deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-28041
Published: 2024-03-25
Description: HGW BL1500HM Ver 002.001.013 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary command.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://jvn.jp/en/vu/JVNVU93546510/; https://kddi-tech.com/contents/appendix_L2_06.html#20304f4c-af1b-49fd-c3b5-8d1f55fd8b4f; https://jvn.jp/en/vu/JVNVU93546510/
CVE: CVE-2024-29071
Published: 2024-03-25
Description: HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may change the system settings.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1391, CWE-522
References: https://jvn.jp/en/vu/JVNVU93546510/; https://kddi-tech.com/contents/appendix_L2_06.html#20304f4c-af1b-49fd-c3b5-8d1f55fd8b4f; https://jvn.jp/en/vu/JVNVU93546510/
CVE: CVE-2023-30480
Published: 2024-03-25
Description: Missing Authorization vulnerability in Sparkle WP Educenter.This issue affects Educenter: from n/a through 1.5.5.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/educenter/wordpress-educenter-theme-1-5-1-broken-access-control?_s_id=cve; https://patchstack.com/database/vulnerability/educenter/wordpress-educenter-theme-1-5-1-broken-access-control?_s_id=cve
CVE: CVE-2023-33923
Published: 2024-03-25
Description: Missing Authorization vulnerability in HashThemes Viral News, HashThemes Viral, HashThemes HashOne.This issue affects Viral News: from n/a through 1.4.5; Viral: from n/a through 1.8.0; HashOne: from n/a through 1.3.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/hashone/wordpress-hashone-theme-1-3-0-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/viral-news/wordpress-viral-news-theme-1-4-5-authenticated-arbitrary-plugin-activation-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/viral/wordpress-viral-theme-1-8-0-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-37885
Published: 2024-03-25
Description: Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/realhomes/wordpress-realhomes-theme-4-0-2-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/realhomes/wordpress-realhomes-theme-4-0-2-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-37886
Published: 2024-03-25
Description: Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/realhomes/wordpress-realhomes-theme-4-0-2-broken-access-control-vulnerability-2?_s_id=cve; https://patchstack.com/database/vulnerability/realhomes/wordpress-realhomes-theme-4-0-2-broken-access-control-vulnerability-2?_s_id=cve
CVE: CVE-2024-1231
Published: 2024-03-25
Description: The CM Download Manager  WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins unpublish downloads via a CSRF attack
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/7d3968d9-61ed-4c00-8764-0360cf03255e/; https://wpscan.com/vulnerability/7d3968d9-61ed-4c00-8764-0360cf03255e/
CVE: CVE-2024-1232
Published: 2024-03-25
Description: The CM Download Manager  WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete downloads via a CSRF attack
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/2a29b509-4cd5-43c8-84f4-f86251dd28f8/; https://wpscan.com/vulnerability/2a29b509-4cd5-43c8-84f4-f86251dd28f8/
CVE: CVE-2024-1564
Published: 2024-03-25
Description: The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access custom fields on any post regardless of post type or status via a shortcode
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/ecb1e36f-9c6e-4754-8878-03c97194644d/; https://wpscan.com/vulnerability/ecb1e36f-9c6e-4754-8878-03c97194644d/
CVE: CVE-2024-1962
Published: 2024-03-25
Description: The CM Download Manager  WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins edit downloads via a CSRF attack
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/469486d4-7677-4d66-83c0-a6b9ac7c503b/; https://wpscan.com/vulnerability/469486d4-7677-4d66-83c0-a6b9ac7c503b/
CVE: CVE-2024-21505
Published: 2024-03-25
Description: Versions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format and mergeDeep, due to insecure recursive merge.An attacker can manipulate an object's prototype, potentially leading to the alteration of the behavior of all objects inheriting from the affected prototype by passing specially crafted input to these functions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321, CWE-1321
References: https://github.com/web3/web3.js/commit/8ed041c6635d807b3da8960ad49e125e3d1b0e80; https://security.snyk.io/vuln/SNYK-JS-WEB3UTILS-6229337; https://github.com/web3/web3.js/commit/8ed041c6635d807b3da8960ad49e125e3d1b0e80
CVE: CVE-2024-21865
Published: 2024-03-25
Description: HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1391
References: https://jvn.jp/en/vu/JVNVU93546510/; https://kddi-tech.com/contents/appendix_L2_06.html#20304f4c-af1b-49fd-c3b5-8d1f55fd8b4f; https://jvn.jp/en/vu/JVNVU93546510/
CVE: CVE-2024-29009
Published: 2024-03-25
Description: Cross-site request forgery (CSRF) vulnerability in easy-popup-show all versions allows a remote unauthenticated attacker to hijack the authentication of the administrator and to perform unintended operations if the administrator views a malicious page while logged in.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN86206017/; https://wordpress.org/plugins/easy-popup-show/; https://jvn.jp/en/jp/JVN86206017/
CVE: CVE-2022-36407
Published: 2024-03-25
Description: Insertion of Sensitive Information into Log File vulnerability in Hitachi Virtual Storage Platform, Hitachi Virtual Storage Platform VP9500, Hitachi Virtual Storage Platform G1000, G1500, Hitachi Virtual Storage Platform F1500, Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, Hitachi Virtual Storage Platform 5200, 5600, 5200H, 5600H, Hitachi Unified Storage VM, Hitachi Virtual Storage Platform G100, G200, G400, G600, G800, Hitachi Virtual Storage Platform F400, F600, F800, Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, Hitachi Virtual Storage Platform F350, F370, F700, F900, Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H allows 

