5dfc2b62b1a1ca578686c2a8ae79931c9e86cdbac20993e8c86f6a9756d8,2024-10-22T14:43:42.607000
@@ -243951,6 +244673,7 @@ CVE-2024-10479,0,0,bb6056ed6045f25ab06ecb5035985b3a7787a7a52ca2a55b79580b99bc238
CVE-2024-1048,0,0,54e99ba5d606327e8cd421651df7663c241b0b270ee508d9aa21b93e6a9e6b78,2024-11-21T08:49:40.727000
CVE-2024-10480,0,0,7894126f69863ebba896673129291ae9eff10c4fb83c9a1fac904578f4cb0c65,2024-12-06T16:15:19.917000
CVE-2024-10482,0,0,013e4e3e7c5efcb95927d9e3afa178ce62a1a2e48695c55ee7ee215f26d9fb38,2024-11-22T00:15:04.100000
+CVE-2024-10483,1,1,42012828119da2475b1b28d50b50faf8c1f084fcc2575a093c8947f51162b93e,2025-02-26T17:15:21.570000
CVE-2024-10484,0,0,32383c32bab139165d502eb87b607c0e91c14ee68b6619e8eae708d878fe5bee,2025-02-07T17:14:07.230000
CVE-2024-10486,0,0,a09948eabf8cf605227a081403b7e15d5d2e278cefd9b515ecda82689c86d786,2024-11-19T21:57:32.967000
CVE-2024-10487,0,0,6432070ca0d8b9d5f61bfa9588afb65704f780affb8c7aeb91dd110781a88251,2025-01-02T18:08:38.297000
@@ -244026,6 +244749,7 @@ CVE-2024-10559,0,0,16e3eab9e781d1e16f0d045b8d1d79bfb09e11f3fa816a22b4936c2b8431f
CVE-2024-1056,0,0,af182e17efd4af1cb9d6458d1d7d67974a36b702d2e517ba61380bf6c671d68a,2024-09-19T22:06:32.340000
CVE-2024-10561,0,0,2bfd240be58df048fbf99413f7d4286366df5405b43b9b75120456be9297f833,2024-11-01T20:42:12.303000
CVE-2024-10562,0,0,797cf6d554ba2a4f7d13cc51d352a15019c8c3fe24a53e57cef8fc7c31733023,2025-01-07T17:15:17.290000
+CVE-2024-10563,1,1,dbfb0908536eea73ad40ef356b8b1f76fc217bd9b3c42e13a6abcbb3d7586541,2025-02-26T15:15:20.480000
CVE-2024-10567,0,0,a04d3f3d999e2b2d50068629e658949590c474642a1d298fb74a13508e02b197,2024-12-04T09:15:04.177000
CVE-2024-10568,0,0,29a6369be6bdec3fac3a49600567225eff324bd19cbe3ade1e99b53075e8cfa9,2024-12-12T16:15:11.250000
CVE-2024-1057,0,0,82d074eff87805c0c8af6f292d67be991df4f6c4e8e298eece318c63dbd97000,2024-11-21T08:49:41.890000
@@ -244044,7 +244768,7 @@ CVE-2024-10581,0,0,3eb917e4202d114b3cd9bf3a8fd8b7d861ecd916ba77d2195a44415e7debc
CVE-2024-10582,0,0,081ced1e3bee3a0a102c94bdff81bc48301372e830a54bd85e35429dcce93b3b,2024-11-19T21:17:53.003000
CVE-2024-10583,0,0,2dd8fa86d783214098b78ecf15207bb297f91c4a4766bbf054ba7ce346e63980,2024-12-12T07:15:05.570000
CVE-2024-10584,0,0,884bde099e6baaab8d72bf2690b23c625dcbcb424035217f134401aa3c174ba2,2024-12-24T11:15:05.670000
-CVE-2024-10585,0,0,f12d435804fa4de7aca87596b57c1b0c6052cb4bfeb9c890d3a2babcd12f0d7c,2025-01-08T06:15:15.677000
+CVE-2024-10585,0,1,6031042f817005ec3272bd812362e564bbe2371ee1019c4e7c3f8d237faa3492,2025-02-26T18:25:29.120000
CVE-2024-10586,0,0,b69dc43541a3d4ba79cbec846432fae4b52e3fc26bdbf2ae2d19921cf034fb0f,2024-11-12T13:56:54.483000
CVE-2024-10587,0,0,d6724952982058693533d93eda32abe5adf3dfced7d03365b0a9849e1c3651d6,2024-12-04T03:15:04.037000
CVE-2024-10588,0,0,abb174590e2c3805aae308cc65206f91b43bf77d5c69f89364fb1f1e9e31b3d2,2024-11-12T13:56:24.513000
@@ -245432,11 +246156,11 @@ CVE-2024-12079,0,0,301562924271689dbbf595c94dafe06c29eb0c24d9afbe7bae87f18cd9fa7
CVE-2024-1208,0,0,3c4b0e7895c1837530e812c9d592f58958b18ef870d236a49969dfb3f5e669a9,2024-11-21T08:50:02.590000
CVE-2024-12082,0,0,d67c450c190c0364d4b144dcd382bc569f8e4f4f12ff2a960005828e083c85c7,2024-12-11T17:12:56.793000
CVE-2024-12083,0,0,d43543ed1a2c4c8cfbaff70b85f71ffc7dc15514475ec8e8bc46a80ffd753fb3,2025-01-14T01:15:09.267000
-CVE-2024-12084,0,0,85dd725fc2f0b24c79e999378b1f0199fad5fe5d164b31609c57a84bcb434c0d,2025-01-15T15:15:10.537000
-CVE-2024-12085,0,0,67fdfa20fbc72d2e5c3e038e652f70163c0ce386ae0b44889b10daa3d6194e20,2025-02-20T00:15:19.130000
-CVE-2024-12086,0,0,e5130c03152639985c3e2f822b45f241716bd573825b1ce309364a23fc10467b,2025-01-14T22:15:26.370000
-CVE-2024-12087,0,0,083db16c2a7b9baa1b397fd2cd269bff2aa8f7c2646d1851d134f1f8a052e34a,2025-01-14T22:15:26.503000
-CVE-2024-12088,0,0,43a2123ff1daddac120d556957600405449568b28a84ca944004ee72fa7fff31,2025-02-10T12:15:28.537000
+CVE-2024-12084,0,1,09f03b9789ff761106bb1f3be0d03a40a943d9b32f44fa2457c69ada372f11ea,2025-02-26T14:15:10.473000
+CVE-2024-12085,0,1,a26c674a2ee75c06843a39f7d7fc7c1d719143bc404b993b02db8dda47ca8141,2025-02-26T15:15:20.790000
+CVE-2024-12086,0,1,eddb6eda122eaf0dac2b18ce83df4e5fbbd9d253ae3afef485d18d17f7300647,2025-02-26T15:15:21.020000
+CVE-2024-12087,0,1,356c1c83ddab7432222e0e7b9cf68a9947336514f9d4819aca0b6660c9f7f918,2025-02-26T15:15:21.137000
+CVE-2024-12088,0,1,5de5522e1c5994069083df43aa98684503a6cd5536902d1b0e828e78682b8730,2025-02-26T15:15:22.257000
CVE-2024-12089,0,0,e4693d0f49f7bcd8f49a3c46cbf99b45117c9aeb9696a4344a79bacac3eaba78,2024-12-16T15:15:06.250000
CVE-2024-1209,0,0,0c11632b4f799f8334de1fe031a18ed75abc1306137789706f83e79036cdbf29,2024-11-21T08:50:02.720000
CVE-2024-12090,0,0,3ae49935c044b86a3444ecb09701dd060f603a46c2ce1e27c4f8226f9377436d,2024-12-16T15:15:06.393000
@@ -245753,6 +246477,7 @@ CVE-2024-12429,0,0,e6d5ff5cfceb2f61c0ef11c8f30168015114d1365dea8b766c339e4109cab
CVE-2024-12430,0,0,0c8a563bb6bc403b10276a981acccd2883fb8e64f72cd343170d116fbae88cc4,2025-01-07T17:15:20.703000
CVE-2024-12431,0,0,5644edd69c348df2239cdc93e705cfed1755dba38cc5e3639c6fa22724a9f624,2025-01-08T21:15:11.760000
CVE-2024-12432,0,0,3d67b932349f6253a91fa970f1501aba586896a462aba17731bbe90a2499433d,2024-12-18T04:15:07.947000
+CVE-2024-12434,1,1,918353462e408922bf27d17f272a3da3fb83c740335725254fd8b90f2756d6d0,2025-02-26T13:15:36.353000
CVE-2024-12435,0,0,65c9febfd7a98604817f1773ea0e55d32e0aa4a74e94909e5aac719a650b91da,2025-01-07T05:15:18.887000
CVE-2024-12436,0,0,704b432cc1e2593602ae5eed271ad65ad5503f2c447d8158b7293302d68a646c,2025-01-27T20:15:31.910000
CVE-2024-12437,0,0,eee25a62335cf81a7c9a591afa711efa0cfca8bc43291f7331a8326f931a6036,2025-01-07T07:15:27.127000
@@ -246013,6 +246738,7 @@ CVE-2024-12729,0,0,48b3a23ce4e01eb74edff0cd115d9897f3f81428607bbc5ad97846c1af686
CVE-2024-1273,0,0,e8464b176bd39036e0f45e4b49d8110f84d3d3960c826bc9710c36200b4f5e6c,2024-11-21T08:50:12.557000
CVE-2024-12731,0,0,9ead76fed676036ea4435e20b944f4e5fd453782f229b14d9e0b35b47567c8dd,2025-01-09T16:15:36.527000
CVE-2024-12736,0,0,27dc2dca8ca80ab2c2f7728100c1c2ef462b0b1d9d1f7583591ae4131d8f4fb2,2025-01-09T16:15:36.680000
+CVE-2024-12737,1,1,74c645455088cda0b59b1ae69721c9833b05ff1b5b9e22056fd94488fc9c7f7f,2025-02-26T15:15:22.363000
CVE-2024-12738,0,0,0cee8c1793928a32af812059d0c46039bd10d2c94f791e505cd74a43ef658897,2025-01-07T13:15:07.357000
CVE-2024-1274,0,0,8b1ee7c9f6e7817a23a525a715cd0c1ef18c567c26c711e49e1e872df04cda9a,2024-11-21T08:50:12.730000
CVE-2024-12740,0,0,d1f7b0e159048eab07c086b87ff3beb50da5cdaeb6b6619ea512fee242b3d025,2025-01-27T18:15:36.743000
@@ -246042,7 +246768,7 @@ CVE-2024-12773,0,0,4a158210ce8f04e63a0cc5644404dce0edf638a1d39d2ff2dbf8f403280ec
CVE-2024-12774,0,0,a5018f9b8a1ed4e5ce72ea8a47b3a7028c7d128473c99e738a64f122822c050a,2025-01-27T15:15:09.803000
CVE-2024-1278,0,0,5fc68c762fc836b6c12a71eed788de7c0888610c449a9d12f31cc3647bf88af1,2025-01-29T16:26:48.717000
CVE-2024-12781,0,0,c74d8fa49d4e1ce3b752d35981d8b052a93e3f1d0fb27ff932f88f085f9b3bc6,2025-01-07T07:15:27.937000
-CVE-2024-12782,0,0,a220a59df3c04cfe812d51b3c5d226e092dd063fd83863ac7ea9515a10725c6a,2024-12-27T08:15:04.917000
+CVE-2024-12782,0,1,d8065d428aa6599988d24c66267c84db49c8abf572d1cdac4e79b2345a1a4bdf,2025-02-26T16:15:14.653000
CVE-2024-12783,0,0,1cbf05ea91cf262fc7ff861feed31dbe6250d2c08bd8ebca814337722a82f119,2025-01-10T21:26:40.627000
CVE-2024-12784,0,0,16a1647cb8b6a8b723facb6fac58d6bd338129da42378715684c47157df977b2,2025-02-11T15:03:54.250000
CVE-2024-12785,0,0,f237e43081c01ed50416da96588e0c5c37314200a5fa658b44c6f12aeace42a0,2025-02-07T14:58:01.530000
@@ -246116,6 +246842,7 @@ CVE-2024-1287,0,0,86cfcf8ed68830eef8991c1cc47e2012e7e4c97ca8a27598ab8fa2741ba6d8
CVE-2024-12872,0,0,ef2adea83c4dcced92604feb28ab9bdd7144986700cdccc2c5054cc997ad5b7c,2025-01-31T17:15:12.103000
CVE-2024-12875,0,0,87b0956586183e5c613030d4ef29fd959e1646cc803bd99da499c5b331518d7b,2025-02-07T17:09:37.010000
CVE-2024-12877,0,0,1888c35ba77d5a377e4b45354716e40dd6bfa1aa3f5f5b568834841a45c1fee2,2025-02-25T15:53:19.030000
+CVE-2024-12878,1,1,a2f8cb8c4f49d13625b56cf0fdbc12c4b84fd89b9fe0c47154aa8447575cfb69,2025-02-26T16:15:14.863000
CVE-2024-12879,0,0,a421a5e4db3a04db3d207087595051348d7d155e9057f63ac7b875e4bac6c451,2025-01-24T18:07:31.260000
CVE-2024-1288,0,0,395f2de724425f73212a7bc39e91c09ee4289c7b4882341dd1ed370b6c884fd8,2024-11-21T08:50:14.440000
CVE-2024-12881,0,0,ca1a79d9bb91f6e4db066c4e6e2534703ac042b68f8ca082fdad0b99821d0028,2024-12-24T10:15:06.240000
@@ -246234,7 +246961,7 @@ CVE-2024-13005,0,0,a93d14725b8733b023cc4f0054d69d9c26a873568dd24f4d8b584a7e84f36
CVE-2024-13006,0,0,1356bf5bce7e08688b7d6d404600118125022b23b3dce04193c782d0f5e448c2,2024-12-29T08:15:06.840000
CVE-2024-13007,0,0,2d39b9e0dd6618c030f90abf5840113fe16df89c7b9037f68794235209d0d3bd,2025-02-25T22:46:39.787000
CVE-2024-13008,0,0,6a6f52390bde7b06e8cc617e512df4739afb2e627a1613a768a2c09fd1e6605c,2025-02-25T21:24:58.743000
-CVE-2024-1301,0,0,a82904378c141da107f996cbfc3663893c64b71f2f3d06fe2a7b32b9cc0bfa85,2024-11-21T08:50:16.340000
+CVE-2024-1301,0,1,dca00dae68907d01e9f631823737af9f09934ad1d99a379f5032e6fd6ca64c2d,2025-02-26T15:15:08.143000
CVE-2024-13010,0,0,6128af853809df81eee18f8a73cc49e9b80723ec8e3b72221c6cf24311d0db40,2025-02-10T19:15:37.283000
CVE-2024-13011,0,0,362d1d0e4eaef25be8bfac936a6d705b5bfeabc389aabfe60750090901182522,2025-02-10T19:15:37.440000
CVE-2024-13012,0,0,1d231ce471a8cf14a114e2ff543c22cef656416204d4cd3d6f5ad4910c0298f7,2025-02-18T18:53:25.830000
@@ -246245,7 +246972,7 @@ CVE-2024-13016,0,0,d3e38d4e604349f86a95775ee7651624f21fe968af811f25bdf276d50ec69
CVE-2024-13017,0,0,300e74b69c9d3e56889e0a425814d564e2918369489e8443860ba21cab94c7b4,2025-02-18T19:11:07.713000
CVE-2024-13018,0,0,49a4477bdab5f4c3dfd8ac567a0a9290c812446c8c62e9b2d62a7671cc3dc61a,2025-02-18T19:09:03.693000
CVE-2024-13019,0,0,e5ad88c269caf1eda2c0e433efd9e16af60c4b48a53789c861cfcc6c1818d7d6,2024-12-30T19:15:06.847000
-CVE-2024-1302,0,0,50e21539c22b43b4db748f33a4680786d0cd3b39c9a7a5fc858bc75c33660782,2024-11-21T08:50:16.467000
+CVE-2024-1302,0,1,f6c204f42a97c147c3ca5d88c68f09010e5d08d10ced44ce99e2d4b6c798995f,2025-02-26T15:15:08.143000
CVE-2024-13020,0,0,b18d1df78883ef9551ccbd20bdbcc8078b4e2c83db1c235e3e8b397ebf60cc55,2024-12-30T19:15:07.537000
CVE-2024-13021,0,0,e401a77980fac909f19d47cc3c1c7289cfaeeaf335646b6ebb44ac1c48b5d8e7,2025-02-01T19:15:07.850000
CVE-2024-13022,0,0,90bb63d1bc90626e0499ce8896752c6e5ed50822b829721b8cf1b7b0080afd11,2024-12-29T20:15:05.980000
@@ -246255,7 +246982,7 @@ CVE-2024-13025,0,0,49213aeccb84de269a6cda473f64c9cd212034f3fe128e40066ff20ce3282
CVE-2024-13026,0,0,2e2c8a5008d558f334a359f30ce14af2f0370049977086114b1edf6d11e61f8f,2025-01-17T20:15:27.600000
CVE-2024-13028,0,0,fa93211a2bdb9a3d16a1438985d05a65ae11871db310d3e60efe2083e10fb468,2024-12-29T23:15:06.030000
CVE-2024-13029,0,0,3645cd09171242525298fe881249dfcae0b5fc3148bc05a911d0c24263b4be86,2024-12-30T00:15:04.837000
-CVE-2024-1303,0,0,922ad92b627c1129d744b1f80cb5c88d28598a22649a8dddf52c9956281bb86f,2024-11-21T08:50:16.593000
+CVE-2024-1303,0,1,74bbafde157bf279acbca3f88b53c2bd5e92b12615b7606b55573957131b6fc8,2025-02-26T15:15:08.143000
CVE-2024-13030,0,0,a1002a1e17ed30278fc45a339b4113eb50bbae9a96b4107d150e4d657636aee7,2024-12-30T01:15:06.060000
CVE-2024-13031,0,0,696e044565c90cc7a58bde484498f7f54bcd0eb90d765ff6574928746745ba22,2025-01-06T18:56:33.010000
CVE-2024-13032,0,0,91ea1bb07faeacfd0a63f96214c9acb289a73bdaed3547a69a68343cc115f4c2,2025-01-06T18:47:07.217000
@@ -246266,7 +246993,7 @@ CVE-2024-13036,0,0,3e4e42f0c9f994403ad55bd1ab42b7ab4b8cd1594e66b7747c2edec2466b9
