CVE Vulnerability Catalog

W modzie Minecraft 'Command Block IDE' w wersjach do 0.4.9 występuje brak autoryzacji, co pozwala każdemu użytkownikowi na modyfikację plików 'function' używanych przez grę na dedykowanym serwerze.

In the libbpf library in the Linux kernel, a size overflow issue was found when mapping ringbuf memory. The maximum ringbuf size on x86-64 hosts is 2GB, so 2 * max_entries can overflow u32 when mapping producer and data pages. The fix casts the size of the read-only mmap region to __u64 and checks for overflow during mmap.

In the Linux kernel, the ieee80211_get_rate_duration function in the mac80211 subsystem has a possible out-of-bounds array access, which may lead to incorrect behavior or system crash. The issue was reported by UBSAN.

In the Linux kernel's TIPC subsystem, a use-after-free vulnerability exists. After tipc_msg_validate() frees the original skb, dereferencing the old skb cb causes a crash. The fix re-fetches the skb cb from the newly allocated skb after validation.

In the Linux kernel's HSR (High-availability Seamless Redundancy) module, a potential use-after-free was found. After delivering the packet (skb) to netif_rx(), which may free it, further dereferencing the packet could lead to UAF.

In the Linux kernel, the AMD graphics driver (drm/amd/display) has an array index out-of-bounds error in the DCN32 DML module. The LinkCapacitySupport array is indexed with the number of voltage states instead of the maximum number of DPPs, leading to out-of-bounds access. The fix changes the array size to the correct, larger value.

In the Linux kernel, the NFC NCI subsystem lacks bounds checking for arrays in the nfc_target structure, which may lead to out-of-bounds memory writes. The issue was detected by syzkaller with CONFIG_FORTIFY_SOURCE enabled.

In the Linux kernel, a use-after-free vulnerability was found in the ravb driver in the ravb_rx_gbeth() function. After the skb is delivered to napi_gro_receive(), which may free it, dereferencing skb may trigger use-after-free.

In the Linux kernel, the hisilicon network driver (hisi_femac) has a potential use-after-free vulnerability in hisi_femac_rx(). The skb is delivered to napi_gro_receive() which may free it, and dereferencing skb after that may trigger use-after-free.

In the Linux kernel, the hisilicon network driver has a use-after-free vulnerability in the hix5hd2_rx() function. The skb is passed to napi_gro_receive() which may free it, and then dereferencing skb may trigger use-after-free.

A vulnerability in the ASIHPI driver in the Linux kernel has been fixed, which could lead to potential out-of-bounds array access. The array index used to store values depends on the firmware, creating a risk of unauthorized access.

In the Linux kernel, the mlx5 driver had an error path bug in multi-packet WQE transmit. On DMA mapping failure, the code erroneously unmapped an entry from the active mappings list, potentially removing a random mapping and causing PCI function errors.

A vulnerability has been identified in the Linux kernel that leads to memory disclosure due to improper padding application in Ethernet frames. The patch uses skb_put_padto() to properly pad Ethernet frames, eliminating the data disclosure issue.

A vulnerability has been identified and resolved in the Linux kernel within the drm/amdkfd module. The issue was related to improper pointer clearing, which could lead to a use-after-free bug.

A double free issue during the unloading of the amdgpu module has been fixed in the Linux kernel. This issue occurred when flexible endpoints used DIGs from available inflexible endpoints, leading to memory management errors.

A vulnerability in the Linux kernel related to use after free has been fixed in case of platform device registration errors.

In the Linux kernel, the AMD Display module (DCN30) has an index out of bounds issue in cm3_helper_translate_curve_to_hw_format. The index 'i' may exceed the number of transfer function points, leading to buffer overflow in color arrays.

A vulnerability has been identified in the Linux kernel within the ocfs2 module, related to improper synchronization work management during errors. If an error occurs after successfully reading the global quota, it may lead to incorrect resource deallocation.

A vulnerability in the Linux kernel related to the ext4 filesystem has been fixed, concerning use-after-free on failed mount attempts. The issue was that the s_err_report timer remained active, potentially leading to I/O errors.

A vulnerability has been identified in the Bluetooth L2CAP module of the Linux kernel, leading to a use-after-free error in the l2cap_connect function. The issue was reported by Syzbot and involves reading memory after it has been freed.