TQRG/raw-osv-data huggingface dataset:
Vulnerability: GSD-2022-1001349
Summary: mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
Published: 2022-04-24T21:06:38.941064Z

mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.20 by commit 2358aa84ef6dafcf544a557caaa6b91afb4a0bd2. For more details please see the references link.
Vulnerability: GSD-2021-1000274
Summary: media: aspeed: fix clock handling logic
Published: 2021-05-31T15:39:45.041586Z

media: aspeed: fix clock handling logic

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.4 by commit 75321dc8aebe3f30eff226028fe6da340fe0bf02, it was introduced in version v5.0 by commit d2b4387f3bdf016e266d23cf657465f557721488. For more details please see the references link.
Vulnerability: GSD-2021-1002249
Summary: ALSA: gus: fix null pointer dereference on pointer block
Published: 2021-11-29T02:35:20.877435Z

ALSA: gus: fix null pointer dereference on pointer block

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.218 by commit ab4c1ebc40f699f48346f634d7b72b9c5193f315. For more details please see the references link.
Vulnerability: GSD-2022-1001719
Summary: mips: ralink: fix a refcount leak in ill_acc_of_setup()
Published: 2022-04-24T21:37:33.737052Z

mips: ralink: fix a refcount leak in ill_acc_of_setup()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.34 by commit 5fb47ca3490813d3884d8ad0b2ce511aa3537551. For more details please see the references link.
Vulnerability: GSD-2021-1001873
Summary: mm, slub: fix potential memoryleak in kmem_cache_open()
Published: 2021-10-28T13:53:20.878579Z

mm, slub: fix potential memoryleak in kmem_cache_open()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.15 by commit 42b81946e3ac9ea0372ba16e05160dc11e02694f, it was introduced in version v4.8 by commit 210e7a43fa905bccafa9bb5966fba1d71f33eb8b. For more details please see the references link.
Vulnerability: GSD-2021-1000761
Summary: neighbour: allow NUD_NOARP entries to be forced GCed
Published: 2021-06-25T00:03:04.976655Z

neighbour: allow NUD_NOARP entries to be forced GCed

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.125 by commit d99029e6aab62aef0a0251588b2867e77e83b137, it was introduced in version v5.0 by commit 58956317c8de52009d1a38a721474c24aef74fe7. For more details please see the references link.
Vulnerability: GSD-2021-1000331
Summary: sctp: do asoc update earlier in sctp_sf_do_dupcook_a
Published: 2021-05-31T15:39:45.041586Z

sctp: do asoc update earlier in sctp_sf_do_dupcook_a

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.38 by commit f01988ecf3654f805282dce2d3bb9afe68d2691e, it was introduced in version v5.7 by commit 145cb2f7177d94bc54563ed26027e952ee0ae03c. For more details please see the references link.
Vulnerability: GSD-2022-1002420
Summary: video: fbdev: cirrusfb: check pixclock to avoid divide by zero
Published: 2022-04-24T22:45:15.616058Z

video: fbdev: cirrusfb: check pixclock to avoid divide by zero

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.276 by commit 1d3fb46439ad4e8f0c5739eb33d1875ac9e0f135. For more details please see the references link.
Vulnerability: GSD-2021-1001170
Summary: KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow
Published: 2021-08-03T01:32:06.921747Z

KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.13.6 by commit 35e114e6f84ab559eb35a5ac73590d23a43f22ba, it was introduced in version v3.10 by commit 8e591cb7204739efa8e15967ea334eb367039dde. For more details please see the references link.
Vulnerability: GSD-2022-1002070
Summary: mxser: fix xmit_buf leak in activate when LSR == 0xff
Published: 2022-04-24T22:07:44.131975Z

mxser: fix xmit_buf leak in activate when LSR == 0xff

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit 2cd05c38a27bee7fb42aa4d43174d68ac55dac0f, it was introduced in version v2.6.33 by commit 6769140d304731f0a3b177470a2adb4bacd9036b. For more details please see the references link.
Vulnerability: GSD-2021-1001520
Summary: xen/x86: fix PV trap handling on secondary processors
Published: 2021-10-19T16:21:56.336325Z

xen/x86: fix PV trap handling on secondary processors

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.285 by commit 2c3b07818dc05fb71928b4d87c1e958c911baa20, it was introduced in version v2.6.23 by commit f87e4cac4f4e940b328d3deb5b53e642e3881f43. For more details please see the references link.
Vulnerability: GSD-2022-1001575
Summary: f2fs: fix compressed file start atomic write may cause data corruption
Published: 2022-04-24T21:25:22.483584Z