CVE-2024-13037,0,0,e1dcac61d9ad9c50db3df58d6f4d3361f0c012be20fa697d9d83904aecb5aefc,2025-01-06T17:00:22.063000
CVE-2024-13038,0,0,07021c3f3e4e5ad8d59084daa2472f76a36a62f583200e4e988b2985299acbc1,2024-12-30T17:15:08.473000
CVE-2024-13039,0,0,2ff048e2898a94c89e2fe46d15a6b69b7d24fd911b280e248c70b61bbb5acce0,2024-12-30T17:15:08.597000
-CVE-2024-1304,0,0,7f3d377d10786bd7b29e3437adfa1f791151a43db698785def3901d685804d14,2024-11-21T08:50:16.717000
+CVE-2024-1304,0,1,b5a17df46c3f96b6a623b31d2509aa8f30a179a83a2d6e42b6cb63c1f8ef7084,2025-02-26T15:15:08.143000
CVE-2024-13040,0,0,48eac60daed7d09b05d10239614a9afabab092e37582ba3e02178f3736c64fc0,2024-12-31T02:15:06.303000
CVE-2024-13041,0,0,b8a3b56ca8da54078f58fb9baf0092d63bbfb03cd3871368c1c2eecde48c11b0,2025-01-09T07:15:26.497000
CVE-2024-13042,0,0,1f81fc2eec05a9223456735091886113e5fb919c6582ca39f0497333c1ba2b59,2025-01-04T13:15:06.483000
@@ -246332,6 +247059,7 @@ CVE-2024-1311,0,0,7288a22df752343e846f5ba6a82a81aad7d46e7208b97bb1330896fb02e609
CVE-2024-13110,0,0,3af34e021045f1f321eb3e27d67d0cda816b86ed4d944ed6768c463b9396b88e,2025-01-02T14:15:06.240000
CVE-2024-13111,0,0,111a0995b810edb3a95164b3ad0483dc838f87262c9575afeeb4b85a996b26d6,2025-01-02T17:15:08.223000
CVE-2024-13112,0,0,702aad5ade9e10a9087c506d7a487bd624c63ce680a53cef890a1f7ea28b745b,2025-02-18T19:15:12.723000
+CVE-2024-13113,1,1,0df73d91ced08a29cb10014e983e37320dd6dd8d1f5ebc1098ef711a41ed28b6,2025-02-26T16:15:15.020000
CVE-2024-13114,0,0,0294bf3cffe33550cb4e4f68d18089dfac8f013192677ef679fc2a8b508cbe75,2025-02-04T19:15:30.103000
CVE-2024-13115,0,0,13b8199069b20efe9868960868ade8b98a30fac2dac411b23e0856355daac94f,2025-02-04T19:15:30.240000
CVE-2024-13116,0,0,98f3ad6698735710def1c6baf530db546e54e66a9af268d4888f3cbf2c43dee6,2025-02-03T15:15:16.290000
@@ -246548,7 +247276,7 @@ CVE-2024-13333,0,0,413ea7e4b64b8aef5dd8714980de1abedc1d4af046b4d782740c89a880443
CVE-2024-13334,0,0,892c3ce546b2f6a66e9e4dfd761dd08aaefb851a17185548e40c2e88d5655747,2025-01-15T04:15:19.720000
CVE-2024-13335,0,0,20c8c7696547a710a7247fc1375c3fab2f06247460845b286129a3d00d1d053e,2025-02-05T01:37:46.517000
CVE-2024-13336,0,0,cede76271e6f385be5d64089acd208200ba1197d4b4d2bc143190ee513b032ad,2025-02-19T09:15:09.083000
-CVE-2024-13339,0,0,f8de09fdd4f03aeb041339a5015adfee1491817c598e87bb0c02ef66e5dfaa63,2025-02-19T09:15:09.240000
+CVE-2024-13339,0,1,f2418e2a84ad5fac952266fd0a210758cd47eeba25ed9f4888882ba2578b0d10,2025-02-26T13:16:56.970000
CVE-2024-1334,0,0,5cd8113de272a8c461c68981cf2d6addc6166d9cf4d9dbad0d56a2a1ca671349,2024-12-31T16:48:40.290000
CVE-2024-13340,0,0,410a07bb948a432c6c68e7813dd264dbb94d6d7c0c36b44969bc437f75da1ae8,2025-01-31T16:02:16.553000
CVE-2024-13341,0,0,128797d9a3fd1b4d0be904e2ffac7e537df76d379d0475c080eeeed959f797db,2025-02-21T15:41:10.603000
@@ -246568,7 +247296,7 @@ CVE-2024-13356,0,0,4c62ebf770eb8ffd31345cb0ef6c5025a9e134a147f2b545dcf049e579341
CVE-2024-1336,0,0,5ac217bb74b5afa6bf4a3181b1971e5eb197bf861678b67cc85953b7d0e71d82,2024-12-31T16:51:04.857000
CVE-2024-13360,0,0,42c7ef7264873842b1b321dcb1d9eb02287e4b9dd082710569d0b72683473221,2025-01-24T18:58:46.177000
CVE-2024-13361,0,0,796ae81aa903e35e91be1aa59cd637cc5eee53bc205bb2f1ae10309102da0980,2025-01-24T18:55:22.577000
-CVE-2024-13363,0,0,0a8b30810ad6f10ef00c19f313f4a652da8a8907e2b479981cc172e02b5fc0ad,2025-02-19T09:15:09.390000
+CVE-2024-13363,0,1,77eb2df401f4285f647751f8f1c9fe0aaeb31152f77f97503a19924ca5aaf01a,2025-02-26T13:16:56.970000
CVE-2024-13364,0,0,63d64dd9502bf524ff6550da6f98b5dc67d8ba4d2bc310f55cfe156be0caf94d,2025-02-25T21:53:07.637000
CVE-2024-13365,0,0,a3a6bbcb4ee71a3bc56f4487bd5a2fe1530409355db36ca9e760f09e0c2a8182,2025-02-25T18:27:25.897000
CVE-2024-13366,0,0,4b12bd5212b118d30ff048db445e6d1c00e6cad223533401dbdc6a341b0a882c,2025-01-17T07:15:26.947000
@@ -246745,6 +247473,7 @@ CVE-2024-13554,0,0,7c6792ed304320bad6afd2ef20fd307ba91eff7957375903da0bd819567a9
CVE-2024-13555,0,0,49b73d745edef53131648713ff0454df654c61bc1fe448679f0e83788ee99801,2025-02-24T14:54:29.683000
CVE-2024-13556,0,0,227f79da3d8af7739955eed8b3ebf27bbbf505836c230601eee8e2a82464e9ab,2025-02-21T15:41:41.720000
CVE-2024-1356,0,0,6cb6186c899ef9742e559deecf7de4862ea2bb78bef5eed0c472ae9df79196b1,2024-11-21T08:50:24.133000
+CVE-2024-13560,1,1,0faea1b6ce7be1772900e1d649e43561be32d800d039d9674431c9c5c2319d57,2025-02-26T13:15:36.800000
CVE-2024-13561,0,0,2147326d45c7c96265106b6ff772f1393a83793dfac14b78a483fca6de875c16,2025-01-29T12:15:27.617000
CVE-2024-13562,0,0,b51ff5c1214904c48acd8185520c69905fbad554f23d67d52a0c555fc11349f1,2025-02-04T20:26:53.560000
CVE-2024-13563,0,0,3031ac214bd3ea53346a6d71bfbed70d308745391dfcd1e2839ca77975e01983,2025-02-15T09:15:09.897000
@@ -246753,6 +247482,7 @@ CVE-2024-13565,0,0,684f7f6c469aa690c31498d8006cc3528a7f9ba92e597c468d835d0a7ab8e
CVE-2024-13566,0,0,4e1012bf67cdbac097d1c63a1c7fd79c8a8116508864b50fb7c66cdc833178a3,2025-01-31T09:15:06.847000
CVE-2024-1357,0,0,25eaf5b978f8da82b4d3e5ed8aa890834adc21c061c9c9c169613a72fe6996b1,2024-11-21T08:50:24.283000
CVE-2024-13570,0,0,5f3f1655b91dc3bee949d16de77a481687b9936ecee52594dcd7e9a641c4eac8,2025-02-20T16:12:22.823000
+CVE-2024-13571,1,1,9abb4dc2e10d29b1a9b89d2da281ee58327c58a3c39a5a814ff1116679ec38ee,2025-02-26T16:15:15.210000
CVE-2024-13572,0,0,532a725cb20bed55876f1b16270869e2ecd9d5cd846a67b1cf929aa084c91b6f,2025-02-05T01:25:51.813000
CVE-2024-13573,0,0,47f56a6be89a4bb63ceadbae078e78a73033980ecb24e71f52f10b691c304d4b,2025-02-24T15:40:57.757000
CVE-2024-13575,0,0,16cadedde273d2e44dd03e3555b4c264bb672dfe1040b3f8027897e23779bbe3,2025-02-21T15:35:18.820000
@@ -246794,10 +247524,18 @@ CVE-2024-13614,0,0,e58c8adf8c29e7e85021326638f400d4333ddf67f47f6ad8c608c33ab2021
CVE-2024-1362,0,0,1bf34831bc70bdad1bc996e752545d1e0c7befef2013c4482e56f5d7529aa921,2025-01-15T18:40:30.490000
CVE-2024-13622,0,0,d2688be4d32a38fa0003e8b919920c245dea1fd4a1949bfeea892e9dd65d3580,2025-02-21T16:05:34.047000
CVE-2024-13623,0,0,46a09ae0be01707a027ecd2168a6150e19984c64d67b3517affe48621dcf728f,2025-01-31T07:15:09.830000
+CVE-2024-13624,1,1,8169bd7127bac2ae3838c0224765cdbc379c57b49efb64bc689b2ab14fc6fa23,2025-02-26T16:15:15.353000
CVE-2024-13625,0,0,556dbc652a367567d8dc0a1aca4ef96fa3721288585ae7ce8b84a84c5a8c12d9,2025-02-19T22:15:22.630000
CVE-2024-13626,0,0,5f376c892890a386d15b17c9d9f7768803772784cb9f45a9f61e63e74ea1223e,2025-02-19T22:15:22.753000
CVE-2024-13627,0,0,faf1d9bd245281ef1f9edc55f8aca71639e95b5ef38efdbbf353c5fc7ae2924c,2025-02-19T19:15:14.720000
+CVE-2024-13628,1,1,d3767a60500ce9b742dfebf3d3983bab64b9dcd45cecae37e37c4cd3d0cd3a81,2025-02-26T15:15:22.510000
+CVE-2024-13629,1,1,ab3ef8e4fadd9f6242e9b402d5fe3b9959fee19c28807cd0d21eea93a554d38d,2025-02-26T15:15:22.643000
CVE-2024-1363,0,0,d8d6ccccee9c9def4bc84105015213aa12c981523f1a518cfb483c29cffbd734,2024-11-21T08:50:25.093000
+CVE-2024-13630,1,1,a303cf7509cfdf2f029d3641a40da7d46094e8d765fbb209c431bcae6d7f0088,2025-02-26T15:15:22.787000
+CVE-2024-13631,1,1,9fbab776ab56d0d37817ac1b52a77a6e050a398863423ea2fb8a6959e8939960,2025-02-26T16:15:15.487000
+CVE-2024-13632,1,1,ab87904e3237e1ff207bd083064fa234eb8396de2c71155409ff7865e4a4b844,2025-02-26T16:15:15.640000
+CVE-2024-13633,1,1,5ee7398c6e0e74dbda092bd1434016432f8cbad05a1f93851c7c1e6797876da1,2025-02-26T15:15:22.940000
+CVE-2024-13634,1,1,0925e4eb0a5b6a25a950b2bbdaa9ac2e640f74d1a050a484380e5d735ef0dc4f,2025-02-26T15:15:23.103000
CVE-2024-13636,0,0,060ea877f973da3e3139131075fc6b65a68ba520ee71166120bdf003d38b6862,2025-02-24T22:15:11.277000
CVE-2024-13639,0,0,071381e5184000ecf8c72dcde14c2011c1cb4ea4b355e15fb5e9c5b4fb270c14,2025-02-18T18:15:51.587000
CVE-2024-1364,0,0,47f33fd19586ab96196a2cb0337c2030aca42f1bd8c4ab84cfa2e52c3dbe5e59,2024-11-21T08:50:25.223000
@@ -246824,6 +247562,7 @@ CVE-2024-13663,0,0,4d35c2aa6bb22f4acbf057554f2f8d44f446a1c9a791ed355d4b3cde1b615
CVE-2024-13664,0,0,473217716deb2aa13e14c1c50fc37141e04baa642fdc5cb480a274dd2f0bc069,2025-01-31T17:58:11.783000
CVE-2024-13665,0,0,e3a6c5d7c3dea123836f5860f2414dc33b702a945b7203507ad6f9df5efe220d,2025-02-24T15:51:18.327000
CVE-2024-13667,0,0,00366fe767068418ac97bead46153f457c38f67a91bcc441bc28d754ed496831,2025-02-21T14:23:07.680000
+CVE-2024-13669,1,1,7d989782632e1d28bd92f1566a4409d84603ec47ed5dd153a22d736a417492b6,2025-02-26T15:15:23.263000
CVE-2024-1367,0,0,3f60d63c26ab9e28e6dceb27e57632b2e7fb2cc7ac1eb4673458558449b3c5c8,2024-11-21T08:50:25.600000
CVE-2024-13670,0,0,690ebcbb95d3f98eab9f8ee4f1517c6db5063e5d1de1041c36e188175dd1fa04,2025-01-31T17:56:17.183000
CVE-2024-13671,0,0,ae3f820669c60d968ca7475f09981b5aa31ebc6a060e50869f9d2043fe693b44,2025-01-31T17:50:24.757000
@@ -246831,6 +247570,7 @@ CVE-2024-13672,0,0,b657627b836aff961dfe7c8e7190f58e40cb21b24e74a86e6fd4400f2deb3
CVE-2024-13674,0,0,ccf8b266d3404726aa76131692ed055756c65575f2164f27de116ce89e18470b,2025-02-19T08:15:18.823000
CVE-2024-13676,0,0,d71fc752196841e13708ada45e7864b2d9bbf81823a4755eb88e3f941de0a305,2025-02-19T08:15:19.190000
CVE-2024-13677,0,0,13401c1b73282722904b75cd499f0a3bc9825602c732ed33fda81e11a6c0d93a,2025-02-21T16:03:44.037000
+CVE-2024-13678,1,1,0fe55d8e73c51d530c73c4bbaa84ce1979d1864b166b75d67195feb1c80a2778,2025-02-26T15:15:23.433000
CVE-2024-13679,0,0,376562074b3f661a95343ca76bfe546237229fd3363ab8d9afd809103a82328c,2025-02-19T08:15:19.623000
CVE-2024-1368,0,0,bdafec7323bf6060c2602bb232f81dd53afd410b7ab713f1778c3940b8b89a37,2025-02-11T19:44:46.867000
CVE-2024-13680,0,0,74b46f50e9e8190b451f914492933fe4a5d6196724bd1fb0611ec5e03b0be866,2025-02-05T17:37:37.827000
@@ -246910,6 +247650,7 @@ CVE-2024-13799,0,0,e8bf3eec61ee5004ffe816bc3d1e1d3f4c7c5fc01f5e38b638ff3d46b6679
CVE-2024-1380,0,0,189ef0e7c99b94999bf853d72512eb8cc5fd5c5f665b06c2b0baa188813ae89d,2025-01-31T13:26:51.163000
CVE-2024-13800,0,0,db269d664e8ffceb549584ac138b0b3d8532020dce3ad8c5501401929c306f63,2025-02-24T15:55:09.120000
CVE-2024-13802,0,0,799c1258f4b5634a2f6e5dae2a8b0b5fa69324e493bf460e3d6851ce5d4c3675,2025-02-25T20:57:34.193000
+CVE-2024-13803,1,1,71ada9912badebcefd55336eb2106277e268ffd78a50c88b490af0dd5183d050,2025-02-26T13:15:38.027000
CVE-2024-1381,0,0,f79abe04d98fb58eb4a1bc15edce6ddf9cf798d335c45513b35103feeb919d6b,2024-11-21T08:50:27.453000
CVE-2024-13813,0,0,fdc4ad5ea8556267af57de167767e42189cf8d83fe0a9d1183500203243c2b38,2025-02-20T15:56:04.087000
CVE-2024-13814,0,0,1eaa34671c59ff347de019eb0f7db92c91d554728619786a007d058e64ccd6e0,2025-02-18T21:30:00.523000
@@ -246991,7 +247732,7 @@ CVE-2024-1430,0,0,3bc978d4dd692ba7ee4a7cc4d11c20fe662c755ea27eb731ad29addddec20c
CVE-2024-1431,0,0,1230d8600678d12f7d6985eeb6243f7c0dc22668eba8d5138026b4c6a9e8e477,2024-11-21T08:50:34.230000
CVE-2024-1432,0,0,7035f463555ee4e0684bc896c4ea5cdcaa9577bdd0b576d53cf315b6b4fcec6c,2024-11-21T08:50:34.387000
CVE-2024-1433,0,0,87f22d20b32269d8237d95a25fad63601c11890ef469b28ff99ec357c5b21268,2024-11-21T08:50:34.517000
-CVE-2024-1434,0,0,478a70a9f4a281b8f3372b1979aaad4e9397b85c5d1c21b21d4ebb611e40ab94,2024-11-21T08:50:34.710000
+CVE-2024-1434,0,1,6c256aedc953cbae46b436e6867f072ada5c183069c4b47f15c47c560c53cb78,2025-02-26T15:14:55.753000
CVE-2024-1435,0,0,93eda4017b5bbeeef93f0a6c3906353c3cc57a8a15895e85bcf660eb75036070,2024-11-21T08:50:34.857000
CVE-2024-1436,0,0,b0cc5deef073446d32a792e36ef1d3820e908e22e5e7e846f72f35e6da786833,2024-11-21T08:50:34.987000
CVE-2024-1437,0,0,3f211f1ce4978a0f5730793f4fbb8f74f79e4434958ab2a294e730a837bf6bc4,2024-11-21T08:50:35.123000
@@ -247076,9 +247817,9 @@ CVE-2024-1522,0,0,9cdb2d31b60237752ef77325c4d109881b58042aa66e5c8934108a236d1a4d
