Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-36775 State: PUBLISHED Published: 2024-06-06T21:35:17.060Z Last Updated: 2025-02-13T15:59:37.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the About Me parameter in the Edit Profile page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OoLs5/VulDiscovery/blob/main/monstra_xss.pdf
CVE ID: CVE-2024-36779 State: PUBLISHED Published: 2024-06-06T12:31:37.490Z Last Updated: 2025-02-13T15:59:37.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Stock Management System v1.0 is vulnerable to SQL Injection via editCategories.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CveSecLook/cve/issues/42
CVE ID: CVE-2024-36782 State: PUBLISHED Published: 2024-06-03T20:09:40.333Z Last Updated: 2025-02-13T15:59:38.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/totolink%20cp300/README.md
CVE ID: CVE-2024-36783 State: PUBLISHED Published: 2024-06-03T19:58:42.756Z Last Updated: 2025-02-13T15:59:38.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection via the host_time parameter in the NTPSyncWithHost function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/totolink%20LR350/NTPSyncWithHost/README.md
CVE ID: CVE-2024-36787 State: PUBLISHED Published: 2024-06-07T14:17:11.178Z Last Updated: 2025-03-13T17:00:02.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass authentication and access the administrative interface via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/
CVE ID: CVE-2024-36788 State: PUBLISHED Published: 2024-06-07T14:24:55.183Z Last Updated: 2025-02-13T15:59:40.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/
CVE ID: CVE-2024-36789 State: PUBLISHED Published: 2024-06-07T14:19:37.128Z Last Updated: 2025-02-13T15:59:40.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords that do not conform to defined security standards. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/
CVE ID: CVE-2024-36790 State: PUBLISHED Published: 2024-06-07T14:23:07.428Z Last Updated: 2025-02-13T15:59:41.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/
CVE ID: CVE-2024-36792 State: PUBLISHED Published: 2024-06-07T14:14:38.070Z Last Updated: 2025-02-13T15:59:41.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's pin. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/
CVE ID: CVE-2024-36795 State: PUBLISHED Published: 2024-06-06T20:49:33.951Z Last Updated: 2025-02-13T15:59:42.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to access URLs and directories embedded within the firmware via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/
CVE ID: CVE-2024-36800 State: PUBLISHED Published: 2024-06-04T12:49:06.688Z Last Updated: 2025-02-13T15:59:42.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/want1997/SEMCMS_VUL/blob/main/Download_sql_vul.md
CVE ID: CVE-2024-36801 State: PUBLISHED Published: 2024-06-04T12:47:24.777Z Last Updated: 2025-02-13T15:59:43.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/want1997/SEMCMS_VUL/blob/main/Download_sql_vul_2.md
CVE ID: CVE-2024-36802 State: REJECTED Published: N/A Last Updated: 2024-06-26T05:29:08.488237 Description: No description available.
CVE ID: CVE-2024-36811 State: REJECTED Published: 2024-06-07T00:00:00 Last Updated: 2024-10-28T21:00:36.024141 Description: No description available.
CVE ID: CVE-2024-36814 State: PUBLISHED Published: 2024-10-08T00:00:00 Last Updated: 2024-10-09T19:51:27.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/itz-d0dgy/ - https://github.com/AdguardTeam/AdGuardHome/ - https://github.com/AdguardTeam/AdGuardHome/blob/7c002e1a99b9b4e4a40e8c66851eda33e666d52d/internal/filtering/http.go#L23C1-L51C2 - https://happy-little-accidents.pag
lob/7c002e1a99b9b4e4a40e8c66851eda33e666d52d/internal/filtering/http.go#L23C1-L51C2 - https://happy-little-accidents.pages.dev/posts/CVE-2024-36814/
CVE ID: CVE-2024-36819 State: PUBLISHED Published: 2024-06-25T00:00:00 Last Updated: 2024-11-01T15:28:51.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: MAP-OS 4.45.0 and earlier is vulnerable to Cross-Site Scripting (XSS). This vulnerability allows malicious users to insert a malicious payload into the "Client Name" input. When a service order from this client is created, the malicious payload is displayed on the administrator and employee dashboards, resulting in unauthorized script execution whenever the dashboard is loaded. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/RamonSilva20/mapos/tree/master - https://
