CVE Vulnerability Catalog

A vulnerability in the Linux kernel has been fixed that could lead to memory leaks or deadlocks due to a race condition between damon_call() and kdamond_fn(). The introduction of an additional field in damon_ctx and proper mutex locks helps avoid these issues.

A vulnerability has been identified in the Linux kernel related to integer overflow in the create_dirty_log() function. It allows bypassing argument validation, leading to out-of-bounds reads on the argv array.

A vulnerability has been identified in the Linux kernel related to improper management of thermal zones. Issues with thermal governor cleanup may lead to memory leaks and use-after-free errors.

A vulnerability has been identified in the Linux kernel related to a memory leak in the atmel_aes_buff_cleanup function. This function only frees one page of memory while leaving three pages unreturned, leading to a memory leak.

A vulnerability has been identified in the Linux kernel within the ALSA usb-audio module, concerning the parsing of UAC2 sample rate ranges. The issue is that upon reaching the maximum number of samples, the parsing is not halted, leading to improper processing of additional triplets.

A vulnerability in the Linux kernel related to race conditions in the split queue during migration has been fixed. The issue involved improper management of the queue state, which could lead to incorrect marking of memory as partially mapped.

A vulnerability in the Linux kernel has been resolved, affecting the remoteproc component in the context of xlnx. The issue was the lack of a check for NULL messages, which could lead to crashes due to NULL pointer dereferencing.

A vulnerability has been identified in the Linux kernel related to KVM's handling of LBR MSRs, which were not properly saved and restored. This issue has been resolved by adding the appropriate MSRs to the list and allowing writes from userspace when LBR virtualization is enabled.

A vulnerability has been identified in the Linux kernel within the put_folios function that may lead to incorrect processing of physical addresses. The issue arises from an incorrect PFN to physical address conversion and missing checks in the cleanup loop.

A vulnerability in the Linux kernel that led to memory leaks in the rxkad_verify_response() function has been fixed. The changes ensure proper resource deallocation in all circumstances, preventing leaks.

A vulnerability has been identified in the Linux kernel related to duplicate resource teardown in the epf_ntb_epc_destroy() function. This may lead to system errors when the .allow_link operation fails or during the .drop_link execution.

A vulnerability has been identified in the Linux kernel that may lead to deadlocks in the damos_walk() function due to a race condition with the kdamond_fn() function. The issue arises from improper context management, potentially resulting in infinite waiting for request handling.

A vulnerability has been identified in the Linux kernel related to cacheline sharing for DMA buffers in the hwmon module. This issue may occur depending on the architecture when the transfer buffer shares a cacheline with a mutex.

In the Linux kernel, a vulnerability related to a resource leak in the xfs_alloc_buftarg() function has been fixed. In the error path, fs_put_dax() is called to drop the DAX device reference.

A vulnerability has been identified in the Linux kernel that allows for unlimited node registration by the nameserver. This can lead to memory exhaustion if a malicious client starts registering random nodes.

A vulnerability has been identified in the ext2 filesystem of the Linux kernel that allows for the introduction of a corrupted inode with zero link count and non-zero mode. This case, which should be rejected, can lead to improper filesystem behavior.

A vulnerability related to RESPONSE packet handling at the connection level has been fixed in the Linux kernel. Security issues could lead to decrypted packet data being exposed to packet sniffers.

A vulnerability in the Linux kernel has been fixed related to the missing put_disk() call when device_add(&disk_dev) fails. This bug resulted in the scsi_disk being freed while the gendisk remained referenced.

A vulnerability has been identified in the Linux kernel related to the LoongArch architecture, concerning the syscall dispatch table. The lack of an array_index_nospec() boundary allows access to syscall function pointers beyond the allowed range.

A vulnerability has been identified in the Linux kernel's krealloc() function that may lead to data loss and buffer overflow during object resizing. These issues arise from improper size management during NUMA migration and when shrinking objects.