CVE-2024-1523,0,0,048eef54d080ea57df02f8070dee964acb62eadaded82c061ede59f9519607a2,2025-01-23T19:55:29.380000
CVE-2024-1525,0,0,c5719c2d073faeda894e23a5762be2b220de3339124866e59d0ff45c5692c966,2024-11-21T08:50:45.333000
CVE-2024-1526,0,0,8162a28feb72019d8aa05d7943653cfea4933c2d9f1da50f316b5c17a44edd4d,2024-11-21T08:50:45.473000
-CVE-2024-1527,0,0,dfb76623fa2f1ab84badbf9c1e833c576370539a66790cce25362f96cc462d53,2024-11-21T08:50:45.593000
-CVE-2024-1528,0,0,0bdddc6c69c2c6140532a43501ca411c1b1b5a75ebe8e11248f6acc8f2e7c51d,2024-11-21T08:50:45.720000
-CVE-2024-1529,0,0,2b5c40c485ec97f1152ebbd9c7c1ba6e79abdfde3410a025fb49890d79452b67,2024-11-21T08:50:45.840000
+CVE-2024-1527,0,1,9d58b879cff612cc0ca4cbdede9c1e0dbecf4cc34b237c0de3a279ab99f9a5f7,2025-02-26T15:15:08.143000
+CVE-2024-1528,0,1,6d5b76d945b1700f248908eb195ced9eb3f21304f0b61e0e0efd42184f9c632a,2025-02-26T15:15:08.143000
+CVE-2024-1529,0,1,530030ec1cfd178ff6aab94d067905cf49f9694d43798063b0b6afe74166ffe0,2025-02-26T15:15:08.143000
CVE-2024-1530,0,0,6b47ef22b9563339a8c0982f48b2284d09098c01f6b8b9428ca17e515d99e352,2024-11-21T08:50:45.970000
CVE-2024-1531,0,0,fb6a0433f239352c6074b626cd9141033859ba994a20b397e07d13189196c495,2024-11-21T08:50:46.133000
CVE-2024-1532,0,0,e80e81902d6512b170ef25fc1c0b7197df19d6d6709ea2ea911faf11cd36952d,2024-11-21T08:50:46.270000
@@ -248948,7 +249689,7 @@ CVE-2024-21575,0,0,939b39e67e18130b834072c5b0a599611378cdd9a5f40b5edb07f0b5f31a6
CVE-2024-21576,0,0,d15dcbdb5ce4b543c21d00e99b2a6d7ece39ba66c7cc7b7fa21635fc6a62c1b6,2024-12-13T12:15:19.753000
CVE-2024-21577,0,0,e59825ca6f6cd9c3176212f0be12d2d1f2d19ea0c22af32d64f6094afd7805a1,2024-12-13T12:15:19.910000
CVE-2024-21583,0,0,c1d075392adda1a92bd116f6568c32f98f3861adb7381b8163ad6f1ba61849c1,2024-11-21T08:54:39.443000
-CVE-2024-21584,0,0,b131eec7e1253fa331b7a55309f8a83408121476547446d36e68e2f68de5bf1d,2024-11-21T08:54:39.587000
+CVE-2024-21584,0,1,54a5fd96cf5f9236515078d3642d9a76f8d8dfc483b04c2c5d8b110790e5057b,2025-02-26T15:15:08.143000
CVE-2024-21585,0,0,9d0ae936587469574770d0fa4ad5b9b2924c2930649b2050f260c2352ac4f0cd,2024-11-21T08:54:39.697000
CVE-2024-21586,0,0,b2514751994972c3d261ad7ec6bd416f3d5a6e727cf184039fc01a5f179ae217,2024-11-21T08:54:39.897000
CVE-2024-21587,0,0,12ceab6a8617bba884c3945746bd38a150022a8ae92c14a7557faa5ca62c0a6a,2024-11-21T08:54:40.027000
@@ -249410,7 +250151,7 @@ CVE-2024-22105,0,0,f57112ed1750ba02ce9821bb4f2d1b7039313de213ed1a8f1bf27a5cde1ab
CVE-2024-22106,0,0,35e91e3f474b85bd80a83fe3d1d970e8a813175b4f4bba58f2d1c60cd55ddd04,2024-11-21T08:55:36.177000
CVE-2024-22107,0,0,aabadcfa132676a0b9a5d78b202daf386cd51ef3bf76c48c7808b016fa9bc0a4,2024-11-21T08:55:36.453000
CVE-2024-22108,0,0,13f8c01a85c369689902db111ab022b95a969871dce9f19c0694b53535cf73fa,2024-11-21T08:55:36.637000
-CVE-2024-2211,0,0,f291dccce5b1248360162eac143f09fd73327746540890257d1a7821fd804077,2024-11-21T09:09:15.890000
+CVE-2024-2211,0,1,8449afa56f04d13e200023e1e9a5d3fa056332cd5be3ea865c5d69e5689ac7d6,2025-02-26T15:14:55.753000
CVE-2024-22113,0,0,df8bb42f4d1350ee6a0f038ff918a43ce08f3173766cfa9c78783e1f0ff2f63a,2024-11-21T08:55:36.803000
CVE-2024-22114,0,0,b98aec6151fc366c3b669a552c78744585fb46223fe45a4b12b56beb46fb5169,2024-12-04T15:28:53.450000
CVE-2024-22116,0,0,c04c3de9f5b4ead60d384f4b087010c1878ec579b099b751b4e2eb65332cdb41,2024-12-04T15:21:51.983000
@@ -249431,7 +250172,7 @@ CVE-2024-2213,0,0,5242439ac84fa583663de4e958e2f441f5667b8a1cf3376e891c3c75cd6d13
CVE-2024-22130,0,0,deb8c92e6c096e1fb15d989431e0413e2910861fb4b6e49a5a7ab6303d5032de,2024-11-21T08:55:38.617000
CVE-2024-22131,0,0,db2380c413d65443db2a76b508509cb9b4b733e4ec4af09eb8854c315024d8cf,2024-11-21T08:55:38.760000
CVE-2024-22132,0,0,e7629262ba7b0c78b8fe0cd141d851b89d3e345e409e35810827d0440a0eef37,2024-11-21T08:55:38.927000
-CVE-2024-22133,0,0,d4fcb728b8639624dd7f5c953d5656987485871e9d0530f20d78c15a249903f5,2024-11-21T08:55:39.080000
+CVE-2024-22133,0,1,bd4187352b6d58b6cfd0157cfc634a2c3c6b3e97c6f3edede4f5621259bbf607,2025-02-26T15:15:08.143000
CVE-2024-22134,0,0,02b4a4fee1e049d81fd24cc9c8f470e8c274431cecf2d7480876bea522d68153,2024-11-21T08:55:39.203000
CVE-2024-22135,0,0,84008a0b02011eb4dc9d0e439622a8bc3fa7fdf8b934f01e526f44a31f8571e9,2024-11-21T08:55:39.327000
CVE-2024-22136,0,0,8f52e774bda0b9f0b1e9c148e2068bea711435d376963412b477b6d460659840,2024-11-21T08:55:39.453000
@@ -249547,7 +250288,7 @@ CVE-2024-22247,0,0,98551df5e52ed97248ab470679d67b187ff4dc2bf422d4a17c411b750b658
CVE-2024-22248,0,0,7d11e6f20b6e40a0e1b3d2474db81de7a92f55a017f57048c4c374e5a84d824e,2024-11-21T08:55:53.237000
CVE-2024-22250,0,0,40db3fb51052a18ec19cf444cfe62376d1b552d431677cfcf8f3962e85474381,2024-11-21T08:55:53.373000
CVE-2024-22251,0,0,7962e8c1073d0793f33908f5af22b8fc0809c0ba75822692ea4b295588a7524f,2024-11-21T08:55:53.500000
-CVE-2024-22252,0,0,5f49ec7740ecf23c7ae979006bc50acb0e45c810b5db18088d8b9313bad53955,2024-11-21T08:55:53.647000
+CVE-2024-22252,0,1,3eb09dacfb0899d5e45a4605af368f54e13ec1592b83fc222c0da417e58981d2,2025-02-26T15:14:55.753000
CVE-2024-22253,0,0,b50aabf6eb2ec6f9d4f741174d0b5159ccfe7acd1b46f4546735214781343c2c,2024-11-21T08:55:53.773000
CVE-2024-22254,0,0,2fe0462c8eff093e322a6ddd02c09b1d23f8f94e5337f30d36595c1b2c8402e5,2024-11-21T08:55:53.910000
CVE-2024-22255,0,0,d960bb32026f52cbb91b98955eb040cf83d5638234fbe58082db83cc49b3ce64,2024-11-21T08:55:54.043000
@@ -250089,7 +250830,7 @@ CVE-2024-23186,0,0,7878f91c89790f9e8fc81205c0238e33a6cbc6abc9c98707a36de3d5353fe
CVE-2024-23187,0,0,30ef35302623529e7bbb91d7b56a19b88f69dca16a80b6e830607e676aaf61e5,2024-11-21T08:57:09.153000
CVE-2024-23188,0,0,e57bf076d79b46080653535d5facf7ea6f48556005cbfbe757a17549c5fca451,2024-11-21T08:57:09.290000
CVE-2024-23189,0,0,2dcb83600c7b6268dd065a31184f08643b7e5ba7bb873f7f795177cfe9ba2858,2024-11-21T08:57:09.423000
-CVE-2024-2319,0,0,af9fcbedcdfe301a454cb0de2ebb982789986bcfc9705bc3a40a4a21f9b3727e,2024-11-21T09:09:30.100000
+CVE-2024-2319,0,1,1418ba7cc621002cc4527c61c39900039c19a1ea381385be7989a5060e493d66,2025-02-26T15:14:55.753000
CVE-2024-23190,0,0,747efaa24f1bce653dd7e840d6a55e38e641b287358bf91f911c14cef04f7be4,2024-11-21T08:57:09.567000
CVE-2024-23191,0,0,d2ea5aae002a429666bac8b5a63d801b2d5809d89c8d7e4c6fd61a0cc08a2d59,2024-11-21T08:57:09.693000
CVE-2024-23192,0,0,c6430031b85d693f74587e2a6124ad07ee3239260f7eec531627308e9322a471,2024-11-21T08:57:09.830000
@@ -250211,7 +250952,7 @@ CVE-2024-23306,0,0,3438e3b74048b0b6b508c92348cb415d5651bb1de28377a45313130287607
CVE-2024-23307,0,0,dc44e5463afa43f85a72ab52ee9a53fa93d658e5285d4bb1fd5b154f58a67bb1,2025-01-22T18:03:52.313000
CVE-2024-23308,0,0,2451e6da930bbab951e0370d09bf853ad2eafd61488a022c59e14c670726c985,2024-12-12T19:10:12.500000
CVE-2024-23309,0,0,9871251e43bcd47915fc0e89139d02bfc787229cb784c5b0133b33f1742cb37f,2024-11-21T08:57:28.620000
-CVE-2024-2331,0,0,725ba9bc922e0647096bf95f81d8267c1757632a1de6135c4813ddf1b07ca317,2024-11-21T09:09:31.250000
+CVE-2024-2331,0,1,d047b43f054ff9cba7937fa57fb504044a7875e07c9586ff97389ba0019fdfbe,2025-02-26T15:14:55.753000
CVE-2024-23310,0,0,0b899446194e92b3aba68888de9ede36a30a6a2b6574ab815eecfdd15bf8d466,2025-01-22T16:18:16.783000
CVE-2024-23312,0,0,c66457950e92c000c52798147d176b50f5cb337e36e1eeeef424a02e12bbfb36,2024-11-15T14:00:09.720000
CVE-2024-23313,0,0,314036267a9a855bc9ef168dd544f783cf33a389caaab6bf2129f4e7b0ecb649,2025-01-22T15:30:48.677000
@@ -250231,7 +250972,7 @@ CVE-2024-23326,0,0,4cad096b926e61ba5057fc61c818f175644122ba3bf2af2998e5007964e72
CVE-2024-23327,0,0,a8afe8abda31e003c23c096976d7f35de964762f6854560205e003d15676baef,2024-11-21T08:57:31.030000
CVE-2024-23328,0,0,31d0cef0ed7438d2981343da4f7a2780ae54e6fa105b1858178661dbbd43b5cf,2025-01-08T18:52:16.350000
CVE-2024-23329,0,0,6f00857f1323e733be7f4007f4cd28eb924527a4b1e19ac242db7d35637409df,2024-11-21T08:57:31.297000
-CVE-2024-2333,0,0,5c10b694b762a1d6aa34ab66bd0406e30f7e99d152f25942dbcea3c62ef146e4,2024-11-21T09:09:31.550000
+CVE-2024-2333,0,1,3d35a817ac4c7525c56ad047ef5be28b01975810ccf7aa04d91409dd7f8388f7,2025-02-26T15:14:55.753000
CVE-2024-23330,0,0,9c37dd2c8d5180b5d682b7e4b5e92f1c52ed11136a4f6aa3156db7d54d493360,2024-11-21T08:57:31.440000
CVE-2024-23331,0,0,d249684f95243c86cd9ac165298c6d83c767bd88a7562199924aa7b58497314c,2024-11-21T08:57:31.573000
CVE-2024-23332,0,0,d71e1782a43b90e8f3c6045284fd1374fc8749a7455b52cacdef33d8b65d9b8d,2024-11-21T08:57:31.710000
@@ -250417,7 +251158,7 @@ CVE-2024-23505,0,0,3e3fddc3c9865441111437f463ae41f700c424092b9fe16a43401e2fb0495
CVE-2024-23506,0,0,e88f279c37cdf9f46123c4f77d5df107be8c4e8f01702aee814129ba8acbfc70,2024-11-21T08:57:51.103000
CVE-2024-23507,0,0,ee194c19e69fb972b71bca97ab4e2e6c3d3f088b983812978c2b1f12ae84d7ce,2024-11-21T08:57:51.250000
CVE-2024-23508,0,0,7aa77a891506e26942c2d9d85544961bcfb4c6fcae6cb4a851b3432bf596fe0e,2024-11-21T08:57:51.377000
-CVE-2024-2351,0,0,03a4dce06a36bfabedc551bd266686706e577c3fd1b52ee53fe9b0872403d1b1,2024-11-21T09:09:34.440000
+CVE-2024-2351,0,1,18ffb9064f201506d3b13920a23026db4928e2e91a2a540d91e093aaefb0668d,2025-02-26T15:14:55.753000
CVE-2024-23510,0,0,4efbd33641766696acf755eb3ef43ab907bd3d4a55a5705b83ba836ab88d944c,2024-11-21T08:57:51.503000
CVE-2024-23512,0,0,4e8e80a06eebc18115ce8d65d2a77bdcf38722f9cbda81ec682263e1c96fdbb9,2024-11-21T08:57:51.627000
CVE-2024-23513,0,0,5a752548faba1d879d8a1700e74c1920ae46edee49cc0d3f9f72ff3782019b79,2024-11-21T08:57:51.773000
@@ -250448,7 +251189,7 @@ CVE-2024-23535,0,0,5c0669c5a257f5da7bc05281a4eca64026473ced62332524ac02b8a63840c
CVE-2024-23537,0,0,3b1a91c7d4020182fa9458076ed29c1fe5125b002435174c8d4d6c074601363a,2025-02-13T18:17:03.110000
CVE-2024-23538,0,0,23215b14939925d1863edf3f95fbeee3363300a19c49f1311c31b0232112d665,2025-02-13T18:17:03.270000
CVE-2024-23539,0,0,60b0f2ae345099d340385e3aef6acf7c2268d7805fdd9ca9ea53b7f8489c6af5,2025-02-13T18:17:03.417000
-CVE-2024-2354,0,0,9ef22bf3d864e2be6e543bd3a73b2f5ee7cc73d0ab2f2e93bcc11477b9eb8ae6,2024-11-21T09:09:34.840000
+CVE-2024-2354,0,1,fcb1b1826a9f366a6f69be0ebf16b3f9557bab351f23568553077373148fe6c7,2025-02-26T15:14:55.753000
CVE-2024-23540,0,0,a1ffc13c754025a5714bad869c9bedbba69b7f77d028f2f8463a9674183969d2,2024-11-21T08:57:55.270000
CVE-2024-2355,0,0,b4b4ae46f948b9a0cf412a2a393ccc0268e96926d0e9688887b6bb1cb8a537c9,2024-11-21T09:09:34.970000
CVE-2024-23550,0,0,f5e8a2b7e969acfee4683aeae78f72e65fbc8536e76ce0dbf622ad59a80d1ffa,2024-11-21T08:57:55.417000
@@ -250532,7 +251273,7 @@ CVE-2024-23646,0,0,b34f4132897f0fe21c0d90c241b697d7822cb678d7bf9cb7f213a25caf989
CVE-2024-23647,0,0,09e941b020090886698ef637f9b6174df4ad2828cb8ce074514d9f1cf58619aa,2024-11-21T08:58:05.013000
CVE-2024-23648,0,0,0d229022c17508197bf064dad4061f58e10f4904e25d6324905b4e3b743f4704,2024-11-21T08:58:05.140000
CVE-2024-23649,0,0,00d40c7a16b247711f482e5d96bcc3f991138ca488178ade3980d3ea3a0a97fe,2024-11-21T08:58:05.270000
-CVE-2024-2365,0,0,f162e108d1bbd591422593a9f033ce8e171b0b85aa8bea606a9c11284cc6328b,2024-11-21T09:09:36.190000
+CVE-2024-2365,0,1,36083f232bfe2295e560bb8ceaf22dadbabb28381b5f6a77e10fc412dd19bfee,2025-02-26T15:14:55.753000
CVE-2024-23650,0,0,979e819ab2cfc6c375f4919ea038b5a3434ac13b666bb804e4ce0372a1aebc74,2024-11-21T08:58:05.417000
CVE-2024-23651,0,0,786bdcdd9bc2eb190cbbb97e62113f79301ecca1b59ea47dc70486eb01754a28,2024-11-21T08:58:05.560000
CVE-2024-23652,0,0,a837da9febe0055fb10f6d942c42aab8b820dd9c7b37d764b474fb1995e26f02,2024-11-21T08:58:05.700000
@@ -250783,7 +251524,7 @@ CVE-2024-23906,0,0,8ee451746f69084292c64d3cb1a6781dc3e891bf386d53ee8877b5f3f7e8d
