deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-52474
Published: 2024-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests

hfi1 user SDMA request processing has two bugs that can cause data
corruption for user SDMA requests that have multiple payload iovecs
where an iovec other than the tail iovec does not run up to the page
boundary for the buffer pointed to by that iovec.a

Here are the specific bugs:
1. user_sdma_txadd() does not use struct user_sdma_iovec->iov.iov_len.
   Rather, user_sdma_txadd() will add up to PAGE_SIZE bytes from iovec
   to the packet, even if some of those bytes are past
   iovec->iov.iov_len and are thus not intended to be in the packet.
2. user_sdma_txadd() and user_sdma_send_pkts() fail to advance to the
   next iovec in user_sdma_request->iovs when the current iovec
   is not PAGE_SIZE and does not contain enough data to complete the
   packet. The transmitted packet will contain the wrong data from the
   iovec pages.

This has not been an issue with SDMA packets from hfi1 Verbs or PSM2
because they only produce iovecs that end short of PAGE_SIZE as the tail
iovec of an SDMA request.

Fixing these bugs exposes other bugs with the SDMA pin cache
(struct mmu_rb_handler) that get in way of supporting user SDMA requests
with multiple payload iovecs whose buffers do not end at PAGE_SIZE. So
this commit fixes those issues as well.

Here are the mmu_rb_handler bugs that non-PAGE_SIZE-end multi-iovec
payload user SDMA requests can hit:
1. Overlapping memory ranges in mmu_rb_handler will result in duplicate
   pinnings.
2. When extending an existing mmu_rb_handler entry (struct mmu_rb_node),
   the mmu_rb code (1) removes the existing entry under a lock, (2)
   releases that lock, pins the new pages, (3) then reacquires the lock
   to insert the extended mmu_rb_node.

   If someone else comes in and inserts an overlapping entry between (2)
   and (3), insert in (3) will fail.

   The failure path code in this case unpins _all_ pages in either the
   original mmu_rb_node or the new mmu_rb_node that was inserted between
   (2) and (3).
3. In hfi1_mmu_rb_remove_unless_exact(), mmu_rb_node->refcount is
   incremented outside of mmu_rb_handler->lock. As a result, mmu_rb_node
   could be evicted by another thread that gets mmu_rb_handler->lock and
   checks mmu_rb_node->refcount before mmu_rb_node->refcount is
   incremented.
4. Related to #2 above, SDMA request submission failure path does not
   check mmu_rb_node->refcount before freeing mmu_rb_node object.

   If there are other SDMA requests in progress whose iovecs have
   pointers to the now-freed mmu_rb_node(s), those pointers to the
   now-freed mmu_rb nodes will be dereferenced when those SDMA requests
   complete.
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/00cbce5cbf88459cd1aa1d60d0f1df15477df127; https://git.kernel.org/stable/c/7e6010f79b58f45b204cf18aa58f4b73c3f30adc; https://git.kernel.org/stable/c/9c4c6512d7330b743c4ffd18bd999a86ca26db0d
CVE: CVE-2024-25768
Published: 2024-02-26
Description: OpenDMARC 1.4.2 contains a null pointer dereference vulnerability in /OpenDMARC/libopendmarc/opendmarc_policy.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/LuMingYinDetect/OpenDMARC_defects/blob/main/OpenDMARC_detect_1.md; https://github.com/LuMingYinDetect/OpenDMARC_defects/blob/main/OpenDMARC_detect_1.md
CVE: CVE-2024-25770
Published: 2024-02-26
Description: libming 0.4.8 contains a memory leak vulnerability in /libming/src/actioncompiler/listaction.c.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-401
References: https://github.com/LuMingYinDetect/libming_defects/blob/main/libming_detect_1.md; https://github.com/LuMingYinDetect/libming_defects/blob/main/libming_detect_1.md
CVE: CVE-2024-26455
Published: 2024-02-26
Description: fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia/calyptia.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://github.com/LuMingYinDetect/fluent-bit_defects/blob/main/fluent-bit_detect_1.md; https://github.com/LuMingYinDetect/fluent-bit_defects/blob/main/fluent-bit_detect_1.md
CVE: CVE-2024-27084
Published: 2024-02-26
Description: Rejected reason: This CVE is a duplicate of CVE-2024-1631.
CVE: CVE-2024-1899
Published: 2024-02-26
Description: An issue in the anchors subparser of Showdownjs versions <= 2.1.0 could allow a remote attacker to cause denial of service conditions.

