deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-46280
Published: 2023-07-21
Description: A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-824
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1670; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1670; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1670
CVE: CVE-2022-46289
Published: 2023-07-21
Description: Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.nAtoms calculation wrap-around, leading to a small buffer allocation
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1665; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1665; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1665
CVE: CVE-2022-46290
Published: 2023-07-21
Description: Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.The loop that stores the coordinates does not check its index against nAtoms
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1665; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1665; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1665
CVE: CVE-2022-46291
Published: 2023-07-21
Description: Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MSI file format
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1666
CVE: CVE-2022-46292
Published: 2023-07-21
Description: Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Unit Cell Translation section
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1666
CVE: CVE-2022-46293
Published: 2023-07-21
Description: Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC file format, inside the Final Point and Derivatives section
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1666
CVE: CVE-2022-46294
Published: 2023-07-21
Description: Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MOPAC Cartesian file format
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1666
CVE: CVE-2022-46295
Published: 2023-07-21
Description: Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the Gaussian file format
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1666; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1666
CVE: CVE-2023-35077
Published: 2023-07-21
Description: An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 or above.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://forums.ivanti.com/s/article/SA-2023-07-19-CVE-2023-35077; https://forums.ivanti.com/s/article/SA-2023-07-19-CVE-2023-35077
CVE: CVE-2023-37915
Published: 2023-07-21
Description: OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). OpenDDS crashes while parsing a malformed `PID_PROPERTY_LIST` in a DATA submessage during participant discovery. Attackers can remotely crash OpenDDS processes by sending a DATA submessage containing the malformed parameter to the known multicast port. This issue has been addressed in version 3.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/OpenDDS/OpenDDS/releases/tag/DDS-3.25; https://github.com/OpenDDS/OpenDDS/security/advisories/GHSA-v5pp-7prc-5xq9; https://github.com/OpenDDS/OpenDDS/releases/tag/DDS-3.25
CVE: CVE-2023-37916
Published: 2023-07-21
Description: KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password hash of any user (including admin). A sufficiently motivated attacker may be able to crack leaded password hashes. This issue has been addressed in version 1.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/1Panel-dev/KubePi/security/advisories/GHSA-87f6-8gr7-pc6h; https://github.com/1Panel-dev/KubePi/security/advisories/GHSA-87f6-8gr7-pc6h
CVE: CVE-2023-37917
Published: 2023-07-21
Description: KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the `isadmin` value in the request. As a result any user may take administrative control of KubePi. This issue has been addressed in version 1.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-269
References: https://github.com/1Panel-dev/KubePi/security/advisories/GHSA-757p-vx43-fp9r; https://github.com/1Panel-dev/KubePi/security/advisories/GHSA-757p-vx43-fp9r
CVE: CVE-2023-37918
Published: 2023-07-21
Description: Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. A vulnerability has been found in Dapr that allows bypassing API token authentication, which is used by the Dapr sidecar to authenticate calls coming from the application, with a well-crafted HTTP request. Users who leverage API token authentication are encouraged to upgrade Dapr to 1.10.9 or to 1.11.2. This vulnerability impacts Dapr users who have configured API token authentication. An attacker could craft a request that is always allowed by the Dapr sidecar over HTTP, even if the `dapr-api-token` in the request is invalid or missing. The issue has been fixed in Dapr 1.10.9 or to 1.11.2. There are no known workarounds for this vulnerability.

CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://docs.dapr.io/operations/security/api-token/; https://github.com/dapr/dapr/commit/83ca1abb11ffe34211db55dcd36d96b94252827a; https://github.com/dapr/dapr/security/advisories/GHSA-59m6-82qm-vqgj
CVE: CVE-2023-3609
Published: 2023-07-21
Description: A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.

If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.

We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html; http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=04c55383fa5689357bcdd2c8036725a55ed632bc
CVE: CVE-2023-3610
Published: 2023-07-21
Description: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.

Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.

We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=4bedf9eee016286c835e3d8fa981ddece5338795; https://kernel.dance/4bedf9eee016286c835e3d8fa981ddece5338795; https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html
CVE: CVE-2023-3611
Published: 2023-07-21
Description: An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.

The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.

We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e337087c3b5805fe0b8a46ba622a962880b5d64; https://kernel.dance/3e337087c3b5805fe0b8a46ba622a962880b5d64; https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
CVE: CVE-2023-3776
Published: 2023-07-21
Description: A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.

If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.

We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html; http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0323bce598eea038714f941ce2b22541c46d488f
CVE: CVE-2023-25929
Published: 2023-07-22
Description: IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  247861.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247861; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/7012621
CVE: CVE-2023-28530
Published: 2023-07-22
Description: IBM Cognos Analytics 11.1 and 11.2 is vulnerable to stored cross-site scripting, caused by improper validation of SVG Files in Custom Visualizations. A remote attacker could exploit this vulnerability to execute scripts in a victim's Web browser within the security context of the hosting Web site. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.  IBM X-Force ID:  251214.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/251214; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/7012621
CVE: CVE-2023-3247
Published: 2023-07-22
Description: In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure of 31 bits of uninitialized memory from the client to the server, and it also made easier to a malicious server to guess the client's nonce. 


