deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-26617
Published: 2024-03-11
Description: In the Linux kernel, the following vulnerability has been resolved:

fs/proc/task_mmu: move mmu notification mechanism inside mm lock

Move mmu notification mechanism inside mm lock to prevent race condition
in other components which depend on it.  The notifier will invalidate
memory range.  Depending upon the number of iterations, different memory
ranges would be invalidated.

The following warning would be removed by this patch:
WARNING: CPU: 0 PID: 5067 at arch/x86/kvm/../../../virt/kvm/kvm_main.c:734 kvm_mmu_notifier_change_pte+0x860/0x960 arch/x86/kvm/../../../virt/kvm/kvm_main.c:734

There is no behavioural and performance change with this patch when
there is no component registered with the mmu notifier.

[akpm@linux-foundation.org: narrow the scope of `range', per Sean]
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://git.kernel.org/stable/c/05509adf297924f51e1493aa86f9fcde1433ed80; https://git.kernel.org/stable/c/4cccb6221cae6d020270606b9e52b1678fc8b71a; https://git.kernel.org/stable/c/05509adf297924f51e1493aa86f9fcde1433ed80
CVE: CVE-2024-26618
Published: 2024-03-11
Description: In the Linux kernel, the following vulnerability has been resolved:

arm64/sme: Always exit sme_alloc() early with existing storage

When sme_alloc() is called with existing storage and we are not flushing we
will always allocate new storage, both leaking the existing storage and
corrupting the state. Fix this by separating the checks for flushing and
for existing storage as we do for SVE.

Callers that reallocate (eg, due to changing the vector length) should
call sme_free() themselves.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://git.kernel.org/stable/c/569156e4fa347237f8fa2a7e935d860109c55ac4; https://git.kernel.org/stable/c/814af6b4e6000e574e74d92197190edf07cc3680; https://git.kernel.org/stable/c/dc7eb8755797ed41a0d1b5c0c39df3c8f401b3d9
CVE: CVE-2024-26619
Published: 2024-03-11
Description: In the Linux kernel, the following vulnerability has been resolved:

riscv: Fix module loading free order

Reverse order of kfree calls to resolve use-after-free error.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/2fa79badf4bfeffda6b5032cf62b828486ec9a99; https://git.kernel.org/stable/c/78996eee79ebdfe8b6f0e54cb6dcc792d5129291; https://git.kernel.org/stable/c/2fa79badf4bfeffda6b5032cf62b828486ec9a99
CVE: CVE-2024-26620
Published: 2024-03-11
Description: In the Linux kernel, the following vulnerability has been resolved:

s390/vfio-ap: always filter entire AP matrix

The vfio_ap_mdev_filter_matrix function is called whenever a new adapter or
domain is assigned to the mdev. The purpose of the function is to update
the guest's AP configuration by filtering the matrix of adapters and
domains assigned to the mdev. When an adapter or domain is assigned, only
the APQNs associated with the APID of the new adapter or APQI of the new
domain are inspected. If an APQN does not reference a queue device bound to
the vfio_ap device driver, then it's APID will be filtered from the mdev's
matrix when updating the guest's AP configuration.

Inspecting only the APID of the new adapter or APQI of the new domain will
result in passing AP queues through to a guest that are not bound to the
vfio_ap device driver under certain circumstances. Consider the following:

guest's AP configuration (all also assigned to the mdev's matrix):
14.0004
14.0005
14.0006
16.0004
16.0005
16.0006

unassign domain 4
unbind queue 16.0005
assign domain 4

When domain 4 is re-assigned, since only domain 4 will be inspected, the
APQNs that will be examined will be:
14.0004
16.0004

Since both of those APQNs reference queue devices that are bound to the
vfio_ap device driver, nothing will get filtered from the mdev's matrix
when updating the guest's AP configuration. Consequently, queue 16.0005
will get passed through despite not being bound to the driver. This
violates the linux device model requirement that a guest shall only be
given access to devices bound to the device driver facilitating their
pass-through.

