CVE Vulnerability Catalog

In the Linux kernel, the mld_newpack() function lacked RCU protection, potentially causing data races. The fix replaces sock_alloc_send_skb() with alloc_skb() and charges the socket under RCU protection.

In the Linux kernel, a subsystem refcount leakage of the @block_class was discovered in the blkcg_fill_root_iostats() function. The function iterates over devices using class_dev_iter_(init|next)() but does not end the iteration with class_dev_iter_exit(), causing a refcount leak.

In the Linux kernel HID multitouch driver (mt_input_configured), the return value of devm_kasprintf() is not checked. This can lead to a NULL pointer dereference when memory allocation fails.

In the Linux kernel, the safesetid module lacked size validation for data written to sysfs. An attacker could send an oversized buffer, triggering a warning in kmalloc and potentially destabilizing the system.

In the Linux kernel, the int3472 driver for x86 platforms lacked a check for a NULL adev (ACPI device) pointer. This could theoretically occur when a user manually binds the driver to an i2c/platform device via sysfs, leading to a possible NULL pointer dereference in skl_int3472_get_acpi_buffer().

W jądrze systemu Linux zidentyfikowano podatność w funkcji bitmap_get_stats(), która może prowadzić do awarii systemu. Problem wynika z możliwości wywołania tej funkcji w momencie, gdy bitmapa została zniszczona lub nie została w pełni zainicjowana, co może spowodować błąd ochrony ogólnej.

In the Linux kernel's MPTCP implementation, a vulnerability was found due to improper management of suboption status. Zeroing the bitmask before parsing is insufficient to ensure state consistency, leading to uninitialized bitfields and a KMSAN bug.

A vulnerability was found in the Linux kernel's MPTCP (MultiPath TCP) subsystem related to the in-kernel path manager. The function setting the 'fullmesh' flag on endpoints was too permissive, allowing this flag to be set on implicit endpoints, which triggered a kernel warning and could lead to system instability.

A vulnerability was found in the Linux kernel's MPTCP implementation, related to improper handling of disconnect during TCP Fast Open. The bug can cause data stream corruption and trigger a warning in the __mptcp_clean_una function.

A soft lockup vulnerability was found in the Linux kernel during OOM (Out-Of-Memory) handling in cgroup. The issue occurs when a very large number of processes (e.g., 56,000) are in the OOM cgroup, causing traversal to take too long and blocking the system.

In the Linux kernel's rdma/cxgb4 driver, an integer overflow vulnerability was found on 32-bit systems. The user-controlled 'gl->tot_len' variable can cause wrapping in addition, leading to a potential security flaw.

A Server-Side Request Forgery (SSRF) vulnerability exists in the sort.php component of Emlog Pro v2.5.4. It allows an attacker to scan local and internal ports by supplying a crafted URL.

A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to inject malicious JavaScript or HTML via the postStrVar function in article_save.php.

A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 in the admin_files.php component. Attackers can exploit this flaw to execute arbitrary code on the server.

A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 within the admin_ip.php component. Attackers can exploit this flaw to execute arbitrary code on the server.

SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe_file.php.

SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe.php.

A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 within the admin_smtp.php component. Attackers can exploit this flaw to execute arbitrary code on the server.

A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 within the admin_template.php component. Attackers can exploit this flaw to execute arbitrary code on the server.

A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 within the admin_ping.php component. Attackers can exploit this flaw to execute arbitrary code on the server.