CVSS Score: 2.6 (LOW)
CWE: CWE-252, CWE-330, CWE-330
References: https://github.com/php/php-src/security/advisories/GHSA-76gg-c692-v2mw; https://github.com/php/php-src/security/advisories/GHSA-76gg-c692-v2mw
CVE: CVE-2023-3826
Published: 2023-07-22
Description: A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /?r=recruit/resume/edit&op=status of the component Interview Handler. The manipulation of the argument resumeid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235147. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Wkingxc/CVE/blob/master/ibos_OA.md; https://vuldb.com/?ctiid.235147; https://vuldb.com/?id.235147
CVE: CVE-2023-3827
Published: 2023-07-22
Description: A vulnerability was found in Bug Finder Listplace Directory Listing Platform 3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /listplace/user/ticket/create of the component HTTP POST Request Handler. The manipulation of the argument message leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235148. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.235148; https://vuldb.com/?id.235148; https://vuldb.com/?ctiid.235148
CVE: CVE-2023-3828
Published: 2023-07-22
Description: A vulnerability was found in Bug Finder Listplace Directory Listing Platform 3.0. It has been classified as problematic. This affects an unknown part of the file /listplace/user/coverPhotoUpdate of the component Photo Handler. The manipulation of the argument user_cover_photo leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235149 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://vuldb.com/?ctiid.235149; https://vuldb.com/?id.235149; https://vuldb.com/?ctiid.235149
CVE: CVE-2023-3829
Published: 2023-07-22
Description: A vulnerability was found in Bug Finder ICOGenie 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user/ticket/create of the component Support Ticket Handler. The manipulation of the argument message leads to cross site scripting. The attack can be initiated remotely. VDB-235150 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.235150; https://vuldb.com/?id.235150; https://vuldb.com/?ctiid.235150
CVE: CVE-2023-3830
Published: 2023-07-22
Description: A vulnerability was found in Bug Finder SASS BILLER 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /company/store. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-235151. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.235151; https://vuldb.com/?id.235151; https://vuldb.com/?ctiid.235151
CVE: CVE-2023-3831
Published: 2023-07-22
Description: A vulnerability was found in Bug Finder Finounce 1.0 and classified as problematic. This issue affects some unknown processing of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235157 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.235157; https://vuldb.com/?id.235157; https://vuldb.com/?ctiid.235157
CVE: CVE-2023-3832
Published: 2023-07-22
Description: A vulnerability was found in Bug Finder Wedding Wonders 1.0. It has been classified as problematic. Affected is an unknown function of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. It is possible to launch the attack remotely. VDB-235158 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.235158; https://vuldb.com/?id.235158; https://vuldb.com/?ctiid.235158
CVE: CVE-2023-3833
Published: 2023-07-22
Description: A vulnerability was found in Bug Finder Montage 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-235159. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.235159; https://vuldb.com/?id.235159; https://vuldb.com/?ctiid.235159
CVE: CVE-2023-38195
Published: 2023-07-22
Description: Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. This is exploitable only when external (SQL Server or PostgreSQL) metadata storage is used. Exploitation can only occur from a high-privileged user account.
CVSS Score: 4.9 (MEDIUM)
References: https://github.com/datalust/seq-tickets/issues/1886; https://github.com/datalust/seq-tickets/issues/1886
CVE: CVE-2023-38633
Published: 2023-07-22
Description: A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2023/Jul/43; http://www.openwall.com/lists/oss-security/2023/07/27/1; http://www.openwall.com/lists/oss-security/2023/09/06/10
CVE: CVE-2023-3834
Published: 2023-07-22
Description: A vulnerability was found in Bug Finder EX-RATE 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235160. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.235160; https://vuldb.com/?id.235160; https://vuldb.com/?ctiid.235160
CVE: CVE-2023-3835
Published: 2023-07-22
Description: A vulnerability classified as problematic has been found in Bug Finder MineStack 1.0. This affects an unknown part of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235161 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.235161; https://vuldb.com/?id.235161; https://vuldb.com/?ctiid.235161
CVE: CVE-2023-3836
Published: 2023-07-22
Description: A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713. This vulnerability affects unknown code of the file /emap/devicePoint_addImgIco?hasSubsystem=true. The manipulation of the argument upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235162 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/qiuhuihk/cve/blob/main/upload.md; https://vuldb.com/?ctiid.235162; https://vuldb.com/?id.235162
CVE: CVE-2023-3837
Published: 2023-07-22
Description: A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/sys_sql_query.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235188. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://github.com/TXPH/CVE/blob/main/xss-report.pdf; https://vuldb.com/?ctiid.235188; https://vuldb.com/?id.235188
CVE: CVE-2023-2430
Published: 2023-07-23
Description: A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to trigger a Denial of Service threat.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-413, CWE-667
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e12d7a46f65ae4b7d58a5e0c1cbfa825cf8; https://www.debian.org/security/2023/dsa-5492; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e12d7a46f65ae4b7d58a5e0c1cbfa825cf8