deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-20931
Published: 2025-03-06
Description: Out-of-bounds write in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to execute arbitrary code.
CVSS Score: 7.3 (HIGH)
CWE: CWE-787
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=03
CVE: CVE-2025-20932
Published: 2025-03-06
Description: Out-of-bounds read in parsing rle of bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to혻read out-of-bounds memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=03
CVE: CVE-2025-20933
Published: 2025-03-06
Description: Out-of-bounds read in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to read out-of-bounds memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=03
CVE: CVE-2025-22623
Published: 2025-03-06
Description: Ad Inserter - Ad Manager and AdSense Ads 2.8.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/dst/dst.php.
CWE: CWE-79
References: https://fluidattacks.com/advisories/skims-8/; https://wordpress.org/plugins/ad-inserter/#developers
CVE: CVE-2024-13868
Published: 2025-03-06
Description: The URL Shortener | Conversion Tracking  | AB Testing  | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0bff1645-dd53-4416-a90f-7cf4a6b33c1a/
CVE: CVE-2024-13897
Published: 2025-03-06
Description: The Moving Media Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the generate_json_page function in all versions up to, and including, 1.22. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/browser/moving-media-library/trunk/lib/class-movingmedialibraryadmin.php#L166; https://plugins.trac.wordpress.org/changeset/3244709/moving-media-library/trunk/lib/class-movingmedialibraryadmin.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/815ce00b-3753-4c38-8a30-5242a5841734?source=cve
CVE: CVE-2025-1540
Published: 2025-03-06
Description: An issue has been discovered in GitLab CE/EE for Self-Managed and Dedicated instances affecting all versions from 17.5 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2. It was possible for a user added as an External to read and clone internal projects under certain circumstances."
CVSS Score: 3.1 (LOW)
CWE: CWE-863
References: https://about.gitlab.com/releases/2025/02/12/patch-release-gitlab-17-8-2-released/#saml-authentication-misconfigures-external-user-attribute; https://gitlab.com/gitlab-org/gitlab/-/issues/512765
CVE: CVE-2024-13902
Published: 2025-03-06
Description: A vulnerability, which was classified as problematic, was found in huang-yk student-manage 1.0. This affects an unknown part of the component Edit a Student Information Page. The manipulation of the argument Class leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://gitee.com/huang-yk/student-manage/issues/I9UXC4; https://vuldb.com/?ctiid.298785; https://vuldb.com/?id.298785
CVE: CVE-2025-1672
Published: 2025-03-06
Description: The Notibar – Notification Bar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3246799/; https://wordpress.org/plugins/notibar/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/9985627d-9ba4-4a5b-94fb-06bcc769acfd?source=cve
CVE: CVE-2024-56202
Published: 2025-03-06
Description: Expected Behavior Violation vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3.

Users are recommended to upgrade to versions 9.2.9 or 10.0.4 or newer, which fixes the issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-440
References: https://lists.apache.org/thread/btofzws2yqskk2n7f01r3l1819x01023
CVE: CVE-2024-38311
Published: 2025-03-06
Description: Improper Input Validation vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3.

Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20
References: https://lists.apache.org/thread/btofzws2yqskk2n7f01r3l1819x01023
CVE: CVE-2024-56195
Published: 2025-03-06
Description: Improper Access Control vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 9.2.0 through 9.2.8, from 10.0.0 through 10.0.3.

Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284
References: https://lists.apache.org/thread/btofzws2yqskk2n7f01r3l1819x01023
CVE: CVE-2024-56196
Published: 2025-03-06
Description: Improper Access Control vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 10.0.0 through 10.0.3.