f2fs: fix compressed file start atomic write may cause data corruption

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 89b1c23591e0a86e7b82e013ca6ca62ffebf8a1c, it was introduced in version v5.6 by commit 4c8ff7095bef64fc47e996a938f7d57f9e077da3. For more details please see the references link.
Vulnerability: GSD-2021-1002025
Summary: comedi: ni_usb6501: fix NULL-deref in command paths
Published: 2021-11-14T15:16:26.016884Z

comedi: ni_usb6501: fix NULL-deref in command paths

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.159 by commit b0156b7c9649d8f55a2ce3d3258509f1b2a181c3, it was introduced in version v3.18 by commit a03bb00e50ab4c07107da58a52a0bff7943f360c. For more details please see the references link.
Vulnerability: GSD-2021-1000018
Summary: ch_ktls: Fix kernel panic
Published: 2021-05-31T15:39:45.031586Z

ch_ktls: Fix kernel panic

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.11.16 by commit 8348665d4181c68b0ca1205b48e1753d78bc810f, it was introduced in version v5.7 by commit 5a4b9fe7fece62ecab6fb28fe92362f83b41c33e. For more details please see the references link.
Vulnerability: GSD-2022-1001125
Summary: scsi: qla2xxx: Fix warning message due to adisc being flushed
Published: 2022-04-24T20:47:36.536774Z

scsi: qla2xxx: Fix warning message due to adisc being flushed

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit d8fb8da69e194e0249b3cdb746ef09ce823ae26b. For more details please see the references link.
Vulnerability: GSD-2021-1002475
Summary: mlxsw: spectrum: Protect driver from buggy firmware
Published: 2021-12-19T19:39:01.465552Z

mlxsw: spectrum: Protect driver from buggy firmware

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.83 by commit 90d0736876c50ecde1a3275636a06b9ddb1cace9, it was introduced in version v5.4 by commit 28b1987ef5064dd5c43538ba1168ef7b801f3cad. For more details please see the references link.
Vulnerability: GSD-2021-1000448
Summary: sctp: do asoc update earlier in sctp_sf_do_dupcook_a
Published: 2021-05-31T15:39:45.041586Z

sctp: do asoc update earlier in sctp_sf_do_dupcook_a

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.191 by commit d624f2991b977821375fbd56c91b0c91d456a697, it was introduced in version v4.19.123 by commit db8bf823e70f239372c62f13e4eb6f08a1665e8c. For more details please see the references link.
Vulnerability: GSD-2022-1000364
Summary: misc: fastrpc: avoid double fput() on failed usercopy
Published: 2022-02-27T02:56:48.798573Z

misc: fastrpc: avoid double fput() on failed usercopy

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.101 by commit a5ce7ee5fcc07583159f54ab4af5164de00148f5, it was introduced in version v5.1 by commit 6cffd79504ce040f460831030d3069fa1c99bb71. For more details please see the references link.
Vulnerability: GSD-2022-1002359
Summary: ath9k_htc: fix uninit value bugs
Published: 2022-04-24T22:38:24.202404Z

ath9k_htc: fix uninit value bugs

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.238 by commit ee4222052a76559c20e821bc3519cefb58b6d3e9, it was introduced in version v2.6.35 by commit fb9987d0f748c983bb795a86f47522313f701a08. For more details please see the references link.
Vulnerability: GSD-2021-1001609
Summary: md: fix a lock order reversal in md_alloc
Published: 2021-10-19T16:28:05.662356Z

md: fix a lock order reversal in md_alloc

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.150 by commit 2b5befcd404522caae0df7e085b699122f5196a3, it was introduced in version v3.0 by commit b0140891a8cea36469f58d23859e599b1122bd37. For more details please see the references link.
Vulnerability: GSD-2022-1000734
Summary: RDMA/ib_srp: Fix a deadlock
Published: 2022-03-18T00:13:33.848774Z