SA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/RamonSilva20/mapos/tree/master - https://github.com/RamonSilva20/mapos/commit/3559bae4782162faab94670f503fd35b0f331929
CVE ID: CVE-2024-36821 State: PUBLISHED Published: 2024-06-11T00:00:00 Last Updated: 2024-08-02T03:43:49.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://downloads.linksys.com/support/assets/releasenotes/WHW01_VLP01_1.1.13.202617_Customer_Release_Notes.txt - https://github.com/IvanGlinkin/CVE-2024-36821
CVE ID: CVE-2024-36823 State: PUBLISHED Published: 2024-06-06T21:14:31.574Z Last Updated: 2025-03-25T18:15:09.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: The encrypt() function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ninjaframework/ninja/issues
CVE ID: CVE-2024-36827 State: PUBLISHED Published: 2024-06-07T00:00:00.000Z Last Updated: 2025-03-28T19:12:31.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of ebookmeta before v1.2.8 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dnkorpushov/ebookmeta/issues/16#issue-2317712335
CVE ID: CVE-2024-36829 State: PUBLISHED Published: 2024-06-26T00:00:00 Last Updated: 2024-08-12T13:47:35.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Teldat M1 v11.00.05.50.01 allows attackers to obtain sensitive information via a crafted query string. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/MILPDS/96843ccf7369ec1da643b7d6e22d428d
CVE ID: CVE-2024-36831 State: PUBLISHED Published: 2024-12-17T00:00:00 Last Updated: 2024-12-17T15:56:34.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference in the plugins_call_handle_uri_clean function of D-Link DAP-1520 REVA_FIRMWARE_1.10B04_BETA02_HOTFIX allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en - https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10395 - https://docs.google.com/document/d/15CVb7XHIgtfeW1W1pLZJWvlBMYN1rtr75vqZqf1v3Eo
ecurity/publication.aspx?name=SAP10395 - https://docs.google.com/document/d/15CVb7XHIgtfeW1W1pLZJWvlBMYN1rtr75vqZqf1v3Eo/edit?usp=sharing
CVE ID: CVE-2024-36832 State: PUBLISHED Published: 2024-12-17T00:00:00 Last Updated: 2024-12-17T16:49:12.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference in D-Link DAP-1513 REVA_FIRMWARE_1.01 allows attackers to cause a Denial of Service (DoS) via a crafted web request without authentication. The vulnerability occurs in the /bin/webs binary of the firmware. When /bin/webs receives a carefully constructed HTTP request, it will crash and exit due to a null pointer reference, leading to a denial of service attack to the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://www.dlin
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en - https://docs.google.com/document/d/1qTpwAg7B5E4mqkBzijjuoOWWnf3OE1HXIKBv7OcS8Mc/edit?usp=sharing - https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10396
CVE ID: CVE-2024-36837 State: PUBLISHED Published: 2024-06-05T00:00:00 Last Updated: 2024-08-02T03:43:49.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain sensitive information via the getProductList function in the ProductController.php file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/phtcloud-dev/CVE-2024-36837
CVE ID: CVE-2024-36840 State: PUBLISHED Published: 2024-06-12T00:00:00 Last Updated: 2024-08-02T03:43:49.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code and obtain sensitive information via the id parameter to news_details.php and location_details.php; and the section parameter to services.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://infosec-db.github.io/CyberDepot/vuln_boelter_blue/ - https://play.google.com/store/apps/details?id=com.anchor5digital.anchor5adminapp&hl=en_US - http://seclists.org/fulldi
- https://play.google.com/store/apps/details?id=com.anchor5digital.anchor5adminapp&hl=en_US - http://seclists.org/fulldisclosure/2024/Jun/0 - https://packetstormsecurity.com/files/178978/Boelter-Blue-System-Management-1.3-SQL-Injection.html - https://sploitus.com/exploit?id=PACKETSTORM:178978 - https://vuldb.com/?id.267594
CVE ID: CVE-2024-36842 State: PUBLISHED Published: 2025-04-15T00:00:00.000Z Last Updated: 2025-04-15T19:28:16.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Oncord+ Android Infotainment Systems OS Android 12, Model Hardware TS17,Hardware part Number F57L_V3.2_20220301, and Build Number PlatformVER:K24-2023/05/09-v0.01 allows a remote attacker to execute arbitrary code via the ADB port component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/abbiy/Backdooring-Oncord-Android-Sterio-/blob/main/README.md
