Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-52384 State: PUBLISHED Published: 2024-05-11T09:53:58.821Z Last Updated: 2024-08-02T22:55:41.781Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-415 Description: Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/5/ - https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202405-0000001902628049
CVE ID: CVE-2023-52385 State: PUBLISHED Published: 2024-04-08T09:18:43.493Z Last Updated: 2024-11-14T19:34:51.936Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-20 Description: Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2023-52386 State: PUBLISHED Published: 2024-04-08T09:19:57.110Z Last Updated: 2025-03-27T20:37:54.145Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper Handling of Length Parameter Inconsistency Description: Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2023-52387 State: PUBLISHED Published: 2024-02-18T02:52:24.454Z Last Updated: 2025-03-27T14:48:16.683Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Sensitive Information in Resource Not Removed Before Reuse Description: Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/2/ - https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405
CVE ID: CVE-2023-52388 State: PUBLISHED Published: 2024-04-08T08:39:24.594Z Last Updated: 2025-03-13T16:20:11.272Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Permission control vulnerability in the clock module. Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2023-52389 State: PUBLISHED Published: 2024-01-27T00:00:00.000Z Last Updated: 2025-05-29T15:11:56.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() may return a negative integer if a UTF-32 byte sequence evaluates to a value of 0x80000000 or higher. This is fixed in 1.11.8p2, 1.12.5p2, and 1.13.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pocoproject.org/blog/?p=1226 - https://github.com/pocoproject/poco/issues/4320 - https://github.com/p
erences: - https://pocoproject.org/blog/?p=1226 - https://github.com/pocoproject/poco/issues/4320 - https://github.com/pocoproject/poco/compare/poco-1.12.5p2-release...poco-1.13.0-release
CVE ID: CVE-2023-52392 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:20:02.693Z Description: No description available.
CVE ID: CVE-2023-52395 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:20:03.213Z Description: No description available.
CVE ID: CVE-2023-52396 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:20:03.779Z Description: No description available.
CVE ID: CVE-2023-52398 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:20:04.499Z Description: No description available.
CVE ID: CVE-2023-52399 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:20:05.201Z Description: No description available.
CVE ID: CVE-2023-52424 State: PUBLISHED Published: 2024-05-17T20:28:13.039Z Last Updated: 2025-02-13T15:46:59.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an "SSID Confusion" issue. This occurs because the SSID is not always used to derive the pairwise master key or session keys, and because there is not a protected exchange of an SSID during a 4-way handshake. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wi-fi
y handshake. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wi-fi.org/news-events/press-releases - https://mentor.ieee.org/802.11/dcn/24/11-24-0938-03-000m-protect-ssid-in-4-way-handshake.docx - https://www.top10vpn.com/research/wifi-vulnerability-ssid/ - https://www.top10vpn.com/assets/2024/05/Top10VPN-x-Vanhoef-SSID-Confusion.pdf
CVE ID: CVE-2023-52425 State: PUBLISHED Published: 2024-02-04T00:00:00.000Z Last Updated: 2025-11-04T18:21:45.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libexpat/libexpat/pull/789 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/ - https://lists.fedoraproject.org/archives/list/package-announce%40li
ject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNUBSGZFEZOBHJFTAD42SAN4ATW2VEMV/ - https://lists.debian.org/debian-lts-announce/2024/04/msg00006.html - http://www.openwall.com/lists/oss-security/2024/03/20/5 - https://security.netapp.com/advisory/ntap-20240614-0003/
CVE ID: CVE-2023-52426 State: PUBLISHED Published: 2024-02-04T00:00:00.000Z Last Updated: 2025-11-04T18:21:47.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/libexpat/libexpat/pull/777 - https://github.com/libexpat/libexpat/commit/0f075ec8ecb5e43f8fdca5182f8cca4703da0404 - https://cwe.mitre.org/data/definitions/776.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/ - https://lists.fe