Users are recommended to upgrade to version 10.0.4, which fixes the issue.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284
References: https://lists.apache.org/thread/btofzws2yqskk2n7f01r3l1819x01023
CVE: CVE-2024-7872
Published: 2025-03-06
Description: Insertion of Sensitive Information Into Sent Data vulnerability in ExtremePACS Extreme XDS allows Retrieve Embedded Sensitive Data.This issue affects Extreme XDS: before 3933.
CVSS Score: 7.6 (HIGH)
CWE: CWE-201
References: https://www.usom.gov.tr/bildirim/tr-25-0057
CVE: CVE-2025-1383
Published: 2025-03-06
Description: The Podlove Podcast Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.2. This is due to missing or incorrect nonce validation on the ajax_transcript_delete() function. This makes it possible for unauthenticated attackers to delete arbitrary episode transcripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/podlove-podcasting-plugin-for-wordpress/tags/4.2.0/lib/modules/transcripts/transcripts.php#L223; https://plugins.trac.wordpress.org/changeset/3246867/; https://wordpress.org/plugins/podlove-podcasting-plugin-for-wordpress/#developers
CVE: CVE-2025-1666
Published: 2025-03-06
Description: The Cookie banner plugin for WordPress – Cookiebot CMP by Usercentrics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the send_uninstall_survey() function in all versions up to, and including, 4.4.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to submit the uninstall survey on behalf of a website.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/cookiebot/tags/4.4.1/src/lib/Cookiebot_Review.php#L135; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3251089%40cookiebot&new=3251089%40cookiebot&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/d2e5fca6-363c-4875-9eb8-44e080d99650?source=cve
CVE: CVE-2025-1696
Published: 2025-03-06
Description: A vulnerability exists in Docker Desktop prior to version 4.39.0 that could lead to the unintentional disclosure of sensitive information via application logs. In affected versions, proxy configuration data—potentially including sensitive details—was written to log files in clear text whenever an HTTP GET request was made through a proxy. An attacker with read access to these logs could obtain the proxy information and leverage it for further attacks or unauthorized access. Starting with version 4.39.0, Docker Desktop no longer logs the proxy string, thereby mitigating this risk.
CWE: CWE-532
References: https://docs.docker.com/desktop/settings-and-maintenance/settings/#proxies; https://docs.docker.com/desktop/troubleshoot-and-support/troubleshoot/#check-the-logs
CVE: CVE-2025-2045
Published: 2025-03-06
Description: Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1  allow users with limited permissions to access to potentially sensitive project analytics data.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://gitlab.com/gitlab-org/gitlab/-/issues/512050; https://hackerone.com/reports/2921111
CVE: CVE-2024-12144
Published: 2025-03-06
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Finder Fire Safety Finder ERP/CRM (Old System) allows SQL Injection.This issue affects Finder ERP/CRM (Old System): before 18.12.2024.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-25-0060
CVE: CVE-2024-13892
Published: 2025-03-06
Description: Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to command injection. 
During the initialization process, a user has to use a mobile app to provide devices with Access Point credentials. This input is not properly sanitized, what allows for command injection.
The vendor has not replied to reports, so the patching status remains unknown. Newer firmware versions might be vulnerable as well.
CWE: CWE-78
References: https://cert.pl/en/posts/2025/03/CVE-2024-13892/; https://www.smartwares.eu/en-gb/smartwares-cip-37210at-indoor-wi-fi-camera-cip--37210at
CVE: CVE-2024-13893
Published: 2025-03-06
Description: Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, might share same credentials for telnet service. Hash of the password can be retrieved through physical access to SPI connected memory.
For the telnet service to be enabled, the inserted SD card needs to have a folder with a specific name created. 
Two products were tested, but since the vendor has not replied to reports, patching status remains unknown, as well as groups of devices and firmware ranges in which the same password is shared.
 Newer firmware versions might be vulnerable as well.
CWE: CWE-1392
References: https://cert.pl/en/posts/2025/03/CVE-2024-13892/; https://www.smartwares.eu/en-gb/smartwares-cip-37210at-indoor-wi-fi-camera-cip--37210at
CVE: CVE-2024-13894
Published: 2025-03-06
Description: Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to path traversal. 
When an affected device is connected to a mobile app, it opens a port 10000 enabling a user to download pictures shot at specific moments by providing paths to the files. However, the directories to which a user has access are not limited, allowing for path traversal attacks and downloading sensitive information.
The vendor has not replied to reports, so the patching status remains unknown. Newer firmware versions might be vulnerable as well.
CWE: CWE-22
References: https://cert.pl/en/posts/2025/03/CVE-2024-13892/; https://www.smartwares.eu/en-gb/smartwares-cip-37210at-indoor-wi-fi-camera-cip--37210at
CVE: CVE-2025-0877
Published: 2025-03-06
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AtaksAPP Reservation Management System allows Cross-Site Scripting (XSS).This issue affects Reservation Management System: before 4.2.3.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-25-0059
CVE: CVE-2024-12146
Published: 2025-03-06
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Finder Fire Safety Finder ERP/CRM (New System) allows SQL Injection.This issue affects Finder ERP/CRM (New System): before 18.12.2024.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-25-0060
CVE: CVE-2024-42844
Published: 2025-03-06
Description: A SQL Injection vulnerability has been identified in EPICOR Prophet 21 (P21) up to 23.2.5232. This vulnerability allows authenticated remote attackers to execute arbitrary SQL commands through unsanitized user input fields to obtain unauthorized information
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://gist.github.com/getHecked/dc4ae46526d181d3deb17092815b9bec
CVE: CVE-2025-25450
Published: 2025-03-06
Description: An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to escalate privileges via the deactivation of the activated second factor to the /session endpoint
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-287
References: https://piuswalter.de/blog/2fa-bypass-and-deactivation-attack-in-mytaag/
CVE: CVE-2025-25451
Published: 2025-03-06
Description: An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a physically proximate attacker to escalate privileges via the "2fa_authorized" Local Storage key
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-287
References: https://piuswalter.de/blog/2fa-bypass-and-deactivation-attack-in-mytaag/
CVE: CVE-2025-25452
Published: 2025-03-06
Description: An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to escalate privileges via the "/user" endpoint
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-287
References: https://piuswalter.de/blog/2fa-bypass-and-deactivation-attack-in-mytaag/
CVE: CVE-2025-2029
Published: 2025-03-06
Description: A vulnerability was found in MicroDicom DICOM Viewer 2025.1 Build 3321. It has been classified as critical. Affected is an unknown function of the file mDicom.exe. The manipulation leads to memory corruption. The attack needs to be approached locally. It is recommended to upgrade the affected component. The vendor quickly confirmed the existence of the vulnerability and fixed it in the latest beta.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119
References: https://vuldb.com/?ctiid.298770; https://vuldb.com/?id.298770; https://vuldb.com/?submit.506579
CVE: CVE-2025-2030
Published: 2025-03-06
Description: A vulnerability was found in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform up to 20250224. It has been rated as critical. Affected by this issue is some unknown functionality of the file /security/addUser.jsp. The manipulation of the argument groupId leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/CloudRoam7/CVE/blob/main/CVE_1.md; https://vuldb.com/?ctiid.298772; https://vuldb.com/?id.298772
CVE: CVE-2024-58051
Published: 2025-03-06
Description: In the Linux kernel, the following vulnerability has been resolved:

ipmi: ipmb: Add check devm_kasprintf() returned value

devm_kasprintf() can return a NULL pointer on failure but this
returned value is not checked.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/1a8a17c5ce9cb5a82797602bff9819ac732d2ff5; https://git.kernel.org/stable/c/2378bd0b264ad3a1f76bd957caf33ee0c7945351; https://git.kernel.org/stable/c/312a6445036d692bc5665307eeafa4508c33c4b5
CVE: CVE-2024-58052
Published: 2025-03-06
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table

The function atomctrl_get_smc_sclk_range_table() does not check the return
value of smu_atom_get_data_table(). If smu_atom_get_data_table() fails to
retrieve SMU_Info table, it returns NULL which is later dereferenced.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

In practice this should never happen as this code only gets called
on polaris chips and the vbios data table will always be present on
those chips.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://git.kernel.org/stable/c/0b97cd8a61b2b40fd73cf92a4bb2256462d22adb; https://git.kernel.org/stable/c/2396bc91935c6da0588ce07850d07897974bd350; https://git.kernel.org/stable/c/357445e28ff004d7f10967aa93ddb4bffa5c3688
CVE: CVE-2024-58053
Published: 2025-03-06
Description: In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix handling of received connection abort

Fix the handling of a connection abort that we've received.  Though the
abort is at the connection level, it needs propagating to the calls on that
connection.  Whilst the propagation bit is performed, the calls aren't then
woken up to go and process their termination, and as no further input is
forthcoming, they just hang.

Also add some tracing for the logging of connection aborts.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/0e56ebde245e4799ce74d38419426f2a80d39950; https://git.kernel.org/stable/c/5842ce7b120c65624052a8da04460d35b26caac0; https://git.kernel.org/stable/c/96d1d927c4d03ee9dcee7640bca70b74e63504fc
CVE: CVE-2024-58055
Published: 2025-03-06
Description: In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: f_tcm: Don't free command immediately

Don't prematurely free the command. Wait for the status completion of
the sense status. It can be freed then. Otherwise we will double-free
the command.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415, CWE-415
References: https://git.kernel.org/stable/c/16907219ad6763f401700e1b57b2da4f3e07f047; https://git.kernel.org/stable/c/38229c35a6d7875697dfb[PII_REDACTED]30cfcd23e; https://git.kernel.org/stable/c/7cb72dc08ed8da60fd6d1f6adf13bf0e6ee0f694
CVE: CVE-2024-58056
Published: 2025-03-06
Description: In the Linux kernel, the following vulnerability has been resolved:

remoteproc: core: Fix ida_free call while not allocated

In the rproc_alloc() function, on error, put_device(&rproc->dev) is
called, leading to the call of the rproc_type_release() function.
An error can occurs before ida_alloc is called.

