deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-13418
Published: 2025-05-02
Description: Multiple plugins and/or themes for WordPress are vulnerable to Arbitrary File Uploads due to a missing capability check on the ajaxUploadFonts() function in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files that can make remote code execution possible. This issue was escalated to Envato over two months from the date of this disclosure and the issue, while partially patched, is still vulnerable.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://themeforest.net/item/beyot-wordpress-real-estate-theme/19514964; https://www.wordfence.com/threat-intel/vulnerabilities/id/bced4547-3264-43dc-8bb1-89a06f74ccbd?source=cve
CVE: CVE-2024-13419
Published: 2025-05-02
Description: Multiple plugins and/or themes for WordPress using Smart Framework are vulnerable to Stored Cross-Site Scripting due to a missing capability check on the saveOptions() and importThemeOptions() functions in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings which includes custom JavaScript that is enabled site-wide. This issue was escalated to Envato over two months from the date of this disclosure and the issue is still vulnerable.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-862
References: https://themeforest.net/item/beyot-wordpress-real-estate-theme/19514964; https://www.wordfence.com/threat-intel/vulnerabilities/id/07729c28-a73a-46f4-853e-116792d612f5?source=cve
CVE: CVE-2024-13420
Published: 2025-05-02
Description: Multiple plugins and/or themes for WordPress are vulnerable to unauthorized access due to a missing capability check on several AJAX actions like 'gsf_reset_section_options', 'gsf_reset_section_options', 'gsf_create_preset_options' and more in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset and modify some of the plugin/theme settings. This issue was escalated to Envato over two months from the date of this disclosure and the issues, while partially patched, are still vulnerable.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94, CWE-862
References: https://themeforest.net/item/beyot-wordpress-real-estate-theme/19514964; https://www.wordfence.com/threat-intel/vulnerabilities/id/6d484422-4adf-4370-b228-61496d5ad78a?source=cve
CVE: CVE-2025-1326
Published: 2025-05-02
Description: The Homey theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the homey_reservation_del() function in all versions up to, and including, 2.4.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary reservations and posts.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://themeforest.net/item/homey-booking-wordpress-theme/23338013; https://www.wordfence.com/threat-intel/vulnerabilities/id/c0ef3ae7-b3c0-4f54-a95d-9f8cf9497d8f?source=cve
CVE: CVE-2025-1327
Published: 2025-05-02
Description: The Homey theme for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.4 via the 'homey_delete_user_account' action due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete other user's accounts.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://themeforest.net/item/homey-booking-wordpress-theme/23338013; https://www.wordfence.com/threat-intel/vulnerabilities/id/38aa649c-e9d3-458b-b567-e2e751aaca00?source=cve
CVE: CVE-2025-3510
Published: 2025-05-02
Description: The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in all versions up to, and including, 5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://tagdiv.com/newspaper-changelog/; https://tagdiv.com/tagdiv-composer-page-builder-basics/; https://themeforest.net/item/newspaper/5489609
CVE: CVE-2025-3707
Published: 2025-05-02
Description: The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL command to read database contents.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://www.twcert.org.tw/en/cp-139-10084-d7c47-2.html; https://www.twcert.org.tw/tw/cp-132-10083-4ed7f-1.html
CVE: CVE-2025-3708
Published: 2025-05-02
Description: Le-show medical practice management system from Le-yan has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.twcert.org.tw/en/cp-139-10086-dbfd0-2.html; https://www.twcert.org.tw/tw/cp-132-10085-69e16-1.html
CVE: CVE-2025-3709
Published: 2025-05-02
Description: Agentflow from Flowring Technology has an Account Lockout Bypass vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to perform password brute force attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: https://www.twcert.org.tw/en/cp-139-10090-112f7-2.html; https://www.twcert.org.tw/tw/cp-132-10091-12462-1.html
