CVE Vulnerability Catalog

A vulnerability has been identified in the Linux kernel related to KVM, concerning the synchronization of interrupt state in nested virtual machines. The issue arises when KVM_SET_VCPU_EVENTS is called before KVM_SET_NESTED_STATE, potentially leading to a hang of the vCPU in L2.

A vulnerability related to a memory leak in the cc_mac_digest() function has been identified in the Linux kernel. A fix has been implemented that adds the cc_unmap_result() function in case cc_map_hash_request_final() fails.

A vulnerability has been identified in the ext4 filesystem within the Linux kernel that occurs during block allocation in DIO mode. The issue arises from improper setting of the EXT4_GET_BLOCKS_CONVERT flag, which may lead to stale data problems.

A vulnerability has been identified in the Linux kernel related to NFSv4 request handling. Delays in idmap upcall responses can lead to request rejections, resulting in client session errors.

In the Linux kernel, a vulnerability related to NULL pointer dereference in the acpi_ev_address_space_dispatch() function has been fixed. A new check has been added to cover a missed execution path.

A vulnerability in the Linux kernel related to device lifecycle handling in the `css_alloc_subchannel()` function has been fixed. The issue was that in case of a DMA mask setup failure, the subchannel structure was freed without proper reference management to the device model.

A vulnerability in the Linux kernel related to amdgpu has been resolved, which occurred under low memory conditions. In such situations, the kmalloc function could fail, requiring the mutex to be unlocked for a clean exit.

A vulnerability has been identified and resolved in the Linux kernel. The issue concerns the gb_lights_light_config() function, which stores the channel count before allocating the channels array, potentially leading to a NULL pointer dereference.

A vulnerability has been identified in the Linux kernel within the fbnic module, concerning a race condition between logging functions and the teardown process. This issue may lead to dereferencing a freed or null variable, posing a risk of system errors.

A vulnerability related to a memory leak in the amdgpu_ras_init() function has been identified in the Linux kernel. If the amdgpu_nbio_ras_sw_init() function fails, the allocated con structure is not freed, leading to a memory leak.

A vulnerability has been identified in the Linux kernel related to accessing the ublksrv_ctrl_cmd structure, which may reside in userspace-mapped memory. The issue involves a race condition when reading its fields, potentially leading to unpredictable behavior.

A vulnerability in the Linux kernel related to invalid leaf access in the btrfs_quota_enable() function when the reference key is not found has been resolved. The issue occurred when btrfs_search_slot_for_read() returned 1, indicating that no key greater than or equal to the requested key was found.

A vulnerability in the Linux kernel causes the driver to hang indefinitely in LAG mode during firmware reset. This issue arises from a race condition leading to an infinite wait for UMR completion during device unload.

A vulnerability in the Linux kernel related to BPF programs has been resolved by limiting the size of BPF program signatures. Allowing larger sizes can lead to abuse, forcing the kernel into costly memory allocations.

A vulnerability has been identified in the Linux kernel within the ps_gamepad_create() function, which calls input_ff_create_memless() without verifying its return value. This can lead to incorrect behavior or potential crashes when FF effects are triggered.

A vulnerability has been identified in the Linux kernel's cpuidle module, occurring on certain PowerNV platforms. The issue arises when only one idle state is registered, leading the governor to incorrectly treat this state, which can invoke a NULL pointer and ultimately cause system crashes.

A vulnerability in the Linux kernel has been fixed, concerning the map_direct_value_addr() function. This function incorrectly adds an offset to the address, potentially leading to system malfunction.

A vulnerability has been identified in the Linux kernel within AppArmor, leading to a NULL pointer dereference in the __unix_needs_revalidation function. This issue occurs when receiving file descriptors via SCM_RIGHTS, where both the socket and sk pointers may be NULL.

A vulnerability in the Linux kernel related to invalid dereferencing of rawdata when the export_binary parameter is unset has been fixed. When a profile is replaced, rawdata is set to NULL, leading to an error during dereferencing.

A vulnerability has been identified in the Linux kernel related to a kref leak in the error path of the gss_alloc_msg function. The issue arises from the lack of a kref_put() call when the kstrdup_const() function fails, leading to the gss_auth structure not being freed.