RDMA/ib_srp: Fix a deadlock

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.12 by commit 98d056603ce55ceb90631b3927151c190dfb1b27, it was introduced in version v3.8 by commit ef6c49d87c3418c442a22e55e3ce2f91b163d69e. For more details please see the references link.
Vulnerability: GSD-2022-1001826
Summary: ax25: Fix NULL pointer dereferences in ax25 timers
Published: 2022-04-24T21:45:34.189961Z

ax25: Fix NULL pointer dereferences in ax25 timers

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.35 by commit 43c107021d9160f6a1610bafba6dadc0323ae548, it was introduced in version v5.15.35 by commit da6509fba636f7f8b2e902b1e4742fdbf1bf059f. For more details please see the references link.
Vulnerability: GSD-2021-1001259
Summary: net: ti: fix UAF in tlan_remove_one
Published: 2021-08-03T01:50:38.801711Z

net: ti: fix UAF in tlan_remove_one

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.53 by commit f2a062fcfe1d6f1b0a86fa76ae21c277d65f4405, it was introduced in version v3.10 by commit 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa. For more details please see the references link.
Vulnerability: GSD-2022-1000221
Summary: mm/kmemleak: avoid scanning potential huge holes
Published: 2022-02-18T21:57:08.935598Z

mm/kmemleak: avoid scanning potential huge holes

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.99 by commit 352715593e81b917ce1b321e794549815b850134. For more details please see the references link.
Vulnerability: GSD-2022-1000671
Summary: net: ieee802154: ca8210: Stop leaking skb's
Published: 2022-02-27T03:39:12.456550Z

net: ieee802154: ca8210: Stop leaking skb's

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.8 by commit 21feb6df3967541931242c427fe0958276af81cc, it was introduced in version v4.12 by commit ded845a781a578dfb0b5b2c138e5a067aa3b1242. For more details please see the references link.
Vulnerability: GSD-2022-1001963
Summary: veth: Ensure eth header is in skb's linear part
Published: 2022-04-24T21:58:55.197748Z

veth: Ensure eth header is in skb's linear part

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.112 by commit d67c900f1947d64ba8a64f693504bcaab8d9000c, it was introduced in version v2.6.24 by commit e314dbdc1c0dc6a548ecf0afce28ecfd538ff568. For more details please see the references link.
Vulnerability: GSD-2021-1002160
Summary: drm/msm/submit: fix overflow check on 64-bit architectures
Published: 2021-11-14T15:22:39.130189Z

drm/msm/submit: fix overflow check on 64-bit architectures

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15 by commit 95c58291ee709424557996891926a05a32c5b13a, it was introduced in version v5.11 by commit 20224d715a882210428ea62bba93f1bc4a0afe23. For more details please see the references link.
Vulnerability: GSD-2022-1001430
Summary: ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
Published: 2022-04-24T21:12:26.764026Z

ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit c32fe764191b8ae8b128588beb96e3718d9179d8, it was introduced in version v4.8 by commit 714fb87e8bc05ff78255afc0dca981e8c5242785. For more details please see the references link.
Vulnerability: GSD-2021-1002530
Summary: proc/vmcore: fix clearing user buffer by properly using clear_user()
Published: 2021-12-19T19:41:20.713871Z

proc/vmcore: fix clearing user buffer by properly using clear_user()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.6 by commit 7b3a34f08d11e7f05cd00b8e09adaa15192f0ad1, it was introduced in version v3.0 by commit 997c136f518c5debd63847e78e2a8694f56dcf90. For more details please see the references link.
Vulnerability: GSD-2022-1001060
Summary: x86/mce: Work around an erratum on fast string copy instructions
Published: 2022-04-24T20:42:56.780182Z

x86/mce: Work around an erratum on fast string copy instructions

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit ba37c73be3d5632f6fb9fa20b250ce45560ca85d. For more details please see the references link.
Vulnerability: GSD-2021-1000223
Summary: KEYS: trusted: Fix memory leak on object td
Published: 2021-05-31T15:39:45.041586Z

KEYS: trusted: Fix memory leak on object td

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.5 by commit 3e24fbd37e72e8a67b74991970fecc82d14f57af, it was introduced in version v5.12 by commit 5df16caada3fba3b21cb09b85cdedf99507f4ec1. For more details please see the references link.
Vulnerability: GSD-2021-1000389
Summary: crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
Published: 2021-05-31T15:39:45.041586Z

crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 1f50392650ae794a1aea41c213c6a3e1c824413c, it was introduced in version v4.7 by commit 25c6ffb249f612c56a48ce48a3887adf57b8f4bd. For more details please see the references link.
Vulnerability: GSD-2021-1001961
Summary: isdn: mISDN: Fix sleeping function called from invalid context
Published: 2021-11-14T15:13:33.660555Z

