Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-46613 State: PUBLISHED Published: 2024-11-10T00:00:00 Last Updated: 2024-11-19T20:16:06.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list. This affects string_free_split_shared , string_free_split, string_free_split_command, and string_free_split_tags. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://weechat.org/doc/weechat/security/WSA-2024-1/ - https://github.com/weechat/weechat/issues/2178
CVE ID: CVE-2024-46622 State: PUBLISHED Published: 2025-01-06T00:00:00 Last Updated: 2025-01-07T15:49:22.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Escalation of Privilege security vulnerability was found in SecureAge Security Suite software 7.0.x before 7.0.38, 7.1.x before 7.1.11, 8.0.x before 8.0.18, and 8.1.x before 8.1.18 that allows arbitrary file creation, modification and deletion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.secureage.com/ - https://www.secureage.com/blog/resolved-escalation-of-privilege
CVE ID: CVE-2024-46624 State: PUBLISHED Published: 2024-12-03T00:00:00 Last Updated: 2024-12-04T15:00:15.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload sent to /api/users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/EchoSl0w/Research/blob/main/2024/CVE-2024-46624.md
CVE ID: CVE-2024-46625 State: PUBLISHED Published: 2024-12-03T00:00:00 Last Updated: 2024-12-11T14:36:16.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authenticated arbitrary file upload vulnerability in the /documentCache/upload endpoint of InfoDom Performa 365 v4.0.1 allows attackers to execute arbitrary code via uploading a crafted SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/EchoSl0w/Research/blob/main/2024/CVE-2024-46625.md
CVE ID: CVE-2024-46626 State: PUBLISHED Published: 2024-10-02T00:00:00 Last Updated: 2024-10-02T17:02:46.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS4ED openSIS-Classic v9.1 was discovered to contain a SQL injection vulnerability via a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/d0ub1edd/CVE-Reference/blob/main/CVE-2024-46626.md
CVE ID: CVE-2024-46627 State: PUBLISHED Published: 2024-09-26T00:00:00 Last Updated: 2024-09-27T14:47:28.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://datagerry.com/ - https://github.com/DATAGerry/ - https://github.com/d4lyw/CVE-2024-46627 - https://daly.wtf/cve-2024-46627-incorrect-access-control-in-becn-datagerry-v2-2-allows-attackers-to-execute-arbitrary-commands-via-crafted-web-requests/
CVE ID: CVE-2024-46628 State: PUBLISHED Published: 2024-09-26T00:00:00 Last Updated: 2024-09-26T20:23:59.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Question-h/vuln/blob/master/Remote%20Code%20Execution%20Vulnerability%20in%20Tenda%20G3%20Router.md
CVE ID: CVE-2024-46632 State: PUBLISHED Published: 2024-09-26T00:00:00 Last Updated: 2024-09-26T18:59:32.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/assimp/assimp/issues/5771
CVE ID: CVE-2024-46635 State: PUBLISHED Published: 2024-09-30T00:00:00 Last Updated: 2024-11-14T19:22:06.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access sensitive information via a crafted payload to the UserNameOrPhoneNumber parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hithub.notion.site/Sensitive-Information-Disclosure-in-GongZhiDao-System-aaad25d2430f4a638d462194cfa87c8b
CVE ID: CVE-2024-46639 State: PUBLISHED Published: 2024-09-23T00:00:00 Last Updated: 2024-09-23T19:52:50.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in HelpDeskZ v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field of Custom Fields message box. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/0xashfaq/-HelpDeskZ-v2.0.2---Stored-Cross-Site-Scripting-XSS- - https://gist.github.com/0xashfaq/45c3f300d125468161c3fa6e38576769
CVE ID: CVE-2024-46640 State: PUBLISHED Published: 2024-09-20T00:00:00 Last Updated: 2024-09-23T15:30:29.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/zheng_botong/CVE-2024-46640
CVE ID: CVE-2024-46644 State: PUBLISHED Published: 2024-09-20T00:00:00 Last Updated: 2024-09-23T13:36:14.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via edit_file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/skit-cyber-security/eNMS_vulnerabilities
CVE ID: CVE-2024-46645 State: PUBLISHED Published: 2024-09-20T00:00:00 Last Updated: 2024-09-23T13:38:53.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: eNMS 4.0.0 is vulnerable to Directory Traversal via get_tree_files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/skit-cyber-security/eNMS_vulnerabilities