In such case in rproc_type_release(), the condition (rproc->index >= 0) is
true as rproc->index has been  initialized to 0.
ida_free() is called reporting a warning:
[    4.181906] WARNING: CPU: 1 PID: 24 at lib/idr.c:525 ida_free+0x100/0x164
[    4.186378] stm32-display-dsi 5a000000.dsi: Fixed dependency cycle(s) with /soc/dsi@5a000000/panel@0
[    4.188854] ida_free called for id=0 which is not allocated.
[    4.198256] mipi-dsi 5a000000.dsi.0: Fixed dependency cycle(s) with /soc/dsi@5a000000
[    4.203556] Modules linked in: panel_orisetech_otm8009a dw_mipi_dsi_stm(+) gpu_sched dw_mipi_dsi stm32_rproc stm32_crc32 stm32_ipcc(+) optee(+)
[    4.224307] CPU: 1 UID: 0 PID: 24 Comm: kworker/u10:0 Not tainted 6.12.0 #442
[    4.231481] Hardware name: STM32 (Device Tree Support)
[    4.236627] Workqueue: events_unbound deferred_probe_work_func
[    4.242504] Call trace:
[    4.242522]  unwind_backtrace from show_stack+0x10/0x14
[    4.250218]  show_stack from dump_stack_lvl+0x50/0x64
[    4.255274]  dump_stack_lvl from __warn+0x80/0x12c
[    4.260134]  __warn from warn_slowpath_fmt+0x114/0x188
[    4.265199]  warn_slowpath_fmt from ida_free+0x100/0x164
[    4.270565]  ida_free from rproc_type_release+0x38/0x60
[    4.275832]  rproc_type_release from device_release+0x30/0xa0
[    4.281601]  device_release from kobject_put+0xc4/0x294
[    4.286762]  kobject_put from rproc_alloc.part.0+0x208/0x28c
[    4.292430]  rproc_alloc.part.0 from devm_rproc_alloc+0x80/0xc4
[    4.298393]  devm_rproc_alloc from stm32_rproc_probe+0xd0/0x844 [stm32_rproc]
[    4.305575]  stm32_rproc_probe [stm32_rproc] from platform_probe+0x5c/0xbc

Calling ida_alloc earlier in rproc_alloc ensures that the rproc->index is
properly set.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/2cf54928e7e32362215c69b68a6a53d110323bf3; https://git.kernel.org/stable/c/7378aeb664e5ebc396950b36a1f2dedf5aabec20; https://git.kernel.org/stable/c/b32d60a852bb[PII_REDACTED]d0c3b1c9a88c3ceb7c
CVE: CVE-2024-58057
Published: 2025-03-06
Description: In the Linux kernel, the following vulnerability has been resolved:

idpf: convert workqueues to unbound

When a workqueue is created with `WQ_UNBOUND`, its work items are
served by special worker-pools, whose host workers are not bound to
any specific CPU. In the default configuration (i.e. when
`queue_delayed_work` and friends do not specify which CPU to run the
work item on), `WQ_UNBOUND` allows the work item to be executed on any
CPU in the same node of the CPU it was enqueued on. While this
solution potentially sacrifices locality, it avoids contention with
other processes that might dominate the CPU time of the processor the
work item was scheduled on.

This is not just a theoretical problem: in a particular scenario
misconfigured process was hogging most of the time from CPU0, leaving
less than 0.5% of its CPU time to the kworker. The IDPF workqueues
that were using the kworker on CPU0 suffered large completion delays
as a result, causing performance degradation, timeouts and eventual
system crash.


* I have also run a manual test to gauge the performance
  improvement. The test consists of an antagonist process
  (`./stress --cpu 2`) consuming as much of CPU 0 as possible. This
  process is run under `taskset 01` to bind it to CPU0, and its
  priority is changed with `chrt -pQ 9900 10000 ${pid}` and
  `renice -n -20 ${pid}` after start.

  Then, the IDPF driver is forced to prefer CPU0 by editing all calls
  to `queue_delayed_work`, `mod_delayed_work`, etc... to use CPU 0.

  Finally, `ktraces` for the workqueue events are collected.

  Without the current patch, the antagonist process can force
  arbitrary delays between `workqueue_queue_work` and
  `workqueue_execute_start`, that in my tests were as high as
  `30ms`. With the current patch applied, the workqueue can be
  migrated to another unloaded CPU in the same node, and, keeping
  everything else equal, the maximum delay I could see was `6us`.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/66bf9b3d9e[PII_REDACTED]f075320dc8e7cd6f8d09; https://git.kernel.org/stable/c/868202ec3854e13de1164e4a3e25521194c5af72; https://git.kernel.org/stable/c/9a5b021cb8186f1854bac2812bd4f396bb1e881c
CVE: CVE-2024-58058
Published: 2025-03-06
Description: In the Linux kernel, the following vulnerability has been resolved:

ubifs: skip dumping tnc tree when zroot is null

Clearing slab cache will free all znode in memory and make
c->zroot.znode = NULL, then dumping tnc tree will access
c->zroot.znode which cause null pointer dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://git.kernel.org/stable/c/1787cd67bb94b106555ffe64f887f6aa24b47010; https://git.kernel.org/stable/c/2a987950df825d0144370e700dc5fb337684ffba; https://git.kernel.org/stable/c/40e25a3c[PII_REDACTED]717877bb2a814c081509ff