CVE-2024-23907,0,0,6a4f51a32e49fc5e92dec6c55358350ee80dfc671e1fe667a9ddb254fe8bae56,2024-09-06T20:38:29.490000
CVE-2024-23908,0,0,c0766c8541c0cd5631c768ee77722a9a3ea6c08ba06c850770939c86e896f3cc,2024-09-12T18:43:53.363000
CVE-2024-23909,0,0,2c0e5e1ab78a5343246a7351ea46a1a4a3e6e777abf631032a1a6a88e7ab4ed4,2024-09-06T20:33:05.670000
-CVE-2024-2391,0,0,9d39f8769fc4eafab47852b5c96351a38060f61eabfaafa849b8cab0f7105047,2024-11-21T09:09:39.147000
+CVE-2024-2391,0,1,b38c85a7e1f471324ff2acf5b3903057c380c0d3b50ca5fbb67e17f073cdc066,2025-02-26T15:15:08.143000
CVE-2024-23910,0,0,3a07daf6eb848dcf47346cae2b5473aca2b62de91d0a2c6d0b94d5d373a4cc2e,2025-02-14T15:32:35.843000
CVE-2024-23911,0,0,383c01133e386e5b2258194a846ca2cc25aae76b1a1832cd8eb128c0e83a3761,2024-11-21T08:58:41.573000
CVE-2024-23912,0,0,453c92999873c8631416a203ce3d10a10d3fcf10d83029048f6ae9a3947a0896,2024-11-21T08:58:41.760000
@@ -250809,7 +251550,7 @@ CVE-2024-23934,0,0,80818e972c45e9652109b7b905947a778f340b3ef02b81b47452ca83bbb4b
CVE-2024-23935,0,0,8074757a7750aac4e40a15499625e0de0f941684b6e4e8032ec6635cd7c0aafb,2024-10-03T18:07:01.967000
CVE-2024-23937,0,0,9f1e27840efd8c5a22361a7c83dc75364b692a5851ff387538d627d75b533385,2025-02-18T19:15:14.997000
CVE-2024-23938,0,0,5569f095c88d3edc91da7b05d4b47aad5d8c07d6eab7699149a618af2c5b094a,2024-10-03T17:29:28.230000
-CVE-2024-2394,0,0,621d534b6e99ea3eb7663377d97ee0e05ad2be3959f632056cfe6794bf2d117f,2024-11-21T09:09:39.550000
+CVE-2024-2394,0,1,3b4bf17901833151941e2a1803371364e0d1f7f15bc302695e597fb92dc5974f,2025-02-26T15:15:08.143000
CVE-2024-23940,0,0,06d04c2e3a7f29a0e7a62a5331ae3d9d5c7acce3a81c480978850a16e4f0b74a,2024-11-21T08:58:43.807000
CVE-2024-23941,0,0,377e40ad54a332b818df016f5e6db38286f42aa52aa09ea13a642fb9c9a22ca1,2024-11-21T08:58:43.940000
CVE-2024-23944,0,0,d1f7d065765e5643c2171d654a3fe7a15ded2542e5ae0ba9d07c168a5a5837bf,2025-02-13T18:17:05.470000
@@ -251253,9 +251994,9 @@ CVE-2024-24761,0,0,0f3bfc3d46bb7c13829bd1222c8ca1e601f0b45217b897df8b3af2231e5f6
CVE-2024-24762,0,0,c076c3d97e1a4048b5950b29933537f374c672fc7dbe2db6f08b326b3e3ea530,2024-11-21T08:59:38.960000
CVE-2024-24763,0,0,a3cb5a362cbc9759e4dfff129e417ed8fe8655a360f6b85267085ff3a65924a0,2024-12-17T20:03:30.613000
CVE-2024-24764,0,0,bd24953d32a72f44cfa0aa95a6afd87968520e7afc30faacb56958a776ae9755,2024-11-21T08:59:39.267000
-CVE-2024-24765,0,0,f2309b04ed1defdfe74501cf1a22d9a78adb55401ec99a22862c02d97d23d452,2024-11-21T08:59:39.437000
+CVE-2024-24765,0,1,6f8ad16e195f3a31444d2e754ba2d1bf806cbce42ba12b6e37c8cd471dffa5eb,2025-02-26T15:14:55.753000
CVE-2024-24766,0,0,f10b9a5199db77f91fe2fd77e15dcd8d1c680ef589fb74064eb7d422c9588757,2024-11-21T08:59:39.573000
-CVE-2024-24767,0,0,362d1c6d20f9fcd85710210d42aeb3a034afc4ee771c37a65e58cdab65305630,2024-11-21T08:59:39.700000
+CVE-2024-24767,0,1,50e493f7aba19ce0f8c561a4887333ce9b66e4f660e4a016d424bfae92a0540b,2025-02-26T15:14:55.753000
CVE-2024-24768,0,0,f4716eea5cbfdded2fe5819f0fafcdfc1765e4a8285654efd5160f3d6847115a,2024-11-21T08:59:39.827000
CVE-2024-2477,0,0,d4fbb6a7199582203d04c57c4a507f5e44f438036cba94fbb2367befe030bb8a,2024-11-21T09:09:50.353000
CVE-2024-24770,0,0,edfb7c51cf2941d43343c18f1e3c5112e25a691c8b6403b153771dc1a6637c61,2024-11-21T08:59:39.977000
@@ -251562,7 +252303,7 @@ CVE-2024-25108,0,0,e52cef450ab9f2777251ddcda257e269030bb9755f309e2b3d308e85de05f
CVE-2024-25109,0,0,80160a91c74d0341a87b8ff2077184c15037a77baf985db6a001532a14d29656,2024-11-21T09:00:16.393000
CVE-2024-2511,0,0,0154a8b9931471c4a0411033b79da8cc77484a8c8fe5e43acbce700a6edce43e,2024-11-21T09:09:54.753000
CVE-2024-25110,0,0,d1b5cdca4169b84039fd38e52224c53b6882e7bc29c16cd2dec1375ecbdc95ae,2024-11-22T14:48:36.047000
-CVE-2024-25111,0,0,99b98b0ce3b76e566fc68373f184c8e48d48c38521b887095a5ec25b3048cf22,2024-11-21T09:00:16.677000
+CVE-2024-25111,0,1,44ef3c3d0231d1dcc07548eaa736e248022b4d937dade706d37dbc8c46afb8e9,2025-02-26T15:14:55.753000
CVE-2024-25112,0,0,5516727d0e777db26b31517bffc5eb2b0cf0b830442d1341980b292ebbebaf58,2024-11-21T09:00:16.810000
CVE-2024-25113,0,0,857a8a6c04923b8f13653e0c0fed4f0ffff75cf90412dfa840a70a6bc18a3ae7,2024-02-17T22:15:46.660000
CVE-2024-25114,0,0,7d73d6904320b5f5e2626630afcc34caf90422bd8adf1a095c5bf780443bd0ab,2024-11-21T09:00:16.957000
@@ -251917,7 +252658,7 @@ CVE-2024-25640,0,0,eca1a9dfeb497966580e78cbd95fea629a14b5d4a11a799afa1f6a8b14c7d
CVE-2024-25641,0,0,b2a3939e97b39fcd21b29c24264b7985fc76caf1e5b39f061eee970c5b7ae5e8,2024-12-18T20:54:30.227000
CVE-2024-25642,0,0,7609fb69f5c96f5be6b0a3f61c2c584ad7b6c2324d5e497cd7edd3b04d9bb49c,2025-02-13T18:17:14.807000
CVE-2024-25643,0,0,8e6a356b8ab89fdd686b237a9d72bcd799dde27b91b093e0952fb685911508c3,2024-11-21T09:01:08.590000
-CVE-2024-25644,0,0,f702d6fad8dca0adc67e09d08c50b92fc2c3737704d6efda44340d7ce22a1ed6,2024-11-21T09:01:08.720000
+CVE-2024-25644,0,1,6856145ca66c40fcde11d013db1ad166b203ab8f85940dd5ee792ff27d663cd4,2025-02-26T15:15:08.143000
CVE-2024-25645,0,0,e9bfed7fd8ff5b807d29634868c865f6230d3239042945dba6765272aaca1309,2025-02-07T17:24:54.693000
CVE-2024-25646,0,0,44fe52cac33c14917646765b719e0181c8f6a16956565ea90bcc52cfa7963b87,2024-11-21T09:01:08.960000
CVE-2024-25647,0,0,45ea64f6f6b834001e85ce5635fd454a8bf4ef3e1dbb6cdae581dd8d6d124d91,2024-11-15T14:00:09.720000
@@ -251985,7 +252726,7 @@ CVE-2024-25728,0,0,249547664dee94486de7d24f91565612df1fd7ba5870da82cfb8177b2a0fc
CVE-2024-25729,0,0,3db67ab23a258a05979984a126775ad307c38690f174be37fd98d41efab8557a,2024-11-21T09:01:17.263000
CVE-2024-2573,0,0,b79b1180561c3a7fd205d80040573866ef52299a8fb246485f49ef358e1ae1de,2025-02-20T18:12:59.823000
CVE-2024-25730,0,0,85e063f99da70c01b1b3a3bbfc7f4b413bf752190780e969335d19a636e3425c,2024-11-21T09:01:17.477000
-CVE-2024-25731,0,0,6c3e919119578ea97d9a9640c3ffc3eedc427ada22d3030737980e0d058696a9,2024-11-21T09:01:17.700000
+CVE-2024-25731,0,1,f553853b01a891c16ad84c95719be97589589ea0c8acba5af6cafc35ff382a87,2025-02-26T15:14:55.753000
CVE-2024-25734,0,0,3574c01447c22483c86f66e396d575e7bf7b614a6b4ebe187ebdc4c9a17dcf82,2024-11-21T09:01:17.837000
CVE-2024-25735,0,0,9fdea3ad6de7f4f83bd747335b88ba4bc80cbb63cb46a203f3f828d80e36aca1,2024-11-21T09:01:17.970000
CVE-2024-25736,0,0,831650ee2b289fa09d115f05113a0521c5f85fe00e3f4a57b362a744d6e20323,2024-11-21T09:01:18.197000
@@ -252575,7 +253316,7 @@ CVE-2024-26520,0,0,7cdc56c5d27885a06d263f0d33badd1c8b5db539649a135f3710771b22a3a
CVE-2024-26521,0,0,7a4a8c17931324da0360080baca8e9b8985dc9e1a6b4a9fe5e3ac63cc7433d0c,2024-11-21T09:02:32.387000
CVE-2024-26529,0,0,10e5da07aaf6222757a327b3019ccb7168bffdf2d8b6f4a7805796ec8e2dbef6,2024-11-21T09:02:32.617000
CVE-2024-2653,0,0,2740d2471c15491d9ea329b79cb148ef218e8f532d711ebb3c9abf47fb26cb31,2024-11-21T09:10:13.160000
-CVE-2024-2654,0,0,856aaf05d41c60ee2c85d4fc3321f895fbd088078df5e99f877e9b71221f4e93,2024-11-21T09:10:13.343000
+CVE-2024-2654,0,1,4f070338ffd1e66e6453b0c754554bee730f13d7903ba6e7b386a765daf816c2,2025-02-26T18:15:13.590000
CVE-2024-26540,0,0,5970c3a2d028ecebe91244fa68ea154ff04c44c8c8a65c7d51e6549924364887,2024-11-21T09:02:32.843000
CVE-2024-26542,0,0,005342b86fb12fcb5776ff8acf0dbdaf45e957519ff7c276f4bd35750e623b36,2024-11-21T09:02:33.060000
CVE-2024-26548,0,0,52535dde3cb49a827020d0dd3b0109d887b5f1701428dae937ca95f7c0db795b,2024-11-21T09:02:33.270000
@@ -253352,7 +254093,7 @@ CVE-2024-27292,0,0,0985bf46a0f580555a70e94b95028857bb5056e62cd8bc4114703d5e8c1fc
CVE-2024-27294,0,0,6a08d12fccf8590c3ca84aea628a228836385e94246afbcc476ee85ad0c8233f,2024-11-21T09:04:15.950000
CVE-2024-27295,0,0,62b63c8181e69fdf30bf5e9ea58e339ce340673603d1ccec39c0824328ff8081,2025-01-03T15:57:16.817000
CVE-2024-27296,0,0,bc7f110c759f40dab70b917dec22fad4a370b676b33c49ffc610915e7181e1a5,2025-01-03T16:14:03.593000
-CVE-2024-27297,0,0,0f08fd661388c47fad3b951d015108d74fd35f9d302b8c4a28976eae1f793c8b,2024-11-21T09:04:16.323000
+CVE-2024-27297,0,1,ef20090b8ac4cce5327a6d67445e8580ded214e3d6bcc9508b8911eb5c48b2a6,2025-02-26T15:14:55.753000
CVE-2024-27298,0,0,fec5a39b802dd251f2972424edfe42a5be7f6a4ad28011a2651a8684a41ac677,2024-11-21T09:04:16.450000
CVE-2024-27299,0,0,029c976c3a15e4a9e0fa1ae958d30182e2a2f2bc16237dfb8bd97dafa3f1d373,2025-01-09T17:27:11.167000
CVE-2024-2730,0,0,df1b973ea168bd529abdfe561b63ebe22b42d0397347bc19dfec242d8ab4a455,2024-11-21T09:10:23.560000
@@ -253610,7 +254351,7 @@ CVE-2024-27660,0,0,835ac63ab012d73e58b5daf1fc09a9c03cb7c25a8cb7d04cf00ed24bee7d8
CVE-2024-27661,0,0,cd47d5ad50a1483352849e84cca220184c60f0c47ac978c4451290afc18a5f3f,2024-11-21T09:04:52.157000
CVE-2024-27662,0,0,91e7bd9706f6bfa8a26a1422fc84aa4cc748e01c07009e6625a25cad5d5fb1b3,2024-11-21T09:04:52.400000
CVE-2024-27665,0,0,d3058ef20841fa8a41f5abbcdc1600eb1abacf632b9f9e89e0646ba4b85eddd5,2024-11-21T16:15:23.677000
-CVE-2024-27668,0,0,116e8cc6e476911f17a7640007f3a1a6213d9752178aff6ef55c8dfa8afd7aae,2024-11-21T09:04:52.770000
+CVE-2024-27668,0,1,dd894103cbe803a5be135ab262f65a444f04666858799ad10441d6abae3a35ca,2025-02-26T15:14:55.753000
CVE-2024-2767,0,0,9d4b13e3def7f38db3b6a06853d5184f33e7cbd07b686b0ba35c53dba43e694c,2025-02-21T16:59:39.160000
CVE-2024-27673,0,0,b827936180312254f56c8c18e1a9e00f4dbc9d441e499ec6aaa928d4b3451535,2024-04-03T16:15:07.173000
CVE-2024-27674,0,0,34ccb3f85191f3225246fe31e6b6aa02ad062724f279521d20a183c721e94258,2024-11-21T09:04:52.927000
@@ -253791,9 +254532,9 @@ CVE-2024-27897,0,0,e0fd628e199d1ad9f7d1973d04b30e3b226e987f2d07bcbb58339313ac383
CVE-2024-27898,0,0,c3dfaff305379d70787fec6732768df3e98dfbdf735d5678f3af917676efd22a,2025-02-06T19:01:07.703000
CVE-2024-27899,0,0,a604999ac254f893bf484b56f8c916b1c621d5e943e54c837b0fa2e56a53a410,2024-11-21T09:05:22.627000
CVE-2024-2790,0,0,46430baf671506f8e8e0e96de5abb2a9dbcf4a843ba1d0b27f99c14044a5e043,2025-01-28T19:26:37.203000
-CVE-2024-27900,0,0,0959b2054b27454fdc1ef4ac218f2c38f403415af9de5e09c07c2e491cac493b,2024-11-21T09:05:22.767000
+CVE-2024-27900,0,1,b14ed55bde9375960f07dc7dfc3b986b60f5a69cc87fb44da460eabd69133343,2025-02-26T15:15:08.143000
CVE-2024-27901,0,0,446889df5d6f342bce9db6ffc9b1986b1759b684a2d1d50d324de40c727810fd,2024-11-21T09:05:22.907000
-CVE-2024-27902,0,0,3ed35f57e19fea9dc67cc2f0d80160581d1f940b7dddb56881544543ee19baa8,2024-11-21T09:05:23.040000
+CVE-2024-27902,0,1,dc3fa5b3d4cb72ec01595e3b8892288ae24cf7220ec981abde5df5e832101b71,2025-02-26T15:15:08.143000
CVE-2024-27903,0,0,58c75e7797eeb5b5e663237ce1ebff14bcaef9f53e4f7a44ed3cacca0730af63,2024-11-21T09:05:23.177000
CVE-2024-27905,0,0,48d50f750a1fe5ee845f6ed61ede3995e1acb62ebf4008a533d76b056005f060,2025-02-13T18:17:46.050000
CVE-2024-27906,0,0,4aabf7efe7321163c3a006a7612eec109447384a538844fd5acf0a9ee7d33770,2025-02-13T18:17:46.247000
@@ -253828,7 +254569,7 @@ CVE-2024-27934,0,0,9297d1f91d2d4c4da21b3c2ee5d403945d60f5b3cc59b814110d9ad7cb584
CVE-2024-27935,0,0,a818d438fc92cb3829b80e0c20360d6755dd4a7e2d490856f973009bf50a4648,2025-01-03T19:25:19.090000
CVE-2024-27936,0,0,2099c76d277ac21c38cfc54bbc485707bce8fc86e66cd1bed544e652cab80946,2025-01-03T19:27:46.510000
CVE-2024-27937,0,0,82e87c7e48ea4409826e73644eb6a015968a77c77ade52ed938f8f3395a1fbf4,2025-01-02T16:20:03.713000
-CVE-2024-27938,0,0,f3fa24107d64f072de2a337377f22dc2fedd62e7046e2b3f6a494579c82cdd75,2024-11-21T09:05:27.543000
+CVE-2024-27938,0,1,a31a85648e5a629733137d6d5d64c3aa17ff5e9f3d649b74496c6ab9a10a6f37,2025-02-26T15:14:55.753000
CVE-2024-27939,0,0,b667eb0a9384cfc5a2aeebee363b7da2248c153b2463d3acf87d14eca4d3795b,2025-02-06T18:16:36.110000
CVE-2024-2794,0,0,33955f4149d64b1b269ef69fbe9402b7695f6b6b91e1246e2fc086085da81caf,2024-11-21T09:10:31.997000
CVE-2024-27940,0,0,2dd5fb975e6e449ebc295eb8f31cae07cd0aac3f9359e397fb08557ee431ff1b,2025-02-06T18:16:23.880000