CVE ID: CVE-2024-36843 State: PUBLISHED Published: 2024-05-31T00:00:00.000Z Last Updated: 2025-11-03T20:37:51.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: libmodbus v3.1.6 was discovered to contain a heap overflow via the modbus_mapping_free() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/stephane/libmodbus/issues/748 - https://github.com/balckgu1/libmodbusPoc/blob/main/gdb.md
CVE ID: CVE-2024-36844 State: PUBLISHED Published: 2024-05-31T19:16:22.991Z Last Updated: 2025-11-03T20:37:52.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/stephane/libmodbus/issues/749
CVE ID: CVE-2024-36845 State: PUBLISHED Published: 2024-05-31T19:16:27.610Z Last Updated: 2025-11-03T20:37:54.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid pointer in the modbus_receive() function of libmodbus v3.1.6 allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/stephane/libmodbus/issues/750
CVE ID: CVE-2024-36856 State: PUBLISHED Published: 2024-06-12T00:00:00 Last Updated: 2024-08-22T18:19:27.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: RMQTT Broker 0.4.0 allows remote attackers to cause a Denial of Service (daemon crash) via a certain sequence of five TCP packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rmqtt/rmqtt/releases/tag/0.4.0 - https://gist.github.com/pengwGit/d8410afeb0d5d11ab79f596a32178c2e
CVE ID: CVE-2024-36857 State: PUBLISHED Published: 2024-06-04T18:26:04.843Z Last Updated: 2025-02-13T15:59:45.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HackAllSec/CVEs/tree/main/Jan%20AFR%20vulnerability
CVE ID: CVE-2024-36858 State: PUBLISHED Published: 2024-06-04T18:26:06.014Z Last Updated: 2025-02-13T15:59:45.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HackAllSec/CVEs/tree/main/Jan%20Arbitrary%20File%20Upload%20vulnerability
CVE ID: CVE-2024-36877 State: PUBLISHED Published: 2024-08-12T00:00:00.000Z Last Updated: 2025-03-13T19:23:38.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Micro-Star International Z-series motherboards (Z590, Z490, and Z790) and B-series motherboards (B760, B560, B660, and B460) with firmware 7D25v14, 7D25v17 to 7D25v19, and 7D25v1A to 7D25v1H was discovered to contain a write-what-where condition in the in the SW handler for SMI 0xE3. Motherboard's with the following chipsets are affected: Intel 300, Intel 400, Intel 500, Intel 600, Intel 700, AMD 300, AMD 400, AMD 500, AMD 600 and AMD 700. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://csr.msi.c
MD 400, AMD 500, AMD 600 and AMD 700. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://csr.msi.com/global/product-security-advisories - https://jjensn.com/at-home-in-your-firmware/
CVE ID: CVE-2024-36880 State: PUBLISHED Published: 2024-05-30T15:28:51.518Z Last Updated: 2025-05-04T09:11:18.906Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: add missing firmware sanity checks Add the missing sanity checks when parsing the firmware files before downloading them to avoid accessing and corrupting memory beyond the vmalloced buffer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/ed53949cc92e28aaa3463d246942bda1fbb7f307 - https://git.kernel.org/stable/c/1caceadfb50432dbf6d808796cb6c34ebb6d662c - https://git.kernel.org/sta
6942bda1fbb7f307 - https://git.kernel.org/stable/c/1caceadfb50432dbf6d808796cb6c34ebb6d662c - https://git.kernel.org/stable/c/427281f9498ed614f9aabc80e46ec077c487da6d - https://git.kernel.org/stable/c/02f05ed44b71152d5e11d29be28aed91c0489b4e - https://git.kernel.org/stable/c/2e4edfa1e2bd821a317e7d006517dcf2f3fac68d
CVE ID: CVE-2024-36881 State: PUBLISHED Published: 2024-05-30T15:28:52.119Z Last Updated: 2025-05-04T12:56:23.125Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: reset ptes when close() for wr-protected ones Userfaultfd unregister includes a step to remove wr-protect bits from all the relevant pgtable entries, but that only covered an explicit UFFDIO_UNREGISTER ioctl, not a close() on the userfaultfd itself. Cover that too. This fixes a WARN trace. The only user visible side effect is the user can observe leftover wr-protect bits even if the user close()ed on an userfaultfd when releasing the last reference of i
