Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-57774 State: PUBLISHED Published: 2025-01-16T00:00:00 Last Updated: 2025-01-21T16:42:54.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the getBusinessUploadListPage?busid interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/r1bbit/JFinalOA/issues/IBHUQQ
CVE ID: CVE-2024-57775 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-01-31T20:29:31.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component getWorkFlowHis?insid. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/r1bbit/JFinalOA/issues/IBHURT
CVE ID: CVE-2024-57776 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-02-03T19:18:52.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the /apply/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/r1bbit/JFinalOA/issues/IBHUS8
CVE ID: CVE-2024-57777 State: PUBLISHED Published: 2025-02-11T00:00:00.000Z Last Updated: 2025-02-18T14:03:50.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Ianproxy v.0.1 and before allows a remote attacker to obtain sensitive information Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ffay/lanproxy/issues/192
CVE ID: CVE-2024-57778 State: PUBLISHED Published: 2025-02-14T00:00:00.000Z Last Updated: 2025-02-18T14:10:36.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Orbe ONetView Roeador Onet-1200 Orbe 1680210096 allows a remote attacker to escalate privileges via the servers response from status code 500 to status code 200. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/KUK3N4N/CVE-2024-57778
CVE ID: CVE-2024-57782 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-03-17T18:46:17.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Docker-proxy v18.09.0 allows attackers to cause a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/tzzhang123456/test123/issues/2
CVE ID: CVE-2024-57783 State: PUBLISHED Published: 2025-06-02T00:00:00.000Z Last Updated: 2025-06-02T14:13:30.990Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: alexpinel Products: Dot Problem Types: CWE-79 Description: The desktop application in Dot through 0.9.3 allows XSS and resultant command execution because user input and LLM output are appended to the DOM with innerHTML (in render.js), and because the Electron window can access Node.js APIs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/alexpinel/Dot/issues/28 - https://github.com/EDMPL/Vulnerability-Research/tree/main/CVE-2024-57783 - https://dotapp.uk
CVE ID: CVE-2024-57784 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-02-03T20:39:54.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component /php/script_uploads.php of Zenitel AlphaWeb XE v11.2.3.10 allows attackers to execute a directory traversal. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/s4fv4n/8cc4e4cb6fd028e803898837b73aa342
CVE ID: CVE-2024-57785 State: PUBLISHED Published: 2025-01-16T00:00:00.000Z Last Updated: 2025-02-04T14:56:33.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via the component amc_uploads.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/s4fv4n/56c326450dcb3ab808b5ce8242a11e30
CVE ID: CVE-2024-57790 State: PUBLISHED Published: 2025-02-14T00:00:00.000Z Last Updated: 2025-03-17T18:41:19.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: IXON B.V. IXrouter IX2400 (Industrial Edge Gateway) v3.0 was discovered to contain hardcoded root credentials stored in the non-volatile flash memory. This vulnerability allows physically proximate attackers to gain root access via UART or SSH. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rick-cen/vulnerability-research/tree/main/CVE-2024-57790
CVE ID: CVE-2024-57791 State: PUBLISHED Published: 2025-01-11T12:35:48.905Z Last Updated: 2025-11-03T20:54:28.243Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sock_recvmsg when draining clc data When receiving clc msg, the field length in smc_clc_msg_hdr indicates the length of msg should be received from network and the value should not be fully trusted as it is from the network. Once the value of length exceeds the value of buflen in function smc_clc_wait_msg it may run into deadloop when trying to drain the remaining data exceeding buflen. This patch checks the return value of sock_recvmsg w