@@ -254005,7 +254746,7 @@ CVE-2024-28117,0,0,25a818d5b218e308783785ed799f95754af9a77920e6452a88595579929a6
CVE-2024-28118,0,0,8a17fe4656f03151b71f31ade8b3e0ea1b4b854e460eb59f1fa702e29a157fd6,2025-01-02T22:59:47.963000
CVE-2024-28119,0,0,c8ac53973d5fba3d8aeba4ef26061df88c4485e6766013a46858768ef5a83340,2025-01-02T23:00:20.203000
CVE-2024-2812,0,0,8b6d30205bee6181242e8d31f403e11341462f2307faa4f20deb252027c2cc74,2024-11-21T09:10:34.993000
-CVE-2024-28120,0,0,f67a74ade784860bc36724d086a9a9d5dcadc390fc95662e9246160ff40605b4,2024-11-21T09:05:51.580000
+CVE-2024-28120,0,1,535c8347295f8bd272cce8d3972d31332efc19617f3617329dedf0bc6dad1aca,2025-02-26T15:14:55.753000
CVE-2024-28121,0,0,115a1c99aefa939b04cce33a32ba74eeb00b430abe11ed901a01a0cbd0e0e021,2024-11-21T09:05:51.707000
CVE-2024-28122,0,0,e3d16868d7774e283044aa0f03af6142658f7d2fd8130130495f2d2fa9dfb6f3,2024-11-21T09:05:51.847000
CVE-2024-28123,0,0,5099212f57d318f83757e71a466b9bdf4be2bbcb864e78e89326cbc09e003e14,2024-11-21T09:05:51.980000
@@ -254074,7 +254815,7 @@ CVE-2024-28183,0,0,9555513c15c6dd9baed3e2d069779762ef7c565391599ac1fbeee74892cf2
CVE-2024-28184,0,0,7cd71c1e028c7ed89aeec3aa8641637d69658db78c8f52644de85b0265605c29,2025-02-13T18:17:48.580000
CVE-2024-28185,0,0,a1eeaa960835511bd15f7ed3bbb03116366af2e2e6ed485d3595923119625447,2024-11-21T09:05:58.963000
CVE-2024-28186,0,0,dbe644f0d73db6e0c226eafd6a70e1fbbab0d471fc2640cee55ffd8ab6efd5d3,2025-01-10T15:01:40.657000
-CVE-2024-28187,0,0,0a3450f5073be1d4240c0ef0f2f407d6b15b5cea6d54b8a4ffe80e8263924365,2024-11-21T09:05:59.240000
+CVE-2024-28187,0,1,8f04f7c917566ca90ada5a3ccf20d4be347d46af4c1ac48000219ef76c72ee22,2025-02-26T15:14:55.753000
CVE-2024-28188,0,0,e75215c635ecc7d09582fbef46324329d57c09d369f24af90d98772bf8f316aa,2024-11-21T09:05:59.380000
CVE-2024-28189,0,0,60ed687c41a6d075b26b2f0112d4217df779ccc45bc9e63ca6d0ed32ad3da9b1,2024-11-21T09:05:59.537000
CVE-2024-2819,0,0,119e8a694e0c71b2df88a1c46090c184a6155f60a9ebd588d2a9454017e4751d,2025-01-21T19:14:24.217000
@@ -254086,8 +254827,8 @@ CVE-2024-28194,0,0,dc839140e9918f60622128b4ae95c79a28377a1e1e047fa3ba0a032ecfaa5
CVE-2024-28195,0,0,88cba2fb83e2245fa11cccdd922264095a701ee8b7109600d8beb431566d861a,2025-02-12T15:16:31.260000
CVE-2024-28196,0,0,1aa739351558571e5c561707d080be08f96c798273d193f204af239cbed8c655,2025-02-12T15:18:34.053000
CVE-2024-28197,0,0,1ae2047ecd0c4043e0bdc00ceaccfcd5a2d21148692c0ff8a3261be8b479f2bf,2025-01-07T15:54:40.987000
-CVE-2024-28198,0,0,761cba225c385d498bdd6fba40bd3dda8cd3d08c2183e5b794fada4afb002ea1,2024-11-21T09:06:00.677000
-CVE-2024-28199,0,0,ce7b5d92a4f57c9e2aa64edecef6ee8520d5af49c8b77489080d765a812d8d41,2024-11-21T09:06:00.800000
+CVE-2024-28198,0,1,d5a2f49b6f1f77e951eb44d3cdfd3ebf1e5a9864e32f7e0eb7b8cf17194ea236,2025-02-26T15:14:55.753000
+CVE-2024-28199,0,1,5232c781ce711e0b2fe8b667ffbe4b2252699dff24a9ee74c23036ed7a446ad6,2025-02-26T15:14:55.753000
CVE-2024-2820,0,0,be3d2cd925aafa6d85df2c2b3667d70f66e86ec9b075f7efa1eeec4b5887ec09,2025-01-15T18:53:10.600000
CVE-2024-28200,0,0,0263772c352f3b54dec3441087735e67380564a41516129e2d57456ae7e8b152,2024-11-21T09:06:00.940000
CVE-2024-2821,0,0,013e485c62278e9803d4e03b9cc054306cb2815aa9d9510591986d84cdeecfa8,2024-11-21T09:10:36.347000
@@ -254357,7 +255098,7 @@ CVE-2024-28753,0,0,c9631786ad76e83b9358fe0bc8b3f3a68f50a7223beebe9a4a5da7f34c8d8
CVE-2024-28754,0,0,02139d2ea07590a72d1b2f058a38e4bca4287203076f25f82479cbfd70c8332c,2024-11-21T09:06:53.820000
CVE-2024-28755,0,0,d332744b9da960b762c5d5977c7018fd16bdb34f9bd7917dae4345ef0687f0bf,2024-11-21T09:06:54.030000
CVE-2024-28756,0,0,690c3487a07876dd049c19665e845da2f28dadbd04cc6a33595a62792634596a,2024-11-21T09:06:54.270000
-CVE-2024-28757,0,0,8dcf3053aeb841f4c3a05d9db7c88ad0311eeb143731b145bb3e58cda5d82a20,2024-11-21T09:06:54.427000
+CVE-2024-28757,0,1,948d263ef3762ca34f91bcdf174f8cddaad3eca247960f905f2738ae0ffa3234,2025-02-26T15:14:55.753000
CVE-2024-28759,0,0,c922889c9fbea01425ba4e2700505b2918fd90679ef9f59186bfe2fa2d671d0d,2024-11-21T09:06:54.587000
CVE-2024-2876,0,0,71c3a804e8eb8bd03fb495c4bf9bde93ee7dd07888efcbbc5faa48502cbce8d5,2024-11-21T09:10:43.890000
CVE-2024-28760,0,0,87ee4a50e50beb3eb3a2ff436ddbd84c55b2df2ce2872466f7017d881731ed16,2025-01-07T21:02:43.143000
@@ -255401,7 +256142,7 @@ CVE-2024-30141,0,0,366cb3a10440e3b30cd871e21bbc3f740fac05dab178efaf9985b3ce33a27
CVE-2024-30142,0,0,363bc8d9ef2cad1109db0231f1d9e043ce9476ebb48510d5ff80d7b6f8e54e19,2024-11-08T19:01:03.880000
CVE-2024-30149,0,0,78a7b5e7d0c5c72edab93350b1cfa99172cc2391a009f41c15ff91d2caf6d679,2024-11-01T12:57:03.417000
CVE-2024-3015,0,0,05f5bb37dc8a3d22ba33d8caf2864b7f47e6f12d954d75d0efa934bd109df0e9,2024-11-21T09:28:41.097000
-CVE-2024-30150,1,1,7dfb9665687fea389076fd48fd0e7b432a0eb78799c5fed223fecd7c8723163e,2025-02-25T23:15:10.753000
+CVE-2024-30150,0,0,7dfb9665687fea389076fd48fd0e7b432a0eb78799c5fed223fecd7c8723163e,2025-02-25T23:15:10.753000
CVE-2024-30156,0,0,92fda2ccd849293e60b2e463cac31a4dc54847a22ed3e9030d260cf180d129ee,2024-11-21T20:15:40.067000
CVE-2024-30157,0,0,559260e13715a400d85dadb0bfe165c83aef8f0ab0ce2b4b15f456f448eff1c9,2024-11-21T09:11:19.547000
CVE-2024-30158,0,0,95d9ce829a91f171649545534b80b43680e23fd13b3b02f53cdc5be44785afcc,2024-10-25T16:30:09.927000
@@ -255465,9 +256206,9 @@ CVE-2024-30215,0,0,a1b0f900cb62de925491aed41f5921b94f9df9f244b21ce8ccb9eca6d15f7
CVE-2024-30216,0,0,b347f4e1cd688789ece90c7e9f749d8a81a14f518a018cb6e704a8c4efadc5e6,2024-11-21T09:11:27.933000
CVE-2024-30217,0,0,8b1ee13cb508bb6c80692072b22edbe0b22fa8c14c399fe6c5445c20f26e9f96,2024-11-21T09:11:28.067000
CVE-2024-30218,0,0,62ab1357959cfbcc7eb28f53243d1a18228ff767f9cfec29cd8382365b686eb9,2024-11-21T09:11:28.190000
-CVE-2024-30219,0,0,cb97467ab792bbb464007f6b7a498696e52fde0aded63b03d7ba03222979422d,2024-11-21T09:11:28.330000
+CVE-2024-30219,0,1,f7577199718dbaf17326d5228f5760508fb82afcbb46147d1ae70fe6299db123,2025-02-26T13:15:38.863000
CVE-2024-3022,0,0,e63fb5f371d3b7df90c0a1e9e40d2dea16291ddc2b1c6e0c97f8eca1671e2e77,2024-11-21T09:28:42.207000
-CVE-2024-30220,0,0,1401a5220156c9572ff62031ba4b377b2c95291490624bb5c02cedbdd328d51b,2024-11-21T09:11:28.523000
+CVE-2024-30220,0,1,9d0403902ffc6331375ed08dc9e5c25262659a1b18b8420471922298b7676c51,2025-02-26T13:15:39.090000
CVE-2024-30221,0,0,6b1389d4797f5e363faa3ef1c88bf956df9e73d1a57ea29f555bfbca83ee9b75,2024-11-21T09:11:28.727000
CVE-2024-30222,0,0,69800e6e6fc24088c6652503225b53f822421e5230f06bed4052b12efed4f108,2024-11-21T09:11:28.853000
CVE-2024-30223,0,0,3fc25919f1667d5a00c5c550c3492c7182dc8b60b8795a9bd0cdee538c5f3fab,2024-11-21T09:11:28.977000
@@ -255646,7 +256387,7 @@ CVE-2024-30391,0,0,81b7a0d141487d2a17e6b889272799a52101d557e37b75679a9277d4e16dd
CVE-2024-30392,0,0,b065ca165687360d84ba02e43d04835f798b47b0cd57f527ccc64d72d770e70a,2024-11-21T09:11:50.017000
CVE-2024-30394,0,0,282a1d5b5196375d15831e6bd393cab1f623bd77958f81043f7297f549a1ea27,2025-02-06T18:39:12.470000
CVE-2024-30395,0,0,78b53f43de2e8d4fc94e7e6cfa8d455e8d1b61416414b6cb165d9e06dbce8f2b,2025-02-06T18:39:02.430000
-CVE-2024-30397,0,0,89ad3822f5ad994ba8174ce496d747035dee94379d29f2531507a9e41f9fd1f3,2025-02-06T20:36:00.690000
+CVE-2024-30397,0,1,b2efd318a4a612836bdac7542c6abccbcf52b4c59f77d9fc4890406d9279e16a,2025-02-26T07:46:51.690000
CVE-2024-30398,0,0,748cda7438f21fb8eb288f97d46a55d17b09925e4e8b509b19cfad359b674f28,2025-02-06T20:35:49.817000
CVE-2024-3040,0,0,c8af8750a613f5187d04c39a0bc66acbf0b9fe72661c80b26586a546c32e8090,2025-02-10T15:19:25.093000
CVE-2024-30401,0,0,e66f9f288671cc268b0bbabbb0c77a681bc7fc825f4f062725eca8cb61117058,2024-11-21T09:11:50.720000
@@ -257997,7 +258738,7 @@ CVE-2024-33564,0,0,91c6f3a88e6fa9a12ecc1c501d4eb570213632d372ee621cb73eeae69ae8b
CVE-2024-33565,0,0,f8ac59487f0ef5ad93af6071c80b82fcc0b754442b9a6dd245dc4785875fa939,2024-11-26T15:47:54.437000
CVE-2024-33566,0,0,0a14cc0ea99cac25f6074b80a5cdf26ca23a638ffc8bd0e69ca4fc09d0b8f93e,2024-11-21T09:17:09.930000
CVE-2024-33567,0,0,cf8c266aa4176a9f4e335e04c8716e3d23a144b9b4be0bd49b92c79efe210938,2024-11-21T09:17:10.053000
-CVE-2024-33568,0,0,3a5ac7e9e0ebca426fc04584225735bf356913d21216b165bdfa8e4ad4736c54,2025-01-29T17:32:13.227000
+CVE-2024-33568,0,1,df338c382fef5dec3d1264a057061209be7eba788395a0186c244dfab9d2aaa7,2025-02-26T13:15:39.343000
CVE-2024-33569,0,0,79125245cbe0905c94fdb34d1dc829f7eca3884c8dcb3558cf500491820827f1,2024-11-21T09:17:10.307000
CVE-2024-3357,0,0,d8489952fa7c7d2e44ffcc7460aa1d293d4da2e16a84999142059932bcaa560d,2025-02-11T14:48:18.747000
CVE-2024-33570,0,0,72050873b939c9ce86a3f1e3fd102cab2ec8cfe9ca27c22914b3599f90e6b7ab,2025-02-20T20:04:28.050000
@@ -262710,6 +263451,7 @@ CVE-2024-39438,0,0,24206dc13e5c569ce4ed39f81926d8b7d31d87ead875693b60dd57a2673ab
CVE-2024-39439,0,0,ce75ad981b5a0d9d1a3b44ff24f21db07abb0f10b7cc9c0104da458e8f884ead,2024-10-17T17:32:05.890000
CVE-2024-3944,0,0,b4ac3a6cc8bdc3d4562ec3251954cb7d98b5fdc3cd00cb185f6de2c2a7491615,2024-10-04T13:19:51.383000
CVE-2024-39440,0,0,4f2c0d9e1a449f4e7f0abbc3c14ac2d1b80f295000e70aed068814c8c26e6bdc,2024-10-17T17:33:48.143000
+CVE-2024-39441,1,1,7c2047943a030aaf49d4a200984d3ca6f82f7367a0c68be3a383218ad05fd0ae,2025-02-26T13:15:39.547000
CVE-2024-3945,0,0,7093e87a0bcef232ea8887066fd83c1aa636503474edf23e55d40151afe0235f,2025-02-12T16:26:04.993000
CVE-2024-39457,0,0,200f1d3fc23798fbfd97f204ad1c3a109ac863e4640147e347dba97a39f0518e,2024-11-21T09:27:42.080000
CVE-2024-39458,0,0,600f68b554d8ca33ceea3ca3c437286132be7e855f795cc4e4b3eacc73ca7029,2024-11-21T09:27:42.223000
@@ -267575,6 +268317,7 @@ CVE-2024-46212,0,0,9fb6a248b9aee6c6623aaaed9592269e8faf25b72106f535b7602ba05dd43
CVE-2024-46213,0,0,14e6aca58c78f4091257ec1bdfcf4f32aabc7fd46f373f1f42d1b8882c20a13c,2024-10-18T12:53:04.627000
CVE-2024-46215,0,0,fe5702e9b51c58e432fa7fecc93685ecce003d70c9e7155da8f03da1e9c41964,2024-10-15T21:35:30.590000
CVE-2024-4622,0,0,836d5a84abb9db5872c21b186e5280275e7562bebc9f6087e2dfdfc329e622c1,2024-11-21T09:43:14.267000
+CVE-2024-46226,1,1,86cc3f2e5854e5c13d58baba9436255121a2562c459aa5ddfef48cb88156c4ad,2025-02-26T16:15:15.947000
CVE-2024-4623,0,0,961703e940078e4a6bf4b9531b20914846a73a30d4778efd87e6c1011cdacab8,2024-11-21T09:43:14.387000
CVE-2024-46236,0,0,7b5402efa8af8d36f034a678c339a134167dfcac00261c63f07ca8461d45c760,2024-10-23T15:13:25.583000
CVE-2024-46237,0,0,edf91e19e8040a7af51513872bc3be6ebdceb66177f9157d729c7b8ec5e1e843,2024-10-22T18:35:05.180000
@@ -268169,6 +268912,8 @@ CVE-2024-47048,0,0,425cce79ac1ff694ab4c7cef97a6df0f5610cb2bf223796f917dc53ac24ed
CVE-2024-47049,0,0,9435c3feeabad953f768be0dab3a8c5de1fda327c2cd4383c7019bbd8d92ff47,2024-09-27T17:09:46.980000
CVE-2024-4705,0,0,70c389ca67ab3379e01e7be3997ee96e6665f685a382d4b4294d25153d98d41e,2024-11-21T09:43:24.977000
CVE-2024-47050,0,0,0ecdbbebc96569da8fe90045f207bda8eb6f3c0a2e057e37f2da498fe1d2b9d9,2024-09-27T15:29:21.450000
+CVE-2024-47051,1,1,6504fffb1b1ff2a526046da4d8cf59bb7c31b7b525e3c742538cdccdd586caa9,2025-02-26T13:15:39.957000
+CVE-2024-47053,1,1,0cab2623d4d90c181bc28f928f6ec891244940bdaaa59801bf653a0eaa0807ac,2025-02-26T13:15:40.090000
CVE-2024-47058,0,0,edde224a6d4e66b56d994d6f32d48711ac34b74b7c4338e5ce4a876e2e9cffc1,2024-09-27T15:31:30.917000
CVE-2024-47059,0,0,a179fbcadeac2ac36464946db2605fea6e8bce1b21e66df8aaaa15d1eef57d90,2024-09-20T12:30:17.483000
CVE-2024-4706,0,0,3149e088dc20e2874012557f7a93cad12bf94c4bd0ac600fc84f4786a2c39491,2024-11-21T09:43:25.110000
@@ -272406,6 +273151,7 @@ CVE-2024-5292,0,0,1452aec2e6f1e5f02e53c45b3ee750a7e5d33f92b8e7382e2bc21f3b08b3e5
