CVE Vulnerability Catalog

In the Linux kernel's octeontx2-pf driver, the TC_HTB_LEAF_DEL_LAST callback for QoS was refactored to fix issues with stopping traffic before queue reassignment and warnings during system reboot.

In the Linux kernel's fs/dax subsystem, a bug in wait_entry_unlocked_exclusive() causes the current entry to be skipped after calling xas_pause(), leading to missed locked entries during scanning. This triggers a warning in truncate_folio_batch_exceptionals() and potential data inconsistency.

In the Linux kernel's TIPC stack, a refcount warning in tipc_aead_encrypt occurs when get_net() is called on a network namespace being destroyed (refcount=0), potentially leading to use-after-free.

In the Linux kernel's netdevsim driver, a bug causes napi_complete() to be called from netpoll context when NAPI is not scheduled, triggering a warning in napi_complete_done().

Clerk, narzędzie wspierające zarządzanie użytkownikami, ma problem z weryfikacją podpisów webhooków. Aplikacje korzystające z funkcji verifyWebhook() mogą akceptować nieprawidłowo podpisane zdarzenia webhooków.

Zimbra Collaboration (ZCS) przed wersją 9.0.0 Patch 46, 10.0.x przed 10.0.15 oraz 10.1.x przed 10.1.9 jest podatna na atak typu denial of service z powodu niewłaściwego przetwarzania nadmiarowych segmentów ścieżki oddzielonych przecinkami w Konsoli Administracyjnej. Nieautoryzowany zdalny atakujący może wysłać specjalnie przygotowane żądania GET, które powodują nadmiarowe przetwarzanie i zwiększone odpowiedzi.

In the uartlite serial driver in the Linux kernel, there is a race condition during UART driver registration. If two devices are probed simultaneously, a null pointer dereference and kernel panic can occur.

In the Linux kernel for RISC-V architecture, a vulnerability was found where the SR_SUM status bit is not saved and restored during thread context switches. This causes sleeping functions called in user-access sections to clear SR_SUM, leading to kernel panics.

In the Linux kernel's s390/pkey module, there is a missing overflow check in size calculation for memdup_user(). The number of APQN target list entries comes from user space and can cause an overflow during multiplication.

In the Linux kernel's HID Wacom driver, wacom_aes_battery_handler() is scheduled as delayed work but not canceled on device removal, leading to hard crashes or 'general protection fault' after device disconnect.

In the Linux CXL RAS driver, cxl_cper_handle_prot_err() incorrectly assumes PCIe endpoint devices are CXL type 3 and bound to the cxl_pci driver. This can cause crashes when handling CPER error records.

A use-after-free vulnerability has been identified in the vhci_flush() function in the Linux kernel. The issue occurs when one thread closes a vhci file descriptor while another thread is using the device, leading to unsynchronized memory access.

A use-after-free vulnerability was discovered in the Linux kernel's bridge multicast router port configuration. When per-VLAN multicast snooping is enabled, ports are not properly removed from the global or per-VLAN router port list, allowing re-addition after deletion and leading to access of freed memory.

A potential deadlock was found in the Linux kernel's CIFS/SMB client during channel reconnection. The issue is caused by incorrect lock ordering in cifs_signal_cifsd_for_reconnect, which can lead to thread deadlock.

A race condition in the Linux kernel's userfaultfd_move mechanism with the swap cache has been discovered. It can cause RSS counter corruption and trigger BUG_ON, leading to system crashes.

In the megaraid_sas driver in the Linux kernel, an array index out-of-bounds error was detected during MSI-X interrupt vector allocation on systems with DRAM interleave enabled.

In the fnic SCSI driver in the Linux kernel, a bug was found causing a crash in fnic_wq_cmpl_handler when FDMI RHBA and RPA requests time out. The driver reuses the same frame to send ABTS for both requests, leading to a double free of the same frame and a system crash.

Dystrybucja Linuksa, na której oparty jest Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20), jest przestarzała i osiągnęła koniec wsparcia (EOL) 30 czerwca 2024 roku. W związku z tym, każda niezałatana podatność może zostać wykorzystana do wpływania na ten produkt.

W systemie zarządzania płacami Campcodes w wersji 1.0 odkryto krytyczną podatność. Dotyczy ona nieznanej funkcjonalności pliku /ajax.php?action=save_deductions, gdzie manipulacja argumentem ID prowadzi do wstrzyknięcia SQL. Atak może być przeprowadzony zdalnie.

W systemie zarządzania płacami Campcodes w wersji 1.0 odkryto krytyczną podatność. Problem dotyczy nieznanej funkcji w pliku /ajax.php?action=delete_allowances, gdzie manipulacja argumentem ID prowadzi do wstrzyknięcia SQL.