rg/archives/list/package-announce%40lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNUBSGZFEZOBHJFTAD42SAN4ATW2VEMV/ - https://security.netapp.com/advisory/ntap-20240307-0005/
CVE ID: CVE-2023-52427 State: PUBLISHED Published: 2024-02-11T00:00:00 Last Updated: 2024-08-02T22:55:41.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenDDS through 3.27, there is a segmentation fault for a DataWriter with a large value of resource_limits.max_samples. NOTE: the vendor's position is that the product is not designed to handle a max_samples value that is too large for the amount of memory on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/OpenDDS/OpenDDS/issues/4388
CVE ID: CVE-2023-52428 State: PUBLISHED Published: 2024-02-11T00:00:00 Last Updated: 2024-10-30T19:50:55.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/526/ - https://connect2id.com/products/nimbus-jose-jwt - https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/3b3b77e
CVE ID: CVE-2023-52429 State: PUBLISHED Published: 2024-02-12T00:00:00.000Z Last Updated: 2025-11-04T18:21:48.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: dm_table_create in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to (in alloc_targets) allocate more than INT_MAX bytes, and crash, because of a missing check for struct dm_ioctl.target_count. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.spinics.net/lists/dm-devel/msg56625.html - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bd504bcfec41a503b32054da5472904b404341a4 - https://lists.fedoraproject.org/archives/list
t/torvalds/linux.git/commit/?id=bd504bcfec41a503b32054da5472904b404341a4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GS7S3XLTLOUKBXV67LLFZWB3YVFJZHRK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3LZROQAX7Q7LEP4F7WQ3KUZKWCZGFFP2/ - https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
CVE ID: CVE-2023-52430 State: PUBLISHED Published: 2024-02-12T00:00:00.000Z Last Updated: 2025-05-06T18:48:45.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: The caddy-security plugin 1.1.20 for Caddy allows reflected XSS via a GET request to a URL that contains an XSS payload and begins with either a /admin or /settings/mfa/delete/ substring. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy/ - https://github.com/greenpau/caddy-security/issues/264
CVE ID: CVE-2023-52431 State: PUBLISHED Published: 2024-02-13T00:00:00.000Z Last Updated: 2025-04-24T15:40:18.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Plack::Middleware::XSRFBlock package before 0.0.19 for Perl allows attackers to bypass a CSRF protection mechanism via an empty form value and an empty cookie (if signed cookies are disabled). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://metacpan.org/release/DAKKAR/Plack-Middleware-XSRFBlock-0.0.19/source/Changes - https://github.com/briandfoy/cpan-security-advisory/blob/9374f98bef51e1ae887f293234050551c079776f/cpansa/CPANSA-Plack-Middleware-XSRFBlock.yml#L2-L15
CVE ID: CVE-2023-52432 State: PUBLISHED Published: 2024-03-05T04:41:06.962Z Last Updated: 2024-08-02T22:55:41.675Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Improper input validation in IpcTxSndSetLoopbackCtrl in libsec-ril prior to SMR Sep-2023 Release 1 allows local attackers to write out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09
CVE ID: CVE-2023-52433 State: PUBLISHED Published: 2024-02-20T12:52:56.753Z Last Updated: 2025-10-01T19:12:53.363Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction New elements in this transaction might expired before such transaction ends. Skip sync GC for such elements otherwise commit path might walk over an already released object. Once transaction is finished, async GC will collect such expired element. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/9db9feb841f7449772f9393c16
CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/9db9feb841f7449772f9393c16b9ef4536d8c127 - https://git.kernel.org/stable/c/03caf75da1059f0460666c826e9f50e13dfd0017 - https://git.kernel.org/stable/c/c323ed65f66e5387ee0a73452118d49f1dae81b8 - https://git.kernel.org/stable/c/9af7dfb3c9d7985172a240f85e684c5cd33e29ce - https://git.kernel.org/stable/c/9a8c544158f68f656d1734eb5ba00c4f817b76b1 - https://git.kernel.org/stable/c/e3213ff99a355cda811b41e8dbb3472d13167a3a - https://git.kernel.org/stable/c/2ee52ae94baabf7ee09cf2a8d854b990dac5d0e4
