CVE Vulnerability Catalog

A vulnerability has been identified in the Linux kernel related to use-after-free in the power_supply_changed() function. This issue occurs when the power_supply handle is freed before the interrupt handler is registered, leading to the function being called with a freed handle.

In the Linux kernel, a race condition was found in the Intel VT-d driver during PASID table entry replacement. Due to the 512-bit entry size, which hardware may read in smaller chunks, directly overwriting an active entry (with Present bit set) can lead to an inconsistent state, resulting in unpredictable behavior or spurious faults.

A vulnerability has been identified in the Linux kernel related to improper context teardown in IOMMU. When tearing down a context entry, there is a risk that hardware may access a 'torn' entry, leading to unpredictable behavior.

A vulnerability has been identified in the Linux kernel that may lead to a NULL pointer dereference when reading inline data for compressed ztailpacking pclusters. This issue occurs when pclusters are added to I/O chains without prior validation.

A bitmap inconsistency issue was identified and resolved in the Linux kernel's ext4 filesystem, which occurred during stress tests with large page workloads. This issue was caused by a race condition between page migration and bitmap modification.

A vulnerability has been identified in the Linux kernel related to use-after-free in the power_supply_changed() function. This issue occurs when the power_supply handle is freed before the interrupt handler is registered, potentially leading to system crashes or memory corruption.

A vulnerability has been identified in the Linux kernel related to use-after-free in the power_supply_changed() function. This issue occurs when the power_supply handle is freed before the interrupt handler is registered, potentially leading to system crashes or memory corruption.

A vulnerability has been identified in the Linux kernel within the 'DeleteIndexEntryRoot' function that may lead to a heap buffer overflow. The issue arises from inadequate bounds checking when calculating the entry size, potentially resulting in out-of-bounds reads.

A vulnerability has been identified in the Linux kernel within the sync_linked_regs() function, which may lead to errors in register ID propagation. The issue arises when registers are linked, and their IDs are incorrectly assigned, potentially resulting in verification errors and division by zero.

A vulnerability in the Linux kernel has been fixed that allowed BPF_PROG_DETACH on tcx or netkit devices to be executed by any user when no program fd was provided. The fix adds a capability check for CAP_NET_ADMIN or CAP_SYS_ADMIN.

A vulnerability has been identified in the Linux kernel that leads to a crash in the iommu_sva_unbind_device() function due to accessing the mm structure after it has been freed. The issue has been resolved by holding a reference to the mm structure throughout the device bind/unbind operation.

A vulnerability in the Linux kernel has been fixed in the ovpn module, which could lead to a use-after-free condition in the ovpn_net_xmit function. The issue stemmed from improper pointer management during operations on packet segments.

A vulnerability has been identified in the Linux kernel related to double decrementing the dirty clusters counter during the ext4 filesystem shutdown. This issue leads to a warning with a value of -1 for the dirty clusters counter, indicating an error in the error handling path.

A use-after-free vulnerability was identified in the power_supply_changed() function in the Linux kernel. The issue occurs when the power_supply handle is freed before the interrupt handler is registered, potentially leading to system crashes or memory corruption.

A vulnerability has been identified in the Linux kernel related to the reversion of a patch addressing a use-after-free issue in the hwmon (ibmpex) driver. The new version introduces a race condition that may lead to crashes when a user-space process reads a sensor file during the execution of the delete function.

A vulnerability has been identified in the Linux kernel caused by a race condition in the QP timer handlers within the RDMA/rxe module. This issue leads to the Queue Pair's (QP) reference count dropping to zero during timer handler execution.

A vulnerability in the Linux kernel has been resolved related to mtk_gate, where these structs were used not only for initialization but also at runtime. The __initconst annotations have been dropped from gates.

A vulnerability has been identified in the Linux kernel related to use-after-free in the `power_supply_changed()` function. The issue occurs when the interrupt handler is registered before the `power_supply` handle is registered, leading to a race condition where an interrupt can call the function with a freed handle.

A vulnerability has been identified in the Linux kernel related to incorrect memory access flagging in BPF helper function prototypes. The absence of appropriate MEM_RDONLY or MEM_WRITE flags leads to incorrect assumptions by the verifier, potentially resulting in correctness issues.

A use-after-free vulnerability in the power_supply_changed() function has been fixed in the Linux kernel. The issue arose from improper ordering of allocation and registration of the power supply handle, leading to a race condition where the interrupt handler could be invoked with a freed handle.