CVE Vulnerability Catalog

A vulnerability has been identified in the Linux kernel's BPF mechanism, allowing the hash of a map to be calculated and cached regardless of its frozen state. This can lead to a TOCTOU bug where a user can modify the map's contents before freezing it.

A vulnerability in the Linux kernel related to a potential memory leak during PWM chip initialization has been resolved. If __pinned_init() fails, the allocated pwm_chip would leak due to not calling pwmchip_put() on the error path.

A vulnerability has been identified in the Linux kernel related to a reference leak in the thermal_of_cm_lookup() function. The tr_np value is obtained via of_parse_phandle() but is never released, leading to a memory leak.

A vulnerability has been identified in the Linux kernel within the ksmbd module, requiring the call to ksmbd_vfs_kern_path_end_removing() in two places to balance removal operations. Failure to do so may lead to potential deadlocks and unbalanced locks.

A vulnerability has been identified in the Linux kernel within the USB catc module, due to a lack of endpoint descriptor verification. As a result, malformed USB devices can present incorrect transfer types, potentially leading to unexpected behavior.

A vulnerability has been identified in the Linux kernel related to a memory leak in the GET_DATA_DIRECT_SYSFS_PATH function. If the length of the device path exceeds the output buffer length, memory is not freed, leading to a memory leak.

A vulnerability has been identified in the Linux kernel related to a memory leak in the mtd_parser_tplink_safeloader_parse() function. The issue occurs when buffer allocation fails, and the buffer is not freed, leading to a memory leak.

A vulnerability has been identified in the Linux kernel that leads to an infinite self-interrupt loop on CPU0 when overloaded. The issue occurs during RT task load balancing, potentially causing CPU lockup.

A vulnerability has been identified in the Linux kernel within the OpenVPN module that may lead to system crashes. The issue occurs when removing a peer from the list during keepalive expiration while the socket is being closed simultaneously.

A vulnerability has been identified in the Linux kernel related to route management for closing network devices. The issue involves a race condition between the event notification and the code that caches route information, potentially leading to leaked device references.

A vulnerability has been identified in the Linux kernel related to directory removal in FAT file systems. The flaw may lead to incorrect decrementing of the parent link count, resulting in filesystem errors.

A vulnerability has been identified in the Linux kernel related to updating the number of mdb entries in VLAN contexts. The issue arises from conditionally increasing the entry count, leading to situations where this count is not properly updated, potentially resulting in warnings during bridge operations.

A vulnerability has been identified in the Linux kernel related to the ext4 filesystem, concerning the caching of extents during the splitting process. Caching issues may lead to stale extents remaining in the status tree, resulting in space management errors.

A vulnerability has been identified in the Linux kernel that occurs during role switching in the cdns3 driver during resume. Switching to host mode in this context leads to a NULL pointer dereference.

A vulnerability has been identified in the Linux kernel related to a memory leak in the amdxdna_ubuf_map() function. This function allocates memory for sg and internal sg table structures but fails to free it if subsequent operations fail.

A vulnerability in the Linux kernel was identified that led to deadlocks between devlink and netdev instance locks. The issue stemmed from incorrect lock ordering during the recovery process, which could cause system failures.

A vulnerability has been identified in the Linux kernel within the icmp_route_lookup function, which may lead to incorrect routing of ICMP messages. The issue occurs when the destination address becomes local between the check and the ip_route_input call, resulting in a call to the ip_rt_bug function.

A vulnerability has been identified in the Linux kernel related to improper lock management in EEH event handling. Changes made to the EEH driver inadvertently moved the pci_lock_rescan_remove() function outside its intended scope, leading to issues with PCI error reporting and improper EEH event triggering.

A vulnerability has been identified in the Linux kernel related to the use of commit_mutex in the reset path in netfilter. This issue leads to a circular lock dependency between commit_mutex, nfnl_subsys_ipset, and nlk_cb_mutex when nft reset, ipset list, and iptables-nft with '-m set' rule are run simultaneously.

A vulnerability has been identified in the Linux kernel related to a memory leak in the CAAM module. The issue occurs during the allocation of the net_device structure when the initialization process encounters an error, leading to memory not being freed.