CVE: CVE-2025-3748
Published: 2025-05-02
Description: The Taxonomy Chain Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pn_chain_menu shortcode in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/taxonomy-chain-menu/trunk/index.php#L190; https://plugins.trac.wordpress.org/changeset/3284354/; https://wordpress.org/plugins/taxonomy-chain-menu/#developers
CVE: CVE-2025-3858
Published: 2025-05-02
Description: The Formality plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ parameter in all versions up to, and including, 1.5.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/formality/trunk/public/class-formality-form.php#L137; https://plugins.trac.wordpress.org/changeset/3285036/; https://wordpress.org/plugins/formality/#developers
CVE: CVE-2025-3438
Published: 2025-05-02
Description: The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to limited privilege escalation in all versions up to, and including, 4.17.4. This is due to a lack of restriction of role when registering. This makes it possible for unauthenticated attackers to to register with the 'wcfm_vendor' role, which is a Store Vendor role in the WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress. The vulnerability can only be exploited if the WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin is installed and activated. The vulnerability was partially patched in version 4.17.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/flutter-user.php#L392; https://plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/flutter-user.php#L413; https://plugins.trac.wordpress.org/changeset/3277790
CVE: CVE-2025-3488
Published: 2025-05-02
Description: The WPML plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpml_language_switcher shortcode in versions 3.6.0 - 4.7.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://wpml.org/category/changelog/; https://wpml.org/documentation/support/wpml-coding-api/shortcodes/; https://www.wordfence.com/threat-intel/vulnerabilities/id/92c1bd85-5f81-4bb6-b6af-6cda85b91b9e?source=cve
CVE: CVE-2025-3513
Published: 2025-05-02
Description: The SureForms  WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://wpscan.com/vulnerability/dd7e0bb3-4a98-4f62-bd2e-f30b27d71226/
CVE: CVE-2025-3514
Published: 2025-05-02
Description: The SureForms  WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://wpscan.com/vulnerability/fc3da503-a973-44d8-82d0-13539501f8c0/
CVE: CVE-2025-47201
Published: 2025-05-02
Description: In Intrexx Portal Server before 12.0.4, multiple Velocity-Scripts are susceptible to the execution of unrequested JavaScript code in HTML, aka XSS.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://security.intrexx.com/en/security-advisories/ixsa-20250429-01/
CVE: CVE-2024-13858
Published: 2025-05-02
Description: The BuddyBoss Platform plugin and BuddyBoss Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘invitee_name’ parameter in all versions up to, and including, 2.8.50 and 2.8.41, respectively, due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in the BuddyBoss Platform plugin in version 2.8.41.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.buddyboss.com/platform/; https://www.buddyboss.com/resources/buddyboss-platform-releases/2-8-51/; https://www.buddyboss.com/resources/buddyboss-theme-releases/2-8-50/
CVE: CVE-2024-13859
Published: 2025-05-02
Description: The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘bp_nouveau_ajax_media_save’ function in all versions up to, and including, 2.8.50 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 2.8.41.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.buddyboss.com/platform/; https://www.buddyboss.com/resources/buddyboss-platform-releases/2-8-51/; https://www.wordfence.com/threat-intel/vulnerabilities/id/d77c8096-40b1-4ac7-881f-6aed98da6752?source=cve
CVE: CVE-2024-13860
Published: 2025-05-02
Description: The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘bbp_topic_title’ parameter in all versions up to, and including, 2.8.50 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 2.8.41.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.buddyboss.com/platform/; https://www.buddyboss.com/resources/buddyboss-platform-releases/2-8-51/; https://www.wordfence.com/threat-intel/vulnerabilities/id/a0ac8a41-553e-473b-82a7-226de17e472d?source=cve
CVE: CVE-2024-11142
Published: 2025-05-02
Description: Cross-Site Request Forgery (CSRF) vulnerability in Gosoft Software Proticaret E-Commerce allows Cross Site Request Forgery.This issue affects Proticaret E-Commerce: before v6.0