isdn: mISDN: Fix sleeping function called from invalid context

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.253 by commit 37e4f57b22cc5ebb3f80cf0f74fdeb487f082367. For more details please see the references link.
Vulnerability: GSD-2021-1000673
Summary: i2c: i801: Don't generate an interrupt on bus reset
Published: 2021-06-04T19:59:25.767841Z

i2c: i801: Don't generate an interrupt on bus reset

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.235 by commit dfa8929e117b0228a7765f5c3f5988a4a028f3c6, it was introduced in version v3.6 by commit 636752bcb5177a301d0266270661581de8624828. For more details please see the references link.
Vulnerability: GSD-2022-1002162
Summary: scsi: target: tcmu: Fix possible page UAF
Published: 2022-04-24T22:17:14.147304Z

scsi: target: tcmu: Fix possible page UAF

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.190 by commit fb7a5115422fbd6a4d505e8844f1ef5529f10489. For more details please see the references link.
Vulnerability: GSD-2022-1002498
Summary: power: supply: wm8350-power: Add missing free in free_charger_irq
Published: 2022-04-24T22:54:39.448552Z

power: supply: wm8350-power: Add missing free in free_charger_irq

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit a6a3ec1626846fba62609330673a2dd5007d6a53, it was introduced in version v2.6.29 by commit 14431aa0c5a443d13d24e6f865a8838f97dab973. For more details please see the references link.
Vulnerability: GSD-2021-1001432
Summary: mISDN: fix possible use-after-free in HFC_cleanup()
Published: 2021-08-03T02:39:04.240391Z

mISDN: fix possible use-after-free in HFC_cleanup()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.240 by commit 7867ddc5f3de7f289aee63233afc0df4b62834c5. For more details please see the references link.
Vulnerability: GSD-2021-1001598
Summary: mac80211: fix use-after-free in CCMP/GCMP RX
Published: 2021-10-19T16:27:37.539557Z

mac80211: fix use-after-free in CCMP/GCMP RX

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.151 by commit 50149e0866a82cef33e680ee68dc380a5bc75d32, it was introduced in version v5.4.124 by commit c8b3a6150dc8ac78d5fdd5fbdfc4806249ef8b2c. For more details please see the references link.
Vulnerability: GSD-2021-1001062
Summary: mptcp: Fix out of bounds when parsing TCP options
Published: 2021-06-30T00:37:05.538043Z

mptcp: Fix out of bounds when parsing TCP options

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.13 by commit 76e02b8905d0691e89e104a882f3bba7dd0f6037, it was introduced in version v5.6 by commit cec37a6e41aae7bf3df9a3da783380a4d9325fd8. For more details please see the references link.
Vulnerability: GSD-2021-1001577
Summary: i2c: acpi: fix resource leak in reconfiguration device addition
Published: 2021-10-19T16:24:34.125935Z

i2c: acpi: fix resource leak in reconfiguration device addition

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.153 by commit 60bacf259e8c2eb2324f3e13275200baaee9494b, it was introduced in version v4.8 by commit 525e6fabeae286848592363bda13bc34b59bb5ac. For more details please see the references link.
Vulnerability: GSD-2022-1002027
Summary: can: mcba_usb: properly check endpoint type
Published: 2022-04-24T22:04:08.880342Z

can: mcba_usb: properly check endpoint type

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.110 by commit ef0acc514123140157b19a9ff2e2de5d91d612bc, it was introduced in version v4.12 by commit 51f3baad7de943780ce0c17bd7975df567dd6e14. For more details please see the references link.
Vulnerability: GSD-2021-1001127
Summary: net: qed: Fix memcpy() overflow of qed_dcbx_params()
Published: 2021-07-08T01:58:15.727528Z

net: qed: Fix memcpy() overflow of qed_dcbx_params()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.47 by commit ca0e1fefbb534cc86296d9e5d116b0bf49084112. For more details please see the references link.
Vulnerability: GSD-2022-1002477
Summary: MIPS: fix fortify panic when copying asm exception handlers
Published: 2022-04-24T22:52:29.813999Z

MIPS: fix fortify panic when copying asm exception handlers

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.9.311 by commit fc283677599b5b13e5e2734abb8829adb8c02ce1. For more details please see the references link.
Vulnerability: GSD-2021-1000366
Summary: Bluetooth: avoid deadlock between hci_dev->lock and socket lock
Published: 2021-05-31T15:39:45.041586Z