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-674
References: https://www.tenable.com/security/research/tra-2024-05; https://www.tenable.com/security/research/tra-2024-05
CVE: CVE-2024-24528
Published: 2024-02-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2024-24564
Published: 2024-02-26
Description: Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index provided has for side effect to update `b`, the byte array to extract `32` bytes from, it could be that some dirty memory is read and returned by `extract32`. This vulnerability is fixed in 0.4.0.
CVSS Score: 3.7 (LOW)
CWE: CWE-125
References: https://github.com/vyperlang/vyper/commit/3d9c537142fb99b2672f21e2057f5f202cde194f; https://github.com/vyperlang/vyper/security/advisories/GHSA-4hwq-4cpm-8vmx; https://github.com/vyperlang/vyper/security/advisories/GHSA-4hwq-4cpm-8vmx
CVE: CVE-2024-26149
Published: 2024-02-26
Description: Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an excessively large value is specified as the starting index for an array in `_abi_decode`, it can cause the read position to overflow. This results in the decoding of values outside the intended array bounds, potentially leading to exploitations in contracts that use arrays within `_abi_decode`. This vulnerability affects 0.3.10 and earlier versions.
CVSS Score: 3.7 (LOW)
CWE: CWE-119
References: https://github.com/vyperlang/vyper/security/advisories/GHSA-9p8r-4xp4-gw5w; https://github.com/vyperlang/vyper/security/advisories/GHSA-9p8r-4xp4-gw5w
CVE: CVE-2024-27089
Published: 2024-02-26
Description: Rejected reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not in the allowed scope of that CNA's CVE ID assignments.
CVE: CVE-2023-36237
Published: 2024-02-26
Description: Cross Site Request Forgery vulnerability in Bagisto before v.1.5.1 allows an attacker to execute arbitrary code via a crafted HTML script.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Ek-Saini/security/blob/main/CSRF-Bagisto; https://github.com/Ek-Saini/security/blob/main/CSRF-Bagisto
CVE: CVE-2024-25248
Published: 2024-02-26
Description: SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://harryha.substack.com/p/phuong-phap-phan-tich-ma-nguon-tim-lo-hong; https://harryha.substack.com/p/phuong-phap-phan-tich-ma-nguon-tim-lo-hong
CVE: CVE-2024-25751
Published: 2024-02-26
Description: A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the fromSetSysTime function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://github.com/TimeSeg/IOT_CVE/blob/main/tenda/AC9V3/0218/fromSetSysTime.md; https://github.com/TimeSeg/IOT_CVE/blob/main/tenda/AC9V3/0218/fromSetSysTime.md
CVE: CVE-2024-27093
Published: 2024-02-26
Description: Minder is a Software Supply Chain Security Platform. In version 0.0.31 and earlier, it is possible for an attacker to register a repository with a invalid or differing upstream ID, which causes Minder to report the repository as registered, but not remediate any future changes which conflict with policy (because the webhooks for the repo do not match any known repository in the database).  When attempting to register a repo with a different repo ID, the registered provider must have admin on the named repo, or a 404 error will result.  Similarly, if the stored provider token does not have repo access, then the remediations will not apply successfully.  Lastly, it appears that reconciliation actions do not execute against repos with this type of mismatch. This appears to primarily be a potential denial-of-service vulnerability.  This vulnerability is patched in version 0.20[PII_REDACTED]+ref.53868a8.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: https://github.com/stacklok/minder/commit/53868a878e93f29c43437f96dbc990b548e48d1d; https://github.com/stacklok/minder/security/advisories/GHSA-q6h8-4j2v-pjg4; https://github.com/stacklok/minder/commit/53868a878e93f29c43437f96dbc990b548e48d1d
CVE: CVE-2024-25247
Published: 2024-02-26
Description: SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://harryha.substack.com/p/phuong-phap-phan-tich-ma-nguon-tim-lo-hong; https://harryha.substack.com/p/phuong-phap-phan-tich-ma-nguon-tim-lo-hong
CVE: CVE-2024-24721
Published: 2024-02-27
Description: An issue was discovered on Innovaphone PBX before 14r1 devices. The password form, used to authenticate, allows a Brute Force Attack through which an attacker may be able to access the administration panel
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-307
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2024-24721; https://excellium-services.com/cert-xlm-advisory/CVE-2024-24721; https://excellium-services.com/cert-xlm-advisory/CVE-2024-24721
CVE: CVE-2024-22543
Published: 2024-02-27
Description: An issue was discovered in Linksys Router E1700 1.0.04 (build 3), allows authenticated attackers to escalate privileges via a crafted GET request to the /goform/* URI or via the ExportSettings function.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-613
References: https://mat4mee.notion.site/Leaked-SessionID-can-lead-to-authentication-bypass-on-the-Linksys-Router-E1700-f56f9c4b15e7443fa237bd1b101a18d2; https://mat4mee.notion.site/Leaked-SessionID-can-lead-to-authentication-bypass-on-the-Linksys-Router-E1700-f56f9c4b15e7443fa237bd1b101a18d2
CVE: CVE-2024-22544
Published: 2024-02-27
Description: An issue was discovered in Linksys Router E1700 version 1.0.04 (build 3), allows authenticated attackers to execute arbitrary code via the setDateTime function.
CVSS Score: 8.0 (HIGH)
CWE: CWE-77
References: https://mat4mee.notion.site/Remote-Code-Execution-RCE-on-the-Linksys-Router-E1700-765c9bbf6a7f4171b670bc778bf9b005; https://mat4mee.notion.site/Remote-Code-Execution-RCE-on-the-Linksys-Router-E1700-765c9bbf6a7f4171b670bc778bf9b005
CVE: CVE-2024-24720
Published: 2024-02-27