NOTE: According to the vendor, fixing process is still ongoing for v4.05.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.usom.gov.tr/bildirim/tr-25-0098
CVE: CVE-2025-2812
Published: 2025-05-02
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mydata Informatics Ticket Sales Automation allows Blind SQL Injection.This issue affects Ticket Sales Automation: before 03.04.2025 (DD.MM.YYYY).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/sahici/CVE-2025-2812/; https://www.usom.gov.tr/bildirim/tr-25-0099
CVE: CVE-2025-0072
Published: 2025-05-02
Description: Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.

This issue affects Valhall GPU Kernel Driver: from r29p0 through r49p3, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p3, from r50p0 through r53p0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://developer.arm.com/documentation/110465/latest/
CVE: CVE-2025-0427
Published: 2025-05-02
Description: Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r8p0 through r49p3, from r50p0 through r51p0; Valhall GPU Kernel Driver: from r19p0 through r49p3, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p3, from r50p0 through r53p0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://developer.arm.com/documentation/110465/latest/
CVE: CVE-2025-1301
Published: 2025-05-02
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Yordam Informatics Library Automation System allows Reflected XSS.This issue affects Library Automation System: before 21.6.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-25-0100
CVE: CVE-2025-2421
Published: 2025-05-02
Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Informatics SambaBox allows Code Injection.This issue affects SambaBox: before 5.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://sambabox.io/2025/04/14/version-5-1/; https://www.usom.gov.tr/bildirim/tr-25-0101
CVE: CVE-2025-2488
Published: 2025-05-02
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Profelis Informatics SambaBox allows Cross-Site Scripting (XSS).This issue affects SambaBox: before 5.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sambabox.io/2025/04/14/version-5-1/; https://www.usom.gov.tr/bildirim/tr-25-0101
CVE: CVE-2025-2605
Published: 2025-05-02
Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Honeywell MB-Secure allows Privilege Abuse. This issue affects MB-Secure: from V11.04 before V12.53 and MB-Secure PRO from V01.06 before V03.09.Honeywell also recommends updating to the most recent version of this product.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://www.honeywell.com/us/en/product-security#security-notices; http://seclists.org/fulldisclosure/2025/May/19
CVE: CVE-2025-4204
Published: 2025-05-02
Description: The Ultimate Auction Pro plugin for WordPress is vulnerable to SQL Injection via the ‘auction_id’ parameter in all versions up to, and including, 1.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://auctionplugin.net/changelog/ultimate-woo-auction-pro/; https://www.wordfence.com/threat-intel/vulnerabilities/id/e492029d-6613-4881-b986-9fe14cb2cf74?source=cve
CVE: CVE-2025-1883
Published: 2025-05-02
Description: Out-Of-Bounds Write vulnerability exists in the OBJ file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted OBJÂ file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.3ds.com/vulnerability/advisories
CVE: CVE-2025-1884
Published: 2025-05-02
Description: Use-After-Free vulnerability exists in the SLDPRT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.3ds.com/vulnerability/advisories
CVE: CVE-2025-37797
Published: 2025-05-02
Description: In the Linux kernel, the following vulnerability has been resolved:

net_sched: hfsc: Fix a UAF vulnerability in class handling

This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class
handling. The issue occurs due to a time-of-check/time-of-use condition
in hfsc_change_class() when working with certain child qdiscs like netem
or codel.

The vulnerability works as follows:
1. hfsc_change_class() checks if a class has packets (q.qlen != 0)
2. It then calls qdisc_peek_len(), which for certain qdiscs (e.g.,
   codel, netem) might drop packets and empty the queue
3. The code continues assuming the queue is still non-empty, adding
   the class to vttree
4. This breaks HFSC scheduler assumptions that only non-empty classes
   are in vttree
5. Later, when the class is destroyed, this can lead to a Use-After-Free

The fix adds a second queue length check after qdisc_peek_len() to verify
the queue wasn't emptied.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/20d584a33e480ae80d105f43e0e7b56784da41b9; https://git.kernel.org/stable/c/28b09a067831f7317c[PII_REDACTED]022d6c940677; https://git.kernel.org/stable/c/39b9095dd3b55d9b2743df038c32138efa34a9de
CVE: CVE-2025-37798
Published: 2025-05-02
Description: In the Linux kernel, the following vulnerability has been resolved:

codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()