local users to gain sensitive information.This issue affects Hitachi Virtual Storage Platform: before DKCMAIN Ver. 70-06-74-00/00, SVP Ver. 70-06-58/00; Hitachi Virtual Storage Platform VP9500: before DKCMAIN Ver. 70-06-74-00/00, SVP Ver. 70-06-58/00; Hitachi Virtual Storage Platform G1000, G1500: before DKCMAIN Ver. 80-06-92-00/00, SVP Ver. 80-06-87/00; Hitachi Virtual Storage Platform F1500: before DKCMAIN Ver. 80-06-92-00/00, SVP Ver. 80-06-87/00; Hitachi Virtual Storage Platform 5100, 5500,5100H, 5500H: before DKCMAIN Ver. 90-08-81-00/00, SVP Ver. 90-08-81/00, before DKCMAIN Ver. 90-08-62-00/00, SVP Ver. 90-08-62/00, before DKCMAIN Ver. 90-08-43-00/00, SVP Ver. 90-08-43/00; Hitachi Virtual Storage Platform 5200, 5600,5200H, 5600H: before DKCMAIN Ver. 90-08-81-00/00, SVP Ver. 90-08-81/00, before DKCMAIN Ver. 90-08-62-00/00, SVP Ver. 90-08-62/00, before DKCMAIN Ver. 90-08-43-00/00, SVP Ver. 90-08-43/00; Hitachi Unified Storage VM: before DKCMAIN Ver. 73-03-75-X0/00, SVP Ver. 73-03-74/00, before DKCMAIN Ver. 73(75)-03-75-X0/00, SVP Ver. 73(75)-03-74/00; Hitachi Virtual Storage Platform G100, G200, G400, G600, G800: before DKCMAIN Ver. 83-06-19-X0/00, SVP Ver. 83-06-20-X0/00, before DKCMAIN Ver. 83-05-47-X0/00, SVP Ver. 83-05-51-X0/00; Hitachi Virtual Storage Platform F400, F600, F800: before DKCMAIN Ver. 83-06-19-X0/00, SVP Ver. 83-06-20-X0/00, before DKCMAIN Ver. 83-05-47-X0/00, SVP Ver. 83-05-51-X0/00; Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900: before DKCMAIN Ver. 88-08-09-XX/00, SVP Ver. 88-08-11-X0/02; Hitachi Virtual Storage Platform F350, F370, F700, F900: before DKCMAIN Ver. 88-08-09-XX/00, SVP Ver. 88-08-11-X0/02; Hitachi Virtual Storage Platform E390, E590, E790, E990, E1090, E390H, E590H, E790H, E1090H: before DKCMAIN Ver. 93-06-81-X0/00, SVP Ver. 93-06-81-X0/00, before DKCMAIN Ver. 93-06-62-X0/00, SVP Ver. 93-06-62-X0/00, before DKCMAIN Ver. 93-06-43-X0/00, SVP Ver. 93-06-43-X0/00.