CVE-2024-52920,0,0,d51c19b029322a73c74b6821f9cbcbea373837a9a5ff27d72ff8adc9e86cc1bc,2024-11-18T17:11:17.393000
CVE-2024-52921,0,0,25b2bda62d23ac11ec224824331b7110da2b691d46f1f7381cfaabb403afcc15,2024-11-18T17:11:17.393000
CVE-2024-52922,0,0,6a8e09d1bf0adb255aa582ae6b8ef0e4e406447b917ba92ca194beb3eadfb929,2024-11-18T17:35:09.720000
+CVE-2024-52925,1,1,2de172f69520edbaaed42c35f4da65dd3af1d93a738bffb40ae2c7c797e8f3cf,2025-02-26T15:15:23.867000
CVE-2024-52926,0,0,5021ba3f217b734483a326034e850572aad7fe69e34251b753d7998240a26e61,2024-12-24T19:15:06.940000
CVE-2024-5293,0,0,f489071fddfba63fc047e3d21a5cfec46b34b73b22b63f08d456cdba6a84add5,2024-11-21T09:47:22.487000
CVE-2024-52935,0,0,da218bbcf32aa8ee196d0cc84ac3289085c87dcfe3a543f2e97a81e0e8e7c479,2025-01-13T19:15:10.993000
@@ -272771,6 +273517,7 @@ CVE-2024-5341,0,0,65ff8689965c5e29ef124f69d82afd0c059edc6db5694aac65d8224f8b9958
CVE-2024-5342,0,0,c19ccffd3ff364daed28ff3ce4f3e63c62c97b909f79a312d9891c60f97a9cce,2024-11-21T09:47:27.517000
CVE-2024-53425,0,0,dba41ac0d03c322e076798942c48ad94ab227d8220eb1e3a3534e4bdae7c6815,2024-11-26T18:15:20.090000
CVE-2024-53426,0,0,9339130e86a75243ea176c2c1911663d0047bd370b4ea0fccb09719eca2c3ad9,2024-11-26T18:15:20.330000
+CVE-2024-53427,1,1,4b0f2464a617fd98dd15ec4d2cead2ddf7ac03f80214d3cae58edc2c2c4aee3e,2025-02-26T16:15:16.237000
CVE-2024-53429,0,0,eaa70acb2843e8489abf02d5796dd8a314b9b85961845be919325cda159f0f76,2024-12-03T16:15:23.833000
CVE-2024-5343,0,0,a520df0d2c87c5fe35335a1b343c956cc8dcf1b7b7959b5acc51996bdc11fd0c,2024-11-21T09:47:27.647000
CVE-2024-53432,0,0,91200366caef4fd477ae549a4b97936ab0103419821400acdfe9619ad1d645ce,2024-12-04T16:15:26.240000
@@ -276252,6 +276999,7 @@ CVE-2024-6805,0,0,1c210d059e5406d15a939f7588c555a69c38d162b88d34499e6d9a21643fd3
CVE-2024-6806,0,0,bd9029223cfe8d0849ca636b94ad7a5588631303a0efbbe7c8640e9f42ceb678,2024-11-21T09:50:21.780000
CVE-2024-6807,0,0,9919a6af7a36a648de91a76a94212a21983adc44c900f96719672036daf324a9,2024-11-21T09:50:21.907000
CVE-2024-6808,0,0,aec3b7b21a163b04a302240423f1e0ff8edaa3793c34b4e6d1fe8e466d33fcf3,2024-11-21T09:50:22.057000
+CVE-2024-6810,1,1,54ffe5596fdfb5b1f68d02f2abb10aaf95637277ebec65ec1003f177326b465d,2025-02-26T13:15:40.600000
CVE-2024-6811,0,0,2c1c48c47ef38136f3e99ba59fe67000710a1b454b7a3765f0d5dee362d67d67,2024-11-25T17:17:22.273000
CVE-2024-6812,0,0,264f3438db917ec43d2bff1f5d827215fa9d89e7b8f942d74adc5117890c2457,2024-11-25T17:17:07.970000
CVE-2024-6813,0,0,278bd177812b8586be5e9bf710944d5077ee2b922460d8aec51a06ad7fd376e8,2024-08-27T15:01:38.630000
@@ -278660,7 +279408,7 @@ CVE-2024-9624,0,0,7aaf353547dfd91f6eaa1a431839c12f16a327aeec130c7f12e5c9f74a154f
CVE-2024-9625,0,0,7f1317284e65ebe6e9057a611af3ef6058f6df23515c7cbbe82fd324d753e810,2025-02-11T02:15:36.940000
CVE-2024-9626,0,0,e9628917bf466150170ade3c83ea1ca0718a402c4f4e3732ac05e432b077af9e,2024-10-28T13:58:09.230000
CVE-2024-9627,0,0,bbd2150f084c7938e6b0ce316fceb9870286e9cb9ca4f5a3efb37d7b055e03d3,2024-10-25T21:19:48.757000
-CVE-2024-9628,0,0,379a0ee64af50eb2e6716feea87eed622bba704469c3d96a0f120705cdd189d2,2025-01-23T21:17:43.533000
+CVE-2024-9628,0,1,50dccfb1a000cb226cc4f23fe198742074219ff439ffff38646ee3bb8579e293,2025-02-26T08:12:22.750000
CVE-2024-9629,0,0,ccb2809be6fc0297c8318e4c1f923a6148830a550a06f81de03fb80d95b6e694,2024-10-29T14:34:50.257000
CVE-2024-9630,0,0,c5bfebdfc374c6829acf4f216485f47c7193dffe76ae06b5710261faf3a923c2,2025-01-24T14:07:11.977000
CVE-2024-9631,0,0,8b9648c02ba078f0734a6594b2ae5a0daf10ff539344382557488d0ca821b44f,2025-02-05T20:15:45.210000
@@ -279076,6 +279824,9 @@ CVE-2025-0230,0,0,4a92fa8518fc0d278c8c3cbf586ef798acb5ea44aa1520ab4d8f925c339cf1
CVE-2025-0231,0,0,02e53679b8fd14923703697a2c268f7faf2ba9a7be20b2a39dd7878079773cdf,2025-01-10T19:58:05.663000
CVE-2025-0232,0,0,d0ddc06a8e930603cdac8e1a19ab9a28b57bef4206076a997f43f26f9e5ffeaf,2025-01-10T17:36:26.073000
CVE-2025-0233,0,0,89de13b0515a1cf87760945992d61d99115394e614dc8c040d21f875c84f32f9,2025-01-10T17:28:30.577000
+CVE-2025-0234,1,1,699c3e577da494645253807f127501c945576f7209c4c7b37a82535fa61866ca,2025-02-26T08:12:46.393000
+CVE-2025-0235,1,1,30bcfe7a8b46c0164a3b1a38c0abaa79cb3562edec985010f5a75d29cddcf6a1,2025-02-26T08:12:46.617000
+CVE-2025-0236,1,1,46d323041ef1d658ee5d5a4ca7f3538e00745cff0f4280a02ab2a5f51c7eb859,2025-02-26T08:12:46.730000
CVE-2025-0237,0,0,726b9fd4a1cc35feeb251f210c4adbb8387d0cfa8a7807bfe531c06c5d5e23c4,2025-01-13T22:15:14.740000
CVE-2025-0238,0,0,25dbf44aaff9981e33a49ac3143d2e91673102899f26dc07cf35f0cbe2b9b8b2,2025-01-13T22:15:14.917000
CVE-2025-0239,0,0,1372c31ba223568cd951d4698f35589535891c561ef4e423909537c35f403cb4,2025-01-13T22:15:15.057000
@@ -279359,6 +280110,7 @@ CVE-2025-0708,0,0,2c564dec190555666593be94185c7b92f00a312088bb857474e59f691fdbb0
CVE-2025-0709,0,0,156b4593a93fa854ef60a86f01a55e00fa0c092a95e57a097f43efa6d6f6b8c5,2025-01-24T21:15:11.237000
CVE-2025-0710,0,0,d434afd262bceee38318c1978d6fd83eef213e4c7163f6e3a198919727021a6b,2025-01-24T21:15:11.420000
CVE-2025-0714,0,0,7a5ace77913ec81f29c63850fa9378895a034df434a64ef2c1dd7b18a728bf62,2025-02-19T09:15:09.863000
+CVE-2025-0719,1,1,88e87d662fd764d29f561b92bf6aa93d3cae161b6047b0acdca5544dc87e50a7,2025-02-26T14:15:11.587000
CVE-2025-0720,0,0,602262593ab5841efad088d2b78c277a4b7966a622beefaf31478d2cb3826706,2025-01-26T23:15:21.547000
CVE-2025-0721,0,0,6ec94842fc56f269bbd59140c6e666d7e2a9ceff3e8561f09aafbc16234d7c15,2025-02-25T20:28:55.787000
CVE-2025-0722,0,0,42cdf7f4caaeea911fa5d414473f98325de7d1f40e73c719cbc6af436bdb1a97,2025-02-25T20:12:27.810000
@@ -279368,6 +280120,7 @@ CVE-2025-0727,0,0,bb76426d7360ab591b4341810574104175a8b841230e45a68fe25f6f54b22f
CVE-2025-0728,0,0,fbe2ca789a8cd169b541c150bb8deacad0a074160227e69d375dcc5d934fc86c,2025-02-21T09:15:10.077000
CVE-2025-0729,0,0,47f7aa1143af5ff386851185d07322b33da91a6c70254019e675c66f6b698c27,2025-01-27T17:15:16.917000
CVE-2025-0730,0,0,2af04aa386ac678a6fc944dd8f7ba46d52548cae0bde338f3a493a49b6512319,2025-01-27T17:15:17.133000
+CVE-2025-0731,1,1,7cda39a515241d0d6ceaec4b9d0c2b9fa30ad4763c10ac5a548df652fa32d7d5,2025-02-26T13:15:41.040000
CVE-2025-0732,0,0,1ce675ab3efd6ec96092631e523be68cbc1c9a729d4a9ad32dfbaf47ed4ee068,2025-01-27T18:15:40.550000
CVE-2025-0733,0,0,0bf84243851eeb9b1aa3afdc97e5dcd62f1d6c39069e8932844963521b6f44ea,2025-01-27T18:15:40.760000
CVE-2025-0734,0,0,b9267ca61a9d7afed7feb5df21b0bbebdc4d68c14f23d194ef7286d483739b7a,2025-01-27T19:15:19.130000
@@ -279386,7 +280139,7 @@ CVE-2025-0751,0,0,41447a1f62dc3ac9ecb88fcff2841f80e5cd50cbe7db83d66299a5c159c4b5
CVE-2025-0752,0,0,de749aab58e2326cecf2e69cd47cb06af87bcedce5e0f5e8b795ca284455a6c7,2025-01-28T10:15:09.493000
CVE-2025-0753,0,0,0664e041c345df85d53dfb2c47a778f67916ea16ed36ea2765a7ec7e7cbf7cd2,2025-01-27T21:15:13.653000
CVE-2025-0754,0,0,01e22cbc27c23b2a20fc22b4b38925f42f70aba0e3cf26d239fd3f71faae49ca,2025-01-28T10:15:09.697000
-CVE-2025-0760,1,1,41c51c3186d7c1d82dcf6c1e725fcfd59fdc585d73de4a715eb553b80d5dac62,2025-02-26T00:15:10.890000
+CVE-2025-0760,0,0,41c51c3186d7c1d82dcf6c1e725fcfd59fdc585d73de4a715eb553b80d5dac62,2025-02-26T00:15:10.890000
CVE-2025-0762,0,0,e4f54e0a8112ca4bbd93833150136d658b70b741ccb351b92cec93e89ce75210,2025-01-29T15:15:17.687000
CVE-2025-0781,0,0,b187217e5320659130c2f954520571f906b51edbf3680129182cf06170507db1,2025-01-29T22:15:30.187000
CVE-2025-0783,0,0,8924456cd6700604f4e019fec6c3db3aae4fc1d29681bfa897a8d15c04913bcb,2025-01-28T19:15:14.410000
@@ -279453,6 +280206,7 @@ CVE-2025-0874,0,0,b8572537da2e045e2829a07f0a51ab0f5b85adffa940a3aadd3fdb4cbae9a4
CVE-2025-0880,0,0,a7e1e58cef5034f33881475bbcd3864113c1d65d63547a13c1d9ab8c18756213,2025-02-25T19:20:49.193000
CVE-2025-0881,0,0,c0b87ae49840b2495e4993b7143628de7aaa51e127538c05ffa700ec31c486f2,2025-01-30T22:15:09.950000
CVE-2025-0882,0,0,b114ec462c06b6cb6e0f95f48a5ddf25603f5483375e39294eee648d47a7849f,2025-02-25T19:08:48.593000
+CVE-2025-0889,1,1,0629b7b02ac3b35a03999e70ad430e300216aa76950a072ad25c550e5da8658f,2025-02-26T08:13:09.050000
CVE-2025-0890,0,0,68df14f89e9fe80a79d0a5c45e2ac7eb09be58559d3bae2cdceaf342154a05c6,2025-02-04T11:15:08.880000
CVE-2025-0893,0,0,6db1785577b11d9c0f80255d5dcae1d7c0eabc239e3cf19e2ae2ac23422990f0,2025-02-19T18:15:24.127000
CVE-2025-0896,0,0,ecb21883de9b1361a3658cc48f44fdef2f626a3624bc2d70212f10094545a767,2025-02-13T02:15:29.470000
@@ -279481,6 +280235,7 @@ CVE-2025-0935,0,0,33f67133e31f18fd4a46b7018ca75f17bd9c12cd022eca372c7880cd3fb289
CVE-2025-0937,0,0,4d23918c79b57f87e4232ec5cbaefc29cbda81d3f6ffaa451d12f8c2e2e91465,2025-02-12T19:15:09.687000
CVE-2025-0938,0,0,48d7b602c8da430d9ec862aa287f133d1b7490f6d69b5ae38b3ee95dfcfec97c,2025-02-04T21:15:27.543000
CVE-2025-0939,0,0,762c206abd21032a2362d7d03f8696dc3cda9bf876a13f8c73ebb711762a318f,2025-02-21T15:38:36.803000
+CVE-2025-0941,1,1,2be4361c17cbe56867bcf1e1bb734b71aeded02e91d0ce7adfef4edb0de9117c,2025-02-26T17:15:21.910000
CVE-2025-0943,0,0,812d30b4c0a4e8e8699f3b3fb871a6a6493f30967e63a2f74a7571847c91c34d,2025-02-07T14:03:39.237000
CVE-2025-0944,0,0,cdd675de7ca01f9e1244cd84900251a7dc3afbeb2151f5098fb67f204d1a23c5,2025-02-07T14:02:27.067000
CVE-2025-0945,0,0,626a8bb0e1e3d33d2410c60e4622d35d1cc8f4aaecba827352e38bd8bc8d062e,2025-02-07T14:00:06.057000
@@ -279549,8 +280304,8 @@ CVE-2025-1063,0,0,8afe3c738078e31fad93ae55cbf7f8953e765aa6c89218563942d00ddb2913
CVE-2025-1064,0,0,7b7164b210697e056675206baf5cc1f85c1aa8eb0b02774ad30b163694ee3ea3,2025-02-25T20:41:01.500000
CVE-2025-1065,0,0,91e01129540d7e7c24b479977792864ebaeaee2a2b34fb9700bbb79776ce5735,2025-02-19T06:15:21.507000
CVE-2025-1066,0,0,3fc22615f942b72b8cf5d09f7bd097e7cf373f3b0fcdec9d31e667deb7a70a15,2025-02-18T19:15:24.243000
-CVE-2025-1067,0,1,e195125a650612d88e0c615ad495fcd53625777d738f7f8f30e9c1c17e1d4224,2025-02-26T00:15:11.040000
-CVE-2025-1068,0,1,08c5fe90f20016bc558258ce32febacdac0bedf31c603d9ceab2bf85a0a2a6d3,2025-02-26T00:15:11.140000
+CVE-2025-1067,0,0,e195125a650612d88e0c615ad495fcd53625777d738f7f8f30e9c1c17e1d4224,2025-02-26T00:15:11.040000
+CVE-2025-1068,0,0,08c5fe90f20016bc558258ce32febacdac0bedf31c603d9ceab2bf85a0a2a6d3,2025-02-26T00:15:11.140000
CVE-2025-1070,0,0,5146e4f08b2531ff82fc620bde7cb0c34c86b4487a1fbc38c78ecd1432016151,2025-02-13T06:15:22.463000
CVE-2025-1071,0,0,7142cfc8cc7ab9d0dd5414936b1efb97baa218470ab4a83ee432e541f81ef9d1,2025-02-14T14:15:32.560000
CVE-2025-1072,0,0,bb0514ae35802411e3da1596896cb302b1b469b7b79e6814634b3c15db99cbed,2025-02-07T04:15:07.737000
@@ -279565,7 +280320,7 @@ CVE-2025-1083,0,0,16064cc59146b17006d53d67046a65a9c0b364257a94b2b373fa99c27da341
CVE-2025-1084,0,0,93fee3949ec546a58cb9da1c1619fb657dbde041632da87d4ac6e93d0d865098,2025-02-07T00:15:28.180000
CVE-2025-1085,0,0,1ad67fc3dcecff349f45b0918fd96e4db08dcd56b6d0ad12a44043dc90d21f08,2025-02-07T01:15:07.930000
CVE-2025-1086,0,0,224643d9b2f43f102432df09cca95386bdc4432ae24da6e421d85411b67c24c6,2025-02-07T02:15:30.523000
-CVE-2025-1091,1,1,d2d4dbb316b64778d20434518d67e3a1899de25756a96c52898716d6c7ade53d,2025-02-26T00:15:11.250000
+CVE-2025-1091,0,0,d2d4dbb316b64778d20434518d67e3a1899de25756a96c52898716d6c7ade53d,2025-02-26T00:15:11.250000
CVE-2025-1094,0,0,dca1378d2e11e054a0baff76bda52bd172b0e41af32ad66e0ce66e679989e2ec,2025-02-21T18:15:20.033000
CVE-2025-1096,0,0,f369ee58dbaa6e142f3d975d8711cac15a0a303facd75e898c558f3e454cc535,2025-02-08T01:15:07.947000
CVE-2025-1099,0,0,866ea005495998eedc94be57a64f094566d9af9b611a4dc7ae3f41bc7a1f4d42,2025-02-14T12:15:29.460000
@@ -279676,6 +280431,7 @@ CVE-2025-1240,0,0,363ac0ec488e57d295d78c481b595c1c1507ba076f5813d8f4f20530988afa