Bluetooth: avoid deadlock between hci_dev->lock and socket lock

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.37 by commit 7cc0ba67883c6c8d3bddb283f56c167fc837a555, it was introduced in version v5.7 by commit eab2404ba798a8efda2a970f44071c3406d94e57. For more details please see the references link.
Vulnerability: GSD-2022-1000919
Summary: net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
Published: 2022-03-18T00:32:01.028936Z

net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.270 by commit b1ee6b9340a38bdb9e5c90f0eac5b22b122c3049, it was introduced in version v3.18 by commit 8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f. For more details please see the references link.
Vulnerability: GSD-2021-1001824
Summary: ocfs2: mount fails with buffer overflow in strlen
Published: 2021-10-28T13:50:48.096013Z

ocfs2: mount fails with buffer overflow in strlen

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.156 by commit d3a83576378b4c904f711598dde2c5e881c4295c. For more details please see the references link.
Vulnerability: GSD-2021-1000736
Summary: mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY
Published: 2021-06-25T00:00:05.765751Z

mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.236 by commit b5869ed8a39a4c6599f1d6c52e9ece785ceb8e16, it was introduced in version v4.11 by commit 8fb5debc5fcd450470cdd789c2d80ef95ebb8cf4. For more details please see the references link.
Vulnerability: GSD-2022-1000299
Summary: usb: f_fs: Fix use-after-free for epfile
Published: 2022-02-27T02:48:02.716077Z

usb: f_fs: Fix use-after-free for epfile

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.14.267 by commit 32048f4be071f9a6966744243f1786f45bb22dc2, it was introduced in version v4.9 by commit a9e6f83c2df199187a5248f824f31b6787ae23ae. For more details please see the references link.
Vulnerability: GSD-2022-1000763
Summary: iommu/amd: Fix I/O page table memory leak
Published: 2022-03-18T00:15:59.051183Z

iommu/amd: Fix I/O page table memory leak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.27 by commit 378e2fe1eb58d5c2ed55c8fe5e11f9db5033cdd6, it was introduced in version v5.12 by commit e42ba0633064ef23eb1c8c21edf96bac1541bd4b. For more details please see the references link.
Vulnerability: GSD-2022-1001871
Summary: ASoC: atmel: Fix error handling in snd_proto_probe
Published: 2022-04-24T21:50:18.586871Z

ASoC: atmel: Fix error handling in snd_proto_probe

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit f32ac9bf5e3f594ef9bfedb410aebc98cf784e69, it was introduced in version v4.20 by commit a45f8853a5f95e3760dfbd7ba09d3d597d247040. For more details please see the references link.
Vulnerability: GSD-2022-1000333
Summary: scsi: target: iscsi: Make sure the np under each tpg is unique
Published: 2022-02-27T02:52:34.702798Z

scsi: target: iscsi: Make sure the np under each tpg is unique

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.4.180 by commit c6a7077144ed291cfbf736875ad0fe89e6291f02. For more details please see the references link.
Vulnerability: GSD-2021-1002422
Summary: serial: core: fix transmit-buffer reset and memleak
Published: 2021-12-19T19:36:39.968395Z

serial: core: fix transmit-buffer reset and memleak

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v4.19.220 by commit 1179b168fa3f3a6aae3bd140000455a0e58457db, it was introduced in version v4.9 by commit 761ed4a94582ab291aa24dcbea4e01e8936488c8. For more details please see the references link.
Vulnerability: GSD-2022-1001488
Summary: lib/test: use after free in register_test_dev_kmod()
Published: 2022-04-24T21:16:21.635332Z

lib/test: use after free in register_test_dev_kmod()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 0d26d371130d0edd59e9db0cf8142d460953d402, it was introduced in version v4.13 by commit d9c6a72d6fa29d3a7999dda726577e5d1fccafa5. For more details please see the references link.
Vulnerability: GSD-2022-1001172
Summary: net: sparx5: switchdev: fix possible NULL pointer dereference
Published: 2022-04-24T20:50:23.801687Z

net: sparx5: switchdev: fix possible NULL pointer dereference

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.2 by commit e7e1fff76c4c57688dc7d53a3b6212182d5628d0, it was introduced in version v5.15 by commit 10615907e9b51c9ae92f3a6ecabd01c482f20f32. For more details please see the references link.
Vulnerability: GSD-2021-1002072
Summary: staging: rtl8712: fix use-after-free in rtl8712_dl_fw
Published: 2021-11-14T15:18:36.385463Z

staging: rtl8712: fix use-after-free in rtl8712_dl_fw

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.10.79 by commit c430094541a80575259a94ff879063ef01473506, it was introduced in version v3.3 by commit 8c213fa59199f9673d66970d6940fa093186642f. For more details please see the references link.
Vulnerability: GSD-2022-1001522
Summary: Revert "RDMA/core: Fix ib_qp_usecnt_dec() called when error"
Published: 2022-04-24T21:19:50.789836Z