deadloop when trying to drain the remaining data exceeding buflen. This patch checks the return value of sock_recvmsg when draining data in case of deadloop in draining. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/82c7ad9ca09975aae737abffd66d1ad98874c13d - https://git.kernel.org/stable/c/6b80924af6216277892d5f091f5bfc7d1265fa28 - https://git.kernel.org/stable/c/d7d1f986ebb284b1db8dafca7d1bdb6dd2445cf6 - https://git.kernel.org/stable/c/7a6927814b4256d603e202ae7c5e38db3b338896 - https://git.kernel.org/stable/c/df3dfe1a93c6298d8c09a18e4fba19ef5b17763b - https://git.kernel.org/stable/c/c5b8ee5022a19464783058dc6042e8eefa34e8cd
CVE ID: CVE-2024-57792 State: PUBLISHED Published: 2025-01-11T12:39:46.397Z Last Updated: 2025-11-03T20:54:31.384Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: power: supply: gpio-charger: Fix set charge current limits Fix set charge current limits for devices which allow to set the lowest charge current limit to be greater zero. If requested charge current limit is below lowest limit, the index equals current_limit_map_size which leads to accessing memory beyond allocated memory. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/b29c7783ac1fe36d639c089cf471ac7a46df05f0 - https:/
CVE Program Container: References: - https://git.kernel.org/stable/c/b29c7783ac1fe36d639c089cf471ac7a46df05f0 - https://git.kernel.org/stable/c/c3703d9340ca2820e1ac63256f4b423ea8559831 - https://git.kernel.org/stable/c/6abbbd8286b6f944eecf3c74444c138590135211 - https://git.kernel.org/stable/c/13eb3cae1d8e23cce96c095abe34da8028c09ac5 - https://git.kernel.org/stable/c/f6279a98db132da0cfff18712a1b06478c32007f - https://git.kernel.org/stable/c/afc6e39e824ad0e44b2af50a97885caec8d213d1
CVE ID: CVE-2024-57793 State: PUBLISHED Published: 2025-01-11T12:39:47.347Z Last Updated: 2025-05-04T10:04:55.170Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors In CoCo VMs it is possible for the untrusted host to cause set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues. Leak the decrypted memory when set_memory_decrypted() fails, and don't need to p
lead to functional or security issues. Leak the decrypted memory when set_memory_decrypted() fails, and don't need to print an error since set_memory_decrypted() will call WARN_ONCE(). References: - https://git.kernel.org/stable/c/1429ae7b7d4759a1e362456b8911c701bae655b4 - https://git.kernel.org/stable/c/27834971f616c5e154423c578fa95e0444444ce1
CVE ID: CVE-2024-57795 State: PUBLISHED Published: 2025-01-15T13:10:23.880Z Last Updated: 2025-05-04T10:04:57.043Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Remove the direct link to net_device The similar patch in siw is in the link: https://git.kernel.org/rdma/rdma/c/16b87037b48889 This problem also occurred in RXE. The following analyze this problem. In the following Call Traces: " BUG: KASAN: slab-use-after-free in dev_get_flags+0x188/0x1d0 net/core/dev.c:8782 Read of size 4 at addr ffff8880554640b0 by task kworker/1:4/5295 CPU: 1 UID: 0 PID: 5295 Comm: kworker/1:4 Not tainted 6.12.0-rc3-syzkaller-00399-g9197
554640b0 by task kworker/1:4/5295 CPU: 1 UID: 0 PID: 5295 Comm: kworker/1:4 Not tainted 6.12.0-rc3-syzkaller-00399-g9197b73fd7bb #0 Hardware name: Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: infiniband ib_cache_event_task Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 dev_get_flags+0x188/0x1d0 net/core/dev.c:8782 rxe_query_port+0x12d/0x260 drivers/infiniband/sw/rxe/rxe_verbs.c:60 __ib_query_port drivers/infiniband/core/device.c:2111 [inline] ib_que
12d/0x260 drivers/infiniband/sw/rxe/rxe_verbs.c:60 __ib_query_port drivers/infiniband/core/device.c:2111 [inline] ib_query_port+0x168/0x7d0 drivers/infiniband/core/device.c:2143 ib_cache_update+0x1a9/0xb80 drivers/infiniband/core/cache.c:1494 ib_cache_event_task+0xf3/0x1e0 drivers/infiniband/core/cache.c:1568 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa65/0x1850 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f2/0x390 kernel/kthread.c:389 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK> " 1). In the link [1], " infiniband syz2: set down " This means tha