Description: An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information about whether a user exists on a system.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2024-24720; https://excellium-services.com/cert-xlm-advisory/CVE-2024-24720; https://wiki.innovaphone.com/index.php?title=Reference14r1:Release_Notes_Security#156999_-_App_Users:_Prevent_account_enumerate
CVE: CVE-2024-25166
Published: 2024-02-27
Description: Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfile action parameter in the controller.php file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/xiaocheng-keji/71cms/issues/1; https://github.com/xiaocheng-keji/71cms/issues/1
CVE: CVE-2024-27356
Published: 2024-02-27
Description: An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially obtaining critical user information. This affects MT6000 4.5.5, XE3000 4.4.4, X3000 4.4.5, MT3000 4.5.0, MT2500 4.5.0, AXT1800 4.5.0, AX1800 4.5.0, A1300 4.5.0, S200 4.1.4-0300, X750 4.3.7, SFT1200 4.3.7, XE300 4.3.7, MT1300 4.3.10, AR750 4.3.10, AR750S 4.3.10, AR300M 4.3.10, AR300M16 4.3.10, B1300 4.3.10, MT300N-v2 4.3.10, X300B 3.217, S1300 3.216, SF1200 3.216, MV1000 3.216, N300 3.216, B2200 3.216, and X1200 3.203.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Download_file_vulnerability.md; https://gl-inet.com; https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Download_file_vulnerability.md
CVE: CVE-2023-41506
Published: 2024-02-27
Description: An arbitrary file upload vulnerability in the Update/Edit Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/ASR511-OO7/CVE-2023-41506/blob/main/CVE-23; https://github.com/ASR511-OO7/CVE-2023-41506/blob/main/CVE-23
CVE: CVE-2024-22917
Published: 2024-02-27
Description: SQL injection vulnerability in Dynamic Lab Management System Project in PHP v.1.0 allows a remote attacker to execute arbitrary code via a crafted script.
CVSS Score: 8.6 (HIGH)
CWE: CWE-89
References: https://github.com/ASR511-OO7/CVE-2024-22917/blob/main/CVE-22; https://github.com/ASR511-OO7/CVE-2024-22917/blob/main/CVE-22
CVE: CVE-2024-24095
Published: 2024-02-27
Description: Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/ASR511-OO7/CVE-2024-24095/blob/main/CVE-21; https://github.com/ASR511-OO7/CVE-2024-24095/blob/main/CVE-21
CVE: CVE-2024-24096
Published: 2024-02-27
Description: Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN.
CVSS Score: 7.8 (HIGH)
CWE: CWE-89
References: https://github.com/ASR511-OO7/CVE-2024-24096/blob/main/CVE-20; https://github.com/ASR511-OO7/CVE-2024-24096/blob/main/CVE-20
CVE: CVE-2024-24099
Published: 2024-02-27
Description: Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://github.com/ASR511-OO7/CVE-2024-24099/blob/main/CVE-19; https://github.com/ASR511-OO7/CVE-2024-24099/blob/main/CVE-19
CVE: CVE-2024-24100
Published: 2024-02-27
Description: Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID.
CVSS Score: 8.3 (HIGH)
CWE: CWE-89
References: https://github.com/ASR511-OO7/CVE-2024-24100/blob/main/CVE-18; https://github.com/ASR511-OO7/CVE-2024-24100/blob/main/CVE-18
CVE: CVE-2024-25711
Published: 2024-02-27
Description: diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/id_rsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OUNBANAWD6TZH2NRRV4YUIAXEHLUJQ47/; https://salsa.debian.org/reproducible-builds/diffoscope/-/commit/dfed769904c27d66a14a5903823d9c8c5aae860e; https://salsa.debian.org/reproducible-builds/diffoscope/-/issues/361
CVE: CVE-2023-7033
Published: 2024-02-27
Description: Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, MELSEC iQ-R CC-Link IE TSN Master/Local Module, CC-Link IE TSN Remote I/O Module, CC-Link IE TSN Analog-Digital Converter Module, CC-Link IE TSN Digital-Analog Converter Module, CC-Link IE TSN - CC-Link IE Field Network Bridge Module, CC-Link IE TSN - AnyWireASLINK Bridge Module, CC-Link IE TSN FPGA Module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Motion Module, MELSEC iQ-L Motion Module, MELSEC iQ-F FX5 Motion Module, MELSEC iQ-F Series CPU module, MELSEC iQ-F Series Ethernet module, MELSEC iQ-F Series Ethernet/IP module, MELSEC iQ-F Series OPC UA Module, MELSEC iQ-F Series CC-Link IE TSN master/local module, GOT2000 Series CC-Link IE TSN Communication Unit, FR-A800-E series inverters, FR-F800-E series inverters, FR-E800-E series inverters, INVERTER CC-Link IE TSN Plug-in option, INVERTER CC-Link IE TSN Safety Plug-in option, INVERTER CC-Link IE TSN communication function built-in type, MR-J5 series AC Servos MELSERVO, MR-JET series AC Servos MELSERVO, MR-MD333G series AC Servos MELSERVO, MR-JE series AC Servos MELSERVO, MELSERVO-J4 AC Servos MELSERVO and Embedded Type Servo System Controller allow a remote attacker to cause a temporary Denial of Service condition for a certain period of time in Ethernet communication of the products by performing TCP SYN Flood attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-410
References: https://jvn.jp/vu/JVNVU96145466/index.html; https://www.cisa.gov/news-events/ics-advisories/icsa-24-058-01; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-023_en.pdf
CVE: CVE-2024-1323
Published: 2024-02-27
Description: The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Post Type Grid Widget Title in all versions up to, and including, 2.10.30 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3040304/themeisle-companion/tags/2.10.32/vendor/codeinwp/elementor-extra-widgets/class-elementor-extra-widgets.php; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3038451%40themeisle-companion&new=3038451%40themeisle-companion&sfp_email=&sfph_mail=; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3040304%40themeisle-companion&new=3040304%40themeisle-companion&sfp_email=&sfph_mail=
CVE: CVE-2024-0759
Published: 2024-02-27
Description: Should an instance of AnythingLLM be hosted on an internal network and the attacked be explicitly granted a permission level of manager or admin, they could link-scrape internally resolving IPs of other services that are on the same network as AnythingLLM.