Revert "RDMA/core: Fix ib_qp_usecnt_dec() called when error"

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit eed4e3e752c2f8dfa290d3cd872e2945d30b46e7, it was introduced in version v5.16.19 by commit c62452bd75f59b13019d3f4ce508a30949fb6375. For more details please see the references link.
Vulnerability: GSD-2021-1002588
Summary: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
Published: 2021-12-19T19:43:56.746002Z

nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.8 by commit fae9705d281091254d4a81fa2da9d22346097dca, it was introduced in version v3.12 by commit ac22ac466a659f1b2e02a2e2ee23fc5c42da2c95. For more details please see the references link.
Vulnerability: GSD-2022-1001037
Summary: staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances
Published: 2022-04-24T20:41:38.003805Z

staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.17.3 by commit 51e5e5c34c22c0bfec0808d8c33e0b2fcf4c7c89. For more details please see the references link.
Vulnerability: GSD-2021-1002567
Summary: octeontx2-af: Fix a memleak bug in rvu_mbox_init()
Published: 2021-12-19T19:43:07.242551Z

octeontx2-af: Fix a memleak bug in rvu_mbox_init()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.7 by commit 1c0ddef45b7e3dbe3ed073695d20faa572b7056a, it was introduced in version v5.12 by commit 98c5611163603d3d8012b1bf64ab48fd932cf734. For more details please see the references link.
Vulnerability: GSD-2022-1001467
Summary: f2fs: use spin_lock to avoid hang
Published: 2022-04-24T21:15:15.545652Z

f2fs: use spin_lock to avoid hang

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.19 by commit 738886004bd2885ac2db0bc63b4874aa471ca87e. For more details please see the references link.
Vulnerability: GSD-2021-1002137
Summary: net: batman-adv: fix error handling
Published: 2021-11-14T15:21:34.299524Z

net: batman-adv: fix error handling

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.14.16 by commit a8f7359259dd5923adc6129284fdad12fc5db347, it was introduced in version v2.6.38 by commit c6c8fea29769d998d94fcec9b9f14d4b52b349d3. For more details please see the references link.
Vulnerability: GSD-2022-1000626
Summary: powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06
Published: 2022-02-27T03:32:49.103480Z

powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.16.5 by commit aaccfeeee1630b155e8ff0d6c449d3de1ef86e73, it was introduced in version v4.8 by commit 156d0e290e969caba25f1851c52417c14d141b24. For more details please see the references link.
Vulnerability: GSD-2022-1001934
Summary: locking/lockdep: Avoid potential access of invalid memory in lock_class
Published: 2022-04-24T21:56:09.529634Z

locking/lockdep: Avoid potential access of invalid memory in lock_class

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.33 by commit 03f836fcb655417693aef350dcb830451ab7d388, it was introduced in version v5.1 by commit 8b39adbee805c539a461dbf208b125b096152b1c. For more details please see the references link.
Vulnerability: GSD-2022-1000276
Summary: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
Published: 2022-02-18T22:05:10.715844Z

rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.20 by commit def5e7070079b2a214b3b1a2fbec623e6fbfe34a, it was introduced in version v3.14 by commit ba7d49b1f0f8e5f24294a880ed576964059af5ef. For more details please see the references link.
Vulnerability: GSD-2021-1002834
Summary: platform/x86: intel_pmc_core: fix memleak on registration failure
Published: 2021-12-30T02:45:33.181463Z

platform/x86: intel_pmc_core: fix memleak on registration failure

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.15.12 by commit 9ca1324755f1f8629a370af5cc315b175331f5d1, it was introduced in version v5.9 by commit 938835aa903ae19ad62805134f79bbcf20fc3bea. For more details please see the references link.
Vulnerability: GSD-2021-1000809
Summary: net: caif: fix memory leak in cfusbl_device_notify
Published: 2021-06-25T00:08:45.779960Z

net: caif: fix memory leak in cfusbl_device_notify

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
This ID is fixed in Linux Kernel version v5.12.10 by commit dde8686985ec24d6b00487080a906609bd613ea1, it was introduced in version v3.3 by commit 7ad65bf68d705b445ef10b77ab50dab22be185ee. For more details please see the references link.
Vulnerability: GHSA-37pw-qw47-4jxm
Summary: Privilege escalation vulnerability in Apache Hadoop
Aliases: CVE-2018-8029
Severity: HIGH
CWE: CWE-285
Published: 2019-05-31T16:09:15Z