CVSS Score: 9.9 (CRITICAL)
CWE: CWE-532
References: https://www.hitachi.com/products/it/storage-solutions/sec_info/2024/2022_313.html; https://www.hitachi.com/products/it/storage-solutions/sec_info/2024/2022_313.html
CVE: CVE-2020-36826
Published: 2024-03-25
Description: A vulnerability was found in AwesomestCode LiveBot. It has been classified as problematic. Affected is the function parseSend of the file js/parseMessage.js. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Upgrading to version 0.1 is able to address this issue. The name of the patch is 57505527f838d1e46e8f93d567ba552a30185bfa. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-257784.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/AwesomestCode/LiveBot/commit/57505527f838d1e46e8f93d567ba552a30185bfa; https://github.com/AwesomestCode/LiveBot/releases/tag/0.1; https://vuldb.com/?ctiid.257784
CVE: CVE-2021-33632
Published: 2024-03-25
Description: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/master/src/cmd/isulad/main.C.

This issue affects iSulad: 2.0.18-13, from 2.1.4-1 through 2.1.4-2.


CVSS Score: 7.0 (HIGH)
CWE: CWE-367
References: https://gitee.com/src-openeuler/iSulad/pulls/639; https://gitee.com/src-openeuler/iSulad/pulls/640; https://gitee.com/src-openeuler/iSulad/pulls/645
CVE: CVE-2024-24890
Published: 2024-03-25
Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler gala-gopher on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/gala-gopher/blob/master/src/probes/extends/ebpf.Probe/src/ioprobe/ioprobe.C.

This issue affects gala-gopher: through 1.0.2.


CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://gitee.com/src-openeuler/gala-gopher/pulls/81; https://gitee.com/src-openeuler/gala-gopher/pulls/82; https://gitee.com/src-openeuler/gala-gopher/pulls/85
CVE: CVE-2024-24892
Published: 2024-03-25
Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Improper Privilege Management vulnerability in openEuler migration-tools on Linux allows Command Injection, Restful Privilege Elevation. This vulnerability is associated with program files https://gitee.Com/openeuler/migration-tools/blob/master/index.Py.

This issue affects migration-tools: from 1.0.0 through 1.0.1.


CVSS Score: 8.1 (HIGH)
CWE: CWE-78, CWE-269
References: https://gitee.com/src-openeuler/migration-tools/pulls/12; https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1275; https://gitee.com/src-openeuler/migration-tools/pulls/12
CVE: CVE-2024-24897
Published: 2024-03-25
Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in openEuler A-Tune-Collector on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/A-Tune-Collector/blob/master/atune_collector/plugin/monitor/process/sched.Py.

This issue affects A-Tune-Collector: from 1.1.0-3 through 1.3.0.


CVSS Score: 8.1 (HIGH)
CWE: CWE-77
References: https://gitee.com/src-openeuler/A-Tune-Collector/pulls/45; https://gitee.com/src-openeuler/A-Tune-Collector/pulls/47; https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1271
CVE: CVE-2024-24899
Published: 2024-03-25
Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-zeus on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/aops-zeus/blob/master/zeus/conf/constant.Py.

This issue affects aops-zeus: from 1.2.0 through 1.4.0.


CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://gitee.com/src-openeuler/aops-zeus/pulls/107; https://gitee.com/src-openeuler/aops-zeus/pulls/108; https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1291
CVE: CVE-2024-29216
Published: 2024-03-25
Description: Exposed IOCTL with insufficient access control issue exists in cg6kwin2k.sys prior to 2.1.7.0. By sending a specific IOCTL request, a user without the administrator privilege may perform I/O to arbitrary hardware port or physical address, resulting in erasing or altering the firmware.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-522
References: https://jvn.jp/en/vu/JVNVU90671953/; https://sangomakb.atlassian.net/wiki/spaces/DVC/pages/45351279/Natural+Access+Software+Download; https://jvn.jp/en/vu/JVNVU90671953/
CVE: CVE-2024-2862
Published: 2024-03-25
Description: 
This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant.


CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287, CWE-640
References: https://lgsecurity.lge.com/bulletins/idproducts#updateDetails; https://lgsecurity.lge.com/bulletins/idproducts#updateDetails
CVE: CVE-2024-2863
Published: 2024-03-25
Description: This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-35, CWE-22
References: https://lgsecurity.lge.com/bulletins/idproducts#updateDetails; https://lgsecurity.lge.com/bulletins/idproducts#updateDetails
CVE: CVE-2024-30187
Published: 2024-03-25
Description: Anope before 2.0.15 does not prevent resetting the password of a suspended account.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-281
References: https://github.com/anope/anope/commit/2b7872139c40ea5b0ca96c1d6595b7d5f9fa60a5; https://github.com/anope/anope/issues/351; https://github.com/anope/anope/commit/2b7872139c40ea5b0ca96c1d6595b7d5f9fa60a5
CVE: CVE-2021-47137
Published: 2024-03-25
Description: In the Linux kernel, the following vulnerability has been resolved:

net: lantiq: fix memory corruption in RX ring

In a situation where memory allocation or dma mapping fails, an
invalid address is programmed into the descriptor. This can lead
to memory corruption. If the memory allocation fails, DMA should
reuse the previous skb and mapping and drop the packet. This patch
also increments rx drop counter.
CVSS Score: 7.8 (HIGH)
CWE: CWE-770
References: https://git.kernel.org/stable/c/46dd4abced3cb2c912916f4a5353e0927db0c4a2; https://git.kernel.org/stable/c/5ac72351655f8b033a2935646f53b7465c903418; https://git.kernel.org/stable/c/8bb1077448d43a871ed667520763e3b9f9b7975d
CVE: CVE-2021-47138
Published: 2024-03-25
Description: In the Linux kernel, the following vulnerability has been resolved:

cxgb4: avoid accessing registers when clearing filters

Hardware register having the server TID base can contain
invalid values when adapter is in bad state (for example,
due to AER fatal error). Reading these invalid values in the
register can lead to out-of-bound memory access. So, fix
by using the saved server TID base when clearing filters.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787
References: https://git.kernel.org/stable/c/02f03883fdb10ad7e66717c70ea163a8d27ae6e7; https://git.kernel.org/stable/c/0bf49b3c8d8b3a43ce09f1b2db70e5484d31fcdf; https://git.kernel.org/stable/c/285207a558ab456aa7d8aa877ecc7e91fcc51710
CVE: CVE-2021-47140
Published: 2024-03-25
Description: In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Clear DMA ops when switching domain

Since commit 08a27c1c3ecf ("iommu: Add support to change default domain
of an iommu group") a user can switch a device between IOMMU and direct
DMA through sysfs. This doesn't work for AMD IOMMU at the moment because
dev->dma_ops is not cleared when switching from a DMA to an identity
IOMMU domain. The DMA layer thus attempts to use the dma-iommu ops on an
identity domain, causing an oops:

  # echo 0000:00:05.0 > /sys/sys/bus/pci/drivers/e1000e/unbind
  # echo identity > /sys/bus/pci/devices/0000:00:05.0/iommu_group/type
  # echo 0000:00:05.0 > /sys/sys/bus/pci/drivers/e1000e/bind
   ...
  BUG: kernel NULL pointer dereference, address: [PII_REDACTED]
   ...
   Call Trace:
    iommu_dma_alloc
    e1000e_setup_tx_resources
    e1000e_open