can observe leftover wr-protect bits even if the user close()ed on an userfaultfd when releasing the last reference of it. However hopefully that should be harmless, and nothing bad should happen even if so. This change is now more important after the recent page-table-check patch we merged in mm-unstable (446dd9ad37d0 ("mm/page_table_check: support userfault wr-protect entries")), as we'll do sanity check on uffd-wp bits without vma context. So it's better if we can 100% guarantee no uffd-wp bit leftovers, to make sure each report will be valid. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/377f3a9a3d032a52325a5b110
CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/377f3a9a3d032a52325a5b110379a25dd1ab1931 - https://git.kernel.org/stable/c/8d8b68a5b0c9fb23d37df06bb273ead38fd5a29d - https://git.kernel.org/stable/c/c88033efe9a391e72ba6b5df4b01d6e628f4e734
CVE ID: CVE-2024-36882 State: PUBLISHED Published: 2024-05-30T15:28:52.706Z Last Updated: 2025-05-04T09:11:21.049Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: mm: use memalloc_nofs_save() in page_cache_ra_order() See commit f2c817bed58d ("mm: use memalloc_nofs_save in readahead path"), ensure that page_cache_ra_order() do not attempt to reclaim file-backed pages too, or it leads to a deadlock, found issue when test ext4 large folio. INFO: task DataXceiver for:7494 blocked for more than 120 seconds. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:DataXceiver for state:D stack:0 pid:7494 ppid:1 f
> /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:DataXceiver for state:D stack:0 pid:7494 ppid:1 flags:0x00000200 Call trace: __switch_to+0x14c/0x240 __schedule+0x82c/0xdd0 schedule+0x58/0xf0 io_schedule+0x24/0xa0 __folio_lock+0x130/0x300 migrate_pages_batch+0x378/0x918 migrate_pages+0x350/0x700 compact_zone+0x63c/0xb38 compact_zone_order+0xc0/0x118 try_to_compact_pages+0xb0/0x280 __alloc_pages_direct_compact+0x98/0x248 __alloc_pages+0x510/0x1110 alloc_pages+0x9c/0x130 folio_alloc+0x20/0x78 filemap_alloc_folio+0x8c/0x1b0 page_cache_ra_order+0x174/0x308 ondemand_readahead+0x1c8/0x2b8 page_cache_async_ra+0x68/0xb8 filemap_readahead.isra.0+0x64/0xa8 filemap_get_pages+0x3fc
ondemand_readahead+0x1c8/0x2b8 page_cache_async_ra+0x68/0xb8 filemap_readahead.isra.0+0x64/0xa8 filemap_get_pages+0x3fc/0x5b0 filemap_splice_read+0xf4/0x280 ext4_file_splice_read+0x2c/0x48 [ext4] vfs_splice_read.part.0+0xa8/0x118 splice_direct_to_actor+0xbc/0x288 do_splice_direct+0x9c/0x108 do_sendfile+0x328/0x468 __arm64_sys_sendfile64+0x8c/0x148 invoke_syscall+0x4c/0x118 el0_svc_common.constprop.0+0xc8/0xf0 do_el0_svc+0x24/0x38 el0_svc+0x4c/0x1f8 el0t_64_sync_handler+0xc0/0xc8 el0t_64_sync+0x188/0x190 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/7629ef6dda1564098aadeef38e5fbd11ee8627c4 - https://git.kernel.org/st
iner: References: - https://git.kernel.org/stable/c/7629ef6dda1564098aadeef38e5fbd11ee8627c4 - https://git.kernel.org/stable/c/468971c3f4b8187f25334503b68050a0e1370147 - https://git.kernel.org/stable/c/cf6a1d16c6df3c30b03f0c6a92a2ba7f86dffb45 - https://git.kernel.org/stable/c/30153e4466647a17eebfced13eede5cbe4290e69
CVE ID: CVE-2024-36883 State: PUBLISHED Published: 2024-05-30T15:28:53.302Z Last Updated: 2025-05-04T12:56:24.544Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: fix out-of-bounds access in ops_init net_alloc_generic is called by net_alloc, which is called without any locking. It reads max_gen_ptrs, which is changed under pernet_ops_rwsem. It is read twice, first to allocate an array, then to set s.len, which is later used to limit the bounds of the array access. It is possible that the array is allocated and another thread is registering a new pernet ops, increments max_gen_ptrs, which is then used to set s.len with a lar
and another thread is registering a new pernet ops, increments max_gen_ptrs, which is then used to set s.len with a larger than allocated length for the variable array. Fix it by reading max_gen_ptrs only once in net_alloc_generic. If max_gen_ptrs is later incremented, it will be caught in net_assign_generic. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/3cdc34d76c4f777579e28ad373979d36c030cfd3 - https://git.kernel.org/stable/c/7b0e64583eab8c1d896b47e5dd0bf2e7d86ec41f - https://git.kernel.org/stable/c/0c3248bc708a7797be573214065cf908ff1f54c7 - https://git.kernel.org/stable/c/9518b79bfd2fbf99fa9b7e8e36bcb1825e7ba030