This would require the attacker also be able to guess these internal IPs as `/*` ranging is not possible, but could be brute forced.

There is a duty of care that other services on the same network would not be fully open and accessible via a simple CuRL with zero authentication as it is not possible to set headers or access via the link collector.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/mintplex-labs/anything-llm/commit/0db6c3b2aa1787a7054ffdaba975474f122c20eb; https://huntr.com/bounties/9a978edd-ac94-41fc-8e3e-c35441bdd12b; https://github.com/mintplex-labs/anything-llm/commit/0db6c3b2aa1787a7054ffdaba975474f122c20eb
CVE: CVE-2024-1686
Published: 2024-02-27
Description: The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to missing authorization e in all versions up to, and including, 1.1.2 via the apply_layout function due to a missing capability check. This makes it possible for authenticated attackers, with subscriber-level access and above, to retrieve arbitrary order data which may contain PII.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/changeset/3041096/woo-thank-you-page-customizer/trunk/frontend/frontend.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/2e7ebc0c-6936-4632-a602-7131c7d8bd6a?source=cve; https://plugins.trac.wordpress.org/changeset/3041096/woo-thank-you-page-customizer/trunk/frontend/frontend.php
CVE: CVE-2024-1687
Published: 2024-02-27
Description: The Thank You Page Customizer for WooCommerce – Increase Your Sales plugin for WordPress is vulnerable to unauthorized execution of shortcodes due to a missing capability check on the get_text_editor_content() function in all versions up to, and including, 1.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary shortcodes.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3041096%40woo-thank-you-page-customizer&new=3041096%40woo-thank-you-page-customizer&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/310afe02-3a51-4633-b359-65ae58d0c032?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3041096%40woo-thank-you-page-customizer&new=3041096%40woo-thank-you-page-customizer&sfp_email=&sfph_mail=
CVE: CVE-2024-1698
Published: 2024-02-27
Description: The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 2.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://plugins.trac.wordpress.org/changeset/3040809/notificationx/trunk/includes/Core/Database.php; https://plugins.trac.wordpress.org/changeset/3040809/notificationx/trunk/includes/Core/Rest/Analytics.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/e110ea99-e2fa-4558-bcf3-942a35af0b91?source=cve
CVE: CVE-2021-46907
Published: 2024-02-27
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2021-46908
Published: 2024-02-27
Description: In the Linux kernel, the following vulnerability has been resolved:

bpf: Use correct permission flag for mixed signed bounds arithmetic

We forbid adding unknown scalars with mixed signed bounds due to the
spectre v1 masking mitigation. Hence this also needs bypass_spec_v1
flag instead of allow_ptr_leaks.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/4ccdc6c6cae38b91c871293fb0ed8c6845a61b51; https://git.kernel.org/stable/c/4f3ff11204eac0ee23acf64deecb3bad7b0db0c6; https://git.kernel.org/stable/c/[PII_REDACTED]520e2e134936e76788fc2a6371e7be
CVE: CVE-2021-46909
Published: 2024-02-27
Description: In the Linux kernel, the following vulnerability has been resolved:

ARM: footbridge: fix PCI interrupt mapping

Since commit 30fdfb929e82 ("PCI: Add a call to pci_assign_irq() in
pci_device_probe()"), the PCI code will call the IRQ mapping function
whenever a PCI driver is probed. If these are marked as __init, this
causes an oops if a PCI driver is loaded or bound after the kernel has
initialised.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-754
References: https://git.kernel.org/stable/c/1fc087fdb98d556b416c82ed6e3964a30885f47a; https://git.kernel.org/stable/c/2643da6aa57920d9159a1a579fb04f89a2b0d29a; https://git.kernel.org/stable/c/30e3b4f256b4e366a61658c294f6a21b8626dda7