_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK> " 1). In the link [1], " infiniband syz2: set down " This means that on 839.350575, the event ib_cache_event_task was sent andi queued in ib_wq. 2). In the link [1], " team0 (unregistering): Port device team_slave_0 removed " It indicates that before 843.251853, the net device should be freed. 3). In the link [1], " BUG: KASAN: slab-use-after-free in dev_get_flags+0x188/0x1d0 " This means that on 850.559070, this slab-use-after-free problem occurred. In all, on 839.350575, the event ib_cache_event_task was sent and queued in ib_wq, before 843.251853, the net device veth was freed. on 850.559070, this event was executed, and the mentioned f
in ib_wq, before 843.251853, the net device veth was freed. on 850.559070, this event was executed, and the mentioned freed net device was called. Thus, the above call trace occurred. [1] https://syzkaller.appspot.com/x/log.txt?x=12e7025f980000 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/9f6f54e6a6863131442b40e14d1792b090c7ce21 - https://git.kernel.org/stable/c/2ac5415022d16d63d912a39a06f32f1f51140261
CVE ID: CVE-2024-57798 State: PUBLISHED Published: 2025-01-11T12:39:48.212Z Last Updated: 2025-11-03T20:54:32.760Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() While receiving an MST up request message from one thread in drm_dp_mst_handle_up_req(), the MST topology could be removed from another thread via drm_dp_mst_topology_mgr_set_mst(false), freeing mst_primary and setting drm_dp_mst_topology_mgr::mst_primary to NULL. This could lead to a NULL deref/use-after-free of mst_primary in drm_dp_mst_handle_up_req(). Avoid the above by holding a referenc
lead to a NULL deref/use-after-free of mst_primary in drm_dp_mst_handle_up_req(). Avoid the above by holding a reference for mst_primary in drm_dp_mst_handle_up_req() while it's used. v2: Fix kfreeing the request if getting an mst_primary reference fails. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/f61b2e5e7821f868d6afc22382a66a30ee780ba0 - https://git.kernel.org/stable/c/9735d40f5fde9970aa46e828ecc85c32571d58a2 - https://git.kernel.org/stable/c/ce55818b2d3a999f886af91679589e4644ff1dc8 - https://git.kernel.org/stable/c/e54b00086f7473dbda1a7d6fc47720ced157c6a8
CVE ID: CVE-2024-57799 State: PUBLISHED Published: 2025-01-11T12:39:48.936Z Last Updated: 2025-10-01T19:57:20.542Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM In some cases, rk_hdptx_phy_runtime_resume() may be invoked before platform_set_drvdata() is executed in ->probe(), leading to a NULL pointer dereference when using the return of dev_get_drvdata(). Ensure platform_set_drvdata() is called before devm_pm_runtime_enable(). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/7061849a4a1752a06944a819dd1f7bfd58df
alyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/7061849a4a1752a06944a819dd1f7bfd58df7383 - https://git.kernel.org/stable/c/9d23e48654620fdccfcc74cc2cef04eaf7353d07
CVE ID: CVE-2024-57800 State: PUBLISHED Published: 2025-01-11T12:39:49.702Z Last Updated: 2025-05-04T10:05:01.635Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ALSA: memalloc: prefer dma_mapping_error() over explicit address checking With CONFIG_DMA_API_DEBUG enabled, the following warning is observed: DMA-API: snd_hda_intel 0000:03:00.1: device driver failed to check map error[device address=0x00000000ffff0000] [size=20480 bytes] [mapped as single] WARNING: CPU: 28 PID: 2255 at kernel/dma/debug.c:1036 check_unmap+0x1408/0x2430 CPU: 28 UID: 42 PID: 2255 Comm: wireplumber Tainted: G W L 6.12.0-10-133577cad6bf48e5a7848c43381240