Since iommu_change_dev_def_domain() calls probe_finalize() again, clear
the dma_ops there like Vt-d does.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/d6177a6556f853785867e2ec6d5b7f4906f0d809; https://git.kernel.org/stable/c/f3f2cf46291a693eab21adb94171b0128c2a9ec1; https://git.kernel.org/stable/c/d6177a6556f853785867e2ec6d5b7f4906f0d809
CVE: CVE-2021-47141
Published: 2024-03-25
Description: In the Linux kernel, the following vulnerability has been resolved:

gve: Add NULL pointer checks when freeing irqs.

When freeing notification blocks, we index priv->msix_vectors.
If we failed to allocate priv->msix_vectors (see abort_with_msix_vectors)
this could lead to a NULL pointer dereference if the driver is unloaded.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/5218e919c8d06279884aa0baf76778a6817d5b93; https://git.kernel.org/stable/c/5278c75266c5094d3c0958793bf12fc90300e580; https://git.kernel.org/stable/c/821149ee88c206fa37e79c1868cc[PII_REDACTED]76
CVE: CVE-2021-47142
Published: 2024-03-25
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix a use-after-free

looks like we forget to set ttm->sg to NULL.
Hit panic below

[ 1235.844104] general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b7b4b: 0000 [#1] SMP DEBUG_PAGEALLOC NOPTI
[ 1235.989074] Call Trace:
[ 1235.991751]  sg_free_table+0x17/0x20
[ 1235.995667]  amdgpu_ttm_backend_unbind.cold+0x4d/0xf7 [amdgpu]
[ 1236.002288]  amdgpu_ttm_backend_destroy+0x29/0x130 [amdgpu]
[ 1236.008464]  ttm_tt_destroy+0x1e/0x30 [ttm]
[ 1236.013066]  ttm_bo_cleanup_memtype_use+0x51/0xa0 [ttm]
[ 1236.018783]  ttm_bo_release+0x262/0xa50 [ttm]
[ 1236.023547]  ttm_bo_put+0x82/0xd0 [ttm]
[ 1236.027766]  amdgpu_bo_unref+0x26/0x50 [amdgpu]
[ 1236.032809]  amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu+0x7aa/0xd90 [amdgpu]
[ 1236.040400]  kfd_ioctl_alloc_memory_of_gpu+0xe2/0x330 [amdgpu]
[ 1236.046912]  kfd_ioctl+0x463/0x690 [amdgpu]
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://git.kernel.org/stable/c/0707c3fea8102d211631ba515ef[PII_REDACTED]b0d; https://git.kernel.org/stable/c/1e5c37385097c35911b0f8a0c67ffd10ee1af9a2; https://git.kernel.org/stable/c/3293cf3513d69f00c14d43e2020826d45ea0e46a
CVE: CVE-2021-47143
Published: 2024-03-25
Description: In the Linux kernel, the following vulnerability has been resolved:

net/smc: remove device from smcd_dev_list after failed device_add()

If the device_add() for a smcd_dev fails, there's no cleanup step that
rolls back the earlier list_add(). The device subsequently gets freed,
and we end up with a corrupted list.

Add some error handling that removes the device from the list.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-459
References: https://git.kernel.org/stable/c/40588782f1016c655ae1d302892f61d35af96842; https://git.kernel.org/stable/c/444d7be9532dcfda8e0385226c862fd7e986f607; https://git.kernel.org/stable/c/8b2cdc004d21a7255f219706dca64411108f7897
CVE: CVE-2021-47144
Published: 2024-03-25
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2021-47145
Published: 2024-03-25
Description: In the Linux kernel, the following vulnerability has been resolved:

btrfs: do not BUG_ON in link_to_fixup_dir

While doing error injection testing I got the following panic

  kernel BUG at fs/btrfs/tree-log.c:1862!
  invalid opcode: 0000 [#1] SMP NOPTI
  CPU: 1 PID: 7836 Comm: mount Not tainted 5.13.0-rc1+ #305
  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.13.0-2.fc32 04/01/2014
  RIP: 0010:link_to_fixup_dir+0xd5/0xe0
  RSP: 0018:ffffb5800180fa30 EFLAGS: 00010216
  RAX: fffffffffffffffb RBX: 00000000fffffffb RCX: ffff8f595287faf0
  RDX: ffffb5800180fa37 RSI: ffff8f[PII_REDACTED] RDI: [PII_REDACTED]
  RBP: ffff8f5953af9450 R08: [PII_REDACTED] R09: [PII_REDACTED]
  R10: 000151f408682970 R11: [PII_REDACTED] R12: ffff8f[PII_REDACTED]
  R13: ffff8f595287faf0 R14: ffff8f5953c77dd0 R15: [PII_REDACTED]
  FS:  00007fc5284c8c40(0000) GS:ffff8f59bbd00000(0000) knlGS:[PII_REDACTED]
  CS:  0010 DS: 0000 ES: 0000 CR0: [PII_REDACTED]
  CR2: 00007fc5287f47c0 CR3:[PII_REDACTED]75e002 CR4:[PII_REDACTED]370ee0
  Call Trace:
   replay_one_buffer+0x409/0x470
   ? btree_read_extent_buffer_pages+0xd0/0x110
   walk_up_log_tree+0x157/0x1e0
   walk_log_tree+0xa6/0x1d0
   btrfs_recover_log_trees+0x1da/0x360
   ? replay_one_extent+0x7b0/0x7b0
   open_ctree+0x1486/0x1720
   btrfs_mount_root.cold+0x12/0xea
   ? __kmalloc_track_caller+0x12f/0x240
   legacy_get_tree+0x24/0x40
   vfs_get_tree+0x22/0xb0
   vfs_kern_mount.part.0+0x71/0xb0
   btrfs_mount+0x10d/0x380
   ? vfs_parse_fs_string+0x4d/0x90
   legacy_get_tree+0x24/0x40
   vfs_get_tree+0x22/0xb0
   path_mount+0x433/0xa10
   __x64_sys_mount+0xe3/0x120
   do_syscall_64+0x3d/0x80
   entry_SYSCALL_64_after_hwframe+0x44/0xae

We can get -EIO or any number of legitimate errors from
btrfs_search_slot(), panicing here is not the appropriate response.  The
error path for this code handles errors properly, simply return the
error.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/0eaf383c6a4a83c09f60fd07a1bea9f1a9181611; https://git.kernel.org/stable/c/0ed102453aa1cd12fefde8f6b60b9519b0b1f003; https://git.kernel.org/stable/c/6eccfb28f8dca70c9b1b3bb3194ca54cbe73a9fa
CVE: CVE-2021-47147
Published: 2024-03-25
Description: In the Linux kernel, the following vulnerability has been resolved:

ptp: ocp: Fix a resource leak in an error handling path

If an error occurs after a successful 'pci_ioremap_bar()' call, it must be
undone by a corresponding 'pci_iounmap()' call, as already done in the
remove function.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/0e38e702f1152479e6afac34f151dbfd99417f99; https://git.kernel.org/stable/c/9c1bb37f8cad5e2ee1933fa1da9a6baa7876a8e4; https://git.kernel.org/stable/c/0e38e702f1152479e6afac34f151dbfd99417f99
CVE: CVE-2021-47148
Published: 2024-03-25
Description: In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: fix a buffer overflow in otx2_set_rxfh_context()

This function is called from ethtool_set_rxfh() and "*rss_context"
comes from the user.  Add some bounds checking to prevent memory
corruption.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://git.kernel.org/stable/c/389146bc6d2bbb20714d06624b74856320ce40f7; https://git.kernel.org/stable/c/e5cc361e21648b75f935f9571d4003aaee480214; https://git.kernel.org/stable/c/389146bc6d2bbb20714d06624b74856320ce40f7