In Apache Hadoop versions 3.0.0-alpha1 to 3.1.0, 2.9.0 to 2.9.1, and 2.2.0 to 2.8.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user.
Vulnerability: GHSA-wfcc-pff6-rgc5
Summary: Exposure of Sensitive Information in org.eclipse.jetty:jetty-server
Aliases: CVE-2017-9735
Severity: HIGH
CWE: CWE-200, CWE-203
Published: 2018-10-19T16:15:46Z

Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords.
Vulnerability: GHSA-vqwg-4v6f-h6x5
Summary: Stored XSS vulnerability in Matrix Project Plugin
Aliases: CVE-2022-20615
Severity: MODERATE
CWE: CWE-79
Published: 2022-01-13T00:01:04Z

Jenkins Matrix Project Plugin 1.19 and earlier does not escape HTML metacharacters in node and label names, and label descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.
Vulnerability: GHSA-cf2j-vf36-c6w8
Summary: Communities and collections administrators can escalate their privilege up to system administrator
Aliases: CVE-2021-41189
Severity: HIGH
CWE: CWE-863
Published: 2021-11-01T19:18:16Z

### Impact
Any community or collection administrator can escalate their permission up to become system administrator.

This vulnerability only existed in 7.0 and does not impact 6.x or below.

### Patches
Fix is included in [7.1](https://github.com/DSpace/DSpace/releases/tag/dspace-7.1). Please upgrade to 7.1 at your earliest convenience.

### Workarounds
In 7.0, temporarily disable the ability for community or collection administrators to manage permissions or workflows settings, i.e. set the following properties in your local.cfg / dspace.cfg file
```
core.authorization.collection-admin.policies = false
core.authorization.community-admin.policies = false
core.authorization.community-admin.collection.workflows = false
```
Once upgraded to 7.1, these settings can be safely reverted to the default values of `true`.

### References
Discovered during investigation of https://github.com/DSpace/DSpace/issues/7928

### For more information
If you have any questions or comments about this advisory:
* Email us at security@dspace.org
Vulnerability: GHSA-gwp4-hfv6-p7hw
Summary: Deserialization of untrusted data in FasterXML jackson-databind
Aliases: CVE-2019-14439
Severity: HIGH
CWE: CWE-502
Published: 2019-08-01T19:18:06Z

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.
Vulnerability: GHSA-6rxj-58jh-436r
Summary: Moderate severity vulnerability that affects org.apache.tomcat.embed:tomcat-embed-core
Aliases: CVE-2018-1304
Severity: MODERATE
Published: 2018-10-17T16:31:17Z

The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition. This caused the constraint to be ignored. It was, therefore, possible for unauthorised users to gain access to web application resources that should have been protected. Only security constraints with a URL pattern of the empty string were affected.
Vulnerability: GHSA-c69w-jj56-834w
Summary: Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Apache Sling Commons Messaging Mail
Aliases: CVE-2021-44549
Severity: HIGH
CWE: CWE-295, CWE-297
Published: 2021-12-16T14:12:49Z

Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of "man in the middle" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these additional checks are disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail 1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support for enabling server identity checks and these checks are enabled by default. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429
Vulnerability: GHSA-7x9j-7223-rg5m
Summary: High severity vulnerability that affects commons-fileupload:commons-fileupload
Aliases: CVE-2016-1000031
Severity: CRITICAL
CWE: CWE-284
Published: 2018-12-21T17:51:51Z

Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
Vulnerability: GHSA-g5vf-v6wf-7w2r
Summary: Ciphertext Malleability Issue in Tink Java
Aliases: CVE-2020-8929
Severity: LOW
CWE: CWE-327, CWE-176
Published: 2020-10-16T00:51:24Z

### Impact
Tink's Java version before 1.5 under some circumstances allowed attackers to change the key ID part of the ciphertext, resulting in the attacker creating a second ciphertext that will decrypt to the same plaintext. This can be a problem in particular in the case of encrypting with a deterministic AEAD with a single key, and relying on the fact that there is only a single valid ciphertext per plaintext.

