CVE Vulnerability Catalog

A vulnerability has been identified in the Linux kernel related to improper data copying for non-linear buffers. The issue was that during the copying of the original payload to a new buffer, the copy length was set to zero, resulting in no data being copied.

A vulnerability has been identified in the Linux kernel's autodim code in the hid-appletb-kbd module, allowing blocking functions to be called in atomic context. This issue occurs in two locations, leading to mutex locking errors.

A vulnerability related to the deregistration of the SPI controller in mpc52xx has been fixed in the Linux kernel. The issue was that the controller was not properly deregistered before disabling and releasing resources such as interrupts and GPIOs.

A vulnerability has been identified in the Linux kernel related to tracepoints that occurs during the failure of the func_add() function in tracepoint_add_func(). In the event of an error, the function does not call the corresponding unregfunc(), leading to an incorrect reference state.

A vulnerability has been identified in the Linux kernel's AH module that occurs during asynchronous operations. The issue involves incorrect handling of the high bits of ESN in callbacks, leading to data transmission errors in both IPv4 and IPv6 protocols.

A vulnerability in the Linux kernel related to the SPI interface in microchips has been resolved, which occurred during emulated read-only dual/quad operations. The issue involved unnecessary data transmission that could lead to transfer failure.

A vulnerability has been identified in the Linux kernel due to a lack of NULL checks after calling the napi_build_skb() function. In case of allocation failure, the result can lead to a NULL pointer dereference.

A vulnerability has been identified in the Linux kernel related to a race condition in thread management. The issue occurs when kthread_complete_and_exit() is called before kthread_stop(), leading to the use of a kthread object after it has been freed.

A vulnerability has been identified in the Linux kernel's Bluetooth packet handling that allows invalid data to be passed to the hci_recv_frame() function. This issue arises when the packet length is not properly verified before further processing, potentially leading to the reading of uninitialized data from the buffer.

A vulnerability in the Linux kernel related to division by zero in USB handling functions has been fixed. A missing sanity check for bNrChannels in detect_usb_format() could lead to a kernel crash.

A vulnerability in the Linux kernel was identified that allowed uninitialized stack memory bytes to leak to userspace. The issue was related to the papr_hvpipe_hdr structure, where not all fields were initialized, potentially leading to data exposure.

A vulnerability has been identified in the Linux kernel that allows pointer operations on unconfigured streams. The issue arises from dividing the I/O frame position by values that default to 0, potentially leading to a divide by zero error.

A vulnerability has been identified in the Linux kernel in the xfrm6_rcv_encap() function, which improperly manages references to dst entries in case of errors during IPv6 route lookups. As a result, repeated packets can lead to dst entry leaks.

A vulnerability has been identified in the Linux kernel related to a memory leak in the KVM vector context for RISC-V architecture. If the second memory allocation fails, the first allocation is not freed, leading to a leak.

A vulnerability has been identified in the Linux kernel within the mptcp module that occurs during the retransmission of ADD_ADDR. The issue involves improper timer management, which can lead to resource blocking.

A vulnerability has been identified in the Linux kernel's hfsplus module, related to the lack of validation of catalog record size, leading to the reading of uninitialized data. This issue may occur when mounting a corrupted filesystem, resulting in partial data reads.

A vulnerability has been identified in the Linux kernel related to the use of lock_sock_fast() in atomic context when setting timestamps. This change can lead to system panic due to scheduling while atomic.

A vulnerability has been identified in the Linux kernel within the usblp driver, leading to an uninitialized heap leak via the LPGETSTATUS ioctl. The issue arises because the device's response may contain invalid data, resulting in the transmission of stale, unsafe data to the user.

A vulnerability has been identified in the Linux kernel that leads to self-deadlock when removing tunnel ports in openvswitch. The issue arises from improper management of RCU and RTNL contexts during device removal.

A vulnerability has been identified in the Linux kernel that leads to a divide-by-zero error in the setup_geo() function when the far_copies parameter is zero. This issue has been resolved by implementing validation of nc and fc values after extraction.