CVE-2025-1243,0,0,cc81de32b5d05e39147da539415b77f22c0d2f7ae5860780f62e8e275e3c2c4c,2025-02-12T01:15:09.073000
CVE-2025-1244,0,0,4873e23ffda0d795b5208f2bbb0bbb9ab8821cf32651b326d7afc0c6c00e584c,2025-02-19T19:15:15.437000
CVE-2025-1247,0,0,e0153bae3362c83882a00e373f05f61681964ee52d16af66c9ce73b6be435d9c,2025-02-13T14:16:18.400000
+CVE-2025-1249,1,1,93399ea1aab7846ff3005cc3013f42e420495dbd53698c66dd2894c536c541a3,2025-02-26T15:15:24.470000
CVE-2025-1258,0,0,e60d49e74992453b0cd2d8b93f0bc7a60901e2447adb1d6d0cde7627e3bb44f5,2025-02-20T18:15:26.217000
CVE-2025-1262,0,0,08f99db194238254f28713e2d46d598cdff03dede7f449d79e504f7931daff4e,2025-02-25T13:15:10.077000
CVE-2025-1265,0,0,8b96eb635d74048f7915847b63097d4febc56f3fd9332428d5a4385c9760ce44,2025-02-20T20:15:46.537000
@@ -279696,7 +280452,7 @@ CVE-2025-1339,0,0,8f1957eed8ce41b8e7470cc3d0baacfd9956a9ddc7b746b6c49360dfcc427c
CVE-2025-1340,0,0,4067af28c7bb270a8ac8df173a9485595afb21f9632d3436eb374277f441c582,2025-02-16T14:15:21.130000
CVE-2025-1341,0,0,182a7680c7744a4f8c49752d8802ff05fe23bfd57440db85ddb0f7a0939e246d,2025-02-16T14:15:21.893000
CVE-2025-1352,0,0,c9c4f62ff64c76e666d069862859170d5af1290747a406cf9c7fbe3d8aa99284,2025-02-16T15:15:09.133000
-CVE-2025-1353,0,0,0b66fc4bf3be48d7c756d2092909bfbcec43a3f29397e60e589fffcc2fdaf099,2025-02-16T15:15:09.320000
+CVE-2025-1353,0,1,592b3b5fa0e656024e4607b02db6b1922da161f4886bf146bf25aacc925677e1,2025-02-26T08:13:23.443000
CVE-2025-1354,0,0,10edd7ee72344f07faecd4030260231c8fa75bfa03beae4ac136d3be476dc882,2025-02-16T16:15:19.253000
CVE-2025-1355,0,0,774c6b63023a13a3d220d259e70a6756351cafbf5e5f1c45226b24cfd34f0ca3,2025-02-25T03:41:32.873000
CVE-2025-1356,0,0,08cf90cfb0410b9d421ae79ee6aecddadb31bcbfb6c81cbb149825bd7bad7f89,2025-02-25T03:40:30.107000
@@ -279750,6 +280506,7 @@ CVE-2025-1489,0,0,3008549e3d2861f78796256b763f59eec371226dd4b84353f864c64443cf0e
CVE-2025-1492,0,0,a12c05d7276816932001573681340e79b217d21be6e278e421f34f68972737e1,2025-02-20T02:15:38.553000
CVE-2025-1509,0,0,23e6d59505826ac4948dc80673c03ff2b0aed485111f57186985eb2e5cb2ebc3,2025-02-22T04:15:09.883000
CVE-2025-1510,0,0,9b376c589154983b1ec02250f9735f4521be8d5584c35e34e9235c478622092f,2025-02-22T04:15:10.040000
+CVE-2025-1517,1,1,3a8527d396408e64988324446816f3f2a736d3d929503a44ae66c5cadda29ddc,2025-02-26T13:15:41.193000
CVE-2025-1535,0,0,c8067c833343598442009f0c070dbd08eddedc896cdd41576fc32acd051fac52,2025-02-21T12:15:30.877000
CVE-2025-1536,0,0,10f03af38479b02a7f4a530d7c1cc2f1541bce31ead11e490c0a23f9eb3125a3,2025-02-21T15:15:12.270000
CVE-2025-1537,0,0,f2adfd985c6cb9647b8158d323777cef6f7e47a1a971653763a33752159d0490,2025-02-21T15:15:12.460000
@@ -279803,6 +280560,7 @@ CVE-2025-1617,0,0,f8b5d497942700d9485e4f9475a52f7ce71fe3f54483032059a95f27d690d0
CVE-2025-1618,0,0,5653f37c834d7e927ebdf4835f8b4b2db1c30742d0495922546989d808169e24,2025-02-24T05:15:10.980000
CVE-2025-1629,0,0,60983f0ba0e5f0b685c866a67c52df667d2bfe57a6c3421095271a3cf3a2da01,2025-02-24T05:15:11.280000
CVE-2025-1632,0,0,e4d830f0038f1d0ec1a385180555c2b78df11cbe25ede30530c1c285ee3eb6b4,2025-02-24T15:15:13.217000
+CVE-2025-1634,1,1,57c3aa057b9abce98178b3eddc3db7fc4caa714d3b659dc8bdf3263d8c184245,2025-02-26T17:15:22.083000
CVE-2025-1640,0,0,c9144f1d36a671c5c294220717c102bbee784a06194946bddd82d757b17db602,2025-02-25T00:15:09.723000
CVE-2025-1641,0,0,3e60680d02c32355c7c51637987e868a5b83b44bf51944f0dde54e34ed255aca,2025-02-25T00:15:09.913000
CVE-2025-1642,0,0,eb1ad85c96cb940c08a5097dfefa119ff4b08ca6e6f0f41907372556779e3a83,2025-02-25T01:15:09.057000
@@ -279815,6 +280573,7 @@ CVE-2025-1673,0,0,65913cd1f473636c65413fc4e623a1696f83129720ac5b6275f0e5547e3994
CVE-2025-1674,0,0,aea9658bbbdcb44450b6b18ac1c08e616d00c82d64dc8139e95057e3b44f7a8f,2025-02-25T08:15:29.887000
CVE-2025-1675,0,0,919ba4e5330550da1b3bdc08ee6fe479b5b6b92bc2456a105e1c616b57e9b557,2025-02-25T08:15:30.020000
CVE-2025-1676,0,0,73eee89d98e983375dedac852336dab7a9ecc8ee838aaa1b83c8304d12c3e6af,2025-02-25T14:15:31.447000
+CVE-2025-1716,1,1,8a7e7768592d932d97a9d455845c05847d58dcca59512369f8a7ffd36f47bf6c,2025-02-26T15:15:24.653000
CVE-2025-20014,0,0,9692e5cd581a413def58e50a6734c5a89401a76673de37fc6a41ad824a4429cc,2025-01-29T20:15:35.207000
CVE-2025-20016,0,0,6fccb84eb01c2cd66b422e82777f9738bfe5004121e1b551d0ae454724543c0e,2025-01-14T10:15:07.500000
CVE-2025-20029,0,0,9b8781ac9a16d1f4940e1c86f8d87c8f1f8e66cb5b362950b6fdcd60c25126c4,2025-02-05T18:15:29.573000
@@ -279832,6 +280591,11 @@ CVE-2025-20086,0,0,c718ee138c5d706935ee7319c465eb1db60c32a8ee92f074be268892106cc
CVE-2025-20088,0,0,d069a0a8d0e55448ae448cb2d1bba620f97cc6785542779fdc1ef2f2206cb89e,2025-01-15T17:15:19.243000
CVE-2025-20094,0,0,cc9826181bf1f83e2cac160833fefdc5cca091c7fe9a0c6abd476a3468c0bc65,2025-02-06T08:15:29.837000
CVE-2025-20097,0,0,10ee92b2a8367ecee48bd849953c308a1471e87e1ba2af2224c41b7443f37328,2025-02-12T22:15:41.850000
+CVE-2025-20111,1,1,475d94ce2914953b66108ef1d1715e827970885fa18497a8dfd41be7dadf69f7,2025-02-26T17:15:22.240000
+CVE-2025-20116,1,1,9e7e408cd1e670cf884832921f46a3745fd71c03c2d207c24bc8ab5d3cb39e4c,2025-02-26T17:15:22.403000
+CVE-2025-20117,1,1,d0d9b392d6e5bb00922a6b2f62b2bcc34e546b185cc7db9a3d46afdf2386e5fc,2025-02-26T17:15:22.567000
+CVE-2025-20118,1,1,e8c17812cc6a2a9818771ad59759e6f3b139ea97b37b20867e7b3405516aba0e,2025-02-26T18:15:14.353000
+CVE-2025-20119,1,1,2a7764b8c0326555590ef2c7fa64bde2ece218e9002547e5f579e2cc79e00eae,2025-02-26T18:15:14.570000
CVE-2025-20123,0,0,de0e2ee9204f4a04ceea1910b99fa9c19c34866a6ef4e69299265f979ffad510,2025-01-08T16:15:38.150000
CVE-2025-20124,0,0,3b222e4debebf19647313be14570cd157d1c9b474f2f1fb6db3f2d02720f9909,2025-02-05T17:15:22.457000
CVE-2025-20125,0,0,4c965c93b17f55e1ee6990c432e90b6f767d7217d5ca1f99810949fadd043cf7,2025-02-05T17:15:22.610000
@@ -279840,6 +280604,7 @@ CVE-2025-20128,0,0,3e7bfcfe64214b1d05a38309ad1e448af5e2709fe869b3c3c8be43fb50730
CVE-2025-20153,0,0,27e618611d2581fef068f4943f75a3e92738a26e1ae15dcee7d2b31ed61da6db,2025-02-19T16:15:40.860000
CVE-2025-20156,0,0,a527039b2224fb2e1569b94e994f48bac4f0388ec14d162b5b6f9fa7371b4f83,2025-01-29T16:15:43.693000
CVE-2025-20158,0,0,87aa79760ad4588c9c0abd65ef4cc5b9b47e26a1886540c744aae2525b5b50af,2025-02-19T16:15:41.017000
+CVE-2025-20161,1,1,bccd254f2f6b7d2e104829ec01704c33448143ffe2f2272054a1e7c5364d29ac,2025-02-26T17:15:23.053000
CVE-2025-20165,0,0,9f7b026247b5eae4a58783714ebe8eb2d48f865473657f5e720d75dccad8e306,2025-02-18T20:15:25.050000
CVE-2025-20166,0,0,96d5726ca24f4531a66ef2215a68dccdad336b2fd7d2f71791c019cb3a6d5163,2025-01-08T17:15:16.990000
CVE-2025-20167,0,0,07090f5f73893ce7a7f63b8dbe397ff57d54c4cdc37bbefbe4dc905874869caa,2025-01-08T17:15:17.163000
@@ -280124,15 +280889,15 @@ CVE-2025-21364,0,0,63961d54501dd4938329aea14ac86e7e58ab23bd7b18dc877501db61b65d0
CVE-2025-21365,0,0,fbe06d12b36b39ab38ad43d75a690a732b558477f477e5dca938593a91da8dc8,2025-01-17T15:11:34.843000
CVE-2025-21366,0,0,a59588c0dfff3655b9552370538e4464b57213529c36230194728bdd056ea6c3,2025-01-17T15:12:20.677000
CVE-2025-21367,0,0,49ec4a253f62e50c1975f7e6358b6d4209c1734cc30bd89ef7f69cfe7c5a053b,2025-02-11T18:15:34.943000
-CVE-2025-21368,0,0,b4e4a393d004ce2a6c1b8ec6bbd812fb9e072d4944c9c700c29f673af125c1a9,2025-02-11T18:15:35.123000
-CVE-2025-21369,0,0,5643d58940a49a0ef151cb4654a4dc204b6567836d79e34c9b23cdce35dfc628,2025-02-11T18:15:35.340000
+CVE-2025-21368,0,1,6c0f601be861c16b3bf5acbace3cefe9363096c39f16a1f2cff45abb52cfb9f0,2025-02-26T15:23:31.897000
+CVE-2025-21369,0,1,d0f7f9a542e9386cee8bc2fe054aad034a1d34994bfe93b9978ffac49c3bff63,2025-02-26T15:23:31.897000
CVE-2025-21370,0,0,4f2d9ad677d80f1448cc8df24916a78dc10d6e491dbdc144c8692d9ee5b64fb9,2025-01-17T15:33:41.967000
-CVE-2025-21371,0,0,06bde9d095fab9666efe445ebe157ecd487ee91a0d84ceeca7c22586e795a53e,2025-02-11T18:15:35.540000
+CVE-2025-21371,0,1,530f40964eb89e30273c327207af49cb639927661c504c02f61d04004d1cbeee,2025-02-26T15:23:31.897000
CVE-2025-21372,0,0,3a043b222986f0210a248c5eb2603857944565822a2729da3fb2f989508cf536,2025-01-17T15:36:24.423000
-CVE-2025-21373,0,0,f92044c0f50d14d062112742cac40edff39de72ceda56bf0f262b26256d83298,2025-02-11T18:15:35.740000
+CVE-2025-21373,0,1,2e319aea61670ffef28e4de3d88c89a3b49802e48d11f6ae5cf38529c706e915,2025-02-26T15:23:31.897000
CVE-2025-21374,0,0,647c2786031d8d5e656a7f7a9897fa7fdffa380202d1a48a0e8645650230f151,2025-01-17T15:39:11.143000
-CVE-2025-21375,0,0,452a377d8e00ad8f78ad8f228226b63701a1e63a06095b32fe68d6e1cf90c4e9,2025-02-11T18:15:35.947000
-CVE-2025-21376,0,0,8878f80a0ae83f8322be0dcbc21e9c67d35d45daf5e0d68b1522b7e0d173189a,2025-02-11T18:15:36.167000
+CVE-2025-21375,0,1,4b68a0d783a6054d8599e9cb83784732cc7e96156a4400bde255985111911da3,2025-02-26T15:23:31.897000
+CVE-2025-21376,0,1,10a768881beb3c8f5c685f13ef73e05b84d8aeae935ccfcc4b174a9e002bdfa8,2025-02-26T15:23:31.897000
CVE-2025-21377,0,0,f263670feaf2f0af19a32be3eb2437e5c8f30daf73c37789631918d6b9d79d16,2025-02-14T17:40:52.127000
CVE-2025-21378,0,0,8563cdc4f723521e024d93d0f16be451079ad89ee525de26bf7cf2240043c88e,2025-01-17T15:42:41.810000
CVE-2025-21379,0,0,7ec8aede7c8424716a30381f57c5c6c2e0103505fb7149b55274dedfc8d7261c,2025-02-14T17:39:51.510000
@@ -280146,7 +280911,7 @@ CVE-2025-21387,0,0,e4ebea81a4d9f55910301b145e28f9ebdee34c280220b7e180e97f999591a
CVE-2025-21389,0,0,e0837d0e37718f09b2f4f6a27094db9197593cd197ddd111d928061563fd763e,2025-01-17T15:44:04.177000
CVE-2025-21390,0,0,8f07fef2d127b1e12ed0fffe19aa2e3f31bb2a9fc9bc79a7d037e8a662ed812a,2025-02-19T17:29:16.067000
CVE-2025-21391,0,0,83d419fda69ced06d53cbd61e13158fe3e31c56b8681059f3bb731201858f5f1,2025-02-12T18:14:53.363000
-CVE-2025-21392,0,0,14a73a4f0a24905292abff23c95b2f5d5a919f2e1e23458525e547a704400c0a,2025-02-11T18:15:37.907000
+CVE-2025-21392,0,1,4ca4bc447faac23408047fddb928e8cd1a78cc7fe770afbf9e1ff1128a22010e,2025-02-26T15:23:31.897000
CVE-2025-21393,0,0,612edf54199b4ed3330c42c388bc679561874de59ebf7734941f393216c8ca71,2025-01-17T15:45:26.027000
CVE-2025-21394,0,0,4ccc160d26f412d0660db2820673933d53f9e960ede3214b61aa7e3d64874628,2025-02-19T17:29:42.907000
CVE-2025-21395,0,0,aaa92e83be335ef96c9cd11d7db7db708bd0afd97750ce93e8f75c2b65de7d16,2025-01-17T15:46:01.927000
@@ -280388,7 +281153,7 @@ CVE-2025-22207,0,0,cadb651bb65bbcff9732fd0600719f2be03a1e19cb97c53633866d5afdef6
CVE-2025-22208,0,0,4da3f6139c6e9c40f33488344972941101e9c73e7b48ee2d6c4ba83ac4c0595f,2025-02-21T13:15:11.400000
CVE-2025-22209,0,0,6259f847301f1e17e539d0555807865e6f3eb75df7ef5140d83a13597977cfcd,2025-02-21T13:15:11.553000
CVE-2025-22210,0,0,abd3877e40c6e9332d48e0a8769aa45708e26e2efdd35254a970ae6f9ad61b2e,2025-02-25T22:15:15.060000
-CVE-2025-22211,0,0,47aaeb485135168da9bca55ea8ad136982374e90884b6d685c03bfd5b0d77676,2025-02-25T22:15:15.200000
+CVE-2025-22211,0,1,22f1887964c61c3e17d1baa8eda98375275c4a50bec025dca8819bb8e88f61a5,2025-02-26T18:15:14.723000
CVE-2025-22214,0,0,9f9cbba758088c6fe54f3b7aba457fa8b68f7e0bf397744585451dc526c7cea3,2025-01-02T04:15:06.277000
CVE-2025-22215,0,0,e26e39627ebf88fc4492196348e13c55563ef72a3b7150347ad788f5576b3be6,2025-01-08T15:15:21.927000
CVE-2025-22216,0,0,0647923838513073f2b0d0386ce946a85c5a3cb60aa88ae944b42a751c855e8c,2025-01-31T18:15:38.247000
@@ -280399,7 +281164,7 @@ CVE-2025-22220,0,0,a00b168f73aec469e4c78128ddc9ae91feb9fbb9ddcfb4c72ca05c1c287f0
CVE-2025-22221,0,0,9ab8cb2916b1d2add27df50f24514c36d0740b88ba103377a1c3f59422214b6c,2025-01-30T16:15:31.257000
CVE-2025-22222,0,0,f96218f2ce820065976bcd4294c5a9c60e0f54f4e21cd14eff22d95b2b98eb7e,2025-01-30T16:15:31.367000