After making all ->qlen_notify() callbacks idempotent, now it is safe to
remove the check of qlen!=0 from both fq_codel_dequeue() and
codel_qdisc_dequeue().
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/2f9761a94bae33d26e6a81b31b36e7d776d93dc1; https://git.kernel.org/stable/c/342debc12183b51773b3345ba267e9263bdfaaef; https://git.kernel.org/stable/c/4d55144b12e742404bb3f8fee6038bafbf45619d
CVE: CVE-2025-3927
Published: 2025-05-02
Description: Digigram's PYKO-OUT audio-over-IP (AoIP) web-server does not require a password by default, allowing any attacker with the target IP address to connect and compromise the device, potentially pivoting to connected network or hardware devices.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://www.digigram.com/download/pyko-out-user-manual-en-jan-2019/; https://www.kb.cert.org/vuls/id/360686
CVE: CVE-2025-44868
Published: 2025-05-02
Description: Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping_test function of the adm.cgi via the pingIp parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/Summermu/VulnForIoT/tree/main/Wavlink_WL-WN530H4/ping_test/readme.md; https://github.com/Summermu/VulnForIoT/blob/main/Wavlink_WL-WN530H4/ping_test/readme.md
CVE: CVE-2025-44872
Published: 2025-05-02
Description: Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/Summermu/VulnForIoT/tree/main/Tenda_AC/AC9_formsetUsbUnload; https://github.com/Summermu/VulnForIoT/tree/main/Tenda_AC/AC9_formsetUsbUnload
CVE: CVE-2025-44877
Published: 2025-05-02
Description: Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/Summermu/VulnForIoT/tree/main/Tenda_AC/AC9_formSetSambaConf; https://github.com/Summermu/VulnForIoT/tree/main/Tenda_AC/AC9_formSetSambaConf
CVE: CVE-2025-4166
Published: 2025-05-02
Description: Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads during secret creation or update operations via the Vault REST API. This vulnerability, identified as CVE-2025-4166, is fixed in Vault Community 1.19.3 and Vault Enterprise 1.19.3, 1.18.9, 1.17.16, 1.16.20.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-209
References: https://discuss.hashicorp.com/t/hcsec-2025-09-vault-may-expose-sensitive-information-in-error-logs-when-processing-malformed-data-with-the-kv-v2-plugin
CVE: CVE-2022-49932
Published: 2025-05-02
Description: In the Linux kernel, the following vulnerability has been resolved:

KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace

Call kvm_init() only after _all_ setup is complete, as kvm_init() exposes
/dev/kvm to userspace and thus allows userspace to create VMs (and call
other ioctls).  E.g. KVM will encounter a NULL pointer when attempting to
add a vCPU to the per-CPU loaded_vmcss_on_cpu list if userspace is able to
create a VM before vmx_init() configures said list.

 BUG: kernel NULL pointer dereference, address: [PII_REDACTED]
 #PF: supervisor write access in kernel mode
 #PF: error_code(0x0002) - not-present page
 PGD 0 P4D 0
 Oops: 0002 [#1] SMP
 CPU: 6 PID: 1143 Comm: stable Not tainted 6.0.0-rc7+ #988
 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015
 RIP: 0010:vmx_vcpu_load_vmcs+0x68/0x230 [kvm_intel]
  <TASK>
  vmx_vcpu_load+0x16/0x60 [kvm_intel]
  kvm_arch_vcpu_load+0x32/0x1f0 [kvm]
  vcpu_load+0x2f/0x40 [kvm]
  kvm_arch_vcpu_create+0x231/0x310 [kvm]
  kvm_vm_ioctl+0x79f/0xe10 [kvm]
  ? handle_mm_fault+0xb1/0x220
  __x64_sys_ioctl+0x80/0xb0
  do_syscall_64+0x2b/0x50
  entry_SYSCALL_64_after_hwframe+0x46/0xb0
 RIP: 0033:0x7f5a6b05743b
  </TASK>
 Modules linked in: vhost_net vhost vhost_iotlb tap kvm_intel(+) kvm irqbypass
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/e136e969d268b9b89329c816c002e53f60e82985; https://git.kernel.org/stable/c/e28533c08023c4b319b7f2cd77f3f7c9204eb517; https://git.kernel.org/stable/c/e32b120071ea114efc0b4ddd439547750b85f618
CVE: CVE-2022-49933
Published: 2025-05-02
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.