CVE Vulnerability Catalog

In the Linux kernel, in the regulator core, the error path of regulator_resolve_supply() lacked proper locking, causing a lockdep warning. The fix uses regulator_put() instead of _regulator_put() and adds appropriate locking.

In the Linux kernel, in the octeontx2-af driver, a bug causes the PF driver to crash during kexec booting. During a kexec reboot, hardware state persists, and the PF driver may incorrectly assume AF is ready, leading to a crash.

In the Linux kernel, in the ath12k wifi driver, a bug occurs where stale link mappings in ahvif->links_map are not cleared. When arvif initialization in non-AP STA mode fails before creation, a stale entry remains, potentially triggering a WARN_ON when the same link ID is used.

In the Linux kernel, the Qualcomm GFX3D clock driver crashes when determining the clock rate due to a missing parent field in the parent request map. This regression was introduced by a change in the divider algorithm that now requires proper parent mapping.

In the Linux kernel, the amdgpu display driver had a NULL pointer dereference vulnerability in the amdgpu_dm_hpd_init() function. The code assumed dc_link was always valid, leading to a crash when setting up HPD interrupts for connectors without a valid link.

In the Kimi AI v1.0 web interface, the 'Preview' feature fails to sanitize or encode HTML/JavaScript payloads generated by the AI model. When a user switches to the 'Preview' tab, the malicious payload is rendered directly into the DOM, leading to arbitrary JavaScript execution in the victim's browser session.

The Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 responds to version.bind CHAOS TXT queries, disclosing the DNS resolver software version (unbound 1.22.0), aiding targeted attacks against known vulnerabilities.

The firmware of the Mercusys AC12G (EU) V1 router contains hardcoded WiFi driver credentials, including a RADIUS shared secret, WPS test key, and default PSK.

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 exposes an undocumented /agileconfigreset endpoint that returns internal buffer contents to unauthenticated attackers on the adjacent network.

The Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized internal buffer contents when receiving HTTP POST requests to undefined paths, exposing server state to unauthenticated adjacent network attackers.

The Mercusys AC12G (EU) V1 router enables WPS 2.0 by default with a weak lockout policy (60-second lockout after 10 attempts).

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 transmits DDNS credentials over plaintext HTTP with only Base64 encoding. The firmware contains no TLS implementation, allowing man-in-the-middle interception of DDNS service credentials.

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 is vulnerable to a HTTP denial of service via a low number of crafted incomplete HTTP requests, causing a persistent crash that requires physical power cycling to recover.

The Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 does not validate the HTTP Host header, enabling DNS rebinding attacks. An external attacker can rebind a domain to the router's internal IP address, extending the CORS wildcard vulnerability (Access-Control-Allow-Origin: *) to internet-originated attacks.

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 discloses kernel memory layout via the UPnP GetStatusInfo action. An unauthenticated attacker on the adjacent network can obtain a raw MIPS KSEG0 kernel pointer, revealing kernel memory layout and aiding further exploitation.

Dovestones Software ADPhonebook before v4.0.1.1 is vulnerable to a Cross Site Scripting vulnerability. The /Admin/Save API allows an authenticated admin user to store malicious JavaScript payloads in multiple configuration sections without proper input validation or output encoding.

A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this vulnerability in the Webex Meetings service, and no customer action is needed.

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session, possibly leading to browser-based attacks. This is due to insufficient validation of user-supplied input for HTTP requests.

In the Linux kernel, in the panthor GPU driver, a bug occurs where failures in panthor_gpu_flush_caches() are not recovered from. When flush operations never complete, the driver does not schedule a reset, potentially leading to a hang. The fix adds reset scheduling and skipping subsequent flush operations after timeout.

In the Linux kernel PCI Endpoint subsystem, there is a missing NULL check for alloc_workqueue(). If allocation fails, a NULL pointer dereference may occur when queue_work() is called in epf_ntb_epc_init().