CVE ID: CVE-2023-52434 State: PUBLISHED Published: 2024-02-20T18:04:44.006Z Last Updated: 2025-05-04T07:36:24.317Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2_parse_contexts() Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts(). This fixes following oops when accessing invalid create contexts from server: BUG: unable to handle page fault for address: ffff8881178d8cc3 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 4a01067 P4D 4a01067 PUD 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID: 1736 Comm: mount.cifs
00) - not-present page PGD 4a01067 P4D 4a01067 PUD 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID: 1736 Comm: mount.cifs Not tainted 6.7.0-rc4 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.2-3-gd478f380-rebuilt.opensuse.org 04/01/2014 RIP: 0010:smb2_parse_contexts+0xa0/0x3a0 [cifs] Code: f8 10 75 13 48 b8 93 ad 25 50 9c b4 11 e7 49 39 06 0f 84 d2 00 00 00 8b 45 00 85 c0 74 61 41 29 c5 48 01 c5 41 83 fd 0f 76 55 <0f> b7 7d 04 0f b7 45 06 4c 8d 74 3d 00 66 83 f8 04 75 bc ba 04 00 RSP: 0018:ffffc900007939e0 EFLAGS: 00010216 RAX: ffffc90000793c78 RBX: ffff8880180cc000 RCX: ffffc90000793c90 RDX: ffffc90000793cc0 RSI: ffff8880178d8cc0 RDI: ffff8880180cc000 RBP: ffff8881178d8
f8880180cc000 RCX: ffffc90000793c90 RDX: ffffc90000793cc0 RSI: ffff8880178d8cc0 RDI: ffff8880180cc000 RBP: ffff8881178d8cbf R08: ffffc90000793c22 R09: 0000000000000000 R10: ffff8880180cc000 R11: 0000000000000024 R12: 0000000000000000 R13: 0000000000000020 R14: 0000000000000000 R15: ffffc90000793c22 FS: 00007f873753cbc0(0000) GS:ffff88806bc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff8881178d8cc3 CR3: 00000000181ca000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> ? __die+0x23/0x70 ? page_fault_oops+0x181/0x480 ? search_module_extables+0x19/0x60 ? srso_alias_return_thunk+0x5/0xfbef5 ? exc_page_fault+0x1b6/0x1c0 ? asm_exc_page_fault+0x26
h_module_extables+0x19/0x60 ? srso_alias_return_thunk+0x5/0xfbef5 ? exc_page_fault+0x1b6/0x1c0 ? asm_exc_page_fault+0x26/0x30 ? smb2_parse_contexts+0xa0/0x3a0 [cifs] SMB2_open+0x38d/0x5f0 [cifs] ? smb2_is_path_accessible+0x138/0x260 [cifs] smb2_is_path_accessible+0x138/0x260 [cifs] cifs_is_path_remote+0x8d/0x230 [cifs] cifs_mount+0x7e/0x350 [cifs] cifs_smb3_do_mount+0x128/0x780 [cifs] smb3_get_tree+0xd9/0x290 [cifs] vfs_get_tree+0x2c/0x100 ? capable+0x37/0x70 path_mount+0x2d7/0xb80 ? srso_alias_return_thunk+0x5/0xfbef5 ? _raw_spin_unlock_irqrestore+0x44/0x60 __x64_sys_mount+0x11a/0x150 do_syscall_64+0x47/0xf0 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f8737657b1e Additional Analys
+0x11a/0x150 do_syscall_64+0x47/0xf0 entry_SYSCALL_64_after_hwframe+0x6f/0x77 RIP: 0033:0x7f8737657b1e Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/6726429c18c62dbf5e96ebbd522f262e016553fb - https://git.kernel.org/stable/c/13fb0fc4917621f3dfa285a27eaf7151d770b5e5 - https://git.kernel.org/stable/c/890bc4fac3c0973a49cac35f634579bebba7fe48 - https://git.kernel.org/stable/c/1ae3c59355dc9882e09c020afe8ffbd895ad0f29 - https://git.kernel.org/stable/c/17a0f64cc02d4972e21c733d9f21d1c512963afa - https://git.kernel.org/stable/c/af1689a9b7701d9907dfc84d2a4b57c4bc907144
CVE ID: CVE-2023-52435 State: PUBLISHED Published: 2024-02-20T18:27:27.245Z Last Updated: 2025-05-04T07:36:25.408Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: prevent mss overflow in skb_segment() Once again syzbot is able to crash the kernel in skb_segment() [1] GSO_BY_FRAGS is a forbidden value, but unfortunately the following computation in skb_segment() can reach it quite easily : mss = mss * partial_segs; 65535 = 3 * 5 * 17 * 257, so many initial values of mss can lead to a bad final result. Make sure to limit segmentation so that the new mss value is smaller than GSO_BY_FRAGS. [1] general protection fault, probabl
sure to limit segmentation so that the new mss value is smaller than GSO_BY_FRAGS. [1] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] CPU: 1 PID: 5079 Comm: syz-executor993 Not tainted 6.7.0-rc4-syzkaller-00141-g1ae4cd3cbdd0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 RIP: 0010:skb_segment+0x181d/0x3f30 net/core/skbuff.c:4551 Code: 83 e3 02 e9 fb ed ff ff e8 90 68 1c f9 48 8b 84 24 f8 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 8a 21 00 00 48 8b 84
8 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 8a 21 00 00 48 8b 84 24 f8 00 RSP: 0018:ffffc900043473d0 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000010046 RCX: ffffffff886b1597 RDX: 000000000000000e RSI: ffffffff886b2520 RDI: 0000000000000070 RBP: ffffc90004347578 R08: 0000000000000005 R09: 000000000000ffff R10: 000000000000ffff R11: 0000000000000002 R12: ffff888063202ac0 R13: 0000000000010000 R14: 000000000000ffff R15: 0000000000000046 FS: 0000555556e7e380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020010000 CR3: 0000000027ee2000 CR4: 00000000003506f0 DR0:
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020010000 CR3: 0000000027ee2000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> udp6_ufo_fragment+0xa0e/0xd00 net/ipv6/udp_offload.c:109 ipv6_gso_segment+0x534/0x17e0 net/ipv6/ip6_offload.c:120 skb_mac_gso_segment+0x290/0x610 net/core/gso.c:53 __skb_gso_segment+0x339/0x710 net/core/gso.c:124 skb_gso_segment include/net/gso.h:83 [inline] validate_xmit_skb+0x36c/0xeb0 net/core/dev.c:3626 __dev_queue_xmit+0x6f3/0x3d60 net/core/dev.c:4338 dev_queue_xmit include/linux/netdevice.h:3134 [inline] packet_xmit+0x257/0x
_queue_xmit+0x6f3/0x3d60 net/core/dev.c:4338 dev_queue_xmit include/linux/netdevice.h:3134 [inline] packet_xmit+0x257/0x380 net/packet/af_packet.c:276 packet_snd net/packet/af_packet.c:3087 [inline] packet_sendmsg+0x24c6/0x5220 net/packet/af_packet.c:3119 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0xd5/0x180 net/socket.c:745 __sys_sendto+0x255/0x340 net/socket.c:2190 __do_sys_sendto net/socket.c:2202 [inline] __se_sys_sendto net/socket.c:2198 [inline] __x64_sys_sendto+0xe0/0x1b0 net/socket.c:2198 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7f8692032aa9 Code: 28 00
_64+0x40/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7f8692032aa9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff8d685418 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8692032aa9 RDX: 0000000000010048 RSI: 00000000200000c0 RDI: 0000000000000003 RBP: 00000000000f4240 R08: 0000000020000540 R09: 0000000000000014 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8d685480 R13: 0000000000000001 R14: 00007fff8d685480 R15: 00000000
: 0000000000000000 R11: 0000000000000246 R12: 00007fff8d685480 R13: 0000000000000001 R14: 00007fff8d685480 R15: 0000000000000003 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:skb_segment+0x181d/0x3f30 net/core/skbuff.c:4551 Code: 83 e3 02 e9 fb ed ff ff e8 90 68 1c f9 48 8b 84 24 f8 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 8a 21 00 00 48 8b 84 24 f8 00 RSP: 0018:ffffc900043473d0 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000010046 RCX: ffffffff886b1597 RDX: 000000000000000e RSI: ffffffff886b2520 RDI: 0000000000000070 RBP: ffffc90004347578 R0 ---truncated--- Additional Analyst Notes: - CIS
00e RSI: ffffffff886b2520 RDI: 0000000000000070 RBP: ffffc90004347578 R0 ---truncated--- Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/0d3ffbbf8631d6db0552f46250015648991c856f - https://git.kernel.org/stable/c/cd1022eaf87be8e6151435bd4df4c242c347e083 - https://git.kernel.org/stable/c/8f8f185643747fbb448de6aab0efa51c679909a3 - https://git.kernel.org/stable/c/6c53e8547687d9c767c139cd4b50af566f58c29a - https://git.kernel.org/stable/c/989b0ff35fe5fc9652ee5bafbe8483db6f27b137 - https://git.kernel.org/stable/c/95b3904a261a9f810205da560e802cc326f50d77 - https://git.kernel.org/stable/c/23d05d563b7e7b0314e65c8e882bc27eac2da8e
ble/c/95b3904a261a9f810205da560e802cc326f50d77 - https://git.kernel.org/stable/c/23d05d563b7e7b0314e65c8e882bc27eac2da8e7
CVE ID: CVE-2023-52436 State: PUBLISHED Published: 2024-02-20T18:34:47.387Z Last Updated: 2025-07-11T17:19:28.135Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: f2fs: explicitly null-terminate the xattr list When setting an xattr, explicitly null-terminate the xattr list. This eliminates the fragile assumption that the unused xattr space is always zeroed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/16ae3132ff7746894894927c1892493693b89135 - https://git.kernel.org/stable/c/12cf91e23b126718a96b914f949f2cdfeadc7b2a - https://git.kernel.org/stable/c/3e47
b89135 - https://git.kernel.org/stable/c/12cf91e23b126718a96b914f949f2cdfeadc7b2a - https://git.kernel.org/stable/c/3e47740091b05ac8d7836a33afd8646b6863ca52 - https://git.kernel.org/stable/c/32a6cfc67675ee96fe107aeed5af9776fec63f11 - https://git.kernel.org/stable/c/5de9e9dd1828db9b8b962f7ca42548bd596deb8a - https://git.kernel.org/stable/c/2525d1ba225b5c167162fa344013c408e8b4de36 - https://git.kernel.org/stable/c/f6c30bfe5a49bc38cae985083a11016800708fea - https://git.kernel.org/stable/c/e26b6d39270f5eab0087453d9b544189a38c8564
CVE ID: CVE-2023-52437 State: REJECTED Published: 2024-02-20T18:34:48.029Z Last Updated: 2024-02-22T12:35:01.765Z Description: No description available.