CVE ID: CVE-2024-46646 State: PUBLISHED Published: 2024-09-20T00:00:00 Last Updated: 2024-09-23T13:40:52.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: eNMS up to 4.7.1 is vulnerable to Directory Traversal via /download/file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/skit-cyber-security/eNMS_vulnerabilities
CVE ID: CVE-2024-46647 State: PUBLISHED Published: 2024-09-20T00:00:00 Last Updated: 2024-09-23T13:59:08.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via upload_files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/skit-cyber-security/eNMS_vulnerabilities
CVE ID: CVE-2024-46648 State: PUBLISHED Published: 2024-09-20T00:00:00 Last Updated: 2024-09-23T14:00:37.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via scan_folder. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/skit-cyber-security/eNMS_vulnerabilities
CVE ID: CVE-2024-46649 State: PUBLISHED Published: 2024-09-20T00:00:00 Last Updated: 2024-09-23T14:02:09.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: eNMS up to 4.7.1 is vulnerable to Directory Traversal via download/folder. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/skit-cyber-security/eNMS_vulnerabilities
CVE ID: CVE-2024-46652 State: PUBLISHED Published: 2024-09-20T00:00:00 Last Updated: 2024-09-23T14:27:17.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zp9080/Tenda/blob/main/Tenda-AC8v4%20V16.03.34.06-fromAdvSetMacMtuWan/overview.md
CVE ID: CVE-2024-46654 State: PUBLISHED Published: 2024-09-20T00:00:00 Last Updated: 2024-09-20T19:53:17.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Add Scheduled Task module of Maccms10 v2024.1000.4040 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/magicblack/maccms10/issues/1183
CVE ID: CVE-2024-46655 State: PUBLISHED Published: 2024-09-25T00:00:00 Last Updated: 2024-09-25T19:51:27.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ellevo.com/ - https://csflabs.github.io/cve/2024/09/24/cve-2024-46655-Cross-Site-Scripting-%28XSS%29-%28Reflected%29-in-Ellevo-application.html
CVE ID: CVE-2024-46657 State: PUBLISHED Published: 2024-12-10T00:00:00 Last Updated: 2024-12-11T15:19:12.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/diff/?id=b5c898a30f068b5342e8263a2cd5b9f0be291aac - https://github.com/ArtifexSoftware/mupdf/commit/b5c898a30f068b5342e8263a2cd5b9f0be291aac - https://gist.github.com/isumitpatel/615e6bd2621cb46b5d9
Software/mupdf/commit/b5c898a30f068b5342e8263a2cd5b9f0be291aac - https://gist.github.com/isumitpatel/615e6bd2621cb46b5d980ddb9db223e2
CVE ID: CVE-2024-46658 State: PUBLISHED Published: 2024-10-03T00:00:00 Last Updated: 2024-10-04T19:07:24.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Syrotech SY-GOPON-8OLT-L3 v1.6.0_240629 was discovered to contain an authenticated command injection vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jackalkarlos/CVE-2024-46658/tree/main
CVE ID: CVE-2024-46662 State: PUBLISHED Published: 2025-03-14T15:03:27.830Z Last Updated: 2025-03-15T03:55:27.259Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:W/RC:C) Vendors: Fortinet Products: FortiManager Problem Types: CWE-77 Description: A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to escalation of privilege via specifically crafted packets Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-222
CVE ID: CVE-2024-46663 State: PUBLISHED Published: 2025-03-11T14:54:31.928Z Last Updated: 2025-03-12T04:00:58.832Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiMail Problem Types: CWE-121 Description: A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-331
CVE ID: CVE-2024-46664 State: PUBLISHED Published: 2025-01-14T14:09:40.070Z Last Updated: 2025-01-14T20:54:26.530Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiRecorder Problem Types: CWE-23 Description: A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to read files from the underlying filesystem via crafted HTTP or HTTPs requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-310
CVE ID: CVE-2024-46665 State: PUBLISHED Published: 2025-01-14T14:08:26.784Z Last Updated: 2025-01-14T20:57:35.579Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiOS Problem Types: CWE-201 Description: An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may allow an attacker in a man-in-the-middle position to retrieve the RADIUS accounting server shared secret via intercepting accounting-requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-326