No loss of confidentiality or loss of plaintext integrity occurs due to this problem, only ciphertext integrity is compromised.

### Patches
The issue was fixed in this [pull request](https://github.com/google/tink/commit/93d839a5865b9d950dffdc9d0bc99b71280a8899).

### Workarounds
The only workaround is to backport the fixing [pull request](https://github.com/google/tink/commit/93d839a5865b9d950dffdc9d0bc99b71280a8899).

### Details
Tink uses the first five bytes of a ciphertext for a version byte and a four byte key ID. Since each key has a well defined prefix, this extends non-malleability properties (but technically not indistinguishability). However, in the Java version this prefix lookup used a hash map indexed by unicode strings instead of the byte array, which means that invalid Unicode characters would be [replaced by U+FFFD](https://en.wikipedia.org/wiki/UTF-8#Invalid_sequences_and_error_handling) by the [Java API's default behavior](https://docs.oracle.com/javase/7/docs/api/java/lang/String.html#String(byte[],%20java.nio.charset.Charset)). This means several different values for the five bytes would result in the same hash table key, which allows an attacker to exchange one invalid byte sequence for another, creating a mutated ciphertext that still decrypts (to the same plaintext).

### Acknowledgements
We'd like to thank Peter Esbensen for finding this issue and raising it internally.

### For more information
If you have any questions or comments about this advisory:
* Open an issue in [Tink](https://github.com/google/tink/issues)
Vulnerability: GHSA-p639-xxv5-j383
Summary: Moderate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
Aliases: CVE-2018-1315
Severity: LOW
CWE: CWE-732
Published: 2018-11-21T22:24:08Z

In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement is run using HPL/SQL extension to Hive, a compromised/malicious FTP server can cause the file to be written to an arbitrary location on the cluster where the command is run from. This is because FTP client code in HPL/SQL does not verify the destination location of the downloaded file. This does not affect hive cli user and hiveserver2 user as hplsql is a separate command line script and needs to be invoked differently.
Vulnerability: GHSA-5h9j-q6j2-253f
Summary: Unescaped exception messages in error responses in Jetty
Aliases: CVE-2019-17632
Severity: MODERATE
CWE: CWE-79
Published: 2019-12-02T18:13:28Z

In Eclipse Jetty versions 9.4.21.v20190926, 9.4.22.v20191022, and 9.4.23.v20191118, the generation of default unhandled Error response content (in text/html and text/json Content-Type) does not escape Exception messages in stacktraces included in error output.
Vulnerability: GHSA-vmqm-g3vh-847m
Summary: Denial of service in Apache Xerces2
Aliases: CVE-2012-0881
Severity: HIGH
CWE: CWE-400
Published: 2020-06-15T18:51:38Z

Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an XML service, which triggers hash table collisions.
Vulnerability: GHSA-jxgm-9f58-w4xp
Summary: Improper Input Validation in Apache Archiva
Aliases: CVE-2019-0214
Severity: MODERATE
CWE: CWE-20
Published: 2019-05-14T04:00:21Z

In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.
Vulnerability: GHSA-6h2c-g688-q9qr
Summary: Path traversal in Jenkins Phoenix AutoTest Plugin
Aliases: CVE-2022-28156
Severity: MODERATE
CWE: CWE-22
Published: 2022-03-30T00:00:24Z

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to copy arbitrary files and directories from the Jenkins controller to the agent workspace.
Vulnerability: GHSA-qwfw-gxx2-mmv2
Summary: Command Injection in Kylin
Aliases: CVE-2020-13925
Severity: CRITICAL
CWE: CWE-78
Published: 2020-07-27T22:51:37Z

Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to execute OS command remotely. Users of all previous versions after 2.3 should upgrade to 3.1.0.
Vulnerability: GHSA-84wg-rgp8-2hg4
Summary: Command Injection in Apache James
Aliases: CVE-2021-38542
Severity: MODERATE
CWE: CWE-77
Published: 2022-01-08T00:40:33Z

Apache James prior to release 3.6.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command. This can result in Man-in -the-middle command injection attacks, leading potentially to leakage of sensible information.
Vulnerability: GHSA-w3f4-3q6j-rh82
Summary: Deserialization of Untrusted Data in jackson-databind
Aliases: CVE-2018-5968
Severity: HIGH
CWE: CWE-502, CWE-184
Published: 2020-06-30T20:40:50Z

FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist.