deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-39025
Published: 2024-12-27
Description: Incorrect access control in the /users endpoint of Cpacker MemGPT v0.3.17 allows attackers to access sensitive data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://github.com/letta-ai/letta/releases/tag/0.3.17; https://medium.com/@cnetsec/a-vulnerability-cve-2024-39025-has-been-identified-in-lettaai-memgpt-v0-3-17-146cb38bb6db
CVE: CVE-2024-54450
Published: 2024-12-27
Description: An issue was discovered in Kurmi Provisioning Suite 7.9.0.33. If an X-Forwarded-For header is received during authentication, the Kurmi application will record the (possibly forged) IP address mentioned in that header rather than the real IP address that the user logged in from. This fake IP address can later be displayed in the My Account popup that shows the IP address that was used to log in.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-290
References: https://kurmi-software.com; https://kurmi-software.com/cve/cve-2024-54450/
CVE: CVE-2024-54451
Published: 2024-12-27
Description: A cross-site scripting (XSS) vulnerability in the graphicCustomization.do page in Kurmi Provisioning Suite before 7.9.0.38, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15 allows remote attackers (authenticated as system administrators) to inject arbitrary web script or HTML via the COMPONENT_fields(htmlTitle) field, which is rendered in other pages of the application for all users (if the graphical customization has been activated by a super-administrator).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kurmi-software.com; https://kurmi-software.com/cve/cve-2024-54451/
CVE: CVE-2024-54452
Published: 2024-12-27
Description: An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35 and 7.10.x through 7.10.0.18. A Directory Traversal and Local File Inclusion vulnerability in the logsSys.do page allows remote attackers (authenticated as administrators) to trigger the display of unintended files. Any file accessible to the Kurmi user account could be displayed, e.g., configuration files with information such as the database password.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://kurmi-software.com; https://kurmi-software.com/cve/cve-2024-54452/
CVE: CVE-2024-54453
Published: 2024-12-27
Description: An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. A path traversal vulnerability in the DocServlet servlet allows remote attackers to retrieve any file from the Kurmi web application installation folder, e.g., files such as the obfuscated and/or compiled Kurmi source code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://kurmi-software.com; https://kurmi-software.com/cve/cve-2024-54453/
CVE: CVE-2024-54454
Published: 2024-12-27
Description: An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. An Observable Response Discrepancy vulnerability in the sendPasswordReinitLink action of the unlogged.do page allows remote attackers to test whether a username is valid or not. This allows confirmation of valid usernames.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://kurmi-software.com; https://kurmi-software.com/cve-2024-54454/
CVE: CVE-2024-56732
Published: 2024-12-27
Description: HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hb_cairo_glyphs_from_buffer function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://github.com/harfbuzz/harfbuzz/commit/1767f99e2e2196c3fcae27db6d8b60098d3f6d26; https://github.com/harfbuzz/harfbuzz/security/advisories/GHSA-qmp9-xqm5-jh6m
CVE: CVE-2024-50713
Published: 2024-12-27
Description: SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstorm.news/files/id/182449/; https://smarts-srl.com
CVE: CVE-2024-50715
Published: 2024-12-27
Description: An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via command injection through a vulnerable unsanitized parameter defined in the /youtubeInfo.php component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://packetstorm.news/files/id/182451/; https://smarts-srl.com
CVE: CVE-2024-50716
Published: 2024-12-27
Description: SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the id parameter in the /sendPushManually.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstorm.news/files/id/182449/; https://smarts-srl.com
CVE: CVE-2024-50717
Published: 2024-12-27
Description: SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the client parameter in the /recuperaLog.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstorm.news/files/id/182449/; https://smarts-srl.com
CVE: CVE-2024-50714
Published: 2024-12-27
Description: A Server-Side Request Forgery (SSRF) in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via a crafted script to the /FB/getFbVideoSource.php component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://packetstorm.news/files/id/182450/; https://smarts-srl.com
CVE: CVE-2024-54774
Published: 2024-12-27
Description: Dcat Admin v2.2.0-beta contains a cross-site scripting (XSS) vulnerability in /admin/articles/create.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/taynes-llllzt/taynes/issues/4
CVE: CVE-2024-54775
Published: 2024-12-27
Description: Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting (XSS) vulnerability via /admin/auth/menu and /admin/auth/extensions.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/taynes-llllzt/taynes/issues/5
CVE: CVE-2024-43705
Published: 2024-12-28
Description: Software installed and run as a non-privileged user can trigger the GPU kernel driver to write to arbitrary read-only system files that have been mapped into application memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-280
References: https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE: CVE-2024-46972
Published: 2024-12-28
Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-911
References: https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE: CVE-2024-46973
Published: 2024-12-28
Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE: CVE-2020-1820
Published: 2024-12-28
Description: There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)

The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
CVSS Score: 3.7 (LOW)
CWE: CWE-125, CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20191218-01-cops-en
CVE: CVE-2020-1821
Published: 2024-12-28
Description: There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)

The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
CVSS Score: 3.7 (LOW)
CWE: CWE-125, CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20191218-01-cops-en
CVE: CVE-2020-1822
Published: 2024-12-28
Description: There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)

The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
CVSS Score: 3.7 (LOW)
CWE: CWE-125, CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20191218-01-cops-en
CVE: CVE-2020-1823
Published: 2024-12-28
Description: There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)

The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
CVSS Score: 3.7 (LOW)
CWE: CWE-125, CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20191218-01-cops-en
CVE: CVE-2020-1824
Published: 2024-12-28
Description: There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)

The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
CVSS Score: 3.7 (LOW)
CWE: CWE-125, CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20191218-01-cops-en
CVE: CVE-2021-22484
Published: 2024-12-28
Description: Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data.




Successful exploitation of this vulnerability may cause a server out of memory (OOM).
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-125
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-wearables-202108-[PII_REDACTED]
CVE: CVE-2021-37000
Published: 2024-12-28
Description: Some Huawei wearables have a permission management vulnerability.
CVSS Score: 7.7 (HIGH)
CWE: CWE-255, CWE-276
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-wearables-202108-[PII_REDACTED]
CVE: CVE-2022-48470
Published: 2024-12-28
Description: Huawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions.(Vulnerability ID:HWPSIRT-2022-42291)

This vulnerability has been assigned a (CVE)ID:CVE-2022-48470
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-305
References: https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-iabvihhalp-ea34d670-en
CVE: CVE-2023-7263
Published: 2024-12-28
Description: Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorized file deletion or file permission change.(Vulnerability ID:HWPSIRT-2023-53450)

This vulnerability has been assigned a (CVE)ID:CVE-2023-7263
CVSS Score: 7.3 (HIGH)
CWE: CWE-35
References: https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-ptvihhms-20747ba3-en
CVE: CVE-2023-7266
Published: 2024-12-28
Description: Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-76605)
This vulnerability has been assigned a (CVE)ID:CVE-2023-7266
CVSS Score: 7.5 (HIGH)
CWE: CWE-420
References: https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-chvishhr-d616b19e-en
CVE: CVE-2023-52718
Published: 2024-12-28
Description: A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-34408)

This vulnerability has been assigned a (CVE)ID:CVE-2023-52718
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-420
References: https://www.huawei.com/br/psirt/security-advisories/2024/huawei-sa-chvishhr-d50dedde-en
CVE: CVE-2024-56676
Published: 2024-12-28
Description: In the Linux kernel, the following vulnerability has been resolved:

thermal: testing: Initialize some variables annoteded with _free()

Variables annotated with __free() need to be initialized if the function
can return before they get updated for the first time or the attempt to
free the memory pointed to by them upon function return may crash the
kernel.

Fix this issue in some places in the thermal testing code.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-909
References: https://git.kernel.org/stable/c/0104dcdaad3a7afd141e79a5fb817a92ada910ac; https://git.kernel.org/stable/c/526c132124a62be486bad1701f7e8e92212ccec6
CVE: CVE-2024-56677
Published: 2024-12-28
Description: In the Linux kernel, the following vulnerability has been resolved:

powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()

During early init CMA_MIN_ALIGNMENT_BYTES can be PAGE_SIZE,
since pageblock_order is still zero and it gets initialized
later during initmem_init() e.g.
setup_arch() -> initmem_init() -> sparse_init() -> set_pageblock_order()

One such use case where this causes issue is -
early_setup() -> early_init_devtree() -> fadump_reserve_mem() -> fadump_cma_init()

This causes CMA memory alignment check to be bypassed in
cma_init_reserved_mem(). Then later cma_activate_area() can hit
a VM_BUG_ON_PAGE(pfn & ((1 << order) - 1)) if the reserved memory
area was not pageblock_order aligned.

Fix it by moving the fadump_cma_init() after initmem_init(),
where other such cma reservations also gets called.

<stack trace>
==============
page: refcount:0 mapcount:0 mapping:[PII_REDACTED] index:0x0 pfn:0x10010
flags: 0x13ffff800000000(node=1|zone=0|lastcpupid=0x7ffff) CMA
raw: 013ffff800000000 5deadbeef0000100 5deadbeef0000122 [PII_REDACTED]
raw: [PII_REDACTED] [PII_REDACTED] 00000000ffffffff [PII_REDACTED]
page dumped because: VM_BUG_ON_PAGE(pfn & ((1 << order) - 1))
------------[ cut here ]------------
kernel BUG at mm/page_alloc.c:778!

Call Trace:
__free_one_page+0x57c/0x7b0 (unreliable)
free_pcppages_bulk+0x1a8/0x2c8
free_unref_page_commit+0x3d4/0x4e4
free_unref_page+0x458/0x6d0
init_cma_reserved_pageblock+0x114/0x198
cma_init_reserved_areas+0x270/0x3e0
do_one_initcall+0x80/0x2f8
kernel_init_freeable+0x33c/0x530
kernel_init+0x34/0x26c
ret_from_kernel_user_thread+0x14/0x1c
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://git.kernel.org/stable/c/05b94cae1c47f94588c3e7096963c1007c4d9c1d; https://git.kernel.org/stable/c/7351c5a6507b4401aeecadb[PII_REDACTED]a339520; https://git.kernel.org/stable/c/aabef6301dcf410dfd2b8759cd413b2a003c7e3f
CVE: CVE-2024-56678
Published: 2024-12-28
Description: In the Linux kernel, the following vulnerability has been resolved:

powerpc/mm/fault: Fix kfence page fault reporting

copy_from_kernel_nofault() can be called when doing read of /proc/kcore.
/proc/kcore can have some unmapped kfence objects which when read via
copy_from_kernel_nofault() can cause page faults. Since *_nofault()
functions define their own fixup table for handling fault, use that
instead of asking kfence to handle such faults.

Hence we search the exception tables for the nip which generated the
fault. If there is an entry then we let the fixup table handler handle the
page fault by returning an error from within ___do_page_fault().

This can be easily triggered if someone tries to do dd from /proc/kcore.
eg. dd if=/proc/kcore of=/dev/null bs=1M

Some example false negatives:

  ===============================
  BUG: KFENCE: invalid read in copy_from_kernel_nofault+0x9c/0x1a0
  Invalid read at 0xc0000000fdff0000:
   copy_from_kernel_nofault+0x9c/0x1a0
   0xc[PII_REDACTED]5f950
   read_kcore_iter+0x57c/0xa04
   proc_reg_read_iter+0xe4/0x16c
   vfs_read+0x320/0x3ec
   ksys_read+0x90/0x154
   system_call_exception+0x120/0x310
   system_call_vectored_common+0x15c/0x2ec

  BUG: KFENCE: use-after-free read in copy_from_kernel_nofault+0x9c/0x1a0
  Use-after-free read at 0xc0000000fe050000 (in kfence-#2):
   copy_from_kernel_nofault+0x9c/0x1a0
   0xc[PII_REDACTED]5f950
   read_kcore_iter+0x57c/0xa04
   proc_reg_read_iter+0xe4/0x16c
   vfs_read+0x320/0x3ec
   ksys_read+0x90/0x154
   system_call_exception+0x120/0x310
   system_call_vectored_common+0x15c/0x2ec
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/06dbbb4d5f7126b6307ab807cbf04ecfc459b933; https://git.kernel.org/stable/c/15f78d2c3d1452645bd8b9da909b0ca266f83c43; https://git.kernel.org/stable/c/4d2655754e94741b159aa807b72ea85518a65fd5
CVE: CVE-2024-56679
Published: 2024-12-28
Description: In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c

Add error pointer check after calling otx2_mbox_get_rsp().
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/0fbc7a5027c6f7f2c785adae3dcec22b2f2b69b3; https://git.kernel.org/stable/c/4b88b202cf1ae79159a94fff9500f9be31559235; https://git.kernel.org/stable/c/52c63a6a27d3178fab533fcfb4baa2ed5b8608a3
CVE: CVE-2024-56680
Published: 2024-12-28
Description: In the Linux kernel, the following vulnerability has been resolved:

media: intel/ipu6: do not handle interrupts when device is disabled

Some IPU6 devices have shared interrupts. We need to handle properly
case when interrupt is triggered from other device on shared irq line
and IPU6 itself disabled. In such case we get 0xffffffff from
ISR_STATUS register and handle all irq's cases, for what we are not
not prepared and usually hang the whole system.

To avoid the issue use pm_runtime_get_if_active() to check if
the device is enabled and prevent suspending it when we handle irq
until the end of irq. Additionally use synchronize_irq() in suspend
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/[PII_REDACTED]bb18847092b2e04c6598ef34bae1d4; https://git.kernel.org/stable/c/57241487a3648515c9aa6fa89e31f2414eccfdbc; https://git.kernel.org/stable/c/ed4524c87249edc3104f6bb28ab11325bed3d536
CVE: CVE-2024-56681
Published: 2024-12-28
Description: In the Linux kernel, the following vulnerability has been resolved:

crypto: bcm - add error check in the ahash_hmac_init function

The ahash_init functions may return fails. The ahash_hmac_init should
not return ok when ahash_init returns error. For an example, ahash_init
will return -ENOMEM when allocation memory is error.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/05f0a3f5477ecaa1cf46448504afe9e7c2e96fcc; https://git.kernel.org/stable/c/19630cf57233e845b6ac57c9c969a[PII_REDACTED]b; https://git.kernel.org/stable/c/28f8ffa945f7d7150463e15097ea73b19529d6f5
CVE: CVE-2024-56682
Published: 2024-12-28
Description: In the Linux kernel, the following vulnerability has been resolved:

irqchip/riscv-aplic: Prevent crash when MSI domain is missing

If the APLIC driver is probed before the IMSIC driver, the parent MSI
domain will be missing, which causes a NULL pointer dereference in
msi_create_device_irq_domain().

Avoid this by deferring probe until the parent MSI domain is available. Use
dev_err_probe() to avoid printing an error message when returning
-EPROBE_DEFER.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://git.kernel.org/stable/c/1f181d1cda56c2fbe379c5ace1aa1fac6306669e; https://git.kernel.org/stable/c/285a07810ab3bcedc2bd380ebacbf6b4942a889a
CVE: CVE-2024-56683
Published: 2024-12-28
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/vc4: hdmi: Avoid hang with debug registers when suspended

Trying to read /sys/kernel/debug/dri/1/hdmi1_regs
when the hdmi is disconnected results in a fatal system hang.

This is due to the pm suspend code disabling the dvp clock.
That is just a gate of the 108MHz clock in DVP_HT_RPI_MISC_CONFIG,
which results in accesses hanging AXI bus.

Protect against this.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/0ea29bd7d9400d[PII_REDACTED]d609358ed1b12075; https://git.kernel.org/stable/c/16f351adf733a182224ad24916d7673aa6df02df; https://git.kernel.org/stable/c/223ee2567a55e4f80315c768d2969e6a3b9fb23d
CVE: CVE-2024-56684
Published: 2024-12-28
Description: In the Linux kernel, the following vulnerability has been resolved:

mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks()

It should be size of the struct clk_bulk_data, not data pointer pass to
devm_kcalloc().
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/271ee263cc[PII_REDACTED]185007181ca10346fe73; https://git.kernel.org/stable/c/31986fad0cfdda8d8893230da04f5eb0774854d9; https://git.kernel.org/stable/c/a9c7cb960fc6e056ebecebd136a127612b15630d