CVE ID: CVE-2024-46666 State: PUBLISHED Published: 2025-01-14T14:09:56.935Z Last Updated: 2025-02-18T21:39:30.528Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: Fortinet Products: FortiOS Problem Types: CWE-770 Description: An allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS versions 7.6.0, versions 7.4.4 through 7.4.0, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow a remote unauthenticated attacker to prevent access to the GUI via specially crafted requests directed at specific endpoints. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psi
specific endpoints. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-250
CVE ID: CVE-2024-46667 State: PUBLISHED Published: 2025-01-14T14:09:58.844Z Last Updated: 2025-02-18T21:37:18.364Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:W/RC:C) Vendors: Fortinet Products: FortiSIEM Problem Types: CWE-770 Description: A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all versions, and 7.1.0 through 7.1.5 may allow an attacker to deny valid TLS traffic via consuming all allotted connections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-164
CVE ID: CVE-2024-46668 State: PUBLISHED Published: 2025-01-14T14:08:59.162Z Last Updated: 2025-01-14T20:55:43.639Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiOS Problem Types: CWE-770 Description: An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, versions 7.0.0 through 7.0.15, and versions 6.4.0 through 6.4.15 may allow an unauthenticated remote user to consume all system memory via multiple large file uploads. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-
e uploads. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-219
CVE ID: CVE-2024-46669 State: PUBLISHED Published: 2025-01-14T14:08:37.297Z Last Updated: 2025-01-14T20:56:51.902Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R) Vendors: Fortinet Products: FortiOS Problem Types: CWE-190 Description: An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b FortiOS tenant IPsec IKE service may allow an authenticated attacker to crash the IPsec tunnel via crafted requests, resulting in potential denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-267
CVE ID: CVE-2024-46670 State: PUBLISHED Published: 2025-01-14T14:08:41.759Z Last Updated: 2025-01-14T20:56:44.074Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:X/RL:X/RC:X) Vendors: Fortinet Products: FortiOS, FortiProxy, FortiPAM Problem Types: CWE-125 Description: An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 24.3.b IPsec IKE service may allow an unauthenticated remote attacker to trigger memory consumption leading to Denial of Service via crafted requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/
via crafted requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-266
CVE ID: CVE-2024-46671 State: PUBLISHED Published: 2025-04-08T14:02:59.350Z Last Updated: 2025-04-08T14:30:24.831Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H/E:P/RL:U/RC:R) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-286 Description: An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, version 7.2.10 and below, version 7.0.11 and below widgets dashboard may allow an authenticated attacker with at least read-only admin permission to perform operations on the dashboard of other administrators via crafted requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortig
her administrators via crafted requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-184
CVE ID: CVE-2024-46672 State: PUBLISHED Published: 2024-09-11T15:14:01.512Z Last Updated: 2025-05-04T09:31:34.936Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion wpa_supplicant 2.11 sends since 1efdba5fdc2c ("Handle PMKSA flush in the driver for SAE/OWE offload cases") SSID based PMKSA del commands. brcmfmac is not prepared and tries to dereference the NULL bssid and pmkid pointers in cfg80211_pmksa. PMKID_V3 operations support SSID based updates so copy the SSID. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/4291f94f8c
py the SSID. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/4291f94f8c6b01505132c22ee27b59ed27c3584f - https://git.kernel.org/stable/c/1f566eb912d192c83475a919331aea59619e1197 - https://git.kernel.org/stable/c/2ad4e1ada8eebafa2d75a4b75eeeca882de6ada1
CVE ID: CVE-2024-46673 State: PUBLISHED Published: 2024-09-13T05:29:09.649Z Last Updated: 2025-11-03T22:16:05.090Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure aac_probe_one() calls hardware-specific init functions through the aac_driver_ident::init pointer, all of which eventually call down to aac_init_adapter(). If aac_init_adapter() fails after allocating memory for aac_dev::queues, it frees the memory but does not clear that member. After the hardware-specific init function returns an error, aac_probe_one() goes down an error path that frees the memory pointed to by aac_dev:
fic init function returns an error, aac_probe_one() goes down an error path that frees the memory pointed to by aac_dev::queues, resulting.in a double-free. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/d237c7d06ffddcdb5d36948c527dc01284388218 - https://git.kernel.org/stable/c/564e1986b00c5f05d75342f8407f75f0a17b94df - https://git.kernel.org/stable/c/9e96dea7eff6f2bbcd0b42a098012fc66af9eb69 - https://git.kernel.org/stable/c/85449b28ff6a89c4513115e43ddcad949b5890c9 - https://git.kernel.org/stable/c/60962c3d8e18e5d8dfa16df788974dd7f35bd87a - https://git.kernel.org/stable/c/8a3995a3ffeca280a961b59f5c99843d81b15929 - htt
0962c3d8e18e5d8dfa16df788974dd7f35bd87a - https://git.kernel.org/stable/c/8a3995a3ffeca280a961b59f5c99843d81b15929 - https://git.kernel.org/stable/c/4b540ec7c0045c2d01c4e479f34bbc8f147afa4c - https://git.kernel.org/stable/c/919ddf8336f0b84c0453bac583808c9f165a85c2
CVE ID: CVE-2024-46674 State: PUBLISHED Published: 2024-09-13T05:29:10.381Z Last Updated: 2025-11-03T22:16:08.133Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: st: fix probed platform device ref count on probe error path The probe function never performs any paltform device allocation, thus error path "undo_platform_dev_alloc" is entirely bogus. It drops the reference count from the platform device being probed. If error path is triggered, this will lead to unbalanced device reference counts and premature release of device resources, thus possible use-after-free when releasing remaining devm-managed resources. Addi
remature release of device resources, thus possible use-after-free when releasing remaining devm-managed resources. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b0979a885b9d4df2a25b88e9d444ccaa5f9f495c - https://git.kernel.org/stable/c/f3498650df0805c75b4e1c94d07423c46cbf4ce1 - https://git.kernel.org/stable/c/6aee4c5635d81f4809c3b9f0c198a65adfbb2ada - https://git.kernel.org/stable/c/060f41243ad7f6f5249fa7290dda0c01f723d12d - https://git.kernel.org/stable/c/4c6735299540f3c82a5033d35be76a5c42e0fb18 - https://git.kernel.org/stable/c/e1e5e8ea2731150d5ba7c707f9e02fafebcfeb49 - https://git.kernel.org/stable/c/1de989668708
https://git.kernel.org/stable/c/e1e5e8ea2731150d5ba7c707f9e02fafebcfeb49 - https://git.kernel.org/stable/c/1de989668708ce5875efc9d669d227212aeb9a90 - https://git.kernel.org/stable/c/ddfcfeba891064b88bb844208b43bef2ef970f0c
CVE ID: CVE-2024-46675 State: PUBLISHED Published: 2024-09-13T05:29:10.987Z Last Updated: 2025-11-03T22:16:11.115Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buffer address access This commit addresses an issue where the USB core could access an invalid event buffer address during runtime suspend, potentially causing SMMU faults and other memory issues in Exynos platforms. The problem arises from the following sequence. 1. In dwc3_gadget_suspend, there is a chance of a timeout when moving the USB core to the halt state after clearing the run/stop bit by software. 2. In dwc3_co
hance of a timeout when moving the USB core to the halt state after clearing the run/stop bit by software. 2. In dwc3_core_exit, the event buffer is cleared regardless of the USB core's status, which may lead to an SMMU faults and other memory issues. if the USB core tries to access the event buffer address. To prevent this hardware quirk on Exynos platforms, this commit ensures that the event buffer address is not cleared by software when the USB core is active during runtime suspend by checking its status before clearing the buffer address. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/eca3f543f817da87c00d1a5697b47
A ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/eca3f543f817da87c00d1a5697b473efb548204f - https://git.kernel.org/stable/c/d2afc2bffec77316b90d530b07695e3f534df914 - https://git.kernel.org/stable/c/b72da4d89b97da71e056cc4d1429b2bc426a9c2f - https://git.kernel.org/stable/c/111277b881def3153335acfe0d1f43e6cd83ac93 - https://git.kernel.org/stable/c/2189fd13c577d7881f94affc09c950a795064c4b - https://git.kernel.org/stable/c/7bb11a75dd4d3612378b90e2a4aa49bdccea28ab - https://git.kernel.org/stable/c/e23f6ad8d110bf632f7471482e10b43dc174fb72 - https://git.kernel.org/stable/c/14e497183df28c006603cc67fd3797a537eef7b9