To resolve this problem, every adapter and domain assigned to the mdev will
be inspected when filtering the mdev's matrix.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://git.kernel.org/stable/c/850fb7fa8c684a4c6bf0e4b6978f4ddcc5d43d11; https://git.kernel.org/stable/c/c69d[PII_REDACTED]78533fb3eb784fc823b921349a; https://git.kernel.org/stable/c/cdd134d[PII_REDACTED]6685e6c7bc4755450b3880e
CVE: CVE-2024-22005
Published: 2024-03-11
Description: there is a possible Authentication Bypass due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-22006
Published: 2024-03-11
Description: OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-22007
Published: 2024-03-11
Description: In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-22008
Published: 2024-03-11
Description: In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-22009
Published: 2024-03-11
Description: In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-22010
Published: 2024-03-11
Description: In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-22011
Published: 2024-03-11
Description: In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-25984
Published: 2024-03-11
Description: In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-120
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-25985
Published: 2024-03-11
Description: In bigo_unlocked_ioctl of bigo.c, there is a possible UAF due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-25986
Published: 2024-03-11
Description: In ppmp_unprotect_buf of drm_fw.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-25987
Published: 2024-03-11
Description: In pt_sysctl_command of pt.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-25988
Published: 2024-03-11
Description: In SAEMM_DiscloseGuti of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-25989
Published: 2024-03-11
Description: In gpu_slc_liveness_update of pixel_gpu_slc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-25990
Published: 2024-03-11
Description: In pktproc_perftest_gen_rx_packet_sktbuf_mode of link_rx_pktproc.c, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-269
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-25991
Published: 2024-03-11
Description: In acpm_tmu_ipc_handler of tmu_plugin.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-25992
Published: 2024-03-11
Description: In tmu_tz_control of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-25993
Published: 2024-03-11
Description: In tmu_reset_tmu_trip_counter of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27204
Published: 2024-03-11
Description: In tmu_set_gov_active of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27205
Published: 2024-03-11
Description: there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27206
Published: 2024-03-11
Description: there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27207
Published: 2024-03-11
Description: Exported broadcast receivers allowing malicious apps to bypass broadcast protection.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-269
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27208
Published: 2024-03-11
Description: there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27209
Published: 2024-03-11
Description: there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-122
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27210
Published: 2024-03-11
Description: In policy_check of fvp.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27211
Published: 2024-03-11
Description: In AtiHandleAPOMsgType of ati_Main.c, there is a possible OOB write due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.7 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27212
Published: 2024-03-11
Description: In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27213
Published: 2024-03-11
Description: In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27218
Published: 2024-03-11
Description: In update_freq_data of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27219
Published: 2024-03-11
Description: In tmu_set_pi of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27220
Published: 2024-03-11
Description: In lpm_req_handler of , there is a possible out of bounds memory access due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27221
Published: 2024-03-11
Description: In update_policy_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27222
Published: 2024-03-11
Description: In onSkipButtonClick of FaceEnrollFoldPage.java, there is a possible way to access the file the app cannot access  due to Intent Redirect GRANT_URI_PERMISSIONS Attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27223
Published: 2024-03-11
Description: In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure after authenticating the cell connection with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27224
Published: 2024-03-11
Description: In strncpy of strncpy.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27225
Published: 2024-03-11
Description: In sendHciCommand of bluetooth_hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-120, CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27226
Published: 2024-03-11
Description: In tmu_config_gov_params of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27227
Published: 2024-03-11
Description: A malicious DNS response can trigger a number of OOB reads, writes, and other memory issues
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27228
Published: 2024-03-11
Description: there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27229
Published: 2024-03-11
Description: In ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null pointer deref due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27230
Published: 2024-03-11
Description: In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27233
Published: 2024-03-11
Description: In ppcfw_init_secpolicy of ppcfw.c, there is a possible permission bypass due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01
CVE: CVE-2024-27234
Published: 2024-03-11
Description: In fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2024-03-01; https://source.android.com/security/bulletin/pixel/2024-03-01