_unmap+0x1408/0x2430 CPU: 28 UID: 42 PID: 2255 Comm: wireplumber Tainted: G W L 6.12.0-10-133577cad6bf48e5a7848c4338124081393bfe8a+ #759 debug_dma_unmap_page+0xe9/0xf0 snd_dma_wc_free+0x85/0x130 [snd_pcm] snd_pcm_lib_free_pages+0x1e3/0x440 [snd_pcm] snd_pcm_common_ioctl+0x1c9a/0x2960 [snd_pcm] snd_pcm_ioctl+0x6a/0xc0 [snd_pcm] ... Check for returned DMA addresses using specialized dma_mapping_error() helper which is generally recommended for this purpose by Documentation/core-api/dma-api.rst. References: - https://git.kernel.org/stable/c/c180c3f42d340e8dcb9094bb8ea7d477d37081a8 - https://git.kernel.org/stable/c/fa0308134d26dbbeb209a1581eea46df663866b6
CVE ID: CVE-2024-57801 State: PUBLISHED Published: 2025-01-15T13:10:24.619Z Last Updated: 2025-05-04T10:05:08.464Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep without loaded flag During driver unload, unregister_netdev is called after unloading vport rep. So, the mlx5e_rep_priv is already freed while trying to get rpriv->netdev, or walk rpriv->tc_ht, which results in use-after-free. So add the checking to make sure access the data of vport rep which is still loaded. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/3e45dd1622a2c1a83
aded. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/3e45dd1622a2c1a83c11bf42fdd8c1810123d6c0 - https://git.kernel.org/stable/c/47c78d3fc26e38ab805613a0f592dc8a820c7c64 - https://git.kernel.org/stable/c/5a03b368562a7ff5f5f1f63b5adf8309cbdbd5be
CVE ID: CVE-2024-57802 State: PUBLISHED Published: 2025-01-15T13:10:25.685Z Last Updated: 2025-11-03T20:54:35.577Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: netrom: check buffer length before accessing it Syzkaller reports an uninit value read from ax25cmp when sending raw message through ieee802154 implementation. ===================================================== BUG: KMSAN: uninit-value in ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119 ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119 nr_dev_get+0x20e/0x450 net/netrom/nr_route.c:601 nr_route_frame+0x1a2/0xfc0 net/netrom/nr_route.c:774 nr_xmit+0x5a/0x1c0 net/netrom/nr_dev.c:
0 net/netrom/nr_route.c:601 nr_route_frame+0x1a2/0xfc0 net/netrom/nr_route.c:774 nr_xmit+0x5a/0x1c0 net/netrom/nr_dev.c:144 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3548 [inline] dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564 __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349 dev_queue_xmit include/linux/netdevice.h:3134 [inline] raw_sendmsg+0x654/0xc10 net/ieee802154/socket.c:299 ieee802154_sock_sendmsg+0x91/0xc0 net/ieee802154/socket.c:96 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584 ___sys_sendmsg+0x
.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendmsg net/socket.c:2676 [inline] __se_sys_sendmsg net/socket.c:2674 [inline] __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b Uninit was created at: slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768 slab_alloc_node mm/slub.c:3478 [inline] kmem_cache_alloc_node+0x5e9/0xb10 mm/slub.c:3523 kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:560 __alloc_skb+0x318/0x74
mem_cache_alloc_node+0x5e9/0xb10 mm/slub.c:3523 kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:560 __alloc_skb+0x318/0x740 net/core/skbuff.c:651 alloc_skb include/linux/skbuff.h:1286 [inline] alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6334 sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2780 sock_alloc_send_skb include/net/sock.h:1884 [inline] raw_sendmsg+0x36d/0xc10 net/ieee802154/socket.c:282 ieee802154_sock_sendmsg+0x91/0xc0 net/ieee802154/socket.c:96 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendmsg
net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendmsg net/socket.c:2676 [inline] __se_sys_sendmsg net/socket.c:2674 [inline] __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b CPU: 0 PID: 5037 Comm: syz-executor166 Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 ===================================================== This issue occurs because the skb buffer is too small, and it's actual allocat
========================================= This issue occurs because the skb buffer is too small, and it's actual allocation is aligned. This hides an actual issue, which is that nr_route_frame does not validate the buffer size before using it. Fix this issue by checking skb->len before accessing any fields in skb->data. Found by Linux Verification Center (linuxtesting.org) with Syzkaller. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/64e9f54a14f2887be8634fb85cd2f13bec18a184 - https://git.kernel.org/stable/c/cf6befa7c569787f53440274bbed1405fc07738d - https://git.kernel.org/stable/c/769e36c2119a51070faf58819c58274f57a0
stable/c/cf6befa7c569787f53440274bbed1405fc07738d - https://git.kernel.org/stable/c/769e36c2119a51070faf58819c58274f57a088db - https://git.kernel.org/stable/c/78a110332ae268d0b005247c3b9a7d703b875c49 - https://git.kernel.org/stable/c/f647d72245aadce30618f4c8fd3803904418dbec - https://git.kernel.org/stable/c/3ba7f80d98d4965349cfcd258dd78418496c1625 - https://git.kernel.org/stable/c/a4fd163aed2edd967a244499754dec991d8b4c7d
CVE ID: CVE-2024-57804 State: PUBLISHED Published: 2025-01-11T12:39:50.958Z Last Updated: 2025-05-04T10:05:11.280Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs The driver, through the SAS transport, exposes a sysfs interface to enable/disable PHYs in a controller/expander setup. When multiple PHYs are disabled and enabled in rapid succession, the persistent and current config pages related to SAS IO unit/SAS Expander pages could get corrupted. Use separate memory for each config request. References: - https://git.kernel.org/stable/c/869fdc6f0606060301aef648
ted. Use separate memory for each config request. References: - https://git.kernel.org/stable/c/869fdc6f0606060301aef648231e186c7c542f5a - https://git.kernel.org/stable/c/711201a8b8334a397440ac0b859df0054e174bc9
CVE ID: CVE-2024-57805 State: PUBLISHED Published: 2025-01-11T12:39:51.798Z Last Updated: 2025-05-04T13:01:25.275Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP The linkDMA should not be released on stop trigger since a stream re-start might happen without closing of the stream. This leaves a short time for other streams to 'steal' the linkDMA since it has been released. This issue is not easy to reproduce under normal conditions as usually after stop the stream is closed, or the same stream is restarted, but if another stream got in between the stop and start, lik
stop the stream is closed, or the same stream is restarted, but if another stream got in between the stop and start, like this: aplay -Dhw:0,3 -c2 -r48000 -fS32_LE /dev/zero -d 120 CTRL+z aplay -Dhw:0,0 -c2 -r48000 -fS32_LE /dev/zero -d 120 then the link DMA channels will be mixed up, resulting firmware error or crash. References: - https://git.kernel.org/stable/c/909ecf15cb70f78cdb5c930f58df01db039a0ff8 - https://git.kernel.org/stable/c/e8d0ba147d901022bcb69da8d8fd817f84e9f3ca
CVE ID: CVE-2024-57806 State: PUBLISHED Published: 2025-01-11T12:39:52.628Z Last Updated: 2025-05-04T10:05:14.076Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction atomicity bug when enabling simple quotas Set squota incompat bit before committing the transaction that enables the feature. With the config CONFIG_BTRFS_ASSERT enabled, an assertion failure occurs regarding the simple quota feature. [5.596534] assertion failed: btrfs_fs_incompat(fs_info, SIMPLE_QUOTA), in fs/btrfs/qgroup.c:365 [5.597098] ------------[ cut here ]------------ [5.597371] kernel BUG at fs/btrfs/qgroup.c:365! [5.597946] CPU: 1 UID:
[5.597098] ------------[ cut here ]------------ [5.597371] kernel BUG at fs/btrfs/qgroup.c:365! [5.597946] CPU: 1 UID: 0 PID: 268 Comm: mount Not tainted 6.13.0-rc2-00031-gf92f4749861b #146 [5.598450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [5.599008] RIP: 0010:btrfs_read_qgroup_config+0x74d/0x7a0 [5.604303] <TASK> [5.605230] ? btrfs_read_qgroup_config+0x74d/0x7a0 [5.605538] ? exc_invalid_op+0x56/0x70 [5.605775] ? btrfs_read_qgroup_config+0x74d/0x7a0 [5.606066] ? asm_exc_invalid_op+0x1f/0x30 [5.606441] ? btrfs_read_qgroup_config+0x74d/0x7a0 [5.606741] ? btrfs_read_qgroup_config+0x74d/0x7a0 [5.607038] ? try_to_wake_up+0x317/0x760 [5.60728