CVE-2025-22260,0,0,6bffdd50ff1b9a95889c1f9bea94c0f7f92eb9097aa6e2dd07529a5cbb0d5ce1,2025-02-03T15:15:17.503000
-CVE-2025-22261,0,0,33a310cbc7efb685d95693f6e008875a8290fc5f9c6bce0cde03f1c0742bf7b7,2025-01-07T11:15:13.290000
+CVE-2025-22261,0,1,cabefa2bbb4850682fa8dc2dd04543561914d58490173d75f62166401d731c68,2025-02-26T15:15:24.877000
CVE-2025-22262,0,0,2a90436047a91b64c9791cff4f6c4190896e3e92637458d2d2ccf25cb4f8537c,2025-01-21T14:15:09.757000
CVE-2025-22264,0,0,79177f17455e861265910dfa8dd2caa5a78c248a179fa18c3179e839e36cde00,2025-01-23T16:15:37.257000
CVE-2025-22265,0,0,51006a5fb12dad2a881e7b25e5673794091472c79149c473510be2ae25b435e8,2025-01-31T09:15:07.167000
@@ -280771,7 +281536,10 @@ CVE-2025-22846,0,0,76c8291b8e60796d4d231c4f9e93fb703f0a242f7c8e1a0b68b5fb28dc774
CVE-2025-22865,0,0,19a89c82649ad3129bff7c393f18a8aa29547854e8bed3a25f76183fca3a3ccc,2025-01-28T16:15:40.540000
CVE-2025-22866,0,0,c708175c229fdd910b5da4acb829b622112b0d84eed2186edc0f9bf19e465443,2025-02-21T18:15:32.243000
CVE-2025-22867,0,0,89eb6539ba2561e6ed2f62e1706818e853753182ae09675c0ce3557a15684ce3,2025-02-06T22:15:40.393000
+CVE-2025-22868,1,1,b6dd5d95f929d71f8a8d1a37f8354d88bfb21c62add09de401f077a34d43ae25,2025-02-26T15:15:24.993000
+CVE-2025-22869,1,1,dd7a98fabaca77a11bcf2a480c785f1a9c0be215bcb7bc4ddf5f910ac29c642c,2025-02-26T15:15:25.160000
CVE-2025-22880,0,0,755860b5cb6bfe06dab2e3046cf933164388a1927143f657d932a4500aa42249,2025-02-07T08:15:28.737000
+CVE-2025-22881,1,1,cf403a8f5a6da010bd9820a557e25f660b6a5dfce6645b85f1498771502c87d3,2025-02-26T08:14:25.137000
CVE-2025-22888,0,0,f7c5331c561f904eb22361c39eef1b15a67d443c06790d321ecd5b6286014fc4,2025-02-19T06:15:21.687000
CVE-2025-22890,0,0,8dd6ffe45f0151dcb8b41a48dac74b1e668a5294c2f1614982860358b9b03cd6,2025-02-06T07:15:17.113000
CVE-2025-22891,0,0,34a57f6019ba9072a9a6b4c9f86ff3b9d6f2414d47e8b5c13c1861a56f0b44ab,2025-02-05T18:15:31.190000
@@ -281517,11 +282285,11 @@ CVE-2025-24428,0,0,15109c35a202dd26e69de787714765857ae2b362ddb23ffdd949cd01af2a1
CVE-2025-24429,0,0,d183c9f5ed8987cb91fcaed74cae30af3c865b33e009f748f716bc57a33d9a15,2025-02-11T18:15:45.610000
CVE-2025-24430,0,0,ead65953e7a7516eeaf9001088746c40d7478716cb82029bda91e89d47ecba7f,2025-02-11T18:15:45.787000
CVE-2025-24432,0,0,5ddf3a506d82d3087ab8186221dd7705178d578bdecc7b38a0b8aa20639caada,2025-02-11T18:15:45.960000
-CVE-2025-24434,0,0,a0315ce67f92d0de4fb6c0b14d95b24dbd5a55cabee0ce1650bc4c6d2e696335,2025-02-11T18:15:46.157000
-CVE-2025-24435,0,0,57cf4192eb4dcaff2f4b67f500eb233fc21acb8f6c88e4aa0041c2394382ce4c,2025-02-11T18:15:46.347000
-CVE-2025-24436,0,0,2cd6c67fd272db18951a04c19f8d0a2e4e793f8617fdab29a340478c36b803ba,2025-02-11T18:15:46.537000
-CVE-2025-24437,0,0,894d9708ec58d7623c452244184d1ab6ce66efc48bacfc66b7d15bff57126e86,2025-02-11T18:15:46.717000
-CVE-2025-24438,0,0,fb398be24864f28853112a2a498807ace1b223509d3bb74cefdd07959025e38c,2025-02-11T18:15:46.893000
+CVE-2025-24434,0,1,2f01429491b1801791fd2beb7cf97e6a5f152d111ed956d9bcbb32db4f4cc94a,2025-02-26T13:16:56.970000
+CVE-2025-24435,0,1,e18215a9bd33566fe0863b189e1322f69daccc33de81b0459abc32ef2fe112e6,2025-02-26T13:16:56.970000
+CVE-2025-24436,0,1,bb2db78c085286b9de5cbec53cb85440790816c78ef5ae9aacabdad0cb7a76fd,2025-02-26T13:16:56.970000
+CVE-2025-24437,0,1,baad8bbcb18f2e1aeda857981a6e8939f40c0f5e9679c37cb447356cff4c5c8c,2025-02-26T13:16:56.970000
+CVE-2025-24438,0,1,fc931cc76efe805c9e92b8ae4a68a7d64a82385c4412e30b00d16d9d66a26def,2025-02-26T13:16:56.970000
CVE-2025-24456,0,0,d9c9319558b4dc57fc03dad7b8a246937d533b449f10c003d5f195a9361f5e8b,2025-01-30T21:28:52.003000
CVE-2025-24457,0,0,05da9f488d0dcdd3961130ee761713c1c134c5d7cd87b42c0364b434d3a85623,2025-01-30T21:31:24.150000
CVE-2025-24458,0,0,8fdab3bff09e0d5a6505ed060bcf7556a504946ddbff2902aa6888f1df89808e,2025-01-30T21:35:05.127000
@@ -281976,6 +282744,7 @@ CVE-2025-25387,0,0,795aaedd4d9e8425550ebd02042ed4a33da344802c3685e22ff847ed53820
CVE-2025-25388,0,0,6a9ee7104467003ccd60c12bd6c2052b9cc5a20a13a182e826767b7f4080b7c7,2025-02-13T20:15:49.730000
CVE-2025-25389,0,0,9f7198ffc91c33105d03adb0c3ce8e30d33f5591c78e15ae8d3046dd1ba01838,2025-02-14T17:15:20.663000
CVE-2025-25460,0,0,c317be9cfc8a496a253be90cd4dd305f90921029147d15141e5d010adef6c61b,2025-02-24T17:15:13.900000
+CVE-2025-25462,1,1,dbc3563b50545898d3f8b4c30a8e42190486beb767837401e5dfa97eecd0595d,2025-02-26T16:15:16.933000
CVE-2025-25467,0,0,88e8377464fdf0cf875ec11d3e8371c15a9465f85314cbabc34c80cddb507da4,2025-02-19T15:15:17.760000
CVE-2025-25468,0,0,9209daa082de7c38fedec36f5894b79e14469faa71894740e63970dc23df9401,2025-02-19T15:15:17.930000
CVE-2025-25469,0,0,741fdd6513e01efbd7a9bf5df4924bb989fc1989e61032b7cef4423372c52af7,2025-02-19T21:15:15.750000
@@ -281989,12 +282758,12 @@ CVE-2025-25507,0,0,de0377abf29412c164b8ddbcc15e82dfdb0b23020e12eca7c6e04a6e73ed3
CVE-2025-25510,0,0,4997c3387297db121e4e9c1042fc244ebe3429ef8058fdf6dffa5196020cd974,2025-02-21T21:15:24.023000
CVE-2025-25513,0,0,e1943590b94885dd95437dc0873156668d062e8b298f484c30409dc6927e7d11,2025-02-24T22:15:22.807000
CVE-2025-25514,0,0,a88e1a82b61fa77a3d9be210516c051b22e00e5112ab6f4dd2c37a8804d7ed85,2025-02-25T22:15:23.900000
-CVE-2025-25515,0,0,523e24330a9fa1e5a016b6b8e1bfdf5da5f2f5004ba2794baa0efaaeb9b45913,2025-02-25T22:15:23.983000
-CVE-2025-25516,0,0,61d8a4a7a5ff8691ecb45f84fe8ee3b3a1c8520412c42613b500a17ce4885287,2025-02-25T22:15:24.067000
-CVE-2025-25517,0,0,47d0c032eca0dd007b569a631ce873af8e2bdd58b4363d0bef442e505694d56a,2025-02-25T22:15:24.160000
-CVE-2025-25519,0,0,6bc96757f93625017b9118c43c2a389cbbf6d7f3c980576282d9b4fb1b48d65c,2025-02-25T22:15:24.257000
-CVE-2025-25520,0,0,7cbca81c08335f3cb9e1efa83d8076343c5cd9919222ac63312fe1b49c7f102d,2025-02-25T22:15:24.340000
-CVE-2025-25521,0,0,35c2487345c61a537d9a9b6d92a21e0a01c59626839f568991b7c8b6fae07b29,2025-02-25T22:15:24.430000
+CVE-2025-25515,0,1,12362bebea8038452149ff678950c3baddf6b375c654587a84882561b06de0a2,2025-02-26T15:15:25.327000
+CVE-2025-25516,0,1,2cdca73fe7bd0fa4ed6c7d23f220ae85378dc04e2718623592d0f0650288bb83,2025-02-26T15:15:25.507000
+CVE-2025-25517,0,1,b046d37c1f5f7facb3556a3854af9931ad05e801fa2ad59160cb0a279bf16773,2025-02-26T15:15:25.680000
+CVE-2025-25519,0,1,5bdfe2b54612bd1be15b0b8a5d6e4cb6d48033ad3c0b87e13e4b0dd7d11701ee,2025-02-26T15:15:25.867000
+CVE-2025-25520,0,1,1f70ac273e6091d8e7c2e52264187af7d19b653a960c2c6f2fb7e652abfbf462,2025-02-26T15:15:26.053000
+CVE-2025-25521,0,1,668c759fb85536d2201ad7f515977ced5703cd39258d97aa1e40ba1e8c5a57aa,2025-02-26T15:15:26.240000
CVE-2025-25522,0,0,9f2c0bc0a6dbb67154353c2da3969483621b5d35364f73acfaa2a34b0ff5a40b,2025-02-13T17:17:20.517000
CVE-2025-25523,0,0,9c6d5a6c8c747b7673e69ebf58bf535f17db00e0831b58073ddd586410cf36d9,2025-02-13T18:18:23.400000
CVE-2025-25524,0,0,40af9c5e5be067f2e684b500c6cae4a5dab6d519bde35d9c0fd3353781274a87,2025-02-13T18:18:23.597000
@@ -282030,6 +282799,25 @@ CVE-2025-25768,0,0,304c7220a311f269a43e8f32a234f6d1b13317a69f4862236989f7ec54686
CVE-2025-25769,0,0,23c8747da587b2cec740d3eb785ff6bb03890bf557e1689c0c836490aea47b0b,2025-02-24T18:15:19.487000
CVE-2025-25770,0,0,b3e515f133a4ee2a001c39c5da953da7ccc7cb2840f20050012ea90a9b8becc3,2025-02-24T18:15:20.280000
CVE-2025-25772,0,0,2f0f0f58a3ad6615016a2856b7a87760fb37871ed912f01a814631976a58d051,2025-02-21T22:15:12.813000
+CVE-2025-25783,1,1,e71ee999c953b9bb31f483fb06b0d1d33b78fbee88b15edd630b1e56727e6dc1,2025-02-26T15:15:26.440000
+CVE-2025-25784,1,1,a3475454193504d196b85be33ed503b96a58c67a1078e0ca5b7cc211d774e1ad,2025-02-26T15:15:26.580000
+CVE-2025-25785,1,1,91e12973c35a83096f98810a02e91a6cce280b3bde174bbca624c3d55948885e,2025-02-26T15:15:26.720000
+CVE-2025-25789,1,1,24d34fe77f60fcf4885a02d010bd30e679c5ffd6544b58e4ac58fb6c065da702,2025-02-26T15:15:26.853000
+CVE-2025-25790,1,1,07430aabe2677029e13b9dd6d2f1ecdb4d4356ab98e6e11960869f7d04889998,2025-02-26T15:15:26.980000
+CVE-2025-25791,1,1,6cb7302ae60032761ed1a14d561a4759b901048cd197fad628644aaa612066b2,2025-02-26T15:15:27.100000
+CVE-2025-25792,1,1,3e0a3ca270f99f456ad4a83cb964e264ae82e049fe28d12108b85f71b7afdead,2025-02-26T15:15:27.230000
+CVE-2025-25793,1,1,c48bfd70ec3a915a6d936ba712f9931a99d49d766aa6fda151461211e6de0746,2025-02-26T15:15:27.367000
+CVE-2025-25794,1,1,7a68a9e4096c63ca48da4a2e5e78638a13ad070b2b3893a94e5a343b46adc44c,2025-02-26T15:15:27.490000
+CVE-2025-25796,1,1,06075c7d751ca3b5a7ec207eebba24f32af8a892d4e1d80c0ae7fb524e80d60f,2025-02-26T15:15:27.620000
+CVE-2025-25797,1,1,974013de283429eef0f86d8b6d3240ad4311b3d8dfc887e3850b1fc92fd78df5,2025-02-26T15:15:27.743000
+CVE-2025-25799,1,1,8c628e31e7719d7f0c7923f48f752d1b4bc6a6a7152e25732646da0b5850dd67,2025-02-26T15:15:27.870000
+CVE-2025-25800,1,1,e247d606c0ab6f7dc2ac354ecc4861fa483269ec9f05e79668b137b87ff73f6e,2025-02-26T16:15:17.053000
+CVE-2025-25802,1,1,3f79259fed261f09734405ac629ff54a40eb9450fe4906b4bbec3f5d7f4440ff,2025-02-26T15:15:28.127000
+CVE-2025-25813,1,1,416abaac8740b64fbd841afbe0c84c429c7b15dc21cf2971140952091886e176,2025-02-26T15:15:28.250000
+CVE-2025-25818,1,1,f49c20c950e9aff8d381c4d1028717fc04da7ee4ee1eae10bb103b265f9f972b,2025-02-26T15:15:28.367000
+CVE-2025-25823,1,1,49d83321aabbcc8afa2f2d2c8830db188feb47a6ce4f81a39dbb7122d9fb1c0c,2025-02-26T15:15:28.497000
+CVE-2025-25825,1,1,2ed9719b1854e8332a62d7cbd658a3de54915ded7d1532be80008ce8110899c9,2025-02-26T15:15:28.620000
+CVE-2025-25827,1,1,e7a209074fb9de5f1be33c6f151d48a2230f5cdfc223b4de47e526c1aff05b00,2025-02-26T15:15:28.747000
CVE-2025-25875,0,0,4ae4a41a47ee817f194e373119e06368304ab5bcd19c90c39f2f631e9bca1c06,2025-02-21T18:16:12.873000
CVE-2025-25876,0,0,d6c09f94538a5c36fd70d310b48b5e98ead81616eeefe6e6f1451c304b2ebe13,2025-02-24T17:15:14.100000
CVE-2025-25877,0,0,f6914eb034148bb528f1091838ce10955d1010e17f96a9876034900b21fe7f33,2025-02-21T22:15:12.977000
@@ -282200,6 +282988,7 @@ CVE-2025-26620,0,0,26dae4102337906865f6523c0883aa7076c40f6f93fb48449695827abf3ae
CVE-2025-26622,0,0,0bafa51d37f905d32266f99250febec707833a89fe716aea0a37fd117490a259,2025-02-22T16:15:31.033000
CVE-2025-26623,0,0,76c198664d5028187227de3b29ac8db7e0c1dc44e3a8ff433a4ccad52ae08740,2025-02-18T20:15:33.153000
CVE-2025-26624,0,0,0032c9e0a335a3e4d41712965753468a301071af91365e2d5a3287105e6cd595,2025-02-18T23:15:10.810000
+CVE-2025-26698,1,1,7dd0e400e5d05a77ed360af250aa7045f19b8779925097208b0a9287e6aa432d,2025-02-26T13:15:41.983000
CVE-2025-26700,0,0,7838e370af5b60d8c19726fd509ea0fb299d99686659f9037f2fcd14eb7d3c6a,2025-02-17T03:15:09.750000
CVE-2025-26750,0,0,2a3b9db13d9cd9c23552d1acf8bba46a50acb1724584ded2752728f67ebbd57a,2025-02-22T16:15:31.210000
CVE-2025-26751,0,0,edb27a91b657732502693638e51fc67fcbb8add7ffaf5abfd4f3ef688da982b1,2025-02-25T15:15:23.457000
@@ -282259,6 +283048,7 @@ CVE-2025-26911,0,0,7ee77a7ec74c8a9d61c1458a78b51a8abdec40a11b59d49f2975a7ff7fddb
CVE-2025-26912,0,0,ad22609fd9032156574209ff16fd9db9b488e7e5472493b11595563db580f46a,2025-02-25T15:15:26.530000
CVE-2025-26913,0,0,87dc7ff4bfbfd50369927841e18e8f04705a501d67e2356cb8e03ad91119d7e4,2025-02-25T15:15:26.663000
CVE-2025-26915,0,0,a04899900f181377e6a95e938a68033eb5af29fa133192d9338babfe6f9e3fdc,2025-02-25T15:15:26.793000
+CVE-2025-26925,1,1,8eecb48597fc235151644813edce7991d1c0019a27db0bf2f77c2ba2cb7db8a2,2025-02-26T14:15:11.743000
CVE-2025-26926,0,0,e0b2ed68075c39ca88de0f8c085ee1d4468ef46959ebcc7b5f62d0eeb480b959,2025-02-25T15:15:26.930000
CVE-2025-26928,0,0,4f2b8baf8731abb08be327e0840ecf27ba8918ee5856607f52e7dc31562f669f,2025-02-25T15:15:27.067000
CVE-2025-26931,0,0,dfe9cf504dc8e7d5205e625dd2310adb538fc7f1d9aebdc368436b3359327eab,2025-02-25T15:15:27.200000